From 7c4c118456a3113456e87c666c16a874310258fd Mon Sep 17 00:00:00 2001 From: _Kerman Date: Wed, 12 Aug 2026 22:54:27 +0800 Subject: [PATCH 01/41] fix(web): reclaim overlay scrollbar gutter --- ...-composer-tab-gutter-reservation.i18n.yaml | 4 +- ...6-08-04-composer-tab-gutter-reservation.md | 2 + ...8-04-composer-tab-gutter-reservation.zh.md | 2 + ...-overlay-seat-width-compensation.i18n.yaml | 6 ++ ...omposer-overlay-seat-width-compensation.md | 36 +++++++++ ...oser-overlay-seat-width-compensation.zh.md | 36 +++++++++ apps/web/tests/composer-tab-geometry.e2e.ts | 76 ++++++++++--------- .../geometry.expected.md | 14 ++-- .../skeleton/ConversationRoot.module.css | 21 +++-- .../client/ui-theme/src/styles/scrollbar.css | 5 ++ 10 files changed, 153 insertions(+), 49 deletions(-) create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml index 8a9b6236ae..0082a6f991 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md -2026-08-04-composer-tab-gutter-reservation.md: 3b28c35c1f11676e41cabde76d1b0d16c688f034 -2026-08-04-composer-tab-gutter-reservation.zh.md: c357dd06c52a834c18d2e8a25246d4ad003db548 +2026-08-04-composer-tab-gutter-reservation.md: 2c2813371af073eee4bd80ce7813e77af3c0c319 +2026-08-04-composer-tab-gutter-reservation.zh.md: e450def2482218028875a48fce8842c88b5ba82e diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md index 3b28c35c1f..2c2813371a 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md @@ -2,6 +2,8 @@ Status: implemented +> Superseded for overlay views by [the seat-width compensation](2026-08-12-composer-overlay-seat-width-compensation.md): the overlay branch no longer reserves a gutter, and the seat compensates for the bar instead. Chat keeps the reservation described here. + English | [中文](2026-08-04-composer-tab-gutter-reservation.zh.md) ## Problem diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md index c357dd06c5..e450def248 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md @@ -2,6 +2,8 @@ Status: implemented +> 对覆盖视图已被 [座位宽度补偿](2026-08-12-composer-overlay-seat-width-compensation.md) 取代：覆盖分支不再预留滚动条槽，座位改为补偿滚动条宽度。Chat 仍保留本文所述的预留。 + [English](2026-08-04-composer-tab-gutter-reservation.md) | 中文 ## 问题 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml new file mode 100644 index 0000000000..fd88ecbc93 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md +2026-08-12-composer-overlay-seat-width-compensation.md: 85281ed4301046672ff4c02320b196a397e6d163 +2026-08-12-composer-overlay-seat-width-compensation.zh.md: 7bcf060e651a828068ef207caaebd01fa2ffd7ae diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md new file mode 100644 index 0000000000..85281ed430 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md @@ -0,0 +1,36 @@ +# Agent Note: The overlay composer seat compensates for the bar instead of reserving a gutter + +Status: implemented + +English | [中文](2026-08-12-composer-overlay-seat-width-compensation.zh.md) + +## Problem + +The [composer-tab gutter reservation](2026-08-04-composer-tab-gutter-reservation.md) made the column's scroller reserve a scrollbar gutter unconditionally, so the composer seat measured the same width in Chat and in a view with a composer overlay. The cost was paid by every overlay view: the view's content column ended 8px short of the column's right edge, because the scroller reserved a gutter for a bar it never draws — the trajectory ledger owns its own scrollers and the outer box never scrolls. + +The trajectory table made that cost visible: its full-width row divider lines stopped 8px short of the pane edge, leaving a strip of whitespace at the right of every line and of the whole content column. + +## Decision + +The reservation now belongs to Chat alone. The overlay branch declares `scrollbar-gutter: auto`, so the view's content spans the full column; the overlay composer seat (absolutely positioned against the padding box) gives back the bar's width with `right: var(--dsh-scrollbar-width)`, so the input card still measures the same width as Chat's seat and does not move between tabs. + +The compensation value is not a literal: ui-theme's scrollbar.css defines `--dsh-scrollbar-width` (8px on the WebKit path) beside the `::-webkit-scrollbar` rule it mirrors, and the seat reads that variable. A change to the sheet's bar width reaches the compensation in the same reviewable diff as the bar itself. + +## Alternatives considered + +**Keep the unconditional reservation and shrink every overlay view.** The pre-fix behavior. It keeps one declaration for both tabs but taxes every overlay view with an 8px content column, which the trajectory ledger surfaced as visible whitespace. Rejected because the overlay views own their scrolling; they should not pay for Chat's bar. + +**Reserve on the overlay branch too and let the view bleed into the gutter.** More moving parts for the same result: the gutter would still exist on a box that never scrolls, and the view would have to break out of the content box to reclaim its width. + +**Accept the 4px card shift.** Dropping the reservation without compensating the seat would move the input card on every tab switch, which is exactly the symptom the earlier note fixed. Rejected: the card position is a deliberate cross-tab invariant. + +## Consequences + +- Chat keeps its reserved gutter and its stable card position; nothing changes on that tab. +- Overlay views (trajectory) span the full column; the trajectory ledger's divider lines reach the pane edge. +- The input card still holds one horizontal position across the Chat and Trajectory tabs, now by two mechanisms instead of one: Chat reserves, the overlay seat compensates. +- `--dsh-scrollbar-width` becomes a public ui-theme variable read outside ui-theme; the scrollbar-styles spec's indirection checks only scan `--dsh-scrollbar-thumb{,-hover}` rebinds, so the width variable is not covered by the pair gate. + +## Testing + +`apps/web/tests/composer-tab-geometry.e2e.ts` still asserts the card holds its position across tabs and now also asserts the split: Chat's scroller keeps `scrollbar-gutter: stable` and a nonzero band, while the overlay branch resolves `auto` with a zero band. The control cascade changed with the mechanism: it now drops the seat's `right` compensation (instead of dropping a gutter Chat never had on that branch) and measures the same 4px shift, proving the equal rectangles are not a tab switch that never reached layout. The committed golden records both states. diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md new file mode 100644 index 0000000000..7bcf060e65 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md @@ -0,0 +1,36 @@ +# Agent Note: 覆盖视图的 composer 座位改为补偿滚动条宽度，不再预留滚动条槽 + +Status: implemented + +[English](2026-08-12-composer-overlay-seat-width-compensation.md) | 中文 + +## 问题 + +[composer 标签页滚动条槽预留](2026-08-04-composer-tab-gutter-reservation.md) 让会话列滚动容器无条件预留一条滚动条槽，使 composer 座位在 Chat 与带 composer 覆盖的视图中测得相同宽度。代价由每个覆盖视图承担：视图内容列比列右边缘窄 8px，因为滚动容器为一条它从不绘制的滚动条预留了槽——trajectory 台账由视图内部自己的滚动容器滚动，外层盒子从不滚动。 + +trajectory 表格让这个代价显形：整行分隔线在面板右边缘前 8px 处停止，每条线右侧以及整个内容列右侧都留下一条空白带。 + +## 决策 + +预留现在只属于 Chat。覆盖分支声明 `scrollbar-gutter: auto`，视图内容占满整列；覆盖分支的 composer 座位（相对 padding box 绝对定位）用 `right: var(--dsh-scrollbar-width)` 让出滚动条宽度，使输入卡仍与 Chat 座位测得相同宽度，切换标签页时不移动。 + +补偿值不是字面量：ui-theme 的 scrollbar.css 在它镜像的 `::-webkit-scrollbar` 规则旁定义 `--dsh-scrollbar-width`（WebKit 路径 8px），座位读取该变量。样式表滚动条宽度一变，补偿就会与滚动条本身出现在同一次可审阅的 diff 中。 + +## 备选方案 + +**保留无条件预留，压缩每个覆盖视图。** 修复前行为。两个标签页一条声明，但每个覆盖视图都要付出 8px 内容列，trajectory 台账将其显现为可见空白。已拒绝：覆盖视图自己滚动，不应为 Chat 的滚动条买单。 + +**覆盖分支也预留，并让视图渗入滚动条槽。** 同样结果下更多活动部件：从不滚动的盒子上仍存在滚动条槽，视图还得突破内容盒才能取回宽度。 + +**接受 4px 卡片位移。** 去掉预留却不补偿座位，会在每次切换标签页时移动输入卡——正是前一份 note 修复的症状。已拒绝：卡片位置是刻意保持的跨标签页不变量。 + +## 后果 + +- Chat 保留滚动条槽与稳定的卡片位置；该标签页无任何变化。 +- 覆盖视图（trajectory）占满整列；trajectory 台账的分隔线到达面板右边缘。 +- 输入卡在 Chat 与 Trajectory 标签页间仍保持同一水平位置，现在由两种机制而非一种达成：Chat 预留，覆盖座位补偿。 +- `--dsh-scrollbar-width` 成为 ui-theme 对外、且被 ui-theme 之外读取的变量；scrollbar-styles 规格的间接层检查只扫描 `--dsh-scrollbar-thumb{,-hover}` 重绑，宽度变量不受成对门禁覆盖。 + +## 测试 + +`apps/web/tests/composer-tab-geometry.e2e.ts` 仍断言输入卡在标签页间保持位置，并新增断言拆分：Chat 滚动容器保持 `scrollbar-gutter: stable` 与非零槽宽，覆盖分支解析为 `auto` 且槽宽为零。控制级联随机制改变：现在移除座位的 `right` 补偿（而非移除该分支上 Chat 从未有过的槽），测得同样的 4px 位移，证明相等的矩形并非从未到达布局的标签页切换。提交的 golden 记录两种状态。 diff --git a/apps/web/tests/composer-tab-geometry.e2e.ts b/apps/web/tests/composer-tab-geometry.e2e.ts index bb43e20406..b491b1257c 100644 --- a/apps/web/tests/composer-tab-geometry.e2e.ts +++ b/apps/web/tests/composer-tab-geometry.e2e.ts @@ -11,12 +11,13 @@ // gets an absolutely positioned seat instead, laid out against the padding box, // which the scrollbar never reduces. // -// Without a shared reservation the two tabs disagree by exactly the bar's -// width for as long as the transcript overflows: the card jumps sideways on -// every tab switch, and inside Chat alone at the moment a growing transcript -// starts to scroll. The column reserves the gutter unconditionally -// (`scrollbar-gutter: stable`) and states the overlay branch as a scroll -// container on the same axes, so both edges are the same edge. +// The column handles the two edges without reserving the gutter on both: Chat +// keeps `scrollbar-gutter: stable` so its seat's content box never jumps as the +// transcript starts to scroll; the overlay branch does NOT reserve (the view +// owns its own scrollers, so a reserved gutter would only narrow the view's +// content by the bar's width), and the overlay seat instead gives back the +// bar's width (`right: var(--dsh-scrollbar-width)`) so both seats measure the +// same width and the card does not move. // // Only a real engine can show this. The seat's geometry is layout: jsdom gives // every element a zero-sized box and reports no scrollbar at all, so a unit spec @@ -33,12 +34,11 @@ // configuration: ui-theme's scrollbar.css gives `::-webkit-scrollbar` a width, // and a bar that occupies layout space is what the product actually draws. // -// The scenario runs that unreserved cascade in the page — `scrollbar-gutter: auto` -// on the scroller, `overflow: hidden` on the overlay branch — and measures the -// same two tabs through it, which is what keeps the equal rectangles above from -// being explained by a tab switch that never reached the layout. It is the -// reported symptom as a number: the card moves 4px, half the 8px band, on each -// edge. +// The scenario runs that unreserved cascade in the page — the overlay seat's +// `right` compensation dropped to 0 — and measures the same two tabs through +// it, which is what keeps the equal rectangles above from being explained by a +// tab switch that never reached the layout. It is the reported symptom as a +// number: the card moves 4px, half the 8px band, on each edge. // // Zero model calls: a seeded cold session renders from its log, and switching // tabs asks the host for nothing. A stray stream would fail loud with NO_ADAPTER. @@ -62,9 +62,9 @@ const SNAPSHOT_DIR = fileURLToPath(new URL('./snapshots/composer-tab-geometry', * Absolute coordinates are deliberately absent: they depend on the sidebar's * laid-out width and on font metrics, so committing them would produce a fixture * that has to be re-recorded per platform. What is recorded is the distance - * between the two tabs' rectangles, which is zero when the reservation holds and + * between the two tabs' rectangles, which is zero when the compensation holds and * the bar's width when it does not — including under the control, so the golden - * carries the shift the unreserved cascade produces rather than only its absence. + * carries the shift the uncompensated cascade produces rather than only its absence. */ const GEOMETRY_EXPECTED = join(SNAPSHOT_DIR, 'geometry.expected.md') const MODE = webSnapshotMode() @@ -114,15 +114,15 @@ async function setMeasuredViewport( } /** - * The unreserved cascade, injected into the page: the reservation dropped and - * the overlay branch forced to a hidden box. `!important` beats the module + * The uncompensated cascade, injected into the page: the overlay seat's `right` + * compensation dropped to 0, so it measures the full padding box while Chat's + * seat still rides the reserved content box. `!important` beats the module * rules without a rebuild, and the id lets the control be lifted again in the * same session. */ const CONTROL_STYLE_ID = 'composer-tab-geometry-control' const CONTROL_CSS = ` -[data-conversation-scroll] { scrollbar-gutter: auto !important; } -[data-conversation-scroll]:has([data-conversation-composer-overlay]) { overflow: hidden !important; } +[data-conversation-scroll]:has([data-conversation-composer-overlay]) > [data-composer-seat] { right: 0 !important; } ` /** The column scroller and the input card as the browser lays them out, in one tab. */ @@ -221,9 +221,11 @@ async function compareTabs(page: Page): Promise { } /** - * Run the unreserved cascade in the page for one measurement, then lift it. + * Run the uncompensated cascade in the page for one measurement, then lift it: + * the overlay seat's `right` compensation dropped to 0, so it measures the + * full padding box while Chat's seat still rides the reserved content box. * @param page - the page under test. - * @returns the comparison as the column lays out without the reservation. + * @returns the comparison as the column lays out without the compensation. */ async function compareTabsWithoutReservation(page: Page): Promise { await page.evaluate(({ id, css }) => { @@ -268,7 +270,7 @@ async function openSeededSession(page: Page): Promise { * Render the golden body. * @param wide - comparison at the viewport where the card sits at its width cap. * @param narrow - comparison at the viewport where the card shrinks with the column. - * @param control - comparison at the wide viewport with the reservation removed. + * @param control - comparison at the wide viewport with the compensation removed. * @returns the golden body, without a trailing newline. */ function renderGeometry(wide: TabComparison, narrow: TabComparison, control: TabComparison): string { @@ -291,7 +293,7 @@ function renderGeometry(wide: TabComparison, narrow: TabComparison, control: Tab '', ...section(`Wide viewport (${String(WIDE_VIEWPORT.width)}px, card at its cap)`, wide), ...section(`Narrow viewport (${String(NARROW_VIEWPORT.width)}px, card shrinking with the column)`, narrow), - ...section('Wide viewport, reservation removed in the page (control)', control), + ...section('Wide viewport, seat compensation removed in the page (control)', control), ].join('\n').trimEnd() } @@ -322,22 +324,25 @@ describe('web e2e: input card position across view tabs', () => { await scaffold?.close() }) - it('reserves the same gutter in both tabs while the transcript scrolls', async () => { + it('reserves the gutter in Chat and lets Trajectory own its width', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-composer-tab-geometry-band')) await setMeasuredViewport(page, WIDE_VIEWPORT, false) // Vacuity guard, in two parts. A transcript that does not overflow gives // Chat no scrollbar, and a hidden or overlaid bar gives it no width; either - // would make the tabs agree without the reservation doing anything. + // would make the tabs agree without the compensation doing anything. await expect.poll(async () => (await measureTab(page)).scrolls, { timeout: 10_000 }).toBe(true) const comparison = await compareTabs(page) expect(comparison.chat.band).toBeGreaterThan(0) - // The reservation reaches both states, which is the whole point: the same - // band, on a box that scrolls and on one that only holds a view. + // Chat keeps the unconditional reservation so its seat's content box never + // jumps as the transcript starts to scroll. expect(comparison.chat.gutter).toBe('stable') - expect(comparison.trajectory.gutter).toBe('stable') - expect(comparison.trajectory.band).toBe(comparison.chat.band) + // The overlay branch does NOT reserve: the view owns its own scrollers, so + // a reserved gutter would only narrow the view's content by the bar's + // width. The seat compensates instead, which the next test asserts. + expect(comparison.trajectory.gutter).toBe('auto') + expect(comparison.trajectory.band).toBe(0) // Declared as a scroll container on both axes rather than left to compute: - // `overflow: hidden` would drop the reservation in WebKit, and a `visible` + // `overflow: hidden` would drop any reservation in WebKit, and a `visible` // horizontal axis computes to `auto` beside a scrolling one. expect(comparison.trajectory.overflowY).toBe('auto') expect(comparison.trajectory.overflowX).toBe('hidden') @@ -378,20 +383,21 @@ describe('web e2e: input card position across view tabs', () => { expect(tripwire.pageErrors).toEqual([]) }, 60_000) - it('moves the card again once the reservation is removed in the page', async () => { + it('moves the card again once the seat compensation is removed in the page', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-composer-tab-geometry-control')) await setMeasuredViewport(page, WIDE_VIEWPORT, false) // The control: without it, equal rectangles could also mean the tab switch - // never reached the layout. Under the unreserved cascade the Chat scroller - // keeps its bar and the Trajectory branch becomes a hidden box with none, - // and the card moves by half the band on each edge. + // never reached the layout. Under the unreserved cascade the overlay seat + // loses its `right` compensation and measures the full padding box, so the + // card moves by half the band on each edge. Chat's own reservation is + // untouched — that is the side that must not change. const comparison = await compareTabsWithoutReservation(page) - expect(comparison.chat.gutter).toBe('auto') + expect(comparison.chat.gutter).toBe('stable') expect(comparison.chat.band).toBeGreaterThan(0) expect(comparison.trajectory.band).toBe(0) expect(comparison.leftShift).toBe(comparison.chat.band / 2) expect(comparison.rightShift).toBe(comparison.chat.band / 2) - // Restoring the sheet restores the reservation, so the control cannot leak + // Restoring the sheet restores the compensation, so the control cannot leak // into the remaining measurements. const restored = await compareTabs(page) expect(restored.leftShift).toBe(0) diff --git a/apps/web/tests/snapshots/composer-tab-geometry/geometry.expected.md b/apps/web/tests/snapshots/composer-tab-geometry/geometry.expected.md index 9735019508..e95adaaa6f 100644 --- a/apps/web/tests/snapshots/composer-tab-geometry/geometry.expected.md +++ b/apps/web/tests/snapshots/composer-tab-geometry/geometry.expected.md @@ -5,9 +5,9 @@ - Chat: scrollbar-gutter stable, overflow hidden/auto - Chat scroller scrolls: true - Chat reserved band: 8px -- Trajectory: scrollbar-gutter stable, overflow hidden/auto +- Trajectory: scrollbar-gutter auto, overflow hidden/auto - Trajectory scroller scrolls: false -- Trajectory reserved band: 8px +- Trajectory reserved band: 0px - input card left edge moves between tabs: 0px - input card right edge moves between tabs: 0px - input card width changes between tabs: 0px @@ -17,19 +17,19 @@ - Chat: scrollbar-gutter stable, overflow hidden/auto - Chat scroller scrolls: true - Chat reserved band: 8px -- Trajectory: scrollbar-gutter stable, overflow hidden/auto +- Trajectory: scrollbar-gutter auto, overflow hidden/auto - Trajectory scroller scrolls: false -- Trajectory reserved band: 8px +- Trajectory reserved band: 0px - input card left edge moves between tabs: 0px - input card right edge moves between tabs: 0px - input card width changes between tabs: 0px -## Wide viewport, reservation removed in the page (control) +## Wide viewport, seat compensation removed in the page (control) -- Chat: scrollbar-gutter auto, overflow hidden/auto +- Chat: scrollbar-gutter stable, overflow hidden/auto - Chat scroller scrolls: true - Chat reserved band: 8px -- Trajectory: scrollbar-gutter auto, overflow hidden/hidden +- Trajectory: scrollbar-gutter auto, overflow hidden/auto - Trajectory scroller scrolls: false - Trajectory reserved band: 0px - input card left edge moves between tabs: 4px diff --git a/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css b/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css index 1b72470feb..c6618fc624 100644 --- a/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css +++ b/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css @@ -272,12 +272,17 @@ .scrollBody:has([data-conversation-composer-overlay]) { position: relative; /* A clipping box nothing scrolls out of, stated as a scroll container on both - axes rather than `overflow: hidden`: WebKit honours the reservation above - only in the `overflow-y: auto` form, and a single-axis scroller computes - the other axis to `auto` - ([decision](../../../../../../.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md)). */ + axes rather than `overflow: hidden`: a single-axis scroller computes the + other axis to `auto`, and the seat's absolute positioning below needs the + box to stay a containing block in every engine. */ overflow-x: hidden; overflow-y: auto; + /* The view owns its own scrollers (the trajectory ledger scrolls inside the + view), so this box never scrolls here; reserving a gutter would only + narrow the view's content by the bar's width. Chat keeps the reservation + on the same element, so the seat below compensates with the bar's width + ([decision](../../../../../../.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md)). */ + scrollbar-gutter: auto; } .scrollBody:has([data-conversation-composer-overlay]) > .viewArea { @@ -288,7 +293,13 @@ .scrollBody:has([data-conversation-composer-overlay]) > .composerSeat { position: absolute; - right: 0; + /* Chat's seat rides this box's content box, which its own scrolling shortens + by the bar's width; the overlay seat is against the padding box, so it + must give back the same width to keep the input card in place across + tabs. Reads ui-theme's --dsh-scrollbar-width, which mirrors the WebKit + bar's layout width; Firefox's thin bar resolves to the same 8px on the + platforms this app targets, so the compensation holds there too. */ + right: var(--dsh-scrollbar-width); bottom: 0; left: 0; } diff --git a/packages/client/ui-theme/src/styles/scrollbar.css b/packages/client/ui-theme/src/styles/scrollbar.css index 31b5a8aabe..71f67d4f57 100644 --- a/packages/client/ui-theme/src/styles/scrollbar.css +++ b/packages/client/ui-theme/src/styles/scrollbar.css @@ -17,6 +17,11 @@ body { --dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l1); --dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l1); + /* The WebKit bar's layout width, mirrored by the ::-webkit-scrollbar rule + below. A surface that must align itself beside a space-consuming bar + (ConversationRoot's overlay composer seat) reads this instead of + hardcoding the number. */ + --dsh-scrollbar-width: 8px; } /* The two paths are mutually exclusive, and the gate is load-bearing rather From de97ea0ba8d40b1c81b81e15a1f6f8a691edb8b3 Mon Sep 17 00:00:00 2001 From: _Kerman Date: Wed, 12 Aug 2026 22:54:38 +0800 Subject: [PATCH 02/41] fix(sidebar): synchronize collapsed rail motion --- ...psed-sidebar-shared-entry-motion.i18n.yaml | 6 ++++ ...2-collapsed-sidebar-shared-entry-motion.md | 33 +++++++++++++++++ ...ollapsed-sidebar-shared-entry-motion.zh.md | 33 +++++++++++++++++ .agents/notes/archived/manifest.json | 3 ++ packages/client/ui-sidebar/README.i18n.yaml | 4 +-- packages/client/ui-sidebar/README.md | 2 ++ packages/client/ui-sidebar/README.zh.md | 2 ++ .../src/client/SidebarRoot.module.css | 35 +++++++++++++------ .../ui-sidebar/src/client/SidebarRoot.tsx | 13 +++---- .../tests/sidebar-styles.client.spec.ts | 28 +++++++++++++-- packages/client/ui-workspace/README.i18n.yaml | 4 +-- packages/client/ui-workspace/README.md | 2 +- packages/client/ui-workspace/README.zh.md | 2 +- .../src/client/WorkspaceBrowser.module.css | 4 ++- .../src/client/WorkspaceBrowser.tsx | 10 +++--- .../tests/browser-styles.client.spec.ts | 6 ++++ 16 files changed, 157 insertions(+), 30 deletions(-) create mode 100644 .agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.i18n.yaml create mode 100644 .agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md create mode 100644 .agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md diff --git a/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.i18n.yaml b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.i18n.yaml new file mode 100644 index 0000000000..971bc98a0c --- /dev/null +++ b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md +2026-08-12-collapsed-sidebar-shared-entry-motion.md: c5bc18973db693cf9ba60800fbcf7720593dbad5 +2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md: b87ef6322d548061cc2e29c0e8f9896098c09041 diff --git a/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md new file mode 100644 index 0000000000..c5bc18973d --- /dev/null +++ b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md @@ -0,0 +1,33 @@ +# Agent Note: Collapsed sidebar upper controls share one entry motion + +Status: implemented +Archived: 2026-08-12 + +English | [中文](2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md) + +## Problem + +The collapsed sidebar rail renders four upper controls owned by two packages: the shell owns the toggle and New Session, while the workspace region owns add and search. Their opacity timing matched, but their geometry did not. Right-aligned controls moved with the narrowing column while left-aligned controls stayed fixed, so add appeared slower than search even under the same fade. + +The bottom settings control has a different role. It is pinned to the rail foot and must not join the upper controls' horizontal entry. + +## Decision + +At the rail settle point, the four upper 36px controls start from one left-anchored layout and share one `150ms` animation from `translateX(49px)` to their final 10px inset. The shell applies the translation to its toggle and New Session seats and once to the workspace region, so add and search inherit the same path without nested transforms. Opacity uses the same animation timeline. + +The settings seat uses a separate opacity-only keyframe with the same duration and easing. A page that starts collapsed renders the rail without an entry animation, and reduced-motion mode disables both keyframes. + +## Alternatives considered + +**Keep every rail control fixed at its final inset.** This removes the mismatch, but it also removes the requested horizontal entry from the four upper controls. + +**Animate each workspace button independently.** This would duplicate shell timing inside `ui-workspace` and could apply both a region and child transform. Translating the registered region once keeps animation ownership in the sidebar shell. + +**Translate the settings control with the upper controls.** Rejected because settings is a bottom-pinned foot action, not part of the upper control sequence. + +## Consequences + +- Toggle, New Session, add, and search follow the same horizontal coordinates throughout collapse. +- Settings fades at its final horizontal coordinate. +- Static collapsed renders retain their final geometry without startup motion. +- Style tests pin the shared animation assignments, translation distance, base anchors, and settings exception. diff --git a/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md new file mode 100644 index 0000000000..b87ef6322d --- /dev/null +++ b/.agents/notes/archived/bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md @@ -0,0 +1,33 @@ +# Agent Note: 收起侧栏的上方控件共用同一进入动画 + +Status: implemented +Archived: 2026-08-12 + +[English](2026-08-12-collapsed-sidebar-shared-entry-motion.md) | 中文 + +## Problem + +收起侧栏轨道的四个上方控件由两个包渲染：外壳持有侧栏切换与新建会话，Workspace 区域持有添加和搜索。它们的透明度时序相同，但几何行为不同。右对齐控件会随栏变窄而移动，左对齐控件则保持不动，因此添加即使使用相同淡入，视觉上仍比搜索慢。 + +底部设置控件承担不同角色。它固定在轨道页脚，不能参与上方控件的横向进入。 + +## Decision + +轨道落位时，四个 36px 上方控件从同一个左对齐布局开始，共用一段 `150ms` 动画，从 `translateX(49px)` 移动到最终 10px 内边距。外壳把位移分别应用于侧栏切换、新建会话，并只对 Workspace 区域应用一次，因此添加与搜索会继承同一路径，不产生嵌套变换。透明度使用同一条动画时间线。 + +设置控件使用时长与缓动相同、但只改变透明度的独立关键帧。页面初始即为收起状态时不会播放进入动画；减少动态效果模式会禁用两段关键帧。 + +## Alternatives considered + +**把每个轨道控件固定在最终内边距。** 这能消除不一致，但也会移除四个上方控件所需的横向进入效果。 + +**分别为每个 Workspace 按钮添加动画。** 这会在 `ui-workspace` 中重复外壳时序，还可能同时应用区域与子控件变换。只移动一次已注册区域，可以让动画继续由侧栏外壳持有。 + +**让设置控件随上方控件一起移动。** 不予采纳，因为设置是固定在底部的页脚操作，不属于上方控件序列。 + +## Consequences + +- 侧栏切换、新建会话、添加与搜索在整个收起过程中使用相同横坐标。 +- 设置在最终横坐标上淡入。 +- 静态收起渲染保持最终几何，不播放启动动画。 +- 样式测试固定共用动画分配、位移距离、基础锚点与设置例外。 diff --git a/.agents/notes/archived/manifest.json b/.agents/notes/archived/manifest.json index a8377c346f..f8786470c7 100644 --- a/.agents/notes/archived/manifest.json +++ b/.agents/notes/archived/manifest.json @@ -97,6 +97,9 @@ "bug-fix/2026-08-10-web-favicon-dark-mode.i18n.yaml": "sha256:859c4399f9a017a68ba89552fdafa05e73c0599d94cee9551c84ea5b749a14f3", "bug-fix/2026-08-10-web-favicon-dark-mode.md": "sha256:4d17e247abd76ae3aed5fb4e075fd66a2838292f89f7021c82a79fe37ed905e6", "bug-fix/2026-08-10-web-favicon-dark-mode.zh.md": "sha256:7bbff8a3b7061c127afcc75cd2a8043b02a999b78c0180edd8f7e4807fcfe71d", + "bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.i18n.yaml": "sha256:3ce4f6e39e173fc304bf64deca9c95bcddc1dbb492e065ca8c267a7a40788588", + "bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.md": "sha256:7b169aa4543edfc965de5a8b7b9e60aa9d9d5218693cd0b57908e2d482280723", + "bug-fix/2026-08-12-collapsed-sidebar-shared-entry-motion.zh.md": "sha256:88db36c698800bf55c3c7531d6f92665576d978c29c15ff7d74215fb93376cb1", "feature/2026-06-14-acp-agent-client-protocol.i18n.yaml": "sha256:006795baa43ae962a8d125cc0f1e9f134bc2ee9fb758b6e7669e3fa0126e1918", "feature/2026-06-14-acp-agent-client-protocol.md": "sha256:6828c0af74bb3fb96206ca6b21c0e56a000b50e4744aad4bc2c05092f3a5a31b", "feature/2026-06-14-acp-agent-client-protocol.zh.md": "sha256:ba104e841a1fb84edbd3b6c8119d50445b7785255a7a8d13bb9ac8a2cb4d2e69", diff --git a/packages/client/ui-sidebar/README.i18n.yaml b/packages/client/ui-sidebar/README.i18n.yaml index 562396d88f..ac3531b205 100644 --- a/packages/client/ui-sidebar/README.i18n.yaml +++ b/packages/client/ui-sidebar/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/client/ui-sidebar/README.md -README.md: 9974118f69901de985e012e1b62f95a0bcee64c2 -README.zh.md: 11b0aa142cf62626ab6105e2c405d506e35349b0 +README.md: 7cc4fe0a722fe5f8cf0e983a0e3fdb30cd31bb64 +README.zh.md: 96b6f60f871758c126e6c387c6ce3f0993039af0 diff --git a/packages/client/ui-sidebar/README.md b/packages/client/ui-sidebar/README.md index 9974118f69..7cc4fe0a72 100644 --- a/packages/client/ui-sidebar/README.md +++ b/packages/client/ui-sidebar/README.md @@ -8,6 +8,8 @@ New Session starts the runtime's page-local frontend Session Intent. The runtime `SidebarRootComponentProps` composes the layout owner share, the global `useSessions` and `useWorkspaces` hooks, the declared `sidebar.workspaces` and `sidebar.settings` child slots, and injected `startSession` plus sidebar-toggle callbacks. There is no plugin store. +During a live collapse, the shell holds the expanded content at its current width while it fades out for 150ms. The four upper controls—the shell toggle and New Session plus add and search rendered through `sidebar.workspaces`—then share one 150ms fade and 49px leftward translation into the 56px rail, ending with the layout's 300ms column slide; every 36px control box follows the same path to the rail's 10px left inset. The bottom-pinned `sidebar.settings` control shares the fade timing but has no horizontal translation. A page that starts collapsed renders the rail statically, and reduced-motion mode disables both transitions. + Scrollbars in the column are a pointer affordance: the shell rebinds ui-theme's [scrollbar indirection](../ui-theme/README.md) to `transparent` whenever the pointer is outside it, and keeps the thumb drawn for 2s after the pointer leaves, so a list nobody is pointing at carries no bar. The reservation that keeps rows from moving belongs to the scrolling region ([ui-workspace](../ui-workspace/README.md)), so revealing a thumb never reflows. The foot is the `sidebar.settings` seat: the sidebar renders only the bottom-pinned layout slot and shares its column state (`wide`); ui-settings registers the trigger row and settings panel there. diff --git a/packages/client/ui-sidebar/README.zh.md b/packages/client/ui-sidebar/README.zh.md index 11b0aa142c..96b6f60f87 100644 --- a/packages/client/ui-sidebar/README.zh.md +++ b/packages/client/ui-sidebar/README.zh.md @@ -8,6 +8,8 @@ New Session 会启动运行时的页面局部前端 Session Intent。运行时 `SidebarRootComponentProps` 组合布局 owner share、全局 `useSessions` 和 `useWorkspaces` 钩子、已声明的 `sidebar.workspaces` 与 `sidebar.settings` 子 slot，以及注入的 `startSession` 与侧边栏切换回调。这里没有插件 store。 +实时收起时，外壳会把展开内容固定在当前宽度，并用 150ms 将其淡出。随后，上方四个控件——外壳的侧栏切换与新建会话，以及通过 `sidebar.workspaces` 渲染的添加和搜索——共用一次 150ms 的淡入和 49px 左移，在布局的 300ms 栏滑动结束时一起进入 56px 轨道；每个 36px 控件盒都会沿同一条路径到达轨道左侧 10px 的内边距。固定在底部的 `sidebar.settings` 控件只共用淡入时序，不发生横向位移。页面初始即为收起状态时会静态渲染轨道；减少动态效果模式会禁用两段过渡。 + 栏内的滚动条是一种指针可供性：只要指针不在栏内，外壳就把 ui-theme 的[滚动条间接层](../ui-theme/README.md)重新绑定为 `transparent`；指针离开后滑块再保留 2 秒，因此没人指向的列表不会带着滚动条。避免行位移的空间预留属于滚动区域本身（[ui-workspace](../ui-workspace/README.md)），所以显示滑块不会引起重排。 页脚承载 `sidebar.settings`：侧边栏只渲染固定在底部的布局 slot，并共享其栏状态（`wide`）；ui-settings 在此注册触发行和设置面板。 diff --git a/packages/client/ui-sidebar/src/client/SidebarRoot.module.css b/packages/client/ui-sidebar/src/client/SidebarRoot.module.css index 17333b5ccc..a0740d50fa 100644 --- a/packages/client/ui-sidebar/src/client/SidebarRoot.module.css +++ b/packages/client/ui-sidebar/src/client/SidebarRoot.module.css @@ -58,24 +58,35 @@ from { opacity: 0; } } -/* Rail controls hold hidden while the column slides shut, then fade in over - the slide's tail: .railIn applies at settle (150ms into the 0.3s AppFrame - track transition), so a 100ms delay + 150ms fade starts just before the - slide ends (250ms) and finishes at 400ms; `backwards` keeps them at - opacity 0 through the delay. Only a live collapse gets .railIn — a - refresh straight into the collapsed state renders statically. */ +/* At the 150ms rail settle, the four upper controls enter from the former + rail right edge over the remaining 150ms of the AppFrame track transition. + The bottom-pinned settings seat shares their opacity timeline but stays + horizontally fixed. Only a live collapse gets .railIn; a cold collapsed + render stays static. */ .railIn .iconButton, .railIn .newSession, +.railIn .regionArea { + animation: rail-in 150ms var(--ds-ease-in-out) backwards; +} + .railIn .footArea { - animation: rail-in 150ms var(--ds-ease-in-out) 100ms backwards; + animation: rail-fade-in 150ms var(--ds-ease-in-out) backwards; } @keyframes rail-in { + from { + opacity: 0; + transform: translateX(49px); + } +} + +@keyframes rail-fade-in { from { opacity: 0; } } -/* Logo row (figma pad (4,8,4,8)): brand left, panel toggle right-anchored — - the toggle is the rail's expand control and slides in with the right edge. */ +/* Logo row (figma pad (4,8,4,8)): expanded keeps the panel toggle at the + right edge; the rail gives every control the same base left anchor before + the shared entry translation is applied. */ .logoRow { flex: none; display: flex; @@ -93,6 +104,7 @@ height: 36px; padding: 0; margin-bottom: 12px; + justify-content: flex-start; } /* Brand group (figma I133:7632): the full wordmark rides the text ink @@ -185,6 +197,8 @@ } .collapsed .newSession { + align-self: flex-start; + width: 36px; height: 36px; padding: 0; margin: 0 0 12px; @@ -239,7 +253,8 @@ .fading > *, .railIn .iconButton, .railIn .newSession, - .railIn .footArea { + .railIn .footArea, + .railIn .regionArea { transition: none; animation: none; } diff --git a/packages/client/ui-sidebar/src/client/SidebarRoot.tsx b/packages/client/ui-sidebar/src/client/SidebarRoot.tsx index f464066f56..5f392f93b3 100644 --- a/packages/client/ui-sidebar/src/client/SidebarRoot.tsx +++ b/packages/client/ui-sidebar/src/client/SidebarRoot.tsx @@ -2,12 +2,13 @@ * Sidebar shell: column geometry only. Collapse is a slide plus crossfade: * content freezes at its expanded width (inline style) and fades out in place * while the sliding column (AppFrame grid tracks) clips it — nothing reflows - * mid-slide. At settle the wide-only content unmounts and the control rows - * snap to the 56px rail (one icon each, same top-down order) fading in as the - * slide ends. The workspace/session browsing region between the New Session - * button and the foot is the `sidebar.workspaces` registrant's, and the foot - * is the `sidebar.settings` registrant's; the shell hands them the wide flag - * (plus an expand request callback for the browser). + * mid-slide. At settle the wide-only content unmounts and the four upper + * controls enter the 56px rail from the same horizontal offset (one icon each, + * same top-down order) on one fade that ends with the slide. The bottom-pinned + * settings control only fades. The workspace/session browsing region between + * the New Session button and the foot is the `sidebar.workspaces` registrant's, + * and the foot is the `sidebar.settings` registrant's; the shell hands them the + * wide flag (plus an expand request callback for the browser). * * The column also owns whether the scroll regions nested in it draw a * scrollbar at all: the shell tracks the pointer and rebinds ui-theme's diff --git a/packages/client/ui-sidebar/tests/sidebar-styles.client.spec.ts b/packages/client/ui-sidebar/tests/sidebar-styles.client.spec.ts index c4abce1911..19e7a54380 100644 --- a/packages/client/ui-sidebar/tests/sidebar-styles.client.spec.ts +++ b/packages/client/ui-sidebar/tests/sidebar-styles.client.spec.ts @@ -1,4 +1,4 @@ -/** Sidebar shell inset contract shared with the nested workspace browser. */ +/** Sidebar shell style contracts shared with its slot-owned controls. */ import { readFileSync } from 'node:fs' import { fileURLToPath } from 'node:url' import { describe, expect, it } from 'vitest' @@ -25,7 +25,7 @@ function declarations(selector: string): Map | undefined { return undefined } -describe('SidebarRoot.module.css inset', () => { +describe('SidebarRoot.module.css', () => { it('shares and cancels the wide shell trailing padding structurally', () => { const root = declarations('.root') expect(root?.get('--dsh-sidebar-inline-padding')).toBe('12px') @@ -39,4 +39,28 @@ describe('SidebarRoot.module.css inset', () => { expect(declarations('.collapsed .regionArea')?.get('padding-left')).toBe('0') expect(declarations('.collapsed .regionArea')?.get('margin-right')).toBe('0') }) + + it('moves the four upper controls while the settings seat only fades', () => { + const animation = 'rail-in 150ms var(--ds-ease-in-out) backwards' + for (const selector of [ + '.railIn .iconButton', + '.railIn .newSession', + '.railIn .regionArea', + ]) { + expect(declarations(selector)?.get('animation')).toBe(animation) + } + expect(declarations('.railIn .footArea')?.get('animation')).toBe( + 'rail-fade-in 150ms var(--ds-ease-in-out) backwards', + ) + expect(css).toMatch( + /@keyframes rail-in\s*\{\s*from\s*\{\s*opacity: 0;\s*transform: translateX\(49px\);\s*}\s*}/, + ) + expect(css).toMatch(/@keyframes rail-fade-in\s*\{\s*from\s*\{\s*opacity: 0;\s*}\s*}/) + }) + + it('gives shell rail controls the same base anchor for their shared translation', () => { + expect(declarations('.collapsed .logoRow')?.get('justify-content')).toBe('flex-start') + expect(declarations('.collapsed .newSession')?.get('align-self')).toBe('flex-start') + expect(declarations('.collapsed .newSession')?.get('width')).toBe('36px') + }) }) diff --git a/packages/client/ui-workspace/README.i18n.yaml b/packages/client/ui-workspace/README.i18n.yaml index 7a50937c41..6d5eff023b 100644 --- a/packages/client/ui-workspace/README.i18n.yaml +++ b/packages/client/ui-workspace/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/client/ui-workspace/README.md -README.md: 9d7d4d77cc064146f1fdaed615509215c64308fc -README.zh.md: ca35d7cd2e7ff176f4ea40d1e9a3a6d1a7457462 +README.md: 8878aa49dcccd60ddcde5f0a9563bbfbd969c9c0 +README.zh.md: c83f1c53d5471dd8d52b933163a573eb98a70c2e diff --git a/packages/client/ui-workspace/README.md b/packages/client/ui-workspace/README.md index 9d7d4d77cc..8878aa49dc 100644 --- a/packages/client/ui-workspace/README.md +++ b/packages/client/ui-workspace/README.md @@ -6,7 +6,7 @@ Shared Workspace browser and picker plugin. `WorkspaceBrowser` fills the sidebar The browser renders grouped or flat Session rows from the global runtime hooks and owns Workspace add/rename/reorder plus Session reorder. A Workspace remembers whether it is closed or showing Sessions; an open Workspace shows five Sessions by default, offers a transient **Show more** control for the remainder, and returns to five after the whole Workspace is closed and reopened. Creating a Session from a Workspace row first opens that group so the new row remains visible when the Session state arrives. Once the Workspace list baseline is ready, browser-persisted expansion and Session-order records retain only current Workspace ids plus Ungrouped and the flat-list account. View options combine grouping with one browser-persisted Session order per account: real Workspaces initialize from `WorkspaceView.sessionIds`, while Ungrouped and the cross-Workspace flat list initialize from recency. **Manual** and **Last updated** apply in either presentation. Entering Last updated performs a complete recency sort and later user prompts or steers promote their Session once, while entering Manual preserves every current position and disables later promotion. Dragging edits the current order in either mode; Manual-mode drags for real Workspaces also update the Host Session account, while Ungrouped and flat-list orders remain browser-local because neither has one Workspace account. Flat rows omit the empty leading status slot because they have no parent hierarchy, but retain it when a Session status is visible. Workspace drag order is Host-durable in either Session order mode. -Collapsed search is one header action beside the view and add actions. Activating it expands the field across the header; an outside click collapses only a query that is empty after trimming, while the clear control always resets and collapses it. A non-blank search query replaces either browsing mode with one flat result list: case-insensitive title and Workspace substring matches appear immediately, while a 250 ms debounced Host request adds ranked current-conversation content matches and snippets. The English search input and its defensive request path remove NUL, cap the query at the wire schema's 500 UTF-16 code units without splitting a surrogate pair, and preserve the existing debounce and cancellation behavior. Each new query aborts the preceding request; a failed content search leaves metadata matches visible with a warning. The list is capped at 20, asks the user to narrow broader queries, and opens the selected Session without clearing the query or jumping to a specific event. +Collapsed search is one header action beside the view and add actions. In the rail, add and search render as 36px controls on the shell's shared horizontal entry path. Activating search expands the field across the header; an outside click collapses only a query that is empty after trimming, while the clear control always resets and collapses it. A non-blank search query replaces either browsing mode with one flat result list: case-insensitive title and Workspace substring matches appear immediately, while a 250 ms debounced Host request adds ranked current-conversation content matches and snippets. The English search input and its defensive request path remove NUL, cap the query at the wire schema's 500 UTF-16 code units without splitting a surrogate pair, and preserve the existing debounce and cancellation behavior. Each new query aborts the preceding request; a failed content search leaves metadata matches visible with a warning. The list is capped at 20, asks the user to narrow broader queries, and opens the selected Session without clearing the query or jumping to a specific event. The picker lists real Host Workspace entities through the global `useWorkspaces` hook. Selecting a Workspace invokes the slot owner's `onPick` callback to retarget the frontend Session object. Distinct canonical paths remain separate id-keyed Workspaces when their basenames and display titles match; the sidebar hover detail exposes the full path. Each registration declares a **directory-flow child hole** (`single` kind: `conversation.hero.workspace.directoryFlow` / `sidebar.workspaces.directoryFlow`) that the composed picker package's client half fills with its picking interaction — the [`-native`](../../host/directory-picker-native/README.md) backend's renderless OS-chooser driver today, an in-app browsing dialog under a `-browse` composition. The flat **Add workspace...** action renders only while the surface's hole is occupied (occupancy read per menu render; an empty hole means the composition has no picking affordance — the seam's documented no-flow default, under which the sidebar header drops its add button rather than offering a dead one). This package owns the trigger and the adoption: the occupant reports one picked path per open through the hole's owner conversation (`open`/`busy`/`onPicked`/`onCancel`/`onError`), and the owner adopts it through the object layer, selecting the committed Workspace only after its list projection has refreshed; cancellation is silent, and errors land in the retryable folder dialog whose **Choose again** reopens the flow. Adding has exactly one route: the occupant's own create-folder affordance already covers a brand-new directory, so no separate create-by-name dialog exists. A menu only appears where there is something to choose between — with no Workspace listed, the anchor gesture raises the flow directly instead of a one-row popover, and it waits for the list baseline before treating an empty list as final. The runtime Session and Workspace services own materialization. The Workspace row's Delete action opens a confirmation that states the retention boundary, blocks duplicate submission, and keeps failures open; success removes the group while its Sessions remain under Ungrouped. The Session row's Rename action opens the same browser-owned dialog pattern prefilled with the row's display title: no client-side conflict rule exists (the host normalizes and may reject with `title-invalid`, rendered in the dialog alert), and confirming an unchanged title is deliberately allowed — it pins the current automatic title against regeneration. The Session row's Archive action commits without a confirmation dialog (non-destructive: the log and the workspace accounting slot remain) through `ctx.workspaces.archiveSession`; the row disappears from every grouping surface — workspace groups, Ungrouped, content search, and the flat list — when the archive-set echo lands, and failures are console diagnostics that leave the tree unchanged. A blank New Session row is a pure placeholder: it renders no row menu and no time label (nothing has happened in it yet), so rename, fork, and archive first apply once the first prompt lands. diff --git a/packages/client/ui-workspace/README.zh.md b/packages/client/ui-workspace/README.zh.md index ca35d7cd2e..c83f1c53d5 100644 --- a/packages/client/ui-workspace/README.zh.md +++ b/packages/client/ui-workspace/README.zh.md @@ -6,7 +6,7 @@ 该浏览器通过全局运行时钩子将 Session 行渲染为分组或扁平形式，并负责 Workspace 添加／重命名／重排序以及 Session 重排序。每个 Workspace 会记住自身是关闭还是显示 Session；打开后默认显示五条 Session，其余条目通过临时的**展开其余**控件显示，而关闭并重新打开整个 Workspace 后会恢复为五条。从 Workspace 行创建 Session 时会先打开该分组，使 Session 状态到达后新行保持可见。Workspace 列表基线就绪后，浏览器持久化的展开状态与 Session 顺序记录只保留当前 Workspace id、Ungrouped 和单列表记账。视图选项把分组方式和每个记账各自的一份浏览器持久化 Session 顺序放在一起：真实 Workspace 从 `WorkspaceView.sessionIds` 初始化，Ungrouped 和跨 Workspace 的单列表则从最近更新时间顺序初始化。**手动排序**和**最近更新**在两种呈现方式下都可用。进入最近更新时会执行一次完整的时间排序，后续 user prompt 或 steer 会将对应 Session 置顶一次；进入手动排序则保留所有当前位置并停用后续置顶。两种模式下的拖拽都会编辑当前顺序；真实 Workspace 在手动模式下的拖拽还会更新 Host Session 记账，而 Ungrouped 和单列表因没有单一 Workspace 记账，其顺序始终只保存在浏览器本地。单列表没有父级层次，因此不显示空的左侧状态槽；Session 存在可见状态时仍保留该槽。无论采用哪种 Session 顺序，Workspace 拖拽顺序都由 Host 持久化。 -折叠搜索是视图和添加操作旁的一枚区头按钮。激活后，输入框会扩展并占据区头；点击外部只会收起经清除首尾空白后为空的查询，而清除控件总会重置并收起搜索。非空白查询会以单一扁平结果列表替代任一浏览模式：不区分大小写的标题和 Workspace 子串匹配项会立即显示，经 250 ms 防抖的 Host 请求则会加入经过排序的当前对话内容匹配项及其摘要片段。英文搜索输入框及其防御性请求路径会移除 NUL，将查询限制在传输 schema 规定的 500 个 UTF-16 代码单元内且不会拆分代理项对，并保留现有的防抖与取消行为。每次新查询都会中止前一个请求；内容搜索失败时，元数据匹配项仍会显示，同时给出警告。列表最多显示 20 条结果，并会在查询过宽时提示用户缩小范围；打开所选 Session 时既不会清除查询，也不会跳转至特定事件。 +折叠搜索是视图和添加操作旁的一枚区头按钮。在轨道中，添加和搜索会渲染为沿外壳共用横向进入路径移动的 36px 控件。激活搜索后，输入框会扩展并占据区头；点击外部只会收起经清除首尾空白后为空的查询，而清除控件总会重置并收起搜索。非空白查询会以单一扁平结果列表替代任一浏览模式：不区分大小写的标题和 Workspace 子串匹配项会立即显示，经 250 ms 防抖的 Host 请求则会加入经过排序的当前对话内容匹配项及其摘要片段。英文搜索输入框及其防御性请求路径会移除 NUL，将查询限制在传输 schema 规定的 500 个 UTF-16 代码单元内且不会拆分代理项对，并保留现有的防抖与取消行为。每次新查询都会中止前一个请求；内容搜索失败时，元数据匹配项仍会显示，同时给出警告。列表最多显示 20 条结果，并会在查询过宽时提示用户缩小范围；打开所选 Session 时既不会清除查询，也不会跳转至特定事件。 该选择器通过全局 `useWorkspaces` hook 列出真实的 Host Workspace 实体。选择 Workspace 会调用 slot owner 的 `onPick` 回调，重新定位前端 Session 对象。不同的规范化路径即使 basename 和显示标题相同，仍会作为由 id 区分的独立 Workspace；侧边栏的悬停详情会显示完整路径。每个注册各自声明一个**目录流子 slot**（`single` kind：`conversation.hero.workspace.directoryFlow`／`sidebar.workspaces.directoryFlow`），由组合的选择器包 client half 填入其选取交互——今天是 [`-native`](../../host/directory-picker-native/README.md) 后端的无渲染 OS 选择器驱动，`-browse` 组合下则是应用内浏览对话框。平铺显示的 **添加工作区…** 操作仅在当前界面的 slot 被占用时渲染（每次菜单渲染读取占用状态；slot 为空意味着该组合没有目录选择能力——seam 文档化的无流程默认行为，此时侧边栏区头直接不渲染添加按钮，而非留下一个点了没反应的按钮）。本包持有触发与接纳：占用方通过 slot 的属主交互约定（`open`/`busy`/`onPicked`/`onCancel`/`onError`）每次打开上报一个所选路径，owner 通过对象层接纳它，并等待 Workspace 列表投影刷新后才选中已提交的 Workspace；取消操作不会显示提示，错误落入可重试的文件夹对话框，其 **重新选择** 会重新打开流程。添加只有一条路径：占用者自带的新建文件夹能力已经覆盖了全新目录，因此不再单设按名称创建的对话框。菜单只在确有多个目标可选时出现——没有 Workspace 可列时，锚点手势直接拉起流程，而不是弹出只有一行的浮层；在列表基线落地前，空列表不算最终结果。运行时 Session 与 Workspace 服务负责物化。Workspace 行内的 Delete 操作会打开确认框，说明保留边界、阻止重复提交，并在失败时保持打开；成功后，该分组会被移除，其 Session 则留在 Ungrouped 下。Session 行内的 Rename 操作打开同款浏览器持有的对话框，并以该行的显示标题预填：客户端不设名称冲突规则（host 负责规范化，可能以 `title-invalid` 拒绝，错误渲染在对话框告警区）；确认未修改的标题是有意允许的——这正是把当前自动标题钉住、不再被重新生成覆盖的手势。Session 行内的 Archive 操作不经确认对话框直接提交（非破坏性：日志和 workspace 记账席位保持不变），通过 `ctx.workspaces.archiveSession` 归档；归档集合回声落地后，该行从所有分组视图——workspace 分组、Ungrouped、内容搜索和平铺列表——中消失，失败只作为控制台诊断输出，树保持不变。空白的「新会话」行只是占位符：不渲染行菜单和时间标签（其中还没有发生任何事），重命名、fork 和归档都从首条提示词落地后才可用。 diff --git a/packages/client/ui-workspace/src/client/WorkspaceBrowser.module.css b/packages/client/ui-workspace/src/client/WorkspaceBrowser.module.css index a160f2ffd7..4d19163322 100644 --- a/packages/client/ui-workspace/src/client/WorkspaceBrowser.module.css +++ b/packages/client/ui-workspace/src/client/WorkspaceBrowser.module.css @@ -240,11 +240,13 @@ /* Rail variant (own .rail class from the wide owner prop — the region never reads the shell's class names): the two icon controls stack as 36x36 - circles matching the shell's rail rhythm. */ + circles matching the shell's rail rhythm. Both use the rail's shared base + left anchor so the outer shell can translate the whole region uniformly. */ .rail .sectionHeader { gap: 0; padding-left: 0; margin-bottom: 12px; + justify-content: flex-start; } .rail .headerActions { diff --git a/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx b/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx index e9d6ed192f..ebd0e11a33 100644 --- a/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx +++ b/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx @@ -3,11 +3,11 @@ * `sidebar.workspaces` hole: section header (title + view options + add * workspace), search, the grouped tree or flat list, and the workspace * dialogs. Wide state renders the full browser; rail state renders the two - * region icons (search / add workspace), each requesting shell expansion - * through the owner share. Adding is the header button's one action, so it - * raises the directory flow with no menu in between; the flow and its error - * dialog live in WorkspacePicker (same package — direct composition, no slot - * between them). + * region icons (search / add workspace) as 36px controls on the shell's shared + * rail entry path, each requesting expansion through the owner share. Adding is the header + * button's one action, so it raises the directory flow with no menu in + * between; the flow and its error dialog live in WorkspacePicker (same + * package — direct composition, no slot between them). */ import { useEffect, useMemo, useRef, useState } from 'react' import clsx from 'clsx' diff --git a/packages/client/ui-workspace/tests/browser-styles.client.spec.ts b/packages/client/ui-workspace/tests/browser-styles.client.spec.ts index d66baef917..5554c977bb 100644 --- a/packages/client/ui-workspace/tests/browser-styles.client.spec.ts +++ b/packages/client/ui-workspace/tests/browser-styles.client.spec.ts @@ -107,4 +107,10 @@ describe('WorkspaceBrowser.module.css list', () => { expect(rowDeclarations('.sessionRow.selected')?.get('background')) .toBe('var(--dsw-alias-interactive-bg-hover)') }) + + it('pins both rail controls to the shared left anchor during the column slide', () => { + expect(declarations('.rail .sectionHeader')?.get('justify-content')).toBe('flex-start') + expect(declarations('.rail .iconButton')?.get('width')).toBe('36px') + expect(declarations('.rail .search')?.get('width')).toBe('36px') + }) }) From 3ef05f8a8524dc1dc754f4d0bd7d343f520c2d27 Mon Sep 17 00:00:00 2001 From: _Kerman Date: Wed, 12 Aug 2026 23:51:46 +0800 Subject: [PATCH 03/41] review: address ds-review-bot findings on composer geometry - Rewrite the 08-04 gutter-reservation note in place: the reservation is Chat's alone and the overlay branch points to the seat-width compensation note; the Testing section now describes the uncompensated control. - Cross-reference the earlier rejection of the seat inset in the 08-12 note and record the engine-resolved-vs-fixed-8px drift as accepted residual cost instead of asserting Firefox resolves 8px. - Pair --dsh-scrollbar-width with the mirrored ::-webkit-scrollbar rule and the compensation consumer in the scrollbar-styles gate; document the variable in the ui-theme README. - Rename the e2e control to compareTabsWithoutCompensation and correct the vacuity-guard comment; rewrap the WorkspaceBrowser doc comment. --- ...-composer-tab-gutter-reservation.i18n.yaml | 4 +- ...6-08-04-composer-tab-gutter-reservation.md | 16 ++--- ...8-04-composer-tab-gutter-reservation.zh.md | 16 ++--- ...-overlay-seat-width-compensation.i18n.yaml | 4 +- ...omposer-overlay-seat-width-compensation.md | 7 +- ...oser-overlay-seat-width-compensation.zh.md | 7 +- apps/web/tests/composer-tab-geometry.e2e.ts | 28 ++++---- .../skeleton/ConversationRoot.module.css | 6 +- packages/client/ui-theme/README.i18n.yaml | 4 +- packages/client/ui-theme/README.md | 2 +- packages/client/ui-theme/README.zh.md | 2 +- .../tests/scrollbar-styles.client.spec.ts | 70 +++++++++++++++++-- .../src/client/WorkspaceBrowser.tsx | 8 +-- 13 files changed, 120 insertions(+), 54 deletions(-) diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml index 0082a6f991..ccae7043a7 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md -2026-08-04-composer-tab-gutter-reservation.md: 2c2813371af073eee4bd80ce7813e77af3c0c319 -2026-08-04-composer-tab-gutter-reservation.zh.md: e450def2482218028875a48fce8842c88b5ba82e +2026-08-04-composer-tab-gutter-reservation.md: 8bd9fb2d86982d82b44a82c55b7303fcd9a5bf4d +2026-08-04-composer-tab-gutter-reservation.zh.md: 4b70aeb1d3777384907c345968971fcf75b3e74d diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md index 2c2813371a..8bd9fb2d86 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.md @@ -2,8 +2,6 @@ Status: implemented -> Superseded for overlay views by [the seat-width compensation](2026-08-12-composer-overlay-seat-width-compensation.md): the overlay branch no longer reserves a gutter, and the seat compensates for the bar instead. Chat keeps the reservation described here. - English | [中文](2026-08-04-composer-tab-gutter-reservation.zh.md) ## Problem @@ -16,13 +14,11 @@ So for as long as the transcript overflowed — the ordinary state of any sessio ## Decision -`.scrollBody` declares `scrollbar-gutter: stable` unconditionally, and the overlay branch declares the same box a scroll container on both axes — `overflow-x: hidden; overflow-y: auto` — instead of `overflow: hidden`. +`.scrollBody` declares `scrollbar-gutter: stable` for the Chat state, and the overlay branch overrides it with `scrollbar-gutter: auto` while staying a scroll container on both axes — `overflow-x: hidden; overflow-y: auto`. The reservation is Chat's alone: it holds the seat's content box at the same width whether or not the transcript overflows, so the card never jumps as a growing transcript starts to scroll, nor between the hero phase and the first scrolling turn. The overlay branch reserves nothing — the view owns its own scrollers, so a gutter there would only narrow the view's content — and its seat compensates for the bar instead ([the seat-width compensation](2026-08-12-composer-overlay-seat-width-compensation.md)). -The two halves are one change. The reservation is what makes both states measure against the same width; declaring the overlay branch a scroll container is what makes the reservation reach it. `stable` rather than `auto` because `auto` reserves only while the box actually overflows, and the difference between overflowing and not is precisely the difference between the two tabs — an `auto` gutter would state the bug rather than fix it. +`stable` rather than `auto` because `auto` reserves only while the box actually overflows, and the difference between overflowing and not is precisely the difference between Chat's two phases — an `auto` gutter would state the bug rather than fix it. -The overlay state is a scroll container that nothing scrolls: the view fills it (`flex: 1 1 0` with its own clip) and the seat is out of flow, so no gesture and no clipping behavior changes. What changes is which declarations the engine honours. WebKit applies `scrollbar-gutter` to an `overflow-y: auto` box and ignores it on a hidden one — measured on this app's own composer layers and recorded in [the composer scrollport note](2026-07-31-composer-text-layers-share-one-scrollport.md) — so a reservation left on a hidden box would hold in Chromium and silently not in Safari. - -The horizontal axis is declared rather than left to compute: a box that scrolls on one axis computes `visible` on the other to `auto`, and would grow a horizontal scrollbar of its own the first time a view's content reached past the column. +The reservation lives on an `overflow-y: auto` box, and that form is load-bearing: WebKit applies `scrollbar-gutter` to an `overflow-y: auto` box and ignores it on a hidden one — measured on this app's own composer layers and recorded in [the composer scrollport note](2026-07-31-composer-text-layers-share-one-scrollport.md) — so a reservation on a hidden box would hold in Chromium and silently not in Safari. The overlay branch keeps its `overflow-y: auto` form too, as a clipping box nothing scrolls out of: a single-axis scroller computes the other axis to `auto`, so the horizontal axis is declared `hidden` rather than left to compute, and would otherwise grow a horizontal scrollbar of its own the first time a view's content reached past the column. The reservation is worth what it costs only because the bar takes layout space here at all, which is not the browser's default behavior but this client's: `::-webkit-scrollbar` carries a width in ui-theme's sheet ([themed scrollbars](2026-07-28-themed-scrollbars-and-reserved-gutter.md)), and the sidebar's session list already reserves its own gutter for the same reason. @@ -39,7 +35,7 @@ The reservation is worth what it costs only because the bar takes layout space h ## Consequences - Chat's content column is permanently 8px narrower — in the hero phase and while the transcript is short as well, where no bar is drawn. That is the trade: one card position at every content height, instead of the widest possible column. -- The fix covers three transitions with one declaration, because all three are the same difference: Chat ↔ Trajectory, short ↔ scrolling transcript within Chat, and hero ↔ first scrolling turn. +- The card holds one position across three transitions, by two mechanisms: the reservation keeps Chat's seat at one width across its own phases (short ↔ scrolling transcript, hero ↔ first scrolling turn), and the overlay seat's compensation matches it on the Chat ↔ Trajectory transition ([the seat-width compensation](2026-08-12-composer-overlay-seat-width-compensation.md)). - The overlay state is now a scroll container. Nothing in it can overflow today; a future view that let its content exceed the column would scroll this box instead of clipping, and would need its own clip the way the Trajectory view already has one. - The committed golden records the reserved band, so a change to the sheet's `::-webkit-scrollbar` width — the value that decides how wide the reservation is — arrives as a reviewable diff in this scenario as well as in the sidebar's. @@ -47,6 +43,6 @@ The reservation is worth what it costs only because the bar takes layout space h `apps/web/tests/composer-tab-geometry.e2e.ts` measures the input card's rectangle in both tabs, at a viewport where the card sits at its width cap and one where it shrinks with the column, and asserts the two rectangles are the same rectangle. Only a real engine reports this: jsdom gives every element a zero-sized box and no scrollbar, so a unit spec could assert the declarations exist but not that the two states land in the same place. For the same reason no CSS-text spec accompanies it — it would restate the declarations without adding a fact the browser lane does not already establish. -The scenario launches chromium without Playwright's default `--hide-scrollbars`, which is load-bearing: under that argument a bar consumes no layout width, both tabs agree before this change as much as after it, and every comparison in the file holds vacuously. Measured, the pre-fix cascade leaves both bands at 0 under the argument, and at 8 and 0 with it dropped. +The scenario launches chromium without Playwright's default `--hide-scrollbars`, which is load-bearing: under that argument a bar consumes no layout width, so the tabs agree with and without the compensation and every comparison in the file holds vacuously. Measured, both bands sit at 0 under the argument and at 8 and 0 with it dropped. -The pre-fix cascade is then applied in the page — `scrollbar-gutter: auto` on the scroller, `overflow: hidden` on the overlay branch — and the same two tabs measured through it, which is what separates a card that does not move from a tab switch that never reached the layout. It reproduces the reported symptom as a number: 4px on each edge, half the 8px band. The golden records that control beside the fixed state, so the fixture carries the difference the change removes rather than only its absence. +The uncompensated cascade is then applied in the page — the overlay seat's `right` compensation dropped to 0 via `!important`, Chat's reservation untouched — and the same two tabs measured through it, which is what separates a card that does not move from a tab switch that never reached the layout. It reproduces the reported symptom as a number: 4px on each edge, half the 8px band. The golden records that control beside the fixed state, so the fixture carries the difference the change removes rather than only its absence. diff --git a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md index e450def248..4b70aeb1d3 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md +++ b/.agents/notes/implemented/bug-fix/2026-08-04-composer-tab-gutter-reservation.zh.md @@ -2,8 +2,6 @@ Status: implemented -> 对覆盖视图已被 [座位宽度补偿](2026-08-12-composer-overlay-seat-width-compensation.md) 取代：覆盖分支不再预留滚动条槽，座位改为补偿滚动条宽度。Chat 仍保留本文所述的预留。 - [English](2026-08-04-composer-tab-gutter-reservation.md) | 中文 ## 问题 @@ -16,13 +14,11 @@ composer 座位在组件树中只有一个节点、一个位置，但它究竟 ## 决策 -`.scrollBody` 无条件声明 `scrollbar-gutter: stable`，overlay 分支则把同一个盒子在两个轴向上都声明为滚动容器——`overflow-x: hidden; overflow-y: auto`——而不再是 `overflow: hidden`。 +`.scrollBody` 为 Chat 状态声明 `scrollbar-gutter: stable`，覆盖分支则将其覆盖为 `scrollbar-gutter: auto`，同时保持为双轴滚动容器——`overflow-x: hidden; overflow-y: auto`。这条预留只属于 Chat：它让座位的内容盒在 transcript 是否溢出时都保持同一宽度，因此卡片不会在 transcript 增长到开始滚动的那一刻跳动，也不会在 hero 态与第一个可滚动轮次之间跳动。覆盖分支不预留任何槽位——视图自己滚动，槽位只会白白收窄视图内容——它的座位改为补偿滚动条宽度（[座位宽度补偿](2026-08-12-composer-overlay-seat-width-compensation.md)）。 -这两半是同一处改动。预留使两种状态依附于同一个宽度；把 overlay 分支声明为滚动容器，才使这条预留真正抵达它。选 `stable` 而非 `auto`，是因为 `auto` 只在盒子确实溢出时才预留，而「溢出与否」恰恰就是两个标签页之间的那点差别——`auto` 的写法只是把缺陷重述一遍，并不能修掉它。 +选 `stable` 而非 `auto`，是因为 `auto` 只在盒子确实溢出时才预留，而「溢出与否」恰恰就是 Chat 两种相位之间的那点差别——`auto` 的写法只是把缺陷重述一遍，并不能修掉它。 -overlay 状态是一个没有任何东西会去滚动它的滚动容器：视图把它填满（`flex: 1 1 0`，且自带裁剪），座位不在常规流中，因此没有任何手势与裁剪行为发生变化。变化的是引擎会认哪些声明。WebKit 对 `overflow-y: auto` 的盒子应用 `scrollbar-gutter`，对 hidden 的盒子则忽略它——这是在本应用 composer 自身的图层上实测所得，并记录于 [composer 滚动视口记录](2026-07-31-composer-text-layers-share-one-scrollport.md)——所以把预留留在一个 hidden 盒子上，会在 Chromium 上成立，在 Safari 上悄无声息地不成立。 - -横向轴是显式声明的，而不是交给推导：单轴滚动的盒子会把另一轴的 `visible` 计算为 `auto`，于是只要某个视图的内容第一次伸出列外，它就会长出自己的横向滚动条。 +这条预留位于 `overflow-y: auto` 的盒子上，而这个形式是承重的：WebKit 对 `overflow-y: auto` 的盒子应用 `scrollbar-gutter`，对 hidden 的盒子则忽略它——这是在本应用 composer 自身的图层上实测所得，并记录于 [composer 滚动视口记录](2026-07-31-composer-text-layers-share-one-scrollport.md)——所以把预留放在 hidden 盒子上，会在 Chromium 上成立，在 Safari 上悄无声息地不成立。覆盖分支同样保留 `overflow-y: auto` 的形式，作为没有任何内容会滚出去的裁剪盒：单轴滚动的盒子会把另一轴的 `visible` 计算为 `auto`，因此横向轴显式声明为 `hidden` 而不是交给推导，否则某个视图的内容第一次伸出列外时，它就会长出自己的横向滚动条。 这条预留之所以值回它的代价，前提是滚动条在这里确实占布局空间——这并非浏览器的默认行为，而是本客户端的选择：ui-theme 的样式表给 `::-webkit-scrollbar` 声明了宽度（[滚动条主题化](2026-07-28-themed-scrollbars-and-reserved-gutter.md)），侧边栏的会话列表也正是出于同一原因预留了自己的滚动条槽。 @@ -39,7 +35,7 @@ overlay 状态是一个没有任何东西会去滚动它的滚动容器：视图 ## 后果 - Chat 的内容列永久变窄 8px——hero 态与 transcript 尚短、根本不绘制滚动条时同样如此。这就是这笔交易：以最宽的列换取卡片在任何内容高度下都只有一个位置。 -- 一条声明覆盖三种切换，因为这三者本就是同一个差异：Chat ↔ Trajectory、Chat 内部 transcript 较短 ↔ transcript 可滚动，以及 hero ↔ 第一个可滚动轮次。 +- 卡片在三种切换下保持同一位置，由两种机制达成：预留让 Chat 的座位在自身各相位间保持同一宽度（transcript 较短 ↔ 可滚动、hero ↔ 第一个可滚动轮次），Chat ↔ Trajectory 的切换则由覆盖座位的补偿来对齐（[座位宽度补偿](2026-08-12-composer-overlay-seat-width-compensation.md)）。 - overlay 状态现在是一个滚动容器。今天其中没有任何内容会溢出；将来若有视图允许自身内容超出会话列，这个盒子会滚动而不是裁剪，那个视图就需要像 Trajectory 视图那样自带裁剪。 - 提交的 golden 记录了预留条带，因此样式表中 `::-webkit-scrollbar` 宽度的变化——决定这条预留有多宽的那个值——会在本场景中与在侧边栏场景中一样，以可评审的 diff 形式出现。 @@ -47,6 +43,6 @@ overlay 状态是一个没有任何东西会去滚动它的滚动容器：视图 `apps/web/tests/composer-tab-geometry.e2e.ts` 在两个标签页下测量输入卡片的矩形，分别取卡片处于宽度上限的视口与卡片随列收缩的视口，并断言这两个矩形是同一个矩形。只有真实引擎能报告这件事：jsdom 给每个元素的盒子尺寸都是零，也没有滚动条，因此单元测试只能断言那些声明存在，无法断言两种状态落在同一位置。出于同一原因，本次没有附带读取 CSS 文本的单元测试——它只会把声明复述一遍，并不会补上浏览器车道尚未确立的事实。 -该场景启动 chromium 时去掉了 Playwright 默认的 `--hide-scrollbars`，这一点是承重的：带上该参数时滚动条不占任何布局宽度，两个标签页在改动前后同样一致，文件中的每一处比较都会空洞地通过。实测：带上该参数时，改动前的层叠让两条预留带的宽度都是 0；去掉它则分别是 8 与 0。 +该场景启动 chromium 时去掉了 Playwright 默认的 `--hide-scrollbars`，这一点是承重的：带上该参数时滚动条不占任何布局宽度，因此两个标签页在有补偿与无补偿时同样一致，文件中的每一处比较都会空洞地通过。实测：带上该参数时两条预留带的宽度都是 0；去掉它则分别是 8 与 0。 -随后，改动前的层叠会被注入页面——滚动容器上 `scrollbar-gutter: auto`，overlay 分支上 `overflow: hidden`——并在其下测量同样的两个标签页，这正是把「卡片确实没动」与「标签页切换根本没到达布局」区分开的那一步。它把上报的症状复现为一个数字：每条边 4px，恰是 8px 带宽的一半。golden 把这份对照与修复后的状态并排记录，因此 fixture（测试前置数据）承载的是这次改动所消除的那个差值，而不仅仅是它的缺席。 +随后，未补偿的级联会被注入页面——通过 `!important` 把覆盖座位的 `right` 补偿降为 0，Chat 的预留保持不变——并在其下测量同样的两个标签页，这正是把「卡片确实没动」与「标签页切换根本没到达布局」区分开的那一步。它把上报的症状复现为一个数字：每条边 4px，恰是 8px 带宽的一半。golden 把这份对照与修复后的状态并排记录，因此 fixture（测试前置数据）承载的是这次改动所消除的那个差值，而不仅仅是它的缺席。 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml index fd88ecbc93..a1904a4b03 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md -2026-08-12-composer-overlay-seat-width-compensation.md: 85281ed4301046672ff4c02320b196a397e6d163 -2026-08-12-composer-overlay-seat-width-compensation.zh.md: 7bcf060e651a828068ef207caaebd01fa2ffd7ae +2026-08-12-composer-overlay-seat-width-compensation.md: 0ec4d1272ac1adab5b724dccf44f567e15cc3368 +2026-08-12-composer-overlay-seat-width-compensation.zh.md: 2f66771240fe62e15c481342d55a82dd09cfb864 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md index 85281ed430..0ec4d1272a 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md @@ -14,7 +14,7 @@ The trajectory table made that cost visible: its full-width row divider lines st The reservation now belongs to Chat alone. The overlay branch declares `scrollbar-gutter: auto`, so the view's content spans the full column; the overlay composer seat (absolutely positioned against the padding box) gives back the bar's width with `right: var(--dsh-scrollbar-width)`, so the input card still measures the same width as Chat's seat and does not move between tabs. -The compensation value is not a literal: ui-theme's scrollbar.css defines `--dsh-scrollbar-width` (8px on the WebKit path) beside the `::-webkit-scrollbar` rule it mirrors, and the seat reads that variable. A change to the sheet's bar width reaches the compensation in the same reviewable diff as the bar itself. +The compensation value is not a literal: ui-theme's scrollbar.css defines `--dsh-scrollbar-width` (8px on the WebKit path) beside the `::-webkit-scrollbar` rule it mirrors, and the seat reads that variable. The scrollbar-styles spec pairs the variable with the mirrored rule and with the compensation consumer, so a change to the sheet's bar width without the variable — or to the variable without the consumer — fails the gate, not just review. ## Alternatives considered @@ -24,12 +24,15 @@ The compensation value is not a literal: ui-theme's scrollbar.css defines `--dsh **Accept the 4px card shift.** Dropping the reservation without compensating the seat would move the input card on every tab switch, which is exactly the symptom the earlier note fixed. Rejected: the card position is a deliberate cross-tab invariant. +**Inset the overlay seat by the bar's width.** The [gutter-reservation note](2026-08-04-composer-tab-gutter-reservation.md) rejected exactly this, and this note adopts it; what changed is the rejection's premise. The number was the engine's, not ours — the WebKit path draws the sheet's 8px bar while the Firefox path draws whatever `scrollbar-width: thin` resolves to — so a hardcoded inset would line the two states up in Chromium and drift elsewhere. The overlay branch reserved an engine-resolved gutter of its own back then, so an inset had to match that width exactly. Today the overlay branch reserves nothing, so the compensation is the overlay side's only mechanism, and the literal half of the rejection is answered by making the 8px a variable that mirrors the `::-webkit-scrollbar` rule in the same diff. The Firefox half remains: Chat reserves the engine-resolved width while the compensation stays fixed, and the residual drift where the two differ is recorded as an accepted cost in Consequences. + ## Consequences - Chat keeps its reserved gutter and its stable card position; nothing changes on that tab. - Overlay views (trajectory) span the full column; the trajectory ledger's divider lines reach the pane edge. - The input card still holds one horizontal position across the Chat and Trajectory tabs, now by two mechanisms instead of one: Chat reserves, the overlay seat compensates. -- `--dsh-scrollbar-width` becomes a public ui-theme variable read outside ui-theme; the scrollbar-styles spec's indirection checks only scan `--dsh-scrollbar-thumb{,-hover}` rebinds, so the width variable is not covered by the pair gate. +- Chat reserves the engine-resolved width while the overlay seat compensates a fixed 8px. Where the two differ — the Firefox path resolves `scrollbar-width: thin` per platform, and the e2e runs only on Chromium — the card drifts by half the difference on tab switch. Accepted residual cost, recorded here rather than asserted away: no measurement of the Firefox thin width on the target platforms exists in this change. +- `--dsh-scrollbar-width` becomes a public ui-theme variable read outside ui-theme; the scrollbar-styles spec pairs it with the mirrored `::-webkit-scrollbar` width rule and with the compensation consumer, closing the indirection-gate gap the variable would otherwise leave. ## Testing diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md index 7bcf060e65..2f66771240 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md +++ b/.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.zh.md @@ -14,7 +14,7 @@ trajectory 表格让这个代价显形：整行分隔线在面板右边缘前 8p 预留现在只属于 Chat。覆盖分支声明 `scrollbar-gutter: auto`，视图内容占满整列；覆盖分支的 composer 座位（相对 padding box 绝对定位）用 `right: var(--dsh-scrollbar-width)` 让出滚动条宽度，使输入卡仍与 Chat 座位测得相同宽度，切换标签页时不移动。 -补偿值不是字面量：ui-theme 的 scrollbar.css 在它镜像的 `::-webkit-scrollbar` 规则旁定义 `--dsh-scrollbar-width`（WebKit 路径 8px），座位读取该变量。样式表滚动条宽度一变，补偿就会与滚动条本身出现在同一次可审阅的 diff 中。 +补偿值不是字面量：ui-theme 的 scrollbar.css 在它镜像的 `::-webkit-scrollbar` 规则旁定义 `--dsh-scrollbar-width`（WebKit 路径 8px），座位读取该变量。scrollbar-styles 规格把该变量与其镜像规则、以及补偿消费者配对检查，因此样式表滚动条宽度一变却不同步变量——或变量一变却不同步消费者——都会让门禁失败，而不只是评审时发现。 ## 备选方案 @@ -24,12 +24,15 @@ trajectory 表格让这个代价显形：整行分隔线在面板右边缘前 8p **接受 4px 卡片位移。** 去掉预留却不补偿座位，会在每次切换标签页时移动输入卡——正是前一份 note 修复的症状。已拒绝：卡片位置是刻意保持的跨标签页不变量。 +**把 overlay 座位按滚动条宽度内缩。** [滚动条槽预留 note](2026-08-04-composer-tab-gutter-reservation.md) 当初否决的正是这个方案，本 note 采纳了它；变的是否决的前提。这个数字属于引擎而不属于我们——WebKit 路径绘制样式表里的 8px 滚动条，Firefox 路径绘制 `scrollbar-width: thin` 解析出的宽度——因此硬编码的内缩会让两种状态在 Chromium 上对齐、在别处继续漂移。当初 overlay 分支自己预留的是引擎解析出的槽宽，内缩必须精确匹配那个宽度。如今 overlay 分支不预留任何槽位，补偿成为覆盖侧唯一的机制；否决的字面量那一半，通过把 8px 变成与 `::-webkit-scrollbar` 规则同处一个 diff 的变量来回应。Firefox 那一半仍然存在：Chat 预留引擎解析宽度，补偿保持固定 8px，两者不等之处的残余漂移作为接受的代价记录在后果中。 + ## 后果 - Chat 保留滚动条槽与稳定的卡片位置；该标签页无任何变化。 - 覆盖视图（trajectory）占满整列；trajectory 台账的分隔线到达面板右边缘。 - 输入卡在 Chat 与 Trajectory 标签页间仍保持同一水平位置，现在由两种机制而非一种达成：Chat 预留，覆盖座位补偿。 -- `--dsh-scrollbar-width` 成为 ui-theme 对外、且被 ui-theme 之外读取的变量；scrollbar-styles 规格的间接层检查只扫描 `--dsh-scrollbar-thumb{,-hover}` 重绑，宽度变量不受成对门禁覆盖。 +- Chat 预留引擎解析宽度，覆盖座位补偿固定的 8px。两者不等之处——Firefox 路径按平台解析 `scrollbar-width: thin`，而 e2e 只在 Chromium 上运行——卡片在切换标签页时会漂移半个差值。这是接受的残余代价，如实记录于此而不断言消除：本次改动并未提供目标平台 Firefox thin 宽度的实测。 +- `--dsh-scrollbar-width` 成为 ui-theme 对外、且被 ui-theme 之外读取的变量；scrollbar-styles 规格把它与镜像的 `::-webkit-scrollbar` 宽度规则、以及补偿消费者配对检查，补上了该变量本会留下的间接层门禁缺口。 ## 测试 diff --git a/apps/web/tests/composer-tab-geometry.e2e.ts b/apps/web/tests/composer-tab-geometry.e2e.ts index b491b1257c..0f7b01c7ff 100644 --- a/apps/web/tests/composer-tab-geometry.e2e.ts +++ b/apps/web/tests/composer-tab-geometry.e2e.ts @@ -28,13 +28,13 @@ // The browser is launched WITHOUT Playwright's default `--hide-scrollbars`, // which is load-bearing rather than incidental. Under that argument a scroll // container's bar consumes no layout width at all, so the two tabs agree with -// and without the reservation and every comparison below holds vacuously — -// measured: the unreserved cascade leaves both tabs' bands at 0 there, against -// 8 and 0 with the argument dropped. Dropping it is also the faithful +// and without the compensation and every comparison below holds vacuously — +// measured: the uncompensated cascade leaves both tabs' bands at 0 there, +// against 8 and 0 with the argument dropped. Dropping it is also the faithful // configuration: ui-theme's scrollbar.css gives `::-webkit-scrollbar` a width, // and a bar that occupies layout space is what the product actually draws. // -// The scenario runs that unreserved cascade in the page — the overlay seat's +// The scenario runs that uncompensated cascade in the page — the overlay seat's // `right` compensation dropped to 0 — and measures the same two tabs through // it, which is what keeps the equal rectangles above from being explained by a // tab switch that never reached the layout. It is the reported symptom as a @@ -227,7 +227,7 @@ async function compareTabs(page: Page): Promise { * @param page - the page under test. * @returns the comparison as the column lays out without the compensation. */ -async function compareTabsWithoutReservation(page: Page): Promise { +async function compareTabsWithoutCompensation(page: Page): Promise { await page.evaluate(({ id, css }) => { const style = document.createElement('style') style.id = id @@ -327,9 +327,13 @@ describe('web e2e: input card position across view tabs', () => { it('reserves the gutter in Chat and lets Trajectory own its width', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-composer-tab-geometry-band')) await setMeasuredViewport(page, WIDE_VIEWPORT, false) - // Vacuity guard, in two parts. A transcript that does not overflow gives - // Chat no scrollbar, and a hidden or overlaid bar gives it no width; either - // would make the tabs agree without the compensation doing anything. + // Vacuity guard. The scenario must be able to fail: on an engine that + // does not implement `scrollbar-gutter`, Chat reserves nothing and the + // overlay seat's fixed compensation stands alone, manufacturing an 8px + // deviation the equal-rectangle assertions would catch. `stable` reserves + // even without overflow, so a short transcript is not a vacuous case; the + // poll still pins the measurement to the overflowing state the product + // ships. await expect.poll(async () => (await measureTab(page)).scrolls, { timeout: 10_000 }).toBe(true) const comparison = await compareTabs(page) expect(comparison.chat.band).toBeGreaterThan(0) @@ -356,7 +360,7 @@ describe('web e2e: input card position across view tabs', () => { await setMeasuredViewport(page, WIDE_VIEWPORT, false) const comparison = await compareTabs(page) // The reported symptom as a number. At this viewport the card sits at its - // width cap, so the unreserved cascade's shift shows up as a centring + // width cap, so the uncompensated cascade's shift shows up as a centring // difference — half the band on each edge — rather than as a width change. expect(comparison.leftShift).toBe(0) expect(comparison.rightShift).toBe(0) @@ -387,11 +391,11 @@ describe('web e2e: input card position across view tabs', () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-composer-tab-geometry-control')) await setMeasuredViewport(page, WIDE_VIEWPORT, false) // The control: without it, equal rectangles could also mean the tab switch - // never reached the layout. Under the unreserved cascade the overlay seat + // never reached the layout. Under the uncompensated cascade the overlay seat // loses its `right` compensation and measures the full padding box, so the // card moves by half the band on each edge. Chat's own reservation is // untouched — that is the side that must not change. - const comparison = await compareTabsWithoutReservation(page) + const comparison = await compareTabsWithoutCompensation(page) expect(comparison.chat.gutter).toBe('stable') expect(comparison.chat.band).toBeGreaterThan(0) expect(comparison.trajectory.band).toBe(0) @@ -411,7 +415,7 @@ describe('web e2e: input card position across view tabs', () => { await setMeasuredViewport(page, NARROW_VIEWPORT, true) const narrow = await compareTabs(page) await setMeasuredViewport(page, WIDE_VIEWPORT, false) - const control = await compareTabsWithoutReservation(page) + const control = await compareTabsWithoutCompensation(page) await compareOrRefreshGolden(GEOMETRY_EXPECTED, renderGeometry(wide, narrow, control), MODE) expect(tripwire.pageErrors).toEqual([]) }, 60_000) diff --git a/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css b/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css index c6618fc624..20ade47c8a 100644 --- a/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css +++ b/packages/client/ui-conversation/src/client/skeleton/ConversationRoot.module.css @@ -297,8 +297,10 @@ by the bar's width; the overlay seat is against the padding box, so it must give back the same width to keep the input card in place across tabs. Reads ui-theme's --dsh-scrollbar-width, which mirrors the WebKit - bar's layout width; Firefox's thin bar resolves to the same 8px on the - platforms this app targets, so the compensation holds there too. */ + bar's layout width. Chat reserves the engine-resolved width, so on an + engine where the resolved width differs from this fixed 8px the card + drifts by half the difference — accepted residual risk, recorded in + ([decision](../../../../../../.agents/notes/implemented/bug-fix/2026-08-12-composer-overlay-seat-width-compensation.md)). */ right: var(--dsh-scrollbar-width); bottom: 0; left: 0; diff --git a/packages/client/ui-theme/README.i18n.yaml b/packages/client/ui-theme/README.i18n.yaml index e2bdc28ecb..00c049e8df 100644 --- a/packages/client/ui-theme/README.i18n.yaml +++ b/packages/client/ui-theme/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/client/ui-theme/README.md -README.md: df4d5e0370962bf6f2a8ac0a7b88d669225dc5c5 -README.zh.md: fb8e937979a5168803be78a49e1bc1e7eacd7a47 +README.md: c24f2ae5692fdd05134ce780d21569b87570d1c7 +README.zh.md: 518b8930027c88bd85139a8a7325cea1fd40b40c diff --git a/packages/client/ui-theme/README.md b/packages/client/ui-theme/README.md index df4d5e0370..c24f2ae569 100644 --- a/packages/client/ui-theme/README.md +++ b/packages/client/ui-theme/README.md @@ -8,7 +8,7 @@ When the host composition includes an HTTP server, the host half injects a synch `src/styles/` holds five sheets, all imported by the web shell's `base.css`: `base.css`, `design-platform.css`, `scrollbar.css`, `gradient-shadow-text.css`, and `shiki.css`. `scrollbar.css` is the sole consumer of the `--dsw-alias-scrollbar-*` tokens and must follow `design-platform.css`, which declares them. -Scrollbar rebinding contract: `scrollbar.css` binds `--dsh-scrollbar-thumb` and `--dsh-scrollbar-thumb-hover` on `body` to the l1 (base-surface) tokens, and both rendering paths read that pair. An elevated surface (menu, popover, dialog) sets `--dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l2)` and `--dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l2)` on its own container; one rebind retints whichever path the engine took. The pair's other legal target is `transparent`, which draws no thumb at all — [ui-sidebar](../ui-sidebar/README.md) rebinds its column that way while the pointer is elsewhere. A rebind to the l1 pair is not a rebind; it restates the base-surface default. +Scrollbar rebinding contract: `scrollbar.css` binds `--dsh-scrollbar-thumb` and `--dsh-scrollbar-thumb-hover` on `body` to the l1 (base-surface) tokens, and both rendering paths read that pair. An elevated surface (menu, popover, dialog) sets `--dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l2)` and `--dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l2)` on its own container; one rebind retints whichever path the engine took. The pair's other legal target is `transparent`, which draws no thumb at all — [ui-sidebar](../ui-sidebar/README.md) rebinds its column that way while the pointer is elsewhere. A rebind to the l1 pair is not a rebind; it restates the base-surface default. `--dsh-scrollbar-width` mirrors the WebKit bar's layout width for surfaces that align themselves beside a space-consuming bar — [ui-conversation](../ui-conversation/README.md) reads it for the overlay composer seat's `right` offset — and the scrollbar-styles spec pairs it with the mirrored rule and the consumer. The two paths are mutually exclusive by construction. `scrollbar-width`/`scrollbar-color` sit inside `@supports not selector(::-webkit-scrollbar)` because a non-`auto` value of either makes Chromium and Safari discard every `::-webkit-scrollbar*` rule for that element, `::-webkit-scrollbar-thumb:hover` included — declaring both unconditionally leaves `--dsh-scrollbar-thumb-hover` with no rendering anywhere. Firefox therefore takes the standard properties and WebKit-based engines take the pseudo-elements, so the hover token only ever renders through the pseudo-element path. Reasoning and the measured computed values: [the scrollbar Agent Note](../../../.agents/notes/implemented/bug-fix/2026-07-28-themed-scrollbars-and-reserved-gutter.md). diff --git a/packages/client/ui-theme/README.zh.md b/packages/client/ui-theme/README.zh.md index fb8e937979..518b893002 100644 --- a/packages/client/ui-theme/README.zh.md +++ b/packages/client/ui-theme/README.zh.md @@ -8,7 +8,7 @@ `src/styles/` 下有五张样式表，全部由 web 壳的 `base.css` 导入：`base.css`、`design-platform.css`、`scrollbar.css`、`gradient-shadow-text.css` 与 `shiki.css`。`scrollbar.css` 是 `--dsw-alias-scrollbar-*` token 的唯一消费方，必须排在声明这些 token 的 `design-platform.css` 之后。 -滚动条重新绑定约定：`scrollbar.css` 在 `body` 上把 `--dsh-scrollbar-thumb` 与 `--dsh-scrollbar-thumb-hover` 绑定到 l1（基础表面）token，两条渲染路径都读取这一组变量。高层级表面（菜单、浮层、对话框）在自己的容器上设置 `--dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l2)` 与 `--dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l2)`；一次重新绑定即可为引擎实际走的那条路径换色。这组变量的另一个合法目标是 `transparent`，即完全不绘制滑块——[ui-sidebar](../ui-sidebar/README.md) 在指针不在栏内时就这样重新绑定自己的列。绑回 l1 那组不算重新绑定，它只是重述基础表面的默认值。 +滚动条重新绑定约定：`scrollbar.css` 在 `body` 上把 `--dsh-scrollbar-thumb` 与 `--dsh-scrollbar-thumb-hover` 绑定到 l1（基础表面）token，两条渲染路径都读取这一组变量。高层级表面（菜单、浮层、对话框）在自己的容器上设置 `--dsh-scrollbar-thumb: var(--dsw-alias-scrollbar-bg-l2)` 与 `--dsh-scrollbar-thumb-hover: var(--dsw-alias-scrollbar-hover-l2)`；一次重新绑定即可为引擎实际走的那条路径换色。这组变量的另一个合法目标是 `transparent`，即完全不绘制滑块——[ui-sidebar](../ui-sidebar/README.md) 在指针不在栏内时就这样重新绑定自己的列。绑回 l1 那组不算重新绑定，它只是重述基础表面的默认值。`--dsh-scrollbar-width` 镜像 WebKit 滚动条的布局宽度，供需要与占布局宽度的滚动条对齐的表面使用——[ui-conversation](../ui-conversation/README.md) 用它作为覆盖 composer 座位 `right` 偏移——scrollbar-styles 规格把它与镜像规则及消费者配对检查。 两条路径在构造上互斥。`scrollbar-width`／`scrollbar-color` 写在 `@supports not selector(::-webkit-scrollbar)` 之内，因为这两个属性中的任一个只要取非 `auto` 值，Chromium 与 Safari 就会丢弃该元素上的全部 `::-webkit-scrollbar*` 规则，`::-webkit-scrollbar-thumb:hover` 也在其中——若无条件地同时声明，`--dsh-scrollbar-thumb-hover` 在任何引擎上都不会被渲染。因此 Firefox 走标准属性，WebKit 系引擎走伪元素，hover token 只经由伪元素这条路径渲染。相关原理与实测计算值见[滚动条 Agent Note](../../../.agents/notes/implemented/bug-fix/2026-07-28-themed-scrollbars-and-reserved-gutter.md)。 diff --git a/packages/client/ui-theme/tests/scrollbar-styles.client.spec.ts b/packages/client/ui-theme/tests/scrollbar-styles.client.spec.ts index b6ed3f0c90..e9234846eb 100644 --- a/packages/client/ui-theme/tests/scrollbar-styles.client.spec.ts +++ b/packages/client/ui-theme/tests/scrollbar-styles.client.spec.ts @@ -2,10 +2,11 @@ * Scrollbar stylesheet contract, asserted against the CSS text on disk: every * --dsw-alias-scrollbar-* token design-platform.css defines has a consumer, * scrollbar.css binds the base-surface pair through the rebindable - * indirection, and elevated surfaces rebind that indirection in complete - * pairs. The expected token set is scanned out of design-platform.css, so - * adding, renaming, or dropping a scrollbar token moves these assertions with - * it. + * indirection, the width variable mirrors the ::-webkit-scrollbar rule for + * consumers that align beside the bar, and elevated surfaces rebind that + * indirection in complete pairs. The expected token set is scanned out of + * design-platform.css, so adding, renaming, or dropping a scrollbar token + * moves these assertions with it. */ import { readdirSync, readFileSync } from 'node:fs' import { join } from 'node:path' @@ -341,6 +342,67 @@ describe('scrollbar.css base-surface binding', () => { }) }) +describe('scrollbar.css width variable', () => { + const WIDTH_VARIABLE = `${INDIRECTION_PREFIX}width` + + it('defines the width variable on body as a static length', () => { + // The overlay seat compensation reads a fixed number, not a second + // indirection: the mirror check below compares the WebKit rule against + // this value, so a var()-to-var() chain would compare one indirection to + // another instead of pinning the number. + const value = scrollbarRules + .filter(rule => rule.selectors.includes('body')) + .flatMap(rule => rule.declarations) + .findLast(([property]) => property === WIDTH_VARIABLE)?.[1] + expect(value, WIDTH_VARIABLE).toBeDefined() + expect(value, WIDTH_VARIABLE).toMatch(/^\d+(?:\.\d+)?px$/) + }) + + it('mirrors the ::-webkit-scrollbar width rule with the variable value', () => { + // The compensation stays aligned with the WebKit bar only while both read + // the same number. A change to one side without the other puts the overlay + // seat a band off from Chat on WebKit engines. + const variableValue = scrollbarRules + .filter(rule => rule.selectors.includes('body')) + .flatMap(rule => rule.declarations) + .findLast(([property]) => property === WIDTH_VARIABLE)?.[1] + const webkitWidth = scrollbarRules + .filter(rule => rule.selectors.includes('::-webkit-scrollbar')) + .flatMap(rule => rule.declarations) + .findLast(([property]) => property === 'width')?.[1] + expect(webkitWidth, '::-webkit-scrollbar width').toBeDefined() + expect(webkitWidth).toBe(variableValue) + }) + + it('every reader of the width variable outside ui-theme references a defined variable', () => { + // The consumer is ConversationRoot's overlay composer seat + // (`right: var(--dsh-scrollbar-width)`); a rename in scrollbar.css without + // the consumer, or a typo in the consumer, leaves the value + // guaranteed-invalid and the seat loses the band. The equal-rectangle e2e + // would catch it only on an engine that draws the bar, so the sheet + // contract states it here. + const defined = new Set( + scrollbarRules + .flatMap(rule => rule.declarations) + .filter(([property]) => property.startsWith(INDIRECTION_PREFIX)) + .map(([property]) => property), + ) + expect(defined).toContain(WIDTH_VARIABLE) + const readers: string[] = [] + for (const file of packageStylesheets()) { + if (file === fileURLToPath(new URL('scrollbar.css', STYLES))) continue + for (const rule of parseRules(readFileSync(file, 'utf8'))) { + for (const [property, value] of rule.declarations) { + for (const name of varReferences(value)) { + if (name === WIDTH_VARIABLE) readers.push(`${file} ${rule.selectors.join(', ')}: ${property}`) + } + } + } + } + expect(readers.length, 'compensation consumer').toBeGreaterThan(0) + }) +}) + describe('scrollbar.css selectors', () => { const scrollbarColorSelectors = scrollbarRules .filter(rule => rule.declarations.some(([property]) => property === 'scrollbar-color')) diff --git a/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx b/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx index ebd0e11a33..f98950ed70 100644 --- a/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx +++ b/packages/client/ui-workspace/src/client/WorkspaceBrowser.tsx @@ -4,10 +4,10 @@ * workspace), search, the grouped tree or flat list, and the workspace * dialogs. Wide state renders the full browser; rail state renders the two * region icons (search / add workspace) as 36px controls on the shell's shared - * rail entry path, each requesting expansion through the owner share. Adding is the header - * button's one action, so it raises the directory flow with no menu in - * between; the flow and its error dialog live in WorkspacePicker (same - * package — direct composition, no slot between them). + * rail entry path, each requesting expansion through the owner share. Adding + * is the header button's one action, so it raises the directory flow with no + * menu in between; the flow and its error dialog live in WorkspacePicker + * (same package — direct composition, no slot between them). */ import { useEffect, useMemo, useRef, useState } from 'react' import clsx from 'clsx' From 0233b8b26b99285e03ea2bb8f0b47ca7dd965f3d Mon Sep 17 00:00:00 2001 From: Tianyi Cui <53024+tianyicui@users.noreply.github.com> Date: Thu, 13 Aug 2026 01:38:38 +0800 Subject: [PATCH 04/41] docs: mark repository naming contract implemented --- ...6-07-07-tool-call-timeout-policy.i18n.yaml | 4 +- .../2026-07-07-tool-call-timeout-policy.md | 2 +- .../2026-07-07-tool-call-timeout-policy.zh.md | 2 +- .../2026-07-29-package-regrouping.i18n.yaml | 4 +- .../2026-07-29-package-regrouping.md | 4 +- .../2026-07-29-package-regrouping.zh.md | 4 +- ...aming-contract-and-rename-ledger.i18n.yaml | 6 ++ ...itory-naming-contract-and-rename-ledger.md | 86 +++++++++--------- ...ry-naming-contract-and-rename-ledger.zh.md | 88 +++++++++---------- ...26-06-11-vendor-cordis-as-source.i18n.yaml | 4 +- .../2026-06-11-vendor-cordis-as-source.md | 2 +- .../2026-06-11-vendor-cordis-as-source.zh.md | 2 +- ...-11-remove-sdk-project-toolchain.i18n.yaml | 4 +- ...2026-08-11-remove-sdk-project-toolchain.md | 2 +- ...6-08-11-remove-sdk-project-toolchain.zh.md | 2 +- ...aming-contract-and-rename-ledger.i18n.yaml | 6 -- 16 files changed, 107 insertions(+), 115 deletions(-) create mode 100644 .agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml rename .agents/notes/{proposed => implemented}/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md (87%) rename .agents/notes/{proposed => implemented}/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md (87%) delete mode 100644 .agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml diff --git a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.i18n.yaml index 384a870dd0..aad3aa26f0 100644 --- a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.md -2026-07-07-tool-call-timeout-policy.md: 20ca57cee4cd3ae51e7bfb8af1d2a1f8c7edd743 -2026-07-07-tool-call-timeout-policy.zh.md: 5b91c29f5492a36bbd023a892f0f2f8dd857ae53 +2026-07-07-tool-call-timeout-policy.md: ce414e541f8e374dd48e46d68cb00121e0004247 +2026-07-07-tool-call-timeout-policy.zh.md: 6fe3c979a3c4e7b7a6ed803a47af45ad32d52cce diff --git a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.md b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.md index 20ca57cee4..ce414e541f 100644 --- a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.md +++ b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.md @@ -16,7 +16,7 @@ Tool-call timeout is a policy that applies only to model-facing tool execution, - `@deepseek-ai/dsh-timeout` remains the shared library that owns `deadline()` and `timeoutOf()`. - `@deepseek-ai/dsh-tools` has an around-dispatch waterfall, `tools/execute`, between `tools/pre-execute` and `tools/post-execute`. -- The [repository naming contract](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md) names `@deepseek-ai/dsh-tool-call-timeout-policy` for the exact operation it limits. The plugin reads each tool's declared `timeoutMs` from the runtime and wraps a call that has one by deriving a new `exec.signal`. +- The [repository naming contract](2026-08-11-repository-naming-contract-and-rename-ledger.md) names `@deepseek-ai/dsh-tool-call-timeout-policy` for the exact operation it limits. The plugin reads each tool's declared `timeoutMs` from the runtime and wraps a call that has one by deriving a new `exec.signal`. The execution pipeline is: diff --git a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.zh.md b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.zh.md index 5b91c29f54..6fe3c979a3 100644 --- a/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-07-tool-call-timeout-policy.zh.md @@ -16,7 +16,7 @@ Status: implemented - `@deepseek-ai/dsh-timeout` 仍是拥有 `deadline()` 和 `timeoutOf()` 的共享库。 - `@deepseek-ai/dsh-tools` 在 `tools/pre-execute` 和 `tools/post-execute` 之间有一个环绕分发的 waterfall（瀑布式事件）`tools/execute`。 -- [仓库命名约定](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md)使用 `@deepseek-ai/dsh-tool-call-timeout-policy`，准确说明该策略所限制的操作。插件从 runtime 读取每个工具声明的 `timeoutMs`，并通过派生新的 `exec.signal` 来包装有此声明的调用。 +- [仓库命名约定](2026-08-11-repository-naming-contract-and-rename-ledger.md)使用 `@deepseek-ai/dsh-tool-call-timeout-policy`，准确说明该策略所限制的操作。插件从 runtime 读取每个工具声明的 `timeoutMs`，并通过派生新的 `exec.signal` 来包装有此声明的调用。 执行流水线如下： diff --git a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.i18n.yaml index 69bcf2af17..77bca2bb85 100644 --- a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-29-package-regrouping.md -2026-07-29-package-regrouping.md: 35042086503167d01edc1b3bfafdef92ba4781c5 -2026-07-29-package-regrouping.zh.md: 2dfd7ba85484008138f799ff60c406807a9ecf7f +2026-07-29-package-regrouping.md: 52a1fa28e4826daa7b0bb84a37be3c094fddb68c +2026-07-29-package-regrouping.zh.md: bef55544664f6e6daf391b33ef7224c00507a908 diff --git a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.md b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.md index 3504208650..52a1fa28e4 100644 --- a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.md +++ b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.md @@ -17,7 +17,7 @@ The north star for the regrouping: **closely clustered packages share a group.** ## Decision -Five regrouping decisions remain current; every other group keeps its prior boundary and contents (the dependency analysis confirmed the capability families — `shell/`, `terminal/`, `code-runtime/`, `sandbox/`, `subprocess/`, `fs/`, `lsp/`, `web/`, `skill/`, and the rest — were already drawn correctly). The original sixth decision collected the SDK project initializer, launcher tooling, and runtime JSON-RPC packages under `scaffold/`; [removing that unreleased toolchain](../simplification/2026-08-11-remove-sdk-project-toolchain.md) deleted the project tooling and moved the surviving runtime trio to `sdk/`. The later [repository naming contract](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md) owns the `shell/`, `terminal/`, and `extensions/` group names and the two package names that this decision deferred. +Five regrouping decisions remain current; every other group keeps its prior boundary and contents (the dependency analysis confirmed the capability families — `shell/`, `terminal/`, `code-runtime/`, `sandbox/`, `subprocess/`, `fs/`, `lsp/`, `web/`, `skill/`, and the rest — were already drawn correctly). The original sixth decision collected the SDK project initializer, launcher tooling, and runtime JSON-RPC packages under `scaffold/`; [removing that unreleased toolchain](../simplification/2026-08-11-remove-sdk-project-toolchain.md) deleted the project tooling and moved the surviving runtime trio to `sdk/`. The later [repository naming contract](2026-08-11-repository-naming-contract-and-rename-ledger.md) owns the `shell/`, `terminal/`, and `extensions/` group names and the two package names that this decision deferred. | Group | Members (folder names) | From | |---|---|---| @@ -37,7 +37,7 @@ Five regrouping decisions remain current; every other group keeps its prior boun ## Later naming decisions -The [repository naming contract](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md) resolves the two names that this move deliberately deferred. `@deepseek-ai/dsh-sdk-jsonrpc-server` names the JSON-RPC server half of the runtime SDK protocol. `@deepseek-ai/dsh-tool-call-timeout-policy` names the exact operation limited by the policy while keeping its `guard/timeout-policy/` home. Their release-blocking `FIXME` markers are removed with those renames. +The [repository naming contract](2026-08-11-repository-naming-contract-and-rename-ledger.md) resolves the two names that this move deliberately deferred. `@deepseek-ai/dsh-sdk-jsonrpc-server` names the JSON-RPC server half of the runtime SDK protocol. `@deepseek-ai/dsh-tool-call-timeout-policy` names the exact operation limited by the policy while keeping its `guard/timeout-policy/` home. Their release-blocking `FIXME` markers are removed with those renames. ## What the move touched diff --git a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.zh.md b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.zh.md index 2dfd7ba854..bef5554466 100644 --- a/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-29-package-regrouping.zh.md @@ -17,7 +17,7 @@ Status: implemented ## 决策 -五项重组决策仍然有效；其余每个组都保持先前的边界与内容不变（依赖分析确认各能力家族——`shell/`、`terminal/`、`code-runtime/`、`sandbox/`、`subprocess/`、`fs/`、`lsp/`、`web/`、`skill/` 及其余——本来就划得正确）。原本的第六项决策把 SDK 项目初始化器、启动器工具与运行时 JSON-RPC 包汇集到 `scaffold/`；[移除这套未发布工具链](../simplification/2026-08-11-remove-sdk-project-toolchain.md)的决策删除了项目工具，并将存留的运行时三包移到 `sdk/`。后续的[仓库命名约定](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md)负责 `shell/`、`terminal/` 与 `extensions/` 组名，以及本决策曾推迟的两个包名。 +五项重组决策仍然有效；其余每个组都保持先前的边界与内容不变（依赖分析确认各能力家族——`shell/`、`terminal/`、`code-runtime/`、`sandbox/`、`subprocess/`、`fs/`、`lsp/`、`web/`、`skill/` 及其余——本来就划得正确）。原本的第六项决策把 SDK 项目初始化器、启动器工具与运行时 JSON-RPC 包汇集到 `scaffold/`；[移除这套未发布工具链](../simplification/2026-08-11-remove-sdk-project-toolchain.md)的决策删除了项目工具，并将存留的运行时三包移到 `sdk/`。后续的[仓库命名约定](2026-08-11-repository-naming-contract-and-rename-ledger.md)负责 `shell/`、`terminal/` 与 `extensions/` 组名，以及本决策曾推迟的两个包名。 | 组 | 成员（目录名） | 来源 | |---|---|---| @@ -37,7 +37,7 @@ Status: implemented ## 后续命名决策 -[仓库命名约定](../../proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md)解决了本次移动有意推迟的两个名称。`@deepseek-ai/dsh-sdk-jsonrpc-server` 表示运行时 SDK 协议的 JSON-RPC 服务器一侧。`@deepseek-ai/dsh-tool-call-timeout-policy` 准确表示策略所限制的操作，同时保留其 `guard/timeout-policy/` 归属。这些重命名会一并移除阻塞发布的 `FIXME` 标记。 +[仓库命名约定](2026-08-11-repository-naming-contract-and-rename-ledger.md)解决了本次移动有意推迟的两个名称。`@deepseek-ai/dsh-sdk-jsonrpc-server` 表示运行时 SDK 协议的 JSON-RPC 服务器一侧。`@deepseek-ai/dsh-tool-call-timeout-policy` 准确表示策略所限制的操作，同时保留其 `guard/timeout-policy/` 归属。这些重命名会一并移除阻塞发布的 `FIXME` 标记。 ## 移动触及了什么 diff --git a/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml new file mode 100644 index 0000000000..3f854180a7 --- /dev/null +++ b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md +2026-08-11-repository-naming-contract-and-rename-ledger.md: 9484a65096ab6b566f12239e45b914ac71ac27fe +2026-08-11-repository-naming-contract-and-rename-ledger.zh.md: 8d4df0cea9cef42282eba7a504479ea7bcff4c90 diff --git a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md similarity index 87% rename from .agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md rename to .agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md index 440ab360e0..9484a65096 100644 --- a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md +++ b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md @@ -1,34 +1,34 @@ # Agent Note: Repository naming contract and pre-release rename ledger -Status: proposed +Status: implemented English | [中文](2026-08-11-repository-naming-contract-and-rename-ledger.zh.md) ## Problem -The repository has grown faster than some names. Several package names still describe the first implementation instead of the capability. Several classes use `Service` even when they are registries, runtimes, engines, controllers, or resolvers. Some `ctx` keys are singular for registries and plural for one engine. Some provider names say `local` when they use replaceable filesystem or subprocess services and can run in another execution world. +The repository had grown faster than some names. Several package names described the first implementation instead of the capability. Several classes used `Service` even when they were registries, runtimes, engines, controllers, or resolvers. Some `ctx` keys were singular for registries and plural for one engine. Some provider names said `local` even though they used replaceable filesystem or subprocess services and could run in another execution world. These names are not harmless. A name tells a contributor where a responsibility starts and stops. `Store` suggests data access. `Registry` suggests registrations and lookup. `Runtime` suggests live execution and lifecycle. When one word is used for all three, callers cannot tell which object owns policy, work, or state without reading the implementation. -The repository also uses `SDK` in two meanings. The supported Python and TypeScript clients use the JSON-RPC SDK protocol. The project as a whole is DeepSeek Harness, not an SDK project. The removed SDK project toolchain made the broad meaning obsolete, but current prose and names still preserve parts of it. +The repository also used `SDK` in two meanings. The supported Python and TypeScript clients use the JSON-RPC SDK protocol. The project as a whole is DeepSeek Harness, not an SDK project. The removed SDK project toolchain made the broad meaning obsolete, but prose and names preserved parts of it. -This is the last pre-release point at which repository-wide renames are cheap. Keeping weak names would turn accidental vocabulary into a compatibility contract. +The last pre-release window made repository-wide renames cheap. Keeping weak names would have turned accidental vocabulary into a compatibility contract. -## Proposal +## Decision -Apply the rename ledger in this note before the first tagged release. Change names only. Do not change package responsibilities, service boundaries, behavior, defaults, or data models in a rename change. If a name exposes a bad boundary, write a separate proposed Agent Note for that boundary change. +The repository uses every current name in this ledger. This decision changes names only; package responsibilities, service boundaries, behavior, defaults, and data models stay the same. A name that exposes a bad boundary requires a separate proposed Agent Note for that boundary change. -Each accepted family rename is atomic. Update its directory, npm package name, imports, Cordis plugin name, `ctx` key, public types, directly coupled event or tool identifiers, configuration, tests, fixtures, examples, generated references, and current documentation where the ledger names those surfaces. Do not leave an alias, compatibility package, duplicate service key, dual event name, or fallback parser. The repository is pre-release and rejects the old name. +Each renamed family has one vocabulary. Its directory, npm package name, imports, Cordis plugin name, `ctx` key, public types, directly coupled event or tool identifiers, configuration, tests, fixtures, examples, generated references, and current documentation use the current name where the ledger names those interfaces. No alias, compatibility package, duplicate service key, dual event name, or fallback parser remains. The repository rejects the old name. -Implementation can use more than one PR to keep review practical. One PR must not leave one family with two public vocabularies. The final state must satisfy the complete ledger. +No family exposes two public vocabularies. ### Use `SDK` for one thing -`SDK` means the JSON-RPC-based client/server protocol used by the supported Python and TypeScript SDKs. Keep `@deepseek-ai/dsh-sdk-client`, `@deepseek-ai/dsh-sdk-protocol`, and the wire identity `deepseek-harness-sdk-runtime`. Rename the JSON-RPC server into that family. Do not call DeepSeek Harness itself an SDK, and do not restore the removed project generator, launcher, helper, or launcher telemetry packages. +`SDK` means the JSON-RPC-based client/server protocol used by the supported Python and TypeScript SDKs. The repository keeps `@deepseek-ai/dsh-sdk-client`, `@deepseek-ai/dsh-sdk-protocol`, and the wire identity `deepseek-harness-sdk-runtime`; the JSON-RPC server belongs to the same family. DeepSeek Harness itself is not an SDK, and the removed project generator, launcher, helper, and launcher telemetry packages stay absent. -If accepted, this proposal will partially supersede three active decisions. It replaces the retained `bash/`, `pty/`, and `self-modification/` group names and both deferred package targets in the [package-regrouping decision](../../implemented/architecture/2026-07-29-package-regrouping.md). It replaces only the repository-wide SDK claim in the [SDK project toolchain removal](../../implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md), which remains the owner of the deletion and the surviving runtime SDK. It replaces only the package-name rationale in the [tool-call timeout policy](../../implemented/architecture/2026-07-07-tool-call-timeout-policy.md); the timeout mechanism and its `guard/timeout-policy/` home remain unchanged. +This decision partially supersedes three active decisions. It replaces the retained `bash/`, `pty/`, and `self-modification/` group names and both deferred package targets in the [package-regrouping decision](2026-07-29-package-regrouping.md). It replaces only the repository-wide SDK claim in the [SDK project toolchain removal](../simplification/2026-08-11-remove-sdk-project-toolchain.md), which remains the owner of the deletion and the surviving runtime SDK. It replaces only the package-name rationale in the [tool-call timeout policy](2026-07-07-tool-call-timeout-policy.md); the timeout mechanism and its `guard/timeout-policy/` home remain unchanged. -Other implemented notes that use a renamed package, path, or type are not superseded when their boundary and rationale remain intact. The implementation updates those factual names. It adds reciprocal links only where this proposal changes a decision; a proposal does not make current implemented notes describe unshipped names. +Other implemented notes that use a renamed package, path, or type are not superseded when their boundary and rationale remain intact. They carry the current factual names. The three partially superseded decisions link back to this decision. ### Name the role that exists @@ -68,7 +68,7 @@ The practical tests are direct. If callers mainly call `register()` and receive Keep a protocol or dialect name when it distinguishes implementations. Keep `Bash`, `Pwsh`, `JSON-RPC`, `SQLite`, `JSONL`, `OpenTelemetry`, `Claude Code`, and `E2B` where the implementation depends on that mechanism. Do not put `LLM` into a compaction backend name when every current backend already uses the LLM seam; `basic` is the honest neutral name until a more specific algorithm name exists. -Do not invent a `process sandbox` concept. The current `sandbox` family already names its product responsibility, and the accepted sweep does not change that boundary. +Do not invent a `process sandbox` concept. The current `sandbox` family already names its product responsibility. This decision does not change that responsibility. Use title case for initialisms inside PascalCase identifiers: `Ui`, `Llm`, `JsonRpc`, and `ApiProxy`. Use the conventional uppercase form in prose and package names where applicable: UI, LLM, JSON-RPC, and API. `Typert` is the exact product spelling in identifiers and prose; do not write `TypeRT`, `TypeRt`, or `Typert` with another internal split. @@ -76,15 +76,15 @@ Do not remove an intentional vendor qualifier to avoid repetition. `dsh-subagent ### Put the rule in project documentation -When the rename implementation lands, add the full role-word contract to the paired package-creation guide at `docs/cookbook/adding-a-package.md`. Add a short linked rule to `packages/AGENTS.md`. Update the terminology table and the root project description so `SDK` and `Typert` have one meaning. The Agent Note owns the rationale and rejected alternatives; the guide owns the rule contributors follow. +The paired package-creation guide at `docs/cookbook/adding-a-package.md` contains the full role-word contract, and `packages/AGENTS.md` links to it. The terminology table and root project description give `SDK` and `Typert` one meaning. This Agent Note owns the rationale and rejected alternatives; the guide owns the rule contributors follow. ## Rename ledger -The tables list public and repository-wide names. Private local variables follow the new vocabulary when they refer to the same role. A retained low-level or product-visible name is stated where a broad replacement would be wrong. +The tables record public and repository-wide renames. The `Current` column holds the current name. Private local variables use the same vocabulary when they refer to the same role. A retained low-level or product-visible name is stated where a broad replacement would be wrong. ### Runtime SDK -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-jsonrpc` | `@deepseek-ai/dsh-sdk-jsonrpc-server` | It is the server half of the SDK protocol. `jsonrpc` alone names an encoding; `sdk-jsonrpc-server` gives the family, mechanism, and role. | | `HarnessSdkServer` | `HarnessSdkJsonRpcServer` | The class is one JSON-RPC server implementation, not every possible SDK server. | @@ -93,7 +93,7 @@ Keep `@deepseek-ai/dsh-sdk-client`, `@deepseek-ai/dsh-sdk-protocol`, and `deepse ### Shell and terminal -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `packages/bash/` | `packages/shell/` | The group contains the dialect-neutral executor seam, Bash and PowerShell implementations, environment support, and shell tools. | | `@deepseek-ai/dsh-bash`, `ctx.bash` | `@deepseek-ai/dsh-shell`, `ctx.shell` | PowerShell already implements this seam. The capability is shell execution, not Bash. | @@ -113,7 +113,7 @@ Keep the Bash- and PowerShell-specific leaf packages, plugin ids, types, and too ### Language server and jobs -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-lsp-local` | `@deepseek-ai/dsh-lsp-stdio` | The provider speaks LSP over stdio through replaceable filesystem and subprocess services. It is not necessarily local. | | `packages/tasks/` | `packages/jobs/` | The family owns detached tool jobs. `jobs` is short and avoids collision with user task or todo concepts. | @@ -131,7 +131,7 @@ Keep the base LSP package, `ctx.lsp`, LSP protocol types, and the LSP tool. The ### Input triggers, tool presentation, permission presets, and user questions -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-client-ui-slash`, `ui-slash/` | `@deepseek-ai/dsh-client-ui-input-trigger`, `ui-input-trigger/` | The client handles `/`, `@`, keyboard arbitration, candidate menus, and programmatic launch. It is not only slash commands. | | `ctx.slash`, `SlashService`, `SlashController`, `SlashSource` | `ctx.inputTriggers`, `InputTriggerService`, `InputTriggerController`, `InputTriggerSource` | The names cover every supported trigger and keep the existing service, controller, and source roles. Coupled locale and public type names follow `InputTrigger`. | @@ -144,11 +144,11 @@ Keep the base LSP package, `ctx.lsp`, LSP protocol types, and the LSP tool. The | `ctx.userInteraction`, `UserInteractionService`, `UserInteractionProvider`, `UserInteractionError` | `ctx.userQuestions`, `UserQuestionService`, `UserQuestionProvider`, `UserQuestionError` | These names state the one supported interaction form. Keep `AskUserQuestion*`, the `ask_user_question` tool, and `@deepseek-ai/dsh-tool-ask-user`. | | `docs/subsystems/user-interaction.md` | `docs/subsystems/user-questions.md` | The page documents questions and answers only. | -Keep `/permission`, the `permissions` projection, the `permission` settings namespace, and `permission/preset`; they are accurate product or durable vocabulary. Keep the full `PermissionPresetSettingsController` name. Dropping `Preset` would remove the word that limits its authority. Plan a separate proposal to remove the `both` tool-presentation mode; this rename does not remove behavior. +Keep `/permission`, the `permissions` projection, the `permission` settings namespace, and `permission/preset`; they are accurate product or durable vocabulary. Keep the full `PermissionPresetSettingsController` name. Dropping `Preset` would remove the word that limits its authority. Removal of the `both` tool-presentation mode remains deferred to a separate proposal; this rename does not remove behavior. ### Typert, API gateway, and tools -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `packages/typert/type-meta/`, `@deepseek-ai/dsh-type-meta` | `typert/protocol/`, `@deepseek-ai/dsh-typert-protocol` | The package owns the Typert Remote protocol, decorators, bindings, codecs, lookups, and context contracts. It is not generic type metadata. | | `GatewayService` in the protocol package | `TypertRemoteService` | The base class marks a same-process service for Remote export. It is not the API gateway. | @@ -162,7 +162,7 @@ Keep `@deepseek-ai/dsh-tools` and `ctx.tools`. Keep `@deepseek-ai/dsh-api-gatewa ### Workspace instructions, telemetry, identity, and launch environment -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | Host `ctx.workspace` | Host `ctx.workspaceRegistry` | `WorkspaceRegistry` owns multiple workspaces, but Client `ctx.workspaces` already has an incompatible type. Both declarations merge into the same Cordis `Context` interface at compile time even though their runtime contexts are separate. The role suffix states the host service and avoids that collision. Keep `@deepseek-ai/dsh-workspace`, `WorkspaceRegistry`, `Workspace`, and `workspace.*` wire names. | | `@deepseek-ai/dsh-workspace-context`, `context/workspace-context/` | `@deepseek-ai/dsh-agent-instructions`, `context/agent-instructions/` | The package loads hierarchical `AGENTS.md` and `CLAUDE.md` files for the agent. It is not general workspace context. | @@ -181,7 +181,7 @@ Keep `@deepseek-ai/dsh-tools` and `ctx.tools`. Keep `@deepseek-ai/dsh-api-gatewa ### Schedule, workflow, goals, and compaction -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-tool-schedule`, `schedule/tool-schedule/`, plugin `tool-schedule` | `@deepseek-ai/dsh-schedule`, `schedule/schedule/`, plugin `schedule` | The package owns the durable Schedule domain, persistence barriers, management tools, timers, follow-ups, and runtime lifecycle. `tool-` describes only one part. | | `ScheduleOwner` | `ScheduleRuntime` | The per-agent object runs live timers, durable projection, dispatch, idle waits, and disposal. `Owner` does not state that execution role. Coupled private `owner*` names follow `runtime*`. | @@ -194,11 +194,11 @@ Keep `@deepseek-ai/dsh-tools` and `ctx.tools`. Keep `@deepseek-ai/dsh-api-gatewa | `@deepseek-ai/dsh-compact-basic`, `BasicCompactService`, public `BasicCompact*` | `@deepseek-ai/dsh-compaction-basic`, `BasicCompactionEngine`, corresponding `BasicCompaction*` | `basic` is plain but honest. `compaction-llm` adds no information because LLM use is already part of the current implementation family. | | `@deepseek-ai/dsh-compact-tool-result-prune`, `ToolResultPruneService`, `ctx.toolResultPrune` | `@deepseek-ai/dsh-compaction-tool-result-pruner`, `ToolResultPruner`, `ctx.toolResultPruner` | The plugin is an actor that prunes tool results. The noun `pruner` names that role. | -Keep `/compact`, the command package, and the rejected decision to preserve separate compaction definition and provider packages. The rename changes vocabulary, not that package boundary. +Keep `/compact`, the command package, and the separate compaction definition and provider packages. Merging those packages remains rejected. The rename changes vocabulary, not that package boundary. ### Settings, credentials, client modules, and small core roles -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | Abstract `Settings` | `SettingsProvider` | The class supplies settings through a replaceable capability. Keep the package, key, and events. | | `@deepseek-ai/dsh-settings-local`, `SettingsLocal` | `@deepseek-ai/dsh-settings-file`, `FileSettingsProvider` | The implementation is file-backed through the filesystem seam. `file` states the mechanism; `local` does not. | @@ -216,7 +216,7 @@ Keep `/compact`, the command package, and the rejected decision to preserve sepa ### Host web server, session data, and code execution -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `HttpServerService`, `ctx.httpServer` | `WebServer`, `ctx.webServer` | The server owns HTTP routes and WebSocket upgrade routes. `Web` leaves room for both; `Http` is too narrow here. Keep `packages/host/webserver`, `@deepseek-ai/dsh-host-webserver`, `WebRoute`, and `WebUpgradeRoute`. | | Documentation subsystem label `http-server` | `web-server` | The subsystem must use the same scope as the service. | @@ -233,7 +233,7 @@ Keep the complete session projection family and `SessionProjection*` vocabulary. ### Filesystem, skill, subagent, and web providers -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-fs-policy` | `@deepseek-ai/dsh-fs-observation-policy` | The package defines which filesystem observations authorize later effects. It is not the complete filesystem or sandbox policy. | | `FsPolicyExec` | `FsObservationActor` | The value names the actor whose observations and effects the policy relates. It does not execute the policy itself. | @@ -251,7 +251,7 @@ Keep `@deepseek-ai/dsh-subagent-dsh-sdk`, its provider id `dsh-sdk`, external AC ### Hooks, guards, plan mode, extensions, and diagnostics -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `@deepseek-ai/dsh-hooks-claude`, `ClaudeHookConfig`, `parseClaudeConfig`, dialect `claude` | `@deepseek-ai/dsh-hooks-claude-code`, `ClaudeCodeHookConfig`, `parseClaudeCodeConfig`, dialect `claude-code` | The hook bridge targets Claude Code, not every Anthropic or Claude product. | | `@deepseek-ai/dsh-repeat-tool-guard`, plugin/source `repeat-tool-guard` | `@deepseek-ai/dsh-repeat-tool-reminder`, plugin/source `repeat-tool-reminder` | The plugin adds a model reminder. It does not block or enforce a guard decision. | @@ -263,11 +263,11 @@ Keep `@deepseek-ai/dsh-subagent-dsh-sdk`, its provider id `dsh-sdk`, external AC | `InvariantService` | `InvariantRegistry` | The object owns registered invariant checks. Keep `@deepseek-ai/dsh-invariants` and `ctx.invariants`. | | `packages/client/test-runtime/` | `packages/test-support/client-runtime/` | The package is client test infrastructure. Keep its npm name if it already states that contract. | -Keep MCP, Todo, and the Plan Mode package, key, events, and tool names. The accepted change concerns the controller class, not the product feature. +Keep MCP, Todo, and the Plan Mode package, key, events, and tool names. This decision renames the controller class, not the product feature. ### Utilities, E2B, host, bundles, examples, and applications -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `util/paths/`, `@deepseek-ai/dsh-paths` | `util/home-paths/`, `@deepseek-ai/dsh-home-paths` | The helpers resolve paths under the Harness home. They are not a general path library. Keep the individual function names when they already state the returned path. | | `util/retention/`, `@deepseek-ai/dsh-retention` | `util/output-retention/`, `@deepseek-ai/dsh-output-retention` | The policy retains command and tool output. It is not a general data-retention framework. | @@ -281,7 +281,7 @@ Keep atomic-write, brand, native-command, timeout utility, directory-picker, `ds ### Client runtime and UI -| Current | Proposed | Reason | +| Former | Current | Reason | |---|---|---| | `SlotsService` | `SlotRegistry` | The object owns named slot declarations and registrations. | | `SessionsService` | `SessionRuntime` | The object owns live client session coordination, not a passive session list. | @@ -365,26 +365,22 @@ The following debated names stay unchanged because the current scope is accurate **Keep aliases for old names.** Rejected. No released consumer needs them. Aliases would preserve two vocabularies and make the first release carry a migration that never had a user. -## Acceptance criteria +## Verification -- Every mapping in the ledger is applied, or this proposal is amended before implementation to explain a changed decision. -- Each family has one public vocabulary. No compatibility package, re-export alias, duplicate `ctx` key within one Cordis context, dual plugin id, dual event id, old tool alias, or fallback parser remains. -- The change is rename-only. Runtime behavior, package boundaries, defaults, policy, durable semantics, and model behavior stay equivalent except where an identifier is itself visible. -- Package directories, npm names, imports, manifests, TypeScript references and paths, Cordis config, plugin ids, service keys, events, tools, RPC names, persisted names named by the ledger, fixtures, snapshots, examples, generated catalogs, and current prose agree with the new vocabulary. -- Current implemented Agent Notes are updated with factual name and path changes when the implementation lands. The package-regrouping note records the new group inventory and package targets, the SDK removal note does not call the repository an SDK, and the timeout-policy note records the new package-name rationale. Notes whose architectural decision remains current are not rewritten into new decisions. +- Every mapping in the ledger appears in the repository. Each family has one public vocabulary; no compatibility package, re-export alias, duplicate `ctx` key within one Cordis context, dual plugin id, dual event id, old tool alias, or fallback parser remains. +- Runtime behavior, package boundaries, defaults, policy, durable semantics, and model behavior remain equivalent except where an identifier is itself visible. +- Package directories, npm names, imports, manifests, TypeScript references and paths, Cordis config, plugin ids, service keys, events, tools, RPC names, persisted names named by the ledger, fixtures, snapshots, examples, generated catalogs, and current prose use the current vocabulary. +- Current implemented Agent Notes carry the factual name and path changes. The package-regrouping note records the group inventory and package targets, the SDK removal note reserves `SDK` for the runtime protocol, and the timeout-policy note records the package-name rationale. - The paired package-creation guide contains the role-word contract, `packages/AGENTS.md` links to it, the terminology table records the chosen words and `Typert` spelling, and root project prose calls the product DeepSeek Harness rather than DeepSeek Harness SDK. - The removed SDK project toolchain stays absent. -- Focused tests cover each renamed family; source-plane typecheck, build, package hygiene, generated-reference gates, snapshots affected by visible identifiers, translation pairing, `doc-sync`, and lint pass on the complete implementation. -- The proposed note moves to `implemented/` only after the full ledger and documentation contract are true. Its implementation form describes the final state, not a migration checklist. +- `pnpm run check:ci` covers source-plane typecheck, build, package hygiene, generated-reference checks, affected snapshots, translation pairing, `doc-sync`, and lint. Release-shaped Python runtime smokes and required CI cover packaged-runtime and platform paths. -## Risks +## Consequences -The sweep changes many imports, paths, configuration strings, generated references, and model-visible names. A missed string can compile but fail at load or replay time. Implementation must use both type-directed edits and exact old-name searches across source, config, tests, fixtures, docs, and generated inputs. +The repository has one vocabulary for each renamed family. Old on-disk names, wire values, tool names, and configuration entries named in the ledger do not work. An owning parser that can identify stale configuration fails clearly instead of accepting both forms. -Concurrent work will conflict with moved paths and renamed symbols. This is temporary pre-release cost. Splitting the implementation by coherent family can reduce review and merge conflicts, but each family must remain atomic. +Some names are longer. The extra word is intentional when it prevents a false claim about authority or mechanism. A long name remains wrong when every word does not constrain the role. -Some names will become longer. The extra word is intentional when it prevents a false claim about authority or mechanism. Long names are still a failure when every word does not constrain the role. +Role suffixes do not replace inspection of behavior. The package guide keeps the direct tests from this decision: inspect what callers do, what lifetime the object owns, and what failure or policy it controls. -The role words can be applied mechanically if reviewers check suffixes without checking behavior. The guide must keep the direct tests in this note: inspect what callers do, what lifetime the object owns, and what failure or policy it controls. - -Old on-disk names, wire values, tool names, and configuration entries named in the ledger will stop working. This is accepted before release. The implementation must fail clearly on stale configuration where the owning parser can identify it; it must not silently accept both forms. +Branches based on the former paths and symbols require conflict repair. This is a one-time pre-release cost of removing the old vocabulary without compatibility aliases. diff --git a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md similarity index 87% rename from .agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md rename to .agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md index e5f8d37bde..8d4df0cea9 100644 --- a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md +++ b/.agents/notes/implemented/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.zh.md @@ -1,34 +1,34 @@ # Agent Note: 仓库命名约定与预发布重命名清单 -Status: proposed +Status: implemented [English](2026-08-11-repository-naming-contract-and-rename-ledger.md) | 中文 ## 问题 -仓库的发展速度超过了部分名称的演进速度。一些包名仍在描述最初的实现，而非所提供的能力。若干类即使实际承担注册表、运行时、引擎、控制器或解析器的职责，名称仍使用 `Service`。部分 `ctx` 键以单数命名注册表，却以复数命名单个引擎。还有一些提供方明明通过可替换的文件系统或子进程服务工作，可以在另一执行环境中运行，名称却使用 `local`。 +仓库的发展速度曾超过部分名称的演进速度。一些包名描述的是最初的实现，而非所提供的能力。若干类即使实际承担注册表、运行时、引擎、控制器或解析器的职责，名称仍使用 `Service`。部分 `ctx` 键以单数命名注册表，却以复数命名单个引擎。还有一些提供方明明通过可替换的文件系统或子进程服务工作，可以在另一执行环境中运行，名称却使用 `local`。 这些名称并非无关紧要。名称会告诉贡献者一项职责从哪里开始、到哪里结束。`Store` 表示数据访问。`Registry` 表示注册与查找。`Runtime` 表示实时执行和生命周期。如果同一个词同时表示这三者，调用方就必须阅读实现，才能判断哪个对象拥有策略、工作或状态。 -仓库还在两种含义下使用 `SDK`。受支持的 Python 和 TypeScript 客户端使用 JSON-RPC SDK 协议。项目整体是 DeepSeek Harness，而不是 SDK 项目。已移除的 SDK 项目工具链使宽泛的含义失去依据，但现有文案和名称仍保留了部分旧用法。 +仓库还曾在两种含义下使用 `SDK`。受支持的 Python 和 TypeScript 客户端使用 JSON-RPC SDK 协议。项目整体是 DeepSeek Harness，而不是 SDK 项目。已移除的 SDK 项目工具链使宽泛的含义失去依据，但文案和名称仍保留了部分旧用法。 -这是首次发布带标签版本之前，最后一个能够低成本完成仓库级重命名的时点。保留含义不清的名称，会让偶然形成的词汇变成兼容性约定。 +首次发布带标签版本之前的最后一个窗口，使仓库级重命名仍可低成本完成。若继续保留含义不清的名称，偶然形成的词汇就会变成兼容性约定。 -## 提案 +## 决策 -在首次发布带标签版本之前，应用本说明中的重命名清单。只更改名称，不得在重命名变更中改变包职责、服务边界、行为、默认值或数据模型。如果某个名称暴露出不合理的边界，应另写一份 proposed Agent Note，专门提议边界变更。 +仓库使用本清单中的全部当前名称。本决策只更改名称；包职责、服务边界、行为、默认值和数据模型保持不变。如果某个名称暴露出不合理的边界，需要另写一份 proposed Agent Note，专门提议边界变更。 -每组获准的系列重命名都必须原子完成。清单点名某一表面时，应一并更新其目录、NPM 包名、导入、Cordis 插件名称、`ctx` 键、公开类型、直接耦合的事件或工具标识符、配置、测试、fixture（测试前置数据）、示例、生成的参考资料以及当前文档。不得留下别名、兼容包、重复的服务键、双重事件名称或回退解析器。仓库尚未发布，旧名称应被拒绝。 +每个已重命名系列只有一套词汇。清单点名某一接口时，其目录、NPM 包名、导入、Cordis 插件名称、`ctx` 键、公开类型、直接耦合的事件或工具标识符、配置、测试、fixture（测试前置数据）、示例、生成的参考资料以及当前文档都使用当前名称。仓库不保留别名、兼容包、重复的服务键、双重事件名称或回退解析器，并拒绝旧名称。 -实现可以拆分为多个 PR（Pull Request），以保持评审可行。任何一个 PR 都不得让同一系列同时存在两套公开词汇。最终状态必须满足完整清单。 +同一系列不会公开两套词汇。 ### `SDK` 只表示一件事 -`SDK` 表示受支持的 Python 和 TypeScript SDK 所使用、基于 JSON-RPC 的客户端／服务器协议。保留 `@deepseek-ai/dsh-sdk-client`、`@deepseek-ai/dsh-sdk-protocol` 和协议身份 `deepseek-harness-sdk-runtime`。将 JSON-RPC 服务器重命名并纳入该系列。不得将 DeepSeek Harness 本身称为 SDK，也不得恢复已移除的项目生成器、启动器、辅助工具或启动器遥测包。 +`SDK` 表示受支持的 Python 和 TypeScript SDK 所使用、基于 JSON-RPC 的客户端／服务器协议。仓库保留 `@deepseek-ai/dsh-sdk-client`、`@deepseek-ai/dsh-sdk-protocol` 和协议身份 `deepseek-harness-sdk-runtime`；JSON-RPC 服务器属于同一系列。DeepSeek Harness 本身不是 SDK，已移除的项目生成器、启动器、辅助工具和启动器遥测包继续保持不存在。 -如果本提案获准，它将部分取代三项现行决策。它会替换[包重新分组决策](../../implemented/architecture/2026-07-29-package-regrouping.md)中保留的 `bash/`、`pty/` 和 `self-modification/` 组名，以及两项暂定包名。它只替换[移除 SDK 项目工具链](../../implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md)中将整个仓库称为 SDK 的说法；后者仍负责说明删除范围和保留的运行时 SDK。它只替换[工具调用超时策略](../../implemented/architecture/2026-07-07-tool-call-timeout-policy.md)中的包名理由；超时机制及其 `guard/timeout-policy/` 归属保持不变。 +本决策部分取代三项现行决策。它替换[包重新分组决策](2026-07-29-package-regrouping.md)中保留的 `bash/`、`pty/` 和 `self-modification/` 组名，以及两项暂定包名。它只替换[移除 SDK 项目工具链](../simplification/2026-08-11-remove-sdk-project-toolchain.md)中将整个仓库称为 SDK 的说法；后者仍负责说明删除范围和保留的运行时 SDK。它只替换[工具调用超时策略](2026-07-07-tool-call-timeout-policy.md)中的包名理由；超时机制及其 `guard/timeout-policy/` 归属保持不变。 -如果其他已实现说明中的包、路径或类型被重命名，而其边界和理由保持不变，则本提案不会取代这些说明。实现阶段只更新其中的事实名称。只有本提案改变既有决策时才添加双向链接；尚未获准的提案不会让现行的已实现说明提前描述未交付名称。 +如果其他已实现说明中的包、路径或类型被重命名，而其边界和理由保持不变，则本决策不会取代这些说明。这些说明使用已实现的事实名称。三项被部分取代的决策都链接回本决策。 ### 按实际职责命名 @@ -68,7 +68,7 @@ Status: proposed 如果协议或方言名称能够区分实现，就应保留。实现依赖相应机制时，保留 `Bash`、`Pwsh`、`JSON-RPC`、`SQLite`、`JSONL`、`OpenTelemetry`、`Claude Code` 和 `E2B`。每个当前后端都已使用 LLM（大语言模型）seam 时，不要在压缩后端名称中加入 `LLM`；在出现更具体的算法名称之前，`basic` 才是如实且中性的名称。 -不得虚构 `process sandbox` 概念。当前 `sandbox` 系列已经准确命名其产品职责，获准的整体重命名不会改变该边界。 +不得虚构 `process sandbox` 概念。当前 `sandbox` 系列已经准确命名其产品职责。本决策不改变该职责。 PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui`、`Llm`、`JsonRpc` 和 `ApiProxy`。在文案和适用的包名中使用惯例规定的全大写形式：UI、LLM、JSON-RPC 和 API。`Typert` 是标识符和文案中的唯一准确产品拼写；不得写成 `TypeRT`、`TypeRt`，也不得对 `Typert` 作其他内部拆分。 @@ -76,15 +76,15 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 将规则写入项目文档 -重命名实现合入时，应将完整的职责词约定加入配对的包创建指南 `docs/cookbook/adding-a-package.md`。在 `packages/AGENTS.md` 中添加一条简短规则并链接到该指南。更新术语表和根项目说明，使 `SDK` 和 `Typert` 各自只有一种含义。Agent Note 负责记录理由和被否决的替代方案；指南负责记录贡献者应遵循的规则。 +配对的包创建指南 `docs/cookbook/adding-a-package.md` 包含完整的职责词约定，`packages/AGENTS.md` 链接到该约定。术语表和根项目说明使 `SDK` 和 `Typert` 各自只有一种含义。本 Agent Note 负责记录理由和被否决的替代方案；指南负责记录贡献者应遵循的规则。 ## 重命名清单 -以下表格列出公开名称和仓库级名称。引用相同职责的私有局部变量也应采用新词汇。若宽泛替换并不正确，清单会明确指出保留的底层名称或产品可见名称。 +以下表格记录公开名称和仓库级名称的变更。`当前名称` 栏记录当前名称。引用相同职责的私有局部变量也使用相同词汇。若宽泛替换并不正确，清单会明确指出保留的底层名称或产品可见名称。 ### 运行时 SDK -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-jsonrpc` | `@deepseek-ai/dsh-sdk-jsonrpc-server` | 它是 SDK 协议的服务器端。单独使用 `jsonrpc` 只说明编码；`sdk-jsonrpc-server` 则同时说明所属系列、机制和职责。 | | `HarnessSdkServer` | `HarnessSdkJsonRpcServer` | 该类是 JSON-RPC 服务器的一种实现，并不代表所有可能的 SDK 服务器。 | @@ -93,7 +93,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### Shell 与终端 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `packages/bash/` | `packages/shell/` | 该组包含方言无关的执行器 seam、Bash 和 PowerShell 实现、环境支持以及 shell 工具。 | | `@deepseek-ai/dsh-bash`, `ctx.bash` | `@deepseek-ai/dsh-shell`, `ctx.shell` | PowerShell 已经实现该 seam。此项能力是 shell 执行，而不是 Bash。 | @@ -113,7 +113,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 语言服务器与作业 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-lsp-local` | `@deepseek-ai/dsh-lsp-stdio` | 该提供方通过可替换的文件系统和子进程服务，以 stdio 传输 LSP。它不一定在本地运行。 | | `packages/tasks/` | `packages/jobs/` | 该系列负责脱离前台运行的工具作业。`jobs` 简短，并可避免与用户任务或 todo 概念冲突。 | @@ -131,7 +131,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 输入触发器、工具呈现、权限预设和用户问题 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-client-ui-slash`, `ui-slash/` | `@deepseek-ai/dsh-client-ui-input-trigger`, `ui-input-trigger/` | 客户端处理 `/`、`@`、键盘仲裁、候选菜单和程序化启动，并非只处理斜杠命令。 | | `ctx.slash`、`SlashService`、`SlashController`、`SlashSource` | `ctx.inputTriggers`、`InputTriggerService`、`InputTriggerController`、`InputTriggerSource` | 这些名称覆盖所有受支持的触发器，并保留现有的服务、控制器和来源职责。耦合的区域设置和公开类型名称也改用 `InputTrigger`。 | @@ -144,11 +144,11 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` | `ctx.userInteraction`, `UserInteractionService`, `UserInteractionProvider`, `UserInteractionError` | `ctx.userQuestions`, `UserQuestionService`, `UserQuestionProvider`, `UserQuestionError` | 这些名称说明唯一受支持的交互形式。保留 `AskUserQuestion*`、`ask_user_question` 工具和 `@deepseek-ai/dsh-tool-ask-user`。 | | `docs/subsystems/user-interaction.md` | `docs/subsystems/user-questions.md` | 该页面只记录问题和答案。 | -保留 `/permission`、`permissions` 投影、`permission` 设置命名空间和 `permission/preset`；它们都是准确的产品词汇或持久化词汇。保留完整名称 `PermissionPresetSettingsController`。删除 `Preset` 会去掉限定其权限的词。另行制定提案以移除 `both` 工具呈现模式；本次重命名不移除行为。 +保留 `/permission`、`permissions` 投影、`permission` 设置命名空间和 `permission/preset`；它们都是准确的产品词汇或持久化词汇。保留完整名称 `PermissionPresetSettingsController`。删除 `Preset` 会去掉限定其权限的词。移除 `both` 工具呈现模式的工作仍推迟到另一份提案；本次重命名不移除行为。 ### Typert、API 网关与工具 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `packages/typert/type-meta/`, `@deepseek-ai/dsh-type-meta` | `typert/protocol/`, `@deepseek-ai/dsh-typert-protocol` | 该包拥有 Typert Remote 协议、装饰器、绑定、编解码器、查找逻辑和上下文约定。它不是通用类型元数据。 | | 协议包中的 `GatewayService` | `TypertRemoteService` | 该基类标记要导出为 Remote 的同进程服务。它不是 API 网关。 | @@ -162,7 +162,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 工作区指令、遥测、身份和启动环境 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | Host `ctx.workspace` | Host `ctx.workspaceRegistry` | `WorkspaceRegistry` 拥有多个工作区，但 Client `ctx.workspaces` 已经使用不兼容的类型。即使二者运行时上下文独立，两份声明仍会在编译时合并进同一个 Cordis `Context` 接口。职责后缀明确指出 host 服务，并避免该冲突。保留 `@deepseek-ai/dsh-workspace`、`WorkspaceRegistry`、`Workspace` 和 `workspace.*` 协议名称。 | | `@deepseek-ai/dsh-workspace-context`, `context/workspace-context/` | `@deepseek-ai/dsh-agent-instructions`, `context/agent-instructions/` | 该包为 agent（智能体）加载分层的 `AGENTS.md` 和 `CLAUDE.md` 文件。它并非通用工作区上下文。 | @@ -181,7 +181,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 日程、工作流、目标与压缩 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-tool-schedule`、`schedule/tool-schedule/`、插件 `tool-schedule` | `@deepseek-ai/dsh-schedule`、`schedule/schedule/`、插件 `schedule` | 该包拥有持久 Schedule 领域、持久化屏障、管理工具、定时器、后续轮次和运行时生命周期。`tool-` 只描述其中一部分。 | | `ScheduleOwner` | `ScheduleRuntime` | 该逐 agent 对象运行实时定时器、持久化投影、分派、空闲等待和资源释放。`Owner` 没有说明这一执行职责。耦合的私有 `owner*` 名称也改用 `runtime*`。 | @@ -194,11 +194,11 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` | `@deepseek-ai/dsh-compact-basic`、`BasicCompactService`、公开的 `BasicCompact*` | `@deepseek-ai/dsh-compaction-basic`、`BasicCompactionEngine`、对应的 `BasicCompaction*` | `basic` 朴素但准确。`compaction-llm` 没有增加信息，因为当前实现系列已使用 LLM。 | | `@deepseek-ai/dsh-compact-tool-result-prune`, `ToolResultPruneService`, `ctx.toolResultPrune` | `@deepseek-ai/dsh-compaction-tool-result-pruner`, `ToolResultPruner`, `ctx.toolResultPruner` | 该插件是剪除工具结果的执行主体。名词 `pruner` 说明了这一职责。 | -保留 `/compact`、命令包，以及维持压缩定义包与提供方包分离的既有决策。本次重命名只改变词汇，不改变该包边界。 +保留 `/compact`、命令包，以及相互独立的压缩定义包和提供方包。合并这些包的提议仍被否决。本次重命名只改变词汇，不改变该包边界。 ### 设置、凭据、客户端模块和较小的核心职责 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | 抽象类 `Settings` | `SettingsProvider` | 该类通过可替换能力提供设置。保留包、键和事件。 | | `@deepseek-ai/dsh-settings-local`, `SettingsLocal` | `@deepseek-ai/dsh-settings-file`, `FileSettingsProvider` | 该实现通过文件系统 seam 以文件为后端。`file` 说明机制，`local` 则不能。 | @@ -216,7 +216,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### Host Web 服务器、会话数据与代码执行 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `HttpServerService`, `ctx.httpServer` | `WebServer`, `ctx.webServer` | 该服务器拥有 HTTP 路由和 WebSocket 升级路由。`Web` 可以同时涵盖两者；此处的 `Http` 作用域过窄。保留 `packages/host/webserver`、`@deepseek-ai/dsh-host-webserver`、`WebRoute` 和 `WebUpgradeRoute`。 | | 文档子系统标签 `http-server` | `web-server` | 子系统标签必须与服务采用相同作用域。 | @@ -233,7 +233,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 文件系统、skill、subagent 和 Web 提供方 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-fs-policy` | `@deepseek-ai/dsh-fs-observation-policy` | 该包定义哪些文件系统观察可以授权后续操作。它不是完整的文件系统策略或沙箱策略。 | | `FsPolicyExec` | `FsObservationActor` | 该值表示策略所关联的观察与操作的执行主体。它本身不执行策略。 | @@ -251,7 +251,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 钩子、防护、Plan Mode、扩展与诊断 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `@deepseek-ai/dsh-hooks-claude`、`ClaudeHookConfig`、`parseClaudeConfig`，方言 `claude` | `@deepseek-ai/dsh-hooks-claude-code`、`ClaudeCodeHookConfig`、`parseClaudeCodeConfig`，方言 `claude-code` | 该钩子桥接面向 Claude Code，而非所有 Anthropic 或 Claude 产品。 | | `@deepseek-ai/dsh-repeat-tool-guard`，插件／来源 `repeat-tool-guard` | `@deepseek-ai/dsh-repeat-tool-reminder`，插件／来源 `repeat-tool-reminder` | 该插件向模型添加提醒，并不阻止工具调用，也不执行防护决策。 | @@ -263,11 +263,11 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` | `InvariantService` | `InvariantRegistry` | 该对象拥有已注册的不变量检查。保留 `@deepseek-ai/dsh-invariants` 和 `ctx.invariants`。 | | `packages/client/test-runtime/` | `packages/test-support/client-runtime/` | 该包是客户端测试基础设施。如果现有 NPM 名称已经说明这一约定，则予以保留。 | -保留 MCP、Todo、Plan Mode 包、键、事件和工具名称。获准的变更针对控制器类，而不是产品功能。 +保留 MCP、Todo、Plan Mode 包、键、事件和工具名称。本决策重命名控制器类，而不是产品功能。 ### 实用工具、E2B、Host、组合包、示例与应用 -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `util/paths/`, `@deepseek-ai/dsh-paths` | `util/home-paths/`, `@deepseek-ai/dsh-home-paths` | 这些辅助函数解析 Harness 主目录下的路径，并非通用路径库。已准确说明返回路径的函数名保持不变。 | | `util/retention/`, `@deepseek-ai/dsh-retention` | `util/output-retention/`, `@deepseek-ai/dsh-output-retention` | 该策略保留命令和工具输出，而不是通用数据保留框架。 | @@ -281,7 +281,7 @@ PascalCase 标识符中的首字母缩略词使用首字母大写格式：`Ui` ### 客户端运行时与 UI -| 当前名称 | 提议名称 | 理由 | +| 旧名称 | 当前名称 | 理由 | |---|---|---| | `SlotsService` | `SlotRegistry` | 该对象拥有具名 slot 声明和注册项。 | | `SessionsService` | `SessionRuntime` | 该对象拥有实时客户端会话协调职责，而不是被动的会话列表。 | @@ -365,26 +365,22 @@ PascalCase 标识符内部使用 `Ui`，不要使用 `UI`。除非清单明确 **为旧名称保留别名。**不予采纳。没有已发布的消费方需要这些别名。别名会保留两套词汇，使首次发布携带一项从未有用户需要的迁移。 -## 验收标准 +## 验证 -- 应用清单中的每项映射；如果决策发生变化，则必须在实施前修订本提案并说明原因。 -- 每个系列只有一套公开词汇。同一个 Cordis 上下文中不得留下兼容包、重新导出别名、重复的 `ctx` 键、双重插件 id、双重事件 id、旧工具别名或回退解析器。 -- 变更只能重命名。运行时行为、包边界、默认值、策略、持久化语义和模型行为必须保持等价，只有标识符本身可见时除外。 -- 包目录、NPM 名称、导入、manifest（元数据清单）、TypeScript 引用和路径、Cordis 配置、插件 id、服务键、事件、工具、RPC 名称、清单点名的持久化名称、fixture、快照、示例、生成的目录和当前文案都采用新词汇。 -- 实现合入时，以事实性名称和路径变更更新当前处于 implemented 状态的 Agent Note。包重新分组说明应记录新的分组清单和包名目标，SDK 移除说明不得再将仓库称为 SDK，超时策略说明应记录新的包名理由。架构决策仍然有效的说明，不得被重写为新的决策。 -- 配对的包创建指南应包含职责词约定，`packages/AGENTS.md` 应链接到该约定，术语表应记录选定用词和 `Typert` 拼写，根项目文案应将产品称为 DeepSeek Harness，而不是 DeepSeek Harness SDK。 +- 清单中的每项映射都出现在仓库中。每个系列只有一套公开词汇；同一个 Cordis 上下文中没有兼容包、重新导出别名、重复的 `ctx` 键、双重插件 id、双重事件 id、旧工具别名或回退解析器。 +- 运行时行为、包边界、默认值、策略、持久化语义和模型行为保持等价，只有标识符本身可见时除外。 +- 包目录、NPM 名称、导入、manifest（元数据清单）、TypeScript 引用和路径、Cordis 配置、插件 id、服务键、事件、工具、RPC 名称、清单点名的持久化名称、fixture、快照、示例、生成的目录和当前文案都使用已实现词汇。 +- 当前处于 implemented 状态的 Agent Note 使用事实名称和路径。包重新分组说明记录分组清单和包名目标，SDK 移除说明将 `SDK` 限定为运行时协议，超时策略说明记录包名理由。 +- 配对的包创建指南包含职责词约定，`packages/AGENTS.md` 链接到该约定，术语表记录选定用词和 `Typert` 拼写，根项目文案将产品称为 DeepSeek Harness，而不是 DeepSeek Harness SDK。 - 已移除的 SDK 项目工具链继续保持不存在。 -- 聚焦测试覆盖每个重命名系列；在完整实现上，源代码平面的类型检查、构建、包卫生检查、生成参考资料门禁、受可见标识符影响的快照、翻译配对、`doc-sync` 和 lint 均应通过。 -- 只有完整清单和文档约定全部成为事实后，才能将该 proposed 说明移入 `implemented/`。其实现版应描述最终状态，而不是迁移检查清单。 +- `pnpm run check:ci` 覆盖源代码平面的类型检查、构建、包卫生检查、生成参考资料检查、受影响的快照、翻译配对、`doc-sync` 和 lint。发布形态的 Python 运行时冒烟测试和必需 CI 覆盖打包运行时与平台路径。 -## 风险 +## 后果 -这轮整体重命名会更改大量导入、路径、配置字符串、生成的参考资料和模型可见名称。遗漏的字符串可能通过编译，却在加载或回放时失败。实现时必须结合类型驱动的修改，并在源代码、配置、测试、fixture、文档和生成输入中精确搜索旧名称。 +仓库为每个重命名系列保留一套词汇。清单点名的旧磁盘名称、协议值、工具名称和配置项不再工作。能够识别陈旧配置的所属解析器会明确报错，而不是同时接受两种形式。 -并行工作会与路径移动和符号重命名产生冲突。这是发布前的临时成本。按职责一致的系列拆分实现，可以降低评审成本和合并冲突，但每个系列都必须保持原子性。 +一些名称更长。额外增加的词只有在防止误述权限或机制时才有意义。如果名称中的词不能全部限定职责，长名称仍然错误。 -一些名称会变得更长。额外增加的词只有在防止误述权限或机制时才有意义。如果名称中的词不能全部限定职责，长名称仍然是失败的命名。 +职责后缀不能替代对行为的检查。包创建指南保留本决策中的直接判断方式：检查调用方执行什么操作、对象拥有什么生命周期，以及对象控制什么失败或策略。 -如果评审人只检查后缀而不检查行为，职责词就会被机械套用。指南必须保留本说明中的直接判断方式：检查调用方执行什么操作、对象拥有什么生命周期，以及对象控制什么失败或策略。 - -清单点名的旧磁盘名称、协议值、工具名称和配置项将停止工作。发布前接受这一后果。如果负责解析的解析器能够识别陈旧配置，实现必须明确报错；不得静默接受两种形式。 +基于旧路径和旧符号的分支需要解决冲突。这是发布前移除旧词汇且不保留兼容别名的一次性成本。 diff --git a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.i18n.yaml b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.i18n.yaml index b75b7f8ac5..9dd1c72ec5 100644 --- a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.i18n.yaml +++ b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.md -2026-06-11-vendor-cordis-as-source.md: ccc1289c8a0feadc08d80a3b6e8dc674c1b87bc4 -2026-06-11-vendor-cordis-as-source.zh.md: 4b30ba7684c75bf5eadc0d7c58990ced5355e8f0 +2026-06-11-vendor-cordis-as-source.md: 265966ad0a28900f511efb3091889081d56db2b4 +2026-06-11-vendor-cordis-as-source.zh.md: af8c640e2164c2f14183b29f371e234e59035180 diff --git a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.md b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.md index ccc1289c8a..265966ad0a 100644 --- a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.md +++ b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.md @@ -6,7 +6,7 @@ English | [中文](2026-06-11-vendor-cordis-as-source.zh.md) ## Problem -DeepSeek Harness SDK is built on the Cordis framework. Cordis core was at 4.0.0-rc.6 (a release candidate) when this repo started; the harness depends on framework internals (fiber lifecycle, effect disposal, waterfall dispatch) whose exact behavior matters to the agent loop's correctness guarantees. +DeepSeek Harness is built on the Cordis framework. Cordis core was at 4.0.0-rc.6 (a release candidate) when this repo started; the harness depends on framework internals (fiber lifecycle, effect disposal, waterfall dispatch) whose exact behavior matters to the agent loop's correctness guarantees. ## Decision diff --git a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.zh.md b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.zh.md index 4b30ba7684..af8c640e21 100644 --- a/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.zh.md +++ b/.agents/notes/implemented/process/2026-06-11-vendor-cordis-as-source.zh.md @@ -6,7 +6,7 @@ Status: implemented ## 问题 -DeepSeek Harness SDK 构建于 Cordis 框架之上。本仓库启动时，Cordis core 处于 4.0.0-rc.6（一个候选发布版本）；harness 依赖框架内部实现（fiber 生命周期、dispose（资源释放）、waterfall（瀑布式事件）分发），其确切行为直接关系到 agent loop（智能体循环）的正确性保证。 +DeepSeek Harness 构建于 Cordis 框架之上。本仓库启动时，Cordis core 处于 4.0.0-rc.6（一个候选发布版本）；harness 依赖框架内部实现（fiber 生命周期、dispose（资源释放）、waterfall（瀑布式事件）分发），其确切行为直接关系到 agent loop（智能体循环）的正确性保证。 ## 决策 diff --git a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.i18n.yaml b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.i18n.yaml index c24200f8be..29dd78cab1 100644 --- a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.i18n.yaml +++ b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md -2026-08-11-remove-sdk-project-toolchain.md: cfaf0df46e34d419f5d0b2d5a2a25580675fdc31 -2026-08-11-remove-sdk-project-toolchain.zh.md: 3b563007bf92f94adab6c68eeaa9c6c1522815e4 +2026-08-11-remove-sdk-project-toolchain.md: fc896c2823a1ccddf06c8dce788c4ffe72a9367a +2026-08-11-remove-sdk-project-toolchain.zh.md: a258ca39bc824fbf9f1717c10e6b123d52689af5 diff --git a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md index cfaf0df46e..fc896c2823 100644 --- a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md +++ b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.md @@ -16,7 +16,7 @@ The same `scaffold/` group also contained the independently used SDK protocol, T The SDK project toolchain is deleted. The `@deepseek-ai/create-sdk`, `@deepseek-ai/dsh-scripts`, `@deepseek-ai/dsh-helper`, and `@deepseek-ai/dsh-telemetry` packages, their binaries, tests, templates, feature catalog, project-editing model, package-manager support, launcher telemetry, and repository creation skill have no replacement or compatibility layer. Their workspace, build, test, packaging, documentation-generator, vendoring-rescope, and dependency records are removed with them. -The runtime SDK remains. `@deepseek-ai/dsh-sdk-client`, `@deepseek-ai/dsh-sdk-protocol`, and `@deepseek-ai/dsh-sdk-jsonrpc-server` move unchanged from `packages/scaffold/` to `packages/sdk/`; their npm names and wire behavior do not change. Consumers continue to provide an executable plus an external `cordis.yml`, and the JSON-RPC server remains an ordinary plugin selected by that configuration. +The runtime SDK remains. `@deepseek-ai/dsh-sdk-client`, `@deepseek-ai/dsh-sdk-protocol`, and `@deepseek-ai/dsh-sdk-jsonrpc-server` move unchanged from `packages/scaffold/` to `packages/sdk/`; their npm names and wire behavior do not change. Consumers continue to provide an executable plus an external `cordis.yml`, and the JSON-RPC server remains an ordinary plugin selected by that configuration. The [repository naming contract](../architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md) owns this one repository meaning of `SDK` and the surviving package names; this note owns the deleted toolchain. The canceled developer-project, project-editing, and follow-up-capabilities proposals are deleted rather than retained as active or rejected records. This note preserves the motivation they shared, the decision not to ship that product, the capability given up, and the condition for reconsideration. Frozen archived Agent Notes remain historical snapshots and are not edited. diff --git a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.zh.md b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.zh.md index 3b563007bf..a258ca39bc 100644 --- a/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.zh.md +++ b/.agents/notes/implemented/simplification/2026-08-11-remove-sdk-project-toolchain.zh.md @@ -16,7 +16,7 @@ Status: implemented 删除 SDK 项目工具链。`@deepseek-ai/create-sdk`、`@deepseek-ai/dsh-scripts`、`@deepseek-ai/dsh-helper` 和 `@deepseek-ai/dsh-telemetry` 包及其二进制文件、测试、模板、功能目录、项目编辑模型、包管理器支持、启动器遥测和仓库项目创建 skill 均不提供替代实现或兼容层。与其对应的 workspace、构建、测试、打包、文档生成器、vendor scope 重写和依赖记录也一并移除。 -保留运行时 SDK。`@deepseek-ai/dsh-sdk-client`、`@deepseek-ai/dsh-sdk-protocol` 和 `@deepseek-ai/dsh-sdk-jsonrpc-server` 保持原样，从 `packages/scaffold/` 移至 `packages/sdk/`；其 npm 名称和协议交互行为保持不变。消费方继续提供一个可执行文件和一份外置 `cordis.yml`，JSON-RPC 服务器仍是由该配置选择的普通插件。 +保留运行时 SDK。`@deepseek-ai/dsh-sdk-client`、`@deepseek-ai/dsh-sdk-protocol` 和 `@deepseek-ai/dsh-sdk-jsonrpc-server` 保持原样，从 `packages/scaffold/` 移至 `packages/sdk/`；其 npm 名称和协议交互行为保持不变。消费方继续提供一个可执行文件和一份外置 `cordis.yml`，JSON-RPC 服务器仍是由该配置选择的普通插件。[仓库命名约定](../architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md)负责规定 `SDK` 在仓库中的唯一含义和保留的包名；本说明负责记录已删除的工具链。 被取消的开发者项目、项目编辑和后续能力提案予以删除，而不是保留为活跃或已否决记录。本 Agent Note 保留这些提案共有的动机、不交付该产品的决策、放弃的能力，以及重新考虑这一决定的条件。已冻结的归档 Agent Note 仍是历史快照，不作修改。 diff --git a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml b/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml deleted file mode 100644 index 4d0d08fa33..0000000000 --- a/.agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.i18n.yaml +++ /dev/null @@ -1,6 +0,0 @@ -# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each -# side as of the last confirmed-consistent state. Both languages carry equal authority; -# after editing either side, bring the other along and re-record with: -# pnpm run verify-translation-pairing --write .agents/notes/proposed/architecture/2026-08-11-repository-naming-contract-and-rename-ledger.md -2026-08-11-repository-naming-contract-and-rename-ledger.md: 440ab360e0bd34071de244120aca75116a56ff30 -2026-08-11-repository-naming-contract-and-rename-ledger.zh.md: e5f8d37bdee790b374ecf18be41c04ad8588da46 From 1540e76598f8365f64ccdcb200f7f9fb6ac50591 Mon Sep 17 00:00:00 2001 From: Turtle Date: Thu, 13 Aug 2026 11:55:38 +0800 Subject: [PATCH 05/41] docs: capitalize Service Provider across repository --- .../2026-06-13-capability-seams.i18n.yaml | 4 ++-- .../2026-06-13-capability-seams.md | 14 ++++++++------ .../2026-06-13-capability-seams.zh.md | 18 ++++++++++-------- ...-06-17-filesystem-capability-seam.i18n.yaml | 4 ++-- .../2026-06-17-filesystem-capability-seam.md | 4 ++-- ...2026-06-17-filesystem-capability-seam.zh.md | 4 ++-- ...lifecycle-and-ownership-contracts.i18n.yaml | 4 ++-- ...-agent-lifecycle-and-ownership-contracts.md | 2 +- ...ent-lifecycle-and-ownership-contracts.zh.md | 2 +- .../2026-06-20-branded-ids.i18n.yaml | 4 ++-- .../architecture/2026-06-20-branded-ids.md | 4 ++-- .../architecture/2026-06-20-branded-ids.zh.md | 4 ++-- ...generic-long-running-tool-runtime.i18n.yaml | 2 +- ...-20-generic-long-running-tool-runtime.zh.md | 6 +++--- .../2026-06-24-web-capability-seam.i18n.yaml | 4 ++-- .../2026-06-24-web-capability-seam.md | 2 +- .../2026-06-24-web-capability-seam.zh.md | 2 +- .../2026-07-26-job-registry-seam.i18n.yaml | 4 ++-- .../2026-07-26-job-registry-seam.md | 12 ++++++------ .../2026-07-26-job-registry-seam.zh.md | 16 ++++++++-------- .../2026-07-26-subprocess-seam.i18n.yaml | 4 ++-- .../architecture/2026-07-26-subprocess-seam.md | 2 +- .../2026-07-26-subprocess-seam.zh.md | 2 +- ...-07-27-dispose-ladder-to-consumer.i18n.yaml | 4 ++-- .../2026-07-27-dispose-ladder-to-consumer.md | 4 ++-- ...2026-07-27-dispose-ladder-to-consumer.zh.md | 4 ++-- ...-runtime-portable-identifier-seam.i18n.yaml | 4 ++-- ...31-code-runtime-portable-identifier-seam.md | 8 ++++---- ...code-runtime-portable-identifier-seam.zh.md | 8 ++++---- ...-bounded-background-job-admission.i18n.yaml | 2 +- ...8-11-bounded-background-job-admission.zh.md | 4 ++-- .../feature/2026-06-15-code-mode.i18n.yaml | 4 ++-- .../feature/2026-06-15-code-mode.md | 2 +- .../feature/2026-06-15-code-mode.zh.md | 2 +- ...-06-18-compaction-capability-seam.i18n.yaml | 4 ++-- .../2026-06-18-compaction-capability-seam.md | 2 +- ...2026-06-18-compaction-capability-seam.zh.md | 2 +- ...26-06-21-subagent-capability-seam.i18n.yaml | 4 ++-- .../2026-06-21-subagent-capability-seam.md | 2 +- .../2026-06-21-subagent-capability-seam.zh.md | 2 +- .../2026-07-05-dynamic-workflows.i18n.yaml | 4 ++-- .../feature/2026-07-05-dynamic-workflows.md | 2 +- .../feature/2026-07-05-dynamic-workflows.zh.md | 2 +- .../feature/2026-07-06-approval-seam.i18n.yaml | 4 ++-- .../feature/2026-07-06-approval-seam.md | 2 +- .../feature/2026-07-06-approval-seam.zh.md | 2 +- .../feature/2026-07-06-sandbox.i18n.yaml | 4 ++-- .../implemented/feature/2026-07-06-sandbox.md | 4 ++-- .../feature/2026-07-06-sandbox.zh.md | 4 ++-- ...ript-sdk-and-sdk-subagent-backend.i18n.yaml | 4 ++-- ...-typescript-sdk-and-sdk-subagent-backend.md | 4 ++-- ...pescript-sdk-and-sdk-subagent-backend.zh.md | 4 ++-- .../2026-07-02-tool-schema-catalog.i18n.yaml | 4 ++-- .../process/2026-07-02-tool-schema-catalog.md | 2 +- .../2026-07-02-tool-schema-catalog.zh.md | 2 +- .../2026-06-26-fsspec-style-fs-seam.i18n.yaml | 4 ++-- .../2026-06-26-fsspec-style-fs-seam.md | 2 +- .../2026-06-26-fsspec-style-fs-seam.zh.md | 2 +- ...ion-through-tool-capability-seams.i18n.yaml | 4 ++-- ...ncellation-through-tool-capability-seams.md | 2 +- ...llation-through-tool-capability-seams.zh.md | 2 +- AGENTS.md | 2 +- docs/architecture.i18n.yaml | 4 ++-- docs/architecture.md | 2 +- docs/architecture.zh.md | 2 +- docs/cookbook/adding-a-package.i18n.yaml | 4 ++-- docs/cookbook/adding-a-package.md | 2 +- docs/cookbook/adding-a-package.zh.md | 2 +- docs/glossary.i18n.yaml | 4 ++-- docs/glossary.md | 2 +- docs/glossary.zh.md | 2 +- docs/i18n/terminology.md | 5 +++-- docs/subsystems/code-runtime.i18n.yaml | 4 ++-- docs/subsystems/code-runtime.md | 2 +- docs/subsystems/code-runtime.zh.md | 2 +- docs/subsystems/compaction.i18n.yaml | 4 ++-- docs/subsystems/compaction.md | 2 +- docs/subsystems/compaction.zh.md | 2 +- docs/subsystems/jobs.i18n.yaml | 4 ++-- docs/subsystems/jobs.md | 2 +- docs/subsystems/jobs.zh.md | 2 +- docs/subsystems/lsp.i18n.yaml | 4 ++-- docs/subsystems/lsp.md | 2 +- docs/subsystems/lsp.zh.md | 2 +- docs/subsystems/session-telemetry.i18n.yaml | 4 ++-- docs/subsystems/session-telemetry.md | 2 +- docs/subsystems/session-telemetry.zh.md | 2 +- docs/subsystems/shell.i18n.yaml | 4 ++-- docs/subsystems/shell.md | 2 +- docs/subsystems/shell.zh.md | 2 +- docs/subsystems/skills.i18n.yaml | 4 ++-- docs/subsystems/skills.md | 2 +- docs/subsystems/skills.zh.md | 2 +- docs/subsystems/spill.i18n.yaml | 4 ++-- docs/subsystems/spill.md | 2 +- docs/subsystems/spill.zh.md | 2 +- docs/subsystems/storage.i18n.yaml | 4 ++-- docs/subsystems/storage.md | 2 +- docs/subsystems/storage.zh.md | 2 +- docs/subsystems/subagent.i18n.yaml | 4 ++-- docs/subsystems/subagent.md | 2 +- docs/subsystems/subagent.zh.md | 2 +- docs/subsystems/subprocess.i18n.yaml | 4 ++-- docs/subsystems/subprocess.md | 2 +- docs/subsystems/subprocess.zh.md | 2 +- docs/subsystems/web.i18n.yaml | 4 ++-- docs/subsystems/web.md | 2 +- docs/subsystems/web.zh.md | 2 +- docs/subsystems/workflow.i18n.yaml | 4 ++-- docs/subsystems/workflow.md | 2 +- docs/subsystems/workflow.zh.md | 2 +- docs/user/develop/basic/tool.i18n.yaml | 4 ++-- docs/user/develop/basic/tool.md | 2 +- docs/user/develop/basic/tool.zh.md | 2 +- docs/user/develop/practice/index.i18n.yaml | 4 ++-- docs/user/develop/practice/index.md | 14 +++++++------- docs/user/develop/practice/index.zh.md | 14 +++++++------- packages/README.i18n.yaml | 4 ++-- packages/README.md | 2 +- packages/README.zh.md | 2 +- packages/boot/app-boot/src/profile.ts | 2 +- .../compaction-basic/README.i18n.yaml | 4 ++-- packages/compaction/compaction-basic/README.md | 2 +- .../compaction/compaction-basic/README.zh.md | 2 +- .../compaction/compaction/README.i18n.yaml | 4 ++-- packages/compaction/compaction/README.md | 2 +- packages/compaction/compaction/README.zh.md | 2 +- packages/core/tools/tests/code-mode.spec.ts | 2 +- packages/e2b/subprocess-e2b/src/index.ts | 2 +- .../examples/agent-spine-demo/README.i18n.yaml | 4 ++-- packages/examples/agent-spine-demo/README.md | 2 +- .../examples/agent-spine-demo/README.zh.md | 4 ++-- .../user-questions/README.i18n.yaml | 4 ++-- packages/interaction/user-questions/README.md | 2 +- .../interaction/user-questions/README.zh.md | 2 +- packages/jobs/jobs/README.i18n.yaml | 2 +- packages/jobs/jobs/README.zh.md | 2 +- packages/lsp/lsp-stdio/src/connection.ts | 2 +- packages/lsp/lsp/README.i18n.yaml | 4 ++-- packages/lsp/lsp/README.md | 2 +- packages/lsp/lsp/README.zh.md | 2 +- packages/sandbox/sandbox/README.i18n.yaml | 4 ++-- packages/sandbox/sandbox/README.md | 2 +- packages/sandbox/sandbox/README.zh.md | 2 +- .../session-persistence/README.i18n.yaml | 4 ++-- packages/session/session-persistence/README.md | 2 +- .../session/session-persistence/README.zh.md | 2 +- .../session-telemetry-otel/src/index.ts | 2 +- .../session-title/tests/provider.spec.ts | 2 +- .../tests/service-contracts.spec.ts | 2 +- packages/shell/README.i18n.yaml | 4 ++-- packages/shell/README.md | 2 +- packages/shell/README.zh.md | 2 +- packages/shell/bash-local/README.i18n.yaml | 4 ++-- packages/shell/bash-local/README.md | 2 +- packages/shell/bash-local/README.zh.md | 2 +- packages/shell/bash-local/src/index.ts | 2 +- packages/shell/bash-sandbox/README.i18n.yaml | 4 ++-- packages/shell/bash-sandbox/README.md | 2 +- packages/shell/bash-sandbox/README.zh.md | 2 +- packages/shell/pwsh-local/README.i18n.yaml | 4 ++-- packages/shell/pwsh-local/README.md | 2 +- packages/shell/pwsh-local/README.zh.md | 2 +- packages/shell/pwsh-local/src/index.ts | 2 +- packages/shell/shell/README.i18n.yaml | 4 ++-- packages/shell/shell/README.md | 4 ++-- packages/shell/shell/README.zh.md | 4 ++-- packages/shell/tool-bash/README.i18n.yaml | 4 ++-- packages/shell/tool-bash/README.md | 2 +- packages/shell/tool-bash/README.zh.md | 2 +- packages/spill/spill/README.i18n.yaml | 4 ++-- packages/spill/spill/README.md | 2 +- packages/spill/spill/README.zh.md | 2 +- packages/subagent/subagent/README.i18n.yaml | 4 ++-- packages/subagent/subagent/README.md | 2 +- packages/subagent/subagent/README.zh.md | 2 +- packages/subagent/subagent/src/index.ts | 2 +- packages/subprocess/README.i18n.yaml | 4 ++-- packages/subprocess/README.md | 2 +- packages/subprocess/README.zh.md | 2 +- .../subprocess-local/README.i18n.yaml | 4 ++-- packages/subprocess/subprocess-local/README.md | 2 +- .../subprocess/subprocess-local/README.zh.md | 2 +- .../subprocess/subprocess-local/src/index.ts | 2 +- .../subprocess/subprocess/src/invariant.ts | 2 +- packages/workflow/workflow/src/index.ts | 2 +- .../request-response.expected.json | 2 +- 187 files changed, 306 insertions(+), 301 deletions(-) diff --git a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.i18n.yaml index f07afccac7..106164a71c 100644 --- a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-13-capability-seams.md -2026-06-13-capability-seams.md: efb000631c6dfe91ab648b102a14a27c30d790b4 -2026-06-13-capability-seams.zh.md: bf6571dfa5c3a90f856480bc22c6560ed65b3e77 +2026-06-13-capability-seams.md: 2a166278ea454895177fa12b58f5493276f19cd1 +2026-06-13-capability-seams.zh.md: 0874af5826960ab9e718eb07b00c12b446edfd78 diff --git a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.md b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.md index efb000631c..2a166278ea 100644 --- a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.md +++ b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.md @@ -1,4 +1,4 @@ -# Agent Note: Capability seams — Service Definition / Service provider / Consumer roles +# Agent Note: Capability seams — Service Definition / Service Provider / Consumer roles Status: implemented @@ -15,16 +15,18 @@ This is distinct from "who provides vs. needs a capability at runtime", which Co A swappable capability has **three roles**: 1. **Service Definition** — the Cordis `Service` and vocabulary types owning `ctx.` and depending only on the vocabulary the contract needs (e.g. `dsh-shell`: `ShellExecutor`, `ShellRunResult`, `ShellProcess`). A definition may be an abstract class or a concrete registry service; it is never a TypeScript `interface`. -2. **Service provider** — a plugin that supplies or registers an implementation (e.g. `dsh-bash-local`: subprocesses, process-group kills, spill-file truncation). Sandboxed and remote providers are sibling packages implementing or registering against the same Service Definition. +2. **Service Provider** — a plugin that supplies or registers an implementation (e.g. `dsh-bash-local`: subprocesses, process-group kills, spill-file truncation). Sandboxed and remote providers are sibling packages implementing or registering against the same Service Definition. 3. **Consumer** — what the model and plugins program against (e.g. `dsh-tool-bash`: the `bash` schema, with background handles registered into the generic job runtime). Consumers inject the service key and never import provider-specific types. -Service providers and Consumers then evolve independently: a sandboxed executor replaces `dsh-bash-local` without touching a tool schema. +The role names use title case: **Service Definition**, **Service Provider**, and **Consumer**. Generic uses of `provider` and `consumer` remain lowercase. -Roles normally use separate packages when they evolve independently, but the split is not mandatory when the roles are genuinely one concern: the LLM seam folds Service Definition and Consumer into `dsh-llm` (the Consumer is the loop itself, not a swappable schema surface) with adapters as Service provider packages. Don't split preemptively — a capability with one conceivable provider and one Consumer stays one package until a second appears. +Service Providers and Consumers then evolve independently: a sandboxed executor replaces `dsh-bash-local` without touching a tool schema. + +Roles normally use separate packages when they evolve independently, but the split is not mandatory when the roles are genuinely one concern: the LLM seam folds Service Definition and Consumer into `dsh-llm` (the Consumer is the loop itself, not a swappable schema surface) with adapters as Service Provider packages. Don't split preemptively — a capability with one conceivable provider and one Consumer stays one package until a second appears. ## Terminology: "seam" names the trio, not the interface -A **seam** is the whole capability — the three roles together: a **Service Definition** (the Cordis `Service` that owns `ctx.` and the vocabulary), one or more **Service providers**, and one or more **Consumers**. `packages/shell` is the canonical example — `dsh-shell` / `dsh-bash-local`+`dsh-bash-sandbox` / `dsh-tool-bash`. A package may own multiple roles, but one role alone is not the seam. The term "seam" is reserved for this complete capability; name a constituent by its role, class, service, contract, or extension point. The [glossary](../../../../docs/glossary.md#capability-seam) is the canonical entry. +A **seam** is the whole capability — the three roles together: a **Service Definition** (the Cordis `Service` that owns `ctx.` and the vocabulary), one or more **Service Providers**, and one or more **Consumers**. `packages/shell` is the canonical example — `dsh-shell` / `dsh-bash-local`+`dsh-bash-sandbox` / `dsh-tool-bash`. A package may own multiple roles, but one role alone is not the seam. The term "seam" is reserved for this complete capability; name a constituent by its role, class, service, contract, or extension point. The [glossary](../../../../docs/glossary.md#capability-seam) is the canonical entry. ## Alternatives considered @@ -33,4 +35,4 @@ A **seam** is the whole capability — the three roles together: a **Service Def ## Consequences -Separating roles adds packages and boilerplate (`package.json`, `tsconfig`, README, and injection wiring). In return, Service providers and Consumers ship and version independently, and a new backend never risks the model-facing contract. [AGENTS.md](../../../../AGENTS.md) and [architecture.md](../../../../docs/architecture.md) carry the rule; the bash trio is the reference template. This Agent Note records why independently changing roles normally split while genuinely shared concerns may remain folded. +Separating roles adds packages and boilerplate (`package.json`, `tsconfig`, README, and injection wiring). In return, Service Providers and Consumers ship and version independently, and a new backend never risks the model-facing contract. [AGENTS.md](../../../../AGENTS.md) and [architecture.md](../../../../docs/architecture.md) carry the rule; the bash trio is the reference template. This Agent Note records why independently changing roles normally split while genuinely shared concerns may remain folded. diff --git a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.zh.md b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.zh.md index bf6571dfa5..0874af5826 100644 --- a/.agents/notes/implemented/architecture/2026-06-13-capability-seams.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-13-capability-seams.zh.md @@ -1,4 +1,4 @@ -# Agent Note: 能力 seam——Service Definition / Service provider / Consumer 角色 +# Agent Note: 能力 seam——Service Definition / Service Provider / Consumer 角色 Status: implemented @@ -15,22 +15,24 @@ harness 具有可替换的能力：当前是 bash 执行，未来会有沙箱化 一项可替换的能力包含**三个角色**： 1. **Service Definition**——拥有 `ctx.` 的 Cordis `Service` 和词汇类型，仅依赖约定所需的词汇（例如 `dsh-shell`：`ShellExecutor`、`ShellRunResult`、`ShellProcess`）。Service Definition 可以是抽象类，也可以是具体的注册表服务；绝不是 TypeScript `interface`。 -2. **Service provider**——提供或注册实现的插件（例如 `dsh-bash-local`：子进程、进程组 kill、spill 文件截断）。沙箱化和远程 Service provider 是依据同一 Service Definition 实现或注册的兄弟包。 -3. **Consumer**——模型和插件编程所面向的内容（例如 `dsh-tool-bash`：`bash` schema，后台句柄注册到通用任务运行时）。Consumer 注入服务键，从不导入 Service provider 特有的类型。 +2. **Service Provider**——提供或注册实现的插件（例如 `dsh-bash-local`：子进程、进程组 kill、spill 文件截断）。沙箱化和远程 Service Provider 是依据同一 Service Definition 实现或注册的兄弟包。 +3. **Consumer**——模型和插件编程所面向的内容（例如 `dsh-tool-bash`：`bash` schema，后台句柄注册到通用任务运行时）。Consumer 注入服务键，从不导入 Service Provider 特有的类型。 -Service provider 与 Consumer 由此独立演进：沙箱化执行器替换 `dsh-bash-local` 时无需触碰任何工具 schema。 +角色名使用标题式大小写：**Service Definition**、**Service Provider** 和 **Consumer**。泛指的 `provider` 和 `consumer` 仍使用小写。 -当角色独立演进时，通常使用不同的包；但当各角色确实属于同一个关注点时，并非必须拆分：LLM（大语言模型） seam 将 Service Definition 和 Consumer 合并为 `dsh-llm`（Consumer 是 agent loop（智能体循环）本身，而非可替换的 schema 接口），适配器作为 Service provider 包。不要预防性地拆分——如果一项能力只有一种可设想的 Service provider 和一个 Consumer，就保持为一个包，直到出现第二个。 +Service Provider 与 Consumer 由此独立演进：沙箱化执行器替换 `dsh-bash-local` 时无需触碰任何工具 schema。 + +当角色独立演进时，通常使用不同的包；但当各角色确实属于同一个关注点时，并非必须拆分：LLM（大语言模型） seam 将 Service Definition 和 Consumer 合并为 `dsh-llm`（Consumer 是 agent loop（智能体循环）本身，而非可替换的 schema 接口），适配器作为 Service Provider 包。不要预防性地拆分——如果一项能力只有一种可设想的 Service Provider 和一个 Consumer，就保持为一个包，直到出现第二个。 ## 术语：seam 指三者组合，而非接口 -一个 **seam** 是完整的能力——三个角色合在一起：**Service Definition**（拥有 `ctx.` 和词汇的 Cordis `Service`）、一个或多个 **Service provider**，以及一个或多个 **Consumer**。`packages/shell` 是规范范例——`dsh-shell` / `dsh-bash-local`+`dsh-bash-sandbox` / `dsh-tool-bash`。一个包可以承担多个角色，但单个角色本身不是 seam。「seam」一词严格保留给这种完整能力；命名其中一个组成部分时，应使用其角色、类、服务、约定或扩展点。[术语表](../../../../docs/glossary.md#capability-seam)是规范条目。 +一个 **seam** 是完整的能力——三个角色合在一起：**Service Definition**（拥有 `ctx.` 和词汇的 Cordis `Service`）、一个或多个 **Service Provider**，以及一个或多个 **Consumer**。`packages/shell` 是规范范例——`dsh-shell` / `dsh-bash-local`+`dsh-bash-sandbox` / `dsh-tool-bash`。一个包可以承担多个角色，但单个角色本身不是 seam。「seam」一词严格保留给这种完整能力；命名其中一个组成部分时，应使用其角色、类、服务、约定或扩展点。[术语表](../../../../docs/glossary.md#capability-seam)是规范条目。 ## 曾考虑的替代方案 -- **始终合并各角色**：否决。因为它会重新耦合独立变化的 Service Definition、Service provider 和 Consumer。 +- **始终合并各角色**：否决。因为它会重新耦合独立变化的 Service Definition、Service Provider 和 Consumer。 - **`@cordisjs/plugin-capability`**：这是完全不同的维度。它是一个权限／能力*安全*服务（具名权限加继承，通过 `ctx.capability.test` 针对会话检测这些权限），是延后的权限／沙箱工作（`tools/pre-execute` deny/ask 门）的候选方案，不是替换实现的机制。混淆这两个「能力」概念正是本 Agent Note 所指出的陷阱。 ## 后果 -分离角色会增加包和样板代码（`package.json`、`tsconfig`、README 和注入接线）。换来的是：Service provider 与 Consumer 独立发布和版本管理，新后端永远不会波及面向模型的约定。[AGENTS.md](../../../../AGENTS.md) 和 [architecture.md](../../../../docs/architecture.md) 载有这项规则；bash 三件套是参考模板。本 Agent Note 记录为什么独立变化的角色通常需要拆分，而确实共享的关注点可以保持合并。 +分离角色会增加包和样板代码（`package.json`、`tsconfig`、README 和注入接线）。换来的是：Service Provider 与 Consumer 独立发布和版本管理，新后端永远不会波及面向模型的约定。[AGENTS.md](../../../../AGENTS.md) 和 [architecture.md](../../../../docs/architecture.md) 载有这项规则；bash 三件套是参考模板。本 Agent Note 记录为什么独立变化的角色通常需要拆分，而确实共享的关注点可以保持合并。 diff --git a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.i18n.yaml index fc070d7c3a..9898684b9e 100644 --- a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.md -2026-06-17-filesystem-capability-seam.md: 953ef0eaafe8f654bf55c3e5c4208560243c3d0b -2026-06-17-filesystem-capability-seam.zh.md: 1073226594acbe8c1c596bb4b2dcc959b20c0769 +2026-06-17-filesystem-capability-seam.md: 6265aebf5e7ffdd4ec4dc0083aa55adb34ee78a1 +2026-06-17-filesystem-capability-seam.zh.md: 024421ed59fa1e6c29bcc12ab51f69ac19a0c231 diff --git a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.md b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.md index 953ef0eaaf..6265aebf5e 100644 --- a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.md +++ b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.md @@ -53,7 +53,7 @@ The filesystem seam uses the same dependency direction as the bash trio: `@deepseek-ai/dsh-tool-fs` depends on `@deepseek-ai/dsh-fs`, `@deepseek-ai/dsh-tools`, `@deepseek-ai/dsh-system-prompt`, and `cordis`. It registers model-facing tools and prompt sections. It must not import `node:fs`, `node:path`, or `@deepseek-ai/dsh-fs-local`; filesystem execution always goes through `ctx.fs`. If the implementation needs concrete agent or session helper types, those dependencies belong in `tool-fs`; they must not leak back into `dsh-fs`. -The root `tool-fs` plugin registers the full filesystem tool suite (`read`, `write`, and `edit`) by composing the per-tool registration helpers. It injects `fs` and never imports a Service provider package. +The root `tool-fs` plugin registers the full filesystem tool suite (`read`, `write`, and `edit`) by composing the per-tool registration helpers. It injects `fs` and never imports a Service Provider package. ## `ctx.fs` contract @@ -139,7 +139,7 @@ The defensive-pattern classes this repo has been bitten by are pinned directly: ## Alternatives considered - **Model-facing tools directly over `node:fs`** — the tool package would own execution policy, path resolution, atomic writes, text decoding, and edit semantics at once, coupling the three independently-changing concerns the Problem names and churning schemas on any backend swap. -- **One combined `dsh-fs-tools` package** — the pre-seam shape; rejected for the same Service Definition / Service provider / Consumer split as bash, and the combined name never became public API. +- **One combined `dsh-fs-tools` package** — the pre-seam shape; rejected for the same Service Definition / Service Provider / Consumer split as bash, and the combined name never became public API. - **Observed-state on `ctx.fs`** — the shape this Agent Note first landed; superseded by [the split-fs-seam Agent Note](../simplification/2026-06-26-fsspec-style-fs-seam.md) and [the event-gate Agent Note](2026-06-26-file-context-as-event-gate.md): a sandboxed/remote backend must not inherit model-facing observation policy, so the provider keeps only the version token and the optional version-guarded mutation. ## Consequences diff --git a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.zh.md b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.zh.md index 1073226594..024421ed59 100644 --- a/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-17-filesystem-capability-seam.zh.md @@ -53,7 +53,7 @@ Consumer 包仅依赖 Service Definition 包，从不依赖 `dsh-fs-local`。需 `@deepseek-ai/dsh-tool-fs` 依赖 `@deepseek-ai/dsh-fs`、`@deepseek-ai/dsh-tools`、`@deepseek-ai/dsh-system-prompt` 和 `cordis`。它注册面向模型的工具和提示词段落。它禁止导入 `node:fs`、`node:path` 或 `@deepseek-ai/dsh-fs-local`；文件系统执行始终通过 `ctx.fs`。如果实现需要具体的 agent（智能体）或会话辅助类型，这些依赖属于 `tool-fs`；它们禁止回漏到 `dsh-fs` 中。 -根 `tool-fs` 插件通过组合各工具的注册辅助函数来注册完整的文件系统工具套件（`read`、`write` 和 `edit`）。它注入 `fs`，从不导入 Service provider 包。 +根 `tool-fs` 插件通过组合各工具的注册辅助函数来注册完整的文件系统工具套件（`read`、`write` 和 `edit`）。它注入 `fs`，从不导入 Service Provider 包。 ## `ctx.fs` 约定 @@ -139,7 +139,7 @@ Consumer 包仅依赖 Service Definition 包，从不依赖 `dsh-fs-local`。需 ## 曾考虑的替代方案 - **面向模型的工具直接基于 `node:fs`**：工具包将同时承担执行策略、路径解析、原子写入、文本解码和编辑语义，耦合问题部分所列的三个独立变化的关注点，且任何后端替换都会搅动 schema。 -- **单一合并包 `dsh-fs-tools`**：seam 之前的形态；以与 bash 相同的 Service Definition / Service provider / Consumer 拆分理由否决，且合并名称从未成为公开 API。 +- **单一合并包 `dsh-fs-tools`**：seam 之前的形态；以与 bash 相同的 Service Definition / Service Provider / Consumer 拆分理由否决，且合并名称从未成为公开 API。 - **观测状态放在 `ctx.fs` 上**：本 Agent Note 最初落地的形态；被 [拆分文件系统 seam Agent Note](../simplification/2026-06-26-fsspec-style-fs-seam.md) 和 [事件门控 Agent Note](2026-06-26-file-context-as-event-gate.md) 取代：沙箱/远程后端不应继承面向模型的观测策略，因此提供方只保留版本令牌和可选的版本守护变更。 ## 后果 diff --git a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.i18n.yaml index d3c3a774bd..0ecda2484f 100644 --- a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.md -2026-06-18-agent-lifecycle-and-ownership-contracts.md: f0f9f90b15dee9155cfb1e8c772503642ff34be3 -2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md: a5f6ca10dbe7c71281cccdaf83fff95139ad2d79 +2026-06-18-agent-lifecycle-and-ownership-contracts.md: 9bc558bfce75892b0ebdb80e9f8735d440cabaf4 +2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md: 65e0018c3f2ba56043898050c8e0b49929f8e7e7 diff --git a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.md b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.md index f0f9f90b15..9bc558bfce 100644 --- a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.md +++ b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.md @@ -37,7 +37,7 @@ These invariants hold and are pinned by tests: ## Session owner tokens are unique among live agents -The bash owner-token comparison relies on the shared `Agent.id`/`SessionId` being unique among live agents. Concurrent same-ID operations may both prepare privately, but publication enters the session and agent in order; `SessionStore.enter()` rejects a duplicate live session id, and every losing transaction rolls its private state back. A programmatic caller therefore cannot publish two live agents with one session token. The access *policy* (token comparison) stays in `tool-bash` (the Consumer); the bash capability keeps `owner` opaque and never interprets it — the correct Service Definition / Service provider / Consumer split. +The bash owner-token comparison relies on the shared `Agent.id`/`SessionId` being unique among live agents. Concurrent same-ID operations may both prepare privately, but publication enters the session and agent in order; `SessionStore.enter()` rejects a duplicate live session id, and every losing transaction rolls its private state back. A programmatic caller therefore cannot publish two live agents with one session token. The access *policy* (token comparison) stays in `tool-bash` (the Consumer); the bash capability keeps `owner` opaque and never interprets it — the correct Service Definition / Service Provider / Consumer split. ## Alternatives considered diff --git a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md index a5f6ca10db..65e0018c3f 100644 --- a/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-18-agent-lifecycle-and-ownership-contracts.zh.md @@ -37,7 +37,7 @@ ACP（Agent Client Protocol）与 tool-bash 的若干限制是同一个所有权 ## 会话所有者令牌在存活 agent 中唯一 -bash 所有者 token 比较依赖共享的 `Agent.id`/`SessionId` 在存活 agent 中唯一。并发的同 ID 操作可以都私下准备，但发布时会依次登记会话和 agent；`SessionStore.enter()` 拒绝重复的存活会话 id，每个失败事务都回滚自己的私有状态。因此程序化调用方无法发布两个共享同一会话 token 的存活 agent。访问*策略*（token 比较）留在 Consumer `tool-bash`；bash 能力只存储不透明的 `owner` 字符串且从不解释它——这是正确的 Service Definition / Service provider / Consumer 拆分。 +bash 所有者 token 比较依赖共享的 `Agent.id`/`SessionId` 在存活 agent 中唯一。并发的同 ID 操作可以都私下准备，但发布时会依次登记会话和 agent；`SessionStore.enter()` 拒绝重复的存活会话 id，每个失败事务都回滚自己的私有状态。因此程序化调用方无法发布两个共享同一会话 token 的存活 agent。访问*策略*（token 比较）留在 Consumer `tool-bash`；bash 能力只存储不透明的 `owner` 字符串且从不解释它——这是正确的 Service Definition / Service Provider / Consumer 拆分。 ## 曾考虑的替代方案 diff --git a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.i18n.yaml index 877a53e0ac..b7e2678928 100644 --- a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-20-branded-ids.md -2026-06-20-branded-ids.md: 6bf68c9b6b6dea8317992bcb6f694a8ee141f048 -2026-06-20-branded-ids.zh.md: 11a78df609888fdf917246940c12463373ff2de3 +2026-06-20-branded-ids.md: 29b258b21240c92e74051339f0939a8e70933099 +2026-06-20-branded-ids.zh.md: 288125764d4b279c79b7469080bb0c9f2efdc709 diff --git a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.md b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.md index 6bf68c9b6b..29b258b212 100644 --- a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.md +++ b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.md @@ -46,7 +46,7 @@ export function OwnerToken(id: string): OwnerToken { ### Why not typing `owner` as `SessionId`? -The obvious shortcut is to type `owner` as `SessionId` directly — it always *is* one. We reject that. The bash executor seam is a capability seam (Service Definition `dsh-shell`, Service provider `dsh-bash-local`, Consumer `dsh-tool-bash`) and its owner token is *documented as deliberately opaque*: the executor "never interprets it (no access policy lives in the seam — that is the consumer's job)" (`packages/shell/shell/src/types.ts`). Typing the Service Definition's field as `SessionId` would import `dsh-session`'s vocabulary into a package that must not know what an owner token *means* — it would couple a generic execution backend to the session model and contradict the opaque-token design. A sandboxed or remote executor that replaces `dsh-bash-local` should not inherit a session dependency. The distinct `OwnerToken` brand keeps the seam decoupled: `dsh-shell` knows only "an owner is some opaque branded token," and the `dsh-tool-bash` consumer — which already decides the access policy — is the single boundary that casts its `SessionId` into an `OwnerToken`. The brand still delivers the safety win (you cannot pass a `BashTaskId` or a raw string where an owner is expected) without the coupling. +The obvious shortcut is to type `owner` as `SessionId` directly — it always *is* one. We reject that. The bash executor seam is a capability seam (Service Definition `dsh-shell`, Service Provider `dsh-bash-local`, Consumer `dsh-tool-bash`) and its owner token is *documented as deliberately opaque*: the executor "never interprets it (no access policy lives in the seam — that is the consumer's job)" (`packages/shell/shell/src/types.ts`). Typing the Service Definition's field as `SessionId` would import `dsh-session`'s vocabulary into a package that must not know what an owner token *means* — it would couple a generic execution backend to the session model and contradict the opaque-token design. A sandboxed or remote executor that replaces `dsh-bash-local` should not inherit a session dependency. The distinct `OwnerToken` brand keeps the seam decoupled: `dsh-shell` knows only "an owner is some opaque branded token," and the `dsh-tool-bash` consumer — which already decides the access policy — is the single boundary that casts its `SessionId` into an `OwnerToken`. The brand still delivers the safety win (you cannot pass a `BashTaskId` or a raw string where an owner is expected) without the coupling. ## Out of scope / possible extensions @@ -64,6 +64,6 @@ The landed invariants: `BashTaskId` and `OwnerToken` are defined in `dsh-shell` ## Consequences -- **Mechanical churn across two surfaces.** Propagating brands touches the bash seam (Service Definition + Service provider + Consumer) and the ACP session-id surface plus the persistence coordinator. The churn is broad but low-severity: a missed site is a compile error, not a silent bug. The change is observably type-only — no snapshot or e2e behavioral diff. It sits next to the [unified agent/session identity decision](../simplification/2026-06-20-unify-agent-and-session-id.md) because both touch the session-id / owner-token boundary; `OwnerToken` stays distinct from the unified id for the decoupling reason above. +- **Mechanical churn across two surfaces.** Propagating brands touches the bash seam (Service Definition + Service Provider + Consumer) and the ACP session-id surface plus the persistence coordinator. The churn is broad but low-severity: a missed site is a compile error, not a silent bug. The change is observably type-only — no snapshot or e2e behavioral diff. It sits next to the [unified agent/session identity decision](../simplification/2026-06-20-unify-agent-and-session-id.md) because both touch the session-id / owner-token boundary; `OwnerToken` stays distinct from the unified id for the decoupling reason above. - **Brands do not validate.** A brand is a confusability guard, not a correctness proof: a *wrong* session id that is still a well-formed string passes the type checker exactly as before. This decision does not close that gap (see Out of scope) — it only stops the *category* error of passing the wrong *kind* of id. - **The "where to stop" line stays a judgment call.** Branding `BashTaskId` but not `ToolName`, `OwnerToken` but not `ModelId`, is a taste call about which strings "could plausibly be confused." Reasonable reviewers may want more or fewer; the policy in `brand.ts` is the tie-breaker, and this decision errs toward the ids that are model-facing or used for access control. diff --git a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.zh.md b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.zh.md index 11a78df609..288125764d 100644 --- a/.agents/notes/implemented/architecture/2026-06-20-branded-ids.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-20-branded-ids.zh.md @@ -46,7 +46,7 @@ export function OwnerToken(id: string): OwnerToken { ### 为什么不把 `owner` 类型标注为 `SessionId`？ -显而易见的捷径是直接把 `owner` 类型标注为 `SessionId`——它确实*总是*一个会话 id。我们否决这个方案。bash 执行器 seam 是能力 seam（Service Definition `dsh-shell`、Service provider `dsh-bash-local`、Consumer `dsh-tool-bash`），其 owner token 被*明确记录为刻意不透明*：执行器「从不解释它（seam 中没有访问策略——那是消费方的职责）」（`packages/shell/shell/src/types.ts`）。把 Service Definition 的字段类型标注为 `SessionId`，会把 `dsh-session` 的词汇引入一个不应知道 owner token *含义*的包——这会让通用执行后端耦合会话模型，并违背不透明 token 的设计。取代 `dsh-bash-local` 的沙箱化执行器或远程执行器不应继承会话依赖。独立的 `OwnerToken` brand 使 seam 保持解耦：`dsh-shell` 只知道「owner 是某种带 brand 的不透明 token」，而已经决定访问策略的 `dsh-tool-bash` 消费方，是把其 `SessionId` cast 为 `OwnerToken` 的唯一边界。该 brand 仍带来安全收益（不能把 `BashTaskId` 或裸 string 传到 owner 位置），且不引入耦合。 +显而易见的捷径是直接把 `owner` 类型标注为 `SessionId`——它确实*总是*一个会话 id。我们否决这个方案。bash 执行器 seam 是能力 seam（Service Definition `dsh-shell`、Service Provider `dsh-bash-local`、Consumer `dsh-tool-bash`），其 owner token 被*明确记录为刻意不透明*：执行器「从不解释它（seam 中没有访问策略——那是消费方的职责）」（`packages/shell/shell/src/types.ts`）。把 Service Definition 的字段类型标注为 `SessionId`，会把 `dsh-session` 的词汇引入一个不应知道 owner token *含义*的包——这会让通用执行后端耦合会话模型，并违背不透明 token 的设计。取代 `dsh-bash-local` 的沙箱化执行器或远程执行器不应继承会话依赖。独立的 `OwnerToken` brand 使 seam 保持解耦：`dsh-shell` 只知道「owner 是某种带 brand 的不透明 token」，而已经决定访问策略的 `dsh-tool-bash` 消费方，是把其 `SessionId` cast 为 `OwnerToken` 的唯一边界。该 brand 仍带来安全收益（不能把 `BashTaskId` 或裸 string 传到 owner 位置），且不引入耦合。 ## 不在范围内 / 可能的扩展 @@ -64,6 +64,6 @@ export function OwnerToken(id: string): OwnerToken { ## 后果 -- **两个接口面的机械性改动。** 传播 brand 涉及 bash seam（Service Definition + Service provider + Consumer）以及 ACP 会话 id 接口和持久化协调器。改动面广但严重度低：遗漏的位置是编译错误而非静默 bug。从可观察行为看，这是一项纯类型变更——无快照或 e2e 行为差异。它与[统一 agent/会话标识决策](../simplification/2026-06-20-unify-agent-and-session-id.md)相邻，因为二者都触及会话 id / owner-token 边界；`OwnerToken` 出于上述解耦理由仍与统一后的 id 保持独立。 +- **两个接口面的机械性改动。** 传播 brand 涉及 bash seam（Service Definition + Service Provider + Consumer）以及 ACP 会话 id 接口和持久化协调器。改动面广但严重度低：遗漏的位置是编译错误而非静默 bug。从可观察行为看，这是一项纯类型变更——无快照或 e2e 行为差异。它与[统一 agent/会话标识决策](../simplification/2026-06-20-unify-agent-and-session-id.md)相邻，因为二者都触及会话 id / owner-token 边界；`OwnerToken` 出于上述解耦理由仍与统一后的 id 保持独立。 - **Brand 不做校验。** Brand 是混淆防护，不是正确性证明：一个*错误的*会话 id 只要仍是格式正确的 string，就和以前一样能通过类型检查器。本决策不关闭这个缺口（见「不在范围内」）——它只阻止这类*类别*错误：传入错误*种类*的 id。 - **「在哪里停下」仍是判断题。** 为 `BashTaskId` 加 brand 但不为 `ToolName` 加，为 `OwnerToken` 加但不为 `ModelId` 加，是对哪些 string「可能被混淆」的品味判断。合理的评审者可能想要更多或更少；`brand.ts` 中的策略是裁决依据，本决策倾向于面向模型或用于访问控制的 id。 diff --git a/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.i18n.yaml index 3480f0b231..477c6df3ae 100644 --- a/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.i18n.yaml @@ -3,4 +3,4 @@ # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.md 2026-06-20-generic-long-running-tool-runtime.md: 7db43323dd83f8e99698a7163412c9b33a607dfb -2026-06-20-generic-long-running-tool-runtime.zh.md: fe12ef264d294224fcfaf503ba958fa90c782347 +2026-06-20-generic-long-running-tool-runtime.zh.md: efd306cc8d3b82749635dde302af45235c27b431 diff --git a/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.zh.md b/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.zh.md index fe12ef264d..efd306cc8d 100644 --- a/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-20-generic-long-running-tool-runtime.zh.md @@ -19,13 +19,13 @@ Status: implemented 长时间运行工具是生产方。`dsh-tool-bash` 将 `ShellProcess` 适配为增量输出与进程取消；`dsh-tool-subagent` 将子运行适配为最终输出与子运行释放。bash 与 subagent 能力 seam 保持独立，不依赖会话或任务注册表。 -`JobRegistry` 是 `@deepseek-ai/dsh-jobs` 中的 Service Definition；进程内 Service provider 是 `@deepseek-ai/dsh-jobs-local` 中的 `LocalJobRegistry`（该拆分记录在[任务注册表约定 Agent Note](2026-07-26-job-registry-seam.md)中）。 +`JobRegistry` 是 `@deepseek-ai/dsh-jobs` 中的 Service Definition；进程内 Service Provider 是 `@deepseek-ai/dsh-jobs-local` 中的 `LocalJobRegistry`（该拆分记录在[任务注册表约定 Agent Note](2026-07-26-job-registry-seam.md)中）。 ## 运行时约定 字面类型见[任务子系统页面](../../../../docs/subsystems/jobs.md)。生产方调用 `ctx.jobs.start()`，传入 kind、label、可选的所属 `Agent`、可选的正数 `outputLimitBytes` 与一个 `run()` 函数。运行时会在调用 `run()` 前完成所有可能失败的预检工作，并且只调用一次。`run()` 返回钩子后，注册过程不会再执行可能失败的步骤而直接提交；生产方无法启动没有可收集 job id 的工作。 -进程内 Service provider 还拥有有界准入，其理由记录在[有界后台任务准入决策](../bug-fix/2026-08-11-bounded-background-job-admission.md)中。它的 `maxConcurrentJobsPerOwner` 配置必须是正的安全整数，默认值为 `10`；`start()` 从 `running` 与 `stopping` 记录派生每个确切 `Agent` 对象的活动数量，而全部无 owner 任务共享一个服务级桶。容量拒绝发生在 `run()` 与 id 分配之前，处于 stopping 的任务只有在生产方 `done` 结算时才释放名额。Service provider 不排队或抢占任务，也不保留第二份可变计数。 +进程内 Service Provider 还拥有有界准入，其理由记录在[有界后台任务准入决策](../bug-fix/2026-08-11-bounded-background-job-admission.md)中。它的 `maxConcurrentJobsPerOwner` 配置必须是正的安全整数，默认值为 `10`；`start()` 从 `running` 与 `stopping` 记录派生每个确切 `Agent` 对象的活动数量，而全部无 owner 任务共享一个服务级桶。容量拒绝发生在 `run()` 与 id 分配之前，处于 stopping 的任务只有在生产方 `done` 结算时才释放名额。Service Provider 不排队或抢占任务，也不保留第二份可变计数。 `outputLimitBytes` 是生产方拥有的呈现策略，而非注册表缓冲区。注册表校验该值，并将其原样投影到 `JobSnapshot`；通用任务控制器添加自身的状态或通知元数据后，再将该上限应用于完整的面向模型输出。省略该值时保持现有控制器行为，因此运行时不会向无关的生产方类别施加隐式默认值。 @@ -57,7 +57,7 @@ job id 在运行时全局可见且可预测，因此注册表会授权每次访 `JobRegistry` 提供： -- `start(spec)`：经过预检与 Service provider 准入的原子注册。 +- `start(spec)`：经过预检与 Service Provider 准入的原子注册。 - `get(id, caller?)` 和 `list(caller?)`：非消费式快照。 - `read(id, caller?)`：消费式流增量或幂等的最终结果。 - `kill(id, caller?, reason?)`：取消。 diff --git a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.i18n.yaml b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.i18n.yaml index 03dd8d5694..bc92549f44 100644 --- a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md -2026-06-24-web-capability-seam.md: 6e81650e2d7286fc3c9df1e740ba9ccbf30118df -2026-06-24-web-capability-seam.zh.md: b91a4470999fd66ec7178326fcfb5247ff83a2e0 +2026-06-24-web-capability-seam.md: 7e7b09f19864bd2ad8ad9d69579c1d5c79600cde +2026-06-24-web-capability-seam.zh.md: d6051eec498edb640773ba367038581cebd1f654 diff --git a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md index 6e81650e2d..7e7b09f198 100644 --- a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md +++ b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md @@ -38,7 +38,7 @@ The seam deliberately exposes no observation surface — no registry-change even ## Package topology -The three-package Service Definition / Service provider / Consumer split follows bash and filesystem, but the *interface* package is closer to the LLM seam. `LlmRuntime` (`packages/llm/llm/src/index.ts`) is a name-keyed provider registry: `registerAdapter(models, adapter)` stores adapters in a `Map`, returns a disposer, throws `DUPLICATE_ADAPTER` on duplicate keys, and throws `NO_ADAPTER` at resolution time. `ctx.web` follows that registry shape, but has two capability kinds and a richer selection policy (a configured provider id, or auto-select when exactly one usable provider is registered), so the `WebError` an execution throws can explain why a search or fetch capability cannot run. +The three-package Service Definition / Service Provider / Consumer split follows bash and filesystem, but the *interface* package is closer to the LLM seam. `LlmRuntime` (`packages/llm/llm/src/index.ts`) is a name-keyed provider registry: `registerAdapter(models, adapter)` stores adapters in a `Map`, returns a disposer, throws `DUPLICATE_ADAPTER` on duplicate keys, and throws `NO_ADAPTER` at resolution time. `ctx.web` follows that registry shape, but has two capability kinds and a richer selection policy (a configured provider id, or auto-select when exactly one usable provider is registered), so the `WebError` an execution throws can explain why a search or fetch capability cannot run. The dependency direction mirrors bash and filesystem: diff --git a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.zh.md b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.zh.md index b91a447099..d6051eec49 100644 --- a/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.zh.md +++ b/.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.zh.md @@ -38,7 +38,7 @@ Web 访问是一个一等能力 seam，遵循[能力 seam Agent Note](2026-06-13 ## 包拓扑 -由三个包构成的 Service Definition / Service provider / Consumer 拆分沿用 bash 和 filesystem 的模式，但*接口*包更接近 LLM（大语言模型） seam。`LlmRuntime`（`packages/llm/llm/src/index.ts`）是一个按名称键控的提供方注册表：`registerAdapter(models, adapter)` 将适配器存入 `Map`、返回 disposer、对重复键抛出 `DUPLICATE_ADAPTER`、在解析时抛出 `NO_ADAPTER`。`ctx.web` 沿用该注册表形状，但有两种能力类别和更丰富的选择策略（配置的提供方 id，或在恰好只有一个可用提供方注册时自动选择），因此执行时抛出的 `WebError` 能解释搜索或 fetch 能力为何无法运行。 +由三个包构成的 Service Definition / Service Provider / Consumer 拆分沿用 bash 和 filesystem 的模式，但*接口*包更接近 LLM（大语言模型） seam。`LlmRuntime`（`packages/llm/llm/src/index.ts`）是一个按名称键控的提供方注册表：`registerAdapter(models, adapter)` 将适配器存入 `Map`、返回 disposer、对重复键抛出 `DUPLICATE_ADAPTER`、在解析时抛出 `NO_ADAPTER`。`ctx.web` 沿用该注册表形状，但有两种能力类别和更丰富的选择策略（配置的提供方 id，或在恰好只有一个可用提供方注册时自动选择），因此执行时抛出的 `WebError` 能解释搜索或 fetch 能力为何无法运行。 依赖方向与 bash 和 filesystem 一致： diff --git a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.i18n.yaml index dfc3a79832..5d60dee0d3 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-26-job-registry-seam.md -2026-07-26-job-registry-seam.md: 5a77e8e8098a135dd25abeb11c68127fd9f1b4e9 -2026-07-26-job-registry-seam.zh.md: fdc0912eca0b7ba01241137020e8e028c5480e2f +2026-07-26-job-registry-seam.md: b4a8a66ef63f1a4955e2497cad2d0d0b1ef138ec +2026-07-26-job-registry-seam.zh.md: ebab92029ddb9edd4c7085eef0d8cc83e9289bd9 diff --git a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.md b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.md index 5a77e8e809..b4a8a66ef6 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.md +++ b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.md @@ -6,17 +6,17 @@ English | [中文](2026-07-26-job-registry-seam.zh.md) ## Problem -The [background-job runtime](2026-06-20-generic-long-running-tool-runtime.md) shipped `JobRegistry` as one concrete package: `@deepseek-ai/dsh-jobs` owned both the `ctx.jobs` contract every producer and controller programs against and the process-local provider (the in-memory store, settlement bookkeeping, owner-cleanup effects, teardown). That bundling recouples the two rates of change the repository's [capability-seam rule](2026-06-13-capability-seams.md) separates: swapping the registry's storage or lifecycle backend would churn the same package whose types and `ctx.jobs` API producers (`dsh-tool-bash`, `dsh-tool-terminal`, `dsh-tool-subagent`), the controller (`dsh-tool-jobs`), and `JobKindMap` extenders import. Every other swappable capability in the harness — bash, pty, fs, skill, subagent, web, session persistence — already carries the Service Definition / Service provider / Consumer split; the job registry was the remaining `core`-mode exception, guarded only by a `TODO(job-service-backend)` comment. +The [background-job runtime](2026-06-20-generic-long-running-tool-runtime.md) shipped `JobRegistry` as one concrete package: `@deepseek-ai/dsh-jobs` owned both the `ctx.jobs` contract every producer and controller programs against and the process-local provider (the in-memory store, settlement bookkeeping, owner-cleanup effects, teardown). That bundling recouples the two rates of change the repository's [capability-seam rule](2026-06-13-capability-seams.md) separates: swapping the registry's storage or lifecycle backend would churn the same package whose types and `ctx.jobs` API producers (`dsh-tool-bash`, `dsh-tool-terminal`, `dsh-tool-subagent`), the controller (`dsh-tool-jobs`), and `JobKindMap` extenders import. Every other swappable capability in the harness — bash, pty, fs, skill, subagent, web, session persistence — already carries the Service Definition / Service Provider / Consumer split; the job registry was the remaining `core`-mode exception, guarded only by a `TODO(job-service-backend)` comment. ## Decision `jobs/` is now a three-package capability family in the bash-trio shape: -- **`@deepseek-ai/dsh-jobs` (Service Definition)** — the abstract `JobRegistry extends Service` owning `ctx.jobs`, the nine-method contract (`start`, `list`, `get`, `read`, `kill`, `wait`, `onJobDone`, `onJobsChanged`, `attachController`), all vocabulary types (`JobId`, `JobKindMap`, `JobStart`, `JobHooks`, `JobOutcome`, `JobSnapshot`, `JobRead`, `JobDoneListener`), and the snapshot invariant companion. The class-level JSDoc states the semantics every Service provider owes: registrations outlive producer and controller fibers, owned access is session-fenced, settlement is first-wins with contained listeners, and `start` refuses work while no attached job controller serves the spec's owner (controllers and listeners are scope-layered, so one process-wide registry answers both questions per owner). -- **`@deepseek-ai/dsh-jobs-local` (Service provider)** — `LocalJobRegistry`, the process-local registry: the in-memory store, per-kind id counters, waiter bookkeeping, `TASK_WAIT_TIMEOUT` deadline code, owner-cleanup effects, force-fail teardown, and the default-10 configurable admission policy. Admission derives `running` plus `stopping` capacity from the same records per exact owner, with one unowned bucket; it adds no public count or second state owner. The `dsh-timeout` dependency and Schemastery-owned provider config live here; the Service Definition package has no provider dependencies. +- **`@deepseek-ai/dsh-jobs` (Service Definition)** — the abstract `JobRegistry extends Service` owning `ctx.jobs`, the nine-method contract (`start`, `list`, `get`, `read`, `kill`, `wait`, `onJobDone`, `onJobsChanged`, `attachController`), all vocabulary types (`JobId`, `JobKindMap`, `JobStart`, `JobHooks`, `JobOutcome`, `JobSnapshot`, `JobRead`, `JobDoneListener`), and the snapshot invariant companion. The class-level JSDoc states the semantics every Service Provider owes: registrations outlive producer and controller fibers, owned access is session-fenced, settlement is first-wins with contained listeners, and `start` refuses work while no attached job controller serves the spec's owner (controllers and listeners are scope-layered, so one process-wide registry answers both questions per owner). +- **`@deepseek-ai/dsh-jobs-local` (Service Provider)** — `LocalJobRegistry`, the process-local registry: the in-memory store, per-kind id counters, waiter bookkeeping, `TASK_WAIT_TIMEOUT` deadline code, owner-cleanup effects, force-fail teardown, and the default-10 configurable admission policy. Admission derives `running` plus `stopping` capacity from the same records per exact owner, with one unowned bucket; it adds no public count or second state owner. The `dsh-timeout` dependency and Schemastery-owned provider config live here; the Service Definition package has no provider dependencies. - **`@deepseek-ai/dsh-tool-jobs` (Consumer)** — unchanged; it injects `'jobs'` and never imports provider types. -Compositions load `dsh-jobs-local` where they previously loaded `dsh-jobs` (the CLI cordis.yml row, `agent-spine-demo`, test harnesses, the tool-catalog generator boot). Producer misconfiguration diagnostics ("background jobs unavailable: load …") name `dsh-jobs` — the Service Definition package that declares the absent `ctx.jobs` service — and the Service Definition package's own APIs (its README and the direct-mount fence) point at Service providers, so the producer message stays correct when another backend becomes the recommended default. Producers, `JobKindMap` declaration merges, and the controller keep importing `@deepseek-ai/dsh-jobs` only. +Compositions load `dsh-jobs-local` where they previously loaded `dsh-jobs` (the CLI cordis.yml row, `agent-spine-demo`, test harnesses, the tool-catalog generator boot). Producer misconfiguration diagnostics ("background jobs unavailable: load …") name `dsh-jobs` — the Service Definition package that declares the absent `ctx.jobs` service — and the Service Definition package's own APIs (its README and the direct-mount fence) point at Service Providers, so the producer message stays correct when another backend becomes the recommended default. Producers, `JobKindMap` declaration merges, and the controller keep importing `@deepseek-ai/dsh-jobs` only. The seam keeps the in-process contract semantics unchanged: `JobStart.run()` still passes callbacks and exact `Agent` objects, so a durable or cross-process backend still has design work to do before it can satisfy this Service Definition (identity, restart, ownership, observation). The split moves that future work out of every Consumer's dependency graph; it does not pre-design the backend. @@ -30,6 +30,6 @@ The seam keeps the in-process contract semantics unchanged: `JobStart.run()` sti ## Consequences -Bought: the job registry now matches the repository-wide seam shape; a durable, remote, or instrumented registry is a sibling Service provider implementing nine abstract methods, and no producer, controller, or `JobKindMap` extender changes when one lands. The Service Definition README states the contract; the provider README owns the lifecycle bookkeeping facts. The registry behavior suite (owner cleanup, settlement, waits, teardown) lives with `dsh-jobs-local`; the Service Definition package keeps a stub-subclass test pinning registration under `ctx.jobs` and single-service duplication behavior, plus the probe-based invariant suite. +Bought: the job registry now matches the repository-wide seam shape; a durable, remote, or instrumented registry is a sibling Service Provider implementing nine abstract methods, and no producer, controller, or `JobKindMap` extender changes when one lands. The Service Definition README states the contract; the provider README owns the lifecycle bookkeeping facts. The registry behavior suite (owner cleanup, settlement, waits, teardown) lives with `dsh-jobs-local`; the Service Definition package keeps a stub-subclass test pinning registration under `ctx.jobs` and single-service duplication behavior, plus the probe-based invariant suite. -Cost: one more package (manifest, tsconfig, README, invariant companion), and compositions must name the Service provider package. `abstract` erases at runtime and this package name used to be the mountable registry, so the Service Definition constructor fails loudly when mounted directly — a stale composition row gets "load a Service provider such as @deepseek-ai/dsh-jobs-local" at load time instead of a half-registered `ctx.jobs` failing far from the misconfiguration. +Cost: one more package (manifest, tsconfig, README, invariant companion), and compositions must name the Service Provider package. `abstract` erases at runtime and this package name used to be the mountable registry, so the Service Definition constructor fails loudly when mounted directly — a stale composition row gets "load a Service Provider such as @deepseek-ai/dsh-jobs-local" at load time instead of a half-registered `ctx.jobs` failing far from the misconfiguration. diff --git a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.zh.md b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.zh.md index fdc0912eca..ebab92029d 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-26-job-registry-seam.zh.md @@ -6,30 +6,30 @@ Status: implemented ## 问题 -[后台任务运行时](2026-06-20-generic-long-running-tool-runtime.md)交付时把 `JobRegistry` 做成了单个具体包：`@deepseek-ai/dsh-jobs` 既拥有每个生产方和控制器面向编程的 `ctx.jobs` 约定，也拥有进程内 Service provider（内存存储、结算簿记、所有者清理 effect、拆除）。这种捆绑重新耦合了仓库[能力 seam 规则](2026-06-13-capability-seams.md)本要分离的两种变化速率：一旦替换注册表的存储或生命周期后端，被搅动的就是同一个包，而生产方（`dsh-tool-bash`、`dsh-tool-terminal`、`dsh-tool-subagent`）、控制器（`dsh-tool-jobs`）和 `JobKindMap` 扩展方正是从这个包导入类型与 `ctx.jobs` API。harness 中其余每项可替换能力——bash、pty、fs、skill（技能）、subagent、web、会话持久化——都已具备 Service Definition / Service provider / Consumer 三分；任务注册表曾是仅剩的 `core` 模式例外，仅由一条 `TODO(job-service-backend)` 注释把守。 +[后台任务运行时](2026-06-20-generic-long-running-tool-runtime.md)交付时把 `JobRegistry` 做成了单个具体包：`@deepseek-ai/dsh-jobs` 既拥有每个生产方和控制器面向编程的 `ctx.jobs` 约定，也拥有进程内 Service Provider（内存存储、结算簿记、所有者清理 effect、拆除）。这种捆绑重新耦合了仓库[能力 seam 规则](2026-06-13-capability-seams.md)本要分离的两种变化速率：一旦替换注册表的存储或生命周期后端，被搅动的就是同一个包，而生产方（`dsh-tool-bash`、`dsh-tool-terminal`、`dsh-tool-subagent`）、控制器（`dsh-tool-jobs`）和 `JobKindMap` 扩展方正是从这个包导入类型与 `ctx.jobs` API。harness 中其余每项可替换能力——bash、pty、fs、skill（技能）、subagent、web、会话持久化——都已具备 Service Definition / Service Provider / Consumer 三分；任务注册表曾是仅剩的 `core` 模式例外，仅由一条 `TODO(job-service-backend)` 注释把守。 ## 决策 `jobs/` 如今是一个 bash 三件套形态的三包能力家族： -- **`@deepseek-ai/dsh-jobs`（Service Definition）**——抽象的 `JobRegistry extends Service`，拥有 `ctx.jobs`、九个方法的约定（`start`、`list`、`get`、`read`、`kill`、`wait`、`onJobDone`、`onJobsChanged`、`attachController`）、全部词汇类型（`JobId`、`JobKindMap`、`JobStart`、`JobHooks`、`JobOutcome`、`JobSnapshot`、`JobRead`、`JobDoneListener`），以及快照不变式配套插件。类级 JSDoc 陈述了每个 Service provider 都必须兑现的语义：注册的存续期长于生产方与控制器的 fiber，有所有者的访问以会话为界，结算遵循首次结果优先且监听器错误被隔离，并且当没有任何已附加的任务控制器服务于 spec 的所有者时 `start` 拒绝启动工作（控制器与监听器按 scope 分层，因此一个进程级注册表能逐所有者地回答这两个问题）。 -- **`@deepseek-ai/dsh-jobs-local`（Service provider）**——`LocalJobRegistry`，即进程内注册表：内存存储、按 kind 划分的 id 计数器、等待方簿记、`TASK_WAIT_TIMEOUT` deadline 代码、所有者清理 effect、强制失败的拆除，以及默认值为 10 且可配置的准入策略。准入从同一组记录中按确切 owner 派生 `running` 加 `stopping` 容量，并为无 owner 任务使用一个共享桶；它不新增公开计数或第二个状态 owner。`dsh-timeout` 依赖与由 Schemastery 管理的 Service provider 配置都位于此包；Service Definition 包不含任何提供方依赖。 +- **`@deepseek-ai/dsh-jobs`（Service Definition）**——抽象的 `JobRegistry extends Service`，拥有 `ctx.jobs`、九个方法的约定（`start`、`list`、`get`、`read`、`kill`、`wait`、`onJobDone`、`onJobsChanged`、`attachController`）、全部词汇类型（`JobId`、`JobKindMap`、`JobStart`、`JobHooks`、`JobOutcome`、`JobSnapshot`、`JobRead`、`JobDoneListener`），以及快照不变式配套插件。类级 JSDoc 陈述了每个 Service Provider 都必须兑现的语义：注册的存续期长于生产方与控制器的 fiber，有所有者的访问以会话为界，结算遵循首次结果优先且监听器错误被隔离，并且当没有任何已附加的任务控制器服务于 spec 的所有者时 `start` 拒绝启动工作（控制器与监听器按 scope 分层，因此一个进程级注册表能逐所有者地回答这两个问题）。 +- **`@deepseek-ai/dsh-jobs-local`（Service Provider）**——`LocalJobRegistry`，即进程内注册表：内存存储、按 kind 划分的 id 计数器、等待方簿记、`TASK_WAIT_TIMEOUT` deadline 代码、所有者清理 effect、强制失败的拆除，以及默认值为 10 且可配置的准入策略。准入从同一组记录中按确切 owner 派生 `running` 加 `stopping` 容量，并为无 owner 任务使用一个共享桶；它不新增公开计数或第二个状态 owner。`dsh-timeout` 依赖与由 Schemastery 管理的 Service Provider 配置都位于此包；Service Definition 包不含任何提供方依赖。 - **`@deepseek-ai/dsh-tool-jobs`（Consumer）**——保持不变；它注入 `'jobs'`，从不导入提供方类型。 -各组合在原先加载 `dsh-jobs` 的位置改为加载 `dsh-jobs-local`：CLI（命令行界面）的 cordis.yml 配置项、`agent-spine-demo`、各测试 harness，以及工具目录生成器的启动流程。生产方的配置错误诊断信息（「background jobs unavailable: load …」）点名 `dsh-jobs`——即声明缺失的 `ctx.jobs` 服务的 Service Definition 包；Service Definition 包自身的 API（其 README 与直接挂载防线）会指向各 Service provider，因此当另一个后端日后成为推荐默认时，生产方的消息依旧正确。生产方、`JobKindMap` 声明合并和控制器仍然只导入 `@deepseek-ai/dsh-jobs`。 +各组合在原先加载 `dsh-jobs` 的位置改为加载 `dsh-jobs-local`：CLI（命令行界面）的 cordis.yml 配置项、`agent-spine-demo`、各测试 harness，以及工具目录生成器的启动流程。生产方的配置错误诊断信息（「background jobs unavailable: load …」）点名 `dsh-jobs`——即声明缺失的 `ctx.jobs` 服务的 Service Definition 包；Service Definition 包自身的 API（其 README 与直接挂载防线）会指向各 Service Provider，因此当另一个后端日后成为推荐默认时，生产方的消息依旧正确。生产方、`JobKindMap` 声明合并和控制器仍然只导入 `@deepseek-ai/dsh-jobs`。 该 seam 保持进程内约定语义不变：`JobStart.run()` 仍然传入回调和确切的 `Agent` 对象，因此持久化或跨进程后端在能满足此 Service Definition 之前仍有设计工作要做（身份、重启、所有权、观察）。这次拆分把该项未来工作移出了每个 Consumer 的依赖图；它并不预先设计后端。 ## 曾考虑的替代方案 -**在第二个后端出现之前保持具体服务（维持现状）。**这正是运行时 Agent Note 当初的立场：在第二个 Service provider 出现前抽取 Service Definition，可能固化错误的边界。该方案落选，因为这条边界已不再是臆测：九个服务方法及其语义自引入以来在每一次生产方集成中都保持稳定，它们正是 `dsh-tool-jobs` 与各生产方已经面向编程的那套接口，而且仓库约定默认将可替换能力拆成三个包。剩余风险（持久化后端可能需要变更约定）不因这次拆分而改变：无论拆分与否，这类变更都会落在 Service Definition 包里；而若维持现状，它们今天还会连带搅动每个 Consumer 的提供方依赖。 +**在第二个后端出现之前保持具体服务（维持现状）。**这正是运行时 Agent Note 当初的立场：在第二个 Service Provider 出现前抽取 Service Definition，可能固化错误的边界。该方案落选，因为这条边界已不再是臆测：九个服务方法及其语义自引入以来在每一次生产方集成中都保持稳定，它们正是 `dsh-tool-jobs` 与各生产方已经面向编程的那套接口，而且仓库约定默认将可替换能力拆成三个包。剩余风险（持久化后端可能需要变更约定）不因这次拆分而改变：无论拆分与否，这类变更都会落在 Service Definition 包里；而若维持现状，它们今天还会连带搅动每个 Consumer 的提供方依赖。 -**在单个包内仅抽取 Service Definition（在具体类旁导出一个抽象类）。**否决，因为它在运作层面并未分离任何东西：Consumer 依然依赖携带 Service provider 及其依赖项的那个包，而替换后端若不把本地 Service provider 纳入自身依赖图，就仍然无法发布。在这里，包边界才是独立演进的单位。 +**在单个包内仅抽取 Service Definition（在具体类旁导出一个抽象类）。**否决，因为它在运作层面并未分离任何东西：Consumer 依然依赖携带 Service Provider 及其依赖项的那个包，而替换后端若不把本地 Service Provider 纳入自身依赖图，就仍然无法发布。在这里，包边界才是独立演进的单位。 **拆出 `types.ts` 但让服务保持具体。**基于同样的理由否决：类型并不是完整能力，`ctx.jobs` Service Definition 及其方法约定才是。生产方需要的是服务键和语义，而不只是类型形状。 ## 后果 -换来的是：任务注册表如今与全仓库通行的 seam 形态一致；持久化、远程或带插桩的注册表将是一个实现九个抽象方法的同级 Service provider，这样的注册表落地时，任何生产方、控制器或 `JobKindMap` 扩展方都无需改动。Service Definition 的 README 陈述约定；生命周期簿记方面的事实归 Service provider 的 README 所有。注册表行为测试套件（所有者清理、结算、等待、拆除）随 `dsh-jobs-local` 存放；Service Definition 包保留一个桩子类（stub subclass）测试，固定 `ctx.jobs` 下的注册行为与单一服务的重复注册行为，外加基于探针的不变式测试套件。 +换来的是：任务注册表如今与全仓库通行的 seam 形态一致；持久化、远程或带插桩的注册表将是一个实现九个抽象方法的同级 Service Provider，这样的注册表落地时，任何生产方、控制器或 `JobKindMap` 扩展方都无需改动。Service Definition 的 README 陈述约定；生命周期簿记方面的事实归 Service Provider 的 README 所有。注册表行为测试套件（所有者清理、结算、等待、拆除）随 `dsh-jobs-local` 存放；Service Definition 包保留一个桩子类（stub subclass）测试，固定 `ctx.jobs` 下的注册行为与单一服务的重复注册行为，外加基于探针的不变式测试套件。 -代价是：多出一个包，即多一份 manifest（元数据清单）、tsconfig、README 与不变式配套插件；同时各组合必须点名 Service provider 包。`abstract` 在运行时会被擦除，而这个包名过去正是可挂载的具体注册表，因此直接挂载 Service Definition 时，其构造函数会明确报错——一条陈旧的组合配置行会在加载时得到「load a Service provider such as @deepseek-ai/dsh-jobs-local」，而不是一个未完整注册的 `ctx.jobs` 在远离错误配置处才失败。 +代价是：多出一个包，即多一份 manifest（元数据清单）、tsconfig、README 与不变式配套插件；同时各组合必须点名 Service Provider 包。`abstract` 在运行时会被擦除，而这个包名过去正是可挂载的具体注册表，因此直接挂载 Service Definition 时，其构造函数会明确报错——一条陈旧的组合配置行会在加载时得到「load a Service Provider such as @deepseek-ai/dsh-jobs-local」，而不是一个未完整注册的 `ctx.jobs` 在远离错误配置处才失败。 diff --git a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.i18n.yaml index 03c1e1092e..8422759a46 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-26-subprocess-seam.md -2026-07-26-subprocess-seam.md: f738c5be517d7f915cf5cb0f42506339259c62a2 -2026-07-26-subprocess-seam.zh.md: 078648d1d676f2d5889df4ec5793de687713cbb9 +2026-07-26-subprocess-seam.md: aa7a989a0321760c9bc278df8356a57f4dd0d459 +2026-07-26-subprocess-seam.zh.md: 22de6774b866b9b7a0248dc7b06587f7f3235fdc diff --git a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.md b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.md index f738c5be51..aa7a989a03 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.md +++ b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.md @@ -13,7 +13,7 @@ English | [中文](2026-07-26-subprocess-seam.zh.md) A new `subprocess/` capability family owns "run and manage a process"; the bash family keeps "run a bash command" and consumes it: - **`@deepseek-ai/dsh-subprocess` (Service Definition)** — the abstract `SubprocessRuntime` owning `ctx.subprocess`: executable lookup, fully explicit ordinary spawns, and the terminal primitive added by the [portable execution-world decision](2026-07-28-portable-execution-world-consumers.md). Each stdio stream independently selects `'pipe'`, `'inherit'`, or bounded collection `{ maxBytes, spill? }`; stdin selects `'ignore'`, `'pipe'`, or `{ data }`. `SubprocessOutcome` carries exit facts with deliberately no timeout/cancel classification, while collected output remains on the handle after settlement. The Service Definition also owns process and terminal handles, the shared scrub, and `DSH_ENV_PREFIX`/`DshEnvironment`/`CollectedOutput`; `argv` is never shell-interpreted. -- **`@deepseek-ai/dsh-subprocess-local` (Service provider)** — `LocalSubprocessRuntime` over the former `run.ts` plumbing (`spawn.ts`) plus `node-pty`: detached groups, bounded collection and private spill files, executable lookup, foreground/session inspection, and disposal that terminates and joins every managed process. `terminate()` owns TERM→grace→KILL for the tree, `waitForExit()` observes tree liveness, and injected `taskkill /T` covers Windows. Ordinary and terminal spawns apply the Service Definition's case-insensitive `KEY`/`PASSWORD`/`SECRET`/`TOKEN` scrub before explicit env. The provider has no config; every limit arrives on the spec, while Bash and PTY presentation environment overrides stay in their Consumers. +- **`@deepseek-ai/dsh-subprocess-local` (Service Provider)** — `LocalSubprocessRuntime` over the former `run.ts` plumbing (`spawn.ts`) plus `node-pty`: detached groups, bounded collection and private spill files, executable lookup, foreground/session inspection, and disposal that terminates and joins every managed process. `terminate()` owns TERM→grace→KILL for the tree, `waitForExit()` observes tree liveness, and injected `taskkill /T` covers Windows. Ordinary and terminal spawns apply the Service Definition's case-insensitive `KEY`/`PASSWORD`/`SECRET`/`TOKEN` scrub before explicit env. The provider has no config; every limit arrives on the spec, while Bash and PTY presentation environment overrides stay in their Consumers. - **`dsh-bash-local` (Consumer)** — `inject: ['subprocess']`; maps each resolved `ShellExecSpec` onto a `SubprocessSpawnSpec` (`['bash', '-c', command]`), keeps its config, `resolve()` defaulting, fused-deadline `timedOut`/`aborted` classification, the `[stderr]`-marked background read merge with its consuming cursor, and the `onProcessDone` subclass hook. `dsh-bash-sandbox` is unchanged apart from redeclaring the inherited inject; it still wraps at the command-string level and re-enters the inherited spawn path. - **`dsh-shell` (Service Definition)** — re-exports the moved vocabulary from `dsh-subprocess`, so no bash Consumer changes an import; `ShellExecRequest`/`ShellExecSpec`/`ShellProcess` and the sandbox facts remain bash-owned. diff --git a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.zh.md b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.zh.md index 078648d1d6..22de6774b8 100644 --- a/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-26-subprocess-seam.zh.md @@ -13,7 +13,7 @@ Status: implemented 新的 `subprocess/` 能力家族拥有「运行并管理一个进程」；bash 家族保留「运行一条 bash 命令」，并成为前者的消费方： - **`@deepseek-ai/dsh-subprocess`（Service Definition）**——拥有 `ctx.subprocess` 的抽象 `SubprocessRuntime`：可执行文件查找、完全显式的普通 spawn，以及[可移植执行环境决策](2026-07-28-portable-execution-world-consumers.md)新增的终端原语。每条 stdio 流独立选择 `'pipe'`、`'inherit'` 或有界收集 `{ maxBytes, spill? }`；stdin 选择 `'ignore'`、`'pipe'` 或 `{ data }`。`SubprocessOutcome` 只承载刻意不含超时／取消分类的退出事实，收集输出在结算后仍留在句柄上。该 Service Definition 还拥有进程与终端句柄、共享凭据清除，以及 `DSH_ENV_PREFIX`/`DshEnvironment`/`CollectedOutput`；`argv` 绝不经过 shell 解释。 -- **`@deepseek-ai/dsh-subprocess-local`（Service provider）**——`LocalSubprocessRuntime` 构建在原 `run.ts` 管道（现为 `spawn.ts`）与 `node-pty` 之上：detached 进程组、有界收集与私有 spill 文件、可执行文件查找、前台／会话检查，以及终止每个受管进程并等待其退出的 dispose。`terminate()` 拥有面向进程树的 TERM→宽限→KILL，`waitForExit()` 观察进程树存活性，可注入的 `taskkill /T` 覆盖 Windows。普通与终端 spawn 都先应用 Service Definition 对 `KEY`/`PASSWORD`/`SECRET`/`TOKEN` 不区分大小写的清除，再合并显式 env。该 Service provider 没有配置；每项限制都随 spec 到达，Bash 与 PTY 的呈现环境覆盖仍归各自 Consumer 所有。 +- **`@deepseek-ai/dsh-subprocess-local`（Service Provider）**——`LocalSubprocessRuntime` 构建在原 `run.ts` 管道（现为 `spawn.ts`）与 `node-pty` 之上：detached 进程组、有界收集与私有 spill 文件、可执行文件查找、前台／会话检查，以及终止每个受管进程并等待其退出的 dispose。`terminate()` 拥有面向进程树的 TERM→宽限→KILL，`waitForExit()` 观察进程树存活性，可注入的 `taskkill /T` 覆盖 Windows。普通与终端 spawn 都先应用 Service Definition 对 `KEY`/`PASSWORD`/`SECRET`/`TOKEN` 不区分大小写的清除，再合并显式 env。该 Service Provider 没有配置；每项限制都随 spec 到达，Bash 与 PTY 的呈现环境覆盖仍归各自 Consumer 所有。 - **`dsh-bash-local`（Consumer）**——`inject: ['subprocess']`；把每个解析后的 `ShellExecSpec` 映射为一个 `SubprocessSpawnSpec`（`['bash', '-c', command]`），并保留自身配置、`resolve()` 默认值补全、基于融合 deadline 的 `timedOut`/`aborted` 分类、带 `[stderr]` 标记的后台读取合并及其消费游标，以及 `onProcessDone` 子类钩子。`dsh-bash-sandbox` 除了重新声明继承来的 inject 之外没有变化；它仍在命令字符串层面做包装，并重新进入继承的 spawn 路径。 - **`dsh-shell`（Service Definition）**——把迁走的词汇从 `dsh-subprocess` 重导出，因此没有任何 bash Consumer 需要改动导入；`ShellExecRequest`/`ShellExecSpec`/`ShellProcess` 与沙箱事实仍归 bash 所有。 diff --git a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.i18n.yaml index 10e1fbef20..a81c4706e7 100644 --- a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.md -2026-07-27-dispose-ladder-to-consumer.md: ab2afd313448438752e15e0f89230124cb95232f -2026-07-27-dispose-ladder-to-consumer.zh.md: b181b2c3286c42d85eb91ca9ac5acf624e5c7a28 +2026-07-27-dispose-ladder-to-consumer.md: 58d835864d2f6544152fdf09cf6e93380793a2ae +2026-07-27-dispose-ladder-to-consumer.zh.md: dc7413e85fa6e52de14f51fd175c7b37b43029a4 diff --git a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.md b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.md index ab2afd3134..58d835864d 100644 --- a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.md +++ b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.md @@ -14,10 +14,10 @@ The ladder moves to its one consumer. `dsh-subagent-acp` owns `disposeAcpChild(c ## Alternatives considered -**Keep the ladder on the handle as a convenience.** Rejected: a Service Definition method every Service provider must implement is not a convenience, it is contract surface — and this one encodes one consumer's cooperation shape (stdin-EOF-first) as if it were process vocabulary. The seam's own README already had to caveat that children quiescing on other signals need "their own tier-1", which is the admission that the ladder is policy. +**Keep the ladder on the handle as a convenience.** Rejected: a Service Definition method every Service Provider must implement is not a convenience, it is contract surface — and this one encodes one consumer's cooperation shape (stdin-EOF-first) as if it were process vocabulary. The seam's own README already had to caveat that children quiescing on other signals need "their own tier-1", which is the admission that the ladder is policy. **Move the ladder to a shared helper package.** Rejected: one consumer. A second out-of-process backend with the same stdin-EOF cooperation shape can lift `disposeAcpChild` to shared code when it exists; extracting now would recreate `dsh-subagent-subprocess`, the single-purpose library this change deleted. ## Consequences -Bought: the Service Definition is one method and one type smaller; Service providers owe four verbs and no teardown policy; the cooperative EOF window lives beside the ACP config field that tunes it, while the subprocess owner alone owns the termination window and final join. Cost: a future backend wanting EOF-first teardown writes ~20 lines against the verbs (or lifts the ACP helper); the ladder's tier tests live in the ACP suite, and the Service Definition suite pins the verbs the ladder composes (bounded `waitForExit` false before escalation and an unbounded whole-tree join after it) instead of the composed policy. +Bought: the Service Definition is one method and one type smaller; Service Providers owe four verbs and no teardown policy; the cooperative EOF window lives beside the ACP config field that tunes it, while the subprocess owner alone owns the termination window and final join. Cost: a future backend wanting EOF-first teardown writes ~20 lines against the verbs (or lifts the ACP helper); the ladder's tier tests live in the ACP suite, and the Service Definition suite pins the verbs the ladder composes (bounded `waitForExit` false before escalation and an unbounded whole-tree join after it) instead of the composed policy. diff --git a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.zh.md b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.zh.md index b181b2c328..dc7413e85f 100644 --- a/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-27-dispose-ladder-to-consumer.zh.md @@ -14,10 +14,10 @@ Status: implemented ## 曾考虑的替代方案 -**把阶梯作为便利方法留在句柄上。**否决：一个每个 Service provider 都必须实现的 Service Definition 方法不是便利，而是约定的一部分——而这一个把某一消费方的协作模式（stdin EOF 打头）当作进程词汇来编码。seam 自己的 README 早已不得不加注「依赖其他信号才能完全停稳的子进程需要自己的第一阶」，这本身就是承认该阶梯是策略。 +**把阶梯作为便利方法留在句柄上。**否决：一个每个 Service Provider 都必须实现的 Service Definition 方法不是便利，而是约定的一部分——而这一个把某一消费方的协作模式（stdin EOF 打头）当作进程词汇来编码。seam 自己的 README 早已不得不加注「依赖其他信号才能完全停稳的子进程需要自己的第一阶」，这本身就是承认该阶梯是策略。 **把阶梯移到共享辅助包。**否决：只有一个消费方。当第二个具有相同 stdin EOF 协作模式的进程外后端出现时，可以再把 `disposeAcpChild` 提升为共享代码；现在抽取只会重造 `dsh-subagent-subprocess`——本次变更删掉的那个单一用途库。 ## 后果 -买到的：Service Definition 少了一个方法和一个类型；Service provider 只欠四个动词，不欠拆卸策略；协作式 EOF 时间窗与调节它的 ACP 配置字段住在一起，而终止时间窗与最终的整树退出等待仅由子进程责任方拥有。代价：未来想要 EOF 打头拆卸的后端需针对这些动词写约 20 行（或直接搬 ACP 的辅助函数）；阶梯的层级测试位于 ACP 套件，Service Definition 套件转而钉住阶梯所组合的动词（升级前有界 `waitForExit` 返回假，升级后无界等待整棵进程树退出），而非组合后的策略。 +买到的：Service Definition 少了一个方法和一个类型；Service Provider 只欠四个动词，不欠拆卸策略；协作式 EOF 时间窗与调节它的 ACP 配置字段住在一起，而终止时间窗与最终的整树退出等待仅由子进程责任方拥有。代价：未来想要 EOF 打头拆卸的后端需针对这些动词写约 20 行（或直接搬 ACP 的辅助函数）；阶梯的层级测试位于 ACP 套件，Service Definition 套件转而钉住阶梯所组合的动词（升级前有界 `waitForExit` 返回假，升级后无界等待整棵进程树退出），而非组合后的策略。 diff --git a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.i18n.yaml b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.i18n.yaml index 32746bd58f..bcb20fd6c8 100644 --- a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.i18n.yaml +++ b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.md -2026-07-31-code-runtime-portable-identifier-seam.md: 7692660c5577a9d647e8c55c8e808c1293d03e4f -2026-07-31-code-runtime-portable-identifier-seam.zh.md: 668fb46a80737d0cbf0ea79e820f1baeb17c4a5c +2026-07-31-code-runtime-portable-identifier-seam.md: 6d75f0b0872a5d4b92403f597f5551276e2d7c9f +2026-07-31-code-runtime-portable-identifier-seam.zh.md: 68515d7a4d9d26d6c510654255d36b615afc2b7d diff --git a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.md b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.md index 7692660c55..6d75f0b087 100644 --- a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.md +++ b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.md @@ -8,11 +8,11 @@ English | [中文](2026-07-31-code-runtime-portable-identifier-seam.zh.md) The code-runtime seam promises that a binding-namespace list valid on one backend is valid on every backend, so a Code Mode consumer can hand the same bindings to any registered runtime without knowing its language. The first backend, `dsh-code-runtime-worker-thread`, privately owned the identifier rules that enforce part of that promise: an `IDENTIFIER` regex that allowed the JS-only `$`, a `RESERVED_WORDS` set holding only ECMAScript keywords, and a `RESERVED_ERROR_PROPERTIES` set of three JS `Error` slots. Those rules described the worker's own language, not the seam's portability contract. -A second backend written against a different language (CPython) would either re-declare its own rules — letting `lambda` pass the worker and fail Python, or `$tools` pass the worker and fail every non-JS backend — or import the worker's, inverting the dependency so a Service provider reached into a sibling Service provider. Neither keeps the portability promise real: it would hold only for the backend a caller happened to test against. +A second backend written against a different language (CPython) would either re-declare its own rules — letting `lambda` pass the worker and fail Python, or `$tools` pass the worker and fail every non-JS backend — or import the worker's, inverting the dependency so a Service Provider reached into a sibling Service Provider. Neither keeps the portability promise real: it would hold only for the backend a caller happened to test against. ## Decision -The Service Definition package (`@deepseek-ai/dsh-code-runtime`) exports the portable-identifier exclusion contract as four named constants, and every Service provider imports them rather than re-declaring: +The Service Definition package (`@deepseek-ai/dsh-code-runtime`) exports the portable-identifier exclusion contract as four named constants, and every Service Provider imports them rather than re-declaring: - `PORTABLE_RESERVED_WORDS` — the union of ECMAScript and Python reserved words. A namespace global or error-class name matching any is refused on all backends, so `lambda` is refused even though it is a legal JS parameter name. Adding a language widens this union, which is a deliberate breaking review of existing binding names. - `RESERVED_BINDING_GLOBALS` — globals some backend owns in the program's namespace: `console` (the worker's log capture), `__dsh_main__`/`__builtins__`/`__name__` (the Python bootstrap's wrapper and seeded module globals), and `__debug__` (not a seeded slot but a CPython compile-time constant that rejects assignment, so an injected global under that name is unreachable — the same portability split by a different mechanism). Refused everywhere so a namespace list cannot pick a name that works on one backend and collides on another. @@ -21,7 +21,7 @@ The Service Definition package (`@deepseek-ai/dsh-code-runtime`) exports the por The Service Definition also narrows the portable identifier subset to `[A-Za-z_][A-Za-z0-9_]*` (documented on `CodeBindingNamespace.global` and `CodeBindingErrorClass`), dropping the JS-only `$`. The worker consumes the shared constants directly under their exported names — `PORTABLE_RESERVED_WORDS` for both binding-global and error-class names, `RESERVED_BINDING_GLOBALS` for backend-owned slots, `RESERVED_ERROR_MEMBERS` plus `DUNDER_MEMBER` for error members — with no local re-alias; its `IDENTIFIER` regex loses `$`. -The constants live in the Service Definition even though the worker is the only shipped backend: the whole point is that the contract is language-agnostic and owned above any single language. A Service provider that violated it would be the bug, and the shared set is where a reviewer looks to see what "portable" means. +The constants live in the Service Definition even though the worker is the only shipped backend: the whole point is that the contract is language-agnostic and owned above any single language. A Service Provider that violated it would be the bug, and the shared set is where a reviewer looks to see what "portable" means. ## Scope @@ -33,7 +33,7 @@ This decision delivers only the Service Definition extension and the worker's ad **Each backend declares its own exclusions.** Rejected: it makes the portability promise per-backend. A binding list the caller tested on the worker could be refused by Python, which is exactly the split the seam exists to prevent. -**The Python backend imports the worker's constants.** Rejected: it inverts the dependency — the seam's Service providers would reach into a sibling implementation for a contract neither owns. The contract belongs above both, at the seam. +**The Python backend imports the worker's constants.** Rejected: it inverts the dependency — the seam's Service Providers would reach into a sibling implementation for a contract neither owns. The contract belongs above both, at the seam. **Keep `$` in the portable identifier subset.** Rejected: `$` is JS-only spelling. Allowing it would let `$tools` pass the worker and fail every non-JS backend, breaking portability for a purely cosmetic gain. diff --git a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.zh.md b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.zh.md index 668fb46a80..68515d7a4d 100644 --- a/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.zh.md +++ b/.agents/notes/implemented/architecture/2026-07-31-code-runtime-portable-identifier-seam.zh.md @@ -8,11 +8,11 @@ Status: implemented code-runtime seam 承诺：在一个后端上有效的绑定命名空间列表，在每个后端上都有效，因此 Code Mode 消费方可以把同一组绑定交给任何已注册的运行时，而不必知道它的语言。首个后端 `dsh-code-runtime-worker-thread` 私自拥有了执行这项承诺一部分的标识符规则：一个允许 JS 专有 `$` 的 `IDENTIFIER` 正则、一个只含 ECMAScript 关键字的 `RESERVED_WORDS` 集合，以及一个含三个 JS `Error` 槽位的 `RESERVED_ERROR_PROPERTIES` 集合。这些规则描述的是 worker 自身的语言，而非 seam 的可移植性约定。 -一个针对不同语言（CPython）编写的第二后端，要么重新声明自己的规则——让 `lambda` 通过 worker 却在 Python 上失败，或让 `$tools` 通过 worker 却在每个非 JS 后端上失败——要么导入 worker 的规则，从而反转依赖，使一个 Service provider 伸手进入另一个兄弟 Service provider。二者都无法让可移植承诺成真：它只对调用方恰好测试过的那个后端成立。 +一个针对不同语言（CPython）编写的第二后端，要么重新声明自己的规则——让 `lambda` 通过 worker 却在 Python 上失败，或让 `$tools` 通过 worker 却在每个非 JS 后端上失败——要么导入 worker 的规则，从而反转依赖，使一个 Service Provider 伸手进入另一个兄弟 Service Provider。二者都无法让可移植承诺成真：它只对调用方恰好测试过的那个后端成立。 ## Decision -Service Definition 包（`@deepseek-ai/dsh-code-runtime`）以四个具名常量导出可移植标识符排除约定，每个 Service provider 导入它们而非重新声明： +Service Definition 包（`@deepseek-ai/dsh-code-runtime`）以四个具名常量导出可移植标识符排除约定，每个 Service Provider 导入它们而非重新声明： - `PORTABLE_RESERVED_WORDS`——ECMAScript 与 Python 保留字的联集。任何命名空间 global 或 error-class 名称匹配其中之一，都在所有后端上被拒绝，因此 `lambda` 即便是合法的 JS 参数名也被拒绝。新增一门语言即扩宽此联集，这是对现有绑定名称的一次有意的破坏性复审。 - `RESERVED_BINDING_GLOBALS`——某个后端在程序命名空间中拥有的 global：`console`（worker 的日志捕获）、`__dsh_main__`/`__builtins__`/`__name__`（Python bootstrap 的包装器与预置模块 global），以及 `__debug__`（不是 seed 的槽位，而是 CPython 编译期常量，赋值会被拒，故以该名注入的 global 不可达——同一种可移植性分裂，只是机制不同）。在所有后端上被拒绝，使命名空间列表无法选到一个在某后端能用、在另一后端冲突的名称。 @@ -21,7 +21,7 @@ Service Definition 包（`@deepseek-ai/dsh-code-runtime`）以四个具名常量 Service Definition 同时把可移植标识符子集收窄为 `[A-Za-z_][A-Za-z0-9_]*`（记录在 `CodeBindingNamespace.global` 与 `CodeBindingErrorClass` 上），去掉 JS 专有的 `$`。worker 直接以这些常量的导出名称消费它们——binding-global 与 error-class 名称用 `PORTABLE_RESERVED_WORDS`、后端拥有槽位用 `RESERVED_BINDING_GLOBALS`、error member 用 `RESERVED_ERROR_MEMBERS` 加 `DUNDER_MEMBER`——不再本地起别名；其 `IDENTIFIER` 正则去掉 `$`。 -尽管 worker 是唯一已交付的后端，这些常量仍置于 Service Definition：要点正是该约定与语言无关，且由高于任何单一语言的层级拥有。违反它的 Service provider 才是 bug，而共享集合正是复审者查看「可移植」含义的地方。 +尽管 worker 是唯一已交付的后端，这些常量仍置于 Service Definition：要点正是该约定与语言无关，且由高于任何单一语言的层级拥有。违反它的 Service Provider 才是 bug，而共享集合正是复审者查看「可移植」含义的地方。 ## Scope @@ -33,7 +33,7 @@ Service Definition 同时把可移植标识符子集收窄为 `[A-Za-z_][A-Za-z0 **每个后端声明自己的排除集。** 拒绝：这让可移植承诺变成逐后端成立。调用方在 worker 上测过的绑定列表可能被 Python 拒绝，而这正是 seam 存在要防止的分裂。 -**Python 后端导入 worker 的常量。** 拒绝：这反转依赖——seam 的 Service provider 会为一个二者都不拥有的约定伸手进入兄弟实现。约定属于二者之上，即 seam。 +**Python 后端导入 worker 的常量。** 拒绝：这反转依赖——seam 的 Service Provider 会为一个二者都不拥有的约定伸手进入兄弟实现。约定属于二者之上，即 seam。 **在可移植标识符子集中保留 `$`。** 拒绝：`$` 是 JS 专有拼写。允许它会让 `$tools` 通过 worker 却在每个非 JS 后端上失败，为纯粹表面的好处破坏可移植性。 diff --git a/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.i18n.yaml index 61be0dddfb..290ede1714 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.i18n.yaml +++ b/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.i18n.yaml @@ -3,4 +3,4 @@ # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.md 2026-08-11-bounded-background-job-admission.md: 8fa5bec07647947b730c436284da71b83deedb48 -2026-08-11-bounded-background-job-admission.zh.md: d827e07aacc7bc933474577214d94bab9fe5f5c3 +2026-08-11-bounded-background-job-admission.zh.md: 79e759041cbf9d6e12b444f47e9d9ef0aa218532 diff --git a/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.zh.md b/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.zh.md index d827e07aac..79e759041c 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.zh.md +++ b/.agents/notes/implemented/bug-fix/2026-08-11-bounded-background-job-admission.zh.md @@ -12,7 +12,7 @@ Status: implemented ## 决策 -`LocalJobRegistry` 拥有 `maxConcurrentJobsPerOwner` 配置字段。它只接受正的安全整数，默认值为 `10`，并通过 Service provider 的 Cordis schema、typed `agent-spine-demo` 组合包与 ACP 应用配置提供。组合包只传输该值；其含义归进程内 Service provider 所有。 +`LocalJobRegistry` 拥有 `maxConcurrentJobsPerOwner` 配置字段。它只接受正的安全整数，默认值为 `10`，并通过 Service Provider 的 Cordis schema、typed `agent-spine-demo` 组合包与 ACP 应用配置提供。组合包只传输该值；其含义归进程内 Service Provider 所有。 [通用任务运行时决策](../architecture/2026-06-20-generic-long-running-tool-runtime.md)拥有共享 Task 生命周期与控制 API；本记录只拥有进程内准入策略。 @@ -34,7 +34,7 @@ owner 与服务释放保留现有顺序：请求取消，在生产方释放资 ## 验证 -任务 Service provider 测试覆盖默认与显式上限、生产方执行前拒绝、id 计数器不变、`stopping` 占位、每种终态释放、确切 owner 隔离、同会话替代对象、共享无 owner 桶、非法配置、owner 清理和服务拆除。spine 与 ACP 组合测试固定 typed 转发。一条 keyless ACP 回放以 1 为上限启动真实 Loader 组合，启动一个真实后台 Bash 进程，观察第二次启动返回可操作错误，按返回的 job id 停止第一个任务，并验证被拒绝生产方的标记文件从未生成。 +任务 Service Provider 测试覆盖默认与显式上限、生产方执行前拒绝、id 计数器不变、`stopping` 占位、每种终态释放、确切 owner 隔离、同会话替代对象、共享无 owner 桶、非法配置、owner 清理和服务拆除。spine 与 ACP 组合测试固定 typed 转发。一条 keyless ACP 回放以 1 为上限启动真实 Loader 组合，启动一个真实后台 Bash 进程，观察第二次启动返回可操作错误，按返回的 job id 停止第一个任务，并验证被拒绝生产方的标记文件从未生成。 ## 曾考虑的替代方案 diff --git a/.agents/notes/implemented/feature/2026-06-15-code-mode.i18n.yaml b/.agents/notes/implemented/feature/2026-06-15-code-mode.i18n.yaml index da4b80d9d5..7b213dc96f 100644 --- a/.agents/notes/implemented/feature/2026-06-15-code-mode.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-06-15-code-mode.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-06-15-code-mode.md -2026-06-15-code-mode.md: adabf80ab03bdae57bba84957cdacf648c16c2f6 -2026-06-15-code-mode.zh.md: 24d83b9f896a73b449852d28c3e0a376fb6ace5a +2026-06-15-code-mode.md: dbf77557c9f1aa59deed443b74ca3ef83137d773 +2026-06-15-code-mode.zh.md: 6f263d946cf7632a0747dcb61f3dd22105e21e0c diff --git a/.agents/notes/implemented/feature/2026-06-15-code-mode.md b/.agents/notes/implemented/feature/2026-06-15-code-mode.md index adabf80ab0..dbf77557c9 100644 --- a/.agents/notes/implemented/feature/2026-06-15-code-mode.md +++ b/.agents/notes/implemented/feature/2026-06-15-code-mode.md @@ -19,7 +19,7 @@ Tool presentation belongs to the registry that owns tool visibility: implementin Three decisions, each elaborated in its own section below: 1. **Code Mode is a first-class presentation mode of `ToolRuntime`** (`dsh-tools`), selected by a validated `mode` config: `'native'` (the default, contributing the visible capability schemas), `'code'` (the registry contributes only its reserved `run_code` transport plus a generated SDK `.d.ts` in the system prompt), or `'both'` (native schemas and the transport + SDK). The registry constructs its canonical contribution at the source; the cooperative prompt-assembly result remains authoritative, and the logged request header records exactly that returned presentation. -2. **Code execution is a capability seam** — `packages/code-runtime/` contains the Service Definition package `@deepseek-ai/dsh-code-runtime`, which owns `ctx.codeRuntime` ([capability seams](../architecture/2026-06-13-capability-seams.md); Consumer = `dsh-tools`, with core-consumes-a-seam precedent in `agent-loop` → `dsh-llm`). The runtime knows nothing about tools: it is handed a program and named async bindings, runs the program, and reports `{ value, logs, error? }`. Language and substrate are backend properties, so a future Python or container backend is another Service provider package, not a redesign. +2. **Code execution is a capability seam** — `packages/code-runtime/` contains the Service Definition package `@deepseek-ai/dsh-code-runtime`, which owns `ctx.codeRuntime` ([capability seams](../architecture/2026-06-13-capability-seams.md); Consumer = `dsh-tools`, with core-consumes-a-seam precedent in `agent-loop` → `dsh-llm`). The runtime knows nothing about tools: it is handed a program and named async bindings, runs the program, and reports `{ value, logs, error? }`. Language and substrate are backend properties, so a future Python or container backend is another Service Provider package, not a redesign. 3. **The shipped implementation is `@deepseek-ai/dsh-code-runtime-worker-thread`**: one fresh Node worker thread per run, executing the model's TypeScript after type-strip, with bindings bridged over the message port, an empty environment, configurable heap/output/time caps, and hard termination. Its trust posture is bash-equivalent by design — no unsafe-acknowledgement flags — because the harness already ships `dsh-bash-local`, which executes arbitrary model-written shell commands with strictly *more* ambient authority. This note owns Code Mode's presentation, composition, isolation, and settlement foundation. The later [typed tool-return Agent Note](2026-07-20-code-mode-typed-tool-returns.md) owns the generated output map, canonical binding values, `ToolCallError`, and the lossless outer-output boundary. diff --git a/.agents/notes/implemented/feature/2026-06-15-code-mode.zh.md b/.agents/notes/implemented/feature/2026-06-15-code-mode.zh.md index 24d83b9f89..6f263d946c 100644 --- a/.agents/notes/implemented/feature/2026-06-15-code-mode.zh.md +++ b/.agents/notes/implemented/feature/2026-06-15-code-mode.zh.md @@ -19,7 +19,7 @@ Cloudflare 的 [Code Mode](https://blog.cloudflare.com/code-mode/) 提出了一 三项决策，各自在下方独立小节中展开： 1. **Code Mode 是 `ToolRuntime`（`dsh-tools`）的一等呈现模式**，通过经校验的 `mode` 配置选择：`'native'`（默认，贡献可见能力 schema）、`'code'`（注册表仅贡献其保留的 `run_code` 传输通道加一份生成的 SDK `.d.ts` 到系统提示词中）或 `'both'`（原生 schema 加传输通道 + SDK）。注册表在源头构建其规范贡献；协作式提示词组装的结果仍具权威性，记录在日志中的请求头精确反映该返回的呈现。 -2. **代码执行是一个能力 seam**——`packages/code-runtime/` 包含 Service Definition 包 `@deepseek-ai/dsh-code-runtime`，拥有 `ctx.codeRuntime`（[能力 seam](../architecture/2026-06-13-capability-seams.md)；消费方 = `dsh-tools`，core 消费 seam 的先例见 `agent-loop` → `dsh-llm`）。运行时对工具一无所知：它接收一段程序和命名的异步绑定，执行程序，报告 `{ value, logs, error? }`。语言和基底是后端属性，因此未来的 Python 或容器后端只是另一个 Service 提供方包，而非重新设计。 +2. **代码执行是一个能力 seam**——`packages/code-runtime/` 包含 Service Definition 包 `@deepseek-ai/dsh-code-runtime`，拥有 `ctx.codeRuntime`（[能力 seam](../architecture/2026-06-13-capability-seams.md)；消费方 = `dsh-tools`，core 消费 seam 的先例见 `agent-loop` → `dsh-llm`）。运行时对工具一无所知：它接收一段程序和命名的异步绑定，执行程序，报告 `{ value, logs, error? }`。语言和基底是后端属性，因此未来的 Python 或容器后端只是另一个 Service Provider 包，而非重新设计。 3. **交付的实现是 `@deepseek-ai/dsh-code-runtime-worker-thread`**：每次运行 spawn 一个全新的 Node worker 线程，对模型的 TypeScript 进行 type-strip 后执行，绑定通过消息端口桥接，环境为空，堆/输出/时间上限可配置，并支持硬终止。其信任姿态在设计上等同于 bash——无需 unsafe-acknowledgement flag——因为 harness 已经交付了 `dsh-bash-local`，后者以严格*更高*的环境权限执行模型编写的任意 shell 命令。 本说明负责定义 Code Mode 的呈现、组合、隔离与结算基础。后续的[类型化工具返回值 Agent Note](2026-07-20-code-mode-typed-tool-returns.md)负责定义生成的输出映射、规范绑定值、`ToolCallError` 和无损外层输出边界。 diff --git a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.i18n.yaml b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.i18n.yaml index dcb4d5e33a..1870906b95 100644 --- a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md -2026-06-18-compaction-capability-seam.md: 77ccd615a20524fad2a1ee47130ba2837d83c663 -2026-06-18-compaction-capability-seam.zh.md: a18e7593a5b654685a2e033dd2f0a721da74502e +2026-06-18-compaction-capability-seam.md: 71ea7144cd843364fd77db0dd2c8a0d1e8bab1ac +2026-06-18-compaction-capability-seam.zh.md: bd7ab06b3a012d83d3f918a3ebd5a553624780e9 diff --git a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md index 77ccd615a2..71ea7144cd 100644 --- a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md +++ b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md @@ -14,7 +14,7 @@ Two forces shape the design. First, compaction policy and reusable token measure ## Decision -### Compaction is a capability seam with separate Service Definition and Service provider roles +### Compaction is a capability seam with separate Service Definition and Service Provider roles Per the [capability-seams Agent Note](../architecture/2026-06-13-capability-seams.md), compaction ships as separate packages so the contract, the algorithm, and (later) the consumer API evolve independently: diff --git a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.zh.md b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.zh.md index a18e7593a5..bd7ab06b3a 100644 --- a/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.zh.md +++ b/.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.zh.md @@ -14,7 +14,7 @@ Status: implemented ## 决策 -### 压缩是一个能力 seam，Service Definition 与 Service 提供方角色分离 +### 压缩是一个能力 seam，Service Definition 与 Service Provider 角色分离 遵循[能力 seam Agent Note](../architecture/2026-06-13-capability-seams.md)，压缩以独立包发布，使约定、算法和（后续的）消费方 API 各自独立演进： diff --git a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.i18n.yaml b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.i18n.yaml index 431665bbb7..e8ece4d624 100644 --- a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md -2026-06-21-subagent-capability-seam.md: 337e1f8aaf8db8b9d41bbf0ad02f7f8a9468e4fb -2026-06-21-subagent-capability-seam.zh.md: f88ad5cfba5b7f364064ad6b82fc918bdf5d7ef3 +2026-06-21-subagent-capability-seam.md: fa3b4f570bfccdc849a38b3eda16c1c8dd7b1827 +2026-06-21-subagent-capability-seam.zh.md: b25fe64377f98af92dbccb87f755627926975ef2 diff --git a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md index 337e1f8aaf..fa3b4f570b 100644 --- a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md +++ b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md @@ -21,7 +21,7 @@ The harness has a long-deferred seam for **subagents** — an agent delegating w ### Why not the bash seam shape -The bash seam ([capability seams](../architecture/2026-06-13-capability-seams.md)) registers exactly one `ShellExecutor` per context; loading a second throws. That is correct for bash (one machine, one way to run a command) but wrong here: coexistence is the requirement. So the subagent service is a **named-provider registry** — each implementation registers under a unique name and a caller picks one by name — mirroring the **LLM adapter registry** (`LlmRuntime.registerAdapter`), not the single-service bash executor. The seam is still three-package (Service Definition / Service provider / Consumer); only the "one vs. many implementations" axis differs. +The bash seam ([capability seams](../architecture/2026-06-13-capability-seams.md)) registers exactly one `ShellExecutor` per context; loading a second throws. That is correct for bash (one machine, one way to run a command) but wrong here: coexistence is the requirement. So the subagent service is a **named-provider registry** — each implementation registers under a unique name and a caller picks one by name — mirroring the **LLM adapter registry** (`LlmRuntime.registerAdapter`), not the single-service bash executor. The seam is still three-package (Service Definition / Service Provider / Consumer); only the "one vs. many implementations" axis differs. ## Decision diff --git a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.zh.md b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.zh.md index f88ad5cfba..b25fe64377 100644 --- a/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.zh.md +++ b/.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.zh.md @@ -21,7 +21,7 @@ harness 有一个长期搁置的 seam 用于 **subagent**：一个 agent 将工 ### 为何不采用 bash seam 的形状 -bash seam（[能力 seam](../architecture/2026-06-13-capability-seams.md)）在每个上下文中只注册恰好一个 `ShellExecutor`；加载第二个会抛异常。这对 bash 是正确的（一台机器、一种执行命令的方式），但对这里是错误的：共存才是需求。因此 subagent 服务是一个**命名提供方注册表**——每个实现以唯一名称注册，调用方按名称选择——镜像 **LLM（大语言模型）适配器注册表**（`LlmRuntime.registerAdapter`），而非单服务的 bash 执行器。seam 仍然是由三类包构成的结构（Service Definition / Service provider / Consumer）；只是「一个 vs. 多个实现」这个维度不同。 +bash seam（[能力 seam](../architecture/2026-06-13-capability-seams.md)）在每个上下文中只注册恰好一个 `ShellExecutor`；加载第二个会抛异常。这对 bash 是正确的（一台机器、一种执行命令的方式），但对这里是错误的：共存才是需求。因此 subagent 服务是一个**命名提供方注册表**——每个实现以唯一名称注册，调用方按名称选择——镜像 **LLM（大语言模型）适配器注册表**（`LlmRuntime.registerAdapter`），而非单服务的 bash 执行器。seam 仍然是由三类包构成的结构（Service Definition / Service Provider / Consumer）；只是「一个 vs. 多个实现」这个维度不同。 ## 决策 diff --git a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.i18n.yaml b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.i18n.yaml index 948301ca44..d066d73db4 100644 --- a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md -2026-07-05-dynamic-workflows.md: bf7b98891d19c31be7e1ca2763f98bb3668ab659 -2026-07-05-dynamic-workflows.zh.md: f3c06ae17e7cf185865d03e261e4e6bbabcabd1f +2026-07-05-dynamic-workflows.md: eff37365534cd41e46c98e20a5e763a233330647 +2026-07-05-dynamic-workflows.zh.md: 15aa8326958faebb53d33153b1c1537af199a4c5 diff --git a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md index bf7b98891d..eff3736553 100644 --- a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md +++ b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md @@ -10,7 +10,7 @@ The harness can delegate ONE task to ONE child (`dsh-tool-subagent`), but work t ## Decision -A workflow capability family at `packages/workflow/` in the bash seam shape (Service Definition / Service provider / Consumer), plus the structured-output foundation it needs on the subagent seam. +A workflow capability family at `packages/workflow/` in the bash seam shape (Service Definition / Service Provider / Consumer), plus the structured-output foundation it needs on the subagent seam. ### The script contract (Claude Code-compatible) diff --git a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.zh.md b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.zh.md index f3c06ae17e..15aa832695 100644 --- a/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.zh.md +++ b/.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.zh.md @@ -10,7 +10,7 @@ harness 可以通过 `dsh-tool-subagent` 将一个任务委派给一个子 agent ## 决策 -在 `packages/workflow/` 下以 bash seam 的形态（Service Definition／Service provider／Consumer）提供一组工作流能力，以及它在 subagent seam 上所需的结构化输出基础。 +在 `packages/workflow/` 下以 bash seam 的形态（Service Definition／Service Provider／Consumer）提供一组工作流能力，以及它在 subagent seam 上所需的结构化输出基础。 ### 脚本约定（兼容 Claude Code） diff --git a/.agents/notes/implemented/feature/2026-07-06-approval-seam.i18n.yaml b/.agents/notes/implemented/feature/2026-07-06-approval-seam.i18n.yaml index 1033d13843..b04c952748 100644 --- a/.agents/notes/implemented/feature/2026-07-06-approval-seam.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-06-approval-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-06-approval-seam.md -2026-07-06-approval-seam.md: 5c62a175b0a96ecc8dd3f5b09b618b8e4d5e7612 -2026-07-06-approval-seam.zh.md: 091db8347e0a5bd5ee475809dde6b90d183d3112 +2026-07-06-approval-seam.md: ace41ebbb94cc24c2fdd3e7ae2d3a69b28b169af +2026-07-06-approval-seam.zh.md: 3e06c3ba26dd6d85555727dc0c62cbffe0a2a1da diff --git a/.agents/notes/implemented/feature/2026-07-06-approval-seam.md b/.agents/notes/implemented/feature/2026-07-06-approval-seam.md index 5c62a175b0..ace41ebbb9 100644 --- a/.agents/notes/implemented/feature/2026-07-06-approval-seam.md +++ b/.agents/notes/implemented/feature/2026-07-06-approval-seam.md @@ -97,7 +97,7 @@ Snapshots record allowed and rejected sandbox escalation through `session/reques - **An inline `tools/pre-execute` permission gate in the ACP bridge** — rejected: prompting for every bridge-owned call hardwires the asking policy into the transport, cannot serve a second asker (sandbox escalation happens after execution starts, with no pre-execute moment), and leaves hook-produced `ask` decisions without a shared mechanism. - **The generic user-questions seam (`ctx.userQuestions`)** — rejected as the approval mechanism: the two share a skeleton (route by agent, block for a human, handle absence), but approval's contract is narrower in every dimension that matters: a closed outcome vocabulary instead of free text, a protocol-native prompt attached to a tool call instead of a generic form, mandatory fail-closed absence, and audit events. Approval therefore does not ride the shipped `packages/interaction/user-questions` / `ask_user_question` elicitation path — an elicitation form is not a permission prompt, and a free-text answer is not a closed outcome; sharing provider plumbing stays open if the two ever converge. - **Static optional injection in `dsh-tools`** — rejected: the vendored cordis `Inject` type has no optional flag — the object form maps service names to intercept config, and a declared inject gates the fiber. `ctx.get('approval')` is the documented opportunistic-consumption pattern (the `tool-bash` owner-token lookup, the loop's persistence probe), reads presence per call, and degrades correctly across HMR without extra machinery. -- **The capability-seam three-package split** — rejected: Service Definition / Service provider / Consumer fits a seam whose Service provider is swappable (bash-local vs bash-sandbox). Here the service body is fixed mechanism and the variable part is listeners that live with their owners — splitting would manufacture a Service provider package with nothing in it ("don't split preemptively"). +- **The capability-seam three-package split** — rejected: Service Definition / Service Provider / Consumer fits a seam whose Service Provider is swappable (bash-local vs bash-sandbox). Here the service body is fixed mechanism and the variable part is listeners that live with their owners — splitting would manufacture a Service Provider package with nothing in it ("don't split preemptively"). - **Offering `allow_always` now** — rejected: the protocol can express it, but honoring it means designing grant storage, scope identity, and revocation (§ Deferred). Advertising an option the harness cannot honor manufactures doomed grants. ## Consequences diff --git a/.agents/notes/implemented/feature/2026-07-06-approval-seam.zh.md b/.agents/notes/implemented/feature/2026-07-06-approval-seam.zh.md index 091db8347e..3e06c3ba26 100644 --- a/.agents/notes/implemented/feature/2026-07-06-approval-seam.zh.md +++ b/.agents/notes/implemented/feature/2026-07-06-approval-seam.zh.md @@ -97,7 +97,7 @@ ACP 桥只应答其会话映射所拥有的精确 agent 对象。它携带既有 - **在 ACP 桥中内联 `tools/pre-execute` 权限门禁**：否决。对桥拥有的每次调用都弹出提示，会将请求策略硬编码进传输层，无法服务第二个发起方（沙箱升级发生在执行开始之后，没有 pre-execute 时刻），且钩子产生的 `ask` 决策没有共享机制。 - **通用用户交互 seam（`ctx.userQuestions`）**：否决作为审批机制。二者骨架相似（按 agent 路由、阻塞等待人类、处理缺失），但审批的约定在每个关键维度上都更窄：封闭的结果词汇而非自由文本、附着在工具调用上的协议原生提示而非通用表单、强制的缺失时失败关闭、以及审计事件。因此审批不走已交付的 `packages/interaction/user-questions` / `ask_user_question` 信息征集路径——信息征集表单不是权限提示，自由文本应答不是封闭结果；如果二者将来趋同，共享提供方管道仍然开放。 - **`dsh-tools` 中的静态可选注入**：否决。vendor 的 Cordis `Inject` 类型没有 optional 标志——对象形式将服务名映射到拦截配置，声明的 inject 会阻塞 fiber。`ctx.get('approval')` 是文档化的机会性消费模式（`tool-bash` 的 owner-token 查找、loop 的持久化探测），按调用读取存在性，跨 HMR 正确降级，无需额外机制。 -- **能力 seam 的三包拆分**：否决。Service Definition/Service provider/Consumer 适合 Service provider 可替换的 seam（bash-local vs bash-sandbox）。此处服务体是固定机制，可变部分是留在各自通道拥有者插件中的监听器——拆分只会制造一个空的 Service provider 包（「不要预防性拆分」）。 +- **能力 seam 的三包拆分**：否决。Service Definition/Service Provider/Consumer 适合 Service Provider 可替换的 seam（bash-local vs bash-sandbox）。此处服务体是固定机制，可变部分是留在各自通道拥有者插件中的监听器——拆分只会制造一个空的 Service Provider 包（「不要预防性拆分」）。 - **现在就提供 `allow_always`**：否决。协议能表达它，但兑现它意味着设计授权存储、作用域标识和撤销（§ 延后）。展示 harness 无法兑现的选项只会制造注定失败的授权。 ## 后果 diff --git a/.agents/notes/implemented/feature/2026-07-06-sandbox.i18n.yaml b/.agents/notes/implemented/feature/2026-07-06-sandbox.i18n.yaml index b3cba4dcb8..3cf7133534 100644 --- a/.agents/notes/implemented/feature/2026-07-06-sandbox.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-06-sandbox.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-06-sandbox.md -2026-07-06-sandbox.md: 76733c619e3e34a6ee49c80aaf5c3bd4d48d82f7 -2026-07-06-sandbox.zh.md: 36ecbadd0589b4859389961aa52181de3f034dcc +2026-07-06-sandbox.md: 62c46c99a2283b03cf75d8823783367dd6b3473a +2026-07-06-sandbox.zh.md: 82c2e7962800c007a207f0204bf47cef01f79a36 diff --git a/.agents/notes/implemented/feature/2026-07-06-sandbox.md b/.agents/notes/implemented/feature/2026-07-06-sandbox.md index 76733c619e..62c46c99a2 100644 --- a/.agents/notes/implemented/feature/2026-07-06-sandbox.md +++ b/.agents/notes/implemented/feature/2026-07-06-sandbox.md @@ -54,7 +54,7 @@ OS subprocess confinement applies to the bash executor, including hook commands, Policy rides each CALL, not the provider: two consumers may confine under different policies at the same instant (bash under `read-only` while a confined child agent keeps its state directory writable), and an approved escalated retry is a new call with a wider policy — inexpressible under a config-fixed provider mode. -The seam confines SAME-WORLD subprocesses only: a backend shares the host's filesystem and kernel. Containers, microVMs, and remote executors are NOT backends of this seam — they replace the Service providers for whole capability seams (`ctx.shell`, `ctx.fs`) as environment-coherent groups, because an agent whose bash runs in a container while its fs tools write the host lives in two split worlds. +The seam confines SAME-WORLD subprocesses only: a backend shares the host's filesystem and kernel. Containers, microVMs, and remote executors are NOT backends of this seam — they replace the Service Providers for whole capability seams (`ctx.shell`, `ctx.fs`) as environment-coherent groups, because an agent whose bash runs in a container while its fs tools write the host lives in two split worlds. Left open, for the phase that needs them: whether network restriction arrives as a separate `network_mode` or merges into `sandbox_mode` once a runner enforces both, and whether `SandboxPolicy` grows extra writable-root grants now (the launcher already speaks `--rw `) or only when escalation needs them. @@ -199,7 +199,7 @@ Costs and accepted limits: In-repo precedents this design copies or contrasts with: -- [The capability-seams Agent Note](../architecture/2026-06-13-capability-seams.md) — the Service Definition / Service provider / Consumer split and the "don't split preemptively" timing rule the second consumer satisfied. +- [The capability-seams Agent Note](../architecture/2026-06-13-capability-seams.md) — the Service Definition / Service Provider / Consumer split and the "don't split preemptively" timing rule the second consumer satisfied. - The `dsh-shell` request/spec split ([the bash vocabulary catalog](../../../../docs/subsystems/shell.md)) — the complete `sandboxPolicy` rides its per-call carrier, and the explicit-`resolve()` defaulting convention. - [The approval seam Agent Note](2026-07-06-approval-seam.md) — the channel escalation asks through; its answerer waterfall, audit pair, and one-package rationale are recorded there. - [Event-sourced sessions](../architecture/2026-06-11-event-sourced-sessions.md) and [standalone log-only events](../simplification/2026-07-28-remove-synthetic-log-only-turns.md) — the log-as-store foundation the per-session modes fold over, and the explicit durability boundary the anchoring design obeys. diff --git a/.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md b/.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md index 36ecbadd05..82c2e79628 100644 --- a/.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md +++ b/.agents/notes/implemented/feature/2026-07-06-sandbox.zh.md @@ -54,7 +54,7 @@ OS 子进程约束适用于 bash 执行器（包括钩子命令），后续还 策略随每次调用而非提供方携带：两个消费方可以在同一时刻以不同策略约束（bash 在 `read-only` 下运行，而一个受约束的子 agent 保持其状态目录可写），且经批准的升级重试是一次带有更宽策略的新调用——在配置固定的提供方模式下无法表达。 -该 seam 仅约束与宿主共享文件系统和内核的子进程。容器、microVM 和远程执行器不是此 seam 的后端——它们以环境一致的组替换整个能力 seam（`ctx.shell`、`ctx.fs`）的 Service provider，因为一个 bash 在容器中运行而 fs 工具写主机的 agent 生活在两个割裂的世界中。 +该 seam 仅约束与宿主共享文件系统和内核的子进程。容器、microVM 和远程执行器不是此 seam 的后端——它们以环境一致的组替换整个能力 seam（`ctx.shell`、`ctx.fs`）的 Service Provider，因为一个 bash 在容器中运行而 fs 工具写主机的 agent 生活在两个割裂的世界中。 留待需要时再决定：网络限制是作为独立的 `network_mode` 到来，还是在某个 runner 同时强制两者后合并进 `sandbox_mode`；以及 `SandboxPolicy` 是现在就增加额外的可写根授权（launcher 已支持 `--rw `），还是等到升级机制需要时再加。 @@ -199,7 +199,7 @@ fs/web/todo 在进程内执行，因此它们的沙箱语义是各自能力边 本设计复制或对比的仓库内先例： -- [能力 seam Agent Note](../architecture/2026-06-13-capability-seams.md)——Service Definition/Service provider/Consumer 拆分与「不要过早拆分」的时机规则（第二个消费方满足了该规则）。 +- [能力 seam Agent Note](../architecture/2026-06-13-capability-seams.md)——Service Definition/Service Provider/Consumer 拆分与「不要过早拆分」的时机规则（第二个消费方满足了该规则）。 - `dsh-shell` 的 request/spec 拆分（[bash 词汇目录](../../../../docs/subsystems/shell.md)）——完整的 `sandboxPolicy` 搭载其按调用载体，以及显式 `resolve()` 默认约定。 - [批准 seam Agent Note](2026-07-06-approval-seam.md)——升级请求通过的通道；其应答器 waterfall（瀑布式事件）、审计对和单包理由记录在那里。 - [事件溯源会话](../architecture/2026-06-11-event-sourced-sessions.md)与[独立纯日志事件](../simplification/2026-07-28-remove-synthetic-log-only-turns.md)——按会话模式 fold 所依赖的日志即存储基础，以及锚定设计遵守的显式持久性边界。 diff --git a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.i18n.yaml b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.i18n.yaml index 354bc66050..7357dd353d 100644 --- a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.md -2026-07-27-typescript-sdk-and-sdk-subagent-backend.md: 8b17603e5c90941778835befd84d114a3f3cd78b -2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md: fe5026871778bfcdcb85b71704d79e6fa678188d +2026-07-27-typescript-sdk-and-sdk-subagent-backend.md: 84314eaf5827464767666b1b9c65e105ea4e869a +2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md: 48f292514844d59d2084731b30bcb5ba7fb563d5 diff --git a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.md b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.md index 8b17603e5c..84314eaf58 100644 --- a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.md +++ b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.md @@ -10,7 +10,7 @@ The stdio JSON-RPC serving surface (`@deepseek-ai/dsh-sdk-jsonrpc-server`, the [ ## Decision -Three packages, layered exactly like the existing Python stack, plus one Service provider registration: +Three packages, layered exactly like the existing Python stack, plus one Service Provider registration: - **`@deepseek-ai/dsh-sdk-protocol`** (`packages/sdk/protocol/`) — the wire made shared and nominal. `JsonRpcLineTransport` moves here verbatim from `dsh-sdk-jsonrpc-server` (which now imports it), and `types.ts` names every payload the server speaks: `InitializeParams/Result`, `SessionPromptParams/Result`, the four notification payloads, and the `HarnessSdkRequestMap`/`HarnessSdkNotificationMap` indexes. The package root explicitly exports that complete interface and provides no source-module deep imports. The server's `notify()` call sites are typed against these named payloads, so server drift breaks compilation, not clients. One behavioral change: an error response now rejects with `JsonRpcResponseError` carrying the wire `code`/`data` (the Python client already preserved these; the old transport threw a bare `Error` with only the message). - **`@deepseek-ai/dsh-sdk-client`** (`packages/sdk/client/`) — the TypeScript twin of `python/sdk`: `HarnessClient` (spawn, frame, fan out notifications, typed error surfaces, close-to-quiescence via the shared dispose ladder) under `DeepSeekHarness`/`HarnessSession` (lazy start, memoized `initialize`, `run()` pairing one `session/prompt` with its `session.finished`). Its package-root consumer interface explicitly exports both client layers, caller-facing types, and the protocol-owned `JsonRpcResponseError`; source modules, normalization helpers, and the notification producer stay internal. `TurnResult.events` contains only the root session's typed events, while `notifications` retains session ids across the root and descendants discovered from `subagent.started`; session-tree scoping is client-side, mirroring `client.py`. Deliberate asymmetries with Python: the launch spec is explicit `command`/`args` (no bundled-runtime resolution — that is a distribution concern with no TS consumer yet); `env` replaces rather than merges (callers own credential policy; `scrubbedParentEnv` from the subprocess seam is one import away); `TurnResult` carries the structured `reason` (Python exposes only `status`); teardown walks a private stdin-EOF → SIGTERM → SIGKILL ladder to actual exit (the client runs outside any harness context, so it cannot ride `ctx.subprocess`). @@ -30,7 +30,7 @@ Four tiers, per [testing policy](../../../../docs/testing.md): ## Alternatives considered -**Import wire types from `dsh-sdk-jsonrpc-server` instead of extracting a protocol package.** Makes every SDK consumer (including `subagent-dsh-sdk`, which must not serve JSON-RPC) depend on the server plugin and its `dsh-agent`/`dsh-llm-deepseek` peer set, and leaves the notification payloads anonymous. The capability-seam rule (Service Definition / Service provider / Consumer as separate packages) already names this shape; the transport is genuinely two-sided. +**Import wire types from `dsh-sdk-jsonrpc-server` instead of extracting a protocol package.** Makes every SDK consumer (including `subagent-dsh-sdk`, which must not serve JSON-RPC) depend on the server plugin and its `dsh-agent`/`dsh-llm-deepseek` peer set, and leaves the notification payloads anonymous. The capability-seam rule (Service Definition / Service Provider / Consumer as separate packages) already names this shape; the transport is genuinely two-sided. **Have `subagent-dsh-sdk` speak raw JSON-RPC without the client SDK.** Duplicates the request/notification pairing, subscription fan-out, timeout, and teardown logic the SDK exists to own; the user's ask was explicitly a backend that *uses* the SDK, and the layering earns its keep by making the backend ~200 lines of policy over a reusable client. diff --git a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md index fe50268717..48f2925148 100644 --- a/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md +++ b/.agents/notes/implemented/feature/2026-07-27-typescript-sdk-and-sdk-subagent-backend.zh.md @@ -10,7 +10,7 @@ stdio JSON-RPC 对外服务接口（`@deepseek-ai/dsh-sdk-jsonrpc-server`，见[ ## 决策 -三个包，分层与既有 Python 栈完全一致，外加一个 Service provider 注册： +三个包，分层与既有 Python 栈完全一致，外加一个 Service Provider 注册： - **`@deepseek-ai/dsh-sdk-protocol`**（`packages/sdk/protocol/`）—— 把线协议做成共享且具名。`JsonRpcLineTransport` 从 `dsh-sdk-jsonrpc-server` 原样移入（后者现在导入它），`types.ts` 为服务器所说的每个载荷命名：`InitializeParams/Result`、`SessionPromptParams/Result`、四个通知载荷，以及 `HarnessSdkRequestMap`/`HarnessSdkNotificationMap` 索引。该包根显式导出这一完整接口，且不提供指向源模块的深层导入。服务器的 `notify()` 调用点以这些具名载荷标注类型，服务器漂移会先破坏编译而不是破坏客户端。一处行为变化：错误响应现在以携带线上 `code`/`data` 的 `JsonRpcResponseError` 拒绝（Python 客户端本就保留这些；旧传输只抛携带消息的裸 `Error`）。 - **`@deepseek-ai/dsh-sdk-client`**（`packages/sdk/client/`）—— `python/sdk` 的 TypeScript 孪生：`HarnessClient`（spawn、分帧、通知扇出、有类型的错误表面、经共享 dispose（资源释放）阶梯关闭至完全停稳）之上是 `DeepSeekHarness`/`HarnessSession`（惰性启动、记忆化 `initialize`、`run()` 把一个 `session/prompt` 与其 `session.finished` 配对）。其包根消费方接口显式导出两层客户端、面向调用方的类型，以及协议包所拥有的 `JsonRpcResponseError`；源模块、规范化辅助函数和通知投递端都保留为内部实现。`TurnResult.events` 只包含根会话的类型化事件，而 `notifications` 则保留根会话及从 `subagent.started` 发现的后代各自的会话 id；基于 `subagent.started` 血缘边的会话树范围限定在客户端完成，镜像 `client.py`。与 Python 的刻意不对称：启动规格是显式 `command`/`args`（无捆绑运行时解析——那是尚无 TS 消费方的发行问题）；`env` 整体替换而非合并（凭据策略归调用方；subprocess seam 的 `scrubbedParentEnv` 一个 import 即得）；`TurnResult` 携带结构化 `reason`（Python 只暴露 `status`）；拆除走私有的 stdin-EOF → SIGTERM → SIGKILL 阶梯直到真正退出（客户端运行在任何 harness 上下文之外，无法搭乘 `ctx.subprocess`）。 @@ -30,7 +30,7 @@ stdio JSON-RPC 对外服务接口（`@deepseek-ai/dsh-sdk-jsonrpc-server`，见[ ## 考虑过的替代方案 -**从 `dsh-sdk-jsonrpc-server` 导入协议类型而不是提取协议包。** 会让每个 SDK 消费方（包括绝不能提供 JSON-RPC 服务的 `subagent-dsh-sdk`）依赖服务器插件及其 `dsh-agent`/`dsh-llm-deepseek` peer 集合，且通知载荷仍然匿名。能力 seam 规则（Service Definition/Service provider/Consumer 三个包分立）已经点名了这种形态；这个传输是货真价实的双边物。 +**从 `dsh-sdk-jsonrpc-server` 导入协议类型而不是提取协议包。** 会让每个 SDK 消费方（包括绝不能提供 JSON-RPC 服务的 `subagent-dsh-sdk`）依赖服务器插件及其 `dsh-agent`/`dsh-llm-deepseek` peer 集合，且通知载荷仍然匿名。能力 seam 规则（Service Definition/Service Provider/Consumer 三个包分立）已经点名了这种形态；这个传输是货真价实的双边物。 **让 `subagent-dsh-sdk` 直说裸 JSON-RPC、绕开客户端 SDK。** 会复制 SDK 存在意义所在的请求/通知配对、订阅扇出、超时与拆除逻辑；用户的要求明确是一个*使用* SDK 的后端，分层的回报是后端成为可复用客户端之上约 200 行的纯策略。 diff --git a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.i18n.yaml b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.i18n.yaml index df27661306..8d2b2035b0 100644 --- a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.i18n.yaml +++ b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/process/2026-07-02-tool-schema-catalog.md -2026-07-02-tool-schema-catalog.md: 5ae396d0942379f625b6e0ccb89030d8a34c2283 -2026-07-02-tool-schema-catalog.zh.md: 278a9e17dc9f8462ea70694f67ae7944a43765aa +2026-07-02-tool-schema-catalog.md: 21192b8caff386058008eed1417ef78c678190f7 +2026-07-02-tool-schema-catalog.zh.md: 66c01a5ea9f233cf22ef7ebc467c031692bde002 diff --git a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.md b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.md index 5ae396d094..21192b8caf 100644 --- a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.md +++ b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.md @@ -29,7 +29,7 @@ Booting has a cost the AST pass did not: there is no source declaration set to e ### A hand-maintained boot manifest is the irreducible policy -The filesystem discovers the tool-package inventory and the completeness guard rejects omissions. `TOOL_PACKAGES` still owns an explicit boot recipe for each package because required Service providers and config are policy, not facts that can be inferred safely from layout or injection names. +The filesystem discovers the tool-package inventory and the completeness guard rejects omissions. `TOOL_PACKAGES` still owns an explicit boot recipe for each package because required Service Providers and config are policy, not facts that can be inferred safely from layout or injection names. ### Scope diff --git a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.zh.md b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.zh.md index 278a9e17dc..66c01a5ea9 100644 --- a/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.zh.md +++ b/.agents/notes/implemented/process/2026-07-02-tool-schema-catalog.zh.md @@ -29,7 +29,7 @@ Cordis 目录是纯 TypeScript AST 遍历，因为每个事件/服务名都是 ### 手动维护的启动 manifest 是无法省去的策略 -文件系统负责发现工具包清单，完整性守卫负责拒绝遗漏。`TOOL_PACKAGES` 仍然为每个包持有一份显式的启动配方，因为所需的服务提供方和配置属于策略，不是能从目录布局或注入名称安全推断的事实。 +文件系统负责发现工具包清单，完整性守卫负责拒绝遗漏。`TOOL_PACKAGES` 仍然为每个包持有一份显式的启动配方，因为所需的 Service Provider 和配置属于策略，不是能从目录布局或注入名称安全推断的事实。 ### 范围 diff --git a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.i18n.yaml b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.i18n.yaml index e2ff001696..9c09464d87 100644 --- a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.i18n.yaml +++ b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.md -2026-06-26-fsspec-style-fs-seam.md: ec3ee9bd0781b64b804f58c32cb59afc7f05e0d4 -2026-06-26-fsspec-style-fs-seam.zh.md: a4e50c401e56854933bcaebd24cf9955949b3c31 +2026-06-26-fsspec-style-fs-seam.md: 927220a4042a47aa1a76926161427613f3a2b809 +2026-06-26-fsspec-style-fs-seam.zh.md: 52c55f82f77d4101f1e659d4642689e5aa3a804f diff --git a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.md b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.md index ec3ee9bd07..927220a404 100644 --- a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.md +++ b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.md @@ -105,7 +105,7 @@ This Agent Note reverses two decisions from [filesystem-capability-seam](../arch - Text reads no longer return backend-numbered line records or `full`/`partial` views; authorization is based on version freshness, so a windowed read can authorize edit when the file is unchanged. - Literal edit no longer sits behind the old `applyEdit` API that mixed backend mutation with seam-owned observation policy. It remains a provider primitive as `editText`, because version guard + literal match + atomic rewrite must stay inside the provider's mutation critical section. -It keeps the Service Definition / Service provider / Consumer discipline, consumer-never-imports-backend rule, backend-defined target/version/display metadata, atomic local writes, and the shared `FsError` taxonomy. +It keeps the Service Definition / Service Provider / Consumer discipline, consumer-never-imports-backend rule, backend-defined target/version/display metadata, atomic local writes, and the shared `FsError` taxonomy. ## Verification diff --git a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.zh.md b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.zh.md index a4e50c401e..52c55f82f7 100644 --- a/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.zh.md +++ b/.agents/notes/implemented/simplification/2026-06-26-fsspec-style-fs-seam.zh.md @@ -105,7 +105,7 @@ type FsWriteIntent = - 文本读取不再返回后端编号的行记录或 `full`/`partial` 视图；授权基于版本新鲜度，因此窗口化读取在文件未变时即可授权编辑。 - 字面编辑不再位于旧的 `applyEdit` API 之后（该 API 混合了后端变更与 seam 拥有的观测策略）。它作为 `editText` 保留为提供方原语，因为版本守卫 + 字面匹配 + 原子重写必须留在提供方的变更临界区内。 -保留的内容：Service Definition / Service provider / Consumer 纪律、消费方不导入后端规则、后端定义的 target/version/display 元数据、原子本地写入，以及共享的 `FsError` 分类体系。 +保留的内容：Service Definition / Service Provider / Consumer 纪律、消费方不导入后端规则、后端定义的 target/version/display 元数据、原子本地写入，以及共享的 `FsError` 分类体系。 ## 验证 diff --git a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.i18n.yaml b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.i18n.yaml index 75270e6a39..56bc51e639 100644 --- a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.i18n.yaml +++ b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.md -2026-07-19-required-cancellation-through-tool-capability-seams.md: 380204200711158fcda640fe25551293515fc49a -2026-07-19-required-cancellation-through-tool-capability-seams.zh.md: 631abfaa1cd21578437458cc194e277dc7883792 +2026-07-19-required-cancellation-through-tool-capability-seams.md: 478cd887d84ceae8a5a0cd455fb7cf4b4d562950 +2026-07-19-required-cancellation-through-tool-capability-seams.zh.md: f3afdc953b50751798b412d24ecd7a9efd7d9af2 diff --git a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.md b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.md index 3802042007..478cd887d8 100644 --- a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.md +++ b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.md @@ -18,7 +18,7 @@ Require an `AbortSignal` on every asynchronous same-process capability operation Each direct caller supplies a signal it owns or propagates from its own required operation context. Implementations may derive a child deadline or cancellation scope, but the derived signal remains linked to the upstream signal for the delegated lifetime. Capability implementations do not synthesize never-abort signals, use ambient async-local cancellation, or validate `AbortSignal` at runtime solely to repeat the typed same-process contract. -The migration begins with an inventory from every first-party `ToolDefinition.execute()` through the capability calls it awaits. It then changes each coherent Service Definition / Service provider / Consumer seam together, including tests and generated API documentation. Separate PRs may migrate filesystem, shell/task, web/provider, workflow/subagent, code-runtime, and similar families so each change remains reviewable, but no migrated interface keeps an optional compatibility overload under the repository's pre-release policy. +The migration begins with an inventory from every first-party `ToolDefinition.execute()` through the capability calls it awaits. It then changes each coherent Service Definition / Service Provider / Consumer seam together, including tests and generated API documentation. Separate PRs may migrate filesystem, shell/task, web/provider, workflow/subagent, code-runtime, and similar families so each change remains reviewable, but no migrated interface keeps an optional compatibility overload under the repository's pre-release policy. ### Scope boundary diff --git a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.zh.md b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.zh.md index 631abfaa1c..f3afdc953b 100644 --- a/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.zh.md +++ b/.agents/notes/proposed/architecture/2026-07-19-required-cancellation-through-tool-capability-seams.zh.md @@ -18,7 +18,7 @@ Status: proposed 每个直接调用方提供自己持有的信号，或从自身必填的操作上下文继续传递信号。实现可以派生子截止时间或取消作用域，但派生信号在委托期间仍须与上游信号关联。能力实现不得生成永不中止信号、使用环境式异步本地取消，也不得仅为重复类型化同进程约定而在运行时校验 `AbortSignal`。 -迁移首先从每个第一方 `ToolDefinition.execute()` 出发，沿其等待的能力调用进行清点；随后按内聚的 Service Definition／Service provider／Consumer seam，将测试与生成的 API 文档一并修改。文件系统、Bash 与任务、Web 与提供方、工作流与 subagent、代码运行时等能力族可以通过独立 PR（Pull Request）迁移，以保持每项变更可审查；但根据仓库的预发布原则，已经迁移的接口不得保留可选兼容重载。 +迁移首先从每个第一方 `ToolDefinition.execute()` 出发，沿其等待的能力调用进行清点；随后按内聚的 Service Definition／Service Provider／Consumer seam，将测试与生成的 API 文档一并修改。文件系统、Bash 与任务、Web 与提供方、工作流与 subagent、代码运行时等能力族可以通过独立 PR（Pull Request）迁移，以保持每项变更可审查；但根据仓库的预发布原则，已经迁移的接口不得保留可选兼容重载。 ### 范围边界 diff --git a/AGENTS.md b/AGENTS.md index 3fe315e212..2bef9661d5 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -106,7 +106,7 @@ Real-API tests and demos read `DEEPSEEK_API_KEY`, optional `DEEPSEEK_BASE_URL`, - **Waterfall listeners MUST call `next()`** to delegate; returning without it short-circuits the chain ([semantics](docs/cordis-primer.md#cordis-waterfall-semantics)). - **Model-visible ⟺ logged**: anything that reaches a model request must be reconstructable from the session log; a new model-visible input requires a session event. - **Plugins, not loop changes**: new behavior goes on documented extension points; changing `agent-loop` requires updating docs/architecture.md. -- **A capability seam comprises Service Definition / Service provider / Consumer roles.** It is complete, never one role; split only when roles evolve independently ([glossary](docs/glossary.md#capability-seam)). +- **A capability seam comprises Service Definition / Service Provider / Consumer roles.** It is complete, never one role; split only when roles evolve independently ([glossary](docs/glossary.md#capability-seam)). - **Prefer maintained dependencies over hand-rolling** when they genuinely delete owned code and tests ([policy](.agents/notes/implemented/process/2026-07-26-dependencies-over-hand-rolling.md)). - **Explicit > implicit at package boundaries**: defaulting is an explicit `resolve(request): Spec` step in the owning implementation, never a hidden `?? default` inside `run()` (the `dsh-shell` request/spec split is the template). - **No hardcoded tunables in plugins**: deployment-varying choices are validated `Config` fields changeable from cordis.yml; a `DEFAULT_*` constant or test hook is not configurability. Protocol constants, external specs, and security invariants stay fixed. diff --git a/docs/architecture.i18n.yaml b/docs/architecture.i18n.yaml index 482e683aa9..f077b66226 100644 --- a/docs/architecture.i18n.yaml +++ b/docs/architecture.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/architecture.md -architecture.md: ad5b9072d2731b0b68c5f6035dafe37bc6229de8 -architecture.zh.md: 24ccd3bfbbd86213134201e49c8e768037eecd38 +architecture.md: 77000ce9d4608d440e1d903eb80a42f2ed6435ef +architecture.zh.md: 268724d52c82e31c4fc2b51db59823f3720f9b91 diff --git a/docs/architecture.md b/docs/architecture.md index ad5b9072d2..77000ce9d4 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -97,7 +97,7 @@ The session log is the source of the context the model sees. `deriveMessages()` ## Capability seams -A **seam** is a swappable capability with three roles: a **Service Definition** declaring the interface, a **Service provider** implementing it, and a **Consumer** using it, commonly a model-facing tool. A package may combine roles, but one role alone is not a seam; adding a capability means designing all three ([capability graph](capability-seams.md)). +A **seam** is a swappable capability with three roles: a **Service Definition** declaring the interface, a **Service Provider** implementing it, and a **Consumer** using it, commonly a model-facing tool. A package may combine roles, but one role alone is not a seam; adding a capability means designing all three ([capability graph](capability-seams.md)). Seams are why one provider swap changes the whole product. Filesystem and subprocess providers share one execution world, so pointing them at a remote sandbox moves Bash, PTY, and LSP with them, with no provider forks. [Subagent providers](subsystems/subagent.md) vary just as widely behind one interface, from a fresh child agent to a delegated turn in another product. diff --git a/docs/architecture.zh.md b/docs/architecture.zh.md index 24ccd3bfbb..268724d52c 100644 --- a/docs/architecture.zh.md +++ b/docs/architecture.zh.md @@ -97,7 +97,7 @@ turn/end ## 能力 seam -一个 **seam** 是一项可替换能力，包含三种角色：声明接口的 **Service Definition**、实现它的 **Service provider**，以及使用它的 **Consumer**（通常是面向模型的工具）。一个包可以合并承担多个角色，但单一角色本身不是 seam；添加一项能力意味着把三者一并设计（[能力图](capability-seams.md)）。 +一个 **seam** 是一项可替换能力，包含三种角色：声明接口的 **Service Definition**、实现它的 **Service Provider**，以及使用它的 **Consumer**（通常是面向模型的工具）。一个包可以合并承担多个角色，但单一角色本身不是 seam；添加一项能力意味着把三者一并设计（[能力图](capability-seams.md)）。 seam 正是替换一个提供方就能改变整个产品的原因。文件系统与进程提供方共享同一个执行世界，因此把它们指向远程沙箱，也就把 Bash、PTY 和 LSP 一并搬了过去，无需提供方专用 fork。[subagent 提供方](subsystems/subagent.md)在同一个接口之后同样千差万别，从新建一个子 agent，到把一个轮次委派给另一个产品。 diff --git a/docs/cookbook/adding-a-package.i18n.yaml b/docs/cookbook/adding-a-package.i18n.yaml index d9cf8eb3a4..5cdb1404f8 100644 --- a/docs/cookbook/adding-a-package.i18n.yaml +++ b/docs/cookbook/adding-a-package.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/cookbook/adding-a-package.md -adding-a-package.md: 26a380fd3ec6b8b0447ad27d7ef79d3e58433cbe -adding-a-package.zh.md: 49a9fba820698d0c82c9700c31a28039fbc030c8 +adding-a-package.md: a78695735957395c5c900c3294b6778904557f85 +adding-a-package.zh.md: b7a749220fdc1581875851e2e4a7189ba7642b2d diff --git a/docs/cookbook/adding-a-package.md b/docs/cookbook/adding-a-package.md index 26a380fd3e..a786957359 100644 --- a/docs/cookbook/adding-a-package.md +++ b/docs/cookbook/adding-a-package.md @@ -40,7 +40,7 @@ Covered automatically by globs or package-manifest discovery — no edits needed ## 3. Decide the package topology -For a swappable capability, separate Service Definition / Service provider / Consumer roles into packages when they evolve independently (see docs/architecture.md § "Capability seams" — the shell trio is the template). A single-purpose plugin stays one package. +For a swappable capability, separate Service Definition / Service Provider / Consumer roles into packages when they evolve independently (see docs/architecture.md § "Capability seams" — the shell trio is the template). A single-purpose plugin stays one package. ### Name the role that exists diff --git a/docs/cookbook/adding-a-package.zh.md b/docs/cookbook/adding-a-package.zh.md index 49a9fba820..b7a749220f 100644 --- a/docs/cookbook/adding-a-package.zh.md +++ b/docs/cookbook/adding-a-package.zh.md @@ -40,7 +40,7 @@ package.json 不变式（由 `pnpm run constraints` / `scripts/check-workspace-c ## 3. 确定包拓扑 -对于可替换的能力，当 Service Definition／Service provider／Consumer 角色需要独立演进时，将它们拆分到不同包中（见 docs/architecture.md § "Capability seams"——shell 三组件是模板）。单一用途的插件保持为一个包。 +对于可替换的能力，当 Service Definition／Service Provider／Consumer 角色需要独立演进时，将它们拆分到不同包中（见 docs/architecture.md § "Capability seams"——shell 三组件是模板）。单一用途的插件保持为一个包。 ### 使用符合实际的角色名称 diff --git a/docs/glossary.i18n.yaml b/docs/glossary.i18n.yaml index ddedb8d9c7..f462345f43 100644 --- a/docs/glossary.i18n.yaml +++ b/docs/glossary.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/glossary.md -glossary.md: 1c8bbc86544092b1e8c752e53eed0a1217baa329 -glossary.zh.md: 510853d3d6a6f579c8e4cd609d714fe891e9cf10 +glossary.md: 9bff818d5a9f7688e8d2a2425b6e6a9555be3847 +glossary.zh.md: 98bbbefb8bfd152324b23e9791eb938398c12602 diff --git a/docs/glossary.md b/docs/glossary.md index 1c8bbc8654..9bff818d5a 100644 --- a/docs/glossary.md +++ b/docs/glossary.md @@ -6,7 +6,7 @@ Domain vocabulary for DeepSeek Harness uses one canonical term per concept. Term ## capability-seam -- **seam** — a *swappable capability* with three roles: a **Service Definition** (the Cordis `Service` that owns its `ctx.` and vocabulary types — an abstract class such as `ShellExecutor`, or a concrete registry such as `WebRuntime`, never a TypeScript `interface`), one or more **Service providers**, and one or more **Consumers** that inject the service. `packages/shell` is the canonical example: `dsh-shell` (Service Definition), `dsh-bash-local` / `dsh-bash-sandbox` (providers), and `dsh-tool-bash` (Consumer). Roles normally occupy separate packages when they evolve independently, but a package may own multiple roles when they are one concern (`dsh-llm` owns its Service Definition and Consumer). The seam is the complete capability, never one role; reserve the term for that meaning and name a constituent by its role, class, service, contract, or extension point. +- **seam** — a *swappable capability* with three roles: a **Service Definition** (the Cordis `Service` that owns its `ctx.` and vocabulary types — an abstract class such as `ShellExecutor`, or a concrete registry such as `WebRuntime`, never a TypeScript `interface`), one or more **Service Providers**, and one or more **Consumers** that inject the service. `packages/shell` is the canonical example: `dsh-shell` (Service Definition), `dsh-bash-local` / `dsh-bash-sandbox` (providers), and `dsh-tool-bash` (Consumer). Roles normally occupy separate packages when they evolve independently, but a package may own multiple roles when they are one concern (`dsh-llm` owns its Service Definition and Consumer). The seam is the complete capability, never one role; reserve the term for that meaning and name a constituent by its role, class, service, contract, or extension point. ## agent-scope diff --git a/docs/glossary.zh.md b/docs/glossary.zh.md index 510853d3d6..98bbbefb8b 100644 --- a/docs/glossary.zh.md +++ b/docs/glossary.zh.md @@ -6,7 +6,7 @@ DeepSeek Harness 的领域词汇为每个概念规定一个规范术语。各术 ## capability-seam -- **seam**：一种包含三种角色的*可替换能力*：**Service Definition**（拥有自身 `ctx.` 和词汇类型的 Cordis `Service`——可以是 `ShellExecutor` 这样的抽象类，也可以是 `WebRuntime` 这样的具体注册表，绝不是 TypeScript `interface`）、一个或多个 **Service provider**，以及一个或多个注入该服务的 **Consumer**。`packages/shell` 是规范范例：`dsh-shell`（Service Definition）、`dsh-bash-local` / `dsh-bash-sandbox`（提供方），以及 `dsh-tool-bash`（Consumer）。角色需要独立演进时通常位于不同包，但属于同一关注点时，一个包也可以承担多个角色（`dsh-llm` 同时承担 Service Definition 和 Consumer）。seam 是完整能力，绝不是其中一个角色；该术语仅保留此义，能力成员应按其角色、类、服务、约定或扩展点命名。 +- **seam**：一种包含三种角色的*可替换能力*：**Service Definition**（拥有自身 `ctx.` 和词汇类型的 Cordis `Service`——可以是 `ShellExecutor` 这样的抽象类，也可以是 `WebRuntime` 这样的具体注册表，绝不是 TypeScript `interface`）、一个或多个 **Service Provider**，以及一个或多个注入该服务的 **Consumer**。`packages/shell` 是规范范例：`dsh-shell`（Service Definition）、`dsh-bash-local` / `dsh-bash-sandbox`（提供方），以及 `dsh-tool-bash`（Consumer）。角色需要独立演进时通常位于不同包，但属于同一关注点时，一个包也可以承担多个角色（`dsh-llm` 同时承担 Service Definition 和 Consumer）。seam 是完整能力，绝不是其中一个角色；该术语仅保留此义，能力成员应按其角色、类、服务、约定或扩展点命名。 ## agent-scope diff --git a/docs/i18n/terminology.md b/docs/i18n/terminology.md index d1e58a99b4..feb1c96792 100644 --- a/docs/i18n/terminology.md +++ b/docs/i18n/terminology.md @@ -56,7 +56,8 @@ | Round | Round | | 回合、目标回合、Ralph 回合 | 外层策略使用 Round 时，领域层级为 Session > Round > Turn（轮次） > Step（步骤）；Round 是可选的外层策略迭代，并非每个会话轮次都具有的通用层级。Goal Round 与 Ralph Round 均保留英文。一个 Round 承载一个轮次，步骤隶属于该轮次；明确的零步骤轮次仍保持原义。 | | schema | schema | | | | | schema DSL | schema DSL | | | | -| seam | seam | | 接缝 | 一个可替换能力的整体，包含 Service Definition / Service provider / Consumer 三种角色；角色需要独立演化时才拆包，也可由同一包承担多个角色。以 `packages/shell` 为范例；Service Definition 是 Cordis `Service`（抽象类或具体 registry 服务），不是 TypeScript interface。任何单一角色、普通边界或扩展点都不能称为 seam。本仓库正文保留英文；与 `extension point` 是不同概念 | +| seam | seam | | 接缝 | 一个可替换能力的整体，包含 Service Definition / Service Provider / Consumer 三种角色；角色需要独立演化时才拆包，也可由同一包承担多个角色。以 `packages/shell` 为范例；Service Definition 是 Cordis `Service`（抽象类或具体 registry 服务），不是 TypeScript interface。任何单一角色、普通边界或扩展点都不能称为 seam。本仓库正文保留英文；与 `extension point` 是不同概念 | +| Service Provider | Service Provider | | Service provider | 能力 seam 的命名角色；单数固定写作 Service Provider，复数写作 Service Providers。泛指提供服务的 provider 不适用本词条 | | skill | skill | skill（技能） | | | | slot | slot | | 坑位、孔位 | 客户端架构中的具名可注册位置，保留英文 | | spill | spill | | | 工具输出超限落盘机制；组合词写 `spill 文件`、`spill 路径` | @@ -97,7 +98,7 @@ | cancel | 取消 | | | | | canary test | canary 测试 | | 金丝雀测试 | 本仓库保留 `canary` | | capability | 能力 | | | 必须与 `feature` → `功能` 区分 | -| capability seam | 能力 seam | | 功能 seam、能力接缝 | 本仓库 Service Definition、Service provider 与 Consumer 三种角色组成完整可替换能力的命名架构概念；普通 `seam` 仍按其词条处理 | +| capability seam | 能力 seam | | 功能 seam、能力接缝 | 本仓库 Service Definition、Service Provider 与 Consumer 三种角色组成完整可替换能力的命名架构概念；普通 `seam` 仍按其词条处理 | | feature | 功能 | | 能力 | SDK 产品与工程模型中的可管理产品单元 | | feature option | 功能选项 | | variant | 一项 SDK 功能内有限、可选择的实现或配置 | | checkpoint | 检查点 | | | | diff --git a/docs/subsystems/code-runtime.i18n.yaml b/docs/subsystems/code-runtime.i18n.yaml index cf1e004c03..6c5d91599c 100644 --- a/docs/subsystems/code-runtime.i18n.yaml +++ b/docs/subsystems/code-runtime.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/code-runtime.md -code-runtime.md: e677bcaef26f7999181825934b880514e425f615 -code-runtime.zh.md: e94dd77b1e430e7bd15633881d65521409819574 +code-runtime.md: 09036819d4fb6a4e2f83cf7923584780ca2211f8 +code-runtime.zh.md: 2e717f17313ce23cb37616199bd83776c0a40756 diff --git a/docs/subsystems/code-runtime.md b/docs/subsystems/code-runtime.md index e677bcaef2..09036819d4 100644 --- a/docs/subsystems/code-runtime.md +++ b/docs/subsystems/code-runtime.md @@ -2,7 +2,7 @@ English | [中文](code-runtime.zh.md) -The code-execution seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) whose Service Definition ([dsh-code-runtime](../../packages/code-runtime/code-runtime), `ctx.codeRuntime`) runs one model-written program against host-provided async bindings and reports what it printed and returned. Code execution is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). Backends differ by execution substrate and source language, both readonly descriptors on the service; the worker-thread Service provider and tool-registry Consumer are specified by the [Code Mode foundation](../../.agents/notes/implemented/feature/2026-06-15-code-mode.md) and [typed-return contract](../../.agents/notes/implemented/feature/2026-07-20-code-mode-typed-tool-returns.md). +The code-execution seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) whose Service Definition ([dsh-code-runtime](../../packages/code-runtime/code-runtime), `ctx.codeRuntime`) runs one model-written program against host-provided async bindings and reports what it printed and returned. Code execution is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). Backends differ by execution substrate and source language, both readonly descriptors on the service; the worker-thread Service Provider and tool-registry Consumer are specified by the [Code Mode foundation](../../.agents/notes/implemented/feature/2026-06-15-code-mode.md) and [typed-return contract](../../.agents/notes/implemented/feature/2026-07-20-code-mode-typed-tool-returns.md). Source: [`packages/code-runtime/code-runtime/src/types.ts`](../../packages/code-runtime/code-runtime/src/types.ts) diff --git a/docs/subsystems/code-runtime.zh.md b/docs/subsystems/code-runtime.zh.md index e94dd77b1e..2e717f1731 100644 --- a/docs/subsystems/code-runtime.zh.md +++ b/docs/subsystems/code-runtime.zh.md @@ -2,7 +2,7 @@ [English](code-runtime.md) | 中文 -代码执行 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)：其 Service Definition（[dsh-code-runtime](../../packages/code-runtime/code-runtime)，`ctx.codeRuntime`）使用宿主提供的异步绑定运行一段模型编写的程序，并报告其打印内容与返回值。代码执行是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。各后端的执行基底与源语言不同，这两项均为服务上的只读描述符；worker-thread Service provider 与工具注册表 Consumer 的约定见 [Code Mode 基础设计](../../.agents/notes/implemented/feature/2026-06-15-code-mode.md) 和[类型化返回约定](../../.agents/notes/implemented/feature/2026-07-20-code-mode-typed-tool-returns.md)。 +代码执行 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)：其 Service Definition（[dsh-code-runtime](../../packages/code-runtime/code-runtime)，`ctx.codeRuntime`）使用宿主提供的异步绑定运行一段模型编写的程序，并报告其打印内容与返回值。代码执行是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。各后端的执行基底与源语言不同，这两项均为服务上的只读描述符；worker-thread Service Provider 与工具注册表 Consumer 的约定见 [Code Mode 基础设计](../../.agents/notes/implemented/feature/2026-06-15-code-mode.md) 和[类型化返回约定](../../.agents/notes/implemented/feature/2026-07-20-code-mode-typed-tool-returns.md)。 源码：[`packages/code-runtime/code-runtime/src/types.ts`](../../packages/code-runtime/code-runtime/src/types.ts) diff --git a/docs/subsystems/compaction.i18n.yaml b/docs/subsystems/compaction.i18n.yaml index b3c2ffad64..33e1c12cd8 100644 --- a/docs/subsystems/compaction.i18n.yaml +++ b/docs/subsystems/compaction.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/compaction.md -compaction.md: 1e14c60161ef945069d9e6f72767dabdfa42e702 -compaction.zh.md: 60f5afb8c673c94c9c6f5802fb4f12e224e04203 +compaction.md: 95a3d4b844c6126a09d4fdaafdedcf987b21d1c6 +compaction.zh.md: 3b72bb4f81675119d869fb2f7439f4640e6a5a86 diff --git a/docs/subsystems/compaction.md b/docs/subsystems/compaction.md index 1e14c60161..95a3d4b844 100644 --- a/docs/subsystems/compaction.md +++ b/docs/subsystems/compaction.md @@ -2,7 +2,7 @@ English | [中文](compaction.zh.md) -The compaction seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) split like bash: Service Definition ([dsh-compaction](../../packages/compaction/compaction), `ctx.compaction`), Service provider (a backend such as [dsh-compaction-basic](../../packages/compaction/compaction-basic)), and human Consumer ([dsh-command-compact](../../packages/compaction/command-compact)). Compaction is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A tokenizer- or template-based backend is a sibling package implementing the same interface. Unlike bash, the interface necessarily depends on `dsh-session` and `dsh-llm`: its verbs act on an agent-owned `Session`, and its durable summary event uses the `ContentBlock` vocabulary (see the [compaction capability-seam Agent Note](../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)). +The compaction seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) split like bash: Service Definition ([dsh-compaction](../../packages/compaction/compaction), `ctx.compaction`), Service Provider (a backend such as [dsh-compaction-basic](../../packages/compaction/compaction-basic)), and human Consumer ([dsh-command-compact](../../packages/compaction/command-compact)). Compaction is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A tokenizer- or template-based backend is a sibling package implementing the same interface. Unlike bash, the interface necessarily depends on `dsh-session` and `dsh-llm`: its verbs act on an agent-owned `Session`, and its durable summary event uses the `ContentBlock` vocabulary (see the [compaction capability-seam Agent Note](../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)). Source: [`packages/compaction/compaction/src/types.ts`](../../packages/compaction/compaction/src/types.ts) diff --git a/docs/subsystems/compaction.zh.md b/docs/subsystems/compaction.zh.md index 60f5afb8c6..3b72bb4f81 100644 --- a/docs/subsystems/compaction.zh.md +++ b/docs/subsystems/compaction.zh.md @@ -2,7 +2,7 @@ [English](compaction.md) | 中文 -压缩 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)，与 bash 一样分为 Service Definition（[dsh-compaction](../../packages/compaction/compaction)，`ctx.compaction`）、Service provider（例如 [dsh-compaction-basic](../../packages/compaction/compaction-basic) 后端）和面向用户的 Consumer（[dsh-command-compact](../../packages/compaction/command-compact)）。压缩是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。基于 tokenizer 或模板的后端是实现同一接口的兄弟包。与 bash 不同，该接口必然依赖 `dsh-session` 和 `dsh-llm`：其动词作用于 agent 所有的 `Session`，而其持久摘要事件使用 `ContentBlock` 词汇（见[压缩能力 seam Agent Note](../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)）。 +压缩 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)，与 bash 一样分为 Service Definition（[dsh-compaction](../../packages/compaction/compaction)，`ctx.compaction`）、Service Provider（例如 [dsh-compaction-basic](../../packages/compaction/compaction-basic) 后端）和面向用户的 Consumer（[dsh-command-compact](../../packages/compaction/command-compact)）。压缩是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。基于 tokenizer 或模板的后端是实现同一接口的兄弟包。与 bash 不同，该接口必然依赖 `dsh-session` 和 `dsh-llm`：其动词作用于 agent 所有的 `Session`，而其持久摘要事件使用 `ContentBlock` 词汇（见[压缩能力 seam Agent Note](../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)）。 源码：[`packages/compaction/compaction/src/types.ts`](../../packages/compaction/compaction/src/types.ts) diff --git a/docs/subsystems/jobs.i18n.yaml b/docs/subsystems/jobs.i18n.yaml index 83199a1ad8..747741008d 100644 --- a/docs/subsystems/jobs.i18n.yaml +++ b/docs/subsystems/jobs.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/jobs.md -jobs.md: 67998599f8bc8c9b50278e9eaab8b6a5c70a33bc -jobs.zh.md: 41f60e450dcb85ee867a6c44f1e0053950f3ec71 +jobs.md: b11dc7fbe869dcaa9e71e6956a76559476391775 +jobs.zh.md: 03c3ceee8953c8c4c70f060b7e9d88371c1ebd7b diff --git a/docs/subsystems/jobs.md b/docs/subsystems/jobs.md index 67998599f8..b11dc7fbe8 100644 --- a/docs/subsystems/jobs.md +++ b/docs/subsystems/jobs.md @@ -154,7 +154,7 @@ interface JobRead { ## Service behavior -The abstract [`JobRegistry`](../../packages/jobs/jobs/src/index.ts) Service Definition specifies atomic `start`, caller-scoped `get` and `list`, `read`, `kill`, bounded `wait`, failure-isolated `onJobDone` and `onJobsChanged` listeners, and when `attachController` becomes available; [`LocalJobRegistry`](../../packages/jobs/jobs-local/src/index.ts) is the process-local Service provider. Authorization compares owner sessions; owner cleanup and admission use the exact registered `Agent` instance. The local provider's positive-safe-integer `maxConcurrentJobsPerOwner` config defaults to `10` and counts `running` plus `stopping` records per exact owner, with one shared bucket for unowned jobs; terminal producer settlement releases capacity. See [`dsh-jobs`](../../packages/jobs/jobs/README.md) for the Service Definition contract, [`dsh-jobs-local`](../../packages/jobs/jobs-local/README.md) for the registry lifecycle and admission policy, and [`dsh-tool-jobs`](../../packages/jobs/tool-jobs/README.md) for the model-facing Consumer. +The abstract [`JobRegistry`](../../packages/jobs/jobs/src/index.ts) Service Definition specifies atomic `start`, caller-scoped `get` and `list`, `read`, `kill`, bounded `wait`, failure-isolated `onJobDone` and `onJobsChanged` listeners, and when `attachController` becomes available; [`LocalJobRegistry`](../../packages/jobs/jobs-local/src/index.ts) is the process-local Service Provider. Authorization compares owner sessions; owner cleanup and admission use the exact registered `Agent` instance. The local provider's positive-safe-integer `maxConcurrentJobsPerOwner` config defaults to `10` and counts `running` plus `stopping` records per exact owner, with one shared bucket for unowned jobs; terminal producer settlement releases capacity. See [`dsh-jobs`](../../packages/jobs/jobs/README.md) for the Service Definition contract, [`dsh-jobs-local`](../../packages/jobs/jobs-local/README.md) for the registry lifecycle and admission policy, and [`dsh-tool-jobs`](../../packages/jobs/tool-jobs/README.md) for the model-facing Consumer. diff --git a/docs/subsystems/jobs.zh.md b/docs/subsystems/jobs.zh.md index 41f60e450d..03c3ceee89 100644 --- a/docs/subsystems/jobs.zh.md +++ b/docs/subsystems/jobs.zh.md @@ -154,7 +154,7 @@ interface JobRead { ## 服务行为 -抽象的 [`JobRegistry`](../../packages/jobs/jobs/src/index.ts) Service Definition 规定原子 `start`、限定调用方作用域的 `get` 和 `list`、`read`、`kill`、有界 `wait`、故障隔离的 `onJobDone` 与 `onJobsChanged` 监听器，以及 `attachController` 何时可用；[`LocalJobRegistry`](../../packages/jobs/jobs-local/src/index.ts) 是其进程局部 Service provider。授权会比较拥有者会话；拥有者清理与准入会使用确切的已注册 `Agent` 实例。本地 Service provider 的 `maxConcurrentJobsPerOwner` 配置必须是正的安全整数，默认值为 `10`；它按确切 owner 统计 `running` 与 `stopping` 记录，所有无 owner 任务共享一个服务级桶，并在生产方终止结算后释放容量。Service Definition 约定见 [`dsh-jobs`](../../packages/jobs/jobs/README.md)，注册表生命周期与准入策略见 [`dsh-jobs-local`](../../packages/jobs/jobs-local/README.md)，面向模型的 Consumer 见 [`dsh-tool-jobs`](../../packages/jobs/tool-jobs/README.md)。 +抽象的 [`JobRegistry`](../../packages/jobs/jobs/src/index.ts) Service Definition 规定原子 `start`、限定调用方作用域的 `get` 和 `list`、`read`、`kill`、有界 `wait`、故障隔离的 `onJobDone` 与 `onJobsChanged` 监听器，以及 `attachController` 何时可用；[`LocalJobRegistry`](../../packages/jobs/jobs-local/src/index.ts) 是其进程局部 Service Provider。授权会比较拥有者会话；拥有者清理与准入会使用确切的已注册 `Agent` 实例。本地 Service Provider 的 `maxConcurrentJobsPerOwner` 配置必须是正的安全整数，默认值为 `10`；它按确切 owner 统计 `running` 与 `stopping` 记录，所有无 owner 任务共享一个服务级桶，并在生产方终止结算后释放容量。Service Definition 约定见 [`dsh-jobs`](../../packages/jobs/jobs/README.md)，注册表生命周期与准入策略见 [`dsh-jobs-local`](../../packages/jobs/jobs-local/README.md)，面向模型的 Consumer 见 [`dsh-tool-jobs`](../../packages/jobs/tool-jobs/README.md)。 diff --git a/docs/subsystems/lsp.i18n.yaml b/docs/subsystems/lsp.i18n.yaml index d001f5c6d6..4de29d66b7 100644 --- a/docs/subsystems/lsp.i18n.yaml +++ b/docs/subsystems/lsp.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/lsp.md -lsp.md: 66317acc25860cfeaa3d8fb35daf2947e811e18c -lsp.zh.md: 8d975e30cb5065fd89645166c657050233eb81da +lsp.md: 18ed0e178c73702534a9964557a3dabf7bb9dd11 +lsp.zh.md: 8b154143057f05d74bf28b715a385a2ec65fbbff diff --git a/docs/subsystems/lsp.md b/docs/subsystems/lsp.md index 66317acc25..18ed0e178c 100644 --- a/docs/subsystems/lsp.md +++ b/docs/subsystems/lsp.md @@ -2,7 +2,7 @@ English | [中文](lsp.zh.md) -The LSP seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-07-15-lsp-capability-seam.md) exposing semantic code navigation on one `ctx.lsp` service, split across packages: Service Definition ([dsh-lsp](../../packages/lsp/lsp), `ctx.lsp` + the provider registry), a generic Service provider ([dsh-lsp-stdio](../../packages/lsp/lsp-stdio), a configured stdio language-server host), and Consumer ([dsh-tool-lsp](../../packages/lsp/tool-lsp), the `lsp` tool schema). LSP is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A provider swap does not change how the model asks for navigation. +The LSP seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-07-15-lsp-capability-seam.md) exposing semantic code navigation on one `ctx.lsp` service, split across packages: Service Definition ([dsh-lsp](../../packages/lsp/lsp), `ctx.lsp` + the provider registry), a generic Service Provider ([dsh-lsp-stdio](../../packages/lsp/lsp-stdio), a configured stdio language-server host), and Consumer ([dsh-tool-lsp](../../packages/lsp/tool-lsp), the `lsp` tool schema). LSP is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A provider swap does not change how the model asks for navigation. Source: [`packages/lsp/lsp/src/types.ts`](../../packages/lsp/lsp/src/types.ts) diff --git a/docs/subsystems/lsp.zh.md b/docs/subsystems/lsp.zh.md index 8d975e30cb..8b15414305 100644 --- a/docs/subsystems/lsp.zh.md +++ b/docs/subsystems/lsp.zh.md @@ -2,7 +2,7 @@ [English](lsp.md) | 中文 -LSP seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-07-15-lsp-capability-seam.md)：它在单一 `ctx.lsp` 服务上公开语义代码导航，并拆分到多个包：Service Definition（[dsh-lsp](../../packages/lsp/lsp)，`ctx.lsp` + 提供方注册表）、通用 Service provider（[dsh-lsp-stdio](../../packages/lsp/lsp-stdio)，经过配置的 stdio 语言服务器宿主）和 Consumer（[dsh-tool-lsp](../../packages/lsp/tool-lsp)，即 `lsp` 工具 schema）。LSP 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。更换提供方不会改变模型请求导航的方式。 +LSP seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-07-15-lsp-capability-seam.md)：它在单一 `ctx.lsp` 服务上公开语义代码导航，并拆分到多个包：Service Definition（[dsh-lsp](../../packages/lsp/lsp)，`ctx.lsp` + 提供方注册表）、通用 Service Provider（[dsh-lsp-stdio](../../packages/lsp/lsp-stdio)，经过配置的 stdio 语言服务器宿主）和 Consumer（[dsh-tool-lsp](../../packages/lsp/tool-lsp)，即 `lsp` 工具 schema）。LSP 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。更换提供方不会改变模型请求导航的方式。 源文件：[`packages/lsp/lsp/src/types.ts`](../../packages/lsp/lsp/src/types.ts) diff --git a/docs/subsystems/session-telemetry.i18n.yaml b/docs/subsystems/session-telemetry.i18n.yaml index 31bcdef024..49f5b9c328 100644 --- a/docs/subsystems/session-telemetry.i18n.yaml +++ b/docs/subsystems/session-telemetry.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/session-telemetry.md -session-telemetry.md: f6a51dbd1de43525e0a1b062f11a140317a1cdd9 -session-telemetry.zh.md: 8cfd04121f9ab9741fd4a968c3f73eb6983992b7 +session-telemetry.md: dd00e428c3ecb1e0158be09cce83d1a262ab0c62 +session-telemetry.zh.md: 835fc0ff2f2daa1f4ac90fe615a62aa36f7fe41d diff --git a/docs/subsystems/session-telemetry.md b/docs/subsystems/session-telemetry.md index f6a51dbd1d..dd00e428c3 100644 --- a/docs/subsystems/session-telemetry.md +++ b/docs/subsystems/session-telemetry.md @@ -2,7 +2,7 @@ English | [中文](session-telemetry.zh.md) -Outbound session reporting is split as a [capability seam](../capability-seams.md): the Service Definition and capture coordinator ([dsh-session-telemetry](../../packages/session/session-telemetry), `ctx.sessionTelemetry`) own the capture points, fixed chunk projection, `session-telemetry/record` redaction waterfall, handoff cursor, and minimal backend contract; the Service provider a deployment loads ([dsh-session-telemetry-otel](../../packages/session/session-telemetry-otel)) is the OpenTelemetry JS SDK's log pipeline configured verbatim. It is one optional capability, not part of the agent-loop spine, and nothing here reaches a model request. The boundary axiom — the harness's aspect ends at `emit()`; batching, retry, queueing, and loss policy belong to the reporting SDK — and the rejected alternatives are pinned in the [revival Agent Note](../../.agents/notes/implemented/feature/2026-07-23-session-telemetry-otel-revival.md); the capture points, cursor, and projection contracts live in the [Service Definition README](../../packages/session/session-telemetry/README.md). +Outbound session reporting is split as a [capability seam](../capability-seams.md): the Service Definition and capture coordinator ([dsh-session-telemetry](../../packages/session/session-telemetry), `ctx.sessionTelemetry`) own the capture points, fixed chunk projection, `session-telemetry/record` redaction waterfall, handoff cursor, and minimal backend contract; the Service Provider a deployment loads ([dsh-session-telemetry-otel](../../packages/session/session-telemetry-otel)) is the OpenTelemetry JS SDK's log pipeline configured verbatim. It is one optional capability, not part of the agent-loop spine, and nothing here reaches a model request. The boundary axiom — the harness's aspect ends at `emit()`; batching, retry, queueing, and loss policy belong to the reporting SDK — and the rejected alternatives are pinned in the [revival Agent Note](../../.agents/notes/implemented/feature/2026-07-23-session-telemetry-otel-revival.md); the capture points, cursor, and projection contracts live in the [Service Definition README](../../packages/session/session-telemetry/README.md). Source: [`packages/session/session-telemetry/src/index.ts`](../../packages/session/session-telemetry/src/index.ts) diff --git a/docs/subsystems/session-telemetry.zh.md b/docs/subsystems/session-telemetry.zh.md index 8cfd04121f..835fc0ff2f 100644 --- a/docs/subsystems/session-telemetry.zh.md +++ b/docs/subsystems/session-telemetry.zh.md @@ -2,7 +2,7 @@ [English](session-telemetry.md) | 中文 -对外的会话上报拆分为一项[能力 seam](../capability-seams.md)：Service Definition 与捕获协调器（[dsh-session-telemetry](../../packages/session/session-telemetry)，`ctx.sessionTelemetry`）拥有捕获点、固定分片投影、`session-telemetry/record` 脱敏 waterfall（瀑布式事件）、handoff 游标与最小后端约定；部署方加载的 Service provider（[dsh-session-telemetry-otel](../../packages/session/session-telemetry-otel)）则是原样配置的 OpenTelemetry JS SDK 日志流水线。它是一项可选能力，不属于 agent loop（智能体循环）主干，这里也没有任何内容会进入模型请求。边界公理（harness 的职责止于 `emit()`；批处理、重试、排队与丢失策略都属于上报 SDK）连同被否决的替代方案，均已在[复活 Agent Note](../../.agents/notes/implemented/feature/2026-07-23-session-telemetry-otel-revival.md)中定案；捕获点、游标与投影的约定见 [Service Definition README](../../packages/session/session-telemetry/README.md)。 +对外的会话上报拆分为一项[能力 seam](../capability-seams.md)：Service Definition 与捕获协调器（[dsh-session-telemetry](../../packages/session/session-telemetry)，`ctx.sessionTelemetry`）拥有捕获点、固定分片投影、`session-telemetry/record` 脱敏 waterfall（瀑布式事件）、handoff 游标与最小后端约定；部署方加载的 Service Provider（[dsh-session-telemetry-otel](../../packages/session/session-telemetry-otel)）则是原样配置的 OpenTelemetry JS SDK 日志流水线。它是一项可选能力，不属于 agent loop（智能体循环）主干，这里也没有任何内容会进入模型请求。边界公理（harness 的职责止于 `emit()`；批处理、重试、排队与丢失策略都属于上报 SDK）连同被否决的替代方案，均已在[复活 Agent Note](../../.agents/notes/implemented/feature/2026-07-23-session-telemetry-otel-revival.md)中定案；捕获点、游标与投影的约定见 [Service Definition README](../../packages/session/session-telemetry/README.md)。 源码：[`packages/session/session-telemetry/src/index.ts`](../../packages/session/session-telemetry/src/index.ts) diff --git a/docs/subsystems/shell.i18n.yaml b/docs/subsystems/shell.i18n.yaml index 822ce1fb60..a7b6bf45fc 100644 --- a/docs/subsystems/shell.i18n.yaml +++ b/docs/subsystems/shell.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/shell.md -shell.md: 10f96936390a2b77f961ca6222d1e8c4019bbd9c -shell.zh.md: af0bc72b620c747ce107acdfeade699967e38568 +shell.md: b9f8e3aebb69348ea241be93d6fd5559068c4029 +shell.zh.md: 1ea086819f3badc92376d39cb13e584da772572b diff --git a/docs/subsystems/shell.md b/docs/subsystems/shell.md index 10f9693639..b9f8e3aebb 100644 --- a/docs/subsystems/shell.md +++ b/docs/subsystems/shell.md @@ -2,7 +2,7 @@ English | [中文](shell.zh.md) -The bash execution seam is split across a Service Definition ([dsh-shell](../../packages/shell/shell), `ctx.shell`), Service providers ([dsh-bash-local](../../packages/shell/bash-local) and [dsh-bash-sandbox](../../packages/shell/bash-sandbox)), and Consumer ([dsh-tool-bash](../../packages/shell/tool-bash), the `bash` schema). Generic background-job ids, ownership, and controls live in [jobs.md](jobs.md); this seam returns a task-free process handle. Raw process-group mechanics live behind the [subprocess seam](subprocess.md). +The bash execution seam is split across a Service Definition ([dsh-shell](../../packages/shell/shell), `ctx.shell`), Service Providers ([dsh-bash-local](../../packages/shell/bash-local) and [dsh-bash-sandbox](../../packages/shell/bash-sandbox)), and Consumer ([dsh-tool-bash](../../packages/shell/tool-bash), the `bash` schema). Generic background-job ids, ownership, and controls live in [jobs.md](jobs.md); this seam returns a task-free process handle. Raw process-group mechanics live behind the [subprocess seam](subprocess.md). Source: [`packages/shell/shell/src/types.ts`](../../packages/shell/shell/src/types.ts) diff --git a/docs/subsystems/shell.zh.md b/docs/subsystems/shell.zh.md index af0bc72b62..1ea086819f 100644 --- a/docs/subsystems/shell.zh.md +++ b/docs/subsystems/shell.zh.md @@ -2,7 +2,7 @@ [English](shell.md) | 中文 -bash 执行 seam 分为 Service Definition（[dsh-shell](../../packages/shell/shell)，`ctx.shell`）、Service provider（[dsh-bash-local](../../packages/shell/bash-local) 与 [dsh-bash-sandbox](../../packages/shell/bash-sandbox)）和 Consumer（[dsh-tool-bash](../../packages/shell/tool-bash)，即 `bash` schema）。通用后台任务的 job id、所有权与控制位于 [jobs.md](jobs.md)；本 seam 返回一个不含任务概念的进程句柄。原始进程组机制封装在[子进程 seam](subprocess.md)之后。 +bash 执行 seam 分为 Service Definition（[dsh-shell](../../packages/shell/shell)，`ctx.shell`）、Service Provider（[dsh-bash-local](../../packages/shell/bash-local) 与 [dsh-bash-sandbox](../../packages/shell/bash-sandbox)）和 Consumer（[dsh-tool-bash](../../packages/shell/tool-bash)，即 `bash` schema）。通用后台任务的 job id、所有权与控制位于 [jobs.md](jobs.md)；本 seam 返回一个不含任务概念的进程句柄。原始进程组机制封装在[子进程 seam](subprocess.md)之后。 源码：[`packages/shell/shell/src/types.ts`](../../packages/shell/shell/src/types.ts) diff --git a/docs/subsystems/skills.i18n.yaml b/docs/subsystems/skills.i18n.yaml index 97746ffff7..922f1eb95e 100644 --- a/docs/subsystems/skills.i18n.yaml +++ b/docs/subsystems/skills.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/skills.md -skills.md: 98d5efea0b534e8232aeae03eda3de10259756e3 -skills.zh.md: 8a2b03da4b7bab0a3142eab3cc07f66f379dfd28 +skills.md: cd935692c00f89544dc324b33e847d8d588b78a8 +skills.zh.md: f574db048e1850ee425309fe015cd21a075eefc6 diff --git a/docs/subsystems/skills.md b/docs/subsystems/skills.md index 98d5efea0b..cd935692c0 100644 --- a/docs/subsystems/skills.md +++ b/docs/subsystems/skills.md @@ -2,7 +2,7 @@ English | [中文](skills.zh.md) -The [skill capability family](../../packages/skill) includes the Service Definition ([dsh-skill](../../packages/skill/skill), `ctx.skills`), the local Service provider ([dsh-skill-filesystem](../../packages/skill/skill-filesystem)), the optional packaged badge provider ([dsh-skill-badge](../../packages/skill/skill-badge)), and the Consumer ([dsh-tool-skill](../../packages/skill/tool-skill)). The registry merges provider catalogs across its host and per-scope layers; providers contribute local or packaged skills; the Consumer owns the initial and replacement catalogs plus the model-facing `skill` tool. Skills are optional instructions, not session events, so their vocabulary lives here rather than in [core.md](core.md). +The [skill capability family](../../packages/skill) includes the Service Definition ([dsh-skill](../../packages/skill/skill), `ctx.skills`), the local Service Provider ([dsh-skill-filesystem](../../packages/skill/skill-filesystem)), the optional packaged badge provider ([dsh-skill-badge](../../packages/skill/skill-badge)), and the Consumer ([dsh-tool-skill](../../packages/skill/tool-skill)). The registry merges provider catalogs across its host and per-scope layers; providers contribute local or packaged skills; the Consumer owns the initial and replacement catalogs plus the model-facing `skill` tool. Skills are optional instructions, not session events, so their vocabulary lives here rather than in [core.md](core.md). Source: [`packages/skill/skill/src/index.ts`](../../packages/skill/skill/src/index.ts), [`packages/skill/skill-filesystem/src/index.ts`](../../packages/skill/skill-filesystem/src/index.ts), [`packages/skill/skill-badge/src/index.ts`](../../packages/skill/skill-badge/src/index.ts), and [`packages/skill/tool-skill/src/index.ts`](../../packages/skill/tool-skill/src/index.ts). diff --git a/docs/subsystems/skills.zh.md b/docs/subsystems/skills.zh.md index 8a2b03da4b..f574db048e 100644 --- a/docs/subsystems/skills.zh.md +++ b/docs/subsystems/skills.zh.md @@ -2,7 +2,7 @@ [English](skills.md) | 中文 -[skill（技能）能力族](../../packages/skill) 包含 Service Definition（[dsh-skill](../../packages/skill/skill)，`ctx.skills`）、本地 Service provider（[dsh-skill-filesystem](../../packages/skill/skill-filesystem)）、可选的随包徽章提供方（[dsh-skill-badge](../../packages/skill/skill-badge)）和 Consumer（[dsh-tool-skill](../../packages/skill/tool-skill)）。注册表在其宿主层与各 scope 层之间合并各提供方的目录；提供方贡献本地或随包 skill；Consumer 拥有初始目录和替换目录，以及面向模型的 `skill` 工具。skill 是可选的指令而非会话事件，因此其词汇定义在此处而非 [core.md](core.md)。 +[skill（技能）能力族](../../packages/skill) 包含 Service Definition（[dsh-skill](../../packages/skill/skill)，`ctx.skills`）、本地 Service Provider（[dsh-skill-filesystem](../../packages/skill/skill-filesystem)）、可选的随包徽章提供方（[dsh-skill-badge](../../packages/skill/skill-badge)）和 Consumer（[dsh-tool-skill](../../packages/skill/tool-skill)）。注册表在其宿主层与各 scope 层之间合并各提供方的目录；提供方贡献本地或随包 skill；Consumer 拥有初始目录和替换目录，以及面向模型的 `skill` 工具。skill 是可选的指令而非会话事件，因此其词汇定义在此处而非 [core.md](core.md)。 源码：[`packages/skill/skill/src/index.ts`](../../packages/skill/skill/src/index.ts)、[`packages/skill/skill-filesystem/src/index.ts`](../../packages/skill/skill-filesystem/src/index.ts)、[`packages/skill/skill-badge/src/index.ts`](../../packages/skill/skill-badge/src/index.ts) 与 [`packages/skill/tool-skill/src/index.ts`](../../packages/skill/tool-skill/src/index.ts)。 diff --git a/docs/subsystems/spill.i18n.yaml b/docs/subsystems/spill.i18n.yaml index 100914ab62..61283ed82a 100644 --- a/docs/subsystems/spill.i18n.yaml +++ b/docs/subsystems/spill.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/spill.md -spill.md: 97d18ca2cf06c2062655eb6b22547280e4ee93e7 -spill.zh.md: 32783c748d6097359a7b71950f14ad97ebc924f5 +spill.md: ad59e88b1f059d0127bdf48155450890b1bf7c9a +spill.zh.md: 015ff6fc378c21e30f1cd84c985843f8c06cd44a diff --git a/docs/subsystems/spill.md b/docs/subsystems/spill.md index 97d18ca2cf..ad59e88b1f 100644 --- a/docs/subsystems/spill.md +++ b/docs/subsystems/spill.md @@ -2,7 +2,7 @@ English | [中文](spill.zh.md) -The spill storage seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-07-08-tool-output-spill-files.md) that persists a tool's oversized text and returns a model-facing locator plus retrieval guidance, split across packages: Service Definition ([dsh-spill](../../packages/spill/spill), `ctx.spillStore`), Service provider ([dsh-spill-local](../../packages/spill/spill-local), private session-scoped files on the host filesystem), and Consumer ([dsh-spill-policy](../../packages/spill/spill-policy), the `tools/post-execute` policy). Spill is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). Preview mechanics stay in [dsh-output-retention](../../packages/util/output-retention); this seam only saves the final text the policy hands it. +The spill storage seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-07-08-tool-output-spill-files.md) that persists a tool's oversized text and returns a model-facing locator plus retrieval guidance, split across packages: Service Definition ([dsh-spill](../../packages/spill/spill), `ctx.spillStore`), Service Provider ([dsh-spill-local](../../packages/spill/spill-local), private session-scoped files on the host filesystem), and Consumer ([dsh-spill-policy](../../packages/spill/spill-policy), the `tools/post-execute` policy). Spill is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). Preview mechanics stay in [dsh-output-retention](../../packages/util/output-retention); this seam only saves the final text the policy hands it. Source: [`packages/spill/spill/src/types.ts`](../../packages/spill/spill/src/types.ts) diff --git a/docs/subsystems/spill.zh.md b/docs/subsystems/spill.zh.md index 32783c748d..015ff6fc37 100644 --- a/docs/subsystems/spill.zh.md +++ b/docs/subsystems/spill.zh.md @@ -2,7 +2,7 @@ [English](spill.md) | 中文 -spill 存储 seam 是一项[能力 seam](../../.agents/notes/implemented/architecture/2026-07-08-tool-output-spill-files.md)，它持久保存工具的超大文本，并返回面向模型的定位符与检索指引；该能力拆分到三个包：Service Definition（[dsh-spill](../../packages/spill/spill)，`ctx.spillStore`）、Service provider（[dsh-spill-local](../../packages/spill/spill-local)，宿主文件系统中会话作用域的私有文件）和 Consumer（[dsh-spill-policy](../../packages/spill/spill-policy)，`tools/post-execute` 策略）。spill 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇记录在此处，而不在 [core.md](core.md) 中。预览机制仍归 [dsh-output-retention](../../packages/util/output-retention) 所有；该 seam 只保存策略交给它的最终文本。 +spill 存储 seam 是一项[能力 seam](../../.agents/notes/implemented/architecture/2026-07-08-tool-output-spill-files.md)，它持久保存工具的超大文本，并返回面向模型的定位符与检索指引；该能力拆分到三个包：Service Definition（[dsh-spill](../../packages/spill/spill)，`ctx.spillStore`）、Service Provider（[dsh-spill-local](../../packages/spill/spill-local)，宿主文件系统中会话作用域的私有文件）和 Consumer（[dsh-spill-policy](../../packages/spill/spill-policy)，`tools/post-execute` 策略）。spill 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇记录在此处，而不在 [core.md](core.md) 中。预览机制仍归 [dsh-output-retention](../../packages/util/output-retention) 所有；该 seam 只保存策略交给它的最终文本。 源码：[`packages/spill/spill/src/types.ts`](../../packages/spill/spill/src/types.ts) diff --git a/docs/subsystems/storage.i18n.yaml b/docs/subsystems/storage.i18n.yaml index fa120bc1fa..68128fdb1b 100644 --- a/docs/subsystems/storage.i18n.yaml +++ b/docs/subsystems/storage.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/storage.md -storage.md: 33933f70176e1f4960eb423f9a1067f50b6762e4 -storage.zh.md: 2ab3473a83b7588f186ce8f3b83819b29985ae88 +storage.md: 7e7f8d2b5a98b20308ae8115484a25066c045d52 +storage.zh.md: 41d2d1520a846d988c6c7a0b08a7576cee44ff7a diff --git a/docs/subsystems/storage.md b/docs/subsystems/storage.md index 33933f7017..7e7f8d2b5a 100644 --- a/docs/subsystems/storage.md +++ b/docs/subsystems/storage.md @@ -2,7 +2,7 @@ English | [中文](storage.zh.md) -The storage subsystem persists everything that is not a session event log (session logs have their own seam — [persistence.md](persistence.md)). It is one optional capability, not part of the agent-loop spine, split as a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md): the hub and Service Definition ([dsh-storage](../../packages/storage/storage), `ctx.storage`), the Service providers ([dsh-storage-json](../../packages/storage/storage-json), registered as `json`, and [dsh-storage-sqlite](../../packages/storage/storage-sqlite), registered as `sqlite`), and the Consumer data form ([dsh-storage-domain](../../packages/storage/storage-domain), `ctx.storageDomain`, also reachable as `ctx.storage.domain`) — the backend contract's only Consumer and the typed API everything else uses. The hub performs no IO itself: backends own media, data forms own semantics, and product packages never touch backends directly. Design record: [domain KV storage Agent Note](../../.agents/notes/proposed/architecture/2026-07-24-domain-kv-storage-and-workspace.md). +The storage subsystem persists everything that is not a session event log (session logs have their own seam — [persistence.md](persistence.md)). It is one optional capability, not part of the agent-loop spine, split as a [capability seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md): the hub and Service Definition ([dsh-storage](../../packages/storage/storage), `ctx.storage`), the Service Providers ([dsh-storage-json](../../packages/storage/storage-json), registered as `json`, and [dsh-storage-sqlite](../../packages/storage/storage-sqlite), registered as `sqlite`), and the Consumer data form ([dsh-storage-domain](../../packages/storage/storage-domain), `ctx.storageDomain`, also reachable as `ctx.storage.domain`) — the backend contract's only Consumer and the typed API everything else uses. The hub performs no IO itself: backends own media, data forms own semantics, and product packages never touch backends directly. Design record: [domain KV storage Agent Note](../../.agents/notes/proposed/architecture/2026-07-24-domain-kv-storage-and-workspace.md). Source: [`packages/storage/storage/src/backend.ts`](../../packages/storage/storage/src/backend.ts) · [`packages/storage/storage-domain/src/spec.ts`](../../packages/storage/storage-domain/src/spec.ts) · [`packages/storage/storage-domain/src/events.ts`](../../packages/storage/storage-domain/src/events.ts) diff --git a/docs/subsystems/storage.zh.md b/docs/subsystems/storage.zh.md index 2ab3473a83..41d2d1520a 100644 --- a/docs/subsystems/storage.zh.md +++ b/docs/subsystems/storage.zh.md @@ -2,7 +2,7 @@ [English](storage.md) | 中文 -存储子系统持久保存一切不属于会话事件日志的数据（会话日志有自己的 seam——见 [persistence.md](persistence.md)）。它是一项可选能力，不属于 agent loop（智能体循环）主干，并按[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) 拆分：枢纽（hub）与 Service Definition（[dsh-storage](../../packages/storage/storage)，`ctx.storage`）、Service provider（注册为 `json` 的 [dsh-storage-json](../../packages/storage/storage-json) 与注册为 `sqlite` 的 [dsh-storage-sqlite](../../packages/storage/storage-sqlite)），以及 Consumer 数据形式（[dsh-storage-domain](../../packages/storage/storage-domain)，`ctx.storageDomain`，也可经 `ctx.storage.domain` 访问）——它是后端约定的唯一 Consumer，也是其他一切所使用的类型化 API。枢纽自身不做任何 IO：后端拥有介质，数据形式拥有语义，产品包绝不直接触碰后端。设计记录：[领域 KV 存储 Agent Note](../../.agents/notes/proposed/architecture/2026-07-24-domain-kv-storage-and-workspace.md)。 +存储子系统持久保存一切不属于会话事件日志的数据（会话日志有自己的 seam——见 [persistence.md](persistence.md)）。它是一项可选能力，不属于 agent loop（智能体循环）主干，并按[能力 seam](../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) 拆分：枢纽（hub）与 Service Definition（[dsh-storage](../../packages/storage/storage)，`ctx.storage`）、Service Provider（注册为 `json` 的 [dsh-storage-json](../../packages/storage/storage-json) 与注册为 `sqlite` 的 [dsh-storage-sqlite](../../packages/storage/storage-sqlite)），以及 Consumer 数据形式（[dsh-storage-domain](../../packages/storage/storage-domain)，`ctx.storageDomain`，也可经 `ctx.storage.domain` 访问）——它是后端约定的唯一 Consumer，也是其他一切所使用的类型化 API。枢纽自身不做任何 IO：后端拥有介质，数据形式拥有语义，产品包绝不直接触碰后端。设计记录：[领域 KV 存储 Agent Note](../../.agents/notes/proposed/architecture/2026-07-24-domain-kv-storage-and-workspace.md)。 源码：[`packages/storage/storage/src/backend.ts`](../../packages/storage/storage/src/backend.ts) · [`packages/storage/storage-domain/src/spec.ts`](../../packages/storage/storage-domain/src/spec.ts) · [`packages/storage/storage-domain/src/events.ts`](../../packages/storage/storage-domain/src/events.ts) diff --git a/docs/subsystems/subagent.i18n.yaml b/docs/subsystems/subagent.i18n.yaml index d0a1715e39..a86dc8de4a 100644 --- a/docs/subsystems/subagent.i18n.yaml +++ b/docs/subsystems/subagent.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/subagent.md -subagent.md: 4d02c177533e8dbc192d5460b65bb4348f565c41 -subagent.zh.md: 483446187dcd2386f0f3d7d50d3fa7b97d09e02c +subagent.md: a683a679e6017351540ee4b73adc74375ef0a1d6 +subagent.zh.md: 61391cd297c0eb14f4c0d8eac4539b551cb60bda diff --git a/docs/subsystems/subagent.md b/docs/subsystems/subagent.md index 4d02c17753..a683a679e6 100644 --- a/docs/subsystems/subagent.md +++ b/docs/subsystems/subagent.md @@ -4,7 +4,7 @@ English | [中文](subagent.zh.md) The subagent seam lets an agent delegate work to a child agent. Like [bash](shell.md), it is **one optional capability**, not part of the agent loop, so its types live here rather than in [core.md](core.md). It differs from the other capability seams because **multiple provider implementations coexist** in one context, registered by name (`ctx.subagents`), while bash allows only one executor. Its registry follows the [LLM adapter registry](llm-streaming.md), not the single-service bash executor. -Service Definition: [dsh-subagent](../../packages/subagent/subagent) (`ctx.subagents` + the vocabulary below). Service providers are sibling packages (`dsh-subagent-spawn-in-process`, `-fork`, `-acp`, `-codex`, `-claude-code`, `-dsh-sdk`); the model-facing Consumers are [dsh-tool-subagent](../../packages/subagent/tool-subagent) (per-provider delegation), [dsh-tool-subagent-control](../../packages/subagent/tool-subagent-control) (the optional global `send_message`, `interrupt_agent`, and `list_agents` controls), and [dsh-tool-subagent-report](../../packages/subagent/tool-subagent-report) (the optional child-scoped `report` return channel). The same `ctx.subagents` service owns continuable-child orchestration through an internal activation manager and read-only child and descendant discovery straight from the session store and optional session persistence. Product-provider rationale lives in [the Codex and Claude Code Agent Note](../../.agents/notes/implemented/feature/2026-08-04-claude-code-and-codex-subagent-backends.md); common-seam rationale lives in [the subagent Agent Note](../../.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md), [the continuable subagents Agent Note](../../.agents/notes/implemented/feature/2026-07-28-continuable-subagent-conversations.md), [the report-tool Agent Note](../../.agents/notes/implemented/feature/2026-07-30-continuable-subagent-report-tool.md), [the durable catalog Agent Note](../../.agents/notes/implemented/feature/2026-07-22-durable-subagent-catalog-and-list-agents.md), [the list-identity-projection Agent Note](../../.agents/notes/implemented/architecture/2026-08-06-subagent-list-identity-projection.md), and [the merged-service Agent Note](../../.agents/notes/implemented/simplification/2026-07-26-merge-subagent-control-service.md). +Service Definition: [dsh-subagent](../../packages/subagent/subagent) (`ctx.subagents` + the vocabulary below). Service Providers are sibling packages (`dsh-subagent-spawn-in-process`, `-fork`, `-acp`, `-codex`, `-claude-code`, `-dsh-sdk`); the model-facing Consumers are [dsh-tool-subagent](../../packages/subagent/tool-subagent) (per-provider delegation), [dsh-tool-subagent-control](../../packages/subagent/tool-subagent-control) (the optional global `send_message`, `interrupt_agent`, and `list_agents` controls), and [dsh-tool-subagent-report](../../packages/subagent/tool-subagent-report) (the optional child-scoped `report` return channel). The same `ctx.subagents` service owns continuable-child orchestration through an internal activation manager and read-only child and descendant discovery straight from the session store and optional session persistence. Product-provider rationale lives in [the Codex and Claude Code Agent Note](../../.agents/notes/implemented/feature/2026-08-04-claude-code-and-codex-subagent-backends.md); common-seam rationale lives in [the subagent Agent Note](../../.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md), [the continuable subagents Agent Note](../../.agents/notes/implemented/feature/2026-07-28-continuable-subagent-conversations.md), [the report-tool Agent Note](../../.agents/notes/implemented/feature/2026-07-30-continuable-subagent-report-tool.md), [the durable catalog Agent Note](../../.agents/notes/implemented/feature/2026-07-22-durable-subagent-catalog-and-list-agents.md), [the list-identity-projection Agent Note](../../.agents/notes/implemented/architecture/2026-08-06-subagent-list-identity-projection.md), and [the merged-service Agent Note](../../.agents/notes/implemented/simplification/2026-07-26-merge-subagent-control-service.md). Sources: [`packages/subagent/subagent/src/types.ts`](../../packages/subagent/subagent/src/types.ts), [`packages/subagent/subagent/src/index.ts`](../../packages/subagent/subagent/src/index.ts), and [`packages/subagent/subagent/src/continuation.ts`](../../packages/subagent/subagent/src/continuation.ts) diff --git a/docs/subsystems/subagent.zh.md b/docs/subsystems/subagent.zh.md index 483446187d..61391cd297 100644 --- a/docs/subsystems/subagent.zh.md +++ b/docs/subsystems/subagent.zh.md @@ -4,7 +4,7 @@ subagent seam 让一个 agent（智能体）将工作委派给子 agent。与 [bash](shell.md) 一样，它是**一项可选能力**，不属于 agent loop（智能体循环），因此其类型定义在此而非 [core.md](core.md) 中。它不同于其他能力 seam，因为**同一上下文中可共存多个提供方实现**，并按名称注册（`ctx.subagents`），而 bash 只允许一个执行器。该注册表遵循 [LLM（大语言模型）适配器注册表](llm-streaming.md)，而非单服务的 bash 执行器。 -Service Definition：[dsh-subagent](../../packages/subagent/subagent)（`ctx.subagents` + 下文词汇）。Service provider 是六个兄弟包：`dsh-subagent-spawn-in-process`、`-fork`、`-acp`、`-codex`、`-claude-code`、`-dsh-sdk`；面向模型的 Consumer 包括 [dsh-tool-subagent](../../packages/subagent/tool-subagent)（按提供方委派）、[dsh-tool-subagent-control](../../packages/subagent/tool-subagent-control)（可选的全局 `send_message`、`interrupt_agent` 与 `list_agents` 控制工具）和 [dsh-tool-subagent-report](../../packages/subagent/tool-subagent-report)（可选的 child 作用域 `report` 返回通道）。同一个 `ctx.subagents` 服务通过内部激活管理器负责可继续子 agent 编排，并直接基于会话存储和可选的会话持久化提供只读的 child 与后代发现。产品提供方设计理由见 [Codex 与 Claude Code Agent Note](../../.agents/notes/implemented/feature/2026-08-04-claude-code-and-codex-subagent-backends.md)；通用 seam 的设计理由见 [subagent Agent Note](../../.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md)、[可继续 subagent Agent Note](../../.agents/notes/implemented/feature/2026-07-28-continuable-subagent-conversations.md)、[report 工具 Agent Note](../../.agents/notes/implemented/feature/2026-07-30-continuable-subagent-report-tool.md)、[持久化目录 Agent Note](../../.agents/notes/implemented/feature/2026-07-22-durable-subagent-catalog-and-list-agents.md)、[列表身份投影 Agent Note](../../.agents/notes/implemented/architecture/2026-08-06-subagent-list-identity-projection.md)和[服务合并 Agent Note](../../.agents/notes/implemented/simplification/2026-07-26-merge-subagent-control-service.md)。 +Service Definition：[dsh-subagent](../../packages/subagent/subagent)（`ctx.subagents` + 下文词汇）。Service Provider 是六个兄弟包：`dsh-subagent-spawn-in-process`、`-fork`、`-acp`、`-codex`、`-claude-code`、`-dsh-sdk`；面向模型的 Consumer 包括 [dsh-tool-subagent](../../packages/subagent/tool-subagent)（按提供方委派）、[dsh-tool-subagent-control](../../packages/subagent/tool-subagent-control)（可选的全局 `send_message`、`interrupt_agent` 与 `list_agents` 控制工具）和 [dsh-tool-subagent-report](../../packages/subagent/tool-subagent-report)（可选的 child 作用域 `report` 返回通道）。同一个 `ctx.subagents` 服务通过内部激活管理器负责可继续子 agent 编排，并直接基于会话存储和可选的会话持久化提供只读的 child 与后代发现。产品提供方设计理由见 [Codex 与 Claude Code Agent Note](../../.agents/notes/implemented/feature/2026-08-04-claude-code-and-codex-subagent-backends.md)；通用 seam 的设计理由见 [subagent Agent Note](../../.agents/notes/implemented/feature/2026-06-21-subagent-capability-seam.md)、[可继续 subagent Agent Note](../../.agents/notes/implemented/feature/2026-07-28-continuable-subagent-conversations.md)、[report 工具 Agent Note](../../.agents/notes/implemented/feature/2026-07-30-continuable-subagent-report-tool.md)、[持久化目录 Agent Note](../../.agents/notes/implemented/feature/2026-07-22-durable-subagent-catalog-and-list-agents.md)、[列表身份投影 Agent Note](../../.agents/notes/implemented/architecture/2026-08-06-subagent-list-identity-projection.md)和[服务合并 Agent Note](../../.agents/notes/implemented/simplification/2026-07-26-merge-subagent-control-service.md)。 源码：[`packages/subagent/subagent/src/types.ts`](../../packages/subagent/subagent/src/types.ts)、[`packages/subagent/subagent/src/index.ts`](../../packages/subagent/subagent/src/index.ts)和 [`packages/subagent/subagent/src/continuation.ts`](../../packages/subagent/subagent/src/continuation.ts) diff --git a/docs/subsystems/subprocess.i18n.yaml b/docs/subsystems/subprocess.i18n.yaml index 191ea52af5..d063134567 100644 --- a/docs/subsystems/subprocess.i18n.yaml +++ b/docs/subsystems/subprocess.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/subprocess.md -subprocess.md: 3cc6e33ce2befc6bc65e258507881df542b7c149 -subprocess.zh.md: 1189ceb0526418ee92e0da280e118c10991508d5 +subprocess.md: af6770e8c04f79ab1981967d5a3bca5a39b954be +subprocess.zh.md: 19f20e7fcd675d87cf768258d1ab9c37bf80a836 diff --git a/docs/subsystems/subprocess.md b/docs/subsystems/subprocess.md index 3cc6e33ce2..af6770e8c0 100644 --- a/docs/subsystems/subprocess.md +++ b/docs/subsystems/subprocess.md @@ -2,7 +2,7 @@ English | [中文](subprocess.zh.md) -The subprocess seam is split across a Service Definition ([dsh-subprocess](../../packages/subprocess/subprocess), `ctx.subprocess`) and Service provider ([dsh-subprocess-local](../../packages/subprocess/subprocess-local)); its Consumers are other capability seams and out-of-process backends: the [bash executor family](shell.md) uses collected batch output, LSP uses raw protocol pipes, the PTY backend uses the terminal primitive, and the ACP subagent backend uses piped ndjson plus inherited stderr. This seam owns the managed `DSH_*` environment namespace, the shared credential scrub (`scrubbedParentEnv`), and the `CollectedOutput` shape; [dsh-shell](../../packages/shell/shell) re-exports the vocabulary so bash consumers keep one import root. +The subprocess seam is split across a Service Definition ([dsh-subprocess](../../packages/subprocess/subprocess), `ctx.subprocess`) and Service Provider ([dsh-subprocess-local](../../packages/subprocess/subprocess-local)); its Consumers are other capability seams and out-of-process backends: the [bash executor family](shell.md) uses collected batch output, LSP uses raw protocol pipes, the PTY backend uses the terminal primitive, and the ACP subagent backend uses piped ndjson plus inherited stderr. This seam owns the managed `DSH_*` environment namespace, the shared credential scrub (`scrubbedParentEnv`), and the `CollectedOutput` shape; [dsh-shell](../../packages/shell/shell) re-exports the vocabulary so bash consumers keep one import root. Source: [`packages/subprocess/subprocess/src/types.ts`](../../packages/subprocess/subprocess/src/types.ts) and [`packages/subprocess/subprocess/src/index.ts`](../../packages/subprocess/subprocess/src/index.ts) diff --git a/docs/subsystems/subprocess.zh.md b/docs/subsystems/subprocess.zh.md index 1189ceb052..19f20e7fcd 100644 --- a/docs/subsystems/subprocess.zh.md +++ b/docs/subsystems/subprocess.zh.md @@ -2,7 +2,7 @@ [English](subprocess.md) | 中文 -子进程 seam 分为 Service Definition（[dsh-subprocess](../../packages/subprocess/subprocess)，`ctx.subprocess`）与 Service provider（[dsh-subprocess-local](../../packages/subprocess/subprocess-local)）；它的 Consumer 是其他能力 seam 与进程外后端：[bash 执行器家族](shell.md)使用收集模式的批量输出，LSP 使用原始协议管道，PTY 后端使用终端原语，ACP（Agent Client Protocol）subagent 后端则使用通过管道传输的 ndjson，并让 stderr 采用 inherit。该 seam 拥有受管的 `DSH_*` 环境命名空间、共享的凭据清除（`scrubbedParentEnv`）与 `CollectedOutput` 形状；[dsh-shell](../../packages/shell/shell) 重导出这套词汇，使 bash 消费方保持单一导入入口。 +子进程 seam 分为 Service Definition（[dsh-subprocess](../../packages/subprocess/subprocess)，`ctx.subprocess`）与 Service Provider（[dsh-subprocess-local](../../packages/subprocess/subprocess-local)）；它的 Consumer 是其他能力 seam 与进程外后端：[bash 执行器家族](shell.md)使用收集模式的批量输出，LSP 使用原始协议管道，PTY 后端使用终端原语，ACP（Agent Client Protocol）subagent 后端则使用通过管道传输的 ndjson，并让 stderr 采用 inherit。该 seam 拥有受管的 `DSH_*` 环境命名空间、共享的凭据清除（`scrubbedParentEnv`）与 `CollectedOutput` 形状；[dsh-shell](../../packages/shell/shell) 重导出这套词汇，使 bash 消费方保持单一导入入口。 源码：[`packages/subprocess/subprocess/src/types.ts`](../../packages/subprocess/subprocess/src/types.ts) 与 [`packages/subprocess/subprocess/src/index.ts`](../../packages/subprocess/subprocess/src/index.ts) diff --git a/docs/subsystems/web.i18n.yaml b/docs/subsystems/web.i18n.yaml index 3dfe626acd..840865ef35 100644 --- a/docs/subsystems/web.i18n.yaml +++ b/docs/subsystems/web.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/web.md -web.md: 741df8d92c20817cb3115dafffba7c7be9205aec -web.zh.md: 0cce8500834896c156ff85d935b9e80853a3196c +web.md: 3bcd3ac24927c8c51baeabd770e2bd91c5ad1b77 +web.zh.md: 3348be2b808dc286364f5a795b236cb299acd6a6 diff --git a/docs/subsystems/web.md b/docs/subsystems/web.md index 741df8d92c..3bcd3ac249 100644 --- a/docs/subsystems/web.md +++ b/docs/subsystems/web.md @@ -2,7 +2,7 @@ English | [中文](web.zh.md) -The web access seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md) that spans **two operations** (search and fetch) on one `ctx.web` service, split across packages: Service Definition ([dsh-web](../../packages/web/web), `ctx.web` + the provider registries), Service providers ([dsh-web-search-exa](../../packages/web/web-search-exa), [dsh-web-search-perplexity](../../packages/web/web-search-perplexity), [dsh-web-search-deepseek](../../packages/web/web-search-deepseek), [dsh-web-fetch-http](../../packages/web/web-fetch-http)), and Consumer ([dsh-tool-web](../../packages/web/tool-web), the `web_search`/`web_fetch` tool schemas). Web is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A search-provider swap does not change how the model asks for a query, and a fetch-provider swap does not change how the model asks for a URL. +The web access seam — a [capability seam](../../.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md) that spans **two operations** (search and fetch) on one `ctx.web` service, split across packages: Service Definition ([dsh-web](../../packages/web/web), `ctx.web` + the provider registries), Service Providers ([dsh-web-search-exa](../../packages/web/web-search-exa), [dsh-web-search-perplexity](../../packages/web/web-search-perplexity), [dsh-web-search-deepseek](../../packages/web/web-search-deepseek), [dsh-web-fetch-http](../../packages/web/web-fetch-http)), and Consumer ([dsh-tool-web](../../packages/web/tool-web), the `web_search`/`web_fetch` tool schemas). Web is **one optional capability**, not part of the agent-loop spine — so its vocabulary lives here, not in [core.md](core.md). A search-provider swap does not change how the model asks for a query, and a fetch-provider swap does not change how the model asks for a URL. Source: [`packages/web/web/src/types.ts`](../../packages/web/web/src/types.ts) diff --git a/docs/subsystems/web.zh.md b/docs/subsystems/web.zh.md index 0cce850083..3348be2b80 100644 --- a/docs/subsystems/web.zh.md +++ b/docs/subsystems/web.zh.md @@ -2,7 +2,7 @@ [English](web.md) | 中文 -Web 访问 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md)，在同一个 `ctx.web` 服务上横跨**两项操作**（search 与 fetch），并拆分到多个包：Service Definition（[dsh-web](../../packages/web/web)，`ctx.web` + 提供方注册表）、Service provider（[dsh-web-search-exa](../../packages/web/web-search-exa)、[dsh-web-search-perplexity](../../packages/web/web-search-perplexity)、[dsh-web-search-deepseek](../../packages/web/web-search-deepseek)、[dsh-web-fetch-http](../../packages/web/web-fetch-http)）与 Consumer（[dsh-tool-web](../../packages/web/tool-web)，即 `web_search`/`web_fetch` 工具 schema）。Web 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。更换 search 提供方不会改变模型提交查询的方式，更换 fetch 提供方也不会改变模型请求 URL 的方式。 +Web 访问 seam 是一个[能力 seam](../../.agents/notes/implemented/architecture/2026-06-24-web-capability-seam.md)，在同一个 `ctx.web` 服务上横跨**两项操作**（search 与 fetch），并拆分到多个包：Service Definition（[dsh-web](../../packages/web/web)，`ctx.web` + 提供方注册表）、Service Provider（[dsh-web-search-exa](../../packages/web/web-search-exa)、[dsh-web-search-perplexity](../../packages/web/web-search-perplexity)、[dsh-web-search-deepseek](../../packages/web/web-search-deepseek)、[dsh-web-fetch-http](../../packages/web/web-fetch-http)）与 Consumer（[dsh-tool-web](../../packages/web/tool-web)，即 `web_search`/`web_fetch` 工具 schema）。Web 是**一项可选能力**，不属于 agent loop（智能体循环）主干，因此其词汇定义在此而非 [core.md](core.md) 中。更换 search 提供方不会改变模型提交查询的方式，更换 fetch 提供方也不会改变模型请求 URL 的方式。 源码：[`packages/web/web/src/types.ts`](../../packages/web/web/src/types.ts) diff --git a/docs/subsystems/workflow.i18n.yaml b/docs/subsystems/workflow.i18n.yaml index 8f9d56e57e..2237e355a1 100644 --- a/docs/subsystems/workflow.i18n.yaml +++ b/docs/subsystems/workflow.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/workflow.md -workflow.md: bf11ec3a40f9c964fbc535a0368b30e422b5452e -workflow.zh.md: b87bffd4780d167b4106276bfbca53e48ef6d833 +workflow.md: f2c987fbc2ca3a334c55bf0b299764e2b3e6bb06 +workflow.zh.md: b4e6e6afe73b20f1da39c1548c072cf7aeb1f441 diff --git a/docs/subsystems/workflow.md b/docs/subsystems/workflow.md index bf11ec3a40..f2c987fbc2 100644 --- a/docs/subsystems/workflow.md +++ b/docs/subsystems/workflow.md @@ -4,7 +4,7 @@ English | [中文](workflow.zh.md) The workflow seam lets an agent run a model-written orchestration SCRIPT that starts subagents. Like [subagent](subagent.md) it is **one optional capability**, not part of the agent loop, so its types and operations live here rather than in [core.md](core.md). Like bash, it permits ONE engine implementation per context to provide `ctx.workflowEngine`; there is no named-provider registry (a second engine replaces the first through plugin configuration rather than running beside it). -Service Definition: [dsh-workflow](../../packages/workflow/workflow) (`ctx.workflowEngine` + the vocabulary below). The Service provider is [dsh-workflow-worker-thread](../../packages/workflow/workflow-worker-thread) (a `node:worker_threads` engine — one worker per run, the script's vm context inside it); the model-facing Consumer is [dsh-tool-workflow](../../packages/workflow/tool-workflow). The proposal and rationale: [the dynamic-workflows Agent Note](../../.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md). +Service Definition: [dsh-workflow](../../packages/workflow/workflow) (`ctx.workflowEngine` + the vocabulary below). The Service Provider is [dsh-workflow-worker-thread](../../packages/workflow/workflow-worker-thread) (a `node:worker_threads` engine — one worker per run, the script's vm context inside it); the model-facing Consumer is [dsh-tool-workflow](../../packages/workflow/tool-workflow). The proposal and rationale: [the dynamic-workflows Agent Note](../../.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md). Sources: browser-safe vocabulary in [`packages/workflow/workflow/src/types.ts`](../../packages/workflow/workflow/src/types.ts), Host request and live-run handles in [`runtime-types.ts`](../../packages/workflow/workflow/src/runtime-types.ts). diff --git a/docs/subsystems/workflow.zh.md b/docs/subsystems/workflow.zh.md index b87bffd478..b4e6e6afe7 100644 --- a/docs/subsystems/workflow.zh.md +++ b/docs/subsystems/workflow.zh.md @@ -4,7 +4,7 @@ 工作流 seam 允许 agent（智能体）运行由模型编写、会启动 subagent 的编排脚本。与 [subagent](subagent.md) 一样，它是**一项可选能力**，不属于 agent loop，因此其类型和操作记录在此处，而非 [core.md](core.md)。与 bash 一样，每个上下文只允许一个引擎实现提供 `ctx.workflowEngine`；没有命名提供方注册表（第二个引擎通过插件配置替换第一个，而不与它同时运行）。 -Service Definition：[dsh-workflow](../../packages/workflow/workflow)（`ctx.workflowEngine` + 下文词汇）。Service provider 是 [dsh-workflow-worker-thread](../../packages/workflow/workflow-worker-thread)（一个 `node:worker_threads` 引擎——每个 run 一个 worker，脚本的 vm 上下文位于其中）；面向模型的 Consumer 是 [dsh-tool-workflow](../../packages/workflow/tool-workflow)。提案与设计理由见 [dynamic-workflows Agent Note](../../.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md)。 +Service Definition：[dsh-workflow](../../packages/workflow/workflow)（`ctx.workflowEngine` + 下文词汇）。Service Provider 是 [dsh-workflow-worker-thread](../../packages/workflow/workflow-worker-thread)（一个 `node:worker_threads` 引擎——每个 run 一个 worker，脚本的 vm 上下文位于其中）；面向模型的 Consumer 是 [dsh-tool-workflow](../../packages/workflow/tool-workflow)。提案与设计理由见 [dynamic-workflows Agent Note](../../.agents/notes/implemented/feature/2026-07-05-dynamic-workflows.md)。 源码：浏览器安全词汇位于 [`packages/workflow/workflow/src/types.ts`](../../packages/workflow/workflow/src/types.ts)，Host 请求与活跃运行句柄位于 [`runtime-types.ts`](../../packages/workflow/workflow/src/runtime-types.ts)。 diff --git a/docs/user/develop/basic/tool.i18n.yaml b/docs/user/develop/basic/tool.i18n.yaml index 8044c4adaa..1b5cac6c87 100644 --- a/docs/user/develop/basic/tool.i18n.yaml +++ b/docs/user/develop/basic/tool.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/user/develop/basic/tool.md -tool.md: a149f6876c573c9ece4b066ef6c211f69b0b03a8 -tool.zh.md: bcce5001497908cefa643749caee8da0e9859cf7 +tool.md: eb262d131a7f2b540827e86e56f8c0a28cb5f904 +tool.zh.md: d33d9946a73881df2cd44ebf3695819d02d013ab diff --git a/docs/user/develop/basic/tool.md b/docs/user/develop/basic/tool.md index a149f6876c..eb262d131a 100644 --- a/docs/user/develop/basic/tool.md +++ b/docs/user/develop/basic/tool.md @@ -49,4 +49,4 @@ Open `http://127.0.0.1:3080` and ask: `Use the greet tool to greet Ada.` The mod - [Plugin configuration](./config.md) — make the greeting configurable. - [Tool authoring reference](../../../cookbook/adding-a-tool.md) — look up nested schemas, canonical values, background work, policy hooks, Code Mode, and UI cards. -- [Capability layering](../practice/) — split a replaceable capability into Service Definition, Service provider, and Consumer packages. +- [Capability layering](../practice/) — split a replaceable capability into Service Definition, Service Provider, and Consumer packages. diff --git a/docs/user/develop/basic/tool.zh.md b/docs/user/develop/basic/tool.zh.md index bcce500149..d33d9946a7 100644 --- a/docs/user/develop/basic/tool.zh.md +++ b/docs/user/develop/basic/tool.zh.md @@ -49,4 +49,4 @@ pnpm dsh web --patch ./scratch-plugin/cordis.yml - [插件配置](./config.md) — 让问候语可配置。 - [工具编写参考](../../../cookbook/adding-a-tool.md) — 查阅嵌套 schema、规范值、后台工作、策略钩子、Code Mode 和 UI 卡片。 -- [能力分层](../practice/) — 将可替换能力拆分为 Service Definition、Service provider 和 Consumer 三类包。 +- [能力分层](../practice/) — 将可替换能力拆分为 Service Definition、Service Provider 和 Consumer 三类包。 diff --git a/docs/user/develop/practice/index.i18n.yaml b/docs/user/develop/practice/index.i18n.yaml index dd582b0886..166269706c 100644 --- a/docs/user/develop/practice/index.i18n.yaml +++ b/docs/user/develop/practice/index.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/user/develop/practice/index.md -index.md: 3619a39f4a39b42cf4269d3778f233ecc1731933 -index.zh.md: 8bd378af5eaf2741c34d76a152fa8a62a947bf41 +index.md: 56ca7249b8b156ceb78327b547413dbf65726dcc +index.zh.md: aec5980ea45cfd5f8f7408877743920e68e15cbd diff --git a/docs/user/develop/practice/index.md b/docs/user/develop/practice/index.md index 3619a39f4a..56ca7249b8 100644 --- a/docs/user/develop/practice/index.md +++ b/docs/user/develop/practice/index.md @@ -6,14 +6,14 @@ This page has two parts: a concept reference for the three-role capability patte ## Concept reference -When a capability is general enough to need replaceable providers, such as Bash execution, Harness separates three roles: a **Service Definition**, a **Service provider**, and a **Consumer**. Put the roles in separate packages when they need to evolve or be replaced independently; a package may otherwise own more than one role. The complete capability is its seam. No individual role is a seam. +When a capability is general enough to need replaceable providers, such as Bash execution, Harness separates three roles: a **Service Definition**, a **Service Provider**, and a **Consumer**. Put the roles in separate packages when they need to evolve or be replaced independently; a package may otherwise own more than one role. The complete capability is its seam. No individual role is a seam. ## Bash example The Bash execution capability consists of: - **Service Definition** (`dsh-shell`) — defines the Cordis service and Bash request and result types -- **Service provider** (`dsh-bash-local`) — executes commands on the local machine +- **Service Provider** (`dsh-bash-local`) — executes commands on the local machine - **Consumer** (`dsh-tool-bash`) — exposes the capability as a model-callable tool ``` @@ -44,14 +44,14 @@ The Service Definition and tool remain unchanged while the provider changes. ### Evolve independently - The Service Definition changes rarely after callers depend on its contract. -- Service providers can improve performance and security independently. +- Service Providers can improve performance and security independently. - Consumers can change how they present the capability to the model. ### Decouple dependencies -- The Service provider depends on the Service Definition. +- The Service Provider depends on the Service Definition. - The Consumer depends on the Service Definition. -- The Service provider and Consumer **do not depend on each other**. +- The Service Provider and Consumer **do not depend on each other**. The [capability-seam reference](../../../capability-seams.md) owns the current built-in families and package links. @@ -87,7 +87,7 @@ export interface MyCapResult { } ``` -### Step 2: write a Service provider +### Step 2: write a Service Provider ```ts ignore-check // packages/my-cap/my-cap-local/src/index.ts @@ -147,7 +147,7 @@ export function apply(ctx: Context) { ## Design points - **Do not split preemptively** — use separate packages only when the roles need to evolve independently. A simple tool plugin does not. -- **The Service Definition owns Request/Result types** — Service providers and Consumers depend only on the Service Definition package. +- **The Service Definition owns Request/Result types** — Service Providers and Consumers depend only on the Service Definition package. - **Explicit > implicit** — resolve defaults in an explicit `resolve(request): Spec` step rather than hiding `?? default` expressions inside `run()`. ## Next steps diff --git a/docs/user/develop/practice/index.zh.md b/docs/user/develop/practice/index.zh.md index 8bd378af5e..aec5980ea4 100644 --- a/docs/user/develop/practice/index.zh.md +++ b/docs/user/develop/practice/index.zh.md @@ -6,14 +6,14 @@ ## 概念参考 -当一项能力足够通用，需要支持可替换的提供方时（例如 Bash 执行），harness 会区分三种角色：**Service Definition**、**Service provider** 和 **Consumer**。角色需要独立演进或替换时，将它们放入不同包；否则一个包可以承担多个角色。完整能力构成其 seam。任何单一角色都不是 seam。 +当一项能力足够通用，需要支持可替换的提供方时（例如 Bash 执行），harness 会区分三种角色：**Service Definition**、**Service Provider** 和 **Consumer**。角色需要独立演进或替换时，将它们放入不同包；否则一个包可以承担多个角色。完整能力构成其 seam。任何单一角色都不是 seam。 ## 以 Bash 为例 以 Bash 执行能力为例： - **Service Definition** (`dsh-shell`)：定义 Cordis 服务以及 Bash 请求和结果类型 -- **Service provider** (`dsh-bash-local`)：在本地计算机上执行命令 +- **Service Provider** (`dsh-bash-local`)：在本地计算机上执行命令 - **Consumer** (`dsh-tool-bash`)：将该能力公开为模型可调用的工具 ``` @@ -44,14 +44,14 @@ ### 独立演进 - 调用方开始依赖 Service Definition 的约定后，Service Definition 很少改动。 -- Service provider 可以独立优化性能和安全性。 +- Service Provider 可以独立优化性能和安全性。 - Consumer 可以调整能力向模型呈现的方式。 ### 依赖解耦 -- Service provider 依赖 Service Definition。 +- Service Provider 依赖 Service Definition。 - Consumer 依赖 Service Definition。 -- Service provider 和 Consumer **互不依赖**。 +- Service Provider 和 Consumer **互不依赖**。 当前内置系列及其包链接由[能力 seam 参考](../../../capability-seams.md)负责。 @@ -87,7 +87,7 @@ export interface MyCapResult { } ``` -### 第二步：编写 Service provider +### 第二步：编写 Service Provider ```ts ignore-check // packages/my-cap/my-cap-local/src/index.ts @@ -147,7 +147,7 @@ export function apply(ctx: Context) { ## 设计要点 - **不要预防性拆分**：只有角色需要独立演进时，才使用不同包。简单的工具插件无需拆分。 -- **Service Definition 拥有 Request/Result 类型**：Service provider 和 Consumer 只依赖 Service Definition 包。 +- **Service Definition 拥有 Request/Result 类型**：Service Provider 和 Consumer 只依赖 Service Definition 包。 - **显式优于隐式**：实现应通过显式的 `resolve(request): Spec` 步骤处理默认值，而不是在 `run()` 中隐藏 `?? default`。 ## 下一步 diff --git a/packages/README.i18n.yaml b/packages/README.i18n.yaml index 856b455103..19feb5b2c3 100644 --- a/packages/README.i18n.yaml +++ b/packages/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/README.md -README.md: 2e28b190378ed8ca25102d6311bd8a2c8d5e1c58 -README.zh.md: e0e1973d146c241d4846c4c237ed0e5f6a0d7b8a +README.md: 7904ec1fea8dbab361fcd90b2b32f1c743ce5537 +README.zh.md: bac14113b656990cfda18a448034bfa25482c4fc diff --git a/packages/README.md b/packages/README.md index 2e28b19037..7904ec1fea 100644 --- a/packages/README.md +++ b/packages/README.md @@ -64,6 +64,6 @@ New packages join existing groups; new groups update their README and this table The dependency graph is generated: [docs/module-graph.md](../docs/module-graph.md) (`pnpm run gen-module-graph`, freshness-gated in CI). -**Extension plugins depend on Service Definitions, never concrete providers.** `dsh-agent-loop` is swappable; UI, hook, and tool plugins use `dsh-agent`. Composition bundles, including `dsh-agent-spine-demo`, may depend on spine plugins. Capabilities separate Service Definition / Service provider / Consumer roles when they evolve independently; see [capability seams](../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md). +**Extension plugins depend on Service Definitions, never concrete providers.** `dsh-agent-loop` is swappable; UI, hook, and tool plugins use `dsh-agent`. Composition bundles, including `dsh-agent-spine-demo`, may depend on spine plugins. Capabilities separate Service Definition / Service Provider / Consumer roles when they evolve independently; see [capability seams](../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md). Package READMEs cover purpose, APIs, extension points, and [Model Experience](../docs/cookbook/adding-a-package.md#4-write-the-package-readme) unless on the model-agnostic [omission allowlist](../scripts/verify-package-readme-model-experience.ts). They also carry `## Known Limitations and Deferred Work` or use its [allowlist](../scripts/verify-package-readme-limitations.ts). diff --git a/packages/README.zh.md b/packages/README.zh.md index e0e1973d14..bac14113b6 100644 --- a/packages/README.zh.md +++ b/packages/README.zh.md @@ -64,6 +64,6 @@ npm scope 为 `@deepseek-ai/dsh-*`；Cordis `Service` 子类和函数插件通 依赖图由工具生成：[docs/module-graph.md](../docs/module-graph.md)（`pnpm run gen-module-graph`，CI 中有新鲜度门禁）。 -**扩展插件依赖 Service Definition，绝不依赖具体提供方。** `dsh-agent-loop` 可替换；UI、钩子和工具插件使用 `dsh-agent`。包括 `dsh-agent-spine-demo` 在内的组合包可以依赖主干插件。能力在 Service Definition／Service provider／Consumer 角色需要独立演进时将其分离；详见[能力 seam](../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)。 +**扩展插件依赖 Service Definition，绝不依赖具体提供方。** `dsh-agent-loop` 可替换；UI、钩子和工具插件使用 `dsh-agent`。包括 `dsh-agent-spine-demo` 在内的组合包可以依赖主干插件。能力在 Service Definition／Service Provider／Consumer 角色需要独立演进时将其分离；详见[能力 seam](../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)。 包 README 覆盖用途、API、扩展点和[模型体验](../docs/cookbook/adding-a-package.md#4-write-the-package-readme)；列入模型无关[省略允许清单](../scripts/verify-package-readme-model-experience.ts)的包除外。它们还要包含 `## Known Limitations and Deferred Work`，或列入其[允许清单](../scripts/verify-package-readme-limitations.ts)。 diff --git a/packages/boot/app-boot/src/profile.ts b/packages/boot/app-boot/src/profile.ts index 59dac77d69..24ba7b66ee 100644 --- a/packages/boot/app-boot/src/profile.ts +++ b/packages/boot/app-boot/src/profile.ts @@ -209,7 +209,7 @@ function ensureSymlink(link: string, target: string): void { * installation" contract. The closure (not just direct dependencies) is * required for out-of-tree plugins: their peer dependencies name Service * Definition packages (`dsh-compaction`, `dsh-invariants`, ...) that the app - * reaches only through its Service provider packages. Symlinked packages + * reaches only through its Service Provider packages. Symlinked packages * resolve their own dependencies from their real directories (Node's default * symlink-following), so each package needs only its one flat link. * Idempotent: correct links are kept and moved installations are diff --git a/packages/compaction/compaction-basic/README.i18n.yaml b/packages/compaction/compaction-basic/README.i18n.yaml index 397ab1054e..e7ea072e85 100644 --- a/packages/compaction/compaction-basic/README.i18n.yaml +++ b/packages/compaction/compaction-basic/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/compaction/compaction-basic/README.md -README.md: 227bc64ff9e8ff27b757ca3900aba743bf11776d -README.zh.md: 93a17a29be256ac4d907790ad6f974aa7554ae48 +README.md: 82df7b7e399cef80d92611819e9e58f13babf175 +README.zh.md: c405c7a253518b0bd4860b8385634c589cf3791e diff --git a/packages/compaction/compaction-basic/README.md b/packages/compaction/compaction-basic/README.md index 227bc64ff9..82df7b7e39 100644 --- a/packages/compaction/compaction-basic/README.md +++ b/packages/compaction/compaction-basic/README.md @@ -4,7 +4,7 @@ English | [中文](README.zh.md) The **basic compaction backend**: a `BasicCompactionEngine` implementing the `@deepseek-ai/dsh-compaction` Service Definition with reusable `ctx.tokenMeter` pressure, token-budget retention, and summarization as a direct one-shot `ctx.llm.stream()` call that replays the conversation prefix to reuse the provider's KV cache (interceptable at `llm/stream`). -This package owns the Service provider role of the compaction capability — see the [Service Definition package](../compaction/README.md) for its contract and the [capability-seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md) for the design. +This package owns the Service Provider role of the compaction capability — see the [Service Definition package](../compaction/README.md) for its contract and the [capability-seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md) for the design. ## What it owns diff --git a/packages/compaction/compaction-basic/README.zh.md b/packages/compaction/compaction-basic/README.zh.md index 93a17a29be..c405c7a253 100644 --- a/packages/compaction/compaction-basic/README.zh.md +++ b/packages/compaction/compaction-basic/README.zh.md @@ -4,7 +4,7 @@ **基础压缩（compaction）后端**：`BasicCompactionEngine` 实现 `@deepseek-ai/dsh-compaction` Service Definition，使用可复用的 `ctx.tokenMeter` 压力、token 预算保留与摘要。摘要是直接的一次性 `ctx.llm.stream()` 调用，它会回放会话前缀以复用提供方的 KV Cache（可在 `llm/stream` 处拦截）。 -本包承担压缩能力的 Service provider 角色；其约定见 [Service Definition 包](../compaction/README.md)，设计见 [能力 seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)。 +本包承担压缩能力的 Service Provider 角色；其约定见 [Service Definition 包](../compaction/README.md)，设计见 [能力 seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md)。 ## 拥有的职责 diff --git a/packages/compaction/compaction/README.i18n.yaml b/packages/compaction/compaction/README.i18n.yaml index 19af2732b0..68587d1ff2 100644 --- a/packages/compaction/compaction/README.i18n.yaml +++ b/packages/compaction/compaction/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/compaction/compaction/README.md -README.md: 5c2d9df07a24380ab93bd6b34dfa771b85211866 -README.zh.md: b5a13cf47015867eb72981a64fc893a2605e5cd8 +README.md: 89788990b3f3894954f4dfc24bb3230300ae8786 +README.zh.md: 761bac804bd761fff7d3fe7bff9136da631ef78d diff --git a/packages/compaction/compaction/README.md b/packages/compaction/compaction/README.md index 5c2d9df07a..89788990b3 100644 --- a/packages/compaction/compaction/README.md +++ b/packages/compaction/compaction/README.md @@ -9,7 +9,7 @@ This package owns the Service Definition role of the compaction capability, spli | Package | Role | |---|---| | `@deepseek-ai/dsh-compaction` (this) | Service Definition: abstract service + `compaction/*` events + `CompactionResult` + correlated checkpoint-source constructor + tool-pairing boundary helpers | -| `@deepseek-ai/dsh-compaction-basic` | Service provider: `ctx.tokenMeter` pressure + token-budget retention + `llm.stream()` summarization | +| `@deepseek-ai/dsh-compaction-basic` | Service Provider: `ctx.tokenMeter` pressure + token-budget retention + `llm.stream()` summarization | | `@deepseek-ai/dsh-command-compact` | Consumer: the human `/compact` command over `ctx.compaction.compactNow()` | Unlike the bash seam, this Service Definition depends on `@deepseek-ai/dsh-session` and `@deepseek-ai/dsh-llm` — the contract's verbs are defined over a `Session` and its output is the `ContentBlock` vocabulary, so they cannot be expressed without naming those packages. That deviation from the "Service Definition depends only on cordis" guidance is intentional and recorded in the [compaction capability-seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md). diff --git a/packages/compaction/compaction/README.zh.md b/packages/compaction/compaction/README.zh.md index b5a13cf470..761bac804b 100644 --- a/packages/compaction/compaction/README.zh.md +++ b/packages/compaction/compaction/README.zh.md @@ -9,7 +9,7 @@ | 包 | 职责 | |---|---| | `@deepseek-ai/dsh-compaction`（本包） | Service Definition：抽象服务 + `compaction/*` 事件 + `CompactionResult` + 关联检查点源构造函数 + 工具配对边界 helper | -| `@deepseek-ai/dsh-compaction-basic` | Service provider：`ctx.tokenMeter` 压力 + token 预算保留 + `llm.stream()` 摘要 | +| `@deepseek-ai/dsh-compaction-basic` | Service Provider：`ctx.tokenMeter` 压力 + token 预算保留 + `llm.stream()` 摘要 | | `@deepseek-ai/dsh-command-compact` | Consumer：面向人类的 `/compact` 命令，基于 `ctx.compaction.compactNow()` 实现 | 与 bash seam 不同，该 Service Definition 依赖 `@deepseek-ai/dsh-session` 和 `@deepseek-ai/dsh-llm`。约定的动词基于 `Session` 定义，其输出使用 `ContentBlock` 词汇，因此无法在不指名这些包的情况下表达。这项对「Service Definition 只依赖 cordis」指引的偏离是有意的，并记录在 [压缩能力 seam Agent Note](../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md) 中。 diff --git a/packages/core/tools/tests/code-mode.spec.ts b/packages/core/tools/tests/code-mode.spec.ts index 58c190dd26..59c6df4c3f 100644 --- a/packages/core/tools/tests/code-mode.spec.ts +++ b/packages/core/tools/tests/code-mode.spec.ts @@ -19,7 +19,7 @@ const testToolSignal = new AbortController().signal * misconfiguration rejections, the run_code dispatch bridge (serialization, * abort, JSON normalization, error mapping, events, quiescence), and HMR * safety — all against an in-repo fake runtime, exactly the - * Service Definition / Service provider / Consumer roles the seam promises. + * Service Definition / Service Provider / Consumer roles the seam promises. */ /** A scriptable in-repo CodeRuntime: each test sets `behavior` to drive the bindings however it needs. */ diff --git a/packages/e2b/subprocess-e2b/src/index.ts b/packages/e2b/subprocess-e2b/src/index.ts index 7d45d763b5..bf2bd33c54 100644 --- a/packages/e2b/subprocess-e2b/src/index.ts +++ b/packages/e2b/subprocess-e2b/src/index.ts @@ -1,5 +1,5 @@ /** - * E2B Service provider for the subprocess capability seam. Each handle starts through the + * E2B Service Provider for the subprocess capability seam. Each handle starts through the * shared sandbox and retains command output/status paths in that remote world. * @module @deepseek-ai/dsh-subprocess-e2b */ diff --git a/packages/examples/agent-spine-demo/README.i18n.yaml b/packages/examples/agent-spine-demo/README.i18n.yaml index ac85098e2d..88512542e9 100644 --- a/packages/examples/agent-spine-demo/README.i18n.yaml +++ b/packages/examples/agent-spine-demo/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/examples/agent-spine-demo/README.md -README.md: e4e92d398d5f48609bc5af23ece2b5fe3e607b21 -README.zh.md: c5f78d53a59f3bd3e377afc2c471d187b73da32e +README.md: 509e4e6d6b5885fb0c685e4ee34fe8078944415b +README.zh.md: a5e6c9876ce8522d9d178ee963632654fb180351 diff --git a/packages/examples/agent-spine-demo/README.md b/packages/examples/agent-spine-demo/README.md index e4e92d398d..509e4e6d6b 100644 --- a/packages/examples/agent-spine-demo/README.md +++ b/packages/examples/agent-spine-demo/README.md @@ -49,7 +49,7 @@ The spine is everything COMMON to every entry point. The swappable and entry-poi - **non-local skill providers** — the bundle ships the skill registry, the local filesystem provider, and the `skill` tool; deployments can add other providers such as embedded or remote catalogs as siblings. - **entry point + per-app infrastructure** — headless, ACP, and JSON-RPC app packages own transport, stdout, and reload choices. `timer` stays in the spine because it is common and stdout-silent. -This applies the [Service Definition / Service provider / Consumer separation](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) at the composition level: the bundle owns the shared spine, the leaf owns the backends, the app package owns the entry point. +This applies the [Service Definition / Service Provider / Consumer separation](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md) at the composition level: the bundle owns the shared spine, the leaf owns the backends, the app package owns the entry point. ## Config diff --git a/packages/examples/agent-spine-demo/README.zh.md b/packages/examples/agent-spine-demo/README.zh.md index c5f78d53a5..a5e6c9876c 100644 --- a/packages/examples/agent-spine-demo/README.zh.md +++ b/packages/examples/agent-spine-demo/README.zh.md @@ -49,7 +49,7 @@ - **非本地 skill 提供方**：组合包交付 skill 注册表、本地文件系统提供方和 `skill` 工具；部署可以把嵌入式目录或远程目录等其他提供方作为同级插件添加。 - **入口与各应用基础设施**：无头、ACP（Agent Client Protocol）和 JSON-RPC 应用包负责传输、stdout 与重新加载选择。`timer` 保留在主干中，因为它是共有组件且不写 stdout。 -这里在组合层应用 [Service Definition／Service provider／Consumer 的职责分离](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)：组合包拥有共享主干，叶节点拥有后端，应用包拥有入口。 +这里在组合层应用 [Service Definition／Service Provider／Consumer 的职责分离](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)：组合包拥有共享主干，叶节点拥有后端，应用包拥有入口。 ## 配置 @@ -59,7 +59,7 @@ import type { Config } from '@deepseek-ai/dsh-agent-spine-demo' // workspaceContext requires { maxBytes } or false; the other owner schemas supply defaults. ``` -组合包将每个字段转发给拥有它的子节点。应用包提供预创建的 agent：无头和 JSON-RPC 组合会创建 `main`，ACP 应用则在 `session/new` 按需创建 agent。`includeRuntimeContext: false` 会转发给 `dsh-system-prompt`，为新建会话抑制所有动态上下文快照，但不禁用其策略服务。提示词、工具、标题、skill、工作区上下文、不变式、目标和任务设置沿用其所属包记录的 schema 与默认值；`jobs.maxConcurrentJobsPerOwner` 配置本地 Service provider，并与面向模型的 `toolJobs` 控制工具相互独立。`pickSpineConfig()` 只复制该组合包拥有的字段，`dshHome` 值冲突会在组合时失败。 +组合包将每个字段转发给拥有它的子节点。应用包提供预创建的 agent：无头和 JSON-RPC 组合会创建 `main`，ACP 应用则在 `session/new` 按需创建 agent。`includeRuntimeContext: false` 会转发给 `dsh-system-prompt`，为新建会话抑制所有动态上下文快照，但不禁用其策略服务。提示词、工具、标题、skill、工作区上下文、不变式、目标和任务设置沿用其所属包记录的 schema 与默认值；`jobs.maxConcurrentJobsPerOwner` 配置本地 Service Provider，并与面向模型的 `toolJobs` 控制工具相互独立。`pickSpineConfig()` 只复制该组合包拥有的字段，`dshHome` 值冲突会在组合时失败。 例如，`{ invariants: { enabled: true, package_allowlist: ['^@deepseek-ai/dsh-'], package_blocklist: ['agent-loop$'] } }` 会让包拥有的配套插件保持挂载，但抑制被阻止的拥有者。Blocklist 匹配优先于 allowlist 匹配；正则表达式与生命周期规则见 [`dsh-invariants`](../../runtime-diagnostics/invariants/README.md)。 diff --git a/packages/interaction/user-questions/README.i18n.yaml b/packages/interaction/user-questions/README.i18n.yaml index 86c5f1cf2c..bdcbeee898 100644 --- a/packages/interaction/user-questions/README.i18n.yaml +++ b/packages/interaction/user-questions/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/interaction/user-questions/README.md -README.md: 4a8f0d5bd409872c7849adf0a35b836fb884fb25 -README.zh.md: dcba617f042be84f516e14dbfa6db125dd0aca5b +README.md: 53459c39c75d5d3907b002239c83db5f82e024f5 +README.zh.md: 3a1f016aef6efa0a2167523fd4e1a938fa53eb71 diff --git a/packages/interaction/user-questions/README.md b/packages/interaction/user-questions/README.md index 4a8f0d5bd4..53459c39c7 100644 --- a/packages/interaction/user-questions/README.md +++ b/packages/interaction/user-questions/README.md @@ -30,7 +30,7 @@ When a request carries an agent, `ask()` authenticates its exact identity throug ## Role -This is the Service Definition package. Consumers such as `@deepseek-ai/dsh-tool-ask-user` depend on this service; the Web host runtime supplies the shipped Service provider. The loop stays unchanged: a tool call awaits a promise, and the tool result resumes the normal agent loop. +This is the Service Definition package. Consumers such as `@deepseek-ai/dsh-tool-ask-user` depend on this service; the Web host runtime supplies the shipped Service Provider. The loop stays unchanged: a tool call awaits a promise, and the tool result resumes the normal agent loop. ## Model Experience diff --git a/packages/interaction/user-questions/README.zh.md b/packages/interaction/user-questions/README.zh.md index dcba617f04..3a1f016aef 100644 --- a/packages/interaction/user-questions/README.zh.md +++ b/packages/interaction/user-questions/README.zh.md @@ -30,7 +30,7 @@ ## 职责 -这是 Service Definition 包。`@deepseek-ai/dsh-tool-ask-user` 等 Consumer 依赖此服务；Web 宿主运行时提供随产品交付的 Service provider。循环保持不变：工具调用等待 Promise，工具结果随后恢复正常的 agent loop（智能体循环）。 +这是 Service Definition 包。`@deepseek-ai/dsh-tool-ask-user` 等 Consumer 依赖此服务；Web 宿主运行时提供随产品交付的 Service Provider。循环保持不变：工具调用等待 Promise，工具结果随后恢复正常的 agent loop（智能体循环）。 ## 模型体验 diff --git a/packages/jobs/jobs/README.i18n.yaml b/packages/jobs/jobs/README.i18n.yaml index 5e814df8bb..0473d974f8 100644 --- a/packages/jobs/jobs/README.i18n.yaml +++ b/packages/jobs/jobs/README.i18n.yaml @@ -3,4 +3,4 @@ # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/jobs/jobs/README.md README.md: f4469286603f687be5789bd016ab462dba26e664 -README.zh.md: 720c8b550b52716ef66d182da0acf81eae4490ca +README.zh.md: 30d8e4cb1e298bb4a3a0a3e65bb0858b2458a277 diff --git a/packages/jobs/jobs/README.zh.md b/packages/jobs/jobs/README.zh.md index 720c8b550b..30d8e4cb1e 100644 --- a/packages/jobs/jobs/README.zh.md +++ b/packages/jobs/jobs/README.zh.md @@ -6,7 +6,7 @@ ## 服务约定 -- `start(spec): JobId` 验证已附加的任务控制器、spec、确切且仍存活的 owner、可选的正数 `outputLimitBytes`，以及 Service provider 所拥有的准入策略，然后只调用生产方的 `run()` 一次。预检拒绝或启动方抛出异常时都不会生成 job id 或注册工作；成功返回会直接提交，不再执行其他可能失败的步骤。 +- `start(spec): JobId` 验证已附加的任务控制器、spec、确切且仍存活的 owner、可选的正数 `outputLimitBytes`，以及 Service Provider 所拥有的准入策略，然后只调用生产方的 `run()` 一次。预检拒绝或启动方抛出异常时都不会生成 job id 或注册工作；成功返回会直接提交，不再执行其他可能失败的步骤。 - `get(id, caller?)` 和 `list(caller?)` 返回非消费式快照。列表只包含调用方拥有及无 owner 的任务。 - `read(id, caller?)` 消费流任务的唯一游标；对于最终输出任务，则以幂等方式读取终止输出。 - `kill(id, caller?, reason?)` 在更改状态前调用生产方取消。取消抛出异常时任务保持运行；成功则把状态改为 `stopping`，并将终止交付标记为已报告。 diff --git a/packages/lsp/lsp-stdio/src/connection.ts b/packages/lsp/lsp-stdio/src/connection.ts index ac0554ae26..5cfcf10b0c 100644 --- a/packages/lsp/lsp-stdio/src/connection.ts +++ b/packages/lsp/lsp-stdio/src/connection.ts @@ -6,7 +6,7 @@ * runs commands). It caps stderr, surfaces framing/decoder failures as a * fatal close, and exposes tree-scoped termination through the handle so the * instance owns teardown; group/tree mechanics live in the subprocess - * Service provider. + * Service Provider. * @module @deepseek-ai/dsh-lsp-stdio/connection */ diff --git a/packages/lsp/lsp/README.i18n.yaml b/packages/lsp/lsp/README.i18n.yaml index f5f5cdb096..1beb022f57 100644 --- a/packages/lsp/lsp/README.i18n.yaml +++ b/packages/lsp/lsp/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/lsp/lsp/README.md -README.md: 910b7e06ac849bbf3b56d49c1b6258a3633c6bcc -README.zh.md: 519964cd543005b9db0b345d1632a76bf56d6b36 +README.md: cf32f9cc60a346def48d9720bf0695db36553b0e +README.zh.md: 6f19d1f649eb1483782b6ebb4c82f05da7a42a80 diff --git a/packages/lsp/lsp/README.md b/packages/lsp/lsp/README.md index 910b7e06ac..cf32f9cc60 100644 --- a/packages/lsp/lsp/README.md +++ b/packages/lsp/lsp/README.md @@ -9,7 +9,7 @@ This package owns the Service Definition role of the LSP capability: | Package | Role | |---|---| | `@deepseek-ai/dsh-lsp` (this) | Service Definition: the service, provider registry keyed by branded id + extension mapping, per-query selection, request/result vocabulary, the `LspError` taxonomy | -| `@deepseek-ai/dsh-lsp-stdio` | Service provider: a generic local backend that registers configured stdio language-server providers | +| `@deepseek-ai/dsh-lsp-stdio` | Service Provider: a generic local backend that registers configured stdio language-server providers | | `@deepseek-ai/dsh-tool-lsp` | Consumer: the model-facing `lsp` tool over `ctx.lsp` | The seam exposes exactly four semantic operations — `goToDefinition`, `findReferences`, `goToImplementation`, `hover` — and no generic JSON-RPC escape hatch, so no protocol payload or unreviewed command/mutation reaches a provider through `ctx.lsp`. diff --git a/packages/lsp/lsp/README.zh.md b/packages/lsp/lsp/README.zh.md index 519964cd54..6f19d1f649 100644 --- a/packages/lsp/lsp/README.zh.md +++ b/packages/lsp/lsp/README.zh.md @@ -9,7 +9,7 @@ | 包 | 职责 | |---|---| | `@deepseek-ai/dsh-lsp`（本包） | Service Definition：服务、以品牌化 id + 扩展名映射为 key 的提供方注册表、逐查询选择、请求／结果词汇、`LspError` 分类体系 | -| `@deepseek-ai/dsh-lsp-stdio` | Service provider：通用本地后端，注册已配置的 stdio 语言服务器提供方 | +| `@deepseek-ai/dsh-lsp-stdio` | Service Provider：通用本地后端，注册已配置的 stdio 语言服务器提供方 | | `@deepseek-ai/dsh-tool-lsp` | Consumer：面向模型的 `lsp` 工具，基于 `ctx.lsp` | 该 seam 恰好公开四种语义操作：`goToDefinition`、`findReferences`、`goToImplementation`、`hover`，且没有通用 JSON-RPC 逃生口，因此任何协议载荷或未经评审的命令／修改都无法通过 `ctx.lsp` 到达提供方。 diff --git a/packages/sandbox/sandbox/README.i18n.yaml b/packages/sandbox/sandbox/README.i18n.yaml index 18f760c68a..7e7ed765b2 100644 --- a/packages/sandbox/sandbox/README.i18n.yaml +++ b/packages/sandbox/sandbox/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/sandbox/sandbox/README.md -README.md: 6afa3d68f5a852af1f1b496b25238b09c055fdc2 -README.zh.md: 2310f17f5a1711901b88dc7ee1a2bf956e79b6d1 +README.md: 3ebbffd623eee51dd6fcb588eec374e6d09be2f0 +README.zh.md: bde83955a85cbe2d60c521e3677b5b305a29ecb1 diff --git a/packages/sandbox/sandbox/README.md b/packages/sandbox/sandbox/README.md index 6afa3d68f5..3ebbffd623 100644 --- a/packages/sandbox/sandbox/README.md +++ b/packages/sandbox/sandbox/README.md @@ -8,7 +8,7 @@ The contract in one line: `ctx.sandbox.confine(argv, policy)` returns the argv t Policy rides the call, not the provider: two consumers may confine under different policies at the same instant (bash under `read-only` while a confined child agent keeps its state directory writable), and an approved escalated retry is just a new call with a wider policy. -**Same-world confinement only.** A backend shares the host's filesystem and kernel (`bwrap`, Landlock, Seatbelt); `workspaceRoot` names the filesystem-canonical real host directory. Workspace identity is resolved before lexical normalization, so a valid cwd containing `symlink/..` grants the directory where `chdir` actually lands rather than an unrelated lexical parent. Containers, microVMs, and remote executors are NOT backends of this seam — they replace the Service providers for whole capability seams (`ctx.shell`, `ctx.fs`) as environment-coherent groups. The boundary and its rationale: [the sandbox Agent Note](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md). +**Same-world confinement only.** A backend shares the host's filesystem and kernel (`bwrap`, Landlock, Seatbelt); `workspaceRoot` names the filesystem-canonical real host directory. Workspace identity is resolved before lexical normalization, so a valid cwd containing `symlink/..` grants the directory where `chdir` actually lands rather than an unrelated lexical parent. Containers, microVMs, and remote executors are NOT backends of this seam — they replace the Service Providers for whole capability seams (`ctx.shell`, `ctx.fs`) as environment-coherent groups. The boundary and its rationale: [the sandbox Agent Note](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md). Implementations: [`@deepseek-ai/dsh-sandbox-local`](../sandbox-local/) (Linux: `bwrap`, else the per-platform Landlock launcher; macOS: `sandbox-exec`/Seatbelt). Consumers: [`@deepseek-ai/dsh-bash-sandbox`](../../shell/bash-sandbox/) (wraps `['bash', '-c', command]`). diff --git a/packages/sandbox/sandbox/README.zh.md b/packages/sandbox/sandbox/README.zh.md index 2310f17f5a..bde83955a8 100644 --- a/packages/sandbox/sandbox/README.zh.md +++ b/packages/sandbox/sandbox/README.zh.md @@ -8,7 +8,7 @@ 策略随调用传递，而不属于提供方：两个消费方可以同时按不同策略施加限制（bash 使用 `read-only`，而受限制的子 agent（智能体）保持其状态目录可写）；获批的升权重试只是使用更宽策略发起的新调用。 -**只支持与宿主共享文件系统和内核的限制。** 后端与宿主共享文件系统和内核（`bwrap`、Landlock、Seatbelt）；`workspaceRoot` 指向文件系统规范化后的真实主机目录。系统先解析工作区所指的目录，再做词法规范化，因此包含 `symlink/..` 的有效 cwd 会授权 `chdir` 实际到达的目录，而非无关的词法父目录。容器、microVM 与远程执行器都不是该 seam 的后端：它们会以环境一致的分组替换整个能力 seam 的 Service provider（`ctx.shell`、`ctx.fs`）。边界及其设计理由见[沙箱 Agent Note](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md)。 +**只支持与宿主共享文件系统和内核的限制。** 后端与宿主共享文件系统和内核（`bwrap`、Landlock、Seatbelt）；`workspaceRoot` 指向文件系统规范化后的真实主机目录。系统先解析工作区所指的目录，再做词法规范化，因此包含 `symlink/..` 的有效 cwd 会授权 `chdir` 实际到达的目录，而非无关的词法父目录。容器、microVM 与远程执行器都不是该 seam 的后端：它们会以环境一致的分组替换整个能力 seam 的 Service Provider（`ctx.shell`、`ctx.fs`）。边界及其设计理由见[沙箱 Agent Note](../../../.agents/notes/implemented/feature/2026-07-06-sandbox.md)。 实现：[`@deepseek-ai/dsh-sandbox-local`](../sandbox-local/)（Linux：`bwrap`，否则使用相应平台的 Landlock launcher；macOS：`sandbox-exec`／Seatbelt）。消费方：[`@deepseek-ai/dsh-bash-sandbox`](../../shell/bash-sandbox/)（包装 `['bash', '-c', command]`）。 diff --git a/packages/session/session-persistence/README.i18n.yaml b/packages/session/session-persistence/README.i18n.yaml index 68de7c761a..74b808b05e 100644 --- a/packages/session/session-persistence/README.i18n.yaml +++ b/packages/session/session-persistence/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/session/session-persistence/README.md -README.md: 914e94a7adc83fba963ae651a81ac527cbc7b995 -README.zh.md: 75aeec3c6a31e87b27cc2df3493e3fca9f808fbf +README.md: 335f40e7439fc4a49fa49bb4541f101250468d1b +README.zh.md: 5a50f051a2c53a5f27b009df11ad46f5952a32ac diff --git a/packages/session/session-persistence/README.md b/packages/session/session-persistence/README.md index 914e94a7ad..335f40e743 100644 --- a/packages/session/session-persistence/README.md +++ b/packages/session/session-persistence/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Session persistence is a capability seam. The abstract `SessionPersistence` service (`ctx.sessionPersistence`) is its Service Definition. It requires a persistence backend to store, reload, and list sessions durably without defining the storage implementation. The seam follows the `dsh-shell` roles ([capability seams](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)): this package owns the Service Definition, a sibling package owns the Service provider, and Consumers inject the service. +Session persistence is a capability seam. The abstract `SessionPersistence` service (`ctx.sessionPersistence`) is its Service Definition. It requires a persistence backend to store, reload, and list sessions durably without defining the storage implementation. The seam follows the `dsh-shell` roles ([capability seams](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)): this package owns the Service Definition, a sibling package owns the Service Provider, and Consumers inject the service. The persisted unit IS the existing `SessionEvent` (event-sourced model — the log is the single source of truth), so there is no parallel "persisted message" type. Metadata that is NOT replayable conversation state (format version, cwd, lineage, seed boundary, origin, delegation depth) travels separately as `SessionHeader`, owned by `dsh-session` and re-exported here. diff --git a/packages/session/session-persistence/README.zh.md b/packages/session/session-persistence/README.zh.md index 75aeec3c6a..5a50f051a2 100644 --- a/packages/session/session-persistence/README.zh.md +++ b/packages/session/session-persistence/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -会话持久化是一项能力 seam。抽象的 `SessionPersistence` 服务（`ctx.sessionPersistence`）是其 Service Definition。它要求持久化后端持久存储、重新加载和列出会话，但不规定具体存储实现。该 seam 采用与 `dsh-shell` 相同的角色划分（见[能力 seam](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)）：本包负责 Service Definition，同级包负责 Service provider，Consumer 注入该服务。 +会话持久化是一项能力 seam。抽象的 `SessionPersistence` 服务（`ctx.sessionPersistence`）是其 Service Definition。它要求持久化后端持久存储、重新加载和列出会话，但不规定具体存储实现。该 seam 采用与 `dsh-shell` 相同的角色划分（见[能力 seam](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)）：本包负责 Service Definition，同级包负责 Service Provider，Consumer 注入该服务。 持久化单元就是现有 `SessionEvent`（事件溯源模型：日志是唯一真源），因此不存在另一套并行的「持久消息」类型。不属于可回放对话状态的元数据（格式版本、cwd、血缘、种子边界、origin、委托深度）作为 `SessionHeader` 单独传输，该类型归 `dsh-session` 所有，并在此重新导出。 diff --git a/packages/session/session-telemetry-otel/src/index.ts b/packages/session/session-telemetry-otel/src/index.ts index d33d12de23..169f4dc9de 100644 --- a/packages/session/session-telemetry-otel/src/index.ts +++ b/packages/session/session-telemetry-otel/src/index.ts @@ -1,5 +1,5 @@ /** - * OpenTelemetry Service provider for the DeepSeek Harness telemetry capability. + * OpenTelemetry Service Provider for the DeepSeek Harness telemetry capability. * * Composes the OTel JS SDK as-is — a `LoggerProvider` with a * `BatchLogRecordProcessor` and an OTLP/HTTP log exporter — and maps each diff --git a/packages/session/session-title/tests/provider.spec.ts b/packages/session/session-title/tests/provider.spec.ts index 461a608180..7843ff2c22 100644 --- a/packages/session/session-title/tests/provider.spec.ts +++ b/packages/session/session-title/tests/provider.spec.ts @@ -47,7 +47,7 @@ function appendRoute(session: ReturnType, reason: }) } -describe('SessionTitleService provider lifecycle', () => { +describe('SessionTitleService Provider lifecycle', () => { it('inherits title events across forks, skips first-prompt retitling, and lets all-messages update later', async () => { const ctx = new Context() await ctx.plugin(SessionStore) diff --git a/packages/session/session-title/tests/service-contracts.spec.ts b/packages/session/session-title/tests/service-contracts.spec.ts index a5525fc79b..521562c4ed 100644 --- a/packages/session/session-title/tests/service-contracts.spec.ts +++ b/packages/session/session-title/tests/service-contracts.spec.ts @@ -354,7 +354,7 @@ describe('SessionTitleService configuration and refresh boundaries', () => { }) }) -describe('SessionTitleService provider validation and stale scheduling', () => { +describe('SessionTitleService Provider validation and stale scheduling', () => { it('rejects malformed provider registrations before publishing them', async () => { const ctx = await setup() const generate = async (): Promise => ({ title: 'title', messageSeqs: [0] }) diff --git a/packages/shell/README.i18n.yaml b/packages/shell/README.i18n.yaml index bf3bb2ae3c..65372e643b 100644 --- a/packages/shell/README.i18n.yaml +++ b/packages/shell/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/README.md -README.md: 8adda0192a80e0b3fd65ba4a740d7835bd9cf1e4 -README.zh.md: 2e5aac94829db4cb41da0fc41fbd528225f35f1e +README.md: f075db4fbe57c6052fea89b30e35126117f75a7c +README.zh.md: 2fdd92aac8d768024b6b4a9d6bd96bb6f5dafb05 diff --git a/packages/shell/README.md b/packages/shell/README.md index 8adda0192a..f075db4fbe 100644 --- a/packages/shell/README.md +++ b/packages/shell/README.md @@ -6,7 +6,7 @@ The capability family spans the canonical executor seam, its implementations, th | Package | Role | ctx key | |---|---|---| -| [`shell/`](shell/README.md) | Defines the executor contract shared by Service providers and Consumers. | `ctx.shell` | +| [`shell/`](shell/README.md) | Defines the executor contract shared by Service Providers and Consumers. | `ctx.shell` | | [`bash-local/`](bash-local/README.md) | Executes commands through the local [`subprocess`](../subprocess/README.md) service. | (registers `ctx.shell`) | | [`bash-sandbox/`](bash-sandbox/README.md) | Applies the configured [`sandbox`](../sandbox/README.md) backend before local execution. | (registers `ctx.shell`) | | [`pwsh-local/`](pwsh-local/README.md) | Executes PowerShell commands with Windows-specific process behavior. | (registers `ctx.shell`) | diff --git a/packages/shell/README.zh.md b/packages/shell/README.zh.md index 2e5aac9482..2fdd92aac8 100644 --- a/packages/shell/README.zh.md +++ b/packages/shell/README.zh.md @@ -6,7 +6,7 @@ | 包 | 职责 | ctx key | |---|---|---| -| [`shell/`](shell/README.md) | 定义 Service provider 与 Consumer 共享的执行器约定。 | `ctx.shell` | +| [`shell/`](shell/README.md) | 定义 Service Provider 与 Consumer 共享的执行器约定。 | `ctx.shell` | | [`bash-local/`](bash-local/README.md) | 通过本地 [`subprocess`](../subprocess/README.md) 服务执行命令。 | （注册 `ctx.shell`） | | [`bash-sandbox/`](bash-sandbox/README.md) | 在本地执行前应用已配置的 [`sandbox`](../sandbox/README.md) 后端。 | （注册 `ctx.shell`） | | [`pwsh-local/`](pwsh-local/README.md) | 采用 Windows 特有的进程行为执行 PowerShell 命令。 | （注册 `ctx.shell`） | diff --git a/packages/shell/bash-local/README.i18n.yaml b/packages/shell/bash-local/README.i18n.yaml index d58d41ce87..9e8a0eaf85 100644 --- a/packages/shell/bash-local/README.i18n.yaml +++ b/packages/shell/bash-local/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/bash-local/README.md -README.md: ceece7e69de9c5e5337173c9fe3776bfe510e484 -README.zh.md: 643d74de08ae7ffcd23b97927b294e4ea0d16f81 +README.md: 5e62ea24676f3bedf32b1b48f8618d703d5fb462 +README.zh.md: 6f236f3dd78bd444eb57443ba068a0271ac5d8df diff --git a/packages/shell/bash-local/README.md b/packages/shell/bash-local/README.md index ceece7e69d..5e62ea2467 100644 --- a/packages/shell/bash-local/README.md +++ b/packages/shell/bash-local/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Local Service provider for the `@deepseek-ai/dsh-shell` executor seam over the [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) service: `LocalBashExecutor` spawns `bash -c ` per call as a managed process group through `ctx.subprocess`, and owns everything bash-shaped — command defaulting and caps, timeout/cancel classification, the model-friendly terminal environment, and the model-facing stdout/stderr merge for background reads. Group mechanics (bounded spill-backed output, credential scrub, kill escalation, disposal) are the subprocess service's. +Local Service Provider for the `@deepseek-ai/dsh-shell` executor seam over the [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) service: `LocalBashExecutor` spawns `bash -c ` per call as a managed process group through `ctx.subprocess`, and owns everything bash-shaped — command defaulting and caps, timeout/cancel classification, the model-friendly terminal environment, and the model-facing stdout/stderr merge for background reads. Group mechanics (bounded spill-backed output, credential scrub, kill escalation, disposal) are the subprocess service's. The package root exports the default and named `LocalBashExecutor` plugin plus its `Config`. diff --git a/packages/shell/bash-local/README.zh.md b/packages/shell/bash-local/README.zh.md index 643d74de08..6f236f3dd7 100644 --- a/packages/shell/bash-local/README.zh.md +++ b/packages/shell/bash-local/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -`@deepseek-ai/dsh-shell` 执行器 seam 的本地 Service provider，构建在 [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) 服务之上：`LocalBashExecutor` 每次调用都通过 `ctx.subprocess` 把 `bash -c ` 作为受管进程组 spawn，并负责所有 Bash 层职责（命令默认值补全与上限、超时与取消分类、适合模型的终端环境，以及后台读取时面向模型的 stdout/stderr 合并）。以 spill 文件兜底的有界输出、凭据清除、kill 升级和 dispose（资源释放）等进程组机制则由 subprocess 服务负责。 +`@deepseek-ai/dsh-shell` 执行器 seam 的本地 Service Provider，构建在 [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) 服务之上：`LocalBashExecutor` 每次调用都通过 `ctx.subprocess` 把 `bash -c ` 作为受管进程组 spawn，并负责所有 Bash 层职责（命令默认值补全与上限、超时与取消分类、适合模型的终端环境，以及后台读取时面向模型的 stdout/stderr 合并）。以 spill 文件兜底的有界输出、凭据清除、kill 升级和 dispose（资源释放）等进程组机制则由 subprocess 服务负责。 包根目录导出默认与具名的 `LocalBashExecutor` 插件及其 `Config`。 diff --git a/packages/shell/bash-local/src/index.ts b/packages/shell/bash-local/src/index.ts index 693eef4fd1..6c37c5b794 100644 --- a/packages/shell/bash-local/src/index.ts +++ b/packages/shell/bash-local/src/index.ts @@ -1,5 +1,5 @@ /** - * Local Service provider for the bash capability seam over the subprocess + * Local Service Provider for the bash capability seam over the subprocess * capability seam. Public commands run as `bash -c` in a managed process group spawned * through `ctx.subprocess`; subclasses may reuse the same mechanics with an * explicit argv. This executor owns command defaulting, deadlines and cause diff --git a/packages/shell/bash-sandbox/README.i18n.yaml b/packages/shell/bash-sandbox/README.i18n.yaml index 25552735a5..6792ffa955 100644 --- a/packages/shell/bash-sandbox/README.i18n.yaml +++ b/packages/shell/bash-sandbox/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/bash-sandbox/README.md -README.md: bd2e342b5dbb070360e5244fd7a93a1dacac2980 -README.zh.md: 9827ec57f1fed846031efda0123e4d40ea9d308b +README.md: fe9a0b1a891bd2b9102357f48141822c70465ddf +README.zh.md: 648264615dc476f9442b9bb9ae3a332196f4e104 diff --git a/packages/shell/bash-sandbox/README.md b/packages/shell/bash-sandbox/README.md index bd2e342b5d..fe9a0b1a89 100644 --- a/packages/shell/bash-sandbox/README.md +++ b/packages/shell/bash-sandbox/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Sandbox-consuming Service provider for the [`@deepseek-ai/dsh-shell`](../shell/) executor seam. Load it **instead of** `@deepseek-ai/dsh-bash-local`, together with a [`ctx.sandbox`](../../sandbox/sandbox/) provider (e.g. [`@deepseek-ai/dsh-sandbox-local`](../../sandbox/sandbox-local/)) and a [`ctx.sandboxPolicy`](../../sandbox/sandbox-policy/) (which owns the default mode + workspace root, shared with the sandboxed filesystem) — no alternate tool plugin is needed; `dsh-tool-bash` detects the executor's `sandboxMode` capability and adds the escalation fields. +Sandbox-consuming Service Provider for the [`@deepseek-ai/dsh-shell`](../shell/) executor seam. Load it **instead of** `@deepseek-ai/dsh-bash-local`, together with a [`ctx.sandbox`](../../sandbox/sandbox/) provider (e.g. [`@deepseek-ai/dsh-sandbox-local`](../../sandbox/sandbox-local/)) and a [`ctx.sandboxPolicy`](../../sandbox/sandbox-policy/) (which owns the default mode + workspace root, shared with the sandboxed filesystem) — no alternate tool plugin is needed; `dsh-tool-bash` detects the executor's `sandboxMode` capability and adds the escalation fields. The package root exports the default and named `SandboxBashExecutor` plugin plus its `Config`; result-classification helpers stay internal. diff --git a/packages/shell/bash-sandbox/README.zh.md b/packages/shell/bash-sandbox/README.zh.md index 9827ec57f1..648264615d 100644 --- a/packages/shell/bash-sandbox/README.zh.md +++ b/packages/shell/bash-sandbox/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -这是使用沙箱能力的 [`@deepseek-ai/dsh-shell`](../shell/) 执行器 seam 的 Service provider。加载它时，应**用它替代** `@deepseek-ai/dsh-bash-local`，并同时加载 [`ctx.sandbox`](../../sandbox/sandbox/) 提供方（例如 [`@deepseek-ai/dsh-sandbox-local`](../../sandbox/sandbox-local/)）及 [`ctx.sandboxPolicy`](../../sandbox/sandbox-policy/)；默认模式和工作区根目录由后者负责，并与受沙箱约束的文件系统共享这些设置。无需使用替代工具插件；`dsh-tool-bash` 会检测执行器的 `sandboxMode` 能力并添加升权字段。 +这是使用沙箱能力的 [`@deepseek-ai/dsh-shell`](../shell/) 执行器 seam 的 Service Provider。加载它时，应**用它替代** `@deepseek-ai/dsh-bash-local`，并同时加载 [`ctx.sandbox`](../../sandbox/sandbox/) 提供方（例如 [`@deepseek-ai/dsh-sandbox-local`](../../sandbox/sandbox-local/)）及 [`ctx.sandboxPolicy`](../../sandbox/sandbox-policy/)；默认模式和工作区根目录由后者负责，并与受沙箱约束的文件系统共享这些设置。无需使用替代工具插件；`dsh-tool-bash` 会检测执行器的 `sandboxMode` 能力并添加升权字段。 包根目录导出默认与具名的 `SandboxBashExecutor` 插件及其 `Config`；结果分类 helper 保留在内部。 diff --git a/packages/shell/pwsh-local/README.i18n.yaml b/packages/shell/pwsh-local/README.i18n.yaml index 2481c2627d..84e7bfa43e 100644 --- a/packages/shell/pwsh-local/README.i18n.yaml +++ b/packages/shell/pwsh-local/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/pwsh-local/README.md -README.md: 90b3732fde385ff07ba3b6685260172ad26c7e24 -README.zh.md: 96b19dfe7f852cbbbfc8f49f849d11f898f09097 +README.md: cfb58b569022bca11d18c196e0bce104247e4c81 +README.zh.md: 9393c5d210743d8423457f2d7df5900c1e0df182 diff --git a/packages/shell/pwsh-local/README.md b/packages/shell/pwsh-local/README.md index 90b3732fde..cfb58b5690 100644 --- a/packages/shell/pwsh-local/README.md +++ b/packages/shell/pwsh-local/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Local PowerShell Service provider for the `@deepseek-ai/dsh-shell` executor seam over the [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) service: `PwshLocalExecutor` spawns `pwsh -NoLogo -NoProfile -NonInteractive -Command ` per call as a managed process through `ctx.subprocess`, and owns everything PowerShell-shaped — executable resolution, command defaulting and caps, timeout/cancel classification, the model-friendly terminal environment, and the model-facing stdout/stderr merge for background reads. Group mechanics (bounded spill-backed output, credential scrub, kill escalation, disposal) are the subprocess service's. +Local PowerShell Service Provider for the `@deepseek-ai/dsh-shell` executor seam over the [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) service: `PwshLocalExecutor` spawns `pwsh -NoLogo -NoProfile -NonInteractive -Command ` per call as a managed process through `ctx.subprocess`, and owns everything PowerShell-shaped — executable resolution, command defaulting and caps, timeout/cancel classification, the model-friendly terminal environment, and the model-facing stdout/stderr merge for background reads. Group mechanics (bounded spill-backed output, credential scrub, kill escalation, disposal) are the subprocess service's. The command string rides as ONE argv element to `-Command`: PowerShell itself parses the text, and no intermediate shell exists, so there is no shell-quoting layer to escape (the `bash -c` string domain has no equivalent here). Native Win32 paths (`C:\...`) pass through unchanged. diff --git a/packages/shell/pwsh-local/README.zh.md b/packages/shell/pwsh-local/README.zh.md index 96b19dfe7f..9393c5d210 100644 --- a/packages/shell/pwsh-local/README.zh.md +++ b/packages/shell/pwsh-local/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -`@deepseek-ai/dsh-shell` 执行器 seam 的本地 PowerShell Service provider，基于 [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) 服务：`PwshLocalExecutor` 每次调用以受管进程的方式通过 `ctx.subprocess` spawn `pwsh -NoLogo -NoProfile -NonInteractive -Command `，并负责所有 PowerShell 相关事项——可执行文件解析、命令默认化与上限、超时/取消分类、面向模型的终端环境，以及后台读取的 stdout/stderr 合并。进程组机制（有界 spill 输出、凭据清理、终止升级、dispose（资源释放））属于 subprocess 服务。 +`@deepseek-ai/dsh-shell` 执行器 seam 的本地 PowerShell Service Provider，基于 [`@deepseek-ai/dsh-subprocess`](../../subprocess/subprocess/README.md) 服务：`PwshLocalExecutor` 每次调用以受管进程的方式通过 `ctx.subprocess` spawn `pwsh -NoLogo -NoProfile -NonInteractive -Command `，并负责所有 PowerShell 相关事项——可执行文件解析、命令默认化与上限、超时/取消分类、面向模型的终端环境，以及后台读取的 stdout/stderr 合并。进程组机制（有界 spill 输出、凭据清理、终止升级、dispose（资源释放））属于 subprocess 服务。 命令字符串作为单个 argv 元素传给 `-Command`：由 PowerShell 自己解析文本，不存在中间 shell，因此没有需要转义的 shell 引号层（这里不存在与 `bash -c` 字符串域对应的层）。原生 Win32 路径（`C:\...`）原样通过。 diff --git a/packages/shell/pwsh-local/src/index.ts b/packages/shell/pwsh-local/src/index.ts index aca9d75265..b7a2d9f915 100644 --- a/packages/shell/pwsh-local/src/index.ts +++ b/packages/shell/pwsh-local/src/index.ts @@ -1,5 +1,5 @@ /** - * Local PowerShell Service provider for the bash capability seam. Each command runs + * Local PowerShell Service Provider for the bash capability seam. Each command runs * as `pwsh -NoLogo -NoProfile -NonInteractive -Command ` in a managed * process spawned through `ctx.subprocess`; the executor owns command * defaulting, deadlines and cause classification, the model-friendly terminal diff --git a/packages/shell/shell/README.i18n.yaml b/packages/shell/shell/README.i18n.yaml index fed2182d7a..a4e67f3760 100644 --- a/packages/shell/shell/README.i18n.yaml +++ b/packages/shell/shell/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/shell/README.md -README.md: 7913b616198474e92d4df17b7c06889d96afce6e -README.zh.md: 0e01cd42230d4c5917d2a217f8fc4c77842840b1 +README.md: a15980ead797a73c18dd6d8825a4b38cf845df60 +README.zh.md: 87a7dffdfb28fcf8a58e6254bf450e513dd458f4 diff --git a/packages/shell/shell/README.md b/packages/shell/shell/README.md index 7913b61619..a15980ead7 100644 --- a/packages/shell/shell/README.md +++ b/packages/shell/shell/README.md @@ -9,8 +9,8 @@ This package owns the Service Definition role of the bash capability, split so e | Package | Role | |---|---| | `@deepseek-ai/dsh-shell` (this) | Service Definition: abstract service + vocabulary types | -| `@deepseek-ai/dsh-bash-local` | Service provider: local subprocesses | -| `@deepseek-ai/dsh-bash-sandbox` | Service provider: `dsh-bash-local`'s mechanics with every spawn confined via [`ctx.sandbox`](../../sandbox/sandbox/), denials reported as result facts | +| `@deepseek-ai/dsh-bash-local` | Service Provider: local subprocesses | +| `@deepseek-ai/dsh-bash-sandbox` | Service Provider: `dsh-bash-local`'s mechanics with every spawn confined via [`ctx.sandbox`](../../sandbox/sandbox/), denials reported as result facts | | `@deepseek-ai/dsh-tool-bash` | the model-facing tool schemas over `ctx.shell` | The split is a standard capability seam ([capability-seams Agent Note](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)): `dsh-bash-sandbox` is a sandboxing executor behind the same Service Definition — the Consumer detects its `sandboxMode` capability and adds escalation fields without importing the provider — and a containerized or remote executor slots in the same way. diff --git a/packages/shell/shell/README.zh.md b/packages/shell/shell/README.zh.md index 0e01cd4223..87a7dffdfb 100644 --- a/packages/shell/shell/README.zh.md +++ b/packages/shell/shell/README.zh.md @@ -9,8 +9,8 @@ | 包 | 职责 | |---|---| | `@deepseek-ai/dsh-shell`（本包） | Service Definition：抽象服务 + 词汇类型 | -| `@deepseek-ai/dsh-bash-local` | Service provider：本地子进程 | -| `@deepseek-ai/dsh-bash-sandbox` | Service provider：沿用 `dsh-bash-local` 的机制，但通过 [`ctx.sandbox`](../../sandbox/sandbox/) 限制每次 spawn，并将拒绝报告为结果事实 | +| `@deepseek-ai/dsh-bash-local` | Service Provider：本地子进程 | +| `@deepseek-ai/dsh-bash-sandbox` | Service Provider：沿用 `dsh-bash-local` 的机制，但通过 [`ctx.sandbox`](../../sandbox/sandbox/) 限制每次 spawn，并将拒绝报告为结果事实 | | `@deepseek-ai/dsh-tool-bash` | 基于 `ctx.shell`、面向模型的工具 schema | 该拆分是一个标准的能力 seam（[capability-seams Agent Note](../../../.agents/notes/implemented/architecture/2026-06-13-capability-seams.md)）：`dsh-bash-sandbox` 是位于同一 Service Definition 之后的沙箱执行器——Consumer 检测其 `sandboxMode` 能力并添加升权字段，无需导入提供方——容器化或远程执行器也可以同样接入。 diff --git a/packages/shell/tool-bash/README.i18n.yaml b/packages/shell/tool-bash/README.i18n.yaml index 13f8a87d50..ccdd7fe9cd 100644 --- a/packages/shell/tool-bash/README.i18n.yaml +++ b/packages/shell/tool-bash/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/tool-bash/README.md -README.md: 344cf599cb9f6391bcb51488ed407fff56b330fa -README.zh.md: d10c0faee56acca23f1a8dbe27ed8f37d97c7b3a +README.md: 21749bf0a1cd3cdc46257fb2a02ba6b4ab1f5ee6 +README.zh.md: e79190ced58abbd73d85127f3a4362f4e6b292cd diff --git a/packages/shell/tool-bash/README.md b/packages/shell/tool-bash/README.md index 344cf599cb..21749bf0a1 100644 --- a/packages/shell/tool-bash/README.md +++ b/packages/shell/tool-bash/README.md @@ -4,7 +4,7 @@ English | [中文](README.zh.md) The model-facing `bash` tool registered over the `ctx.shell` executor seam. Foreground execution stays behind that seam; a background process handle is registered with the generic `ctx.jobs` runtime and controlled through `job_output`, `job_list`, and `job_kill` from `@deepseek-ai/dsh-tool-jobs`. -Requires a loaded executor Service provider (e.g. `@deepseek-ai/dsh-bash-local`) and the [`@deepseek-ai/dsh-shell-env`](../shell-env/README.md) registry; the plugin stays pending until every injected service exists (`inject: ['tools', 'bash', 'systemPrompt', 'bashEnv']`). The tool contract is bash-dialect — mount a bash-parsing executor. +Requires a loaded executor Service Provider (e.g. `@deepseek-ai/dsh-bash-local`) and the [`@deepseek-ai/dsh-shell-env`](../shell-env/README.md) registry; the plugin stays pending until every injected service exists (`inject: ['tools', 'bash', 'systemPrompt', 'bashEnv']`). The tool contract is bash-dialect — mount a bash-parsing executor. The package root exposes only the Cordis plugin contract (`name`, `inject`, `Config`, `apply`); result rendering and background-process adaptation remain package-internal. diff --git a/packages/shell/tool-bash/README.zh.md b/packages/shell/tool-bash/README.zh.md index d10c0faee5..e79190ced5 100644 --- a/packages/shell/tool-bash/README.zh.md +++ b/packages/shell/tool-bash/README.zh.md @@ -4,7 +4,7 @@ 模型侧 `bash` 工具，注册在 `ctx.shell` 执行器 seam 上。前台执行始终位于该 seam 之后；后台进程句柄会注册到通用 `ctx.jobs` 运行时，并通过 `job_output`、`job_list` 和 `job_kill` 控制；这些工具由 `@deepseek-ai/dsh-tool-jobs` 提供。 -需要加载执行器 Service provider（例如 `@deepseek-ai/dsh-bash-local`）与 [`@deepseek-ai/dsh-shell-env`](../shell-env/README.md) 注册表；在每个注入服务就绪之前，插件会保持等待状态（`inject: ['tools', 'bash', 'systemPrompt', 'bashEnv']`）。工具约定是 bash 方言——请挂载能解析 bash 的执行器。 +需要加载执行器 Service Provider（例如 `@deepseek-ai/dsh-bash-local`）与 [`@deepseek-ai/dsh-shell-env`](../shell-env/README.md) 注册表；在每个注入服务就绪之前，插件会保持等待状态（`inject: ['tools', 'bash', 'systemPrompt', 'bashEnv']`）。工具约定是 bash 方言——请挂载能解析 bash 的执行器。 包根只公开 Cordis 插件约定（`name`、`inject`、`Config`、`apply`）；结果渲染和后台进程适配仍保留在包内部。 diff --git a/packages/spill/spill/README.i18n.yaml b/packages/spill/spill/README.i18n.yaml index d0025c1c56..0a84c591d5 100644 --- a/packages/spill/spill/README.i18n.yaml +++ b/packages/spill/spill/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/spill/spill/README.md -README.md: 28b646d5b0bb82d2539e78a5c623b60024e1d60a -README.zh.md: b4caafc6eb134b76c1fb4a6f7f27fd6d818e0733 +README.md: f36dccfa1e6f1f21e80c0b0aa97ee150a0f5fd45 +README.zh.md: 268e390923e30150a8d36b719b7dad75827f99fe diff --git a/packages/spill/spill/README.md b/packages/spill/spill/README.md index 28b646d5b0..f36dccfa1e 100644 --- a/packages/spill/spill/README.md +++ b/packages/spill/spill/README.md @@ -9,7 +9,7 @@ This package is one third of the spill capability, split so each concern evolves | Package | Role | |---|---| | `@deepseek-ai/dsh-spill` (this) | Service Definition: abstract service + vocabulary types | -| `@deepseek-ai/dsh-spill-local` | Service provider: private session-scoped files on the host filesystem | +| `@deepseek-ai/dsh-spill-local` | Service Provider: private session-scoped files on the host filesystem | | `@deepseek-ai/dsh-spill-policy` | Consumer: the tool-result policy that spills oversized final results | The split mirrors the shell/fs seams. A future remote or virtual backend (e.g. a `spill://…` URI, a database key, or a backend-specific retrieval tool) implements this Service Definition without touching the policy plugin. diff --git a/packages/spill/spill/README.zh.md b/packages/spill/spill/README.zh.md index b4caafc6eb..268e390923 100644 --- a/packages/spill/spill/README.zh.md +++ b/packages/spill/spill/README.zh.md @@ -9,7 +9,7 @@ | 包 | 职责 | |---|---| | `@deepseek-ai/dsh-spill`（本包） | Service Definition：抽象服务与词汇类型 | -| `@deepseek-ai/dsh-spill-local` | Service provider：位于宿主文件系统中的私有会话级文件 | +| `@deepseek-ai/dsh-spill-local` | Service Provider：位于宿主文件系统中的私有会话级文件 | | `@deepseek-ai/dsh-spill-policy` | Consumer：对过大最终结果执行 spill 的工具结果策略 | 这种拆分方式与 shell/fs seam 相同。未来的远程或虚拟后端（例如 `spill://…` URI、数据库键或后端专用取回工具）可实现此 Service Definition，无需修改策略插件。 diff --git a/packages/subagent/subagent/README.i18n.yaml b/packages/subagent/subagent/README.i18n.yaml index 77db9afc45..ace4708403 100644 --- a/packages/subagent/subagent/README.i18n.yaml +++ b/packages/subagent/subagent/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/subagent/subagent/README.md -README.md: 3a0142ed7e72d4f276dd475e1a8e1fa5e3aab9a6 -README.zh.md: 13ec9f61a28f425bbf8c80feed2e6211b2fe7f16 +README.md: ed4a9123a2dfa5b2fa5abc67f4513547feb3d140 +README.zh.md: e117ac7a6078d5b63759560eef35381b43b00dea diff --git a/packages/subagent/subagent/README.md b/packages/subagent/subagent/README.md index 3a0142ed7e..ed4a9123a2 100644 --- a/packages/subagent/subagent/README.md +++ b/packages/subagent/subagent/README.md @@ -52,7 +52,7 @@ The Service Definition owns the versioned `subagent/descriptor` session event vo ## Delegation depth -The seam owns the depth vocabulary shared by Service providers and Consumers: the `AgentOptions.subagentDepth` declaration, `assertSubagentMaxDepth`, and `delegationDepthOf(agent)`. The persisted `SessionHeader.delegationDepth` is authoritative and monotone — runtime options may deepen the count but never lower it, so a resumed child cannot be re-counted as top-level. +The seam owns the depth vocabulary shared by Service Providers and Consumers: the `AgentOptions.subagentDepth` declaration, `assertSubagentMaxDepth`, and `delegationDepthOf(agent)`. The persisted `SessionHeader.delegationDepth` is authoritative and monotone — runtime options may deepen the count but never lower it, so a resumed child cannot be re-counted as top-level. `inheritsParentContext` is descriptive rather than enforceable. It says only whether the child sees completed parent conversation history (`fork` does; `spawn` and the out-of-process one-shot providers do not), not whether it inherits tools, services, or authority. diff --git a/packages/subagent/subagent/README.zh.md b/packages/subagent/subagent/README.zh.md index 13ec9f61a2..e117ac7a60 100644 --- a/packages/subagent/subagent/README.zh.md +++ b/packages/subagent/subagent/README.zh.md @@ -52,7 +52,7 @@ subagent seam 允许一个 agent（智能体）通过具名提供方把工作委 ## 委派深度 -该 seam 拥有 Service provider 和 Consumer 共享的深度词汇：`AgentOptions.subagentDepth` 声明、`assertSubagentMaxDepth` 和 `delegationDepthOf(agent)`。持久化的 `SessionHeader.delegationDepth` 具有权威性且单调：运行时选项可以加深计数，但绝不能降低它，因此恢复后的子 agent 不会被重新计为顶层。 +该 seam 拥有 Service Provider 和 Consumer 共享的深度词汇：`AgentOptions.subagentDepth` 声明、`assertSubagentMaxDepth` 和 `delegationDepthOf(agent)`。持久化的 `SessionHeader.delegationDepth` 具有权威性且单调：运行时选项可以加深计数，但绝不能降低它，因此恢复后的子 agent 不会被重新计为顶层。 `inheritsParentContext` 只用于描述，不能强制执行。它仅说明子 agent 是否能看到父级已完成的对话历史（`fork` 可以；`spawn` 和各进程外一次性提供方不可以），不表示是否继承工具、服务或权限。 diff --git a/packages/subagent/subagent/src/index.ts b/packages/subagent/subagent/src/index.ts index b3cfe9c9d6..fe270f1b4c 100644 --- a/packages/subagent/subagent/src/index.ts +++ b/packages/subagent/subagent/src/index.ts @@ -9,7 +9,7 @@ * one by name. The shape mirrors the LLM adapter registry * (`LlmRuntime.registerAdapter`), not the single-service bash executor. * - * This package owns the Service Definition role of the capability seam. Service providers + * This package owns the Service Definition role of the capability seam. Service Providers * (`@deepseek-ai/dsh-subagent-spawn-in-process`, `-fork`, `-acp`) and the model-facing * consumer (`@deepseek-ai/dsh-tool-subagent`) are separate packages. * diff --git a/packages/subprocess/README.i18n.yaml b/packages/subprocess/README.i18n.yaml index c1b0e3723f..b294c97415 100644 --- a/packages/subprocess/README.i18n.yaml +++ b/packages/subprocess/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/subprocess/README.md -README.md: b92dfe0d275f4b59e42ea1e86ad4e6482d89aeb6 -README.zh.md: 8cef3023a4d699a4b2c1d1d6a747737acb4ff199 +README.md: 72a30775f45a8140935a013c63e9427e9cbd94d6 +README.zh.md: 35c801a1f4a5e8ad161b8c4ff57ad6ffa07e699d diff --git a/packages/subprocess/README.md b/packages/subprocess/README.md index b92dfe0d27..72a30775f4 100644 --- a/packages/subprocess/README.md +++ b/packages/subprocess/README.md @@ -7,7 +7,7 @@ The shared process substrate for one execution world: executable lookup, fully-s | Package | ctx key | Role | |---|---|---| | [`subprocess`](subprocess/README.md) (`@deepseek-ai/dsh-subprocess`) | `ctx.subprocess` | Service Definition: executable lookup, ordinary managed spawns, the terminal-process primitive, handle lifecycles, and shared environment/output vocabulary | -| [`subprocess-local`](subprocess-local/README.md) (`@deepseek-ai/dsh-subprocess-local`) | — | Local Service provider: detached process trees, bounded collection/spill, `node-pty`, foreground/session inspection, tree signalling, and terminate-and-join disposal | +| [`subprocess-local`](subprocess-local/README.md) (`@deepseek-ai/dsh-subprocess-local`) | — | Local Service Provider: detached process trees, bounded collection/spill, `node-pty`, foreground/session inspection, tree signalling, and terminate-and-join disposal | The service owns process lifetime across consumer reloads; consumers own what a process means (a bash command, a future non-shell runner) and every default that shapes one. diff --git a/packages/subprocess/README.zh.md b/packages/subprocess/README.zh.md index 8cef3023a4..35c801a1f4 100644 --- a/packages/subprocess/README.zh.md +++ b/packages/subprocess/README.zh.md @@ -7,7 +7,7 @@ | 包 | ctx 键 | 角色 | |---|---|---| | [`subprocess`](subprocess/README.md)（`@deepseek-ai/dsh-subprocess`） | `ctx.subprocess` | Service Definition：可执行文件查找、普通受管 spawn、终端进程原语、句柄生命周期，以及共享的环境／输出词汇 | -| [`subprocess-local`](subprocess-local/README.md)（`@deepseek-ai/dsh-subprocess-local`） | 无 | 本地 Service provider：detached 进程树、有界收集／spill、`node-pty`、前台／会话检查、进程树信号发送，以及先终止再等待退出的 dispose（资源释放） | +| [`subprocess-local`](subprocess-local/README.md)（`@deepseek-ai/dsh-subprocess-local`） | 无 | 本地 Service Provider：detached 进程树、有界收集／spill、`node-pty`、前台／会话检查、进程树信号发送，以及先终止再等待退出的 dispose（资源释放） | 即使消费方重载，进程生命周期仍由服务负责管理；消费方负责定义进程的含义（一条 bash 命令、未来的非 shell 运行器），以及决定塑造该进程的每一项默认值。 diff --git a/packages/subprocess/subprocess-local/README.i18n.yaml b/packages/subprocess/subprocess-local/README.i18n.yaml index 874f478937..10c7c1cd62 100644 --- a/packages/subprocess/subprocess-local/README.i18n.yaml +++ b/packages/subprocess/subprocess-local/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/subprocess/subprocess-local/README.md -README.md: 645f05a0daf92d64c438f8aaae3b0e115f253a64 -README.zh.md: cd8c04071f00b298b2d242624c2ad1327758e16e +README.md: a88eab6776c7259bb8ee8fdad2d6002d8f57e133 +README.zh.md: ce088557875daceb5643f13bef78d6ea9a61e12f diff --git a/packages/subprocess/subprocess-local/README.md b/packages/subprocess/subprocess-local/README.md index 645f05a0da..a88eab6776 100644 --- a/packages/subprocess/subprocess-local/README.md +++ b/packages/subprocess/subprocess-local/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Local Service provider for the [`@deepseek-ai/dsh-subprocess`](../subprocess/README.md) seam. `LocalSubprocessRuntime` resolves local executables, spawns ordinary detached process trees with explicit stdio, and implements terminal processes through `node-pty` plus platform process inspection. It has no config: every disposition, limit, terminal dimension, grace, and directory arrives from the calling capability seams ([`dsh-bash-local`](../../shell/bash-local/README.md), [`dsh-lsp-stdio`](../../lsp/lsp-stdio/README.md), and [`dsh-terminal-bash`](../../terminal/terminal-bash/README.md)). +Local Service Provider for the [`@deepseek-ai/dsh-subprocess`](../subprocess/README.md) seam. `LocalSubprocessRuntime` resolves local executables, spawns ordinary detached process trees with explicit stdio, and implements terminal processes through `node-pty` plus platform process inspection. It has no config: every disposition, limit, terminal dimension, grace, and directory arrives from the calling capability seams ([`dsh-bash-local`](../../shell/bash-local/README.md), [`dsh-lsp-stdio`](../../lsp/lsp-stdio/README.md), and [`dsh-terminal-bash`](../../terminal/terminal-bash/README.md)). ## Behavior diff --git a/packages/subprocess/subprocess-local/README.zh.md b/packages/subprocess/subprocess-local/README.zh.md index cd8c04071f..ce08855787 100644 --- a/packages/subprocess/subprocess-local/README.zh.md +++ b/packages/subprocess/subprocess-local/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -[`@deepseek-ai/dsh-subprocess`](../subprocess/README.md) seam 的本地 Service provider。`LocalSubprocessRuntime` 解析本地可执行文件，以显式 stdio spawn 普通 detached 进程树，并通过 `node-pty` 加平台进程检查实现终端进程。该实现没有任何配置：每项处置方式、限制、终端尺寸、宽限期与目录都来自调用方能力 seam（[`dsh-bash-local`](../../shell/bash-local/README.md)、[`dsh-lsp-stdio`](../../lsp/lsp-stdio/README.md) 和 [`dsh-terminal-bash`](../../terminal/terminal-bash/README.md)）。 +[`@deepseek-ai/dsh-subprocess`](../subprocess/README.md) seam 的本地 Service Provider。`LocalSubprocessRuntime` 解析本地可执行文件，以显式 stdio spawn 普通 detached 进程树，并通过 `node-pty` 加平台进程检查实现终端进程。该实现没有任何配置：每项处置方式、限制、终端尺寸、宽限期与目录都来自调用方能力 seam（[`dsh-bash-local`](../../shell/bash-local/README.md)、[`dsh-lsp-stdio`](../../lsp/lsp-stdio/README.md) 和 [`dsh-terminal-bash`](../../terminal/terminal-bash/README.md)）。 ## 行为 diff --git a/packages/subprocess/subprocess-local/src/index.ts b/packages/subprocess/subprocess-local/src/index.ts index 0f3e0d2d13..261f614fba 100644 --- a/packages/subprocess/subprocess-local/src/index.ts +++ b/packages/subprocess/subprocess-local/src/index.ts @@ -1,5 +1,5 @@ /** - * Local Service provider for the subprocess capability seam. Each spawn is a detached + * Local Service Provider for the subprocess capability seam. Each spawn is a detached * process tree with the spec's per-stream stdio dispositions. Normal disposal * terminates and joins live trees; Node's synchronous exit phase force-stops * any trees the service still owns. It has no config: every disposition and diff --git a/packages/subprocess/subprocess/src/invariant.ts b/packages/subprocess/subprocess/src/invariant.ts index c9e6ee904e..0346915f27 100644 --- a/packages/subprocess/subprocess/src/invariant.ts +++ b/packages/subprocess/subprocess/src/invariant.ts @@ -10,7 +10,7 @@ export const name = 'subprocess-invariant' /** Service required before the companion can reserve package ownership. */ export const inject = ['invariants'] -/** No runtime invariant: this stateless Service Definition owns spawn-spec/handle types, while Service providers own observations. */ +/** No runtime invariant: this stateless Service Definition owns spawn-spec/handle types, while Service Providers own observations. */ const install: InvariantInstaller = () => {} /** diff --git a/packages/workflow/workflow/src/index.ts b/packages/workflow/workflow/src/index.ts index 9baba278f9..e345ab55d4 100644 --- a/packages/workflow/workflow/src/index.ts +++ b/packages/workflow/workflow/src/index.ts @@ -1,5 +1,5 @@ /** - * Service Definition for the workflow capability seam. Service providers execute orchestration scripts; + * Service Definition for the workflow capability seam. Service Providers execute orchestration scripts; * observe-only lifecycle events never expose run control. * @module @deepseek-ai/dsh-workflow */ diff --git a/scripts/snapshots/translation-prompt-v4/request-response.expected.json b/scripts/snapshots/translation-prompt-v4/request-response.expected.json index 586d082204..627097be23 100644 --- a/scripts/snapshots/translation-prompt-v4/request-response.expected.json +++ b/scripts/snapshots/translation-prompt-v4/request-response.expected.json @@ -4,7 +4,7 @@ "messages": [ { "role": "system", - "content": "# Translation Prompt\n\nYou are a senior technical translator specializing in LLM and agent development documentation. Your task is to translate the complete source document from English to Chinese, producing natural, professional technical prose.\n\nRead each complete semantic unit, understand it, and restate it as a native technical author would write it in the target language. Do not mechanically preserve source-language syntax. Then verify the translation against the source clause by clause: preserve every proposition and add none. Fluency never justifies losing or altering meaning, and completeness never justifies unnatural word-for-word prose.\n\n## Priority\n\nApply these authorities in order:\n\n1. Preserve the source meaning and the required document structure, protected content, and formatting.\n2. Follow the injected terminology table exactly.\n3. Use the injected whole-document gold pairs to calibrate target-language voice and phrasing.\n4. Apply the general writing guidance and illustrative examples in this prompt.\n\nA lower-priority rule may refine but never override a higher-priority requirement. Gold pairs calibrate voice; they are not a translation memory. No style preference, gold-pair phrasing, or embedded example may override source meaning, required structure, protected content, or the terminology table.\n\n## Quality Requirements\n\n### Structure and Format Preservation\n- Output a complete translated document that maintains the same document frame as the source: heading hierarchy and order, list kinds and item counts, ordered-list starts, table rows and columns, link targets, and code blocks.\n- Paragraph boundaries may change within the same structural unit when the target language needs different semantic grouping. Do not merge or move content across headings, list items, table cells, or other independent structural units.\n- Keep each prose paragraph on one physical line. Use paragraph breaks, not hard-wrapped lines inside a paragraph.\n- Fenced code blocks must be byte-identical to the source, including info strings, whitespace, and ALL comments inside them. Do NOT translate or reformat any content inside code blocks. This is a hard rule with no exceptions.\n- Inline code spans must be kept verbatim. This includes commands, flags, paths, identifiers, API and event names, config keys, protocol values, version numbers, and other machine-readable tokens. Never translate or reformat them.\n- Every relative link must point to the same target as in the source. Translate link text; do not change link targets.\n- Language switcher line: when an English source contains `English | [中文](source-filename.zh.md)`, write `[English](source-filename.md) | 中文`. When a Chinese source contains `[English](source-filename.md) | 中文`, write `English | [中文](source-filename.zh.md)`. Do NOT copy the source switcher unchanged. If the source has no switcher, do not invent a filename or switcher; the pipeline inserts the canonical target switcher after parsing ``.\n- Preserve emphasis marker types and the semantic spans they cover. Do not add, remove, move, or change bold and italic markers.\n\n### Faithfulness\n- Preserve every proposition in the source and add none. Every sentence, list item, note, FIXME, warning, example, caveat, prerequisite, and guarantee must have an equivalent in the translation. Count list items on both sides.\n- Preserve actors, objects, conditions, exceptions, negation, modality, causal relationships, and distinctions between concepts.\n- Preserve the exact strength and orientation of contracts. Completion and lifecycle conditions, failure behavior, directions and data flow, normal and exceptional result channels, ownership changes, and quantitative bounds must not be weakened, strengthened, reversed, or merged.\n- Translate ideas rather than source-language idioms, but never use fluency as a reason to omit or alter meaning.\n\n### Tone and Style\n- The translation must read as if originally written in the target language by a native technical author. If an expression sounds like a word-for-word rendering from the source language, rephrase it.\n- Write in a professional, formal tone appropriate for developer documentation. Never use colloquial or casual expressions.\n- Name an actor when the target language would otherwise obscure an actor that the source states or unambiguously implies. Never invent responsibility merely to avoid a passive construction.\n- Prefer established target-language engineering terms over literal renderings. Replace metaphors with direct descriptions that preserve the source meaning.\n- Use polite imperative forms where the text instructs the reader to do something. In Chinese, address the reader as `你`, not `您`.\n- Keep the author's register: concise stays concise, detailed stays detailed.\n\n### Sentence Structure\n- Break long sentences where the target language needs a pause. Avoid run-on sentences.\n- Use active voice when it improves clarity without changing or inventing the actor. Retain passive voice when the actor is unknown, irrelevant, or intentionally omitted.\n- Restructure source-language syntax into clear target-language syntax. Preserve the logical scope of conditions, concessions, negation, coordination, and modifiers.\n- Split or combine clauses when needed for readability, provided every source relationship remains explicit.\n- Translate meaning, not words. Do not invent words or expressions that a native technical author would not use.\n\n### Word Choice\n- Prefer precise, formal vocabulary over casual or colloquial alternatives.\n- When multiple synonyms exist, choose the one most commonly used in professional technical documentation of the target language.\n- Translate ordinary prose when an established target-language expression is clear. Preserve proper nouns, canonical product names, code identifiers, APIs, paths, package names, and terms that the terminology table requires to remain in the source language.\n- Use context to resolve polysemous words. A familiar word does not have one fixed rendering in every technical domain.\n- Avoid slang, internal jargon, or overly literal translations that would not be recognized by the general developer audience.\n- Do not use the same word to translate distinct source-language concepts when their distinction matters.\n- Avoid repeating the same ordinary verb in close proximity when a natural equivalent preserves the exact meaning. Never vary a terminology-table form, defined concept, or contract verb merely for stylistic variety.\n\n#### When translating into Chinese\n- When a number modifies a noun, include a natural Chinese classifier or measure word when Chinese grammar requires one. For example: \"three-role capability seam\" → \"包含三种角色的能力 seam\", not \"三角色 seam\". Do not add classifiers to code, identifiers, versions, units, or fixed names.\n\n### Punctuation\n\n#### When translating into Chinese\n- Use full-width Chinese punctuation in Chinese prose: `，。：；？！（）「」`. Keep half-width punctuation inside code spans, numbers, and complete verbatim English text.\n- Prefer colons, periods, commas, or parentheses over em dashes when they make the sentence clearer or more natural. Keep an em dash when it is the clearest natural punctuation.\n- Use enumeration commas (、) between parallel Chinese items, not regular commas.\n- Keep list-item endings consistent with their grammar. Complete sentences may end with periods or other grammatically required punctuation; do not end list items with commas.\n- Put one half-width space between Chinese text and Latin words or numerals. Do not add a space next to full-width punctuation, and do not leave a meaningless half-width space between two Chinese characters.\n- Markdown emphasis markers do not create a word boundary. Determine spacing from the rendered adjacent characters: Chinese next to Chinese takes no space, while Chinese next to a Latin word or numeral takes one half-width space.\n- Use half-width digits and Latin letters, never full-width forms.\n- For RFC 2119 keywords (MUST, MUST NOT, SHOULD, MAY), translate to the corresponding Chinese term (必须、禁止、应当、可以), preserve the SOURCE emphasis span exactly, and do not weaken its normative strength: plain source stays plain (必须), italic source stays italic (*必须*), and bold source stays bold (**必须**).\n\n#### When translating into English\n- Use half-width English punctuation and standard English spacing. Preserve full-width punctuation only in verbatim Chinese text.\n- Convert enumeration commas (、) to English commas and Chinese prose quotation marks to English double quotes.\n- Convert Chinese topic-comment sentences and omitted-subject constructions into clear English subjects when the actor is stated or unambiguously implied. Do not invent an actor.\n- Use concise professional developer prose and established English technical terms. Do not transliterate Chinese engineering idioms literally.\n- Use the terminology table's English column exactly and do not carry Chinese first-occurrence glosses into English prose.\n\n## Terminology\n\nA terminology table is provided below. Follow it strictly:\n- Render every listed term exactly as specified.\n- When the target language is Chinese, use the \"中文\" column. On the document's first prose occurrence, write the \"首次出现\" value when one is specified; on later occurrences, write only the part before the parenthetical gloss.\n- When the target language is English, use the \"English\" column without a Chinese gloss; do not copy the \"中文\" or \"首次出现\" value into English prose.\n- If a term has already been glossed as part of a compound term, do not gloss it again when it appears alone later.\n- NEVER use translations listed in the \"不要译作\" column.\n- Code spans and other protected tokens remain verbatim even when their text resembles a listed term.\n- For an unlisted technical term, use an established target-language technical term when its meaning is unambiguous in context. For a Chinese target, use an established Chinese rendering from a major Chinese-language OSS or vendor source; if you cannot reliably determine such a rendering, preserve the source term and record `[Terminology: pending]` in `` with a tentative rendering for human review. For an English target, use the established English technical term; if the source term has no unambiguous established equivalent, preserve it with the shortest English gloss needed to make it intelligible and record `[Terminology: pending]` in ``. A tentative rendering may appear in `` but must not be silently adopted in `` or ``, and you must not invent or claim a specific external precedent. This rule applies to terminology only; for general prose, freely restructure and paraphrase for natural expression.\n\n# Terminology\n\n本表约定本仓库的中英术语统一译法。\n\n**通用规则：**\n- \"中文\"列为中文译文的正文默认用词。若该列为英文，则中文译文的正文中保留英文不翻译。\n- 首次出现按\"首次出现\"列书写（带括号注释）；后续出现只写括号前的部分（可能为中文，也可能为英文），不出现括号内的注释。\n- \"不要译作\"列为严格禁止的译法。\n- 如果某术语已经作为另一个术语的组成部分被括注过（如 `agent loop（智能体循环）` 中已包含 `agent` 的括注），则该术语后续单独出现时无需再次括注。\n\n## 缩写类（中英文文本中均使用缩写）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| ACP | ACP | ACP（Agent Client Protocol） | | |\n| AI | AI | AI（人工智能） | | |\n| API | API | | | |\n| CI | CI | | | |\n| CLI | CLI | CLI（命令行界面） | | |\n| e2e | e2e | | | |\n| HMR | HMR | HMR（热模块替换） | | |\n| JSON Schema | JSON Schema | | | |\n| JSONL | JSONL | | | |\n| LLM | LLM | LLM（大语言模型） | | |\n| MCP | MCP | | | |\n| PR | PR | PR（Pull Request） | | |\n| RAG | RAG | RAG（检索增强生成） | | |\n| SDK | SDK | | | 只指受支持的 Python 与 TypeScript SDK 所使用的 JSON-RPC 客户端／服务器协议；DeepSeek Harness 项目本身不是 SDK |\n| SSE | SSE | SSE（Server-Sent Events） | | |\n\n## 英文类（中英文文本中均使用英文）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| agent | agent | agent（智能体） | | |\n| Agent Note | Agent Note | | 智能体注记、智能体笔记 | 仓库定义的文档类型，涵盖提案、已实现决策和被否决提案；中文对侧 H1 保持固定前缀 `# Agent Note: `，标题中不加术语括注 |\n| agent harness | agent harness | agent harness（智能体框架） | | agent 组合词（agent harness/workflow/loop/skill 等）整体保留英文；未括注过 agent 时首现按对应组合词或 agent 行处理 |\n| agent loop | agent loop | agent loop（智能体循环） | | |\n| blob hash | blob hash | | | `git hash-object` 的结果 |\n| coding agent | coding agent | coding agent（编程智能体） | | agent 组合词，正文保留英文 |\n| Cordis | Cordis | | | |\n| dispose | dispose | dispose（资源释放） | | |\n| doc-sync | doc-sync | doc-sync（文档同步门禁） | | |\n| fiber | fiber | | | |\n| fixture | fixture | fixture（测试前置数据） | | |\n| fork | fork | | | |\n| Function Calling | Function Calling | Function Calling（函数调用） | | |\n| harness | harness | | | |\n| harness engineering | harness engineering | | | |\n| KV Cache | KV Cache | | | 专有技术名称，保持大小写与空格 |\n| lint | lint | | | |\n| mock | mock | | | 保留英文；指测试替身 |\n| loader | loader | | | |\n| manifest | manifest | manifest（元数据清单） | | |\n| monorepo | monorepo | | | |\n| Round | Round | | 回合、目标回合、Ralph 回合 | 外层策略使用 Round 时，领域层级为 Session > Round > Turn（轮次） > Step（步骤）；Round 是可选的外层策略迭代，并非每个会话轮次都具有的通用层级。Goal Round 与 Ralph Round 均保留英文。一个 Round 承载一个轮次，步骤隶属于该轮次；明确的零步骤轮次仍保持原义。 |\n| schema | schema | | | |\n| schema DSL | schema DSL | | | |\n| seam | seam | | 接缝 | 一个可替换能力的整体，包含 Service Definition / Service provider / Consumer 三种角色；角色需要独立演化时才拆包，也可由同一包承担多个角色。以 `packages/shell` 为范例；Service Definition 是 Cordis `Service`（抽象类或具体 registry 服务），不是 TypeScript interface。任何单一角色、普通边界或扩展点都不能称为 seam。本仓库正文保留英文；与 `extension point` 是不同概念 |\n| skill | skill | skill（技能） | | |\n| slot | slot | | 坑位、孔位 | 客户端架构中的具名可注册位置，保留英文 |\n| spill | spill | | | 工具输出超限落盘机制；组合词写 `spill 文件`、`spill 路径` |\n| spawn | spawn | | | |\n| steering | steering | steering（中途引导） | | |\n| job id | job id | | 任务 id | 保留英文 |\n| subagent | subagent | | | |\n| transcript | transcript | transcript（文本记录） | | 指会话渲染给用户或编辑器的完整文本，区别于事件日志 |\n| Typert | Typert | | TypeRT、typeRT、Type RT | DeepSeek Harness 类型图、生成器、loader 与运行时 registry 的产品拼写 |\n| waterfall | waterfall | waterfall（瀑布式事件） | | |\n| wheel | wheel 包 | | | Python 打包格式 |\n| worktree | worktree | | | git 工作区概念 |\n| Zstandard | Zstandard | | | RFC 8878 compression format; `zstd` remains a code value. |\n\n## 双语类（中英文文本各自使用中英文）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| adapter | 适配器 | | | |\n| adapter contract | 适配器约定 | 适配器约定（adapter contract） | | |\n| append-only | 仅追加 | | | |\n| artifact | 产物 | | 制品 | |\n| backend | 后端 | | | |\n| binder | 绑定器 | | | 命名角色：把已声明接口绑定到调用方 context 或生命周期 |\n| config | 配置 | | | 命名角色：一个已解析配置值或边界严格的配置记录 |\n| controller | 控制器 | | | 命名角色：接受意图并改变一项既有领域或展示状态 |\n| directory | 目录 | | | 命名角色：暴露供发现或选择的条目及元数据 |\n| engine | 引擎 | | | 命名角色：实现领域算法或有状态执行模型 |\n| gateway | 网关 | | | 命名角色：适配进程、网络、RPC 或 API 边界 |\n| handle | 句柄 | | | 命名角色：引用并控制或观察一个实时资源 |\n| policy | 策略 | | | 命名角色：决定允许、选择、限制或观察什么 |\n| presenter | 展示转换器 | | | 命名角色：把领域值纯转换为渲染意图 |\n| resolver | 解析器 | | | 命名角色：根据输入计算或定位一个答案 |\n| store | 存储 | | | 命名角色：拥有一组数据并主要提供数据操作 |\n| background job | 后台任务 | | | |\n| block | 块 | | | |\n| build target | 构建目标 | | | |\n| cancel | 取消 | | | |\n| canary test | canary 测试 | | 金丝雀测试 | 本仓库保留 `canary` |\n| capability | 能力 | | | 必须与 `feature` → `功能` 区分 |\n| capability seam | 能力 seam | | 功能 seam、能力接缝 | 本仓库 Service Definition、Service provider 与 Consumer 三种角色组成完整可替换能力的命名架构概念；普通 `seam` 仍按其词条处理 |\n| feature | 功能 | | 能力 | SDK 产品与工程模型中的可管理产品单元 |\n| feature option | 功能选项 | | variant | 一项 SDK 功能内有限、可选择的实现或配置 |\n| checkpoint | 检查点 | | | |\n| chunk | 分片 | | | |\n| compaction | 压缩 | 压缩（compaction） | | |\n| companion tool | 配套工具 | | | |\n| composition bundle | 组合包 | | | 只约束应用或插件的组合语境，不约束所有 `bundle` |\n| Cordis plugin config | Cordis 插件配置 | | | Cordis 插件公开的 `Config` 对象或配置结构 |\n| config key | 配置键 | | | Cordis 插件配置中的单个字段 |\n| consumer | 消费方 | | 消费者 | |\n| content block | 内容块 | | | |\n| Cookbook | 实操手册 | | | 文档标题用语 |\n| context | 上下文 | | | |\n| counterpart | 对侧文件 | | 对应物、配对物 | 双语配对语境；泛指\"另一侧\"时可写「另一侧」 |\n| configurable-provider directory | 可配置提供方目录 | | | llm seam 中 `registerConfigurableProviders()` 维护的目录；沿用 Service Catalog →「服务目录」先例 |\n| context compaction | 上下文压缩 | 上下文压缩（context compaction） | | |\n| contract | 约定 | | | 如：`pairing contract` →`配对约定` |\n| Cordis config entry | Cordis 配置项 | | | 指 `cordis.yml` 插件列表中的一项；插件实现本身写`Cordis 插件` |\n| Cordis plugin | Cordis 插件 | | | Cordis 加载的插件实现，不指 `cordis.yml` 中的一项配置 |\n| crash recovery | 崩溃恢复 | | | |\n| deploy root | 部署根目录 | | | |\n| dormant | 休眠 | | 睡眠、蛰伏 | 指已声明可配置但当前未注册路由的提供方 |\n| durability | 持久性 | | | |\n| feature requirement | 功能依赖 | | | 功能或功能选项通过 `requires` 声明的关系 |\n| event | 事件 | | | |\n| event log | 事件日志 | | | |\n| event stream | 事件流 | | | |\n| event-sourced | 事件溯源 | | | 沿用 DDD 社区通行译法 |\n| Executive summary | 摘要 | | | 事故复盘标题用语 |\n| executor | 执行器 | | | |\n| expected output | 预期输出 | | 金标 | 指 snapshot 比较产物；翻译语料的人工校准样例不在此列 |\n| extension | 扩展 | | | |\n| extension point | 扩展点 | | | 注意与 `seam` 区分 |\n| fail-fast | 快速失败 | | | |\n| fenced code block | 围栏代码块 | | | 沿用 MDN 中文翻译 |\n| fingerprint | 指纹 | | | 通用内容指纹；双语配对机制使用 sidecar record 记录两侧 blob hash |\n| finish reason | 结束原因 | | | |\n| fold | 折叠区 | | | 配置界面语境：默认收起的字段分区（collapsed →「收起」）|\n| foreground run | 前台运行 | | | |\n| freshness | 新鲜度 | | | 沿用 MDN 中文翻译；在本项目中指译文相对源文的同步状态 |\n| hook | 钩子 | | | |\n| implementation | 实现 | | | |\n| inference | 推理 | 推理（inference） | | 需要和 `reasoning` 区分时保留英文括注 |\n| info string | 信息字符串 | | | 沿用 CommonMark 中文翻译；指代码围栏 ``` 之后的语言标注 |\n| injection | 注入 | | | |\n| integration | 集成 | | | |\n| interface | 接口 | | | |\n| language switcher | 语言切换行 | | | i18n 配对机制用语：双语配对文件顶部的互链行 |\n| merge | 合并 | | | |\n| message | 消息 | | | |\n| mod | 模组 | | | |\n| model provider | 模型提供方 | | | |\n| model selection | 模型选择 | | 模型目标 | 面向 Agent 的提供方、模型和可选推理强度选择。 |\n| module | 模块 | | | |\n| non-escalation | 非升权 | | 非升级、不可升级 | 仅用于安全与权限语境，指主体不得获得超出既有授权的权限；普通升级不适用此行 |\n| npm dependency | NPM 依赖 | | | `package.json` 中的包关系；`dependencies`、`devDependencies` 等字段保持原样 |\n| opt-out ratio | opt-out 比例 | | 退出检查比例 | |\n| orphan | 遗留 | | 孤儿、孤立 | 指英文源已不存在的 `.zh.md`（如「遗留译文」）；进程语境按 OS 惯用语译「孤儿进程」 |\n| orphan branch | 孤立分支 | | 孤儿分支 | 沿用 git 官方中文翻译 |\n| package | 包 | | | 指 npm 包（`@deepseek-ai/dsh-*`）；`package.json` 等代码标识保持原样 |\n| pairing | 配对 | | | |\n| parent-subset grants | 父级子集授权 | | 父集合授权 | 指授权范围仅限于父级所持授权的子集 |\n| peer dependency | 对等依赖 | 对等依赖（peer dependency） | | |\n| permission | 权限 | | | |\n| persistence | 持久化 | | | |\n| pipeline | 流水线 | | | |\n| plugin | 插件 | | | |\n| postmortem | 事故复盘 | 事故复盘（postmortem） | 事后分析、事故记录 | 事故记录与分析文档；目录或路径中的 `postmortem` 保持代码形式 |\n| prompt | 提示词 | | | |\n| provider | 提供方 | | | |\n| provider-neutral | 提供方无关 | | 提供方中立 | |\n| quality gate | 质量门禁 | | | |\n| quiescence | 完全停稳 | | 静默、静止状态 | 指生命周期工作全部结算后的状态 |\n| reasoning | 推理 | 推理（reasoning） | | 需要和 `inference` 区分时保留英文括注 |\n| reasoning_content | 思考内容 | | | |\n| registry | 注册表 | | | |\n| replay | 回放 | | | |\n| resume | 恢复 | | | |\n| runtime | 运行时 | | | |\n| same-world subprocess | 与宿主共享文件系统和内核的子进程 | | 同世界子进程 | |\n| sandbox | 沙箱 | | | |\n| service | 服务 | | | |\n| serving interface | 对外服务接口 | | | |\n| session | 会话 | | | |\n| session event | 会话事件 | | | |\n| setup card | 设置卡片 | | | 首次运行时代替行卡直接展开的配置卡 |\n| sidecar file | 伴随文件 | | | 指与文档同目录的普通伴随文件 |\n| sidecar record | 伴随记录 | | 旁挂记录 | 指与文档同目录的伴随记录文件 |\n| smoke test | 冒烟测试 | | | |\n| snapshot | 快照 | | | |\n| source of truth | 真源 | | 事实来源、唯一来源 | |\n| spine | 主干 | | | |\n| stale | 陈旧 | | 过期 | 与 `fresh`（`新鲜`）成对；门禁输出中保留英文 `stale` 不翻译；`expired` 才译为`过期` |\n| step | 步骤 | | | |\n| stream | 流 | | | |\n| structural signature | 结构签名 | | | i18n 配对机制用语：门禁比对两侧文件时提取的有序结构序列（标题层级、代码块、列表等） |\n| Summary | 概述 | | | 事故复盘标题用语 |\n| system prompt | 系统提示词 | | | |\n| taxonomy | 分类体系 | | | |\n| token usage | token 用量 | | | |\n| tool | 工具 | | | |\n| tool call | 工具调用 | | | |\n| tool result | 工具结果 | | | |\n| tool schema | 工具 schema | | | |\n| toolkit | 工具包 | | | |\n| turn | 轮次 | | | |\n| VFS | VFS | 虚拟文件系统（VFS） | | |\n| typecheck | 类型检查 | | | |\n| vocabulary | 词汇 | | | |\n| wire format | 协议格式 | 协议格式（wire format） | | |\n| workflow | 工作流 | | | |\n| wrapper | 包装层 | | | 软件层或 SDK 包装层 |\n| wrapper script | 包装脚本 | | | 可执行脚本包装层 |\n\n\n## Output Format\n\nReturn exactly three raw XML sections in the order shown below. Do not wrap the response in a Markdown code fence and do not add analysis or text before, between, or after the sections. The fence below only displays the required format; do not reproduce the fence.\n\nThe outer section tags are framing. If Markdown inside any section body contains a line consisting only of ``, ``, ``, ``, ``, or ``, prefix that line with `\\`. If the original line already has one or more backslashes immediately before the tag, add one more. The parser removes exactly one framing escape; tags mentioned inline need no escaping.\n\n```xml\n\n(First pass: the complete translation, written as natural target-language technical prose)\n\n\n\n(Second pass: actual corrections only, one correction per line with a category tag, e.g.)\n- [Tone] \"旁挂记录\" → \"伴随记录\"（生造词）\n- [Sentence] 第 3 段补充逗号断句\n- [Punctuation] 两处破折号替换为冒号\n- [Terminology: pending] source term → tentative rendering\n- 无修正\n\n\n\n(Complete final translation after corrections)\n\n```\n\n## Self-Review Instructions\n\nAfter writing ``, verify it in two directions. First re-read it in the target language only without comparing it with the source; this makes awkward phrasing easier to notice. Then compare it against the source clause by clause for completeness and exact meaning. Resolve doubts before writing ``; do not include reasoning transcripts, checks that passed, tentative suggestions, retractions, or no-op corrections.\n\n**Structure**\n- Are the heading hierarchy and order, list kind and item count, ordered-list start, table dimensions, and code block content identical to the source?\n- Are ALL comments and info strings inside code blocks left untranslated and byte-identical to the source?\n- Are inline code spans and machine-readable tokens verbatim?\n- Is an existing language switcher correctly flipped, and is no switcher or filename invented when the source lacks one?\n- Are link targets and emphasis spans preserved?\n- Does spacing across emphasis boundaries follow the same Chinese/Latin/numeral rule as ordinary prose?\n- Are wrapper-tag lines inside section bodies escaped with one additional backslash?\n\n**Faithfulness**\n- Clause by clause, is anything added, dropped, weakened, strengthened, reversed, merged, or re-bounded? Are list item counts identical on both sides?\n- Do actors, objects, conditions, exceptions, negation, modality, causal relationships, guarantees, contract directions, result channels, ownership changes, and quantities survive exactly?\n\n**Tone & Style**\n- Does every sentence read as if originally written by a native technical author?\n- Is there any colloquial, casual, overly informal, promotional, or metaphorical phrasing?\n- Are actors explicit where the target language needs them, without inventing responsibility?\n\n**Sentence Structure**\n- Are there run-on sentences that need breaking?\n- Are there stiff passive constructions that can safely become active, or active constructions that invent an actor?\n- Are conditions, concessions, negation, coordination, and modifiers scoped clearly?\n\n**Word Choice**\n- Are there overly literal translations that sound unnatural?\n- Are ordinary prose words left untranslated despite an established target-language expression?\n- Does each polysemous word fit its local context?\n- Is the same target-language word used for distinct source concepts, or is a defined term varied merely to avoid repetition?\n- Is any slang or internal jargon present?\n\n**Terminology**\n- For a Chinese target, are first-occurrence glosses correctly applied to the true first prose occurrence, neither missing nor repeated? For an English target, are Chinese glosses absent?\n- Are any \"不要译作\" forbidden translations present?\n- Do protected tokens remain untouched even when they resemble terminology entries?\n- For an unlisted term, does a Chinese target use an established Chinese rendering or preserve the source term as pending when no reliable rendering is known, and does an English target use the established English technical term or preserve only an ambiguous source term with the shortest necessary gloss and a pending notice?\n\n**Punctuation** (when target is Chinese)\n- Are punctuation, mixed-script spacing, quotation marks, Latin letters, and digits in their required forms?\n- Are there em dashes that make the sentence less clear and should be replaced, while natural em dashes remain intact?\n- Are list-item endings grammatically consistent, with none ending in commas?\n- Do RFC 2119 keywords preserve the source emphasis span and normative strength exactly?\n\nRecord actual corrections in ``, then output the corrected complete document in ``. If no correction or pending terminology notice is needed, write exactly `- 无修正` in `` and copy `` unchanged into ``. If `` contains only pending terminology notices, copy `` unchanged into ``.\n\n## Examples\n\nBelow are representative examples of common problems and their corrections. Follow the \"Good\" versions within the rule each example illustrates; examples do not override source context or higher-priority requirements.\n\n### Colloquial verb → Professional verb\n- Source: `The repo pins pnpm@11.7.0 in package.json`\n- Bad: `仓库在 package.json 中钉住 pnpm@11.7.0`\n- Good: `该仓库在 package.json 中固定使用 pnpm@11.7.0`\n\n### Run-on sentence → Natural phrasing with pause\n- Source: `Read docs/architecture.md before changing anything under packages/.`\n- Bad: `改动 packages/ 下的任何东西之前先读 docs/architecture.md。`\n- Good: `在修改 packages/ 目录下的任何内容之前，请先阅读 docs/architecture.md。`\n\n### Stiff passive voice → Active and natural\n- Source: `a green gate means the pair was confirmed consistent at these exact contents, not that the confirmation was sound.`\n- Bad: `门禁绿意味着这对文档曾在当前内容上被确认一致，不意味着这次确认本身是对的。`\n- Good: `门禁通过意味着这组文档在当前内容上的一致性得到了确认，不代表确认本身正确可靠。`\n\n### Invented word → Natural expression\n- Source: `A sidecar record of both blob hashes makes consistency checkable`\n- Bad: `旁挂记录两侧 blob hash，使一致性可检查`\n- Good: `伴随记录保存两侧 blob hash，使一致性可检查`\n\n### Em-dash → Colon/period\n- Source: `FIXME — an issue that should block a new release. A release should not ship with an open FIXME unless reviewers explicitly agree the change can be merged anyway.`\n- Bad: `FIXME——应当阻塞新版本发布的问题。除非评审者明确同意可以照常合入，发布不应带着未解决的 FIXME 出门。`\n- Good: `FIXME：应当阻塞新版本发布的问题。除非评审者明确同意该更改可以合并，否则发布版本不应包含未解决的 FIXME。`\n\n### Overly literal → Meaningful rendering\n- Source: `awkward phrasing is easier to notice when you read the translation without comparing it with the source`\n- Bad: `不把译文和原文比较时，尴尬的措辞更容易被注意`\n- Good: `不对照原文阅读译文时，更容易察觉别扭的表达`\n\n### Terminology — do not translate what should be kept in English\n- Source: `typed service seams, and explicit extension points`\n- Bad: `类型化的服务 seam（扩展点）与显式扩展点`\n- Good: `类型化的服务 seam 与显式扩展点`\n\n### Slang/jargon → Professional phrasing\n- Source: `The committed agent workflow lives in .agents/skills/dsh-translate-docs`\n- Bad: `进仓的 agent 工作流见 .agents/skills/dsh-translate-docs`\n- Good: `仓库内置的 agent 工作流见 .agents/skills/dsh-translate-docs`\n\n### \"For humans\" — translate the intent, not the word\n- Source: `For humans, start with the development guide`\n- Bad: `对于人工读者，请先从开发指南开始`（\"人工读者\"生硬）\n- Good: `面向开发者：请先阅读开发指南`（\"开发者\"自然，且中文里冒号在此处更自然）\n\n### Code block comments — NEVER translate\n- Source code block contains: `# full-screen TUI coding agent (needs DEEPSEEK_API_KEY)`\n- Bad: `# 全屏 TUI coding agent（需要 DEEPSEEK_API_KEY）`\n- Good: `# full-screen TUI coding agent (needs DEEPSEEK_API_KEY)` (keep exactly as-is, byte-for-byte)\n\n### Language switcher — flip direction\n- Source file (English) has: `English | [中文](README.zh.md)`\n- Bad (copying source unchanged): `English | [中文](README.zh.md)`\n- Good (flipped for Chinese file): `[English](README.md) | 中文`\n\n---\n\nNow translate the following document:" + "content": "# Translation Prompt\n\nYou are a senior technical translator specializing in LLM and agent development documentation. Your task is to translate the complete source document from English to Chinese, producing natural, professional technical prose.\n\nRead each complete semantic unit, understand it, and restate it as a native technical author would write it in the target language. Do not mechanically preserve source-language syntax. Then verify the translation against the source clause by clause: preserve every proposition and add none. Fluency never justifies losing or altering meaning, and completeness never justifies unnatural word-for-word prose.\n\n## Priority\n\nApply these authorities in order:\n\n1. Preserve the source meaning and the required document structure, protected content, and formatting.\n2. Follow the injected terminology table exactly.\n3. Use the injected whole-document gold pairs to calibrate target-language voice and phrasing.\n4. Apply the general writing guidance and illustrative examples in this prompt.\n\nA lower-priority rule may refine but never override a higher-priority requirement. Gold pairs calibrate voice; they are not a translation memory. No style preference, gold-pair phrasing, or embedded example may override source meaning, required structure, protected content, or the terminology table.\n\n## Quality Requirements\n\n### Structure and Format Preservation\n- Output a complete translated document that maintains the same document frame as the source: heading hierarchy and order, list kinds and item counts, ordered-list starts, table rows and columns, link targets, and code blocks.\n- Paragraph boundaries may change within the same structural unit when the target language needs different semantic grouping. Do not merge or move content across headings, list items, table cells, or other independent structural units.\n- Keep each prose paragraph on one physical line. Use paragraph breaks, not hard-wrapped lines inside a paragraph.\n- Fenced code blocks must be byte-identical to the source, including info strings, whitespace, and ALL comments inside them. Do NOT translate or reformat any content inside code blocks. This is a hard rule with no exceptions.\n- Inline code spans must be kept verbatim. This includes commands, flags, paths, identifiers, API and event names, config keys, protocol values, version numbers, and other machine-readable tokens. Never translate or reformat them.\n- Every relative link must point to the same target as in the source. Translate link text; do not change link targets.\n- Language switcher line: when an English source contains `English | [中文](source-filename.zh.md)`, write `[English](source-filename.md) | 中文`. When a Chinese source contains `[English](source-filename.md) | 中文`, write `English | [中文](source-filename.zh.md)`. Do NOT copy the source switcher unchanged. If the source has no switcher, do not invent a filename or switcher; the pipeline inserts the canonical target switcher after parsing ``.\n- Preserve emphasis marker types and the semantic spans they cover. Do not add, remove, move, or change bold and italic markers.\n\n### Faithfulness\n- Preserve every proposition in the source and add none. Every sentence, list item, note, FIXME, warning, example, caveat, prerequisite, and guarantee must have an equivalent in the translation. Count list items on both sides.\n- Preserve actors, objects, conditions, exceptions, negation, modality, causal relationships, and distinctions between concepts.\n- Preserve the exact strength and orientation of contracts. Completion and lifecycle conditions, failure behavior, directions and data flow, normal and exceptional result channels, ownership changes, and quantitative bounds must not be weakened, strengthened, reversed, or merged.\n- Translate ideas rather than source-language idioms, but never use fluency as a reason to omit or alter meaning.\n\n### Tone and Style\n- The translation must read as if originally written in the target language by a native technical author. If an expression sounds like a word-for-word rendering from the source language, rephrase it.\n- Write in a professional, formal tone appropriate for developer documentation. Never use colloquial or casual expressions.\n- Name an actor when the target language would otherwise obscure an actor that the source states or unambiguously implies. Never invent responsibility merely to avoid a passive construction.\n- Prefer established target-language engineering terms over literal renderings. Replace metaphors with direct descriptions that preserve the source meaning.\n- Use polite imperative forms where the text instructs the reader to do something. In Chinese, address the reader as `你`, not `您`.\n- Keep the author's register: concise stays concise, detailed stays detailed.\n\n### Sentence Structure\n- Break long sentences where the target language needs a pause. Avoid run-on sentences.\n- Use active voice when it improves clarity without changing or inventing the actor. Retain passive voice when the actor is unknown, irrelevant, or intentionally omitted.\n- Restructure source-language syntax into clear target-language syntax. Preserve the logical scope of conditions, concessions, negation, coordination, and modifiers.\n- Split or combine clauses when needed for readability, provided every source relationship remains explicit.\n- Translate meaning, not words. Do not invent words or expressions that a native technical author would not use.\n\n### Word Choice\n- Prefer precise, formal vocabulary over casual or colloquial alternatives.\n- When multiple synonyms exist, choose the one most commonly used in professional technical documentation of the target language.\n- Translate ordinary prose when an established target-language expression is clear. Preserve proper nouns, canonical product names, code identifiers, APIs, paths, package names, and terms that the terminology table requires to remain in the source language.\n- Use context to resolve polysemous words. A familiar word does not have one fixed rendering in every technical domain.\n- Avoid slang, internal jargon, or overly literal translations that would not be recognized by the general developer audience.\n- Do not use the same word to translate distinct source-language concepts when their distinction matters.\n- Avoid repeating the same ordinary verb in close proximity when a natural equivalent preserves the exact meaning. Never vary a terminology-table form, defined concept, or contract verb merely for stylistic variety.\n\n#### When translating into Chinese\n- When a number modifies a noun, include a natural Chinese classifier or measure word when Chinese grammar requires one. For example: \"three-role capability seam\" → \"包含三种角色的能力 seam\", not \"三角色 seam\". Do not add classifiers to code, identifiers, versions, units, or fixed names.\n\n### Punctuation\n\n#### When translating into Chinese\n- Use full-width Chinese punctuation in Chinese prose: `，。：；？！（）「」`. Keep half-width punctuation inside code spans, numbers, and complete verbatim English text.\n- Prefer colons, periods, commas, or parentheses over em dashes when they make the sentence clearer or more natural. Keep an em dash when it is the clearest natural punctuation.\n- Use enumeration commas (、) between parallel Chinese items, not regular commas.\n- Keep list-item endings consistent with their grammar. Complete sentences may end with periods or other grammatically required punctuation; do not end list items with commas.\n- Put one half-width space between Chinese text and Latin words or numerals. Do not add a space next to full-width punctuation, and do not leave a meaningless half-width space between two Chinese characters.\n- Markdown emphasis markers do not create a word boundary. Determine spacing from the rendered adjacent characters: Chinese next to Chinese takes no space, while Chinese next to a Latin word or numeral takes one half-width space.\n- Use half-width digits and Latin letters, never full-width forms.\n- For RFC 2119 keywords (MUST, MUST NOT, SHOULD, MAY), translate to the corresponding Chinese term (必须、禁止、应当、可以), preserve the SOURCE emphasis span exactly, and do not weaken its normative strength: plain source stays plain (必须), italic source stays italic (*必须*), and bold source stays bold (**必须**).\n\n#### When translating into English\n- Use half-width English punctuation and standard English spacing. Preserve full-width punctuation only in verbatim Chinese text.\n- Convert enumeration commas (、) to English commas and Chinese prose quotation marks to English double quotes.\n- Convert Chinese topic-comment sentences and omitted-subject constructions into clear English subjects when the actor is stated or unambiguously implied. Do not invent an actor.\n- Use concise professional developer prose and established English technical terms. Do not transliterate Chinese engineering idioms literally.\n- Use the terminology table's English column exactly and do not carry Chinese first-occurrence glosses into English prose.\n\n## Terminology\n\nA terminology table is provided below. Follow it strictly:\n- Render every listed term exactly as specified.\n- When the target language is Chinese, use the \"中文\" column. On the document's first prose occurrence, write the \"首次出现\" value when one is specified; on later occurrences, write only the part before the parenthetical gloss.\n- When the target language is English, use the \"English\" column without a Chinese gloss; do not copy the \"中文\" or \"首次出现\" value into English prose.\n- If a term has already been glossed as part of a compound term, do not gloss it again when it appears alone later.\n- NEVER use translations listed in the \"不要译作\" column.\n- Code spans and other protected tokens remain verbatim even when their text resembles a listed term.\n- For an unlisted technical term, use an established target-language technical term when its meaning is unambiguous in context. For a Chinese target, use an established Chinese rendering from a major Chinese-language OSS or vendor source; if you cannot reliably determine such a rendering, preserve the source term and record `[Terminology: pending]` in `` with a tentative rendering for human review. For an English target, use the established English technical term; if the source term has no unambiguous established equivalent, preserve it with the shortest English gloss needed to make it intelligible and record `[Terminology: pending]` in ``. A tentative rendering may appear in `` but must not be silently adopted in `` or ``, and you must not invent or claim a specific external precedent. This rule applies to terminology only; for general prose, freely restructure and paraphrase for natural expression.\n\n# Terminology\n\n本表约定本仓库的中英术语统一译法。\n\n**通用规则：**\n- \"中文\"列为中文译文的正文默认用词。若该列为英文，则中文译文的正文中保留英文不翻译。\n- 首次出现按\"首次出现\"列书写（带括号注释）；后续出现只写括号前的部分（可能为中文，也可能为英文），不出现括号内的注释。\n- \"不要译作\"列为严格禁止的译法。\n- 如果某术语已经作为另一个术语的组成部分被括注过（如 `agent loop（智能体循环）` 中已包含 `agent` 的括注），则该术语后续单独出现时无需再次括注。\n\n## 缩写类（中英文文本中均使用缩写）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| ACP | ACP | ACP（Agent Client Protocol） | | |\n| AI | AI | AI（人工智能） | | |\n| API | API | | | |\n| CI | CI | | | |\n| CLI | CLI | CLI（命令行界面） | | |\n| e2e | e2e | | | |\n| HMR | HMR | HMR（热模块替换） | | |\n| JSON Schema | JSON Schema | | | |\n| JSONL | JSONL | | | |\n| LLM | LLM | LLM（大语言模型） | | |\n| MCP | MCP | | | |\n| PR | PR | PR（Pull Request） | | |\n| RAG | RAG | RAG（检索增强生成） | | |\n| SDK | SDK | | | 只指受支持的 Python 与 TypeScript SDK 所使用的 JSON-RPC 客户端／服务器协议；DeepSeek Harness 项目本身不是 SDK |\n| SSE | SSE | SSE（Server-Sent Events） | | |\n\n## 英文类（中英文文本中均使用英文）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| agent | agent | agent（智能体） | | |\n| Agent Note | Agent Note | | 智能体注记、智能体笔记 | 仓库定义的文档类型，涵盖提案、已实现决策和被否决提案；中文对侧 H1 保持固定前缀 `# Agent Note: `，标题中不加术语括注 |\n| agent harness | agent harness | agent harness（智能体框架） | | agent 组合词（agent harness/workflow/loop/skill 等）整体保留英文；未括注过 agent 时首现按对应组合词或 agent 行处理 |\n| agent loop | agent loop | agent loop（智能体循环） | | |\n| blob hash | blob hash | | | `git hash-object` 的结果 |\n| coding agent | coding agent | coding agent（编程智能体） | | agent 组合词，正文保留英文 |\n| Cordis | Cordis | | | |\n| dispose | dispose | dispose（资源释放） | | |\n| doc-sync | doc-sync | doc-sync（文档同步门禁） | | |\n| fiber | fiber | | | |\n| fixture | fixture | fixture（测试前置数据） | | |\n| fork | fork | | | |\n| Function Calling | Function Calling | Function Calling（函数调用） | | |\n| harness | harness | | | |\n| harness engineering | harness engineering | | | |\n| KV Cache | KV Cache | | | 专有技术名称，保持大小写与空格 |\n| lint | lint | | | |\n| mock | mock | | | 保留英文；指测试替身 |\n| loader | loader | | | |\n| manifest | manifest | manifest（元数据清单） | | |\n| monorepo | monorepo | | | |\n| Round | Round | | 回合、目标回合、Ralph 回合 | 外层策略使用 Round 时，领域层级为 Session > Round > Turn（轮次） > Step（步骤）；Round 是可选的外层策略迭代，并非每个会话轮次都具有的通用层级。Goal Round 与 Ralph Round 均保留英文。一个 Round 承载一个轮次，步骤隶属于该轮次；明确的零步骤轮次仍保持原义。 |\n| schema | schema | | | |\n| schema DSL | schema DSL | | | |\n| seam | seam | | 接缝 | 一个可替换能力的整体，包含 Service Definition / Service Provider / Consumer 三种角色；角色需要独立演化时才拆包，也可由同一包承担多个角色。以 `packages/shell` 为范例；Service Definition 是 Cordis `Service`（抽象类或具体 registry 服务），不是 TypeScript interface。任何单一角色、普通边界或扩展点都不能称为 seam。本仓库正文保留英文；与 `extension point` 是不同概念 |\n| Service Provider | Service Provider | | Service provider | 能力 seam 的命名角色；单数固定写作 Service Provider，复数写作 Service Providers。泛指提供服务的 provider 不适用本词条 |\n| skill | skill | skill（技能） | | |\n| slot | slot | | 坑位、孔位 | 客户端架构中的具名可注册位置，保留英文 |\n| spill | spill | | | 工具输出超限落盘机制；组合词写 `spill 文件`、`spill 路径` |\n| spawn | spawn | | | |\n| steering | steering | steering（中途引导） | | |\n| job id | job id | | 任务 id | 保留英文 |\n| subagent | subagent | | | |\n| transcript | transcript | transcript（文本记录） | | 指会话渲染给用户或编辑器的完整文本，区别于事件日志 |\n| Typert | Typert | | TypeRT、typeRT、Type RT | DeepSeek Harness 类型图、生成器、loader 与运行时 registry 的产品拼写 |\n| waterfall | waterfall | waterfall（瀑布式事件） | | |\n| wheel | wheel 包 | | | Python 打包格式 |\n| worktree | worktree | | | git 工作区概念 |\n| Zstandard | Zstandard | | | RFC 8878 compression format; `zstd` remains a code value. |\n\n## 双语类（中英文文本各自使用中英文）\n\n| English | 中文 | 首次出现 | 不要译作 | 备注 |\n|---|---|---|---|---|\n| adapter | 适配器 | | | |\n| adapter contract | 适配器约定 | 适配器约定（adapter contract） | | |\n| append-only | 仅追加 | | | |\n| artifact | 产物 | | 制品 | |\n| backend | 后端 | | | |\n| binder | 绑定器 | | | 命名角色：把已声明接口绑定到调用方 context 或生命周期 |\n| config | 配置 | | | 命名角色：一个已解析配置值或边界严格的配置记录 |\n| controller | 控制器 | | | 命名角色：接受意图并改变一项既有领域或展示状态 |\n| directory | 目录 | | | 命名角色：暴露供发现或选择的条目及元数据 |\n| engine | 引擎 | | | 命名角色：实现领域算法或有状态执行模型 |\n| gateway | 网关 | | | 命名角色：适配进程、网络、RPC 或 API 边界 |\n| handle | 句柄 | | | 命名角色：引用并控制或观察一个实时资源 |\n| policy | 策略 | | | 命名角色：决定允许、选择、限制或观察什么 |\n| presenter | 展示转换器 | | | 命名角色：把领域值纯转换为渲染意图 |\n| resolver | 解析器 | | | 命名角色：根据输入计算或定位一个答案 |\n| store | 存储 | | | 命名角色：拥有一组数据并主要提供数据操作 |\n| background job | 后台任务 | | | |\n| block | 块 | | | |\n| build target | 构建目标 | | | |\n| cancel | 取消 | | | |\n| canary test | canary 测试 | | 金丝雀测试 | 本仓库保留 `canary` |\n| capability | 能力 | | | 必须与 `feature` → `功能` 区分 |\n| capability seam | 能力 seam | | 功能 seam、能力接缝 | 本仓库 Service Definition、Service Provider 与 Consumer 三种角色组成完整可替换能力的命名架构概念；普通 `seam` 仍按其词条处理 |\n| feature | 功能 | | 能力 | SDK 产品与工程模型中的可管理产品单元 |\n| feature option | 功能选项 | | variant | 一项 SDK 功能内有限、可选择的实现或配置 |\n| checkpoint | 检查点 | | | |\n| chunk | 分片 | | | |\n| compaction | 压缩 | 压缩（compaction） | | |\n| companion tool | 配套工具 | | | |\n| composition bundle | 组合包 | | | 只约束应用或插件的组合语境，不约束所有 `bundle` |\n| Cordis plugin config | Cordis 插件配置 | | | Cordis 插件公开的 `Config` 对象或配置结构 |\n| config key | 配置键 | | | Cordis 插件配置中的单个字段 |\n| consumer | 消费方 | | 消费者 | |\n| content block | 内容块 | | | |\n| Cookbook | 实操手册 | | | 文档标题用语 |\n| context | 上下文 | | | |\n| counterpart | 对侧文件 | | 对应物、配对物 | 双语配对语境；泛指\"另一侧\"时可写「另一侧」 |\n| configurable-provider directory | 可配置提供方目录 | | | llm seam 中 `registerConfigurableProviders()` 维护的目录；沿用 Service Catalog →「服务目录」先例 |\n| context compaction | 上下文压缩 | 上下文压缩（context compaction） | | |\n| contract | 约定 | | | 如：`pairing contract` →`配对约定` |\n| Cordis config entry | Cordis 配置项 | | | 指 `cordis.yml` 插件列表中的一项；插件实现本身写`Cordis 插件` |\n| Cordis plugin | Cordis 插件 | | | Cordis 加载的插件实现，不指 `cordis.yml` 中的一项配置 |\n| crash recovery | 崩溃恢复 | | | |\n| deploy root | 部署根目录 | | | |\n| dormant | 休眠 | | 睡眠、蛰伏 | 指已声明可配置但当前未注册路由的提供方 |\n| durability | 持久性 | | | |\n| feature requirement | 功能依赖 | | | 功能或功能选项通过 `requires` 声明的关系 |\n| event | 事件 | | | |\n| event log | 事件日志 | | | |\n| event stream | 事件流 | | | |\n| event-sourced | 事件溯源 | | | 沿用 DDD 社区通行译法 |\n| Executive summary | 摘要 | | | 事故复盘标题用语 |\n| executor | 执行器 | | | |\n| expected output | 预期输出 | | 金标 | 指 snapshot 比较产物；翻译语料的人工校准样例不在此列 |\n| extension | 扩展 | | | |\n| extension point | 扩展点 | | | 注意与 `seam` 区分 |\n| fail-fast | 快速失败 | | | |\n| fenced code block | 围栏代码块 | | | 沿用 MDN 中文翻译 |\n| fingerprint | 指纹 | | | 通用内容指纹；双语配对机制使用 sidecar record 记录两侧 blob hash |\n| finish reason | 结束原因 | | | |\n| fold | 折叠区 | | | 配置界面语境：默认收起的字段分区（collapsed →「收起」）|\n| foreground run | 前台运行 | | | |\n| freshness | 新鲜度 | | | 沿用 MDN 中文翻译；在本项目中指译文相对源文的同步状态 |\n| hook | 钩子 | | | |\n| implementation | 实现 | | | |\n| inference | 推理 | 推理（inference） | | 需要和 `reasoning` 区分时保留英文括注 |\n| info string | 信息字符串 | | | 沿用 CommonMark 中文翻译；指代码围栏 ``` 之后的语言标注 |\n| injection | 注入 | | | |\n| integration | 集成 | | | |\n| interface | 接口 | | | |\n| language switcher | 语言切换行 | | | i18n 配对机制用语：双语配对文件顶部的互链行 |\n| merge | 合并 | | | |\n| message | 消息 | | | |\n| mod | 模组 | | | |\n| model provider | 模型提供方 | | | |\n| model selection | 模型选择 | | 模型目标 | 面向 Agent 的提供方、模型和可选推理强度选择。 |\n| module | 模块 | | | |\n| non-escalation | 非升权 | | 非升级、不可升级 | 仅用于安全与权限语境，指主体不得获得超出既有授权的权限；普通升级不适用此行 |\n| npm dependency | NPM 依赖 | | | `package.json` 中的包关系；`dependencies`、`devDependencies` 等字段保持原样 |\n| opt-out ratio | opt-out 比例 | | 退出检查比例 | |\n| orphan | 遗留 | | 孤儿、孤立 | 指英文源已不存在的 `.zh.md`（如「遗留译文」）；进程语境按 OS 惯用语译「孤儿进程」 |\n| orphan branch | 孤立分支 | | 孤儿分支 | 沿用 git 官方中文翻译 |\n| package | 包 | | | 指 npm 包（`@deepseek-ai/dsh-*`）；`package.json` 等代码标识保持原样 |\n| pairing | 配对 | | | |\n| parent-subset grants | 父级子集授权 | | 父集合授权 | 指授权范围仅限于父级所持授权的子集 |\n| peer dependency | 对等依赖 | 对等依赖（peer dependency） | | |\n| permission | 权限 | | | |\n| persistence | 持久化 | | | |\n| pipeline | 流水线 | | | |\n| plugin | 插件 | | | |\n| postmortem | 事故复盘 | 事故复盘（postmortem） | 事后分析、事故记录 | 事故记录与分析文档；目录或路径中的 `postmortem` 保持代码形式 |\n| prompt | 提示词 | | | |\n| provider | 提供方 | | | |\n| provider-neutral | 提供方无关 | | 提供方中立 | |\n| quality gate | 质量门禁 | | | |\n| quiescence | 完全停稳 | | 静默、静止状态 | 指生命周期工作全部结算后的状态 |\n| reasoning | 推理 | 推理（reasoning） | | 需要和 `inference` 区分时保留英文括注 |\n| reasoning_content | 思考内容 | | | |\n| registry | 注册表 | | | |\n| replay | 回放 | | | |\n| resume | 恢复 | | | |\n| runtime | 运行时 | | | |\n| same-world subprocess | 与宿主共享文件系统和内核的子进程 | | 同世界子进程 | |\n| sandbox | 沙箱 | | | |\n| service | 服务 | | | |\n| serving interface | 对外服务接口 | | | |\n| session | 会话 | | | |\n| session event | 会话事件 | | | |\n| setup card | 设置卡片 | | | 首次运行时代替行卡直接展开的配置卡 |\n| sidecar file | 伴随文件 | | | 指与文档同目录的普通伴随文件 |\n| sidecar record | 伴随记录 | | 旁挂记录 | 指与文档同目录的伴随记录文件 |\n| smoke test | 冒烟测试 | | | |\n| snapshot | 快照 | | | |\n| source of truth | 真源 | | 事实来源、唯一来源 | |\n| spine | 主干 | | | |\n| stale | 陈旧 | | 过期 | 与 `fresh`（`新鲜`）成对；门禁输出中保留英文 `stale` 不翻译；`expired` 才译为`过期` |\n| step | 步骤 | | | |\n| stream | 流 | | | |\n| structural signature | 结构签名 | | | i18n 配对机制用语：门禁比对两侧文件时提取的有序结构序列（标题层级、代码块、列表等） |\n| Summary | 概述 | | | 事故复盘标题用语 |\n| system prompt | 系统提示词 | | | |\n| taxonomy | 分类体系 | | | |\n| token usage | token 用量 | | | |\n| tool | 工具 | | | |\n| tool call | 工具调用 | | | |\n| tool result | 工具结果 | | | |\n| tool schema | 工具 schema | | | |\n| toolkit | 工具包 | | | |\n| turn | 轮次 | | | |\n| VFS | VFS | 虚拟文件系统（VFS） | | |\n| typecheck | 类型检查 | | | |\n| vocabulary | 词汇 | | | |\n| wire format | 协议格式 | 协议格式（wire format） | | |\n| workflow | 工作流 | | | |\n| wrapper | 包装层 | | | 软件层或 SDK 包装层 |\n| wrapper script | 包装脚本 | | | 可执行脚本包装层 |\n\n\n## Output Format\n\nReturn exactly three raw XML sections in the order shown below. Do not wrap the response in a Markdown code fence and do not add analysis or text before, between, or after the sections. The fence below only displays the required format; do not reproduce the fence.\n\nThe outer section tags are framing. If Markdown inside any section body contains a line consisting only of ``, ``, ``, ``, ``, or ``, prefix that line with `\\`. If the original line already has one or more backslashes immediately before the tag, add one more. The parser removes exactly one framing escape; tags mentioned inline need no escaping.\n\n```xml\n\n(First pass: the complete translation, written as natural target-language technical prose)\n\n\n\n(Second pass: actual corrections only, one correction per line with a category tag, e.g.)\n- [Tone] \"旁挂记录\" → \"伴随记录\"（生造词）\n- [Sentence] 第 3 段补充逗号断句\n- [Punctuation] 两处破折号替换为冒号\n- [Terminology: pending] source term → tentative rendering\n- 无修正\n\n\n\n(Complete final translation after corrections)\n\n```\n\n## Self-Review Instructions\n\nAfter writing ``, verify it in two directions. First re-read it in the target language only without comparing it with the source; this makes awkward phrasing easier to notice. Then compare it against the source clause by clause for completeness and exact meaning. Resolve doubts before writing ``; do not include reasoning transcripts, checks that passed, tentative suggestions, retractions, or no-op corrections.\n\n**Structure**\n- Are the heading hierarchy and order, list kind and item count, ordered-list start, table dimensions, and code block content identical to the source?\n- Are ALL comments and info strings inside code blocks left untranslated and byte-identical to the source?\n- Are inline code spans and machine-readable tokens verbatim?\n- Is an existing language switcher correctly flipped, and is no switcher or filename invented when the source lacks one?\n- Are link targets and emphasis spans preserved?\n- Does spacing across emphasis boundaries follow the same Chinese/Latin/numeral rule as ordinary prose?\n- Are wrapper-tag lines inside section bodies escaped with one additional backslash?\n\n**Faithfulness**\n- Clause by clause, is anything added, dropped, weakened, strengthened, reversed, merged, or re-bounded? Are list item counts identical on both sides?\n- Do actors, objects, conditions, exceptions, negation, modality, causal relationships, guarantees, contract directions, result channels, ownership changes, and quantities survive exactly?\n\n**Tone & Style**\n- Does every sentence read as if originally written by a native technical author?\n- Is there any colloquial, casual, overly informal, promotional, or metaphorical phrasing?\n- Are actors explicit where the target language needs them, without inventing responsibility?\n\n**Sentence Structure**\n- Are there run-on sentences that need breaking?\n- Are there stiff passive constructions that can safely become active, or active constructions that invent an actor?\n- Are conditions, concessions, negation, coordination, and modifiers scoped clearly?\n\n**Word Choice**\n- Are there overly literal translations that sound unnatural?\n- Are ordinary prose words left untranslated despite an established target-language expression?\n- Does each polysemous word fit its local context?\n- Is the same target-language word used for distinct source concepts, or is a defined term varied merely to avoid repetition?\n- Is any slang or internal jargon present?\n\n**Terminology**\n- For a Chinese target, are first-occurrence glosses correctly applied to the true first prose occurrence, neither missing nor repeated? For an English target, are Chinese glosses absent?\n- Are any \"不要译作\" forbidden translations present?\n- Do protected tokens remain untouched even when they resemble terminology entries?\n- For an unlisted term, does a Chinese target use an established Chinese rendering or preserve the source term as pending when no reliable rendering is known, and does an English target use the established English technical term or preserve only an ambiguous source term with the shortest necessary gloss and a pending notice?\n\n**Punctuation** (when target is Chinese)\n- Are punctuation, mixed-script spacing, quotation marks, Latin letters, and digits in their required forms?\n- Are there em dashes that make the sentence less clear and should be replaced, while natural em dashes remain intact?\n- Are list-item endings grammatically consistent, with none ending in commas?\n- Do RFC 2119 keywords preserve the source emphasis span and normative strength exactly?\n\nRecord actual corrections in ``, then output the corrected complete document in ``. If no correction or pending terminology notice is needed, write exactly `- 无修正` in `` and copy `` unchanged into ``. If `` contains only pending terminology notices, copy `` unchanged into ``.\n\n## Examples\n\nBelow are representative examples of common problems and their corrections. Follow the \"Good\" versions within the rule each example illustrates; examples do not override source context or higher-priority requirements.\n\n### Colloquial verb → Professional verb\n- Source: `The repo pins pnpm@11.7.0 in package.json`\n- Bad: `仓库在 package.json 中钉住 pnpm@11.7.0`\n- Good: `该仓库在 package.json 中固定使用 pnpm@11.7.0`\n\n### Run-on sentence → Natural phrasing with pause\n- Source: `Read docs/architecture.md before changing anything under packages/.`\n- Bad: `改动 packages/ 下的任何东西之前先读 docs/architecture.md。`\n- Good: `在修改 packages/ 目录下的任何内容之前，请先阅读 docs/architecture.md。`\n\n### Stiff passive voice → Active and natural\n- Source: `a green gate means the pair was confirmed consistent at these exact contents, not that the confirmation was sound.`\n- Bad: `门禁绿意味着这对文档曾在当前内容上被确认一致，不意味着这次确认本身是对的。`\n- Good: `门禁通过意味着这组文档在当前内容上的一致性得到了确认，不代表确认本身正确可靠。`\n\n### Invented word → Natural expression\n- Source: `A sidecar record of both blob hashes makes consistency checkable`\n- Bad: `旁挂记录两侧 blob hash，使一致性可检查`\n- Good: `伴随记录保存两侧 blob hash，使一致性可检查`\n\n### Em-dash → Colon/period\n- Source: `FIXME — an issue that should block a new release. A release should not ship with an open FIXME unless reviewers explicitly agree the change can be merged anyway.`\n- Bad: `FIXME——应当阻塞新版本发布的问题。除非评审者明确同意可以照常合入，发布不应带着未解决的 FIXME 出门。`\n- Good: `FIXME：应当阻塞新版本发布的问题。除非评审者明确同意该更改可以合并，否则发布版本不应包含未解决的 FIXME。`\n\n### Overly literal → Meaningful rendering\n- Source: `awkward phrasing is easier to notice when you read the translation without comparing it with the source`\n- Bad: `不把译文和原文比较时，尴尬的措辞更容易被注意`\n- Good: `不对照原文阅读译文时，更容易察觉别扭的表达`\n\n### Terminology — do not translate what should be kept in English\n- Source: `typed service seams, and explicit extension points`\n- Bad: `类型化的服务 seam（扩展点）与显式扩展点`\n- Good: `类型化的服务 seam 与显式扩展点`\n\n### Slang/jargon → Professional phrasing\n- Source: `The committed agent workflow lives in .agents/skills/dsh-translate-docs`\n- Bad: `进仓的 agent 工作流见 .agents/skills/dsh-translate-docs`\n- Good: `仓库内置的 agent 工作流见 .agents/skills/dsh-translate-docs`\n\n### \"For humans\" — translate the intent, not the word\n- Source: `For humans, start with the development guide`\n- Bad: `对于人工读者，请先从开发指南开始`（\"人工读者\"生硬）\n- Good: `面向开发者：请先阅读开发指南`（\"开发者\"自然，且中文里冒号在此处更自然）\n\n### Code block comments — NEVER translate\n- Source code block contains: `# full-screen TUI coding agent (needs DEEPSEEK_API_KEY)`\n- Bad: `# 全屏 TUI coding agent（需要 DEEPSEEK_API_KEY）`\n- Good: `# full-screen TUI coding agent (needs DEEPSEEK_API_KEY)` (keep exactly as-is, byte-for-byte)\n\n### Language switcher — flip direction\n- Source file (English) has: `English | [中文](README.zh.md)`\n- Bad (copying source unchanged): `English | [中文](README.zh.md)`\n- Good (flipped for Chinese file): `[English](README.md) | 中文`\n\n---\n\nNow translate the following document:" }, { "role": "user", From 5061ec2ef097cc33aab286d9416e14f096824680 Mon Sep 17 00:00:00 2001 From: creatixchu Date: Thu, 13 Aug 2026 13:47:09 +0800 Subject: [PATCH 06/41] =?UTF-8?q?feat(web):=20=E7=A7=BB=E9=99=A4=E9=A6=96?= =?UTF-8?q?=E5=90=AF=E5=86=85=E6=B5=8B=E5=A3=B0=E6=98=8E=EF=BC=8C=E9=81=A5?= =?UTF-8?q?=E6=B5=8B=E4=BF=9D=E6=8C=81=E9=BB=98=E8=AE=A4=E5=85=B3=E9=97=AD?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- ...versioned-gui-welcome-onboarding.i18n.yaml | 4 +- ...-07-30-versioned-gui-welcome-onboarding.md | 12 +- ...-30-versioned-gui-welcome-onboarding.zh.md | 12 +- ...2026-08-10-telemetry-default-off.i18n.yaml | 4 +- .../2026-08-10-telemetry-default-off.md | 2 +- .../2026-08-10-telemetry-default-off.zh.md | 2 +- ...-13-remove-first-run-beta-notice.i18n.yaml | 6 + ...2026-08-13-remove-first-run-beta-notice.md | 25 +++ ...6-08-13-remove-first-run-beta-notice.zh.md | 25 +++ apps/web/tests/README.i18n.yaml | 4 +- apps/web/tests/README.md | 5 +- apps/web/tests/README.zh.md | 4 +- apps/web/tests/goal-bar.e2e.ts | 2 +- apps/web/tests/goal-bar.overlay.yml | 6 +- .../tests/onboarding-deepseek-config.e2e.ts | 50 +---- apps/web/tests/remote-welcome.e2e.ts | 53 ----- apps/web/tests/scaffold.ts | 21 -- .../welcome.expected.md | 9 - .../ui-settings-general/README.i18n.yaml | 4 +- packages/client/ui-settings-general/README.md | 4 +- .../client/ui-settings-general/README.zh.md | 4 +- .../src/client/WelcomeNotice.module.css | 155 --------------- .../src/client/WelcomeNotice.tsx | 91 --------- .../ui-settings-general/src/client/index.ts | 42 +--- .../ui-settings-general/src/client/locales.ts | 17 +- .../src/client/welcome-store.ts | 128 ------------ .../client/ui-settings-general/src/index.ts | 14 +- .../ui-settings-general/src/invariant.ts | 2 +- .../src/onboarding-copy.ts | 35 ---- .../tests/apply.client.spec.ts | 55 +----- .../tests/host.client.spec.ts | 8 +- .../tests/shell.client.spec.ts | 4 +- .../tests/welcome-notice.client.spec.tsx | 106 ---------- .../tests/welcome-store.client.spec.ts | 184 ------------------ .../src/client/slot-catalog.ts | 1 - 35 files changed, 122 insertions(+), 978 deletions(-) create mode 100644 .agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.i18n.yaml create mode 100644 .agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.md create mode 100644 .agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.zh.md delete mode 100644 apps/web/tests/remote-welcome.e2e.ts delete mode 100644 apps/web/tests/snapshots/onboarding-deepseek-config/welcome.expected.md delete mode 100644 packages/client/ui-settings-general/src/client/WelcomeNotice.module.css delete mode 100644 packages/client/ui-settings-general/src/client/WelcomeNotice.tsx delete mode 100644 packages/client/ui-settings-general/src/client/welcome-store.ts delete mode 100644 packages/client/ui-settings-general/src/onboarding-copy.ts delete mode 100644 packages/client/ui-settings-general/tests/welcome-notice.client.spec.tsx delete mode 100644 packages/client/ui-settings-general/tests/welcome-store.client.spec.ts diff --git a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.i18n.yaml b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.i18n.yaml index abe1f687fb..66b59c3509 100644 --- a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.md -2026-07-30-versioned-gui-welcome-onboarding.md: 8897e28413df77d127a4d846f2a3e42789454490 -2026-07-30-versioned-gui-welcome-onboarding.zh.md: 9f5eb99033cd62154937808f26b0e1aa40966c9f +2026-07-30-versioned-gui-welcome-onboarding.md: 7a8c5c5b9ba1ec62ad8dd0f5bdf67c516ba0ddec +2026-07-30-versioned-gui-welcome-onboarding.zh.md: 646080b893bb6264a3a92f49400cb9207e29755b diff --git a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.md b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.md index 8897e28413..7a8c5c5b9b 100644 --- a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.md +++ b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.md @@ -10,15 +10,13 @@ The GUI's credential onboarding begins with a DeepSeek-specific readiness check, ## Decision -**The Settings shell coordinates ordered steps.** `settings.onboarding` remains a root-scoped list, but `ui-settings` projects its entry ids and order into one coordinator and mounts only the first incomplete step. The active registrant receives `complete()` and `openSection(id)`; no later step mounts until ownership transfers. The product welcome registers at order `-100`, while `ui-settings-models` retains only the conditional DeepSeek readiness and credential-routing step at order `0`. +**The Settings shell coordinates ordered steps.** `settings.onboarding` remains a root-scoped list, but `ui-settings` projects its entry ids and order into one coordinator and mounts only the first incomplete step. The active registrant receives `complete()` and `openSection(id)`; no later step mounts until ownership transfers. `ui-settings-models` registers the conditional DeepSeek readiness and credential-routing step at order `0`, the only shipped occupant since the [first-run beta notice removal](../simplification/2026-08-13-remove-first-run-beta-notice.md). -**Ownerless product onboarding belongs to `ui-settings-general`.** `src/onboarding-copy.ts` is the single editable source for the complete notice, the Continue label, and `WELCOME_NOTICE_VERSION`; both supported GUI locales intentionally render the same Chinese owner copy. Runtime locale dictionaries derive their welcome values from that file, and tests import the same owner instead of repeating paragraph text. The notice is browser UI only: it creates no Session event and contributes no model-visible content. The notice states that session telemetry is [disabled by default](2026-08-10-telemetry-default-off.md) and names the `FEEDBACK_ONLY` and `FULL` opt-in modes. +**The product welcome step is removed.** The versioned notice, its copy owner, and its acknowledgement store shipped from this decision until the [first-run beta notice removal](../simplification/2026-08-13-remove-first-run-beta-notice.md), which owns the removal rationale; `ui-settings-general` seats no onboarding step. -**Loopback acknowledgement is durable per Harness profile.** The Host half registers a `ui-onboarding` section in the user-settings seam, stored under the active `$DSH_HOME/settings.yaml`. The connection plugin publishes whether the current page uses a loopback authority as `ctx.connection.isLoopback`; hostname classification remains internal to the connection package, and other client plugins consume the service state instead of importing its implementation. A loopback browser shows the notice unless `welcomeNoticeVersion` equals the owner constant exactly. Continue applies one path mutation with the current version and calls `complete()` only after the Host commits it; a failed write leaves the notice open, and closing the page or process writes nothing. Bumping the constant intentionally makes every profile acknowledge the revised copy once. A non-loopback browser must not call the loopback-only settings API. It presents the same notice, but explicit Continue completes the step only in the current browser process; reload or a new process presents it again. +**The durable `ui-onboarding` section outlives the notice.** The Host half registers it in the user-settings seam under the active `$DSH_HOME/settings.yaml`; its `welcomeNoticeVersion` field keeps stored acknowledgements valid and has no reader. The connection plugin publishes whether the current page uses a loopback authority as `ctx.connection.isLoopback`; hostname classification remains internal to the connection package, and other client plugins consume the service state instead of importing its implementation. The API proxy exposes this one product namespace through a closed allowlist beside configurable-provider namespaces, without treating its changes as model-catalog invalidations. -**Concurrent loopback views converge without stale replacement.** The acknowledgement write omits `expectedRevision` deliberately: every loopback tab writes the same version to one path, so the operation is idempotent and preserves sibling fields instead of rebuilding the section. `settings/document-updated` reaches the client as an invalidation — through `host/settings-changed` then, and forwarded verbatim now ([forwarded Remote events](../architecture/2026-08-10-remote-event-delivery.md)); an already mounted loopback tab refetches and advances when another tab or an external editor commits the current version. The API proxy exposes this one product namespace through a closed allowlist beside configurable-provider namespaces, without treating its changes as model-catalog invalidations. - -**Onboarding temporarily owns the viewport as one continuous stage.** A solid product surface replaces the complete application view through a body-level portal and marks the underlying app root inert; the exact required mask remains mounted behind that surface with `position:absolute`, zero left/right/bottom offsets, `top:80px`, `rgba(0, 0, 0, 0.24)`, and `backdrop-filter: blur(2px)`. Welcome and conditional credential setup render as successive pages in this stage instead of independent modals. Both pages reuse the Web UI's black `BrandWordmark`. The welcome page preserves the four authored paragraphs verbatim under the `内测声明` title; every paragraph uses one 16/28 body scale, and only the requested action clause inside the final paragraph receives a subtle 500 weight. A short staggered opacity/vertical entrance supplies pacing without blocking interaction and disappears under reduced motion. The title receives initial focus, Continue is the sole button, and no close, Escape, or mask-click path exists. +**Onboarding temporarily owns the viewport as one continuous stage.** A solid product surface replaces the complete application view through a body-level portal and marks the underlying app root inert; the exact required mask remains mounted behind that surface with `position:absolute`, zero left/right/bottom offsets, `top:80px`, `rgba(0, 0, 0, 0.24)`, and `backdrop-filter: blur(2px)`. Onboarding steps render as successive pages in this stage instead of independent modals, reusing the Web UI's black `BrandWordmark`; the conditional credential setup is the only shipped page. ## Alternatives considered @@ -32,4 +30,4 @@ The GUI's credential onboarding begins with a DeepSeek-specific readiness check, ## Consequences -A fresh profile always sees the welcome notice before provider-specific onboarding; an already configured credential skips only the later DeepSeek step. On loopback, reloading after Continue stays past the acknowledged version, changing the owner version presents it again, and closing before Continue leaves the next launch unchanged. On non-loopback, Continue advances the live process without a privileged settings request and reload presents the notice again. Focused store and React tests pin both persistence modes, exact-version comparison, write failure, sole-action behavior, no-dismiss paths, coordinator ordering, conditional DeepSeek transfer, and HMR cleanup. The real Chromium scenario boots the shipped Web composition with an isolated harness home, verifies the exact mask geometry and computed styles, reloads before and after acknowledgement, continues into missing-credential setup, confirms an acknowledged-version mismatch returns while the credential is configured, and checks the browser console. +A fresh profile proceeds directly to provider-specific onboarding: the conditional DeepSeek step mounts when its credential is missing, and an already configured credential shows no onboarding page at all. Focused store and React tests pin coordinator ordering, conditional DeepSeek transfer, and HMR cleanup. The real Chromium scenario boots the shipped Web composition with an isolated harness home, verifies the exact mask geometry and computed styles while the credential step owns the viewport, continues into missing-credential setup, and checks the browser console. diff --git a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.zh.md b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.zh.md index 9f5eb99033..646080b893 100644 --- a/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.zh.md +++ b/.agents/notes/implemented/feature/2026-07-30-versioned-gui-welcome-onboarding.zh.md @@ -10,15 +10,13 @@ GUI 的凭据引导从 DeepSeek 专用的就绪状态检查开始，但内部测 ## 决策 -**设置外壳协调有序步骤。** `settings.onboarding` 仍是根作用域 list，但 `ui-settings` 会把其中各条目的 id 和顺序投影到一个协调器中，并且只挂载第一个未完成的步骤。当前注册方会收到 `complete()` 和 `openSection(id)`；所有权转移前，不会挂载后续步骤。产品欢迎步骤的顺序为 `-100`，`ui-settings-models` 则只保留顺序为 `0` 的 DeepSeek 条件式就绪状态与凭据跳转步骤。 +**设置外壳协调有序步骤。** `settings.onboarding` 仍是根作用域 list，但 `ui-settings` 会把其中各条目的 id 和顺序投影到一个协调器中，并且只挂载第一个未完成的步骤。当前注册方会收到 `complete()` 和 `openSection(id)`；所有权转移前，不会挂载后续步骤。`ui-settings-models` 注册顺序为 `0` 的 DeepSeek 条件式就绪状态与凭据跳转步骤，自[移除首次启动内测声明](../simplification/2026-08-13-remove-first-run-beta-notice.md)起，它是当前唯一的注册方。 -**不属于单一功能的产品引导由 `ui-settings-general` 持有。** `src/onboarding-copy.ts` 是完整通知、「继续」按钮文案和 `WELCOME_NOTICE_VERSION` 的唯一可编辑来源；GUI 支持的两种 locale 都有意渲染同一份中文所有者文案。运行时 locale 字典从该文件派生欢迎文案，测试也导入同一个所有者，而不重复段落文本。该通知只存在于浏览器 UI：它不会创建会话事件，也不会贡献任何模型可见内容。通知说明会话遥测[默认禁用](2026-08-10-telemetry-default-off.md)，并列出 `FEEDBACK_ONLY` 和 `FULL` 两种显式启用模式。 +**产品欢迎步骤已移除。** 版本化通知、其文案所有者文件和确认 store 自本决策起随产品发布，直至[移除首次启动内测声明](../simplification/2026-08-13-remove-first-run-beta-notice.md)；移除理由由该 note 持有。`ui-settings-general` 不再注册任何引导步骤。 -**loopback 确认状态按 Harness profile 持久化。** 宿主端在 user-settings seam 中注册 `ui-onboarding` 分节，并存入当前 `$DSH_HOME/settings.yaml`。connection 插件通过 `ctx.connection.isLoopback` 统一发布当前页面是否使用 loopback authority；hostname 判定留在 connection 包内，其他客户端插件只消费服务状态，而不导入其实现。除非 `welcomeNoticeVersion` 与文案所有者文件中的常量精确相等，否则 loopback 浏览器会显示通知。「继续」会以当前版本执行一次路径变更，并且仅在宿主端提交成功后调用 `complete()`；写入失败时通知保持打开，关闭页面或进程则不会写入任何内容。更新该常量会有意要求每个 profile 对修订后的文案重新确认一次。非 loopback 浏览器不能调用仅限 loopback 的 settings API；它仍显示同一通知，但显式点击「继续」只会在当前浏览器进程中完成该步骤，重新加载或新进程会再次显示通知。 +**持久化的 `ui-onboarding` 分节在通知移除后继续存在。** 宿主端在 user-settings seam 中注册它，存入当前 `$DSH_HOME/settings.yaml`；其中的 `welcomeNoticeVersion` 字段让已存储的确认记录保持有效，没有读取方。connection 插件通过 `ctx.connection.isLoopback` 统一发布当前页面是否使用 loopback authority；hostname 判定留在 connection 包内，其他客户端插件只消费服务状态，而不导入其实现。API Proxy 在可配置提供方 namespace 之外，通过封闭的允许列表暴露这一个产品 namespace，同时不会把它的变更视为模型目录失效事件。 -**并发 loopback 视图无需陈旧的整体替换即可收敛。** 确认写入有意省略 `expectedRevision`：每个 loopback 标签页都向同一路径写入相同版本，因此该操作是幂等的，并会保留同级字段，而不是重建整个分节。`settings/document-updated` 以失效通知形式到达客户端——当时经 `host/settings-changed`，现在则是原样转发（[转发的 Remote 事件](../architecture/2026-08-10-remote-event-delivery.md)）；另一个标签页或外部编辑器提交当前版本后，已挂载的 loopback 标签页会重新拉取状态并推进。API Proxy（`@deepseek-ai/dsh-host-apiproxy`）在可配置提供方 namespace 之外，通过封闭的允许列表暴露这一个产品 namespace，同时不会把它的变更视为模型目录失效事件。 - -**引导流程会暂时接管视口，形成一个连续阶段。** 纯色产品界面通过挂载到 `body` 的 portal 取代完整的应用视图，并将底层应用根节点标记为 inert；严格符合要求的遮罩仍挂载在该界面后方，并保留 `position:absolute`、left/right/bottom 偏移量为零、`top:80px`、`rgba(0, 0, 0, 0.24)` 和 `backdrop-filter: blur(2px)`。欢迎页和按条件显示的凭据设置页在这一阶段中依次呈现，而不是各自作为独立的模态窗口。两个页面都复用 Web UI 的黑色 `BrandWordmark`。欢迎页在 `内测声明` 标题下逐字保留既定的四段文案；所有段落统一采用 16/28 的正文字号与行高，只有最后一段中指定的行动语句使用较为克制的 500 字重。短暂的错落式透明度与纵向位移动画营造出节奏感，但不会阻碍交互，并会在用户启用减少动态效果时禁用。初始焦点落在标题上，「继续」是唯一按钮，且不存在关闭、Escape 或点击遮罩的退出路径。 +**引导流程会暂时接管视口，形成一个连续阶段。** 纯色产品界面通过挂载到 `body` 的 portal 取代完整的应用视图，并将底层应用根节点标记为 inert；严格符合要求的遮罩仍挂载在该界面后方，并保留 `position:absolute`、left/right/bottom 偏移量为零、`top:80px`、`rgba(0, 0, 0, 0.24)` 和 `backdrop-filter: blur(2px)`。引导步骤在这一阶段中依次呈现，而不是各自作为独立的模态窗口，并复用 Web UI 的黑色 `BrandWordmark`；按条件显示的凭据设置页是当前唯一的页面。 ## 曾考虑的替代方案 @@ -32,4 +30,4 @@ GUI 的凭据引导从 DeepSeek 专用的就绪状态检查开始，但内部测 ## 后果 -全新 profile 始终会在提供方专用引导之前看到欢迎通知；凭据已经配置时，只会跳过后续 DeepSeek 步骤。在 loopback 上，点击「继续」后重新加载不会再次显示已确认版本，更改文案所有者文件中的版本值会让通知重新出现，而确认前关闭窗口不会改变下次启动。在非 loopback 上，「继续」会在不发起受保护 settings 请求的情况下推进当前进程，重新加载则再次显示通知。针对性的 store 与 React 测试固化了两种持久化模式、精确版本比较、写入失败、单一操作、不可关闭路径、协调器顺序、按条件移交 DeepSeek 步骤和 HMR（热模块替换）清理行为。真实 Chromium 场景会使用隔离的 harness 家目录启动随产品提供的 Web 组合，验证遮罩的精确几何尺寸和计算样式，在确认前后分别重新加载，继续进入凭据缺失设置流程，确认凭据已配置时确认版本不匹配仍会使通知重新出现，并检查浏览器控制台。 +全新 profile 直接进入提供方专用引导：DeepSeek 步骤仅在其凭据缺失时挂载，凭据已配置时不会出现任何引导页面。针对性的 store 与 React 测试固化了协调器顺序、按条件移交 DeepSeek 步骤和 HMR（热模块替换）清理行为。真实 Chromium 场景会使用隔离的 harness 家目录启动随产品提供的 Web 组合，在凭据步骤占据视口时验证遮罩的精确几何尺寸和计算样式，继续进入凭据缺失设置流程，并检查浏览器控制台。 diff --git a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.i18n.yaml b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.i18n.yaml index be70f91180..7a3b82d3a6 100644 --- a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-08-10-telemetry-default-off.md -2026-08-10-telemetry-default-off.md: a4f0099565bb240cf62774fab2d5ad5f7de90e95 -2026-08-10-telemetry-default-off.zh.md: 8e2544eb7dee8b9bd6b8a4c81a28a8a03d3404d4 +2026-08-10-telemetry-default-off.md: 1979597eb81ecc7413996b7eb4fbe0e270abc629 +2026-08-10-telemetry-default-off.zh.md: 25d675c69568a30ad754b301139b30ef0e8ffe3d diff --git a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.md b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.md index a4f0099565..1979597eb8 100644 --- a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.md +++ b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.md @@ -14,7 +14,7 @@ Both feeds use `DSH_TELEMETRY_MODE` as their positive consent setting. Unset and The dsh-sdk launcher reads the same variable without parsing `cordis.yml` or booting Cordis. `FULL` permits reporting; `FEEDBACK_ONLY`, `DISABLED`, unset, and empty values deny it. Consent is frozen from the launching environment before the command runs, because `dsh-sdk start` loads a project `.env` and project code can mutate `process.env`: resolving afterwards would let a project grant reporting of its own configuration, which the [configuration source ownership decision](../architecture/2026-08-04-configuration-source-ownership.md) denies for the whole `DSH_*` namespace. An unsupported mode denies rather than throwing at that boundary, since telemetry may never change a command's result. This rule superseded the default-on launcher consent before the launcher and its proposal were deleted by the [SDK project toolchain removal](../simplification/2026-08-11-remove-sdk-project-toolchain.md). -The versioned Web welcome notice states that Session Log upload is off by default, names `DSH_TELEMETRY_MODE=FEEDBACK_ONLY` and `DSH_TELEMETRY_MODE=FULL` as the two opt-in choices, and discloses that `FULL` also enables dsh-sdk command telemetry. Its version changes with that material privacy statement so every profile acknowledges the current copy. +The repository README states that Session Log upload is off by default, names `DSH_TELEMETRY_MODE=FEEDBACK_ONLY` and `DSH_TELEMETRY_MODE=FULL` as the two opt-in choices, and discloses that `FULL` also enables dsh-sdk command telemetry. The product itself presents no prompt about enabling telemetry since the [first-run beta notice removal](../simplification/2026-08-13-remove-first-run-beta-notice.md). ## Alternatives considered diff --git a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.zh.md b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.zh.md index 8e2544eb7d..25d675c695 100644 --- a/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.zh.md +++ b/.agents/notes/implemented/feature/2026-08-10-telemetry-default-off.zh.md @@ -14,7 +14,7 @@ DeepSeek Harness 有两路出站遥测数据流。在内测阶段，共享基础 dsh-sdk 启动器读取同一变量，不解析 `cordis.yml`，也不启动 Cordis。`FULL` 允许上报；`FEEDBACK_ONLY`、`DISABLED`、未设置和空值都会拒绝。授权在命令执行前从启动环境冻结：`dsh-sdk start` 会加载项目 `.env`，项目代码也能修改 `process.env`，若在执行后解析，项目便能自行授权上报其自身配置，而[配置来源所有权决策](../architecture/2026-08-04-configuration-source-ownership.md)对整个 `DSH_*` 命名空间禁止这种行为。在该边界上，不受支持的模式按拒绝处理而非抛出，因为遥测不得改变命令结果。此规则在启动器及其提案被[SDK 项目工具链移除决策](../simplification/2026-08-11-remove-sdk-project-toolchain.md)删除之前，仅取代了启动器默认允许上报的规则。 -带版本的 Web 欢迎通知说明会话日志上传默认关闭，将 `DSH_TELEMETRY_MODE=FEEDBACK_ONLY` 和 `DSH_TELEMETRY_MODE=FULL` 列为两种显式启用选项，并披露 `FULL` 同时会启用 dsh-sdk 命令遥测。其版本随这项重要的隐私声明一同变更，使每个 profile 都确认当前文案。 +仓库 README 说明会话日志上传默认关闭，将 `DSH_TELEMETRY_MODE=FEEDBACK_ONLY` 和 `DSH_TELEMETRY_MODE=FULL` 列为两种显式启用选项，并披露 `FULL` 同时会启用 dsh-sdk 命令遥测。自[移除首次启动内测声明](../simplification/2026-08-13-remove-first-run-beta-notice.md)起，产品本身不提供任何关于开启遥测的提示。 ## 考虑过的替代方案 diff --git a/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.i18n.yaml b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.i18n.yaml new file mode 100644 index 0000000000..a040b192f2 --- /dev/null +++ b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.md +2026-08-13-remove-first-run-beta-notice.md: e0876e5e96e04fed5e47adc0f83b1c7bfa4f2519 +2026-08-13-remove-first-run-beta-notice.zh.md: 8598fc28dda1ff5404e3c06fc8e2aaadca4cd471 diff --git a/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.md b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.md new file mode 100644 index 0000000000..e0876e5e96 --- /dev/null +++ b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.md @@ -0,0 +1,25 @@ +# Agent Note: Remove the first-run beta notice + +Status: implemented + +English | [中文](2026-08-13-remove-first-run-beta-notice.zh.md) + +## Problem + +Every GUI first launch opened with a full-viewport internal-test statement (内测声明): internal-beta framing plus instructions for enabling Session Log upload through `DSH_TELEMETRY_MODE`. Session telemetry already resolves to `DISABLED` when its mode is unset ([telemetry default-off](../feature/2026-08-10-telemetry-default-off.md)), so the only onboarding content about telemetry was a prompt explaining how to turn it on, and the internal-test framing itself must not ship in a release build. + +## Decision + +The first-run notice is removed from the assembled product rather than reworded. `ui-settings-general` seats no `settings.onboarding` step; the notice component, its durable acknowledgement store, its copy owner, and its locale keys are deleted. The `settings.onboarding` coordinator and its takeover stage stay ([ordered onboarding](../feature/2026-07-30-versioned-gui-welcome-onboarding.md)), and the conditional DeepSeek credential step is the only shipped occupant. The Host half still registers the `ui-onboarding` settings namespace: its `welcomeNoticeVersion` field keeps acknowledgements already stored in `$DSH_HOME/settings.yaml` valid, and nothing reads or writes it. Telemetry opt-in remains an explicit deployment environment choice documented in the repository README; the product presents no prompt about enabling it. + +## Alternatives considered + +**Keep the notice and only drop its telemetry paragraph.** Rejected: the internal-test framing is what a release must not present, and a mandatory first-run interstitial with no material statement left is pure friction. + +**Ask for upload consent instead (a versioned consent step).** Rejected for this release: a first-run question about enabling upload is still a telemetry prompt. A future consent flow can register through the unchanged `settings.onboarding` seam and use a fresh versioned field for re-acknowledgement. + +**Deregister the `ui-onboarding` namespace as well.** Rejected: existing settings documents already carry the section, and the settings seam validates stored documents against registered namespaces; keeping the registration keeps those documents valid at no cost. + +## Consequences + +A fresh profile boots into the credential step when the DeepSeek credential is missing and directly into the product otherwise; no full-viewport notice precedes either. The assembled onboarding scenario starts at the credential step, the remote-notice scenario is deleted with the feature, and the goal-bar fixture keeps the settings shell disabled because the fixture API client rejects settings traffic. Restoring a first-run notice requires a new onboarding registration and a new versioned field; the retained namespace does not resurrect the old acknowledgement semantics. diff --git a/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.zh.md b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.zh.md new file mode 100644 index 0000000000..8598fc28dd --- /dev/null +++ b/.agents/notes/implemented/simplification/2026-08-13-remove-first-run-beta-notice.zh.md @@ -0,0 +1,25 @@ +# Agent Note: 移除首次启动内测声明 + +Status: implemented + +[English](2026-08-13-remove-first-run-beta-notice.md) | 中文 + +## 问题 + +GUI 每次首启都会先显示占满视口的内测声明：内部测试的定位表述，加上通过 `DSH_TELEMETRY_MODE` 开启 Session Log 上传的说明。会话遥测在 mode 未设置时已解析为 `DISABLED`（[遥测默认关闭](../feature/2026-08-10-telemetry-default-off.md)），因此引导流程中关于遥测的全部内容就是一段教用户如何开启的提示，而内部测试的定位表述本身也不应出现在发布版本里。 + +## 决策 + +首启声明从组装后的产品中整体移除，而不是改写。`ui-settings-general` 不再注册任何 `settings.onboarding` 步骤；声明组件、其持久化确认 store、文案所有者文件和 locale 键全部删除。`settings.onboarding` 协调器及其接管式展示阶段保留（[有序引导](../feature/2026-07-30-versioned-gui-welcome-onboarding.md)），按条件显示的 DeepSeek 凭据步骤是当前唯一的注册方。宿主端仍注册 `ui-onboarding` 设置 namespace：其中的 `welcomeNoticeVersion` 字段让 `$DSH_HOME/settings.yaml` 中已写入的确认记录保持有效，没有任何代码读取或写入它。遥测的开启仍是显式的部署环境变量选择，记录在仓库 README 中；产品界面不出现任何关于开启遥测的提示。 + +## 曾考虑的替代方案 + +**保留声明，只删除其中的遥测段落。** 不予采用：发布版本不应呈现的正是内部测试的定位表述本身，而一个没有实质内容的强制首启插页只剩下打扰。 + +**改为询问上传同意（版本化的同意步骤）。** 本次发布不予采用：首启询问是否开启上传仍然是一个遥测提示。未来的同意流程可以通过保持不变的 `settings.onboarding` seam 注册，并使用新的版本化字段做重新确认。 + +**连 `ui-onboarding` namespace 一起注销。** 不予采用：既有设置文档已经包含该分节，而设置 seam 会用已注册的 namespace 校验存储文档；保留注册就能让这些文档继续有效，且没有额外成本。 + +## 后果 + +全新 profile 在缺少 DeepSeek 凭据时直接进入凭据步骤，凭据已配置时直接进入产品，两种情况都没有占满视口的声明。组装级引导场景从凭据步骤开始，远程声明场景随功能一并删除，goal-bar fixture 继续禁用设置外壳，因为 fixture API 客户端会拒绝设置请求。将来若要恢复首启声明，需要新的引导注册和新的版本化字段；保留的 namespace 不会复活旧的确认语义。 diff --git a/apps/web/tests/README.i18n.yaml b/apps/web/tests/README.i18n.yaml index a6005ade32..fd0b89b541 100644 --- a/apps/web/tests/README.i18n.yaml +++ b/apps/web/tests/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write apps/web/tests/README.md -README.md: 68e5db5af5f816cc982bacb7989d996c859be204 -README.zh.md: f366c28024dab89d0243a60d93a706f220fa8fb8 +README.md: 4d7236ef69189845dbc2847289d497fc54c94ae9 +README.zh.md: 21c2f2ce7ccc8fe5314d766c06235453aa292031 diff --git a/apps/web/tests/README.md b/apps/web/tests/README.md index 68e5db5af5..4d7236ef69 100644 --- a/apps/web/tests/README.md +++ b/apps/web/tests/README.md @@ -29,9 +29,8 @@ artifact it produces itself. When a scenario needs a Client-owned constant or pure function, mirror it here instead, next to the commented-out import that names the source module. A drift -then surfaces as a missed selector or an unsuppressed notice — a loud failure, -never a silent pass. `scaffold.ts` holds the mirrored welcome-notice values and -exports them for the scenarios that assert on them. +then surfaces as a missed selector or a stale mirrored value — a loud failure, +never a silent pass. Two kinds of Client import stand. `assembled-boot.ts` drives the shell itself, so it imports `AppWebEntry` from `@deepseek-ai/dsh-client-web` and the boot-manifest diff --git a/apps/web/tests/README.zh.md b/apps/web/tests/README.zh.md index f366c28024..21c2f2ce7c 100644 --- a/apps/web/tests/README.zh.md +++ b/apps/web/tests/README.zh.md @@ -23,8 +23,8 @@ Client face，而该 face 必须等 Host tsdown 生成 `@deepseek-ai/dsh-goal/re 于是 Host 构建阶段变成在等一个由它自己产出的产物。 当某个场景需要 Client 持有的常量或纯函数时，改为在此处镜像一份，并紧挨着一条注释掉的 -import 点明源模块。这样漂移会表现为选择器未命中或提示未被抑制——是响亮的失败，绝不会是静默 -通过。`scaffold.ts` 持有镜像的 welcome-notice 取值，并导出给断言它们的场景使用。 +import 点明源模块。这样漂移会表现为选择器未命中或镜像值过期——是响亮的失败，绝不会是静默 +通过。 有两类 Client import 是长期成立的。`assembled-boot.ts` 驱动 shell 本身，因此它从 `@deepseek-ai/dsh-client-web` import `AppWebEntry`、从 diff --git a/apps/web/tests/goal-bar.e2e.ts b/apps/web/tests/goal-bar.e2e.ts index 00260a79ee..f4a0d8d34b 100644 --- a/apps/web/tests/goal-bar.e2e.ts +++ b/apps/web/tests/goal-bar.e2e.ts @@ -26,7 +26,7 @@ describe('web e2e: goal bar clear convergence', () => { let tripwire: ReturnType beforeAll(async () => { - scaffold = await launchWebScaffold({ extraOverlayPath: OVERLAY, welcomeNoticePending: true }) + scaffold = await launchWebScaffold({ extraOverlayPath: OVERLAY }) browser = await chromium.launch() page = await newEnglishPage(browser) tripwire = watchConsole(page) diff --git a/apps/web/tests/goal-bar.overlay.yml b/apps/web/tests/goal-bar.overlay.yml index 2594d6a3e9..4e9e382bb8 100644 --- a/apps/web/tests/goal-bar.overlay.yml +++ b/apps/web/tests/goal-bar.overlay.yml @@ -1,5 +1,5 @@ -# The client-side FixtureApiClient intentionally rejects settings writes, so -# this goal-only scenario omits the durable welcome step that would otherwise -# cover the page. Onboarding owns separate assembled-browser coverage. +# The client-side FixtureApiClient intentionally rejects settings traffic, so +# this goal-only scenario omits the settings shell and the onboarding steps it +# would mount. Onboarding owns separate assembled-browser coverage. - id: ui-settings-general disabled: true diff --git a/apps/web/tests/onboarding-deepseek-config.e2e.ts b/apps/web/tests/onboarding-deepseek-config.e2e.ts index 5572e834ad..08cfeda4d3 100644 --- a/apps/web/tests/onboarding-deepseek-config.e2e.ts +++ b/apps/web/tests/onboarding-deepseek-config.e2e.ts @@ -10,15 +10,11 @@ import { chromium } from 'playwright' import { afterAll, beforeAll, describe, expect, it, onTestFailed } from 'vitest' import { acknowledgeReloadConnectionLoss, assertFixtureInventory, captureStableAria, compareOrRefreshGolden, - WELCOME_NOTICE_SETTINGS_NAMESPACE, WELCOME_NOTICE_ACK_FIELD, - WELCOME_NOTICE_VERSION, WELCOME_NOTICE_COPY, launchWebScaffold, watchConsole, webSnapshotMode, type WebScaffold, } from './scaffold.ts' import { ZH_BROWSER_LOCALE, connectFreshWorkspaceZh, saveFailureShot } from './support.ts' -import { settingsNamespace } from '@deepseek-ai/dsh-settings' const SNAPSHOT_DIR = fileURLToPath(new URL('./snapshots/onboarding-deepseek-config', import.meta.url)) -const WELCOME_EXPECTED = join(SNAPSHOT_DIR, 'welcome.expected.md') const MISSING_EXPECTED = join(SNAPSHOT_DIR, 'missing.expected.md') const MODELS_EXPECTED = join(SNAPSHOT_DIR, 'models.expected.md') const MODE = webSnapshotMode() @@ -31,7 +27,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup const browserConsole: string[] = [] beforeAll(async () => { - scaffold = await launchWebScaffold({ deepSeekMissingCredential: true, welcomeNoticePending: true }) + scaffold = await launchWebScaffold({ deepSeekMissingCredential: true }) browser = await chromium.launch() // The scenario asserts the shipped Chinese copy, so the browser asks for it. page = await browser.newPage({ viewport: { width: 1440, height: 960 }, locale: ZH_BROWSER_LOCALE }) @@ -48,13 +44,9 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup it('stores a key write-only and observes configured state without restarting', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-onboarding-deepseek-config')) - const welcome = page.getByRole('region', { name: WELCOME_NOTICE_COPY.zh.title }) - await welcome.waitFor({ timeout: 15_000 }) + const credentialStep = page.getByRole('region', { name: '添加一个 API Key 开始使用' }) + await credentialStep.waitFor({ timeout: 15_000 }) expect(await page.locator('#root').evaluate(root => (root as HTMLElement).inert)).toBe(true) - const welcomeAria = await captureStableAria(page, '[role="region"]', scaffold.workspaceCwd) - await compareOrRefreshGolden(WELCOME_EXPECTED, welcomeAria, MODE) - expect(await welcome.getByRole('button').allTextContents()).toEqual([WELCOME_NOTICE_COPY.zh.continueLabel]) - expect(await welcome.locator('button').count()).toBe(1) const mask = page.locator('[class*="onboardingMask"]') expect(await mask.count()).toBe(1) @@ -83,17 +75,6 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup rect: { left: 0, top: 80, right: 1440, bottom: 960 }, }) - // Closing the process/page before acknowledgement writes nothing, so the - // same durable profile presents the notice again after reload. - const firstReloadWarnings = tripwire.warnings.length - await page.reload({ waitUntil: 'load' }) - acknowledgeReloadConnectionLoss(tripwire, firstReloadWarnings) - await welcome.waitFor({ timeout: 15_000 }) - - await welcome.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel }).click() - await welcome.waitFor({ state: 'detached', timeout: 15_000 }) - const credentialStep = page.getByRole('region', { name: '添加一个 API Key 开始使用' }) - await credentialStep.waitFor({ timeout: 15_000 }) expect(await credentialStep.getByRole('textbox').count()).toBe(0) const initial = await captureStableAria(page, '[role="region"]', scaffold.workspaceCwd) await compareOrRefreshGolden(MISSING_EXPECTED, initial, MODE) @@ -129,27 +110,10 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup { timeout: 10_000 }, ).toBe('已配置——输入新值可替换') - const acknowledgedSettings = await readFile(join(scaffold.harnessHome, 'settings.yaml'), 'utf8') - expect(acknowledgedSettings).toContain(`${WELCOME_NOTICE_ACK_FIELD}: ${WELCOME_NOTICE_VERSION}`) - const secondReloadWarnings = tripwire.warnings.length await page.reload({ waitUntil: 'load' }) acknowledgeReloadConnectionLoss(tripwire, secondReloadWarnings) await page.waitForSelector('[class*="frame"]', { timeout: 15_000 }) - expect(await page.getByRole('region', { name: WELCOME_NOTICE_COPY.zh.title }).count()).toBe(0) - expect(await page.getByRole('region', { name: '添加一个 API Key 开始使用' }).count()).toBe(0) - - // A different stored copy version represents an intentional version bump: - // the welcome step returns even though the credential is already ready. - await scaffold.ctx.settings.mutate(settingsNamespace(WELCOME_NOTICE_SETTINGS_NAMESPACE), [{ - op: 'set', path: [WELCOME_NOTICE_ACK_FIELD], value: 'previous-copy-version', - }]) - const thirdReloadWarnings = tripwire.warnings.length - await page.reload({ waitUntil: 'load' }) - acknowledgeReloadConnectionLoss(tripwire, thirdReloadWarnings) - await welcome.waitFor({ timeout: 15_000 }) - await welcome.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel }).click() - await welcome.waitFor({ state: 'detached', timeout: 15_000 }) expect(await page.getByRole('region', { name: '添加一个 API Key 开始使用' }).count()).toBe(0) expect((await page.content()).includes(secret)).toBe(false) @@ -161,8 +125,8 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup it('never paints the takeover chrome on a configured reload, even with the settings join held open', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-onboarding-configured-reload')) - // Regression pin for the reload white flash: both steps are satisfied - // (welcome acknowledged, credential configured), yet each must LOAD its + // Regression pin for the reload white flash: the credential step is + // satisfied (credential configured), yet it must LOAD its // private join before it can decide not to show. The chrome lives inside // the step (OnboardingSurface), so the deciding window paints and blocks // nothing. Holding settings.describe widens that window from loopback @@ -214,7 +178,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup it('configures arbitrary DeepSeek models and prompts after the selected model is removed', async () => { onTestFailed(() => saveFailureShot(page, 'web-e2e-onboarding-deepseek-models')) // Opened here rather than inherited: the credential test reloads the page - // to exercise the welcome step, so nothing carries an open dialog across. + // after configuring the key, so nothing carries an open dialog across. await page.getByRole('button', { name: '设置', exact: true }).click() const settings = page.getByRole('dialog', { name: '设置' }) await settings.waitFor({ timeout: 10_000 }) @@ -264,7 +228,7 @@ describe.skipIf(MODE === 'record')('web e2e: first-run DeepSeek credential setup it('keeps the fixture inventory closed', async () => { await assertFixtureInventory( SNAPSHOT_DIR, - ['missing.expected.md', 'models.expected.md', 'welcome.expected.md'], + ['missing.expected.md', 'models.expected.md'], ) }) }) diff --git a/apps/web/tests/remote-welcome.e2e.ts b/apps/web/tests/remote-welcome.e2e.ts deleted file mode 100644 index 7187936ae9..0000000000 --- a/apps/web/tests/remote-welcome.e2e.ts +++ /dev/null @@ -1,53 +0,0 @@ -// Trusted non-loopback Web access must not wedge on the loopback-only -// settings API while the mandatory product notice owns the viewport. -import type { Browser, Page } from 'playwright' -import { chromium } from 'playwright' -import { afterAll, beforeAll, describe, expect, it } from 'vitest' -import { - acknowledgeReloadConnectionLoss, launchWebScaffold, watchConsole, webSnapshotMode, - WELCOME_NOTICE_COPY, - type WebScaffold, -} from './scaffold.ts' -import { ZH_BROWSER_LOCALE } from './support.ts' - -const MODE = webSnapshotMode() - -describe.skipIf(MODE === 'record')('web e2e: remote welcome notice', () => { - let scaffold: WebScaffold - let browser: Browser - let page: Page - let tripwire: ReturnType - - beforeAll(async () => { - scaffold = await launchWebScaffold({ remoteAuthority: 'remote.localhost', welcomeNoticePending: true }) - browser = await chromium.launch() - page = await browser.newPage({ viewport: { width: 1440, height: 960 }, locale: ZH_BROWSER_LOCALE }) - tripwire = watchConsole(page) - await page.goto(scaffold.baseUrl, { waitUntil: 'load' }) - await page.waitForSelector('#root', { timeout: 30_000 }) - }, 120_000) - - afterAll(async () => { - await browser?.close() - await scaffold?.close() - }) - - it('advances process-locally and presents the notice again after reload', async () => { - const welcome = page.getByRole('region', { name: WELCOME_NOTICE_COPY.zh.title }) - await welcome.waitFor({ timeout: 15_000 }) - expect(await page.locator('#root').evaluate(root => (root as HTMLElement).inert)).toBe(true) - - await welcome.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel }).click() - await welcome.waitFor({ state: 'detached', timeout: 15_000 }) - await expect.poll( - () => page.locator('#root').evaluate(root => (root as HTMLElement).inert), - { timeout: 15_000 }, - ).toBe(false) - const reloadWarnings = tripwire.warnings.length - await page.reload({ waitUntil: 'load' }) - acknowledgeReloadConnectionLoss(tripwire, reloadWarnings) - await welcome.waitFor({ timeout: 15_000 }) - expect(tripwire.warnings).toEqual([]) - expect(tripwire.pageErrors).toEqual([]) - }, 60_000) -}) diff --git a/apps/web/tests/scaffold.ts b/apps/web/tests/scaffold.ts index 970ff7b139..ecca13f0bc 100644 --- a/apps/web/tests/scaffold.ts +++ b/apps/web/tests/scaffold.ts @@ -41,20 +41,6 @@ import { loadOverlayPatches, } from '@deepseek-ai/dsh-app-boot' import { dshHomePath } from '@deepseek-ai/dsh-home-paths' -// Client packages must not be imported here: these e2e type-check in the Host -// aggregate, so a Client import pulls that package's whole project — and every -// project it references — into the Host build graph. Mirrored from -// packages/client/ui-settings-general/src/onboarding-copy.ts; a drift makes the -// pre-acknowledgement stop suppressing the notice, which fails loudly. -// import { -// WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_SETTINGS_NAMESPACE, WELCOME_NOTICE_VERSION, WELCOME_NOTICE_COPY, -// } from '@deepseek-ai/dsh-client-ui-settings-general' -export const WELCOME_NOTICE_SETTINGS_NAMESPACE = 'ui-onboarding' -export const WELCOME_NOTICE_ACK_FIELD = 'welcomeNoticeVersion' -export const WELCOME_NOTICE_VERSION = '2026-08-11.1' -export const WELCOME_NOTICE_COPY = { zh: { title: '内测声明', continueLabel: '继续' } } as const - -import { settingsNamespace } from '@deepseek-ai/dsh-settings' import { LlmAdapter } from '@deepseek-ai/dsh-llm' import type { LlmModelInfo, LlmProviderInfo, LlmResolvedModelInfo, StreamChunk, @@ -252,8 +238,6 @@ export interface LaunchOptions { /** The preset a session that names none is composed from. */ default: string } - /** Leave the current welcome notice unacknowledged; ordinary scenarios publish it as complete before browser boot. */ - welcomeNoticePending?: boolean /** * Mount the shipped telemetry row in FULL mode against this exporter URL * instead of disabling it. Used to pin a real backend disclosure in @@ -526,11 +510,6 @@ export async function launchWebScaffold(options: LaunchOptions = {}): Promise - {paragraph.slice(0, index)} - {emphasis} - {paragraph.slice(index + emphasis.length)} - - ) -} - -/** Registrant-owned dependencies of {@link WelcomeNotice}. */ -export interface WelcomeNoticeInjected { - controller: WelcomeNoticeStore - useSnapshot: SnapshotSelectorHook -} - -/** Coordinator owner props plus the welcome step's injected face. */ -export type WelcomeNoticeProps = - PropsRuntime<'settings.onboarding'> & PropsLocale<'settings'> & WelcomeNoticeInjected - -/** Render the mandatory notice until its current version is acknowledged. */ -export function WelcomeNotice(props: WelcomeNoticeProps): ReactNode { - const { complete, controller, useSnapshot, t } = props - const state = useSnapshot(snapshot => snapshot) - const finished = useRef(false) - const titleRef = useRef(null) - const finish = useCallback((): void => { - if (finished.current) return - finished.current = true - complete() - }, [complete]) - - useEffect(() => { - if (state.status === 'idle') void controller.load() - }, [controller, state.status]) - - useEffect(() => { - if (state.acknowledged) finish() - }, [finish, state.acknowledged]) - - useEffect(() => { - if (state.status === 'ready' && !state.acknowledged) titleRef.current?.focus() - }, [state.acknowledged, state.status]) - - // Null while the acknowledgement fact is still loading (or already given): - // the takeover chrome below is part of THIS render, so deciding not to - // show paints and blocks nothing. - if (state.status === 'idle' || state.status === 'loading' || state.acknowledged) return null - - const acknowledge = async (): Promise => { - if (await controller.acknowledge()) finish() - } - - return ( - -
- -

{t('welcome.title')}

-

{t('welcome.paragraph.0')}

-
{t('welcome.paragraph.1')}
-

- {emphasizedFeedback(t('welcome.paragraph.2'), t('welcome.feedbackEmphasis'))} -

- {state.error === null ? null :

{t('welcome.error')}

} -
- -
-
- - ) -} diff --git a/packages/client/ui-settings-general/src/client/index.ts b/packages/client/ui-settings-general/src/client/index.ts index 3a868dc3b4..e1a94934c7 100644 --- a/packages/client/ui-settings-general/src/client/index.ts +++ b/packages/client/ui-settings-general/src/client/index.ts @@ -17,9 +17,6 @@ import { bindSnapshotSelector } from '@deepseek-ai/dsh-client-web-react' import type {} from '@deepseek-ai/dsh-client-ui-settings/client' // Type-only: pulls ctx.locale into this program. import type {} from '@deepseek-ai/dsh-client-locale/client' -// Type-only: pulls the ctx.remote merge and the forwarded-event key face -// (the settings invalidation rides the allowlist) into this program. -import type {} from '@deepseek-ai/dsh-api-remotes/client' import type { SettingsOnboardingStep, SettingsRootInjected, SettingsSectionRow, } from './shell-contract.ts' @@ -29,10 +26,6 @@ import { GeneralSection } from './GeneralSection.tsx' import { SettingsDocumentAction } from './SettingsDocumentAction.tsx' import type { SettingsDocumentActionInjected } from './SettingsDocumentAction.tsx' import { refreshDocumentIfLoaded, SettingsDocumentStore } from './settings-document-store.ts' -import type { WelcomeNoticeInjected } from './WelcomeNotice.tsx' -import { WelcomeNotice } from './WelcomeNotice.tsx' -import { refreshWelcomeIfLoaded, WelcomeNoticeStore } from './welcome-store.ts' -import { WELCOME_NOTICE_SETTINGS_NAMESPACE } from '../onboarding-copy.ts' import { en, zh, type SettingsKey } from './locales.ts' export type { @@ -44,8 +37,6 @@ export type { export type { SettingsDocumentActionInjected, SettingsDocumentActionProps } from './SettingsDocumentAction.tsx' export type { SettingsDocumentState } from './settings-document-store.ts' export { SettingsDocumentStore } from './settings-document-store.ts' -export type { WelcomeNoticeInjected, WelcomeNoticeProps } from './WelcomeNotice.tsx' -export type { WelcomeNoticeState } from './welcome-store.ts' export type { SettingsKey } from './locales.ts' declare module '@deepseek-ai/dsh-client-ui-slots' { @@ -63,7 +54,7 @@ const NS = 'settings' * ui-settings' apply, whose activation order relative to this one is NOT * constrained; registrations depend on their slots through `slots.inject()`. */ -export const inject = ['slots', 'locale', 'connection', 'remote'] +export const inject = ['slots', 'locale', 'connection'] /** * Register the `settings` dictionaries, the chrome content, and the General @@ -87,27 +78,9 @@ export function apply(ctx: ClientContext): void { const useSnapshot = bindSnapshotSelector(documentController.store) return (): SettingsDocumentActionInjected => ({ controller: documentController, useSnapshot }) })() - const welcomeController = new WelcomeNoticeStore(connection.api, connection.isLoopback ? 'host' : 'memory') - const useWelcomeSnapshot = bindSnapshotSelector(welcomeController.store) - const welcomeInjected = (): WelcomeNoticeInjected => ({ - controller: welcomeController, - useSnapshot: useWelcomeSnapshot, - }) - - ctx.effect(() => { - const refresh = (): void => { refreshWelcomeIfLoaded(welcomeController) } - const disposers = [ - ctx.remote.$on('settings/document-updated', (ns) => { - if (ns !== WELCOME_NOTICE_SETTINGS_NAMESPACE) return - refresh() - }), - ctx.on('connection/reset', () => { - refresh() - refreshDocumentIfLoaded(documentController) - }), - ] - return () => { for (const dispose of disposers) dispose() } - }, 'ui-settings-general: metadata invalidations') + ctx.effect(() => ctx.on('connection/reset', () => { + refreshDocumentIfLoaded(documentController) + }), 'ui-settings-general: metadata invalidations') // The settings shell: this package occupies the sidebar-owned hole and // declares the settings slots. Ledger → nav-row projection as an observable // source (uSES contract: getSnapshot returns the cached rows until the @@ -202,11 +175,4 @@ export function apply(ctx: ClientContext): void { locale: NS, children: { 'settings.general.item': { kind: 'list', scope: 'root' } }, }, GeneralSection)) - ctx.slots.inject('settings.onboarding', () => ctx.slots.register({ - name: 'settings.onboarding', - id: 'welcome-notice', - order: -100, - locale: NS, - inject: welcomeInjected, - }, WelcomeNotice)) } diff --git a/packages/client/ui-settings-general/src/client/locales.ts b/packages/client/ui-settings-general/src/client/locales.ts index 41a44eae3f..a557855323 100644 --- a/packages/client/ui-settings-general/src/client/locales.ts +++ b/packages/client/ui-settings-general/src/client/locales.ts @@ -1,5 +1,4 @@ -/** Shell chrome, General-nav, and welcome-notice dictionaries; feature rows own their copy. */ -import { WELCOME_NOTICE_COPY } from '../onboarding-copy.ts' +/** Shell chrome and General-nav dictionaries; feature rows own their copy. */ /** Simplified Chinese dictionary (the key-set source of truth). */ export const zh = { @@ -9,13 +8,6 @@ export const zh = { 'openDocument': '打开配置文件', 'openDocument.error': '无法打开配置文件', 'general.nav': '通用设置', - 'welcome.title': WELCOME_NOTICE_COPY.zh.title, - 'welcome.paragraph.0': WELCOME_NOTICE_COPY.zh.paragraphs[0], - 'welcome.paragraph.1': WELCOME_NOTICE_COPY.zh.paragraphs[1], - 'welcome.paragraph.2': WELCOME_NOTICE_COPY.zh.paragraphs[2], - 'welcome.feedbackEmphasis': WELCOME_NOTICE_COPY.zh.feedbackEmphasis, - 'welcome.continue': WELCOME_NOTICE_COPY.zh.continueLabel, - 'welcome.error': '暂时无法保存确认状态，请重试。', } satisfies Record /** The settings namespace key union. */ @@ -29,11 +21,4 @@ export const en = { 'openDocument': 'Open configuration file', 'openDocument.error': 'Could not open configuration file', 'general.nav': 'General', - 'welcome.title': WELCOME_NOTICE_COPY.en.title, - 'welcome.paragraph.0': WELCOME_NOTICE_COPY.en.paragraphs[0], - 'welcome.paragraph.1': WELCOME_NOTICE_COPY.en.paragraphs[1], - 'welcome.paragraph.2': WELCOME_NOTICE_COPY.en.paragraphs[2], - 'welcome.feedbackEmphasis': WELCOME_NOTICE_COPY.en.feedbackEmphasis, - 'welcome.continue': WELCOME_NOTICE_COPY.en.continueLabel, - 'welcome.error': 'The acknowledgement could not be saved. Please try again.', } satisfies Record diff --git a/packages/client/ui-settings-general/src/client/welcome-store.ts b/packages/client/ui-settings-general/src/client/welcome-store.ts deleted file mode 100644 index 48f96bcb94..0000000000 --- a/packages/client/ui-settings-general/src/client/welcome-store.ts +++ /dev/null @@ -1,128 +0,0 @@ -/** Welcome-notice state, durable when the browser may use Host settings. */ - -import type { IApiClient, SettingsNamespaceView } from '@deepseek-ai/dsh-api-remotes/client' -import type { SnapshotStore } from '@deepseek-ai/dsh-client-runtime/client' -import { createSnapshotStore } from '@deepseek-ai/dsh-client-runtime/client' -import { - WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_SETTINGS_NAMESPACE, WELCOME_NOTICE_VERSION, -} from '../onboarding-copy.ts' - -/** State rendered by the welcome step. */ -export interface WelcomeNoticeState { - status: 'idle' | 'loading' | 'ready' | 'saving' | 'error' - acknowledged: boolean - error: string | null -} - -function messageOf(error: unknown): string { - return error instanceof Error ? error.message : String(error) -} - -function acknowledgementOf(view: SettingsNamespaceView): string | undefined { - if (typeof view.value !== 'object' || view.value === null) return undefined - const value = (view.value as Record)[WELCOME_NOTICE_ACK_FIELD] - return typeof value === 'string' ? value : undefined -} - -/** Coordinates durable Host acknowledgement or a process-local remote fallback. */ -export class WelcomeNoticeStore { - /** uSES-safe state source shared by the registered welcome step. */ - readonly store: SnapshotStore = createSnapshotStore({ - status: 'idle', acknowledged: false, error: null, - }) - - private generation = 0 - - /** - * @param api - settings wire face used for durable reads and writes. - * @param persistence - remote browsers use memory because settings is loopback-only. - */ - constructor( - private readonly api: Pick, - private readonly persistence: 'host' | 'memory' = 'host', - ) {} - - /** Load the acknowledgement from Host settings or initialize process-local state. */ - async load(): Promise { - const generation = ++this.generation - if (this.persistence === 'memory') { - this.store.update((state) => { state.status = 'ready'; state.error = null }) - return - } - this.store.update((state) => { state.status = 'loading'; state.error = null }) - try { - const response = await this.api.settings.describe({}) - if (!response.result.ok) throw new Error(response.result.error.message) - const view = response.result.value.namespaces.find( - candidate => candidate.ns === WELCOME_NOTICE_SETTINGS_NAMESPACE, - ) - if (view === undefined) throw new Error('welcome acknowledgement settings are unavailable') - if (generation !== this.generation) return - this.store.update((state) => { - state.status = 'ready' - state.acknowledged = acknowledgementOf(view) === WELCOME_NOTICE_VERSION - state.error = null - }) - } catch (error) { - if (generation !== this.generation) return - this.store.update((state) => { - state.status = 'error' - state.acknowledged = false - state.error = messageOf(error) - }) - } - } - - /** - * Acknowledge this copy version. The Host path mutation is idempotent across - * tabs and preserves sibling settings; remote fallback changes only this store. - * @returns true when the selected persistence mode accepted the acknowledgement. - */ - async acknowledge(): Promise { - const generation = ++this.generation - if (this.persistence === 'memory') { - this.store.update((state) => { - state.status = 'ready' - state.acknowledged = true - state.error = null - }) - return true - } - this.store.update((state) => { state.status = 'saving'; state.error = null }) - try { - const response = await this.api.settings.mutate({ - ns: WELCOME_NOTICE_SETTINGS_NAMESPACE, - ops: [{ op: 'set', path: [WELCOME_NOTICE_ACK_FIELD], value: WELCOME_NOTICE_VERSION }], - }) - if (!response.result.ok) throw new Error(response.result.error.message) - if (generation === this.generation) { - this.store.update((state) => { - state.status = 'ready' - state.acknowledged = true - state.error = null - }) - } - return true - } catch (error) { - if (generation === this.generation) { - this.store.update((state) => { - state.status = 'error' - state.acknowledged = false - state.error = messageOf(error) - }) - } - return false - } - } -} - -/** - * Refresh only after welcome state has left idle. A memory-mode load retains - * acknowledgement so reconnect and settings-change refreshes do not reopen a - * process-local notice. - * @param controller - welcome state owner whose current status decides whether to load. - */ -export function refreshWelcomeIfLoaded(controller: WelcomeNoticeStore): void { - if (controller.store.getSnapshot().status === 'idle') return - void controller.load() -} diff --git a/packages/client/ui-settings-general/src/index.ts b/packages/client/ui-settings-general/src/index.ts index 0cea245db5..ce11f4e0be 100644 --- a/packages/client/ui-settings-general/src/index.ts +++ b/packages/client/ui-settings-general/src/index.ts @@ -3,28 +3,24 @@ import type { Context } from '@deepseek-ai/cordis' import z from '@deepseek-ai/schemastery' import { settingsNamespace } from '@deepseek-ai/dsh-settings' -import { - WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_SETTINGS_NAMESPACE, -} from './onboarding-copy.ts' -export { - WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_COPY, WELCOME_NOTICE_SETTINGS_NAMESPACE, - WELCOME_NOTICE_VERSION, -} from './onboarding-copy.ts' +/** Durable settings namespace for product-wide GUI onboarding facts. */ +const ONBOARDING_SETTINGS_NAMESPACE = 'ui-onboarding' interface OnboardingSettings { + /** Last welcome-notice version acknowledged by a since-removed first-run notice; kept so stored documents stay valid. */ welcomeNoticeVersion?: string } const OnboardingSettingsSchema: z = z.object({ - [WELCOME_NOTICE_ACK_FIELD]: z.string(), + welcomeNoticeVersion: z.string(), }) /** Register the durable GUI-onboarding section when a settings provider exists. */ export function apply(ctx: Context): void { ctx.inject(['settings'], (settingsCtx) => { settingsCtx.settings.register( - settingsNamespace(WELCOME_NOTICE_SETTINGS_NAMESPACE), + settingsNamespace(ONBOARDING_SETTINGS_NAMESPACE), OnboardingSettingsSchema, ) }) diff --git a/packages/client/ui-settings-general/src/invariant.ts b/packages/client/ui-settings-general/src/invariant.ts index adfd582ca6..10db92524e 100644 --- a/packages/client/ui-settings-general/src/invariant.ts +++ b/packages/client/ui-settings-general/src/invariant.ts @@ -16,7 +16,7 @@ export const inject = ['invariants'] /** * No runtime invariant: the settings seam validates and publishes the durable - * welcome section, while slot conflicts fail loud in the slot core. The local + * onboarding section, while slot conflicts fail loud in the slot core. The local * document action is browser state over typed RPC responses and is covered by * store/component tests rather than a Cordis runtime relationship. */ diff --git a/packages/client/ui-settings-general/src/onboarding-copy.ts b/packages/client/ui-settings-general/src/onboarding-copy.ts deleted file mode 100644 index 8b29402b4b..0000000000 --- a/packages/client/ui-settings-general/src/onboarding-copy.ts +++ /dev/null @@ -1,35 +0,0 @@ -/** Durable settings namespace for product-wide GUI onboarding facts. */ -export const WELCOME_NOTICE_SETTINGS_NAMESPACE = 'ui-onboarding' - -/** Field storing the last welcome notice version the user acknowledged. */ -export const WELCOME_NOTICE_ACK_FIELD = 'welcomeNoticeVersion' - -/** - * Bump only when the notice changes materially and every user should see it - * again. The acknowledgement is compared for exact equality. - */ -export const WELCOME_NOTICE_VERSION = '2026-08-11.1' - -/** The complete editable welcome notice in both supported GUI locales. */ -export const WELCOME_NOTICE_COPY = { - zh: { - title: '内测声明', - paragraphs: [ - '感谢您愿意拨冗试用 DeepSeek Harness。当前版本仍处于内部测试阶段，功能仍待完善，体验难免有些粗糙。', - '“如切如磋，如琢如磨。” 产品的成长，离不开一次次真实的碰撞与坦诚的反馈。您在真实使用中发现的问题，也可能促使我们重新审视，甚至推翻已有的设计。', - '内测版本默认不会上传 Session Log。如需在提交反馈时共享会话日志，可以设置环境变量 DSH_TELEMETRY_MODE=FEEDBACK_ONLY；如需持续上传，可以设置 DSH_TELEMETRY_MODE=FULL，但该模式同时会启用 dsh-sdk 命令遥测，上报匿名 ID、命令结果以及脱敏后的项目配置。另外，如果您有任何反馈与建议，请在企业微信群中留言告诉我们。每一条反馈，都会帮助我们把它打磨得更好。', - ], - feedbackEmphasis: '如果您有任何反馈与建议，请在企业微信群中留言告诉我们', - continueLabel: '继续', - }, - en: { - title: '内测声明', - paragraphs: [ - '感谢您愿意拨冗试用 DeepSeek Harness。当前版本仍处于内部测试阶段，功能仍待完善，体验难免有些粗糙。', - '“如切如磋，如琢如磨。” 产品的成长，离不开一次次真实的碰撞与坦诚的反馈。您在真实使用中发现的问题，也可能促使我们重新审视，甚至推翻已有的设计。', - '内测版本默认不会上传 Session Log。如需在提交反馈时共享会话日志，可以设置环境变量 DSH_TELEMETRY_MODE=FEEDBACK_ONLY；如需持续上传，可以设置 DSH_TELEMETRY_MODE=FULL，但该模式同时会启用 dsh-sdk 命令遥测，上报匿名 ID、命令结果以及脱敏后的项目配置。另外，如果您有任何反馈与建议，请在企业微信群中留言告诉我们。每一条反馈，都会帮助我们把它打磨得更好。', - ], - feedbackEmphasis: '如果您有任何反馈与建议，请在企业微信群中留言告诉我们', - continueLabel: '继续', - }, -} as const diff --git a/packages/client/ui-settings-general/tests/apply.client.spec.ts b/packages/client/ui-settings-general/tests/apply.client.spec.ts index 6c0f5131f2..d6c3ffff02 100644 --- a/packages/client/ui-settings-general/tests/apply.client.spec.ts +++ b/packages/client/ui-settings-general/tests/apply.client.spec.ts @@ -1,18 +1,15 @@ -/** Ownerless-copy registrations: the six seats, dictionaries, thunked labels, and HMR recovery. */ +/** Ownerless-copy registrations: the five seats, dictionaries, thunked labels, and HMR recovery. */ import { Context } from '@deepseek-ai/cordis' import { describe, expect, it, vi } from 'vitest' import { resolveSlotLabel } from '@deepseek-ai/dsh-client-ui-slots' import { SlotRegistry } from '@deepseek-ai/dsh-client-runtime/client' import { LocaleRuntime } from '@deepseek-ai/dsh-client-locale/client' -import { TestRemote, usePinnedBrowserLanguages } from '@deepseek-ai/dsh-client-test-runtime' +import { usePinnedBrowserLanguages } from '@deepseek-ai/dsh-client-test-runtime' import { apply, inject } from '@deepseek-ai/dsh-client-ui-settings-general/client' import { CloseLabel, HeaderContent, TriggerContent } from '../src/client/chrome.tsx' import { GeneralSection } from '../src/client/GeneralSection.tsx' import { SettingsDocumentAction } from '../src/client/SettingsDocumentAction.tsx' import type { SettingsDocumentActionInjected } from '../src/client/SettingsDocumentAction.tsx' -import { WelcomeNotice } from '../src/client/WelcomeNotice.tsx' -import type { WelcomeNoticeInjected } from '../src/client/WelcomeNotice.tsx' -import { WELCOME_NOTICE_SETTINGS_NAMESPACE } from '../src/onboarding-copy.ts' // The service reads its initial locale from the browser; these specs assert // the shipped Chinese copy, so they state the browser they assume. @@ -25,7 +22,6 @@ const SEATS = [ ['settings.action', SettingsDocumentAction], ['settings.close', CloseLabel], ['settings.section', GeneralSection], - ['settings.onboarding', WelcomeNotice], ] as const async function bench(isLoopback = true) { @@ -33,9 +29,6 @@ async function bench(isLoopback = true) { await ctx.plugin(SlotRegistry).await() const locale = new LocaleRuntime(ctx) ctx.provide('locale', locale) - // The plugins inject `remote`; forwarded events reach them through the - // same `$dispatch` handoff the connection sink makes. - new TestRemote(ctx) const settingsDescribe = vi.fn(() => Promise.resolve({ rpcId: 'settings-general' as never, result: { @@ -43,14 +36,7 @@ async function bench(isLoopback = true) { value: { writable: true, hasDocument: true, - namespaces: [{ - ns: WELCOME_NOTICE_SETTINGS_NAMESPACE, - schema: {}, - value: {}, - applies: 'live' as const, - secrets: [], - revision: 0, - }], + namespaces: [], }, }, })) @@ -89,10 +75,10 @@ function generalEntry(slots: SlotRegistry) { describe('ui-settings-general apply', () => { it('declares the services it uses', () => { - expect(inject).toEqual(['slots', 'locale', 'connection', 'remote']) + expect(inject).toEqual(['slots', 'locale', 'connection']) }) - it('fills all six seats for declarations before or after apply', async () => { + it('fills all five seats for declarations before or after apply', async () => { const before = await bench() declare(before.slots) await before.ctx.plugin({ inject: [...inject], apply }).await() @@ -105,8 +91,9 @@ describe('ui-settings-general apply', () => { expect(resolveSlotLabel(entry.options.label)).toBe('通用设置') expect(before.slots.spec('settings.general.item')).toEqual({ kind: 'list', scope: 'root' }) expect(before.slots.entries('settings.general.item')).toEqual([]) - const welcome = before.slots.entries('settings.onboarding')[0]! - expect(welcome.options).toMatchObject({ id: 'welcome-notice', order: -100 }) + // The onboarding hole stays declared for feature-owned steps; this plugin + // no longer seats one. + expect(before.slots.entries('settings.onboarding')).toEqual([]) const action = before.slots.entries('settings.action')[0]! const actionInjected = (action.inject as unknown as () => SettingsDocumentActionInjected)() expect(actionInjected.controller.store.getSnapshot().status).toBe('idle') @@ -162,22 +149,6 @@ describe('ui-settings-general apply', () => { expect(resolveSlotLabel(generalEntry(b.slots)!.options.label)).toBe('通用设置') }) - it('refreshes loaded welcome state only for its settings namespace or a reconnect', async () => { - const b = await bench() - declare(b.slots) - await b.ctx.plugin({ inject: [...inject], apply }).await() - const entry = b.slots.entries('settings.onboarding')[0]! - const { controller } = (entry.inject as unknown as () => WelcomeNoticeInjected)() - await controller.load() - expect(b.settingsDescribe).toHaveBeenCalledOnce() - b.ctx.remote.$dispatch('settings/document-updated', ['unrelated', 1]) - expect(b.settingsDescribe).toHaveBeenCalledOnce() - b.ctx.remote.$dispatch('settings/document-updated', [WELCOME_NOTICE_SETTINGS_NAMESPACE, 1]) - await vi.waitFor(() => { expect(b.settingsDescribe).toHaveBeenCalledTimes(2) }) - b.ctx.emit('connection/reset') - await vi.waitFor(() => { expect(b.settingsDescribe).toHaveBeenCalledTimes(3) }) - }) - it('refreshes loaded document availability on reconnect without reading it eagerly', async () => { const b = await bench() declare(b.slots) @@ -192,19 +163,13 @@ describe('ui-settings-general apply', () => { await vi.waitFor(() => { expect(b.settingsDescribe).toHaveBeenCalledTimes(2) }) }) - it('keeps remote welcome acknowledgement process-local', async () => { + it('withholds the loopback-only document action off-loopback', async () => { const b = await bench(false) declare(b.slots) const fiber = b.ctx.plugin({ inject: [...inject], apply }) await fiber.await() - const entry = b.slots.entries('settings.onboarding')[0]! - const { controller } = (entry.inject as unknown as () => WelcomeNoticeInjected)() - - await controller.load() - await expect(controller.acknowledge()).resolves.toBe(true) - expect(controller.store.getSnapshot()).toMatchObject({ status: 'ready', acknowledged: true }) - expect(b.settingsDescribe).not.toHaveBeenCalled() expect(b.slots.entries('settings.action')).toEqual([]) + expect(b.settingsDescribe).not.toHaveBeenCalled() await fiber.dispose() for (const [name] of SEATS) expect(b.slots.entries(name)).toEqual([]) }) diff --git a/packages/client/ui-settings-general/tests/host.client.spec.ts b/packages/client/ui-settings-general/tests/host.client.spec.ts index 5e82764f47..f5bc43b3e1 100644 --- a/packages/client/ui-settings-general/tests/host.client.spec.ts +++ b/packages/client/ui-settings-general/tests/host.client.spec.ts @@ -2,7 +2,9 @@ import { Context } from '@deepseek-ai/cordis' import { describe, expect, it } from 'vitest' import { SettingsProvider, settingsNamespace, type SettingsNamespace } from '@deepseek-ai/dsh-settings' import { apply } from '../src/index.ts' -import { WELCOME_NOTICE_SETTINGS_NAMESPACE } from '../src/onboarding-copy.ts' + +/** Mirrors the module-local namespace id in src/index.ts. */ +const ONBOARDING_SETTINGS_NAMESPACE = 'ui-onboarding' class MemorySettings extends SettingsProvider { readonly writable = true @@ -19,11 +21,11 @@ describe('ui-settings-general host', () => { const fiber = ctx.plugin({ apply }) await fiber.await() expect(ctx.settings.describe().map(row => row.ns)).toContain( - settingsNamespace(WELCOME_NOTICE_SETTINGS_NAMESPACE), + settingsNamespace(ONBOARDING_SETTINGS_NAMESPACE), ) await fiber.dispose() expect(ctx.settings.describe().map(row => row.ns)).not.toContain( - settingsNamespace(WELCOME_NOTICE_SETTINGS_NAMESPACE), + settingsNamespace(ONBOARDING_SETTINGS_NAMESPACE), ) }) }) diff --git a/packages/client/ui-settings-general/tests/shell.client.spec.ts b/packages/client/ui-settings-general/tests/shell.client.spec.ts index 0c95e8b8d3..32c354deda 100644 --- a/packages/client/ui-settings-general/tests/shell.client.spec.ts +++ b/packages/client/ui-settings-general/tests/shell.client.spec.ts @@ -49,7 +49,7 @@ const CHILD_SPECS = { describe('ui-settings apply', () => { it('declares only the slot registry (a pure composition face, no locale)', () => { - expect(inject).toEqual(['slots', 'locale', 'connection', 'remote']) + expect(inject).toEqual(['slots', 'locale', 'connection']) }) it('registers the shell and declares every child slot, before or after the declaration', async () => { @@ -110,8 +110,6 @@ describe('ui-settings apply', () => { b.slots.register({ name: 'settings.onboarding', id: 'default-order' } as never, () => null) const steps = onboardingSteps.getSnapshot() expect(steps).toEqual([ - // This package's own onboarding page, registered by the same apply. - { id: 'welcome-notice', order: -100 }, { id: 'welcome', order: -100 }, { id: 'credential', order: 0 }, { id: 'default-order', order: 0 }, diff --git a/packages/client/ui-settings-general/tests/welcome-notice.client.spec.tsx b/packages/client/ui-settings-general/tests/welcome-notice.client.spec.tsx deleted file mode 100644 index 74feea89a5..0000000000 --- a/packages/client/ui-settings-general/tests/welcome-notice.client.spec.tsx +++ /dev/null @@ -1,106 +0,0 @@ -// @vitest-environment jsdom -import { act, cleanup, fireEvent, render, screen } from '@testing-library/react' -import { afterEach, describe, expect, it, vi } from 'vitest' -import { bindSnapshotSelector } from '@deepseek-ai/dsh-client-web-react' -import { WelcomeNotice } from '../src/client/WelcomeNotice.tsx' -import type { WelcomeNoticeProps } from '../src/client/WelcomeNotice.tsx' -import { WelcomeNoticeStore } from '../src/client/welcome-store.ts' -import { zh } from '../src/client/locales.ts' -import { - WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_COPY, WELCOME_NOTICE_SETTINGS_NAMESPACE, - WELCOME_NOTICE_VERSION, -} from '../src/onboarding-copy.ts' - -afterEach(cleanup) - -function response(value: T) { - return { rpcId: 'welcome-rpc' as never, result: { ok: true as const, value } } -} - -function mount(version?: string, mutateImpl: () => Promise = () => Promise.resolve(response({}))) { - const mutate = vi.fn(mutateImpl) - const api = { - settings: { - describe: () => Promise.resolve(response({ - writable: true, - hasDocument: false, - namespaces: [{ - ns: WELCOME_NOTICE_SETTINGS_NAMESPACE, - schema: {}, - value: version === undefined ? {} : { [WELCOME_NOTICE_ACK_FIELD]: version }, - applies: 'live' as const, - secrets: [], - revision: 0, - }], - })), - mutate, - }, - } - const controller = new WelcomeNoticeStore(api as never) - const complete = vi.fn() - const unusedHook = (() => { throw new Error('unused standard hook') }) as never - const props: WelcomeNoticeProps = { - stepId: 'welcome-notice', - complete, - openSection: vi.fn(), - useSessions: unusedHook, - useWorkspaces: unusedHook, - controller, - useSnapshot: bindSnapshotSelector(controller.store), - t: key => key in zh ? zh[key as keyof typeof zh] : key, - } - return { ...render(), complete, controller, mutate } -} - -describe('WelcomeNotice', () => { - it('uses the same Chinese owner copy in both GUI locales', () => { - expect(WELCOME_NOTICE_COPY.en).toEqual(WELCOME_NOTICE_COPY.zh) - }) - - it('renders the owner copy with one primary action and no dismissal control', async () => { - const h = mount() - const page = await screen.findByRole('region', { name: WELCOME_NOTICE_COPY.zh.title }) - expect(screen.getByText(WELCOME_NOTICE_COPY.zh.title)).toBeTruthy() - for (const text of WELCOME_NOTICE_COPY.zh.paragraphs) expect(page.textContent).toContain(text) - expect(page.textContent?.match(/感谢您愿意拨冗试用 DeepSeek Harness/g) ?? []).toHaveLength(1) - const buttons = page.querySelectorAll('button') - expect(buttons).toHaveLength(1) - expect(screen.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel })).toBeTruthy() - expect(document.activeElement).toBe(screen.getByRole('heading', { name: WELCOME_NOTICE_COPY.zh.title })) - fireEvent.keyDown(document, { key: 'Escape' }) - expect(h.complete).not.toHaveBeenCalled() - expect(screen.getByRole('region')).toBeTruthy() - }) - - it('completes only after the acknowledgement write commits', async () => { - const h = mount() - await screen.findByRole('region') - fireEvent.click(screen.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel })) - await act(async () => { await Promise.resolve() }) - expect(h.mutate).toHaveBeenCalledOnce() - expect(h.complete).toHaveBeenCalledOnce() - }) - - it('skips itself when this exact version was already acknowledged', async () => { - const h = mount(WELCOME_NOTICE_VERSION) - await act(async () => { await h.controller.load() }) - expect(screen.queryByRole('region')).toBeNull() - expect(h.complete).toHaveBeenCalledOnce() - }) - - it('keeps the sole action disabled while saving and reports a refused write', async () => { - let resolveWrite!: (value: unknown) => void - const write = new Promise((resolve) => { resolveWrite = resolve }) - const h = mount(undefined, () => write) - await screen.findByRole('region') - const action = screen.getByRole('button', { name: WELCOME_NOTICE_COPY.zh.continueLabel }) - fireEvent.click(action) - expect(action.disabled).toBe(true) - resolveWrite({ - rpcId: 'welcome-refused' as never, - result: { ok: false, error: { code: 'settings-rejected', message: 'read only', details: { ns: WELCOME_NOTICE_SETTINGS_NAMESPACE } } }, - }) - expect((await screen.findByRole('alert')).textContent).toBe('暂时无法保存确认状态，请重试。') - expect(h.complete).not.toHaveBeenCalled() - }) -}) diff --git a/packages/client/ui-settings-general/tests/welcome-store.client.spec.ts b/packages/client/ui-settings-general/tests/welcome-store.client.spec.ts deleted file mode 100644 index bfa5e16999..0000000000 --- a/packages/client/ui-settings-general/tests/welcome-store.client.spec.ts +++ /dev/null @@ -1,184 +0,0 @@ -import { describe, expect, it, vi } from 'vitest' -import type { RpcResponse } from '@deepseek-ai/dsh-api-remotes/client' -import { WelcomeNoticeStore } from '../src/client/welcome-store.ts' -import { refreshWelcomeIfLoaded } from '../src/client/welcome-store.ts' -import { - WELCOME_NOTICE_ACK_FIELD, WELCOME_NOTICE_SETTINGS_NAMESPACE, WELCOME_NOTICE_VERSION, -} from '../src/onboarding-copy.ts' - -let rpc = 0 -function ok(value: T): RpcResponse { - return { rpcId: `welcome-${rpc++}` as never, result: { ok: true, value } } -} - -function namespace(version?: string) { - return { - ns: WELCOME_NOTICE_SETTINGS_NAMESPACE, - schema: {}, - value: version === undefined ? {} : { [WELCOME_NOTICE_ACK_FIELD]: version }, - applies: 'live' as const, - secrets: [], - revision: 0, - } -} - -function deferred() { - let resolve!: (value: T) => void - let reject!: (reason: unknown) => void - const promise = new Promise((res, rej) => { resolve = res; reject = rej }) - return { promise, resolve, reject } -} - -describe('WelcomeNoticeStore', () => { - it('acknowledges in memory without calling loopback-only settings APIs', async () => { - const describe = vi.fn() - const mutate = vi.fn() - const controller = new WelcomeNoticeStore({ settings: { describe, mutate } } as never, 'memory') - - await controller.load() - expect(controller.store.getSnapshot()).toEqual({ status: 'ready', acknowledged: false, error: null }) - await expect(controller.acknowledge()).resolves.toBe(true) - expect(controller.store.getSnapshot()).toEqual({ status: 'ready', acknowledged: true, error: null }) - await controller.load() - expect(controller.store.getSnapshot()).toEqual({ status: 'ready', acknowledged: true, error: null }) - expect(describe).not.toHaveBeenCalled() - expect(mutate).not.toHaveBeenCalled() - }) - - it('acknowledges only the exact current copy version', async () => { - for (const [version, acknowledged] of [ - [undefined, false], - ['older-copy', false], - [WELCOME_NOTICE_VERSION, true], - ] as const) { - const api = { - settings: { - describe: vi.fn(() => Promise.resolve(ok({ writable: true, hasDocument: false, namespaces: [namespace(version)] }))), - }, - } - const controller = new WelcomeNoticeStore(api as never) - await controller.load() - expect(controller.store.getSnapshot()).toMatchObject({ status: 'ready', acknowledged }) - } - }) - - it('persists the owner version through one idempotent path mutation', async () => { - const mutate = vi.fn(() => Promise.resolve(ok(namespace(WELCOME_NOTICE_VERSION)))) - const controller = new WelcomeNoticeStore({ settings: { mutate } } as never) - await expect(controller.acknowledge()).resolves.toBe(true) - expect(mutate).toHaveBeenCalledWith({ - ns: WELCOME_NOTICE_SETTINGS_NAMESPACE, - ops: [{ op: 'set', path: [WELCOME_NOTICE_ACK_FIELD], value: WELCOME_NOTICE_VERSION }], - }) - expect(controller.store.getSnapshot()).toMatchObject({ status: 'ready', acknowledged: true }) - }) - - it('keeps the notice pending when loading or persistence fails', async () => { - const load = new WelcomeNoticeStore({ - settings: { describe: () => Promise.reject(new Error('offline')) }, - } as never) - await load.load() - expect(load.store.getSnapshot()).toEqual({ status: 'error', acknowledged: false, error: 'offline' }) - - const save = new WelcomeNoticeStore({ - settings: { mutate: () => Promise.reject(new Error('disk full')) }, - } as never) - await expect(save.acknowledge()).resolves.toBe(false) - expect(save.store.getSnapshot()).toEqual({ status: 'error', acknowledged: false, error: 'disk full' }) - - const nonError = new WelcomeNoticeStore({ - // Durable/wire failures are unknown; exercise containment of a non-Error rejection. - // oxlint-disable-next-line typescript/prefer-promise-reject-errors - settings: { describe: () => Promise.reject('offline string') }, - } as never) - await nonError.load() - expect(nonError.store.getSnapshot().error).toBe('offline string') - }) - - it('reports business failures, missing namespaces, and malformed durable values', async () => { - for (const describe of [ - () => Promise.resolve({ - rpcId: 'failed' as never, - result: { ok: false as const, error: { code: 'internal' as const, message: 'denied', details: {} } }, - }), - () => Promise.resolve(ok({ writable: true, hasDocument: false, namespaces: [] })), - ]) { - const controller = new WelcomeNoticeStore({ settings: { describe } } as never) - await controller.load() - expect(controller.store.getSnapshot().status).toBe('error') - } - - for (const value of [null, 42, { [WELCOME_NOTICE_ACK_FIELD]: 42 }]) { - const controller = new WelcomeNoticeStore({ - settings: { describe: () => Promise.resolve(ok({ - writable: true, - hasDocument: false, - namespaces: [{ ...namespace(), value }], - })) }, - } as never) - await controller.load() - expect(controller.store.getSnapshot()).toMatchObject({ status: 'ready', acknowledged: false }) - } - - const save = new WelcomeNoticeStore({ - settings: { mutate: () => Promise.resolve({ - rpcId: 'failed-save' as never, - result: { ok: false, error: { code: 'settings-rejected', message: 'denied', details: { ns: WELCOME_NOTICE_SETTINGS_NAMESPACE } } }, - }) }, - } as never) - await expect(save.acknowledge()).resolves.toBe(false) - expect(save.store.getSnapshot().error).toBe('denied') - }) - - it('lets the latest load win over stale success and failure', async () => { - const first = deferred>() - const describe = vi.fn() - .mockImplementationOnce(() => first.promise) - .mockImplementationOnce(() => Promise.resolve(ok({ writable: true, hasDocument: false, namespaces: [namespace()] }))) - const controller = new WelcomeNoticeStore({ settings: { describe } } as never) - const stale = controller.load() - await controller.load() - first.resolve(ok({ writable: true, hasDocument: false, namespaces: [namespace(WELCOME_NOTICE_VERSION)] })) - await stale - expect(controller.store.getSnapshot().acknowledged).toBe(false) - - const failed = deferred>() - describe - .mockImplementationOnce(() => failed.promise) - .mockImplementationOnce(() => Promise.resolve(ok({ - writable: true, hasDocument: false, namespaces: [namespace(WELCOME_NOTICE_VERSION)], - }))) - const staleFailure = controller.load() - await controller.load() - failed.reject('stale failure') - await staleFailure - expect(controller.store.getSnapshot()).toMatchObject({ status: 'ready', acknowledged: true, error: null }) - }) - - it('contains stale acknowledgement settlements and refreshes only a loaded store', async () => { - const write = deferred>() - const describe = vi.fn(() => Promise.resolve(ok({ writable: true, hasDocument: false, namespaces: [namespace()] }))) - const controller = new WelcomeNoticeStore({ - settings: { mutate: () => write.promise, describe }, - } as never) - refreshWelcomeIfLoaded(controller) - expect(describe).not.toHaveBeenCalled() - const staleWrite = controller.acknowledge() - await controller.load() - write.resolve(ok(namespace(WELCOME_NOTICE_VERSION))) - await expect(staleWrite).resolves.toBe(true) - expect(controller.store.getSnapshot().acknowledged).toBe(false) - refreshWelcomeIfLoaded(controller) - await vi.waitFor(() => { expect(describe).toHaveBeenCalledTimes(2) }) - - const failedWrite = deferred>() - const staleFailure = new WelcomeNoticeStore({ - settings: { mutate: () => failedWrite.promise, describe }, - } as never) - const pending = staleFailure.acknowledge() - await staleFailure.load() - failedWrite.reject('late failure') - await expect(pending).resolves.toBe(false) - expect(staleFailure.store.getSnapshot().status).toBe('ready') - }) -}) diff --git a/packages/extensions/cordis-client-runner/src/client/slot-catalog.ts b/packages/extensions/cordis-client-runner/src/client/slot-catalog.ts index 2143493488..015d36e896 100644 --- a/packages/extensions/cordis-client-runner/src/client/slot-catalog.ts +++ b/packages/extensions/cordis-client-runner/src/client/slot-catalog.ts @@ -1259,7 +1259,6 @@ export const CLIENT_SLOT_API: readonly ClientSlotEntry[] = [ slotInject: '', declaredBy: 'an entry in \'sidebar.settings\' (client-ui-settings-general), so it exists while that entry is mounted', occupants: [ - 'client-ui-settings-general WelcomeNotice id \'welcome-notice\'', 'client-ui-settings-models DeepSeekOnboardingDialog id \'deepseek-official\'', ], replaceRisk: 'none', From 14cf3334be2fcadaad2f0df3645d5e4dd5b9947e Mon Sep 17 00:00:00 2001 From: _Kerman Date: Thu, 13 Aug 2026 14:04:06 +0800 Subject: [PATCH 07/41] fix(web): keep older trajectory history loadable --- ...-27-trajectory-inspection-ledger.i18n.yaml | 4 +- ...2026-07-27-trajectory-inspection-ledger.md | 2 +- ...6-07-27-trajectory-inspection-ledger.zh.md | 2 +- .../load-more.expected.md | 3 + .../tests/trajectory-virtualization.e2e.ts | 27 ++++++++- .../client/ui-trajectory/README.i18n.yaml | 4 +- packages/client/ui-trajectory/README.md | 2 +- packages/client/ui-trajectory/README.zh.md | 2 +- .../src/client/TrajectoryTable.module.css | 38 +++++++++++- .../src/client/TrajectoryTable.tsx | 52 ++++++++++++---- .../src/client/TrajectoryView.tsx | 5 +- .../ui-trajectory/tests/table.client.spec.tsx | 59 +++++++++++++++++++ 12 files changed, 175 insertions(+), 25 deletions(-) create mode 100644 apps/web/tests/snapshots/trajectory-virtualization/load-more.expected.md diff --git a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.i18n.yaml b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.i18n.yaml index 40e2c6dd19..674176e65a 100644 --- a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.i18n.yaml +++ b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.md -2026-07-27-trajectory-inspection-ledger.md: 74ed1f8ec6f6efcbf77e9caec7e254cb114efbd9 -2026-07-27-trajectory-inspection-ledger.zh.md: be648cb73478037979fd941753129b7c68be5085 +2026-07-27-trajectory-inspection-ledger.md: 7f97bc395ed694a0a750d3b744cc9887834ef32f +2026-07-27-trajectory-inspection-ledger.zh.md: 34bb8741124c410fe06ec18bdde801caa987f4fb diff --git a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.md b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.md index 74ed1f8ec6..7f97bc395e 100644 --- a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.md +++ b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.md @@ -21,7 +21,7 @@ Trajectory has to make prose, machine payloads, token usage, timing, and nested - Call schemas come from the active recorded Request header. Keyless snapshot fixtures deliberately replace that catalog with the non-array `{{tools}}` token, which the durable inspection boundary treats as unavailable instead of attempting to project or fabricate schemas. - Selecting a record or Request opens an inspector inside Trajectory. Tabs and Summary sections follow the selected entity: Markdown messages expose rendered content, source fields, provider/model fields, and hierarchy views; tools add JSON payload/result and schema views; Requests add options, usage, timing, and result navigation. Scrollable Summary regions keep their scrollbar thumbs transparent until hover or `focus-within`, while retaining the scrollbar reservation and scroll behavior. Images render as media rather than serialized data. - Turn folding removes all rows after its first record and replaces them with a compact step/tool-call count; Assistant folding applies the same interaction to its tool-call descendants. Global controls fold or expand both levels. -- A long ledger initially positions the loaded tail at the bottom and mounts only the viewport's row window plus bounded overscan. Request-only separators join the next measurable virtual item, with a terminal separator retaining its own fixed clearance, so the virtualizer never owns a zero-height item. Semantic DOM-safe row keys and ARIA indexes expose identity independently from mount position. A tail with known older history virtualizes immediately even when its loaded projection is below the ordinary row threshold. Stable-key virtualizer anchoring preserves the visible item across prepends and appends; the manual scroll-height fallback applies only when completing pagination disables virtualization. Selection, timeline focus, folding, search, and bottom following address records by stable event or tool-call identity rather than requiring their DOM rows to exist. An explicit loading row covers records until initial positioning finishes and while an older Session page is pending. +- A long ledger initially positions the loaded tail at the bottom and mounts only the viewport's row window plus bounded overscan. Request-only separators join the next measurable virtual item, with a terminal separator retaining its own fixed clearance, so the virtualizer never owns a zero-height item. Semantic DOM-safe row keys and ARIA indexes expose identity independently from mount position. A tail with known older history virtualizes immediately even when its loaded projection is below the ordinary row threshold. Stable-key virtualizer anchoring preserves the visible item across prepends and appends; the manual scroll-height fallback applies only when completing pagination disables virtualization. Selection, timeline focus, folding, search, and bottom following address records by stable event or tool-call identity rather than requiring their DOM rows to exist. An explicit loading row covers records until initial positioning finishes. While an older Session prefix remains unloaded, an interactive first row precedes the loaded records and requests one older page; the same row becomes a disabled loading status for a pending page and disappears only when paging completes. - The separate Waterfall tab is removed. A fixed Overview above the ledger projects every loaded record with known `startedAt` onto three semantic timing lanes using its own duration. While an older prefix remains unloaded and the viewport includes the loaded domain's start, a neutral ellipsis control covers the truncated edge and loads one earlier page without assigning unknown history a fabricated duration; hovering that control suppresses the ordinary timeline cursor. Finalized Assistant spans divide the recorded interval at the first non-empty token delta, so distinct TTFT and decoding colors retain their actual ratio; incomplete timing falls back to one Assistant color. Hovering for 500 ms exposes exact start/end, total duration, TTFT, and decoding time without relying on the browser's native tooltip delay. Dragging left or right commits an inclusive interval filter: any record whose active interval overlaps either boundary remains visible, records without known timing leave the focused ledger, and clearing the selection restores the full loaded ledger. Wheel gestures zoom the time domain. A right-button click clears the interval selection; dragging instead pans an already zoomed viewport without mutating it. The Overview keeps the full time domain while focused so the selection can be resized or cleared without losing orientation. - Live history updates retain the ledger's bottom position only while the user is already following its tail. Scrolling upward clears that follow state, so streamed chunks and newly appended records do not interrupt inspection of earlier rows. Tail following and virtualizer measurement react to row keys and heights rather than content identity, so text-only stream frames neither discard the measurement cache nor repeat a DOM scroll write. - Token streaming updates only the matching Trajectory Assistant Context, while publication is coalesced to at most once per animation frame. The target snapshot preserves the existing stage, layout, Request numbering, Overview, and search inputs; completed Assistant State retains assembled blocks, timing, and usage rather than every raw chunk payload, while Session keeps the raw Event window. diff --git a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.zh.md b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.zh.md index be648cb734..34bb874112 100644 --- a/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.zh.md +++ b/.agents/notes/implemented/feature/2026-07-27-trajectory-inspection-ledger.zh.md @@ -21,7 +21,7 @@ Status: implemented - 调用 schema 来自当前生效且已记录的请求头。无密钥快照 fixture（测试前置数据）有意将该目录替换为非数组 token `{{tools}}`，持久化检查边界会将其视为不可用，而不是尝试投影或虚构 schema。 - 选择记录或请求后，Trajectory 内部会打开检查器，其标签页和概述区域随实体类型变化：Markdown 消息提供渲染内容、来源字段、提供方／模型字段和层级视图；工具提供 JSON 载荷／结果和 schema 视图；请求提供选项、用量、计时和结果跳转。可滚动的概述区域默认保持滚动条滑块透明，直到悬停或 `focus-within` 时才显示，同时保留滚动条预留空间和滚动行为。图片以媒体形式渲染，而不是显示为序列化数据。 - 折叠轮次时保留其第一条记录，并用紧凑的步骤数和工具调用数替换后续所有行；折叠助手时对其工具调用后代应用相同操作。全局控件会折叠或展开这两个层级。 -- 长记录表初始时将已加载尾部置于底部，只挂载视口对应的行窗口及有界的额外缓冲行。仅含请求的分隔行并入下一个具备可测高度的虚拟项，末尾分隔行则保留固定留白，因此虚拟化器不会管理零高度项。可安全用于 DOM 的语义行键与 ARIA 索引使标识不依赖挂载位置。只要已知尾部之前仍有更早历史，即使当前已加载投影低于常规行数阈值，也会立即启用虚拟化。基于稳定键的虚拟化器锚定会在向前补页和尾部追加时保留当前可见项；只有分页完成导致虚拟化停用时，才使用手动滚动高度兜底。选择、时间线聚焦、折叠、搜索和末尾跟随均按稳定的事件或工具调用标识定位，不要求对应 DOM 行已存在。初始定位完成前以及更早 Session 页面仍在等待时，明确的加载行会遮住真实记录。 +- 长记录表初始时将已加载尾部置于底部，只挂载视口对应的行窗口及有界的额外缓冲行。仅含请求的分隔行并入下一个具备可测高度的虚拟项，末尾分隔行则保留固定留白，因此虚拟化器不会管理零高度项。可安全用于 DOM 的语义行键与 ARIA 索引使标识不依赖挂载位置。只要已知尾部之前仍有更早历史，即使当前已加载投影低于常规行数阈值，也会立即启用虚拟化。基于稳定键的虚拟化器锚定会在向前补页和尾部追加时保留当前可见项；只有分页完成导致虚拟化停用时，才使用手动滚动高度兜底。选择、时间线聚焦、折叠、搜索和末尾跟随均按稳定的事件或工具调用标识定位，不要求对应 DOM 行已存在。初始定位完成前，明确的加载行会遮住真实记录。更早的 Session 前缀仍未加载时，交互式首行位于已加载记录之前，可请求一页更早历史；页面加载期间，同一行会变为禁用的加载状态，仅在分页完成时消失。 - 移除独立的 waterfall（瀑布式事件）标签页。固定在记录表上方的 Overview 区域将所有 `startedAt` 已知的已加载记录按各自耗时投影到三条语义计时轨道。仍有更早前缀尚未加载且 viewport 包含已加载时间域起点时，中性的省略号控件会遮住截断边缘并加载一页更早历史，而不会为未知历史虚构耗时；悬停在该控件上会隐藏普通的时间线光标。已完成的助手时间条以首个非空 token 增量为分界，用不同颜色按真实比例表示 TTFT 与解码时间；计时不完整时退化为单一助手色。悬停 500 ms 后会显示精确起止时刻、总耗时、TTFT 和解码时间，而不依赖浏览器原生 tooltip 的延迟。向左或向右拖动会提交包含边界的区间筛选：任何活动区间与所选区间任一边界重叠的记录都会保留，计时未知的记录会从聚焦后的记录表中移除，清除选择则恢复完整的已加载记录表。滚轮手势用于缩放时间域。右键单击会清除区间选择；右键拖动则只会平移已放大的 viewport，不会改变该选区。聚焦后，Overview 区域仍保留完整时间范围，以便在不失去方位的情况下调整或清除选择。 - 实时历史更新仅在用户已经跟随记录表末尾时保留底部位置。向上滚动会清除跟随状态，因此流式分块和新追加的记录不会打断对旧记录的检查。末尾跟随与虚拟化器测量仅响应行键和高度，而非内容标识，因此仅含文本的流式帧既不会丢弃测量缓存，也不会重复执行 DOM 滚动写入。 - token 流式输出只更新命中的 Trajectory Assistant Context，发布则合并为每个 animation frame 最多一次。target snapshot 继续提供既有 stage、layout、请求编号、Overview 与搜索输入；已完成的 Assistant State 只保留组装后的 blocks、计时与 usage，不保留每条原始 chunk payload，而 Session 继续保存原始 Event 窗口。 diff --git a/apps/web/tests/snapshots/trajectory-virtualization/load-more.expected.md b/apps/web/tests/snapshots/trajectory-virtualization/load-more.expected.md new file mode 100644 index 0000000000..f6d020f38c --- /dev/null +++ b/apps/web/tests/snapshots/trajectory-virtualization/load-more.expected.md @@ -0,0 +1,3 @@ +- row "Load earlier history": + - cell "Load earlier history": + - button "Load earlier history" diff --git a/apps/web/tests/trajectory-virtualization.e2e.ts b/apps/web/tests/trajectory-virtualization.e2e.ts index 64f149646b..4ed0e89fbc 100644 --- a/apps/web/tests/trajectory-virtualization.e2e.ts +++ b/apps/web/tests/trajectory-virtualization.e2e.ts @@ -3,6 +3,7 @@ // DOM mounting stays bounded, and every scroll range remains reachable. import { mkdtemp, rm, writeFile } from 'node:fs/promises' import { tmpdir } from 'node:os' +import { fileURLToPath } from 'node:url' import { join } from 'node:path' import type { Browser, Page } from 'playwright' import { chromium } from 'playwright' @@ -11,6 +12,8 @@ import type { StreamChunk } from '@deepseek-ai/dsh-llm' import type { ReplayEntry } from '@deepseek-ai/dsh-llm-replay' import { createChatScrollFixture } from './chat-scroll-fixture.ts' import { + captureStableAria, + compareOrRefreshGolden, launchWebScaffold, seedSession, watchConsole, @@ -20,6 +23,10 @@ import { import { newEnglishPage, saveFailureShot } from './support.ts' const MODE = webSnapshotMode() +const LOAD_MORE_EXPECTED = fileURLToPath(new URL( + './snapshots/trajectory-virtualization/load-more.expected.md', + import.meta.url, +)) const SESSION_ID = 'trajectory-virtualization-e2e' const FIXTURE = createChatScrollFixture({ markerPrefix: 'TRAJECTORY_VIRTUAL', @@ -230,8 +237,26 @@ describe('web e2e: Trajectory virtualization over tail-paged history', () => { expect(await page.getByText('Initial System Prompt', { exact: true }).count()).toBe(0) expect(await mountedRows(page)).toBeLessThanOrEqual(MAX_MOUNTED_ROWS) - await scrollToRatio(page, 0) + const loadMore = page.locator('[data-history-load] button') + await loadMore.waitFor({ timeout: 15_000 }) + expect(await loadMore.textContent()).toBe('Load earlier history') + const loadMoreSnapshot = await captureStableAria( + page, + '[data-history-load]', + scaffold.workspaceCwd, + ) + await compareOrRefreshGolden(LOAD_MORE_EXPECTED, loadMoreSnapshot, MODE) + await loadMore.evaluate((button: HTMLButtonElement) => { button.click() }) await expect.poll(() => held, { timeout: 15_000 }).toBe(true) + await expect.poll(async () => ({ + disabled: await loadMore.isDisabled(), + label: await loadMore.textContent(), + }), { timeout: 15_000 }).toEqual({ + disabled: true, + label: 'Loading earlier history…', + }) + + await scrollToRatio(page, 0) const anchor = await firstVisibleRow(page) const selectedRow = page.locator( `[data-trajectory-scroll] tr[data-trajectory-row-key=${JSON.stringify(anchor.key)}]`, diff --git a/packages/client/ui-trajectory/README.i18n.yaml b/packages/client/ui-trajectory/README.i18n.yaml index b3b7d8ac47..c3a40c880f 100644 --- a/packages/client/ui-trajectory/README.i18n.yaml +++ b/packages/client/ui-trajectory/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/client/ui-trajectory/README.md -README.md: d3786b6460c5df7eaa6d24e68c80025e7fb29ae4 -README.zh.md: b3bc88d8ab73ccc0da9a49d1867fe2c66be5ca43 +README.md: 9ad42a3d3bcfb8fbf4842a66577e65794a716dfd +README.zh.md: df7661ef7d4861dbc6c8e365a18b3e3252d4d4af diff --git a/packages/client/ui-trajectory/README.md b/packages/client/ui-trajectory/README.md index d3786b6460..9ad42a3d3b 100644 --- a/packages/client/ui-trajectory/README.md +++ b/packages/client/ui-trajectory/README.md @@ -2,7 +2,7 @@ English | [中文](README.zh.md) -Trajectory renders a turn-aware event ledger with selectable User, Assistant, Tool, and nested Subtool records. Thick rules mark Turn boundaries, compact inline markers identify Steps, and the main ledger keeps only index, event, and content; selection opens a local inspector for token usage, duration, Input, Output, and Timing. Scrollable Summary regions keep their scrollbar thumbs transparent until the region is hovered or contains keyboard focus, without changing the reserved scroll geometry. A standalone compaction request appears chronologically in its own `Between turns` section, while a numbered compaction remains inside its owning turn. Long ledgers open at the current tail, load one older page when the user reaches the loaded range's top, and mount only the visible row window plus a small overscan; request-only separators share the next measurable virtual item, while semantic row keys and ARIA indexes survive prepends. Selection, timeline navigation, folding, search, and Request totals cover the currently loaded window. The ledger covers records with an explicit loading row until the initial tail is positioned and while an older page is pending. A fixed Overview above the ledger projects real record start/duration timing from left to right; when earlier records remain unloaded and the viewport includes the loaded domain's start, a neutral ellipsis control identifies the omitted prefix and loads one earlier page without assigning unknown history fabricated duration. Assistant spans divide recorded TTFT from decoding, and a 500 ms hover reveals exact clock and duration details. Dragging an interval focuses the ledger on every record active at any point in that inclusive range, while clearing the selection restores the full loaded ledger. Wheel gestures zoom the time domain. A right-button click clears the selected interval, while a right-button drag pans an already zoomed viewport without changing it. The initial view and streaming updates stay at the tail; scrolling upward suspends following so new records do not interrupt inspection of earlier rows. Content-only stream frames preserve virtual row keys and heights, reuse measurements, and do not issue repeated tail-scroll writes. Completed replies retain assembled blocks, timing, and usage in Trajectory target State, while the shared Session window keeps the raw Events. Trajectory asks the conversation shell to float the composer over the full-height ledger, while its responsive vertical scrollers reserve the composer's live height so final rows remain reachable. Trajectory-owned Definitions assemble business records, including cancellation-frozen Assistant and Tool records, from the shared Session window, so Trajectory neither reads nor changes the Chat conversation snapshot. The package provides no service and declares no Context merge; it registers target-specific Event Definitions, a Trajectory view builder, and one tab in the conversation's `'conversation.view'` slot ring. Contract: api-contracts v3 §8. +Trajectory renders a turn-aware event ledger with selectable User, Assistant, Tool, and nested Subtool records. Thick rules mark Turn boundaries, compact inline markers identify Steps, and the main ledger keeps only index, event, and content; selection opens a local inspector for token usage, duration, Input, Output, and Timing. Scrollable Summary regions keep their scrollbar thumbs transparent until the region is hovered or contains keyboard focus, without changing the reserved scroll geometry. A standalone compaction request appears chronologically in its own `Between turns` section, while a numbered compaction remains inside its owning turn. Long ledgers open at the current tail, load one older page when the user reaches the loaded range's top, and mount only the visible row window plus a small overscan; request-only separators share the next measurable virtual item, while semantic row keys and ARIA indexes survive prepends. Selection, timeline navigation, folding, search, and Request totals cover the currently loaded window. The ledger covers records with an explicit loading row until the initial tail is positioned. While an older prefix remains unloaded, a first-row control precedes the loaded records, loads one earlier page on click, and changes in place to a disabled loading status while that page is pending. A fixed Overview above the ledger projects real record start/duration timing from left to right; when earlier records remain unloaded and the viewport includes the loaded domain's start, a neutral ellipsis control identifies the omitted prefix and loads one earlier page without assigning unknown history fabricated duration. Assistant spans divide recorded TTFT from decoding, and a 500 ms hover reveals exact clock and duration details. Dragging an interval focuses the ledger on every record active at any point in that inclusive range, while clearing the selection restores the full loaded ledger. Wheel gestures zoom the time domain. A right-button click clears the selected interval, while a right-button drag pans an already zoomed viewport without changing it. The initial view and streaming updates stay at the tail; scrolling upward suspends following so new records do not interrupt inspection of earlier rows. Content-only stream frames preserve virtual row keys and heights, reuse measurements, and do not issue repeated tail-scroll writes. Completed replies retain assembled blocks, timing, and usage in Trajectory target State, while the shared Session window keeps the raw Events. Trajectory asks the conversation shell to float the composer over the full-height ledger, while its responsive vertical scrollers reserve the composer's live height so final rows remain reachable. Trajectory-owned Definitions assemble business records, including cancellation-frozen Assistant and Tool records, from the shared Session window, so Trajectory neither reads nor changes the Chat conversation snapshot. The package provides no service and declares no Context merge; it registers target-specific Event Definitions, a Trajectory view builder, and one tab in the conversation's `'conversation.view'` slot ring. Contract: api-contracts v3 §8. ## Model Experience diff --git a/packages/client/ui-trajectory/README.zh.md b/packages/client/ui-trajectory/README.zh.md index b3bc88d8ab..df7661ef7d 100644 --- a/packages/client/ui-trajectory/README.zh.md +++ b/packages/client/ui-trajectory/README.zh.md @@ -2,7 +2,7 @@ [English](README.md) | 中文 -Trajectory 渲染按轮次组织的事件记录表，其中可选择用户、助手、工具和嵌套子工具记录。较粗的分割线标示轮次边界，紧凑的行内标记标识步骤，主记录表仅保留索引、事件和内容；选择记录则会打开局部检查器，查看 token 用量、耗时、输入、输出和计时。可滚动的概述区域默认保持滚动条滑块透明，直到鼠标悬停该区域或其中包含键盘焦点时才显示，同时不改变滚动条预留的几何空间。独立运行的压缩（compaction）请求会按时间顺序显示在自己的 `Between turns` 区段中，而带编号的压缩仍位于其所属轮次内。长记录表打开时定位于当前尾部，用户到达已加载范围顶部时加载一页更早的历史，并且只挂载可见行窗口和少量额外缓冲行；仅含请求的分隔行并入下一个具备可测高度的虚拟项，语义行键和 ARIA 索引在向前补页后保持不变。选择、时间线导航、折叠、搜索和请求汇总只覆盖当前已加载的窗口。初始尾部完成定位前以及更早页面的加载尚未完成时，记录表会用明确的加载行遮住真实记录。固定在记录表上方的 Overview 区域从左到右投影记录的真实开始时间与耗时；仍有更早记录未加载且 viewport 包含已加载时间域起点时，中性的省略号控件会标识被省略的前缀，并可加载一页更早历史，而不会为未知部分虚构耗时。助手时间条会区分记录到的 TTFT 与解码时间，悬停 500 ms 后可查看精确时刻和耗时详情。拖选一个区间会将记录表聚焦到活动区间与该闭区间有重叠的所有记录，清除选择则恢复完整的已加载记录表。滚轮手势用于缩放时间域。右键单击会清除所选区间；在已放大的 viewport 上按住右键拖动则只会平移视图，不会改变该区间。初始视图和流式更新都会停留在尾部；向上滚动会暂停跟随，因此新记录不会打断对旧记录的检查。仅含内容更新的流式帧会保持虚拟行的键和高度不变、复用测量结果，并且不会重复写入末尾滚动位置。已完成的回复会在 Trajectory target State 中保留组装后的 blocks、计时与用量，共享 Session 窗口则保留原始 Event。Trajectory 要求会话壳将 composer 作为浮层置于全高记录表上方；其响应式纵向滚动容器会预留 composer 的实时高度，确保仍可滚动到最后几行。Trajectory 自有的 Definition 从共享 Session 窗口组装业务记录，其中包括因取消而冻结的助手和工具记录，因此 Trajectory 既不读取也不改变 Chat 会话快照。该包不提供 service，也不声明 Context 合并；它会注册 target 专属 Event Definition、Trajectory view builder，以及会话 `'conversation.view'` slot 环中的一个视图标签页。约定：api-contracts v3 §8。 +Trajectory 渲染按轮次组织的事件记录表，其中可选择用户、助手、工具和嵌套子工具记录。较粗的分割线标示轮次边界，紧凑的行内标记标识步骤，主记录表仅保留索引、事件和内容；选择记录则会打开局部检查器，查看 token 用量、耗时、输入、输出和计时。可滚动的概述区域默认保持滚动条滑块透明，直到鼠标悬停该区域或其中包含键盘焦点时才显示，同时不改变滚动条预留的几何空间。独立运行的压缩（compaction）请求会按时间顺序显示在自己的 `Between turns` 区段中，而带编号的压缩仍位于其所属轮次内。长记录表打开时定位于当前尾部，用户到达已加载范围顶部时加载一页更早的历史，并且只挂载可见行窗口和少量额外缓冲行；仅含请求的分隔行并入下一个具备可测高度的虚拟项，语义行键和 ARIA 索引在向前补页后保持不变。选择、时间线导航、折叠、搜索和请求汇总只覆盖当前已加载的窗口。初始尾部完成定位前，记录表会用明确的加载行遮住真实记录。更早的前缀仍未加载时，已加载记录前会始终保留首行控件；单击它会加载一页更早的历史，页面加载期间则会原地变为禁用的加载状态。固定在记录表上方的 Overview 区域从左到右投影记录的真实开始时间与耗时；仍有更早记录未加载且 viewport 包含已加载时间域起点时，中性的省略号控件会标识被省略的前缀，并可加载一页更早历史，而不会为未知部分虚构耗时。助手时间条会区分记录到的 TTFT 与解码时间，悬停 500 ms 后可查看精确时刻和耗时详情。拖选一个区间会将记录表聚焦到活动区间与该闭区间有重叠的所有记录，清除选择则恢复完整的已加载记录表。滚轮手势用于缩放时间域。右键单击会清除所选区间；在已放大的 viewport 上按住右键拖动则只会平移视图，不会改变该区间。初始视图和流式更新都会停留在尾部；向上滚动会暂停跟随，因此新记录不会打断对旧记录的检查。仅含内容更新的流式帧会保持虚拟行的键和高度不变、复用测量结果，并且不会重复写入末尾滚动位置。已完成的回复会在 Trajectory target State 中保留组装后的 blocks、计时与用量，共享 Session 窗口则保留原始 Event。Trajectory 要求会话壳将 composer 作为浮层置于全高记录表上方；其响应式纵向滚动容器会预留 composer 的实时高度，确保仍可滚动到最后几行。Trajectory 自有的 Definition 从共享 Session 窗口组装业务记录，其中包括因取消而冻结的助手和工具记录，因此 Trajectory 既不读取也不改变 Chat 会话快照。该包不提供 service，也不声明 Context 合并；它会注册 target 专属 Event Definition、Trajectory view builder，以及会话 `'conversation.view'` slot 环中的一个视图标签页。约定：api-contracts v3 §8。 ## 模型体验 diff --git a/packages/client/ui-trajectory/src/client/TrajectoryTable.module.css b/packages/client/ui-trajectory/src/client/TrajectoryTable.module.css index b1d9be9930..49736e81a5 100644 --- a/packages/client/ui-trajectory/src/client/TrajectoryTable.module.css +++ b/packages/client/ui-trajectory/src/client/TrajectoryTable.module.css @@ -55,6 +55,40 @@ animation: history-loading-spin 700ms linear infinite; } +.table tbody .historyLoadRow td { + height: 30px; + padding: 0; + border-bottom-color: var(--dsw-alias-border-l2); +} + +.historyLoadButton { + display: flex; + width: 100%; + height: 29px; + align-items: center; + justify-content: center; + gap: 6px; + border: 0; + background: var(--dsw-alias-bg-layer-1); + color: var(--dsw-alias-label-secondary); + cursor: pointer; + font: var(--dsw-font-xxs-12); +} + +.historyLoadButton:hover:not(:disabled) { + background: var(--dsw-alias-interactive-bg-hover); + color: var(--dsw-alias-label-primary); +} + +.historyLoadButton:focus-visible { + outline: 2px solid var(--dsw-alias-state-business-primary); + outline-offset: -2px; +} + +.historyLoadButton:disabled { + cursor: default; +} + .table:not([data-scroll-ready='true']) { visibility: hidden; } @@ -137,7 +171,7 @@ border: 0; } -.table tbody tr:not([data-collapsed-summary]):not([data-virtual-spacer]) { +.table tbody tr:not([data-collapsed-summary]):not([data-virtual-spacer]):not([data-history-load]) { cursor: default; outline: none; transition: @@ -149,7 +183,7 @@ opacity: 0.24; } -.table tbody tr:not([data-collapsed-summary]):not([data-virtual-spacer]):not([data-selected='true']):hover { +.table tbody tr:not([data-collapsed-summary]):not([data-virtual-spacer]):not([data-history-load]):not([data-selected='true']):hover { background: var(--dsw-alias-interactive-bg-hover); } diff --git a/packages/client/ui-trajectory/src/client/TrajectoryTable.tsx b/packages/client/ui-trajectory/src/client/TrajectoryTable.tsx index 5d2d4d8e31..1a3e616ca4 100644 --- a/packages/client/ui-trajectory/src/client/TrajectoryTable.tsx +++ b/packages/client/ui-trajectory/src/client/TrajectoryTable.tsx @@ -364,6 +364,8 @@ export interface TrajectoryTableProps { recordFocus?: { readonly index: number } | null /** Whether the initial history tail is still loading. */ historyLoading?: boolean + /** Whether another surface is loading one older history page. */ + olderHistoryLoading?: boolean /** First loaded raw event, used to preserve scroll position after prepending a page. */ historyStartSeq?: number | undefined /** Whether one older history page can be requested. */ @@ -1698,6 +1700,7 @@ export function TrajectoryTable({ recordSelection = null, recordFocus = null, historyLoading = false, + olderHistoryLoading = false, historyStartSeq, hasOlderRecords = false, onLoadOlder, @@ -2123,12 +2126,13 @@ export function TrajectoryTable({ virtualIndexByRecordId, virtualizationEnabled, ]) - const requestOlder = useCallback((pane: HTMLDivElement) => { + const requestOlder = useCallback((pane: HTMLDivElement, requireTop: boolean) => { if ( !hasOlderRecords || onLoadOlder === undefined || loadingOlder.current - || pane.scrollTop > OLDER_LOAD_THRESHOLD_PX + || olderHistoryLoading + || (requireTop && pane.scrollTop > OLDER_LOAD_THRESHOLD_PX) ) return loadingOlder.current = true setOlderLoading(true) @@ -2143,7 +2147,7 @@ export function TrajectoryTable({ loadingOlder.current = false setOlderLoading(false) }) - }, [hasOlderRecords, historyStartSeq, onLoadOlder]) + }, [hasOlderRecords, historyStartSeq, olderHistoryLoading, onLoadOlder]) useLayoutEffect(() => { const pane = tablePaneRef.current if (pane === null) return @@ -2176,10 +2180,9 @@ export function TrajectoryTable({ virtualizationEnabled, ]) - const loadingLabel = olderLoading - ? 'Loading earlier history…' - : 'Loading trajectory…' - const showLoading = historyLoading || olderLoading || !tableScrollReady + const olderBusy = olderHistoryLoading || olderLoading + const showInitialLoading = historyLoading || !tableScrollReady + const historyRowOffset = hasOlderRecords ? 1 : 0 return (
@@ -2192,30 +2195,55 @@ export function TrajectoryTable({ followsTableTail.current = pane.scrollHeight - pane.clientHeight - pane.scrollTop <= BOTTOM_FOLLOW_THRESHOLD_PX - requestOlder(pane) + requestOlder(pane, true) }} onClick={(event) => { if (event.target === event.currentTarget) clearAllSelections() }} > - {showLoading && ( + {showInitialLoading && (
)} + {hasOlderRecords && ( + + + + )} {virtualTop > 0 && ( {hasOlderRecords && ( - + diff --git a/packages/client/ui-trajectory/tests/table.client.spec.tsx b/packages/client/ui-trajectory/tests/table.client.spec.tsx index 7e146cee12..467da8088a 100644 --- a/packages/client/ui-trajectory/tests/table.client.spec.tsx +++ b/packages/client/ui-trajectory/tests/table.client.spec.tsx @@ -418,7 +418,9 @@ describe('TrajectoryTable', () => { await waitFor(() => { expect(onLoadOlder).toHaveBeenCalledOnce() }) expect(screen.getByRole('status').textContent).toContain('Loading earlier history…') resolveOlder?.(true) - await waitFor(() => { expect(screen.queryByRole('status')).toBeNull() }) + await waitFor(() => { + expect(screen.getByRole('status').textContent).toBe('') + }) scrollHeight = 260 view.rerender( { const table = screen.getByRole('table') const loadButton = screen.getByRole('button', { name: 'Load earlier history' }) - expect(table.querySelector('tbody > tr:first-child')?.contains(loadButton)).toBe(true) + const loadRow = table.querySelector('tbody > tr:first-child') + expect(loadRow?.contains(loadButton)).toBe(true) + expect(loadRow?.getAttribute('aria-rowindex')).toBe('1') + expect(screen.getByRole('status').textContent).toBe('') expect(table.getAttribute('aria-rowcount')).toBe('4') expect((await screen.findByRole('row', { name: /ASSISTANT/ })).getAttribute('aria-rowindex')) .toBe('2') From 8502a38cb6fd5d816b8fe263bf99a62686575d87 Mon Sep 17 00:00:00 2001 From: "jy.ding" Date: Thu, 13 Aug 2026 14:40:28 +0800 Subject: [PATCH 21/41] docs: add localized community channels --- README.i18n.yaml | 4 ++-- README.md | 2 ++ README.zh.md | 17 +++++++++++++++++ assets/community-wechat-official-account.png | Bin 0 -> 156490 bytes assets/community-wecom-assistant.png | Bin 0 -> 26676 bytes 5 files changed, 21 insertions(+), 2 deletions(-) create mode 100644 assets/community-wechat-official-account.png create mode 100644 assets/community-wecom-assistant.png diff --git a/README.i18n.yaml b/README.i18n.yaml index 573a3ffedb..ee4bfdf7f1 100644 --- a/README.i18n.yaml +++ b/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write README.md -README.md: 646262f0b8317a48cab9aa84bab87b7a2b8e85ec -README.zh.md: 892da6f48cd8b60dd61332ec412f604a8062b27d +README.md: b1d84d6ebd20843f6c2e3b7ccd22cccb2df0d104 +README.zh.md: a3960d3d342d005230f8a40e5c43d4bac882cb7a diff --git a/README.md b/README.md index 646262f0b8..b1d84d6ebd 100644 --- a/README.md +++ b/README.md @@ -39,6 +39,8 @@ pnpm dsh web - Feel free to submit feedback or bug reports through [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions). - Add the [`dsh-plugin`](https://github.com/topics/dsh-plugin) topic to your plugin repository for discoverability. +

Join DeepSeek Harness Discord community.

+ ## Contributing See [CONTRIBUTING.md](CONTRIBUTING.md). diff --git a/README.zh.md b/README.zh.md index 892da6f48c..a3960d3d34 100644 --- a/README.zh.md +++ b/README.zh.md @@ -39,6 +39,23 @@ pnpm dsh web - 欢迎通过 [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions) 提交反馈或 bug 报告。 - 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 主题，便于被发现。 +
+ +
+ + + + + + + + + + + + + + +
企微小助手入群问卷微信公众号
DeepSeek Harness 企微小助手二维码DeepSeek Harness 入群问卷二维码DeepSeek Harness 团队微信公众号二维码
+ ## 参与贡献 参见 [CONTRIBUTING.md](CONTRIBUTING.md)。 diff --git a/assets/community-wechat-official-account.png b/assets/community-wechat-official-account.png new file mode 100644 index 0000000000000000000000000000000000000000..32e36e34797a075d1118299bc772bf390c000761 GIT binary patch literal 156490 zcmag_1y~%*)-MjD!5xAI4TA-D7$8V+3j_=9!8O3(L4yUz0Kp~L1_lonT!IBBI6(&n zcN-X(KiOx$?>YB;_j_*l(@$5eTEA6mRaIA)tcuarR3gBo!9_tqAy83P&_O{#Gx+mh zqdijijkc#BU#MO>N^&SwV|2TZk#Dw!Ds~zgD4dUBY!pmXQWW$*ERQz|Dh&$e-(eIK zRaDyl4eOw?|HJbrGui4kMBR1^5gS}{^yOAgo1+g7{lNb5a3Tn{Z|+j4IL%_ zf9U*teEF#V&NUzHeJrv&E8G=i%f1zrk$%9RB~n{-pd1_P1UC z$`1HPn1qpzt(Tkg`#)+)iwXe$&f)(c{#(C)0shUe=jz}s{XdZZBL6qa@ZahG&gMUf z{|(Ucbg+Fa$iMaC|3|I=r2Pl~AL}Hv9sF#a4HX<*Y+b$n*di=03grF2ru;Wj-p$#~ zQ`gzqR}G zh5Up2Px605aQ_2+1kpEKmKfcv}bp(H#_Sh3h;{tjAw^xzIEvCkh zK|y(mqM{)C#t-%2w=v{$UvJLiG%#QLFJ@(9AFdfZiUdRcC&N5_ew#T4u^(UZDYk*} zzV?#~eFgMe#48f?v3H{b`f021Eow!v`4?&5yoi?L_%;#iCmlR{dn9!=jSLxskG(fL zZk+>P?E3Ye(^@0?{RolbbFHxKybI*RD)J7qbB%IGW*017_7H+dM4sY>tn(sRJE32M zY_H0mK|*7n{nC9nM&5VMXlI@2FR2gi^KCuGkd)HKG-o)-5Btb*BwVI*hw`2|DsWF! zpM$A8_>}kIhd)=Aif#o?!qe@L`)VYnQC^4l=S$kpLSMCK(cH}h1NGY0hEhq_$qqsu z9tEg{?D7)y2EO|2;0M?dG)g7=BtVoczvuAwV*=B?#@p;UX}9F(ZaRk1PRrJ}4TOP> zh67y{y{Zy}HzV#zLhvGvr}9oxp#!|imE1*hs`j5V+iW;x2^7sa9+pDx+&VW55V%yW zpH>zYzU=V7L0Knd^6vUQf}xbJYee#d1&_O8pbOb8{#U;&p%)M5oRePt2WRX}LY-8p z?XCR%xq`F#s0!B{6$<2^a%i>s77NklmdDI%Uy*I-%vjpFwSLHu#BW0leJ|G!nzR@1 z;hStO_Dwru0CYLNBFhkKei6LDduJ;j0KqO!Dq*937=b0v{_23W|!K|z;VA?;DX-mfVTz4>#Q!@xl|3yRXkG|3D;zRsic!=R`u2QAIIbfZ^0A#EA@%!DNO(#M0R~+u~az;&*+OF;<2hLN>>4+GoHt zNwTfc6T`aQ1=4aorm8p5SQu*BC1OpuKFV1(qj4`}sR;Cx<)em+#ZrpRSyAzSva=DT zo7$YjkV@C}GQddulS{FCMVP?RtVrdr3|x^EO|ax|1Qx#zH%iiTQeGC$It7UuY5W$w zom;BGJ*uy|b#$34*CT*Tze|5frc-^^Z8!-|6z4VJO3f4Rr+#7>5a%Kr0QfOnW9+FO zTQy#@^E>hWS^t}5{qb&-j`XAkO$Xj_1E^wS>pP(M#GoJ%Sr9r8&$!uHVP9GS?#?Ux z?878=28LW~zY!#0Suh$w{tS$kdKrZ;dFEfnZ%JeK2bM9>1bDJ52a5m!uA~j>gNGrq&@-ben)v&zj03v+=qO zI`vih_fwg5x)l2ST)u!yq3QH4$tBL?Eyt!kSy&2W?U}Ph6+Xu+@&0IOBoKWc#+1qZ zax{sdy?~7x39LWtmd{Uo8D&FYJWAe1?yp@LYT-1#9`e{ZP$YP~69GjQLsijdd)e(0 z8P?ew{Ls*CG~wqm$n&nGmLKk$@WtM**s>pEI$HH0JzIf-%L*pR`{Y5+Td%ZzY9X1$ z4)6OxYS!~p`Lg=+xH=a>+=V-cJ%>?y8032uW!?@Iqh{A<4rtJu!p}Y3f_*W#RyHt}T8GJBWCSgXVgZ-1vj_|C`E##_mht)c6%?{!Mkd=HnZssw_0xoa||2VsDP`O9asNl>-y2fT8%$)02%XqgmAr#_Q;K9otUnu6L_<=a-hzX+miA2O;B73m!G(YlU7VqKEE#%HVc-y}JLmok}+=L{; z0{QUxv&lmY<&lrwDZhSV!MP-ax^faFibz{MGY+1qzSZlx7ky90Zs~6$6k>Dt_$QKi z7#T<4|M|Nh?JqQ;kJOCL@LZ@M88avPRa^GY;iYJ~ezZC08;?bB#=jbyBR z;$L45zPaptmhm=82;ZU0oS-w@%?|(%^j7XHr0%JTONzdCOb6(N_^%dd-7c6cMECOI{iV$`kCJI`~DZIsiJIkHOIMRDW+ z(bV_oxUc2z27(U;q%R7HOb^0;Qu4GH73R?;2Lit_)L1#~SYvv;4}5@y1k=hB@K#}> zSK8--PpW*|)nXR1rezw)C=9tehSl+Za~y-l1L#Dy^qd-I%%9$E2oDIU{t$iMC0UhW z4jDb&KFLC?9N(Ko!N<=RwXju%Zt{K{lH;tCQ@Cn??H?R~GoE5qq<~naCY{356#sqW z)y3`P0K!CDlr@fE z!Rooxs^Eg9@Y&m;>9h0$%$C4S(cr>X`ifyEFfo7x~npZcoib!OTmWTXrBZQFbnTlRjEBZs^slqhSgc1Is(mB3pT zd_NZw6w$Ie7({r<+v6msaO6L@7WhCTA7MW@9O4lwxJ$H}$hLzZF#qa%WhlA+WZTJPu%g=8tpSyoebz5SAM}R*k;4CGvK%$bkwK2;SxYm+?VlUwrm$=~oR#h^R zAl_9#Te{~3;U|NFue5LnC5=9%lMhyAmQ8UCB(camv>kyhDJsM+g*f)j?`Yp_mV@%h z^Q?Z`W6oB-bfx;BC#~$@Gbo`pq+MOCV6Q&;r1B&+IwKB+pg3>7G=+2QgXIf(WRvM04lg14v=lQ!c~*e(+oD7@~Z-kDSr9! z(7Xa{Nb~&aEax0Ghiwn@OC6q&QR6z{K;Nms+J_E+itE8%+(<@S4R0_KS*MHxmP!> z{g7qOa9~s??ch9Xa`VN_74KKwRgFsqwmZtunUXPGq@-%4u6OI$=D}fpNa(59ueRHx zRfH?o#1GpVL;-UXIIe67_rl~R`KCLilyUskQ_<(*L-a3x$ilchQ;EVD3Osd!BbIZW zRI8;hMIC^8fx1b?3=+{^}r{=h_|XL!E&$gg`^DNUrP z@3K6fL7vRZ-s6=mlS9RagL)B>COOd>dkx5*058wn7PZ+15a7lV92hYVANQT@|u|PR-n}Cg7>Ro%2UeChhL% zNLrgduc$H-$pi!8x8pXy;E48%kykCR494RxZ&1tmF;ynGI(%5qHleEe;~Y2TKS19c z%&N|3p59JwpZR?Z>M>VX;(As-9o+}vA~Fl1f&1ySGl7qM8J2hJeO(4PeJ1Mb_;ycg zP@N&SY~ND+StDgmj~)4duvM&1O-42zDxg5nfjV|iRDUR$O(tP=d_#B{-V-PZ3Ox>G>cMtB z#Xq>N*EqAdN9mqO_X7b*vvG9sL;Mw!O&w?jz9Zu9P}H?oWw|ykCeH*zN^<2j$+gin zr4MHhet~g_>ZD!H)M?NS?^6m_LU^S@v+%GJ!NSYz1_hXhal&-HMynL(z~NZ;8WnBh zYTE_b+`LVv5E7|XJ1fHj5$1%it4BTNG2=O5sq?jS&K!BB+-dE8#d3KTgO#eWJ*5ER znrQ7jiFw*s+Nk^o^{6R&b#%VG%;Pf}qJfjan~iT4BRIS=_Uf_R-l+Wd>zvlQD zhqLIh5{SM$Y(te+=r(^!@GRW`ag%E4O{yAHtT$I-QUPIgkgCn*Iur1n!zibvQ>5L2&X z2Z_5D<2+R^%Ua0m(Vst)yp|O8&I3QeE3I)8h{kOy+r4KbRwZg_B~k`uiFUWRG}~h zI4&?NUZC?A_ra_zsR#9UZn2iq)M&Jh&JFxUD)g2mnt0iUWgKb^q+9c#H?YJI#Ab2X+%4&( z_3Nr`CF}%wwUY8?Vc^pZ&C64_`T|R)&()c8IiK51VY9#X)anWBaIj&pfSghbdqWy4 z-}}@l_-nT&jO#TG4O>p_OIEP}J;e4TD7ROayi}RLbS#T_qa5)#>q7oed)wN^oeL(Y zW0FCzg?o&J&-x!45QN5TSJgK4eTJ0EDMvY_MCHIcG-;f(s|N$X0e;x9g=4(JnP?N0 zO+Jp4Wc7*|8`jT(tPS0IR4;Mg@qa(4IkW78%*A&4s$R%NweJ445M?Y*JCF z76VR*op3+5&}A&W$D~o0om+UdKv~9WOx_N$tx89Nifbe;L^m z4M#S{JwHl+QxQIR_gbI8MhK^|PL6hk=)+y&R0BtqO|kP|GBT?M4=QV_ZCq7vC0|{A z-?Hym-7+|X4|Y@hN(Mu2)6QHxj_lU;RnCVxw}9I+0w|wW`NTiKN`IVPy(TBP>3cfl zf+w-83OsK}d>+jM_@buEmd&8H_w@1^4kg3cGPAB_^i`j#_3XJ$$J^9`ydJ_EfLw|g zLzB?QnSL+%%VR@vb0Isfhb~w4lm5z-03}ueS@DyKa+_`Z+Sn;sFc(MkICkm27b|QIr70zM;3kQ+ z!swGzv;P}F<8t?`=F1sKprn(IbRJ@|;_4e7e_uUvF|zBhd|H2e7qYP^&jX+wXk-0+ z$6Yd=c{*+%xA>MG|3jkV(gqEUzr}F4g({UF;vSE>CUQSY;Jte_Bk_o36f`4>Y^^~< zj7nM$fWPoYE5CcWKD3j8sK@4r#S=;-z_D5a#pC!AKDf^T+H5o}O3(hNTzL4b1f%MJ z`$KSITdrMNjFx2SI+W`=!I-9Ew}@qSgT6>g-=sl?dXZv_OF#GeVc=g(I?avVOqnOP6DfKYw@)R7 zneV}u$L~#KKCydTCLg#+4T9=Zc-t>NGX#)g^UMEyjXL*PF(zurKIF=t7QhCHaAQ`} z)U%wy`Y)!=iSP+G?C^$UKv^=d#^RXVCww5U$o=2>ArEbU$qin4UWnHG(W*K zXOs}gv?1w@4J>Y>r}dky;QmI4{Ly(sS?r)ix=3rVHg1r>+RZ(3bD^2DpoP59x+e4X zq39hkKfScN&#OyI%1Z&?6?G10#YUf!dFZBj)K!mKs9zQ>Sc_y@1oLVydl4E_eh(JY zdP=)Z01Lxgg;N`+Lnra2y>3wHF5G6VXS8sC?km{NLO%Q!CX;Al`-)#YSj`bXgWVRi z`z3fc2?Ssb4K`1T4#zo44LKUW7oV#o=JpkkxqBK)FE%fGLe6HxX0U9pgIkkkTOV2S z0w=IzSHtb>cD#zrX%PQI`^mJ-{q((pJMD2s%GH*Hu2%_6q&M>{bCYI2qIbrIC1jE^ z=ygRtd3n*HlPB3|z{)xObIcr<?)1MPnY6o%Q@;>57G1qk^65MrR$z zPFE@Sw!WCJ+_a1Z$l{lGa2lt6ny9_}IPLXYtulq|m%)a>S4bb&G?O})<6Av?b)0Wc zc8nqQ_f*DBpOL;=A-xd%`aQLzlK5HadBAkHs1vwy#gzw-P1d#8Brgg^0FDt(Vb*0x zub8P}dMQ0{-n@vX7jSr;u7_TBlQX4X8Od`I`@9q~ZWEM7_tSS1+Q&!aWV9$}T}Ol( zDl%5GU4_%A#e^>fHj4BJZtcn4lSNJ%>Pp-BsgJwpZnX}V*hst=JI7{#g7mg>4<|m( z(7VqNCt~pm@20$V(5%DJ7a!3RT{*v}ho3?wyatL!FP0~RnGxC)^Umolq4criy33`w z%leqPxnWIuLu@iy6n^Dh`%P$B1~}ELa=_>e87a)X-d6!%5pO<};sR%Jfl`DF`@?iw zmlx!~x0$6ek3_w-GPJqBx~9WVXkG=p1n(o}_=%LSIW9)I_>f=Ez4hJ9M&@F$0_++! zIAmOM=Z2;_>8IK{OV|9JMcDRG@$SWpew)gcoJ9y%MU>}rqP-WrK6BTX?6g)u0Y&QE)VF| z{GN_}ADAAMPeOPkvUcM8{fXS2yNXR5!gpQ8VKa6IN3x+ncr5)>l%`ER|Nz`;iQ*9jFUYi2T^7sj2nfzBHtOx0Ad#g zd@e1b4i8bXq!$rQFi_ej`jI#Fk4w@3w6VN2^NZN*^~JE2!iEt777S{kpHJvL&(9g5&)|t9i;iPeveVSmlsg9SuS; zB*8M^&5KIX)vxDHCoSbe%N|ms0$+YA8iMOe4?WX^;iz>Bwck0ToiES1ejMU&Zmx!CcIMY{%EygV&>K|GbFlYSiNP};? z>~K8asAp-Uq5#p(J9TiynfN}q8JP}T%=nHM#wQ%Aj_yl zZpXF)uSt`x?*k!>KlVtJTRd88zayEXvEWVlQg$z7Q==h-*F#=A1?A~8#01MnDg8k} zOxB6@ri$+$ZH=>*@rP))MpnLS=NmT6a|Z9fKKfPA?$r6Tr)0rxK^6C9Qdvi9Xn$3h zn=+DdfC81aooxQHc8cn3UX={rp0C|hL0+UG^B`KtX(`mc+(kQP+1r(WT_3Fis9!Eh zcals4`BG~r<0a^B#}r8kz7$U`AmN_@Jwt+ zLGF@2UoFN|4b2iz6hpCpm3Eu;ZG{LSx|WPzCQ$hUGIb<$oP3_J=}J6Lh_hD^K5unO zL=4vXq@pR3g4=B$Vv?+UXaDp_z47{qF-I(bg zEB`9x9`(5tv^gt-)u27ulr^@5mM|8>^B$%{ZsW&q@W&cbLjXw?;tSXMlH2z!9rr_g z@zNi-Q3KL49A&McsJ&&zs%UV!H zCH0WPz9G;~YF5JwBBZWAuff@)Mf*K2@x@LpcQE*+uZ?lc#g(h@?y}FEbC{-7yGbew zBHbUSC7ilv$nzj58VbWb9rliMz>Kl}T*S??bxz#zG zy+#zO_4+Cc3xF*7g+(8tTF2f4GHtlUS4X#Q7mF6cc-r&gehr!)k z>;mnil8M72HhP{{=Q=11FxX2O(IR5$j5rWn@^}i=1p0;4&~UtF2TzlXwM54lvNtLl z;KA57Q;@uM_L5y}b?79O6?*ggb?MwN<)5k^tol);g{M;vV6FG!`p@>8y3GUFCEU{J z82Yg9Mm=0$zAhijxAg?iP7U~t4))VZ?w>35EpGWs#^Vqe_zy<30?c1bwg>u1tpi+_ z?hW59L%x)X^|%K51`Rrce_nXw+J$T6cVBaMm@b}&+o98Qp%ESt5=A{sR`?Uv%5KY= z7rJGvIqc!AN7K`ku=f%JU!PDnu3u(&LoO`J7wap7lPbFOF6oNPr%w1X^=c$aE=X-E z*sKR_B9njGmKdJW^}o4uIeP|lGdYD6+2IVTX)N8ygfuU{1r%&D5VSX*ie&DgGprAL zZgg^lA3s-J4(5aI8S;zDGWZy#-riwRgBs*kJO^!YJ(Zp(rYd`1E|1WxJj=WD!!57g z;4EIHy<ZT+$S)b&;rYR9Oye8AdIxS6Q?l^RDyQ|~9tCQPzn?vsIh-S3^ zHMtd#%!@qZy$+DLiss($+avn^KG*Wi9RngfWX(YN$Xn*w^P1P34GBkE=jL}#A){JX zZ{SB|1a$=*rD(|NyYJQ00lGVs-VT{AaB`a{7KV$bE5Eva5il5E&~~iTE-#)I&_P!c z%Q(e@zw=)Y3OPQkTz6b&b?jyVe?}5#M!#nQq?O6t)#mzkoaf{^3hBE8iCi)vNxtX7 zmj)r1KY2S3;N8pXI?VTmm1yPoorg;uhw==!#DpW$5i!OB=}hsfushn2O*ik~=wwkR zdmzXQGBEw~k=IrmOiidTb2nPVq|B|7@$_uwVGJ>?3_-<+W2)lum)wW#RYX=gc@Jsx zDW0VW&8BWx@b2_F8s6%rxEnf4Jo1Z~e+)&Qqh?u=OA!S^8M;o#&|(bfL|!9~02K=I`#m1P*W zQf5UF=inMUK8d9u>35!0-f{@&+53-ug4V-WbJ;iTr2Thc3dxV+_N0%M^khMxl3 zaD?&95;JjGm1$gC-b|)GV#*})y^qans;6-=B30~QoQ7HnrV-8U*cnFN#})hY4vtA~ z1&f;@E7MPD%_*h}78xkfShHd;tm@V=G=lt`s-u_*X7;$A@GJf2TVw zg}Mid;6Gg$dOQNg*~``;DVNvN z2%e9(@=QYaPZq^{S{FP+_sujF?Aba-o{+iY^reIM`=?b$$+Lr*NjkC{=pJKk$7Va) zpt@h&Nb~48d-t~wl>m*IL^wgDpJvL&wjfPKNX^w!xrv6~^sl0)@iB_ljyg+{t2aQe z!TM5XHwe5>JB7ZRlAw~VrK68FaJ~}_;Zt1v^|rGhsJ;^_EdkL&h-X) zlcAIO+o@ymqIgifQ0B)=1KiQ@e)rfeL86q)FXxmfhpM>)LpT**QQUJ)$b*FJIB8mF zRISmfM_-7mhh_@}fP>{Ak~U)G{OV98dYWDvh$2~f@Lpc;%oPA?V9ey-_cUlQp4jh< zpwVC1tOe8TPDPbIwsA z)F?50VP&=)LPz+-KR9)NHsi&cW|r>&dYx*5GfT|<0QVSczoCl_8-Ri^B7=htBXP+C zyTru*5P)ep1_}zM`OI?Qc+~$wJ1Eei-~B?I+FkQ34W_P7l(AgH0E?t|i_BUdX4`s4 zqv|tgV0p`Tt13Iu539u9Txew&i`0h??l*iT7Ad&SOzOT^0F0dIi>*eI;q$JdcAO=y z{>F)ANmH2B=MnOiwGPz$f&KP2qLomJj`V1ggPpa7!`B6DkE6B7;`~vXV7$7^xlBDJ z$k~1mbwBXMg*$Cy1tT6x<6G*MpZZ-6=Sh}+gCcqRzxGZVq3@0hANOf+C<%(5I5;u{ zmCP;}Ek~5-cdd-;3AfD%#6MXO=6t7HNM}j5rN=E)^?jCfM=veC>?ipId|IhlUY-#Q88P?A_cd$)CTW;%`M~-r-W_$zqnvIY3u*Gs>|sQ_yC@cE?r=sTOWn5#$r*_*tE0!0@GHF zMPJoQK-RJb$v!?#^urdC-AK3SmL838txGjNqzmSr?V<3?8+6 z)s~;!1YMl?51%5+&Yrb5G~$szj>0;+q~t{3$7E9J#Q36RcrCjk6<{F9TD7hL229asV?Q8 zftV5KB?_PoMO|2C()3WKsR>q8YQ9amu%0;qw5J1|aQs*NtuvQ|pd^G*f~}|rDrg6( zv~IL)f_Lh@vS!AHiRwZr#b9BGVzW<*Ai>;A&%6uKGhE5(b3M!I`?yIx?(qRF8ZfwlZK=Mrm{S5>%o%fu z<{X}$SFlPO#4AYRA|M-Sg9Rsyk@Q-w{6F(kONJJ;1 z1<t=>9;%O)%T5M zim#3?p6rnPewrIIoLJB%MI`xH6az)BEF~?6k3SNg4>kjU(f8gj^oge@RySXaTV^1gX+FpVjkTI4>~u{ zo&`%~RTOOFrVkVp=zc33V%^)IZ);QLeMoxcUNjBX7%kH@i>7sBivpf6un@lhn37e@ zh$&?qWYW9OWiZ{By#6|DfBj{FUc9@%bA8a$JF=yL`uillMr~#o@e}oTJF=t#qk~+Y z(3o78N!_En+C}UD8=4{J!lAGsi08H~zmzRzGOtkwKIo$%AghCeD(WN*jgAFOFF*x! zXA*He_L|?zC(mns_MFiuqe^#Ba1|l8fjih&H3q8P z!l%_6P|+3CMhUD{I_4gy=MztdBFR+)tu|xT`}%u`JN-~OpT9t<>$z_D!(A_$jkBDjTOgn z#aPdSI)q$VQ=u7M7>0^c2I&V`2STZNSgB0CQlIS@PKEF-Ll~;0lkO{}l2`I2; z%=C!U^Vk8=b`*WbbAu!<7w@od!~58ct<>^WV|$ zj63+v!_g|3dhG0fPAa&$^<)8T3FppV_1XZ*X4h}1Et3kVWeFk&(OF%UbGs7P!S0k4 z&55OJrYFHtcLxXJVB`+NeIWy)o8h2rP1{BDGG%ag57>G4IJ@ZKMac0fX&!S%P*;$A z=j{)Scq~Z_fNQba{jA%iR$|Xq$YuQ^pf$1M%BgcU5%W9Acg&4m`?>D)6MzxYA(2k% zJ$}YJEH{GTi*!U~=Vg6)g&U?KGXZ_Pe+J*!@YXO&G2v%?Z7BZ^c%$GHL(}C1<3Kj*X!N*%0#mK zOLdj=V6@vgSLWRQA-=TPFx9)>kPAy!b^S}_MZ4K^cO5C?(QX5T#sq<#U|cCfqBp5H zlhe9r&D@YXC&y}ZdGECD34F=DkIl%=_@e&>O!2O?d@UD{Jw$#KB#1~7);AVRKdNlk6um5UA6IsS?P(V z2FT_I9EL>XAv;#D@1TR+=jG2&JtQqMlSKs=D9|E} zK%uEpt_dQ`iJ_mmEN75rv1!mu*6ne&AhVh}P+=h%#4q-8@SW6fB&m8~fx|HXfTUQ4wfNepS$k`U7rf^1U$#*2)-yMwI& zS(k;na2)S)_!)cWAxx^#_H)gy^>2khW?Mlo>V2Cyw4xR5P$tuh6p6r|qd%Qp=xK{z ziqi`eact@3ZD$9MXoceW6Q1RR`Aw+P#$*wd>~Y0;X!J!MT(x7qb^2?86%<3g{X@`( zof1yrKM}V)r;GqE>W=aB|3*F2hZjVjWTooQu)LoKYG_v0xTagOERlx z0Ie_V!&9|%W>~!)RVT!5qGO@zq_xaSv}p) zv)$1w9-UK$X=O^IOAE6bUG#Uj#9K(4i3ilHaxTR|QkGS(|0p0FdzGCbmf&?lNdI7m zb&fqvyO_MZ%)9Si#~9xxEkbD5th!qoz@#o+}!{4eBrc#?;V$i^uL}yhzm5gAa-MRI_h%PeQi0=4py7h=&uaWBL zmXRC9kRPU-xjf4Cmsn~xju#a#6!e`S(W#sDmK1Qy4xV>|sEnOmz910kxyV#UyL=LdR|NR$_rR`fi2s>k*pD;=1kU zPJ=_C2GLks{NiGF>Rai@EUqOqN0yQAeAL;Q<_ct#s|J~#6k_9DK-rb5Z|LH!e*GO_0-F|K@NALPiLnl_P>|ePP|MJBoGNrdTVXMNP;Hqy zMD@v?FKq!eo^MbH{A&lNgmBMb1dN#HJXvH*qNlB=Odrn%x4SDDRkImQY*Yn#Oglqg zdkQ3YE^>QrdmSI%*EnI<7@@+gKBqr2I;*dY}Tj4*f6` z5fZEr`43Bv6IX_ z)rG`uF*XL8GoF&j%T^o9Pp{JUBi3@#Y(^vstRcAT}{$_X!DhyJh-J zh7=)JT|w^nqxVIEf9u>`V$LYvmo_KrV~vI`F;f6 z@ExgX^3!*S{zP1>8(#Bxg*ufcT-I zQEB-~;W&9?Udqn}O)9Ing~hbtxS8DQrOQ3S~eEKvvp#C^w^8S2nHdNNKso^ zV-2BR&ZixQ$&)ObzQ8qBwGvAKWqI9<9kMBQX)ti2p4mPfOP+hYE)DXuD=t35=_0U7 zUyN2&yQ0yDBtxK)D?MJ&AB^_l?DH;L^KV0`19uID4*CyfK$SioIS6GktB%$}?2dgW z2wEYd@dGp;pZhh>{6pz=7;J8@DoOKG;nr6DN{nX&olG}fX?P{&B9Fdrf)XSC$@cc! z7N5^>sL>0yw&)`os~@eH{)LJ=BVM^+3Lh70OG263$wX2s0pDxAAk82FXLgNL4_!4Q zTpJgj>WV0_sB8Dj@<@BxSKr)epGzfl9AJOeGsII`CB>Sj;uI!J$k)bCUajVB?{Ab6 zM6o$YvLm|6a^H7P6kQV3BG!>45Y`P3#9!FxU5gMcvuni*agX=Q>yvfVqOroV+%y zo(ardwa^TIk=MY!oiaxiO^FVjO|jbuAEY#UndT_V&lk*J~DSoy^Cb>Jly+%FaE+uXeV5%6LyVVBu(FB@Ko@x$H)hCdW9~Z&T%3+Tx(SBdt z^Jmr*wd>ztwja(7qxRgn-&%!Bh72U~lOWRHRP&Mh0ITI1-U^r6(jiLu|D0cXAJV6| zv;r=J7$5^3!DHh{#CXW#u3Uq;RhUw>&5~cK^>3K-j2Vk+xAy(&=_lWtQGrmxOz#)j zw_oz5D^70z_{fFqY29;#q`#)F_u9~hX`K~TcC80oO-=>9ju96*O3Ay4$-DV;n&ZnW ztlbft-)E)C&rI!a%#r&cqo9XNDOt%WuiTce4zrg^`3_Xu-ViUlmMzuCL3z;X7cY|P z!@vgCxrjCKg&#$2I()$B6+!;J{;YwOKMrrwT6~Ew)jMwDI;lPv^a7=k{U5qdl< z|4bvrw~HhgLRk)eJk!A$-2CCv`{ zg!|}q3sO&{i-|GZS`1U2Y3}#V7X|XtuhWjwVFc|_W`0A-Dh+as=avEpgL2xD&}+Hv z+nGQj$&w*XHp@Yp#**0?9P!r{J&Dn24MOKAd^gq@xffVm+918ee7$}Sz^H6R7W!se;nJh#s>2psUAEX zqVo>W2EEuRc{gC8bsL2F3-s{3+5Dp2?%1+$Aq%^pvS!ph=X-gep27Mhjsbx$KpJ_c zlkE_U=CfG3a7Hta?VEXw)1##;3h9y$*0J&#C-7=6fLqVEs-7yBd-Ph_J=C<&#RqGH zxQ23fZR$riya>6{DH?~d>2wC*ovJ z&j}J#V5*w^j=XdiUfL~9?V<$I1AFdnbXCv(vdY~K@%Len$Q%D5a5$Z3gOkV|8B~@h zl!Xh7EnSm3&I%xGD!Y*g|#7<=_(cDM&ypIerpP}K{D`JFKcj`0?c8fEdsCwEq52FW@=EmVJPn#>;E#l>I zUUmyF4GtuhNVo_DyjxWNox?aA==U?E(tc-C+n3Vy(j>D2kkNszn4i(xsC1P_sV~op zd17Sel4v3fhv{2anA;nOM*+!h^O0 zkvMYZ0ONTDC$A~bXX*B^(Qq3L8lT-h;W?9NC-+r8&or4>&lDn$Pn*B}#($qns~XRA z0&t8{A6Da^VAc3vtGf4G#9)ITlY>!!E$*40yyQWq_Lx@mS+a3XNUm3N1bk78;V{`V zPXpkaboxplGUumLHmfpv<^=7S=e_=d<*OUM*);WOlqLQ`AQK+3y|;(eL}_I{e5y(7 zrH7og8_cZ>`$~$d2_(9zYUG|B>2IAw4qtm3-BAE;l~`7i>FbD+^^QtGHyO5H?~acx ziwQmi+|cj{nS*+Fac|3WTh{%Bxhyd65#I6JN1E#K$>-RZ0RRjjw-8a2^Y^ z@!Sy7chmS%w~u}7W7W2B2f>tPaq#Wf3gsJZXxiA3sb6i6)qlmTvTFD>2}b~D-qfcM zE9Q~Q>SHZt!z3%$ozgy5XVF#CkA*3w{m|=sWDM_!&wV@vOTgxE*xZ%XS})tlYR&Li zbq0Jx!F^=QIzNKqh8X$u!M8yCaTf0M`c^G5=s*Z@EdZYNbw)&nF}kvSsC# zRYhoa)1QdDK{n({zI~CQ{YK#bAo6i4)kOVet?UGgYgdr9`y@O&R$K(ou;nyE+>oTa zBR+@E+wBHZSvm0Ou(=ClD>sP|YNlQlUwbazE{DB0tQ=H3m{8I8n8&GUr`jbN=9*JS zd92AXSlik~)?IcYJImpPIft%~mdx?aKPy6g0{>Ri;dj?33uK8;_=g7uumn9^<95&l zSf-}9>rP)rJK-@y|KsgR4#4!)g)Z6)`z?Bf3)8wD+ z8t6nUR>vAAXv;zrO(G{KDToaK(8GWgfyuGZ@V-a8pJ`MXFey~kgM7I1C9C!iO31VX z@d-~}h1QfqOn7EKvj?+401f+xNv`zA$eRMQhcPKr0wr0LF(+KR@#C1_gE@hpN_1_9 z_iU*C*2rQJ+8E>$^}H>5t@8A_H56JUtr{U&RdKtmxO+c$=z4-l%;s+6Dz`$nSLk8n zImqPnqr7!N6f{IpS+#a5^cdcHpu2M@1-HC1b}QMnQqUiaC{t5P(mkdpzgLKl`>)kSQ{;LUcIt+0{f;4$N30+z^F z4Q3T0rk)R8;0U$xs6xjlv#y%6}Q zjA5D+cz^Nx)KC3XFc^Up=frt23)~Sa1)4ea`|Qv_8J5p+^S( zmXg*c`k0vka=H2W=myZRWJjqM{DD!!&H_$ZWB#$Vm;pPu3)pqTam zN;s(P9F{xcbLutYZG~(@*c`Sy+3}F7pD&JPzV}2CZl;S!MC@H$=?SNw@k4lfN z`@J%%r!8xkK;F0VrMIP&eRlb=q`;V{PeRArrNhILs^)mtc84abn*YZb(Wf9ML7;PLf)ilKbV3PLfgQaI^k!JPm_No zt$8Zbtp3mRIR)GZT=D7Fh@n{(7V8)vQviwyS!jaXH*RN$tzy~$gtmd9k`7=anDrzR zg}x{Ztuj6|vC3pLJ<`Cs{@N19_{$fvJ%&G5@Y*pvCMY@J3?neRF#^Ntn1|E)p7(7Y zf%10dnx6K2KeGt8pu(Z8lD5+gYjO^AA*QW(_3RO7$t<)f>!q!j+m(+Vm0JvB^K}i` zxc}^*{WGu2?90h;4WuaR@Q&n4ufATfVq(?F&(W?`mJZ%GfAcs0&fobv{rH(IPSi?* zJ@3En>%Q*$zyJGBAZJR6Y&$;@XW@DwHcK-?;Ob^IKmF4`-H#W(^wLWnS1=WJ9Iiq; z`=@{Ur~kyC_!EAD&h~H!%V>p-jEN|I>E>I%^;`V|Okn-7ix1c__Mc9C&DVU5Kh5!< zhYj=bpZ@bd|MT&;MP0;I?6wXbZ>sU$_rCXC?|PS5-8fhc0m3=k?-+kPmDJB>aneCE zJXRdBU;w`9o4)Ct?|kPRLr(Y~8iWals+w3VhL*`c0Q+r78EsOSbcFVgaDU~m{1rX0 zg>cZ?rQEKbOPuCsfA(j;{L8=Gmhh)n=4EuO{^Ih+L>5T;BLP+ueJ`L5{Cj`z@8wXe z-fOazdjvKnFdNP3p;BOu1A$L{#XN2GcxL7Mm;dr#?l0b6j#xDno7KNNo|`&PL}y$L z4V@G{nBJlf;MOUfx;<|(So_0W{9AwPZ&I4rqF_Xus|4qN? zH+{hud;xAQj&6j5JY{ND?}`Di3O#a8?5gh2e(aE~;cVH1R%So#(>~2p`K@n#Yk2)Z zGAUgaPTHURlYcU|@i~Dv<+A(2FZ@FH>1O#hRylwM9Z}Ckn)621kA4Mm1b{34`zMKqN)!0O~g7;bNr&teAfi5Zi>FaMZYk1Y$?HK;9b3PV#lhIw%c;x=4N`%vu z8RRCT(^ebs)9^W}z;*s2YB%_b4WH`h^F3{v{ikrAqbi)HD&IbUQtz`t^K~kwrk!^3 z2xnt{keJ1_tbI(Uujc9tq5|&?eay($i}Yb5ALIf!=ysIVkckki;0vd(g?x2%@!H?# zdF{GBCHBnE0|84R{<&Hy?fJ{j2Bzn^&wic$IugX<%z46Td>l4CCzej%f z2gAnu3p2E{Z6=wzlHA2@tYfF>1<1OaMS^ni@pioxH=H(mjzDSF*M)eh*%eB(`9$-+ zAnM7juS)8adI&Kjw_o*{G^7_o+4~l*p0XWs(f7`2;Jrj^XBy@?&ifQZ@zm^LZx(-e z;SPGHt7_hEu@EXBA4|4zdv8Ou9WK3yHqQ%l zGb^=bEwqs>y;8Rv&B~e*=KO+R^Dm;pT<(O|wx9$A1jfY_GR(?6J)fSMth&Mor}@vVXEOkELf|BCXZAy5 zkH_3B4oy|w>6Cjzzo+z3BaIgY#aTZJ6Ih(0lf|E`$wW zbvm;NDsUw}*L(`LGc0qPgK**%$IAFhVZWH&Zg|pBt zUqv{WshVi2;j63P{N^{~z*eI?$cIn27>8b!fB3^6&Oc3?YQI|q1$Lg5-Jc(F%m0cb z4>tlb{SY~mxKY+nB5a7!xcDS4N+};BUv_3)d~RNWaHBkd-^4m+SSi#*UQ!TZHrtwY zu7q|Bdn4|Jf-GF$y&^d$*7JyI_1iPmO8WcCNG+vpI3N&l9yAJ6kxv}fX$i` zLU}zqVOnU)3=LB%H4I8sk|59w@439CgBw;jD2@~mzGoVD5w7~@d0jF&N^lD9yvW@V zIG@8cpMq@>6^~g}#*F6t*pCglR(9o9vfeA$PrV~?(E!(0cAq&Z-M{b!bmFVqHh(Ezvzj#YyI0=zqS3Hwu4@QCc z%+LHxQ~8H%5d#l-L$XZatuL@6q!)|H3R|PV19$}D??Dcx#cG9JTjn1JRYisq%xTC4 zTHVs%ser%=0@<^WfREV~{KCkssdUuDmXLn^Cc!C}#j-71+)8S#fvZmot*5D{SHNyn z8i&38xz=-)A;EaIOk}njCigQON(iV)xl|cbh8>^#A#;-`F+c5LkLmSI>udA37N?!e z>@}Z)?CmY({>h*GNk6G$XrI|D`JMHcFwcdsuWYot6ZQQCPo{1_`%HT-@;Zm)x@7XQ zvYIQtyOq2;QK;}^Mf0XNy~*1z_+FLM*odpuDs%Xek9@>a)2@ZoygcvT0UNhuQ-<)~ zt1+?JXuMSCyi;wsdM3N?0Q}g^ulY5<#xFPV3@oYD?IwyNH^hp)U!mH=6{?)&liCy8fjz06Q0#+CMXR~3* z1Mv8~PXRFm6bFIo(-Y#vdAv`0&y0otK}?Hf>Z0@u#s<*3mK_|Gw<6j>CkK_+c?!lx z?`OvT&>#9k0xP#06P1H8UJRwPq0p+Y$};LvF^e%mC*-+KSqct}W&M}`@?U<==X_3y z%eox(32g(JT7B1q*F#_Vm0#&D?p+Aw05;X&Q1v{|zU5oK#XB}Ph@I053&_0{S4=$5 ze*f?P{XNy-_qSfG;^Q&E|3Cew|I}U9{&Yhf+n)}M?EdY){kOm4cl?eBNFNPxH_RIf zgze{j-sgS$w|_et%;D!H;6amv$}%0=lQ@U+{fe*nim(0Juk}=R|6(EpB|n2FXF@N> zullO5df)rrClO#9b-W!6{k$vR{`R;3!+-b>KkKtTt2I&__kQ&`nA(s1*pGe5mwZW> z{uWwEriryp84nN4` zj+85Z#GJ%_MvZLS+fmoppLay{nQo`T8>CW?1}2!q9gt+FK$@1r!qKN3lM}*qo`T%9 z`D}|H`k@~ZQk5xNiFG{+d_J2KL?3oaj%{m4!Y-G-C6TH20%W(Tt&FVehPCWc+3``Jd?o1Q;?UjNthT1z09m_1YfQ5GyOrs=T|9H4?_Ig-&H`Z z9S_a02C!CAWttu3i3*H|FidC;;tzT|sLY(7X7f32$7Dj&XgIfx-0$R-L$)xK`V948 zN(6sl|LVJ_z^i#OK;{ispL_5i!PL_(7mFZPBzZHXB@EsWC9M~RnSc=jMF9JeC?j7-QsGIBJ9KT3s&USRTA0R!|xn4Vmko6rp>L~aXr z5V=u?T;py4HyLs}o<}(5aMlPwI-N~cgP+PIv<>Q8xXPQXTx|K&2vsl7Gexgat|pvk zVk)Fr8ZesSFsyDUL|~jW+$fus=|m@t-0W(ynHuL0D6I5W8mM+6tR20AH#>M5nCib8 z1~`%FHQx)aF-9I*qj@oeir7i3l*#*Y-%q|c%)%EjRvYCr$?W~CCaX6{t@R~_{IM~`B)32Cw zWUN+LLp?rvt=S1jh$_9=N|CHM+NIHjRrSgIq52^c!@Hm{mC5;LNSQ`8YBY*QnO?;b z>Z>Q(b^;_}b!!O5kG|BxXPYMc-SveY|HzD-Fr4@Lp}itE4mVbhVOV*GbF0wMRI_E> zRGONhglnXhEyFx-{O=tCgsI;H&e5^tJSZT>Tsj#A-b3!8C;yJp$cC^aWZ?R!wecQq~W6hI|g~g!)0=oiH2%zBC^u8msXhQ>ax20(Tq8cy^H@C-dFz1TnV?4|IaX;#iNMGKqLc}FY|XBKhG{n7 zyGv^Cc__z&05t-aL>8yW`O`UMcA9Hnwvfat8X5!6nG`^$Ys|GhGp98 zM6$NY`otn#DM5b5`3b`o9^g#;30LdXIiX<+IvjZD5k)W?V0F8fVN!BJSY7SGg|iS^ z&iD8U8pd#1=KAq$s$qT%Bp5a6shJ>EkrpS71bK-4{KZ0pv^(0hM zbx<62)5sOG>iNT30)6{IF}0L>%F389;1PgL@t=pl_tp;$5mz|^WkjAVupQ(m13wr2 z#oAmJe6ownix_@~x0L?L@4r27+H{pZ0(4*<&H- zYdjOizlzOTQ&!2DJtmB+@bz42rVNi6-lu*|a})QGFx;>@b6B+xf=^5x#IMR*cnYrW zUP!sk-R`&7z>={Lw=y=E-RrMcg#F63vG5l&9X7#Yn?&ZN}Vi;zGF$u8o94sf0W;;&f#BJDB2&0i3Zv0G?TNeZp zcft{pDI;9OJ*$v$PKFufX`Y3ESwo*T8RXa=#7BGj)8O$iv`3h!y%2_;P$2TqTk%6< z17Mg&pOcXG#yYi`Z5UwW*2VB30s0#@ZZ%HCtsQg-V|J#VDa*#J=d)C<2ppkFN6RDlx1DJKu1{uPN}hakAG0 zpdW5Dwa7F@vtkBJFtrZJka^hX8#ddcYi^u|MH$;X7gw)!Jd$|}8LYSyaWI6{&j3ak z^U+*e5Nm8l?jqiBh}DEPY(p|9`=jnuh6ZfBjsH~`KPgXxVV((Co$uw$H$hj}e(ISi zjQMIiJU8ZpAxvv;@KeDX>JR=qAJ1*Mi913L4GE*XML}q7@9-EOU`$q%A+{^ULUlG!e@~X5i{+z-^AH(Wj*ZIYh!DPB>6wQ*fDgem zDi~8vohdRwOPMS3!DhD4&G?`?6K-j=gJ8-CfMrGF<#2;c1&;Bd$Ak&~z(2fsr+W&{__gh4*oIGQb2KCL?Ccg|g-xIl zm{=WA^evew*8zEN2wW^ZN~~xs|E%xcgdYI<@BtVOfgFw@uvy=o=Bq?~!x_E1Ox7!Y zl@Z{%Z|tO37T?z4!4TCIIWhpB0^x?aWJS~uATss*_&z^hC2H6zxH2*^rLkhpn+C&Y zH?=8I`Vx?)#{W$Ou6WKN0i~5~a{fmKjuH*LhUChDA1zJ(4JCD{zR*iqp_mUWZ~)$l z#e^P`z7WG<@H7GV#Kc!+c0~*zAwxYrH8odHTUtp8J^KUeAq5@Id>Zy8WVssTUa)5{ z;lGDLN9>pt3<9#NAZ*(?Nb)Rb{s}akXfS-jdu?Y(Pcz6ppF7nk5i%t!m&ju!X#Egd zm3vA9+fTian)Y^Cx7MXORU*)XU7Uf|+cJ~w6+5QA^+J~BE|OB{YRx&JDi^3ila+MU zho`9lSP!R;UOaW@U;2|=Tw(K9IyUJ?P= zB+atblJ%zAMXosy9)^at(2yDDBbefO9&GfiXrjIEg#+k~rifAyqFRm5m`o3h4~(*u zMTw7dhO4X^E*D5?GAznCzoCGGrvA|@ZUpp{n%p)hw}0UIM-NiJdb>}#Jtz8y;)-$@xBG$@gG5OQtnz1=oe9S4>uv7rp|hEAbj7Q=XO)Y!Emt+_S3?>mkOC2G zQN(6_S3DUp4F|>7(*R3Hl!&c($oT6OA4~`^;A*wfSY#g3%x2bEo>&3v+xBvkfq@A5R`kN@%azyJLcjwA93*~qa^Ff2s6Sy3eC$ezx-X_ z^<6L_2fuotWfC3T1V?y}0Z~HdCzew=j#rBXao`zZ`D?JW>;wOGW zj@1Ox7Fq$(sBiYoZ+^2t-3a`PG7shzoQ&#+KJ+1Y7|X3kW8;6aAV9wK(o1?WBoi`M zQ~&g)XiO=);v2RZ^y&9Z(%6t*pOFzm#`YkW``$z>&*Sg>&hG?heHBW+dJzW?mP`rn zRTKg9C@E1<1~!IZ?|tuk-~H})=Pf|;U^c>^{j-1e8@}NiMhSe-EkINL(bS7kH32JS ztZ>W2#M(QV5V=~1FO0m;x`I@n^@>+&21sbyf;se$*&%tv`nre%;atAr*%2UnHhmwWRA4F2}V<|K$od za`cL_^5M;8f%6AG@PSNVv@nDM0ce!G5j?^@0{v>P%VIDGDK#t84}bW>-r>cZhhtXw zpem3m6$_YVOjg5WQ;_&0Acc0keoPX8xeW|2PG|oO6D7W(Z?%C@H<+ z3MQ|Ve&k1fBnw2?r~%ZacDKrg73L<^a~&Dz6{dM$@7kjA()Ad26Mu zT0t|Ja5)@5-7I<$yU`}%8ijfO+YjT!P&4GAxRCiYG-c>M)vsh$&l?$xVc>)fprNTs zE^BG&QzhHbbzn9h1i_#CFecpVuCPzM_kJ&R&Z$%Nt?vH5ke#*He%7;|wf27B_f++_sz$%4`or+xEeMo_F4wcn^vE-H zK-1D?{x)#JET_jKm$6%(tzE0U1Wwb5ZEMwYBugF*F^n#S92>+$UPt3fs~%B|T<3N`jx5k6}0ilR^?W+Q(3(GyBLks<8dKMh&Aq zHK&4C{mpd~Bh1mT%+hz&2mtGp(Wn|X(etokThzl6a8llzw0ex)vX^2Wd}rB$Ezhox z!OMV0p4AR$n(k%k;Wn@`A|`tp=d`q1$c|HZK2Vn}mA2j*J0#=Mk$MUXf3tgvg{^=t zH49Ipf-e|m5}c(vM`Q_?M)Av~q}bwVU;&edze}s+`>U%VOXn6z{3ONLf-MPK#d4{h z5pz6q!&i+;omTN%%GFOoreGO^U)nsE(l$xD$aEBZE#XPvYuTP-fTzC}?0%y#51BNFa1^-& zjH@>nP=;07IF}k4Rb#~LL^Vr|GTg+#Rsk_OMcZ68nrjTK^O5mf?ZDGt3#P*Hlss2! zzP-BkyJvNIzulggk$JqU&z8~Z@~x!SGLlPL*eGD%K1NcrG_TL~$K+~YzYdth9Fu(t z*_t-j2-p(YLPl`xouwOsm*LlXw)AfWj^amqi>H_xTg?0Z)$lqQ+33iqznr5dNK0{! zfyLjM5y5ws?w%*=jznj7?IvA%##?YC8to(dQb7~`462FYIXTs?bf!kjJg;M-#w{4h zlOn5uO)18}%9xB|${awc0x;GyF=RUN?1LLJ!eW;Ph9}b+W9kt(`fIO7B}*|iCN|R% zIZYdNyixwpc3Orp9p{m-hA#=TglB81v8zU+CRMA*$vFj10=5W`7dbMFQEVTH^6#N0 zNv0z*t2`ssGUOh5mQ_6KN?3MPQLYv;PTBBXYV716!;5+F78LACK-ad6BVi3c72m+; zn4!a|C=E%&%I1I*m8kHr} zj5aA5X^-P?7W3f`VNP zsxFCgnHr_@YU#8Xepmc;E{z5Phj58m^)zry5t8zZOR>l2U}>kQ(ZBW9Olden+mIMp zE$y^=cOHxY9;OT9+S1;N;PYtS)!NDrf$=CRjNAP_tie(FP_eJVrk+m7j5r zAzh*}mL&L+Oh&>XGzy+V2u}0!!^@%dvy4ifko(i>AvJbJQz`QEc}bL7a!A;j z?vq>Hg7N3aoa!yRG8lxm)iocc|AR!@N;?ZK$RlQ|6 zQR#4|6CM@6U!3IkjKt27n_%~3+D^tW5>J~lT{)SY>{Y=HpH_ zx*RE;%s%PxYG>f{{0-hY@OtRhCaSS9?6==N;g>L(h99#)BesH9)74oR22N7~Lg-HO zyHULS{JKcLeJa1?W!m>K5xnfiP^A!KbB%^T%>7AWwczLR>Wz%mab&oxox73p+<}@; zTYfY6MH1m(9WhN%>1a~>Hul_04C#cHWNRkB})L%0`t$*68& zs>?2FTDs@FvOVAZTFagCbL;?Ywm=)<3qglq4B^j|k<){dEhJey2#PPbo@_WCyR5qg90bsKnT<;RU z?UNzgTT1L!id8?tgYMz^!s8;IB;OBo(U8%5j;ivAs-3)ksW+#C$j=zTMaF>fB?4O& zYH{e50FNiM#$3UZG%;Lun$5~Dxh9DcFMdX9IVl&}OFVvT?kTG&8HSO(OZ=(z!fRdF zLc4SGF4Nu6(;Zh`POM6OM9Z^`ha`uyA2ND~iu1s&H`z@UNCQbaz!^Yc=VeJ0TAVqV zJZ!z?bd9vl*zY}Pj$Y*nJ0kC!t&lcK8&zslV?O0jyYr#~+bL&iQK*cGvQ2WCx)J&i z+hM!Ok`h`YBepSq+eC?a6>gO1u)9ySg~4+bbolxqnsdyApYs-M{o?bR<0(L$+&8K7 zxgFb`$bJ|PyL9zJ(mkIyU-FWd_~r3=uPGsU^;zm!vUn*DcBhhL@Y#hjb)A}NsPvbkz;udY^9C-6ym z1v(P_YaX5&HbPfRcoN%5U@2^UL()l82f*ff@%ucHa4=L6kF!9${?2%7w zYWK(EBb0}_x)KC4?d*A!soGqtnt8eMEp8wA8 z{7&v<9^k&-Lf-J;rTBp#_<_%U_On7Pah`W@OWP6{sN8km_kG{zLv;QFB#(@$3v3)Q z@B{eQI`K!+DmVZ~)*lOe^2sNia%DR1^!EuB%ue{2{USC2fB*M?|N7Uz-d&Uzp>n3q zoSi5)*Zbc0zR!RD^ElP+zICfhf%E2NV$i+s{oe2W%x6C1)M1t)KCoR%Ax7uK z9}E1*M?T`;RjJ(;`vy2+{KwNSkxk?U;4f3Y;SFzaU=(Y=7&@TpM5%r3s=&9t^{s#S zhkqEDRY&^%e>vC=5d5C^yyw%O{093NmOuKVKhg~cAU!$f zEr?ODG`j5H1Ue#K#bj0DROEQVrlsfGG_7c(OkMWO!_+bL5!KG|*q#`x{n396q8#qT znu;oIqd05hbpHpLC_C8IV~nN{h$mEWdU$c7%`1>G5{@$XO@URRYRJe)QDanXiSp+2 zg|deuzrwHbAI|rZyn(l8$gY`gIVl|eB$||5n;pr72?M`2>WnWwawoHWDW68c1UAJU zKgEv$vk;F+W1a{%q&-qVH<}EWq8tMPY_7|cFs~e9td{c(Z3#EZXpj7%TFg3W*Pq&ny4N@yOWwCLE-9dl0 zbV}_Q`xDj-7-eRoX{&gCm#NE>Hp-nkQ~q<_f?*FSTbIXt?CFwe@;q;+ZH4Y>f@wTP zo?MPsw`Z$SklDzLrjQv|L-2c%V76+6%!x6LfYDfG7y$`MI(DW;oM0J8k^t(-bb?LO z5$x&XjHy(hq^7`qB<)mPlG`wH>}79tHO@{~1_h>4RE+NOMT(7Px%4ncB3~6X``P-h z4U{5TXow6UWN>EMO5?efa0h_UYG{qJWXm|CA!8Uuo5%YDJ`4<=i~+BXqu_~c3m<>7 ztYY?^W5y!uR03yi_BgjxZTZU?g5ZKXvwRWq*5YYHW#_v>iD;gDv$Q$$t{8 z%q{k$@OukRIjbY5EjVKrQtX-E5xuvadKL-W+Os=2yJPCnKC*jTAzS_sQ>|{$O)5SAE%?xT z@thIRO})uRp45$GG{!h7_F;kVtT`tY_$+GRNp;;4c-gLcy1(&sdT}MqxWjx5W*L4` zlmc(B#-+CBl4sesV>~+@c*b``C$61M-C0^D+X7GNrob_3A2|g+>!ztxjk%(KEdMqt zDu0b5vk*BUd6p!r&M9!3E}07mKY(kQtFSvWXt)nD?xx;?j;~DLGy15MB zCe6PWy*9;30J)O-+Ne?awP1iHe(72AwB+T|O*~BTtu z=h1(*y-(QHcCUBD*%@y&aBF{C$f?;|?>@s;-mP?D8%N0f6kAl!6aV2mqWQ1WddN)WCmowY1uL)t3KH=j0GgiYNKKJGx`xom)KQgV4(%`Q*q(vag9G3 zvK4-*`jaj-3O?INY8t}nM}T>-CHrzz zFK2#cu|`TTU6rBLSxT?i`3Zf-@=EGt$=LodR{4==j(%#CDvX7V{B_>8L4)%jJ>xEK z=|5FZ8j|KHu>CoeXA4ii4N4m|7EB6P@MBBaS&fk;B?sS-F_FX2DSZ0F88DB$;mK%f z2`u&c;YCwRCAqnQ4LKeo^4MFnk(ZyLjJDWIJSrEz5oaDaF*wH>M;pN5>5n8zv1A@S z$c5W7BY!022LVS|Y+y?S_gIQb#wGZ+J*iq2#Yw zm8X9adcy2XADj%oD?ys3X-Jo2ddg3nTS)rcNLy)AOm>kiJe*tj+z(dsyw;S& zE|ruAfOvY+Qw#}Nwsa|0) zx)ehE41oL!iIlU7*Kn^u$3Pnax@D_iPE@HBzt}|anC5C=ri#KJq>*#~{J;aW;rNpx zv=4Gz{a+K^wxK69q=eMI)6d%$b1HviXMeTL!5}^-4HaV|Zx|LQE%Er{OmR z#+-wvO9d>AB+V}#5(PYN@e+TMhaUP7E%ur;weGcemMx`5<(25aN|yY6zIvBH@7I^LU#6RKl{yB6-fVK1D^R2RynS= zkxmy3sRT1jWl!y?`sQL*84hiA>6&Do!gAa4bnr^m$^cI&Fr@v~X!sNp-B*-P50-4X zxmC6+uvIV^PBIwo3W2fx>MZ!x3zCMk$wAD%5qk%Z zQ)&5iz3^=Kt!s;C->)rpEgJ#3bE@Rc0U+BJL#mpjEq<%HCsVblDBx~Z1LFb1Z^WOQ zQ~AZL8UVidhL>7a`Ykty2Z@4Ej@1c4wIahEwPB zWUv=P_O}e7kbIubsTLAuS(+j{Xyl~IQ%Il(i(EVBv*AY?m?_6Bk&>g_@spI(mBKsn z_=6|N$#76}M02)RGlJ!paybLYWs$D+E<;i;KV~5*cBkG76CyTeZ@>Rp1y*hLBb`^&l!aPXR&|DPwK)$yBJA{Y;yGh__^_V_$(r-ZLxgLGPKYC$-?o>H zhbMY9M8Q2w$z>xQ$7LhN@T}?!CwphtVX}%=BH$dXk?n?d1ZR_!DV-Es`uTMOI9qQ2 zgye~{Dg!ueAs#ZFhnHd%zm<0t%!wRT9xhT4MiRr0CuAZt&0+9~IQ;~hFk`N?f^t!8 z%9B*0)j(91yw&`+!xV1n8aYQhIx%~yy6i<-DkIoV;7D>on;r*16}bg+_O$ozm7G@; z<=U=|uI{g0Q&)C5W5^Z753lo0cWtG%#(u%0)tPk6$g_-<&Y5@EygV2QT*8|D41<2m zIWXC^QOsCx6#9+6dAI><(Uzo$6z(^G8*>scr>k2f@Mno07jomyQywAxuE?N}om*hF z71&adK#6RDy;HuZRs3x`36NbDVro=m{7Vg@(i6>eP?vxUdJZR*GMO^U=hS)~>SJ2D zOqS;IJGgmqLTd3AJ}E@0TqD37mz;woIZu!bV(ec|$+aP1s?az{9Yi9LYc<75P9&Ix z&~Nnkrb>z}5}mY~0)^0nfu1dV)Y1>*5+Yr;U^Qf?b*uO^5MgcxDFRD5t079TxoIW< zV`qQUiab(*rAtL={!%SJLa#tiy)=g>QLAF;wCcCz`kMm+OBkcm)!18dl0m!&W&S3^ zj`&*=a1+|}lX%B0yGH-k{@R*6J(Vnwt#Aivr|k}p3pq@{Mo*RTyiMVj@QcDvOddfu zsd0?W`BX>*C|nAFO!+4=9ENKTcD5*$j!6GK$xe z;0b19PNU*1tOi;)yPmtb;FE<>z#SW^)03!8OIuNuqz@T6X@(3;z0QM?v-ryz55C%v zg94lVAOGq>vUhs60VA1#uQ`J zE!j?&)c^R8|A;?(l#*{L-Nk8bu727qe{wHxDGlVz?kv+~Rr6JyZ3@Fy+hJUfKmNEz zIYoWz-Z)r08ak_+b9?Rs>r~6lF)oMeu*M-6^{p}KN$$)yx9es zMQ!PEYx`qE_~Bd8D)Zeqbx$`u2?_H>v#+!DC$&VtxCK0V?nz~ja?Fgtik)B=6n{7$ zX{dfl_G3TxW1srer|b$5M6YIoq{$KYS3rON_kZ6XeuLz670<3{Y{331l~>d|-ti9i zp29{zqheT1>X*O#?6|F?hpw}1C{f0uIUe7Zz3!fKyd z7rfNee&|CVdgB}47}?sjv%fUBG}DXl+H~P@a2O6GlXJn67 zX?>o1_q*S1vtaBmjF7E^;b{4=@&|wL2d{hG>l}XD=RAule~mEY0DQwYe1onAsj;gv z&T~3!uYBbzKl#Z|Qi8#qn^$1Y=aN%%{N=@O`?hamh_$mS0^6z=#>w>eCNVqJ9`tTr z{Sm$-=YfY*qn?KucokXa2S511U;DLR6Nodn8)Hk4_9{>c&4)2{Ni>~hSd;(Thv`Nn z9Uver-912w!59o_aCArr(j!Dd5Cuk!Zl$|HDd{m93D|xv}wHhp$(jk8u&5p3-ArleTZtmBvoI_`ixLr3U~J< zE&R5V@N--9c&n!7Uh~4)2Q~NQ^F3MTDT04Z~-}XlX zoh{;7M_%vJ^-g+i?1Yfn1R1D?t`4Wxispx_UUcB9wm=zr9FD;hvsp04}u}4 ze&XWYs~DA{GL91Hst5vh`7|Rl$alh^OST)AZbO>R)05rA|1yEIeo(0#9%Znbj@L8M zp?TUGlTcKqSMHd6A)%>r_C@2_$%z;jhh|oYw=ApcdxnOwg!jNvDSr>jj#S&D4G}is zDgelTs#us?`1YH1OS2F4>F=|2+-6#Msp1-{*zS0J*YCo`ExTw#XEN^*kXvpAq)=E1 ztjJdUw;t~zQ|O)2yYN}Sc&d6A*mA*GyEq0r+B?BOkw3jg*ZpYDi*aLR-JA&DU8>7U zEVgwmf1cwepExsb_{(N(NDAEX?DsqsC>AQKXi}eGi3jd>oYvv`)n=Xr_$i2&lKY(v z`6a*m7y2N0$#0<8f8d^Z8(SDFdsK`owbyYh^~AP{k?X_r)gHyf)>vfrbV$bGG}8wG z-}8o9v3tHh!v#6hwQ4&5|9yL(mC5;wrsK`{(paI}R^({Z+-x8C^!VCGI@T1!goEW{ zd!ZiOc&Ig?)mPSozzn0zNgPGwgJhLVn!QnzcgbW;B| z@q0SjJfnC>b?>qDK6~ow>drh`9hu3YH8B+zCEe#?&F!r=0;8gyJH2G-f*rB#XRD(Q z?7@1;BRsp=n%`r3>r@})9c}D@yY?`59-FcP*lo-^K`fAE5z;wck>=s&<=xa<{32B; zj`nHq z3ed){Q~HfYOgI`Bf_XB|$(xv_i6*o5$KVM-(SSgk-~xk__kZ#YA!atUWX8=%|n02~v{w{A4nJdTLepnVj)Hc*HPr{Z2+whpogB2qS|n{t6L{ zs9+jdK$5K57d?f9aHf=uAE|_vkamcJWYqHHDZt4q-_H(jQbJ^oN(8e~a)m)ILp7g% zR2nkhcD)T5X8g2{sjc;h)SS(=DqUloYTG*Y^q9LM%^8&@8uk>Gu?l>IY1z&$CUQs=(U-WY zbYQmmPnzb}Oa_38a<5YWzajfD(uG=@`(#pyICbO|XJkz&2>`3eK)+Ci`bO#^(LHFc zqDM$aQr5*Ha=GZWSpkdo0Ee7jLzx}zA(lhTvVH$4A-gO&Q$5?F8 z0FvND4Sapble`a`@?6ejP!}*5uz#MZ*8gOdzy5U?Ik#M%1x=C#XWbmhHg`KjRjk2` zA7FrxY!5HkD~WSzd~#H_VK1#CgSwz;k8&pfd&Pvf2sH#wXuSj9iD=Og1Xwv6wD=@BQ$aIG`I~Gk0KiNSR=_b z%h}VFW-2L@d4M9IUXV5!vn7Pw$_E1FhdUg~#Usu%9gL$*~_xp?UYZ4~J zoh3@SS*6c8?zHzfxJD9C`RWfJn&MR4sT4^7j{Auv6ns7T8$frEX7O78DGn&bS;QUy z5RgG5c3>lJbAV4}DEEM^?jicH|?Lj`7~J;Vc4rYp7yWpUagUbQ9(^MuY_;N zAN{+Sf3`ueqL2&rrQkV*v5iqDw+#D>D3$n^O*G@j9D^J~iO%f7d{sf=T*V(GB&r9I zSp_D^&LXjUCXon)FYxJ%EnfG;4()8Hq(?K+MU?R!N^Zqj<-l6c=-5iE_YKV-{d{wz zv_X8_+rFaF0)R^7D35)fdGx56RX-nhyB7`8lXi%{$tm<3vWGH_Uv39(Jv}XxX4P}GWlX6#%NGEpn1NX$H4{0Rk*08+NZ_BUkH2qn z;!Y-0{Q<^VXo)_d<5S410<>1DF?xz>z?9vYTH5=nEyy8@usznIhQx7l{8hOmLuXh^ z6rzybLqCa=)1jrUu}AD&?A&_gvpd3*V@)c_ZlnD>e2%JfM>`+t(*Es!AtJr50Rz&% zfrm=tZvlS2*-cOU)6N~ryAT?aCSbE2m=?FKl@OmV{u!_Vn)VCJMe&{pgS{i8J@P=G zSfrZ}d+1lrw$GP2f4MJ?v*Wvs2nz#l>3jzjox&ZjZnJC79CR|rDfRBCt>E1MAPR#q zy--WNkDZn{dOxGu{gL&0keHW|1wDztvUtL$0f0-Z{NQbSbXVG6k{iSmYDMPl;qK4z zUA4P`EeYW7C4onf5;81&}>3ZM)64v`2=L-Q4^JMIE+QeP{r$ z&C=RWwv=~}Z5kMJlVOUqL?82*4Qa8#qiv2Bpj>#|6phl+drE)&t-yDl$ry`h$!bz_MyDenI^@FgaIfTnW^T)d*42GN}b< zksuKd4{?_yH7ANEK7s*o)`{n);lYkSY5Y!dH~T|9h!wg+HDE{7T=9A-N(k;6Vv0bZ z2N22ym6B`Wd@gxOIkaB80aj1q^FPyDNzN8mNq%KF6qA`BM4CC8XXrkj952GlVgnu) zOG}Vk`<}=>5ORhk!uzt{@#piJW}P>U2*Hxo5UcVnBK$W=W5ob-M>1zHcHA^0rUKT& zodu(8dgrO}Oz%s_5sM5nTLX{8%1NJ>cznW_#y4xo(aOR7q@(}5<@ec?b{r&WacRgh zy~NGK4@4Bw0%)R${0q9#(i}0y7f1gBM*nT3q(D-B@+)8b^NsM)a1N!xOmdgp3dh93 zeK^&HQrZ zw)LhcQ(gxHx+*7?X~f#gGIx=8|J!ARt9g3E$m-Rez2aZ886gNJZ^gnKvALL9g6rpWxA$G|w_KGfRmZ{c%BghpHkO9z8cdD<6__hn&+%KT&5i%QQoD>aYVERs zlG{VMZuIYT2bI9K0MBpNzg_PPgVsM{b=5PC({AV$7d_-;|91}8D4~76H}}Z=6jMh0 zFljOR_=_ox;2I2CT){l&b$(=2-oCynJdq%{+Gj%sKnOIDCdo~Ic}Z-UDT#C9ba#{- zGD@`0C)K!T7%I}t-}@sFh`w!q&;ujJP__QFJFYVRyZx(Af54Fijgt!+)(D%7kCDr; zKE8?_YklNF&+lh_BTg~=+cX~CCHK~#lM?L@kzG#@z!&)orQtn0aO)pZh&I&G8TtNy zu6)&i@rLpK86kT-!u~wGyplrtQ^PkckvR@mcbn>S4$MBk>(^j0*0iZ3#nY3l2fMbG zo~L+2;hM=EDANWzukl-h?JxRJCwd54cfcxWmDIu)^Lb7x(v^@K_HP&fQ(^3!qna&r zJp9rW5&a6La8VPxqx%Rn3iFqaZfcr44Yr!wW&Xx6o1$QF$vwgd#f;ZNH+6YCnxHn> z25uZ9A#RyK*w<6%jR}dZ0qha-N6tKlH*dJ)lZc)i~rKg@~g zIWR|P>>lHC3vE8)UMmBca#S&E8IcF9)v-w2%`)8oT>F9Rp(z5;(;CCNwa2s3My zaljAPSWcp%Q;qZ0d8UIG=O;5CnW$2?K7~nnYq5fDCFHqbUn_ZwRxDrRbn8CKC^lVe zhR$xbi;XwJ;#kHgB@dRGTUO(}&8#Tk~`UDJs4Y2504$=tR}WvkVn!vaa%6In>hv zs3a=0os4vGcC65qc=I%&+y;0Faet&_DQ-KQA#r=pQrH8lGjkEboMiU7O8Dy>VQIr? zDFUJdG(Ku8B~gn^PU`*754;0N5N5E+FH@8H7)@mL7}PDYzRDCnID?1bc#=MH1@?#K zuM;nmVAs(A*$YUlU>Z+!akZz!P>zWm+XFNm1{v`NBv-RQd^~u9NM?THd4Hp=*7S|%!5Jvw-!tIREbto|UB<^(E8kb`+ z*;yTec?K{NGXjcqv=_z`KbtxuIM#$4^&$~ov@+O^u6SwzbG6 zRN4Mx#L?MR3y@d}5h86%ktU5EK_r{7FunOPspSm8RO7l}$kf_$0Q zXR*dO6|?j0&LF}y9*+T!4Skr%N`BKmU52TIe_-Uh@PH_gSM ze9%#uz3ZwAG20}wB<8#4u(8d?`L0V;lh|RMIThBYSOFbM$>Mqf1?`h$cnBonxN{ts>Euvcmr(JeT}q5nF9}`c0-bCx^+$1LB8VABXdgS4DV@&aJhgG z1Sq<3N;C9n%1jmteURJ~CbE{3DW{joYRe(nkPl&p*&&=0Jkv=iD1vIg*tLL=W6WX% z3sXD;;TuJHHfNXkxWHHIUeOuW5)GvFUh$<>n3DkY zi<%h&d2dmmXthLG(MSb<-;GYiNA94aB-YZAIiog3pkPONOfaTPFB@X!V5XI_!+Z4w z8%+~P`_x_;po*f`?u)QZ98+5e8>{K}EODf}UDRzT=OZJ} zB=S^}R#S8<^p*@T2siNSyI~87NVoo;=z7J{ieIPs?%^-n((XLT79r{Q4_vtbsvpfY z-6hP^#wY+|SKKs9wYw%w(IR;{;Vf_1L?m*N zSZI~1?hK)kpMe#x)5RWrq~BV+w->)^8Sfr&u`!-25*E!Z1(%!?mmfl^5U=_$2_3GX zb>QffY>}P&-7l^0<=V6qtFHb3TyfY;vJCx6>+liIs`Zi0imc!XQZ9~O9COMhCXW>f z*OZ8XM5hZEK?nP1R?j*`V$*4;Hb2N^r`KP;iRGRcu-vFIbn%O$qQ;QN>bL9S*+8eR zgwW~t0pqVmY!IQ3o{*%JgP-pHH2b&%APbO>Fk7Nv564f)5c zFoef0l78|rtL-NPk^LL>(NELZ_j zx=?k93Q15T1MX;Dx96X+sm;`@pb{6nJkeZU8@p73$Lm1s?@R{qNdoNiQ#e-egQ^4? z=4BF`AmclPfXlIKg*D%^3u%Fe_%;*DlgZNw7$Xp}>{e>No@(&ri;?63CDMU4yOEd!<~nv*U=O*6Fw~F*ej95p1|& zDp%lvqoF#YH88wD^REh$dmb%W8FSxKzsO|6`r&B&al1%(L3zvx|GvJ6z^9@S9y*!P z4RIIQko7YxCPUH;GM!54RWW%kw>1&@R(!_U{h=%KTyAX~xl%Zemxi@ro?K)dgLXV( zw}eu&2-~Mw{30!dzHbjAw}?*VMY#{rZdDw(Y!)mdb-qSrmALb~8BB;PFJvWm4J!X# zS)=-6*EJa#8V%2dLvdc{^%;i?=_wOr7HHyM6OlzXb<7tG;FiB?-m@gJ2K?N<7GhJK!$~w{aX)LVFK^ zBWFfp?2jz2(OWt#oJlVp0=lERx$aZ7_pQWG#z{0=?v5v#dUuI)6}wQHq^W!WxX~HS z&k3AB8qdWy_sU$c1gO-reM_G{B0<)*V zc)ST!3pM_V#(cNqz_0DHB*NwHKVup>*r+)6-UViUUA6nf%-6f4;t)M;E?eby^QpER zOd_{3yEZwbmDq}NQbth~VR`bRv26_dlzK>MIdc0V!&%m}VofvlB^rehk?D##t+~l~ z{h-1&3)EB?jURGEr6OFNa;rS%cJH_Y@9`~BOq*il+*mb>T&2RL(EL>mV6D7&$q#?G zki|UwOv7yxYMI|uW}}DGqFd+1qs*Df9zML2Gjq*DXQRKeDK#P0cgHUVT+f!4zwcNq(J*QNelu$W_rc zm!lz64oY@Ii7_+?^h#dvcK^h#8Y=R4yZon>kP7WoIzY%!++KWCD=(fLNi)RacI}es zCL2m9XkjUUw&`vY))BEcIO%MlAG%DtPJRwxn~_1Fz^aOAjP=BqCh?|F8SK8g`blYwjWnH?oqpr zou`;VTUt)n>O><$Ul6@4KII+Dv9Fs-F;FR}2cd^BYNB|4C0>S!JN48J0 zUz+V5{Bla%B|2jKc1u&lp3Q<|rt0wy>{K9u6OPG%eJvonXOd55!$ta9`de4$&>A__ zw>LX^>iuxMV?rzlMrS0vf9s+PmYA4?kcrvEkQDwZvS$^5F!I|Wd;zciW z`0U&;@;JUi^#cw8i_5-Cphax>U!breP!n5EAkw>NBc6@KSpS0bf#^}h#M{`Xj`QiD zV=>T%F;RX|t7KQ)S)7LsTx)Id4Khc54W6ZBT8}Lf5@z){bWy{+{mh*;Mg-qtyQM zKk|II*0$mu!Wpa9EJEXwu3g^SCx6OGO110pPcm#zEQHLsRk-E_XExz@HqKK#^7gVX z@~e3v2?TajvCDK`Y9EE1Ni4GHG+#K^pJ8QeowE-bwpkKu!iop3!k+xpJJ;1r(u7=p zRWUbex3RrvrgE2d`z1>au2E#HzwMX)+Wk6BKe!G?};Z>Byy(irLE2pnqZ z%}bstDC1?h{XFBf^j8w44$Gh#7P0nJjc_k}AaCUk_XjsrfNJT}UHh(#XkV}WW5l2E zYrH4&+C)KdZ9LPPug08W1ZPFzNUl#~x*pLNP8S(+JENiVEhgr&5#_-dr#S<0Tn-BI zej3;BapoYjr8>rOnQ>TTS!d(AA9D*&xrBY?zuVTeGS~6|kIKHMK8NUTn?2V+7h5$n zBe~fFsM1gg&+qwla`8+upH_t}$aNwvr%cPB^|zo^2eZ<=Z&k)jadr~PfHJ~wMmZm5 zaYVudhRQ+`#4cr(9X4vTr0bee?KXy}@Ee^D3 zoVaC0PJ!$}0*-RWrG-xAN-e%L#oXAWUXpw1I)pfYw=by(FoU6bUf`}l|JyH%bN}Km z0PlIYbi8C0+r9yMeo1;nGI2&jo_yc**a`360wk!#@@F#j<=>{4L}$iHvJKb!5Pxf} zajvJAamj?u=+ou#q2pO%4Q>VHGWMSh{fw=i!&FOtl!^=orp& z5PJ#FoSBv?_Iu>?5n7P)O1n0+UzfFC&rSb)qj%1!U0`rNtMtHhOz!I2Z4)bB=ngDX zA88E4IctTV;-Cr8_gc$mT0d_GmIb92*U}uSvex=HD=+I5Z^UNp^bZY*OGbG9865r> zfDT^#>=)M%xrJXW&ydc4_$Puakd;K`PgP*Ps@tQzAc5 z)>#58LcIM#HC@c*oy?Wp!+_DxH6dln^<2|kfdE|B(O)FP;-Cno;}1-XHRZh zJT+8B>czL+NOWivgB2zF8|#|%)}-i`x8^N`fIf!FJ)(`~A<0T7J=EHlgYRS@9r}(Q zG8yk*dQRcMPQ>AiK$_3I#-_H~^+LxFyq~)wP!hh6K$BeaL=6Gb)&4#%p=!8268Ctwif^sii zT1Z&F%37Y?^GnV$a?RDS(}>-=Kug0vz2A<{RigPn%I1C15hwK}? z4YD|5`xi>pI{NdnS7^@P$B_o~fcX>C#;o{+d^<^z@|)W~UF`X5WIRvXF;SiiHnKW8 zaM-NFx+%gm?=JDM>p|$#WILwzMIC-IJ#$lLkY6tcutSg$(D$Q-7n>J$EH1mAh>H;> zjU~TnAKyj*m$a+=hTnFtc%28>@OY>U~Lx4P5%d%i?mD@p2b2X zIo-GDgat$g>ezLdDG-oy?r+hS`KqfT^6Ml)xF6_GH-&=yN(EigG7E2)cQIT$k`|!_hWL0Do*y}B`p$??h-(0DtoPy*NNk)Z^H;OA zlU5*Mz*I!~SI2d$)H6(LC2d9{W>2w#|GQt^Cgjvis4P1+&e7R0I&N5EPH&tP3LXII zjdToozPwK;W_y-*@9-(AM%6mWIm^eW7I#9ItZZ?;zQ_-Pc^a*|aj{dhG|dPKDSl3) zuH}g|VL013!fR#Wbk)F`fbTqR&hy+5H7hhe=g4wLXoNIz7R1G<`F4~6-DT7Kepz{% zMdcKS^-wGO()<1a*D!FBf@g(T$!$sd7j4_e5JZ5a@>SI-7lUju(We?<$F9qM*7`^0?kC|rl8 zn^!ZN%*1JR>Nh`@;7V(FLA5Qv$JFy@bHe;qT2{ot_ha3&j?tX`rQE(YC&{ykVn{>W zlo79;{J01X>s*e{Im75Q`?o*iI#4rV!Trp$>{DL?p2IgJ8g^>KDi0W^39_#qMHT84 zYp#1){H|{%%LGcX=6Ga@aB>kA)HwcqE_(5Y$G0z7`^)iM1%qGm%IEo9o%xcB_<@P% z8#eoS@>}xt=cNVM)qPVf-&1gSg&?p`3vH8k2(PWky&A#$p5K6y-Et9>Qq05{GkBzt zviaKD(g+l7gI04hH_IaoLlUh^uh6R#L^}CmYQ)MBaDAPLCh9tXrRz zm>b4v68=Pt(~M1Mt*J4tW@wDLF7|$mS>(GdWI6`y-Zu-IT)ml|P#q9)is{rG>eHM^ z7Gp5#>xUQ0T=g3ku{GQ-NbQxjZ$ZsTh=>x(P zlP~7Y%yUUMlY4(C_}t_3!0I6;5ZI|F^GOS28D0AtQv|D7Bb8%4@=2rFmTcdFCC!11 z-et8m(YF3?t3e+9hrO~agjX|HQNd-|K>dZXcxmZJ*XLx~C5C_fj~c#;_Zsv#y~vE0 zh|elWcGrl3?R5JuSQmyD5vGZXNS;Q9tHo*cYjWN3*>(W}x3yoFa;F z=bkRfR9jQKqZIZ}=Fmy)3SF2cqn<(T9?0v6?({z?p-q^&%O&|qZiAF6C>BOtZZ;J2 z({`+ii~`1wp1Sw0cmP5k`DbBz9Rpw zMtj_M8vE%`P5!RI(#AS7-9vGBq|^(uAV%{ohq7jq?$T4c5MvOXqFAGelyLPfKQd3T zn3XZX6(rRKk9;)I2O z$LKy;eYWRuJVDgh{k@Y3>DvJqH)J-b9ktcw{W5NlNL~}LleoNjh0b3Vf5?p;xp@{F z{`~3rq#nDj*kXJe30e{Au93jTC=R7WIeP6MRS8PirpdFwHfs|bx8Ly8)|3socXe!& z{A_dtl1nwr?Ko)O6F~1pZ2PivH6b&_#Ci`u-JK>y4;3Eno$97%`j&0IHwAnJm`o~v zKkY{Qx$F_89&IApZ;8`7*hgLF6IC=pm=Yy_Pe0$s81VtDXb>l=okUh;Ke*_KEnX8s z;nQ5u$L{R^CR#Q{X9qmsoR?f3zwvJGi^vvIoQ+*t58}QQjWG#Lu6sEe8RHo_A;O;2 zkyRCi0QZjN`0NBP*+33A3Cz+(-w)$Wiic?foU5kvv*J%Dc^Q235g$?mapFWek#-)? z3A;(WAM1|kY59GBayGO!5zg!ImMl(OdX7>wnPLf@n+RF9d$UuwCB!>WAB|6U ze|rYgIMD9GH?hiNH9YkO`8pVhp?2)Ubeg)HZTSXhUm%W7jqRoZr{)7O9vb<{Bjzgo z9{SI!{qJPO@BZm^?4j#6)`0q=x9l;%LlrB6qcSc%p_69`oEHVW>Atp4h050b3Zuir zG^-=FM+$eqJsgfSNSBOpUFN$m@ONsQr?EWU;shM*W%SA;ha|`l8O3E2vToXw&D5z) zz{!|U@<=AV98ASSDdcPl~!>gGnSeNhbp>l}!)7G8~wzlv;zv z?2%KqcrE*iv+>}(`I5?*x9R~;=g)9&9x|P`vE%aU%o6}Go*yVEou=QHRcfDiJ+lg* zI+l-nNIds@SgDn!iJUI)m-wGwRcRZ`x1#4e7#UK%fv%KI`Dn9v-sBBoyfea@Hl3A_ zJYipsO1r&3JYT~N8cUf>@}yomh=^U6voI2k9!d_jsTkuUnz$H;s;E!P5SK~pOw1^} zmJG+p^S{5mL^U=HPG*vI!0#y9>wmk3eUoY5U>kn&$Z>-r)Lg{3UcC)eA4u+R$u1yA z-**8GhG_LC^hz|!b8_?=?x#?>kx|4$=z)UmfBK4EaL6RcWcm*#H1?&|7W$D zWJxq%|9w4!HEh1+>+q_9*&kud_Uy7NMoP&T$P3T(Q&6eXF`9yH91}GD3ZJE6Jl@IX zH_Qs7@doaPsf-UIX?BQoE=KMCJ|$TDo{B&Ps3&OV0( zeq&RDR0X{OSX!cW~i5@!76axA2f&vY_#3!)8mvg0L zPJA=NLytl`yvBW}@{2xq+=e@}V~GLGGzbm#7D^M!;TdnPBYGPG?AjfD@AH1)cjZ znG2C+xw}k?3++@KfQe30Z*~y(Kj)z+Y2u@IkZ*YH+Wpozx2G33^MXOU;yVu;F$~C2 zAb#g%Uz1VB5F_OVy#>DG49a5XF!aleUYF_Xm|0(%Wrw{9b#sd1W6+&EHUW)@@M<%g z>;kt1)RPB1vmcM82f$1+_Fl8^8&=eYNOYxkzx2O2d5wIFjh=8&r|(bJq3!=kW>ht) z)cPhsb3rmha|c0B%MuZ#MP{t$KjJ#Q1NzrBUj19?AeC zmdI6+)%!_p>w3P!!;&GA!QYo%P~4sGPmXP$AOu$!gt5}amL!|?yIQ3DIVMwG3e*TS zBg6~CTAoP0c{<-~0lwb3eOz*yDdX70qGuHI4!W-XqyE#NwU-I)0o4K4*Ccc)ge?UD z3D=WXHCAxz;v8yw@}~g&`r)R^@1>m}zeKY4a?SoZYvlRl8h$5H!061g7oY=NqyLUuy(beu zhqf|-Jo=Av7=^Z#K|F9ToaetU9q3m7IPd^AD6TwOTKF4_5YcFqGL+QBMJ zVqC&u&QE5~idc1x$F=p=MZ$W+>LwU;r6~#}pQkc5Ea`2CPAQQ+lLLDT-?nw8!xv>tGAU*C@LqNUZw$*Z)2DDDQX{j>(Wy3- zv~l%A+qtu2+ex~cfO_SG8+Z1~<_YXh6E1pxaCkq$GgjO>a;!}+mNZiN@LzeV&xdKB zV^gg$o7eAeu z44I@3l7W1Aqk)|h&i%;|*QToQ=a&fu|G$Ixl|F5QZ{mkXD#2NQ*&^Pli}E@`)^CF_ zf_*<>nY3o!s0)UDqvplv6`JR^2E;)}T9ZuE#~>E0*mU7TdfS*d1)?`EXh zcC?y{6k{@nt>=GGV(ts}(S96;dkkvN>_T+Di>3Z9Ps~1Getrox8?1{6pP~#Nk-&+m z@2-1FeGvG5s?2<|M2&XLzk=5YKgR{ZaWyIi99V9){Z2ma=QOcZQ0${28MCIfJ}cB- z0pWLhRD61dSp?OI=bNv8n`;#vw0^(P9SgwJIWvKL0t|skj7$HMxAibRbJqGbS>L z&;6*J)3}S6V5e9TfP>~K6};J)7g7tq^`g-9ST=oP1JVjM1CFwN{Pv>S1d^k4uv*M5 z^w1jUlycCU>MyOOcoahMOcMoQqOYWR)RDZHKoS~_{-Yd#&>Pj%w#3nLX|~_uv$)cT zKnl_p6cF-s!|iu(K3UwKq!0tD9{;wPGrddJKA^Eb)Su94!AN(H z{>sU+SGe>&3T&duE>Il8;C2jH0&thr6tWxUdYzaBsjss@Wc!3E&NxNJSQ8a%=Iu5qEy|4kDaVkeGmEx9M39*$01H z3N$v{i@7f^R2@rpW2Mb$25ka&SaC&J%&?QuBD=}X4^Xu>zaBo7Wap>K#1(9_MLPoE z*W>TJQCHuZ7T*+ej@~U05sRBAot&*oWl3wj|MZI{gHO+g-m2-JfPm_OZ&#}(Z_jr; z=a9ZKgMS~r+CFIby2#da(BrUQ zplfEa5Wvb}rFSu(&C6;4m>4}cbgBQ>>XEGB>yh+|qDn(%At}?aPP}U-q+u0bEYh}x zfjN|W)hzPi(w)q1lD>Y*K*n0EZSQGh#)UQEHY^!Fu& zelbW^8-c%QLG4EPI4lT$>#e^oU5}sEm4A;d53wOG8=-V_e}5{M8!PF!*AU$=A)9g` zq80iwX@)pRGtzE60jTvscd{G52r_6srMJGiyU-t4MMG5wBq$rH$+c5A{C+!#{0mku z@&f72^dm@01W^yKzRoXIpo^^I^F>gS|RTR@*qhUpz(VMa|VG zK$pNPQR4aZH(J3_zm~|sz1lmCx72&tnt6@e_UAh9F}Y#U(kt}`JQ&nS>fKZmLcY7M zHvkz#syR9`PVdC>Y2gFmRuEOK_u8TP?1vHGGP7p#6AzTz@^8aeAz1K_(E zcuODh-sQsiE==ZbD?A!+C*rdUVLHdl7og?O0@5X{H~Y=-bA`zk-ji&i_t$c{`b#y1 z6`pSMqK%i|&%7R}h#GCx_r{lJ5)f~b%4_#kR8I>wD&DlaZ0j#V1*mJg;7XBA5$-Na zIPbLk(FsxJx1=xhriZiXrMZ{=~^-{2`o43_wPKQr1^`B7lMW8we$(fV8~?PFXR zky!Y*3p@o^fA#8%RN2^l!#oeAbnEorL1n1W?<+sz=eX@qQw!|Aw8Anz#atWrXOpcr z&fFEuY1gS5vH7y#C50cQ>CLFXl{*s`;yjL#&${T+RGpchTBjJjfXZXci{DfOt(@xd96Oh66As2! z1MVix0&VR{DfYHy;`DF=7-7%PRUo>7A3Yj&bf}KQ;`=J^8KQ?#JvnphJeH!M+xmK0 z@+CT9)4WuJfZbv3^HNSlL3TIVp{BZeT95aE*5mz|PupS7U|-`Z^8Ez|vT>@#2-+9Q z1&{)YZ=OhM)QjIRy1-a(cVsqe-t*Q<48Guz)>GF;mJDchB|SHzQk}O_mRe)1fer`?+{`l`S&QZ%OhW< z_tm#btyITI;p#BWvI!bSAZO#m=F4^W?gXavj>6>R5hm@PUqY1f4h91=B*a6dbu)ch z>Qth{Uu7z~(>R%TFqXtkOfmfYb(+O%qHq?!+XO(_G2jlUkov+}le!^k^ZpXd`5q_( zl)D=$6;(Yq;+dnIh@vSNef^m?hd19w`_@L#7Zb40bYh=ZWqt3*DOoR*Z1u&SmSv9L zrIW!}5@+T}zPMNO`Y#K4DrGXKb7qrPmv+XMN>TyXyb!hbgk5Sd)xnW)J&^31vC+F` z&KcypGM$?;Y+}*!~FMi8q#u6;a6;? zD?OPzFaJ)#=s~%%+<7&fKFzLJxMw5Q@0IA+mm{@EY)Y3t_U4E^cEkCX*DOS4BpK61 z1l!VBMqCu%LS|-}Z;J6WkZ9Dmxj9ovJocV-Q9yWUSqKykw1hIe4(HDVRExst$A;FOHOuXKg}RlHgsZYtFL4qt4T_~ z?Yvd4#oWGwmVT$*F@3?EqbMykK!8~U69~XLoo@w#8;T8lMj zf#CM172~#~A;;rxU`9gCQU2xsl%!cEctxQ_Z{D2ebs5CNp?4!jCODaZr zh`|{awd)N%Hj%A%{kGOI`*iNYsQOtX2TGTWyEUb)E;nr_DL#8<+wsSGG0h(iX(e8R zH}Gf?!}t?{&E$!Ph1E234KZlgi7fDnCaINv!fjogb`8s+#jM($vXPVLTmw6~%?6Pa z6GG((c}Lw4%DEujyxCK zCO`vsD>D_@Q|u6zkls>piu!t0OSo0;{v_{l;JGBOi^iW_RWkX$ayJ|3M}F8{f4@#G zZ!oKw-aZdYDBng5If9DlVp1aVH7yHgGl#05b@`gMci{_-r;VBQf77I`ZvXeb{U0XP zPb=#Bg~QCiuB0ZfhJ@h7L9ETqx`uOGE{D#}C^EW_@3!smL)FL%A`o;V!(~V9tc__m z4x(;~bM8Yn>iGY0)o8`&!bx?1q?qnmbFD)xu95d{RH1&K14w`#*EO*p5WzI+OA74_ zOgB0AJ2?c9AOO@%!M@tlWMK2Bo9}HKXvj|&Z2P29gYFz-PV38w;4~LxxAoaaN5U-? zsP1;F?n@u^!35y(&E(1Xtm5?)AblW4jE*DI)rwOft#BJ0Q2P0^kj2cs90@x-g-cn1 zIq4Sj8>T3VC)K@oF?5;w5_FXkL@7-Poj795QVrsxsw=IPFEc66_WINl*m|0E$icM( z*I>r>!2^nbcgX^cHu!MnU^;Ey|S4Uc2aHXOrD?xJpNJ zNDQho!pw7gJe9h>-r9{qMt%+5ZpR9*SnQ9APKz)*TP|7IC|g&>bQ}gf+`NC_4O6;q z_#$t13;b`?PSU^PmEqp_k8jeEFOXN?0sBu0O-&{L&joOQ`F;_zS~0$|3A6WjvrDfY z%J&}6#0D}B4m^A&^m_S`4o-YU?neyNxq!={!CAlUEg8{fV0;@_=}bUz>qNTNlP0LF z(ZeGg0nfE8CmEAyaAEzYCzMAdy}nJtZGS z?6)LdG4X!@4MFn0kmVvV~?=f zp`s)=LaG>BRE1Mg(|9s2mDi6Ae>N`SGhGegbUBd5FwkGMTSf#60Z5`PB)=N73Yo%9 z6PwXAspBWcc^jS5nO^Y9!y4gMXPOIuHYJeCHoCIP?<%rJLcpxL>#tCok7(co<|LRZ zKaDEkO^or;jT|#!w)oWN;cBH3CdCV0@B+4NY85;9shp?lw;-$?*{3+{!`021J6vHq zcuN5Ik&8--Cc0vJ#v2qq&TPEEQ~Na)IZb<@d$0gxoM4?sY72~U%#E7D6P~?K7JgUx zN24-ojH|IjIKBeg%q2LUs69q=@Urg+*vfKC{`4vjrmN09xSuOBP9u*#J1yz9{msE^ z)J2LyqTxCD#-vcYEL$DuQj~1LQW5=V^V#1n%aw2=zoLv70*=9xs$uHi$%Vv&BR2wA z&QDKK3_Qp&o5oIWC30~#7h{qnFl|YoQAq4j6&un;N&SJvzd8a`QUK-I!V{CCra<`Q z9T~zODt4|_=JTBCjD{pU(;X@TthPUqYD`6|fjASDRrcsfMFm7a*t(B96~gOI4dkx+=yEy*9;zk4V?zZUU(KQ%TMaJU-EMwvG>cguJs3ERR7S1X(H| zhDWM@4&Y96`M#5>yCP5gRm~^eFc{!{A&Ahum-m50y$@GY9OG;i5sa{9R$=QMm)NOJ zNWQTl9btK*EmI?b@24oQLku1tA%U+Fb(tFVQ^{;8&;leXj~ltfA~6MS_%ih)&!Z09 z!w%fVTksy1{YcWYw*z?rjQXd?uCE$BlwF?P{(}LeM>FTv$ImHzWL~xNZpgn)$eV^F z&YQdlqah=-dSpE6!2R#QLwF0iPux)ty*2ki!$WVvvt58q93Q*c(>%4k5AuKp z@X+^$*xK=t;h2W_vdJsQ<^AE`P+;cSB0q)@CWVBATK`chw~1Gd)x4I1nbewE_0RgP z=H=Jd(pKug$QJ9fLTUSctr3PW=gYp}DNK_yR==KXCA~j><=h`JkCfbp4&3Qm@X`6Z z4_p4+(~xu3)8%>X@>O7;(Rr*-?~nGOf%WVg-UMEIUN-r1&{vu8TjcvxR-3&Br&qWV zyr>dRzg0;Y%S4oT{QywHCeK?cB3H9pg(sfjjVO^R=Da@3kI;o7-D_$xB8=g}AjAdS zaW(HfaYp1l5%WmKedxg5y#;eeIfBQOojd9n;z5~-?$PubD=W1+1UI6~hn4c2! zjP^#!S3kxPcD5~}%MT|Q!+ajq*5f$({hLoe>ESiwEhUSQe@t|x;=xSavZ8?L_Z?9`3;ep*y^i6FuzYFgZIm}tIWf4r zieT~D*3h!ITZd;FIBgI49m(Ba+;+3b=Q)!QB%@*@k?0Byh!`R|ERr77* zt9eTFY|%f-K4yAtX=6`-^V<9Hhd=DiktI$K>(yM>l21|aIQ05F`_DXLY^_r!`(=^jX)lfiZrc4MxNB1YIo&XzgjN_fP{E? zXiligwoDYy@gu4coGD48^LTqKIZ^6zA@s!-4}i`Wwp=J)z}ykW^j3Ju&E1MZ~lUhF0+B7Gq?} z?+RE$*v4GJr1KfUvIS>UinED?XDUT@XPm|c?rMxq8=gZIFp4yUcUuts6l{j>)aRltr9TtQr(Bk?^QlNGhjQAh|s08hi*7$mxm=2HYkl%fxRQ zKzd;sNsRI=LsmVjcuveI&41b<3IDi@BUK8?d9{)G{*n;3aYT-`C4t$qYTeGjr+SlkVam?$>Im_n7H`Mny`mG zSWTx*kJwbQr>yi_0=-tXEmo^mK|F3WcS{iG7-G{pKvG(Q*?y)d*S;Y@hZ`X_!hz_? zMoIu~b`FR1z;e;nNb(Lq=l}$Wf$~}0f}9o8YhLpj2YtEG5GJ_dEAC{g2%v&CqO~kH zQ!rW>z1HT2Q4ZVPtX*qpD*nl~ApilPa(Ic?^I(@$m(^;_uMwh!EH#9}Ad7^ImOPjU z8}>-c)Jsk>p>?|Kw190^0+S8%YAb-w3mA{LyIJluVNT{tDG~vTgaFCpByx3hrCd!4 zK;+_QxLL2E;xxaIlvT2fq@z(zE>&2lV@`-6l2t$Qg{i@;LQYpr@@;wc3~4s}Gc1vl zR(scb%@|I(MstmTut+R~`gcmUc3=2~U-&Qo<-h!aANYayzyJN;@g3jMsRV z(~w|FZz{nD5}4Zt_CTA>tadU5V3=Wpc}BNjp>yBP6TzCs8mrKQ!Kj^6TVh%!AxplV z#`>8JV6W3x*-aJJp*6^Gy#j}DjpurKH5Y(P1!g0*D(9k#Up$a@p+=}mE8!*#Q!~p8 z7j1$Ktl@xp(J0lkY77Zs>SNYWBo;zd$>MQpoFu=4a#mB!g}r*8Fk&_=9=$O1c10&z zxn!#kPY6%YC^3w1GTLTOPMuVq!*3!#X?u270w5_3}7PE&Rj z7EBmJ-^G3V+uv^1W%j=Jz3*p!=4bqa5_t(`7unV4{F?Qccd_43uVlR%~-3 zw;9@*tWM%N^>n~w0uw*meLQJ~pP{5WSSH_-ULKUvVympqD~Zi1vCf`YOuf2%fw`$uDKshJ2JvKk2O{Xlv4FO!PF9Ub7bx!PzO# zP%!XFT8{(cv5ol?#rFRL*b4}A;VES%3*@ye%kc#ZFcRBQiF)?Lv!@+RoW-o96>4TT z0x*6d1za<6R&1;5c4KEa;&{~mln6M6NqnF%Tx zsi^D_a%br8`+dLf&;7YS=PNV*0W3-|U>LG1P#=kYQcGhjoZAA(Zk6NY@fM36-_H$^D5wTI72 zcGgkZ=Ls^^^EI6J5qJ@gzA!ja%w83(8?R_-0K`*xtbiwxlVLDvGf0`7uan4>2*D)F zQ5AR=?*%#IwOaW12)%L?Zc2Ksgr`qw8GiO>f3~=*LV#w;1e{s|jQim0zy9l0P*aO+ zLyp|AE#k`Y@7F|F1%uJ7_;WJX=cWYXL6U-hT#1*C4|U(;^JQVgjPP&%&A-{L)*|ik zG{728|D@cbM~`SO2P_x>VSL-SecSWTKMyakL*ZT={|w=+jz34@OAx@bSmdYGtd5QQ zbzk>&eL+Jyn2Tz4F(E0A*Yb7_Vcsh@E469aR_9U5CH=4&njJ^0ev}u4)pmuI#j3fR zto|FrJYI-%rU)fInhn*3;pCO=Fv!b#={svMnCf}4NqoTG?FGx4d)2hfFb>3kYEhHv-=j>LmM+lgU> zsO&?J39yYs_8{|UYG8XW4@x8QullO5`qD4`QUNQAEJ|bzQaV~1F#qx>Ov=%(_-o{o z^`W$s{_)5jUOcmKYMU>Z1S?4R*vCHh5B|YFkcFYC5jKGtrt!hU-}+mB%RaPitQ0&! ze=cVK45#`8cnss_4o!U8`VUPN&`HOpEQTo|>U)+_3ZiDXHh4A41Rz>U7&2jGngD3u z_{KN-^0yLLQMDG~$<)lI|DNypo*^9C$gk;(YVAvbM(~n##d0K)JRWQI_$?RBG#C%O z=0T0ELdABnZ?VPCcG4Vya@r_8|G)S5{@(b@THPvRLsR)8baL6gePX=E6T|&`_ur5G z*pC&b+zC?4;5VVlV`t{hKA_#Ki5hxYb>(>u{@Pq9W<^>aNktFj% zp!v{;K4dd=@}TN0YJm{8Ui2fIGMtt2DyP|5(}Y>>x4-@E`KssiS-cnIMp!~gsF#CA zuZ=zpq*@d@0U#M{kXao$9)I{lR&ID(+`4);Bza&zwwN==W-42yAve@NfnW9il{2=? z1mM&lBNUHbFxI~140BB7P!@(on?`Ijwy&w84ZrD4m1zvczroB9k_)>8Eq*BzgoK2z z{02?~Ab!1==?NJ0x2?|vuoqe*?;&DF4kNY=vhdW6Yq7}!QX)>_s2;u+f!LblU9TvpAt@uHsm zy4StVy4WWz1feD1SDft`%1kUrOB~@QfcV>)rdT0~;ba!VivcZwbw3G988Ywn@S4Cf z2V3JoUS2X4Sdo)OwZblVe3nx}n#CHwqv;u^myuk0zRDuQ$!LTynGE5rgjpR{(H4fw z$;MDm!8lmdKje5EFP>sk9X_o^RFK-rPmhyEYc&ZTd@%Y+YM2u;(Sz9u!h06CAZOf* zPgrg4WN{dpr6(6+Q)J6VE@BwN0Aza2kfA1jN=PZ`TW@;GOs3DuFg$@tgzz&v_-ll* z8ionLlmzK%5+WR=Axv?KoW4d$80JkFrVyHK;mu;8+`wiCX`zdXvXV~X1(tWSLtX%S zE&UMQU*O&8sn7elOgU<*m}MblCTwXma!0Kv$6qr6=ou(%wjQ>M1AM{D$&5<;$gR0}qER5SRljGt%KAvE#3%$ll zOQvsV8`zvo==H5v;B%pZotqjx@?6*?k@J!ZQ)E%mYhXQt1!jsyRC*dc&E-c7=GnIr zS8VU5y|Az6ZuhUrbw4}Vlw_Ejt}HY8jtre2i5b{nKjCEW?YMTK} zQp22bNLH(p^0T-FPdYBpNuZ)Y(rcMa)n+(TG-d-RM}VX03(sN7>-!1jN)zr1V7wF3 zZ1ii`8}ee#Fc{m~26^M~q!&tTV>`_Bc9mYsdzb+yG#g;#VS6@$ID0k-t+m*CuH1jV zIO;?e+ne9~X4jtPE;OrI(4PDmo(y=O*CzLqR(s{9bORXuXcG2*)1Sj{%m*Bgeq(qy z{;?WD)$@j1RcYLUR>81$-rj=yBWhlDeA=gdS^zO)g~y z{5d5OzBIyk2X0eca8bac`7ENSNBekhKkX z<#~#7kq@Ea>UW(@U!Q&h9umT8xa#jCuL0y@!Wh~#kby^U_)>&4{MQS@u=RUr$$kXr zO^M#)?I89y8Jx~eH-sTY?o#X-n;UfR4q#Q@IoS=*%6TjK0#8d*Uz~ay{$$L-_O4HY z!RVQsoE4I(o-8G`1nxFpK1y%sjbLvq$Wg^Ma$yXAUJTb3=4th70C^eayw{I%FAQLW zJ?0gpk%d+%2qGu1n`cv{`=o|y%sqO!qnQBmJFo<^+88!mHDC>=Pw0_JhS7%P8sXX9 zf@)E4W!?~e4H@q$W!fAER#i}oOnvRk+>~lrP z{BC|_S3{EPL+O|8GV%yu$)j20f9mo%FCDDS%H2@!*!{oU}mVf`6FFm(;xw@f$VTXMDzIP?};=Q&?8|hWRp-c)63cbMctkhewm`$*Ge{ zcmeRD2gqX~rJ)Rvc}SWZ4dx{I!&FYp)wW^#f2wM#S!pIWyfGte5yB^2FxdbOmQS7z z@sP)L-iNcP1NzA+)H$E80UOTxj_rkbPEI|GTX2Gt&un_Kfa;5^Y*)<~hAi^|uSiO> z8h&jvmC23$-K=h;y%A94U<7?(Jl$Y&p)$Fcka$_0jz0VZL)aJ&^4SQkwBy1)J{Dbp zG=ldxrrm;?Fgy(I4@$GZWPSRMvl~-*S~cfrrCQ~+T<78`+7+3MXTwaNau06mr2evU zjW*foqnM)7lvL$u2xfgjM)AEV{P2fAtoL5r4+!V&AUqk85LGEp7L=Nywuy>Kr)oF+7PM<-o*DDQ23P9nHWVtT5GBgQx82C@I5zf_KP>i`kRGh9`q(by9y@6{ z$lH3~)O~M00D=}^U?UU;z{F!}@S_}IMUL`<5E}qP&9G))junlmF!eOerk~-MJTrl7 z=d5T8-sR^{hq%)G4TydT34oxdgb69U3<;EO&CRJd@t5EX?<{b4()OI+b9?n1Px^|G zqcpRQlgK%StOmA;HvQg~rozs-*>T3)6s2$E0(d)Unfz&EYq6epFxu+caB6Zcm`!Z= z8FHbGQ-a|Hurkvd+A0a;zzHkzAb*h^yJWMsz{E&#~X$WQ$PEBqRML3rvb=hke7wSEr`Xgwe~DKZbZ|!!cH0s%L5GT zqo;mnDBl+xqh+GcOL6l;V3k0|Tp`2*uczsWD$X^YoB~jik+UV>5j-oJFss$broyK& zjA{V45^_{uQU#A>szg7&Lar{tSAme{;(-J(s}U4xerz-RD>J$EVmJ{pNf{Cqp+3QE zQ!8NAycF^TfP5_xeH+7R>o)==0#KiRt?g<%gu$8`v8sqf`pj z^X}itR`2J*>%oqHEmx)1Q(6oC5E4cnE1JLw^n{gg;@>MrGeYJ=KDMiHsF4CGndU{D z7usAB>@A^?S9CIE#g)9DjZ?PI^Z`V$8q!+^y++SUuY!YFBgT+9u#kkIzT`^TY+k1C zG4LcL0E-`f02?89y!%OpKBSDe+aNCw*RYGZUOl6YSyXtcz-7WKXNyygwxDD+j(E)b zp2U>w6dVA!M?$&w$Oo&Dg4o1wGf3o^^x>C~2r~sx5iVzeIsqNT)pgdV7Xan&}S%qLSA}E26Ja2r+O_fgkeiF!@CJ~6+<~XajHBGFX_*5R-)Dj zcvIVRRxgWwO1JTDjXXu2vmPobNLfkO3U5p<4DV)jfpDgtBJl{z8oytN=u*9s%=(0u8CqG(69KHQ9hifs^(KBf+I$+ zd_r_rx3R>!X_7H3L${8tU-J5L-uEpAlBT%RI5O00rV^6j1E{qa$dxa>Aw&HLtat~e zFLGBP!{OWuxi0v^gQvVzD~9RWCUb`kZQosN;p_L2+*!kgE$A{R(+lh6ri2lI2n(zw z+qhm=VKenChx;%_L$Fc(n!Kzncl$wXE8w=Fj_qv?PvWuNpD>d8lU^<>?;pTr{>^Oe z?0mc3y7+B+Yt*w4G5}2(O~2u}erWf$=k0%fd!K=JeG=zkqy!dNR{hHZe9>I*@fCrT za&gL6>sX_q?|GlfCz#r3t{hfUJqFC`PiQ!0FBrWBQ(rLM9leO5c?j+CZDcz)S zk18PE5+1yHJ7gk+_9jSwZ~lgQl^Jr+gPp2Yh?AukF(F)>N{1Y<^=o= zi@^eUcn@3T_^BcD3E*WH4*RKtyWsxfU;K+d{KG#iVzm>rS#{Y*DF;^iZ~Vq@^sO*O zVXhFR9iCyeutx#B3j4XA`#Jpnl?~*k=r{bC@Q$4PDWCEw-}Fu2h+))1cMe{TQMQ)>G1=9!54hNcYf!0%0hVf-772XRx-{hlmL+9{LIh%Oj#35(M&um z_*Py5mzse8#^3lGf9LP~o%T9q^&G;9CyfAp@CSd8YxqNTjz4xC@GC-)Q7dKtNT--( zq)q&*Jj$mc+?M%9{EdK3*yr#q^tss$$%Wy47(7sRltpp7*kGHz$0_o)6$TAq555qj zDSN;lFa7&}|L?#4^{;nE+4lBB0h~1C#h;n|6My1QFoc9JlH2+{N&d1cy*)J@0vs1I>zfU2=TfPn?IDu)S3lX#d{d`+Gh}L#vot*MT9PV=ONUM$LVT*v9Cc z20Yk>^}1CsPX&B9N;*(%5o!F$kNn8H-~Db8OVtiLS0I@H%kA&}-M{Nk2u@a&wS_4@ za<2m1VSb}1UrJCd_9de+%LGz;``h1MxmV7~Ja<)}jFb5Y1KS8N_$lT1#b5lz+;zVe z(gu8Cn6C|hQlp&e$)Y$n$U6_kDSrL;fB*L*!B5tz!%ABudW%ahU&Ztecn^NM5w0=Z zSr$_9V@Q@DK`zp7%23M%4S7s%^gD(lY)n?FbC``u!wq;dJZW+tY_kE_W>drX^&@NoxYf{k`XyiTCC;A+Ir0>EkWZ4peCR_TYTH193ANY0C-JXz zrA*)VzV~^_E7Pj&9+K3#`rI~OZ%f>QZ+qL@7&_&8FW5pvwJv%A&|4tA*Y1Mp_zL_G z`WL;RwmDQ#6Qyv)H#ux#m8bng38~M7QrjRKs#H5wE$lzHEMGAIuv#58R9_9h1{vVs z;FJr5Xdzp8UJB`CFnPpjJ%$j!kj~*x>X{VG1m92$gf<7c_{ULHV|$YMvJ%y7Xyh`@ z@6>ZOZ%U?)C-t-4h_hE_x(9fq6p0lplwx;|fQ&J%1}?;qH5G(0OajA3Cof4mTHhphPPUB5)g!!0O! zfvVjIbI4xs%0z|%vb_L?M2@zXifr>mNS-hnHmlaHrCIt4XKHm69x{F9CfoF;R^&zw zN!i158N9J=m`S0oQB4eB#e9-{OlGznGgUq5lyVHot<T5<#Fv%sY*0e zgHSWnHjYf~l^e{tA=`6P*XZwTUch61O$sn7qxYDI4TIaoOPt~yDthudyfKjhUqD`i zDXK^|E7EXPl52-pk8QjgjeJ>vM6$l~KRX=jGGrYfWPeLhRs4tky@xv&ECuQDOkypbtqqRPlY44fE#wowGRZph8;OO$~ zhU)qu+FU1OsA$Tlt;*{;pFL9DDxH2Z62=TSAsx`i7MMuTZ(uL=aO1rIQWpFKFv`(f zFFcjhUid^b$6~cVUZRpsUB=gq*-j+)snm^LE(6B(1QUMrCx;g}fSf?@z_cZAtj`0|h1W zk)yH{=e!ZzB)boC+)ed1CKrZdyTL?tLAe5u#IuiWWw=9ltNBLeQLS(e?Z|^Hsu?~^ zp&<1ovIaTI5t_|pMUtlu={IaAO*Ra-8V-NVGaQn=W~QzbV%S7ZxzSu;JKTbsI40cd zSuQwOrx4ask`sz}hO5Z{Ho_kB3^Z$;fG*rPoSw_yf!^;iPhdc`1hZ)ob{RmS8w%Q&Zy|=73(_zNG1NNY-odgdFqx2uHUs z+H*8H+S5KozkBjkGmZ+zE$E$1w_tAyMW{F@fll@~p6lZB?$|0VJ%j zb?SmiFo3Zg!4&yM+ttzi<-D&>Cx!%5GfN21?nQ)n5LpVcLHJS-vG{HvSaJ`m72H3z>7b9=x%m|$h?TeljB(;^epAtv*b5$X=Vs;t_fxW?j;)}r9&TsqfMU+ zFv7W(l^$S_!@QGNMO9F6I$Th4<$OiYlI!{BCkQXv+c#U;TvyvS3uh zXMIJLW*o6CPO}LU_FygxdDjoj7CZj;c*`yN)x%aE*d2tG>y)|Wc>G|lvr@Kdm8Dxy z-7F2ZhU!M9(HJI-uhcRf&ZcIVK)Gth{GgJYkUd zWoj!fezRnn3xC%aRen{YbtKq7l-jIpJD{?EoLsXim#_cs7G#SiY!h- z`T&Myq!+&__+rbX9{~VsrZj8=ONf(9sD*zrI`RJ(-V2_Xd{uRivif`s{XnFYYA7qg_$Y4*^}upwzKU~FoXaR4r~=*LW-jn=+}$|DiCJrZOH<;4H0;3!AnQ3@3pLD?C-nn(;6lZ`Z3^&e zRk!~Bis4DyqsJF4{BukGq&uXw)?0LdhW<4h z`%}!~*ZiG7fBo_W%NI*_j%UzTv5jSFQp#mbMi_0f{s0pXsrSa4KU5E+LV2) zXf$Et=P{?qr9jyUkX{(9xaJpF*#6Mt8b(yX;s;K^z^Yf(l#pPQD|kXWDZF|Mo-E6Y zl-6u+z65*4I#p%mwxUYk0uWwgybQwYA?s(sYzWV%V}d@peY04TQ0F+=}~`A8-xBi+GO%yG640kIhM8s~EPa0*|fmG}o%W{SS~A zevgwcR4LmB(u=J~R7QeURyEA0yHWE>9vS5 zYNqa11crGThL*cMDKNR@f@^2##Lp_dKCl2Nf6cG?HKh|F4FRU?#vHAwQX@-t0=OoT zS8u_at7MBPy2`4)TH7nGD`xE><))0KMVjG;dKQK-4cJ=hv0-jqEj-(EJa&mK3xK5k zO^#&av7ssCZFGW%M^8DMi6d0w&a4gUEuj50jxs;Ve_LhVxl=~8UiIrWJVKH?070BF zx4Ac7Cfbeu<9JvdR7R7&DoK`L+gLs;RSnx(Qy)T$yDo868qCR}%`C%{fV^*}#%iNC zbfSIiV;{4r#Mvq*=sjHan~az{=z9=KaL+^2!EN)C{YzW^)hHH>grq?LTi=moS2QvKG(dT79hg+0~4P8QIsyx{m@Fk4Q@Qyd4K7|c3T0_%(LBsry7 zJujV-h8g1FOEc6k$3O-q6L<;M;}PKgJ!V_qk;JLHkWAxo6`LodIC6eRJ zwR7%nMFKoL8^h5j%@4W;6V`Z!c_S3bMtRL} zPrk-rHN|PUZ8>Zr)CBCLqp|Lk4Lt~^j?dGH&i0_~BU6U`<7Lw4t5&E_Mu$I86{h{x z!D_ZN_c33S=}U(Z*pL^S)Ko**rU+*1)l+IPil$;}(v(?B^`wzab}ux9gUWLB7g z=NUKTbi%lgfQnOWg2bOW0BplKVXS^fNjRq; z3_xu(T+nPBeaClv$G3m`xBEv%+xeok^o}rD_-8@?(Lee}dJmc$+XetbxC&_fdx3xY zPygv(`lVk&1%|=Hc<#BQSE8QT4q`jm4)5i{%KSj&swbEVD9&&F)^GiRANT<|s;Xo= z_svRw!0={OgYv7t`m6uSU->I?l(mw25#VtnD}~u$@skOE;V=A!_rCYNDsQMbFn2Ca zG2^Tu6t;id(Mf_|@FKLnypUlGYYYp|EAM~tFaCwS(dB2>6nxC}Xf@`BAN}Y@Z3aJb zW=Y?K>eR;cxBJ0{y77=F+1 z`8~hucl|DcA)b|grLw?c0QlQ~`)`xMwAm#qG8vnV=pgtVzvFjsaq^xPMv*Xq_n7qv zVW#&WwPp9@chE>sNf|0;?hIwbg*bV9^ytxV`c1!yupyraH~M=HZ$sPSZUegB(XItHnS1qdz)JY4ey3wqd^25QAoc-u13`efYy4?u;s0 zt3c38r;rSR$-n;B|N7tl+kd;4cQ%G$utGW{a}1k)gb#e+0}QP%Bp0SM#bJ_sWB=+c zcw>nUpVFwQwX`r@4^>&wHF7K35+12A3b{Xn%BGr ztev@GXqd0OjAjjBtWHKUvnPd>b^|cg2XvOc4d2RIV(;qg1j^RE;7^8x6HhNgdn(7v zKINH;9HGXY9!dRR9-1J$LYiunZ&gymxyT`F@W4{@{F*ImNRJYI)h1|^OyCI$qD4s4 zHiOCgoqJ)h)oUWxc+q377l0{B{df_EW=imorizCNxtIwxRxk>Z9#vqo3%e(t2^A-ql1WpRkgOlfIl*C(`3l%;%%&77 z=C&7KnyGOFlO{GW8hu_&*=Iu)=01HPRj95&E-FG^0KymwV|;;Wrho@9vm>0F%CNkE zT_<=H!OD_psy_fP)>qcu#02lUfD18chBl!5& zlmEKcz0UPUrevbG3c!UYDvhuI^M6<$g7iU?SK0shKmX^~zV^dDQS>^x7doiSiUe4k zSslvv}l% zYyg~DSpxE$bdhWrRw`4PnDwYkp&h^oX2}3zP8pbNipN1d9AS-6RECpd`BI9!d?)K* zlLcg@R>_njV4J;4)|4I3VLu(qHJllyoT$ddH3Hl56~Bd`6#oRgGMh5gO0aEUn0{ut zCTj^?z*L-BQ?rx>8FGgE$RF-4xR3RLXj+wmxlq{$6743=!`^xE@${hLoM0x%5oT(H z+ZMm4#Y65<@qn$*rz3;XgG$LGW=8`hU+^o~&{NqS==gwPk`>t$Dy{J7eM*U0D{@ob z!1**!@8?^;@C(1-3iO#3n747i;WzvS9}GfrYUtEhKaLiX2sM`wX0IW9R`&e!&-+BkhRf(4HEduhU7}* zePH7yLCp7Id&ah^n#T#AkbEJMa@605TuFdW7U#A+E9V;gUccAyrS0{jIXQbF%?nd; zzIqEzZEq0vrLVX*mUwutM~=w_VIR*0@McOR_c7nFy@G~w&^uXFz)Kl%}PoIdw+WBue${-if> zE5N?!TY; znVL)j9nD2p2G>rsgYb^!rFw=Dj>@8^4jCWLy14 zxQDH@Fq`3ov8S4;z3}QSxUb0x&06cJ?+7Oh?yBNw^>sbXmB9@8iXY|m?p}$=-V8~W z;MzEz_J_{V?_)`KKtByt85#+?SB~=GVq>C#b)C3=3|$E{1b_&;b=)+4yh#b~Lq*@_ zaP9e?o^Ocwu+cX>y%99krNW#Er@kDkz3z3NOwW54q<{%sMUaMOh3!_;T!G$DinA|F z`ud64*S_}k*fg=h3nLdu$lZ%LSsB7>WSsE&@W|-}W=PK}r<4SQ`eZ^;=`~a5TC;lY z&S9Rq{#p8ZNrSI?lg?(ix^8OKkjF6n9slcxqej!o?!?z1&AKCedg}e5%fr3p zT5^qPzAEg>asQ>)Gj~t0@|AQSWBQ4j-u>YsaRs`lH20sI4+%%zYB>9m8$(WAoW2?B z6VbQ4*_7udVs{chfW>6bnx0G!PA+zEzXu=VP# z0`+F4pfS<7?#kpvlf@@}(kE4``bxAiyehw>6|l$RCs=~SlDhX;?l3ovYs{yGE->KC;d@_&0jHiV zrR%C8FfYK`!Tqt3{Und*g5mvbZ+qLD-~8q;_<}F!&lE81Gf6z|Bn-#5Vuw#_Ya$d3 zeS)7X_B#^d6wC)d_`xs!;xB&v>)-I&*S?kuY+z#O%RU&$m^INF0%%+ybZb%~k)Yv! z`)~hEgoMxk{Lgol!k8UH0`p7=vFXpX3z#?=!i;>5=i^deF<*+*E|+vu?S`#X!E6Ax zjqs#7!z=0*Db8q6xLb-%o>EAmC`_q&!Z(B@?Tm&4nH zbp3GnHzrTZ-8ue^yBmiNdRIbGt(;`%xI#VH!D(NJ3G@rxo_2Ww}Nc5A- zDu8Kb_3e!f6|lBWK@NtYs9Xk=?hK`{psoY~Q@RMfIrDQhH=mCI`+3{1_!WoWx>Gl_ zWyGogh8Ek=?cpFWr4cAKhRLi7OqJ+ixK3mpBvNuY!w@D;|C zwdPkTBzR2Wg~hF6@cYIi6NXXgfem9=@#CG6i6L7Txynf2(y!oq%3?r{tZc@Q$|u=seH<(JpS<~ylY+&%x0@B zg@n*YpwB=5{7?MEPk1%JqsqXb6;*j*E(VTFO;0KPTFAAR5pc6iFbfjEx`@!MonvT9 zFtX0e%8;C407!(FH$SHujMq9|{V?fO8UPbP?7k&J<{KA#%?7X;;t{I4DUn{eM2O^E z{PCCjP*F;JhO2Pfc*M|wRse?B3TdSscc#d}Yzgk#NCVykfY#GtR;JN7kWy4E)G`1^>Bo;)wfZU zm|X2H2RRt2YUjWRMF;lY z%eC|wpYa*)13!}Vc97DnZPuwOP64oLtqJ0!)K7%bvdUM2i_p>k&ENdZU-*Sz_y_*L zJAJAt0L{H}a;5S%86UqAZ zeI)aqAeWgqMQAx_kn1UvvF%&l1+Rb|eB`3qgK6N4ftO+~S$z*F3~ZLBmsx^O zI7uaUdLa?CGF21-oJk9c0hqG*>1pB@38Bgm1e1%0cnbtytoWxTCKg40JSR<}#p%_0a%*!EOgRAq zOVj4I#m|ACf!=1~Ma(vtc-o7~b=x{1VPer8#2Ox)6=cm~qcL0^t+OMC5vK^fAy6(g zMDDQgzQ=vwZ?Cus+y@092CZ|Mm84`-*)d?Ntx=IF*M5dL2fqom2Ux8f6W)0JyMOoZ zgyhSj^pGCcE+MqS&?p6?2}ArEnbJ^rWJp$o>QAqXrjYx&qYr!S7QXzyrl|%@~$^XY%Kx)IoQA;oQ zFlH0#OH+vi45`r|+`z^}s8InBG`3Y~oDTSIf*7igkV=qnj!FOm=DL^-A=e6Q4A14Y zfz1#ha$#gBQ&+MgT;Qo7F(en&a3;i1(QMSNRaqd{Hekb$tmLacZLpTU{-lX$&9be< z!`yI>Z`O{gssVs!eOXO~MWU%p%8B_z=qEirOQk@?U2%OvlRx>BQ6Zcs`AQyj(5lkj z#3r#Z=tXOLvk}owh`kB~22^+9sJiM!e4_)=PsJzbM_Y9Xc(m~~y zRaAyANnOU9^?J90%hV79Ln)jzyltFHr!wk{O}<{|^+xQLQD;5OQ6uJ=Tbeb4h6 z^BT{-XwBj|?Ahas7=J=VMy-fl8^F}cL*8f(#!n97jR}2)a{MW**qo$pKK~knPb0k; zg0~GE89oNI;+(>R$;F0r%L}iJPyv$@>T_2=Qw;&ekgR3iein?7>@G^X%Odjr+kV?` z^BeSjeNY${daaCL;#VJ^+%CEFl2y88ur$#PJ_Fx)*|M5Tm$9{D+nG0278+eTe z8>M9eNCrC>cIJ9v|A+tZAMhx+VDx0I!d6=_go>cqV@isdmq;GsEhsXv>g}W-`>`J* zOeO`r=~cgtt5-p@l2nBaY#ri<(fetTs`V)5bcKzqf(R|VCGii{(pyVb16YL%JS%Ku zR1>iGzGyEzKUu*z&WcK4%pC`pQyzCuT_^xC_{`0VeXl}_TFrb ztt|cC>SQ92C-s!#5u|FvsIbSt>U)5>qX%&EI#_!z;t?u<{6 zcd2pYjj2DcQ<})>GmmQR$Erw7F-NFhVIx;$l|(BMetYDLs(!$PbADIMMs~#8MX1!! z)Nvs$eF4?`E%8+L31c5gUc|p~cX=pH3Hq!Xpo-$^bIRG7n3P~ zMpHk+QGL*lA$e^g!6sQ$Fg9Ttm$4t(dAsJoLn$;cv1FhsZb5e0?Y?`%)yYO(v+om+{bTx;~VXKc+6}ewIZhhORwKF z{Q1g}o-de^El5KQ-ndwx;iSxPL)cJ|2}KBrFc*9L@Nn%}W6SR-;a5X?x$j9XXqc!Q z5{6t5CcJZ2Oe$KwSjl}2X*IlUJn*W4O+$-Z6P32olGDtJXUIf4Z1?!g<0RVy91&VI zCIL1*{*pz=7MS6HS1&1})lYb=F2o}{U_CE20YrsiQ@wZs59i}saK`LeMzKj|hASXh zuMOay0`H$9B_z(YK7om@~1kXyqUjMSi=_6=`@-Iuc#m(BPJ`U;UI?nnI zDM;_@fK>pvDv>o;ri+25ivgxH2$iFdp;z$&_>I5uH}cLYb4rGJFPBNAC7T4XflV`% zQEBo*5MG2#3QwOo0N-Q$adQ&Y*~sNtAwhNHhM6vhN|A(D8?x1OdV+|Bhq zuxLxLm0F#WFND_vIDw5JVZs~p*>Tx$S~G@gItFpTdB&@b{+45*I}@=hgku` zKl+uK@^-I!R=QW^r(1z@%l34=T+jB<;@L#*X>m~Mi<8_Lw1!Qtu?6rrdBfq{cf|V< zl%F~~BLFfqt0AP+)>F7Ab9%zQO?ak~_rhQZ&GMcs291(N75=snFVF@aZOekm$o zqpwfJWfzc}2V*n5Y<{cRmASLKP&?~8o#%XSO0QA67yw*^-Z}ZHhM&C|x>3Ym6G>ph z$S1Y|jL=j={U8Z5+z1U<PAB+;c)T{6?i}}Kv(}x+~t5LmLfpZn`#I92f z^_}>p2o7t43xMpb*IXw)4)t9OQ_ghvjYFSo3X%qcp|^ufhCg}L%v6G@T+fh38(8wb z2RJGp=R)RMNWB$vXZys`C$~THBR`_|MM|-8~xu{sl!bhWiI{4PNzSZsJTR+|+`Zu9mX=snF zk1laPZp;;@9ss|FN)Lgs3)oL0ar*XM-;1fj08I24VkfM_ln<(3LlxKzA5@S}F_=3i znBfCo&8JwXp?Z7^wz+9X7{sf>v#G$Q@^<7#^K8P%3)lDY&i2la;+1J~;ampJS7)@L z!<|NJwhJS@_fkGx^h*W(l8NIUMswfj-7BsEZ;Uj-Ye*)TBjw`@fX|ISp%Nv|I9BP zdPD1HdoFk`jz45P+5g@gGa_ zxF*2DqhX6=Q>&7F;JvUPc!c)}ucf(?A@FL_nqF!CaR7Vaz2Id2@x4DD;F>+Hg13)X zw!P+V>EDWHHqvEZ6X!Mf4JO-R7)LZ6>j?n_Pw7WxVBS>uEYum{gl}NYn4XX)V|N-=)L7jgTysV?~)Utp-W41;rWQt8(CMld#+C@1?=z`6u!aQTk?rt#uNM!7Z1YY4BWu`vzUs$;el>y%Uyb2Z6HI`W zkj4;U%7)4J>5I1hK0F)Si8et$k#CS6Ps4J&!_r(+pQpY?FIVMXxCKQZbM55{G@iMc5O6j-;Q`@?6U{eroR(EX>Gnri^K z4-%QvZ#X9%dPu_+u*xfP1DmM?JPi5rVI+;)PGG+3>9!V|+sI|+TPp4$Ll+_Nzxg-+ z#@~DML8V_{@TLvMZ^~=lvGrRM&pr3t5B<=4{IUdF%o=9BThLp$W8#Mka#Fyl;a3OW zg7G(N{5a5;V!R9Vb4T|d6AcDQR!`Wrf1BdS^bijafk}Dor64KFkH6L$)lYVYr9YZg z*nromSFU_6-+i)=Z$T3t5)YxAZH{F9Nurd_3xX%de#**l?;vpem_3)>$%&<6D@Z&!=CN3UY%}i!88D6>8v~l##{kKRY_&tM_a4O$Q(hcB*CFW z#xS!d1<}HYhZUi|@CLt<0EmP}o4nx3GaSP-dRd6aO0k;RRZdwLCEJl5X7x4Zt4S{8 z;_ZufA@HcQ%n6l|ApQ)QG;5epw8>zafF-M;HH7qKm;doU{MGEA|Jk4Yun4_pVg=@Q zK@PxC4Ei)}o_6W6+WdB>9^hbOV$2Inani>?uN?z^9K4XlLb>_^I0oBArHW!ZT!dV^ z$@G?>M3l(%fB)~lqz2#eE#Le_U-U&j0(Ea;k}S0CKU}y*4DLB0+A5*@dV16!g)fM=n%9ee5kDfUV1l7c4R*%kfES)Q9b7 zSR;otOkkC4NN9+G-wcB_8?s`OpGw0lL6s~KPI(tbkvtU_El{*2BD)I@vPf(~7{z?L zk(3VCYS`|TFBcq{N)~4|rzg}XnZQ7fV7RXm0De;pZ4ZgqOYzgtH2Q79g*MrB^a0N)Rjt`qjahP?F8s zD;{q{g`=rJaZ+l*FlW2z;}4S+nUykmVx4XTF8rA|iS&?f7#ik?cTK)}cut2i+F-)~ zmfRNMD`ADjpwD}YZK$5XRu>ZtWldS8GOfsXUj!2c3I!abt2!LQHO+$hhAcqhMO+`o#hJ=+CEN1%Rw;ai42eXk4 zb4OsMaebuq|HCUqh6EUZgX$QVFnk5(`RAYaiKXU&qETu=0{GoQci1@U+`%lovO7e4 zTr4K=+`+s5d=To_FdjX6jcu22M+_M0ig0QJMU8IC?7{uM)3F1-|roZw(wF)Il@n5YPvFw7dR zk+1l3dbVpwV}jh8b_RMX`|ZzW+hccGaWRa$PW`f4BuLLzxpi8zwsY_Fhp$+Ir7^ z5^jg!>T;DU6RUhFgk7@dXEH8U^9!<+4w)U#Q?zBy(FH0PVF0rt7)p7+KgMaZHo7W} zl6-XgqGz6_c=Yz79*hg*NX(9TLK?Gz0TZ_K$P>$!T+ucrhEc(jxlnn<1kUvaPg#zR zOH-CiBJF@-n81o3KV*Nznc#`SFQoJXUL8rngCTN_VOA%Rrs%ouR5BC~^Mc_*<13Gf zpfanY%=en{C0{uLutkO06hgmy?yrUl&ri`*jJuq|2ml~W{H6$cYyy}?gn=CI%>qzr zJZfgarkMrHq#*SPDIp2M03&m1F%7$=D6Omj=Qd%!swK;C1t%jXOo9c2Az|DRG)Pmtv{Ez#!yD_c_e;ZEf&}IoW-^T`C8+=5 zSXZysuU(iwxC{U`4VTOr18Ce}#L#jYQf^G7VP}{^ZkCK>MUpor`{7^+TCRgx6@+3I z19BMw6wjWAMi^%GWRb(C42)SDIT#l-To`IhR#@OMnGXi-LZ=M9inR%ju|HmE`bf}{ z^?e)ALo17kA=>GAZ-2nUK(1g;I{K)KVN|%5CZi)cvaZkB(`yb7Z;4*C{pWq^&8kaR5*A& za=XNoVZsW#EEm-Vb4>H`dpkcP5s#cxZjdt!V+iK+A74Nxx0Zu3HF8M7;|Eq2o8A#~ zF6BxLDH4q#jW+lpr_ma!zmK!LJa^dHGXTg6XrWKjd)yQ(Fvq$(O(=*Dywo2ch^eh=-Ne3VeCG zz_{j=Y(oM-j%}RN7l2uNgHoGnvrWe42W)&PEZG14--iz&I2EmLRQehuU%cz9xn$Ye zBwot+mWoS7Mr6$tTT_~tu^IBtZ?d`(L~d4WX06Ty9}+l052GF8ep1zHh@YYOF(5P~ zpp;*JeYy)t`L1`p%b(j8A+WE^NJpmrM5+X1z>k3y0541!GVyj$vrIOF+0HdnG+Ggk zp<(S9=^5+um_ zB+oe|HVp9(v!Q06*ri<1YhdR{=*`+-_Ek%1$V9&SlU7yxm!6iCja;U_NtwEScvyTX}8O6Ho)Ntv>~WOCS0$VC0TAoe9|Q=vyg9n>sy)cOT4kd zFDAM9RLYaaL}Ua!AuHToUU^up!vWI^1{D`R9cuBUK(o@0?da9lm(JZiHYF=rteB0= zg%ig=+~uP3&>F7slt_J*ME>Xh{Gb0zf9Wsb!LQ;ihQMM5=2UNriCG)baYlg0Um_F6 z2uxJc$^NJQ)Svpd|MuUKMG^x{F$6CCT)=qkPj=jQXxa+FC~M)B(GVi zrlJx2doli~rhkP|R3b^wi)K~}uXKazi3g9oG)2x;x{DJV`CUVF9yh(r;Shz)9}bwaa#AI z_rnV&ev7KL0P~DWP;9{X+f-31Sjq$q%+UMV zjyxKU@P|A?UeuX=(fG-L$rJHK|HtF&!GG+J{W0FzO4*{+!phSE0)2-GZK3iMMb(N|_#&Udt+3-AgBGIO)-s4@^RF z;6)L&9*icEeJE)dc5Jz&$iSJCwfM(Hnmv^SHkb*onxb_cNrde=lBO66KneVTD4N!? zRUg9<@@w(BKl~L+=4?3~N5F%xAf}k;+fQrClv;RH!2s+Pa$&SWAvZlk!MmRZNfSTh z)MTt^YTj(2bs`j@z8Lfg!5CtO^!mW79D-{}iE?K)@c3dyRtdH zAZZZ^ir|3oj71wixwi3csL5quo=M1DD3n>jBgYA5;miWlyJdN?VJJ<}w=Dxm+>mX- zxMPBKVYnAPsI6B!1m0BfBady0W|&f+kcJC_@Cd*P=#Q7R)978jlzv@;3m?-8fESw_ zK;*qz@_GnT{Jo5z^m0mIBB=<-0Sq+)03NhV)Jl^hji|)Hke;EQ9$qWp%ACP=hkk|7wX!b*~1f$BF4FlI3ialEu?-NC0Jcx09H~a<1x&y zSu#yw*BjD{Un_WC;-45sNRJIUIj1-iR;x521us*xhV)|?t)XU0BeXz-a#`1lt(Fx5 zM$fy*(-X>iU=#TWykv!$tQTGtAQVa7u~n|I9oMGFtn|rE(ICguN+GvueP@KyfuIf< zcArra>>T(4!@$ZN2}!QDdQ0Q*>fnYWnxQ5^fjR3TyF%c3=S9P&M4DOG zr}x1w^|o}h(gzbi0GRX*nVY2%Igh;1Xh(-H94m$;IKt$+3fa;GizHd5$LJp4B|XKf z?XBdBya`4YG^Wzaj>n$ z+R4{!buJRUDawR_-6-&TjNV|oFgrPM^m0#MImsizuYp1!Jy^0C*KqXj-(plIVy%tISX=n&NY5iQXl|hCQJ-S z3Sf0qQZx+1BWDu0z_OyRnQeK@l7$z3rA?m5F=)(b^v#ZtulhIx=Po_NY-Pt?9%;-* zo1xzD=xEMHtKk2i{YSi&N^Y4#}u^DaQ$K zrU(VLYR<`(qS>gDF{qxNvY!52oRNf2K8HLP#^@&oPV-m*0jynu*&0oNCyIj=Sui21 ze5D&@Q`5uuxS?8CYAtxQ+)?T+dZC8b+k457O-*3P$#%6Vwo26STs#xlIYGdA2@p?} zZ|d=0H*IVJLQm#6+@9K0NhHcG?r z^@f8d3vwN1dt=Xp_YCz&Y=CyZzQ-eG^6ZUq%|tVtkeVv~9?_;E=>sV8QTf;qL)V)f zs5vD$0?1>AhVvZKV1|KA@6vL->hWlD{#i-yxXlu zF6dXx$dQOpBNr7~!iqU5kCISGt0o!MIyC_&tW$&E2o3kh^!k-^1Rg;6b?WHqg=e9u1Micz zg6ZJT#gnfKJ#(|gb`tjZ0SF=JVgTjRLvqq4C6m}MU}h@hiYLd=LpaC_v`sPG6qkO? zqaDEL?!+;%O2ejBy`?|t z8nS>bSpusSJXSH!aL8A|8sU*U2KPj-EdYi&`NC4>1#D8twmw7rhAt9sk7&k(6_0L5 zy(__`VpbDO0)WOApa+3mz^*-42qeM#Lf^FXlLlWad+xdC-u>=(y9>>l!qa=QsPuWC z7%*U-z{KDOC+~UBd;ZIR`7hpR`s#|$Mg1Jzx3T(VKA*vQ3+PQJ6NdPi&(GSc}o8d`;I~eXX!eeJoNLIF!<`2$WtCC53?hXYcv~^Co?zve>FVE@c0%4oj|b~>gQnE_z4+iGj(A&E`%}- z6`7S;LJx47lTs12hcYELCas;rBNfkXu_MD&!HN?|7k zL_uu4yr1=a_Zer_{I9k4dM^7pr%ujn%su9qzwsNFIsgB;{_FB=%GK$BS6@dtD?D0d zkKC}kwqeK5k#Ib&w5w8mDxI5q=8g?um|BMTeJNm0l#qH&7%+s@MRE*|AG1yo=4l+I zWDi?k{_>YSvH2dUFiaH#VW^Vz0A>jtX4Sz*g9Oic{zE}Oco2zqN4*W}MD*Qse=^M{ zk=}sCkFe7Ve&we><#6`}t}ZAVfH1!CG$UN%8Iuu0Zo^CFqdz(tO;q(MkNxlv z%mx_cm0$+k04631rA0J@Xv8)kLZa3z`8+`%0idKx57l-`jW0AW%{ zx%JKFu|AD>S}%lRrmO-fts#xZwWllR4Y^GST+2~bW>**Dq^BV`utnZmnhq*I59nJb z%zZ#uc90s9I0+*=GLe||JV)sqMTMtQ_!Q7*fiGXa^uYSv-~HX#JiYmO0}PE*FuVZ7 z%)DrM$(@V<(afTKM83@alI`Dl359NDgG z*4W7Fkl`9h!|QA_dzNa*M;QDi;qeK^9MAYAq*?i!UHdhv6-hqJu;Q=CD;3x_Ts2J{ z0TX0l=(Q^zuTO3KhG*GMr{J_ZkFQ*A_Jc{dM7P1#;YJ=m`4a2q+Hoy@!US2B<)ryQTU-U5Acp=or#Bk(QxDmFRZ1OM^ zfWCX8o3*1$58(bzPbO^U4cG8S#uL@JAaq=zvSfw?40@-a6NSglk|8mRg!ge2+iZhO z94by4=az4{0Q7YgUm|xL{^U>oq&GHwW3w-P;E7G20N?&8Btz$%@1Xk)rK8Rv_vuf6 z+V{o3^rbKHbQ~r&};9@<#a*0~ga!SyVmE z6?}mF4lIFT`WPsWnhhC#`W3%Yr5|^L--JAFu;JXm>o5~re|A5OW~g70ua&vGqj~jt zm6B@Rlu^wrWmH$f3m=Tk1Q=B$G#oiUW}ETc1E{;dbIU2{IB`tE*O+LN!rSVvS~Z;X zV0z4k{5lIAOK3G87CLFX_vp_=^r#mY?MhzO;)w*Cv(pji0CWBc8?(>wO3Fui0(Me* z9CQ$ZG4zpV5e{>)>4lLm0JC~&`cM#qSsJ|t!~2*MuE@bxZwvg438Ib zxB4CV=soZnA^8ZqC8{f4#{AXig0?1=t=aWJ?)n_uDilrq9KC;=73724DfUg5qs^m-f{F>E9Rw#FwjRb(EegbH?A~y{lnrXQh^VRSuvzm~O zvuR)wLaxefsyozK9=0vt8dx#IPZ(!y&noeBn?|b{YIqzZYD+_|A9I>~rCFUe6-gK} z{#raV1lv4w$vRFPfiO)C386+GIHBHDgbpFHXgv`IL*>!Xxdq_Fa+vutOJ86Ku=Wg1 z!7~>IHdbHw!WaDD0n9t1!XrDn&=NdWI%vVPU-N5zjrU7^uBlvesS-4{Ma7&v#f0R@ zQQDKMsk>^tdc7<)jiKI@mO#^R?PqGk(>Jw(M-D6(AyM)keq4-@$u=CGD=r3;5E4&R zh9eB}$QEV*BhU{a#lN|L*)&5!h$qb|H+9skwyRw595E@R7}Bgra!R+eZa47WR_eW`vMyj$S~C9b zYldVdYNdr)`Nza;ktjYZzM@*e1(T)}^dry@TNuLxRN}$uxq)UP;W5DUG3dKb>5HmF zz~WqEBO{!tp}H;zJ3~=P8JK2FOlgK|3dJ^<5yG4b@%B?7!J*|-AT_I*^dH5epZhk@_-Brq}M zxb`eSoP%5n4M~@m;sDnHY$#kr8qMucYVpolxV}OgyV=3 zXL|;07CQcB$8fwuuF8#VrV`8+h9L$+)f1a41&DUYfrT+9Fx&wLSbb&wCi>M2zr2f? zqhfBjV%8W&KZ4m+UcqFguzzq)RcW|mGAU1Sz*NTiG6`TRVTQRgBs5Fb7-Hr{BdlQz z|Ejzsql!5IDs2t;v^fNdRO5_em&c`7ufqbFp`H(#KNpRa@t5C%fY~-2Zg{*g{lOX&M(vMYwf~X8VBo~GSIWSXN z!@)r2h0skcz*r65Rq6-?Zu|0uWCb5(`LddP^Tldw1yFc5_IyXibZp1@I6N|uph%r`uJ4(D4lwgHd8 zd4c3B6YeN2dNJr7evkx*qKgp{9!!h;#fum7O`Opem?7E%b6&E=tS5U&6$U|Uh0SCd zlY2FW55})f#U>t`O%pj;3SwT#MLUgtQU*43NvhR~e~iqL@Ty@wa$9I(7Vz54GO?Ge zk$51@k{=VpV{Cc%ibqr$o`Mnl6mS#dc&V*On1;5HJ!#mR4O~ceTQBbD>uq~w>7Ii@ zJo@4}n^IO#ib>h!eT})qX$TsIW~C`ddquLn zqF1rD!gyJET9uaBFUGuJCtHqL_{hh$n9Wx6>PflAu$qv$b8))2ip>?`L?o=3Ax~-l zsfont2|c(NUNISl8wHh7d6nr}t-r-~N>^S?Xhs=>sYy_Im2?immdgdK!d=gPc;Jsv zm$G=IsaH>iXX9CYO$?A^Ce{T*n<}S$2ge@)_nDt!a>Vsr$gf`au(}(bI=0R#;fYNO zz98db^mOQ#5~8BPAU2qnFJF2h{Lvr%Q5%4jDa-_6R1>g=2 zg&m8svT|i&V3M%9AGsiyxGXz+$P>!IM&NzqRhXbxwN%`%@IMUPOLn7{KoztaZr633qgwz!%_ zlzXAFl74;#2B!FqE1dq?xZZzeB0|5TFALyS({COevCIn$15Wr#$_ougntL>`H-1ZV zvLKXQ@h4x>&>vx=JUg`#t}?LLc-P2^rkA70T{4g@gxS?9SzZbYFIk3dA%-+Z@B=h> zc;|(!f_JKst16+GVVrLV@A|dX3!p^Asog6Kb;ydKv7O=6N3!-R zcZxGt+<=*gL49VbyW9XyymwwAClmBy=E8npUfIVrz}9A6Ha(LQ``tbR=snEb}ybTdmU%gkCU^MN>vv^ARxD+MkjsveQPF#M^;xG9<3x0qS zzt+nAvS0SgL@s{$is~#|mzgPmZ~o?Qw(2enH?@kenP5(1)`dZqIC=CNK0rzzAo<`5 z-ljRiMk5}j!`W}Y+%@bi8vS5aL3X_3#BY^lp&?l@n=D5dk09`Ebp55MuB5in&QP_T z2gt=nNw^nDV0|r;$X88?(+FOD6w1O$Txzx=y^MSbg`vBc=fzW9?w$f^2moS>Laf}1PaBA;0r`*r@jvdrVRH&{Kg!`9A;${++0T9! zsSHIqvqwQ1lrGxe|NDQxKakrC_=kVk&9QQs>%a$x#P{DQaidcR%slE@9zE!&oue51X>koQYH zbNgHT$d$;2YI|HimCsU57+WOta#RxmlN)+PV!QTeMPs%#RXt1NuT%p&2n8k*>0_9C z89W#IDyApTFz=M%8P>XVQAyA#=(!h0RDG04$%WYmG$B2}YD}tLL-Gs>{+rL= z^}Bx8SHAKUWw9|-(n7d)# N?;Y$F@vk?-zEvj^J`AhQirHis&0WUh zg?pb_zEW;TL;9nV=CxkVS{;>KTQFYShHUhhRp1hTdH_hzj#fqP%%k@3qTGw*7)-HEePZKCMm-FD>GUJ?)6#2{0E(s*^z!uz zv^5Q&FGxLk*q8*M832JENwlV9L`l<;<}Tox@(TxVhxn0$#N)TE?u1i3Ir2tnQ$8uX zJIzlIMql~L>Ccn?um5#=H(S6KMK2c^50vm-j5)=FZQ?ZaUZ|5p0D|$NydddeggP;o zT^1ApMHL12ay+Gyo~+Ep#igVg^jOl-J4eT^sOSM5ptQ z2B*sk`AHrYxv3hjIqrq(*lz;k4ujU)tXgcCby%RlU~IYH;xin)SVvxk6|?H^E31Nd zu!)DS5=U}{pNX);D_`k^pS}{~kt3us(hz9cj+f%Z0C`vV)7SaPkd^3?NxnptVY}q) zZixJy^}f4@ib{|?UgB>m44DvelD%Yji(Z_oYbmo@HCIRkPz*35RE>suR2n5&&z<_X zPxU0^lR?#J_nNXaUfX)oLg;4aoB*cmQkh7`R~p07a6wrN{L-gUH2g}Qokbuh2x|xYC?$NEi}?EmX9wO|m%2?rt_ReHX0TM}BjSkOs!9 zHvupyWf+{(1WYcAN%_fz$`WnmN*1IdNLkqlDy9L@pN*kt3%=qo1YY^i8s4ZxrD2{P zf5TjCj@l~Xp;uVJcZ=I#H+p|OOgsYCP!*e~-d!g5SxPIopN-R!4&z z41p4|;K#&pG?cAEn##4(ZZa5?V%VnEVZOv)%q5RHySRrUt#zxg-+hC9CCVVq$Y{0H(337$NdXvlFg z(U%>&=XvO2MIuxpO z3?m<*;VnJ$;UQERJoKA6W%^7?M6w#>oE%~FoB2A#pkRX@7C^8v zYBq*s`e6KOrs`96d%T{)>hY=MBAiWF@F~|?-R^EpIV&1@O>u^*WJ^EHOc7}A>U25_ zH8N!(jbSi7P2j=Ianfv1LME@#|m9b6>#fcjR(GHDRo@Yo@FIy(3Fxaw!XEh6_yOb7KN9bW{-B zd_7mGu--941MCwiLthP}F*MtCNOr;K4ePncUFCw*+;=npt%?nv;KV|rL3%RtRQll$ zf7lbDsUi`Qn9(}Y@EAryhG9s^9lY19WdW9#&W{qwgvRi6ivFMf<0+84j`nrc04A4J ze=j+bOvvl-$YWL(V%C#Y1Ex$~(cTfiB0nN;4DT_p z)v3T5PJ{*d82;6EtIRs}0C{Cw!(R0(?V8l8U*$`-D`u5XM`AWbU~3X;EAEjp!dn>D zNG7lhP2EUxi=+1-Ms`9sN#g(jKmbWZK~##b72A_1dv<4xa)hb&d$2@TLR!m3)>Kkb zjwOOK#;N1@dGX@K&;8ub`_G9``A8VR=NX+kjzE9m#kVMdJ+!$mBhe?o1K$y!y3vn@ z0MPOgrqMgPf??Kt!^J7})R@m0)*X=ZAMtJO2e z`CW^!%4XML@sz?E+gaEOcti49v^9}7Kyj{^Hx$OuuD-}?q1LIvKSn^Pt*f)TyPf%+ z&jp9>j`^lT>vlJg;w!|nj!X^PC3yhviXiOG?;7VibwsYS$%8>MJe282b2NOIW(e^o z=V%=cW)*@x%;^(a3F&Mkl+(mkFt)6n!L}>QD-fzT@-wi(=M-W(Ym6`f591MB%l1YX0y4efr~M4hc73$A+Uq-&xqt7<_{0o6;X_Upb+Kz^x4f0(P-t_>ESx-o|?#K!CtDgB_j#O!8T{h$;{Ux5G{+*Y)xHk49 z`oWqZpNL1`RGZ=E;*x%Yz3E|L)QdKEh89wPm%*u{H|%bBHY6ATZD!LnJW;%TtwuGl zM+(u#Ir7RmA)O+4JHhb5R^@8=Y_b3*$O2o3g+WuC`h*Fud+y7ZFa0+Xjzg!8^UpJr z)`x9)zjE*} zmb28Wa*dBX+dX#$5PmeP`FlYYWMQnih<5aA{I3l-t4q~3t6iCWE&l@mn>zsvNmHw4 zrU;wiI`xL+V9365eVb|X>bp6!pwvzl9|;(v7tZq6dD z-=++2XU`T-ts!%bMrml)sfx8-sN)ebhG*`_Z-U?pJE1J<9~oGLk@GdfN77z0zmXp- z^1M5i*ZQ{`QK~uA{{i!CB}mq15|T zyZ1$3ym&E(5KQC*0KF;Ay0dj+X};mhJj})H%K7hwQfMy9?h{O@- zR}*M^VnZ9D!wfQgXLfJi;_;XmiQXfoo>Pr2SuT!nzsm4a<&*Eb{|^CMnQo<~+%z{1 zxf|pvkMbz+)in-Z{4f$EYd4Y{Xuwre_D#3Kl z2uoR1ngFCwS>U%NU&Dh5HbVUB&#K#jf=HjcYPFgtv&}`T&WiVBfcTGA07A`gF~c0K zXkuupU?8{kUA+v+(dk)DE{Z`S1U>%JXHs^XZC>=#z{p^0pLyi;1fl9Y3)x>D2pw;p zz&s23GbPR*30h4n+uM?kNe^efEXt6^JBl73XF~#qci?rN*#^SsBRB3`I5_=v7$5s} z;yQtR{^(}KgzEwmr0>YEVlEhOUHWv;pH*^!Sa*bCRt?P_m}(gEu4e@xDm*0^)m^6l zpMbsH`dfeNZ}l@l7$)?3U_};ob)&4&i=12;4R3F(3IJ!qBzRcsN)H7F^vT(sW7 z_7cSF5`Dv!P%wsiR$RB|r!TND6ToYQyI9`2Auz`iXRakE*^PD^p7k=A1df6k;v5&< zrJF4UGK@yBG%916zND26lMIBBV>5JKkc4U zV%CLin^JbAoi!E*$EM`KgiuUp!6}&#^gf~>RG>-Q(3Bv(WD*^2%woMEd#Xa$wmUF>Im z=4X5~=+AF5>|32o1c^kzkYybwy#~q35$Kzr7%b4w{_M|sAcN_q49F*~ z=G;q0|eGk?*UA>kSusalGctXe`r_?Y^f2VkZoh>8) zAqk#fSP|OKdQ*x(sYI3orf3RsB9q9JU6J7xjWB>s0M-ByqGFDmi^AB*H`{f{FcSj( zln$-n#n5@s3fcg`V1eUF)-y?l8J^YGjdJPeBaBM2Ug7DHNYgFF>^QoS8EhgSAzMRR zOUhi7xO%pl0SaRr!O#>Bfq6H#fsJt1d}bNW?Gdt+DFf(fVyN;Hz-xumDJTaQwhPim zAqbHMspv1+x87aqFztX#V0uVbyDJkp=Gl>%&}hlBvT^{*T4407aARX z*<>`^i1bLV4X*a--%T#@kS98g7st#vK+I)~ON|fKT$m>e33m$C3E(HO| zw|K0b3`idy*c%Zr`{Q17YN&qjhSM5~@qZXJ+5>E#KmF_oYyI zwGdU(Y|ZcJ|M@@v=bo!xzI^FWvD{$HExpJU1dIzZ*H%hHWh;e5~iE4 z$4c(}wNht1M{;B(7%dZ7Xsm{Z{K$qX&g(p2nmP!$;75>`=imU5tnx-XQ!SaHs;WT4 zHIiiHE-o+&R5fVY+e5_#u;J!w9jc+Q^`i{Wusfk8AoFEE_bfQbqtN=oYik%sOM2!_O`0>5Z*?em{HE4;hLh5rL^VVen5JOb)x$|Y9#`{` z!-pXw6oWDXkhvHt@tD%a_PX%uorI!fmJckhpB@U&+FNg6af=4HUDzGrh!>&@lAZ}X z7wW=9pOVHD7(zW|%)RI~OIe|hnd%JIaiohgiAbmtiOaA zeKl-2CX||8*R9II=J@&2m%ilY>(LE(>Q5FPnD$Tp$v<%l{@&mFd-Vc#b8)sQOB)ib zJ8xG3LoQqedIiMnI7IF!{oe2WUWbz>OC|v7saIS7%Y+XFMdd#+0CNid+kg9S-9x!H zDh?Yn5t5=x=;RR)7T2DC>!C1&-61Vf(RY$*%=tnFF0l;PJNv%sWa`RK zV}sO0WylvzjhtozpdXnFR167VZEPBH6)vQP8_$rO6<(c!=8$4>S^Cv53htvmYeos+ zj^F~W#Km+L+!Qtmc;`pStPNjfXf|J^M+R`4P-uN$Vd&-aS@LI4id--pxnGN?fb~)^ zrI`}8Mleh`1~yZz)}6(v$cEjWRlwI5?HJ_lV$wg7(73<=m?#T##k2%8J2KpPC{*Ou z(Vnl8cv>J?7oq?6hn1m%Bhf=LXA)8hmcz$d-tDke@N?Zoc-QxDr z6%P|{%zA+EeNLyB_f!SY(nrE?saf|j;#wHF=7k=>#VD{3fB3^f#ioJrrDqibd4{8$ zsR$dsiJt3TP?efIAnlwb!|CDJ< zE0Ghi?WccCn&ZnNdXHU51i@H+3r&u{;L9<0;&B_X#I{ZAC?f@7@_=}RvDF8^t>_OV z*=F_z^4V;|Kf#aYC~UL?kf0U=jL6%816TzBSA5wUJlzRhAc9 zNJ1MMiJ<^o&SL0JLX!ZtnqQGm7nse#42y98#^3lG76uW2l$R_4fW6xFAp}GIXfAmz zVXJP7|KorBk8PA*nu(s(BoCI%HF9kJC&J(U+kd;at-1wYsr98epF}^U|H+^H$v^l9 z|6uQlm6Z53UPL~=(#&uK`bxB#q_hNz^T+Je*?zaEnAN&J1=nfc;F1SwU>>q#ytI$2}VQ=8ib& zk&CMMXA|bAXq%1R~Okk?y zE~Z3ewSsY?tDgJASsu0Wm*;-Z@A*CbyadLnV-c;whR+>6HdbcwTX7!Ol*w1Z9?r9v zY<%X!Wg-|Rvdd%UY{w({Fa4#z^g}=NL#_f!S;K50jngYaghjQItDD=DFp5XM z9N8gUTwyy-4d*sx9Z|_nj(pjfkZW-^Sxszg!2pvj2NULCXI+f>*;&D)pWci0&wcK5 z_Kd~lrD!kNZn-o(?Xz}|5V5FT7mPfW@2rjFTRG>Mh`}nySukY@w+t?I8h6!7prD2# zE_1?c9k&24)xD^Zm{sKB691dlR|f%DJV&xZ^{R8iUIUmVT$RbD%C6iqCu^3#2T`_& zx5Z#gO_7g0H0tKYL1-Z`*aZ5s;Ooj`7A=abJ)N-aGX^)-SsF@K*J-cM%FatD^|TY* z@$EW$@4Cs%UU97grE>)%FSX*DQ~&X-7ZU>T`o?~<&0^q-U{S;=Ft6MlYywsRXQ6G0 z0Z#>oVVg(km;ykHACCocDM5PR!|#7Nws8KtW)J-UN{vSk<0CyVFFRZ#enA-C6b4(4 z7qeQcgIO?Sdb4CZ$9fSA3x-h9stK6@50id+v?D)2V4la<+6ov_Mww(qR%+2IqZf8a zz}zk-(~TD1dGCdblMfY`y95S9NSpwfkTrmol9CstHf&Ks>Jv6c+Yl9)e$}T@QtzVS zv;it_gd2Da-P0u7N?l5Gz?XzI<{Z&zmY9iPl!ed+o2R!+Y)Ad2;311yvTj)!S_pn8 zjA0Xx>r1{?$3+LmM2Q9rd9)hynI&)vxq`{4T%lZ8Q(n+Yyv@Vc%5z0NT_>@l!y-@` zz1m$eD`EJ%kWPDoAlu?QYh_A&Fs!&EcZnKiu3s4d1mLa#*80(0;Xmv236%;Wk|GzU zR>0HW=!;=l3}d~FHZWu5)HnVEf_*!Oij!t(`%!Dm~ab;NTkDW!Rs~Yi;5CM zTY^TW=`RJNGNy7WHF8%_JWY))zt~hMLElcGDe?O7QG?w55)8v@h0|3rjN}4+t=R_S`?V%>1p*I#b-l`^B*O&h z;je$Kqo)NFmEcuYt&!7c>q^}2aZQ2TP?`$TP`}moNX~nhDI?63_lO@2Lvj~G@(c&l ztYPG63rRmF1Adqgvl|n_ILkd5XTz1e5>4a)11qpGX*jka4Ut#0ZVH_f^v)qKX+3y( zC-WzM;wRi6HSbP)?d7GkD@wGz#&nDU_>9n7slVm7{1%3OP1x-Wx$ObT1-;AClbHj_ z&AL5<%~SwyvHtK6|FCn;;~*YSex3qNDYXY~z4Pq*zyJIB^5cDf#Rj>U0aVO6;f5k9 z?zrYigtGA7;J^46|KeZ$tA8an&+dMn@ySnqlHiON17t7^Z1n}Bp4F$yPpzhU*9BIs z3quWOJgf*bndil9m=pBv1|TnuFdJC3>oAh7kBzb|LC7QG6`7wjMLWGBq(7Rh!6)m7 zc9n;rRcmrIXIs6vJI-F!B-fQ1+ zvBE}q6u>H}eoRJVOE76F`N(id^UixFA!3R8lFctn{nVtzm}Pj9YOHMWKMC#ofaGj7 z)^g3d9FtvPX5F4#ij+0O9>QG4p6vj<^XV&{E>R~<2M@eM(cP`lXWkW;+}*h8ufR+- z>xk+lyk|kDh-WyblqWE!i&LjF!ws}E16W9go(LUI|MZ{!Q*S>yJ3so-k2-aHIl}Xz zlg2sfz0m*spZ{|oH)hUD50^-2I#yvYJG9t-=XZXmr#FO-RS%#X`5p~IKilWa!3@l= z#bsXnQ3)G~upNXBJX3mK%=xLG`YB)5ke9FjeEj1dfBEtyD*Rw*JB*{64a4?Q%?Gmy zm639U4RFiwF}Anxe}H+{EAXx?F{iih=XX9Qc-M=y1|SD*)x2+Hd9^&(6CBw4Ch;2+ zQJm^?318i=)aO!R(>p&fcLs3e*~nv`1I%IeUElRxP7Y6L{-Z(XQ!Y9w;aLF_I(S&Y zIGhlE<};rGCK&n_fTuTyS?10>hMiKpl$6uUF$v%2k^Wl=$Cby*U;pcWy+=0(mFC@1 zhvN5s@ArDQ)6~EI*ZI3t#wx6V#XJ{^%e5qrOCnR&145 zctvPPD6nVi^H>0H+UdHT^1Eu@wD%AA-*g3LO-Hz|$5)qS_KatL(2RUv(kI6k$prc2 z{I?K_p)hU%U&p+=iCmBE((HR`KdeEnfvxgjrrHF}nPDB135Jja4}T6D&57dEHAjfn z8531ty~7Wf(u0=|`B0G^LZ+ONOz4qNI`*7@raaOyG3D%}>C1agTxXKUN9UY}MbB{j zdcJg4c@Gnb0BCS}H1zcx=c0#HwDkB3uj9D@I6_WuNH0$AJW6`_bLjeZkMG3xj0;fM z1Wn}YFy$?MWrQ5z7OQ8*l$sp*t$*48E|u<0_&_&9_QfNbBdQ|@Z4ZUOPN|;lkT_;McsY{<07*~KC<`n{^=3P?0LXrNp?5@y!LJFC z_#K7M^E?jv(9s*1PApUOj!$32M@ZmB49-ZL1XPrcTRbA{5tbK0ip?oY?k!(WmS7CC zVz}0-XgAIE;aP?4hW+atqk4Id0R2KJoZ9~|}vhF2W;MgJ3}&^alASb82)51)hlk;d z7cU$hl>RQLbHx`=97PTlc;}YpAaUftID0w*nLD2xGhp#mO5HcY%0fX|OY(4PxMk^~yPFZ=HMCD^hLykP#X}mLW3bHCHNSu%kaspxwI{h>-AO7g6s4uKUG*?(>%{ykY{%H+NH6j zo*|^8i=(Dc*Db!qwoa{iMWuHhXwDKyt<%T}VamIX&XtahzGLYJ4@kUe2{5NxN0);K ziCIUBQwqQ#N_HlZ>CHOu(B_2|C3gT>0l@2NU?4lyI^hI~$Gf8h!4UjyZidcCZ=ZUH zQ}2ONR1QwG&R4TqA1-n&9iKJ&T(Bog0dP^n$s^Z#CV9WJex|N4p2rzq9Muy_`FUJF z-pho&Q9V@_Z<>D#`#m^(=M=nDi?cyn09TaPwyq)owr9=HD$f$GO5_@5=I#+LSN90L zVN)wO?|M^uSH7D9tA?YWAq^@$&Td$Se2vN3nB9!rWrFErK%$W&UtPFAcE?d7_a;*X zpUJT=hV+o-dxSk$Q{+OD#oP+lfLCUE@k?1$J-E=UDX-v%$>Ncw=FK|yeZ{BI2pYXO zF&8R1?***aXcCSAFdrohd3t#<ZR()OJfh=1utw!?ucOYk3rmM&l|_A4(;1F;bSbsXNH2n;=ca zCdbn@nu&V}7$>IL==|M_SDjgALvp+72u=f_xO)6( znM_Sr?_=Ht31e+2gYZ?FjS;<@tuYECl8fTd}oV0fc=Cx$5uodxgBwWHrB+jNhtx z!66ZXA}}w(vpki$R~1YQGdT->Zz?UTtZkBNyY>QZn4k`Z`iAO5Xjc#}H8p|J50yei za>?ZR^|R2cYXRHR`mQ5;zMF0bSB$?eqi z(`RC8gz_>aP4WXzL3FboDyVQp5WCrg2loE z*3Rfcs&?*!Q5_@cjwX!iAO#HWLFtcpRPoE#Jqv(FRF5xXz65~Edu~2Ma{HhZPg7fE zQVIs3HWA1M|{>Ug@~@2VxvZzMtYa^gBNv%lT!YM?>+0VU_|mNC9gMHEU{$pf7&C z#*rdxtjxmOjT|YsFSd9D^zi3r8$J%SC7iw!Qo%DddhLh5#uA(_f(8LJB;b zhWBb?NEjId@Au-l9js99eYT2fv_qt}y56W@ys%JeyADi2#C8S0nZLWkR#ptc7IR@+ z*3nORO&QMJ#;I?Awh0GD*p|ljKsYsA9j#XHt}I9a$WeHcLW#IWEU^^Y=dLEh^-8HS zQ=h2tFhTW@QxKQNz2;9Bsxq%CSa4MeAYsCt;cEr7S@|SJxU+;SXMi;DVD^MCe&cWa zjbwVQDjeNGGC}MABXw2SF)-ET2%ahRax?nPzxg-2{Fq2~ObU2xxh@7jSe8QiOGltt z=50ZEe+|-#Dk+k+o$ddtR|cSaEUIwyR5y{`9kN7&2E_!DMwb+0s7( zHVrB{Iyv0vU*7%iwUvuszQ_(6zmPNJ*CMWQUiSrg9Uu~b77l+EZfGh201vr7JX!jE z$D})p<4SnGM`|NE7h5uCOs5(vEfM%8Zcm-58bd>&YUE&VPrmc-9p6_~FaCEBuagF!!0BjSXL`SRv~u}P zzv(x5Rmal07*bZ}BbV}eUFEkZP1)G$Kz>8v9Rqm0#(wzFhdyNOx>*rc&ROm<();tX z_9U1KUs(X8Oh3rX8`68r-AgX7Eo@^`^!8Yn!|Lc=mxWp@$l`IC_)AG`13ST5yNI^? zEvqr{N%^;Y%eT+~$MC>YP=S=m4|4zTAO6E{z4cZl%M;!a^0AdZ<(0lQaOLx2RR|W+ z&E?1(33o~W<43{&@E`s|Zza*wFudZ$7O^wzDz7NrNBG*p9$WFWhkV`6f4SF_f!V=t z2?7hoGW_Mg{Fi_52Y=A*9(g3gxe86Gq2T?U<%+3aF{`|}Tc^&-#o3Ytu>6MGMj2Z* zF(rUced<%Hl)FiGU?bc&93(P#j;GL%msIb_OTTaq%ibn`GL>si|TB&7KJ0t z-T)(D&<0GVH>`1Ot;wQFFKio9)Wd|K8vGd&(krRgxOzRA%#Q*6%)@BDNEl3edoi zH{^SBD6b#*fgkuYf9B7~SLB+=T_#ojY!?0s(vSVvk5w7@hTO7i$tVeb`)~hke;VH2 zZo^ZarQH~wc{o`Vn_vlz@6XgPQpV@L0sHe z3?IBJoLalBtd8@##&Iv%vW4#mlvuZ|mE`C`R0`qMIy~7;VL}@4Xb8dvlZCwnKrmcg ztTMKua{GfMuSYC43`34b3{0Hd9f9Oy3d4^r*Yc%o@6rt6ARi_~r7sMTUkQebPDfE` zfjbwcj1LQAtSYrMY2u$`t6S9u;}=F4o9ikweZ`-0jW8ZZfW!t6hToVQf;Frc%nXZ! zhB+%u{5FF_OPoG6^bUcm%W}K4th-*3wO&u)f!E}#cg7<`g@HinYNWIkZD3hRNn zHmiw;;bcTENFhzMW@R)}s7z_ts_mFx7b?pXX9FWNrQh`1@RIokyVp>%>ZZIZqbzLY zb;*$_tDqIIArlOj@b`-38Nk+2%xxGkCzL`NiJ?^}qo&H59^Q>*kXyj?n%!#~I|9uT z>=U)sZ{T-#C{79L3uA=tv6Sru7?D?mkTkU}9G4Y=rXvvMfq7!#$j+ceH+v= z5ZdT^i&_pxFO?&Vp4xC#)-&dGCdimV8FCeAkZfhw7l!dW*L&jA2OlYJNT>as99$pBj@)q z3}0P6B?m73vcH-PH?H05Y8>c&%MwOETnla~YCpn&m5GO7f7WF)Y+ozfLua zXOJ6y^uusg7|v}rHoXR;mn=aGnSQM3X{zCv%k!!Le z&;ZoGb7>9Z`$H(b_eUJ-5a9{FCv?S>)eM#;+-iDB20Td>xlNXevzArd_# zr5hPJLmGmHnH-5eW%}evaFnAds*{^@1qr``?<)`O2=`_90RJvl;Dc4Wz4%|-r{D)G zefvtkKajKH?(!oiT)OWM?7kInJ~7FBNC@=nup^MBCqk!PfH}9~8SfJ(B-yOC3LbH= z)w0SY&6rPY!~9eNM^8odwacRjYpK7c6S-IL?~knSmGam2DOjpqw7&os?_MkYJ^)|8 zJD=SKtH~;F)mS&rz$nS}@S`UWJ|Rq}*UHR9>mxl!T~B){^&SxKPQcR<7-z$LnH?{{ zDW@k)%liyR$ZCeK74FMZctb z0j7`Vs1K0&fFCTJuak7Oe$o>5MCn zfDfi_ufU~ZzUdp;rOS2hN5{Zu%xbdJ9|5;#eMD|-_?={6>uD6GFzQdy+%>}*6T(;} z>(}p&hS4+CuMN_0%vV5D174>_`2gWY9x!cUX!rnkADF!93Rok}0^ROtUD?~MzDAMn zhf~l3Z`HrodT+KL4By=fY^%8~WwVsphTOtl0b{jc&JG!-?;TFZPv&~fY-eFZNJ4#v z+c112V?GR-=sV;H$@*d-jHA=s+xm5OQ#SSB{_$*&XSg2xCH^XZ-S!v4>{f?{`b%|N zYXTE&BUv%;Kl%K7EKi%~{OrkFMr6%3uPO8hFMJ=JBXsyfUQBe8RJ`l<;CB*UVO^U`#f_@cK4r zR-fVYd0%ahvKWL^BM)Ge1zZd%SAJ81*H-035*w=wM?c_b*WoR4w9}7Cni(dHa@Jxs zEbgvll2v9z!SUxOto#y z7B&;XXc3N8w0g}JMPds103Ins*!2|^`3k2nihp8I+beieOyouITllOZp~<^hoRke+ zvkGpg!JDnH*S)-n+2W}$hUCe@aAHd^)jdZ%;xF;6ijcexk6}N@DcCMobm59d=wj6; zp8{NNK;&{`B{%Ec!U%nZO(vz?qWY7J4#Jsw7X_KNQ%hNRgo)>r@RBk;fIq~e@9+2p zKEgJuA$*vibZ1*jBL=grn!q*}n<22sDG68ZUy;Bd1at8BhaQI9iqn`CLsu!-c&{K8 zq1g=6@P4*FXO-h|6(CnI!gV(Jta5{`B-_+Fyz};|qt9wpZt`mTY_fbO&XmRk+ngt zUXqm^xLX$6Vp}<%K^ERb*y=YFq2SeLX4ha&Hg^r6O$98474uqozq`HG;9-Dy(6POG zc_Qeo$usPJBYF!X0IVb-hkY;1O_`;q^FAxH2% z2PhW-Rh(Uo<8&%OqXE+-kC(2WhTBxbV?VY>A&;9rrGC>7^CkTN&I+vPH`^y1j?<0v zl73+2dlr_mnp+M-E1Ti0&J-#ECcp?xEVs>I>D?ci1&;jK1GFJoG3l-sTcO4243$eHd`&zJY5Y}4Hxol9-Cjf$ zOn(fc^9-}gw##`g$#KLg{vv@?&%AV;4F8)JihsOVnl68#lC@$USS6aQ)r75~%7~m? z`a}3y;o6h8xPBVA71R0-jJVc)j?=<9f3Y z+f}!&f>7nCF#%&`xh=$MvWCajtb+Jo6lUYnkln4EqaG{Ss)kZ96ay16XavJ{d9zzJ z3}H6q>is$8>tS4^-|tE*%VQZg9Hvzg4VHvGx;qLrO!zx%tt88_ESxRD)&oI?{&&4^`lfGcWm%nk-z8pbHWKivALf+nFq!#Ld0kW1m&`8_ zUeaIkRbH27pHqJ+^7J!X<)O9JA(h-^7Ehnyj?9MugQS@#|523 ztBZ%pIJy4hCqKz`{~v-Qt>=U_60?N|O#YD{`4K~j_}s_;=jD3AGcgAqbN|W7Z~JY( zO{SW#AyuqH@ffpe_#Zv12|S_ePJaYHgT@*EAO6FCuxbS(HIcV5gj9|Rt-JqO$^L<% z6g)#1ve_G>eU4L5Ofs<&7Tf;{=D$)CoLFtLQZj56Cul=C{HOo)pX?R?c^iFOmJr*R z7;30A|KH*7`+dL9#xiSI70ep0ZS%EG-Ag_)kGTgL+uGW6fOQhZS^CkF#h6S{EJRCQ()@Ty&jJ#jb0Yo4FBc7 z{FlG#SN$sYTbxtm@JD`n0Z3D_vB6Ltk#9m%*emn@{Gb2xcl?guVN0|b3R}u*H7QK8 zX@uQM#bYSzmGip%OsAk6gex+cIHh_P6j{mWwMl>ssd*LVUfJf57=3+)dP9xS2DL?y zw`Ej#@K8ztD*^*f-|L156 zN4bJSrn$3t^=jQBT6zo0+=ZaG+--wsw-|B_;8hoQ`Etp07H;62azPK^Vss_4YUl7< zJi*2mxkxm6n_otry$WeCj}cIHLqO8CBepGujbG#d47)DKvJhdF1g5F4Xu|eiebMyZ zseA#n@cM=TWaP?-t%ERSZ2D(tg5jme3F1)}C6cT)q7i@jPRg0+X*87)Ja8msH-xWE z;WHvGT};{pBfY_@sd zl!owDW#X5Dz%G%%$0Krrras*l+5t!YH?0vv^%S!MNf@?ZA&qNO8e|%?r_k@td$t66 zfWdD9fLRy6#hNq;hFMh&uL|AlPP}*c(|*5uiE0R`9lcCcFq_jSA6{{BWop7G(Ukn=S54|f#GUGDbC`jS7c{N7n&)W91*k_P{}SYH27sb@q~GXzIgZ*t)p_J36J4fZIAKa63@zT9S@m{wzMU) zd>Sjgb+-zpz`Sblfvy)W@L(1ZhM?ISteW(%?PWa}wBpGNWihORI%w*w$c046oIdjk zLKX~V=E(ubFd6bb?g+q{*B9FZk}9MJ^p%$(r{ZaoOwH3oD>WE^7ART2u2eg1N))Yr z3LDkhzq1&t_D#rw*y3mb(kEAiqjwln>63>l!TPPj$VaLt)JzN;=Y+cH<=8%BI02Wk zA)!5;X0v^U;W3>}GwanBG+U}XNqd)rVe%-Hg z)VY7z*?IA`Quo>a@?ZXow|aibFZm^`x@c{B=b|z?3o&f&t`Dz=dfoQjnw^TB4d7`r z8ea*>36?|Sy_)+zl(loTc;RBU0K(U|f-P=+dPodff?kV(@@#e)o}D@>quTUEPB~PZ z8s0g7=T274vl%{5 z&-H|H$)l{h^AKRvfmO2MYt1jw(m&HFSh+>4ZQ;tKe2TJ_D62t^5GJ^>?c}6%_%Sr>CG#-Dj6A}c!YGfzjj%B+_=fqt z&TxHpXh&Fcxnz4uKO{%t7L&mwh{RrXOHyqDrTSAEI^ir?N}BMHecH`Cr3Rp1gBcg2 zJZhTS3 z9tYip^;*}-xGR{3*F#!OMt-C)g?c1U=GWuDK6?z{c0A+;mRFl!wN>6zpcg0}&AngU z+o78~<`#}sZP*gtR=@g}ZPG^afFYjP^!b|J)Pyna!jC?WGrV-Y+q7q6yM!OY)oS87 z&f-VqDo{fO2Qakld+RTJkx!bF(Z)8g)iq4|v$HGm&BAKnG~ zPW`uNi)W2L04vIJxe{}*0T_Cia92&^oFh2cT>Kqx-BvKW)pl6=L=gV#zy9lK2r7)k z6pS{^t31l1a3kz!nC6k@muN?Si9h{ot35n~OH?ane@xg%FEp!D4YB!p*+hp%I0XpTyEw3Jh1L8g2a`rSW8PJbnfX0w`1-8Z{+ zx>q{V+)RB7#tG+CGjtn;ch9B&=5PMy|M5Tm$AA2f{}GQLsJZi+V(Y!QV!I3f)s`sc zHJvT6b!vinFAHY_PPwIaDGRW(Bxmt0F}%jGp_eAs!uKaV2+}zJ{3g$v)fj>i3I?nP zLF;H`^;?j4#P4*)V0<&sO*b+HL^;*D~Z1o@gQJ5DNrxz)A-)goHKIij7#IvA-%{O8`{NWFK z9OoUN^5WOXUZZ%dr^jr)v|I$x&+zE_tS0`M+J>XQB&;4+IXulJLQ`kkB}bR^!%wI| z5-#D>2PlB>t0o>jz~Bc!(;}|3BZr?psu{jHVPd}Gq7()o3vJDdyd|;?$M%Zw9M6Ke zKO5Yd!!mgy-6KejaV z+SopWkh?XQaoUuaPchv!Q?nh(bPQ`Vq#TA-0L%7mi_`T_R%iE0ch!oc|MaIn?NP%$ z)Y<0zgTdK-))S#W9pa-wdiUb^d(MafnDWZnT?(&YB0Sq)GR$KpgISdu+m)#eIm2jQ zYZzc+81qd4SgBTdMbblB4wY|dydrV7^@OL|)}p7t-n%yI&C+3TWYWx{U>Lsy3$*t6 z%Jxz`!@Pn=c@*%El8I(mPiR)3(A3P1q1nxFY}Y-u8m{v2Y{JU92C%|lOxfENKa+`P zkii;~wV5IqGSQN!Uon@I8|IA;x3E`V>Rbgz*>J6YQ_{S`Gv*^a@D!}3voNpq3h%28 zU?T1ny$C3^EfX3rmlLELoC`0jHGdf9t5Zl<8clju%!5s;4-?|#U9xB+@l8dqg=va* z;u-Jm+T9~)MAF>>tcFud#vFNgdL|qp&)2bMn7N*9E+`3^A5AW4vf5^m^yyA_u96Lt z-*H+6Oc5+=H81jzrj8-aR28sxjyk@oK;*5vJ@Yd^^D}?uR^#RX06+jqL_t*ZZ~o2S z{kwm+2M)JdUV7Tgm!DEtci*G&MCi{6`pLGRQh>o|MUt1oAmi6JERvZjN3#j{?S(WZ zE6J)K03q+A8Ivk7`VopVL;c`KKgfhKy#*N_PgM0|h)0q2)`;+xuYASp5+|RxK>fW+ zuSF~zupdh}{6wYlUYGR6UB4hKjMl5=12E*Jp3+KTZUeNJ3h8Xm1tby-c1{8>hT3XU zi3&h3JchD>F`VsTxE0ez0*Gqx4ObV*QRyRTKl3G{Otu~jxO37ZVQ+FNR=Y zN+EN44F=D6L2g(-(XtJ!r%ay)QjWGi;c4yGAe6@V@b!_g0I zF#QCBd3FZ#tu$l!Fu^4)el9Re))DC1Bdly9DIUEkdC_RbNiWW`Y+_5l8IJy}73GHChGW%w9cPc4HH_8! zAeBy)>}1vUNv+;FLFwZ_Yh;L_-kS2;5y;$mskcnlOV6Z+Z5&xCS4SqyyNZu#PF_W# zs-3m;tdI;Kq2TpA(g>jaMi3!=0ZbTUj``<*{^t>baS{IPBIW|W>qVw*B>VZw5y%UV zZBCpRSYBS&;l{D^u)O9Gi;`1scV(r^K+H-(37j?Tt&UnN>5X!YIb1>=g+4^<(BftLl@c`tZP zm4In9Ccs*9%mQYWA#lQwZvw&?=por|fO`$sNHUaK#dl$MHx3nGB41Wj>{OtoM3_Bc_!i8Uzx-uCkZ{xqjJZ{COGOLJmjl>M*^0Y) zxhb=%M1*n8swJ4fX!10DWl$S!+jekiC{`eW0>z3$aEBJRLUAY-+}+)w6n6`9BgKkC zDDG0U#oeX2JAs!z^L;a!{k1!jD|78;&qL9KtNCZwRmS#9I;x~MZa9CP{CW5>*gr$o z*SM*h=B-}dl8km(e^KyN>0=+Cx&@TEB#}7T?rK)|4WMpD0p^*X{|7t$KatJtSN<0N zRa4D2ES`(opv+-aRvC2?UtqVpI5+dm!(NtzC31lU<)OM@qYx?IBA|B|6y7+&WI=~( z1rGo;`_hvNG#J9qsv=QAt<}>onPC4IjN1RavFGq`GgwU<2fB8VrL)2av3fKe;~kV3 zoL>BHrf%Mj7u;j%(N9I zGl|{dnnwF|i9I9`LXc65NK@oz>cT%+#^QkQRL==w=Q8d8az}F4F;dNC^5zviX(xRc z-c$_r683nqLuBo;<-fn(A~&V{-a6sp?G6`wTdeum3xE%mPZO^w#`tsD<^m5Jx;e(u z_f#U`fx2dDmsb0B`r;nMYHd#YiH+GmzgzX`Pt94M_Sp^@?J;-7bKfmbWZZISoB8yA z^Dx@LpRUH?xO$r@xJ7(DeNs#7^bCe-Fp zXM`7EQKVss01A`uno-A=SlFjgxmpz!cqKU3l{}i4Y6)=Zs*Tk4RxJ%__1>hndtM&F zoY@O~q=LQr#y@AWrV^mtmMyMYyXX^Bvz;M+<09g<4zyD7l$q&8(n8ya((U9Z$Q%4M z{`;*f1q`?9FI(UUI+N=9C)O4uNp}CB7UG*8FC_AW>-SgUA3Ap^K2lktc>s#jDa}AE z?TX%HjQdL82XVcTo|cg{H)#KM5%~gmEp{Llg?y$gOmc1&Qb{a&Uh*%_BxPNGnc7xi zj%3A1B0cZFSR8UHF)#HjLv*~>qPl*tEDif|&NANo;Jmf8GFfN`hP4YZN}$SAJKWgA7td4^%5u-qt2C4YcH>g2;&pZ@*-n-`i|Zt zNUpOiO%a5(Sot0RBaLy3oMfgg|4oXNh1ekJ_*=E=6=^%&JxBDNyPn&#{=2hjqtL|M z7x{y7zCsv;cm1CS<52#PqaLS#y;?7HykI4Jz3MTgV`C`sYhYW#0b3WXb^;JI@&j|* zlI(zE5qi%P9htlS&kDXU0-?6R)alreF~9w%r2l7pn}ihq!48BBqGpb-@}PYba*AzT z$5{p&w0a`VZ`0V+xanlX82teDkO+GubwgJ|tHU@VAC7CPkUdjqpl2cYp@kxHpeM4~ z|LJ0wctt6G+j=vP{?2A_A$oH#Z$5Ny#Rd#ORW;76;3bJ%>aBmR(fj$QbysUh%;Y-# zcr^g%r;y*lDuCwaJN*qc&QtX6m-0}skkJ%#_X2j@`#HngR{=r)nZA;UMf|#)8AmjU%`WJyYF4jQ zI>H;qSs4@;KR7rcAm~OEHTqQoTePxx20bIQ{8m7Oa?zvn)KmTZxl$cGat6QeTUz=R zp)OngXu@Z)hxu`M#=+ur4;)K);!Pxk2@Pkl4oAAP0l>YW1EFK8^NxLa$LmVt9K|%K z8t!XwVSx&WN{EFWb+0>>-(9gf!CnkYghMa(gLR1&d?Nd87cc&i>fd@go@-1i0m+*c zi6aLY^f2Q6%KyX}m|v|je*$r_+NE=IOsXT3DXc#QTpu55%(4j`Ja?VwnIuV@s1em@ zeclYRo6Sz2> zHW&+vB-Naa-w!7jJlGn8`s@eAq3ZkUEF5(yJvvjrE5n!Xm^3iIP|rU7SZi6dR9UAA z49YNyT>Y=1>F`AEy`U6xZQ=}R=6qh%8wL%m;HSW|taK8~{tPTbA-j)qk-dLs4 zGOZE<_?;>)azxBWB!ndfu^DFfy?A{NaOoOu+L6o3OQv(=2Lh3_IczFXw{#@D4M`O0 zOt2^MFMDec6G8#hkN@UkKa;IOXka!b0DX7E#94KduUQt#CWani86IRvm|~xeCU1lu z&cbVCiJ>D1ko8xH1j!-4`faPj0ztZE<+#BX=d1@4nngJ)p<7(*?XV8jepsWOE@$?n ziVVUaw6{{Sd(5gp9U@|mqJel*zP9b&l*9y@XZWwnY*&p*C`(}TeCNffXN>5$Ln4JZ zsIUbZ3(y3}mQGbCA0;9lQ0DD4jG@O$Qu{{-}V^(T#`>_!{)y*=Xj=9g-Z zto6vRwTb!n_36QXuhXRR#|Cc#M4#Iciyh02de3(+AqxA>-1)FrJP!%X=g{cEXv<}b z;jw9qzQ;e^o1Xs)HzO(Wg2(=vVb!tWkdQl&!Y^6qX3oJ8 zhU4+_h8uaL+M@?h=pG(pC=dTRg`i;B74@*_UvH%het2zFKf-2`1CUxrf?_bg%^UtE zroB$GD>&a60&poI>AG>#gsL3iSHYLvbY$a-D(;~xs=F!<;oeA00gIWP>&atT<&D7N zfDa*Oi}eqh&N)UEbIp8@s-^>Sb#&EqU$$iDru#asjV?`5nG0PzQ>v*fboOIb$rx@0q`ZPI4OZ4^gU1xjs;8&(Zo~ya?8YUeSy5&MaewgatEX~KPfD4Czef7yQ zC_?Y4L^k;kG%RASjfrch&`7h^G`5BSR&xF5>1It|BWMel!aG=W*@i7c%y2`t9mQ+C z7RZ4Xx?~q6!KRa3IZ@KI@C_XcCE73K8i{~t+ra2e8shKG_B8ee!($vB=A5C1du7Y? zlyuqRpqFN4UJT`(EKmB2QQrz+dlj zdl}s7TEP}0?tFGs^w!ZdJt-A5x1X-{7)=*zTjwepn#G07{aSu&$%=+P<|Y`Ry0--& z_(=P&FJE(+9E$F4cwohVJfRawF4GWq_B^QhlYz82x{G;e$Mm^4Zk$$1*!~cO3tXTq zRYG?fMu+qLTGaXeyKiR}2P{j>4wl3$(bzDXrpGuX^2~-9U40yVenFgv{{gTf(E(g6 z?C25QCO?EZ_!cuIA?0m*US&nZ%S_%>jJhjIcB6@h(=L7OgILd@ME@lgfiIXGYGGjJ zTW_KsN3?7CMqVTj^{3E8(M>f7Pn8nt4vm1aS22kf%Y`jf9c=k3%#G~wDPo&ONTYI{ zg=XvxXMd8*r`Z|EkF`zB^*gPxl+%Vqi|+mY!&oPeE^+HAov&%Ot54p4e7wM~m+AAL z*}_+Sz=6f=R$$LWj{4Nib?$x?%Kx4vn9&u0hf&_W=RLQ|ZN9T~Fo5k-!!vbGUHmUg z#-YOt+&Ia@rw%;->QgdZYC8_n&hQ1l!@Fq#KkS9zv;X>wOH@b*0#RLNUA^e3vbU?oRQOv-Hxf7fMJzNHoGo4 z)u2Va!yVg5>qiutUjef_uU=z6SffZwKTfag=CaG*I|vCN<$p6RnPGt?*+>6+st?yg zADb?jF5hLbI-mLWPNq(ci+Y#akvA7V=dMadqq{fu{0tHcf*~zfH+5--)7Q_k&}<$* z#sNEg@^8e@PAD$61_gY~szz(Ma&T*_+AXmY2e~KlAurh3 zz`&cpx+A!x=bvZWF;o~Mj3DRp_*SO5cbM1a4Q?TUju|F$=do^=_cU@wE;0mxAp_6a1h7bIc~HtBG(%KH7=yZ zk+%mbNmr(y=|^)wFBgBA(F;l({p#Y<@8XI~Mk)@<2BdNiTE5RSV2m(o9Pfs@I~1%s z6qxDmpeIJdS6syApJysl>_>ktKld%h z`)#7J{kkg1+vZgJIvd8YdX`?$JYf+E@pDK9Pzs9@6}E$<`ZHZ2vX<4bPTGoFBn9iG zukGZMNJ{Ycx0-We>fMXGw2Hd#A34y)*ZFCvvMN+k;k2s$4US`Cujo-GG>Q5qeO1O& zDxz-F1Z7-QZ88mFc%Ql)Nxk};kmu@v^QuAFYph*S$~3wmO;|09>8&;_K93TF@1C(K zIzbSbPE-Th+_?de%xFza08wi6G|JoBJMC_hdb=8SQMBRuW4qv)3XHiqQbOH%5}S}M z2b-wO(@};(T?3Z!@TSe$R%Xx35lzM&J0d8KkxS*1v6pR(-TZ|MihdcJFOBb!LT%)d zsqI*5mdmReRM2jM3!F0$hmtGYp=qsckb6~cvh{0QBxscc;DBV+7GlY z#P0LAgpN*1(a#hzf|Mv)?Kg?WAkCIIjL3Tx14qt$RtVc}5X<|A7prR-wyY;m7ufjkSNlH_hiBTXp25Axp2M zH7;dgXGqUXYE*>SuJy&+GXOe*Pp{D=%xP}Mres%pOP zHYS&G4$-h9Z=oB@81W!3RkWT>I^N!sAVQ zu0r)nnYMdgniddVfu9?FS+|a(&@=&fYw(U9$h)2jJ+pOzWlf$_i&|h04{D+%?pNfW z%P$b~QfwL%``5?NtYL|$LTMKB>@K&eQ~<0p%GI#QjEaw%;x%!6G@hL;3L2K`s#t&C) zbqLEI>~zdMa#_aT_*8g)dKbYV$W#+8jz@aLJNY4np=QNn&o)Ph^(|Joxnb!21@e>C zAVE0gv}SM-LlgEMSgBtMB3$@qc6Q|>g?|~#L1Ib6eht<9@?g8Q^hD)hboi82VA?SL z?a6D$FTvz}7jGD_(QD=JR4Q&6Eu!6Sklg(iGsP;@OaRXj8LI@rxnohKzh)#-n5vn+ zhvxIzc>>;XjethF5zcmu)$V?yxF|*n9#|;{Tc`q3I-IA!9cF=%9j;l4sr+C_ zE@D3S=$VOd!&tYB;X~70(M+l+1SD#IHz`1Lrbq^^Bo4zWCx#Exph>)GEfiKM?VGUQ z8zKU|qc=exs~L}GW#Z_3Ovx2lFRe9Y_;_uK$J;;x>KUbKyNP*?(s4X*99UXHjPqA&&H~#dY%0gp*%~Lf8pI&Hl z!+F^lqhG*XCNA~m--_6W)J6dNj&;2MJL(U~=*=0hoPSXAZ?&pW88ZqdfP$dD&%l;; zl9mF!6;=M{D`>Ekv3W#?!Gg-s;2gX}d{9n%&z|_V>m{&!XsxuHwY`W{dZV_K#0?)t zC@|)KMucWuL@(~?k?`@Qe)B4JfQ+gTk5(Gnu4XjB6%EnBqoHjTP!0Yo(u8jC$QM=03`eQZ@w`f2@Y>t`R$t^x zG0KfMR>?{wZC$J&tlw>rr|%C6XXakFKrdva^k0_KLe83k!Oce!IoRb5x3%RZ70+3~ z-3g(nGx4!0F`s|Ahw*!C1dZm~);LjfOKRAD>UVz&klEe&*y6>~*hy5ka0wFJ4Cykf zmfEcjwPwB$=Fk1qmlPd5z)l zDK(aB30E3Twu4TAt++y+Gy0V5XAv_sni8XRerG;%HI3F|$732qE&d#x6(Brggy_<$QREtB%-~{n8 zZ*$rvVzUEsjD}+`fB_sQ)yvE2#5hJ2b;Mq3@x7Y1FbnU);Jpd%>fLo9rP!ANYY6H- zuI^X;P`Xbb4q^CAm&t748&#kA&Ty0SfU)_jmqcwTM!hMgrRt^jw-2W#lU2SKfdT`m zeWO|qa#UdX_*qTa3s;&zeU-v|v#jai&Jge%R2>qg zqfspLcZ?@BXvc4E+0S=TUA#6T>V?%Pp0B(J%+j$cld^w0()pnMaaTkQa5Wge4b<1M zR;tNfNQfXP(4rd^hkC-QI6SAp{8=WkNfLF9YGKqb1b?M>!@301^u=GEq?xW(Z>Ara9 zo49q1HCqv;?<9{?oQ9pa$h(At@b{G!RAgs#fA%3u+)G2iz*Q!*SL*7K-!}HXr8`Za zR8Nz&gOw4Dy?9x3pL$5oY2BqN)RT4P?Pllz%0Fn1S$)6LBgCiX5(b%4lf*f0aPHf47}A-=slhN*BcjSn?5A)C~OBC?jO?iPwQHFGM!}AJ4qOt zm5{6$yb0C`y09J-Oab(0CUI|TJnvPkQj|v=YP2%TOv28?GkhYW+N1`qF%rOT zHEHG7#=zXRE8Wt=(s)cO&B|K1LPplvqW_}9h1*PtK(O7qa_D&RKbk9Z6_6231mtQe znX1~$PLp!b7!xPZQ_U%JR(KkCzNLIgK1HxT_M~#0Yf7v|h+h5|=XYoVyN}ue0!vl3 zmZHXiigM4S@73t6++O9vv&g4_90# zaTZ!z91$0)?&)W^KzoVnxNMReC?P&4n~KW*w)Iz30u3&?903?HRn{qijf zPn0^3%MqZd@_nKnHvGWcpu2@C#Fr5YLdLgmB@WODox2f5^bY8Wj@XShm~T7HeP5=G z7g6*5`%v+cvN?fZ9A7w02m+9szh8U*_)k>(Rxpmm^8gO!XuL>-jnJ}+1zXUMB@-XA#zFyOC;_j z6$_TxFUK~@(_)C?XV-|R3X7xg0fU?IVJR=l7sc-(xW1h`CSbth5d>=lSKaa762<9J zy8v>4EsJZr91o08N@3HVQCbwy-gdmLDGam6sao=Yhrd1n>=3$H3x{6;mvK+{JAx9* ziLs1@Go6pgJ#i5#Qy{2_KGg7n$8b`|Qi)Y0sZb1}uNNvC9?y|Dci{Yp%O!mmirYZ| z)SA(6EVmv$C`A;h?Uu(k5m@xS%;%d4uN(V0O-oOEqZ1!xO79%Z+HXB%)1`s`#JXja zk6o0Pbjejkz8Xf?FvGVws+%W>whnp-UF~>eaqlAqB8uexpSXICh_lz5+-J#GP#mja7%qreUHAl(BU9LV z#;m9k9~jr<6Zbu(`K`CQbQ3|3=d+vzAL^f z-bXKtj5#_xg8z|cFwM3Wbj9sk-Q0s>)zA2wtk=Fx=$yo!jaOr^CzmJFR#qMmo`g?9 zB-A~hBHosYTrQYE^R8g78|h`00pu&E2epS#)#|8kj!=&A^8|D_h{=6UU0#?T+#6q5 znr4AuM2RXx=hB}ks z^ID!V;b$c`b)pA#CHa!9$I5YvBVE!V`kq{fdkHb!<|jrs{&mJ55$06r)!^{z%c?Dy z^gTGL=*7h1e+X%YO zUh^z{tjG9RIfwCH#kD`$R*m|)*|twv%3ZJLbmaG(e{!hG`}TLQvPoc~i#KvF);@%4 zp54oNq~&s= z7*WT_Ki3kB%vRwE?^MQwX#R|lKL`)#-I7~5j13Car|Rb7pWoqj^d@#zTC)b=!Du5( z_F1UKh+luGegiMWGx&9i^}&7^bCQd?H+`5L6>3`D$14erhh1@rw}b?w<4bs1?7$95 ztd3NVIp@&6>q%X4C4vsW?9{y4sT-|L1e=L{|2=M?Sq5LM_fid#H$6HTu2A#W= zNnyB;3gcVTLfBQTa|`LncQSC0fX>_Nw5dj;d)Ja{3c&zykD+Y3Q#*FgEVI9f;hr$2 zYRQ+oascO-{Tx=AJk$`btbl3rD491sVQ0$koi=ty49?ga8bxW%^S7ADpQC#0S(65X zkIWS3K#v@mT(&VT(DI;wRHhMwY%fjT(7j)K$Ki4s7mn@(RBpbDaGlJh)-bEzus>u zK?+=ueM9g>%~>o|pe1NHF!ESnO4QR2_ck8P=y086Q{V;ng?IQULk?UWp4 zbysZ6OzGeI@`CjPRlfQf^O-AD$0N%~r%-g^UcX!7XP3_;_#QN-w8lc%N$8xdWv5%| zRvv#gRjyOn{}oLCWi-xrb3QdJ+GWzg13u@6;FgbF!*^WP7EtI?tAepCAgPOAINA@N ztL!VJdRF8274fx6*degHxUEZ;j=^SouT2-GmQG4OllVRd6E z`%;63k*v>Sgh!)mmG3&1F$d$j`=*z(h(;=3#X8BAo~vjr3V*~*X^dakb!;^=aJ<7U ztvR-A1!nWO!yw?khm;dRK7c}i7{u~=)~)BO*m+pdPb*NNy1@x(+g4ljY~x(nI(*IN zWzx#lpd`QV^NW9FMAkqH>*Tz>h&)}FuV42I=DdRvmc!p-=*d^FFm~EwoD9SHa5{+3Nvnp) z?iu-u8{k&3lV}fe&lW)lCGglqtNHGzY$JPNb|R=rI0?by4~-7TO+5P^fGzrC)?tr% zhcyLJ&DHEPb(SIK%~nfpNJ(OZ>%OAWA9A-k@}aTb>Al0US#H6BZSsg<@ z`eAxg7fkk2k;d%?hok?s-{}95tZ4I2Izmr&QdtaO2x? z+mkWO;5ag3Lbu|>VH z=7a0Oxg{-{amjWVa0z;rki-%@@GBK;^~2@ihXZ|@Bj!DYGjSr3Ji7K}?|bjugShT> z%9(Gme5It15mIQ_^}mlRwxt#jLS$g{=aj?D1!*kX2wZO?>1 zmn-$jw1w!H3n9E`L79SDGLreD2soHZ$T>`rbeGY}Aui3MayBxN72nn#5bNmy+P!S8 z!*i2Nl&rAmwQU^!O#|_4isnhp&M}A_^*ZM4__O+Ir3e5*OecR?x~t)-q%0CkoNABn zJMZ*RiS?uiMaia#lBl7;4g-IuOAiiPS?&JRx5*Un{)?-6twA757h*_uprm7)@O2h0(?2OOv1esG=cjqN?g7jeT+t%x$%k3 zz`eK*55|`5KrV*8_u87J7@sf`Pj}+M=|XA>oV}R`o&COW-^u5IF0SRQfad;Hx0^L9 zNeSjzq=I7Mv5}IL=opt&Kxbv1uGwkUtjyQl)V)6LpsX5WO|obTSn_b#e4g*CTr-l_ z{SBvlS+@wKVOWS4QGc0NL))HdF5hy+Bgtw-J2seo`w;xMk$ZZ4rOzVBkK^FQIy8k> z)XCK%2Q4ZiARoX9?C;VAOxEWDn`KicHhvl5E8 zQH-H25N$9@*g_f$0|vJV`Thc)#1UY2ba#Y{&53SSk%`73<{69gj{3R&3NT9sye**^ zW8d0F5}jP-IZX)__YN^cT2w92c~gz2AQSi)y(;HL*<=n~=-&D7H^I15C&+2xN-$ml zOaFxC$<1qQ-%a2_4RSx3lya`LUXr>RhIDPw^yc-ueN3O|fro@LukZVhI?t3ze~J36 z6aEx`8ReKQj{>)dVZZ6-WrNof)*q0x9N@M}3%t6S^mT8)%Vu<>j|$=v6EP`dHNV$4 zp$cclq1n&(Sz_h~8j zLeS+pvo^JvJbD*tN2udMDB$kJ>$hSIs&uX3az}q5$)6t`?ou7jHjjKCd20|!;`#+-_++UBxkQ@R|C#&-F^u7gWCrV{|S>Gai6-x zJ{-5Y8XSUGD$CFRm3}_`l@VK*-z#)V4OWK)?Cot*KL6BScx%5P?^Kk^g;UjC6&h9F zd+_VzPNZXi+}sks@W5K&wgJ@-aB<_U=UD?+w-eo@Ol%>0(vItpVR)s~6H(7jIi6z} z*uo`-d)|R)e4dF&dKyf3))yQ;-g${>r$qmKy*ca{HE})u{5bA0aNA-lK7+DwTDkGE zqJY&jme-XgoI++b@iuF&=gjRJ%$73&b>i8PfM&qvIh{(QT9 zkKwC$-*YfW=8|(+#Wo8zfR{TDLIA{lKKp(C(|#3t1!6%yJ^U#u;Ea9l^>+h@YPZPI z+iv#9?)LmQMY8~x3Fg~;zwl@oEQ92iXmffP<(8YsaeUT2##1NdZQ{$Q9~!wo|1W0KGLHG8`BWNP|LmkC_u{gZgbrP_Xc_(3pwvbZe zvJ{_+$sx4#FIcb#_=_t@rj@lvX6MD^)X~cWz++>wlX*Ni$MfQ75WU?D`1fO7|EvC- zy>2%ZMlmV5h-RxUdMdf0zC(ejnmoPioLs`5bfui4pVU`K^SQKz%#vcf=cF)_Uv~lL zFMS9dmuXKEE9&`6)Kw%HRF1EZau)4h7&`mqa9EMd<}RW&7h|L(RW5$BLk?B5|{TBH#hrPc3?)TMIQrtzI)=;q+!YbuHEAKR&F$kv6z$8#7_AWR0 zo0iu=>8n^737&1^c{tD$0@ZgHj*eP`K`Il*tUYcbmx;@mgAQiEi3GaGxfwvl$H^`t z5!J<`Z2pLfRG!)L>ha523uG9w$nt^~)mkjfmGsimvi|#r^&{in=q`LLpLQaHzD_|s%G3Ocke9F73>{Wn(0rMyY53E5(0qcui-q= zGh(nZl~vd1qbKHs-et&LhWaBC(kiqpkcA@+Xue?oZmEgmTOYuSK#L^ie6rue&nR9T zz9uI4+kD;|z)?81xNl4&=F_w;XOxmjbAvfD!x1*+PR`-jGMnXM>iHt`F&WZYcLI^B zu)FFo3*|&LEle;P8h;quqr|4d85=Du(&C48A0pq%{h9tf9QLsCWP_dU5d+l^p5qwcSeC+Y#UVB zR`X$l-85U&{JeY>Ov2BdFnPQ|OC4KSIsNlNHqTPpb3OP1Up8@D%IMN#I?G4vCG3Bq zG)Ohx>2NLsE@SRnc51)lZLt(#LR6#{^?)WOpKeQR*F z(FqC{L=KH6`bELf?kSZuFdQnP`$Dn&QKgeorrxAJAGwnbz-Ai%9UR>de&3y2m-PGV z*@#Mo%Df#;-NjmNCrx`r>?li`*XtemwS@hVq{6FHZyLSc;w4SbVfmk!{zPN)Ij?0u z2Cfe|U;n6VXvN0iZxpIFubJl9F0?ykW)aGPxY+gcZ$y;cgq<=|28H<~&gy+pe_aIv}f_Vy`>cF#Z-G#i`H@m;CXmXiVq*+HnNXj{vrI?L5dI|ct zZ6eJOs@bQiYa*}NlV{So5H5;GT~)irVXO@D_j9PR>*v37m3XzUrG-5GO}c*^W?t;H5aF=N5sJpKz0Gt)75%REo`E-5R?;)c7$(6pzy$i{6B zPkr2@#fjX_U+oz=jR*?S04=w}A68nut(Pn9ZyduOu^Purh4Z%P)vr9uxDXasqN1CN z-KUDr)cb&Yq@VtU&8rM04=#ZD(W}@a8GA%;k+#WVa0Z^cm>Jd~iJSZSNYaB_HG*4kSto<|0rX1U={)rJq@!7Ui={Z^P}W@W>PM&Qi164b9$O)0 zJEJ=$-xl*1&974_@1k*Cz0?5 z7?62#kb=qTfX(lf+ier3-@(PFxa|QxT#;m}nHM*mRrY3}8rPCVd5!XW5EuQB^r!fa zK>$3*^wtf;)4NW}FSqZjb+(;vZI9feDyxrHZ94|tRB<5rN&iZFEkWSvVXWj{Di)b& zf<`lfugr>t1O8RT4L5VuKqPpULFwKtt1f)xS7o)9>2SL{W7z)mhZK41@43}X%?z8y z`XmX;2TRH0iMMQyvw=tNN?p^x>0GsQ4(jy8n7WZ#{h~JlR@1yOO zIiwC%?T4r&xYUz$tCo0k@?~cXH7ByJ#`(jBR4>{D(9r zH|c_qN4kkUsGgo?2S_TdNICmM`?^7goc1D3pa+lzf^j%AYIQF@2G-G{WO^F~PC0ZC zbybC`J;>|k=_@IRtyT{IR`yqVOufo5Qp~qa^qvdtR4zd0eFS=UqTZ+Woxg~VY8IWR ztL=Zq;&pt4Y)|YFJikzub8KCJ5d0Rl0d{N(?Y0#(WS+V@P`3~%^DgNGbEGpGwZ-po z(4!`Qppck~AM8iyA&;aLMR^(CSMYOqz!)8Z_RrcA-uFgz9i_H$#vOS!a-l^xBv);! zOTrF!UD>eo3lFM>wqX?Z_>1UPeW+|>EO3n#)hi@-T}!_QB50$MkQN5ijWqiG_zz=N zf`bVnSpd>|Ae*m3=<}cIwg<<04KKw8it}C-dJ_1ACihhI#e8WdUaGjZA`UJy?=H})RSEg$jQ9kInn~~D$OekxQwyFk)--e*%XbdiR&Wt3^e8}#_ z&6u=RB!-u<;?(=0W(s6G4`u~!Ul2^NDQBNl(5Dr}bIEy}9Gy;@SSBQuX$`U#y(Y9+ zcz0FJIr%P>qOAKBmJUlR>nOJkzN78UH05rM;CP;7GMVijciCo6e6$YrSv0>fX$iI5 z;g>z@oA2m&-LaC%iE+j`OLf+{mGEqzfJBE&l6 z4W6^#r1v+^J>pPEb0Jo&I#=>@ssz~meh#vKmeuFPRqhYfmj4tT$E{Q>2LRhLNzr zW!BgOfyQJAXCE<9fa=~xtFUiXMS_H-Q2A_V=LxQjN$;CU7Vhr5rk+>3t} zF#R(s;f=GkXDqRG`rBdtr}S9omj=L74WmfIuLPpkHF1dVtCv|XE<#BpMJU}|KJj7W zW9sVpu>U-}$=|pD2+W&aD%=t6o+R*}9l!`Eet$b3uiU~yGWI8TS$9P3lJBX1HSe44 zk?Io>!u$0my9DCq`DwLAhiTsLC&OGN@-haBou{!kWTG>pwLZx2x2d~bN6y-$m^y(NoVm=R^^E%Kr--)u0Mh!x&?epsI5H-j#GU@H9txVS%|pxsXdihh{Gd2$w?L}AR9}K=|DgT&!2kHgh!F2$7y2W# zyn^g0$I$k;m_~ZoQNNg|2tsz+3GGdfX?`i+Y$~x;pd|dqV}6nUO`88^W0?KCP}XtH zeZ55h9-no@8SY3F@W($^xoe+xZ1m~c;n_XFhAFNoHa_d}G4)HHhx@d^)entNEn%IQ zvn*7i(=bXOw4NV5nn#%*b5+LTid44OWQ#$8z2wBz6onb-*DL`ZZX(c>1JMVGn=Kkx2BYk)y7YMFbE zj^YECpB(KBL3n_~m}-Ae>C|8EH?{lgK~oZTX9F}~4#Er(n91i2a-+xy*2ly5ii2&@ zY$0N%_i6$A%0#l#j}!VVI((LSlyf8)sYE}Cg=&C+ldl0cCr{a8{}n3+#e;7qywFp- zcZ24`rgFK?0HDmho11bq0)uIoJIZIvP>aXj+*`ss<|TrkFO3TZrG_!0bpcmZPt)8# z%`YwATLc?g?fWD+cw4ieKZ!jJJl~2vMm)#sleIhoVmsM-7_`D2c>QY>aV*8 z|G*UiA7JH)To30y&p-qu!0h+baFk|qX;n^vCIuP_3gq4Hd?ha+1f+n{Y1=fhBR~kW zdey|A&qC87fV)RYHj)1jf52r+0I9Wte4L!3BUNZrg@;7_(jC->H=AN zu=jsyPcI4ArH<*bBWWJ5o1JHJ)T8FZ{sYSun^%5|xt>q0 z>}L_kPM)`DvVo^UJU?lUMaRx{eBd`M-jRgO%4@$wa`t40 z_O87@<>Q)RXiFuzq*|o>4bBX+WOMdQ-Uh~15DPh{k39hOq_?1h zXxQv&9G?5vcN6Y zdeF(sXXkQWSU8UFjjXgV)_aZA+Kb7gLP$ff%sZdsUAsv3A)rGnp6cSfe2FRV-_1Ug zJT9;w0ll(dlQepPNi)4r^Wu~3odk{+GVkF@kkP4d>i#)qpg^fG2qu2LHc+jBO_HZ(GWY2N z#9skYXL6N-_av;8np?aX&SGlEUVV6)-U5V%EZGJLcZvgR!cL=i4*Feuu~k3(waib9 z(93}xGAf36Ho)kFu8CJ?$qMJzCq;XV1 z{LQFwxpZzfGgyb`x^d4ff$w}T@UKHD7zKZ6Px+*68x06mYVr5Jg#Q)LMZSn5DO50AHGJ!PZ!vveKmdVCm}Q z%gi-7#arEVK1v0n{SSO%#RCyY#CfixXH_{ZbAS57sW^T?`A#9>F|0!qdYH=6q%1NN zaZKGeqHRyD%BeD>a-?2$TVOj??dvf7&c0}ir>M1Jw+Z5P%M$G3f`~H61xUCpO1cyF zjzAaEgFfkmI)?k(*{}G_)zmp9EW+sPenu@1l`ug63$n3!XNb;D%~mKa&C{Vf2A8h8 zOaCh3mq~dI>#ED@;|Z4^c5HCgb?fZt8|4QmFboG8{bn}Jc5pu1VCqv~JS3>G$=yL| zm}&{WBeyePyM&1tk?A8=b`j>f$mK}0WYYuAc7?U7aCJ#$t0@FFSgjEREk^4m>& zH3ct!Z_9u)P*5G2qe8hxxcbL?L{-s#ZnlQezo6z59maFg#vm#%nJvg#e2|DTq=cfR zTR?Y3MR?B9ez`Mb5>%G#>L5j=ojhMDup9cLzgZ($zkiPT_G+QLP~-YQgJ)ju3sJ0C zK?PEK-SNZ!&jR3=@$5Msd0nn`d^GmNU>C~T0MrH0y%U3s-=ql;6qv+|$Q^q|H%_1fmdhp<1KUNla# zTrkr+5Yb?G{;F`Jg$;LD|q^X8e`AxweHlfY7 zJd*6)U2u2=7<4*<5@$M5bJzH$ZmCxJO=q+Q!H1LYuyraeppPf-bMspu4SN6mHP{j1 zfQ2MPT# z;S%ZRlqU(LHo`v7Juf+u0H6e?wCw;G3Q4d{&yr8AITAIG)bPA0qZ)g()irU@Wwk)J z0ggDk5By5^xA(H};;?q>Z(V1Nabtd9K$*sd3sWPZr)C2N-7+q$c2jco`#DsneQWBA ziMaM+>*K}^ih8(GhNk(xF21rm8d1S@y!Au|-mQ5#oA+AT2Q~=Z3cC+r#z&~BUa$b;Fi`3L8Q$T@%|t=Ha?3rJ48!t-IoN*5NFdhS}vBtq*Vkni0aW z0+;RaoQjshmOnQu138_x(k5o<{tI6agzbWLe1+RXVz)0hdrcJ?J_XO3tsZUwQOo&+ zNxPE&lrQ=7&Y`CMy`k$Jd`|ut0WYnf&$_sGwpp90v}+17G03(u;DWapo2Omm2LNXO z4T-G`#``}4-NLJENNhHjyh+76IGQwlU|P{pu=U1@Md37_52=muQKY=^1lJwP&Md3= zHl}d{5szfQ8ZDbcZufY;$WrQ#R4?`7oaqZX)u1lM_kQZ1Ic0d_Qq8Yg`jYdTP-otW`oZ2Y5T`Vs@vP8*D{t#)tEh z+$~A8T%FT-M@M3Y^A>3#TRU)?tHx$+Zq@^Xm|o5%Rj#eOHX@bd8e7*39#7OSO3l|v zoaQ)5hZS9SzG z)d%sJgI`&=GK3f=Yy!muPi%nWAQB-+%UL6L+!WFq`;1-cMX6oC6vF|9gutlk&D69` zsY05cf5lvKQrt&8`yDS0*WWI5MblF}%?omh&2j0(Zq+p;QX07rFq+y*51T8PlxS}8 zSCNgMF?y=Y5mxkn&Eo90^hgbPYXa}*w~yIP=&zW2WzDzne*gtR`o5zQfQ!y8&~oj@ zargN>$zJC(4TH(>Qh3^0YCiIe$Sn<$n$yOf)B_%4@M}m6FyqV^p0lct{$bd*F1{tt z!2B2Sqh|scIpMva&5aoPQgTz$a;Prua+YFX(asXHVL2WlV_!5z^Tmu4GBBR8FNQpo z^QBodViQ`M>x4_=wp^V#Ul1Uq}_UgtWX%Nq5I2qeuG6 zk0>R>+!^5a<5~Uq1doxhE=MyDfCBCESQ=--roc16=8r1!*&64MpYJK%zlKf zpCTINoOmXRfBxfX&H}4q(v1ON3uYSF53UT`AXlRlTBMUPAXx#~XdCbV{V<|avos4g z_>Hjz=7C`&FO~trX5ehAU3P5lXW{&FIeE5$1Vgi}*fLVv%!9{()RSyKo@{AY0%S9c z0K_w7Z*EI(c_IObpJ6vDHp2|otrk8qBAMA1WHSt-0WijD=fn?ew&m3NRReJXBxAxE zwg{$2)Le-H6gV>syO~k=>^_OHky|z{lCL@kmUFbNOXYjSIwOSYtx*@r5!SADEm0LR z+W-o87lCW`RaXhFxGwhFO-t#1zgM zU@#1$SVn;v!#vI#=z_`Kb~!iwH!+_%p5uE#%~d>ce)yE#Px$t6n3zrXwj9BlIQC-< z-9%+3hM`B-e>X&V!3Z;}#aqb_efL?C+L<$iAP4Te8Ae-2<+hGao;mex7r9TeK0j=+ zc}iq?WaH^KUl8E>>U@Nv2D}=m4ArR=xl@yim@tFHW<&+tPZom#`@Kzmvt?Ts=Q{6A z8pBzo#lrYaC4Lc1O9Bjqtjs(EMou{ogHx>YRqUu;dD#4YWuQxK0TEL-nQSr` z@Ec}bg2B)uQO##e$f(LNL)tZqB8;bxe;y-1;5>3Ekge)oPucPY1{i#HOI1iD3#0qI z${riIXVxiGV&>7SNWi2UFoVBqmL8rde}#QuY-gmv?myd@XY*o>`U7u^q4T=r6pZQT z#i+YD9Rv~szZr8+mcx>W=OT$S?Ha=vlz=r~!~;uY$bw(JU;+d4Z;9~tRroFa&F>Pj zOyNcT=XXBGr=Ws0PP3ef$JOlh=UKXMwOe!V8@}SBB8(E}-G{{4!3VxQ_ZJ_5y_6NQ zadrdXyC3EN?n>{475`HEiXMrC>!B1Lx$9KjTC+D@Z$@?sD@r)cMm*|rSfy}fJ2F|s z=A3jBg_*Mt8@8z41%q6TUZ$uN=)vd>i+shbHe}yK^4jGDCP|>BbY~@t(sOq{&f10i438P6QwGEAAjB$Rlzfm3XQUj> zS75fKdbRgrnfg{YG*(DmoxqDBFLibn2pNX9J7tH<(^;(j4`z;*@(f5uml+u2dHI~4T!9`LKlDRC$lSa_rcJKZpfA$xhn9BvQ%>Kj*EEY7yVcIpnJVs zCiX_+d;k8hvT+h%?oEW#&;g!qxn+2s2@Fsnj*Q=p4?h@2v8!Je!ZgRw)fGIpR@nN% zAN)a`l(c7cc8`WE@SPOAaI-8Max0{-RLJNE%m5967>o?Zq*7&exb!$L9X`_!Z1`{$ z;t4lfmSvOF5>Eh)V&s%1NfR<#d2|whr0S)X_yMm5T5PJ2NEGoQH^K=4^PPHM9B^XB zAmprGtw7~V9F@vqDP5|Db2U(b0nl#-UUxrub{Af;-FeOIZk+WKQa^P`XN1&{ZsQ}H zgEJn7CA;Q32wA!bZLM?Z2u=nt!};=aUJ+wg6&^|CjN!Q$0sxN|KZORE`AJH?nDM^O zXZjS>2*aNX|Hg0pMvXJBbos11weP+a9`UlfA8y8Xe8+cu(HDJ@*QIxv*9ZR*oX7L; zSJVEipY^l;=|BCa3Zc*?n;X1E(Fx<(_*ehxU;WBo`70U1|JVQeU;VYo4SZ#J)(0W@ zW&aa@;!pgdU-XM~60#TfMK*eRi~W&5@<;k(L#{86kik!HQMs?4qR;xQ&-x30;V*p7 z=X?&N67(lMt13|i>V`id_Pc-g@AmfsdC23ra>O0McYW7)5ugxDQ9?$~(fIK{{>S_K ze|kuOK~<@bNQX;5^55}0en)M=ujJ|#J0ZiMx_|p`|E)i!V;2$tSc*ZeMi<~0{DNQb zr~mYycCte74AqLvRv^q@|LcEUKiwiwesi`*A`r_k3Lhe*m1i@txoKo&IvFN_A5Cj#$UeTIvw}B~gEQ6u<|A<1qB0 z(|nSK{MEnuSHJtazZ;?Z<5`eMQX_KyH4FV8`p}1XI$tw@8_2)H#&)m%&fobv|MP$T zPX-L6s{0CQFsq@)kA3W8Zax8+yEcsUY+}~HXS1L0Q_x9kmOr^S_20M1r|OsPI~a%U z2tVvnNwGc!Kl#Z|dIhLmF2)KQ`^Yd`R}2Dt zI1xjJxx0JBM-D(hdf4>nfGxHVhEXgJX5uX|tGaTgMTM+UJa%zv=BGdXX-1eq#yoR= zFiFc5!vHn|Iq@(b{pd&ip*!!F{&fz+Anh7ekr;pf%*)7!%}s5$|4k4-j1bFa*?IVN zLo>hSTfPOS+Bq5g!@nBs@-Pe}2pKD8wafCUPkriJzx7*j8o*trU=urrkT3nxFLhxU zPF6_i%sl4FC`5CJ_w^7?;$vp4{V7p%S^m_Y`cnYdBKIzEJzR3ju#vE7g( z|MPnu+xI&v?#NvcCsgC6Wk=(VoDYT(;|%;49FD=kP-S2nB^xumuXMa<96zKGNKQs} z__4cEmfqJr5AbInfnp)Ij4jXf@EbZw%se^ta9-rG1?-W4htdCxYB}bDM+;`y)ur{7 zw`NIsg?oe$YAi#zjAwP>)FN3JVOpNy?b6U6S8@=(ycIhP^aw20+%nlT^rWR~RSsa> z#@$S9F))v98SFS?4p};l>WyRBPGC0vqO>#y^=1!p3}9OXxS~_z zyl%k889A`*?!Q0-bNv~@&A_ZcBwl2;^j{*i3~k0#VHbuIEq*uOryz#8s~i6ZW~q~^ zc5o`vjcLeMVCUEz%>2maOfCiu$j#2k(((03mXR1+tE6HbQyN4u;#py1cNscd=L>Ac z8EtIr46}cJ*BKfJFodI$We8up@l2nBJ^Wgu3w0#V)L#c%*1p*qW5tZ~0Y)d}Y$nnA zN;(qK?7@a{a=kTrLlu=OR3i@_iOV4cCs>IFu%#Fo_w{$nyND&laLi>3rmc2UKEk%V zvn1G+_1WJmY-6@;I8Z6r0&!-y9IDMo52r36k7vWo62Oz(%Tz9YS=7!MhR)K};i|L6 z2`@z-4{UkElyN#B1-zFvWKpBA6zd$1&tpzEfeZsaZ7VW+{8D#hBuQ-~CRnx^9*k2b z=`j;#8NNyjF^7jCz)T4kqj_K%rATTvzojwDEyR)-yAd)-;*?@jGJ!DZLCZpw0bEb_47<;FHLF?ihDMutn$@ZM=Facgx+D9vcuTr&b*-Ir zH)*{nqKv5mn`L-&@7Abpfj7vOllO`tPmfdShcsw48cr|`k7OE)J!Xa04zwRT`b4&j+`OZnne zupZooFC&2C?wMluJPs0OYxvOvd~|k&#BSlkJjP1_&-W=fnrcl|(bsZz$CLDRceV!n zghuHu5~cybVE3G}1CMbr_UOcL$B-+qwJlPtoaE%*u6`m zo>u3RXFMKR9*G+CuOD4w+qE^}W32UZM#3;`_0D1N=UMUhvY+)+aMN1x$*sb*B;d+h zVL9(r;Y-1rsv{mCj5#sQ9m6WG*t>Wp3vlG)d6;oby7IJpQ^uta?}@d07d=B#pxK2k zaJJU$kF=QL({OtHnbgco%M-0qS2rHQU^mh^h+vvB?q zJjNC9aqCR^!`P1e_w^j}@(}4hHxTj|mTX%_S;n}Mbi+i&$%ySr?Def@{S;iK9M$KU zQmbtZdDZq=#*qq;yb(!K_A!>ft)uMWDe4$|3|T#Av@2${;axi)8;!mlvC1N`p@jxHcliwQZpLD z8S~A$B>+#f>{)WM&(alg1u%rAnC0ZU$h_{}E5+~+?MlUYQ`mc>H&$aQO+D{`~X zFe}f5aKazAcp8uZYUw@8+5bEH-v0alIv3JxYqduYe|9rMZ873E7sw<0IEp&@i#qyw zE{0TyEo1#8vz(BPvn{);Kik&o90tadjEx-Ucrw=cO2%MyJ9|D#r@AZQ>(;U4b$7K( z#IuF088_Q<^IR;DbA?T!HTzv`Bomvl(#F8EIa^NPT@t+%b9Xk#P0vfo-(HP^Q)Y-35BeIYrUd+%#pxMy7k##@preM?^BR&V^y}6lwDuK%mv+|R)#0E zrP~s%OY#D6W}D|2M(`SPcWw8Lsx!m?((tvDf%A+%Dq9=#q}YrNrWI=}d&U-cmnCxH zkZTsUES$F3278X6WxM7X<7cd#o87Xg)gGQJ2K;0>gLO|J8!K$}Byw%0-2t<=MD4B& zgWr%ta?vQS*|-Sc9A-Ayq`nP$zqg4QK!j^-fXQMBvpq+HA7k)GBTR|5-8Fo*M^&vZ zY6WaOuVT5Sv%FZs)24paDTaTmZmQsKYmQ*u8hd!gvl?~{JZAn|$`_AG{uO*j`#C-Z z6FRy_{YcDXxxVRUS70{SAZPdSMzkCAB#plZ)eJ^tVDknWG5n1@A$bPyNaITCBQwG4 zi+Ci>*J249PKL4Zz??bx>&cWn#zu0-tCJ1cDJ%a7zV2D6j>vZLXAF2e6JjgD=G7Q` zkYltZkZhw8O3~IJ$FLh9&ycUq0W$y^8=$4F6?}JFc(EJp-5JvMU>Rq5&nh~@-%Icn z@bEKeXb$gK`mb1)iZY+V9NNifSbWMUcl&0*qS0e7)i^3`5rS3kR@bYU#B$7nfv zGI9!;-FSvXD{c?r<{4+$-8vI;@P%XBj1@Myat?UK2oJV8?`W6$j^GV8Ng2jts5a(1 zE+xGq@{X{TFuU2wPLsRa9y(i8P5h4E?vI^M(-4K{8UF zX978K%F9sx`U-oY?7jafg(LI2&&}I}KhApYt(o93PC1mHtGtOb& zjJn5JH}GU^v9q*0fTE;h0JK%coIOx<`l-tKDNL|cx!AyFej)QCn8YXq;L1QNswxtn zfC-spJ&^@CWcD1vAd9V>iXG1wtABDa@~=%;cQ<=rln8X>)W5u=(NZA=$_=%d(#O5f9)uX89##VhK~lhG_|w7=pXFJZ!&^ zw-el=0>c<+{gxT9j+i!q@Gy4Qz@k>qbsHWzS`9Sxzu&1XD(2>w(&`nYM%61zA!e1L z)kY~KiuTHtfb`nZ69o!Pe0TL?Atg0uRE|Vs@CZry?f%UYEmd|?C>?;^VB@!2h?#Pd z{H`K0a?ntbqOS5?s=AKBuUQU5YVDgx=BsM>RzfYMa0DDj&eQnXK5Nu)r zYS&5*W(fv>&|fofObq-2&+cMTD^GSB*4;d)IAsBoNY!jv>L*pkFs$Ln6nS7`Zl;zW zo26zlcwDyLl}D14gh$07KvkowLri}vGE!Wr~d|E>ys^~AH!Y$2Do8`5zsYnB-hn8-d(WzAv-{DM!C`R=J;)O z-OYoadU;lR09On=z8|82^6&rt@3+*YGx2!b31R^Ju_Ocj|Nh_q>)Rf^6K3$1kPg(Jx%u4B{oE2sQTSQ^MPYCg`reT(g(!G|tMcrNPFrVw{FpTa zr(286&oBgpZcbG7uWUK(~UfRm=!O?AJ&?90BaKS9TdL;(ilrd#j5l@ycn zXZ(zx@lD_KO+WU>{@5PWK2aw1;Ky@EgBZR8wGsOPNS5wM2jbVf?(0`PR#H-357z@r^NxX~^TF-}Ky{$|!U ze&aXh$Im~ojmnnPj#$;6a2GpIsy48t{)73Ga=-C6{ze$-1Ujs;1MtW-`dj{$zw%f7 zu_SE-mJR?9FvE~Bd|Nd9`9J^Xzxa#47@(5^V4n?~E(1b02htIDLoVX4QyoJ{a8uhcmJ-ZjF|MR*C{+h_E(o;4pfSpJ9>Mi_10tixBvFv z)^G*FSUNR_0&p)e?v+CnRierA!$17PZazY}U>Na(-I4z}J_XfJy*uZM|JVQeU%&Tz zzjwr4ynm_hvI4j?!aW%G?b>A7jFQTtUtjPAU!ZYvZJ2EdLx%4a{2{UJ;lY+L^OVD; zS(K2MUhW6fCDG@7-skyp(x3MvRf-?_p&!~bZ%Z#qUr&7g=YPIf_4?M~O5O^=>3d)A zntF8wZ_DQ&&Y$vAeu}*Kd8Qkik}EtR3tVB|5ndKNT56YJtcJj|bdy~bVVW`6sx%(A z^g|!|P@ih)pTMKhYm~pkMRMf|(X9EJA{D76!5ODqN+23oNg*k<1qxM^S=vE2k*VqAHJq0(pof+;bR;ayp~ z6_S#57E+DyVEB0e>cCOkT!rJ-ndesZ3)yI?8YRb&@{;5qb!%qVXnHsTR*xDDNKR3+ zHT>gYAeY4}Ca~icQsF~Bfk#hUV%M!~PCVM^N=Q*-*)EBwQVjD;4QzFzTxKC=w9OtT zp5Z?u^v<<41;%p*?m?A8)F8=FV52}bqZ!!fn9Tg$y6{L0+0DgbM(7zyKj&-(IL0ZN85lzK;sy7=D7&wtp9o#Ksop$;jxr`Vn@=&EMNf! zmZx{u8O$(U|eQRR>Gm=VlayBdb`2fmyd= z?uaon%w=@wljXYc;%ze28LOJ>@psuJbOBvYiLciI(k#$mx3pzxZh7T--m=_riM*DUWfENphp+AFCrs>wp9QW@=9C6p;CO~7 zLx18wqkVvX`Y(31W$bPY=V+^B%fzI%nKQqr@vNO$Qw;NFtam0h^M*NkM(vhjkQvP| za|EmYH4CIce1@&N+_wS4vm+d1<$stR)ew%craLAb*w&m)gI)D{MXY|YwP>8{GP{pJ z0O14MjOjCD^sM%Vf7r4tbGRK}&W91c2~nfJzOBpcu$Ty(yf zoq4^gUd6e*`xJb=XZi%$U&Xa}0$Fbl#k&T+J!kbyO1CSqEuTrmyEKOmyrP46_bGVj z^jqk7MVI3(?8H0C?>g|r9eDR}J#j-HO84px;@zj^<<(u0H=xkxkgzuM zIr6>B@s@PJ#dvo&-h{JybqDe8Q}BW3``SNs9`j^ACia2-dP~CY)tOiKSiU9Q`oPM3 zo|E+sdF`)}x9$jE#nC*+PfEOXjsD;Xexn|?vrn4WC6b=|rd~_PzAwXDbjQ|WSJ@xn zlGie`A8<*IB;#3Imwndc33+F%9eCPyz55hgd;1dmXY=nd(>dK1{j(>^H|**GP7Lptzg%6RgFm@;4di>RNZxjF6IKLphw^`jVr z+YCrQ`Q#^)`jMCI$3cK^$=*LyoREH=gI|;%U+rf*_>V)l-xUIB_9N<+_zj*_#!b{xm2KI_ zK68l85pn{Zcv8*7KOR?zjnhdnIq%4?2! zT>|)#e{)-fp9ug15N;lfpSvIXjs~8KL%3_NGb=x2f+OF=a{>rqIJGc585fu9)=O>a zV4C}>J2rV2$Hk(qI3qzDvqW8?l-e|vm{KN!!|OW%}5os3Slc@UU_Y;O43ag7|bILGU(|`C{!}eksX=K8^Bq(a>5gK1oMRNGOPVY_xZ1K zzQ~YM)Y-1jZ~EOdfSwm67#H!>qH#Y(llIT2)YwuRqQdc5{7x4raVwWM8a9_cnJ&!nrtW=gq=L&cd zTh$kNbem?%Jp$9EE6txRheftxuQXG}ddMhHqK-H*qslJ3IVWK-@Ix}-V$JaS9A`aD zQuYcPJKC0Y{w4vhg<>4Go54Vlpou&hV4Or4@gm6+m_NfVHnUsRyT;Ox1>pZ@@BV(Z zZMS>={{=*~BBibMtd<~YC87x0uGWv0hz-J~Rul=buvK=@q&5%<65SMp4L>#ziO5n` z39U-~h*n5w*6NBDX&NFnZG6A4Ip6m)p5r;s^Sb6Wf8O)H*L7?hYaHYFj4?iA9OF38 zYu@Xb^CE0!hO#QL{s6fu=LB-xj!=|mojdQ!Vn&8$Xvd^PC;`Gt0g^^lJ)}-C1j|+a z6}IAR5*+{I$3-0`T49497(D{a{WWdGf{7JiZv_)2KKl#BokHh3Zb#t3UnuouH@Par z_#fB^{GbgG1~D2(yiagU?j_`h^RmE)x%$sbapMgVM%nR444JXrAZG~{Z5jf@vL3)C zLghL{+HzBROs`oSf=kd5lsMaRnPpaI!X3IDB|jWGATu%q5i8VSR-w47CYi}zNmIe= z3bu-GSRR5Ori{|YrznTsq^a{gtV)xu;W$oRVKwQbB*>OqrA~9`KN`Ul(^4Sg6rV#U z4^YbD&`Rj^b($2;w@SNZfxlWYIrN-TTmVCYm2v!UDACh^nZvM(6<6!=wcCsX!2kfx z#7wiYnppHzn~?J6`P=9f=x@w>oE2~5Z((>h{>~#DVZp~l}#3Af3r~{G{{f%YHEqCziX^Y5^+ezVDw6@#7$v8!n3#zh(jNt0aW* zwH5vN2&p}caSI=%1Yr64Gx@$^5Qb6;tIshc@Nf40a6j+o{XDs2PP0jH#ot#huJ<=G z-VIJ6jgRMtu28ilSyk#uC*L!VB%I}ow(s0keK6U_muxJyimx$Zs*n!i_&F3<^R;V*XO5#x>Hks0w<@=>y(F6di*i>7;#NH zFU*ZoM@$bUQ-WkMaVve%Sl^Ahk0LKyjtOmn;5&sqay0HNJh$+*94qt&K%i;)R9E9v z|G3wB*iGp&7FtJb_za~QObP^5EgmLPh z{NyJK<52=outAPsmqSb6tR#@!S=`Z~yUqP2=uPcps zi020%QU1^$`a}QWKl}&j@SraVhj{v$)mPm4J|HqmwIiNPB0RP=oLlsJfA8=0l`+yE z*kD!x9~ho}>)0ng@d@5UlrI4++ZBIbIfq#JW}-UHVOgH?EVSyGeJxbQhdgs$_z2<4 zCV%(u{@pr3uNq2v%Kv@&7yaA6{oB9eJH8|Sc|Jo)Nx$l=z6yCaTsQ(sNHWa!z8qG( z!&1OcfBMt^?Z5pu&Cpw)fBF?Ra_2b95l-=^_k~}+Z_k%=VcxSzO9(Nx8{vyz{Ngu! z!#8*_%dT)EY><|Y-ZlK!|N38d(4LsmVRg#CV*col{^(~u^BIPY6(uIx`xKrlPbyz| z=mO?h&@+5&{lP!@2VKUV-NG5Nrr(o)LX9Yg-khUv68(`M`H}J+=EG+WG!2;M_ptzH zHBlmkbzY~=S6Q@WKg{632{0#-nd7r08$N>n+F$!?xlLn+=fovtYY3Fk>~R13U;pbk zw1pKXlA_6jpft@iet1JZwzb)t&y3l_X-7DRDn0JV`vKM#7YRZV==b0>!2mpHqJER^ zhcDnX8{2%Y$!q{Gwv4>l_~3&N9FO8CV*HUGCaZ?rmh%R7m*(IHp8!@#9lz@>imW%7 zbtyUk|9*V&;NX@ARz+Wt$@H=H6!T)Br12&7d*)*s2d}8F{K~HcZg8@iB-=s;C7+$W z0>AKuFVKviLm@IfOtY3@Jbw<#Gv!OECN^rq8c__SMGx<3@9e62K*HR}AvK z@9PB4g;)WPksXltjhjoD!zG{MkBn>LCgK1lo&WJa{s-`x^X1mi(mo}45n{_$tqy5B z9bdfe=LaS-oyL1W-46ZVS1Dirs)S50o(`82d~6ZS!;S2H=CSkDU;WjYII@stqv#pt z#9XQE5_%GnH_pe_W5m-c@3EayD&Te z)MhuWmYKt757b!};BX$NTySK`u&$adhQiE}3;;j;vReJav{WXQE$0mNic4a59B%xt zex6(ww99}JKC+PShD<@D7w3>^rrhVb@mvV7LLB0e380uxst}aZB^xV%8bYJ=@WPGK zyg|;AD-Kz8OVejX-WYbQQx<@-h}ifXAuf}4Sj~DoKQzkkA!%pzfIY2kd`>al;Ih8CAymeSo@bd!= zt5dH)yPWgZX{s%ar4X#hFF%Af^iKpZ$IbE-6I(Jh0Q%H|Kif1}C38DU7{hWjAz{WO zyqdtMDtsR)GO0-dkBKdM%epSBSfvSBl;)}P2yd=BGrnl!!7|3V*vz~Stf*#ej6oJ} zmV}%OWQ%i!4l`CGz-W|e0S4SFaP{_*GM-ZzvSh2(84k60HJnAp)0Rv-(hy%Vi8(&OABR+hCh69VC5G2!&va z)uAD!=Z{@Ta);GfuS`a6D_5*|{^$d5dmM!xVT@M+-C2g*;8y_Tx+E8ORgSj=S&e2q zZ}6Mt;GbM5P;+E9CEi3FV#9m`*ervo2}5UNsRIZb*t!f!GkiMK6*F=evn~fie%hTM z19A-~It`31U|U{+r~Hq3o>xCZU@x%hBWIy=(!2-XS5v;M*7iQ*Wa>l6t?7?Y@+dQYX0q?nO0QXv+$~Py&yr3<|gp%ConZWAs z;%qp#JXG?q(euC0NF@d8#TJzv$?u^uPbnU3%=LK zdrj_Ifolb>6?m^JuznbNSfbar;KS;6wYpZ|T7jpp!1YJEr?2VN<6RZFz6I~9&~^V> zfolbxr~;dh?dv;_ye^+8;IW$*3v?X*s(ob@_~^e8ePzV1bgmV6Q-M>@tj#0!TCZ19 zfqR|H=5Sl`K)9Em3v+)aw--i#7;ICbaq=AX8Rze)@UZi}{w(;89`}{@wF2*C1M0gqJb+g zhrasU$coP)D=BCggEDLP})7B0sR`?cK_2Fv*rPXqcFbPB03Wf3cj} zJR-)hKxP0VeY9KNyajFZ>koNMKK>3!k;c(g*jJ!qXx{89ZlzD(6JdjS4NK&sF>LD< zjf-<1iFzF9jhhboFfXudn=Lh;Kk)+qUn8AK5J12ABY`lYFhA38Lik&PX3nuHG=UR? z(oAWbiTH$D!tqvp1eLG(4F4w#{c2q~of#_A!$?i0Eb}<-n1Jgm8Ik)u0aGz)&S$FA z_;C=B{-gszpgfxscu272BUgWpl7GXNM;zP3!OAY5S_@JvvZT&adcIvGRVJ#UAmi?I z(MCCm07$Sub0P7r$rR*CNFsm_pVdSZ8U*&vVT|E6@2CC{l`SUCd)rf*8;>8}be?a| z^Ucq4n6NtkCq9^D9^snd#=Z@W!V9hXI{04Kr>I=@`wHBi&YKg`AF5irbeHCb?7iV@ z)6`hz`Wrpu$ue38y`@>s(>eaqZu#!Sr zIfJ9I_xvzTfjZ(I-%@tg5A*guS*eWSXnM?57Dr)8KgUFtbw>oFAADUv4=<-|*VdWm z4--RAGKBQTBJA<}7y<#q_*#P+&q-mj{&lL&5rEZ`D3Lo^No`;+wiH?la=}EJ$RlQ0 zHtbeRGgg#lm5eh(`X}U%K;cB`u~wZ&nJ_ax7@BFAU_v$zp7LHJKTO1RK<4~&8=nb% z7(z3!tr?1Y^8p8xqsaMV-awVu9OybhmVe~P=-$nGt*Sn>!yqNW|G;1u)pr3qA z1lm18e3YJl00b-3$^vZ5_xbrIDedU*<=mh@t6L++gt?4p_g<>CF+>u2wbL) z&leQf?Xg1%<2`h$4t61b;V=A!`ct4zpD+$HTm$(g%OCr(AM1mQUCrFzEZvwCnnT|y z!Qs4Fg&X-4tLM{W;`n&dCcR0t+Mw`pWcNkDI>Y>lYJOxrNGB`jNl-a z!>v9Qd@Z|(hEn6;Yds{=Df7SttNRid=NWQNqcXlZ6(tTOUI?s&JM{0Hm~>-Li8}Mm zTd*?O_``qr5C7l~{-C?fg&2okuF5%sgw5GdYEWnYNB+nk`L6H!E*;=t6!X-nyv2If zMnj-PkjGgMe9O0di+{A#ufAMO6MN6?Go`6d+`51G5C5UBIN|MlvP|4bKD{qhrm_g9 zHHXP6Ab`?;|L_0(+rI7Fe(I-wN}~^r1l=2l$jt8Q{opV)L zn)T1${F{IC>%ac%`-#NTgHO3UVGOASBP*TZ1T`3d!zJH&Q?%LVKKD6p`(j8A8ET=m zXxz3W{FndoUo`W4N1#(18I$-7xEBU8&eSeG5p&S1{}+?pk-z+x|MH*vbAL`TF}K7p zO3^EYvLG9u{p@Fd)vx+hG+pGZs{G?=s{`jebJ&y3Y^hMIb2M5ySzqqh7wtM(ur7-% z0Opv;W3u{L93KJ;8^YmdAhriiJhxr@ylCO!nqQ$e3Z-f`4lZJdaIMHwXbJDj8 zyJ*g$5PK62ecsZ*H3p=^@*&mJlLv!IGtXp{_^*e}w&=ZL+ui$rZcT0G$&45>{i}== zJYg(L3b&z0@a25Kh=Enr5_uA;9Z+9!>{g;77FIbIy<)CQ7zAjXlw(p}=UZX#MX4M! zG#mMh0Jr#fWLZ`myHl14q#Geyk}G{Q0ZFSKc=s4d9OzN>5)_!?_jE1eOEPZ|wom^XLDFbM8c!n1UQsmKNmCuBY1d$4?lK(0M(IjpqAkrr zG_$2ajHYT2{*(ZGYU^J5sv$c}@`*!C?&arw0#}pfj=m4pawIq`B{FO|EHHgyo(d?Y zey~MDum!vV21%%Az+f!30k?iAq#0OSmIR|8899WsBpA0lA3aZL;LUkXaKx0Jt)(#j zUsAx?1KBKSIg({V85+iLbxETPxWQ_-$gPOZ~)#N-IX0l-i+vnPY-0AK_F zr%%Syt~uC++&VRe@P*(x*{m|L5~z0CyUmuq(1bVt>`*dhtb|t8`bEehYoM6|m zYgt)5Mgr4#9?j{HM=uvv0FzX*Ibrl0ArG2?d0Qio?RY2z0tRrll$PWSHCS8b5 z7-1q7w|RC~(XGUG@`{End6ga6a7Qv6wvXf{P##1{Hb;YAL~~>U zm{ayv&K3Z98f>$oF(A$3C-9iq?F2`|Ng7)Q+k&dkYP*+jf_<3C&08>Is#`xFJtg;+ zX~42N1$e*p6>3T`rF^%t?huFboasItnpL^VQ-m?6*#joZ!-SjgA0Ojqt{Dvu4cGx( zg(s|l@~+-2H>DoHURVvut8H>8yn&rxZlVX?c&6+r9N2CE%jA8Cp34Dd&d(l9!_T4q zk;;ZBoreoA=r7POta=vuC? z+(TpdL;aVU^1?HCh2=VIAn6R%Q>hKWS;J@*gEBo$qvhlKfpZRT-EUhir8&UkV_iKQ zR-g*oQs)6Ak7kyuz%Z-52QXvwVC2S_OsrLa2{6iyhTFCh`teQ|dAQw#{IFyDalsNe z4+&}Z^Mrc=LG&Te<(i=MQ>9T7ZY@4KoyjOn-d6mR%Mn}Mu0i8Gn!u4Xr=Q)`$;g?^ zGGRHA$j;%l3UJJLh}#{Im?$3 z)}X_44V`j*K3qt?l(`yVjkSijm%M!oa+==>vv+r9YY%?EHA^@ zG3c#SH-y_Ng@F-9&b)b)dk$^w^%rVZ^W-A-wC!KH=-cWCL~5|<6+g0vRJE!+1lXO zW%A8i&`_!Il4i3^`K39pZ8W{OFU6+lkby(4^4|6(H8D9n-yuoZ0M;dWT@HCxMoWN^ z2k*P}W3mUF*PQZy%IztAQP$nkKjr^CtNrfkdB3}AifB$?m~Bh* zMzh);%J5mOyZIc=x(t7~HA=#pw;*YLKF!NM*lPBrDR+2l?iKog~iwJv4;M|fnotNEq^>Ys+t5$sDHrg_~Z8|&^kPiYBY zp5*{G!uVPBhsq70Wl`3xRTjOU`8H$@{SVavpLf0nx>Me`5-Sb_gZV5&&a$nPMG1dr z#3unv+zIN_h8sGZ0W4>ppc#UV2V0xvfS*>lc?*gf#pVK>3BL!&du9K$EMJ?qeR1BQ z+=u)Kd-8Lj^Vz6FuUnc&&-Mj@yxgs}mm{D40I2r=CvkY%;wDsX?dkU-J za2r<%D`sMGNN?VNAFzxY!+f6ia4Kj_PVJue`Bb~2dp?v7nOk!sIg;cNo+|X^e%}25 zf(&r=tCS3%dmTPXMS6f056 zXL=t9$N$a0xZnPHwoZ_S&^%@DWGx|O(Me@a8Eq!U$Y3({>*~OiJkXd2uo{xHwVQC` z>vS^&|Utb;3L`tu)X$fDia)ovAz9yyY$hnJDplvfVv%@`W}J})8KD-zF& zvnPB?zehfyCT?b(+7;!Zp+5#Nv-xX!Y zgr!@Tb{zN z;MX84zRGJM2d8Zehc#JH4#_f-uZJ%yOS=sF+h%LN(Dq z-y7{saSvJ?io1JpDYQVLg<=g_+-WEh+*4X8?pD0G6?b<+p-|i*xCNKw&G+}-xpV)` zK0BGrIkWe3p8Z*Cp{>V_Q$7P)t@sWD<2ou>G=B7}jy|w^j0-4rdPbMMS%~%!Bm=lA zWVcg((x}Xv;9}Nu+aHjxR3E8|H-YZsS)^r56HYOEk)+UPXx1n7w9do(!TzK9XOYn) zMx|`ICwC+{6l&c{p@gV5$a8;=Oa2Kzm@UWxmXk7|)k2hy(lrdArcw1Ea8NUk;?;Zh0q`)erow0YU(?rfqX9r^JI?4gcG9Sa&DvIzTzyEY&O4;% zx6aKIr_Nm`mR-IxdJ%0q>u^)HiGv|-^EX>z(ife3g_^wI--MGJWZk4(h^wV|N(0J~ zpAl#wOsnDRT_WFx0XgMOZf_EY&QK~_D5pE|!UU>ohcW{Y z_BRNU2ARzz-3gx1YOeS<;Kn=~yekH$&1d{%)Fb|Cj*NpTxKUBOijok^gCbyN*(y>RjJaP|PgV;L7xwTIKEj;@kj#8Ux9+zqC+jB%povV*VL zP4bu=c~)xQrroDXgCvEg8HHosLw`Q_(V-`(IQQdnV(ATzt}GUXPwzhirNY&%J}=;04dozdS)B6rswQ`RnkCge%XXhkdY38f4duju^ed8-DO8ECNNDJ}RsO>joXaE>&Il;!1~Nm1b9AgsvB(HHX7)k^NX zr6pBa>bx)m++e}13XCE_BQzn*ddtJ>)$3BJKTU9pmLC(?m`DiTz-D2962+>Z`}{~1 z$d6J4w=stti{yG~8Y8?K-8G%5jKbxkYna;z5aFpT*Bvh62I08T1$`ee^dB&+p>5L5 zp@@_SF1SP!vpxVXdOz0{X*Zk_wOD9ri6m(qPB!U5pS3j-4=p-4*y{*9nb+z=>z0-Zsf!JxH2?LZwTy8b3kYg@B z8|i4Vd!HC2p3c}Pj*v7+X}3fdbsfmxuml7KV;AK(7Y%wK7&Z@xo}txSj~UjbfS9f8 zHcxqBS(LdGq+G76i{D@exn|EM9F>L6@Y;JBISP6*e?}U<;8Y2--AYuuq}w|Vq97+v zoBRPfQ*rw->l!ok4RmP*G8@iIXKEZMdlRYK1^^Ry(a`%_`Y5c0_FP97H2mw5h&lRD z8QA;wWvtuz(Dt6{`!ZksRpWQ4Q$<<;?bA!iXGXj*=Ds*F>=qoRrj#opqHQbtSeN8& zX~@%BV(9dTRiz(lPej~5!=)EwInLrjGKcy!@n_vxh{=7!v;UHC{DPqkZhPXx*Y_46 z*6GB^@DW#SoasZ=;u)XB7d3zCV(qOXtvf#Y0W2!W_B^!<5bE6^48OAkN!NJhFQj~a z%dmR?2_hXw^k~y`5oVz-!H|*ECUKGu*7da)XVrJ6n6=%+U5jH#@BLmt+B+bk?WiP9ncfxeeUeY_2Sw$3v1Yk#ew4@3+Z0Bg ztqc%DQKB}0j_-tJQu!S)HD0nf>9xkP?6|rQO<5YQn34?EXz8jm5fhM6z(&~c zlkRIFI`AAd{hU80u}jPnsR1qdAz6r|SaHyW-sP-6QFub;Db7$pai7bn<>|4kEs6_~ z-!Wcb|D@Hq{VY*3WNu}F_R*dUy*!Fb4AX;DC*4^#%ead1LSfyLcgLR0cA@W?Eip07 zzK?ozIsHkGvAGX4*z4ADmjMDLWuTFqJL6z`H66ZGa#p6ld z2m!CKY{dh?j8B=nlYq4=l)lF~+o7(6#cLISJ~-;tTsbPLZSY7lpAED>GG*ZLXn2;Z zv`XU(7;cen!n6YTfr;cZf69^QEfP&>fy?JJoMmO5jg{u=;{G+uoy-vW47f=(i8I=I zdp-!2K@9vjAT=_{kIp6yNw0g`ubV&a$jC9F-;Rqi(>Q;VP^!n0`ch}O`tpHVDmT?{ z{=xrG(~DN&A2{HmPUDl7&R0Y^!nvZ<6F}<*Ku3!AN>MJqvhk&HG@&$@h|fmbVCUf4 zW}AAD*?76mD1zDJ0R1N39YkYjmFCWA!SqE-qH4~Dl96qLB4pN45N2s5<9c)3l;4sF z{TKtX)KyWt)dm2@H2HEos+hjbC-fP`z`iz&yEmdkMF3lNmu{w95nn6!Ur0Dp_N3JI z+TI9rpN;r;#5R4Fzb3}Oy$)7Fx$f}q><7Bv5)FuvrNu%TX(2YgiXk~rOdYm~ z#DDOC)>K&D?^@c%SqW-z#Kc8XBITq11^XXP2C+E;iAL6}P3hnf-#EKQ?E0ofC+x@V z-kc44vT?x?m{1S1&~o>1WF>d_xovU;;ri5p z*{EDm@*{gy{*X@9+>WR)mAxz#g-*tMvPaE}%1tYACX|dO-N$L!`oc1iWbm8Ny$S#_ zO65zi`VJBIC7NIT>w-1t_2n@S#Q!(&$Hg(IP1HAAc*iuNaZrWECCTe1Ll~^QQIkX0 z_~2fFohXaE55kp?u45TmD)TRFKL>L{^fpBJCWIVzhfK!wJw~A&m(t6b&IyYc_6Ayk z8HNEh`YQ62mqMfL8uD~z5KIJTxDCCo!FZBGcC2Np!v`0~y+Dc(HQdsOi9x$O3P;$$mF;aO=hFp&l! z#KoV_od5V&2A!T_r5?&m#0(m`d^>f?zs+^|!ROXW+?Yg7Vc7Eq1YRcNIN8~S#cw^z z9wn^IQZA%Dnu48ZVIHqA;CJ7kLKlzJ9M^@<=3)!VBNscAD+kKE4|uud`r*i;$!@7jLAb zX4_y{mug^C)B0O>S9OYsdbV*uOKnL@_>GkifJ-lnz}LPLow4s2&jnJFFejI#S6uS< z%{G{)a^VkDDZEK0gOd%M$4k$FCB{e8Xo?NIdlMuLHA#=L?2WR4a~bAM(Iry4m-r9f zWjCU!py5z*1>6kRA$R#*dHXb%SE)QkgDx)`KaKh}6Gf}x$DoiY`Lpq%V~ya|pHV8* zqz(tj#_^sEK&s>q`J`?gG-^^ z#?dE^jio%ir#oH`i&l#>HDQt;CH|X^7VbcruK=N6Mz*kGh4uJEdiPJP<-z z8*}`ff6P96OC@aEJ@Hl2UR&6?`FD@ubaEFoTSGc)v+oyg+$ti_f1Z!oC2iwkHV>=@ z<4L(E5MqpUDXxS*u6?-c>l&jE&Z$h#85}P&|02Vd3v#AOK=mMz>y^`D@E4_Y*G+`# zv9jpXh3Q%j(GS=RiCLm0r3v90*(5mnWWwF9Vor>y|63U(aYnByqVvn_R3Jf+B!+f+H<&& zou~;R_Q}933vu!xuNqB}q;f{mBk4f=A_^^-AeO5~BoyW*6+1z!V^k}R2sK7M~& zURVCvDX@bmgdJJdRNSAr{hk;8T z(|W#61hO!Gc2{jT+-I2^%D>zG%-cvza8CACtK#)wNy^+cLx0ZoP6qvMRx-N5b7MMd z?*+UB$>9LpwD&)>Uc2t9;)0&4YdrrHN;7KX37$WXMxjvjPt5rr{YS%>GiG;=bZk8H z7@ytX7?F+$KEF}+)xjz!5FesQp9(7`VF;I2Vra*H$=wuM;gtJr9OKadeQL@x2g=F4v^ z4Y=fJ+oFG@POr60fV1F%pOrnn2;b-4x|yOMSrW+wI4 zZAX}5)2u3i?)KV)DZH9kxdb9Nyy(d+iQBcN5onpxfb77Mlp_;^CHRGAJC<~D z+c1TB@Zp%ADwEz5e4+7sRG6?#wD}!xP?5WJgQ)o@#H3|mu>u8BJ?K(B-uvA80LB>f zd^w?_mglv1ojm-)%Enc)yeU~G;m1BC=oWGnt?F-*`~mO+7%o+yKK0Q{Zmjd1uIo?A z`;0_qi^w93@fI9mq(E6xTho^4{CIbx?7lw@2`oi+oQP@O12@xJh9dl_0-lSQ3A#rK z5|J+=6BY~r5wM@1SM9LYtl}i6bzB_i_jDfnbuMG)FU4&2SNy1B-1P49P^vw_hdRN; zHZ98B*;4=PT^+=>&H=vb=P)R8w7&TcHcAx;)@3f{?QUhbR0;0x*TOqvLT&|xD|J`U z+$%5`obiZ0_EL48wLk-iT|{JE&B%CjDUsnIZi=tYFM{E*$lF*y>U?G_D#%X_9Wp~) zX!?JY06fB2KN?7yEl69?!Zuf$a>lOEwVnD%hBPZmxC;Jx`yCVoOiT44C@T&B4AKnH zO!-EjrDs5ieroA2{UF?uI`!c^}t3s6L;yHwCz^JqPGO&*at;p@oRizta zk~OrhGq)&7l*YJt8WSVS$sz6XJ|+S;OcdbZ+thh z@;^hjleMR|0Kyo4`H!wPi0!)ONIt^J5!<@W+hQJ_{W4X>$VUr#a1KfM+VxUkrW?-{ zxt+pyf|t~7R6pz`t2sJ#Z&CAuN^Z}aJgW^~JffcG!@rDmjFQtrLJ~S6+gBgdko2KO zC()DF<|%(yle8c({$QHXkqF63ZRA~@cDMXz?ZLS zV_U|jr5iT30w^qu;O;Sc-JJ+X=1@)tLS;JoNF6+D(^~d#e9RnTwmhEAD%j|mDCB3C zyF`YMq7U$BV0pg$VT2FI?~mJk)M3+kebiZ1Tw^tlJa;ZFY$Zl6ED|^hd^YxWAN{mH zeEpiXO(PF%;#I8(I%V9=W_9Z;!Czwepf3uGdnCsmfe-uBzJvq~k9&B&j$(q?kcjm6 zfan=N$|dV2HBz`sStG^m~$=JMZs!47tnul5Z;eC4ecyOildhJ}rYL zECY4RnYn-3`+@I#*cJcTm6xJVEH)?7xi?6u+{XhyN#nhDUmpd_diSf71s1kgCz}TO z^pj+vLtLE!6Is0IdDxXQqUXiuA4J-U+{!iNX#S{8vyPWa_hjH~GGJDvXF3}qFmhCT@75l1+_^Ig+ zm~vZNZRnc#L&T}mgTcfj5G`UkSzQ`rR@~vWQ7I4Y_SJ^}n!7C5WMRSWw~;6#Y^W_K zqqAq{$I5$apU9R<69*|19dcVYKQlO)TMwvj>7V|C`kzIr(+lIfKh$yM7t-64^XK0w znb>k!r<~4=<-{Rg{UuCSe-}tAjB)7RDvzEVERC`+k_WuR>3hAHpbZL5Y+zfu7}RiW zc?O$QVI*d9 zT(&sjLc4Wvc@O%M+tf~pb<7IMJ+TprA=ix;ZKvIM4RLpI02S?nyL-!gRhja1($^ek z)x!7vUf&cr|B$dl%9r%v^q?yxsmWdLmC6$b#xN(xK$4qu;O7s;eImThB_uK8Gqo$u z#$~{^`d99{@?Kw>mEE0+nH0+5DtGLwq4WK3h#7l~@B!f}>9a(j*^&rC4-zi= zh{GK(=e&~rvFK=BBM4*ZueFz-qg(#?$)G+$CL(5J5IJ}z>*Fy6sS+?`>AEmislFd$ zK>1S9EGmyv(w!}q7qDf)YFb26&az;YPCjdfKYyaOe3QiX(NlA*;+3_ozg0A*yk~Q~ z?udc2x&00t%#$abU#Ciw|0t>`oB!iR{{u>Yp`%FB2J-*=N#~dUkki2ZoF{Skf8(eN zdnkR}5T)1m&;8v2CPdZ$|J>B7U?g4V`E*F^W(SjC?_m&w$CpOKl?L>G`0d`5XBS2u zzObBiI)sye;hpgR7+1ZH^5g#vTT!NYkF;Gpr|&&A%3EV-{TDTM7rxTv93L1nLI3=GW7Bo zSZ1A(dRLW3;`(+CH_0y%4_{h+?(=C+s{J=zy&jz@Zi}XMGDGiAk&j`acxYE%&K?FD7>!+8&ZV!q=Iryf z{e<6}^lZDzPzO(CYD^z7;Y^CTHLkzPa;HO;8YsNgv3rKv&!0m%={2)GvMQ>6GXxgWNE*TCCS-+HdCTM|Faj z@D;y*Qs&;o_z{h4P~``+eqfS^@i(vtrgBC^z4}@v@=c$eJ4U7Hyq1nER}8YQvU6qE z(^uE-roo>t8l8j12<8XC^hVZxZ@ApFp~Z-q239>Xux7|pO?P!khsARye(v9%`b& zL;k%7-1yVeL(P)!9lM$QG1J_(`(q!z=7{*g#2TCL%c}3o{)@FOJsM@-``~7Ub!t9~ zl81EunCgoUQu5m*p>{P=LQI?AYYLwNQ`S){jBL~I@AYm8y?H}4aNS4a6>uYk1; z)ZrA;SpP6xbYT1-3?P3tVg4wCZjfXrz#8pV0H=&v&aZXIytf=CK`laEw^Ts`hW=R4 z&vTye)J{Wd5a#v09<9xn$~ut(PL>_+$AGKO`w#F3ZL#z+I|zGRtv43N{wW$c1rE9B zcDnCLw*O^gDxtan&r~U#(GLw{MbLkPpd$JQCs<)g{Bjf}=ZebG(r9sHL<+um@xu56 z`;Vm@cp2Uq6nUqhu9au#3wh+W?1cGsmXv`!?Qqjh5htg%;>pGZvSxE!|8bY5?I$^$ zv>G?GPDj>1qI_R_Z*{4;&c(_$&!1|wFyz}V9~RiW$m=&TBpJ^if_Oj;IRK{IamZ^bk1 z4zpKwc5d#VL7jW|5S*y*^Yi`PXZl3W@q%ybRZj7}?;$M@yMKtkSJsX?NWgD`kT*`u zRl7DqM2$CYhq1_Wg%d&7YVB|-eK8@O$d9xhDik_*ddz5N`x*7e?Q=$ScORDZ?)`V? z{ut7)f6mYfH z)E;Y@Ms8#7PN_#vk$11Xr7D$k;EbdK*?hJ2owJ}V1C~#}nG57LmdsiABaxJ{{d3eUjXsnqLQR z%?VIj{%D3>U^|!6{<_X3u6^t7kLUMDfr-Y1cm-BO9?5m36-y{~LLH0Td0I7IvZ`Bf zU_cb~p**Mll!#@-z-J-SO@~Khfd7 zOsY`$GTuQOfy3ZsgnyIgBq6!*ihb=LG7pZ!H83!w^V)-#?WFZ1qc5E8( z^4gh59RbF29ZveDbtm9ici}<$(-MW&s9YKc0zMyFsAS9HTJdcRp2n87IYU6m?&=5s zljV!`Z9r$+Pxk7yZpidn9A1|ps%L#s>q)xJa(=I82{4Y>zaw~IK5#1S_qBRaXc^sy zo_yTnRKg%Gqu%P6Z)(Y6j$M9*qsIT@#ojk#8w+R4b;CuJSoFgepS&1CAbw%a$`@un zc9!oUm0AKx3(CZD#11@deRcW*JreTY3DkaRQYy&vOWyYFT=DxDrQB$gzG?-T=4BKR z2bRft)^M$89q*BzeaK-tDrsAp5H9cLHq;1dQEzVnO7`YOnR57JOK9d^{H-LA(87&N za=2#p!4Pup`T8m>C{TN2Ce;&V2Y1#j%R~@zR|@l7m%8OH6N~r-*1l6HQh2r7a&=o^ zog&ghB7CQ{_f4;ESH6vYQ$I}7X4^PvHNs8fAwNy3LSpH3T179% zg!m0*V|-ZUfbkBIPfFPN6#b4Fu2;^r(VHm@togpsgk#HOY@K)c;CYv6bIWSI6pQL` z;?|qB^d!omc@)BtPnV^#inq(W8;1vxSEm`zDy9ghn|Q&*dUlNl z(GqHr6>!fse_ldpC#gYY7Jlya=w?zMK>2@bGlA;vh|@>{%haI`7ABLBL*Q9YQ5&t< zf3l(mbU<}?JMQV#)}Ox3w-u1|t~CQxVfPTw`S0j|^TE7l>)!L!X6Emqe#+k9uK!0R zgc{eu+P(4`+#?&Ofj_u*xHmsc`?cMozW;a*N&EDFlt)$gK6j>TLEg`AmV1u+%1&>*Cp2LQ?%HJ;JRn zQ>>2D>Y|@{#d0$y9KJN>DTMWIHT;ffO|SIxvnTO&L?c~$+qPocM6F>stxHmG^fddmvBXHi}N$<d7*xrJJ_t(V(7AS6Q;! zWn?y`lwXe>6L@LYFIzu>@;3M(ahSl!wf@RmF?~D{XoyEcI{clg_F~7CH>>CuvG?pZ zlK78L1!$L;_j(xJbE@qKKB*!fyYPKH@8so5FJa&1qnTfZdu`NbEBWX3!leoq^khG) zR$k<1(!R2q4{M%(?2cJk%+5*E_kUOO6)c7$aiNic0Osh@QH8bK5!Jh^7OnM=t= zOpOjm@7OR4qckj_N&;(VaXpt1Hnbt2w_vKiUFB zHcec=|L!cM;_EDZx-`?(lJ9E+w=)dVDPwFnE6@4;AkduV&$88S?3 zioebLJS6X+uEoKY_7+xf^C_o1Xk$+A9VAC}@?WX6Q*0PzyQR?;`lZV1$J~xQQ;g}k z-!TxrbnL|BXd}4>yvboy>(}bk%gAM19f=lF&SkSyS0YO^nd6IBrIOYI=mQ;f#)Zwg z$$=s6$uvzV-9lnyOb~Dy*oggX{N0Plu#rY%02PCL4Zim#FQb&KLJt|&EYmb74Oj&l zD)gXU9EGB^0rPdq1!NlrbGO!QtrH}X(}_F=A`{lJ%b1IT>C|+-$QvYLE%#hB5W8u` z`#p(DHJ2aftaNl0HcB9Pqwjl6`*yuOd&doV+_ggWIZsp6FaWw*_53`747tbjRB-yx zd3xA6i|;2CgK%dudg@%edFXr`>oPH%^)G2Xm>R)I%C}~}bUYbxz56e%U=4A+cA`eZ zPVihZRG1C#7vitZ(_ixkr=ZF<%Y7w9vz1Pdy7t1BY1e(O?0^4tT6g}d9QQwC7xN{E zSFgwK%O!MPq3rcDJNGlotYd3Feo{W`V{^mbdpPKxHVTbkGO&6LxT8Y!n!CHpMgMkE z7oyL3Lrom-R+<|ShaxO4P*LgpzsSd}WpS8tQ=9`}hK6WTY0(@r$+AU%JFlI(u455@ z6!6Ex*t-Yej-NEoF-l;CT#ds?0~vREx%Yo_Z^?tu*?~Wr?YtFMM8@AhdNH8656iIs zRjuPsxBB=(rq7iL>q8|w;WAzD@~-=G4}DnHK2y={>gki&+TAOQPgqQV^~5_3u3lX04n9WniQ z)rI)Cma{Ywn_wE1l6mj-{PBOzaPW6-Cc3|(e9XG-kWZoU-1m_QefRyS`WSUNa&vCQ zDW!Rc*FX%Ps@!Nt~KSn~s!( zJnLBx4%3TbNsSn-uW;Mq)K}i4ePTu$uYq;E6NDq!-NDb)R;6-nv_uLk3XeezG!~8M zDhbb2g>_xevK}s86HSHXFX+Zg4y4y1rvOhRhJPmQtcmT+5jW!IaB*h>VVIMHk;KPI zdLm3}-&drI8sv$4E&H7b?{sZ6zUtm3(Af~d2LuEEKttQ#etpc!K*3*K($M7W+(T&S z4BlzyaGXh|3sY~RCQRbS@dzL&l zxm-KIEw2ge$QsN7(?hGnt)TTwS+?j|86K_V!bCoAfV@7-YhyEp%NLUA2IU$DU&Rw* zq3y?-fBQn2CTG|BzAwLM8WVzCS{KYP?}_zql8+E2ro=(+aky@(?6(If8^4l1hJR~U zcHnFyx+i@%kVP3nS;$UPyv#g8`4#&lNRH8LwK;KN^>rnbH;t>O zZOoSRnGBXkVE4AoLU2?hdyQ$0b*R$*aXyDMj!@|xmYgjK^0a+y}_^6j={)R@)H_ z40gq_fd#8@$3)d+j;Bd<3V)WxY$K=r+UWK25to7o^tO4uH|-UR-YSI`1)Rs zmPAuqDkSAAHX3=#NeZF0{0gSA9Q!uX_?&+R*V!4$w-K|vskI9;@P^A5bBb1LL`dyS zoX}69YUMJG>W^#jGDnuii4!2oFOjAb2fO60)UsLo2?Bj4c<5)eu2)E{iz!t4!M_{b zIPGKYI4t&0A#E5vvc`KWitC@Rv_6=RS7O?5(ktoiu_E zdEs@K??s^Mz-FZ>0X%3mGdw_PoKz@>3+rac=~bI-ldQy*75K1uZyw!c(!^}T%B9u; zVQC=%*U3<=H^Jjs>xs2>K(9I>=LvFwrVZgd2#x>=l#E8iPe~Q6CUn=uGY3zOEq6r^ zEwt9#CrVAKF=7`VXuuyYOi`B6KRTBO^bC%6=~a*YqY?(wBYtl(!k;U+yb1^6wU(Tt zy=?#mGHfKB{4K?qVqXms2-`A$J9nQLvq+JESIBi0Q;Aa(P!l!vD%#~=a}ww0{@X6* zCuT{Y9H~8KcTDD4L0SZY|*;&1gr(GT$HW9d>T%6tjnT?KImh{%@ zwh~%RX4Y=n;T@IyO8JN$X&WbL+Z2gsYmF9-IYerqC4s)J24CNix1kl^kCJvV8MRfZ zNM@Ym&h+E$*3yd~;!*KXPPgra-tmRL;)4?f#^m2wZZ;0GG!bUu(E89SH%u(kmnT^V zN0HshemRG0iKcl0eb*?y*0t5=ST%~Ny*J>r$(Hm$s}~-{G~mXo5Ye(KrdT|B^+Sgv zo|&NIyz!ZlK^zL6Ihmmg1X15bM2J?HrHusi%|4?m*GtYCBUkj8+T$E+K=<=#JDd;q ztF@7x804_0Wt#!4W8Z&vAM2>Y1YBhr)n~aEFw^rGc8iWUnOtNHw>GGm3zr89LdK!o zZdMIZ^7nX>z0U00;FS*1xxv0x6X}xNp$`5WBEuK+jP0$9W6n@s0#Xhb?EGQn&(~xK zYqq+pDZ*XZ2Owg&!9}qjxJRi7Gn> zoZ#7LJdJ|25{a4)Ap^WEyR7J%rVbO)_h}WN$s1-1gB_mJFl;knF>JP?_;yJx(KgKW z7*GYa1Z}Sr)P3CUyRCjzBjmy|=_`XP!%J{p)6f3vtm_PwZ_q-Mg6a#=2tVQ`s_Ck7 zY^|T^RLl!sS1qocq0YxW(84I#sC6>d3SWVeG@h$a0nFT;tk;naRpVW-f_9&?eiF-ZGob+3YSL-p( zW8A;{fZrevLtHH*tuRw;J-!e6%MsTJ17odkh2Z&_bXg>}lXe*@Wl6BDlV@NVw<`lL z$h?|+QsOK0ZhL{km-0BdkUP7uKb-R`X-8qx{rr|&8^)CJ6t&y6e8W%<-udNds>j$1uyzjfdXKT6x+Y%7#oZk4mEN z14b%FMVq|IsgfUmuOTN$#=0QGwZfG^^SII3G zfvSur$c|Co34v`8LIAr8gB`-vg^#8#LWdXHzTI1i z{)y0Iqh#w=qPiXYf|gUCs3wanjTd(m`y=p9hh>7UsL*+C`5VxKV-Mn~9?7!XSiSnF z5W4ymF}AGqH@Cww*rfy4$tNBSZo5m* z{z5M~5UL4ivDf_(r0u(eda^o@VswD8E|Xy$H}gOIbh5x!D$EQ`db1zf{JT`X^5k*~ zhlD2he&uhcEO!6IlGLWp4jFW*=W(PPT?2(56#acF-!d600B9vW?SrDJk9cZxlBQm&j;r`ZVi&E!7#hoX*v=DvMl7TiiwONjpdl>=~JM*Je2192KD8M(4U$2poc}%Pi*GF?e(tNsVi5`NUt=4N zr6MEmOR0~nAVsAu;hT8?Lu>O%o%%RyOo3?9(0-8e6!baULUcRH@S)_`N7o!y%RS3s z+pH%CpIbx~ge#HHNXvFm6j9NdmH#dQ2d;%Kl6VyUvuDo4Quy+*JQ<40l&}?l@aqe&Y_p|=ifm83swOsvII(?=IkH|up(eG&dZ8j>axV%Th zyN!!_)Zaz|cwLi+*VyQCq5NN|g+)bniV~;|R%zXIFzWKy*NGkz4|Up{Hd8W;N15>~ zZ0~!%>jvawR?|+*ICPgxdh3V~0hUF?!mR{cY5$Qhp#d?0;d+6L)j?5BKM7esRs&xe z(uOLfk>M=y>B(>Kad9w$d6r5&s`e?L@Cw=)4KEVvy3*JWMZ|R;PRfbQRqCgI@NBgc zDzDFC7Go3H?pwxB`x}Lyb(njwv%oLQXOFyIO}q-Zgd7LWLGO+4pw`V1`>|@f&sPQJ zU+y+r8sxY(7Y(LS<*}>4&n%T^tc2U|E3|WT2AOG9M(WhD4H%q~%3wKfV(EhH^cB8L zF`Q6XyMcb;#bTqYU?%|0sq=l$x%)qEYYlR;85YIyGWt#u+fr%-&9b>I6DxY5ZVavQ zgG_!yA}ewI=hv}-oxP&<3LJ%;TmvIk;#z!}r0u#C2EK%ekcqO&VCkd^CEH;geIBLV zl)5k|1}{HmF?dumcWbRK(X)#p5hm3QiN1Sj*XEeuMEL%I2(@J0Ar#gyQ&EU;^EG3R z2As^WX?gomG-wxkne53pL?-caGJvC`tWjNFi}kmto|8GE7vob&4ix~7#IH>H`!Ie3 zze6xwouWcn-!|a!kb^7tzaS3GpUQU`-(=)4N0Zuir+nM5HbqvgUA6fWWEZuGDSW^( zvzwIuL)e9CWdsIY|4ZTOpa|Om6NQ(J-BBSo%~c00&pI;9LKt1jm*Q!9e_p0T{nd(3 z%GA?ro*JhGFy+tMpYBjRRR~rcMSS3nC}PGb=k)f+>3SaQ)g%u5Q|K2$vH!iz|9i|Z zFE|RsR~-a%?=urE?BAhW-I;DTm=Knc*0isCnGwo1V(2n2nDmC9UN1&rM3+-m0R3Zj zm~JtG6bbf)uf90OvWbR}-NL5!>PgwrvGW+IWs4mB5%63jUC@@>&&stg#42bN*w^&E zmrGKyd3XP{IXbVddGTC|w7x!OgqmXgCG0f8JI>I<56EHwazqv}R|nk*B8vjw(c_dL zT^w>+(G~eJ@M20bop#Lw(2hPvK5KLDKaT9F#M!+^WnlfhzQk2DW}#{gz~v*ejUR_z zK84EZeQ-o4_L!9mj}Y`{hASV*!RGj? zXo7_{dYL9~k=rQv%mk1Z@PXpe{ey~m(!qBx8Z`%HCVYGU>-yZC7#BdB2>;L%A$(sa zXfZKgl_Nq0rt`~0ljpZmp8^Mi@G}~Xu|AE)fqp&RI^9HWW^nF4&07Nqyj>^_*0T65 z*|wMT5{kp*KSfo$8Jp={az}xDIFMmD{g;uqTk)lwm(=bN1<>iRE(7bCP>J=MZyJd+ z({=wK{^s86;TAw-Co$hl?5k(y4A$_?d<^AC+c3W37>2DTAk7wzdppX;lP2RBnK2trjzWmJt25rZ&8bt z7!9Dcg&JsxyNp#dvvx(lQ}tFUC~vlb-ls+(65fAk)2lx6U8#%wF<5-th(6CQBgJu_ zAoSaC;W>b3q)UURpy=8Z>P?8}eC#_7ZYG)AE6>8KA+^i4ntD*@N1kgg^VQ?O5fFf7 z5akYAy&|SZGs`&3Zu`d*6G`+L4UIwJjjGZI5nUmidQCJ@H*8v5pSiK@CVE#P!4_3C z9e8^niOkhjGv=)7QwV!Lddhst?auFi75`YfRlfvsWh*NXgBSOL_2jYiT1&NV<7 zt(SOq_QOCl~hPcG~-5Rm^6@8;nP426QUr=-yE8{_22fd z5;3!9&u#87=EaaI8Yruq?2$hzb@{n^*QXtBxTkb(>L6JXYPE+eR%_#|Zol8Y&K=-B zwC!y{g&W=t%p0bwgB~OLD9ff+HMO$bymM;)Zkzq^L{j^qQCALn_ z5M7Wmkt>%~09(jhSO}0BAZ4u+bU+!hz)$S&mMx<3gc}_!j#B?_QQTu z(l+cdPsATxvg)Lh+{uv#kBqrqu(b{4UevQ}iLR#k%)HPtKgFVsB>$p?ww;C(#Sv5+xU|_^MR9nw+k3KDxyhhT%$RI*fq>EC*bixYtxgy$~L?02iizU zg|q`2k(-rogT-G`$^-q)UN>Xbvs90L_RMpSI(7+&hTa49<9pr^u$$8d7zH6U(mMQ^2tcn zvnJ2TtkGiyulFT>&=DR-^)@97zRXVQYKd;jTc_HbbUQFEUYQEr|z@ScV+E*whgq6 zTJ=$xA{?yHl5b+Y6VJDU$xqneue(*#o9TamsLdE{obdocU9wXF@w~Z)%Alg!H+J>n znnD-py^D)St|?AGXOGJiSl3#E;5skBlOw7QG$YSo?m{Um6yAAS!t=@_}R8K_@aBBBn`l&!d zo~JT|#_E$sr_m6`YWz?Rc$6z_WKLG_SY0k;-mEiMZ)Aal=)ZrNpgC_z9$}T4)aU*y z8~R+WhOAb@ww_~NGg|$hiViNL8nR)uzr6;E^mSv;m)6RvPpsRDrbxB6!5E(4IIf0UpiQLiA4UK9zo&Jcoi#aY|&Z&*ecM@)o?@`+4NU7@zm~ zOuMKy*2|#om0nQ0=9bB)nB-^O&C0wv(G|1G=l!q9lu_<%-!8}Y@J&>ccI>#hT zyXFQAVepw)Qf`<89_VuJuG^tgw$q}C!l*tK@ ztY)lRe!#K><1-->^M3HKSEk8!0ED8fB*U2d-HAf4hM7!=wk&yLl22Cswu~jY5hnb` z$#{E0LFjvV^XnXy7dHi&yf|6qd-)9fkpD(hNL4d?F!@~*mCYB;;dlV8w_zjVdu!}@P=upobZCh_T?!$kV$b;GNTifGST=-K1C0l02Hv;eZUsA@6 zRqdtW(z_~7nV)`FsX#O-Ep5rjtT_G%84aXgw?7jaVY~f4wVA7O$=k+|5~Y4$&@Wb7 zmM<8kqVZt11T&DSCn05lOo1##G1C~3mO|f@@Aj9GfoZt1I~?FgzEI$#!M0&39RI@6 z@I%0gUaV3h(}QIKT)3$ZV!5SYBPOf< z@p45_6CunMT(b3>Wo=MdW{yuS5eG7p3Qm(-GbCmD@MHk72mxRY$D9rr8ZeXZD%&-9 z^JDJq_MhphOg!NedK>g6Jw}WnKY|@ z08c9@tjmHSZtI~Gni5GELCqB*0=A4ZWFGPs%%fRZyROYQp^nCx@ULp?i2IFBl{K8Y zW2?~pEs`!(CKqPmU^<)TvC36S?~g**J;evIEe}3D(L?_fn0^8s3VTEOatlmo7bW*( zWXs%Y01em8^lc3EW#Laz1UQUX9~VLjSyhBXJXd!63vGQ$=q&1f5e*#J#?Y>s*k$5x z~OGkcL%h3Q=L{-?JfQ#q>&WZ6&Tg|9^XTtSVWxgmL^41S11M zFjEW!LlJxpHSq}yO^l871q{qIFf$iS3{+6jKtY5NG*S`4C%C`yKbDK$efsw4X=l!i zy@GXX*Q!C4pX(e{8U_;a2v|+EnoX>H0s|7+-KFKqi%nZ51%hOGW5c;EQZvR|!t5es zOkZcp)ZQ(g72CCBkQzI?DARx^s6kV*apDnvNX(Pzj+4EQ|9tG-yS!H^Ofh^D3gVz) z1_y9^?H?57u)G7f0;AiIqmv?fZZ1sf?@r*f{tg(AwpRjIyhkri ze;rZbx0Y*^<5$bBvjK)G3nceKPu7!2XUt!kuNiEV2>bkO}xlPhR@S0rQ+ zs}!@cpkc}WzEc1ynV&O2|u`KFDUUSH;U>;Ecv9lve9 zDl28X-_uhN*^4oU zh5=XfSRIO1ge~crj5U%~O4MD|Z|n94PA*@~`N}J=V6tOnu1jlx=2Bzt@%P_tH2B%goD%-Eu!=Ri^C%UobnbFCMaU~ZbmYE0v{Rj#+udTTX^&s z*DIEM#hoJ|Wh~c`Q;hA#9nD%8^12aw{QEw?C!c)MlDcZ#)nLb!N2uO-ZHyKB{~`L3~eumq16kNcuitL;`*FRlfk-lH!=+F zh@XD?>61@B;RhH$G!sCbtjRRu8p$ud_#%pm8%0u<8clO%8L<5F%P)ObDuJ0yWt~}W zGh64nmlIp2g;s-yMwX!A%Ry^SoXcI}DB7E&60p>qR^6@0VQfsX+Qp23WZrzgozJg1 zwAa!!_BMnqAAkIDZ&otTxoTeRt03^VZr%Fv#~%UEJhcIMRdDQQJG1`rhG!nwv$5La z)}H2>XP%KMOR+ra&wlP~<7^>t=<}tIP<{jwh#6y^jjQ-vw;wN;dl6?BWoZgcHpC?t z9U=IsnaL$Sdk+Ywyah$gqu4M7OJc`3h>_=t{2{SMVW;W|T zy)w9s^6yuEGN@@_v&)th{6smg5K-mAa{$Z$pkgSpG_^hwz$tG*I8YN`L8)nu4EZ3M z$+wR@7_S{=QGZNT{%>B{w{eUqN6uAUrQNSONcmBC#csP^tPr_c<#B$DFy44p-&$OM z*Hx1#|Bdm96UHDhj-msn!d|Z2L_+Y)iA>pZva&JG>wZhwGqc3W7>tn8?50yM_M+J6 zdg}UUBTb`?fiF9jkx6O$c)qRx!-OE?M2<9^7pNaPbIZV(5N)Kv2^kVw+BNoszc$_3 z1*!ynY7xa@6a}%iuWrXb18#S+J5aCL_+SZgj3op{J`QEAOD$F9t1_x3yaE|uva=R% zZQ)_K)idl7Cptatkl(QSS1)abhHlmWWzw!fnheyabU|aONEwQ2OgMy zaOrXCKCUJmOLhU{6a{I7F zBNs*1awoHw?~cvG@mQvAZJ9=R$>PV-khvy{3d}@4}(`kCuXDS6iCd z7c?Q~W}Ni?Bcrqm&gxdkpc?VKlm6EJLDvi+*qirX{7Ws)*BpnC**IpiEBp3Nr&XOD zo7FS9p3h6s50wfA#aUmY4Eez3u7XlCTz=*pUJ&P zW@9xMc2A+yY?pIzhJvCaADxWzzt#G@)o=yg}4Tc z%Pa62WL-=z3|ttvFmRB8%UkduJvVZ3`(xkwL*b2td;xV~;C?c2IUx6w{TmX2W~`F$zm<%f*>Li;7?g@H3N zaCr-!k<5GQYVO}&ftR=7y<{Kx!~eaEdx>>219Lz|IN8-@<3q;4p4BVFvidS)g)j z`2D#E=h<&D_osi(<$r#`Q3$`H6!Y>rkVRm^28J#DZj&urRQ$(Mt9JRtEXp4DZeb&Y zId5$Cnr&mj2U2zoC3 z6X;w5U~5ggoH<8M`aAz3YJtk%&6Arwh^uKBZO6I5J*b2JvGRvvaR^XglQTW$6cCkM|5gV(_Z0yb9Qa)gR70!QK58mG4y!bodeXUP# zZn>Q66(}kG#Wj~8{`ogw_q^-{PsuHZI9F(g(IX|z_%CjjWHzd!xFD%AO<8Al_cOQt zR=cj?7KTCu?CzcOAT_fTgy28$gtIvRH=I<6W^5?EN*Vo;VG(b?z^6;3_x0Cb|M};i zEEFmFwy>t0+og*J1K2ZT$=4)3{`lhrgXStePb1B#`|i8%6swDPqHMhteXGA;8az0Y zW?x2=jIp^9&Vq`6q5eV+w7~azCx72zmKOV+TmyCaU10-JP7yJdG^_7dl8Nqhikpo z$De=x`TOs`S7=JZ7M8tEwsEhk;mVf_@;M)g1fn#q>uRsP9_wWFI^h-rz@N+i-k>Ka z_u`>^^wCG3dg`fY&+VPJU}+#uhEAQwIn^hG|Br7$w8MtwgiZxw_2Lz?;bo^xGNv!94yWhrqcIVkM9Z8ZgEQ$Ioq_D4l=ds`y?%Wm+tdy8iZB zQsyUPkC9_GR^+q2)GQ5$u4Av;F}UFZ{GE}CRTfjYvw&A4dhhg$c?5aN| zI(wxVOHm9OEwSTveFRC?#j19ZFn;bv;4lJQJEzrNTE4H^;1Y1yL z>Xx{Z50zv(W^F#ugQW_7a+xY2VkZYQu{_c}fJWkZlW!HIDETf8As)B@@St;;* zHt&wWl5`>`#_paU9y*ygA#*zyYs?Hkr%@Eu`RpJGCxru_a;#3!(`9kcuUI1KE-C@=Z0M@EO7{Y74&N+#TjXO*LU2c*ZdpF)84FpXhY_8&(~FW_@C+wc-XG8KN9xY&4z~+8>Ip2%vSHb z1?vpYYRLj$jLr`0zvHkY(R|(JJBFo>&|Jid^>0Ku2Fb}b$dN_=R-@(Wx|6-F8>5|u z;C?Za>*q6ebw{Qd_+qUvc4Rh;0qCM+f1qS@9yuYiwB24~$F0X)X$DswgYu<6;D77n z9%!VnHww(2iXG$~4>$ACwF7o_sTThO%^Iw`yX}ve00000NkvXXu0mjfwlE=W literal 0 HcmV?d00001 diff --git a/assets/community-wecom-assistant.png b/assets/community-wecom-assistant.png new file mode 100644 index 0000000000000000000000000000000000000000..71fc1aba61f49f7183ce0ee292daf81c16b62074 GIT binary patch literal 26676 zcmZ^~1ymeCvoN~2dk7MOJ7KZKEeRS}ba8jr1%kVU;1=91VHXQQgA?4{-8Hz&Blq6- z-|sw`J+o6&*4;JT)78~A5z2}(IGE&^0002zldPob%eDUBiH`X4zoJqV_i{nD{Gjjw z0H}(^dN4+Lxu-UjRaF20ychw1fDi!S?gbUF3jnxr0s#9)0Dw>`06^lD*{CA&LQpo> z`edP?0APKA(E*4EgaD)$2;t=i2)70x{}&7Zyl8qkka7|Jmzs<%t;|E=Wz)+1@|VhXi(aGzRg{+YUqS!p`0sj}dszQ(Ne(Xm)2x>Ua{QxkZ~-|v{=dXrtu6k4#QstK zTkOBu_20#b{8J{RZ0%ugr!8r1Z|>moQZ+Fy0dA51D(3%1`QM8EhoshjN`n4V@;@m5 zPe}H`4p0iPs4sCgh9F1bHgE~w8uFMbN5W}W>#9AHH9M*J%+ zKR@$pNrX45gL;Qr_-{y2tY2f(ehrBK6NYT7R!L;~0mnq5{aBAp%5Rp9;YMWV^0s`= zMQr7-dkaqke;?IxPqX*5!9nw~?UC=i*nQ^tt=Or;%7wznz5mv8bX%wNsz$(^zQOa| zjQHRd*U?9Cl03`L$^tcw??ESk|)pM(T-J|Gh*_sw{^h%7Pzu=?~~)Ah*9|sm8NYT`+X~Bx~Kj= zl+xUaj;zAPY^l}lU^*RX*7G9RG2qxTP746L{7aZLP9#2TyJd*$3)u{%!uvE=!p;&Hyh{LxtaF#K_Q!mT8{3v`Td@-)@i^4MZofWxgEPnHqgL}r8u86=pED+ZC^k~Lr?tJQeyP7k z62r*{s*4Y;f3F|KLU;}13fE*++3rr@eYM--zDKqVlMk`ar{Ygrtq&=6 zN!iy;&rd7Q!nSBa2;B}BQ-+u7UMC$SEpbn772ZoPEYAr~eM~uOhLGc>-L^X?{-dvWX^t);!V5w4H~S1^#rJ{B>o5jJe`A5rq1K;l~^4@nhI`xO><%PaTZXkP*!wlx&drsr?}UN*PPtla7P%jd_Y zxEc&keU5ZIw{ID8y}1+YZzG(iQBDrKNWeKwwW!Byu}w_jZl+rqWz(v{pUz57i&DTL zJBst~S#6qxbf;J(qdDPk$00p2v~H%Pj=TlLPDzl4a_7<^C0yN$!s{!x2=o5$JtHYs-U)lK{fn$y^n$29n`Hm*p+csxM;LlanVF;5^GphIHUz6q!n zI?8&7++3Mcd$0|S$0PDgH~ngZzCawdL%r#yoXsEqO5V%dBc`FDI5V^*%qC-y5|ckY zbIS1A&G1_Mspnb1sN5#KWed1@Ne3mCxFc!3>3Tk)dg?@-$?RJ^&sw?7;;M7Qau$`C z{`-*CdcN{}@84>?buaI~$H8mcGOj|QPsPZf8i6+cNDk$oZ^PuW{uv|bU# zw=LCz>2UbP+^n}mu$39WwWHDX^-D2*>xBEAqSdWU7(KQijgE+%7b4}^ON*X|(eVo} z^jiI}8}{%1;05h#7IxIL+;+kw`H0qcI7q?CIT4uD?Q zN8xW5HdtRszOg+Y$#P@EHUh6W(`q)JQ>o5PImvk=1KNCg9;Yh&F8Rv6opUY84>mso zA5xyr3c0H( z8Rczzird9zI>>{uY7>rjZT*umC2U^tTUg&GSCrA2%+U>9_@(IQL1_aE#3#s zSyn^OK&=lm14kL0AsLdP@w>+LJzQ*jsWfm?+v{>A7CyHIf+Rik6_4Nr%+)39^RJQ@ zp!AYmlHcCs0h~4g5~BR)1kyDoRwwZLQLVo+A}C@{NY)};oN81A^4>9uzfkm}G{2?{ zs+9jRFiw5cpS=5wa#9!;=&JhI+*FP&&~9S-9{9@fg0Ju@+*3Q_&hYubzp4?Q`{>qs zJmdRE#z!&>v9gMVw{Lru5ob)tPx1{D&fK|F%Bn{Iiy*lYDtqaVPdM%H-fS*?b6$kQ2xnPS`%+|U3jZ~Z zhfpr;TdEr*|F%g<$LH4ODARzKITmlcShe`}Wh&39H3=RBhRA6~DK9J{-A;8etBR!Fj&-e|A(k z#EIkZ8jA$WizYaKF|$in`&;!2Dwq&BlS%X5`7Tg1qW}g*@*@7kHs*|;4WhyP?+&YAtI)zE~ zwl>6{HZ)hl`}t56V;ppq<89LipN3j*`7>mNu2TnVi;$86?2-wcgytx6JUV_@NzL#3 zZ&f@HdyixQ-Dv;|Lg|Z!ZMb|AlS~$7o_CM%Ys@TGZHolBg8KNZ*w6nqy1?5V@xR zkkNuH#d$~2faN&lv{5{&OIJWC+1P3&H0JM`=(?c9x<1|Tn?*}$X~nR9+eFd}3`E@EGiWg4gJBib>IwA|$?TDkiPR z%?X=XYZ3^`2`g}kY9Ih)kK8wnxYSpuFisI@B`&cwUleh4bxJvKQxLV^r}$t0ebU#! za<3&y!6e!mxgirTK=vDOyk!r^U?BygberxNtUm;bpP=cqiWlyPz9H{>&VKPlh4u{U zDWBOF<@_W?W+~}=;;BM1Yu-z^d>82^lk&frhM~hanCtv!`rg5+t1_^FwdKE&I^!dc z6i(6+AYG!N@n1{jm9CrNq);`@MafYlm~PsTiha8F7u$W#?>cEUwyfK=dU8>1`?#T$ zmTc8*G+Ne3veY6e#EFDI``$J6*`*Q-rg=|0J5dqkC2PkdXMip04APYU!Z;=>c6_+m zG=JylSSE~Ib)&ty6eMw@%P_@;gu_w4o4IYCG4ycSak5d9=$f>Jz%XSxE$cl)X_z=^ zSoAVY5p!qM*xKbJ&P%l}%+=pPfi_4TI^<{QPB?f(V1}N9b~xd}*~)Kiay&QB&p^@8 zhEKA$fuGcRz%)bi=#&x3qG|M4=1~TxoI*VU*Id{)TH_F=D2i(VOg7ez((AtnL5>1t+>XvvBr1{x=xaWpU9v- zv=s@+E7H6@$MK29^HMSVY<{Yi0uP~m?=LPR!P5C3#X$S663?Qy5>Th8wVua%svW6Y zxDCgWr?k3cfd516v-3}#iLgO=`|Ex#oHqYErRN{``=^a^R*(;Oe)-m;oRE1!1h6~j zBt>bQ5v^+Z8eL9f#y+| z?s(k!DOFHTqZ%QRmrdeH z<@E^4=KOQs^7p0(yQSQduoE=oaF0g{>XxQ2RoJ;d?I3A6MZTyMFsk?cYF zL9k?QzM$y+BTrI9Fwj=iNTYJ?_W8QQX3H-LBdIw)wqz>u`Ndz7$PAvO@Fa#7Rvi`L zXed}wG%^EHx#a_uw;gJ1#wCH#n~loR?Acs`*2Eyn%kFc9mB~iGH1|~(!6Za=Dsb#r zlJO^pmK24uA{+VHZl3tiYB&l1gLcGeFG_UALK6FB#B}z?Djbc%4tjj%;pKTa53a0YNsq2 zvgH*lXTzB>eMNT@c)p6A#E0K8z6u8vWt(OR0>~8@sWuy0&E2Xd^m^s`+O_|@=`VCcBf7~#piMCX7NZq1#sYxy*9kl6j4pEJ^ zOp0YU+IX{5L|@We6a9-;u1ds2yKJU+;fp{5_OIw>3d{p{QFLNUeJ0N!;dJe*ZaaC8 z$F@(Y0Yi2=zT1^Gt(H@ zw?8A4?VInuD&+SaJSh+G6~#1qgGcj0#+4|{?$pm9tcc)|t@Vs8<9fFB;7f6~N!auC z^V159#(93B7eWDWL8RO=#TqZ?;7U45Ub%cP@5>I_=_huQ5KKrL?3d7y{z($cnQ1%3eg%o>yNmW5Z4Nn0M&mL(9mDA(g#FX zS{E|qWK;f~%%-f+NcAK>>*Da^f*5S*O4dBG^!#vdDJ!j>@IgYc`y6!Cs#^!PU?Or> za(RUSnmjPj)`4xGnu&-Nt;?tC5QefjR53G20?1-J*4 zqY@M~9ttmZy0~hhFx9}r1E&$SDH2@&G0Dj62~~#MD5M%0Sp#}o*EJt7u?TU0zqmjo&FND+oCZmQbuh6B?DZ1= zyAs{BqSFu3Roynz>%`nKn6P?V?rD7ynZitdOby$d`LDD>qFN#taNacZsZ(7A>nB^x zk360osU_YA{pzs~z`tiecz?b3yZvwVF{I&cl&IT7qA^#s=S)Gql+Eq)>hin1CpIXnDNSH|lvlmOY<;5}Lh!@z_1WTp(TR#gd?W9zxO%iA9e-wH8 z-J!9de#fajBh-xJ^rVkRw5c;Lz#N@)c(e^#Lb3A7AQp(y+1t{Vp@F%R-jPNP>PtqZ zB1@+D%@7e226egdq*FZiQr*%eZKlJ|_5V%b_w~-_tY&*@gFnO6u2~B+tB1{MKZM!o zzprJiPB+Mz9slhH)1<*r(e_-pyLv|)NEvJ`tZdeq81NB#?Vc}Xf~fmyflKmJqMr#K zqrwnIp7y)Tz{+AF9l%E;gN53a1}kjWTl{rRrf|zC0&YHY&JYDpDXQSEO8Y`z;i<(Y zpw{>#>y%ZGZ;*q*y_gU^%>et{G3h4*v_gZ5&Cu`JqX;(T4P~pG))wyrD%zy}JL zRlqK}AlN5}4#-W*g^#qT7~0F?bH@n@U(8Z8h*o@nBlCtOdWz%iwAc?vJ{mPyCDE2{ z7#@tL(rXf>iCwGGmJs-wasKq;^Ca)TkWge!{D3+e_$F9i3`cuT%^MMgw=!cJ{wJ+b z>xTcNiz`P}KX9;6(7<-F8eOLA@hCk5J47V^s#YYGF}a=S71?)$cDrg1#xewKY-loX z$$3ca9p#lDvEM$Iq@v+=2p7S4tmZ0!p(!X)zQxA~{UY305Fb~)1#MWB^+G2l!#3ag zT?#FsNd|tq#xPgcH|u1XM9#rJ_#lWyXB;~36jjc~J&y8if zNJ)lI1OB(za4r$}x;N+3g8#iE2bIX{`{%ir6$a@$rv)v(kQ5nh|IOHk`01ew*q0VT zsQa`G4Jha0Q_imzF3RnG@~ktN=Upn^_h%Y*he?p%`exNr|NQ;rq_XcHzm}#I%tumh z+w$V1QN6i)At+j zWoF2hBb=WAt5lKsLTBf@gZVdWl-L<&^91kT#dF=a{f8bX$HzbI&T*8N7|nRoiZF`B z{E5#vp1N9@N9+-t#cP*d<6Aw92fbGky;So(HKoYsoc#=_@S1{Y@#nlfJYfsZm@I)| z8~j$~<^L%;bKQYD|;uaEK!p@b05F51VI*SsLl}sT)4L#gtHu?3xS|bFoim1I5NLGk?<@ zIeL*C9e2M>y?{5F>K;1*qK4vg-VK@WXxrumGeixr44#cxw+|fz8{`KPjrRpC$UO%8 zjp9L>&(B1nmL0jSum|(7`&AqVvaBV2QX;=>`A}w|p6|+hr%U&8W-*GROKOto zF_@UiGFTa`i{|gWTYoFJk@(Y@I((+dWk+%80`ZlvtcF@=;;Jz9QlX=KgIbN#421Jd zZ>Ov*6X~xBj)JdcZsH&1bB$yz*uWa$UrKlos_EXB&5|yn=U%qk$>*urMHrx)sBZSZ zVv(WY-P_1Ro2Hj#OHEIP4sk#}^nuSXD#yvPnxa)orO+hz(%co$c=8asEm~7S+bV zz%wda+TlUAd?!vA!ep5EE|IrdQ-Yd}C*YP@q|Nb8q4h^jwcqbL@82akeqJUD=;@87 z{U)D(uv{?tbTHNbdah}`ngL}6dTqWjb`zoK8ZxiR9$1^g!F^A@@m@LPB)-v6!A=lE ztJr1tel{HAhW{aKWfg~%gT~2S(MIgU3UfO?eSrqIBBr_ATBQxAqeKEf-5456jg)($>jr;)83z zto3%ul+i0YAQvIgm_8}aL*BBJ@Y!;+x9mDWRcsBYZ19_U@4mGJ`s6%4Fr&s<9DSmR5d^7h#D}_pHJGrM%OG=&`s5SjR+}3M7RC=7@D2viyW^rqaBKk6l zK&(*TlRl!el;9e=6f7+D#K&2yU2)B@=BK7RXHR3)zSvoQxqucZe3%K**=IW9U?M)b*kY`eEJ8VD1;nY;p(MN1&kK{Vmj1 zfPw`FVn%b@g_!k!ARJf9`ow6oCC=C(fZJ!3`YJUDxBk(CPMdHc9V4MI&>Vl#3ctMHjSl*lQr?Z=MP&q+)8!tBjN|Hb)?w zC8YST*8`9(kJ;wi&0kUHv4-Vc&<6Or&M(e< z4gPD$TE3`KN!Q3K{SK*39@s^2k;6F1x-qD)NW?INtxbPxf%&OmleA%*o+TQQ;XBWf z;=&AZx+l)g4Iy9Yl2d}_0#J#An#qeBa$*wATf~^BLQZN<7SrYqMIDgW&zsBF3n`BJ zYJ|qhPZv!8$m^DxH)Kq~%QU6pAn}8X;c5@?Sad4Qq1A%XhOzG~(tEqjyCHn+SvAfq zL3lp@Vs@E{?+*SuD3?KrdX}hC%hYApk*R_Duf>z5;}pZ zC4oe7moX5nXsnnzKYCdf5vr-gU|9X!Lc^B{bn^X74o;M68}Lop=Ml!PG+ANb0G}`-ME)c zKoBMrI8GBJBS4eAtf{G4xYhBoa^A?mZW_5(5{plSDAHmx1ml%`jS@D&`YnO@x(xg- z{=8#V(h4kJ;W%x)i*%#FAo5jwZR^L^8A`+jLL)QAmf|(T3n|0R-XGQsLhimfUoaBO z@a6jR&o5aEKTxYZ2(g2KHb3Ldg8WO|y_i}|$tf9&R&1!A;@Z}D*=qtiUmiode3%c(nAY> zRc|uG@9(=nEQJ=8DLq>+hO_nwJIhy5lmoY(QC`Q5Tloi`Q;)K#z&q@}r^!7aE$~*y z;T6OJkUnKD&P@VcGj5XIj($UqMH3t~>T_iN65~K|+vhVs#)2XtJkNG1l^bt}8NMT_ z%N>)8J-a$uSSA|S_sNE?zYMS$uq;tjUs_J?9M6~-Fr|qsgX!LnjPuE$t&L2n05p`e z4}yCLtn;I&43r?Gd4i4P{#I%)B7R;&?^GL3mrejrghu3!Dped5&s(^SMSQ^dX5E>X zB!XdjT)1z>AP*(o0WPx5V+ci)7U}fvrhq&WbcpF7DxmM3&ddSrJ|iR~ zj?gI@(hHF0*#2Q2X=qKa&)D0sMiYG0eH7_W6UT{B!hu|zpi;3gaJ3~r7smJ|&SzoI zWl@M&STDYG$^5-0pov-XTeIUmKq$-Viq(v0pgO=xbqMP4$%1_Lh=_zH6cdxl7=2Jj4#@xxzlW^5C zj2x`!jxJ?FBkn1bA%bpDjA!AFZ$?hjwpWf; zfIa)FuoFh681*wkN+Hp@%sr?8tF{RjC_x#(JB0ZrY8Q!Z-MDueRGy%@-LV(!DkaE! zO_30fpA;f5IFp1b^7uAvZ^q~=sU;1riiY{Zn}C_MlUx-qDi={n-%lc`MRqf!iLcSzG-Y=c2??wuO|-4t!xzX{1=_zUx%KGSjJr?o z+#sNAqNOlj1GzD60S*yRJsZiO=_%Zs!kNY~K| zhxlH|`2WgH$~hOzF>UD6!Ee6J6}ORCodPQPbq-*Mf64m3pSA0V?nzI&ULm~6?I^oJ zWiBh1SBA;x@y($*o)IQgDowggCw@lvILX)k+n-S@WKR~_OH)D*OU~O;g}i;9f1D`l z5xMx660&{Ww4=QfKTXnl?3R_-waO>h^@iXiB&`j`ZA)IWrRe@T&Y~TcI-@n${dm#1 zhy$|%A}0L9r%8)^Jj5R{nYgD1`2A16sE&8vEvYD_e~3+pMC8jD%O#8AH04d7qjd=F zHwNEsEAk~!dRTkSqe#%L2b9EOOuXC0rfW`^VI{fqE60ChMfIC~FjyBj?vvpB5)ira zn|?PNGKefOaXBSSl`d4Ep<(#R_H$=#+7&(x9iG!k{{^X=zLSJNODanwcYn|8b;peO zcqMJYv{&TQHbXTff!4dmxV*MTNK#s8d>?P_QcXReLnmy407z!2Mh;N)IHr-I0BUI) z_=iXy8vn5;Ig0s%zDP~J=W^nhKuRs?Y8rZ_ILjD$r*O-La5tlMkgorM8bdA%)d`rU@p0?j{3u~lnpO{C{EpO=Hkqh9*UuX0r=SiIj50&w1>y{Q;H+IFp+=Aw z`>s{NgiF&G=NgS;f(PdqI+ zigrtxzFyac6-%s)I1s#RA7c}PMU=jg&r}t`t(vfQ*RS zav7S#x4jqn+d3erAy3`!IZYYg{I8`IVuU4MO>1-JX?gg2B#6IM;`ie8= zm5`v8i}O6y$_k4YqH<;u3jKe*yu!`GzH>n_{kNUn1 z+n%lZB)i|5TYVAVdOKs(T@-%M5B~zf*~Z@EW3qBr$+`LFB0z<5sfA&!97k+0#l1kh zP%fvf$%6vi0~NiAqA-fB)z>yE#ejze{1xCNfhVSzys)i+4`}CKFq>Vc+tq9BW z&{eWrCvYx}Dd=Z!v!39H1X&bh$@6M-#PtBQwK16RA$JqSZvFe6R;V&Ze~|K>!`$I6 z$0#3KvrQ;jvx!)2*BSuz6&CB}ALkbg$G#cvBs;Sp9fRbst2{CL;|aTiQ^zOlxDQUP z9XXd8T*67_edv4&8+T(jp%RsL@!o~|>O$AfP1rFH&G^t)KVwlKjff<*HE)xcZ2|-F@7YS|VKZumxDy14ZW_hDXfbAR)xWkj~ zqOd(ZhfZo5fkJ_NUh&Yw?(5;R=bkhX95Ah)b)wk3{0lMZI6`r(X7uPxDUv5Sq z3KIt0vK5(WHMbs1Sc7i#XEwGPRF^7LC`M1iMMO7(=blPA`q7!hODXE^gfl1isK3W} z`jShDogP*FmPhVA)BAZ__(56IDj!YlK=y(k5ys)Jx|?sco70E4-g*n=;s{whDn)oQ zlx!+Wj2=N}=kHOzkhlk&7WEb4>bVRBF28p%?jPe<^z+z#ah<|NS0#Twhrp;PPR8RV z>VG$l+`&hnrQ((b1tRW02^v1_-hCItnHQ65)`k*YXKeaEvjXf_qqi9k7gVFpe_9Vkift$P8d7nM4c{gdu*;kp=BP%HB7E=tQIYHM~vN4GH z15f=A&(H0M_1j3?F0qFbs?WX4(k|AVk7+=C;(CYgSsxdM^grl@t+GsUX}ybR|DAfa z7cKz^;Y_}Qx{2Ukcmy<~PQzbIOp_MJ7#=a5h&^qH4ZpJnhctnAv%U6Nl#-tQ)lHWX z)tAhHyzAYvQbX!?#qr3Gca~Hs==Sn;6ix~Prd#Zi3ySfj7T&e@7|p-CPq&LFib~jN z*t5SMA=FN*zZ2_J>9)a*FTg5Xb6{)yJlnZ@FC`e%=l^B_-_^XzvW+JV`UZZ%GU5z-i#m)G9FEPG z4y`N^g3TFi$UAw@9dz2lVVmqFGp)<=4S3SJ-V7$LbzksK$zoTd?y+AVk)>lW= z=citCV?Vkyv-z<><;XnJ4WXb;@NHJxFJn|k;YrNh~ zCMy~yga7&Z=bAcYLl5{HhbP3qj4IblZ~wiuBy%2NBx?dr<#`nMqhc$LYe-8eFW%Co z@1zK&{}!9!o^p0Ha;wTw5my(_8;n8Tu}x_f{KUFOiZ7=-9tytway{2HK~W;LA9HGl zT8J54WK;Xi>QU#LfLFwo&fwuJI?uT?@9G30mzWtXA*z;)(0WT-3XEMsGF>O4VYJ zZYh&g-b2(&dXs^slc<3L8`50$AZ0_msOV`1EwcIB>4=5gr1v$zkh=Zze{r*GbnrX6 zT`Y2W1^%?z4qeIVgBZ;LMGLiPrNLPXQ*^JFRIu!`0P8Tx@vk<(scB>JYxRoKzaYPi zV+IaSjP|aqf|7`0a=7~y@$#PI<5@Q~Q6+Qvl9aRV`#lboj31mV5`H#N#m3?*7w_^R z03(`xE%Bnf2gpGzt6X!U2r5H7A^uqM{Huav=#2;tDdh;Yf@a1=AX(Bj=H z?V7m_$nBft8s>6WH{gZvwdfWMz=jkZo2&3%aaIEc&%F*fvjmsJd5z z1*e=lS#i@ik=Xk9U13}y16}dg%{2k+o?MtXbKNDByZKwCq>Wj*8wdpf`dPZDX+E&DmZ+ zs5#bt)H&|EmpDGew}s&E>ym$py)41@37gxhSkMkjrUaZk(C-}f$9 zc5o$G`kiDB$v%3oNh2RMmDR-w31cEn>NYpkX9NaT6sOYX(+~<(#cR5HpVHzn9E}ASsbHdq@cVgwjT_TNHNmVfv)-5I z+UbX#NC|2|vJ*3H4{6)Jy*IeXCz)%E4oz-GA32?|{imWCZSQ335&G!m$y1aL zUf0I;#q(mjkccan_su8s3UX#!e2($pHeVnf36b9m>k4k%{^Y+s@{qQuN!mat?%uIR z&!0&$8~$M1%a;&ocF`;Jl`MzKgIk8Bin&*A6($?mvK=R4z?ZxL$~h4j(;>d>-jp+k zZs>mko-F5qRt(FeM}(8Qdp2-6O3RC3n_iZ{-M`EjM?L;}N(#421h^p3AN> z+8f%9mj&V=2Nw-dX>p%R^5VxMCafzjl)ZctCKL6J3Hf1zadw!SD+ZT>4jcO%B-Vb| z_|o^eDBZ)=4IR(Jw0WuJ*ur3j8ZX9{=Zuifd#asEdi+A(ws+?*tCZM+x48%XoJDQ@ z)BGczq#zxo&x^-RP4 z0VE@c9Qi$3s4$po!`8`KYia@LBo$#6wN~i=D_HtF;J3=i%;or-_MP5v zoBD+eCWOdSE=bG67RSyo$Qqwg&O;P{)WM0UkLeKP?=VkM=jUj^-)Ht_&^M{roucpP zIPEJpi|8;}m(5pmyuxXwJ#({2baHibEt)kKz_onrGp`Q`G0@+k>2}U|2Ff*QKh0P6$mhduygF>* zV>$@1jB_7Xy?0+QG*d)n-uMRLoL>E|5&!O5na#g3#NSW!LNck9O$?*)K77LsH}X6VZd|p%sBi;5t;dEQUEuPP7+KbXA(m4V*I>44nP>OE z%QZ3U7CpK|1~8|+)3;%DxZqBC3v{9|oRJU#Bam;7v4+gagjGv{b~7`MEO5JIo7v#o zca~^B3Aa?s$k|whUysWH>T*U($(}f|m#SF(iQ^%`g_8v5bDoo4s+SL5(=UKx@2`SB4aZE^tX?l z_2=HbB%V8DJg>taWheP=ff@IkR>4xj(2#VEp&{KN;9ERQzJ7`+!xI$4)%LGGdcjRi z>)MhrVQe&;^ArsYEOKdTp`oz?UIaYl%4J_wmN)dpp#8Cr^ok3BN!_oW!m5 z$nQrq_fF?-rniKq+FoJ~|mKBqtb_$)P3dD#^ z6D@RciQau;iEgr19Y2xd$pmjYGiiNW&i2sHB(UFO%JETs%jo3Rf@+&iDdMS&`E0=9 zR}~o(E<7taNU~geiiCKf$jTSxZ2>!kC(;Pko{MN=H*gO&z4R)u1mEgqrG;B>ZD=EX zAd{}((6{_WSxO3K>?_vGT}uj?>a4H4gV_(gK(crlS5TtdBp4#Hc8J5zZyHBgYYuJT zA~}~?xk*@>z*9m@G-op^p}o|KWC#TD_BAG9>uDa)L(-9uI3IN~^VzX|W+#;Vmu4JW z5q$nGi@HQU6_RQl^Lz$^xx7UO4Y-l|w_d`tZ0saP72gDje9Cx+&a-!hrwM!SG_=%I zzsd~ByL7}q$`w_kSd7@=^||B(y6GBC3o5u&^a`HQ{?47HHN(P5`m9G96n?T_`>q{w zxA*GAtm9SQP6bl2+OZ`{`v=jYVx2uZ!Qv3`CPDApn5=13KFbDpgPyvnX}@`yDU7m% z7gV$zBCuLk)M$55X_7jq6CjHAbfNToA$Gxj?4hk*%_P_nz-B=RZ=WWITG2dC;vHa; z4ig~4Yc>a{!Z-sHN(6z{)6AP>J{>mX32QWJLGd#6l_I%h2eoW0Ln`~Vf?v;FI!m7s zroHZQI($dV@QP(f3hEwdov|#}+Ut6FrvOO{Eb9?WxGqUPFapBC!rJIx!TQ;TxBZ%o z-Yx-C6Gm?m#?E(65~VwII@y*2UATyOmp)U;#!Spj!UwE7B_+YIFIQ!0qNAyGCT(*T zveOr0IIy=i1&wY4L9>5w3iwnKd0^|_zF6?z_3CgbnrnWPa6tt7CD-YAKCP-jm2FL$ z4Gi%b9yyjvSlmx?qO>352ZM>{tRaTHCBFmI9x&c_^zhy(N=|_}UiJc`Ej&`k%LHXb zhDVYL#*Qut<1`=t-Z1?V!-8QLf!u8+Qv(0U9tsusVbf%m!mq#u0;yAo0Q zqUkdFwM2}(V2Su-I~2}A6jX_eXd7VM>t6dY=6dNGVP?=4-ej^1&J`>^2tA4llFwO^ z7>L?=2}NbGKS~B|A8xQk<{WS)fwJ0|NGtoYV5Et5;8D(c2A9$=a~-H3ocq;h!WXB~ zvow2gm2au5&b1MphdL&Pku8SDu8xBe93KtO!4|$R5%k(eqvu#^dzirTF#qGlb_@hv z@wUzTY)5i^%MI&IdXiPn%gS|R?cw-~c5k>(Z}_Yf+*Bx!oOWU`KO~bv+R5L+Jiodk zGM%Nw&pAGMUCk`;&rN-x6^Pq-LYpok{Lq(=j+z3y;%F#Uw+thEopxJ6;zSXep9I-tyrn69v_bidJB(r~6g{rS%cp`+@%QIlE!@Jn zNaZ5Sl&UI;ubynKGU}Q>tbK4R=1kVdYIsi4QokA3IfHJgTIlHreaL6o=dK#Tn*@F zacm$RgC_;k>lCZCU>pnLpwL1*&m4zP0}d=x$f>5BiYTxH%!5sYfw=ZzW=CDkp$_wl@wb zd^24h?~7wQf7n+zRY@U!6D&SU9wWsUPjMkCeDS4b^0$f!D{+mC!?A$XV$goDX75k2 z$BT($m3tNoPR7XB8qKa4Wg{P#1b&5crD?tvHLS7`BdO8<^Qg1r$?Tt2Z=^jV9#G_E zot@oW=i-5G=jK0sY0vYwU=p5jykL*=%L98R=ds%VoAgAau-N+eqDI(NYpS`MzaPTF z$Hl`RThy7((k88Sx9}R)wBzMwd1dVTZ~oCTr5Pb6fA_d(f6h$sOin%CTic)CUPpW`(*jmZkOqj_KS4L?00Ph9(3UN2BPIuvMIU@B1ITn z!{TsJ@yK~K+uE1Na|r@Kj7H}Tt<@ZbZ#z~i@6=_drIWXPxECruatm$?X20Yp<5E~N zMo&a4T@-0*7Uj9v}Ps&(c-9$&Pl`b`#}^O-IdsfrDl$ zC)#|UDRKzi4(x~c1usSwitep-zh%di&%|`%=d>IqpI!|PBMQQaEQ%?&+tIgjTbz=? zABKf^Eo9S?{;vQ?Cb!ujhVujBX&s)Q0~TNFY)n`YG{qn%wA?G~Cr=`{nMwCBIL_YLW*gC(2Hc3XtG$?R%{K|8*L~=GYRadHV@fQF9B^gOXK~!BPHIt*a5bI=? zY5w@+p3D77^m(i_rFU)>VmsXZv+XjwU_T-R9sO=RRp&}6DuV&gNJHM5yH!mF8_j0h zt(k%W)NBYw37JXFq*hoJO?8^7!)tCa_A;icgn^B474q@)rOJ2BmMmOK!Zatu3SO0g z>)z;3%Gwv3br@J}S;kc}@`clBXBf_e(}<7OKE*TVY9;}u-i;4zm4OWjblbALbC)8e z8h!}#t(kj08O^ycQ7#n*KUpQHb?s7@RS8yxrLmeGRh~@7an($EVa8u#a=xFKr*Gj$_p}BfZ;rZSeq+n`0>i5 zR-(=Es(OM>@{+o&(~ty5zvL(vJzIVKNm6#!TVR&xNFiUb@a zT`QRItA}%Sr-#ovf~K;aQ9zZwd7Ab3lEu}|f~mIy>CM6jito;YO`YRTurXND0psgU zA0M)t?r7qnf$^lire7b-r4v{iMrM@d_k~~hg_D4Z8-2q!aW574dOpli6wBV`cUFFD zsvmkr3CY*W=B50Pq^u)0(z@Z@6ZkSuF(%l;1Sq{~{Uxvx2DU~w|C6U8XL=LiHkPF} zZ03AfU;5IQHl(wc07FWEqs3hJ6Oc5fp(0v;BP)~~l?i%UN12@5SZA{spCB+sO>X@P zs?IZM@)}1P$bSEn>^|OWVAyh`fh6~K#r(Q(<2W@;%=0^{nic@)Vb)mm=S51uP56P$ zmo+W_OUx`ry^hzpyIVO*fkfY2E@ndK$eU;+gG3!qU6YR}$xL|20gTm}A!PuV5hku- zTnE-{7cH2=(fWOZV6B{{DC5f{D7|DnQ>*EA$>7+&XhVjnrr9?6sFK4KU_)GFJVF39 zjKY0fl81eeqan1lINF8PX!D9NdDWzkssoNZfDr;9r%4&P(ckd9IaAi~YYo34_adw0 zsR<{l9iVwAEA2`GrWv_9A>T$|I#tk20~=utmr@<`Bt}C{zve@ulu0gAC#>WR0X&nE zX*++UsvVtGKVLYGv&9notfn_6N4W|m$JaW6AKPTI!EWz=gT_mQ1yg&J;3#M9zIxpl zlS2u(a!mr>cZ`9l{Qv_^E+gbTgU*7z?{Xy+@yBlFtCGs`st^idg>`n{5bF4y<5{b+Y4vV09eP- zLwnz?)ih8Nc9(9IJleWEAx`H5Z_D{g1*1(a7_-jQ4Vn=sm2qAf(_@E^ht~wl>bpxC zvZZ1REza=mH%7{WQYM@P`koJC^F&l{ootyjJ^ysVB;d(07hXl2Uk2w06PQU;H_=K@ z(+8ntRWH^Wm56<|Lw490$1ay(Ub$T}cacS_lz`Ej1cboj63irFUDk2=6w7v!0Mk`z ztSKGjye_RF(+{o8lXXM_WXUvEWME~Q6NqvcHl;QZT_=|{=VO7jYeHfvs^!1@PmTUTp?7;aZ zc;TLlUI18bwlEr!QbZqf6KFhq=T*XMJ!x2CMgpuD9KHmOY8W5wC3~iC7x6Q%Ssm!u zCZYtqbm5Gc)rz*)b+f8VSY4ObG#)CigFM}rWSy!WezEF{#rI*3Vemt;`i_#yVwO{0O-gyGt%UeyMxIAP1D)Jp=M`?tQk_x%RH;&Qd9qJ zjGB&YRCw$VU~_clRUK!Jcp%BV1aex!!_nE|BK`aS!c6jlhGZ7qNobBs8VPq&DRb{F zXYIVrQA7oaB1t{fl#CE%UR25%qWgK=K$0h_Eyl$O9*-o|2XC5&j=n)i7)Q;69CP|1 zJnax$d*7&IfD4)+vxAAAW{O}l%DJrWtO~F?eU5|CBv%uZkY%Nbe52UQ2HWv#RxDsl z2^+-)Nj=Y0y<#@DyIu5y zS9$F_eIcfvJTuWNLtgL3i#`(#AuD`cpj1wiS#M8$%*TGLHnR)FZhD}KsCq&YfG87& zw`Q=l_A5w^Fffy1*|^;|nc{BpxOSV1i;K0EGVtNGhg+VIX*Tcs$dCL;rv#4f_~V~6 z9Mk=Y2pdvIoPmbN0cVQW^LLl9$kiAob7>^=FHqtE437b)mj*&0U)yAEROD`i4HL0pyc% z*s`WP0SXx+c{K-`aV)Sp%{eljbL;45hnQ3jp=%1U3dJ2HUm;KhTdnEGm#JjJ9Pl-V zrhjUMlAuZ>X1etq3q!W)Bz6YoCDkK1;TN{GnBXt+-o_X5S z`+GeAc6_xWrG#pK(;`~ugFWB-R;MWIj5y8bJ#Y`dx`!XlDwqrVdzYBq4x9&F6Cms1 zp8IwQe&6?f-(+vL>PRo;(=^wPs<>YDonH5mx)WP{0dwNyrMdorY?}UbLLpeK=f*bm ze5B60h6^ySLiR&Ch?|KZOh1jk04W+U0lFs^5C*K#p%-Yq(QC&kZX`m`F#MKCiGy zGL_t|Re#|pZjNh| zqNAx$u#qv1>TGYFO(=-upi z_mQTIW6&I`5n}L_c^~iF13vkaKiLgP3n3m6dvVi`40xJ_%H79%yvKX^NSHfE9g*Qs z5qxCihbjo(^)%laQ&IXwXsP3;!P+-=?(s+@tuc}Nke6QqZfBXSONYfGXr2bfq zrUWds_ziLM7>-uw{6IzwL#r9T+Ixn5gLC`#?fxcRR;Kn&UKN^n^7Si~wg`=dHMf?H zJS4&9mqtAL<<4tm^Ay_Otb&xeCm6A5uKWesREo(gQY!nS*8@^c?UBJ|dj9k67L$@H%liBHS z{A(2QaWV_7OYOE(BO)740v|F#5p^*1G@68Db=HJY=BTErkj2e?2oFN|BCbhd2-y%A zuQ+QSNVeu4H#W60y&&fcMaaauVg?ZZj8(o9ZX1Zb(EHaesV-22S=BkJSE{TNYrrFv zUUekV;%Sdb32+bqN+WX34X~#{s6;!2DYr`xgLNUNaWc<&ei%aSW%^#x=&uAjpxu!| z_7nZZo_c2=oqpmmWe7gz3qZ>E4Cn{=a-ZKa(Dz+(fr>#r^i}+msF??!q}N zD7~>S zm$^p=U>4PalUsY35*6M$D*O}VML7{;~>K+H58HH{}g zzL_S(i7lJ+r$-WOi1f$UWv=$Hz(GuQ7F9g0aDLOYbYU$r4EA;BNLfAM%_PW>wzrE& za@HXs41NI8>!}K>2W;{Yi|leE0r}LlVWcNY$((ltN!v^Z?G25{WZv(*35v6)tYvkm z0gP1xQUV_3bO4|-^d$h+hG`L*$(2{f2?$x$WP-Y(gVa-c(ZA$NzNCIhbv=U~lBo#^ zg9Md>!PenrVkDf4ql3I~#=Hb3y37rTX1h_zl;I)J=~%b+VtuUPHeK!KN>?ZfrJc^V z0(}E*o4H#1iUg9cubjOuWm*Sm1iNth%tyC%<0UV7iJ#_T(haYhn9urv*6U|Dof4jW z@<|hsBHq1wSFVsX$$lN$w2PqN@iSd|2;fv_nnKw?N8S&Bq4h~ihj=_{&xB3e;fCpMYo=skx$=9aA}$?7Jv2j6MR9C(_ODQW< z1EY?J5*`2{*$H4Yln$inNJBd5oeKfNs|!I;x*A}foVf?^*5fEetdzrfeR?Qp$3d!p zTYYgT&)$?qEygGzYtq|>HYt-}>UuI><6^>=bw!dPIi5}+I~v2d-)Ey*aw}DuzzO7? z;B=HEPo0a=i8HWTbf&CZHcOQ8jbCk)Q|3jc%oo-84sDt+z%xWN3K&9y-8U+l1ho=R z$~5OSPJq}pQna$VI913ko|9?sZ-i>20dPG(_Xlop+EnNcsSFFDQpm#7%%Uy1fmlf> zBi#D44=XF>V90eQ!WfdPCtQw{8zi1cg8D{FG@HWEiA-brTl%}c$(_5_mE z3XOWwOB4BOowP$vpnOw?NmHO|`l|}Sq0A<EP=!$!ZhRBy4XN7gQVDQ05UoIxF|Tv4*!;}y2D^33?aSJW z1G(k{m!1dqpy#Y1Gl9|T7@1I71>ADFm?veuc_Puq5bZ;Kw-6?J``vzN6#bOso@Zl9 zLpbU8<8{q5(}dF`5125fONBwQO5-YgrgLk0yF%{jQ$G9tQAC(E|Bw@l5bUb@jlH8t zXvTMPB{Z^=rLj0@#&nI)2(MYch$uv>X)C@^h zf(`Rk0wfdgIz9tFrMhE6jwxZ1horI7jAoD%f~H>35EL4Y(P&oF#(Jbm%JJ*tC@HjL65os zJo$@??CIvyPe0A-jY&;~X&44+nFr?P9r45K*2nNzpjw|$<@KAsYxq$TGyHhTtgnw2Vzx{nzN zckbK)2$t1KXn&~Il#-_5Dpi`(8ReP%vs+q&bi;(ldVAerB_KtdktGAw*b-dwIjAxFi z7J{wvahG1150xgRUDGE;nd~tRo_qVR$G-c!zq=`O`nKXYUMkpLjew0coAy#9Wywr! z%{QbS(Yd_DXb2WIy;73311v9^2QEG1!yNhzuW`2LMSgzNPEd~pN(+94QCj)#y-`~f zzM(w8E=?827xr9Ot5=vi0zt*H|E>BP%4IG+rxSYs!3pg8tXM^qP2=ltV0@+Dhuy#a z=U&`7${(7>7V8FA0C_@AZ6xhGf*QsdlhXFE>8t!e?Q%w(4RN}-%5us$KQz&s0MH^- z15eb|G1K)yv#vaKY~?wZ3oWRjFUkRfkSVH50SEk{$)ydDphhTM!T~(ZtuM=#-~i9M z>G$GdG~jE5VznTC4J?zaX2iB|d#vKF0J2mje=fs(I-`_jo~!@h9$T3HqgAH45~g%< z0ia)#AuApt_WD_yoCfSFwqXXdK=KhE@eyhA8Y{sn$nAaNVjPv#bQ2k2UQa&xq>GxS zsYY2{m77P_btL|~ckeo>aD4myThuZ{)i_+A1B}8YuWP`;N)^~R2ljBAz*^1Zdn@S; zA(wnNJgEkA#VZkZYUiaJmcY)s@CU~W%I#kd0*eJ^S0$?pK_+B9uLF->GfghZS(8`m zcqObZU?JBUOml^;j^s>hoy(YF8|5@F)ljZwz=U3!oB=#M;FQ3WyvEmpo5RUA&esg4 z5Cb6ar6g3yJ(AR%d{&wA^211&n-^)xsYB}Ewe5)ymM!Fd?AoQg;_CT6NAD+4GChdh zT9n9r*Hh=+{c4Urt6Mf!#SdOsnMH^Vvz6Hcq1#$k#jB%uytfOf*(*-unx3UwJ~wfx z+28EijT^0?AMgPmkjZaR>4>AS=KMvn`l9yIh0~1fCOuO{qkl+gZCWhYc%J`!r>Iq* zJicg4rdmhF1X;6DQY%82o|RdE+_^CMJDj=?&=1CXmz1o)vqCCGzkEl@cEdV4^_JAW z6|ZpwusiR-6F3*cO_;QXA#0|t;p3jr7_GiYboHDHCq4WDur-(K4l2b+!4n$L1}+U{ z43w-&*3IprcY`FbHrRvIS^7g^jn+SS4pyd(XDDc@&dM=5r}BE7yI&jCR2q0(R3a&1 zbuc3aS(A{=D@T|?CWp!Ql+)ThFH!pI@#Eu`=_YFof+6ujP`uSEt@El!P-BG`q9`Q_ z9LZn^(-{H)e2z@{))^*SZcZdjqd&0KJopxu3oCi{TAHZBv!+=&SEU>v>qsu+m`lkY zlw%^yARHFlTs2%_Ltax$&(F!Yln<3TiZ|Re>*MOXYU(>{x#>uwJ^g)P9c5)1+11*Y zvD3U>5c_&SflJFmZPN&AP%iVn1ePTRYv+*+*vB~j@HwSTXkn^ugyEuOQd?>L&=37k zj*9)#x{D8gLYjGaOVX>En$}@I^;17}d<_ca%9Fg-k)%nUdX#gjKqvuvhn#MjDgt{r z>_GB8aCjfo_&IXxT98&kp!!;>y=7piSySCV1iYf z2BOk=lUaL7d(8mSw8Nc()mR%(Q!z8xzU$eGryen{zR#{4zc-QXtOcEq)N2Ct z>b&NQ_n$boCuOplJg*tZe;vk~$g7J15vZbrbE?2&aA=sO<91dFFm+j9tD!p~gC_>4Z6#^)6G!D-F? z<8`9Sb)C%mrs1*YC`M{%XELh;>3vZ`RxD0f$>>3@jQfUw<32=N4dX>Jf?}~%opt3e z5R)%C;F+BBDT`u6Y%?3o2RP2miiq20c+Sd}>t00kuUPgHar@9jSlujDCPhB_xDCha zUvCro)}*)ExX?UOn#DB&XnpC@h-u!D<8Yn~YR zXgdgL0;ow{y8nVL~-M4cd?#P5wQC zw^Q;`UiGS10kASDGB1b8#7FA%0InT4Ct~aF10(doTL7G>CZ%$Kp(HCsRD0grk0(e* zAp4MS=g0wuKQHx*_CG$!>QEW}V3VHSIZCrui)#RRZGGNPIq9Rl*k4Y&&2#>bJcJiU z_^rMOxHb3f2cV>u?jQ-7>O*>7lpEphGLE@V9S>_kM<0nHBd~&nQ7gf?I4x~}i|HOy zIZP(3Yo}rxcd$l0&W(C6m~C~i$*KfaS|-@2=r`~(deQ|*A7<+G#U(3vs$s}X-IE@|Lp_9h?DLIW>F!M@Hr4Ml2SCbuNz6`=RLV3k2Ug7me zFtS=Ee%_a0;^n@QaC&_ zV=8D=@vO8n#2e>0?)zURE^9I|<7CZ59>QX&H`v9oJG3YL#bLlJ$M~`3PEf{cFs!@B zR;@0RQts#V0EUxBh)A%l`i=bJVR()-Hl=!Hes(6akqV<60<6K30l=L7oap?Ro1A*z z$LA+Hpg&-qo%%W^m}N?9ny=oi@w*cB!!`Y8nul8!k$A0(o<(sja23mo=I-6Q9;1k8 zHA&M_0gZ^WfDv+PoXKS_y)BYV#0+CigJb%Cq^`0IF{Vp6*BdGcr4>ko&xA!nkL zx%+t`^q)9`sNw9)x zsVW$&x91H6y$h-v4H?!kQwnwZVuVKhs?xL`}BU*!f=0$FVs?tQh(q-g>~L*}Sh z-)m#jyCbt2rtr0Gtb%{d*L)2bOaffm6=+Pbq*n-52`C%g#j#rxV7GizpE9xPG9LNl zE1zz}YM$4Vo&&%ku?{k3c$~$Wh?GJY=YF0^N9@xvpVBKQjVXt_o&XQ6g*nFzCt;o* zuduw-HoRWxzd9w&Ae};(6kCPTWVWXL64;cmrpc_WLbg5B-eEAA&7^K&jeFq|CIn%S z&H+|h?RJ~yE#AWW3BgKv43n>PbGALa$013vRp`y#wH62pb)iYIV9^tKW^3%ljhg^t+V~ZJLGOGx8r*s3(byo6wrybLXUhbBxBX$X7+6Sz>8!0EKGW4_Mgo;^>PLKM2X=&K1y zY}=Ub^IV#*+b>uI;i#`EHow7?ZRv$vyNsbURwY=;tFzKfhL=ocIY(3gZjV&*D(c9q zP!elz@lz^WUdt6{^-69xf+3XEChx<#4eh?o(mQ!-W+Fse&|JpEYGebX9C>SAT)*>D zM-p<~7-XebIpzXCX~zsxiE5&+N=P@*qN5sG{kd?x?%#4l&QV>^lw$Fu*G#hpB~xbQ zm1BS_&nOe7EJHt1U8FUeac4@eRy2kC?9cvefHk>bYOlaqgkZJ#;a~Q$mo+Eo*E0Pz zW-}Nt?~l1&Kt|$1V0P&_Q6VTRHL;D*&=i8~uZFl@XaXqnM?`V~a2fSiSf)wl)Q)ZqJc!}?zwO;ya@#Nrh2fd5B-vHov;RHxlYSRP zm5e7&+NYEc$RUW!At+mvB|CfcK30jYUAJ$WS&ph!Iva?#PBx@1d2|aN*P*d9Ugofe z23HH`0{7Vqpnj}HwB}!u7}&%1pfu!`Ri7w z!t%1SR@nHA<4jWpj_;8AhUxhVv^Rxk?{6Zxv{=W?wR2v72*b5Mv>)qm%+MRacPmKd6!QF6U^F#k2AtFmL36=xH5pv=N){Q?)}cosvFaz`drH@ktsnOr=N~`ZJ)U$9 zl<-Vy5|xX*{KPqf3yn0C?jFk`ltyW702+@%>h>t4u1{ts@Av}Yz#ZxCu^^i3c5&pb z) zjBd*@14@n6;G)f}bx~)QB{@TI#yfas>9_G)OPa0Bal03`bUPIN_T52pc~|Bl&iLjy zc_pe28gTY()*j_t-C5f4|2l|MS;>H~K*5L2*K@s%a1DOeZt4YiMR#=&v4h`9 zOervDP?roRr%;VHolEIAne96c{`K|sNVfLX9Cc&1SLIH?&kdC&--E$=tEgnj3z8FR6dGPE(PtS+K0cBn>J< zw+arqzXHlGlsUQxsv7}H-4=#M7mkdVSNhn7<70?2%}lL0hMH0O>_<`xo&lwHZ^&gLa-*RWq za%%>cdL+wg2eg)C#tls<$_|=6h2mth<+~9IIPP_~*C%iUMh47iG%dgG&ORL8THX$n qPf+>q@~tZH*G`Aus%qbGvOfV;xBnH+M)`jL00002 literal 0 HcmV?d00001 From 2be3e129650b65575f2d64c7eede6fa1115d5912 Mon Sep 17 00:00:00 2001 From: _Kerman Date: Thu, 13 Aug 2026 15:09:21 +0800 Subject: [PATCH 22/41] fix(apiproxy): harden cold session metadata probing --- ...-bounded-cold-blank-verification.i18n.yaml | 4 +- ...6-08-13-bounded-cold-blank-verification.md | 12 ++-- ...8-13-bounded-cold-blank-verification.zh.md | 12 ++-- ...7-29-durable-last-activity-index.i18n.yaml | 4 +- .../2026-07-29-durable-last-activity-index.md | 4 +- ...26-07-29-durable-last-activity-index.zh.md | 4 +- docs/subsystems/session.i18n.yaml | 4 +- docs/subsystems/session.md | 2 +- docs/subsystems/session.zh.md | 2 +- packages/core/session/src/index.ts | 2 +- packages/core/session/src/repair.ts | 21 +----- packages/core/session/tests/repair.spec.ts | 43 +----------- packages/host/apiproxy/README.i18n.yaml | 4 +- packages/host/apiproxy/README.md | 4 +- packages/host/apiproxy/README.zh.md | 4 +- packages/host/apiproxy/src/api-proxy.ts | 56 +++++++++------- packages/host/apiproxy/src/api/sessions.ts | 20 +++--- .../apiproxy/tests/api-proxy-cold.spec.ts | 67 ++++++++++++++++++- 18 files changed, 138 insertions(+), 131 deletions(-) diff --git a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.i18n.yaml index d57e57211b..2cd2577fc5 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.i18n.yaml +++ b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md -2026-08-13-bounded-cold-blank-verification.md: 330f5acbd520487732bc72fe75f09496aaa0c028 -2026-08-13-bounded-cold-blank-verification.zh.md: 15c0d28be8c15f7076ac90a50bb023cc42fbbdd6 +2026-08-13-bounded-cold-blank-verification.md: bf8d167d742001ce65b3e96713a9603adb19603e +2026-08-13-bounded-cold-blank-verification.zh.md: 7cfef77a02308a8e75281877f8a774b41bb9559d diff --git a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md index 330f5acbd5..bf8d167d74 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md +++ b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md @@ -14,15 +14,15 @@ The same cold list used the JSONL artifact mtime for `updatedAt`. Opening a Sess `dsh-host-apiproxy` registers `sessionListMetadata`, a projection containing `blank` and `lastPromptAt`. The attached summary folds the same functions directly over the live log. `blank` changes only from true to false on `turn/start`; `lastPromptAt` changes only on a `user/message` whose source kind is `user`. -A cold summary trusts cached `blank: false`, because a checkpoint prefix containing `turn/start` remains non-blank. Cached `blank: true` and a cache miss do not prove the current log is blank. When persistence exposes a physical artifact through `locate()` and its size is at most `coldBlankProbeMaxBytes` (default 1 KiB per Session), the gateway calls `readFrom(id, 0)` and verifies whether the stored prefix contains `turn/start`. Files above the bound, backends without a location, vanished artifacts, and failed reads all produce `blank: false`, keeping the Session visible. +A cold summary trusts cached `blank: false`, because a checkpoint prefix containing `turn/start` remains non-blank. Cached `blank: true` and a cache miss do not prove the current log is blank. When persistence exposes a physical artifact through `locate()` and its observed size is at most the `coldBlankProbeMaxBytes` eligibility threshold (default 1 KiB per Session), the gateway calls `readFrom(id, 0)` and folds exact list metadata from the stored prefix. Files above the threshold, backends without a location, vanished artifacts, and failed reads all produce `blank: false`, keeping the Session visible. -`updatedAt` is the later of `createdAt` and `lastPromptAt`. A cold cache miss or stale checkpoint therefore orders the Session too old rather than promoting it from an unrelated file write. The bounded blank read does not replace missing recency metadata. +`updatedAt` is the later of `createdAt` and `lastPromptAt`. An eligible artifact read supplies exact `lastPromptAt` at no additional I/O cost; other cache misses or stale checkpoints order the Session too old rather than promoting it from an unrelated file write. After each asynchronous cold read, the gateway checks the live store again and replaces the cold result with an attached summary when another request resumed that Session meanwhile. ## Alternatives considered **Trust cached `blank: true`.** Rejected because the projection cache deliberately permits a persisted log to advance beyond its checkpoint. A crash or fail-soft write failure after the first `turn/start` would hide a real conversation and could make the client reuse it as New Session. -**Read every cold log.** Rejected because list latency and I/O would scale with total stored conversation bytes. The physical-size bound targets the small historical artifacts that can be checked cheaply and degrades larger unknowns toward visibility. +**Read every cold log.** Rejected because list latency and I/O would scale with total stored conversation bytes. The physical-size eligibility check targets small historical artifacts that can be checked cheaply and degrades larger unknowns toward visibility. It intentionally does not add a persistence operation solely to make the threshold atomic with the read: concurrent growth may increase one probe's read cost, but the additional events can only preserve visibility or change a blank result to non-blank. **Store blankness and recency in an authoritative persistence index.** Deferred because JSONL has an immutable first line and would require a second durable artifact with ordered updates, while SQLite would require a schema field. The broader exact-index design remains in the [last-activity proposal](../../proposed/architecture/2026-07-29-durable-last-activity-index.md). @@ -30,8 +30,8 @@ A cold summary trusts cached `blank: false`, because a checkpoint prefix contain ## Consequences -Existing small blank JSONL artifacts are hidden without depending on projection-cache availability, and a stale cache cannot hide a stored `turn/start`. A cold list may read each artifact whose physical size is within the configured bound when its cache does not already prove non-blank. The default bound applies to compressed bytes for the shipped Zstandard JSONL backend. +Existing small blank JSONL artifacts are hidden without depending on projection-cache availability, and a stale cache cannot hide a stored `turn/start`. A cold list may read each artifact whose observed physical size is within the configured threshold when its cache does not already prove non-blank. The default threshold compares compressed bytes for the shipped Zstandard JSONL backend. -Blank artifacts above the bound and blank Sessions on location-less backends remain visible. Missing or delayed recency cache entries fall back to `createdAt`. These are conservative degradations: the UI may show an extra empty row or order a Session too low, but it does not hide a conversation or promote one because it was merely opened. +Blank artifacts above the threshold and blank Sessions on location-less backends remain visible. Missing or delayed recency cache entries for artifacts that are not read fall back to `createdAt`. These are conservative degradations: the UI may show an extra empty row or order a Session too low, but it does not hide a conversation or promote one because it was merely opened. -The gateway-owned projection is an effect of the gateway fiber; unloading the gateway removes the key. Unit coverage pins exact-threshold probing, stale-true rejection, monotonic false reuse, fallback direction, human-prompt recency, and fiber disposal. A keyless Web snapshot boots the shipped compressed JSONL composition, seeds a small cold blank artifact without a cache row, and verifies that the sidebar omits it. +The gateway-owned projection is an effect of the gateway fiber; unloading the gateway removes the key. Unit coverage pins exact-threshold eligibility, stale-true rejection, monotonic false reuse, exact small-log recency, live-attachment races, fallback direction, human-prompt recency, and fiber disposal. A keyless Web snapshot boots the shipped compressed JSONL composition, seeds a small cold blank artifact without a cache row, and verifies that the sidebar omits it. diff --git a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.zh.md b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.zh.md index 15c0d28be8..7cfef77a02 100644 --- a/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.zh.md +++ b/.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.zh.md @@ -14,15 +14,15 @@ Web 会话树会隐藏空白 Session，并把当前选中的空白项复用为 N `dsh-host-apiproxy` 注册 `sessionListMetadata` 投影，其中包含 `blank` 与 `lastPromptAt`。已附加摘要直接用同一组函数折叠实时日志。`blank` 只在 `turn/start` 时从 true 单调变为 false；`lastPromptAt` 只在来源 kind 为 `user` 的 `user/message` 上更新。 -冷摘要信任缓存的 `blank: false`，因为已包含 `turn/start` 的 checkpoint 前缀会始终保持非空。缓存的 `blank: true` 和 cache miss 都无法证明当前日志为空。当 persistence 通过 `locate()` 暴露物理工件，且其大小不超过 `coldBlankProbeMaxBytes`（默认每个 Session 1 KiB）时，网关调用 `readFrom(id, 0)`，验证已存前缀是否含有 `turn/start`。超过上限的文件、不提供位置的后端、已消失的工件和读取失败都产生 `blank: false`，让 Session 保持可见。 +冷摘要信任缓存的 `blank: false`，因为已包含 `turn/start` 的 checkpoint 前缀会始终保持非空。缓存的 `blank: true` 和 cache miss 都无法证明当前日志为空。当 persistence 通过 `locate()` 暴露物理工件，且其观测大小不超过 `coldBlankProbeMaxBytes` 资格阈值（默认每个 Session 1 KiB）时，网关调用 `readFrom(id, 0)`，从已存前缀折叠精确列表元数据。超过阈值的文件、不提供位置的后端、已消失的工件和读取失败都产生 `blank: false`，让 Session 保持可见。 -`updatedAt` 取 `createdAt` 与 `lastPromptAt` 中较晚者。因此冷 cache miss 或陈旧 checkpoint 只会让 Session 排得偏旧，而不会因无关的文件写入被提升。有界 blank 读取不用于补齐缺失的最近时间元数据。 +`updatedAt` 取 `createdAt` 与 `lastPromptAt` 中较晚者。符合资格的工件读取无需额外 I/O 即可提供精确 `lastPromptAt`；其他 cache miss 或陈旧 checkpoint 只会让 Session 排得偏旧，而不会因无关的文件写入被提升。每次异步冷读取后，网关都会再次检查实时 store；若另一请求期间已恢复该 Session，则用已附加摘要替换冷结果。 ## Alternatives considered **信任缓存的 `blank: true`。** 拒绝，因为 projection cache 有意允许持久日志前进到 checkpoint 之后。首个 `turn/start` 之后若发生崩溃或 fail-soft 写入失败，真实对话就会被隐藏，客户端还可能把它复用为 New Session。 -**读取每一份冷日志。** 拒绝，因为列表延迟与 I/O 会随所有已存对话的总字节数增长。物理大小上限只针对能够低成本核验的小型历史工件，更大的未知项则向保持可见降级。 +**读取每一份冷日志。** 拒绝，因为列表延迟与 I/O 会随所有已存对话的总字节数增长。物理大小资格检查只针对能够低成本核验的小型历史工件，更大的未知项则向保持可见降级。该检查有意不为“让阈值与读取原子化”单独新增 persistence 操作：并发增长可能增加一次探测的读取成本，但新增事件只会保持可见，或把空白结果改为非空。 **把空白状态与最近时间存入权威 persistence index。** 暂缓，因为 JSONL 的首行不可变，需要增加带有顺序写入要求的第二份持久工件；SQLite 则需要 schema 字段。更广泛的精确索引设计仍由[最后活动提案](../../proposed/architecture/2026-07-29-durable-last-activity-index.md)负责。 @@ -30,8 +30,8 @@ Web 会话树会隐藏空白 Session，并把当前选中的空白项复用为 N ## Consequences -既有的小型空白 JSONL 工件无需依赖 projection cache 是否存在即可被隐藏，陈旧 cache 也无法隐藏已存的 `turn/start`。对于 cache 尚不能证明非空，且物理大小在配置上限内的每个 Session，冷列表可能读取其工件。对默认交付的 Zstandard JSONL 后端，该上限作用于压缩后的字节数。 +既有的小型空白 JSONL 工件无需依赖 projection cache 是否存在即可被隐藏，陈旧 cache 也无法隐藏已存的 `turn/start`。对于 cache 尚不能证明非空，且观测物理大小在配置阈值内的每个 Session，冷列表可能读取其工件。对默认交付的 Zstandard JSONL 后端，该阈值比较压缩后的字节数。 -超过上限的空白工件，以及来自不提供位置的后端的空白 Session 会保持可见。缺失或延迟的最近时间 cache 会回退到 `createdAt`。这些都是保守降级：UI 可能多显示一条空记录，或把 Session 排得偏低，但不会隐藏真实对话，也不会因为单纯打开而把会话提升到前面。 +超过阈值的空白工件，以及来自不提供位置的后端的空白 Session 会保持可见。对于未被读取的工件，缺失或延迟的最近时间 cache 会回退到 `createdAt`。这些都是保守降级：UI 可能多显示一条空记录，或把 Session 排得偏低，但不会隐藏真实对话，也不会因为单纯打开而把会话提升到前面。 -网关自有投影是网关 fiber 的 effect；卸载网关会移除该 key。单元覆盖固定了临界大小探测、拒绝陈旧 true、复用单调 false、回退方向、真人 prompt 最近时间和 fiber 销毁。无密钥 Web snapshot 会启动发行版的压缩 JSONL 组合，在没有 cache row 的情况下播种一份小型冷空白工件，并验证侧栏不展示它。 +网关自有投影是网关 fiber 的 effect；卸载网关会移除该 key。单元覆盖固定了临界大小资格、拒绝陈旧 true、复用单调 false、小日志精确最近时间、实时附加竞态、回退方向、真人 prompt 最近时间和 fiber 销毁。无密钥 Web snapshot 会启动发行版的压缩 JSONL 组合，在没有 cache row 的情况下播种一份小型冷空白工件，并验证侧栏不展示它。 diff --git a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.i18n.yaml b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.i18n.yaml index d9e26b561d..e8355305ed 100644 --- a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.i18n.yaml +++ b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md -2026-07-29-durable-last-activity-index.md: b530508877adf3a66b158ff659441c4179878d00 -2026-07-29-durable-last-activity-index.zh.md: 4c099bc835c4708fda09811fafd6dabb65dbb575 +2026-07-29-durable-last-activity-index.md: 99e50dd40b789db5d896cb7f9e25fa8893b02ae2 +2026-07-29-durable-last-activity-index.zh.md: e317fb192d53353295e6b52f631707ba6b400b66 diff --git a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md index b530508877..99e50dd40b 100644 --- a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md +++ b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md @@ -10,7 +10,7 @@ A cold (persisted, unattached) session has no authoritative stored answer to "wh The gateway previously used JSONL artifact mtime when available. mtime answers a different question: when the artifact was last written. Every durable write refreshes it, including a truncate-repair of a torn tail, synthetic closers that balance an interrupted turn, and the [`session/end-seed` boundary](../../implemented/architecture/2026-07-30-session-end-seed-log-boundary.md) appended during pickup. That approximation promoted a Session merely because it was opened. The [bounded cold blank verification](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md) removed mtime ordering and accepted the cache's conservative "too old" failure direction as an interim tradeoff. -An attached summary can fold the live event log and select the latest human-authored `user/message`, but the cold path deliberately does not read large logs. Reading every log to compute `updatedAt` would make `list()` scale with total conversation bytes rather than Session count. The 1 KiB cold read introduced for blank verification does not solve recency: it is conditional, targets only small artifacts, and does not make large-log ordering exact. +An attached summary can fold the live event log and select the latest human-authored `user/message`, but the cold path deliberately does not read large logs. Reading every log to compute `updatedAt` would make `list()` scale with total conversation bytes rather than Session count. The 1 KiB cold read used for metadata verification makes eligible small-artifact recency exact, but it does not make large-log ordering exact. Making cold ordering exact remains a durable-format decision, which is why it is scoped here rather than in the gateway workaround. @@ -61,7 +61,7 @@ Three questions must be answered before implementation, and none of them is sett ## Related -- [Bounded cold blank verification](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md) — removes mtime ordering, defines the interim projection-cache fallback, and limits direct cold reads to blankness checks. +- [Bounded cold blank verification](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md) — removes mtime ordering, defines the interim projection-cache fallback, and limits direct cold reads to small-artifact metadata verification. - [The end-seed log boundary](../../implemented/architecture/2026-07-30-session-end-seed-log-boundary.md) — one of the non-prompt writes that made mtime unsuitable. - [Session persistence](../../implemented/architecture/2026-06-14-session-persistence.md) — the append-only and never-rewrite invariants that rule out a mutable JSONL header field. - [Shared persistence write coordinator](../../implemented/architecture/2026-06-18-shared-persistence-write-coordinator.md) — the append path a stored field would hook into. diff --git a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.zh.md b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.zh.md index 4c099bc835..e317fb192d 100644 --- a/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.zh.md +++ b/.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.zh.md @@ -10,7 +10,7 @@ Status: proposed 网关以前会在可用时采用 JSONL 产物的 mtime。mtime 回答的是另一件事：这份产物上次是什么时候被写入。每一次持久写入都会刷新它，包括对撕裂尾部的截断修复、平衡中断轮次的合成 closer，以及拾起时追加的 [`session/end-seed` 边界](../../implemented/architecture/2026-07-30-session-end-seed-log-boundary.md)。这套近似会让 Session 仅仅因为被打开就提升排序。[有界冷空白验证](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md)移除了 mtime 排序，并把 cache 保守的「过旧」错误方向作为现阶段取舍。 -已附加摘要可以折叠实时事件日志并选择最新的真人 `user/message`，但冷路径有意不读取大日志。为计算 `updatedAt` 而读取每一份日志，会让 `list()` 的开销随对话总字节数而非 Session 数量增长。为空白验证引入的 1 KiB 冷读取并不能解决最近时间：它是条件式的，只针对小产物，也不能让大日志的排序精确。 +已附加摘要可以折叠实时事件日志并选择最新的真人 `user/message`，但冷路径有意不读取大日志。为计算 `updatedAt` 而读取每一份日志，会让 `list()` 的开销随对话总字节数而非 Session 数量增长。用于 metadata 验证的 1 KiB 冷读取可以让符合条件的小产物得到精确的最近时间，但不能让大日志的排序精确。 让冷排序变得精确仍是一项持久格式决策，因此其范围留在本文，而不是网关 workaround 中。 @@ -61,7 +61,7 @@ Status: proposed ## 相关 -- [有界冷空白验证](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md)——移除 mtime 排序，定义 projection cache 的过渡回退，并把直接冷读取限制为空白检查。 +- [有界冷空白验证](../../implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md)——移除 mtime 排序，定义 projection cache 的过渡回退，并把直接冷读取限制为小产物 metadata 验证。 - [种子结束日志边界](../../implemented/architecture/2026-07-30-session-end-seed-log-boundary.md)——让 mtime 不适用的非 prompt 写入之一。 - [会话持久化](../../implemented/architecture/2026-06-14-session-persistence.md)——仅追加与绝不重写这两条不变式，正是它们排除了可变的 JSONL header 字段。 - [共享持久化写入协调器](../../implemented/architecture/2026-06-18-shared-persistence-write-coordinator.md)——一个已存储字段将挂入的那条追加路径。 diff --git a/docs/subsystems/session.i18n.yaml b/docs/subsystems/session.i18n.yaml index 8ee4185e54..d0e0ff2e32 100644 --- a/docs/subsystems/session.i18n.yaml +++ b/docs/subsystems/session.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/subsystems/session.md -session.md: 4c40971fe58952b32635aa5eb767a42f73108b00 -session.zh.md: d958b03fcdad91b58cc277636e599cce46a2c7fb +session.md: 760a3042724472b5f518896b8ff0e56bcfec2799 +session.zh.md: 8c56029af5144569f1ab6df73a8fe2278f9ef5b4 diff --git a/docs/subsystems/session.md b/docs/subsystems/session.md index 4c40971fe5..760a304272 100644 --- a/docs/subsystems/session.md +++ b/docs/subsystems/session.md @@ -586,7 +586,7 @@ An explicitly supplied empty seed writes `session/end-seed` at seq 0, which dist It exists because seed history and live work are otherwise byte-identical, which defeats any plugin owning a standalone open/close bracket: an unmatched `compaction/start` reads the same whether the writer crashed mid-compaction or is compacting right now. An opening marker before `session/end-seed` came from the constructor seed and belongs to an ended lifecycle, whatever ended it (a crash, a succeeding process, or a fork out of a still-running parent), so its owner may treat it as dead. That covers only brackets *this* session inherited: a concurrently live session holding an open bracket over the same history has its own boundary elsewhere, so tolerating concurrent writers needs a liveness signal beyond the log. Core writes the boundary and reads nothing from it — a bracket's vocabulary stays with its owning plugin, which is why crash repair closes turn/step/tool boundaries and never `compaction/*`. -Activity ordering excludes the boundary through `lastActivityTime(events)`: picking a session up is not work, and lazy resume means browsing writes one, so a resume picker or session list ordering by log tail would float every opened session to the top. +Consumers that order Sessions by human activity exclude this boundary: picking a Session up is not work, so ordering by the log tail would float every opened Session to the top. ## Plugin-contributed log-only events diff --git a/docs/subsystems/session.zh.md b/docs/subsystems/session.zh.md index d958b03fcd..8c56029af5 100644 --- a/docs/subsystems/session.zh.md +++ b/docs/subsystems/session.zh.md @@ -590,7 +590,7 @@ interface TurnEndReasonMap { 它之所以必要，是因为种子历史与实时工作在字节层面完全相同，这会让任何拥有独立开／闭括号的插件失效：一个未配对的 `compaction/start`，无论写入方是在压缩中途崩溃、还是此刻正在压缩，读起来都一样。在 `session/end-seed` 之前的开启标记来自构造种子，并且属于一个已结束的生命周期，无论结束原因为何（崩溃、进程接替，或从仍在运行的父会话 fork 出来），因此其所有方可以视之为已死。这只覆盖*本*会话继承的括号：另一个并发存活的会话可能在同一段历史上持有开放括号，而它自己的边界在别处，因此容忍并发写入方还需要日志之外的存活信号。核心写入该边界但不从中读取任何内容——括号的词汇表仍归其所属插件，这也正是崩溃修复只关闭轮次／步骤／工具边界而从不处理 `compaction/*` 的原因。 -活动排序通过 `lastActivityTime(events)` 排除该边界：接手会话不算工作，而惰性恢复意味着浏览就会写入一个，因此按日志尾部排序的恢复选择器或会话列表会把每个打开过的会话顶到最前。 +按真人活动排序 Session 的消费方会排除该边界：接手 Session 不算工作，因此按日志尾部排序会把每个打开过的 Session 顶到最前。 ## 插件贡献的仅日志事件 diff --git a/packages/core/session/src/index.ts b/packages/core/session/src/index.ts index d2e72b4676..2d82a88623 100644 --- a/packages/core/session/src/index.ts +++ b/packages/core/session/src/index.ts @@ -26,7 +26,7 @@ export type { SessionPreparationOptions } from './preparation.ts' export type { AssistantMessage, ToolResultMessage, UserMessage } from '@deepseek-ai/dsh-llm' export { isJsonValue, snapshotJsonValue } from './json.ts' export type { JsonValue } from './json.ts' -export { interruptedTurnClosers, lastActivityTime, TOOL_NOT_STARTED, TOOL_OUTCOME_UNKNOWN } from './repair.ts' +export { interruptedTurnClosers, TOOL_NOT_STARTED, TOOL_OUTCOME_UNKNOWN } from './repair.ts' export { decodeStorageRecord, packChunkRuns } from './chunk-rows.ts' export type { ChunkRow, StorageRecord } from './chunk-rows.ts' export type { SessionSurface, SurfaceFoldReplacement, SurfaceFoldResult } from './surface.ts' diff --git a/packages/core/session/src/repair.ts b/packages/core/session/src/repair.ts index 1203bed341..d91cb72494 100644 --- a/packages/core/session/src/repair.ts +++ b/packages/core/session/src/repair.ts @@ -1,10 +1,7 @@ /** * Crash-recovery repair for an interrupted session log. It preserves a fully * written final turn and supplies the missing tool, step, and turn boundaries - * needed to resume with a provider-valid transcript, plus the activity-time - * read that must skip the end-seed boundary — which this module does - * not write (`Session`'s constructor does) but whose synthetic closers can - * inherit that boundary's timestamp, the one real coupling between the two. + * needed to resume with a provider-valid transcript. * @module @deepseek-ai/dsh-session/repair */ @@ -12,22 +9,6 @@ import { MessageId, freezeMessage, type CallId } from '@deepseek-ai/dsh-llm' import type { ToolResultMessage } from '@deepseek-ai/dsh-llm' import type { SessionEvent } from './types.ts' -/** - * The `time` of the log's last event representing actual work, skipping the - * `session/end-seed` boundary — picking a session up is not activity, so - * activity ordering must exclude it. - * - * Excluded by type, so a pickup time still leaks when a boundary is the last - * event of an open turn: {@link interruptedTurnClosers} copies it onto the - * synthetic `turn/end`, which this counts as work. Reachable only by seeding an - * unbalanced log directly — `load()` balances first. - * @param events - the log to scan, in seq order. - * @returns the latest non-boundary event's `time`, or undefined when there is none. - */ -export function lastActivityTime(events: readonly SessionEvent[]): number | undefined { - return events.findLast(event => event.type !== 'session/end-seed')?.time -} - /** Recovery code for an assistant tool request that never reached a recorded call start. */ export const TOOL_NOT_STARTED = 'TOOL_NOT_STARTED' diff --git a/packages/core/session/tests/repair.spec.ts b/packages/core/session/tests/repair.spec.ts index b656a7116c..941819c0af 100644 --- a/packages/core/session/tests/repair.spec.ts +++ b/packages/core/session/tests/repair.spec.ts @@ -1,6 +1,6 @@ import { describe, expect, it } from 'vitest' import { CallId , createMessage, createToolResultMessage } from '@deepseek-ai/dsh-llm' -import { interruptedTurnClosers, lastActivityTime, TOOL_NOT_STARTED, TOOL_OUTCOME_UNKNOWN } from '../src/index.ts' +import { interruptedTurnClosers, TOOL_NOT_STARTED, TOOL_OUTCOME_UNKNOWN } from '../src/index.ts' import type { SessionEvent, SurfaceEvent } from '../src/index.ts' /** @@ -273,44 +273,3 @@ describe('interruptedTurnClosers', () => { expect(closers.map(e => e.type)).toEqual(['step/end', 'turn/end']) }) }) - -describe('lastActivityTime', () => { - const endSeedAt = (seq: number, time: number): SessionEvent => - ({ type: 'session/end-seed', seq, time, data: {} }) - - it('has no answer for an empty log', () => { - expect(lastActivityTime([])).toBeUndefined() - }) - - it('reports the log tail when no boundary is present', () => { - const events: SessionEvent[] = [ - userTurnStart(1, 0), - { type: 'turn/end', seq: 1, time: 500, data: { turn: 1, reason: { kind: 'completed' } } }, - ] - expect(lastActivityTime(events)).toBe(500) - }) - - it('skips a trailing boundary in favour of the last real work', () => { - const events: SessionEvent[] = [ - userTurnStart(1, 0), - { type: 'turn/end', seq: 1, time: 500, data: { turn: 1, reason: { kind: 'completed' } } }, - endSeedAt(2, 9_000), - ] - // Resumed long after the work, but never worked in again. - expect(lastActivityTime(events)).toBe(500) - }) - - it('reports work appended after end-seed', () => { - const events: SessionEvent[] = [ - userTurnStart(1, 0), - endSeedAt(1, 9_000), - { type: 'turn/end', seq: 2, time: 9_500, data: { turn: 1, reason: { kind: 'completed' } } }, - ] - expect(lastActivityTime(events)).toBe(9_500) - }) - - it('has no answer for a log of nothing but boundaries', () => { - // Unreachable via the constructor, but the projection is a pure function. - expect(lastActivityTime([endSeedAt(0, 1), endSeedAt(1, 2)])).toBeUndefined() - }) -}) diff --git a/packages/host/apiproxy/README.i18n.yaml b/packages/host/apiproxy/README.i18n.yaml index ea8d70c9e4..2ae197d230 100644 --- a/packages/host/apiproxy/README.i18n.yaml +++ b/packages/host/apiproxy/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/host/apiproxy/README.md -README.md: 518a7e5640bc62b493244a3d863cfea643386f7f -README.zh.md: 5692e9441d20d9dbec5d8a69263c875eb3f3f907 +README.md: b7dee9488c1b123172c225d4d4235bdb3c76911d +README.zh.md: 46835a84254c4bbc45300a18d29aae5a6ac66f14 diff --git a/packages/host/apiproxy/README.md b/packages/host/apiproxy/README.md index 518a7e5640..b7dee9488c 100644 --- a/packages/host/apiproxy/README.md +++ b/packages/host/apiproxy/README.md @@ -42,7 +42,7 @@ Pending queued input is a live control-plane contract, not conversation history. Background jobs ride the same live-push posture. When `ctx.jobs` is composed, the gateway subscribes to its change feed and broadcasts a whole `session/jobs` snapshot after every registry commit that alters what a session can see — registration, the stopping transition, settlement, and owner-disposal removal — plus a subscription baseline for each session that already has tasks (an absent baseline is the empty set; a change that empties a set still sends `[]`). A change carrying an owner reads through that exact `Agent`, so a push stays correct while its scope tears down; the baseline reads `ctx.agents.get(sessionId)`, which yields only unowned tasks for a session with no live Agent and never resumes a cold one. An unowned change fans out to every subscribed session, because unowned tasks are visible to every caller. The wire `JobView` drops `ownerSession`, `reported`, and `outputLimitBytes`: the frame's own `sessionId` carries the first, and the other two are internal notice and model-presentation policy. A composition without the registry emits no such frames. -Workspace and Session lists are separate reconnect baselines. `workspace.create({ path })` adopts an existing canonical directory and permits basename-derived titles to repeat. `workspace.insertBefore({ workspaceId, beforeWorkspaceId? })` commits one registry-order move and answers the complete order; a pure reorder emits `host/workspace-order-changed` with that complete order, while unknown sources or anchors return `workspace-not-found`. `workspace.delete` removes only the Workspace registration, `session.create` accepts an optional preallocated Session id, and `host/workspace-changed`, `host/workspace-removed`, plus `host/session-added` carry committed increments in either arrival order. `workspace.archiveSession` adds one session to the registry-global archive set and answers the full updated set; `workspace.list` carries that set as the reconnect baseline and `host/archived-sessions-changed` pushes the full snapshot after every durable change. Archiving hides the session from grouping surfaces without touching its log or its workspace account; a session neither live nor persisted fails with `session-not-found`. Registration deletion preserves the directory and session logs; its Sessions remain in `session.list` and become Ungrouped. `SessionSummary.blank` and the `host/session-added` frame carry whether a turn has started: clients hide blank sessions and reuse them per workspace, flip blank on the first `host/session-status(running:true)`, and treat `session.list` as the reconnect authority. Attached summaries fold the live log. A cold summary trusts cached `blank: false`, but treats cached `true` and a cache miss as unverified; when `locate()` resolves an artifact no larger than `coldBlankProbeMaxBytes` (default 1 KiB), the gateway reads that Session with `readFrom()` and checks for `turn/start`. A larger, location-less, vanished, or unreadable artifact remains visible. `updatedAt` is the latest human `user/message` time from the live fold or projection cache, falling back to `createdAt`; pickup boundaries and other writes never promote a Session. +Workspace and Session lists are separate reconnect baselines. `workspace.create({ path })` adopts an existing canonical directory and permits basename-derived titles to repeat. `workspace.insertBefore({ workspaceId, beforeWorkspaceId? })` commits one registry-order move and answers the complete order; a pure reorder emits `host/workspace-order-changed` with that complete order, while unknown sources or anchors return `workspace-not-found`. `workspace.delete` removes only the Workspace registration, `session.create` accepts an optional preallocated Session id, and `host/workspace-changed`, `host/workspace-removed`, plus `host/session-added` carry committed increments in either arrival order. `workspace.archiveSession` adds one session to the registry-global archive set and answers the full updated set; `workspace.list` carries that set as the reconnect baseline and `host/archived-sessions-changed` pushes the full snapshot after every durable change. Archiving hides the session from grouping surfaces without touching its log or its workspace account; a session neither live nor persisted fails with `session-not-found`. Registration deletion preserves the directory and session logs; its Sessions remain in `session.list` and become Ungrouped. `SessionSummary.blank` and the `host/session-added` frame carry whether a turn has started: clients hide blank sessions and reuse them per workspace, flip blank on the first `host/session-status(running:true)`, and treat `session.list` as the reconnect authority. Attached summaries fold the live log. A cold summary trusts cached `blank: false`, but treats cached `true` and a cache miss as unverified; when `locate()` reports an artifact no larger than the `coldBlankProbeMaxBytes` eligibility threshold (default 1 KiB), the gateway reads that Session with `readFrom()` and folds both blankness and the latest human prompt. A larger, location-less, vanished, or unreadable artifact remains visible. After an asynchronous cold read, a Session that attached meanwhile is summarized from its live log instead. `updatedAt` uses the live fold, the exact small-artifact fold, or the projection cache in that order, falling back to `createdAt`; pickup boundaries and other writes never promote a Session. `session.search` is a bounded content-search projection over the sessions visible through `session.list`. The gateway asks the optional `ctx.sessionQuery` service for globally ranked current-surface user, assistant, and steering matches, consumes that stream until it has at most 20 visible session/snippet pairs plus one lookahead, and revalidates every hit against the list-derived authorization set before returning it. Provider pages start at 20 hits; when a first-page request rejects that limit, the gateway probes 10, 5, 2, then 1 and retains the learned size for continuation and stale-generation restarts. Returned snippets contain at most 240 Unicode code points, and the response schema independently enforces that bound at each client boundary. Keeping the authorization set in Host memory avoids SQLite's variable ceiling for large valid corpora without weakening visibility or ranking. @@ -80,4 +80,4 @@ None; this package neither assembles nor sends a provider request. - **No protocol version field** — client and host ship together; `host.describe` gains a version negotiation field only when an independently released client exists. - **Search failures include provider diagnostics** — the gateway is a single-user local service. A carrier that exposes it to multiple users must replace internal search details with a public-safe diagnostic. - **Linux native picker requires desktop tooling** — under the `native` capability, `host.pickDirectory` reports an actionable error when neither Zenity nor KDialog is installed; the browse backend is the composition-level fallback (see the [native backend README](../directory-picker-native/README.md)). -- **Cold-list hints degrade only toward visibility and older ordering** — a projection-cache miss or stale `lastPromptAt` falls back to `createdAt`, so a recently worked Session may sort too low until the next checkpoint. A blank artifact larger than `coldBlankProbeMaxBytes`, or one from a backend without `locate()`, remains visible because the gateway cannot verify the absence of `turn/start` within the read bound. The [bounded blank-verification decision](../../../.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md) owns this safety direction; an authoritative exact recency index remains scoped in the [last-activity-index proposal](../../../.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md). +- **Cold-list hints degrade only toward visibility and older ordering** — a projection-cache miss or stale `lastPromptAt` falls back to `createdAt` unless an eligible small artifact supplies an exact fold, so a recently worked large Session may sort too low until the next checkpoint. A blank artifact larger than `coldBlankProbeMaxBytes`, or one from a backend without `locate()`, remains visible. The threshold is checked before `readFrom()` rather than enforced by persistence, so concurrent artifact growth may increase one probe's read cost without changing blankness safety. The [bounded blank-verification decision](../../../.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md) owns this safety direction; an authoritative exact recency index remains scoped in the [last-activity-index proposal](../../../.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md). diff --git a/packages/host/apiproxy/README.zh.md b/packages/host/apiproxy/README.zh.md index 5692e9441d..46835a8425 100644 --- a/packages/host/apiproxy/README.zh.md +++ b/packages/host/apiproxy/README.zh.md @@ -42,7 +42,7 @@ Settings 分节中的 `reasoningEffort` 在 agent-default-model 插件配置中 后台任务沿用同一种实时推送姿态。当组合中有 `ctx.jobs` 时，网关订阅它的变更订阅，并在注册表每一次改变某个会话可见内容的提交后——注册、转入 stopping、结算，以及 owner 销毁时的移除——广播一份完整的 `session/jobs` 快照，另外为每个已经有任务的会话发送订阅 baseline（没有 baseline 即表示空集；把集合清空的那次变更仍然发送 `[]`）。带 owner 的变更通过那个确切的 `Agent` 读取，因此推送在其 scope 拆除期间依然正确；baseline 读 `ctx.agents.get(sessionId)`，对没有活体 Agent 的会话只得到无主任务，且绝不恢复冷会话。无主变更向每一个已订阅会话扇出，因为无主任务对所有调用方可见。线路上的 `JobView` 丢弃 `ownerSession`、`reported` 和 `outputLimitBytes`：第一个由帧自身的 `sessionId` 携带，另外两个分别是内部通知位和模型呈现策略。没有该注册表的组合不发出这类帧。 -Workspace 列表与 Session 列表是相互独立的重连基线。`workspace.create({ path })` 会接纳已有的规范目录，并允许由 basename 派生的标题重复。`workspace.insertBefore({ workspaceId, beforeWorkspaceId? })` 提交一次注册表顺序移动并应答完整顺序；单纯重排序会通过 `host/workspace-order-changed` 推送同一份完整顺序，而未知来源或锚点返回 `workspace-not-found`。`workspace.delete` 只移除 Workspace 注册记录，`session.create` 接受可选的预分配 Session id，`host/workspace-changed`、`host/workspace-removed` 与 `host/session-added` 则以任意到达顺序携带已提交的增量。`workspace.archiveSession` 向注册表级全局归档集合添加一个会话，并应答完整的更新后集合；`workspace.list` 携带该集合作为重连基线，`host/archived-sessions-changed` 在每次持久变更后推送完整快照。归档只把会话从各分组视图中隐藏，不触碰其日志和 workspace 记账；既非活动会话也未持久化的会话以 `session-not-found` 失败。删除注册记录会保留目录和会话日志；相关 Session 仍留在 `session.list` 中，并进入 Ungrouped。`SessionSummary.blank` 与 `host/session-added` 帧携带是否已开始过轮次：客户端隐藏空白会话并按 workspace 复用它们，在首个 `host/session-status(running:true)` 时翻转 blank，并以 `session.list` 作为重连权威。已附加摘要折叠实时日志。冷摘要信任缓存的 `blank: false`，但把缓存的 `true` 与 cache miss 都视为未经验证；当 `locate()` 解析出的工件不大于 `coldBlankProbeMaxBytes`（默认 1 KiB）时，网关通过 `readFrom()` 读取该 Session 并检查 `turn/start`。更大、无位置、已消失或不可读的工件保持可见。`updatedAt` 取实时折叠或投影缓存中的最新真人 `user/message` 时间，缺失时回退到 `createdAt`；拾起边界及其他写入都不会提升 Session 排序。 +Workspace 列表与 Session 列表是相互独立的重连基线。`workspace.create({ path })` 会接纳已有的规范目录，并允许由 basename 派生的标题重复。`workspace.insertBefore({ workspaceId, beforeWorkspaceId? })` 提交一次注册表顺序移动并应答完整顺序；单纯重排序会通过 `host/workspace-order-changed` 推送同一份完整顺序，而未知来源或锚点返回 `workspace-not-found`。`workspace.delete` 只移除 Workspace 注册记录，`session.create` 接受可选的预分配 Session id，`host/workspace-changed`、`host/workspace-removed` 与 `host/session-added` 则以任意到达顺序携带已提交的增量。`workspace.archiveSession` 向注册表级全局归档集合添加一个会话，并应答完整的更新后集合；`workspace.list` 携带该集合作为重连基线，`host/archived-sessions-changed` 在每次持久变更后推送完整快照。归档只把会话从各分组视图中隐藏，不触碰其日志和 workspace 记账；既非活动会话也未持久化的会话以 `session-not-found` 失败。删除注册记录会保留目录和会话日志；相关 Session 仍留在 `session.list` 中，并进入 Ungrouped。`SessionSummary.blank` 与 `host/session-added` 帧携带是否已开始过轮次：客户端隐藏空白会话并按 workspace 复用它们，在首个 `host/session-status(running:true)` 时翻转 blank，并以 `session.list` 作为重连权威。已附加摘要折叠实时日志。冷摘要信任缓存的 `blank: false`，但把缓存的 `true` 与 cache miss 都视为未经验证；当 `locate()` 报告的工件不大于 `coldBlankProbeMaxBytes` 资格阈值（默认 1 KiB）时，网关通过 `readFrom()` 读取该 Session，同时折叠空白状态与最新真人 prompt。更大、无位置、已消失或不可读的工件保持可见。异步冷读取结束后，期间已附加的 Session 会改用实时日志生成摘要。`updatedAt` 依次采用实时折叠、小工件精确折叠或 projection cache，缺失时回退到 `createdAt`；拾起边界及其他写入都不会提升 Session 排序。 `session.search` 是以 `session.list` 所列会话为范围的有界内容搜索投影。网关向可选的 `ctx.sessionQuery` 服务请求全局排序后的当前内容视图中的 user、assistant 和 steering 匹配项，并持续消费该结果流，直到获得至多 20 个可见会话／snippet 对及一个前瞻项；返回前仍会依据从列表推导的授权集合重新校验每个命中。提供方分页初始请求 20 个命中；如果第一页请求因这一上限被拒绝，网关会依次探测 10、5、2、1，并在续传和陈旧世代重启中沿用探测所得的页面大小。返回的 snippet 最多包含 240 个 Unicode 码点，响应 schema 则会在每个客户端边界独立强制执行该上限。将授权集合保留在宿主内存中，可在不削弱可见性或排序的前提下避开有效大型语料库的 SQLite 变量上限。 @@ -80,4 +80,4 @@ Workspace 列表与 Session 列表是相互独立的重连基线。`workspace.cr - **没有协议版本字段**：客户端与宿主一同发布；只有出现独立发布的客户端后，`host.describe` 才会增加版本协商字段。 - **搜索失败会包含提供方诊断信息**：网关是单用户本地服务。将其暴露给多名用户的载体必须用可安全公开的诊断信息替代内部搜索细节。 - **Linux 原生选择器依赖桌面工具**：在 `native` 能力下，Zenity 和 KDialog 均未安装时，`host.pickDirectory` 会给出包含解决建议的错误提示；组合层面的回退是 browse 后端（见 [native 后端 README](../directory-picker-native/README.md)）。 -- **冷列表提示只向“保持可见、排序偏旧”降级**：projection cache miss 或陈旧的 `lastPromptAt` 会回退到 `createdAt`，因此最近工作过的 Session 可能在下一个 checkpoint 前排得偏低。大于 `coldBlankProbeMaxBytes` 的空白工件，或来自不提供 `locate()` 的后端的空白工件会保持可见，因为网关无法在读取上限内验证其中不存在 `turn/start`。[有界空白验证决策](../../../.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md)规定了这个安全方向；权威且精确的最近时间索引仍属于[最后活动索引提案](../../../.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md)的范围。 +- **冷列表提示只向“保持可见、排序偏旧”降级**：projection cache miss 或陈旧的 `lastPromptAt` 会回退到 `createdAt`，除非符合资格的小工件提供精确折叠，因此最近工作过的大 Session 可能在下一个 checkpoint 前排得偏低。大于 `coldBlankProbeMaxBytes` 的空白工件，或来自不提供 `locate()` 的后端的空白工件会保持可见。该阈值在 `readFrom()` 前检查，而非由 persistence 强制，因此工件并发增长可能增加一次探测的读取成本，但不会改变空白状态的安全方向。[有界空白验证决策](../../../.agents/notes/implemented/bug-fix/2026-08-13-bounded-cold-blank-verification.md)规定了这个安全方向；权威且精确的最近时间索引仍属于[最后活动索引提案](../../../.agents/notes/proposed/architecture/2026-07-29-durable-last-activity-index.md)的范围。 diff --git a/packages/host/apiproxy/src/api-proxy.ts b/packages/host/apiproxy/src/api-proxy.ts index fc986583a0..bda99362b6 100644 --- a/packages/host/apiproxy/src/api-proxy.ts +++ b/packages/host/apiproxy/src/api-proxy.ts @@ -563,40 +563,40 @@ function summarize(session: Session, running: boolean): SessionSummary { } /** - * Verify a possibly blank cold Session only when its physical artifact is - * within the configured per-Session read bound. A stale `blank: true`, an + * Verify a possibly blank cold Session only when its physical artifact passes + * the configured per-Session size check. A stale `blank: true`, an * absent cache row, a large or location-less artifact, and read failures all * resolve to visible (`false`); listing must never hide a conversation on a * cache hint or an unavailable optimization. */ -async function probeColdSessionBlank( +async function probeColdSessionMetadata( ctx: Context, persistence: SessionPersistence, meta: SessionHeader, maxBytes: number, signal?: AbortSignal, -): Promise { - if (maxBytes === 0) return false +): Promise { + if (maxBytes === 0) return undefined signal?.throwIfAborted() const location = persistence.locate(meta) - if (location === undefined) return false + if (location === undefined) return undefined signal?.throwIfAborted() let size: number try { size = (await stat(location.path)).size } catch { signal?.throwIfAborted() - return false + return undefined } - if (size > maxBytes) return false + if (size > maxBytes) return undefined try { const { events } = await persistence.readFrom(meta.id, 0, signal) signal?.throwIfAborted() - return !events.some(event => event.type === 'turn/start') + return sessionListMetadata(events) } catch (error) { signal?.throwIfAborted() ctx.logger.warn(`session.list: blank probe for "${meta.id}" failed (serving it as visible): ${String(error)}`) - return false + return undefined } } @@ -609,14 +609,14 @@ async function summarizeCold( blankProbeMaxBytes: number, signal?: AbortSignal, ): Promise { - const blank = metadata?.blank === false - ? false - : await probeColdSessionBlank(ctx, persistence, meta, blankProbeMaxBytes, signal) + const probed = metadata?.blank === false + ? undefined + : await probeColdSessionMetadata(ctx, persistence, meta, blankProbeMaxBytes, signal) return { sessionId: meta.id, - updatedAt: sessionListUpdatedAt(meta, metadata), + updatedAt: sessionListUpdatedAt(meta, probed ?? metadata), running: false, - blank, + blank: metadata?.blank === false ? false : probed?.blank ?? false, // Header-only: reading the log for a blank-window preset switch would // defeat the same index read, and attaching the session replaces this row // with `summarize()`, which resolves the switch from the events. @@ -1724,14 +1724,15 @@ export function createApiProxy(ctx: Context, defaults: ApiProxyDefaults): ApiPro */ async function listVisibleSessionSummaries(signal?: AbortSignal): Promise { signal?.throwIfAborted() - const items = ctx.sessions.list().map((session) => { + const summarizeAttached = (session: Session): SessionSummary => { const agent = ctx.agents.get(session.id) const projections = listProjectionsFor(ctx, session.header, session) return { ...summarize(session, agent?.status === 'running'), ...projections === undefined ? {} : { projections }, } - }) + } + const items = ctx.sessions.list().map(summarizeAttached) signal?.throwIfAborted() const attached = new Set(items.map(item => item.sessionId)) const persistence = ctx.get('sessionPersistence') @@ -1745,17 +1746,20 @@ export function createApiProxy(ctx: Context, defaults: ApiProxyDefaults): ApiPro const settled = await Promise.allSettled( batch.map(async (meta) => { // Projection hints remain optional. Blank verification may read - // this Session's artifact only when it fits the configured bound. + // this Session's artifact only when it passes the configured size check. const projections = listProjectionsFor(ctx, meta, undefined) + const summary = await summarizeCold( + ctx, + persistence, + meta, + projections?.values.sessionListMetadata, + coldBlankProbeMaxBytes, + signal, + ) + const attachedSession = ctx.sessions.get(meta.id) + if (attachedSession !== undefined) return summarizeAttached(attachedSession) return { - ...await summarizeCold( - ctx, - persistence, - meta, - projections?.values.sessionListMetadata, - coldBlankProbeMaxBytes, - signal, - ), + ...summary, ...projections === undefined ? {} : { projections }, } }), diff --git a/packages/host/apiproxy/src/api/sessions.ts b/packages/host/apiproxy/src/api/sessions.ts index c834718cf0..2e7c9b22f4 100644 --- a/packages/host/apiproxy/src/api/sessions.ts +++ b/packages/host/apiproxy/src/api/sessions.ts @@ -173,25 +173,25 @@ export type QueueAction = | { kind: 'remove' } | { kind: 'steer' } -/** Session list entry (v1 builds no index: list does readdir+stat). */ +/** One Session list entry. */ export interface SessionSummary { sessionId: SessionId /** - * Last activity. Attached: the last non-`session/end-seed` event, since a - * pickup is not activity. Cold: the log's mtime, or `createdAt` for a backend - * with no per-session file (README Known Limitations covers the skew). + * The later of creation and the latest human-authored prompt. Attached + * Sessions fold their live log; cold Sessions use a projection-cache hint or + * an exact small-artifact read, falling back to creation time. */ updatedAt: number /** Status of the attached agent; always false for cold (unattached) sessions. */ running: boolean /** - * Derived conversation-not-started bit: true while no turn has run (no - * prompt was accepted yet). Standalone plugin events — command lifecycle + * Derived conversation-not-started bit: true while no turn has run. + * Standalone plugin events — command lifecycle * records, plan/mode, titles, goals — do not open a turn and therefore do - * not clear it. Clients hide blank sessions from lists and reuse them for - * New Session on the same workspace. Always false for cold sessions — - * lazy persistence keeps a never-appended session out of the store, and a - * listed cold session's log holds its turns. + * not clear it. Clients hide blank Sessions from lists and reuse them for + * New Session on the same workspace. A cold Session is true only when a + * small-artifact read verifies that no `turn/start` exists; unavailable + * or oversized artifacts conservatively report false. */ blank: boolean /** fork/spawn lineage (session.header.parentSession passthrough); absent for root sessions. */ diff --git a/packages/host/apiproxy/tests/api-proxy-cold.spec.ts b/packages/host/apiproxy/tests/api-proxy-cold.spec.ts index 20a891d420..ef642082ac 100644 --- a/packages/host/apiproxy/tests/api-proxy-cold.spec.ts +++ b/packages/host/apiproxy/tests/api-proxy-cold.spec.ts @@ -67,7 +67,14 @@ describe('sessions.list cold merge', () => { if (id === sid('small-conversation')) { return { meta: metas[1]!, - events: [{ type: 'turn/start', seq: 0, time: 800, data: { turn: 1 } }] as SessionEvent[], + events: [ + { type: 'turn/start', seq: 0, time: 800, data: { turn: 1 } }, + { + type: 'user/message', seq: 1, time: 1200, + data: createUserMessage({ content: [{ type: 'text', text: 'worked' }], source: { kind: 'user' } }), + surfaceOp: 'append', + }, + ] as SessionEvent[], } } if (id === sid('read-failure')) throw new Error('simulated read failure') @@ -105,7 +112,7 @@ describe('sessions.list cold merge', () => { const byId = Object.fromEntries(response.result.value.items.map(item => [item.sessionId, item])) expect(byId['small-blank']).toMatchObject({ blank: true, updatedAt: 100, running: false }) // A stale true hint cannot hide the turn found in the bounded read. - expect(byId['small-conversation']).toMatchObject({ blank: false, updatedAt: 900 }) + expect(byId['small-conversation']).toMatchObject({ blank: false, updatedAt: 1200 }) expect(byId['large-unknown']).toMatchObject({ blank: false, updatedAt: 300 }) // false is monotonic, so this row skips stat/read and keeps cached recency. expect(byId['cached-nonblank']).toMatchObject({ blank: false, updatedAt: 1000 }) @@ -149,6 +156,62 @@ describe('sessions.list cold merge', () => { ]) expect(readFrom).not.toHaveBeenCalled() }) + + it('replaces a probed cold row with the live Session that attached during the read', async () => { + const ctx = new Context() + await ctx.plugin(SessionStore) + await ctx.plugin(UserQuestionService) + await ctx.plugin(AgentRegistry) + const meta = header('attached-during-probe', 100) + const root = mkdtempSync(join(tmpdir(), 'dsh-cold-race-')) + const path = join(root, 'small.log') + writeFileSync(path, 'x') + const started = Promise.withResolvers() + const release = Promise.withResolvers() + ctx.provide('sessionPersistence', { + list: () => Promise.resolve([meta]), + locate: () => ({ kind: 'jsonl', path }), + readFrom: async () => { + started.resolve(undefined) + await release.promise + return { + meta, + events: [{ type: 'session/end-seed', seq: 0, time: 110, data: {} }] as SessionEvent[], + } + }, + } as never) + const api = createApiProxy(ctx, { defaultModelSelection: () => ({ provider: 'p', model: 'm' }), cwd: '/tmp' }) + + const listing = api.sessions.list(request({})) + await started.promise + const session = ctx.sessions.create(meta.id, { + seed: [ + { type: 'turn/start', seq: 0, time: 200, data: { turn: 1 } }, + { + type: 'user/message', seq: 1, time: 300, + data: createUserMessage({ content: [{ type: 'text', text: 'live' }], source: { kind: 'user' } }), + surfaceOp: 'append', + }, + ], + meta: { + ...meta.cwd === undefined ? {} : { cwd: meta.cwd }, + createdAt: meta.createdAt, + }, + }) + ctx.agents.register({ id: session.id, session, status: 'running', ctx } as Agent) + release.resolve(undefined) + + const response = await listing + if (!response.result.ok) throw new Error('list failed') + expect(response.result.value.items).toEqual([ + expect.objectContaining({ + sessionId: meta.id, + blank: false, + running: true, + updatedAt: 300, + }), + ]) + }) }) describe('attached updatedAt tracks human prompts', () => { From a37e19471e93e36a79685fedace840ea4763f40a Mon Sep 17 00:00:00 2001 From: Ag Date: Thu, 13 Aug 2026 15:14:36 +0800 Subject: [PATCH 23/41] docs: refine localized community links --- README.i18n.yaml | 4 ++-- README.md | 3 +-- README.zh.md | 7 ++++--- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/README.i18n.yaml b/README.i18n.yaml index ee4bfdf7f1..727a781767 100644 --- a/README.i18n.yaml +++ b/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write README.md -README.md: b1d84d6ebd20843f6c2e3b7ccd22cccb2df0d104 -README.zh.md: a3960d3d342d005230f8a40e5c43d4bac882cb7a +README.md: 098b514f8311de092bab18bdd560722b1e485913 +README.zh.md: f9dacc4e3cce1c83bfa65df9fbc8d6410a37fcc0 diff --git a/README.md b/README.md index b1d84d6ebd..098b514f83 100644 --- a/README.md +++ b/README.md @@ -38,8 +38,7 @@ pnpm dsh web - Feel free to submit feedback or bug reports through [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions). - Add the [`dsh-plugin`](https://github.com/topics/dsh-plugin) topic to your plugin repository for discoverability. - -

Join DeepSeek Harness Discord community.

+- Join DeepSeek Harness Discord community. ## Contributing diff --git a/README.zh.md b/README.zh.md index a3960d3d34..f9dacc4e3c 100644 --- a/README.zh.md +++ b/README.zh.md @@ -38,6 +38,7 @@ pnpm dsh web - 欢迎通过 [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions) 提交反馈或 bug 报告。 - 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 主题，便于被发现。 +- 欢迎加入 DeepSeek Harness 企微群：扫码添加企微小助手并填写入群问卷，完成后小助手会邀请你入群。 @@ -49,9 +50,9 @@ pnpm dsh web - - - + + +
DeepSeek Harness 企微小助手二维码DeepSeek Harness 入群问卷二维码DeepSeek Harness 团队微信公众号二维码DeepSeek Harness 企微小助手二维码DeepSeek Harness 入群问卷二维码DeepSeek Harness 团队微信公众号二维码
From 4ed036da1c2d69052c7b60c9c56e5f72b08c1382 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 01:11:46 +0800 Subject: [PATCH 24/41] fix: Windows-native CI findings on latest master Local run of check:ci:windows-complete (the windows-native gate) on latest master surfaced five Windows-only failures, all unreachable by current CI because the native windows job is disabled and the wine gate only covers build+site. - install-lefthook/translation-pairing-merge specs junctioned the real scripts/ and tsx package into fixtures; Windows recursive deletion (Node rmSync and git worktree remove) follows MOUNT_POINT junctions and deleted the repository's own directories mid-run. Fixtures now unlink their reparse points before any recursive removal (shared helper in scripts/test-fixture-cleanup.ts). - workflow-workerthread spawned its worker with an empty env; on Windows os.tmpdir() then degrades to the literal relative path undefined\temp, so tsx wrote its transform cache into a cwd-relative undefined/ directory inside the repo. The worker env now injects the host temp path on win32 (workerSpawnEnv, platform-parameterized and unit-tested on both arms). - workspace-context spec did not stub USERPROFILE (win32 homedir) or a set DSH_HOME, leaking the developer machine's real ~/.dsh/AGENTS.md into discovery. - ui-trajectory client-bundle spec mounted the built artifact without the remote/settingsScope provides the locale plugin needs, so the plugin never activated and no view registered. - subagent temp-fixture cleanup lacked the maxRetries Windows handle release needs under load (EPERM); added retries to the three affected specs and the fixture-cleanup helper. --- .../tests/agent-instructions.spec.ts | 9 +++- .../subagent/tests/continuation.spec.ts | 2 +- .../subagent/tests/list-children.spec.ts | 2 +- .../tests/tool-subagent-control.spec.ts | 2 +- .../workflow-worker-thread/src/host.ts | 33 +++++++++++-- .../tests/workflow-worker-thread.spec.ts | 42 ++++++++++++++--- scripts/install-lefthook.spec.ts | 7 ++- scripts/test-fixture-cleanup.ts | 46 +++++++++++++++++++ scripts/translation-pairing-merge.spec.ts | 12 ++++- 9 files changed, 137 insertions(+), 18 deletions(-) create mode 100644 scripts/test-fixture-cleanup.ts diff --git a/packages/context/agent-instructions/tests/agent-instructions.spec.ts b/packages/context/agent-instructions/tests/agent-instructions.spec.ts index 71bd149413..409e4f8afb 100644 --- a/packages/context/agent-instructions/tests/agent-instructions.spec.ts +++ b/packages/context/agent-instructions/tests/agent-instructions.spec.ts @@ -578,10 +578,12 @@ describe('workspace context instruction discovery', () => { const root = await tempRepo() const emptyHome = await tempRepo() // Isolate the default-home fallback: blank DSH_HOME is treated as unset, and - // HOME points at an empty dir so the default ~/.dsh holds no global scope. - // Symlinks are followed, so a real ~/.dsh/AGENTS.md would otherwise leak in. + // the home dirs point at an empty dir so the default ~/.dsh holds no global + // scope. Windows homedir() reads USERPROFILE (not HOME), so both must be + // stubbed or a real ~/.dsh/AGENTS.md would otherwise leak in. vi.stubEnv('DSH_HOME', '') vi.stubEnv('HOME', emptyHome) + if (process.platform === 'win32') vi.stubEnv('USERPROFILE', emptyHome) try { const cwd = join(root, 'child') await mkdir(cwd, { recursive: true }) @@ -622,6 +624,8 @@ describe('workspace context instruction discovery', () => { try { await write(join(home, '.dsh/AGENTS.md'), 'global default rule') + // A set DSH_HOME would override the homedir default and relabel the home. + vi.stubEnv('DSH_HOME', '') vi.resetModules() vi.doMock('node:os', () => ({ homedir: () => home })) const isolated = await import('@deepseek-ai/dsh-agent-instructions') @@ -629,6 +633,7 @@ describe('workspace context instruction discovery', () => { expect(files.map(file => file.displayPath)).toEqual(['~/.dsh/AGENTS.md']) } finally { + vi.unstubAllEnvs() vi.doUnmock('node:os') vi.resetModules() await rm(root, { recursive: true, force: true }) diff --git a/packages/subagent/subagent/tests/continuation.spec.ts b/packages/subagent/subagent/tests/continuation.spec.ts index 7ff021ee33..07f497628d 100644 --- a/packages/subagent/subagent/tests/continuation.spec.ts +++ b/packages/subagent/subagent/tests/continuation.spec.ts @@ -53,7 +53,7 @@ class GatedAdapter extends LlmAdapter { const roots: string[] = [] afterEach(() => { - for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true }) + for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }) }) /** Boot the full continuable stack: loop, persistence, providers, and subagents. */ diff --git a/packages/subagent/subagent/tests/list-children.spec.ts b/packages/subagent/subagent/tests/list-children.spec.ts index 80b596acc1..3fd303e7f6 100644 --- a/packages/subagent/subagent/tests/list-children.spec.ts +++ b/packages/subagent/subagent/tests/list-children.spec.ts @@ -28,7 +28,7 @@ type Script = ConstructorParameters[0] const roots: string[] = [] afterEach(() => { - for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true }) + for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }) }) /** Boot the continuable stack with real JSONL session persistence. */ diff --git a/packages/subagent/tool-subagent-control/tests/tool-subagent-control.spec.ts b/packages/subagent/tool-subagent-control/tests/tool-subagent-control.spec.ts index 1721758409..0636254841 100644 --- a/packages/subagent/tool-subagent-control/tests/tool-subagent-control.spec.ts +++ b/packages/subagent/tool-subagent-control/tests/tool-subagent-control.spec.ts @@ -47,7 +47,7 @@ const testToolSignal = new AbortController().signal const roots: string[] = [] afterEach(() => { - for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true }) + for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }) }) async function setupWith(adapter: MockAdapter | GatedAdapter) { diff --git a/packages/workflow/workflow-worker-thread/src/host.ts b/packages/workflow/workflow-worker-thread/src/host.ts index 209749bb38..9e0c3a514a 100644 --- a/packages/workflow/workflow-worker-thread/src/host.ts +++ b/packages/workflow/workflow-worker-thread/src/host.ts @@ -6,6 +6,7 @@ * @module @deepseek-ai/dsh-workflow-worker-thread/host */ +import { tmpdir } from 'node:os' import { Worker } from 'node:worker_threads' import type { WorkerOptions } from 'node:worker_threads' import { fileURLToPath } from 'node:url' @@ -28,18 +29,42 @@ interface ChildRecord { disposal?: Promise } +/** + * The scrubbed worker environment: no ambient credentials, no loader flags. + * Windows derives `os.tmpdir()` from `TMP`/`TEMP` and falls back to the + * literal relative path `undefined\temp` when the environment is empty, so + * tsx's transform cache would land in a cwd-relative `undefined/temp` + * directory; the host's real temp path (not a credential) is injected there. + * The unbuilt shape additionally forwards `TSX_TSCONFIG_PATH` for path + * resolution. + * @param platform - host platform; overridable so tests exercise both peer arms. + * @returns the scrubbed worker environment object. + */ +export function workerSpawnEnv(platform: NodeJS.Platform = process.platform): NodeJS.ProcessEnv { + const env: NodeJS.ProcessEnv = {} + if (platform === 'win32') { + const tmp = tmpdir() + env.TMP = tmp + env.TEMP = tmp + } + if (process.env.TSX_TSCONFIG_PATH !== undefined) { + env.TSX_TSCONFIG_PATH = process.env.TSX_TSCONFIG_PATH + } + return env +} + /** * Resolve a built worker bundle or an unbuilt bootstrap that installs both tsx * transforms inside the worker. Both shapes clear `execArgv` and the ambient - * environment; the unbuilt shape forwards only `TSX_TSCONFIG_PATH` for path - * resolution. + * environment (the worker only sees the platform temp path and, unbuilt, + * `TSX_TSCONFIG_PATH`). * @param init - the run payload, passed as `workerData`. * @returns the entry path or URL and the Worker options to spawn it with. */ function resolveWorkerSpawn(init: WorkerInit): { entry: string | URL; options: WorkerOptions } { /* v8 ignore next 3 -- the built-output arm: tests always run unbuilt (src/); the built-worker e2e exercises this shape for real */ if (!import.meta.url.endsWith('.ts')) { - return { entry: fileURLToPath(new URL('./worker.cjs', import.meta.url)), options: { workerData: init, env: {}, execArgv: [] } } + return { entry: fileURLToPath(new URL('./worker.cjs', import.meta.url)), options: { workerData: init, env: workerSpawnEnv(), execArgv: [] } } } // Resolve tsx only for unbuilt consumers and install it before importing TS. const workerEntry = new URL('./worker.ts', import.meta.url) @@ -56,7 +81,7 @@ function resolveWorkerSpawn(init: WorkerInit): { entry: string | URL; options: W entry: new URL(`data:text/javascript,${encodeURIComponent(bootstrap)}`), options: { workerData: init, - env: process.env.TSX_TSCONFIG_PATH === undefined ? {} : { TSX_TSCONFIG_PATH: process.env.TSX_TSCONFIG_PATH }, + env: workerSpawnEnv(), execArgv: [], }, } diff --git a/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts b/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts index ced9a632f4..275c92269e 100644 --- a/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts +++ b/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts @@ -1,4 +1,5 @@ import { describe, expect, it, vi } from 'vitest' +import { tmpdir } from 'node:os' import { fileURLToPath } from 'node:url' import type { Worker } from 'node:worker_threads' import { Context } from '@deepseek-ai/cordis' @@ -9,6 +10,7 @@ import type { SubagentCapabilities, SubagentProvider, SubagentResult, SubagentRu import type { WorkflowMeta, WorkflowResult, WorkflowResultInfo, WorkflowRun, WorkflowRunInfo } from '@deepseek-ai/dsh-workflow' import * as workerEngineModule from '../src/index.ts' import WorkerThreadWorkflowEngine, { type Config } from '../src/index.ts' +import { workerSpawnEnv } from '../src/host.ts' import { HostToWorkerType, WorkerToHostType } from '../src/protocol.ts' import { SessionId } from '@deepseek-ai/dsh-session' @@ -559,24 +561,49 @@ describe('dsh-workflow-worker-thread', () => { expect(result.value).toBe('fine') }) - it('the worker spawns with an EMPTY environment: an escaped script finds no ambient credentials', async () => { + it('the worker spawns with a scrubbed environment: an escaped script finds no ambient credentials', async () => { const { ctx, parent } = await setup() // A canary in the HARNESS process's env: with an inherited environment // the escape below would read it back (exactly how DEEPSEEK_API_KEY - // would leak); env: {} in the spawn options is what keeps it out. + // would leak); the worker env keeps every ambient variable out. Windows + // additionally receives the host temp path (TMP/TEMP) so `os.tmpdir()` + // inside the worker resolves instead of degrading to a cwd-relative + // `undefined\temp` (tsx writes its transform cache there). process.env.WORKFLOW_ENV_CANARY = 'leak me' try { const result = await run(ctx, parent, scripted(` const proc = ${ESCAPE} - return { canary: proc.env.WORKFLOW_ENV_CANARY ?? null, keys: Object.keys(proc.env).length } + return { canary: proc.env.WORKFLOW_ENV_CANARY ?? null, keys: Object.keys(proc.env).sort() } `)) expect(result.stopReason).toBe('completed') - expect(result.value).toEqual({ canary: null, keys: 0 }) + const expectedKeys = process.platform === 'win32' ? ['TEMP', 'TMP'] : [] + expect(result.value).toEqual({ canary: null, keys: expectedKeys }) } finally { delete process.env.WORKFLOW_ENV_CANARY } }) + it('workerSpawnEnv injects the host temp path on win32 and leaves the POSIX peer empty', () => { + const tmp = tmpdir() + expect(workerSpawnEnv('win32')).toEqual({ TMP: tmp, TEMP: tmp }) + expect(workerSpawnEnv('linux')).toEqual({}) + }) + + it('workerSpawnEnv forwards TSX_TSCONFIG_PATH when the snapshot harness pins it', () => { + const tsconfig = fileURLToPath(new URL('../../../../tsconfig.json', import.meta.url)) + vi.stubEnv('TSX_TSCONFIG_PATH', tsconfig) + try { + expect(workerSpawnEnv('linux')).toEqual({ TSX_TSCONFIG_PATH: tsconfig }) + expect(workerSpawnEnv('win32')).toEqual({ + TMP: tmpdir(), + TEMP: tmpdir(), + TSX_TSCONFIG_PATH: tsconfig, + }) + } finally { + vi.unstubAllEnvs() + } + }) + it('the unbuilt worker forwards exactly TSX_TSCONFIG_PATH through the scrub: the paths-map pin survives, secrets do not', async () => { const { ctx, parent } = await setup() // The ACP snapshot harness runs the parent with its cwd OUTSIDE the @@ -589,10 +616,13 @@ describe('dsh-workflow-worker-thread', () => { try { const result = await run(ctx, parent, scripted(` const proc = ${ESCAPE} - return { keys: Object.keys(proc.env), tsconfig: proc.env.TSX_TSCONFIG_PATH } + return { keys: Object.keys(proc.env).sort(), tsconfig: proc.env.TSX_TSCONFIG_PATH } `)) expect(result.stopReason).toBe('completed') - expect(result.value).toEqual({ keys: ['TSX_TSCONFIG_PATH'], tsconfig }) + const expectedKeys = process.platform === 'win32' + ? ['TEMP', 'TMP', 'TSX_TSCONFIG_PATH'] + : ['TSX_TSCONFIG_PATH'] + expect(result.value).toEqual({ keys: expectedKeys, tsconfig }) } finally { delete process.env.TSX_TSCONFIG_PATH delete process.env.WORKFLOW_ENV_CANARY diff --git a/scripts/install-lefthook.spec.ts b/scripts/install-lefthook.spec.ts index 2c429bba25..c5a92a675e 100644 --- a/scripts/install-lefthook.spec.ts +++ b/scripts/install-lefthook.spec.ts @@ -16,6 +16,7 @@ import { tmpdir } from 'node:os' import { dirname, isAbsolute, join, resolve } from 'node:path' import { fileURLToPath } from 'node:url' import { afterEach, describe, expect, it } from 'vitest' +import { removeFixtureSafely, unlinkFixtureLinks } from './test-fixture-cleanup.ts' const installer = fileURLToPath(new URL('./install-lefthook.mjs', import.meta.url)) const pairingMergeDriver = 'scripts/merge-translation-pairing-driver.sh %O %A %B %P' @@ -40,7 +41,7 @@ interface CommandResult { } afterEach(() => { - for (const fixture of fixtures.splice(0)) rmSync(fixture, { recursive: true, force: true }) + for (const fixture of fixtures.splice(0)) removeFixtureSafely(fixture) }) function commandResult(command: string, args: string[], cwd: string, env: NodeJS.ProcessEnv): CommandResult { @@ -282,6 +283,10 @@ describe('worktree-local Lefthook installer', { timeout: 15_000 }, () => { expect(gitResult(fixture, fixture.main, ['config', '--file', commonConfig, '--get', 'core.bare']).status).toBe(1) const mainHookBeforeRemoval = readFileSync(join(mainHooks, 'pre-commit'), 'utf8') + // Windows Git follows the fixture's MOUNT_POINT junctions into their real + // targets while removing a worktree; unlink them first so the removal + // cannot delete the repository's scripts/ or tsx package. + unlinkFixtureLinks(fixture.linked) git(fixture, fixture.main, ['worktree', 'remove', '--force', fixture.linked]) expect(readFileSync(join(mainHooks, 'pre-commit'), 'utf8')).toBe(mainHookBeforeRemoval) expect(readFileSync(legacyHook, 'utf8')).toBe('#!/bin/sh\n# legacy hook\n') diff --git a/scripts/test-fixture-cleanup.ts b/scripts/test-fixture-cleanup.ts new file mode 100644 index 0000000000..9c58eea890 --- /dev/null +++ b/scripts/test-fixture-cleanup.ts @@ -0,0 +1,46 @@ +/** + * Junction-safe fixture cleanup for Windows. Test fixtures junction the REAL + * `scripts/`, `node_modules`, and tsx package directories so installer probes + * resolve through them; Windows recursive deletion — both Node's `rmSync` and + * Git's `worktree remove` — follows MOUNT_POINT junctions into their targets + * and would delete the repository's own directories. POSIX `unlink`/`rm` + * already remove symlinks without following them, so the walk is a no-op + * there. + */ + +import { lstatSync, readdirSync, rmSync, unlinkSync } from 'node:fs' +import { join } from 'node:path' + +/** + * Recursively unlink every symbolic link (junction) under `path`. + * @param path - the fixture tree whose reparse points are unlinked. + */ +export function unlinkFixtureLinks(path: string): void { + const visit = (entry: string): void => { + let stat: ReturnType + try { + stat = lstatSync(entry) + } catch (error) { + if ((error as NodeJS.ErrnoException).code === 'ENOENT') return + throw error + } + if (stat.isSymbolicLink() || !stat.isDirectory()) { + if (stat.isSymbolicLink()) unlinkSync(entry) + return + } + for (const child of readdirSync(entry)) visit(join(entry, child)) + } + visit(path) +} + +/** + * Remove one fixture tree after its junctions are unlinked (see + * {@link unlinkFixtureLinks}). Retries the removal: Windows releases child + * process and antivirus file handles asynchronously, and an unretried + * `rmSync` fails immediately with EPERM under load. + * @param path - the fixture tree to remove. + */ +export function removeFixtureSafely(path: string): void { + unlinkFixtureLinks(path) + rmSync(path, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }) +} diff --git a/scripts/translation-pairing-merge.spec.ts b/scripts/translation-pairing-merge.spec.ts index 0ee78a11b7..32924416a6 100644 --- a/scripts/translation-pairing-merge.spec.ts +++ b/scripts/translation-pairing-merge.spec.ts @@ -1,7 +1,14 @@ /** Integration coverage for automatic and explicit pairing-record conflict resolution. */ import { execFileSync, spawnSync } from 'node:child_process' -import { chmodSync, mkdtempSync, mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs' +import { + chmodSync, + mkdtempSync, + mkdirSync, + readFileSync, + symlinkSync, + writeFileSync, +} from 'node:fs' import { tmpdir } from 'node:os' import { delimiter, dirname, join } from 'node:path' import { fileURLToPath } from 'node:url' @@ -15,6 +22,7 @@ import { renderTranslationPairingRecord, translationPairPaths, } from './translation-pairing-record.ts' +import { removeFixtureSafely } from './test-fixture-cleanup.ts' const driver = fileURLToPath(new URL('./merge-translation-pairing.ts', import.meta.url)) const driverLauncher = fileURLToPath(new URL('./merge-translation-pairing-driver.sh', import.meta.url)) @@ -28,7 +36,7 @@ interface Fixture { } afterEach(() => { - for (const fixture of fixtures.splice(0)) rmSync(fixture, { recursive: true, force: true }) + for (const fixture of fixtures.splice(0)) removeFixtureSafely(fixture) }) function git(fixture: Fixture, args: string[]): string { From 9e9073da2484755f660356d96497a6b7090a6a67 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 11:18:03 +0800 Subject: [PATCH 25/41] fix(boot): unlink stale profile fallback links instead of rmSync --- ...ink-stale-profile-fallback-links.i18n.yaml | 6 +++++ ...-12-unlink-stale-profile-fallback-links.md | 25 +++++++++++++++++++ ...-unlink-stale-profile-fallback-links.zh.md | 25 +++++++++++++++++++ packages/boot/app-boot/src/profile.ts | 6 +++-- 4 files changed, 60 insertions(+), 2 deletions(-) create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.i18n.yaml create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.md create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.zh.md diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.i18n.yaml new file mode 100644 index 0000000000..0e53f1c748 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.md +2026-08-12-unlink-stale-profile-fallback-links.md: 32959eb1b83bcc290d1daa4e4a020a2721be489b +2026-08-12-unlink-stale-profile-fallback-links.zh.md: 1f4da12748c9b57c12bf41a740001d5df770beb6 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.md b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.md new file mode 100644 index 0000000000..32959eb1b8 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.md @@ -0,0 +1,25 @@ +# Agent Note: Unlink stale profile fallback links instead of rmSync + +Status: implemented + +English | [中文](2026-08-12-unlink-stale-profile-fallback-links.zh.md) + +## Problem + +`healProfilesModuleFallback` re-points `$DSH_HOME/profiles/node_modules` entries when an installation moves, and Windows hosts keep those entries as junctions. `ensureSymlink` deleted a stale entry with `rmSync(link)`, but Node treats a junction as a directory for removal: without `recursive`, `rmSync` throws `ERR_FS_EISDIR`, so every launch from a moved installation or a second worktree crashed before booting. The `replaces a wrong symlink` unit test reproduces that crash on Windows at the exact removal call. + +## Decision + +`ensureSymlink` removes a stale link with `unlinkSync(link)`. `unlink` deletes the reparse point or symlink itself on every platform and never descends into the target, which preserves the function's fail-loud guarantee that a real directory is never deleted. The [profile-plugin-bundles decision](../architecture/2026-08-05-profile-plugin-bundles.md) keeps owning the fallback's two-anchor resolution; this note owns only the removal primitive. + +## Alternatives considered + +**`rmSync(link, { recursive: true })`.** On Node 24 this deletes the junction without following its target, but `recursive` would silently delete a real directory that replaced the link between the `lstat` guard and the removal, weakening the fail-loud contract that motivates the guard. + +**`rmdirSync(link)`.** Removes a junction on Windows as well, but it reads as directory removal for a link, and `unlinkSync` is the repository's existing junction-cleanup idiom. + +**Delete and recreate every entry unconditionally.** Correct but churns unchanged links on every launch and widens the concurrent-heal race window. + +## Consequences + +Windows launches heal moved or second-checkout installations instead of crashing with `ERR_FS_EISDIR`; POSIX behavior is unchanged because `unlinkSync` also unlinks plain symlinks. The existing `replaces a wrong symlink` test now passes on Windows where it previously reproduced the crash. Two concurrent healers deleting the same stale link still surface the second deletion as `ENOENT`, unchanged from the previous `rmSync` implementation. diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.zh.md b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.zh.md new file mode 100644 index 0000000000..1f4da12748 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-stale-profile-fallback-links.zh.md @@ -0,0 +1,25 @@ +# Agent Note: 用 unlink 删除过期的 profile 回退链接而非 rmSync + +Status: implemented + +[English](2026-08-12-unlink-stale-profile-fallback-links.md) | 中文 + +## 问题 + +`healProfilesModuleFallback` 在安装位置迁移时会把 `$DSH_HOME/profiles/node_modules` 中的条目重新指向新目标，而 Windows 主机上这些条目是 junction。`ensureSymlink` 原先用 `rmSync(link)` 删除过期条目，但 Node 在删除时把 junction 当作目录处理：不带 `recursive` 的 `rmSync` 会抛 `ERR_FS_EISDIR`，于是从迁移后的安装或第二个 worktree 启动时，每次都会在应用引导前崩溃。`replaces a wrong symlink` 单元测试在 Windows 上正好在该删除调用处复现了这一崩溃。 + +## 决策 + +`ensureSymlink` 改用 `unlinkSync(link)` 删除过期链接。`unlink` 在所有平台上都只删除重解析点或符号链接本身、绝不进入目标目录，从而保住该函数“真实目录永远不会被删除”的大声失败保证。[profile-plugin-bundles 决策](../architecture/2026-08-05-profile-plugin-bundles.md)继续拥有回退目录的双锚点解析；本 note 只拥有“用哪个删除原语”这一决定。 + +## 考虑过的替代方案 + +**`rmSync(link, { recursive: true })`。** Node 24 上它只删 junction、不跟随目标，但 `recursive` 会在 `lstat` 守卫与删除之间链接被替换成真实目录时静默删除该目录，削弱守卫存在所依据的大声失败契约。 + +**`rmdirSync(link)`。** Windows 上同样能删 junction，但它读起来像“删目录”，而 `unlinkSync` 才是仓库现有的 junction 清理惯例。 + +**无条件删除并重建所有条目。** 正确，但每次启动都翻动未变化的链接，并扩大并发修复的竞态窗口。 + +## 后果 + +Windows 启动现在可以修复迁移后的安装或第二个 checkout，而不是以 `ERR_FS_EISDIR` 崩溃；POSIX 行为不变，因为 `unlinkSync` 同样能 unlink 普通符号链接。现有的 `replaces a wrong symlink` 测试在 Windows 上从复现崩溃变为通过。两个并发 healer 删除同一过期链接时，第二次删除仍会以 `ENOENT` 浮现，与原先的 `rmSync` 实现一致。 diff --git a/packages/boot/app-boot/src/profile.ts b/packages/boot/app-boot/src/profile.ts index 24ba7b66ee..8f982bed80 100644 --- a/packages/boot/app-boot/src/profile.ts +++ b/packages/boot/app-boot/src/profile.ts @@ -24,7 +24,7 @@ import { createRequire } from 'node:module' import { - existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, rmSync, symlinkSync, writeFileSync, + existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync, writeFileSync, } from 'node:fs' import { basename, dirname, join } from 'node:path' import type { EntryOptions } from '@deepseek-ai/cordis-plugin-loader' @@ -182,7 +182,9 @@ function ensureSymlink(link: string, target: string): void { throw new Error(`dsh: ${link} exists and is not a symlink; remove it so dsh can manage the installation fallback`) } if (readlinkSync(link) === target) return - rmSync(link) + // unlink deletes the reparse point itself on Windows too; rmSync treats a + // junction as a directory and throws EISDIR unless recursive. + unlinkSync(link) } try { symlinkSync(target, link, 'junction') From 22d30852f7bba25651411d0efce0be42bdad4f80 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 11:19:01 +0800 Subject: [PATCH 26/41] test(app-boot): unlink hmr alias junctions before removing the target --- packages/boot/app-boot/tests/hmr-config.spec.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/boot/app-boot/tests/hmr-config.spec.ts b/packages/boot/app-boot/tests/hmr-config.spec.ts index c248643130..5f52ab5e2a 100644 --- a/packages/boot/app-boot/tests/hmr-config.spec.ts +++ b/packages/boot/app-boot/tests/hmr-config.spec.ts @@ -62,7 +62,7 @@ describe('HMR exact config paths', () => { expect(cacheHas).toHaveBeenCalledWith(expected) } finally { await ctx.fiber.dispose() - rmSync(alias, { force: true }) + unlinkSync(alias) rmSync(target, { recursive: true, force: true }) } }) @@ -78,7 +78,7 @@ describe('HMR exact config paths', () => { .rejects.toThrow('config path already registered') } finally { await ctx.fiber.dispose() - rmSync(alias, { force: true }) + unlinkSync(alias) rmSync(target, { recursive: true, force: true }) } }) From a62884a565bf6b71275b13941e8a6c7decd3ec25 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 11:32:03 +0800 Subject: [PATCH 27/41] docs: add junction-safe unlink rule to defensive patterns --- docs/defensive-patterns.i18n.yaml | 4 ++-- docs/defensive-patterns.md | 4 ++++ docs/defensive-patterns.zh.md | 6 +++++- 3 files changed, 11 insertions(+), 3 deletions(-) diff --git a/docs/defensive-patterns.i18n.yaml b/docs/defensive-patterns.i18n.yaml index e845e8182b..9a82a28afd 100644 --- a/docs/defensive-patterns.i18n.yaml +++ b/docs/defensive-patterns.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write docs/defensive-patterns.md -defensive-patterns.md: b6e643cad6180ea35a363f2c4131b2c24f5f70af -defensive-patterns.zh.md: e1a6abdfd2138a51a13ceaf418bf6df1d0c65579 +defensive-patterns.md: 9db582354628a13abd43c5bd052dbbfd6e52f79f +defensive-patterns.zh.md: 7bebbe3c1964f2b826afc523eaa4af7be180e36e diff --git a/docs/defensive-patterns.md b/docs/defensive-patterns.md index b6e643cad6..9db5823546 100644 --- a/docs/defensive-patterns.md +++ b/docs/defensive-patterns.md @@ -27,3 +27,7 @@ A user-supplied listener that throws must not reject the promise it runs inside ## Never hand untrusted output the ambient environment or predictable paths Spawned commands get a scrubbed env (drop `*KEY*`/`*SECRET*`/`*TOKEN*`/`*PASSWORD*`) so harness credentials cannot leak into output, `env`, or spill files. Temp/spill files use a private (0700) dir, random names, and exclusive owner-only opens (`'wx'`, `0o600`) — predictable world-readable paths invite symlink races and disclosure. + +## Unlink link-shaped paths + +A path that may be a symlink or Windows junction is removed with `lstatSync().isSymbolicLink()` then `unlinkSync`: unlink deletes only the link and refuses a real directory, so it never follows the link into its target. Windows `rmSync(link)` throws `ERR_FS_EISDIR` on a junction; recursive deletion may descend through one into its target. Reserve recursive `rmSync` for known real directories. diff --git a/docs/defensive-patterns.zh.md b/docs/defensive-patterns.zh.md index e1a6abdfd2..7bebbe3c19 100644 --- a/docs/defensive-patterns.zh.md +++ b/docs/defensive-patterns.zh.md @@ -26,4 +26,8 @@ ## 绝不将环境变量或可预测路径暴露给不可信输出 -启动的命令应使用经过清理的环境变量，移除名称匹配 `*KEY*`、`*SECRET*`、`*TOKEN*` 或 `*PASSWORD*` 的项，防止 harness 凭证通过命令输出、`env` 或 spill 文件泄漏。临时文件和 spill 文件应放在权限为 0700 的私有目录中，使用随机文件名，并以独占且仅所有者可访问的方式打开（`'wx'`、`0o600`）；可预测且所有用户均可读的路径会引发符号链接竞态和信息泄露。 +启动的命令应使用经过清理的环境变量，移除名称匹配 `*KEY*`、`*SECRET*`、`*TOKEN*` 或 `*PASSWORD*` 的项，防止 harness 凭证通过命令输出、`env` 或 spill 文件泄漏。临时文件和 spill 文件应放在权限为 0700 的私有目录中，使用随机文件名，并以独占且仅所有者可访问的方式打开（`'wx'`、`0o600`）；可预测且全局可读的路径会引发符号链接竞态和信息泄露。 + +## 用 unlink 删除链接形态的路径 + +可能是符号链接或 Windows junction 的路径，应先用 `lstatSync().isSymbolicLink()` 判断，再用 `unlinkSync` 删除：unlink 只删除链接本身并拒绝真实目录，因此绝不会跟随链接进入其目标。Windows 上对 junction 调用 `rmSync(link)` 会抛 `ERR_FS_EISDIR`；递归删除可能穿过 junction 进入其目标。真实目录才使用带 `recursive` 的 `rmSync`。 From c29246ae31bcff83729f18bf6cf72fb855b44770 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 14:04:45 +0800 Subject: [PATCH 28/41] fix(pwsh): resolve Store app execution aliases --- ...08-12-resolve-store-pwsh-aliases.i18n.yaml | 6 +++++ .../2026-08-12-resolve-store-pwsh-aliases.md | 23 +++++++++++++++++++ ...026-08-12-resolve-store-pwsh-aliases.zh.md | 23 +++++++++++++++++++ packages/shell/pwsh-local/src/resolve.ts | 17 ++++++++++++-- .../shell/pwsh-local/tests/executor.spec.ts | 20 +++++++++++++--- 5 files changed, 84 insertions(+), 5 deletions(-) create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.i18n.yaml create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.md create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.zh.md diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.i18n.yaml new file mode 100644 index 0000000000..140c7b9ae7 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.md +2026-08-12-resolve-store-pwsh-aliases.md: 20fe58e15e75462dc0a9ba76c7a1a94939f8a004 +2026-08-12-resolve-store-pwsh-aliases.zh.md: bbfa4616127a9dbdb6609fe2973283663de55b31 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.md b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.md new file mode 100644 index 0000000000..20fe58e15e --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.md @@ -0,0 +1,23 @@ +# Agent Note: Resolve Microsoft Store pwsh aliases + +Status: implemented + +English | [中文](2026-08-12-resolve-store-pwsh-aliases.zh.md) + +## Problem + +`resolvePwshPath` documented that Microsoft Store installs resolve through PATH, but its existence probe was `existsSync`, which stats a candidate and therefore follows reparse points. The Store's `%LOCALAPPDATA%\Microsoft\WindowsApps\pwsh.exe` is an app execution alias whose target directory ACL refuses stat (EACCES), so `existsSync` missed it and resolution silently fell through to Windows PowerShell 5.1 on hosts whose only PowerShell 7 is a Store install. + +## Decision + +`candidateExists` accepts a candidate that stats as a file or that lstat sees as a link-shaped reparse point, and `resolvePwshPath` uses it. Spawning the alias path works because CreateProcess resolves app execution aliases. A dangling link-shaped candidate is accepted so a broken pwsh fails loudly at spawn instead of silently downgrading to 5.1. + +## Alternatives considered + +**Probe the WindowsApps package directory directly.** The Store package path is versioned and ACL-hidden; hard-coding it duplicates packaging knowledge that PATH plus the alias already owns. + +**Keep the 5.1 fallback for stat failures.** Rejected: it silently runs a different shell than the one installed, which is the defect this note fixes. + +## Consequences + +Store-installed PowerShell 7 now resolves ahead of the 5.1 fallback on Windows; real-file candidates and non-Windows behavior are unchanged. The dangling-symlink unit test pins the stat/lstat split on every platform. diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.zh.md b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.zh.md new file mode 100644 index 0000000000..bbfa461612 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-resolve-store-pwsh-aliases.zh.md @@ -0,0 +1,23 @@ +# Agent Note: 解析 Microsoft Store 的 pwsh 别名 + +Status: implemented + +[English](2026-08-12-resolve-store-pwsh-aliases.md) | 中文 + +## 问题 + +`resolvePwshPath` 声称 Store 安装经 PATH 解析，但它的存在性探测用的是 `existsSync`，会对候选做 stat、从而跟随重解析点。Store 的 `%LOCALAPPDATA%\Microsoft\WindowsApps\pwsh.exe` 是 app execution alias，其目标目录的 ACL 拒绝 stat（EACCES），于是 `existsSync` 看不到它，解析静默落到 Windows PowerShell 5.1——在这类「唯一的 PowerShell 7 是 Store 安装」的机器上就用了错误的 shell。 + +## 决策 + +`candidateExists` 接受「stat 为文件」或「lstat 为链接形态重解析点」的候选，`resolvePwshPath` 改用它。spawn 别名路径可以工作，因为 CreateProcess 会解析 app execution alias。悬空的链接形态候选同样被接受，让损坏的 pwsh 在 spawn 时响亮失败，而不是静默降级到 5.1。 + +## 考虑过的替代方案 + +**直接探测 WindowsApps 包目录。** Store 包路径带版本且被 ACL 隐藏；硬编码它只是重复了 PATH 加别名已经拥有的打包知识。 + +**对 stat 失败继续走 5.1 回退。** 否决：它静默运行了一个并非所装的 shell，这正是本 note 修复的缺陷。 + +## 后果 + +Windows 上 Store 安装的 PowerShell 7 现在先于 5.1 回退被解析；普通文件候选和非 Windows 平台行为不变。悬空 symlink 单元测试在全部平台上钉住 stat/lstat 的分裂行为。 diff --git a/packages/shell/pwsh-local/src/resolve.ts b/packages/shell/pwsh-local/src/resolve.ts index c6ded2f883..f090c2b4c1 100644 --- a/packages/shell/pwsh-local/src/resolve.ts +++ b/packages/shell/pwsh-local/src/resolve.ts @@ -8,7 +8,7 @@ * @module @deepseek-ai/dsh-pwsh-local/resolve */ -import { existsSync } from 'node:fs' +import { existsSync, lstatSync } from 'node:fs' import { join } from 'node:path' /** @@ -36,6 +36,19 @@ export function candidatePwshPaths(env: NodeJS.ProcessEnv = process.env): string return candidates } +/** Whether a candidate can be spawned: a real file or a link-shaped reparse point. */ +function candidateExists(candidate: string): boolean { + if (existsSync(candidate)) return true + // Microsoft Store app execution aliases are reparse points whose target + // ACL refuses stat(), so existsSync misses them; lstat sees the link + // itself and CreateProcess resolves it when the executor spawns. + try { + return lstatSync(candidate).isSymbolicLink() + } catch { + return false + } +} + /** * Resolve the pwsh executable this executor spawns. * @param configured - an explicit `pwshPath` config value, trusted as-is. @@ -53,7 +66,7 @@ export function resolvePwshPath( if (configured !== undefined && configured.length > 0) return configured if (platform === 'win32') { for (const candidate of candidatePwshPaths(env)) { - if (existsSync(candidate)) return candidate + if (candidateExists(candidate)) return candidate } } return 'pwsh' diff --git a/packages/shell/pwsh-local/tests/executor.spec.ts b/packages/shell/pwsh-local/tests/executor.spec.ts index 2336d216ca..f838c2f577 100644 --- a/packages/shell/pwsh-local/tests/executor.spec.ts +++ b/packages/shell/pwsh-local/tests/executor.spec.ts @@ -9,7 +9,7 @@ * writes CRLF on Windows, so exact text assertions normalize line endings. */ -import { mkdirSync, mkdtempSync, realpathSync, writeFileSync } from 'node:fs' +import { mkdirSync, mkdtempSync, realpathSync, symlinkSync, writeFileSync } from 'node:fs' import { tmpdir } from 'node:os' import { join } from 'node:path' import { spawnSync } from 'node:child_process' @@ -126,6 +126,18 @@ describe('resolvePwshPath and candidatePwshPaths (pure, every platform)', () => expect(resolvePwshPath(undefined, { ProgramFiles: join(dir, 'missing'), PATH: join(dir, 'empty'), SystemRoot: join(dir, 'no-windows') }, 'win32')) .toBe('pwsh') }) + + it('accepts a link-shaped PATH candidate whose target cannot be stat-ed', () => { + // Store app execution aliases stat as EACCES but lstat as a link; a + // dangling symlink reproduces that split on every platform. + const dir = mkdtempSync(join(tmpdir(), 'dsh-pwsh-resolve-link-')) + const store = join(dir, 'store') + mkdirSync(store, { recursive: true }) + const link = join(store, 'pwsh.exe') + symlinkSync(join(dir, 'no-such-target.exe'), link) + expect(resolvePwshPath(undefined, { ProgramFiles: join(dir, 'missing'), PATH: store }, 'win32')) + .toBe(link) + }) }) describe('spawn construction (pure, every platform)', () => { @@ -298,8 +310,10 @@ describe.skipIf(!hasPwsh)('PwshLocalExecutor.start (background process handles)' it('start returns immediately with a running handle that settles as completed', async () => { const { bash } = await setup() const before = Date.now() - const proc = bash.start(bash.resolve({ command: 'Start-Sleep -Milliseconds 200; Write-Output done' })) - expect(Date.now() - before).toBeLessThan(150) + // The sleep outlasts any realistic spawn latency, so returning while the + // child still sleeps proves start() does not wait for completion. + const proc = bash.start(bash.resolve({ command: 'Start-Sleep -Milliseconds 2000; Write-Output done' })) + expect(Date.now() - before).toBeLessThan(1000) expect(proc.status).toBe('running') await proc.done expect(proc.status).toBe('completed') From 095fde4ffd4d93bb69aff0ae05ea3789c0e3891b Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 14:04:57 +0800 Subject: [PATCH 29/41] test(claude-code): isolate ambient Anthropic model env --- .../tests/real-product.spec.ts | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/packages/subagent/subagent-claude-code/tests/real-product.spec.ts b/packages/subagent/subagent-claude-code/tests/real-product.spec.ts index 0ccd897fe9..f6767817c8 100644 --- a/packages/subagent/subagent-claude-code/tests/real-product.spec.ts +++ b/packages/subagent/subagent-claude-code/tests/real-product.spec.ts @@ -17,7 +17,7 @@ import type { SDKSystemMessage, } from '@anthropic-ai/claude-agent-sdk' import { Context } from '@deepseek-ai/cordis' -import { afterEach, describe, expect, it, vi } from 'vitest' +import { afterAll, afterEach, beforeAll, describe, expect, it, vi } from 'vitest' import type { Agent } from '@deepseek-ai/dsh-agent' import SubagentRuntime from '@deepseek-ai/dsh-subagent' import type { SubprocessHandle, SubprocessSpawnSpec } from '@deepseek-ai/dsh-subprocess' @@ -87,6 +87,22 @@ const roots: string[] = [] const fixtures: MessagesFixture[] = [] const contexts: Context[] = [] +// Ambient Anthropic model env leaks into the real CLI and overrides the +// fixture settings.json on developer machines; delete it for this file and +// restore it after, like the workspace-context USERPROFILE isolation. +const ambientAnthropicModel = process.env.ANTHROPIC_MODEL +const ambientAnthropicSmallFastModel = process.env.ANTHROPIC_SMALL_FAST_MODEL + +beforeAll(() => { + delete process.env.ANTHROPIC_MODEL + delete process.env.ANTHROPIC_SMALL_FAST_MODEL +}) + +afterAll(() => { + if (ambientAnthropicModel !== undefined) process.env.ANTHROPIC_MODEL = ambientAnthropicModel + if (ambientAnthropicSmallFastModel !== undefined) process.env.ANTHROPIC_SMALL_FAST_MODEL = ambientAnthropicSmallFastModel +}) + afterEach(async () => { await Promise.all(contexts.splice(0).map(ctx => ctx.fiber.dispose())) await Promise.all(fixtures.splice(0).map(fixture => fixture.close())) From 7593842ccfa01b89a83ce5ae999e689bd65121bd Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 15:11:05 +0800 Subject: [PATCH 30/41] fix(workflow): forward the tsconfig pin only in the unbuilt worker --- .../workflow-worker-thread/src/host.ts | 13 ++++++---- .../tests/workflow-worker-thread.spec.ts | 24 ++++++++++--------- 2 files changed, 21 insertions(+), 16 deletions(-) diff --git a/packages/workflow/workflow-worker-thread/src/host.ts b/packages/workflow/workflow-worker-thread/src/host.ts index 9e0c3a514a..fee869753f 100644 --- a/packages/workflow/workflow-worker-thread/src/host.ts +++ b/packages/workflow/workflow-worker-thread/src/host.ts @@ -38,18 +38,21 @@ interface ChildRecord { * The unbuilt shape additionally forwards `TSX_TSCONFIG_PATH` for path * resolution. * @param platform - host platform; overridable so tests exercise both peer arms. + * @param tsconfigPath - the tsconfig pin to forward; only the unbuilt caller + * passes one, so the built worker never observes the host's pin. * @returns the scrubbed worker environment object. */ -export function workerSpawnEnv(platform: NodeJS.Platform = process.platform): NodeJS.ProcessEnv { +export function workerSpawnEnv( + platform: NodeJS.Platform = process.platform, + tsconfigPath: string | undefined = undefined, +): NodeJS.ProcessEnv { const env: NodeJS.ProcessEnv = {} if (platform === 'win32') { const tmp = tmpdir() env.TMP = tmp env.TEMP = tmp } - if (process.env.TSX_TSCONFIG_PATH !== undefined) { - env.TSX_TSCONFIG_PATH = process.env.TSX_TSCONFIG_PATH - } + if (tsconfigPath !== undefined) env.TSX_TSCONFIG_PATH = tsconfigPath return env } @@ -81,7 +84,7 @@ function resolveWorkerSpawn(init: WorkerInit): { entry: string | URL; options: W entry: new URL(`data:text/javascript,${encodeURIComponent(bootstrap)}`), options: { workerData: init, - env: workerSpawnEnv(), + env: workerSpawnEnv(undefined, process.env.TSX_TSCONFIG_PATH), execArgv: [], }, } diff --git a/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts b/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts index 275c92269e..5130071362 100644 --- a/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts +++ b/packages/workflow/workflow-worker-thread/tests/workflow-worker-thread.spec.ts @@ -570,6 +570,11 @@ describe('dsh-workflow-worker-thread', () => { // inside the worker resolves instead of degrading to a cwd-relative // `undefined\temp` (tsx writes its transform cache there). process.env.WORKFLOW_ENV_CANARY = 'leak me' + // The unbuilt worker forwards TSX_TSCONFIG_PATH (a path pin, not a + // credential); clear it so this test observes the empty ambient case + // regardless of the parent's environment. + const tsconfigPath = process.env.TSX_TSCONFIG_PATH + delete process.env.TSX_TSCONFIG_PATH try { const result = await run(ctx, parent, scripted(` const proc = ${ESCAPE} @@ -579,6 +584,8 @@ describe('dsh-workflow-worker-thread', () => { const expectedKeys = process.platform === 'win32' ? ['TEMP', 'TMP'] : [] expect(result.value).toEqual({ canary: null, keys: expectedKeys }) } finally { + if (tsconfigPath === undefined) delete process.env.TSX_TSCONFIG_PATH + else process.env.TSX_TSCONFIG_PATH = tsconfigPath delete process.env.WORKFLOW_ENV_CANARY } }) @@ -591,17 +598,12 @@ describe('dsh-workflow-worker-thread', () => { it('workerSpawnEnv forwards TSX_TSCONFIG_PATH when the snapshot harness pins it', () => { const tsconfig = fileURLToPath(new URL('../../../../tsconfig.json', import.meta.url)) - vi.stubEnv('TSX_TSCONFIG_PATH', tsconfig) - try { - expect(workerSpawnEnv('linux')).toEqual({ TSX_TSCONFIG_PATH: tsconfig }) - expect(workerSpawnEnv('win32')).toEqual({ - TMP: tmpdir(), - TEMP: tmpdir(), - TSX_TSCONFIG_PATH: tsconfig, - }) - } finally { - vi.unstubAllEnvs() - } + expect(workerSpawnEnv('linux', tsconfig)).toEqual({ TSX_TSCONFIG_PATH: tsconfig }) + expect(workerSpawnEnv('win32', tsconfig)).toEqual({ + TMP: tmpdir(), + TEMP: tmpdir(), + TSX_TSCONFIG_PATH: tsconfig, + }) }) it('the unbuilt worker forwards exactly TSX_TSCONFIG_PATH through the scrub: the paths-map pin survives, secrets do not', async () => { From 29d420f1eee0f95674b8833461462f35fb16b6d8 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 15:11:20 +0800 Subject: [PATCH 31/41] fix(pwsh): accept link-shaped candidates and sync the README contract --- packages/shell/pwsh-local/README.i18n.yaml | 4 ++-- packages/shell/pwsh-local/README.md | 2 +- packages/shell/pwsh-local/README.zh.md | 2 +- packages/shell/pwsh-local/src/resolve.ts | 20 ++++++++++++------- .../shell/pwsh-local/tests/executor.spec.ts | 11 ++++++++++ 5 files changed, 28 insertions(+), 11 deletions(-) diff --git a/packages/shell/pwsh-local/README.i18n.yaml b/packages/shell/pwsh-local/README.i18n.yaml index 84e7bfa43e..c9ce9f1d6b 100644 --- a/packages/shell/pwsh-local/README.i18n.yaml +++ b/packages/shell/pwsh-local/README.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write packages/shell/pwsh-local/README.md -README.md: cfb58b569022bca11d18c196e0bce104247e4c81 -README.zh.md: 9393c5d210743d8423457f2d7df5900c1e0df182 +README.md: 2eccc59b919d1f729eef52a42581f4da0f1d9e60 +README.zh.md: a03f80343711a1471bc96017e23476a3253ec46c diff --git a/packages/shell/pwsh-local/README.md b/packages/shell/pwsh-local/README.md index cfb58b5690..2eccc59b91 100644 --- a/packages/shell/pwsh-local/README.md +++ b/packages/shell/pwsh-local/README.md @@ -30,7 +30,7 @@ The Windows counterpart of `dsh-bash-local`, deliberately mirroring its semantic - **Spawn per call, no shell state** — every call is a fresh non-interactive `pwsh -Command` (deterministic; no profile files). The `-NoLogo -NoProfile -NonInteractive` flags disable startup banners, profile loading, and prompts that would garble tool output. - **The composition entry is a layer, not the last word** — when a settings provider is composed, this executor registers the capability's [`bash` namespace](../shell/README.md) with the entry above as its base, so a user section in `settings.yaml` layers over it and the next command runs with the new budgets. The namespace is shared with the POSIX family because a host composes exactly one provider of `ctx.shell`; a document written on either platform keeps resolving on the other. Values the schema cannot judge (positive and finite, the `graceMs` timer bound) are refused at the write, leaving the running executor on its last good section. - **UTF-8 output pinned** — every command runs with `[Console]::OutputEncoding` and `$OutputEncoding` set to UTF-8 first, so the Windows PowerShell 5.1 fallback (or any host whose console code page is not UTF-8) cannot garble non-ASCII output: the subprocess collector decodes bytes as UTF-8. Input encoding is left at the host default; pwsh 7 defaults to UTF-8 and is unaffected. -- **Executable resolution** — `resolvePwshPath` prefers an explicit `pwshPath`, then on Windows probes PowerShell 7's install location, every PATH entry (Microsoft Store installs; surrounding quotes stripped), and Windows PowerShell 5.1 as a legacy last resort, checking `existsSync` on each; elsewhere it falls back to a bare `pwsh` resolved through PATH. Resolution is a pure function of `(configured, env, platform)`; it runs at construction and again only when a stored `pwshPath` differs from the one the current executable was resolved from, so an unrelated settings change never re-probes the filesystem. +- **Executable resolution** — `resolvePwshPath` prefers an explicit `pwshPath`, then on Windows probes PowerShell 7's install location, every PATH entry (Microsoft Store installs; surrounding quotes stripped), and Windows PowerShell 5.1 as a legacy last resort, checking each candidate with an lstat probe that accepts a real file or a link-shaped reparse point (a Store app execution alias stat-fails against its target's ACL, but lstat sees the alias itself); elsewhere it falls back to a bare `pwsh` resolved through PATH. Resolution is a pure function of `(configured, env, platform)`; it runs at construction and again only when a stored `pwshPath` differs from the one the current executable was resolved from, so an unrelated settings change never re-probes the filesystem. - **Configured budgets over managed groups** — `resolve()` fills `workdir`/`timeoutMs`/`stdoutMaxBytes` from config, and every spawn hands the service explicit byte caps, spill cap, and `graceMs`. The grace must be positive, finite, and no greater than [`MAX_TIMER_DELAY_MS`](../../util/timeout/README.md), so Node can represent it with one timer. Tree termination (taskkill on Windows, process-group signals on POSIX), the post-exit pipe-drain grace, tail-keep truncation, and bounded spill files are [`dsh-subprocess-local`](../../subprocess/subprocess-local/README.md) mechanics. A foreground `ShellExecRequest.stdoutMaxBytes` can raise stdout's capture budget for one trusted caller; stderr and background runs still use `maxOutputBytes`. - **Timeout and cancel classification** — `run()` fuses its config-clamped timeout with the caller's signal through one deadline; only the executor's own timeout reports `timedOut`, an upstream cancel reports `aborted`, and a self-terminated command reports neither ([timeout-library Agent Note](../../../.agents/notes/implemented/architecture/2026-07-06-timeout-deadline-library.md)). Windows reports forced termination as exit 1 without a signal, so signal-stamped facts (`signal`, `killed` status) are POSIX-only there; the timeout/abort classification is platform-independent. - **Model-friendly terminal env** — `NO_COLOR=1 PAGER=cat GIT_PAGER=cat` (no `TERM=dumb`: that is a POSIX concept; `NO_COLOR` is honored by modern PowerShell renderers) merged as ordinary env under the service's credential scrub and `DSH_*` channel rules; an explicit caller entry still wins. diff --git a/packages/shell/pwsh-local/README.zh.md b/packages/shell/pwsh-local/README.zh.md index 9393c5d210..a03f803437 100644 --- a/packages/shell/pwsh-local/README.zh.md +++ b/packages/shell/pwsh-local/README.zh.md @@ -30,7 +30,7 @@ - **每次调用新建进程，无 shell 状态**——每次调用都是全新的非交互 `pwsh -Command`（确定性；不加载 profile 文件）。`-NoLogo -NoProfile -NonInteractive` 关闭启动横幅、profile 加载与会干扰工具输出的提示符。 - **组装条目是一层，而不是最终值**——当组装中存在 settings 提供方时，本执行器以上面的条目为 base 注册该能力的 [`bash` 命名空间](../shell/README.md)，因此 `settings.yaml` 中的用户段会叠加其上，下一条命令即按新预算运行。该命名空间与 POSIX 家族共用，因为一个宿主只组装一个 `ctx.shell` 提供方；在任一平台写下的文档在另一平台仍能解析。schema 无法判定的值（正有限、`graceMs` 的定时器上界）会在写入时被拒绝，运行中的执行器保持它最后一份可用的段。 - **UTF-8 输出固定**——每条命令都先以 UTF-8 设置 `[Console]::OutputEncoding` 与 `$OutputEncoding`，因此 Windows PowerShell 5.1 兜底（或任何控制台代码页非 UTF-8 的主机）不会破坏非 ASCII 输出：subprocess 收集器以 UTF-8 解码字节。输入编码保持宿主默认；pwsh 7 默认为 UTF-8，不受影响。 -- **可执行文件解析**——`resolvePwshPath` 优先显式 `pwshPath`，然后在 Windows 上依次探测 PowerShell 7 安装位置、每个 PATH 条目（Microsoft Store 安装；剥离两端引号）以及作为遗留兜底的 Windows PowerShell 5.1，逐一检查 `existsSync`；其他平台回退为通过 PATH 解析的裸 `pwsh`。解析是 `(configured, env, platform)` 的纯函数；它在构造时执行，此后仅当存储的 `pwshPath` 与当前可执行文件所依据的值不同才再次执行，因此无关的设置变更绝不会重新探测文件系统。 +- **可执行文件解析**——`resolvePwshPath` 优先显式 `pwshPath`，然后在 Windows 上依次探测 PowerShell 7 安装位置、每个 PATH 条目（Microsoft Store 安装；剥离两端引号）以及作为遗留兜底的 Windows PowerShell 5.1，逐一用 lstat 探测检查（接受真实文件或链接形态的重解析点：Store 的 app execution alias 对其目标 stat 会因 ACL 失败，但 lstat 能看到别名本身）；其他平台回退为通过 PATH 解析的裸 `pwsh`。解析是 `(configured, env, platform)` 的纯函数；它在构造时执行，此后仅当存储的 `pwshPath` 与当前可执行文件所依据的值不同才再次执行，因此无关的设置变更绝不会重新探测文件系统。 - **受管进程组之上的配置预算**——`resolve()` 从配置填充 `workdir`/`timeoutMs`/`stdoutMaxBytes`，每次 spawn 都向服务提供显式字节上限、spill 上限与 `graceMs`。该宽限期须为正有限值，且不得大于 [`MAX_TIMER_DELAY_MS`](../../util/timeout/README.md)，这样 Node 就能用一个定时器表示它。进程树终止（Windows 用 taskkill，POSIX 用进程组信号）、退出后管道排空宽限、保尾截断与有界 spill 文件是 [`dsh-subprocess-local`](../../subprocess/subprocess-local/README.md) 的机制。前台 `ShellExecRequest.stdoutMaxBytes` 可为单个受信调用方提高 stdout 捕获预算；stderr 与后台运行仍使用 `maxOutputBytes`。 - **超时与取消分类**——`run()` 通过一个 deadline 融合按配置上限截取的超时与调用方信号；只有执行器自身超时报告 `timedOut`，上游取消报告 `aborted`，自我终止的命令两者都不报告（见 [timeout 库 Agent Note](../../../.agents/notes/implemented/architecture/2026-07-06-timeout-deadline-library.md)）。Windows 将强制终止报告为退出码 1 且无信号，因此带信号标记的事实（`signal`、`killed` 状态）在那里仅限 POSIX；超时/取消分类与平台无关。 - **面向模型的终端环境**——`NO_COLOR=1 PAGER=cat GIT_PAGER=cat`（没有 `TERM=dumb`：那是 POSIX 概念；现代 PowerShell 渲染器遵循 `NO_COLOR`），作为普通 env 在服务的凭据清理与 `DSH_*` 通道规则之下合并；显式调用方条目仍然优先。 diff --git a/packages/shell/pwsh-local/src/resolve.ts b/packages/shell/pwsh-local/src/resolve.ts index f090c2b4c1..191abba963 100644 --- a/packages/shell/pwsh-local/src/resolve.ts +++ b/packages/shell/pwsh-local/src/resolve.ts @@ -8,7 +8,7 @@ * @module @deepseek-ai/dsh-pwsh-local/resolve */ -import { existsSync, lstatSync } from 'node:fs' +import { lstatSync } from 'node:fs' import { join } from 'node:path' /** @@ -36,15 +36,21 @@ export function candidatePwshPaths(env: NodeJS.ProcessEnv = process.env): string return candidates } -/** Whether a candidate can be spawned: a real file or a link-shaped reparse point. */ +/** + * Whether a candidate can be spawned. lstat opens the entry itself instead of + * following reparse points, so it sees the Store app execution alias where + * stat hits the target's ACL (EACCES); Node reports that alias as a symlink + * on current releases and as a plain file on older ones, and CreateProcess + * resolves either shape. A real directory never matches. + */ function candidateExists(candidate: string): boolean { - if (existsSync(candidate)) return true - // Microsoft Store app execution aliases are reparse points whose target - // ACL refuses stat(), so existsSync misses them; lstat sees the link - // itself and CreateProcess resolves it when the executor spawns. try { - return lstatSync(candidate).isSymbolicLink() + const stat = lstatSync(candidate) + return stat.isFile() || stat.isSymbolicLink() } catch { + // ENOENT (the candidate vanished between listing and probing) is the only + // expected failure; any other error names an unspawnable path, so false + // is the safe answer for it too. return false } } diff --git a/packages/shell/pwsh-local/tests/executor.spec.ts b/packages/shell/pwsh-local/tests/executor.spec.ts index f838c2f577..e26211b268 100644 --- a/packages/shell/pwsh-local/tests/executor.spec.ts +++ b/packages/shell/pwsh-local/tests/executor.spec.ts @@ -138,6 +138,17 @@ describe('resolvePwshPath and candidatePwshPaths (pure, every platform)', () => expect(resolvePwshPath(undefined, { ProgramFiles: join(dir, 'missing'), PATH: store }, 'win32')) .toBe(link) }) + + it('skips a directory candidate and falls through to the PATH-resolution default', () => { + const dir = mkdtempSync(join(tmpdir(), 'dsh-pwsh-resolve-dir-')) + const store = join(dir, 'store') + mkdirSync(join(store, 'pwsh.exe'), { recursive: true }) + expect(resolvePwshPath(undefined, { + ProgramFiles: join(dir, 'missing'), + PATH: store, + SystemRoot: join(dir, 'no-windows'), + }, 'win32')).toBe('pwsh') + }) }) describe('spawn construction (pure, every platform)', () => { From 314fedfc14d3fbc14328147515befda34e93dcf8 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 15:11:38 +0800 Subject: [PATCH 32/41] docs: record the junction-safe fixture teardown decision --- ...-fixture-junctions-before-delete.i18n.yaml | 6 +++++ ...-unlink-fixture-junctions-before-delete.md | 23 +++++++++++++++++++ ...link-fixture-junctions-before-delete.zh.md | 23 +++++++++++++++++++ 3 files changed, 52 insertions(+) create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.i18n.yaml create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.md create mode 100644 .agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.zh.md diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.i18n.yaml b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.i18n.yaml new file mode 100644 index 0000000000..160f947daa --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.i18n.yaml @@ -0,0 +1,6 @@ +# Bilingual-pair consistency record (docs/i18n/README.md): the git blob hash of each +# side as of the last confirmed-consistent state. Both languages carry equal authority; +# after editing either side, bring the other along and re-record with: +# pnpm run verify-translation-pairing --write .agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.md +2026-08-12-unlink-fixture-junctions-before-delete.md: 4514a33d728866b817f4e9c1393f16c07976ed45 +2026-08-12-unlink-fixture-junctions-before-delete.zh.md: 3c212c052ab0303ccb8d31d2b310a365a1d8cc99 diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.md b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.md new file mode 100644 index 0000000000..4514a33d72 --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.md @@ -0,0 +1,23 @@ +# Agent Note: Unlink fixture junctions before recursive deletion + +Status: implemented + +English | [中文](2026-08-12-unlink-fixture-junctions-before-delete.zh.md) + +## Problem + +The install-lefthook and translation-pairing fixtures junction the repository's real `scripts/`, `node_modules`, and tsx package directories into fixture trees so installer probes resolve through them. Windows recursive deletion can treat a junction (a MOUNT_POINT reparse point) as a directory and follow it into its target; Git's `worktree remove` did exactly that and deleted the repository's tracked `scripts/` and tsx package (the incident's instrumentation pinned the deletion to that step). A fixture cleanup that trusts its deleter therefore deletes the repository's own sources instead of the fixture. + +## Decision + +`scripts/test-fixture-cleanup.ts` owns junction-safe fixture teardown: `unlinkFixtureLinks` walks a tree and unlinks every reparse point before `removeFixtureSafely` removes the now link-free tree (with Windows async-handle retries). Every affected `afterEach` and the pre-`worktree remove` hook call it. The general rule lives in `docs/defensive-patterns.md`: remove link-shaped paths with unlink, reserve recursive `rmSync` for known real directories. + +## Alternatives considered + +**Trust recursive deletion alone.** Rejected: whether a given deleter follows junctions is tool- and version-dependent, and one path through `git worktree remove` already destroyed tracked files; no cleanup may bet the repository on that behavior. + +**Copy instead of junctioning the real directories.** Rejected: the fixtures exist to probe the real installer paths through their real contents, so copies would stop exercising the boundary under test. + +## Consequences + +Fixture teardown can no longer reach repository sources through junctions. The extra walk is one lstat/unlink pass over small fixture trees. The data-destroying defect now has its durable why beside the defensive-patterns rule, and the helper is the shared teardown path for future junction fixtures. diff --git a/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.zh.md b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.zh.md new file mode 100644 index 0000000000..3c212c052a --- /dev/null +++ b/.agents/notes/implemented/bug-fix/2026-08-12-unlink-fixture-junctions-before-delete.zh.md @@ -0,0 +1,23 @@ +# Agent Note: 递归删除前先解链 fixture junction + +Status: implemented + +[English](2026-08-12-unlink-fixture-junctions-before-delete.md) | 中文 + +## 问题 + +install-lefthook 与 translation-pairing 的 fixture 把仓库真实的 `scripts/`、`node_modules` 和 tsx 包目录用 junction 链进 fixture 树，让 installer 探测能穿透解析。Windows 的递归删除可能把 junction（MOUNT_POINT 重解析点）当作目录并跟随进其目标；Git 的 `worktree remove` 正是这样删掉了仓库被跟踪的 `scripts/` 和 tsx 包（事故的插桩把删除定位到这一步）。因此，信任删除器的 fixture 清理删掉的是仓库自己的源码，而不是 fixture。 + +## 决策 + +`scripts/test-fixture-cleanup.ts` 拥有 junction 安全的 fixture 拆除：`unlinkFixtureLinks` 先遍历并解链所有重解析点，`removeFixtureSafely` 再删除已无链接的树（带 Windows 异步句柄重试）。所有受影响的 `afterEach` 和 `worktree remove` 前的钩子都调用它。通用规则记录在 `docs/defensive-patterns.md`：链接形态的路径用 unlink 删除，递归 `rmSync` 只留给确知为真实目录的路径。 + +## 考虑过的替代方案 + +**只信任递归删除。** 否决：特定删除器是否跟随 junction 随工具和版本而异，而 `git worktree remove` 这一条路径已经摧毁过被跟踪文件；任何清理都不该拿仓库去赌这个行为。 + +**复制而不是 junction 真实目录。** 否决：fixture 的意义就是用真实内容探测真实 installer 路径，复制品会失去被测边界。 + +## 后果 + +fixture 拆除不再能穿过 junction 触及仓库源码。额外开销只是对小型 fixture 树的一趟 lstat/unlink。这个摧毁数据的缺陷现在在 defensive-patterns 规则旁有了持久化的原因，helper 也是未来所有 junction fixture 共享的拆除路径。 From ed463d74bfce64463a8f39fd6c46df79670b8db3 Mon Sep 17 00:00:00 2001 From: Huanqi Cao Date: Wed, 12 Aug 2026 16:10:45 +0800 Subject: [PATCH 33/41] fix(workflow): use optional syntax for the tsconfig pin parameter --- packages/workflow/workflow-worker-thread/src/host.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/workflow/workflow-worker-thread/src/host.ts b/packages/workflow/workflow-worker-thread/src/host.ts index fee869753f..394b65ca8a 100644 --- a/packages/workflow/workflow-worker-thread/src/host.ts +++ b/packages/workflow/workflow-worker-thread/src/host.ts @@ -44,7 +44,7 @@ interface ChildRecord { */ export function workerSpawnEnv( platform: NodeJS.Platform = process.platform, - tsconfigPath: string | undefined = undefined, + tsconfigPath?: string, ): NodeJS.ProcessEnv { const env: NodeJS.ProcessEnv = {} if (platform === 'win32') { From b5a130063d8fb26a69765962e6d57f14fe4f02bc Mon Sep 17 00:00:00 2001 From: Chinesezjc Date: Thu, 13 Aug 2026 15:09:44 +0800 Subject: [PATCH 34/41] fix(scripts): widen fixture-cleanup EPERM retry window The failover Windows pool releases child-process and antivirus file handles slower than the hosted pool; a 1-second window (10 x 100 ms) still exhausts before release under load, so install-lefthook fixture cleanup threw EPERM in rmSync. A 10-second window (50 x 200 ms) covers the slower release without pinning afterEach cleanup, since a terminated child's handles drain once rather than reacquire. --- scripts/test-fixture-cleanup.ts | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/scripts/test-fixture-cleanup.ts b/scripts/test-fixture-cleanup.ts index 9c58eea890..bf6fb18fea 100644 --- a/scripts/test-fixture-cleanup.ts +++ b/scripts/test-fixture-cleanup.ts @@ -37,10 +37,13 @@ export function unlinkFixtureLinks(path: string): void { * Remove one fixture tree after its junctions are unlinked (see * {@link unlinkFixtureLinks}). Retries the removal: Windows releases child * process and antivirus file handles asynchronously, and an unretried - * `rmSync` fails immediately with EPERM under load. + * `rmSync` fails immediately with EPERM under load. A 10-second retry window + * (50 attempts × 200 ms) covers the failover pool's slow handle release; + * release is one-shot (a terminated child's handles drain, not reacquired), + * so a bounded window suffices and never pins afterEach cleanup. * @param path - the fixture tree to remove. */ export function removeFixtureSafely(path: string): void { unlinkFixtureLinks(path) - rmSync(path, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }) + rmSync(path, { recursive: true, force: true, maxRetries: 50, retryDelay: 200 }) } From 8d6f5164ab7e77d8a72549b2729fcf09e03a60fd Mon Sep 17 00:00:00 2001 From: imccyu <276526105+imccyu@users.noreply.github.com> Date: Thu, 13 Aug 2026 15:18:03 +0800 Subject: [PATCH 35/41] fix(release): make publication retry, space out, and skip what landed MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit A landlock publication failed with `E409 Failed to save packument` on the second of three packages. The registry answers a write it could not commit that way, and publishing several packages back to back is what provokes it. Neither publish path could recover. The native sequence published from a shell loop of bare `npm publish` calls: no retry, and no way to resume, because the registry rejects a repeat of an existing version permanently — so a failure partway through left the release stuck. publish.ts skipped versions already present, which made a re-run safe, but had no retry either. Both paths now attempt a tarball up to four times, space writes at least two seconds apart, and back off 2s/4s/8s between attempts. Every retry re-reads the registry first, because a reported failure can answer a write that landed anyway: a version that now exists with this tarball's integrity counts as published rather than as one to place again. That same re-read is what turns a mid-run `E403 cannot publish over the previously published versions` into a skip when the bytes match, and leaves it a hard failure when they do not. The native sequence gets the registry comparison publish.ts already had, through its own script rather than shared code — the two sequences keep separate publication paths. Its publish job now checks out the repository, which the shell loop did not need. Verified against a scripted registry: a clean publish, one E409 then success, an E409 whose write landed anyway, E409 on every attempt (fails after four), and a version already present with matching integrity (publishes nothing). --- ...2026-08-10-npm-release-sequences.i18n.yaml | 4 +- .../2026-08-10-npm-release-sequences.md | 4 + .../2026-08-10-npm-release-sequences.zh.md | 4 + .github/workflows/landlock-run-release.yml | 20 ++- .../landlock-run/scripts/publish-release.mjs | 165 ++++++++++++++++++ scripts/release/publish.ts | 87 +++++++-- 6 files changed, 263 insertions(+), 21 deletions(-) create mode 100644 native/landlock-run/scripts/publish-release.mjs diff --git a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.i18n.yaml b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.i18n.yaml index 5ba0aef406..59b51bbe6b 100644 --- a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.i18n.yaml +++ b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.i18n.yaml @@ -2,5 +2,5 @@ # side as of the last confirmed-consistent state. Both languages carry equal authority; # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write .agents/notes/implemented/process/2026-08-10-npm-release-sequences.md -2026-08-10-npm-release-sequences.md: e8138aef923e201cc0883232f48ce6921452ca00 -2026-08-10-npm-release-sequences.zh.md: 7ce9fa01dbe10cbdae5585f64392d0ca6a9fb868 +2026-08-10-npm-release-sequences.md: e74a4ac8f2aadd8665ec0db198c6a317a0c201bc +2026-08-10-npm-release-sequences.zh.md: e152163976f945224f2524fccd7f831ba98e8161 diff --git a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.md b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.md index e8138aef92..e74a4ac8f2 100644 --- a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.md +++ b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.md @@ -70,6 +70,10 @@ Publication runs only from GitHub Actions; there is no local publication path. P The third state catches code that changed without a version bump. The first two provide idempotence — re-running publish over one artifact republishes nothing and needs no manual selection of packages. The same rule resolves the tension between one vendor release carrying several tags and a workflow that can only run from one ref: the workflow never infers which packages to publish from the tag it ran from. +All three sequences decide this way, including the native one: it publishes through its own script rather than a shell loop, because a loop of bare `npm publish` calls cannot be retried — the registry answers a repeat of an existing version permanently, so one failure partway through left no way forward. + +Two registry behaviours shape how a publish is attempted. Writes are spaced by at least two seconds and retried with a backoff, because publishing several packages back to back outruns the registry's own processing and earns `E409 Failed to save packument`. And every retry re-reads the registry first: a reported failure can answer a write that landed anyway, so a version that now exists with this tarball's integrity counts as published rather than as a version to place again. + ### Workspace-internal references use the `workspace:` protocol Every reference to a workspace member uses `workspace:^`, so `pnpm pack` substitutes a range matching the target version: sibling `peerDependencies` follow the family version, and a reference to a vendored package follows that package's own line. The Landlock platform packages keep `workspace:*`, which publishes the exact version, because a platform package and its entry must agree exactly. diff --git a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.zh.md b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.zh.md index 7ce9fa01db..e152163976 100644 --- a/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.zh.md +++ b/.agents/notes/implemented/process/2026-08-10-npm-release-sequences.zh.md @@ -70,6 +70,10 @@ tag 只是 commit 指针，不是发布成功的证明。bump 会向 registry 第三态拦住「改了代码却没 bump 版本」。前两态给出幂等——同一个 artifact 重跑 publish 不会重复发布，也不需要人工挑拣包。同一条规则还解决了「一次 vendor 发布携带多个 tag，而 workflow 只能从一个 ref 触发」的矛盾：workflow 从不从触发它的 tag 去推断该发哪些包。 +三条序列都按这套判定，native 也在内：它通过自己的脚本发布，而不是 shell 循环——一串裸 `npm publish` 无法重试，registry 对「重发已存在的版本」的回答是永久失败，因此中途失败一次就没有前路了。 + +registry 的两个行为决定了「怎么尝试一次发布」。写入之间至少间隔两秒并带退避重试，因为连续背靠背发多个包会超出 registry 自身的处理速度，换来 `E409 Failed to save packument`。而每次重试都先重查 registry：报出来的失败可能对应一次其实已经落地的写入，所以「该版本现在存在且 integrity 与本 tarball 相同」算作已发布，而不是又一个待放置的版本。 + ### workspace 内部引用走 `workspace:` 协议 所有指向 workspace 成员的引用都用 `workspace:^`，由 `pnpm pack` 替换成匹配目标版本的范围：兄弟包的 `peerDependencies` 跟随族版本，指向 vendored 包的引用跟随那个包自己的版本线。Landlock 平台包保留 `workspace:*`（发布成精确版本），因为平台包与它的入口必须版本完全一致。 diff --git a/.github/workflows/landlock-run-release.yml b/.github/workflows/landlock-run-release.yml index 8448af1ad1..76d08e9e4c 100644 --- a/.github/workflows/landlock-run-release.yml +++ b/.github/workflows/landlock-run-release.yml @@ -147,6 +147,12 @@ jobs: contents: read id-token: write steps: + # The publish script is the only repository file this job needs, and it + # imports nothing outside Node's builtins, so there is no install step. + - uses: actions/checkout@v4 + with: + persist-credentials: false + - uses: actions/setup-node@v4 with: node-version: 24 @@ -167,12 +173,8 @@ jobs: fi - name: Publish tarballs - run: | - version="${GITHUB_REF#refs/tags/landlock-run-v}" - tag_args=() - case "$version" in *-*) tag_args=(--tag next);; esac - while IFS= read -r tarball; do - # No --access: publishConfig.access in each manifest decides, and a - # command-line flag would override it. - npm publish "dist/npm/${tarball}" "${tag_args[@]}" - done < dist/npm/publish-order.txt + # Publication is decided per package against the registry, so re-running + # this job over the same artifact skips what already landed instead of + # failing on it. A bare `npm publish` loop could not be retried: the + # registry answers a repeat of an existing version permanently. + run: node ./scripts/publish-release.mjs dist/npm diff --git a/native/landlock-run/scripts/publish-release.mjs b/native/landlock-run/scripts/publish-release.mjs new file mode 100644 index 0000000000..76c875b8d3 --- /dev/null +++ b/native/landlock-run/scripts/publish-release.mjs @@ -0,0 +1,165 @@ +#!/usr/bin/env node +/** + * Publish the packed launcher family from the tarballs `pack-release.mjs` + * produced, in `publish-order.txt` order. + * + * What goes out is decided per package against the registry, never from the + * order file alone: a version the registry lacks is published, a version whose + * published tarball has the same integrity is skipped, and a version whose + * published tarball differs fails the run — that last case means the content + * changed without a version bump. Skipping on identical integrity is what makes + * re-running the publish step over the same artifact safe, which matters here + * because a partial publication used to leave no way forward: republishing an + * existing version fails permanently. + * + * Usage: `node scripts/publish-release.mjs [packed dir]`. + */ + +import fs from 'node:fs'; +import path from 'node:path'; +import crypto from 'node:crypto'; +import { spawnSync } from 'node:child_process'; +import { setTimeout as sleep } from 'node:timers/promises'; +import { root } from './repo.mjs'; + +/** + * Registry codes that answer a write which did not settle, rather than a + * rejection of what was sent. `E409 Failed to save packument` is the one this + * sequence actually hits: publishing the platform packages and the entry back + * to back can outrun the registry's own processing. A rejected payload (`E403` + * over an existing version, a malformed manifest) never clears on a retry. + */ +const TRANSIENT_PUBLISH_CODES = ['E409', 'E429', 'E500', 'E502', 'E503', 'E504', 'ETIMEDOUT', 'ECONNRESET', 'EAI_AGAIN']; + +/** How many times one tarball's publish is attempted before the run fails. */ +const PUBLISH_ATTEMPTS = 4; + +/** + * Shortest gap between two publishes, and the first retry backoff. The registry + * needs a moment to commit a packument before the next write; back to back + * publishes are what produce `E409`. + */ +const PUBLISH_SPACING_MS = 2_000; + +const destination = path.resolve(process.argv.slice(2).find((arg) => !arg.startsWith('--')) || path.join(root, 'dist', 'npm')); + +/** + * @param {string} output Combined npm output. + * @returns {boolean} True when the registry reported a write it did not commit. + */ +function isTransientFailure(output) { + return TRANSIENT_PUBLISH_CODES.some((code) => output.includes(`code ${code}`)); +} + +/** + * @param {string} tarball Absolute tarball path. + * @returns {string} The `sha512-` integrity npm records for it. + */ +function integrityOf(tarball) { + return `sha512-${crypto.createHash('sha512').update(fs.readFileSync(tarball)).digest('base64')}`; +} + +/** + * @param {string} tarball Absolute tarball path. + * @returns {{name: string, version: string}} What the packed manifest declares. + */ +function packedIdentity(tarball) { + const result = spawnSync('tar', ['-xOzf', tarball, 'package/package.json'], { encoding: 'utf8' }); + if (result.status !== 0) throw new Error(`cannot read the manifest inside ${tarball}:\n${result.stderr}`); + const manifest = JSON.parse(result.stdout); + if (typeof manifest.name !== 'string' || typeof manifest.version !== 'string') { + throw new Error(`${tarball} manifest lacks name/version`); + } + return { name: manifest.name, version: manifest.version }; +} + +/** + * Ask the registry whether a version exists, and with what integrity. + * @param {string} name Package name. + * @param {string} version Package version. + * @returns {{kind: 'absent'} | {kind: 'present', integrity: string}} Registry state. + */ +function registryState(name, version) { + const result = spawnSync('npm', ['view', `${name}@${version}`, 'dist.integrity', '--json'], { encoding: 'utf8' }); + if (result.status !== 0) { + const output = `${result.stdout}${result.stderr}`; + if (output.includes('E404') || output.includes('404 Not Found')) return { kind: 'absent' }; + throw new Error(`npm view ${name}@${version} failed:\n${output}`); + } + const parsed = JSON.parse(result.stdout); + if (typeof parsed !== 'string' || parsed === '') { + throw new Error(`registry reported no dist.integrity for ${name}@${version}`); + } + return { kind: 'present', integrity: parsed }; +} + +/** + * Publish one tarball, retrying a registry write that did not settle. + * + * Every retry re-reads the registry first, because `E409` can answer a write + * that landed anyway: republishing a version that now exists fails permanently, + * so the same integrity appearing under the failed attempt counts as success. + * @param {string} tarball Absolute tarball path. + * @param {string} name Package name the tarball declares. + * @param {string} version Package version the tarball declares. + */ +async function publishTarball(tarball, name, version) { + // A prerelease version never takes the latest dist-tag. + const tagArgs = version.includes('-') ? ['--tag', 'next'] : []; + for (let tries = 1; tries <= PUBLISH_ATTEMPTS; tries += 1) { + // No --access: publishConfig.access in each manifest decides, and a + // command-line flag would override it. + const result = spawnSync('npm', ['publish', tarball, ...tagArgs], { encoding: 'utf8' }); + const output = `${result.stdout}${result.stderr}`; + if (result.status === 0) return; + + const settled = registryState(name, version); + if (settled.kind === 'present' && settled.integrity === integrityOf(tarball)) { + console.log(`landlock publish: ${name}@${version} landed despite a reported failure, continuing`); + return; + } + if (tries === PUBLISH_ATTEMPTS || !isTransientFailure(output)) { + throw new Error(`npm publish ${name}@${version} failed:\n${output}`); + } + const backoff = PUBLISH_SPACING_MS * 2 ** (tries - 1); + console.log( + `landlock publish: ${name}@${version} hit a transient registry failure` + + ` (attempt ${tries} of ${PUBLISH_ATTEMPTS}), retrying in ${backoff}ms`, + ); + await sleep(backoff); + } +} + +const order = fs + .readFileSync(path.join(destination, 'publish-order.txt'), 'utf8') + .split('\n') + .filter((line) => line !== ''); + +let published = 0; +let skipped = 0; +for (const filename of order) { + const tarball = path.join(destination, filename); + const { name, version } = packedIdentity(tarball); + const state = registryState(name, version); + if (state.kind === 'present') { + const local = integrityOf(tarball); + if (state.integrity !== local) { + throw new Error( + `${name}@${version} is already published with different content` + + `\n registry: ${state.integrity}\n packed: ${local}` + + '\nBump the version, or investigate why the build is not reproducible.', + ); + } + console.log(`landlock publish: ${name}@${version} already published, skipping`); + skipped += 1; + continue; + } + // Space out the writes: the gap belongs between publishes, so a run that only + // skips does not wait at all. + if (published > 0) await sleep(PUBLISH_SPACING_MS); + await publishTarball(tarball, name, version); + console.log(`landlock publish: ${name}@${version} published`); + published += 1; +} + +console.log(`landlock publish: ${published} published, ${skipped} already present`); diff --git a/scripts/release/publish.ts b/scripts/release/publish.ts index 2c68dc7f9f..11ad01173c 100644 --- a/scripts/release/publish.ts +++ b/scripts/release/publish.ts @@ -15,16 +15,46 @@ import { createHash } from 'node:crypto' import { readFileSync } from 'node:fs' import { join, resolve } from 'node:path' +import { setTimeout as sleep } from 'node:timers/promises' import { parseArgs } from 'node:util' import { releaseFamily } from './families.ts' -import { attempt, isEntry, run } from './process.ts' +import { attempt, isEntry } from './process.ts' import { packedIdentity, readPublishOrder } from './tarball.ts' +/** + * Registry codes that answer a write which did not settle, rather than a + * rejection of what was sent. `E409 Failed to save packument` is the one this + * sequence actually hits: publishing several packages in a row can outrun the + * registry's own processing. A rejected payload (`E403` over an existing + * version, a malformed manifest) never clears on a retry and must surface. + */ +const TRANSIENT_PUBLISH_CODES = ['E409', 'E429', 'E500', 'E502', 'E503', 'E504', 'ETIMEDOUT', 'ECONNRESET', 'EAI_AGAIN'] as const + +/** How many times one tarball's publish is attempted before the run fails. */ +const PUBLISH_ATTEMPTS = 4 + +/** + * Shortest gap between two publishes, and the first retry backoff. + * + * The registry needs a moment to commit a packument before the next write; back + * to back publishes are what produce `E409`. + */ +const PUBLISH_SPACING_MS = 2_000 + /** What the registry knows about one version. */ type RegistryState = | { readonly kind: 'absent' } | { readonly kind: 'present'; readonly integrity: string } +/** + * Whether a failed publish is worth another attempt. + * @param output - combined npm output. + * @returns True when the registry reported a write it did not commit. + */ +function isTransientFailure(output: string): boolean { + return TRANSIENT_PUBLISH_CODES.some(code => output.includes(`code ${code}`)) +} + /** * The subresource integrity string npm records for a tarball. * @param tarball - absolute tarball path. @@ -54,8 +84,47 @@ function registryState(name: string, version: string): RegistryState { return { kind: 'present', integrity: parsed } } +/** + * Publish one tarball, retrying a registry write that did not settle. + * + * Every retry re-reads the registry first, because `E409` can answer a write + * that landed anyway: republishing a version that now exists fails permanently, + * so the same integrity appearing under the failed attempt counts as success. + * @param tarball - absolute tarball path. + * @param name - package name the tarball declares. + * @param version - package version the tarball declares. + */ +async function publishTarball(tarball: string, name: string, version: string): Promise { + // A prerelease version never takes the latest dist-tag. + const tagArgs = version.includes('-') ? ['--tag', 'next'] : [] + for (let tries = 1; tries <= PUBLISH_ATTEMPTS; tries += 1) { + // No --access: the sequences do not share one access level, so a + // command-line flag could not serve both and would override the manifest + // that does. Each packed manifest decides, and + // check-workspace-constraints holds every manifest to its sequence's level. + const result = attempt('npm', ['publish', tarball, ...tagArgs]) + const output = `${result.stdout}${result.stderr}` + if (result.status === 0) return + + const settled = registryState(name, version) + if (settled.kind === 'present' && settled.integrity === integrityOf(tarball)) { + console.log(`release publish: ${name}@${version} landed despite a reported failure, continuing`) + return + } + if (tries === PUBLISH_ATTEMPTS || !isTransientFailure(output)) { + throw new Error(`npm publish ${name}@${version} failed:\n${output}`) + } + const backoff = PUBLISH_SPACING_MS * 2 ** (tries - 1) + console.log( + `release publish: ${name}@${version} hit a transient registry failure` + + ` (attempt ${String(tries)} of ${String(PUBLISH_ATTEMPTS)}), retrying in ${String(backoff)}ms`, + ) + await sleep(backoff) + } +} + /** Publish the family named by `--family` from the directory named by `--from`. */ -function main(): void { +async function main(): Promise { const { values } = parseArgs({ options: { family: { type: 'string' }, from: { type: 'string' } }, allowPositionals: false, @@ -86,17 +155,15 @@ function main(): void { skipped += 1 continue } - // A prerelease version never takes the latest dist-tag. - const tagArgs = version.includes('-') ? ['--tag', 'next'] : [] - // No --access: the sequences do not share one access level, so a - // command-line flag could not serve both and would override the manifest - // that does. Each packed manifest decides, and - // check-workspace-constraints holds every manifest to its sequence's level. - run('npm', ['publish', tarball, ...tagArgs]) + // Space out the writes: the gap belongs between publishes, so a run that + // only skips does not wait at all. + if (published > 0) await sleep(PUBLISH_SPACING_MS) + await publishTarball(tarball, name, version) + console.log(`release publish: ${name}@${version} published`) published += 1 } console.log(`release publish: family ${family.id}, ${String(published)} published, ${String(skipped)} already present`) } -if (isEntry(import.meta.url)) main() +if (isEntry(import.meta.url)) await main() From f1e8187974707f3dc783a8ae01722ff9b859b2bc Mon Sep 17 00:00:00 2001 From: imccyu <276526105+imccyu@users.noreply.github.com> Date: Thu, 13 Aug 2026 15:29:25 +0800 Subject: [PATCH 36/41] fix: static fix: tar --- knip.json | 1 + native/landlock-run/package.json | 1 + 2 files changed, 2 insertions(+) diff --git a/knip.json b/knip.json index e06fa48220..3017292382 100644 --- a/knip.json +++ b/knip.json @@ -9,6 +9,7 @@ "musl-gcc", "python3", "sandbox-exec", + "tar", "taskkill", "where.exe" ], diff --git a/native/landlock-run/package.json b/native/landlock-run/package.json index ab7bb611fd..e043bea0f2 100644 --- a/native/landlock-run/package.json +++ b/native/landlock-run/package.json @@ -19,6 +19,7 @@ "release:assemble-prebuilds": "node ./scripts/assemble-prebuilds.mjs", "release:verify": "node ./scripts/verify-release.mjs", "release:pack": "node ./scripts/pack-release.mjs", + "release:publish": "node ./scripts/publish-release.mjs", "release:verify-packed-install": "node ./scripts/verify-packed-install.mjs" }, "devDependencies": { From 6e05cb7ff5bc9834fcf303800264fa3cdb3724e8 Mon Sep 17 00:00:00 2001 From: imccyu <276526105+imccyu@users.noreply.github.com> Date: Thu, 13 Aug 2026 15:30:12 +0800 Subject: [PATCH 37/41] release(landlock-run): 0.1.1 --- native/landlock-run/package.json | 2 +- native/landlock-run/packages/entry/package.json | 2 +- native/landlock-run/packages/linux-arm64/package.json | 2 +- native/landlock-run/packages/linux-x64/package.json | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/native/landlock-run/package.json b/native/landlock-run/package.json index e043bea0f2..be0ca9732d 100644 --- a/native/landlock-run/package.json +++ b/native/landlock-run/package.json @@ -1,6 +1,6 @@ { "name": "@deepseek-ai/node-addon-landlock-run-workspace", - "version": "0.1.0", + "version": "0.1.1", "private": true, "type": "module", "license": "BSD-3-Clause", diff --git a/native/landlock-run/packages/entry/package.json b/native/landlock-run/packages/entry/package.json index 8fcab55ee1..5e34cf96f0 100644 --- a/native/landlock-run/packages/entry/package.json +++ b/native/landlock-run/packages/entry/package.json @@ -1,6 +1,6 @@ { "name": "@deepseek-ai/node-addon-landlock-run", - "version": "0.1.0", + "version": "0.1.1", "type": "module", "description": "Landlock self-restrict-then-exec launcher for sandboxing subprocesses on Linux: per-platform prebuilt static binaries plus the JS seam that resolves, probes, and speaks their CLI contract", "repository": { diff --git a/native/landlock-run/packages/linux-arm64/package.json b/native/landlock-run/packages/linux-arm64/package.json index 3af83f6a19..8e6affec6a 100644 --- a/native/landlock-run/packages/linux-arm64/package.json +++ b/native/landlock-run/packages/linux-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@deepseek-ai/node-addon-landlock-run-linux-arm64", - "version": "0.1.0", + "version": "0.1.1", "description": "Prebuilt landlock-run Landlock launcher binary for linux-arm64 (static musl) — resolved as a file path by @deepseek-ai/node-addon-landlock-run, never imported", "repository": { "type": "git", diff --git a/native/landlock-run/packages/linux-x64/package.json b/native/landlock-run/packages/linux-x64/package.json index 10721032b4..7e9cab7a1a 100644 --- a/native/landlock-run/packages/linux-x64/package.json +++ b/native/landlock-run/packages/linux-x64/package.json @@ -1,6 +1,6 @@ { "name": "@deepseek-ai/node-addon-landlock-run-linux-x64", - "version": "0.1.0", + "version": "0.1.1", "description": "Prebuilt landlock-run Landlock launcher binary for linux-x64 (static musl) — resolved as a file path by @deepseek-ai/node-addon-landlock-run, never imported", "repository": { "type": "git", From 9ba718104cd28614588a336764b95a4d02434d41 Mon Sep 17 00:00:00 2001 From: Ag Date: Thu, 13 Aug 2026 15:32:38 +0800 Subject: [PATCH 38/41] docs: align community QR assets --- assets/community-wechat-official-account.png | Bin 156490 -> 35586 bytes assets/community-wecom-assistant.png | Bin 26676 -> 60324 bytes assets/community-wecom-survey.png | Bin 5508 -> 30477 bytes 3 files changed, 0 insertions(+), 0 deletions(-) diff --git a/assets/community-wechat-official-account.png b/assets/community-wechat-official-account.png index 32e36e34797a075d1118299bc772bf390c000761..222a051dc89dfcecd4d80d8992ded2b9108ed4f9 100644 GIT binary patch literal 35586 zcmW(-1yGb-7hbv%>F(}WLb|)VyFoytM7kR(>F!P`=}t*0K^j3o8Y$tw-@n5QJAzy9 zx#v7}h*npX!$2iQg+L$}3i8sL5C{yo3j;xh1>Y91#JC`km~jPZ32mRX({Aq^T$@%= z(+!i{uM9}s=$yzQjPknLA*hH$C#HJZ@V8lBdQ-+3SpN?4Lp zp|s;4Y%_8MBR46KX2@rZZoE7p>;E>MLuWX(OmtjDx8KZI#SB|E>a!BZ8?xf>FJEwF zDqr}lTXQqTU?+~U;VTJ~C(0Jz@fhPLj!xV17)KC{T5@#-{X`YL@F9J6;>)HWltiCp+_EQw}T+^nDU5hoT%HA-)=+9t~je7^S)CPxkLqYghnC*mG* z{IYiH<>w(G(GT8rW4A-V)<4&deS96ATvdiHW?`4pwJ)=HM`FkiS4nc@jfS=C>Bozz zJfsPp$4kSz@9^;L1xTNHNfkKB8;+aR1V}L>2RV5Thj-HY&9T@=@F-BjrL(Ds zuh#Lem@!82Ux(IlDq{?&-o9PjudjY$b#t9hK_7{`WV<4MerlbwY~0$$eEBZ4zwP2? zgKCoMhUw5sj6rVCYh1AW`+7s-#0WoZ>`tri?oBukM!f!Az2XM$yD8Oy*m(t}Z=4VG zcXM5u9%>i92aio6;_gznme;=BWHLDyD36~+vP@>kRs6MR-Y<^XST0nwrIhioc_F+# zt6cNChn+R5XLz$kvq`@lYMND5W&T;ZSR)R%5MyxU6-Q|PHs;aL?)lu}+wf)ic7?(1 zP$g~m?)JT{>AC#=4a2y!egpvy-fR@FblWR%xS;AM%3OK2=QTp(3(D*I!=I~svm48( z0_dD)O2<6pVEJRVkei;pscWK`=KSeqfDQ2XCL~NGNN^bRr!#4 zYq{IB{?2}`fiHU+C6uj&WyN&s!e^-bu=KS(C)+CS(0Gn5u}A@tc?7amy=gaRo)5Kd z`KohWWu?Jaui7WZFuk)MZD(`Ea;IKG2`%H+hF=`N|JnHZ?wt|q=g!VfamqehFB6lE zo#EKIxP;MNudn|iDFWnw?WePw7=ojLjyPB0DM0!w?_=GxZ3-)#Pq1pP;LXWu3b}E= zd4tn(oh;v+JniMGT|OQjo`o+veyok1-76yQu(bgCl*+Cyzkd%mP|u1F39F}G$cs&+ zJM*PVEX>Ry{RKaXgXBJT{{+R)VAE!CzSZB+(czYwTYv*vMQU0anXnJmKaqgf$`Y+C z>+eR%E^uB9nr$&|2DazGQQ(Z1Q54o2D8zt(uLkD4*|{I25@yr-qEu5Mh~{~=H}EB_5>ZCO_vW`uFLHgi{ajH>L-Xg)pXWJSXjdN2 z2VX6?gc0?EAE$6m|LM9?mC>ltWr=T=$k9s+8=+*)u*Fw*zcpaRU#X3^!>KHN9WP6U zi9~vB`J~Eo#`aD`OF;A8LI{Cdhw;c@0`=37k7aBt0{N+%05rX2)j0xLQ`5BFG%N(QO#;vPg?PJK2K{*y;6Ycm?nGh|s2w_9(OX!{24#U6i)kj_Q zOg#v?4Z(5BDqECsGP~LDL`S!Ult;Z!r8}bZhUBn$T*$(7X6 zSrWHJZSvsWNONd`)VCPc`uI!;;g4jU8r#3x&BN$Fgl-o(|Fd#i@(D`weStP+pT|0C zHjAkQQZ{?Z3zNIr+nYCPIChmaAm*r+4_m^dW=l5U?Pv|DSy@?md9@OL#`C6$94sWV zkXGhKyvxqc9+ry@t*WXLfRZQ5DPJ*!e<&OY{kaUfJQYLAb5iUTum5@FMMbKk-=D1M zgBj6B=cD;jtXOEzPQL{kBV&f}ho))U$%6f>Ut%x!D~(nSDE%l4>+8br52nh>=nsfU zjC1n+Zw@lktK_iziTZ;U`Zq$0B7WjY@;zt?C zZ#$K7H6uo0S-jHtO8C4FG~jo>nbWqtn_}Q`J39qYrv==$`u_dhRNEZ2ZGOAiL$-t+ zz>gmrPt5y!Czb;mcq>gpIF!Jv{Q4Ht4gcoz8bm`b9nt-Uxu zKOpJ38Swa4&_exU_wS?87e|EJvBgh*m*Whw4-Vqr`ai#Fd_9fy z#dR}}%p;kNR1`lJp*7E8p^WHc{J%-1OphLhOF)1G3!`w&7tVRezv%}@P@uB1xCl>^ zvG(g#;2oR?O*r<;AMaizLG-Ho;N~BWUo7v2qh??bZB$iNM^eb_Nw#i{wX{Ne;fsY= z$LMnl+#5C=UqiGkeqaTU8b1%`FYs4!K;*SPKT#Fgvslxt65lChps3RcdlP!_+({HAFQvh zS5-0V=%h^GNVVe(G>urTJ2tf<9cZN(LeQ0JtT9C<4n9xY7JrXpih~J-2~~mp!}`tS z0S~z)R3$OHZEp@8Rkj#SAd`~^^&^IieM}x4{@eLsdP#JPw|yUff6r<}Za-}8UmnI@ zm_nS`B7|b5_Ib+pDB5E{x?8jWf-VW$>T~kM)z&JD+=eZmZEYC^ zz1ZAl@>Bq^V9+$lWXNzuk^N~wwe<1&5rND#@^iZGhuGme)=$Ztmr*}zGtTkR9FH*B z#;F>j90wo}f9RSgw8w!vv%!VlA|ssrTZwAWB4$cS$Ymu*klA1zhc_b_7S_x0VL^R_ zpJ+X{?L27Rs2#Jg^mA*7n)$h3rfi!D>7;P^e`+-cdz6-1Da>!V0+5Jc-)}y9gJwSVZ^A;y|m|iWf%lpifILu3c^!=}I;f^j`AEIxAzB`&US&!EkG;8a`OH)TV zcWg(HxO5)TM_~`d#mN@`d;E*ki{;JRyy|z>{rAs$2TrqG0X#1;tPwVN*lH zhbf*J`?Y`0SEkLj)8HJ>!35O{|GQoQbD>zBsO`tUgKXCaKhbM%9i0sT(ft2zlp82B zn7x{<%jB`E({CJb{Gyrtm>~3rk&&_Bi7}w}<@Sebc_My3LgN@1n44hgFucbo>Ef-< zR5{BR=0i(C8MyuU_fKh{dxtR^KC9c;4HVa%zmIm)S;JM;-voB!l-N6@U5jSd&(qBU zI{Y8KRFonFA@}$9RwHp-^A)8^>CgYp0_}QBq7gh|IeP9ay;g5ee=w-!u_i<%Swdwr zbZZT7j>_|!#6+I&cDq0RE$h9w_iNkmGE!1f8fe`+IQR)(Q)YN~PC?qas~;?*SbFcQ z2@eZPbz>s{#`c|wghrtKX2GG@@T0>iDMemHoZAbF>vPK8+nA)iHfQzYtc=ug-6@#g z;vlq|o}MOrt5is0!cNeNkX|?QE3^*6-{;K7&&TK6{ZpJ$oMK3qENoytEb2KQC3P#T zAA=+o``yTvbuz@aR=3);7N^sH>Zs(IF}B@7mfYZzDNfl4cRkh+d@8j8g)H;ho&S-B@)AByL0f*|_5%#pjfz|vqPc;s1S1Pr+e z26)YfC@y^BoWev^ff-H%*+K5RJm`*eu(7?z_VRuQ+LNG@`@|7}${3kw_|DTgQap9H}>kC334V<3h3&GFx10<*C;#*A5x?(6vru$Cx;)cZ$&=d4*69LTcU(Z_C9W$JwGh>Mhsf$&v54d>3w+?`qLiTq{S4& z?XupklFb)v#|l$^{b%Fj@lvfl6PWE^H=h6YzW5J>p%7KthyOU(+w;4c=D(wFU~PN* z!|P(0fFZo&p%>xP#I_N*nV8fPQtH)IRG9bH)YL!;IhkTZxoBEi37o7Q= zbo&@b?88?u;DRCXEs{#Lx-4%gd$L!ZWyz`TK9@xwx_9ig^WU-4`}5$Tgh!d7hOw;R zDG;@cvju_H^7r?5G)d2qZk7t4-?N2MBjbsxLZ{HSA1ZD0`mC+*f2s1-W@lwhOiU2o zb@cQ+*ED}ClAx{r4uHR@h6W4?b3ixf*l*sv@o3CcE(0aS$r--ka<){P-5#K?2jSWs zi6`NjqI(1N6V1;!6gX{JFn8ZYnQgQh1w}Qds*YRQ+4*0S9(pO-g-MKPgdl;lr093u z`u2zU)^&o*xro>4TAD#I;C$Cd3k+gnV&O3j>WqtpQjvS>+M&Gt<|IKQ614ZP{FG{N zcr|g*^;B~NUVD>yVDY=GBWIJwaA<35`AIO;NQw)%iABVt*!W|m^TkF3A2DuFvVClud+sqTH+~rdEExXAr-9g zVn+uRO=a;qL8hcge5QGqA$gg6=QDxNJT*EoqVpbN=Mm=dV`j;Q95F@88JxirzX&T) z%EE^)MHe3nc2HFHG8z>Y;bV=G1mXj961YzaTAp(&h2`UL9LXB3OwflJ#q{8QYxwtD zj5)J)Y+Hvp$}}5sQjXw4r8$tzqTl?>!V(b~+ZeZVRn1IPmv-Yqi9(kSp5I##e(i+# zi8CrPMJ!7ek7)|gwP@LzX5OVnUPW_I;dPn2bMg~Y%PH=ttkU<{4m+Dsl+nd49~L+N&bfe4?>oGw zqNSE4o~Nzez<7>T)lXKKM+LPg)p2zhjm8<>lJAlEEVh=4+R@WRfnKf>*HBy zI%&8H_Sk=zGVAQ$%qd96Y}iqmtcl;j=!IWSTADSoWMyZsreR=U0BYzP7Kx%)d7z}J zbTo96XbL4FHTG?_m+i9%FTYJTFfd@S$dahh<=HCxUD(d&`tu1$Dfj=LFqjRLN+Hyg}EZ&$49dmfk{_xIDyo&g(gGy{)uAII}e9bTIFhswv>lQ&)``W=mE z+qds_M6?{x{!GCf?78v=tS>Vq>1G*DnjX{uHJk zX$1I9AHt-6Z`=Ig;rfVSbV&|I=540-IEs(EDN7+qR)}Ny<>Y`dt1Cj56EwK*T%7E6 zJK>cyU=Fns6ZyMW_gjkaG*Bqi+Qx<#3N_cTffC>Nb|cz_Zk|PwXo{FeyI1#Dx?02c z=M3tGioq>mhFX1JUM9fDx2!SI(b=LZ3!hV%d(lEH$0<~fGf?g3QB3RFSAcwQT57Q6 z6PJd2B76=#6iBlly$unGA!0{vEWQtO3M%`w)$0~T#Y-(bIo2p^qFjbse}qSi#}93? zDezX}#hU#yfG&7|a}gBI#%+LiVcbx|^RFjV0xL*%Wx zlOc5QkevSY4lj0}4V7UlV%&`Lw4qOn1Kp4V;%>l(dKB% zKOZJ8)-yJ6b%wck)Hos_bofUSbR~z}A!3Si1r2{=H7GfQDn2fr`4JGGj4 z2XCq5XC=?W5RJ~~l-FaX_0Y+RI`O&hxKSwDsn#iQU3nQ;LW~K+dAn%Y<_UUT{E&j* zkGQnKd3U%gve*V}!vTUAN1#@68+;!|$i4mDdSD_+VRCW!V=_Z*eDKtBu4XUX+U|=L}^DOxt zz1ovvgvXJ(%FNU*_TI(nX`})MSq|K(}s1=7J_?9ldus%iAn37nMQ5f~&-0b&Br+80)Gq&KscWYe6QdB{Ld<={(Kd;4-|rRJ57eRft)d8(7xeza3Ns!ZLU8?l z5Q9I8KZn~U<|*RR9&g_z_!lN2CnPEQvUMF0jiYuECk*{S8_z1sn6q-Kps!KNf7BzfCn)64`KW>DbzYosFX-ZZPC8;aXGGO&6 zAt_|MW=Y(hHK$IY7?wK@Z@4blD00L3<|#sENzXdzDD+w}UcbzG6(7owW82BU`+Lqe z3neQVp~}?weyCela7DVa0 z*J-&Ink`tIHTWTMA@$D#%Ju>>uFQE{mpo)GS$#l|iIg`&>xhZ@)d#EU!p2l$Q3Fx< zVM0dzq3YvPZiW5qck#j0z!b62*X75_x$v@;MpUz=y?y*w(;z~KuBoJu?AyHR+`^sv zIWo2^A-O7qZjWv+H#%jWa$CGfk+WqX4$TH`m!WojR3|B^BiMV?G9yM&KRi;cN>L(zJ5>L@@+k6kK2O8P9Pxgb9l#YuP8Z5ds zLEVZo>|gX*Ra8{|ioHR9MYOcp=eid`f<)W4vk>3^1jBv^Z@LqIvb&DLrEYv$cUk?=cUas}A zeLC0D)P(g`V$MOexxDas0+b#9ti$m;bEZ0--N+$ zgVKz>2xvId#0cTK2Y}H7)7ZqwdoV z>-9vZx71|CzhHZ3DsGwMB*=Bsb&Kmrsh-NId4!EK%x9FnMwHnVoYHUkR1-y4OqeW$ zep!BqV#A=6{;7eD&{C3%uwygln)1`YfN~ zFo@Kxr$)4)^zC@z@QxEtl{)^Wb>b4Kb7)J6ui3cscM{w7qkoxEDfTCGF0XkAlM7!T z88ps*PEsF3k)rEPTEkXk6t;;XQjL47A>v_JJJrrl>z4(+{@f7Dn<+AEPwAelh^;J8 zDAVE4c$kezrDPTDF3XgPq>sTOmF*4MXt-Lw;UTnf}+ly%RONx>!5H!T$3h2 z^XXJN>zas(k#u3DrA)d}!`CB&D_9)D0R)(!g{D>KzK|#yz%KPkG1P5}Fd}PKQ4(#_ zCuK&ly8|xL0!IZg+08D6qbof1o)*$mTh zNZ&rYpEYLTsO870ejy?a^4dtt49v$k44_UZr2P~m#RO(q+mAUccfs6XV7noU-;z0o zg!WT<&}dr0!@{8F&F7(qOA?mIo>P<4GvVs&m~RJ=#SRzPB@4hz*-&45vG)o-M5@18oBvz@xzwsroKnta)sy|$f7v& zz+nF&ul=rbsA5m z!@`WHYh86F;d5@^iD9w7H-ZwAaaj(r)OW$^+(wOzPfkj`s67{W|NMYdTA@83J7I3=seLlcdStu80y#!}CTjV3(2z80CSojWx_b?Balc{F!gRLtE-QJP2=Uo_s>Q}CEn-6*3K@r-b7uU@`1$C;DPBW zW7_te@$cWihqmIDkHdo;99^8iuwHe&yu7^qv+-kgwhuF=&g3ichbybm1TxUmLQUq@ z*ZmG>sV|;FXIG9J@82hHBjKO3Py9ei95jGZlNkYCXHkS1rlkuoL`YgAr#{@ab2(4?o zQY><-I;;(K3aOQ$h&l>qoZopjRH5J~C%woXQ*tc9y$=_mS%R3tyCSG?D6So4fo_m# zNV4)nc|*z-hLaNGJ$wA1v%R>&*_?7{9zK#4MGQmGYc*|LTDt{9*3;29q35F7TSFgW z&+o#nbW6R<6^IB?q+d(C3;2Q*pUZ@qJLyI*5f?;tyy0atje< znuDqHhA7LW1S!65xTy2V#_jMJ%2cIU?%kkAM2Pc5gi~rHP$HZ(l(-te^sG9UwPIi| zExe)E*bF{%%sa0tVsvTy>blv(nsMm$b#h`tvJgvCdexcF!*U2CLL(x_bIAZpE@g}) zVsJZwOen-0rL}+Cja1Mh3XfvMvJn76JY3wM_eBhtM6tuDsHn8#=DusXdU~!uyE6G^ zx820yGEcz>$x2Hb=Jp5Y4+#BZl(t?k&;N|tT*4bFhen$9S%HQN$H?+Le(Lr2XaOl3 z(Nv<%WdoZ$;=CLf_mECiOof`t%EA)7bJpI?UY89))~w(+ph6*vY$!w;UpyArvokQ zjmIID7o`_{Du?BZ+_)TOE!+Ui;s%x&>px|=$misPF?!V;M#rZDN%Xhh00DHH=(hoa zEtaljkB~pL@P4uqyTm^E>_GIeD@G!A{qi={Cf zw2V(Q{eXekT#1PwqHxZ*s0A&2rdUJtwcz-iVcp@;J&5WJQze`9j@?iC_rw`1CVUrP zo>fg|<(qWNR-O7NbgP%F^_I&CSC84sml!9hW@%Y#qaq^)8P0;}Ql`Sb=*FQV7CrYR z5B%ZS{aLaIfqCgib#~@y2ezI>MnqQZk>bH=H`c7dI13@e-t>!h^#Nv{ZnRIKNwsvl z-_f$>2hic@EoBcO<8TGO7lMKq_8a+O0cbQIanD0w(D_^q*o?3jqq5rhRiZM&wnxoV z<2&!sH>rcY#!G+FS@o3|(0*?$(kI+-m>+73_GQbeU=D>bILMywR>#4#hW}m8kL8OO zxAU2yz7zK%0iCF_BdIaiN*4o7$vj9&vZp#mbN3KCD2;Wy!1_*e+RdWaP_XkBn8IBDErq4}~I|gogJb zWr*%yj}X~iAI`z?M9fYBzf_DA6HXaJ&g=ei zpO=^Sl7^i;@z=pY0wGt(+Ipe7J%|M)udukh(5D=MV<_ythb(gvE=eVBlv8r@QJCE9 zi(}f|N5*5QsbA)Ky^!}G+6-tejXo({RwGf% zpb@>uz`f0nuIBRB+XhP0;lV>F54hn(9=m_*#tiyHXjdqDA^u~T2f zo%r0WOMimjJ`Rw3!*~HHdE%&qyDY5tcdUsKS<4vQTL(vb#ZP#Mc%rQMv7@^ekN*~v zkZ__Re5HS(yZvHx!W5$T4Yj?k8A>*2SlSxygO_9@Qie#ps4p0B^~u*%G3z5U5iHO5 zhqzq(2)pT9%npK#Os%em10)AMjXVnikH1qq@gYl&6hX|2drqJhQ>0Rw>E3Y9Y#2gvAASpOU`MNvq$xQp3^g}hBr}F z?CLDVSB?GwVk8=iz?F(w`cJWax5<)4B%wR-KB=k-B|?c1vG1>S=?5a*@s!y)x>*#y zitdy(rC84qUk!O0d!FtU)d#W(-Pepdd>Jx=@ZiP@v;ZGd+e$N? z7)d?=d3TS?9la^4XHR=>k?1u6p5X?!DdjHeh%7bLg-=&wBfvmd$b^3IQ=Wp@+irx` zpLzR}D^F`w%e9<&CDAJ1X65GQh72@ICkW-L`TL8cv=X40n(tOX>;tSJ7kena<+nv7IVt6q{2I4(RMHtOg3{$`3EPtfS#d%GqKz}nQVABY%GVnu%p{c)PdX%RBIn{+kz z8)F5)Fddz6*!R{yHh>zUqBa0?_jEM_^vT!ZX>k++ZZ9CLqo0t*9RM3PxD5pV*k~OU z)Sot!pJCSYc#vaj8}wPhA^c2R{;rFeg(ctbQo+|!x_D01|H0UOoX&UKVPf;$f(pOq z$qE-K=J7DLc`~Vxm-F+}J<2ut^ns6Xz|RlA{tM7xM$%A~RGEDBy6`cM9^D1G9~Fkr zK%>bgq+(lqsxj?e+tR{k)i;->0#a0Zdb-ugcOOD16=tL)`h1+w22ey81W6mGvT&GS^s?+5-{4xBr0Aw(P|^9M;GSwrvhEeS`Peihk7a+SdXro-7GOD-K( z9K|t*I2Y248(G10yiiFZv8vPGg~{ex5)RUF^I$~cvkdQEbai#5QcXaaM-TZ4Pg5&+ zKH*N&l-zDbDi6D9Fv+dc5P8j03S+)%3qwz787vG2$G2eF6eJ5heXo%z3x01Rr_Ksw z|Lw)Kq{Z`<#SgmJ&E~@I|*wv^V?+7jIEsYCWi+M(I&t{qh@Dlf~CprhIysWouT zxu*P__0OdQhShVpLO8RlFlo5Jprs%OQb??uAZ<}4`-FPSCh{@yl65xmbsSeHx%@57 zE}{E~OywIo>~8@{x=9=AsY$pJHJ922v~O9xirHDh%D#`q$PBIE*NQ0;8VnZscl^#S z5tg|+AEqI6q5)N9k6%n=d|xw4c`ZxFNGDp#cwQDsYqKfSp>zR1i+0rTbBR^2e2QOo z%4zC;YdvT}^WCL-250QTq)zGnLqe9^=MmV$rP?1LUFIN?G;RC1m!bv)is=C(90t|@ zjt5pGviH+g=&QUB2SjhsETP127s{sBJKj@?h8qQdI2#b^Sh`5|JbwBf*Xo)1>sXFk zFq(t%jE|4kejK-L2DHcyo+3u|TmH+_FEsXch(DfBq;Wx z+u~IzWDo;p9w3r{t~v;iF6p!RCKZRH5zK!<6MH&!4aBJ@edAt|G`?7+Q+;q?OVd~d zl0ctb%xBTS!=a+J5=Vca!$VY2q_W-W3r?1F_d5-9(+lHz{u}txb_ZLnS3jaF_3`-k zZ}<1_wK(?*#L88&>3ari+kPsJ5(_GZebv0l#r48bd6y*-iWsf;XYETY`Pqe!-{faD zCM8@Ju}L&AdNB%}xmNqJVy|(~5vi!7zsQT%($vR?U_fqUu46p7pe6VABJ`{(WJgn3 z;`$ttYHwcmGmoJ6eG-qh6ltLK1L~7_g6@=c^O>!U&D{IMA`N?kI9q8n@tQFo6tcR? zDLJEfJhG8p(zq5hv}5y2^PvHkw%xs8Gr?TdPy{X%u5v=Da%HWx^@6O+V(bQ56NvrL zF&hL0S0gS^fjqarv&tHS3Vww9i^;@hNk>;@PaEw_ywR&4a@R3%OyT5XK{07 zy`w~w-J^8WC>xev)I=xVIZ$M3d%kV!{l2smB3??Ho|>LsK29@|)8Qj5`fg_k#Ij&0 z#Cn7|_h!lFPQ5sc+p(f2w}<^i&1kV592^W9%=-aoDm)As=Cm*EvTcyBCzKN2;U;{G zBlpIDNxob1W714;S{!*fq2dy~Y!4M5r-znx$ouvooF#D!U-{+H6aj&Q4{-j9oFzZc9`3Fg|j<5j!dYvtLrK7`B$Lm z;|UMGk<=Em33^N5^-k~Ivh{oAk?^L>I^_Y&S1KQ4RN62AOGHri};*lnA)^oE?h2DjBjY3kwh{%B38E^rNT)S@o0t2au;v~ck zp!|WjU*jHz7u`9GKBN=Ge|}xTtWvgsdvu|=@DnqB#q8;5hZx%(?CF!{0mSgmhmI1f zgso0}T{2$??r;Q1sxI`~$F2W6t((5bY^W{TIyXRBZ81cBcmP>EG2mH$npm*rCKK`X z0OmpwlgVv5jL%SCr zt_~!oLJcPijtkr73XXX}nh*gEAEE{;_!TH#xm;F=HH;^H<$1o2-*VpAbM)C>Y)4W6 zJ;q3->hl?hM^*F{j(aB9DuCZ5(q3?B1OGNyU|Yc`2qH`pBe}Wq)Y5i9u2CKy62NV# zsF0V=*a^l0te~puDIidQ^z(bVl23JN`X0=Iq}pg7g!77usH1XX=7roESK_mlhWkU2 z)FihgvlS(c$nWXWW3gh9+&BSg8&P|Tn6zQRxMxn zbrqe>Rm&cJg2KH&xEJ~_Be~y-tML#eI0mJbXJA){OPv-5BE-dqhYWA7y0^CnjG7hc z;Z;htNs@PXdp)SlBo3aQlvov&l@89%C+i(N0t-F?0|;Z-E?*3}NZ4fQXEz2)bOiV7 zQGO^zzoc*zGhq?`rgr8dc}uYIm1vt(^pJI{bCn|}yMAYa00Ri_tknw>}gI2)d7T?H@K~gNMctn4h@3(=u(As+27Yqj^ zJ6TUX^f=33>V0LlQRqUSP<--`8%Z13jtUuI$Ql>&+)*_V2@L6!eua+R-`BT*o=S-z zG~F8IF~Ld{Twlj98=1xBn=4O5WWV43Q&dr5WlnY4{6du68;~^+8`7!PMR#GFTT&fe zRne!cW)Lr7R164s1_A@HnU`AM8cnqJeS{%m#Xc;~D>7sk*Y~YrFMA!!iH z^slS?E>l;*XNukTDukRWJ_7QyM<5jfe27$GZOzs~hJ_FX1(l^g%4zJh%60t+s^uwV z)kH8>f*fU8${^QN2JCmuId&Nhz(o;Xkt?I=f(42HUNO1IguuK1I#gGea2#wuY$?v` zI-sc%7`wsTL6UQvXt7~t=(q7J7$-m+14M={#<;Vm0Z(ix=jOHrVZ&cnc=-4+NCg?b zJW)GKkEQl&L=Lb&xHnw*uR|A(q)S?8ZB_v{1@?b)`x1c1YOpffKsy$Qt4sPZHvnW@wGX+%V&3dh)*fN3JN%Asg?2we~_^_$|p_T2M%RqFus*Q zIYM2^BROShu7f&(({o?{^1u<%Ln`cZ{`-4%t*+CE)yv{V`)-2J^ZiU9J^c6ElhyZE z2h+Y`UPso3Q`G&?g}n4deoj+M-9SoweZo0rYY37;N5jEtBvq2f z;vv?HCH>N!<*7PuDZr$^i*wQhpawJiNHkT{FK6850w->9zKaKOlGtL|f(LAI_~nJZCfQS{b9PHTim* z>-`gE&n;inA8aSkd0VGg*5R`e5xbf*@{1SF->~wNL&vqZnn51|yF9_z-K)+$_XpVy z4+b=1(*)C5wlk^zf-!jE?#&9$b5z%SgzFg1zg5oJ!xJK6!QWgtkbg1!zVX$YkB<+$Iubp!vQp{vP#BX`Gk3k` zeU8B3{1=dDl>E|msYE~Mz3IdXvT z#c;7blmR4^R^;1Lb zl$tr-`1*I|Lqz+qWnFD8kcdsCqy`r&7uH?c#;wa7tL`|YksBJL$V%!_J=@eff^mx& zpJ3LV&pGy;xb!nDjoX8c6b786(%viuLyYJ%*irH)>0ea~Blf~J1O>6p3QMY$qDXW3 zUoH(y6@+(S&yXlf4Mj1e5fsx^jqr=Xq}hPnXIdIB7#X7pI()pma134&5&^2JF2GkZ zFjxgG*W>z7Bfp-GTu)I+3FI+i=hZHJrYsvz0VM*0vS|KGwySO&5s$3KREASI4_@^z zPPK9r`tShr@DAJ`A=m;;N?_6Jd21y&SAiulrF0|JTZ@zUwe1*6KbEcI&;@1Ex0bOt`b$x0&_MlIH& z7LaG!!%xJ{IojYNY35RJ9Lo zkIitj{2-%GVZx7PQ8d<2p0l4idnHZX=wn=2Q{(ri<5v%u4n{5=HixrU5;RClI>O{H zf4-jm$8o_ni1pYfFztS;XfC0k^A0eENm7}k77n-9m@tkMdt>ilOS0l4s5+sJ&66R0 zV~4<+oclgw9TSg&SMcr zbdv;@et$@X?Hrbqkl_nJx4DB3d&W%>mWwge;5 zRCE3fSTtcJTG?X5|8ChRT|8>A2)rM_)`6|E*y(u;T0)IkZ%<<*7a=;ifLj5OTR=Vl z>qbg25OuwvhzY8kPz=EqU@dT#e#s%$U>ztN=cSb;`-GuDCAn(p+|toO) zVX+93m@O?){kj<88H-QZL_D^BciWLcbkc1n0JFL*lwt4!GqNfV=vBHnCthEFO=Z$B zVTb!#$s4%0b1RNqZJo|>ih3iRbVA19dxg< znO~2YZp^TOxO1Y=Nh@xqLiIbKCD&9{5%aqk14Wxk5v0UH{^z?RM!4jK57?<)J8iwZ zi~%Hk)mjro^27IRwzhx=DwRsca%3Op3DOwkiAZIJGBU$pu~T)EqA0Az1@qY-M4G_o zBs&`G=?Q9i)fq$wGerFb^G0Ud!2aAHP_A*8%h>ZJV1MmAp8sb7o+^;WL1d}#2=ffE z>Hn?{KJ{Op|MrjyZOj6C0|ASNhQH!)JFac}&$L#TNVMC17cz0pBLEEOj=OS@D3O#v zG}SdT6Z?4U?6n#M1NYw!56w&`kiSj+Z*;mDjZo1F^y*Esc7C9Q*AZ%g?Hbb#_kEzz z2UW{u?DSSV6f-I4GvLR*!H=y4J~9YR0o+3@?8B)%l$@LlAX9o;+NyI^5ozxXz$shN z=F$>#ovY5GfLS&-H)}j35RHN>AdWaNO8ybux)W#qWCKLSv!HAz&4Dk^m0IQ8d0jud zKdNPL_K)eKlL}zL#~hXy6&1C&XFS^iBigd|7MKHeQyGPNy{e(`gAo`Dd&%1^j7&aZ zhb{}2x((aXs#f*Ov68D;sbH^8+g{`9ojq<5VH_#F!z>RbVrUT`imJg@Gej!$+s75N zBX$srxdAl<{Kn$LzZ{tvMPeL~6gR>lykU5@hE?aU-e&<1N98Z)kz(j%g1E@45w9qE zJdg1+mgelymq{>m5n+QtObwJ5Y^Magdk6|HGCU~2!EH!$WPc)W#{w}iao@?3)QA4H z>iT+uUNrye$o?`D3?u@PBvMQ{urn4AAnJ(%2=7}y5(FV>>ermX8F0mw7lS2H?-1!# z;?mT0WK>@e6DUpL7Q(BFkMQ0Gr7>|Mm1Rcae^Izrj3m+{#TaHc>GS||k1snurkWX* z73?7@U$kQ<4mMT~SvDXazA=v(#bZ3ItEk8j`3Tl(dbUE)z)61dE2kOs)&0rz!d@UU zZ!vM^1dI2bdi^JPIeX)Nuj8Cg6xESjM(d%Qd-t%a*T^Vn+=cCH=cqQ&uu~+%OUY^( z;f6q+#aRHGBG)7xKQ>Z9#NjFQ21e^*OOf!M5;JW%l3;<(Jy=f$GZpNUv3>ChcotN? z-W40NJlA^?`S$DsCFaRYKzsG$^cL*M3BNpDsg}PV`_yk*?+to>lKkD{nVu}QhKxqv z+yJk-wzda|N@0-jP3>NkP#Wd;|IR_jtS}y=-xa)ME+&vok!_|#!zuNZ3G$Itz^DGE zM_ga9<*MSxE1D(Cz$8O}p{OZ~FHNA8fTCEg{6lpWz9Ak~pW>%n^k}hB+h;N%-NGvT z#f7rrp(%Nq&m+B4R4EG4!<3@MVS^TtgJAXhd5VYU4?qlninKW`+wKgZfJ1llTZcZy zK*KVo2q;t^x_^S$2*78Wc?x#~{ESxE5fJ<`*TdL>Y`Qo%i2x(Ns?D=er2ba|yu4by zxcA5oeiw7fWMKHNIP-NeJfR)Xh-UG98t%Oq8#!!Z^hO|QEgFIg?gOcL>ZGV~YhWH< z_;!1J6~RU2<>%*zLO~Gc5S|lJeRSJSOh9%i13P|X=VF%yY=e`(akpM;ao}Hf8w4l2 zxv2@*?h@-@h1=^$(|tcp?+d_-fKUSM1*j;sfeI=js+NQjib4g4a8{WFCF7s=-2^@@ zhn;#PpEYGS+=RA^Ou=fP;V`^{CACN9s^sAWYy6G+HDD)7=`(8~jtD6xuqKjXf+cAf zKvLg*Prd?WNxOA$Q#>yE+W_!7{Qli6r=HJRHUi$`wl|iPN<>eHohLx{ytpK_?=87CfSw>kTP_1bU;!YT-LuQ zs|)kbP|Hp;X$`N%8`u+?lvw@eJ6MAoykhAO->g0>DV2%V0?p1jxyu z_Ua%UGli{xYUw4pK3A9mw3^SLWzbLMXG|aT{yTLA&jnjkN{&47|8=S&2<*sLAh$JZ z6wA_i@UY@f0wdN4YX{9S!li%zzj(JPpayL} zYDZ%dUiof^6Lfl?)d5O%6x-*K5t8Jl9rOO4*+>eUdJs2u!Rm9!HwD zlL7x8=62B!j6o*>ZSPwh{364bwZZLk@WECi7yS2!5tI}uE{=t~PVN9a+2a3|A1KQ5 zI7EjVI}E8ul~l^bE_1SKAZ z&^6P`kjx!<0Id0S1C+)p%C{zS@HRn6v$oP6iaH_FAa7p&*SA|nM&^GVU3VbWeHXv> z-dpxwac#-od+%iL5R#B&Z`qr&S9ZvFvdP{O4SN%cBC7Xz?;lTpJdNw#-}ija`K$v9 z{*Mqb0Ut`2{d+k8%uqp*<>Hkt` zS(9lTIMO84nZkVYsno18r^ZE1h-X!i_=zJ2MjkEwJ#Zz4pqo;1pBkRNH_# zcLvI%-|lp1?-vm)g$Tui*t&h!qZkKdZi`T^;I6}Y|K10F9i%!^mG6~v_{$Rvqlx!= z?Qx~e%$q?^ii;vqnOUxg>D4sw%vo2!ikmxO*%rPL%@M~&3 zU>hi%%b>2qLwA+jL~mP&9MRK5fTa68!LJH>Pt`P^xgPJ#T-X~!2 zzA>pn3q>>I1|TbZ_@ezp#bM1an;XiAbacg z&M^MVj|&`P+(-)x3zzN?<`=nL7l>C=STR`+%q})Q?O#0oP%EoJOr@N1E4Z6cM8V8Z zJ}nHhy=10x@n8bPTcYS6GlOIpZ^f#y&Cbsc_+;0OGBRitO8|KhGN+&!eRHD--=V2y|F z585gy5|-^g>?hg%W`R;Kq41!6Dw4WiJ7S2Qr-r1CcoZczaOB5&VcyjVjNKb}jJwM9 z)YCFDFa%gha-t+qK6KfYtXew0MvYK7(;FiH9Q+vznK$w2?ZfWPRL$uDQ{#o5ABl{z z!Jx&^(uMvw2R=-n&M)ex4u~gD0npCkGhg>01r3R zOM~LBVE2#7yJcl%A)i9)jZ9667-i`Ae8x8*Yy!*ziZ5?RMJ+BaJ}}TStRQ=2>(}`X zOl$y6k`+=1!*BvM)NsL*c15m=J#9oJ@N5_Q8$RnUx;e>^JT8Iyiv#OdyUQ&PKydlS znMkbHT?`BLFMJLK-YNnczW42LVwT*4!8lo=`|6utr)^Q#x8D3akLudDb0IB;iXl>b zWNON~D<}ZE$KRM@c^<&IQQh~Q5qKSzT1jEm=CuaG&x2oAdnJ2Ic>NtvHi5#|Q(Qd$ zl?3qtFii9aGY0;JTeS1{{_7lqVs(2+!SJHPr^1aK9UEJ^GB!1hUvYPF0h}CO>dbhz z*V{v9yMWM7O(Usr2k_}X(m$I!J8#_<;-n)xG)~Utm~5nYRKGlXrzoedgPNHe=kCf1(=RDk2gxBb9Pp8d*oq1xEiwkRce z3+~j90=&GuRh&5YViymn*s7i?>_WoS_8`pX*h|7)$ebzs>)VGbK#lf)&%F03@GLkx zbI4Pvnopa=PrHJ0bhzO zE2Y_y-1-0JjYWk-0@?YDrWYl!YVEW*vpv<_Uy-UN4^@%O4fg%^?Y5`7R^VoM$ATF( zr`R)_t~XjKEt$k!u3`8nb~(W8iPL}lw@QX{V`n42yO00D=wnnCeEQBD>fo0)Z}1qr zsjdd(>p8p|i?^Ql&CFto^RrJ;q=@DNAb0`ZG7Q^602~7PSJJ;Gcbwx^-v3I7; zwQR*)Ml!ZZk~{e?KI|{+UiO%nN!CL_<4W<`$h?tb?!_RP9+^hQG*5;D9RW|I+}*vBHAm8NriPzAtM_c5 zg=M3XU3?nnNCPk4)ARj>gU;hFXieadL2CibMA!L;dqqQ3Q6NnPIO!bbfd>oK3(8dY zjlh}U^BNePzY`CGA6=ZRjgD$qQlC^KWy5+`X<#5YYFR|xG;}!9p?r*AfVrQW?Gt90 zwN$C5Q1YHQJXTZNr67NiU?qC}>n5&XTguv)nxEUnG$k{&z9P%Wp6^dk9wcIMi9r;| zJO5M=Xg4-Dlk=P=zjlVX7yz%4sGj7e8?m<9QK@<&(N*UAjXOYB0(bSzfY>aZ^Go3b zLsA7$e}TJPk;J!+!3%3_+~}1zP+?>&diU-Xv?wdks)47~T`UiRf0|wNL3%D59HgT| zNM0RI*6n|~4yO?O8`qhDR)M#pK&Jxiy^HlLP*4EE5?DWse%_1A!_R;70n9bpt6~>v zWT$Nz1hvgT0?3o2<%KPuB3sH>CE8oJ;Ap&%P|o&ak{fWVs?^0$gcvM{M8J1Y2@{G1 zw)FdVpG$>EZ_su)!v)hvH-LjHehpa%10HonMYd4F8w?+ONH1}P7V2K%_%xHXe0N&! zdP=&2LqoAV>Fb5S5%#PgKy=b;)yaP|XSfrI0zB zR*Wka5f#mVS9-dOlLw4iQ#+szUJAp&gK6G-45SyEAeC4y)1*=xTm0}r2jm-osUe^8 zckC7e5(8i0%<(T%Q`7E0KR?A&-bUrc=3tRP1I@?L#p%YUX4mkEnFQjPxo6O1L0cW^ zk9~sIZplAd97)2HHz5X?DB$U2J|yHTDit#GH^?SMarFG#a*X0alRu-p_16%n63!MC z6s^$KxXs*eF)GH&^{AwSCs*ndblG433n1grk`tn?BXLT$RASpGdzhBXiP+{QeWV$d zy8HKmU2;PDKkDd;gBDFPG`kiHdcya~%!t;G#_Byl!Mxz9{- zR~FLhW_YQ}_pH=j`oH@Mc^?CwZ=avdsNM{GRP5xqHy|2lkvIuPnA6`@SGz%S35acv z;2(wo59;kk}CYdVxNUFkr1KnVZcJ4;*KAH!q$lKj+NpM-JO5@{}E9{Xt^BQ`l4RX z1CIkE>5&j=}M%#~!}SNq&Y$umZ=++?=K~6TYR3XxVGP0-&>bTV9UoUkkMy zB(y=j7*ui@VL_&8$-x?}>IqIlNNWXL{SD!lTMabbjtXm@?9w!WH4MF!y%9!RYn-es zLuR=HMv~dxki92RY_=vxWuHDz8GYAK+kJ$SlT-CSOs355$LrSel=t+>V<_VGz0a~f z8kpVjBE+W^sVprm1*-uZVi>lbG7*O;aR@giXOS7$v$L}U8hA_4P6<9Uy&dwHb-5=r zKG@Wp83)cBqMGn2ioA{&2|w7&KFsZPA@NV;-o8bM^oS(xjgIY0tFS7u)efh>SzCr#B9mP9vvV>V5S{*d6_9-O~@rZA_Z}4 zU_2jw7wJ(|S?Lerj4cz&W_H@duka_t@@`Y(12$?Z@J+{CCVOSjs9?kaoCUN{B0wtA z0?Ho%wdiDm+Q3L%%_4ZmrqK)}GM=8Ez?#8N6F7Ni$9Hdb5L)7|D7rWnh0$jZRW`Q? zmLp&YD*|usrz79@f1rK?rC*LkpcTs6p$p94@3Y=EWYFK!q~}oTr#+O77eLPJ;OtzH zAYeDC{{Ntoz^kLTDSo8E&!Jk9Q&Q%NJP0r{eg=K#amPVj>8PaZEl6Bgs50bK)^M+V z+ad*+1Q3CYa}U(qOiNT03|5}Ovs|H-(`VTMv^_MyD4HQ`BRrT~sG)LP7BGS@UAz%V7}8b#o!b`v}4spbD(JgQ1&h2$5^E zL;sQRidiwL#-b%oV{sZ;`Slr7hxGHm*HAzWlu?O|x&aFKcn-!#vsQN+DGZf~BfsON zH_`g6<(D}U-s{(wKPYZ{(;BBL+gCHIWUqM@Lt0Io)7xFl2095}#%*p6{!(x&R21ghoL?3BmncKN?xww&7Y1sp#sJsnYrck)N?ZJZveM4_M_FE_8Y%Vw!f zBQh!8VuvQ3{bG=i_Nbv6~Y&br%lF}S%#E2r9!uH z0)8u-jxgzZG<67k7wDtKj5Il#V58z zAM+AHZZ*2zY80(v=x=0@reTVweQZdgIWdt@%ik_ifKF6V#m*NdlB2*oST|$M!YaO> z!>StZU{-ZP^zDrLg98r*wXcdavk6XiAC4S>kBN0%d(V7n4Xt!5PUbz7nuoaGZ*$#Z z)oBs2Cz&6z;fYCz3&(Mc$NhvuK(XE0#Cu*-UMlu!j~NE?Tv>upn)s6)2UVxn$T* zSPiJ}{`(sao@?@5+C;#bT5gasZ~XEzI>PsWYH5}{MCOA`^c==gQcM(46hZ(1g8=8G z4)ugS3jT1Q(h+YQYI3RUzsso*MH#@S1v(FfE;N{kdtyp^g)PW5N;$I%$}f9MdkYt^ z=b|UkH})C-UAzY!Hi;1)PV_-tXC0KQ`8{CmZqFGsi{E5YpuhWfu^EuDaWdVs!b*EF>13k;J$Wry6q zgc-Mg7_wh+BX2}$5_8O)7%4tDzcs!IyENgKWsWcYce{gF<`ogC^QgeV1yBX>^C%lr zOuG(ZARd9X)zdZ$12q(qjRaLVgKuIm^e1==3h(5lNuo5U?B6JD z!S0;Mi&HhC(sa^;8lOCr6>UOayZg4UcVWt*>>JAmty#1BNJq0PMr! z;?s9l0PE!C!3AUvt@ZF@lgx~!IoA_A)-2nKs_NyBA3s(b^R5mIxiI{Pjc!=4{xLTPZeTRgkc6q#jGNC$EIh9laFcYz#1crTbKT2Zf-X$S z^+La_mn6vqZloZA0VCroe9$mp`JM=!#S%3JxJ4fBj`k-fR###v(SY zhR_o=Xc(7_dw*<_{sO~vGS)2Nalp14KHvx+#LG{i-aMg z4S{=~XtnN-e6f4?N2|UJdDlZMZ*Gr|pC1q{dCCqoHVBk@@Ma02SWT6-P@-SNHqIB% zIb>!|lAyNAr%R>bFPW-crY`YJRB@z(JZ)=h3vOnGe2%t{H+0YUt+AP;(5@~ZQUP;+ z!M9^01zA6~0Hu>|N?uGu1OE)*c%(c5Uk)A>|IJ{s#w}tn0|-Xk7MLy|RmK7mRM|+- z{4a-whG16NP>MGFbNZeU+HIu`N1)K4Ab~Yws03lzaZ|D&uVzry-ePC*r@ZWxU86gs zw?Ny9b!x(M`v&+21Ab&Pw7_OygN%!d^U8~s&j;Gui;g*p55Tz>^n-2qMh}>h_ zu{l+; zKt}Ee?3U<}vXq)>T%as5YAGt1AqJ-^nYl=_ZhekDb(bf@SVk2XpX3^9ia>GYvUYcO z_m!Z7)+CoX9uWQ?;awE-O)g=T+)wbjVRDF_xM3Us8%%;y^$Izv4%&^g6o8@e963!&>Ns0%e~a>G)cMPu1QH3cYsARgH*2Pc2Te3 zLuAkssv@b~Jv~7wq)e|nAaBl>3DPfV7)g5)P;cX6hQsvm9IWV~r?W2igo-qmWx;5^ z3pzz66i#LW>_`P*x)5wCo&r%Fy_=GRCViI?otO+H)EDJ7^>);9Br#e_MxOOkr z=atReg0<;^;EjHR$NOJl0-i))y7lOVymo`xW?T`GB)YFOuwDQM#nuetu+Pw>Fm0Ws zM=UD6#E?`8M96Hup0|HlD(@`W#8S#rMT(sg7gqi*;c9}%Q70pY%OF-%tH5SIMgQF3 zte&e{u|&n|zxBcFVp7qNL7@OG5nA2EnP-|t-X+__w3=?C)I+f_*^aLa@AT+WoDmc$R|=sNNZd5 zVbdr^#}bPcwY*c4snON+MUaFQ8C|RrfD|svc*TND3ZtKy^eQ7gi13wOO_|=iH&!f{ zdtC&NP&&I5Z6e^?kmkCt57xZTN_zpgO^oRcI7)6s(_~MWM=eujqPM>#d*|JT9fdw5O%!Xnd3`LRV2Q_4EDV z!@LR1J)~9{nxG5dvI~77U1dnlE$5?1xSx$yVpU3#Q5;gV;|C4E?#wJi(xaftxEX1{ zI~Ai+0u#&Gbu{gp(kA`l8_gHxMC z2q_Ccc*r@9xSFvsL{Z`omiS)P)YV~>n_>{}#Ld0_?w*dg3pY zB>nT_e*r%bJ>ickfvX^YMcNcKvng`+5oqn5iM;4Be9Q;EfYea(^}HdZYX#EoFF+>f z-`(gA0JPKS#Cdz0ho|_vMqDw%MI#;IIJfB5B6B`(cq6r$@tDC6xBLnsD2Vq-@J4;J zbPcWvh~E$xLNv}-L+r3$i`RG;A14GPl+kD)?I{p6qQ_&ceH`~}v0mW5?e7&12*OM1E zGd~h@sZW-X$}^L_OPaU1Otr44$irMy_w~CP2SgM9bK_}^la67=z}Jo`u1vkaG}bKl z{_Rjw?9)zrR*7t5uK2IimW~6`la+Ov(v6gOnQM}}@LOWdaTSC<3@r(5neJ1#l_l?d zz>7noH#%sPVnpk-{(ZG=t{0TwJBp{4dOcG3bcHiMG8cB47wfH(2rzWy!sV6E5GetM;9mD;f zd>8S&Qif!N)zYWj#N#3RX4)eDxSzAtZ>#BZ7(F6#^Ykotke6t$x@HanIb|Gy(gKvCK`0%HF`gdV@wT( z382oxROp)n;qFzz_f8uDJv-#WOD0^D{RsUH`l6pP(bo_tSCE&dxfgioch{(LCJQ3< zp&wM57e5QA&?&e{W6}HFYXj|}Kq-yx>xB-W#Lu!t3Gary;OZ`Q0)1X;rS*u6%~S$| zbgl<=bv3X_;rD~U>ZxCB2NrKkZ%qI%iLHad3CA5igusuMx4KxHQDrQvjf&`jSt;>S zCO;PvRHo5QM^XY#a-^TOe#``=>U-hem(Twl{~MVJmT;5H*O()0Xm<#5F6~P_IR>Jt z;!b_SDrz@)2v13Fcx3;r=l^~^H>7m-KLe_+WyE{VxhO1z=&|a!(<3CclBZ-%3&{4! z&&u0>$m54b*_{w#kBfY>k^eVasN_~BTto2FMSGIbFI}-;&_MncswO{%B+Udv_#Xp@ zx1uiRMYPS9yX;FPatZVsF}s2bvBtOv)DYKj9`%r!0gsrWQ#K>b{n!nAGFdIREJ{nw zLZ*xRv=8hk0!KbfmK};e5S#Xoh{$|t``XY`v+oJn`H?| z)6RS#pJ6Mh(XgW4(#-!9-RXVXDrb#8FWi}3xko=rQ%9OR2nN-vdA6vOY=CDphpQGd1A@U2UOA4$hS_w z;_sYPE}SQtobsYf%sNy;2Ec(+Tj^MbNj|dibrE7?=aYwQGR5NHN3pXKYR5q2o&8#Q z{ttxYv%m3)N1f7%Q`8)w>eEa5$}v#yc7pE{ufWFte$x9NfSt|Rv(XX$I#?uHSUnky z=kLIl#G|K;A7nvIOGt7Ap!+5!{f=;9ILtQT_lb@hKnkwnaVzQl3IKdCW60Og=N_K= zL!eNg*TELgeQ+n|LBl;Hw?=(~nhnk!L--tmBtZS1+_N3HYaH@7fWOR>@MeiL0QDQp zZU0~@AKCBfDfr^~OLWl^Rx8YDnN0tJ0e=hfdr3y{X;L55zZ1KAH;BsIpl~4L-yi)L=^TR0F#w@zeK1pBN_jKZc$B$p1c<1gGSniZy+e^baW(* zQ;`nmg>ZnoV3p8xgm}dMZD}S4ITF=0w!zYGiw;S^}?mgI`JyH|!vIBg^(n$Mz zI5UuyUp%qO2&78QCeTr33!Oqp4*;PDKdOm7EjIdejY2bWQ{GGiQfR5)I=Oiw4wqIl z^=!HPv2d4^x1MzT=^r!f(FJD@ldl3}NYm|^@RtmCU9Lm6899E6E^wF3a5WUkxl@hM zyByuB!Q#SED=H+{Zh{nHrVoz9&GXILwlDQMC212`V(B;Bu$Z5^@%6Zq99$7URUnZM z4EyfZMBlrwG$`qLX6h15h1cj!rksplN5;ozSGFE#+cf|2hl_7Q9V6e7qO>82N?3Pk zk)u*Jjk+o_7Hwci2vxY_u{=$g*~A(Q9YuR(uTsh zg5wEe$*sAKYmLgic$MdpcubC6lMxn9zVB05PpE5?IatLV3#QXLG@hX#dLJ6hDq?32 zT#)DX*+l5g^CzCLC4@GpabdVLRH>i#NVryF^lf7uY167Z^erb?5R05BIgtzgR81s~ z^K!T@C7!m~^=rH)xGg!f6<4bhS1Ga75{e@7Va?~8zQ%4m54u00=Cu~?=7)hb&N8NY zjuxz#MzxKbsOC7#!HaZ%@fh@5O6V~g)ilCIVV!0L!wqFzI{lai_3zv(p;iV5cS(Fj z3b@J$6=~t|qv@9`3#V88y`D)(baLB&;8~VH)Z6wG>$(bT7e+Bf+i0G;b{TiR)%wut z2BZ|^rf*&wo8DglxW8~r^XD$iFR=1}NSR!b+^rlLc;o&u`$DM zIJ>02SV_34ps)mb_820#uV0hRyaQ*K77|?qZNr{GVl!>Tr7U0 zF>5ifwO*`BLE}J+@s!Z@PvH}hhrBbc{l28NrbZu9 z=27+&^M{3P(A5%#vX#6-{NnQ^7_T@*+YQ1avC?&!9LaC9pOvT1l3$lRc`h31hB;au zGlCu7a9g8OZf)CLu}pjRo|@Tfd0DN4NT-_0AKKyy(sI0cx;Q&5@oLjc+(PYkv@eGE zT_16M!L;WtKj!dx*C5MWihDQHfV`;$pOe4ET{-qRf_+fy-f#?qrGX$_ob((Y%OH(H zmLTm(l~O2M8=A_~+vc)rw?}=%C3>=L3k~HTa-(X}_2bwD<_nR?VXZkLgKZwn7(94~ zrLPrTiv8k_npqCNAK^GrkjSL6g&>!X4DA!=&8b{Y{B=cF7W^Q)%0+uE0_p_kA$44D zwwhJVL~qu$w>B?B?vJ|5zC#s}{>vrG&36XF6r42Cn6o1Kn;>k=V{gDn)FD!Qg`(t_ALG29F-1y{Vxe`6V&%XB5kDmc8;}(=3i|o-`sC140RR2_Pq02Rv>hGzuCw^*5olVe@A$Aa zJh5&6ePdkz{AkKniTdj!Xk(2;CJHm~7N6hb*uH%jU6sQ@pUg0($40uh@OlyA8^H1J zpBl0`o~A2v38>%$$_vgc>`$=r0n8yie~s?l;}xQaA6s7Y0*+Mezglc;dNFtEfmL#} zuyMIZg~Y$Vf)1%MA+LYU>|LPfl_xasgTGQl7!3&m$0PhYpMhA#&O|LC4_2N*;UPS1 zf^PT;gww>y6%TI%FOA68;n9paUIFO?^g4}WpufFCiA%+-t1jJGT&$3`E%=5J5E>r##kqo0sZq6t_f=UwCe7$t4-jJ$+X=6jK^m6aIQZBRsHOj~=1FaX8y<9K& z&15Q#LSPwI+H{zr#YilQNko=|n+?|^`#xre_jtc~YJRS$Atkp`U8HD4So_pH&~qsg zMsau#he))tV^i(7jirw$r8QNIrY4!B48OZH2ImWMH)y{&J&enl_s4h8f0fSZ$Ra7TGP78a{__#!0SF)<=`OVz4x$Li6yNM1K^y?}V&wzQ54D`T9eulR{ z!QBIQz1n1dGN4$mrgqK)dv~L6)a}*Pt zFp&Fh3Y{|f0S>(yC9?BydKm)IA(pN%$^bf&I*z*O~=+V z${yGiK#YyguC9FRde_=u>ov6celThfKSjDcvGu!=vx1-q zItht#kij=M`<|{3;!hL0DPCxDxfRGh|C`QjXvt62W57qL$whucNr8_w@fn_n09@LH zQJ@egPLF9r16VKr=0(Tq6NtG8IaOHhC7-wT$;*Jfuda@}Z=$Ey6QKooKa|S-gM&Q* zsI8p)U2T^9B!zL-T4uH&@^KjmCcq5uXs!ukhF}@qcXi3#x?JQ!T=A&4T2s`Q0AK>l z>cd-rvg%&H)^vFb5ez@?v(x;fueOdsb+%j0_9OJWtCq{FaJ#d7Ra=U|RP-%@^n#J} zF;;07l}!t6Ps*#q`lV^2gw^cUYKd}8Y*K)>EkoA@sF*z=%bxP@~?7TKFu@W zzEr_A5ZTK*G6<$EuV&d!g&iIkJ4Ii{e@|?jQj3#p{VhFh91<-t4H!3xq`p!>59iW< z^cl;=-TgE82&~EmNAgc?DsMbGpwp%4)t7$)u_%DUGGI9NVpZ1HgOo|Y=eEK%iq!27 zc>qKj0$fa;RWoU9h2`900p`tFb(}IXRRJ!p-PtlcvmRu|pI}+F+@@!5!LS4JMNDFH zo7J09*d;)5ycVq6CR6O6ioxLlwjp#9SFdO=!a=2oxGDf8T&LgdjA%fxArBWM)GCuZ zKuSDZZpJbD=;d%@C(arx8`$tB;qt@P^-$Jl2)?k@FL#7cq=ew5|Fc;%-op*AK_-sB zE=(>m^&`_*3T#Vuj?rn zOn^}$P1ORe)GK{=IpBuX2PFo)lxDfaeH^1|-}oV2o=d*p)-Itn`x zeT+2a8`hG&cHSlbN&bj%bC^~X({8uqcokJ87!=q0F$?{domAhW?~ld36byT9CXSLl zh|jt|`l;WqJnb#pNjQBL;oW1 zW4K_dxhiL7tgp>TA@p%UDOXAk#dMMCYSRpN*v7!3PhJ#=#;X@};riUIK{; zAU{DeSB`id%_wty(hmlZeoX}dSm^qot{u!|c8W&E(jdi5W!Kz%MA+2@QFtK5vZ1GR zmx9L@0@$Ap2QzQ5(!YT$vho=F@6?U_>ET!W z5WNIWP`funIS=ILUIyokJs5y1PY}JC5N86e=-mb789qZ81nVHvE4n{)I>SX|8HnJ3 zHVn;oFcNClw#hNU?#buggJ1#AfxqW*yJhY@o-cR^{9kx(N^wQqAS+qt{EL>Pf-Za5 zhSOh2iXa{KYN!b5!v3hNM%3F^c+w{OXHR!s8bs6^CKSX{5U zMAre0;u7-$G%O(_#ej9aI~P|F#Ez}7jL`>n0&e}6>+&9cU0VS&?m-K^VkM^W=+dIG zbkc2d+@fk_%rYsO5U^<95zWv=Uol7{_pJddg{lan3Ss%y=>#DAhY1Y{W+bpsh*_C-K&R-OzdSOOdo)6_Z zy0e|*;}dAm3{W$rV>C@mkUyQRDJ|O1PeD35g>PxyGsMT{xTQt@MLtSlVJ=nu!Ud;* zjNM1L>GuT8p23sczanR;!mTd676C<#VZzOzMejZKly|g-Yot|InL3Ei9cRK>_Wx z2RwH%dSxj6)$gQ+iw}4tVA7n%s0zm}F_VU=UiyWLEV_QfqwZNq+fXSIY~`I3sg5a? zqsn>AXUwk|w}nzW5b;Ox@oqLcj&cYG9kwWU1Fei=v1J}H@fZ_MPT2j`5b((eZ{Wry z7~*~9jRS8BbaPyHLxN;J@{>HQTykSo=lXah`Y^i>s}?nah^w3LAH{?|on8KC%6R3& zdt3#M(V!#L{LnQRpE9o{V^!JdNL*gVS&|u{*9xr^#PD^&bTl%7!y%2bq1ZO=@8@)m&Az z2UCZ)WPz``+#lx2;I=hTa6N@lj-8!1Nf-J`$ocVkgy1a#2GVg{VfV2U8|jVHWK#N< zLaO ziJN_GDo~Av{_YIsv|InJ!G;qorC~cZkvlQ;=5S6?g+uls zVVsM`1g)bAx#ycD2-~|wOY0&dC@yZwFrB_g>Fns(J3C=y!tgkN47D|f>)4x;zP8H| z+x&9KcG_N0s0BzCij(;>o?cm$AENg;sktYW_4QftRtKtD_U;7b{C4S>%*9ri4um|) zi7XUTp>RC8hh_v{t?TcwRQ0J-dnN>OS|U-KLM zPKjo2TX(VP2N8l_b4bP1-7PUcWRZQ-h@0EW_u5M*YwQ%v!O86)y)sYu7GK3bb7uET zP(iFlRdaN-SEN(<&(tUT&2xE|*}`#qw`hS{n&{`?bl++YWh}%lAYe{EY2+oLQkQq- z@~JkrOy%a+X_vcI&}6r=E>+?$@ot@Y=vhGnD*A>IIMdav@^9a1zJKm=?_UWeLPSPf z{1+59SQVF2DT4Oi5I{de8{dJp_h56$DJalxhgp5C)Qswc2K81j!Bev=e-67LSD7uX2pKt#t&pvq9( zuwTAROZzdaDF9*r>uezTg&Uz0o~x=jBR)#VWIO}ypDOY55cT@%{Tp`qwnc4JUfi~1)ff~%%Qtxps3dE3A!T#;PS+I$2v|b{BM4QRNtM2dI$_Rn z*VT(ZLXZRt0|(g#n=g0Yf876nsSk%i28G;3S0EK~p);xcyR#(QW8l6XWFjW6ErH3M#JA?jKCLT#`WGanQta3-#$B|ShF-EGSEih}Ue#MfY4NC4 zxz<|3-#qhQP(8BRwch7;o>f2{IaBsGF8|7S9*X}}?@v-}l`GGH16vSBv5YS5QfxW@ z3$>*jJzjQEA~W*!OyN)tUV#WK)JMSyYUu0>|42t@L|N@i@+D>ND2M3Ul^H913E1dr z$=Ufw5|o$!|d z>gelJsQwdLG7SK?WoVB%5uwOa7w}4ZdpGv4^@t(}?*X1`meh9m`!AMB_?m;=kYrPJa*_vZmldJi4q~c5w!X$ghM4T27}5W zz+eH-$lxgezOa-mbeMLs0X*g&pW9N_MRX(R&ThZ`{2lnRuml3B#f{S-5O;$ztnW|8 zD80>6R&_P>%wVdNLVcV1>^Hs-=Aa9 zWa#24fZrbcEP%`5As~>s-LekyCTyu|&c54BA>G4`$ zq>%(KLlSsQ+Ca(vFB1>(3DO_HI@=T03x0ek^=Db|s~SzZkur6H3AiAi;$rj{#8eTL zKu+)L|G)OEVQT=ie@cHSQanKJ7-zw)AtW>pR&BdT&IxA}l!o#Kg0yvj3IOKVIBghH zlBY5%D*vDfNvcL)o!tHG#QTmxowk%dU9NoRQZ3=EQO|4;?=Eh2_Nu3L{F33*=MB$_ zSnwGg^fFoKcNmgCRmLQcy=b*yW2_)VWG{}a&o)#O&NvNMhw0xJYu{pas-99uA&H^u zbt7AOqb2k5Vc3wtu(X-!X zXcMPhZDCOt&sr5+u5o8iNkLhOz>p(@NaTnGmuxmYejO%O=*HuH4Kd^CO!y>qisgU{F2ub3D|4hM^(2sSJ5`knrkbWt9*zTTb zn80eUn=&oH_7;K2!{C1B@JOYnDjj)JQJVPW*VP|vCPj1dcezBZjtXcqn2~viQ!?J| z2syGZPhkt>*w$>2hCv^XZ_#Y)s$srPh2HcgtAR&6-NM51G82|nTb&oneN;HgFn>mRD6MGgRn`l{Extk{}e z#Q$V9Hy2j%!IogqCjr)4@*aW$xk29(Lg%6eybCDA@y0`m=i`-Fz|D2D`2o@DwE_7B z7#L0i3J@<}2Qc!$18?J}QZE^#1KG;_6g!(i)eW(xk&v_5Hn(Tl9sJD7>LtT6QF+@J zPw>p-?M_2NNF7`nCVCmiY^_4vV?Km$N*^-tP|2TQBnkksfV?Q9BPF&~8WGD48WFm={)wDEg8ZREtO zigMy`r2xImNFzqL%)rC4s@&U!ijohyshow_zVqhLlOG_7@DR#LHY9j)DEi>TfL)^v z5>`hJ+QH}!lrIJf_62Na1LNOlEXsK$VajI=iwKXZ+S;S(A~YH0YqQ`>+l*-lA%rPt z*zonQ*z4<1=5S^SSP%-+KD^gDS}xHtW{w@%g~@JIqCg~) z9U{zt=I2inN5XE22<($O%P`~JqzR@xv=`TnSuM;YA{Z-WLhy~U##A!wm)n~%t)}xx zs9W7FT1snU(fWZx^SL#R-E`hQiOgH(dvKBQzMYz?p@A~V{sDE8Ork_1GkM8V(grlv zUl}DIbJEofo~da&vkFs}IO7ja@XUym^rU`_r)IGiGO?R;Ia$1@a#Whm6F>yg(}o3p z_5Cf%zWe4t-py5Q#;pbLxm!Gi^3z=NW7uIB3g%@E@iSJyLkV=CCY5)R$k67L?&`lp zl7`I~yUEAa^e1;z{9qL=nspelNj^kR5*@ARb3(>_)o0AbI7}(Ql}r@WYP!Uo!SH2X zomPog`zqG~u~o38rh_ASYzq~)kj$+Kb`8HFkTa}=H7($El>ar;gF3yfW<~lp9r~-M zG?Mr0Lq(#A{)vf;zfpy$8~_qKL+DyC*V2P{dJ1mFf+ zQbFT2CnM+jh5=%zH~rj?c%{HO6m{+gNl3VSDHnVfbxyeo3%n-3!B5~ck&7|1L&l6k zG#3c4laCbH&ke_{8;~*tMc#h_#2t)(?r00sQbK}Wv{yy1dMlhDSkh`MT0P;08V)`xE>e-lWr`sa%QwZn9=T-CX&AV9?rZA(D!Ug5nP(JD24^ z6WIzD06>^?eGGZyU}ZUJ)G8<~Z`NhPyQvI(wcz##Qh}}S-%pgV-Ytee?hkDuw^=o= z;O9ji^HAZqRN~bfrmLIczk7P{*>}^rM;I zzaUUy`k}o06R3UbPaqcyrIWkW;+R`yfbZ-DJ$Cr$W0%z#5M|Bto)-@^1HVmid;-#O zTU33khE_;@ac@!Da)drmg9Dq{wZb(*zKS!;X<+U`pO?g?P@af`1BbKx(~-*D=T*b( zHolj#tNJ!S)A!A7+Haqm_l6Z`th)Ge%-@x_M-T@3KbI~PyHuzoBEEP8 zyoT@bzt?lIVNrqR7m_%Bzr+r*$&{qE(CQ3XmaSw%Zy8oecQ#)j3{&-e9H!gs@X*ay zd+8o(v&&=kt_~@y4lW zDocnQ9&^DWW)^Rxs^)BCAiD&%nOsf$*D=<7<^nzRS@qIsIg!va(h|~4+&d{a+pYL@ zLt2AfBKs(E82U+=mu!rkam67Ru54*~*4D28weoMC+7afm^gNk?HqYop(@=;uxDbVs z&dCO4)E}+LNoXzamOE2A{j9Q`WvwK$Jo~nykX7iP`nU#&5Ey?Y`){%50`dCIljE=7 zA0ghA!J`4Yhs9W9?|7|(0La-ZFCWr89UaRmnaBLv*4OPU8ZrLen4J)LC8mTx`vsjr zj5HuqE^E(6hwwLxCL!5E>KmH~C+r!VZI}0OB+|503K-Ynx5Rh%)6OR zRQfQFmRs^<%AP>iPtSFKNcABHybIXEYB;_j_*l(@$5eTEA6mRaIA)tcuarR3gBo!9_tqAy83P&_O{#Gx+mh zqdijijkc#BU#MO>N^&SwV|2TZk#Dw!Ds~zgD4dUBY!pmXQWW$*ERQz|Dh&$e-(eIK zRaDyl4eOw?|HJbrGui4kMBR1^5gS}{^yOAgo1+g7{lNb5a3Tn{Z|+j4IL%_ zf9U*teEF#V&NUzHeJrv&E8G=i%f1zrk$%9RB~n{-pd1_P1UC z$`1HPn1qpzt(Tkg`#)+)iwXe$&f)(c{#(C)0shUe=jz}s{XdZZBL6qa@ZahG&gMUf z{|(Ucbg+Fa$iMaC|3|I=r2Pl~AL}Hv9sF#a4HX<*Y+b$n*di=03grF2ru;Wj-p$#~ zQ`gzqR}G zh5Up2Px605aQ_2+1kpEKmKfcv}bp(H#_Sh3h;{tjAw^xzIEvCkh zK|y(mqM{)C#t-%2w=v{$UvJLiG%#QLFJ@(9AFdfZiUdRcC&N5_ew#T4u^(UZDYk*} zzV?#~eFgMe#48f?v3H{b`f021Eow!v`4?&5yoi?L_%;#iCmlR{dn9!=jSLxskG(fL zZk+>P?E3Ye(^@0?{RolbbFHxKybI*RD)J7qbB%IGW*017_7H+dM4sY>tn(sRJE32M zY_H0mK|*7n{nC9nM&5VMXlI@2FR2gi^KCuGkd)HKG-o)-5Btb*BwVI*hw`2|DsWF! zpM$A8_>}kIhd)=Aif#o?!qe@L`)VYnQC^4l=S$kpLSMCK(cH}h1NGY0hEhq_$qqsu z9tEg{?D7)y2EO|2;0M?dG)g7=BtVoczvuAwV*=B?#@p;UX}9F(ZaRk1PRrJ}4TOP> zh67y{y{Zy}HzV#zLhvGvr}9oxp#!|imE1*hs`j5V+iW;x2^7sa9+pDx+&VW55V%yW zpH>zYzU=V7L0Knd^6vUQf}xbJYee#d1&_O8pbOb8{#U;&p%)M5oRePt2WRX}LY-8p z?XCR%xq`F#s0!B{6$<2^a%i>s77NklmdDI%Uy*I-%vjpFwSLHu#BW0leJ|G!nzR@1 z;hStO_Dwru0CYLNBFhkKei6LDduJ;j0KqO!Dq*937=b0v{_23W|!K|z;VA?;DX-mfVTz4>#Q!@xl|3yRXkG|3D;zRsic!=R`u2QAIIbfZ^0A#EA@%!DNO(#M0R~+u~az;&*+OF;<2hLN>>4+GoHt zNwTfc6T`aQ1=4aorm8p5SQu*BC1OpuKFV1(qj4`}sR;Cx<)em+#ZrpRSyAzSva=DT zo7$YjkV@C}GQddulS{FCMVP?RtVrdr3|x^EO|ax|1Qx#zH%iiTQeGC$It7UuY5W$w zom;BGJ*uy|b#$34*CT*Tze|5frc-^^Z8!-|6z4VJO3f4Rr+#7>5a%Kr0QfOnW9+FO zTQy#@^E>hWS^t}5{qb&-j`XAkO$Xj_1E^wS>pP(M#GoJ%Sr9r8&$!uHVP9GS?#?Ux z?878=28LW~zY!#0Suh$w{tS$kdKrZ;dFEfnZ%JeK2bM9>1bDJ52a5m!uA~j>gNGrq&@-ben)v&zj03v+=qO zI`vih_fwg5x)l2ST)u!yq3QH4$tBL?Eyt!kSy&2W?U}Ph6+Xu+@&0IOBoKWc#+1qZ zax{sdy?~7x39LWtmd{Uo8D&FYJWAe1?yp@LYT-1#9`e{ZP$YP~69GjQLsijdd)e(0 z8P?ew{Ls*CG~wqm$n&nGmLKk$@WtM**s>pEI$HH0JzIf-%L*pR`{Y5+Td%ZzY9X1$ z4)6OxYS!~p`Lg=+xH=a>+=V-cJ%>?y8032uW!?@Iqh{A<4rtJu!p}Y3f_*W#RyHt}T8GJBWCSgXVgZ-1vj_|C`E##_mht)c6%?{!Mkd=HnZssw_0xoa||2VsDP`O9asNl>-y2fT8%$)02%XqgmAr#_Q;K9otUnu6L_<=a-hzX+miA2O;B73m!G(YlU7VqKEE#%HVc-y}JLmok}+=L{; z0{QUxv&lmY<&lrwDZhSV!MP-ax^faFibz{MGY+1qzSZlx7ky90Zs~6$6k>Dt_$QKi z7#T<4|M|Nh?JqQ;kJOCL@LZ@M88avPRa^GY;iYJ~ezZC08;?bB#=jbyBR z;$L45zPaptmhm=82;ZU0oS-w@%?|(%^j7XHr0%JTONzdCOb6(N_^%dd-7c6cMECOI{iV$`kCJI`~DZIsiJIkHOIMRDW+ z(bV_oxUc2z27(U;q%R7HOb^0;Qu4GH73R?;2Lit_)L1#~SYvv;4}5@y1k=hB@K#}> zSK8--PpW*|)nXR1rezw)C=9tehSl+Za~y-l1L#Dy^qd-I%%9$E2oDIU{t$iMC0UhW z4jDb&KFLC?9N(Ko!N<=RwXju%Zt{K{lH;tCQ@Cn??H?R~GoE5qq<~naCY{356#sqW z)y3`P0K!CDlr@fE z!Rooxs^Eg9@Y&m;>9h0$%$C4S(cr>X`ifyEFfo7x~npZcoib!OTmWTXrBZQFbnTlRjEBZs^slqhSgc1Is(mB3pT zd_NZw6w$Ie7({r<+v6msaO6L@7WhCTA7MW@9O4lwxJ$H}$hLzZF#qa%WhlA+WZTJPu%g=8tpSyoebz5SAM}R*k;4CGvK%$bkwK2;SxYm+?VlUwrm$=~oR#h^R zAl_9#Te{~3;U|NFue5LnC5=9%lMhyAmQ8UCB(camv>kyhDJsM+g*f)j?`Yp_mV@%h z^Q?Z`W6oB-bfx;BC#~$@Gbo`pq+MOCV6Q&;r1B&+IwKB+pg3>7G=+2QgXIf(WRvM04lg14v=lQ!c~*e(+oD7@~Z-kDSr9! z(7Xa{Nb~&aEax0Ghiwn@OC6q&QR6z{K;Nms+J_E+itE8%+(<@S4R0_KS*MHxmP!> z{g7qOa9~s??ch9Xa`VN_74KKwRgFsqwmZtunUXPGq@-%4u6OI$=D}fpNa(59ueRHx zRfH?o#1GpVL;-UXIIe67_rl~R`KCLilyUskQ_<(*L-a3x$ilchQ;EVD3Osd!BbIZW zRI8;hMIC^8fx1b?3=+{^}r{=h_|XL!E&$gg`^DNUrP z@3K6fL7vRZ-s6=mlS9RagL)B>COOd>dkx5*058wn7PZ+15a7lV92hYVANQT@|u|PR-n}Cg7>Ro%2UeChhL% zNLrgduc$H-$pi!8x8pXy;E48%kykCR494RxZ&1tmF;ynGI(%5qHleEe;~Y2TKS19c z%&N|3p59JwpZR?Z>M>VX;(As-9o+}vA~Fl1f&1ySGl7qM8J2hJeO(4PeJ1Mb_;ycg zP@N&SY~ND+StDgmj~)4duvM&1O-42zDxg5nfjV|iRDUR$O(tP=d_#B{-V-PZ3Ox>G>cMtB z#Xq>N*EqAdN9mqO_X7b*vvG9sL;Mw!O&w?jz9Zu9P}H?oWw|ykCeH*zN^<2j$+gin zr4MHhet~g_>ZD!H)M?NS?^6m_LU^S@v+%GJ!NSYz1_hXhal&-HMynL(z~NZ;8WnBh zYTE_b+`LVv5E7|XJ1fHj5$1%it4BTNG2=O5sq?jS&K!BB+-dE8#d3KTgO#eWJ*5ER znrQ7jiFw*s+Nk^o^{6R&b#%VG%;Pf}qJfjan~iT4BRIS=_Uf_R-l+Wd>zvlQD zhqLIh5{SM$Y(te+=r(^!@GRW`ag%E4O{yAHtT$I-QUPIgkgCn*Iur1n!zibvQ>5L2&X z2Z_5D<2+R^%Ua0m(Vst)yp|O8&I3QeE3I)8h{kOy+r4KbRwZg_B~k`uiFUWRG}~h zI4&?NUZC?A_ra_zsR#9UZn2iq)M&Jh&JFxUD)g2mnt0iUWgKb^q+9c#H?YJI#Ab2X+%4&( z_3Nr`CF}%wwUY8?Vc^pZ&C64_`T|R)&()c8IiK51VY9#X)anWBaIj&pfSghbdqWy4 z-}}@l_-nT&jO#TG4O>p_OIEP}J;e4TD7ROayi}RLbS#T_qa5)#>q7oed)wN^oeL(Y zW0FCzg?o&J&-x!45QN5TSJgK4eTJ0EDMvY_MCHIcG-;f(s|N$X0e;x9g=4(JnP?N0 zO+Jp4Wc7*|8`jT(tPS0IR4;Mg@qa(4IkW78%*A&4s$R%NweJ445M?Y*JCF z76VR*op3+5&}A&W$D~o0om+UdKv~9WOx_N$tx89Nifbe;L^m z4M#S{JwHl+QxQIR_gbI8MhK^|PL6hk=)+y&R0BtqO|kP|GBT?M4=QV_ZCq7vC0|{A z-?Hym-7+|X4|Y@hN(Mu2)6QHxj_lU;RnCVxw}9I+0w|wW`NTiKN`IVPy(TBP>3cfl zf+w-83OsK}d>+jM_@buEmd&8H_w@1^4kg3cGPAB_^i`j#_3XJ$$J^9`ydJ_EfLw|g zLzB?QnSL+%%VR@vb0Isfhb~w4lm5z-03}ueS@DyKa+_`Z+Sn;sFc(MkICkm27b|QIr70zM;3kQ+ z!swGzv;P}F<8t?`=F1sKprn(IbRJ@|;_4e7e_uUvF|zBhd|H2e7qYP^&jX+wXk-0+ z$6Yd=c{*+%xA>MG|3jkV(gqEUzr}F4g({UF;vSE>CUQSY;Jte_Bk_o36f`4>Y^^~< zj7nM$fWPoYE5CcWKD3j8sK@4r#S=;-z_D5a#pC!AKDf^T+H5o}O3(hNTzL4b1f%MJ z`$KSITdrMNjFx2SI+W`=!I-9Ew}@qSgT6>g-=sl?dXZv_OF#GeVc=g(I?avVOqnOP6DfKYw@)R7 zneV}u$L~#KKCydTCLg#+4T9=Zc-t>NGX#)g^UMEyjXL*PF(zurKIF=t7QhCHaAQ`} z)U%wy`Y)!=iSP+G?C^$UKv^=d#^RXVCww5U$o=2>ArEbU$qin4UWnHG(W*K zXOs}gv?1w@4J>Y>r}dky;QmI4{Ly(sS?r)ix=3rVHg1r>+RZ(3bD^2DpoP59x+e4X zq39hkKfScN&#OyI%1Z&?6?G10#YUf!dFZBj)K!mKs9zQ>Sc_y@1oLVydl4E_eh(JY zdP=)Z01Lxgg;N`+Lnra2y>3wHF5G6VXS8sC?km{NLO%Q!CX;Al`-)#YSj`bXgWVRi z`z3fc2?Ssb4K`1T4#zo44LKUW7oV#o=JpkkxqBK)FE%fGLe6HxX0U9pgIkkkTOV2S z0w=IzSHtb>cD#zrX%PQI`^mJ-{q((pJMD2s%GH*Hu2%_6q&M>{bCYI2qIbrIC1jE^ z=ygRtd3n*HlPB3|z{)xObIcr<?)1MPnY6o%Q@;>57G1qk^65MrR$z zPFE@Sw!WCJ+_a1Z$l{lGa2lt6ny9_}IPLXYtulq|m%)a>S4bb&G?O})<6Av?b)0Wc zc8nqQ_f*DBpOL;=A-xd%`aQLzlK5HadBAkHs1vwy#gzw-P1d#8Brgg^0FDt(Vb*0x zub8P}dMQ0{-n@vX7jSr;u7_TBlQX4X8Od`I`@9q~ZWEM7_tSS1+Q&!aWV9$}T}Ol( zDl%5GU4_%A#e^>fHj4BJZtcn4lSNJ%>Pp-BsgJwpZnX}V*hst=JI7{#g7mg>4<|m( z(7VqNCt~pm@20$V(5%DJ7a!3RT{*v}ho3?wyatL!FP0~RnGxC)^Umolq4criy33`w z%leqPxnWIuLu@iy6n^Dh`%P$B1~}ELa=_>e87a)X-d6!%5pO<};sR%Jfl`DF`@?iw zmlx!~x0$6ek3_w-GPJqBx~9WVXkG=p1n(o}_=%LSIW9)I_>f=Ez4hJ9M&@F$0_++! zIAmOM=Z2;_>8IK{OV|9JMcDRG@$SWpew)gcoJ9y%MU>}rqP-WrK6BTX?6g)u0Y&QE)VF| z{GN_}ADAAMPeOPkvUcM8{fXS2yNXR5!gpQ8VKa6IN3x+ncr5)>l%`ER|Nz`;iQ*9jFUYi2T^7sj2nfzBHtOx0Ad#g zd@e1b4i8bXq!$rQFi_ej`jI#Fk4w@3w6VN2^NZN*^~JE2!iEt777S{kpHJvL&(9g5&)|t9i;iPeveVSmlsg9SuS; zB*8M^&5KIX)vxDHCoSbe%N|ms0$+YA8iMOe4?WX^;iz>Bwck0ToiES1ejMU&Zmx!CcIMY{%EygV&>K|GbFlYSiNP};? z>~K8asAp-Uq5#p(J9TiynfN}q8JP}T%=nHM#wQ%Aj_yl zZpXF)uSt`x?*k!>KlVtJTRd88zayEXvEWVlQg$z7Q==h-*F#=A1?A~8#01MnDg8k} zOxB6@ri$+$ZH=>*@rP))MpnLS=NmT6a|Z9fKKfPA?$r6Tr)0rxK^6C9Qdvi9Xn$3h zn=+DdfC81aooxQHc8cn3UX={rp0C|hL0+UG^B`KtX(`mc+(kQP+1r(WT_3Fis9!Eh zcals4`BG~r<0a^B#}r8kz7$U`AmN_@Jwt+ zLGF@2UoFN|4b2iz6hpCpm3Eu;ZG{LSx|WPzCQ$hUGIb<$oP3_J=}J6Lh_hD^K5unO zL=4vXq@pR3g4=B$Vv?+UXaDp_z47{qF-I(bg zEB`9x9`(5tv^gt-)u27ulr^@5mM|8>^B$%{ZsW&q@W&cbLjXw?;tSXMlH2z!9rr_g z@zNi-Q3KL49A&McsJ&&zs%UV!H zCH0WPz9G;~YF5JwBBZWAuff@)Mf*K2@x@LpcQE*+uZ?lc#g(h@?y}FEbC{-7yGbew zBHbUSC7ilv$nzj58VbWb9rliMz>Kl}T*S??bxz#zG zy+#zO_4+Cc3xF*7g+(8tTF2f4GHtlUS4X#Q7mF6cc-r&gehr!)k z>;mnil8M72HhP{{=Q=11FxX2O(IR5$j5rWn@^}i=1p0;4&~UtF2TzlXwM54lvNtLl z;KA57Q;@uM_L5y}b?79O6?*ggb?MwN<)5k^tol);g{M;vV6FG!`p@>8y3GUFCEU{J z82Yg9Mm=0$zAhijxAg?iP7U~t4))VZ?w>35EpGWs#^Vqe_zy<30?c1bwg>u1tpi+_ z?hW59L%x)X^|%K51`Rrce_nXw+J$T6cVBaMm@b}&+o98Qp%ESt5=A{sR`?Uv%5KY= z7rJGvIqc!AN7K`ku=f%JU!PDnu3u(&LoO`J7wap7lPbFOF6oNPr%w1X^=c$aE=X-E z*sKR_B9njGmKdJW^}o4uIeP|lGdYD6+2IVTX)N8ygfuU{1r%&D5VSX*ie&DgGprAL zZgg^lA3s-J4(5aI8S;zDGWZy#-riwRgBs*kJO^!YJ(Zp(rYd`1E|1WxJj=WD!!57g z;4EIHy<ZT+$S)b&;rYR9Oye8AdIxS6Q?l^RDyQ|~9tCQPzn?vsIh-S3^ zHMtd#%!@qZy$+DLiss($+avn^KG*Wi9RngfWX(YN$Xn*w^P1P34GBkE=jL}#A){JX zZ{SB|1a$=*rD(|NyYJQ00lGVs-VT{AaB`a{7KV$bE5Eva5il5E&~~iTE-#)I&_P!c z%Q(e@zw=)Y3OPQkTz6b&b?jyVe?}5#M!#nQq?O6t)#mzkoaf{^3hBE8iCi)vNxtX7 zmj)r1KY2S3;N8pXI?VTmm1yPoorg;uhw==!#DpW$5i!OB=}hsfushn2O*ik~=wwkR zdmzXQGBEw~k=IrmOiidTb2nPVq|B|7@$_uwVGJ>?3_-<+W2)lum)wW#RYX=gc@Jsx zDW0VW&8BWx@b2_F8s6%rxEnf4Jo1Z~e+)&Qqh?u=OA!S^8M;o#&|(bfL|!9~02K=I`#m1P*W zQf5UF=inMUK8d9u>35!0-f{@&+53-ug4V-WbJ;iTr2Thc3dxV+_N0%M^khMxl3 zaD?&95;JjGm1$gC-b|)GV#*})y^qans;6-=B30~QoQ7HnrV-8U*cnFN#})hY4vtA~ z1&f;@E7MPD%_*h}78xkfShHd;tm@V=G=lt`s-u_*X7;$A@GJf2TVw zg}Mid;6Gg$dOQNg*~``;DVNvN z2%e9(@=QYaPZq^{S{FP+_sujF?Aba-o{+iY^reIM`=?b$$+Lr*NjkC{=pJKk$7Va) zpt@h&Nb~48d-t~wl>m*IL^wgDpJvL&wjfPKNX^w!xrv6~^sl0)@iB_ljyg+{t2aQe z!TM5XHwe5>JB7ZRlAw~VrK68FaJ~}_;Zt1v^|rGhsJ;^_EdkL&h-X) zlcAIO+o@ymqIgifQ0B)=1KiQ@e)rfeL86q)FXxmfhpM>)LpT**QQUJ)$b*FJIB8mF zRISmfM_-7mhh_@}fP>{Ak~U)G{OV98dYWDvh$2~f@Lpc;%oPA?V9ey-_cUlQp4jh< zpwVC1tOe8TPDPbIwsA z)F?50VP&=)LPz+-KR9)NHsi&cW|r>&dYx*5GfT|<0QVSczoCl_8-Ri^B7=htBXP+C zyTru*5P)ep1_}zM`OI?Qc+~$wJ1Eei-~B?I+FkQ34W_P7l(AgH0E?t|i_BUdX4`s4 zqv|tgV0p`Tt13Iu539u9Txew&i`0h??l*iT7Ad&SOzOT^0F0dIi>*eI;q$JdcAO=y z{>F)ANmH2B=MnOiwGPz$f&KP2qLomJj`V1ggPpa7!`B6DkE6B7;`~vXV7$7^xlBDJ z$k~1mbwBXMg*$Cy1tT6x<6G*MpZZ-6=Sh}+gCcqRzxGZVq3@0hANOf+C<%(5I5;u{ zmCP;}Ek~5-cdd-;3AfD%#6MXO=6t7HNM}j5rN=E)^?jCfM=veC>?ipId|IhlUY-#Q88P?A_cd$)CTW;%`M~-r-W_$zqnvIY3u*Gs>|sQ_yC@cE?r=sTOWn5#$r*_*tE0!0@GHF zMPJoQK-RJb$v!?#^urdC-AK3SmL838txGjNqzmSr?V<3?8+6 z)s~;!1YMl?51%5+&Yrb5G~$szj>0;+q~t{3$7E9J#Q36RcrCjk6<{F9TD7hL229asV?Q8 zftV5KB?_PoMO|2C()3WKsR>q8YQ9amu%0;qw5J1|aQs*NtuvQ|pd^G*f~}|rDrg6( zv~IL)f_Lh@vS!AHiRwZr#b9BGVzW<*Ai>;A&%6uKGhE5(b3M!I`?yIx?(qRF8ZfwlZK=Mrm{S5>%o%fu z<{X}$SFlPO#4AYRA|M-Sg9Rsyk@Q-w{6F(kONJJ;1 z1<t=>9;%O)%T5M zim#3?p6rnPewrIIoLJB%MI`xH6az)BEF~?6k3SNg4>kjU(f8gj^oge@RySXaTV^1gX+FpVjkTI4>~u{ zo&`%~RTOOFrVkVp=zc33V%^)IZ);QLeMoxcUNjBX7%kH@i>7sBivpf6un@lhn37e@ zh$&?qWYW9OWiZ{By#6|DfBj{FUc9@%bA8a$JF=yL`uillMr~#o@e}oTJF=t#qk~+Y z(3o78N!_En+C}UD8=4{J!lAGsi08H~zmzRzGOtkwKIo$%AghCeD(WN*jgAFOFF*x! zXA*He_L|?zC(mns_MFiuqe^#Ba1|l8fjih&H3q8P z!l%_6P|+3CMhUD{I_4gy=MztdBFR+)tu|xT`}%u`JN-~OpT9t<>$z_D!(A_$jkBDjTOgn z#aPdSI)q$VQ=u7M7>0^c2I&V`2STZNSgB0CQlIS@PKEF-Ll~;0lkO{}l2`I2; z%=C!U^Vk8=b`*WbbAu!<7w@od!~58ct<>^WV|$ zj63+v!_g|3dhG0fPAa&$^<)8T3FppV_1XZ*X4h}1Et3kVWeFk&(OF%UbGs7P!S0k4 z&55OJrYFHtcLxXJVB`+NeIWy)o8h2rP1{BDGG%ag57>G4IJ@ZKMac0fX&!S%P*;$A z=j{)Scq~Z_fNQba{jA%iR$|Xq$YuQ^pf$1M%BgcU5%W9Acg&4m`?>D)6MzxYA(2k% zJ$}YJEH{GTi*!U~=Vg6)g&U?KGXZ_Pe+J*!@YXO&G2v%?Z7BZ^c%$GHL(}C1<3Kj*X!N*%0#mK zOLdj=V6@vgSLWRQA-=TPFx9)>kPAy!b^S}_MZ4K^cO5C?(QX5T#sq<#U|cCfqBp5H zlhe9r&D@YXC&y}ZdGECD34F=DkIl%=_@e&>O!2O?d@UD{Jw$#KB#1~7);AVRKdNlk6um5UA6IsS?P(V z2FT_I9EL>XAv;#D@1TR+=jG2&JtQqMlSKs=D9|E} zK%uEpt_dQ`iJ_mmEN75rv1!mu*6ne&AhVh}P+=h%#4q-8@SW6fB&m8~fx|HXfTUQ4wfNepS$k`U7rf^1U$#*2)-yMwI& zS(k;na2)S)_!)cWAxx^#_H)gy^>2khW?Mlo>V2Cyw4xR5P$tuh6p6r|qd%Qp=xK{z ziqi`eact@3ZD$9MXoceW6Q1RR`Aw+P#$*wd>~Y0;X!J!MT(x7qb^2?86%<3g{X@`( zof1yrKM}V)r;GqE>W=aB|3*F2hZjVjWTooQu)LoKYG_v0xTagOERlx z0Ie_V!&9|%W>~!)RVT!5qGO@zq_xaSv}p) zv)$1w9-UK$X=O^IOAE6bUG#Uj#9K(4i3ilHaxTR|QkGS(|0p0FdzGCbmf&?lNdI7m zb&fqvyO_MZ%)9Si#~9xxEkbD5th!qoz@#o+}!{4eBrc#?;V$i^uL}yhzm5gAa-MRI_h%PeQi0=4py7h=&uaWBL zmXRC9kRPU-xjf4Cmsn~xju#a#6!e`S(W#sDmK1Qy4xV>|sEnOmz910kxyV#UyL=LdR|NR$_rR`fi2s>k*pD;=1kU zPJ=_C2GLks{NiGF>Rai@EUqOqN0yQAeAL;Q<_ct#s|J~#6k_9DK-rb5Z|LH!e*GO_0-F|K@NALPiLnl_P>|ePP|MJBoGNrdTVXMNP;Hqy zMD@v?FKq!eo^MbH{A&lNgmBMb1dN#HJXvH*qNlB=Odrn%x4SDDRkImQY*Yn#Oglqg zdkQ3YE^>QrdmSI%*EnI<7@@+gKBqr2I;*dY}Tj4*f6` z5fZEr`43Bv6IX_ z)rG`uF*XL8GoF&j%T^o9Pp{JUBi3@#Y(^vstRcAT}{$_X!DhyJh-J zh7=)JT|w^nqxVIEf9u>`V$LYvmo_KrV~vI`F;f6 z@ExgX^3!*S{zP1>8(#Bxg*ufcT-I zQEB-~;W&9?Udqn}O)9Ing~hbtxS8DQrOQ3S~eEKvvp#C^w^8S2nHdNNKso^ zV-2BR&ZixQ$&)ObzQ8qBwGvAKWqI9<9kMBQX)ti2p4mPfOP+hYE)DXuD=t35=_0U7 zUyN2&yQ0yDBtxK)D?MJ&AB^_l?DH;L^KV0`19uID4*CyfK$SioIS6GktB%$}?2dgW z2wEYd@dGp;pZhh>{6pz=7;J8@DoOKG;nr6DN{nX&olG}fX?P{&B9Fdrf)XSC$@cc! z7N5^>sL>0yw&)`os~@eH{)LJ=BVM^+3Lh70OG263$wX2s0pDxAAk82FXLgNL4_!4Q zTpJgj>WV0_sB8Dj@<@BxSKr)epGzfl9AJOeGsII`CB>Sj;uI!J$k)bCUajVB?{Ab6 zM6o$YvLm|6a^H7P6kQV3BG!>45Y`P3#9!FxU5gMcvuni*agX=Q>yvfVqOroV+%y zo(ardwa^TIk=MY!oiaxiO^FVjO|jbuAEY#UndT_V&lk*J~DSoy^Cb>Jly+%FaE+uXeV5%6LyVVBu(FB@Ko@x$H)hCdW9~Z&T%3+Tx(SBdt z^Jmr*wd>ztwja(7qxRgn-&%!Bh72U~lOWRHRP&Mh0ITI1-U^r6(jiLu|D0cXAJV6| zv;r=J7$5^3!DHh{#CXW#u3Uq;RhUw>&5~cK^>3K-j2Vk+xAy(&=_lWtQGrmxOz#)j zw_oz5D^70z_{fFqY29;#q`#)F_u9~hX`K~TcC80oO-=>9ju96*O3Ay4$-DV;n&ZnW ztlbft-)E)C&rI!a%#r&cqo9XNDOt%WuiTce4zrg^`3_Xu-ViUlmMzuCL3z;X7cY|P z!@vgCxrjCKg&#$2I()$B6+!;J{;YwOKMrrwT6~Ew)jMwDI;lPv^a7=k{U5qdl< z|4bvrw~HhgLRk)eJk!A$-2CCv`{ zg!|}q3sO&{i-|GZS`1U2Y3}#V7X|XtuhWjwVFc|_W`0A-Dh+as=avEpgL2xD&}+Hv z+nGQj$&w*XHp@Yp#**0?9P!r{J&Dn24MOKAd^gq@xffVm+918ee7$}Sz^H6R7W!se;nJh#s>2psUAEX zqVo>W2EEuRc{gC8bsL2F3-s{3+5Dp2?%1+$Aq%^pvS!ph=X-gep27Mhjsbx$KpJ_c zlkE_U=CfG3a7Hta?VEXw)1##;3h9y$*0J&#C-7=6fLqVEs-7yBd-Ph_J=C<&#RqGH zxQ23fZR$riya>6{DH?~d>2wC*ovJ z&j}J#V5*w^j=XdiUfL~9?V<$I1AFdnbXCv(vdY~K@%Len$Q%D5a5$Z3gOkV|8B~@h zl!Xh7EnSm3&I%xGD!Y*g|#7<=_(cDM&ypIerpP}K{D`JFKcj`0?c8fEdsCwEq52FW@=EmVJPn#>;E#l>I zUUmyF4GtuhNVo_DyjxWNox?aA==U?E(tc-C+n3Vy(j>D2kkNszn4i(xsC1P_sV~op zd17Sel4v3fhv{2anA;nOM*+!h^O0 zkvMYZ0ONTDC$A~bXX*B^(Qq3L8lT-h;W?9NC-+r8&or4>&lDn$Pn*B}#($qns~XRA z0&t8{A6Da^VAc3vtGf4G#9)ITlY>!!E$*40yyQWq_Lx@mS+a3XNUm3N1bk78;V{`V zPXpkaboxplGUumLHmfpv<^=7S=e_=d<*OUM*);WOlqLQ`AQK+3y|;(eL}_I{e5y(7 zrH7og8_cZ>`$~$d2_(9zYUG|B>2IAw4qtm3-BAE;l~`7i>FbD+^^QtGHyO5H?~acx ziwQmi+|cj{nS*+Fac|3WTh{%Bxhyd65#I6JN1E#K$>-RZ0RRjjw-8a2^Y^ z@!Sy7chmS%w~u}7W7W2B2f>tPaq#Wf3gsJZXxiA3sb6i6)qlmTvTFD>2}b~D-qfcM zE9Q~Q>SHZt!z3%$ozgy5XVF#CkA*3w{m|=sWDM_!&wV@vOTgxE*xZ%XS})tlYR&Li zbq0Jx!F^=QIzNKqh8X$u!M8yCaTf0M`c^G5=s*Z@EdZYNbw)&nF}kvSsC# zRYhoa)1QdDK{n({zI~CQ{YK#bAo6i4)kOVet?UGgYgdr9`y@O&R$K(ou;nyE+>oTa zBR+@E+wBHZSvm0Ou(=ClD>sP|YNlQlUwbazE{DB0tQ=H3m{8I8n8&GUr`jbN=9*JS zd92AXSlik~)?IcYJImpPIft%~mdx?aKPy6g0{>Ri;dj?33uK8;_=g7uumn9^<95&l zSf-}9>rP)rJK-@y|KsgR4#4!)g)Z6)`z?Bf3)8wD+ z8t6nUR>vAAXv;zrO(G{KDToaK(8GWgfyuGZ@V-a8pJ`MXFey~kgM7I1C9C!iO31VX z@d-~}h1QfqOn7EKvj?+401f+xNv`zA$eRMQhcPKr0wr0LF(+KR@#C1_gE@hpN_1_9 z_iU*C*2rQJ+8E>$^}H>5t@8A_H56JUtr{U&RdKtmxO+c$=z4-l%;s+6Dz`$nSLk8n zImqPnqr7!N6f{IpS+#a5^cdcHpu2M@1-HC1b}QMnQqUiaC{t5P(mkdpzgLKl`>)kSQ{;LUcIt+0{f;4$N30+z^F z4Q3T0rk)R8;0U$xs6xjlv#y%6}Q zjA5D+cz^Nx)KC3XFc^Up=frt23)~Sa1)4ea`|Qv_8J5p+^S( zmXg*c`k0vka=H2W=myZRWJjqM{DD!!&H_$ZWB#$Vm;pPu3)pqTam zN;s(P9F{xcbLutYZG~(@*c`Sy+3}F7pD&JPzV}2CZl;S!MC@H$=?SNw@k4lfN z`@J%%r!8xkK;F0VrMIP&eRlb=q`;V{PeRArrNhILs^)mtc84abn*YZb(Wf9ML7;PLf)ilKbV3PLfgQaI^k!JPm_No zt$8Zbtp3mRIR)GZT=D7Fh@n{(7V8)vQviwyS!jaXH*RN$tzy~$gtmd9k`7=anDrzR zg}x{Ztuj6|vC3pLJ<`Cs{@N19_{$fvJ%&G5@Y*pvCMY@J3?neRF#^Ntn1|E)p7(7Y zf%10dnx6K2KeGt8pu(Z8lD5+gYjO^AA*QW(_3RO7$t<)f>!q!j+m(+Vm0JvB^K}i` zxc}^*{WGu2?90h;4WuaR@Q&n4ufATfVq(?F&(W?`mJZ%GfAcs0&fobv{rH(IPSi?* zJ@3En>%Q*$zyJGBAZJR6Y&$;@XW@DwHcK-?;Ob^IKmF4`-H#W(^wLWnS1=WJ9Iiq; z`=@{Ur~kyC_!EAD&h~H!%V>p-jEN|I>E>I%^;`V|Okn-7ix1c__Mc9C&DVU5Kh5!< zhYj=bpZ@bd|MT&;MP0;I?6wXbZ>sU$_rCXC?|PS5-8fhc0m3=k?-+kPmDJB>aneCE zJXRdBU;w`9o4)Ct?|kPRLr(Y~8iWals+w3VhL*`c0Q+r78EsOSbcFVgaDU~m{1rX0 zg>cZ?rQEKbOPuCsfA(j;{L8=Gmhh)n=4EuO{^Ih+L>5T;BLP+ueJ`L5{Cj`z@8wXe z-fOazdjvKnFdNP3p;BOu1A$L{#XN2GcxL7Mm;dr#?l0b6j#xDno7KNNo|`&PL}y$L z4V@G{nBJlf;MOUfx;<|(So_0W{9AwPZ&I4rqF_Xus|4qN? zH+{hud;xAQj&6j5JY{ND?}`Di3O#a8?5gh2e(aE~;cVH1R%So#(>~2p`K@n#Yk2)Z zGAUgaPTHURlYcU|@i~Dv<+A(2FZ@FH>1O#hRylwM9Z}Ckn)621kA4Mm1b{34`zMKqN)!0O~g7;bNr&teAfi5Zi>FaMZYk1Y$?HK;9b3PV#lhIw%c;x=4N`%vu z8RRCT(^ebs)9^W}z;*s2YB%_b4WH`h^F3{v{ikrAqbi)HD&IbUQtz`t^K~kwrk!^3 z2xnt{keJ1_tbI(Uujc9tq5|&?eay($i}Yb5ALIf!=ysIVkckki;0vd(g?x2%@!H?# zdF{GBCHBnE0|84R{<&Hy?fJ{j2Bzn^&wic$IugX<%z46Td>l4CCzej%f z2gAnu3p2E{Z6=wzlHA2@tYfF>1<1OaMS^ni@pioxH=H(mjzDSF*M)eh*%eB(`9$-+ zAnM7juS)8adI&Kjw_o*{G^7_o+4~l*p0XWs(f7`2;Jrj^XBy@?&ifQZ@zm^LZx(-e z;SPGHt7_hEu@EXBA4|4zdv8Ou9WK3yHqQ%l zGb^=bEwqs>y;8Rv&B~e*=KO+R^Dm;pT<(O|wx9$A1jfY_GR(?6J)fSMth&Mor}@vVXEOkELf|BCXZAy5 zkH_3B4oy|w>6Cjzzo+z3BaIgY#aTZJ6Ih(0lf|E`$wW zbvm;NDsUw}*L(`LGc0qPgK**%$IAFhVZWH&Zg|pBt zUqv{WshVi2;j63P{N^{~z*eI?$cIn27>8b!fB3^6&Oc3?YQI|q1$Lg5-Jc(F%m0cb z4>tlb{SY~mxKY+nB5a7!xcDS4N+};BUv_3)d~RNWaHBkd-^4m+SSi#*UQ!TZHrtwY zu7q|Bdn4|Jf-GF$y&^d$*7JyI_1iPmO8WcCNG+vpI3N&l9yAJ6kxv}fX$i` zLU}zqVOnU)3=LB%H4I8sk|59w@439CgBw;jD2@~mzGoVD5w7~@d0jF&N^lD9yvW@V zIG@8cpMq@>6^~g}#*F6t*pCglR(9o9vfeA$PrV~?(E!(0cAq&Z-M{b!bmFVqHh(Ezvzj#YyI0=zqS3Hwu4@QCc z%+LHxQ~8H%5d#l-L$XZatuL@6q!)|H3R|PV19$}D??Dcx#cG9JTjn1JRYisq%xTC4 zTHVs%ser%=0@<^WfREV~{KCkssdUuDmXLn^Cc!C}#j-71+)8S#fvZmot*5D{SHNyn z8i&38xz=-)A;EaIOk}njCigQON(iV)xl|cbh8>^#A#;-`F+c5LkLmSI>udA37N?!e z>@}Z)?CmY({>h*GNk6G$XrI|D`JMHcFwcdsuWYot6ZQQCPo{1_`%HT-@;Zm)x@7XQ zvYIQtyOq2;QK;}^Mf0XNy~*1z_+FLM*odpuDs%Xek9@>a)2@ZoygcvT0UNhuQ-<)~ zt1+?JXuMSCyi;wsdM3N?0Q}g^ulY5<#xFPV3@oYD?IwyNH^hp)U!mH=6{?)&liCy8fjz06Q0#+CMXR~3* z1Mv8~PXRFm6bFIo(-Y#vdAv`0&y0otK}?Hf>Z0@u#s<*3mK_|Gw<6j>CkK_+c?!lx z?`OvT&>#9k0xP#06P1H8UJRwPq0p+Y$};LvF^e%mC*-+KSqct}W&M}`@?U<==X_3y z%eox(32g(JT7B1q*F#_Vm0#&D?p+Aw05;X&Q1v{|zU5oK#XB}Ph@I053&_0{S4=$5 ze*f?P{XNy-_qSfG;^Q&E|3Cew|I}U9{&Yhf+n)}M?EdY){kOm4cl?eBNFNPxH_RIf zgze{j-sgS$w|_et%;D!H;6amv$}%0=lQ@U+{fe*nim(0Juk}=R|6(EpB|n2FXF@N> zullO5df)rrClO#9b-W!6{k$vR{`R;3!+-b>KkKtTt2I&__kQ&`nA(s1*pGe5mwZW> z{uWwEriryp84nN4` zj+85Z#GJ%_MvZLS+fmoppLay{nQo`T8>CW?1}2!q9gt+FK$@1r!qKN3lM}*qo`T%9 z`D}|H`k@~ZQk5xNiFG{+d_J2KL?3oaj%{m4!Y-G-C6TH20%W(Tt&FVehPCWc+3``Jd?o1Q;?UjNthT1z09m_1YfQ5GyOrs=T|9H4?_Ig-&H`Z z9S_a02C!CAWttu3i3*H|FidC;;tzT|sLY(7X7f32$7Dj&XgIfx-0$R-L$)xK`V948 zN(6sl|LVJ_z^i#OK;{ispL_5i!PL_(7mFZPBzZHXB@EsWC9M~RnSc=jMF9JeC?j7-QsGIBJ9KT3s&USRTA0R!|xn4Vmko6rp>L~aXr z5V=u?T;py4HyLs}o<}(5aMlPwI-N~cgP+PIv<>Q8xXPQXTx|K&2vsl7Gexgat|pvk zVk)Fr8ZesSFsyDUL|~jW+$fus=|m@t-0W(ynHuL0D6I5W8mM+6tR20AH#>M5nCib8 z1~`%FHQx)aF-9I*qj@oeir7i3l*#*Y-%q|c%)%EjRvYCr$?W~CCaX6{t@R~_{IM~`B)32Cw zWUN+LLp?rvt=S1jh$_9=N|CHM+NIHjRrSgIq52^c!@Hm{mC5;LNSQ`8YBY*QnO?;b z>Z>Q(b^;_}b!!O5kG|BxXPYMc-SveY|HzD-Fr4@Lp}itE4mVbhVOV*GbF0wMRI_E> zRGONhglnXhEyFx-{O=tCgsI;H&e5^tJSZT>Tsj#A-b3!8C;yJp$cC^aWZ?R!wecQq~W6hI|g~g!)0=oiH2%zBC^u8msXhQ>ax20(Tq8cy^H@C-dFz1TnV?4|IaX;#iNMGKqLc}FY|XBKhG{n7 zyGv^Cc__z&05t-aL>8yW`O`UMcA9Hnwvfat8X5!6nG`^$Ys|GhGp98 zM6$NY`otn#DM5b5`3b`o9^g#;30LdXIiX<+IvjZD5k)W?V0F8fVN!BJSY7SGg|iS^ z&iD8U8pd#1=KAq$s$qT%Bp5a6shJ>EkrpS71bK-4{KZ0pv^(0hM zbx<62)5sOG>iNT30)6{IF}0L>%F389;1PgL@t=pl_tp;$5mz|^WkjAVupQ(m13wr2 z#oAmJe6ownix_@~x0L?L@4r27+H{pZ0(4*<&H- zYdjOizlzOTQ&!2DJtmB+@bz42rVNi6-lu*|a})QGFx;>@b6B+xf=^5x#IMR*cnYrW zUP!sk-R`&7z>={Lw=y=E-RrMcg#F63vG5l&9X7#Yn?&ZN}Vi;zGF$u8o94sf0W;;&f#BJDB2&0i3Zv0G?TNeZp zcft{pDI;9OJ*$v$PKFufX`Y3ESwo*T8RXa=#7BGj)8O$iv`3h!y%2_;P$2TqTk%6< z17Mg&pOcXG#yYi`Z5UwW*2VB30s0#@ZZ%HCtsQg-V|J#VDa*#J=d)C<2ppkFN6RDlx1DJKu1{uPN}hakAG0 zpdW5Dwa7F@vtkBJFtrZJka^hX8#ddcYi^u|MH$;X7gw)!Jd$|}8LYSyaWI6{&j3ak z^U+*e5Nm8l?jqiBh}DEPY(p|9`=jnuh6ZfBjsH~`KPgXxVV((Co$uw$H$hj}e(ISi zjQMIiJU8ZpAxvv;@KeDX>JR=qAJ1*Mi913L4GE*XML}q7@9-EOU`$q%A+{^ULUlG!e@~X5i{+z-^AH(Wj*ZIYh!DPB>6wQ*fDgem zDi~8vohdRwOPMS3!DhD4&G?`?6K-j=gJ8-CfMrGF<#2;c1&;Bd$Ak&~z(2fsr+W&{__gh4*oIGQb2KCL?Ccg|g-xIl zm{=WA^evew*8zEN2wW^ZN~~xs|E%xcgdYI<@BtVOfgFw@uvy=o=Bq?~!x_E1Ox7!Y zl@Z{%Z|tO37T?z4!4TCIIWhpB0^x?aWJS~uATss*_&z^hC2H6zxH2*^rLkhpn+C&Y zH?=8I`Vx?)#{W$Ou6WKN0i~5~a{fmKjuH*LhUChDA1zJ(4JCD{zR*iqp_mUWZ~)$l z#e^P`z7WG<@H7GV#Kc!+c0~*zAwxYrH8odHTUtp8J^KUeAq5@Id>Zy8WVssTUa)5{ z;lGDLN9>pt3<9#NAZ*(?Nb)Rb{s}akXfS-jdu?Y(Pcz6ppF7nk5i%t!m&ju!X#Egd zm3vA9+fTian)Y^Cx7MXORU*)XU7Uf|+cJ~w6+5QA^+J~BE|OB{YRx&JDi^3ila+MU zho`9lSP!R;UOaW@U;2|=Tw(K9IyUJ?P= zB+atblJ%zAMXosy9)^at(2yDDBbefO9&GfiXrjIEg#+k~rifAyqFRm5m`o3h4~(*u zMTw7dhO4X^E*D5?GAznCzoCGGrvA|@ZUpp{n%p)hw}0UIM-NiJdb>}#Jtz8y;)-$@xBG$@gG5OQtnz1=oe9S4>uv7rp|hEAbj7Q=XO)Y!Emt+_S3?>mkOC2G zQN(6_S3DUp4F|>7(*R3Hl!&c($oT6OA4~`^;A*wfSY#g3%x2bEo>&3v+xBvkfq@A5R`kN@%azyJLcjwA93*~qa^Ff2s6Sy3eC$ezx-X_ z^<6L_2fuotWfC3T1V?y}0Z~HdCzew=j#rBXao`zZ`D?JW>;wOGW zj@1Ox7Fq$(sBiYoZ+^2t-3a`PG7shzoQ&#+KJ+1Y7|X3kW8;6aAV9wK(o1?WBoi`M zQ~&g)XiO=);v2RZ^y&9Z(%6t*pOFzm#`YkW``$z>&*Sg>&hG?heHBW+dJzW?mP`rn zRTKg9C@E1<1~!IZ?|tuk-~H})=Pf|;U^c>^{j-1e8@}NiMhSe-EkINL(bS7kH32JS ztZ>W2#M(QV5V=~1FO0m;x`I@n^@>+&21sbyf;se$*&%tv`nre%;atAr*%2UnHhmwWRA4F2}V<|K$od za`cL_^5M;8f%6AG@PSNVv@nDM0ce!G5j?^@0{v>P%VIDGDK#t84}bW>-r>cZhhtXw zpem3m6$_YVOjg5WQ;_&0Acc0keoPX8xeW|2PG|oO6D7W(Z?%C@H<+ z3MQ|Ve&k1fBnw2?r~%ZacDKrg73L<^a~&Dz6{dM$@7kjA()Ad26Mu zT0t|Ja5)@5-7I<$yU`}%8ijfO+YjT!P&4GAxRCiYG-c>M)vsh$&l?$xVc>)fprNTs zE^BG&QzhHbbzn9h1i_#CFecpVuCPzM_kJ&R&Z$%Nt?vH5ke#*He%7;|wf27B_f++_sz$%4`or+xEeMo_F4wcn^vE-H zK-1D?{x)#JET_jKm$6%(tzE0U1Wwb5ZEMwYBugF*F^n#S92>+$UPt3fs~%B|T<3N`jx5k6}0ilR^?W+Q(3(GyBLks<8dKMh&Aq zHK&4C{mpd~Bh1mT%+hz&2mtGp(Wn|X(etokThzl6a8llzw0ex)vX^2Wd}rB$Ezhox z!OMV0p4AR$n(k%k;Wn@`A|`tp=d`q1$c|HZK2Vn}mA2j*J0#=Mk$MUXf3tgvg{^=t zH49Ipf-e|m5}c(vM`Q_?M)Av~q}bwVU;&edze}s+`>U%VOXn6z{3ONLf-MPK#d4{h z5pz6q!&i+;omTN%%GFOoreGO^U)nsE(l$xD$aEBZE#XPvYuTP-fTzC}?0%y#51BNFa1^-& zjH@>nP=;07IF}k4Rb#~LL^Vr|GTg+#Rsk_OMcZ68nrjTK^O5mf?ZDGt3#P*Hlss2! zzP-BkyJvNIzulggk$JqU&z8~Z@~x!SGLlPL*eGD%K1NcrG_TL~$K+~YzYdth9Fu(t z*_t-j2-p(YLPl`xouwOsm*LlXw)AfWj^amqi>H_xTg?0Z)$lqQ+33iqznr5dNK0{! zfyLjM5y5ws?w%*=jznj7?IvA%##?YC8to(dQb7~`462FYIXTs?bf!kjJg;M-#w{4h zlOn5uO)18}%9xB|${awc0x;GyF=RUN?1LLJ!eW;Ph9}b+W9kt(`fIO7B}*|iCN|R% zIZYdNyixwpc3Orp9p{m-hA#=TglB81v8zU+CRMA*$vFj10=5W`7dbMFQEVTH^6#N0 zNv0z*t2`ssGUOh5mQ_6KN?3MPQLYv;PTBBXYV716!;5+F78LACK-ad6BVi3c72m+; zn4!a|C=E%&%I1I*m8kHr} zj5aA5X^-P?7W3f`VNP zsxFCgnHr_@YU#8Xepmc;E{z5Phj58m^)zry5t8zZOR>l2U}>kQ(ZBW9Olden+mIMp zE$y^=cOHxY9;OT9+S1;N;PYtS)!NDrf$=CRjNAP_tie(FP_eJVrk+m7j5r zAzh*}mL&L+Oh&>XGzy+V2u}0!!^@%dvy4ifko(i>AvJbJQz`QEc}bL7a!A;j z?vq>Hg7N3aoa!yRG8lxm)iocc|AR!@N;?ZK$RlQ|6 zQR#4|6CM@6U!3IkjKt27n_%~3+D^tW5>J~lT{)SY>{Y=HpH_ zx*RE;%s%PxYG>f{{0-hY@OtRhCaSS9?6==N;g>L(h99#)BesH9)74oR22N7~Lg-HO zyHULS{JKcLeJa1?W!m>K5xnfiP^A!KbB%^T%>7AWwczLR>Wz%mab&oxox73p+<}@; zTYfY6MH1m(9WhN%>1a~>Hul_04C#cHWNRkB})L%0`t$*68& zs>?2FTDs@FvOVAZTFagCbL;?Ywm=)<3qglq4B^j|k<){dEhJey2#PPbo@_WCyR5qg90bsKnT<;RU z?UNzgTT1L!id8?tgYMz^!s8;IB;OBo(U8%5j;ivAs-3)ksW+#C$j=zTMaF>fB?4O& zYH{e50FNiM#$3UZG%;Lun$5~Dxh9DcFMdX9IVl&}OFVvT?kTG&8HSO(OZ=(z!fRdF zLc4SGF4Nu6(;Zh`POM6OM9Z^`ha`uyA2ND~iu1s&H`z@UNCQbaz!^Yc=VeJ0TAVqV zJZ!z?bd9vl*zY}Pj$Y*nJ0kC!t&lcK8&zslV?O0jyYr#~+bL&iQK*cGvQ2WCx)J&i z+hM!Ok`h`YBepSq+eC?a6>gO1u)9ySg~4+bbolxqnsdyApYs-M{o?bR<0(L$+&8K7 zxgFb`$bJ|PyL9zJ(mkIyU-FWd_~r3=uPGsU^;zm!vUn*DcBhhL@Y#hjb)A}NsPvbkz;udY^9C-6ym z1v(P_YaX5&HbPfRcoN%5U@2^UL()l82f*ff@%ucHa4=L6kF!9${?2%7w zYWK(EBb0}_x)KC4?d*A!soGqtnt8eMEp8wA8 z{7&v<9^k&-Lf-J;rTBp#_<_%U_On7Pah`W@OWP6{sN8km_kG{zLv;QFB#(@$3v3)Q z@B{eQI`K!+DmVZ~)*lOe^2sNia%DR1^!EuB%ue{2{USC2fB*M?|N7Uz-d&Uzp>n3q zoSi5)*Zbc0zR!RD^ElP+zICfhf%E2NV$i+s{oe2W%x6C1)M1t)KCoR%Ax7uK z9}E1*M?T`;RjJ(;`vy2+{KwNSkxk?U;4f3Y;SFzaU=(Y=7&@TpM5%r3s=&9t^{s#S zhkqEDRY&^%e>vC=5d5C^yyw%O{093NmOuKVKhg~cAU!$f zEr?ODG`j5H1Ue#K#bj0DROEQVrlsfGG_7c(OkMWO!_+bL5!KG|*q#`x{n396q8#qT znu;oIqd05hbpHpLC_C8IV~nN{h$mEWdU$c7%`1>G5{@$XO@URRYRJe)QDanXiSp+2 zg|deuzrwHbAI|rZyn(l8$gY`gIVl|eB$||5n;pr72?M`2>WnWwawoHWDW68c1UAJU zKgEv$vk;F+W1a{%q&-qVH<}EWq8tMPY_7|cFs~e9td{c(Z3#EZXpj7%TFg3W*Pq&ny4N@yOWwCLE-9dl0 zbV}_Q`xDj-7-eRoX{&gCm#NE>Hp-nkQ~q<_f?*FSTbIXt?CFwe@;q;+ZH4Y>f@wTP zo?MPsw`Z$SklDzLrjQv|L-2c%V76+6%!x6LfYDfG7y$`MI(DW;oM0J8k^t(-bb?LO z5$x&XjHy(hq^7`qB<)mPlG`wH>}79tHO@{~1_h>4RE+NOMT(7Px%4ncB3~6X``P-h z4U{5TXow6UWN>EMO5?efa0h_UYG{qJWXm|CA!8Uuo5%YDJ`4<=i~+BXqu_~c3m<>7 ztYY?^W5y!uR03yi_BgjxZTZU?g5ZKXvwRWq*5YYHW#_v>iD;gDv$Q$$t{8 z%q{k$@OukRIjbY5EjVKrQtX-E5xuvadKL-W+Os=2yJPCnKC*jTAzS_sQ>|{$O)5SAE%?xT z@thIRO})uRp45$GG{!h7_F;kVtT`tY_$+GRNp;;4c-gLcy1(&sdT}MqxWjx5W*L4` zlmc(B#-+CBl4sesV>~+@c*b``C$61M-C0^D+X7GNrob_3A2|g+>!ztxjk%(KEdMqt zDu0b5vk*BUd6p!r&M9!3E}07mKY(kQtFSvWXt)nD?xx;?j;~DLGy15MB zCe6PWy*9;30J)O-+Ne?awP1iHe(72AwB+T|O*~BTtu z=h1(*y-(QHcCUBD*%@y&aBF{C$f?;|?>@s;-mP?D8%N0f6kAl!6aV2mqWQ1WddN)WCmowY1uL)t3KH=j0GgiYNKKJGx`xom)KQgV4(%`Q*q(vag9G3 zvK4-*`jaj-3O?INY8t}nM}T>-CHrzz zFK2#cu|`TTU6rBLSxT?i`3Zf-@=EGt$=LodR{4==j(%#CDvX7V{B_>8L4)%jJ>xEK z=|5FZ8j|KHu>CoeXA4ii4N4m|7EB6P@MBBaS&fk;B?sS-F_FX2DSZ0F88DB$;mK%f z2`u&c;YCwRCAqnQ4LKeo^4MFnk(ZyLjJDWIJSrEz5oaDaF*wH>M;pN5>5n8zv1A@S z$c5W7BY!022LVS|Y+y?S_gIQb#wGZ+J*iq2#Yw zm8X9adcy2XADj%oD?ys3X-Jo2ddg3nTS)rcNLy)AOm>kiJe*tj+z(dsyw;S& zE|ruAfOvY+Qw#}Nwsa|0) zx)ehE41oL!iIlU7*Kn^u$3Pnax@D_iPE@HBzt}|anC5C=ri#KJq>*#~{J;aW;rNpx zv=4Gz{a+K^wxK69q=eMI)6d%$b1HviXMeTL!5}^-4HaV|Zx|LQE%Er{OmR z#+-wvO9d>AB+V}#5(PYN@e+TMhaUP7E%ur;weGcemMx`5<(25aN|yY6zIvBH@7I^LU#6RKl{yB6-fVK1D^R2RynS= zkxmy3sRT1jWl!y?`sQL*84hiA>6&Do!gAa4bnr^m$^cI&Fr@v~X!sNp-B*-P50-4X zxmC6+uvIV^PBIwo3W2fx>MZ!x3zCMk$wAD%5qk%Z zQ)&5iz3^=Kt!s;C->)rpEgJ#3bE@Rc0U+BJL#mpjEq<%HCsVblDBx~Z1LFb1Z^WOQ zQ~AZL8UVidhL>7a`Ykty2Z@4Ej@1c4wIahEwPB zWUv=P_O}e7kbIubsTLAuS(+j{Xyl~IQ%Il(i(EVBv*AY?m?_6Bk&>g_@spI(mBKsn z_=6|N$#76}M02)RGlJ!paybLYWs$D+E<;i;KV~5*cBkG76CyTeZ@>Rp1y*hLBb`^&l!aPXR&|DPwK)$yBJA{Y;yGh__^_V_$(r-ZLxgLGPKYC$-?o>H zhbMY9M8Q2w$z>xQ$7LhN@T}?!CwphtVX}%=BH$dXk?n?d1ZR_!DV-Es`uTMOI9qQ2 zgye~{Dg!ueAs#ZFhnHd%zm<0t%!wRT9xhT4MiRr0CuAZt&0+9~IQ;~hFk`N?f^t!8 z%9B*0)j(91yw&`+!xV1n8aYQhIx%~yy6i<-DkIoV;7D>on;r*16}bg+_O$ozm7G@; z<=U=|uI{g0Q&)C5W5^Z753lo0cWtG%#(u%0)tPk6$g_-<&Y5@EygV2QT*8|D41<2m zIWXC^QOsCx6#9+6dAI><(Uzo$6z(^G8*>scr>k2f@Mno07jomyQywAxuE?N}om*hF z71&adK#6RDy;HuZRs3x`36NbDVro=m{7Vg@(i6>eP?vxUdJZR*GMO^U=hS)~>SJ2D zOqS;IJGgmqLTd3AJ}E@0TqD37mz;woIZu!bV(ec|$+aP1s?az{9Yi9LYc<75P9&Ix z&~Nnkrb>z}5}mY~0)^0nfu1dV)Y1>*5+Yr;U^Qf?b*uO^5MgcxDFRD5t079TxoIW< zV`qQUiab(*rAtL={!%SJLa#tiy)=g>QLAF;wCcCz`kMm+OBkcm)!18dl0m!&W&S3^ zj`&*=a1+|}lX%B0yGH-k{@R*6J(Vnwt#Aivr|k}p3pq@{Mo*RTyiMVj@QcDvOddfu zsd0?W`BX>*C|nAFO!+4=9ENKTcD5*$j!6GK$xe z;0b19PNU*1tOi;)yPmtb;FE<>z#SW^)03!8OIuNuqz@T6X@(3;z0QM?v-ryz55C%v zg94lVAOGq>vUhs60VA1#uQ`J zE!j?&)c^R8|A;?(l#*{L-Nk8bu727qe{wHxDGlVz?kv+~Rr6JyZ3@Fy+hJUfKmNEz zIYoWz-Z)r08ak_+b9?Rs>r~6lF)oMeu*M-6^{p}KN$$)yx9es zMQ!PEYx`qE_~Bd8D)Zeqbx$`u2?_H>v#+!DC$&VtxCK0V?nz~ja?Fgtik)B=6n{7$ zX{dfl_G3TxW1srer|b$5M6YIoq{$KYS3rON_kZ6XeuLz670<3{Y{331l~>d|-ti9i zp29{zqheT1>X*O#?6|F?hpw}1C{f0uIUe7Zz3!fKyd z7rfNee&|CVdgB}47}?sjv%fUBG}DXl+H~P@a2O6GlXJn67 zX?>o1_q*S1vtaBmjF7E^;b{4=@&|wL2d{hG>l}XD=RAule~mEY0DQwYe1onAsj;gv z&T~3!uYBbzKl#Z|Qi8#qn^$1Y=aN%%{N=@O`?hamh_$mS0^6z=#>w>eCNVqJ9`tTr z{Sm$-=YfY*qn?KucokXa2S511U;DLR6Nodn8)Hk4_9{>c&4)2{Ni>~hSd;(Thv`Nn z9Uver-912w!59o_aCArr(j!Dd5Cuk!Zl$|HDd{m93D|xv}wHhp$(jk8u&5p3-ArleTZtmBvoI_`ixLr3U~J< zE&R5V@N--9c&n!7Uh~4)2Q~NQ^F3MTDT04Z~-}XlX zoh{;7M_%vJ^-g+i?1Yfn1R1D?t`4Wxispx_UUcB9wm=zr9FD;hvsp04}u}4 ze&XWYs~DA{GL91Hst5vh`7|Rl$alh^OST)AZbO>R)05rA|1yEIeo(0#9%Znbj@L8M zp?TUGlTcKqSMHd6A)%>r_C@2_$%z;jhh|oYw=ApcdxnOwg!jNvDSr>jj#S&D4G}is zDgelTs#us?`1YH1OS2F4>F=|2+-6#Msp1-{*zS0J*YCo`ExTw#XEN^*kXvpAq)=E1 ztjJdUw;t~zQ|O)2yYN}Sc&d6A*mA*GyEq0r+B?BOkw3jg*ZpYDi*aLR-JA&DU8>7U zEVgwmf1cwepExsb_{(N(NDAEX?DsqsC>AQKXi}eGi3jd>oYvv`)n=Xr_$i2&lKY(v z`6a*m7y2N0$#0<8f8d^Z8(SDFdsK`owbyYh^~AP{k?X_r)gHyf)>vfrbV$bGG}8wG z-}8o9v3tHh!v#6hwQ4&5|9yL(mC5;wrsK`{(paI}R^({Z+-x8C^!VCGI@T1!goEW{ zd!ZiOc&Ig?)mPSozzn0zNgPGwgJhLVn!QnzcgbW;B| z@q0SjJfnC>b?>qDK6~ow>drh`9hu3YH8B+zCEe#?&F!r=0;8gyJH2G-f*rB#XRD(Q z?7@1;BRsp=n%`r3>r@})9c}D@yY?`59-FcP*lo-^K`fAE5z;wck>=s&<=xa<{32B; zj`nHq z3ed){Q~HfYOgI`Bf_XB|$(xv_i6*o5$KVM-(SSgk-~xk__kZ#YA!atUWX8=%|n02~v{w{A4nJdTLepnVj)Hc*HPr{Z2+whpogB2qS|n{t6L{ zs9+jdK$5K57d?f9aHf=uAE|_vkamcJWYqHHDZt4q-_H(jQbJ^oN(8e~a)m)ILp7g% zR2nkhcD)T5X8g2{sjc;h)SS(=DqUloYTG*Y^q9LM%^8&@8uk>Gu?l>IY1z&$CUQs=(U-WY zbYQmmPnzb}Oa_38a<5YWzajfD(uG=@`(#pyICbO|XJkz&2>`3eK)+Ci`bO#^(LHFc zqDM$aQr5*Ha=GZWSpkdo0Ee7jLzx}zA(lhTvVH$4A-gO&Q$5?F8 z0FvND4Sapble`a`@?6ejP!}*5uz#MZ*8gOdzy5U?Ik#M%1x=C#XWbmhHg`KjRjk2` zA7FrxY!5HkD~WSzd~#H_VK1#CgSwz;k8&pfd&Pvf2sH#wXuSj9iD=Og1Xwv6wD=@BQ$aIG`I~Gk0KiNSR=_b z%h}VFW-2L@d4M9IUXV5!vn7Pw$_E1FhdUg~#Usu%9gL$*~_xp?UYZ4~J zoh3@SS*6c8?zHzfxJD9C`RWfJn&MR4sT4^7j{Auv6ns7T8$frEX7O78DGn&bS;QUy z5RgG5c3>lJbAV4}DEEM^?jicH|?Lj`7~J;Vc4rYp7yWpUagUbQ9(^MuY_;N zAN{+Sf3`ueqL2&rrQkV*v5iqDw+#D>D3$n^O*G@j9D^J~iO%f7d{sf=T*V(GB&r9I zSp_D^&LXjUCXon)FYxJ%EnfG;4()8Hq(?K+MU?R!N^Zqj<-l6c=-5iE_YKV-{d{wz zv_X8_+rFaF0)R^7D35)fdGx56RX-nhyB7`8lXi%{$tm<3vWGH_Uv39(Jv}XxX4P}GWlX6#%NGEpn1NX$H4{0Rk*08+NZ_BUkH2qn z;!Y-0{Q<^VXo)_d<5S410<>1DF?xz>z?9vYTH5=nEyy8@usznIhQx7l{8hOmLuXh^ z6rzybLqCa=)1jrUu}AD&?A&_gvpd3*V@)c_ZlnD>e2%JfM>`+t(*Es!AtJr50Rz&% zfrm=tZvlS2*-cOU)6N~ryAT?aCSbE2m=?FKl@OmV{u!_Vn)VCJMe&{pgS{i8J@P=G zSfrZ}d+1lrw$GP2f4MJ?v*Wvs2nz#l>3jzjox&ZjZnJC79CR|rDfRBCt>E1MAPR#q zy--WNkDZn{dOxGu{gL&0keHW|1wDztvUtL$0f0-Z{NQbSbXVG6k{iSmYDMPl;qK4z zUA4P`EeYW7C4onf5;81&}>3ZM)64v`2=L-Q4^JMIE+QeP{r$ z&C=RWwv=~}Z5kMJlVOUqL?82*4Qa8#qiv2Bpj>#|6phl+drE)&t-yDl$ry`h$!bz_MyDenI^@FgaIfTnW^T)d*42GN}b< zksuKd4{?_yH7ANEK7s*o)`{n);lYkSY5Y!dH~T|9h!wg+HDE{7T=9A-N(k;6Vv0bZ z2N22ym6B`Wd@gxOIkaB80aj1q^FPyDNzN8mNq%KF6qA`BM4CC8XXrkj952GlVgnu) zOG}Vk`<}=>5ORhk!uzt{@#piJW}P>U2*Hxo5UcVnBK$W=W5ob-M>1zHcHA^0rUKT& zodu(8dgrO}Oz%s_5sM5nTLX{8%1NJ>cznW_#y4xo(aOR7q@(}5<@ec?b{r&WacRgh zy~NGK4@4Bw0%)R${0q9#(i}0y7f1gBM*nT3q(D-B@+)8b^NsM)a1N!xOmdgp3dh93 zeK^&HQrZ zw)LhcQ(gxHx+*7?X~f#gGIx=8|J!ARt9g3E$m-Rez2aZ886gNJZ^gnKvALL9g6rpWxA$G|w_KGfRmZ{c%BghpHkO9z8cdD<6__hn&+%KT&5i%QQoD>aYVERs zlG{VMZuIYT2bI9K0MBpNzg_PPgVsM{b=5PC({AV$7d_-;|91}8D4~76H}}Z=6jMh0 zFljOR_=_ox;2I2CT){l&b$(=2-oCynJdq%{+Gj%sKnOIDCdo~Ic}Z-UDT#C9ba#{- zGD@`0C)K!T7%I}t-}@sFh`w!q&;ujJP__QFJFYVRyZx(Af54Fijgt!+)(D%7kCDr; zKE8?_YklNF&+lh_BTg~=+cX~CCHK~#lM?L@kzG#@z!&)orQtn0aO)pZh&I&G8TtNy zu6)&i@rLpK86kT-!u~wGyplrtQ^PkckvR@mcbn>S4$MBk>(^j0*0iZ3#nY3l2fMbG zo~L+2;hM=EDANWzukl-h?JxRJCwd54cfcxWmDIu)^Lb7x(v^@K_HP&fQ(^3!qna&r zJp9rW5&a6La8VPxqx%Rn3iFqaZfcr44Yr!wW&Xx6o1$QF$vwgd#f;ZNH+6YCnxHn> z25uZ9A#RyK*w<6%jR}dZ0qha-N6tKlH*dJ)lZc)i~rKg@~g zIWR|P>>lHC3vE8)UMmBca#S&E8IcF9)v-w2%`)8oT>F9Rp(z5;(;CCNwa2s3My zaljAPSWcp%Q;qZ0d8UIG=O;5CnW$2?K7~nnYq5fDCFHqbUn_ZwRxDrRbn8CKC^lVe zhR$xbi;XwJ;#kHgB@dRGTUO(}&8#Tk~`UDJs4Y2504$=tR}WvkVn!vaa%6In>hv zs3a=0os4vGcC65qc=I%&+y;0Faet&_DQ-KQA#r=pQrH8lGjkEboMiU7O8Dy>VQIr? zDFUJdG(Ku8B~gn^PU`*754;0N5N5E+FH@8H7)@mL7}PDYzRDCnID?1bc#=MH1@?#K zuM;nmVAs(A*$YUlU>Z+!akZz!P>zWm+XFNm1{v`NBv-RQd^~u9NM?THd4Hp=*7S|%!5Jvw-!tIREbto|UB<^(E8kb`+ z*;yTec?K{NGXjcqv=_z`KbtxuIM#$4^&$~ov@+O^u6SwzbG6 zRN4Mx#L?MR3y@d}5h86%ktU5EK_r{7FunOPspSm8RO7l}$kf_$0Q zXR*dO6|?j0&LF}y9*+T!4Skr%N`BKmU52TIe_-Uh@PH_gSM ze9%#uz3ZwAG20}wB<8#4u(8d?`L0V;lh|RMIThBYSOFbM$>Mqf1?`h$cnBonxN{ts>Euvcmr(JeT}q5nF9}`c0-bCx^+$1LB8VABXdgS4DV@&aJhgG z1Sq<3N;C9n%1jmteURJ~CbE{3DW{joYRe(nkPl&p*&&=0Jkv=iD1vIg*tLL=W6WX% z3sXD;;TuJHHfNXkxWHHIUeOuW5)GvFUh$<>n3DkY zi<%h&d2dmmXthLG(MSb<-;GYiNA94aB-YZAIiog3pkPONOfaTPFB@X!V5XI_!+Z4w z8%+~P`_x_;po*f`?u)QZ98+5e8>{K}EODf}UDRzT=OZJ} zB=S^}R#S8<^p*@T2siNSyI~87NVoo;=z7J{ieIPs?%^-n((XLT79r{Q4_vtbsvpfY z-6hP^#wY+|SKKs9wYw%w(IR;{;Vf_1L?m*N zSZI~1?hK)kpMe#x)5RWrq~BV+w->)^8Sfr&u`!-25*E!Z1(%!?mmfl^5U=_$2_3GX zb>QffY>}P&-7l^0<=V6qtFHb3TyfY;vJCx6>+liIs`Zi0imc!XQZ9~O9COMhCXW>f z*OZ8XM5hZEK?nP1R?j*`V$*4;Hb2N^r`KP;iRGRcu-vFIbn%O$qQ;QN>bL9S*+8eR zgwW~t0pqVmY!IQ3o{*%JgP-pHH2b&%APbO>Fk7Nv564f)5c zFoef0l78|rtL-NPk^LL>(NELZ_j zx=?k93Q15T1MX;Dx96X+sm;`@pb{6nJkeZU8@p73$Lm1s?@R{qNdoNiQ#e-egQ^4? z=4BF`AmclPfXlIKg*D%^3u%Fe_%;*DlgZNw7$Xp}>{e>No@(&ri;?63CDMU4yOEd!<~nv*U=O*6Fw~F*ej95p1|& zDp%lvqoF#YH88wD^REh$dmb%W8FSxKzsO|6`r&B&al1%(L3zvx|GvJ6z^9@S9y*!P z4RIIQko7YxCPUH;GM!54RWW%kw>1&@R(!_U{h=%KTyAX~xl%Zemxi@ro?K)dgLXV( zw}eu&2-~Mw{30!dzHbjAw}?*VMY#{rZdDw(Y!)mdb-qSrmALb~8BB;PFJvWm4J!X# zS)=-6*EJa#8V%2dLvdc{^%;i?=_wOr7HHyM6OlzXb<7tG;FiB?-m@gJ2K?N<7GhJK!$~w{aX)LVFK^ zBWFfp?2jz2(OWt#oJlVp0=lERx$aZ7_pQWG#z{0=?v5v#dUuI)6}wQHq^W!WxX~HS z&k3AB8qdWy_sU$c1gO-reM_G{B0<)*V zc)ST!3pM_V#(cNqz_0DHB*NwHKVup>*r+)6-UViUUA6nf%-6f4;t)M;E?eby^QpER zOd_{3yEZwbmDq}NQbth~VR`bRv26_dlzK>MIdc0V!&%m}VofvlB^rehk?D##t+~l~ z{h-1&3)EB?jURGEr6OFNa;rS%cJH_Y@9`~BOq*il+*mb>T&2RL(EL>mV6D7&$q#?G zki|UwOv7yxYMI|uW}}DGqFd+1qs*Df9zML2Gjq*DXQRKeDK#P0cgHUVT+f!4zwcNq(J*QNelu$W_rc zm!lz64oY@Ii7_+?^h#dvcK^h#8Y=R4yZon>kP7WoIzY%!++KWCD=(fLNi)RacI}es zCL2m9XkjUUw&`vY))BEcIO%MlAG%DtPJRwxn~_1Fz^aOAjP=BqCh?|F8SK8g`blYwjWnH?oqpr zou`;VTUt)n>O><$Ul6@4KII+Dv9Fs-F;FR}2cd^BYNB|4C0>S!JN48J0 zUz+V5{Bla%B|2jKc1u&lp3Q<|rt0wy>{K9u6OPG%eJvonXOd55!$ta9`de4$&>A__ zw>LX^>iuxMV?rzlMrS0vf9s+PmYA4?kcrvEkQDwZvS$^5F!I|Wd;zciW z`0U&;@;JUi^#cw8i_5-Cphax>U!breP!n5EAkw>NBc6@KSpS0bf#^}h#M{`Xj`QiD zV=>T%F;RX|t7KQ)S)7LsTx)Id4Khc54W6ZBT8}Lf5@z){bWy{+{mh*;Mg-qtyQM zKk|II*0$mu!Wpa9EJEXwu3g^SCx6OGO110pPcm#zEQHLsRk-E_XExz@HqKK#^7gVX z@~e3v2?TajvCDK`Y9EE1Ni4GHG+#K^pJ8QeowE-bwpkKu!iop3!k+xpJJ;1r(u7=p zRWUbex3RrvrgE2d`z1>au2E#HzwMX)+Wk6BKe!G?};Z>Byy(irLE2pnqZ z%}bstDC1?h{XFBf^j8w44$Gh#7P0nJjc_k}AaCUk_XjsrfNJT}UHh(#XkV}WW5l2E zYrH4&+C)KdZ9LPPug08W1ZPFzNUl#~x*pLNP8S(+JENiVEhgr&5#_-dr#S<0Tn-BI zej3;BapoYjr8>rOnQ>TTS!d(AA9D*&xrBY?zuVTeGS~6|kIKHMK8NUTn?2V+7h5$n zBe~fFsM1gg&+qwla`8+upH_t}$aNwvr%cPB^|zo^2eZ<=Z&k)jadr~PfHJ~wMmZm5 zaYVudhRQ+`#4cr(9X4vTr0bee?KXy}@Ee^D3 zoVaC0PJ!$}0*-RWrG-xAN-e%L#oXAWUXpw1I)pfYw=by(FoU6bUf`}l|JyH%bN}Km z0PlIYbi8C0+r9yMeo1;nGI2&jo_yc**a`360wk!#@@F#j<=>{4L}$iHvJKb!5Pxf} zajvJAamj?u=+ou#q2pO%4Q>VHGWMSh{fw=i!&FOtl!^=orp& z5PJ#FoSBv?_Iu>?5n7P)O1n0+UzfFC&rSb)qj%1!U0`rNtMtHhOz!I2Z4)bB=ngDX zA88E4IctTV;-Cr8_gc$mT0d_GmIb92*U}uSvex=HD=+I5Z^UNp^bZY*OGbG9865r> zfDT^#>=)M%xrJXW&ydc4_$Puakd;K`PgP*Ps@tQzAc5 z)>#58LcIM#HC@c*oy?Wp!+_DxH6dln^<2|kfdE|B(O)FP;-Cno;}1-XHRZh zJT+8B>czL+NOWivgB2zF8|#|%)}-i`x8^N`fIf!FJ)(`~A<0T7J=EHlgYRS@9r}(Q zG8yk*dQRcMPQ>AiK$_3I#-_H~^+LxFyq~)wP!hh6K$BeaL=6Gb)&4#%p=!8268Ctwif^sii zT1Z&F%37Y?^GnV$a?RDS(}>-=Kug0vz2A<{RigPn%I1C15hwK}? z4YD|5`xi>pI{NdnS7^@P$B_o~fcX>C#;o{+d^<^z@|)W~UF`X5WIRvXF;SiiHnKW8 zaM-NFx+%gm?=JDM>p|$#WILwzMIC-IJ#$lLkY6tcutSg$(D$Q-7n>J$EH1mAh>H;> zjU~TnAKyj*m$a+=hTnFtc%28>@OY>U~Lx4P5%d%i?mD@p2b2X zIo-GDgat$g>ezLdDG-oy?r+hS`KqfT^6Ml)xF6_GH-&=yN(EigG7E2)cQIT$k`|!_hWL0Do*y}B`p$??h-(0DtoPy*NNk)Z^H;OA zlU5*Mz*I!~SI2d$)H6(LC2d9{W>2w#|GQt^Cgjvis4P1+&e7R0I&N5EPH&tP3LXII zjdToozPwK;W_y-*@9-(AM%6mWIm^eW7I#9ItZZ?;zQ_-Pc^a*|aj{dhG|dPKDSl3) zuH}g|VL013!fR#Wbk)F`fbTqR&hy+5H7hhe=g4wLXoNIz7R1G<`F4~6-DT7Kepz{% zMdcKS^-wGO()<1a*D!FBf@g(T$!$sd7j4_e5JZ5a@>SI-7lUju(We?<$F9qM*7`^0?kC|rl8 zn^!ZN%*1JR>Nh`@;7V(FLA5Qv$JFy@bHe;qT2{ot_ha3&j?tX`rQE(YC&{ykVn{>W zlo79;{J01X>s*e{Im75Q`?o*iI#4rV!Trp$>{DL?p2IgJ8g^>KDi0W^39_#qMHT84 zYp#1){H|{%%LGcX=6Ga@aB>kA)HwcqE_(5Y$G0z7`^)iM1%qGm%IEo9o%xcB_<@P% z8#eoS@>}xt=cNVM)qPVf-&1gSg&?p`3vH8k2(PWky&A#$p5K6y-Et9>Qq05{GkBzt zviaKD(g+l7gI04hH_IaoLlUh^uh6R#L^}CmYQ)MBaDAPLCh9tXrRz zm>b4v68=Pt(~M1Mt*J4tW@wDLF7|$mS>(GdWI6`y-Zu-IT)ml|P#q9)is{rG>eHM^ z7Gp5#>xUQ0T=g3ku{GQ-NbQxjZ$ZsTh=>x(P zlP~7Y%yUUMlY4(C_}t_3!0I6;5ZI|F^GOS28D0AtQv|D7Bb8%4@=2rFmTcdFCC!11 z-et8m(YF3?t3e+9hrO~agjX|HQNd-|K>dZXcxmZJ*XLx~C5C_fj~c#;_Zsv#y~vE0 zh|elWcGrl3?R5JuSQmyD5vGZXNS;Q9tHo*cYjWN3*>(W}x3yoFa;F z=bkRfR9jQKqZIZ}=Fmy)3SF2cqn<(T9?0v6?({z?p-q^&%O&|qZiAF6C>BOtZZ;J2 z({`+ii~`1wp1Sw0cmP5k`DbBz9Rpw zMtj_M8vE%`P5!RI(#AS7-9vGBq|^(uAV%{ohq7jq?$T4c5MvOXqFAGelyLPfKQd3T zn3XZX6(rRKk9;)I2O z$LKy;eYWRuJVDgh{k@Y3>DvJqH)J-b9ktcw{W5NlNL~}LleoNjh0b3Vf5?p;xp@{F z{`~3rq#nDj*kXJe30e{Au93jTC=R7WIeP6MRS8PirpdFwHfs|bx8Ly8)|3socXe!& z{A_dtl1nwr?Ko)O6F~1pZ2PivH6b&_#Ci`u-JK>y4;3Eno$97%`j&0IHwAnJm`o~v zKkY{Qx$F_89&IApZ;8`7*hgLF6IC=pm=Yy_Pe0$s81VtDXb>l=okUh;Ke*_KEnX8s z;nQ5u$L{R^CR#Q{X9qmsoR?f3zwvJGi^vvIoQ+*t58}QQjWG#Lu6sEe8RHo_A;O;2 zkyRCi0QZjN`0NBP*+33A3Cz+(-w)$Wiic?foU5kvv*J%Dc^Q235g$?mapFWek#-)? z3A;(WAM1|kY59GBayGO!5zg!ImMl(OdX7>wnPLf@n+RF9d$UuwCB!>WAB|6U ze|rYgIMD9GH?hiNH9YkO`8pVhp?2)Ubeg)HZTSXhUm%W7jqRoZr{)7O9vb<{Bjzgo z9{SI!{qJPO@BZm^?4j#6)`0q=x9l;%LlrB6qcSc%p_69`oEHVW>Atp4h050b3Zuir zG^-=FM+$eqJsgfSNSBOpUFN$m@ONsQr?EWU;shM*W%SA;ha|`l8O3E2vToXw&D5z) zz{!|U@<=AV98ASSDdcPl~!>gGnSeNhbp>l}!)7G8~wzlv;zv z?2%KqcrE*iv+>}(`I5?*x9R~;=g)9&9x|P`vE%aU%o6}Go*yVEou=QHRcfDiJ+lg* zI+l-nNIds@SgDn!iJUI)m-wGwRcRZ`x1#4e7#UK%fv%KI`Dn9v-sBBoyfea@Hl3A_ zJYipsO1r&3JYT~N8cUf>@}yomh=^U6voI2k9!d_jsTkuUnz$H;s;E!P5SK~pOw1^} zmJG+p^S{5mL^U=HPG*vI!0#y9>wmk3eUoY5U>kn&$Z>-r)Lg{3UcC)eA4u+R$u1yA z-**8GhG_LC^hz|!b8_?=?x#?>kx|4$=z)UmfBK4EaL6RcWcm*#H1?&|7W$D zWJxq%|9w4!HEh1+>+q_9*&kud_Uy7NMoP&T$P3T(Q&6eXF`9yH91}GD3ZJE6Jl@IX zH_Qs7@doaPsf-UIX?BQoE=KMCJ|$TDo{B&Ps3&OV0( zeq&RDR0X{OSX!cW~i5@!76axA2f&vY_#3!)8mvg0L zPJA=NLytl`yvBW}@{2xq+=e@}V~GLGGzbm#7D^M!;TdnPBYGPG?AjfD@AH1)cjZ znG2C+xw}k?3++@KfQe30Z*~y(Kj)z+Y2u@IkZ*YH+Wpozx2G33^MXOU;yVu;F$~C2 zAb#g%Uz1VB5F_OVy#>DG49a5XF!aleUYF_Xm|0(%Wrw{9b#sd1W6+&EHUW)@@M<%g z>;kt1)RPB1vmcM82f$1+_Fl8^8&=eYNOYxkzx2O2d5wIFjh=8&r|(bJq3!=kW>ht) z)cPhsb3rmha|c0B%MuZ#MP{t$KjJ#Q1NzrBUj19?AeC zmdI6+)%!_p>w3P!!;&GA!QYo%P~4sGPmXP$AOu$!gt5}amL!|?yIQ3DIVMwG3e*TS zBg6~CTAoP0c{<-~0lwb3eOz*yDdX70qGuHI4!W-XqyE#NwU-I)0o4K4*Ccc)ge?UD z3D=WXHCAxz;v8yw@}~g&`r)R^@1>m}zeKY4a?SoZYvlRl8h$5H!061g7oY=NqyLUuy(beu zhqf|-Jo=Av7=^Z#K|F9ToaetU9q3m7IPd^AD6TwOTKF4_5YcFqGL+QBMJ zVqC&u&QE5~idc1x$F=p=MZ$W+>LwU;r6~#}pQkc5Ea`2CPAQQ+lLLDT-?nw8!xv>tGAU*C@LqNUZw$*Z)2DDDQX{j>(Wy3- zv~l%A+qtu2+ex~cfO_SG8+Z1~<_YXh6E1pxaCkq$GgjO>a;!}+mNZiN@LzeV&xdKB zV^gg$o7eAeu z44I@3l7W1Aqk)|h&i%;|*QToQ=a&fu|G$Ixl|F5QZ{mkXD#2NQ*&^Pli}E@`)^CF_ zf_*<>nY3o!s0)UDqvplv6`JR^2E;)}T9ZuE#~>E0*mU7TdfS*d1)?`EXh zcC?y{6k{@nt>=GGV(ts}(S96;dkkvN>_T+Di>3Z9Ps~1Getrox8?1{6pP~#Nk-&+m z@2-1FeGvG5s?2<|M2&XLzk=5YKgR{ZaWyIi99V9){Z2ma=QOcZQ0${28MCIfJ}cB- z0pWLhRD61dSp?OI=bNv8n`;#vw0^(P9SgwJIWvKL0t|skj7$HMxAibRbJqGbS>L z&;6*J)3}S6V5e9TfP>~K6};J)7g7tq^`g-9ST=oP1JVjM1CFwN{Pv>S1d^k4uv*M5 z^w1jUlycCU>MyOOcoahMOcMoQqOYWR)RDZHKoS~_{-Yd#&>Pj%w#3nLX|~_uv$)cT zKnl_p6cF-s!|iu(K3UwKq!0tD9{;wPGrddJKA^Eb)Su94!AN(H z{>sU+SGe>&3T&duE>Il8;C2jH0&thr6tWxUdYzaBsjss@Wc!3E&NxNJSQ8a%=Iu5qEy|4kDaVkeGmEx9M39*$01H z3N$v{i@7f^R2@rpW2Mb$25ka&SaC&J%&?QuBD=}X4^Xu>zaBo7Wap>K#1(9_MLPoE z*W>TJQCHuZ7T*+ej@~U05sRBAot&*oWl3wj|MZI{gHO+g-m2-JfPm_OZ&#}(Z_jr; z=a9ZKgMS~r+CFIby2#da(BrUQ zplfEa5Wvb}rFSu(&C6;4m>4}cbgBQ>>XEGB>yh+|qDn(%At}?aPP}U-q+u0bEYh}x zfjN|W)hzPi(w)q1lD>Y*K*n0EZSQGh#)UQEHY^!Fu& zelbW^8-c%QLG4EPI4lT$>#e^oU5}sEm4A;d53wOG8=-V_e}5{M8!PF!*AU$=A)9g` zq80iwX@)pRGtzE60jTvscd{G52r_6srMJGiyU-t4MMG5wBq$rH$+c5A{C+!#{0mku z@&f72^dm@01W^yKzRoXIpo^^I^F>gS|RTR@*qhUpz(VMa|VG zK$pNPQR4aZH(J3_zm~|sz1lmCx72&tnt6@e_UAh9F}Y#U(kt}`JQ&nS>fKZmLcY7M zHvkz#syR9`PVdC>Y2gFmRuEOK_u8TP?1vHGGP7p#6AzTz@^8aeAz1K_(E zcuODh-sQsiE==ZbD?A!+C*rdUVLHdl7og?O0@5X{H~Y=-bA`zk-ji&i_t$c{`b#y1 z6`pSMqK%i|&%7R}h#GCx_r{lJ5)f~b%4_#kR8I>wD&DlaZ0j#V1*mJg;7XBA5$-Na zIPbLk(FsxJx1=xhriZiXrMZ{=~^-{2`o43_wPKQr1^`B7lMW8we$(fV8~?PFXR zky!Y*3p@o^fA#8%RN2^l!#oeAbnEorL1n1W?<+sz=eX@qQw!|Aw8Anz#atWrXOpcr z&fFEuY1gS5vH7y#C50cQ>CLFXl{*s`;yjL#&${T+RGpchTBjJjfXZXci{DfOt(@xd96Oh66As2! z1MVix0&VR{DfYHy;`DF=7-7%PRUo>7A3Yj&bf}KQ;`=J^8KQ?#JvnphJeH!M+xmK0 z@+CT9)4WuJfZbv3^HNSlL3TIVp{BZeT95aE*5mz|PupS7U|-`Z^8Ez|vT>@#2-+9Q z1&{)YZ=OhM)QjIRy1-a(cVsqe-t*Q<48Guz)>GF;mJDchB|SHzQk}O_mRe)1fer`?+{`l`S&QZ%OhW< z_tm#btyITI;p#BWvI!bSAZO#m=F4^W?gXavj>6>R5hm@PUqY1f4h91=B*a6dbu)ch z>Qth{Uu7z~(>R%TFqXtkOfmfYb(+O%qHq?!+XO(_G2jlUkov+}le!^k^ZpXd`5q_( zl)D=$6;(Yq;+dnIh@vSNef^m?hd19w`_@L#7Zb40bYh=ZWqt3*DOoR*Z1u&SmSv9L zrIW!}5@+T}zPMNO`Y#K4DrGXKb7qrPmv+XMN>TyXyb!hbgk5Sd)xnW)J&^31vC+F` z&KcypGM$?;Y+}*!~FMi8q#u6;a6;? zD?OPzFaJ)#=s~%%+<7&fKFzLJxMw5Q@0IA+mm{@EY)Y3t_U4E^cEkCX*DOS4BpK61 z1l!VBMqCu%LS|-}Z;J6WkZ9Dmxj9ovJocV-Q9yWUSqKykw1hIe4(HDVRExst$A;FOHOuXKg}RlHgsZYtFL4qt4T_~ z?Yvd4#oWGwmVT$*F@3?EqbMykK!8~U69~XLoo@w#8;T8lMj zf#CM172~#~A;;rxU`9gCQU2xsl%!cEctxQ_Z{D2ebs5CNp?4!jCODaZr zh`|{awd)N%Hj%A%{kGOI`*iNYsQOtX2TGTWyEUb)E;nr_DL#8<+wsSGG0h(iX(e8R zH}Gf?!}t?{&E$!Ph1E234KZlgi7fDnCaINv!fjogb`8s+#jM($vXPVLTmw6~%?6Pa z6GG((c}Lw4%DEujyxCK zCO`vsD>D_@Q|u6zkls>piu!t0OSo0;{v_{l;JGBOi^iW_RWkX$ayJ|3M}F8{f4@#G zZ!oKw-aZdYDBng5If9DlVp1aVH7yHgGl#05b@`gMci{_-r;VBQf77I`ZvXeb{U0XP zPb=#Bg~QCiuB0ZfhJ@h7L9ETqx`uOGE{D#}C^EW_@3!smL)FL%A`o;V!(~V9tc__m z4x(;~bM8Yn>iGY0)o8`&!bx?1q?qnmbFD)xu95d{RH1&K14w`#*EO*p5WzI+OA74_ zOgB0AJ2?c9AOO@%!M@tlWMK2Bo9}HKXvj|&Z2P29gYFz-PV38w;4~LxxAoaaN5U-? zsP1;F?n@u^!35y(&E(1Xtm5?)AblW4jE*DI)rwOft#BJ0Q2P0^kj2cs90@x-g-cn1 zIq4Sj8>T3VC)K@oF?5;w5_FXkL@7-Poj795QVrsxsw=IPFEc66_WINl*m|0E$icM( z*I>r>!2^nbcgX^cHu!MnU^;Ey|S4Uc2aHXOrD?xJpNJ zNDQho!pw7gJe9h>-r9{qMt%+5ZpR9*SnQ9APKz)*TP|7IC|g&>bQ}gf+`NC_4O6;q z_#$t13;b`?PSU^PmEqp_k8jeEFOXN?0sBu0O-&{L&joOQ`F;_zS~0$|3A6WjvrDfY z%J&}6#0D}B4m^A&^m_S`4o-YU?neyNxq!={!CAlUEg8{fV0;@_=}bUz>qNTNlP0LF z(ZeGg0nfE8CmEAyaAEzYCzMAdy}nJtZGS z?6)LdG4X!@4MFn0kmVvV~?=f zp`s)=LaG>BRE1Mg(|9s2mDi6Ae>N`SGhGegbUBd5FwkGMTSf#60Z5`PB)=N73Yo%9 z6PwXAspBWcc^jS5nO^Y9!y4gMXPOIuHYJeCHoCIP?<%rJLcpxL>#tCok7(co<|LRZ zKaDEkO^or;jT|#!w)oWN;cBH3CdCV0@B+4NY85;9shp?lw;-$?*{3+{!`021J6vHq zcuN5Ik&8--Cc0vJ#v2qq&TPEEQ~Na)IZb<@d$0gxoM4?sY72~U%#E7D6P~?K7JgUx zN24-ojH|IjIKBeg%q2LUs69q=@Urg+*vfKC{`4vjrmN09xSuOBP9u*#J1yz9{msE^ z)J2LyqTxCD#-vcYEL$DuQj~1LQW5=V^V#1n%aw2=zoLv70*=9xs$uHi$%Vv&BR2wA z&QDKK3_Qp&o5oIWC30~#7h{qnFl|YoQAq4j6&un;N&SJvzd8a`QUK-I!V{CCra<`Q z9T~zODt4|_=JTBCjD{pU(;X@TthPUqYD`6|fjASDRrcsfMFm7a*t(B96~gOI4dkx+=yEy*9;zk4V?zZUU(KQ%TMaJU-EMwvG>cguJs3ERR7S1X(H| zhDWM@4&Y96`M#5>yCP5gRm~^eFc{!{A&Ahum-m50y$@GY9OG;i5sa{9R$=QMm)NOJ zNWQTl9btK*EmI?b@24oQLku1tA%U+Fb(tFVQ^{;8&;leXj~ltfA~6MS_%ih)&!Z09 z!w%fVTksy1{YcWYw*z?rjQXd?uCE$BlwF?P{(}LeM>FTv$ImHzWL~xNZpgn)$eV^F z&YQdlqah=-dSpE6!2R#QLwF0iPux)ty*2ki!$WVvvt58q93Q*c(>%4k5AuKp z@X+^$*xK=t;h2W_vdJsQ<^AE`P+;cSB0q)@CWVBATK`chw~1Gd)x4I1nbewE_0RgP z=H=Jd(pKug$QJ9fLTUSctr3PW=gYp}DNK_yR==KXCA~j><=h`JkCfbp4&3Qm@X`6Z z4_p4+(~xu3)8%>X@>O7;(Rr*-?~nGOf%WVg-UMEIUN-r1&{vu8TjcvxR-3&Br&qWV zyr>dRzg0;Y%S4oT{QywHCeK?cB3H9pg(sfjjVO^R=Da@3kI;o7-D_$xB8=g}AjAdS zaW(HfaYp1l5%WmKedxg5y#;eeIfBQOojd9n;z5~-?$PubD=W1+1UI6~hn4c2! zjP^#!S3kxPcD5~}%MT|Q!+ajq*5f$({hLoe>ESiwEhUSQe@t|x;=xSavZ8?L_Z?9`3;ep*y^i6FuzYFgZIm}tIWf4r zieT~D*3h!ITZd;FIBgI49m(Ba+;+3b=Q)!QB%@*@k?0Byh!`R|ERr77* zt9eTFY|%f-K4yAtX=6`-^V<9Hhd=DiktI$K>(yM>l21|aIQ05F`_DXLY^_r!`(=^jX)lfiZrc4MxNB1YIo&XzgjN_fP{E? zXiligwoDYy@gu4coGD48^LTqKIZ^6zA@s!-4}i`Wwp=J)z}ykW^j3Ju&E1MZ~lUhF0+B7Gq?} z?+RE$*v4GJr1KfUvIS>UinED?XDUT@XPm|c?rMxq8=gZIFp4yUcUuts6l{j>)aRltr9TtQr(Bk?^QlNGhjQAh|s08hi*7$mxm=2HYkl%fxRQ zKzd;sNsRI=LsmVjcuveI&41b<3IDi@BUK8?d9{)G{*n;3aYT-`C4t$qYTeGjr+SlkVam?$>Im_n7H`Mny`mG zSWTx*kJwbQr>yi_0=-tXEmo^mK|F3WcS{iG7-G{pKvG(Q*?y)d*S;Y@hZ`X_!hz_? zMoIu~b`FR1z;e;nNb(Lq=l}$Wf$~}0f}9o8YhLpj2YtEG5GJ_dEAC{g2%v&CqO~kH zQ!rW>z1HT2Q4ZVPtX*qpD*nl~ApilPa(Ic?^I(@$m(^;_uMwh!EH#9}Ad7^ImOPjU z8}>-c)Jsk>p>?|Kw190^0+S8%YAb-w3mA{LyIJluVNT{tDG~vTgaFCpByx3hrCd!4 zK;+_QxLL2E;xxaIlvT2fq@z(zE>&2lV@`-6l2t$Qg{i@;LQYpr@@;wc3~4s}Gc1vl zR(scb%@|I(MstmTut+R~`gcmUc3=2~U-&Qo<-h!aANYayzyJN;@g3jMsRV z(~w|FZz{nD5}4Zt_CTA>tadU5V3=Wpc}BNjp>yBP6TzCs8mrKQ!Kj^6TVh%!AxplV z#`>8JV6W3x*-aJJp*6^Gy#j}DjpurKH5Y(P1!g0*D(9k#Up$a@p+=}mE8!*#Q!~p8 z7j1$Ktl@xp(J0lkY77Zs>SNYWBo;zd$>MQpoFu=4a#mB!g}r*8Fk&_=9=$O1c10&z zxn!#kPY6%YC^3w1GTLTOPMuVq!*3!#X?u270w5_3}7PE&Rj z7EBmJ-^G3V+uv^1W%j=Jz3*p!=4bqa5_t(`7unV4{F?Qccd_43uVlR%~-3 zw;9@*tWM%N^>n~w0uw*meLQJ~pP{5WSSH_-ULKUvVympqD~Zi1vCf`YOuf2%fw`$uDKshJ2JvKk2O{Xlv4FO!PF9Ub7bx!PzO# zP%!XFT8{(cv5ol?#rFRL*b4}A;VES%3*@ye%kc#ZFcRBQiF)?Lv!@+RoW-o96>4TT z0x*6d1za<6R&1;5c4KEa;&{~mln6M6NqnF%Tx zsi^D_a%br8`+dLf&;7YS=PNV*0W3-|U>LG1P#=kYQcGhjoZAA(Zk6NY@fM36-_H$^D5wTI72 zcGgkZ=Ls^^^EI6J5qJ@gzA!ja%w83(8?R_-0K`*xtbiwxlVLDvGf0`7uan4>2*D)F zQ5AR=?*%#IwOaW12)%L?Zc2Ksgr`qw8GiO>f3~=*LV#w;1e{s|jQim0zy9l0P*aO+ zLyp|AE#k`Y@7F|F1%uJ7_;WJX=cWYXL6U-hT#1*C4|U(;^JQVgjPP&%&A-{L)*|ik zG{728|D@cbM~`SO2P_x>VSL-SecSWTKMyakL*ZT={|w=+jz34@OAx@bSmdYGtd5QQ zbzk>&eL+Jyn2Tz4F(E0A*Yb7_Vcsh@E469aR_9U5CH=4&njJ^0ev}u4)pmuI#j3fR zto|FrJYI-%rU)fInhn*3;pCO=Fv!b#={svMnCf}4NqoTG?FGx4d)2hfFb>3kYEhHv-=j>LmM+lgU> zsO&?J39yYs_8{|UYG8XW4@x8QullO5`qD4`QUNQAEJ|bzQaV~1F#qx>Ov=%(_-o{o z^`W$s{_)5jUOcmKYMU>Z1S?4R*vCHh5B|YFkcFYC5jKGtrt!hU-}+mB%RaPitQ0&! ze=cVK45#`8cnss_4o!U8`VUPN&`HOpEQTo|>U)+_3ZiDXHh4A41Rz>U7&2jGngD3u z_{KN-^0yLLQMDG~$<)lI|DNypo*^9C$gk;(YVAvbM(~n##d0K)JRWQI_$?RBG#C%O z=0T0ELdABnZ?VPCcG4Vya@r_8|G)S5{@(b@THPvRLsR)8baL6gePX=E6T|&`_ur5G z*pC&b+zC?4;5VVlV`t{hKA_#Ki5hxYb>(>u{@Pq9W<^>aNktFj% zp!v{;K4dd=@}TN0YJm{8Ui2fIGMtt2DyP|5(}Y>>x4-@E`KssiS-cnIMp!~gsF#CA zuZ=zpq*@d@0U#M{kXao$9)I{lR&ID(+`4);Bza&zwwN==W-42yAve@NfnW9il{2=? z1mM&lBNUHbFxI~140BB7P!@(on?`Ijwy&w84ZrD4m1zvczroB9k_)>8Eq*BzgoK2z z{02?~Ab!1==?NJ0x2?|vuoqe*?;&DF4kNY=vhdW6Yq7}!QX)>_s2;u+f!LblU9TvpAt@uHsm zy4StVy4WWz1feD1SDft`%1kUrOB~@QfcV>)rdT0~;ba!VivcZwbw3G988Ywn@S4Cf z2V3JoUS2X4Sdo)OwZblVe3nx}n#CHwqv;u^myuk0zRDuQ$!LTynGE5rgjpR{(H4fw z$;MDm!8lmdKje5EFP>sk9X_o^RFK-rPmhyEYc&ZTd@%Y+YM2u;(Sz9u!h06CAZOf* zPgrg4WN{dpr6(6+Q)J6VE@BwN0Aza2kfA1jN=PZ`TW@;GOs3DuFg$@tgzz&v_-ll* z8ionLlmzK%5+WR=Axv?KoW4d$80JkFrVyHK;mu;8+`wiCX`zdXvXV~X1(tWSLtX%S zE&UMQU*O&8sn7elOgU<*m}MblCTwXma!0Kv$6qr6=ou(%wjQ>M1AM{D$&5<;$gR0}qER5SRljGt%KAvE#3%$ll zOQvsV8`zvo==H5v;B%pZotqjx@?6*?k@J!ZQ)E%mYhXQt1!jsyRC*dc&E-c7=GnIr zS8VU5y|Az6ZuhUrbw4}Vlw_Ejt}HY8jtre2i5b{nKjCEW?YMTK} zQp22bNLH(p^0T-FPdYBpNuZ)Y(rcMa)n+(TG-d-RM}VX03(sN7>-!1jN)zr1V7wF3 zZ1ii`8}ee#Fc{m~26^M~q!&tTV>`_Bc9mYsdzb+yG#g;#VS6@$ID0k-t+m*CuH1jV zIO;?e+ne9~X4jtPE;OrI(4PDmo(y=O*CzLqR(s{9bORXuXcG2*)1Sj{%m*Bgeq(qy z{;?WD)$@j1RcYLUR>81$-rj=yBWhlDeA=gdS^zO)g~y z{5d5OzBIyk2X0eca8bac`7ENSNBekhKkX z<#~#7kq@Ea>UW(@U!Q&h9umT8xa#jCuL0y@!Wh~#kby^U_)>&4{MQS@u=RUr$$kXr zO^M#)?I89y8Jx~eH-sTY?o#X-n;UfR4q#Q@IoS=*%6TjK0#8d*Uz~ay{$$L-_O4HY z!RVQsoE4I(o-8G`1nxFpK1y%sjbLvq$Wg^Ma$yXAUJTb3=4th70C^eayw{I%FAQLW zJ?0gpk%d+%2qGu1n`cv{`=o|y%sqO!qnQBmJFo<^+88!mHDC>=Pw0_JhS7%P8sXX9 zf@)E4W!?~e4H@q$W!fAER#i}oOnvRk+>~lrP z{BC|_S3{EPL+O|8GV%yu$)j20f9mo%FCDDS%H2@!*!{oU}mVf`6FFm(;xw@f$VTXMDzIP?};=Q&?8|hWRp-c)63cbMctkhewm`$*Ge{ zcmeRD2gqX~rJ)Rvc}SWZ4dx{I!&FYp)wW^#f2wM#S!pIWyfGte5yB^2FxdbOmQS7z z@sP)L-iNcP1NzA+)H$E80UOTxj_rkbPEI|GTX2Gt&un_Kfa;5^Y*)<~hAi^|uSiO> z8h&jvmC23$-K=h;y%A94U<7?(Jl$Y&p)$Fcka$_0jz0VZL)aJ&^4SQkwBy1)J{Dbp zG=ldxrrm;?Fgy(I4@$GZWPSRMvl~-*S~cfrrCQ~+T<78`+7+3MXTwaNau06mr2evU zjW*foqnM)7lvL$u2xfgjM)AEV{P2fAtoL5r4+!V&AUqk85LGEp7L=Nywuy>Kr)oF+7PM<-o*DDQ23P9nHWVtT5GBgQx82C@I5zf_KP>i`kRGh9`q(by9y@6{ z$lH3~)O~M00D=}^U?UU;z{F!}@S_}IMUL`<5E}qP&9G))junlmF!eOerk~-MJTrl7 z=d5T8-sR^{hq%)G4TydT34oxdgb69U3<;EO&CRJd@t5EX?<{b4()OI+b9?n1Px^|G zqcpRQlgK%StOmA;HvQg~rozs-*>T3)6s2$E0(d)Unfz&EYq6epFxu+caB6Zcm`!Z= z8FHbGQ-a|Hurkvd+A0a;zzHkzAb*h^yJWMsz{E&#~X$WQ$PEBqRML3rvb=hke7wSEr`Xgwe~DKZbZ|!!cH0s%L5GT zqo;mnDBl+xqh+GcOL6l;V3k0|Tp`2*uczsWD$X^YoB~jik+UV>5j-oJFss$broyK& zjA{V45^_{uQU#A>szg7&Lar{tSAme{;(-J(s}U4xerz-RD>J$EVmJ{pNf{Cqp+3QE zQ!8NAycF^TfP5_xeH+7R>o)==0#KiRt?g<%gu$8`v8sqf`pj z^X}itR`2J*>%oqHEmx)1Q(6oC5E4cnE1JLw^n{gg;@>MrGeYJ=KDMiHsF4CGndU{D z7usAB>@A^?S9CIE#g)9DjZ?PI^Z`V$8q!+^y++SUuY!YFBgT+9u#kkIzT`^TY+k1C zG4LcL0E-`f02?89y!%OpKBSDe+aNCw*RYGZUOl6YSyXtcz-7WKXNyygwxDD+j(E)b zp2U>w6dVA!M?$&w$Oo&Dg4o1wGf3o^^x>C~2r~sx5iVzeIsqNT)pgdV7Xan&}S%qLSA}E26Ja2r+O_fgkeiF!@CJ~6+<~XajHBGFX_*5R-)Dj zcvIVRRxgWwO1JTDjXXu2vmPobNLfkO3U5p<4DV)jfpDgtBJl{z8oytN=u*9s%=(0u8CqG(69KHQ9hifs^(KBf+I$+ zd_r_rx3R>!X_7H3L${8tU-J5L-uEpAlBT%RI5O00rV^6j1E{qa$dxa>Aw&HLtat~e zFLGBP!{OWuxi0v^gQvVzD~9RWCUb`kZQosN;p_L2+*!kgE$A{R(+lh6ri2lI2n(zw z+qhm=VKenChx;%_L$Fc(n!Kzncl$wXE8w=Fj_qv?PvWuNpD>d8lU^<>?;pTr{>^Oe z?0mc3y7+B+Yt*w4G5}2(O~2u}erWf$=k0%fd!K=JeG=zkqy!dNR{hHZe9>I*@fCrT za&gL6>sX_q?|GlfCz#r3t{hfUJqFC`PiQ!0FBrWBQ(rLM9leO5c?j+CZDcz)S zk18PE5+1yHJ7gk+_9jSwZ~lgQl^Jr+gPp2Yh?AukF(F)>N{1Y<^=o= zi@^eUcn@3T_^BcD3E*WH4*RKtyWsxfU;K+d{KG#iVzm>rS#{Y*DF;^iZ~Vq@^sO*O zVXhFR9iCyeutx#B3j4XA`#Jpnl?~*k=r{bC@Q$4PDWCEw-}Fu2h+))1cMe{TQMQ)>G1=9!54hNcYf!0%0hVf-772XRx-{hlmL+9{LIh%Oj#35(M&um z_*Py5mzse8#^3lGf9LP~o%T9q^&G;9CyfAp@CSd8YxqNTjz4xC@GC-)Q7dKtNT--( zq)q&*Jj$mc+?M%9{EdK3*yr#q^tss$$%Wy47(7sRltpp7*kGHz$0_o)6$TAq555qj zDSN;lFa7&}|L?#4^{;nE+4lBB0h~1C#h;n|6My1QFoc9JlH2+{N&d1cy*)J@0vs1I>zfU2=TfPn?IDu)S3lX#d{d`+Gh}L#vot*MT9PV=ONUM$LVT*v9Cc z20Yk>^}1CsPX&B9N;*(%5o!F$kNn8H-~Db8OVtiLS0I@H%kA&}-M{Nk2u@a&wS_4@ za<2m1VSb}1UrJCd_9de+%LGz;``h1MxmV7~Ja<)}jFb5Y1KS8N_$lT1#b5lz+;zVe z(gu8Cn6C|hQlp&e$)Y$n$U6_kDSrL;fB*L*!B5tz!%ABudW%ahU&Ztecn^NM5w0=Z zSr$_9V@Q@DK`zp7%23M%4S7s%^gD(lY)n?FbC``u!wq;dJZW+tY_kE_W>drX^&@NoxYf{k`XyiTCC;A+Ir0>EkWZ4peCR_TYTH193ANY0C-JXz zrA*)VzV~^_E7Pj&9+K3#`rI~OZ%f>QZ+qL@7&_&8FW5pvwJv%A&|4tA*Y1Mp_zL_G z`WL;RwmDQ#6Qyv)H#ux#m8bng38~M7QrjRKs#H5wE$lzHEMGAIuv#58R9_9h1{vVs z;FJr5Xdzp8UJB`CFnPpjJ%$j!kj~*x>X{VG1m92$gf<7c_{ULHV|$YMvJ%y7Xyh`@ z@6>ZOZ%U?)C-t-4h_hE_x(9fq6p0lplwx;|fQ&J%1}?;qH5G(0OajA3Cof4mTHhphPPUB5)g!!0O! zfvVjIbI4xs%0z|%vb_L?M2@zXifr>mNS-hnHmlaHrCIt4XKHm69x{F9CfoF;R^&zw zN!i158N9J=m`S0oQB4eB#e9-{OlGznGgUq5lyVHot<T5<#Fv%sY*0e zgHSWnHjYf~l^e{tA=`6P*XZwTUch61O$sn7qxYDI4TIaoOPt~yDthudyfKjhUqD`i zDXK^|E7EXPl52-pk8QjgjeJ>vM6$l~KRX=jGGrYfWPeLhRs4tky@xv&ECuQDOkypbtqqRPlY44fE#wowGRZph8;OO$~ zhU)qu+FU1OsA$Tlt;*{;pFL9DDxH2Z62=TSAsx`i7MMuTZ(uL=aO1rIQWpFKFv`(f zFFcjhUid^b$6~cVUZRpsUB=gq*-j+)snm^LE(6B(1QUMrCx;g}fSf?@z_cZAtj`0|h1W zk)yH{=e!ZzB)boC+)ed1CKrZdyTL?tLAe5u#IuiWWw=9ltNBLeQLS(e?Z|^Hsu?~^ zp&<1ovIaTI5t_|pMUtlu={IaAO*Ra-8V-NVGaQn=W~QzbV%S7ZxzSu;JKTbsI40cd zSuQwOrx4ask`sz}hO5Z{Ho_kB3^Z$;fG*rPoSw_yf!^;iPhdc`1hZ)ob{RmS8w%Q&Zy|=73(_zNG1NNY-odgdFqx2uHUs z+H*8H+S5KozkBjkGmZ+zE$E$1w_tAyMW{F@fll@~p6lZB?$|0VJ%j zb?SmiFo3Zg!4&yM+ttzi<-D&>Cx!%5GfN21?nQ)n5LpVcLHJS-vG{HvSaJ`m72H3z>7b9=x%m|$h?TeljB(;^epAtv*b5$X=Vs;t_fxW?j;)}r9&TsqfMU+ zFv7W(l^$S_!@QGNMO9F6I$Th4<$OiYlI!{BCkQXv+c#U;TvyvS3uh zXMIJLW*o6CPO}LU_FygxdDjoj7CZj;c*`yN)x%aE*d2tG>y)|Wc>G|lvr@Kdm8Dxy z-7F2ZhU!M9(HJI-uhcRf&ZcIVK)Gth{GgJYkUd zWoj!fezRnn3xC%aRen{YbtKq7l-jIpJD{?EoLsXim#_cs7G#SiY!h- z`T&Myq!+&__+rbX9{~VsrZj8=ONf(9sD*zrI`RJ(-V2_Xd{uRivif`s{XnFYYA7qg_$Y4*^}upwzKU~FoXaR4r~=*LW-jn=+}$|DiCJrZOH<;4H0;3!AnQ3@3pLD?C-nn(;6lZ`Z3^&e zRk!~Bis4DyqsJF4{BukGq&uXw)?0LdhW<4h z`%}!~*ZiG7fBo_W%NI*_j%UzTv5jSFQp#mbMi_0f{s0pXsrSa4KU5E+LV2) zXf$Et=P{?qr9jyUkX{(9xaJpF*#6Mt8b(yX;s;K^z^Yf(l#pPQD|kXWDZF|Mo-E6Y zl-6u+z65*4I#p%mwxUYk0uWwgybQwYA?s(sYzWV%V}d@peY04TQ0F+=}~`A8-xBi+GO%yG640kIhM8s~EPa0*|fmG}o%W{SS~A zevgwcR4LmB(u=J~R7QeURyEA0yHWE>9vS5 zYNqa11crGThL*cMDKNR@f@^2##Lp_dKCl2Nf6cG?HKh|F4FRU?#vHAwQX@-t0=OoT zS8u_at7MBPy2`4)TH7nGD`xE><))0KMVjG;dKQK-4cJ=hv0-jqEj-(EJa&mK3xK5k zO^#&av7ssCZFGW%M^8DMi6d0w&a4gUEuj50jxs;Ve_LhVxl=~8UiIrWJVKH?070BF zx4Ac7Cfbeu<9JvdR7R7&DoK`L+gLs;RSnx(Qy)T$yDo868qCR}%`C%{fV^*}#%iNC zbfSIiV;{4r#Mvq*=sjHan~az{=z9=KaL+^2!EN)C{YzW^)hHH>grq?LTi=moS2QvKG(dT79hg+0~4P8QIsyx{m@Fk4Q@Qyd4K7|c3T0_%(LBsry7 zJujV-h8g1FOEc6k$3O-q6L<;M;}PKgJ!V_qk;JLHkWAxo6`LodIC6eRJ zwR7%nMFKoL8^h5j%@4W;6V`Z!c_S3bMtRL} zPrk-rHN|PUZ8>Zr)CBCLqp|Lk4Lt~^j?dGH&i0_~BU6U`<7Lw4t5&E_Mu$I86{h{x z!D_ZN_c33S=}U(Z*pL^S)Ko**rU+*1)l+IPil$;}(v(?B^`wzab}ux9gUWLB7g z=NUKTbi%lgfQnOWg2bOW0BplKVXS^fNjRq; z3_xu(T+nPBeaClv$G3m`xBEv%+xeok^o}rD_-8@?(Lee}dJmc$+XetbxC&_fdx3xY zPygv(`lVk&1%|=Hc<#BQSE8QT4q`jm4)5i{%KSj&swbEVD9&&F)^GiRANT<|s;Xo= z_svRw!0={OgYv7t`m6uSU->I?l(mw25#VtnD}~u$@skOE;V=A!_rCYNDsQMbFn2Ca zG2^Tu6t;id(Mf_|@FKLnypUlGYYYp|EAM~tFaCwS(dB2>6nxC}Xf@`BAN}Y@Z3aJb zW=Y?K>eR;cxBJ0{y77=F+1 z`8~hucl|DcA)b|grLw?c0QlQ~`)`xMwAm#qG8vnV=pgtVzvFjsaq^xPMv*Xq_n7qv zVW#&WwPp9@chE>sNf|0;?hIwbg*bV9^ytxV`c1!yupyraH~M=HZ$sPSZUegB(XItHnS1qdz)JY4ey3wqd^25QAoc-u13`efYy4?u;s0 zt3c38r;rSR$-n;B|N7tl+kd;4cQ%G$utGW{a}1k)gb#e+0}QP%Bp0SM#bJ_sWB=+c zcw>nUpVFwQwX`r@4^>&wHF7K35+12A3b{Xn%BGr ztev@GXqd0OjAjjBtWHKUvnPd>b^|cg2XvOc4d2RIV(;qg1j^RE;7^8x6HhNgdn(7v zKINH;9HGXY9!dRR9-1J$LYiunZ&gymxyT`F@W4{@{F*ImNRJYI)h1|^OyCI$qD4s4 zHiOCgoqJ)h)oUWxc+q377l0{B{df_EW=imorizCNxtIwxRxk>Z9#vqo3%e(t2^A-ql1WpRkgOlfIl*C(`3l%;%%&77 z=C&7KnyGOFlO{GW8hu_&*=Iu)=01HPRj95&E-FG^0KymwV|;;Wrho@9vm>0F%CNkE zT_<=H!OD_psy_fP)>qcu#02lUfD18chBl!5& zlmEKcz0UPUrevbG3c!UYDvhuI^M6<$g7iU?SK0shKmX^~zV^dDQS>^x7doiSiUe4k zSslvv}l% zYyg~DSpxE$bdhWrRw`4PnDwYkp&h^oX2}3zP8pbNipN1d9AS-6RECpd`BI9!d?)K* zlLcg@R>_njV4J;4)|4I3VLu(qHJllyoT$ddH3Hl56~Bd`6#oRgGMh5gO0aEUn0{ut zCTj^?z*L-BQ?rx>8FGgE$RF-4xR3RLXj+wmxlq{$6743=!`^xE@${hLoM0x%5oT(H z+ZMm4#Y65<@qn$*rz3;XgG$LGW=8`hU+^o~&{NqS==gwPk`>t$Dy{J7eM*U0D{@ob z!1**!@8?^;@C(1-3iO#3n747i;WzvS9}GfrYUtEhKaLiX2sM`wX0IW9R`&e!&-+BkhRf(4HEduhU7}* zePH7yLCp7Id&ah^n#T#AkbEJMa@605TuFdW7U#A+E9V;gUccAyrS0{jIXQbF%?nd; zzIqEzZEq0vrLVX*mUwutM~=w_VIR*0@McOR_c7nFy@G~w&^uXFz)Kl%}PoIdw+WBue${-if> zE5N?!TY; znVL)j9nD2p2G>rsgYb^!rFw=Dj>@8^4jCWLy14 zxQDH@Fq`3ov8S4;z3}QSxUb0x&06cJ?+7Oh?yBNw^>sbXmB9@8iXY|m?p}$=-V8~W z;MzEz_J_{V?_)`KKtByt85#+?SB~=GVq>C#b)C3=3|$E{1b_&;b=)+4yh#b~Lq*@_ zaP9e?o^Ocwu+cX>y%99krNW#Er@kDkz3z3NOwW54q<{%sMUaMOh3!_;T!G$DinA|F z`ud64*S_}k*fg=h3nLdu$lZ%LSsB7>WSsE&@W|-}W=PK}r<4SQ`eZ^;=`~a5TC;lY z&S9Rq{#p8ZNrSI?lg?(ix^8OKkjF6n9slcxqej!o?!?z1&AKCedg}e5%fr3p zT5^qPzAEg>asQ>)Gj~t0@|AQSWBQ4j-u>YsaRs`lH20sI4+%%zYB>9m8$(WAoW2?B z6VbQ4*_7udVs{chfW>6bnx0G!PA+zEzXu=VP# z0`+F4pfS<7?#kpvlf@@}(kE4``bxAiyehw>6|l$RCs=~SlDhX;?l3ovYs{yGE->KC;d@_&0jHiV zrR%C8FfYK`!Tqt3{Und*g5mvbZ+qLD-~8q;_<}F!&lE81Gf6z|Bn-#5Vuw#_Ya$d3 zeS)7X_B#^d6wC)d_`xs!;xB&v>)-I&*S?kuY+z#O%RU&$m^INF0%%+ybZb%~k)Yv! z`)~hEgoMxk{Lgol!k8UH0`p7=vFXpX3z#?=!i;>5=i^deF<*+*E|+vu?S`#X!E6Ax zjqs#7!z=0*Db8q6xLb-%o>EAmC`_q&!Z(B@?Tm&4nH zbp3GnHzrTZ-8ue^yBmiNdRIbGt(;`%xI#VH!D(NJ3G@rxo_2Ww}Nc5A- zDu8Kb_3e!f6|lBWK@NtYs9Xk=?hK`{psoY~Q@RMfIrDQhH=mCI`+3{1_!WoWx>Gl_ zWyGogh8Ek=?cpFWr4cAKhRLi7OqJ+ixK3mpBvNuY!w@D;|C zwdPkTBzR2Wg~hF6@cYIi6NXXgfem9=@#CG6i6L7Txynf2(y!oq%3?r{tZc@Q$|u=seH<(JpS<~ylY+&%x0@B zg@n*YpwB=5{7?MEPk1%JqsqXb6;*j*E(VTFO;0KPTFAAR5pc6iFbfjEx`@!MonvT9 zFtX0e%8;C407!(FH$SHujMq9|{V?fO8UPbP?7k&J<{KA#%?7X;;t{I4DUn{eM2O^E z{PCCjP*F;JhO2Pfc*M|wRse?B3TdSscc#d}Yzgk#NCVykfY#GtR;JN7kWy4E)G`1^>Bo;)wfZU zm|X2H2RRt2YUjWRMF;lY z%eC|wpYa*)13!}Vc97DnZPuwOP64oLtqJ0!)K7%bvdUM2i_p>k&ENdZU-*Sz_y_*L zJAJAt0L{H}a;5S%86UqAZ zeI)aqAeWgqMQAx_kn1UvvF%&l1+Rb|eB`3qgK6N4ftO+~S$z*F3~ZLBmsx^O zI7uaUdLa?CGF21-oJk9c0hqG*>1pB@38Bgm1e1%0cnbtytoWxTCKg40JSR<}#p%_0a%*!EOgRAq zOVj4I#m|ACf!=1~Ma(vtc-o7~b=x{1VPer8#2Ox)6=cm~qcL0^t+OMC5vK^fAy6(g zMDDQgzQ=vwZ?Cus+y@092CZ|Mm84`-*)d?Ntx=IF*M5dL2fqom2Ux8f6W)0JyMOoZ zgyhSj^pGCcE+MqS&?p6?2}ArEnbJ^rWJp$o>QAqXrjYx&qYr!S7QXzyrl|%@~$^XY%Kx)IoQA;oQ zFlH0#OH+vi45`r|+`z^}s8InBG`3Y~oDTSIf*7igkV=qnj!FOm=DL^-A=e6Q4A14Y zfz1#ha$#gBQ&+MgT;Qo7F(en&a3;i1(QMSNRaqd{Hekb$tmLacZLpTU{-lX$&9be< z!`yI>Z`O{gssVs!eOXO~MWU%p%8B_z=qEirOQk@?U2%OvlRx>BQ6Zcs`AQyj(5lkj z#3r#Z=tXOLvk}owh`kB~22^+9sJiM!e4_)=PsJzbM_Y9Xc(m~~y zRaAyANnOU9^?J90%hV79Ln)jzyltFHr!wk{O}<{|^+xQLQD;5OQ6uJ=Tbeb4h6 z^BT{-XwBj|?Ahas7=J=VMy-fl8^F}cL*8f(#!n97jR}2)a{MW**qo$pKK~knPb0k; zg0~GE89oNI;+(>R$;F0r%L}iJPyv$@>T_2=Qw;&ekgR3iein?7>@G^X%Odjr+kV?` z^BeSjeNY${daaCL;#VJ^+%CEFl2y88ur$#PJ_Fx)*|M5Tm$9{D+nG0278+eTe z8>M9eNCrC>cIJ9v|A+tZAMhx+VDx0I!d6=_go>cqV@isdmq;GsEhsXv>g}W-`>`J* zOeO`r=~cgtt5-p@l2nBaY#ri<(fetTs`V)5bcKzqf(R|VCGii{(pyVb16YL%JS%Ku zR1>iGzGyEzKUu*z&WcK4%pC`pQyzCuT_^xC_{`0VeXl}_TFrb ztt|cC>SQ92C-s!#5u|FvsIbSt>U)5>qX%&EI#_!z;t?u<{6 zcd2pYjj2DcQ<})>GmmQR$Erw7F-NFhVIx;$l|(BMetYDLs(!$PbADIMMs~#8MX1!! z)Nvs$eF4?`E%8+L31c5gUc|p~cX=pH3Hq!Xpo-$^bIRG7n3P~ zMpHk+QGL*lA$e^g!6sQ$Fg9Ttm$4t(dAsJoLn$;cv1FhsZb5e0?Y?`%)yYO(v+om+{bTx;~VXKc+6}ewIZhhORwKF z{Q1g}o-de^El5KQ-ndwx;iSxPL)cJ|2}KBrFc*9L@Nn%}W6SR-;a5X?x$j9XXqc!Q z5{6t5CcJZ2Oe$KwSjl}2X*IlUJn*W4O+$-Z6P32olGDtJXUIf4Z1?!g<0RVy91&VI zCIL1*{*pz=7MS6HS1&1})lYb=F2o}{U_CE20YrsiQ@wZs59i}saK`LeMzKj|hASXh zuMOay0`H$9B_z(YK7om@~1kXyqUjMSi=_6=`@-Iuc#m(BPJ`U;UI?nnI zDM;_@fK>pvDv>o;ri+25ivgxH2$iFdp;z$&_>I5uH}cLYb4rGJFPBNAC7T4XflV`% zQEBo*5MG2#3QwOo0N-Q$adQ&Y*~sNtAwhNHhM6vhN|A(D8?x1OdV+|Bhq zuxLxLm0F#WFND_vIDw5JVZs~p*>Tx$S~G@gItFpTdB&@b{+45*I}@=hgku` zKl+uK@^-I!R=QW^r(1z@%l34=T+jB<;@L#*X>m~Mi<8_Lw1!Qtu?6rrdBfq{cf|V< zl%F~~BLFfqt0AP+)>F7Ab9%zQO?ak~_rhQZ&GMcs291(N75=snFVF@aZOekm$o zqpwfJWfzc}2V*n5Y<{cRmASLKP&?~8o#%XSO0QA67yw*^-Z}ZHhM&C|x>3Ym6G>ph z$S1Y|jL=j={U8Z5+z1U<PAB+;c)T{6?i}}Kv(}x+~t5LmLfpZn`#I92f z^_}>p2o7t43xMpb*IXw)4)t9OQ_ghvjYFSo3X%qcp|^ufhCg}L%v6G@T+fh38(8wb z2RJGp=R)RMNWB$vXZys`C$~THBR`_|MM|-8~xu{sl!bhWiI{4PNzSZsJTR+|+`Zu9mX=snF zk1laPZp;;@9ss|FN)Lgs3)oL0ar*XM-;1fj08I24VkfM_ln<(3LlxKzA5@S}F_=3i znBfCo&8JwXp?Z7^wz+9X7{sf>v#G$Q@^<7#^K8P%3)lDY&i2la;+1J~;ampJS7)@L z!<|NJwhJS@_fkGx^h*W(l8NIUMswfj-7BsEZ;Uj-Ye*)TBjw`@fX|ISp%Nv|I9BP zdPD1HdoFk`jz45P+5g@gGa_ zxF*2DqhX6=Q>&7F;JvUPc!c)}ucf(?A@FL_nqF!CaR7Vaz2Id2@x4DD;F>+Hg13)X zw!P+V>EDWHHqvEZ6X!Mf4JO-R7)LZ6>j?n_Pw7WxVBS>uEYum{gl}NYn4XX)V|N-=)L7jgTysV?~)Utp-W41;rWQt8(CMld#+C@1?=z`6u!aQTk?rt#uNM!7Z1YY4BWu`vzUs$;el>y%Uyb2Z6HI`W zkj4;U%7)4J>5I1hK0F)Si8et$k#CS6Ps4J&!_r(+pQpY?FIVMXxCKQZbM55{G@iMc5O6j-;Q`@?6U{eroR(EX>Gnri^K z4-%QvZ#X9%dPu_+u*xfP1DmM?JPi5rVI+;)PGG+3>9!V|+sI|+TPp4$Ll+_Nzxg-+ z#@~DML8V_{@TLvMZ^~=lvGrRM&pr3t5B<=4{IUdF%o=9BThLp$W8#Mka#Fyl;a3OW zg7G(N{5a5;V!R9Vb4T|d6AcDQR!`Wrf1BdS^bijafk}Dor64KFkH6L$)lYVYr9YZg z*nromSFU_6-+i)=Z$T3t5)YxAZH{F9Nurd_3xX%de#**l?;vpem_3)>$%&<6D@Z&!=CN3UY%}i!88D6>8v~l##{kKRY_&tM_a4O$Q(hcB*CFW z#xS!d1<}HYhZUi|@CLt<0EmP}o4nx3GaSP-dRd6aO0k;RRZdwLCEJl5X7x4Zt4S{8 z;_ZufA@HcQ%n6l|ApQ)QG;5epw8>zafF-M;HH7qKm;doU{MGEA|Jk4Yun4_pVg=@Q zK@PxC4Ei)}o_6W6+WdB>9^hbOV$2Inani>?uN?z^9K4XlLb>_^I0oBArHW!ZT!dV^ z$@G?>M3l(%fB)~lqz2#eE#Le_U-U&j0(Ea;k}S0CKU}y*4DLB0+A5*@dV16!g)fM=n%9ee5kDfUV1l7c4R*%kfES)Q9b7 zSR;otOkkC4NN9+G-wcB_8?s`OpGw0lL6s~KPI(tbkvtU_El{*2BD)I@vPf(~7{z?L zk(3VCYS`|TFBcq{N)~4|rzg}XnZQ7fV7RXm0De;pZ4ZgqOYzgtH2Q79g*MrB^a0N)Rjt`qjahP?F8s zD;{q{g`=rJaZ+l*FlW2z;}4S+nUykmVx4XTF8rA|iS&?f7#ik?cTK)}cut2i+F-)~ zmfRNMD`ADjpwD}YZK$5XRu>ZtWldS8GOfsXUj!2c3I!abt2!LQHO+$hhAcqhMO+`o#hJ=+CEN1%Rw;ai42eXk4 zb4OsMaebuq|HCUqh6EUZgX$QVFnk5(`RAYaiKXU&qETu=0{GoQci1@U+`%lovO7e4 zTr4K=+`+s5d=To_FdjX6jcu22M+_M0ig0QJMU8IC?7{uM)3F1-|roZw(wF)Il@n5YPvFw7dR zk+1l3dbVpwV}jh8b_RMX`|ZzW+hccGaWRa$PW`f4BuLLzxpi8zwsY_Fhp$+Ir7^ z5^jg!>T;DU6RUhFgk7@dXEH8U^9!<+4w)U#Q?zBy(FH0PVF0rt7)p7+KgMaZHo7W} zl6-XgqGz6_c=Yz79*hg*NX(9TLK?Gz0TZ_K$P>$!T+ucrhEc(jxlnn<1kUvaPg#zR zOH-CiBJF@-n81o3KV*Nznc#`SFQoJXUL8rngCTN_VOA%Rrs%ouR5BC~^Mc_*<13Gf zpfanY%=en{C0{uLutkO06hgmy?yrUl&ri`*jJuq|2ml~W{H6$cYyy}?gn=CI%>qzr zJZfgarkMrHq#*SPDIp2M03&m1F%7$=D6Omj=Qd%!swK;C1t%jXOo9c2Az|DRG)Pmtv{Ez#!yD_c_e;ZEf&}IoW-^T`C8+=5 zSXZysuU(iwxC{U`4VTOr18Ce}#L#jYQf^G7VP}{^ZkCK>MUpor`{7^+TCRgx6@+3I z19BMw6wjWAMi^%GWRb(C42)SDIT#l-To`IhR#@OMnGXi-LZ=M9inR%ju|HmE`bf}{ z^?e)ALo17kA=>GAZ-2nUK(1g;I{K)KVN|%5CZi)cvaZkB(`yb7Z;4*C{pWq^&8kaR5*A& za=XNoVZsW#EEm-Vb4>H`dpkcP5s#cxZjdt!V+iK+A74Nxx0Zu3HF8M7;|Eq2o8A#~ zF6BxLDH4q#jW+lpr_ma!zmK!LJa^dHGXTg6XrWKjd)yQ(Fvq$(O(=*Dywo2ch^eh=-Ne3VeCG zz_{j=Y(oM-j%}RN7l2uNgHoGnvrWe42W)&PEZG14--iz&I2EmLRQehuU%cz9xn$Ye zBwot+mWoS7Mr6$tTT_~tu^IBtZ?d`(L~d4WX06Ty9}+l052GF8ep1zHh@YYOF(5P~ zpp;*JeYy)t`L1`p%b(j8A+WE^NJpmrM5+X1z>k3y0541!GVyj$vrIOF+0HdnG+Ggk zp<(S9=^5+um_ zB+oe|HVp9(v!Q06*ri<1YhdR{=*`+-_Ek%1$V9&SlU7yxm!6iCja;U_NtwEScvyTX}8O6Ho)Ntv>~WOCS0$VC0TAoe9|Q=vyg9n>sy)cOT4kd zFDAM9RLYaaL}Ua!AuHToUU^up!vWI^1{D`R9cuBUK(o@0?da9lm(JZiHYF=rteB0= zg%ig=+~uP3&>F7slt_J*ME>Xh{Gb0zf9Wsb!LQ;ihQMM5=2UNriCG)baYlg0Um_F6 z2uxJc$^NJQ)Svpd|MuUKMG^x{F$6CCT)=qkPj=jQXxa+FC~M)B(GVi zrlJx2doli~rhkP|R3b^wi)K~}uXKazi3g9oG)2x;x{DJV`CUVF9yh(r;Shz)9}bwaa#AI z_rnV&ev7KL0P~DWP;9{X+f-31Sjq$q%+UMV zjyxKU@P|A?UeuX=(fG-L$rJHK|HtF&!GG+J{W0FzO4*{+!phSE0)2-GZK3iMMb(N|_#&Udt+3-AgBGIO)-s4@^RF z;6)L&9*icEeJE)dc5Jz&$iSJCwfM(Hnmv^SHkb*onxb_cNrde=lBO66KneVTD4N!? zRUg9<@@w(BKl~L+=4?3~N5F%xAf}k;+fQrClv;RH!2s+Pa$&SWAvZlk!MmRZNfSTh z)MTt^YTj(2bs`j@z8Lfg!5CtO^!mW79D-{}iE?K)@c3dyRtdH zAZZZ^ir|3oj71wixwi3csL5quo=M1DD3n>jBgYA5;miWlyJdN?VJJ<}w=Dxm+>mX- zxMPBKVYnAPsI6B!1m0BfBady0W|&f+kcJC_@Cd*P=#Q7R)978jlzv@;3m?-8fESw_ zK;*qz@_GnT{Jo5z^m0mIBB=<-0Sq+)03NhV)Jl^hji|)Hke;EQ9$qWp%ACP=hkk|7wX!b*~1f$BF4FlI3ialEu?-NC0Jcx09H~a<1x&y zSu#yw*BjD{Un_WC;-45sNRJIUIj1-iR;x521us*xhV)|?t)XU0BeXz-a#`1lt(Fx5 zM$fy*(-X>iU=#TWykv!$tQTGtAQVa7u~n|I9oMGFtn|rE(ICguN+GvueP@KyfuIf< zcArra>>T(4!@$ZN2}!QDdQ0Q*>fnYWnxQ5^fjR3TyF%c3=S9P&M4DOG zr}x1w^|o}h(gzbi0GRX*nVY2%Igh;1Xh(-H94m$;IKt$+3fa;GizHd5$LJp4B|XKf z?XBdBya`4YG^Wzaj>n$ z+R4{!buJRUDawR_-6-&TjNV|oFgrPM^m0#MImsizuYp1!Jy^0C*KqXj-(plIVy%tISX=n&NY5iQXl|hCQJ-S z3Sf0qQZx+1BWDu0z_OyRnQeK@l7$z3rA?m5F=)(b^v#ZtulhIx=Po_NY-Pt?9%;-* zo1xzD=xEMHtKk2i{YSi&N^Y4#}u^DaQ$K zrU(VLYR<`(qS>gDF{qxNvY!52oRNf2K8HLP#^@&oPV-m*0jynu*&0oNCyIj=Sui21 ze5D&@Q`5uuxS?8CYAtxQ+)?T+dZC8b+k457O-*3P$#%6Vwo26STs#xlIYGdA2@p?} zZ|d=0H*IVJLQm#6+@9K0NhHcG?r z^@f8d3vwN1dt=Xp_YCz&Y=CyZzQ-eG^6ZUq%|tVtkeVv~9?_;E=>sV8QTf;qL)V)f zs5vD$0?1>AhVvZKV1|KA@6vL->hWlD{#i-yxXlu zF6dXx$dQOpBNr7~!iqU5kCISGt0o!MIyC_&tW$&E2o3kh^!k-^1Rg;6b?WHqg=e9u1Micz zg6ZJT#gnfKJ#(|gb`tjZ0SF=JVgTjRLvqq4C6m}MU}h@hiYLd=LpaC_v`sPG6qkO? zqaDEL?!+;%O2ejBy`?|t z8nS>bSpusSJXSH!aL8A|8sU*U2KPj-EdYi&`NC4>1#D8twmw7rhAt9sk7&k(6_0L5 zy(__`VpbDO0)WOApa+3mz^*-42qeM#Lf^FXlLlWad+xdC-u>=(y9>>l!qa=QsPuWC z7%*U-z{KDOC+~UBd;ZIR`7hpR`s#|$Mg1Jzx3T(VKA*vQ3+PQJ6NdPi&(GSc}o8d`;I~eXX!eeJoNLIF!<`2$WtCC53?hXYcv~^Co?zve>FVE@c0%4oj|b~>gQnE_z4+iGj(A&E`%}- z6`7S;LJx47lTs12hcYELCas;rBNfkXu_MD&!HN?|7k zL_uu4yr1=a_Zer_{I9k4dM^7pr%ujn%su9qzwsNFIsgB;{_FB=%GK$BS6@dtD?D0d zkKC}kwqeK5k#Ib&w5w8mDxI5q=8g?um|BMTeJNm0l#qH&7%+s@MRE*|AG1yo=4l+I zWDi?k{_>YSvH2dUFiaH#VW^Vz0A>jtX4Sz*g9Oic{zE}Oco2zqN4*W}MD*Qse=^M{ zk=}sCkFe7Ve&we><#6`}t}ZAVfH1!CG$UN%8Iuu0Zo^CFqdz(tO;q(MkNxlv z%mx_cm0$+k04631rA0J@Xv8)kLZa3z`8+`%0idKx57l-`jW0AW%{ zx%JKFu|AD>S}%lRrmO-fts#xZwWllR4Y^GST+2~bW>**Dq^BV`utnZmnhq*I59nJb z%zZ#uc90s9I0+*=GLe||JV)sqMTMtQ_!Q7*fiGXa^uYSv-~HX#JiYmO0}PE*FuVZ7 z%)DrM$(@V<(afTKM83@alI`Dl359NDgG z*4W7Fkl`9h!|QA_dzNa*M;QDi;qeK^9MAYAq*?i!UHdhv6-hqJu;Q=CD;3x_Ts2J{ z0TX0l=(Q^zuTO3KhG*GMr{J_ZkFQ*A_Jc{dM7P1#;YJ=m`4a2q+Hoy@!US2B<)ryQTU-U5Acp=or#Bk(QxDmFRZ1OM^ zfWCX8o3*1$58(bzPbO^U4cG8S#uL@JAaq=zvSfw?40@-a6NSglk|8mRg!ge2+iZhO z94by4=az4{0Q7YgUm|xL{^U>oq&GHwW3w-P;E7G20N?&8Btz$%@1Xk)rK8Rv_vuf6 z+V{o3^rbKHbQ~r&};9@<#a*0~ga!SyVmE z6?}mF4lIFT`WPsWnhhC#`W3%Yr5|^L--JAFu;JXm>o5~re|A5OW~g70ua&vGqj~jt zm6B@Rlu^wrWmH$f3m=Tk1Q=B$G#oiUW}ETc1E{;dbIU2{IB`tE*O+LN!rSVvS~Z;X zV0z4k{5lIAOK3G87CLFX_vp_=^r#mY?MhzO;)w*Cv(pji0CWBc8?(>wO3Fui0(Me* z9CQ$ZG4zpV5e{>)>4lLm0JC~&`cM#qSsJ|t!~2*MuE@bxZwvg438Ib zxB4CV=soZnA^8ZqC8{f4#{AXig0?1=t=aWJ?)n_uDilrq9KC;=73724DfUg5qs^m-f{F>E9Rw#FwjRb(EegbH?A~y{lnrXQh^VRSuvzm~O zvuR)wLaxefsyozK9=0vt8dx#IPZ(!y&noeBn?|b{YIqzZYD+_|A9I>~rCFUe6-gK} z{#raV1lv4w$vRFPfiO)C386+GIHBHDgbpFHXgv`IL*>!Xxdq_Fa+vutOJ86Ku=Wg1 z!7~>IHdbHw!WaDD0n9t1!XrDn&=NdWI%vVPU-N5zjrU7^uBlvesS-4{Ma7&v#f0R@ zQQDKMsk>^tdc7<)jiKI@mO#^R?PqGk(>Jw(M-D6(AyM)keq4-@$u=CGD=r3;5E4&R zh9eB}$QEV*BhU{a#lN|L*)&5!h$qb|H+9skwyRw595E@R7}Bgra!R+eZa47WR_eW`vMyj$S~C9b zYldVdYNdr)`Nza;ktjYZzM@*e1(T)}^dry@TNuLxRN}$uxq)UP;W5DUG3dKb>5HmF zz~WqEBO{!tp}H;zJ3~=P8JK2FOlgK|3dJ^<5yG4b@%B?7!J*|-AT_I*^dH5epZhk@_-Brq}M zxb`eSoP%5n4M~@m;sDnHY$#kr8qMucYVpolxV}OgyV=3 zXL|;07CQcB$8fwuuF8#VrV`8+h9L$+)f1a41&DUYfrT+9Fx&wLSbb&wCi>M2zr2f? zqhfBjV%8W&KZ4m+UcqFguzzq)RcW|mGAU1Sz*NTiG6`TRVTQRgBs5Fb7-Hr{BdlQz z|Ejzsql!5IDs2t;v^fNdRO5_em&c`7ufqbFp`H(#KNpRa@t5C%fY~-2Zg{*g{lOX&M(vMYwf~X8VBo~GSIWSXN z!@)r2h0skcz*r65Rq6-?Zu|0uWCb5(`LddP^Tldw1yFc5_IyXibZp1@I6N|uph%r`uJ4(D4lwgHd8 zd4c3B6YeN2dNJr7evkx*qKgp{9!!h;#fum7O`Opem?7E%b6&E=tS5U&6$U|Uh0SCd zlY2FW55})f#U>t`O%pj;3SwT#MLUgtQU*43NvhR~e~iqL@Ty@wa$9I(7Vz54GO?Ge zk$51@k{=VpV{Cc%ibqr$o`Mnl6mS#dc&V*On1;5HJ!#mR4O~ceTQBbD>uq~w>7Ii@ zJo@4}n^IO#ib>h!eT})qX$TsIW~C`ddquLn zqF1rD!gyJET9uaBFUGuJCtHqL_{hh$n9Wx6>PflAu$qv$b8))2ip>?`L?o=3Ax~-l zsfont2|c(NUNISl8wHh7d6nr}t-r-~N>^S?Xhs=>sYy_Im2?immdgdK!d=gPc;Jsv zm$G=IsaH>iXX9CYO$?A^Ce{T*n<}S$2ge@)_nDt!a>Vsr$gf`au(}(bI=0R#;fYNO zz98db^mOQ#5~8BPAU2qnFJF2h{Lvr%Q5%4jDa-_6R1>g=2 zg&m8svT|i&V3M%9AGsiyxGXz+$P>!IM&NzqRhXbxwN%`%@IMUPOLn7{KoztaZr633qgwz!%_ zlzXAFl74;#2B!FqE1dq?xZZzeB0|5TFALyS({COevCIn$15Wr#$_ougntL>`H-1ZV zvLKXQ@h4x>&>vx=JUg`#t}?LLc-P2^rkA70T{4g@gxS?9SzZbYFIk3dA%-+Z@B=h> zc;|(!f_JKst16+GVVrLV@A|dX3!p^Asog6Kb;ydKv7O=6N3!-R zcZxGt+<=*gL49VbyW9XyymwwAClmBy=E8npUfIVrz}9A6Ha(LQ``tbR=snEb}ybTdmU%gkCU^MN>vv^ARxD+MkjsveQPF#M^;xG9<3x0qS zzt+nAvS0SgL@s{$is~#|mzgPmZ~o?Qw(2enH?@kenP5(1)`dZqIC=CNK0rzzAo<`5 z-ljRiMk5}j!`W}Y+%@bi8vS5aL3X_3#BY^lp&?l@n=D5dk09`Ebp55MuB5in&QP_T z2gt=nNw^nDV0|r;$X88?(+FOD6w1O$Txzx=y^MSbg`vBc=fzW9?w$f^2moS>Laf}1PaBA;0r`*r@jvdrVRH&{Kg!`9A;${++0T9! zsSHIqvqwQ1lrGxe|NDQxKakrC_=kVk&9QQs>%a$x#P{DQaidcR%slE@9zE!&oue51X>koQYH zbNgHT$d$;2YI|HimCsU57+WOta#RxmlN)+PV!QTeMPs%#RXt1NuT%p&2n8k*>0_9C z89W#IDyApTFz=M%8P>XVQAyA#=(!h0RDG04$%WYmG$B2}YD}tLL-Gs>{+rL= z^}Bx8SHAKUWw9|-(n7d)# N?;Y$F@vk?-zEvj^J`AhQirHis&0WUh zg?pb_zEW;TL;9nV=CxkVS{;>KTQFYShHUhhRp1hTdH_hzj#fqP%%k@3qTGw*7)-HEePZKCMm-FD>GUJ?)6#2{0E(s*^z!uz zv^5Q&FGxLk*q8*M832JENwlV9L`l<;<}Tox@(TxVhxn0$#N)TE?u1i3Ir2tnQ$8uX zJIzlIMql~L>Ccn?um5#=H(S6KMK2c^50vm-j5)=FZQ?ZaUZ|5p0D|$NydddeggP;o zT^1ApMHL12ay+Gyo~+Ep#igVg^jOl-J4eT^sOSM5ptQ z2B*sk`AHrYxv3hjIqrq(*lz;k4ujU)tXgcCby%RlU~IYH;xin)SVvxk6|?H^E31Nd zu!)DS5=U}{pNX);D_`k^pS}{~kt3us(hz9cj+f%Z0C`vV)7SaPkd^3?NxnptVY}q) zZixJy^}f4@ib{|?UgB>m44DvelD%Yji(Z_oYbmo@HCIRkPz*35RE>suR2n5&&z<_X zPxU0^lR?#J_nNXaUfX)oLg;4aoB*cmQkh7`R~p07a6wrN{L-gUH2g}Qokbuh2x|xYC?$NEi}?EmX9wO|m%2?rt_ReHX0TM}BjSkOs!9 zHvupyWf+{(1WYcAN%_fz$`WnmN*1IdNLkqlDy9L@pN*kt3%=qo1YY^i8s4ZxrD2{P zf5TjCj@l~Xp;uVJcZ=I#H+p|OOgsYCP!*e~-d!g5SxPIopN-R!4&z z41p4|;K#&pG?cAEn##4(ZZa5?V%VnEVZOv)%q5RHySRrUt#zxg-+hC9CCVVq$Y{0H(337$NdXvlFg z(U%>&=XvO2MIuxpO z3?m<*;VnJ$;UQERJoKA6W%^7?M6w#>oE%~FoB2A#pkRX@7C^8v zYBq*s`e6KOrs`96d%T{)>hY=MBAiWF@F~|?-R^EpIV&1@O>u^*WJ^EHOc7}A>U25_ zH8N!(jbSi7P2j=Ianfv1LME@#|m9b6>#fcjR(GHDRo@Yo@FIy(3Fxaw!XEh6_yOb7KN9bW{-B zd_7mGu--941MCwiLthP}F*MtCNOr;K4ePncUFCw*+;=npt%?nv;KV|rL3%RtRQll$ zf7lbDsUi`Qn9(}Y@EAryhG9s^9lY19WdW9#&W{qwgvRi6ivFMf<0+84j`nrc04A4J ze=j+bOvvl-$YWL(V%C#Y1Ex$~(cTfiB0nN;4DT_p z)v3T5PJ{*d82;6EtIRs}0C{Cw!(R0(?V8l8U*$`-D`u5XM`AWbU~3X;EAEjp!dn>D zNG7lhP2EUxi=+1-Ms`9sN#g(jKmbWZK~##b72A_1dv<4xa)hb&d$2@TLR!m3)>Kkb zjwOOK#;N1@dGX@K&;8ub`_G9``A8VR=NX+kjzE9m#kVMdJ+!$mBhe?o1K$y!y3vn@ z0MPOgrqMgPf??Kt!^J7})R@m0)*X=ZAMtJO2e z`CW^!%4XML@sz?E+gaEOcti49v^9}7Kyj{^Hx$OuuD-}?q1LIvKSn^Pt*f)TyPf%+ z&jp9>j`^lT>vlJg;w!|nj!X^PC3yhviXiOG?;7VibwsYS$%8>MJe282b2NOIW(e^o z=V%=cW)*@x%;^(a3F&Mkl+(mkFt)6n!L}>QD-fzT@-wi(=M-W(Ym6`f591MB%l1YX0y4efr~M4hc73$A+Uq-&xqt7<_{0o6;X_Upb+Kz^x4f0(P-t_>ESx-o|?#K!CtDgB_j#O!8T{h$;{Ux5G{+*Y)xHk49 z`oWqZpNL1`RGZ=E;*x%Yz3E|L)QdKEh89wPm%*u{H|%bBHY6ATZD!LnJW;%TtwuGl zM+(u#Ir7RmA)O+4JHhb5R^@8=Y_b3*$O2o3g+WuC`h*Fud+y7ZFa0+Xjzg!8^UpJr z)`x9)zjE*} zmb28Wa*dBX+dX#$5PmeP`FlYYWMQnih<5aA{I3l-t4q~3t6iCWE&l@mn>zsvNmHw4 zrU;wiI`xL+V9365eVb|X>bp6!pwvzl9|;(v7tZq6dD z-=++2XU`T-ts!%bMrml)sfx8-sN)ebhG*`_Z-U?pJE1J<9~oGLk@GdfN77z0zmXp- z^1M5i*ZQ{`QK~uA{{i!CB}mq15|T zyZ1$3ym&E(5KQC*0KF;Ay0dj+X};mhJj})H%K7hwQfMy9?h{O@- zR}*M^VnZ9D!wfQgXLfJi;_;XmiQXfoo>Pr2SuT!nzsm4a<&*Eb{|^CMnQo<~+%z{1 zxf|pvkMbz+)in-Z{4f$EYd4Y{Xuwre_D#3Kl z2uoR1ngFCwS>U%NU&Dh5HbVUB&#K#jf=HjcYPFgtv&}`T&WiVBfcTGA07A`gF~c0K zXkuupU?8{kUA+v+(dk)DE{Z`S1U>%JXHs^XZC>=#z{p^0pLyi;1fl9Y3)x>D2pw;p zz&s23GbPR*30h4n+uM?kNe^efEXt6^JBl73XF~#qci?rN*#^SsBRB3`I5_=v7$5s} z;yQtR{^(}KgzEwmr0>YEVlEhOUHWv;pH*^!Sa*bCRt?P_m}(gEu4e@xDm*0^)m^6l zpMbsH`dfeNZ}l@l7$)?3U_};ob)&4&i=12;4R3F(3IJ!qBzRcsN)H7F^vT(sW7 z_7cSF5`Dv!P%wsiR$RB|r!TND6ToYQyI9`2Auz`iXRakE*^PD^p7k=A1df6k;v5&< zrJF4UGK@yBG%916zND26lMIBBV>5JKkc4U zV%CLin^JbAoi!E*$EM`KgiuUp!6}&#^gf~>RG>-Q(3Bv(WD*^2%woMEd#Xa$wmUF>Im z=4X5~=+AF5>|32o1c^kzkYybwy#~q35$Kzr7%b4w{_M|sAcN_q49F*~ z=G;q0|eGk?*UA>kSusalGctXe`r_?Y^f2VkZoh>8) zAqk#fSP|OKdQ*x(sYI3orf3RsB9q9JU6J7xjWB>s0M-ByqGFDmi^AB*H`{f{FcSj( zln$-n#n5@s3fcg`V1eUF)-y?l8J^YGjdJPeBaBM2Ug7DHNYgFF>^QoS8EhgSAzMRR zOUhi7xO%pl0SaRr!O#>Bfq6H#fsJt1d}bNW?Gdt+DFf(fVyN;Hz-xumDJTaQwhPim zAqbHMspv1+x87aqFztX#V0uVbyDJkp=Gl>%&}hlBvT^{*T4407aARX z*<>`^i1bLV4X*a--%T#@kS98g7st#vK+I)~ON|fKT$m>e33m$C3E(HO| zw|K0b3`idy*c%Zr`{Q17YN&qjhSM5~@qZXJ+5>E#KmF_oYyI zwGdU(Y|ZcJ|M@@v=bo!xzI^FWvD{$HExpJU1dIzZ*H%hHWh;e5~iE4 z$4c(}wNht1M{;B(7%dZ7Xsm{Z{K$qX&g(p2nmP!$;75>`=imU5tnx-XQ!SaHs;WT4 zHIiiHE-o+&R5fVY+e5_#u;J!w9jc+Q^`i{Wusfk8AoFEE_bfQbqtN=oYik%sOM2!_O`0>5Z*?em{HE4;hLh5rL^VVen5JOb)x$|Y9#`{` z!-pXw6oWDXkhvHt@tD%a_PX%uorI!fmJckhpB@U&+FNg6af=4HUDzGrh!>&@lAZ}X z7wW=9pOVHD7(zW|%)RI~OIe|hnd%JIaiohgiAbmtiOaA zeKl-2CX||8*R9II=J@&2m%ilY>(LE(>Q5FPnD$Tp$v<%l{@&mFd-Vc#b8)sQOB)ib zJ8xG3LoQqedIiMnI7IF!{oe2WUWbz>OC|v7saIS7%Y+XFMdd#+0CNid+kg9S-9x!H zDh?Yn5t5=x=;RR)7T2DC>!C1&-61Vf(RY$*%=tnFF0l;PJNv%sWa`RK zV}sO0WylvzjhtozpdXnFR167VZEPBH6)vQP8_$rO6<(c!=8$4>S^Cv53htvmYeos+ zj^F~W#Km+L+!Qtmc;`pStPNjfXf|J^M+R`4P-uN$Vd&-aS@LI4id--pxnGN?fb~)^ zrI`}8Mleh`1~yZz)}6(v$cEjWRlwI5?HJ_lV$wg7(73<=m?#T##k2%8J2KpPC{*Ou z(Vnl8cv>J?7oq?6hn1m%Bhf=LXA)8hmcz$d-tDke@N?Zoc-QxDr z6%P|{%zA+EeNLyB_f!SY(nrE?saf|j;#wHF=7k=>#VD{3fB3^f#ioJrrDqibd4{8$ zsR$dsiJt3TP?efIAnlwb!|CDJ< zE0Ghi?WccCn&ZnNdXHU51i@H+3r&u{;L9<0;&B_X#I{ZAC?f@7@_=}RvDF8^t>_OV z*=F_z^4V;|Kf#aYC~UL?kf0U=jL6%816TzBSA5wUJlzRhAc9 zNJ1MMiJ<^o&SL0JLX!ZtnqQGm7nse#42y98#^3lG76uW2l$R_4fW6xFAp}GIXfAmz zVXJP7|KorBk8PA*nu(s(BoCI%HF9kJC&J(U+kd;at-1wYsr98epF}^U|H+^H$v^l9 z|6uQlm6Z53UPL~=(#&uK`bxB#q_hNz^T+Je*?zaEnAN&J1=nfc;F1SwU>>q#ytI$2}VQ=8ib& zk&CMMXA|bAXq%1R~Okk?y zE~Z3ewSsY?tDgJASsu0Wm*;-Z@A*CbyadLnV-c;whR+>6HdbcwTX7!Ol*w1Z9?r9v zY<%X!Wg-|Rvdd%UY{w({Fa4#z^g}=NL#_f!S;K50jngYaghjQItDD=DFp5XM z9N8gUTwyy-4d*sx9Z|_nj(pjfkZW-^Sxszg!2pvj2NULCXI+f>*;&D)pWci0&wcK5 z_Kd~lrD!kNZn-o(?Xz}|5V5FT7mPfW@2rjFTRG>Mh`}nySukY@w+t?I8h6!7prD2# zE_1?c9k&24)xD^Zm{sKB691dlR|f%DJV&xZ^{R8iUIUmVT$RbD%C6iqCu^3#2T`_& zx5Z#gO_7g0H0tKYL1-Z`*aZ5s;Ooj`7A=abJ)N-aGX^)-SsF@K*J-cM%FatD^|TY* z@$EW$@4Cs%UU97grE>)%FSX*DQ~&X-7ZU>T`o?~<&0^q-U{S;=Ft6MlYywsRXQ6G0 z0Z#>oVVg(km;ykHACCocDM5PR!|#7Nws8KtW)J-UN{vSk<0CyVFFRZ#enA-C6b4(4 z7qeQcgIO?Sdb4CZ$9fSA3x-h9stK6@50id+v?D)2V4la<+6ov_Mww(qR%+2IqZf8a zz}zk-(~TD1dGCdblMfY`y95S9NSpwfkTrmol9CstHf&Ks>Jv6c+Yl9)e$}T@QtzVS zv;it_gd2Da-P0u7N?l5Gz?XzI<{Z&zmY9iPl!ed+o2R!+Y)Ad2;311yvTj)!S_pn8 zjA0Xx>r1{?$3+LmM2Q9rd9)hynI&)vxq`{4T%lZ8Q(n+Yyv@Vc%5z0NT_>@l!y-@` zz1m$eD`EJ%kWPDoAlu?QYh_A&Fs!&EcZnKiu3s4d1mLa#*80(0;Xmv236%;Wk|GzU zR>0HW=!;=l3}d~FHZWu5)HnVEf_*!Oij!t(`%!Dm~ab;NTkDW!Rs~Yi;5CM zTY^TW=`RJNGNy7WHF8%_JWY))zt~hMLElcGDe?O7QG?w55)8v@h0|3rjN}4+t=R_S`?V%>1p*I#b-l`^B*O&h z;je$Kqo)NFmEcuYt&!7c>q^}2aZQ2TP?`$TP`}moNX~nhDI?63_lO@2Lvj~G@(c&l ztYPG63rRmF1Adqgvl|n_ILkd5XTz1e5>4a)11qpGX*jka4Ut#0ZVH_f^v)qKX+3y( zC-WzM;wRi6HSbP)?d7GkD@wGz#&nDU_>9n7slVm7{1%3OP1x-Wx$ObT1-;AClbHj_ z&AL5<%~SwyvHtK6|FCn;;~*YSex3qNDYXY~z4Pq*zyJIB^5cDf#Rj>U0aVO6;f5k9 z?zrYigtGA7;J^46|KeZ$tA8an&+dMn@ySnqlHiON17t7^Z1n}Bp4F$yPpzhU*9BIs z3quWOJgf*bndil9m=pBv1|TnuFdJC3>oAh7kBzb|LC7QG6`7wjMLWGBq(7Rh!6)m7 zc9n;rRcmrIXIs6vJI-F!B-fQ1+ zvBE}q6u>H}eoRJVOE76F`N(id^UixFA!3R8lFctn{nVtzm}Pj9YOHMWKMC#ofaGj7 z)^g3d9FtvPX5F4#ij+0O9>QG4p6vj<^XV&{E>R~<2M@eM(cP`lXWkW;+}*h8ufR+- z>xk+lyk|kDh-WyblqWE!i&LjF!ws}E16W9go(LUI|MZ{!Q*S>yJ3so-k2-aHIl}Xz zlg2sfz0m*spZ{|oH)hUD50^-2I#yvYJG9t-=XZXmr#FO-RS%#X`5p~IKilWa!3@l= z#bsXnQ3)G~upNXBJX3mK%=xLG`YB)5ke9FjeEj1dfBEtyD*Rw*JB*{64a4?Q%?Gmy zm639U4RFiwF}Anxe}H+{EAXx?F{iih=XX9Qc-M=y1|SD*)x2+Hd9^&(6CBw4Ch;2+ zQJm^?318i=)aO!R(>p&fcLs3e*~nv`1I%IeUElRxP7Y6L{-Z(XQ!Y9w;aLF_I(S&Y zIGhlE<};rGCK&n_fTuTyS?10>hMiKpl$6uUF$v%2k^Wl=$Cby*U;pcWy+=0(mFC@1 zhvN5s@ArDQ)6~EI*ZI3t#wx6V#XJ{^%e5qrOCnR&145 zctvPPD6nVi^H>0H+UdHT^1Eu@wD%AA-*g3LO-Hz|$5)qS_KatL(2RUv(kI6k$prc2 z{I?K_p)hU%U&p+=iCmBE((HR`KdeEnfvxgjrrHF}nPDB135Jja4}T6D&57dEHAjfn z8531ty~7Wf(u0=|`B0G^LZ+ONOz4qNI`*7@raaOyG3D%}>C1agTxXKUN9UY}MbB{j zdcJg4c@Gnb0BCS}H1zcx=c0#HwDkB3uj9D@I6_WuNH0$AJW6`_bLjeZkMG3xj0;fM z1Wn}YFy$?MWrQ5z7OQ8*l$sp*t$*48E|u<0_&_&9_QfNbBdQ|@Z4ZUOPN|;lkT_;McsY{<07*~KC<`n{^=3P?0LXrNp?5@y!LJFC z_#K7M^E?jv(9s*1PApUOj!$32M@ZmB49-ZL1XPrcTRbA{5tbK0ip?oY?k!(WmS7CC zVz}0-XgAIE;aP?4hW+atqk4Id0R2KJoZ9~|}vhF2W;MgJ3}&^alASb82)51)hlk;d z7cU$hl>RQLbHx`=97PTlc;}YpAaUftID0w*nLD2xGhp#mO5HcY%0fX|OY(4PxMk^~yPFZ=HMCD^hLykP#X}mLW3bHCHNSu%kaspxwI{h>-AO7g6s4uKUG*?(>%{ykY{%H+NH6j zo*|^8i=(Dc*Db!qwoa{iMWuHhXwDKyt<%T}VamIX&XtahzGLYJ4@kUe2{5NxN0);K ziCIUBQwqQ#N_HlZ>CHOu(B_2|C3gT>0l@2NU?4lyI^hI~$Gf8h!4UjyZidcCZ=ZUH zQ}2ONR1QwG&R4TqA1-n&9iKJ&T(Bog0dP^n$s^Z#CV9WJex|N4p2rzq9Muy_`FUJF z-pho&Q9V@_Z<>D#`#m^(=M=nDi?cyn09TaPwyq)owr9=HD$f$GO5_@5=I#+LSN90L zVN)wO?|M^uSH7D9tA?YWAq^@$&Td$Se2vN3nB9!rWrFErK%$W&UtPFAcE?d7_a;*X zpUJT=hV+o-dxSk$Q{+OD#oP+lfLCUE@k?1$J-E=UDX-v%$>Ncw=FK|yeZ{BI2pYXO zF&8R1?***aXcCSAFdrohd3t#<ZR()OJfh=1utw!?ucOYk3rmM&l|_A4(;1F;bSbsXNH2n;=ca zCdbn@nu&V}7$>IL==|M_SDjgALvp+72u=f_xO)6( znM_Sr?_=Ht31e+2gYZ?FjS;<@tuYECl8fTd}oV0fc=Cx$5uodxgBwWHrB+jNhtx z!66ZXA}}w(vpki$R~1YQGdT->Zz?UTtZkBNyY>QZn4k`Z`iAO5Xjc#}H8p|J50yei za>?ZR^|R2cYXRHR`mQ5;zMF0bSB$?eqi z(`RC8gz_>aP4WXzL3FboDyVQp5WCrg2loE z*3Rfcs&?*!Q5_@cjwX!iAO#HWLFtcpRPoE#Jqv(FRF5xXz65~Edu~2Ma{HhZPg7fE zQVIs3HWA1M|{>Ug@~@2VxvZzMtYa^gBNv%lT!YM?>+0VU_|mNC9gMHEU{$pf7&C z#*rdxtjxmOjT|YsFSd9D^zi3r8$J%SC7iw!Qo%DddhLh5#uA(_f(8LJB;b zhWBb?NEjId@Au-l9js99eYT2fv_qt}y56W@ys%JeyADi2#C8S0nZLWkR#ptc7IR@+ z*3nORO&QMJ#;I?Awh0GD*p|ljKsYsA9j#XHt}I9a$WeHcLW#IWEU^^Y=dLEh^-8HS zQ=h2tFhTW@QxKQNz2;9Bsxq%CSa4MeAYsCt;cEr7S@|SJxU+;SXMi;DVD^MCe&cWa zjbwVQDjeNGGC}MABXw2SF)-ET2%ahRax?nPzxg-2{Fq2~ObU2xxh@7jSe8QiOGltt z=50ZEe+|-#Dk+k+o$ddtR|cSaEUIwyR5y{`9kN7&2E_!DMwb+0s7( zHVrB{Iyv0vU*7%iwUvuszQ_(6zmPNJ*CMWQUiSrg9Uu~b77l+EZfGh201vr7JX!jE z$D})p<4SnGM`|NE7h5uCOs5(vEfM%8Zcm-58bd>&YUE&VPrmc-9p6_~FaCEBuagF!!0BjSXL`SRv~u}P zzv(x5Rmal07*bZ}BbV}eUFEkZP1)G$Kz>8v9Rqm0#(wzFhdyNOx>*rc&ROm<();tX z_9U1KUs(X8Oh3rX8`68r-AgX7Eo@^`^!8Yn!|Lc=mxWp@$l`IC_)AG`13ST5yNI^? zEvqr{N%^;Y%eT+~$MC>YP=S=m4|4zTAO6E{z4cZl%M;!a^0AdZ<(0lQaOLx2RR|W+ z&E?1(33o~W<43{&@E`s|Zza*wFudZ$7O^wzDz7NrNBG*p9$WFWhkV`6f4SF_f!V=t z2?7hoGW_Mg{Fi_52Y=A*9(g3gxe86Gq2T?U<%+3aF{`|}Tc^&-#o3Ytu>6MGMj2Z* zF(rUced<%Hl)FiGU?bc&93(P#j;GL%msIb_OTTaq%ibn`GL>si|TB&7KJ0t z-T)(D&<0GVH>`1Ot;wQFFKio9)Wd|K8vGd&(krRgxOzRA%#Q*6%)@BDNEl3edoi zH{^SBD6b#*fgkuYf9B7~SLB+=T_#ojY!?0s(vSVvk5w7@hTO7i$tVeb`)~hke;VH2 zZo^ZarQH~wc{o`Vn_vlz@6XgPQpV@L0sHe z3?IBJoLalBtd8@##&Iv%vW4#mlvuZ|mE`C`R0`qMIy~7;VL}@4Xb8dvlZCwnKrmcg ztTMKua{GfMuSYC43`34b3{0Hd9f9Oy3d4^r*Yc%o@6rt6ARi_~r7sMTUkQebPDfE` zfjbwcj1LQAtSYrMY2u$`t6S9u;}=F4o9ikweZ`-0jW8ZZfW!t6hToVQf;Frc%nXZ! zhB+%u{5FF_OPoG6^bUcm%W}K4th-*3wO&u)f!E}#cg7<`g@HinYNWIkZD3hRNn zHmiw;;bcTENFhzMW@R)}s7z_ts_mFx7b?pXX9FWNrQh`1@RIokyVp>%>ZZIZqbzLY zb;*$_tDqIIArlOj@b`-38Nk+2%xxGkCzL`NiJ?^}qo&H59^Q>*kXyj?n%!#~I|9uT z>=U)sZ{T-#C{79L3uA=tv6Sru7?D?mkTkU}9G4Y=rXvvMfq7!#$j+ceH+v= z5ZdT^i&_pxFO?&Vp4xC#)-&dGCdimV8FCeAkZfhw7l!dW*L&jA2OlYJNT>as99$pBj@)q z3}0P6B?m73vcH-PH?H05Y8>c&%MwOETnla~YCpn&m5GO7f7WF)Y+ozfLua zXOJ6y^uusg7|v}rHoXR;mn=aGnSQM3X{zCv%k!!Le z&;ZoGb7>9Z`$H(b_eUJ-5a9{FCv?S>)eM#;+-iDB20Td>xlNXevzArd_# zr5hPJLmGmHnH-5eW%}evaFnAds*{^@1qr``?<)`O2=`_90RJvl;Dc4Wz4%|-r{D)G zefvtkKajKH?(!oiT)OWM?7kInJ~7FBNC@=nup^MBCqk!PfH}9~8SfJ(B-yOC3LbH= z)w0SY&6rPY!~9eNM^8odwacRjYpK7c6S-IL?~knSmGam2DOjpqw7&os?_MkYJ^)|8 zJD=SKtH~;F)mS&rz$nS}@S`UWJ|Rq}*UHR9>mxl!T~B){^&SxKPQcR<7-z$LnH?{{ zDW@k)%liyR$ZCeK74FMZctb z0j7`Vs1K0&fFCTJuak7Oe$o>5MCn zfDfi_ufU~ZzUdp;rOS2hN5{Zu%xbdJ9|5;#eMD|-_?={6>uD6GFzQdy+%>}*6T(;} z>(}p&hS4+CuMN_0%vV5D174>_`2gWY9x!cUX!rnkADF!93Rok}0^ROtUD?~MzDAMn zhf~l3Z`HrodT+KL4By=fY^%8~WwVsphTOtl0b{jc&JG!-?;TFZPv&~fY-eFZNJ4#v z+c112V?GR-=sV;H$@*d-jHA=s+xm5OQ#SSB{_$*&XSg2xCH^XZ-S!v4>{f?{`b%|N zYXTE&BUv%;Kl%K7EKi%~{OrkFMr6%3uPO8hFMJ=JBXsyfUQBe8RJ`l<;CB*UVO^U`#f_@cK4r zR-fVYd0%ahvKWL^BM)Ge1zZd%SAJ81*H-035*w=wM?c_b*WoR4w9}7Cni(dHa@Jxs zEbgvll2v9z!SUxOto#y z7B&;XXc3N8w0g}JMPds103Ins*!2|^`3k2nihp8I+beieOyouITllOZp~<^hoRke+ zvkGpg!JDnH*S)-n+2W}$hUCe@aAHd^)jdZ%;xF;6ijcexk6}N@DcCMobm59d=wj6; zp8{NNK;&{`B{%Ec!U%nZO(vz?qWY7J4#Jsw7X_KNQ%hNRgo)>r@RBk;fIq~e@9+2p zKEgJuA$*vibZ1*jBL=grn!q*}n<22sDG68ZUy;Bd1at8BhaQI9iqn`CLsu!-c&{K8 zq1g=6@P4*FXO-h|6(CnI!gV(Jta5{`B-_+Fyz};|qt9wpZt`mTY_fbO&XmRk+ngt zUXqm^xLX$6Vp}<%K^ERb*y=YFq2SeLX4ha&Hg^r6O$98474uqozq`HG;9-Dy(6POG zc_Qeo$usPJBYF!X0IVb-hkY;1O_`;q^FAxH2% z2PhW-Rh(Uo<8&%OqXE+-kC(2WhTBxbV?VY>A&;9rrGC>7^CkTN&I+vPH`^y1j?<0v zl73+2dlr_mnp+M-E1Ti0&J-#ECcp?xEVs>I>D?ci1&;jK1GFJoG3l-sTcO4243$eHd`&zJY5Y}4Hxol9-Cjf$ zOn(fc^9-}gw##`g$#KLg{vv@?&%AV;4F8)JihsOVnl68#lC@$USS6aQ)r75~%7~m? z`a}3y;o6h8xPBVA71R0-jJVc)j?=<9f3Y z+f}!&f>7nCF#%&`xh=$MvWCajtb+Jo6lUYnkln4EqaG{Ss)kZ96ay16XavJ{d9zzJ z3}H6q>is$8>tS4^-|tE*%VQZg9Hvzg4VHvGx;qLrO!zx%tt88_ESxRD)&oI?{&&4^`lfGcWm%nk-z8pbHWKivALf+nFq!#Ld0kW1m&`8_ zUeaIkRbH27pHqJ+^7J!X<)O9JA(h-^7Ehnyj?9MugQS@#|523 ztBZ%pIJy4hCqKz`{~v-Qt>=U_60?N|O#YD{`4K~j_}s_;=jD3AGcgAqbN|W7Z~JY( zO{SW#AyuqH@ffpe_#Zv12|S_ePJaYHgT@*EAO6FCuxbS(HIcV5gj9|Rt-JqO$^L<% z6g)#1ve_G>eU4L5Ofs<&7Tf;{=D$)CoLFtLQZj56Cul=C{HOo)pX?R?c^iFOmJr*R z7;30A|KH*7`+dL9#xiSI70ep0ZS%EG-Ag_)kGTgL+uGW6fOQhZS^CkF#h6S{EJRCQ()@Ty&jJ#jb0Yo4FBc7 z{FlG#SN$sYTbxtm@JD`n0Z3D_vB6Ltk#9m%*emn@{Gb2xcl?guVN0|b3R}u*H7QK8 zX@uQM#bYSzmGip%OsAk6gex+cIHh_P6j{mWwMl>ssd*LVUfJf57=3+)dP9xS2DL?y zw`Ej#@K8ztD*^*f-|L156 zN4bJSrn$3t^=jQBT6zo0+=ZaG+--wsw-|B_;8hoQ`Etp07H;62azPK^Vss_4YUl7< zJi*2mxkxm6n_otry$WeCj}cIHLqO8CBepGujbG#d47)DKvJhdF1g5F4Xu|eiebMyZ zseA#n@cM=TWaP?-t%ERSZ2D(tg5jme3F1)}C6cT)q7i@jPRg0+X*87)Ja8msH-xWE z;WHvGT};{pBfY_@sd zl!owDW#X5Dz%G%%$0Krrras*l+5t!YH?0vv^%S!MNf@?ZA&qNO8e|%?r_k@td$t66 zfWdD9fLRy6#hNq;hFMh&uL|AlPP}*c(|*5uiE0R`9lcCcFq_jSA6{{BWop7G(Ukn=S54|f#GUGDbC`jS7c{N7n&)W91*k_P{}SYH27sb@q~GXzIgZ*t)p_J36J4fZIAKa63@zT9S@m{wzMU) zd>Sjgb+-zpz`Sblfvy)W@L(1ZhM?ISteW(%?PWa}wBpGNWihORI%w*w$c046oIdjk zLKX~V=E(ubFd6bb?g+q{*B9FZk}9MJ^p%$(r{ZaoOwH3oD>WE^7ART2u2eg1N))Yr z3LDkhzq1&t_D#rw*y3mb(kEAiqjwln>63>l!TPPj$VaLt)JzN;=Y+cH<=8%BI02Wk zA)!5;X0v^U;W3>}GwanBG+U}XNqd)rVe%-Hg z)VY7z*?IA`Quo>a@?ZXow|aibFZm^`x@c{B=b|z?3o&f&t`Dz=dfoQjnw^TB4d7`r z8ea*>36?|Sy_)+zl(loTc;RBU0K(U|f-P=+dPodff?kV(@@#e)o}D@>quTUEPB~PZ z8s0g7=T274vl%{5 z&-H|H$)l{h^AKRvfmO2MYt1jw(m&HFSh+>4ZQ;tKe2TJ_D62t^5GJ^>?c}6%_%Sr>CG#-Dj6A}c!YGfzjj%B+_=fqt z&TxHpXh&Fcxnz4uKO{%t7L&mwh{RrXOHyqDrTSAEI^ir?N}BMHecH`Cr3Rp1gBcg2 zJZhTS3 z9tYip^;*}-xGR{3*F#!OMt-C)g?c1U=GWuDK6?z{c0A+;mRFl!wN>6zpcg0}&AngU z+o78~<`#}sZP*gtR=@g}ZPG^afFYjP^!b|J)Pyna!jC?WGrV-Y+q7q6yM!OY)oS87 z&f-VqDo{fO2Qakld+RTJkx!bF(Z)8g)iq4|v$HGm&BAKnG~ zPW`uNi)W2L04vIJxe{}*0T_Cia92&^oFh2cT>Kqx-BvKW)pl6=L=gV#zy9lK2r7)k z6pS{^t31l1a3kz!nC6k@muN?Si9h{ot35n~OH?ane@xg%FEp!D4YB!p*+hp%I0XpTyEw3Jh1L8g2a`rSW8PJbnfX0w`1-8Z{+ zx>q{V+)RB7#tG+CGjtn;ch9B&=5PMy|M5Tm$AA2f{}GQLsJZi+V(Y!QV!I3f)s`sc zHJvT6b!vinFAHY_PPwIaDGRW(Bxmt0F}%jGp_eAs!uKaV2+}zJ{3g$v)fj>i3I?nP zLF;H`^;?j4#P4*)V0<&sO*b+HL^;*D~Z1o@gQJ5DNrxz)A-)goHKIij7#IvA-%{O8`{NWFK z9OoUN^5WOXUZZ%dr^jr)v|I$x&+zE_tS0`M+J>XQB&;4+IXulJLQ`kkB}bR^!%wI| z5-#D>2PlB>t0o>jz~Bc!(;}|3BZr?psu{jHVPd}Gq7()o3vJDdyd|;?$M%Zw9M6Ke zKO5Yd!!mgy-6KejaV z+SopWkh?XQaoUuaPchv!Q?nh(bPQ`Vq#TA-0L%7mi_`T_R%iE0ch!oc|MaIn?NP%$ z)Y<0zgTdK-))S#W9pa-wdiUb^d(MafnDWZnT?(&YB0Sq)GR$KpgISdu+m)#eIm2jQ zYZzc+81qd4SgBTdMbblB4wY|dydrV7^@OL|)}p7t-n%yI&C+3TWYWx{U>Lsy3$*t6 z%Jxz`!@Pn=c@*%El8I(mPiR)3(A3P1q1nxFY}Y-u8m{v2Y{JU92C%|lOxfENKa+`P zkii;~wV5IqGSQN!Uon@I8|IA;x3E`V>Rbgz*>J6YQ_{S`Gv*^a@D!}3voNpq3h%28 zU?T1ny$C3^EfX3rmlLELoC`0jHGdf9t5Zl<8clju%!5s;4-?|#U9xB+@l8dqg=va* z;u-Jm+T9~)MAF>>tcFud#vFNgdL|qp&)2bMn7N*9E+`3^A5AW4vf5^m^yyA_u96Lt z-*H+6Oc5+=H81jzrj8-aR28sxjyk@oK;*5vJ@Yd^^D}?uR^#RX06+jqL_t*ZZ~o2S z{kwm+2M)JdUV7Tgm!DEtci*G&MCi{6`pLGRQh>o|MUt1oAmi6JERvZjN3#j{?S(WZ zE6J)K03q+A8Ivk7`VopVL;c`KKgfhKy#*N_PgM0|h)0q2)`;+xuYASp5+|RxK>fW+ zuSF~zupdh}{6wYlUYGR6UB4hKjMl5=12E*Jp3+KTZUeNJ3h8Xm1tby-c1{8>hT3XU zi3&h3JchD>F`VsTxE0ez0*Gqx4ObV*QRyRTKl3G{Otu~jxO37ZVQ+FNR=Y zN+EN44F=D6L2g(-(XtJ!r%ay)QjWGi;c4yGAe6@V@b!_g0I zF#QCBd3FZ#tu$l!Fu^4)el9Re))DC1Bdly9DIUEkdC_RbNiWW`Y+_5l8IJy}73GHChGW%w9cPc4HH_8! zAeBy)>}1vUNv+;FLFwZ_Yh;L_-kS2;5y;$mskcnlOV6Z+Z5&xCS4SqyyNZu#PF_W# zs-3m;tdI;Kq2TpA(g>jaMi3!=0ZbTUj``<*{^t>baS{IPBIW|W>qVw*B>VZw5y%UV zZBCpRSYBS&;l{D^u)O9Gi;`1scV(r^K+H-(37j?Tt&UnN>5X!YIb1>=g+4^<(BftLl@c`tZP zm4In9Ccs*9%mQYWA#lQwZvw&?=por|fO`$sNHUaK#dl$MHx3nGB41Wj>{OtoM3_Bc_!i8Uzx-uCkZ{xqjJZ{COGOLJmjl>M*^0Y) zxhb=%M1*n8swJ4fX!10DWl$S!+jekiC{`eW0>z3$aEBJRLUAY-+}+)w6n6`9BgKkC zDDG0U#oeX2JAs!z^L;a!{k1!jD|78;&qL9KtNCZwRmS#9I;x~MZa9CP{CW5>*gr$o z*SM*h=B-}dl8km(e^KyN>0=+Cx&@TEB#}7T?rK)|4WMpD0p^*X{|7t$KatJtSN<0N zRa4D2ES`(opv+-aRvC2?UtqVpI5+dm!(NtzC31lU<)OM@qYx?IBA|B|6y7+&WI=~( z1rGo;`_hvNG#J9qsv=QAt<}>onPC4IjN1RavFGq`GgwU<2fB8VrL)2av3fKe;~kV3 zoL>BHrf%Mj7u;j%(N9I zGl|{dnnwF|i9I9`LXc65NK@oz>cT%+#^QkQRL==w=Q8d8az}F4F;dNC^5zviX(xRc z-c$_r683nqLuBo;<-fn(A~&V{-a6sp?G6`wTdeum3xE%mPZO^w#`tsD<^m5Jx;e(u z_f#U`fx2dDmsb0B`r;nMYHd#YiH+GmzgzX`Pt94M_Sp^@?J;-7bKfmbWZZISoB8yA z^Dx@LpRUH?xO$r@xJ7(DeNs#7^bCe-Fp zXM`7EQKVss01A`uno-A=SlFjgxmpz!cqKU3l{}i4Y6)=Zs*Tk4RxJ%__1>hndtM&F zoY@O~q=LQr#y@AWrV^mtmMyMYyXX^Bvz;M+<09g<4zyD7l$q&8(n8ya((U9Z$Q%4M z{`;*f1q`?9FI(UUI+N=9C)O4uNp}CB7UG*8FC_AW>-SgUA3Ap^K2lktc>s#jDa}AE z?TX%HjQdL82XVcTo|cg{H)#KM5%~gmEp{Llg?y$gOmc1&Qb{a&Uh*%_BxPNGnc7xi zj%3A1B0cZFSR8UHF)#HjLv*~>qPl*tEDif|&NANo;Jmf8GFfN`hP4YZN}$SAJKWgA7td4^%5u-qt2C4YcH>g2;&pZ@*-n-`i|Zt zNUpOiO%a5(Sot0RBaLy3oMfgg|4oXNh1ekJ_*=E=6=^%&JxBDNyPn&#{=2hjqtL|M z7x{y7zCsv;cm1CS<52#PqaLS#y;?7HykI4Jz3MTgV`C`sYhYW#0b3WXb^;JI@&j|* zlI(zE5qi%P9htlS&kDXU0-?6R)alreF~9w%r2l7pn}ihq!48BBqGpb-@}PYba*AzT z$5{p&w0a`VZ`0V+xanlX82teDkO+GubwgJ|tHU@VAC7CPkUdjqpl2cYp@kxHpeM4~ z|LJ0wctt6G+j=vP{?2A_A$oH#Z$5Ny#Rd#ORW;76;3bJ%>aBmR(fj$QbysUh%;Y-# zcr^g%r;y*lDuCwaJN*qc&QtX6m-0}skkJ%#_X2j@`#HngR{=r)nZA;UMf|#)8AmjU%`WJyYF4jQ zI>H;qSs4@;KR7rcAm~OEHTqQoTePxx20bIQ{8m7Oa?zvn)KmTZxl$cGat6QeTUz=R zp)OngXu@Z)hxu`M#=+ur4;)K);!Pxk2@Pkl4oAAP0l>YW1EFK8^NxLa$LmVt9K|%K z8t!XwVSx&WN{EFWb+0>>-(9gf!CnkYghMa(gLR1&d?Nd87cc&i>fd@go@-1i0m+*c zi6aLY^f2Q6%KyX}m|v|je*$r_+NE=IOsXT3DXc#QTpu55%(4j`Ja?VwnIuV@s1em@ zeclYRo6Sz2> zHW&+vB-Naa-w!7jJlGn8`s@eAq3ZkUEF5(yJvvjrE5n!Xm^3iIP|rU7SZi6dR9UAA z49YNyT>Y=1>F`AEy`U6xZQ=}R=6qh%8wL%m;HSW|taK8~{tPTbA-j)qk-dLs4 zGOZE<_?;>)azxBWB!ndfu^DFfy?A{NaOoOu+L6o3OQv(=2Lh3_IczFXw{#@D4M`O0 zOt2^MFMDec6G8#hkN@UkKa;IOXka!b0DX7E#94KduUQt#CWani86IRvm|~xeCU1lu z&cbVCiJ>D1ko8xH1j!-4`faPj0ztZE<+#BX=d1@4nngJ)p<7(*?XV8jepsWOE@$?n ziVVUaw6{{Sd(5gp9U@|mqJel*zP9b&l*9y@XZWwnY*&p*C`(}TeCNffXN>5$Ln4JZ zsIUbZ3(y3}mQGbCA0;9lQ0DD4jG@O$Qu{{-}V^(T#`>_!{)y*=Xj=9g-Z zto6vRwTb!n_36QXuhXRR#|Cc#M4#Iciyh02de3(+AqxA>-1)FrJP!%X=g{cEXv<}b z;jw9qzQ;e^o1Xs)HzO(Wg2(=vVb!tWkdQl&!Y^6qX3oJ8 zhU4+_h8uaL+M@?h=pG(pC=dTRg`i;B74@*_UvH%het2zFKf-2`1CUxrf?_bg%^UtE zroB$GD>&a60&poI>AG>#gsL3iSHYLvbY$a-D(;~xs=F!<;oeA00gIWP>&atT<&D7N zfDa*Oi}eqh&N)UEbIp8@s-^>Sb#&EqU$$iDru#asjV?`5nG0PzQ>v*fboOIb$rx@0q`ZPI4OZ4^gU1xjs;8&(Zo~ya?8YUeSy5&MaewgatEX~KPfD4Czef7yQ zC_?Y4L^k;kG%RASjfrch&`7h^G`5BSR&xF5>1It|BWMel!aG=W*@i7c%y2`t9mQ+C z7RZ4Xx?~q6!KRa3IZ@KI@C_XcCE73K8i{~t+ra2e8shKG_B8ee!($vB=A5C1du7Y? zlyuqRpqFN4UJT`(EKmB2QQrz+dlj zdl}s7TEP}0?tFGs^w!ZdJt-A5x1X-{7)=*zTjwepn#G07{aSu&$%=+P<|Y`Ry0--& z_(=P&FJE(+9E$F4cwohVJfRawF4GWq_B^QhlYz82x{G;e$Mm^4Zk$$1*!~cO3tXTq zRYG?fMu+qLTGaXeyKiR}2P{j>4wl3$(bzDXrpGuX^2~-9U40yVenFgv{{gTf(E(g6 z?C25QCO?EZ_!cuIA?0m*US&nZ%S_%>jJhjIcB6@h(=L7OgILd@ME@lgfiIXGYGGjJ zTW_KsN3?7CMqVTj^{3E8(M>f7Pn8nt4vm1aS22kf%Y`jf9c=k3%#G~wDPo&ONTYI{ zg=XvxXMd8*r`Z|EkF`zB^*gPxl+%Vqi|+mY!&oPeE^+HAov&%Ot54p4e7wM~m+AAL z*}_+Sz=6f=R$$LWj{4Nib?$x?%Kx4vn9&u0hf&_W=RLQ|ZN9T~Fo5k-!!vbGUHmUg z#-YOt+&Ia@rw%;->QgdZYC8_n&hQ1l!@Fq#KkS9zv;X>wOH@b*0#RLNUA^e3vbU?oRQOv-Hxf7fMJzNHoGo4 z)u2Va!yVg5>qiutUjef_uU=z6SffZwKTfag=CaG*I|vCN<$p6RnPGt?*+>6+st?yg zADb?jF5hLbI-mLWPNq(ci+Y#akvA7V=dMadqq{fu{0tHcf*~zfH+5--)7Q_k&}<$* z#sNEg@^8e@PAD$61_gY~szz(Ma&T*_+AXmY2e~KlAurh3 zz`&cpx+A!x=bvZWF;o~Mj3DRp_*SO5cbM1a4Q?TUju|F$=do^=_cU@wE;0mxAp_6a1h7bIc~HtBG(%KH7=yZ zk+%mbNmr(y=|^)wFBgBA(F;l({p#Y<@8XI~Mk)@<2BdNiTE5RSV2m(o9Pfs@I~1%s z6qxDmpeIJdS6syApJysl>_>ktKld%h z`)#7J{kkg1+vZgJIvd8YdX`?$JYf+E@pDK9Pzs9@6}E$<`ZHZ2vX<4bPTGoFBn9iG zukGZMNJ{Ycx0-We>fMXGw2Hd#A34y)*ZFCvvMN+k;k2s$4US`Cujo-GG>Q5qeO1O& zDxz-F1Z7-QZ88mFc%Ql)Nxk};kmu@v^QuAFYph*S$~3wmO;|09>8&;_K93TF@1C(K zIzbSbPE-Th+_?de%xFza08wi6G|JoBJMC_hdb=8SQMBRuW4qv)3XHiqQbOH%5}S}M z2b-wO(@};(T?3Z!@TSe$R%Xx35lzM&J0d8KkxS*1v6pR(-TZ|MihdcJFOBb!LT%)d zsqI*5mdmReRM2jM3!F0$hmtGYp=qsckb6~cvh{0QBxscc;DBV+7GlY z#P0LAgpN*1(a#hzf|Mv)?Kg?WAkCIIjL3Tx14qt$RtVc}5X<|A7prR-wyY;m7ufjkSNlH_hiBTXp25Axp2M zH7;dgXGqUXYE*>SuJy&+GXOe*Pp{D=%xP}Mres%pOP zHYS&G4$-h9Z=oB@81W!3RkWT>I^N!sAVQ zu0r)nnYMdgniddVfu9?FS+|a(&@=&fYw(U9$h)2jJ+pOzWlf$_i&|h04{D+%?pNfW z%P$b~QfwL%``5?NtYL|$LTMKB>@K&eQ~<0p%GI#QjEaw%;x%!6G@hL;3L2K`s#t&C) zbqLEI>~zdMa#_aT_*8g)dKbYV$W#+8jz@aLJNY4np=QNn&o)Ph^(|Joxnb!21@e>C zAVE0gv}SM-LlgEMSgBtMB3$@qc6Q|>g?|~#L1Ib6eht<9@?g8Q^hD)hboi82VA?SL z?a6D$FTvz}7jGD_(QD=JR4Q&6Eu!6Sklg(iGsP;@OaRXj8LI@rxnohKzh)#-n5vn+ zhvxIzc>>;XjethF5zcmu)$V?yxF|*n9#|;{Tc`q3I-IA!9cF=%9j;l4sr+C_ zE@D3S=$VOd!&tYB;X~70(M+l+1SD#IHz`1Lrbq^^Bo4zWCx#Exph>)GEfiKM?VGUQ z8zKU|qc=exs~L}GW#Z_3Ovx2lFRe9Y_;_uK$J;;x>KUbKyNP*?(s4X*99UXHjPqA&&H~#dY%0gp*%~Lf8pI&Hl z!+F^lqhG*XCNA~m--_6W)J6dNj&;2MJL(U~=*=0hoPSXAZ?&pW88ZqdfP$dD&%l;; zl9mF!6;=M{D`>Ekv3W#?!Gg-s;2gX}d{9n%&z|_V>m{&!XsxuHwY`W{dZV_K#0?)t zC@|)KMucWuL@(~?k?`@Qe)B4JfQ+gTk5(Gnu4XjB6%EnBqoHjTP!0Yo(u8jC$QM=03`eQZ@w`f2@Y>t`R$t^x zG0KfMR>?{wZC$J&tlw>rr|%C6XXakFKrdva^k0_KLe83k!Oce!IoRb5x3%RZ70+3~ z-3g(nGx4!0F`s|Ahw*!C1dZm~);LjfOKRAD>UVz&klEe&*y6>~*hy5ka0wFJ4Cykf zmfEcjwPwB$=Fk1qmlPd5z)l zDK(aB30E3Twu4TAt++y+Gy0V5XAv_sni8XRerG;%HI3F|$732qE&d#x6(Brggy_<$QREtB%-~{n8 zZ*$rvVzUEsjD}+`fB_sQ)yvE2#5hJ2b;Mq3@x7Y1FbnU);Jpd%>fLo9rP!ANYY6H- zuI^X;P`Xbb4q^CAm&t748&#kA&Ty0SfU)_jmqcwTM!hMgrRt^jw-2W#lU2SKfdT`m zeWO|qa#UdX_*qTa3s;&zeU-v|v#jai&Jge%R2>qg zqfspLcZ?@BXvc4E+0S=TUA#6T>V?%Pp0B(J%+j$cld^w0()pnMaaTkQa5Wge4b<1M zR;tNfNQfXP(4rd^hkC-QI6SAp{8=WkNfLF9YGKqb1b?M>!@301^u=GEq?xW(Z>Ara9 zo49q1HCqv;?<9{?oQ9pa$h(At@b{G!RAgs#fA%3u+)G2iz*Q!*SL*7K-!}HXr8`Za zR8Nz&gOw4Dy?9x3pL$5oY2BqN)RT4P?Pllz%0Fn1S$)6LBgCiX5(b%4lf*f0aPHf47}A-=slhN*BcjSn?5A)C~OBC?jO?iPwQHFGM!}AJ4qOt zm5{6$yb0C`y09J-Oab(0CUI|TJnvPkQj|v=YP2%TOv28?GkhYW+N1`qF%rOT zHEHG7#=zXRE8Wt=(s)cO&B|K1LPplvqW_}9h1*PtK(O7qa_D&RKbk9Z6_6231mtQe znX1~$PLp!b7!xPZQ_U%JR(KkCzNLIgK1HxT_M~#0Yf7v|h+h5|=XYoVyN}ue0!vl3 zmZHXiigM4S@73t6++O9vv&g4_90# zaTZ!z91$0)?&)W^KzoVnxNMReC?P&4n~KW*w)Iz30u3&?903?HRn{qijf zPn0^3%MqZd@_nKnHvGWcpu2@C#Fr5YLdLgmB@WODox2f5^bY8Wj@XShm~T7HeP5=G z7g6*5`%v+cvN?fZ9A7w02m+9szh8U*_)k>(Rxpmm^8gO!XuL>-jnJ}+1zXUMB@-XA#zFyOC;_j z6$_TxFUK~@(_)C?XV-|R3X7xg0fU?IVJR=l7sc-(xW1h`CSbth5d>=lSKaa762<9J zy8v>4EsJZr91o08N@3HVQCbwy-gdmLDGam6sao=Yhrd1n>=3$H3x{6;mvK+{JAx9* ziLs1@Go6pgJ#i5#Qy{2_KGg7n$8b`|Qi)Y0sZb1}uNNvC9?y|Dci{Yp%O!mmirYZ| z)SA(6EVmv$C`A;h?Uu(k5m@xS%;%d4uN(V0O-oOEqZ1!xO79%Z+HXB%)1`s`#JXja zk6o0Pbjejkz8Xf?FvGVws+%W>whnp-UF~>eaqlAqB8uexpSXICh_lz5+-J#GP#mja7%qreUHAl(BU9LV z#;m9k9~jr<6Zbu(`K`CQbQ3|3=d+vzAL^f z-bXKtj5#_xg8z|cFwM3Wbj9sk-Q0s>)zA2wtk=Fx=$yo!jaOr^CzmJFR#qMmo`g?9 zB-A~hBHosYTrQYE^R8g78|h`00pu&E2epS#)#|8kj!=&A^8|D_h{=6UU0#?T+#6q5 znr4AuM2RXx=hB}ks z^ID!V;b$c`b)pA#CHa!9$I5YvBVE!V`kq{fdkHb!<|jrs{&mJ55$06r)!^{z%c?Dy z^gTGL=*7h1e+X%YO zUh^z{tjG9RIfwCH#kD`$R*m|)*|twv%3ZJLbmaG(e{!hG`}TLQvPoc~i#KvF);@%4 zp54oNq~&s= z7*WT_Ki3kB%vRwE?^MQwX#R|lKL`)#-I7~5j13Car|Rb7pWoqj^d@#zTC)b=!Du5( z_F1UKh+luGegiMWGx&9i^}&7^bCQd?H+`5L6>3`D$14erhh1@rw}b?w<4bs1?7$95 ztd3NVIp@&6>q%X4C4vsW?9{y4sT-|L1e=L{|2=M?Sq5LM_fid#H$6HTu2A#W= zNnyB;3gcVTLfBQTa|`LncQSC0fX>_Nw5dj;d)Ja{3c&zykD+Y3Q#*FgEVI9f;hr$2 zYRQ+oascO-{Tx=AJk$`btbl3rD491sVQ0$koi=ty49?ga8bxW%^S7ADpQC#0S(65X zkIWS3K#v@mT(&VT(DI;wRHhMwY%fjT(7j)K$Ki4s7mn@(RBpbDaGlJh)-bEzus>u zK?+=ueM9g>%~>o|pe1NHF!ESnO4QR2_ck8P=y086Q{V;ng?IQULk?UWp4 zbysZ6OzGeI@`CjPRlfQf^O-AD$0N%~r%-g^UcX!7XP3_;_#QN-w8lc%N$8xdWv5%| zRvv#gRjyOn{}oLCWi-xrb3QdJ+GWzg13u@6;FgbF!*^WP7EtI?tAepCAgPOAINA@N ztL!VJdRF8274fx6*degHxUEZ;j=^SouT2-GmQG4OllVRd6E z`%;63k*v>Sgh!)mmG3&1F$d$j`=*z(h(;=3#X8BAo~vjr3V*~*X^dakb!;^=aJ<7U ztvR-A1!nWO!yw?khm;dRK7c}i7{u~=)~)BO*m+pdPb*NNy1@x(+g4ljY~x(nI(*IN zWzx#lpd`QV^NW9FMAkqH>*Tz>h&)}FuV42I=DdRvmc!p-=*d^FFm~EwoD9SHa5{+3Nvnp) z?iu-u8{k&3lV}fe&lW)lCGglqtNHGzY$JPNb|R=rI0?by4~-7TO+5P^fGzrC)?tr% zhcyLJ&DHEPb(SIK%~nfpNJ(OZ>%OAWA9A-k@}aTb>Al0US#H6BZSsg<@ z`eAxg7fkk2k;d%?hok?s-{}95tZ4I2Izmr&QdtaO2x? z+mkWO;5ag3Lbu|>VH z=7a0Oxg{-{amjWVa0z;rki-%@@GBK;^~2@ihXZ|@Bj!DYGjSr3Ji7K}?|bjugShT> z%9(Gme5It15mIQ_^}mlRwxt#jLS$g{=aj?D1!*kX2wZO?>1 zmn-$jw1w!H3n9E`L79SDGLreD2soHZ$T>`rbeGY}Aui3MayBxN72nn#5bNmy+P!S8 z!*i2Nl&rAmwQU^!O#|_4isnhp&M}A_^*ZM4__O+Ir3e5*OecR?x~t)-q%0CkoNABn zJMZ*RiS?uiMaia#lBl7;4g-IuOAiiPS?&JRx5*Un{)?-6twA757h*_uprm7)@O2h0(?2OOv1esG=cjqN?g7jeT+t%x$%k3 zz`eK*55|`5KrV*8_u87J7@sf`Pj}+M=|XA>oV}R`o&COW-^u5IF0SRQfad;Hx0^L9 zNeSjzq=I7Mv5}IL=opt&Kxbv1uGwkUtjyQl)V)6LpsX5WO|obTSn_b#e4g*CTr-l_ z{SBvlS+@wKVOWS4QGc0NL))HdF5hy+Bgtw-J2seo`w;xMk$ZZ4rOzVBkK^FQIy8k> z)XCK%2Q4ZiARoX9?C;VAOxEWDn`KicHhvl5E8 zQH-H25N$9@*g_f$0|vJV`Thc)#1UY2ba#Y{&53SSk%`73<{69gj{3R&3NT9sye**^ zW8d0F5}jP-IZX)__YN^cT2w92c~gz2AQSi)y(;HL*<=n~=-&D7H^I15C&+2xN-$ml zOaFxC$<1qQ-%a2_4RSx3lya`LUXr>RhIDPw^yc-ueN3O|fro@LukZVhI?t3ze~J36 z6aEx`8ReKQj{>)dVZZ6-WrNof)*q0x9N@M}3%t6S^mT8)%Vu<>j|$=v6EP`dHNV$4 zp$cclq1n&(Sz_h~8j zLeS+pvo^JvJbD*tN2udMDB$kJ>$hSIs&uX3az}q5$)6t`?ou7jHjjKCd20|!;`#+-_++UBxkQ@R|C#&-F^u7gWCrV{|S>Gai6-x zJ{-5Y8XSUGD$CFRm3}_`l@VK*-z#)V4OWK)?Cot*KL6BScx%5P?^Kk^g;UjC6&h9F zd+_VzPNZXi+}sks@W5K&wgJ@-aB<_U=UD?+w-eo@Ol%>0(vItpVR)s~6H(7jIi6z} z*uo`-d)|R)e4dF&dKyf3))yQ;-g${>r$qmKy*ca{HE})u{5bA0aNA-lK7+DwTDkGE zqJY&jme-XgoI++b@iuF&=gjRJ%$73&b>i8PfM&qvIh{(QT9 zkKwC$-*YfW=8|(+#Wo8zfR{TDLIA{lKKp(C(|#3t1!6%yJ^U#u;Ea9l^>+h@YPZPI z+iv#9?)LmQMY8~x3Fg~;zwl@oEQ92iXmffP<(8YsaeUT2##1NdZQ{$Q9~!wo|1W0KGLHG8`BWNP|LmkC_u{gZgbrP_Xc_(3pwvbZe zvJ{_+$sx4#FIcb#_=_t@rj@lvX6MD^)X~cWz++>wlX*Ni$MfQ75WU?D`1fO7|EvC- zy>2%ZMlmV5h-RxUdMdf0zC(ejnmoPioLs`5bfui4pVU`K^SQKz%#vcf=cF)_Uv~lL zFMS9dmuXKEE9&`6)Kw%HRF1EZau)4h7&`mqa9EMd<}RW&7h|L(RW5$BLk?B5|{TBH#hrPc3?)TMIQrtzI)=;q+!YbuHEAKR&F$kv6z$8#7_AWR0 zo0iu=>8n^737&1^c{tD$0@ZgHj*eP`K`Il*tUYcbmx;@mgAQiEi3GaGxfwvl$H^`t z5!J<`Z2pLfRG!)L>ha523uG9w$nt^~)mkjfmGsimvi|#r^&{in=q`LLpLQaHzD_|s%G3Ocke9F73>{Wn(0rMyY53E5(0qcui-q= zGh(nZl~vd1qbKHs-et&LhWaBC(kiqpkcA@+Xue?oZmEgmTOYuSK#L^ie6rue&nR9T zz9uI4+kD;|z)?81xNl4&=F_w;XOxmjbAvfD!x1*+PR`-jGMnXM>iHt`F&WZYcLI^B zu)FFo3*|&LEle;P8h;quqr|4d85=Du(&C48A0pq%{h9tf9QLsCWP_dU5d+l^p5qwcSeC+Y#UVB zR`X$l-85U&{JeY>Ov2BdFnPQ|OC4KSIsNlNHqTPpb3OP1Up8@D%IMN#I?G4vCG3Bq zG)Ohx>2NLsE@SRnc51)lZLt(#LR6#{^?)WOpKeQR*F z(FqC{L=KH6`bELf?kSZuFdQnP`$Dn&QKgeorrxAJAGwnbz-Ai%9UR>de&3y2m-PGV z*@#Mo%Df#;-NjmNCrx`r>?li`*XtemwS@hVq{6FHZyLSc;w4SbVfmk!{zPN)Ij?0u z2Cfe|U;n6VXvN0iZxpIFubJl9F0?ykW)aGPxY+gcZ$y;cgq<=|28H<~&gy+pe_aIv}f_Vy`>cF#Z-G#i`H@m;CXmXiVq*+HnNXj{vrI?L5dI|ct zZ6eJOs@bQiYa*}NlV{So5H5;GT~)irVXO@D_j9PR>*v37m3XzUrG-5GO}c*^W?t;H5aF=N5sJpKz0Gt)75%REo`E-5R?;)c7$(6pzy$i{6B zPkr2@#fjX_U+oz=jR*?S04=w}A68nut(Pn9ZyduOu^Purh4Z%P)vr9uxDXasqN1CN z-KUDr)cb&Yq@VtU&8rM04=#ZD(W}@a8GA%;k+#WVa0Z^cm>Jd~iJSZSNYaB_HG*4kSto<|0rX1U={)rJq@!7Ui={Z^P}W@W>PM&Qi164b9$O)0 zJEJ=$-xl*1&974_@1k*Cz0?5 z7?62#kb=qTfX(lf+ier3-@(PFxa|QxT#;m}nHM*mRrY3}8rPCVd5!XW5EuQB^r!fa zK>$3*^wtf;)4NW}FSqZjb+(;vZI9feDyxrHZ94|tRB<5rN&iZFEkWSvVXWj{Di)b& zf<`lfugr>t1O8RT4L5VuKqPpULFwKtt1f)xS7o)9>2SL{W7z)mhZK41@43}X%?z8y z`XmX;2TRH0iMMQyvw=tNN?p^x>0GsQ4(jy8n7WZ#{h~JlR@1yOO zIiwC%?T4r&xYUz$tCo0k@?~cXH7ByJ#`(jBR4>{D(9r zH|c_qN4kkUsGgo?2S_TdNICmM`?^7goc1D3pa+lzf^j%AYIQF@2G-G{WO^F~PC0ZC zbybC`J;>|k=_@IRtyT{IR`yqVOufo5Qp~qa^qvdtR4zd0eFS=UqTZ+Woxg~VY8IWR ztL=Zq;&pt4Y)|YFJikzub8KCJ5d0Rl0d{N(?Y0#(WS+V@P`3~%^DgNGbEGpGwZ-po z(4!`Qppck~AM8iyA&;aLMR^(CSMYOqz!)8Z_RrcA-uFgz9i_H$#vOS!a-l^xBv);! zOTrF!UD>eo3lFM>wqX?Z_>1UPeW+|>EO3n#)hi@-T}!_QB50$MkQN5ijWqiG_zz=N zf`bVnSpd>|Ae*m3=<}cIwg<<04KKw8it}C-dJ_1ACihhI#e8WdUaGjZA`UJy?=H})RSEg$jQ9kInn~~D$OekxQwyFk)--e*%XbdiR&Wt3^e8}#_ z&6u=RB!-u<;?(=0W(s6G4`u~!Ul2^NDQBNl(5Dr}bIEy}9Gy;@SSBQuX$`U#y(Y9+ zcz0FJIr%P>qOAKBmJUlR>nOJkzN78UH05rM;CP;7GMVijciCo6e6$YrSv0>fX$iI5 z;g>z@oA2m&-LaC%iE+j`OLf+{mGEqzfJBE&l6 z4W6^#r1v+^J>pPEb0Jo&I#=>@ssz~meh#vKmeuFPRqhYfmj4tT$E{Q>2LRhLNzr zW!BgOfyQJAXCE<9fa=~xtFUiXMS_H-Q2A_V=LxQjN$;CU7Vhr5rk+>3t} zF#R(s;f=GkXDqRG`rBdtr}S9omj=L74WmfIuLPpkHF1dVtCv|XE<#BpMJU}|KJj7W zW9sVpu>U-}$=|pD2+W&aD%=t6o+R*}9l!`Eet$b3uiU~yGWI8TS$9P3lJBX1HSe44 zk?Io>!u$0my9DCq`DwLAhiTsLC&OGN@-haBou{!kWTG>pwLZx2x2d~bN6y-$m^y(NoVm=R^^E%Kr--)u0Mh!x&?epsI5H-j#GU@H9txVS%|pxsXdihh{Gd2$w?L}AR9}K=|DgT&!2kHgh!F2$7y2W# zyn^g0$I$k;m_~ZoQNNg|2tsz+3GGdfX?`i+Y$~x;pd|dqV}6nUO`88^W0?KCP}XtH zeZ55h9-no@8SY3F@W($^xoe+xZ1m~c;n_XFhAFNoHa_d}G4)HHhx@d^)entNEn%IQ zvn*7i(=bXOw4NV5nn#%*b5+LTid44OWQ#$8z2wBz6onb-*DL`ZZX(c>1JMVGn=Kkx2BYk)y7YMFbE zj^YECpB(KBL3n_~m}-Ae>C|8EH?{lgK~oZTX9F}~4#Er(n91i2a-+xy*2ly5ii2&@ zY$0N%_i6$A%0#l#j}!VVI((LSlyf8)sYE}Cg=&C+ldl0cCr{a8{}n3+#e;7qywFp- zcZ24`rgFK?0HDmho11bq0)uIoJIZIvP>aXj+*`ss<|TrkFO3TZrG_!0bpcmZPt)8# z%`YwATLc?g?fWD+cw4ieKZ!jJJl~2vMm)#sleIhoVmsM-7_`D2c>QY>aV*8 z|G*UiA7JH)To30y&p-qu!0h+baFk|qX;n^vCIuP_3gq4Hd?ha+1f+n{Y1=fhBR~kW zdey|A&qC87fV)RYHj)1jf52r+0I9Wte4L!3BUNZrg@;7_(jC->H=AN zu=jsyPcI4ArH<*bBWWJ5o1JHJ)T8FZ{sYSun^%5|xt>q0 z>}L_kPM)`DvVo^UJU?lUMaRx{eBd`M-jRgO%4@$wa`t40 z_O87@<>Q)RXiFuzq*|o>4bBX+WOMdQ-Uh~15DPh{k39hOq_?1h zXxQv&9G?5vcN6Y zdeF(sXXkQWSU8UFjjXgV)_aZA+Kb7gLP$ff%sZdsUAsv3A)rGnp6cSfe2FRV-_1Ug zJT9;w0ll(dlQepPNi)4r^Wu~3odk{+GVkF@kkP4d>i#)qpg^fG2qu2LHc+jBO_HZ(GWY2N z#9skYXL6N-_av;8np?aX&SGlEUVV6)-U5V%EZGJLcZvgR!cL=i4*Feuu~k3(waib9 z(93}xGAf36Ho)kFu8CJ?$qMJzCq;XV1 z{LQFwxpZzfGgyb`x^d4ff$w}T@UKHD7zKZ6Px+*68x06mYVr5Jg#Q)LMZSn5DO50AHGJ!PZ!vveKmdVCm}Q z%gi-7#arEVK1v0n{SSO%#RCyY#CfixXH_{ZbAS57sW^T?`A#9>F|0!qdYH=6q%1NN zaZKGeqHRyD%BeD>a-?2$TVOj??dvf7&c0}ir>M1Jw+Z5P%M$G3f`~H61xUCpO1cyF zjzAaEgFfkmI)?k(*{}G_)zmp9EW+sPenu@1l`ug63$n3!XNb;D%~mKa&C{Vf2A8h8 zOaCh3mq~dI>#ED@;|Z4^c5HCgb?fZt8|4QmFboG8{bn}Jc5pu1VCqv~JS3>G$=yL| zm}&{WBeyePyM&1tk?A8=b`j>f$mK}0WYYuAc7?U7aCJ#$t0@FFSgjEREk^4m>& zH3ct!Z_9u)P*5G2qe8hxxcbL?L{-s#ZnlQezo6z59maFg#vm#%nJvg#e2|DTq=cfR zTR?Y3MR?B9ez`Mb5>%G#>L5j=ojhMDup9cLzgZ($zkiPT_G+QLP~-YQgJ)ju3sJ0C zK?PEK-SNZ!&jR3=@$5Msd0nn`d^GmNU>C~T0MrH0y%U3s-=ql;6qv+|$Q^q|H%_1fmdhp<1KUNla# zTrkr+5Yb?G{;F`Jg$;LD|q^X8e`AxweHlfY7 zJd*6)U2u2=7<4*<5@$M5bJzH$ZmCxJO=q+Q!H1LYuyraeppPf-bMspu4SN6mHP{j1 zfQ2MPT# z;S%ZRlqU(LHo`v7Juf+u0H6e?wCw;G3Q4d{&yr8AITAIG)bPA0qZ)g()irU@Wwk)J z0ggDk5By5^xA(H};;?q>Z(V1Nabtd9K$*sd3sWPZr)C2N-7+q$c2jco`#DsneQWBA ziMaM+>*K}^ih8(GhNk(xF21rm8d1S@y!Au|-mQ5#oA+AT2Q~=Z3cC+r#z&~BUa$b;Fi`3L8Q$T@%|t=Ha?3rJ48!t-IoN*5NFdhS}vBtq*Vkni0aW z0+;RaoQjshmOnQu138_x(k5o<{tI6agzbWLe1+RXVz)0hdrcJ?J_XO3tsZUwQOo&+ zNxPE&lrQ=7&Y`CMy`k$Jd`|ut0WYnf&$_sGwpp90v}+17G03(u;DWapo2Omm2LNXO z4T-G`#``}4-NLJENNhHjyh+76IGQwlU|P{pu=U1@Md37_52=muQKY=^1lJwP&Md3= zHl}d{5szfQ8ZDbcZufY;$WrQ#R4?`7oaqZX)u1lM_kQZ1Ic0d_Qq8Yg`jYdTP-otW`oZ2Y5T`Vs@vP8*D{t#)tEh z+$~A8T%FT-M@M3Y^A>3#TRU)?tHx$+Zq@^Xm|o5%Rj#eOHX@bd8e7*39#7OSO3l|v zoaQ)5hZS9SzG z)d%sJgI`&=GK3f=Yy!muPi%nWAQB-+%UL6L+!WFq`;1-cMX6oC6vF|9gutlk&D69` zsY05cf5lvKQrt&8`yDS0*WWI5MblF}%?omh&2j0(Zq+p;QX07rFq+y*51T8PlxS}8 zSCNgMF?y=Y5mxkn&Eo90^hgbPYXa}*w~yIP=&zW2WzDzne*gtR`o5zQfQ!y8&~oj@ zargN>$zJC(4TH(>Qh3^0YCiIe$Sn<$n$yOf)B_%4@M}m6FyqV^p0lct{$bd*F1{tt z!2B2Sqh|scIpMva&5aoPQgTz$a;Prua+YFX(asXHVL2WlV_!5z^Tmu4GBBR8FNQpo z^QBodViQ`M>x4_=wp^V#Ul1Uq}_UgtWX%Nq5I2qeuG6 zk0>R>+!^5a<5~Uq1doxhE=MyDfCBCESQ=--roc16=8r1!*&64MpYJK%zlKf zpCTINoOmXRfBxfX&H}4q(v1ON3uYSF53UT`AXlRlTBMUPAXx#~XdCbV{V<|avos4g z_>Hjz=7C`&FO~trX5ehAU3P5lXW{&FIeE5$1Vgi}*fLVv%!9{()RSyKo@{AY0%S9c z0K_w7Z*EI(c_IObpJ6vDHp2|otrk8qBAMA1WHSt-0WijD=fn?ew&m3NRReJXBxAxE zwg{$2)Le-H6gV>syO~k=>^_OHky|z{lCL@kmUFbNOXYjSIwOSYtx*@r5!SADEm0LR z+W-o87lCW`RaXhFxGwhFO-t#1zgM zU@#1$SVn;v!#vI#=z_`Kb~!iwH!+_%p5uE#%~d>ce)yE#Px$t6n3zrXwj9BlIQC-< z-9%+3hM`B-e>X&V!3Z;}#aqb_efL?C+L<$iAP4Te8Ae-2<+hGao;mex7r9TeK0j=+ zc}iq?WaH^KUl8E>>U@Nv2D}=m4ArR=xl@yim@tFHW<&+tPZom#`@Kzmvt?Ts=Q{6A z8pBzo#lrYaC4Lc1O9Bjqtjs(EMou{ogHx>YRqUu;dD#4YWuQxK0TEL-nQSr` z@Ec}bg2B)uQO##e$f(LNL)tZqB8;bxe;y-1;5>3Ekge)oPucPY1{i#HOI1iD3#0qI z${riIXVxiGV&>7SNWi2UFoVBqmL8rde}#QuY-gmv?myd@XY*o>`U7u^q4T=r6pZQT z#i+YD9Rv~szZr8+mcx>W=OT$S?Ha=vlz=r~!~;uY$bw(JU;+d4Z;9~tRroFa&F>Pj zOyNcT=XXBGr=Ws0PP3ef$JOlh=UKXMwOe!V8@}SBB8(E}-G{{4!3VxQ_ZJ_5y_6NQ zadrdXyC3EN?n>{475`HEiXMrC>!B1Lx$9KjTC+D@Z$@?sD@r)cMm*|rSfy}fJ2F|s z=A3jBg_*Mt8@8z41%q6TUZ$uN=)vd>i+shbHe}yK^4jGDCP|>BbY~@t(sOq{&f10i438P6QwGEAAjB$Rlzfm3XQUj> zS75fKdbRgrnfg{YG*(DmoxqDBFLibn2pNX9J7tH<(^;(j4`z;*@(f5uml+u2dHI~4T!9`LKlDRC$lSa_rcJKZpfA$xhn9BvQ%>Kj*EEY7yVcIpnJVs zCiX_+d;k8hvT+h%?oEW#&;g!qxn+2s2@Fsnj*Q=p4?h@2v8!Je!ZgRw)fGIpR@nN% zAN)a`l(c7cc8`WE@SPOAaI-8Max0{-RLJNE%m5967>o?Zq*7&exb!$L9X`_!Z1`{$ z;t4lfmSvOF5>Eh)V&s%1NfR<#d2|whr0S)X_yMm5T5PJ2NEGoQH^K=4^PPHM9B^XB zAmprGtw7~V9F@vqDP5|Db2U(b0nl#-UUxrub{Af;-FeOIZk+WKQa^P`XN1&{ZsQ}H zgEJn7CA;Q32wA!bZLM?Z2u=nt!};=aUJ+wg6&^|CjN!Q$0sxN|KZORE`AJH?nDM^O zXZjS>2*aNX|Hg0pMvXJBbos11weP+a9`UlfA8y8Xe8+cu(HDJ@*QIxv*9ZR*oX7L; zSJVEipY^l;=|BCa3Zc*?n;X1E(Fx<(_*ehxU;WBo`70U1|JVQeU;VYo4SZ#J)(0W@ zW&aa@;!pgdU-XM~60#TfMK*eRi~W&5@<;k(L#{86kik!HQMs?4qR;xQ&-x30;V*p7 z=X?&N67(lMt13|i>V`id_Pc-g@AmfsdC23ra>O0McYW7)5ugxDQ9?$~(fIK{{>S_K ze|kuOK~<@bNQX;5^55}0en)M=ujJ|#J0ZiMx_|p`|E)i!V;2$tSc*ZeMi<~0{DNQb zr~mYycCte74AqLvRv^q@|LcEUKiwiwesi`*A`r_k3Lhe*m1i@txoKo&IvFN_A5Cj#$UeTIvw}B~gEQ6u<|A<1qB0 z(|nSK{MEnuSHJtazZ;?Z<5`eMQX_KyH4FV8`p}1XI$tw@8_2)H#&)m%&fobv|MP$T zPX-L6s{0CQFsq@)kA3W8Zax8+yEcsUY+}~HXS1L0Q_x9kmOr^S_20M1r|OsPI~a%U z2tVvnNwGc!Kl#Z|dIhLmF2)KQ`^Yd`R}2Dt zI1xjJxx0JBM-D(hdf4>nfGxHVhEXgJX5uX|tGaTgMTM+UJa%zv=BGdXX-1eq#yoR= zFiFc5!vHn|Iq@(b{pd&ip*!!F{&fz+Anh7ekr;pf%*)7!%}s5$|4k4-j1bFa*?IVN zLo>hSTfPOS+Bq5g!@nBs@-Pe}2pKD8wafCUPkriJzx7*j8o*trU=urrkT3nxFLhxU zPF6_i%sl4FC`5CJ_w^7?;$vp4{V7p%S^m_Y`cnYdBKIzEJzR3ju#vE7g( z|MPnu+xI&v?#NvcCsgC6Wk=(VoDYT(;|%;49FD=kP-S2nB^xumuXMa<96zKGNKQs} z__4cEmfqJr5AbInfnp)Ij4jXf@EbZw%se^ta9-rG1?-W4htdCxYB}bDM+;`y)ur{7 zw`NIsg?oe$YAi#zjAwP>)FN3JVOpNy?b6U6S8@=(ycIhP^aw20+%nlT^rWR~RSsa> z#@$S9F))v98SFS?4p};l>WyRBPGC0vqO>#y^=1!p3}9OXxS~_z zyl%k889A`*?!Q0-bNv~@&A_ZcBwl2;^j{*i3~k0#VHbuIEq*uOryz#8s~i6ZW~q~^ zc5o`vjcLeMVCUEz%>2maOfCiu$j#2k(((03mXR1+tE6HbQyN4u;#py1cNscd=L>Ac z8EtIr46}cJ*BKfJFodI$We8up@l2nBJ^Wgu3w0#V)L#c%*1p*qW5tZ~0Y)d}Y$nnA zN;(qK?7@a{a=kTrLlu=OR3i@_iOV4cCs>IFu%#Fo_w{$nyND&laLi>3rmc2UKEk%V zvn1G+_1WJmY-6@;I8Z6r0&!-y9IDMo52r36k7vWo62Oz(%Tz9YS=7!MhR)K};i|L6 z2`@z-4{UkElyN#B1-zFvWKpBA6zd$1&tpzEfeZsaZ7VW+{8D#hBuQ-~CRnx^9*k2b z=`j;#8NNyjF^7jCz)T4kqj_K%rATTvzojwDEyR)-yAd)-;*?@jGJ!DZLCZpw0bEb_47<;FHLF?ihDMutn$@ZM=Facgx+D9vcuTr&b*-Ir zH)*{nqKv5mn`L-&@7Abpfj7vOllO`tPmfdShcsw48cr|`k7OE)J!Xa04zwRT`b4&j+`OZnne zupZooFC&2C?wMluJPs0OYxvOvd~|k&#BSlkJjP1_&-W=fnrcl|(bsZz$CLDRceV!n zghuHu5~cybVE3G}1CMbr_UOcL$B-+qwJlPtoaE%*u6`m zo>u3RXFMKR9*G+CuOD4w+qE^}W32UZM#3;`_0D1N=UMUhvY+)+aMN1x$*sb*B;d+h zVL9(r;Y-1rsv{mCj5#sQ9m6WG*t>Wp3vlG)d6;oby7IJpQ^uta?}@d07d=B#pxK2k zaJJU$kF=QL({OtHnbgco%M-0qS2rHQU^mh^h+vvB?q zJjNC9aqCR^!`P1e_w^j}@(}4hHxTj|mTX%_S;n}Mbi+i&$%ySr?Def@{S;iK9M$KU zQmbtZdDZq=#*qq;yb(!K_A!>ft)uMWDe4$|3|T#Av@2${;axi)8;!mlvC1N`p@jxHcliwQZpLD z8S~A$B>+#f>{)WM&(alg1u%rAnC0ZU$h_{}E5+~+?MlUYQ`mc>H&$aQO+D{`~X zFe}f5aKazAcp8uZYUw@8+5bEH-v0alIv3JxYqduYe|9rMZ873E7sw<0IEp&@i#qyw zE{0TyEo1#8vz(BPvn{);Kik&o90tadjEx-Ucrw=cO2%MyJ9|D#r@AZQ>(;U4b$7K( z#IuF088_Q<^IR;DbA?T!HTzv`Bomvl(#F8EIa^NPT@t+%b9Xk#P0vfo-(HP^Q)Y-35BeIYrUd+%#pxMy7k##@preM?^BR&V^y}6lwDuK%mv+|R)#0E zrP~s%OY#D6W}D|2M(`SPcWw8Lsx!m?((tvDf%A+%Dq9=#q}YrNrWI=}d&U-cmnCxH zkZTsUES$F3278X6WxM7X<7cd#o87Xg)gGQJ2K;0>gLO|J8!K$}Byw%0-2t<=MD4B& zgWr%ta?vQS*|-Sc9A-Ayq`nP$zqg4QK!j^-fXQMBvpq+HA7k)GBTR|5-8Fo*M^&vZ zY6WaOuVT5Sv%FZs)24paDTaTmZmQsKYmQ*u8hd!gvl?~{JZAn|$`_AG{uO*j`#C-Z z6FRy_{YcDXxxVRUS70{SAZPdSMzkCAB#plZ)eJ^tVDknWG5n1@A$bPyNaITCBQwG4 zi+Ci>*J249PKL4Zz??bx>&cWn#zu0-tCJ1cDJ%a7zV2D6j>vZLXAF2e6JjgD=G7Q` zkYltZkZhw8O3~IJ$FLh9&ycUq0W$y^8=$4F6?}JFc(EJp-5JvMU>Rq5&nh~@-%Icn z@bEKeXb$gK`mb1)iZY+V9NNifSbWMUcl&0*qS0e7)i^3`5rS3kR@bYU#B$7nfv zGI9!;-FSvXD{c?r<{4+$-8vI;@P%XBj1@Myat?UK2oJV8?`W6$j^GV8Ng2jts5a(1 zE+xGq@{X{TFuU2wPLsRa9y(i8P5h4E?vI^M(-4K{8UF zX978K%F9sx`U-oY?7jafg(LI2&&}I}KhApYt(o93PC1mHtGtOb& zjJn5JH}GU^v9q*0fTE;h0JK%coIOx<`l-tKDNL|cx!AyFej)QCn8YXq;L1QNswxtn zfC-spJ&^@CWcD1vAd9V>iXG1wtABDa@~=%;cQ<=rln8X>)W5u=(NZA=$_=%d(#O5f9)uX89##VhK~lhG_|w7=pXFJZ!&^ zw-el=0>c<+{gxT9j+i!q@Gy4Qz@k>qbsHWzS`9Sxzu&1XD(2>w(&`nYM%61zA!e1L z)kY~KiuTHtfb`nZ69o!Pe0TL?Atg0uRE|Vs@CZry?f%UYEmd|?C>?;^VB@!2h?#Pd z{H`K0a?ntbqOS5?s=AKBuUQU5YVDgx=BsM>RzfYMa0DDj&eQnXK5Nu)r zYS&5*W(fv>&|fofObq-2&+cMTD^GSB*4;d)IAsBoNY!jv>L*pkFs$Ln6nS7`Zl;zW zo26zlcwDyLl}D14gh$07KvkowLri}vGE!Wr~d|E>ys^~AH!Y$2Do8`5zsYnB-hn8-d(WzAv-{DM!C`R=J;)O z-OYoadU;lR09On=z8|82^6&rt@3+*YGx2!b31R^Ju_Ocj|Nh_q>)Rf^6K3$1kPg(Jx%u4B{oE2sQTSQ^MPYCg`reT(g(!G|tMcrNPFrVw{FpTa zr(286&oBgpZcbG7uWUK(~UfRm=!O?AJ&?90BaKS9TdL;(ilrd#j5l@ycn zXZ(zx@lD_KO+WU>{@5PWK2aw1;Ky@EgBZR8wGsOPNS5wM2jbVf?(0`PR#H-357z@r^NxX~^TF-}Ky{$|!U ze&aXh$Im~ojmnnPj#$;6a2GpIsy48t{)73Ga=-C6{ze$-1Ujs;1MtW-`dj{$zw%f7 zu_SE-mJR?9FvE~Bd|Nd9`9J^Xzxa#47@(5^V4n?~E(1b02htIDLoVX4QyoJ{a8uhcmJ-ZjF|MR*C{+h_E(o;4pfSpJ9>Mi_10tixBvFv z)^G*FSUNR_0&p)e?v+CnRierA!$17PZazY}U>Na(-I4z}J_XfJy*uZM|JVQeU%&Tz zzjwr4ynm_hvI4j?!aW%G?b>A7jFQTtUtjPAU!ZYvZJ2EdLx%4a{2{UJ;lY+L^OVD; zS(K2MUhW6fCDG@7-skyp(x3MvRf-?_p&!~bZ%Z#qUr&7g=YPIf_4?M~O5O^=>3d)A zntF8wZ_DQ&&Y$vAeu}*Kd8Qkik}EtR3tVB|5ndKNT56YJtcJj|bdy~bVVW`6sx%(A z^g|!|P@ih)pTMKhYm~pkMRMf|(X9EJA{D76!5ODqN+23oNg*k<1qxM^S=vE2k*VqAHJq0(pof+;bR;ayp~ z6_S#57E+DyVEB0e>cCOkT!rJ-ndesZ3)yI?8YRb&@{;5qb!%qVXnHsTR*xDDNKR3+ zHT>gYAeY4}Ca~icQsF~Bfk#hUV%M!~PCVM^N=Q*-*)EBwQVjD;4QzFzTxKC=w9OtT zp5Z?u^v<<41;%p*?m?A8)F8=FV52}bqZ!!fn9Tg$y6{L0+0DgbM(7zyKj&-(IL0ZN85lzK;sy7=D7&wtp9o#Ksop$;jxr`Vn@=&EMNf! zmZx{u8O$(U|eQRR>Gm=VlayBdb`2fmyd= z?uaon%w=@wljXYc;%ze28LOJ>@psuJbOBvYiLciI(k#$mx3pzxZh7T--m=_riM*DUWfENphp+AFCrs>wp9QW@=9C6p;CO~7 zLx18wqkVvX`Y(31W$bPY=V+^B%fzI%nKQqr@vNO$Qw;NFtam0h^M*NkM(vhjkQvP| za|EmYH4CIce1@&N+_wS4vm+d1<$stR)ew%craLAb*w&m)gI)D{MXY|YwP>8{GP{pJ z0O14MjOjCD^sM%Vf7r4tbGRK}&W91c2~nfJzOBpcu$Ty(yf zoq4^gUd6e*`xJb=XZi%$U&Xa}0$Fbl#k&T+J!kbyO1CSqEuTrmyEKOmyrP46_bGVj z^jqk7MVI3(?8H0C?>g|r9eDR}J#j-HO84px;@zj^<<(u0H=xkxkgzuM zIr6>B@s@PJ#dvo&-h{JybqDe8Q}BW3``SNs9`j^ACia2-dP~CY)tOiKSiU9Q`oPM3 zo|E+sdF`)}x9$jE#nC*+PfEOXjsD;Xexn|?vrn4WC6b=|rd~_PzAwXDbjQ|WSJ@xn zlGie`A8<*IB;#3Imwndc33+F%9eCPyz55hgd;1dmXY=nd(>dK1{j(>^H|**GP7Lptzg%6RgFm@;4di>RNZxjF6IKLphw^`jVr z+YCrQ`Q#^)`jMCI$3cK^$=*LyoREH=gI|;%U+rf*_>V)l-xUIB_9N<+_zj*_#!b{xm2KI_ zK68l85pn{Zcv8*7KOR?zjnhdnIq%4?2! zT>|)#e{)-fp9ug15N;lfpSvIXjs~8KL%3_NGb=x2f+OF=a{>rqIJGc585fu9)=O>a zV4C}>J2rV2$Hk(qI3qzDvqW8?l-e|vm{KN!!|OW%}5os3Slc@UU_Y;O43ag7|bILGU(|`C{!}eksX=K8^Bq(a>5gK1oMRNGOPVY_xZ1K zzQ~YM)Y-1jZ~EOdfSwm67#H!>qH#Y(llIT2)YwuRqQdc5{7x4raVwWM8a9_cnJ&!nrtW=gq=L&cd zTh$kNbem?%Jp$9EE6txRheftxuQXG}ddMhHqK-H*qslJ3IVWK-@Ix}-V$JaS9A`aD zQuYcPJKC0Y{w4vhg<>4Go54Vlpou&hV4Or4@gm6+m_NfVHnUsRyT;Ox1>pZ@@BV(Z zZMS>={{=*~BBibMtd<~YC87x0uGWv0hz-J~Rul=buvK=@q&5%<65SMp4L>#ziO5n` z39U-~h*n5w*6NBDX&NFnZG6A4Ip6m)p5r;s^Sb6Wf8O)H*L7?hYaHYFj4?iA9OF38 zYu@Xb^CE0!hO#QL{s6fu=LB-xj!=|mojdQ!Vn&8$Xvd^PC;`Gt0g^^lJ)}-C1j|+a z6}IAR5*+{I$3-0`T49497(D{a{WWdGf{7JiZv_)2KKl#BokHh3Zb#t3UnuouH@Par z_#fB^{GbgG1~D2(yiagU?j_`h^RmE)x%$sbapMgVM%nR444JXrAZG~{Z5jf@vL3)C zLghL{+HzBROs`oSf=kd5lsMaRnPpaI!X3IDB|jWGATu%q5i8VSR-w47CYi}zNmIe= z3bu-GSRR5Ori{|YrznTsq^a{gtV)xu;W$oRVKwQbB*>OqrA~9`KN`Ul(^4Sg6rV#U z4^YbD&`Rj^b($2;w@SNZfxlWYIrN-TTmVCYm2v!UDACh^nZvM(6<6!=wcCsX!2kfx z#7wiYnppHzn~?J6`P=9f=x@w>oE2~5Z((>h{>~#DVZp~l}#3Af3r~{G{{f%YHEqCziX^Y5^+ezVDw6@#7$v8!n3#zh(jNt0aW* zwH5vN2&p}caSI=%1Yr64Gx@$^5Qb6;tIshc@Nf40a6j+o{XDs2PP0jH#ot#huJ<=G z-VIJ6jgRMtu28ilSyk#uC*L!VB%I}ow(s0keK6U_muxJyimx$Zs*n!i_&F3<^R;V*XO5#x>Hks0w<@=>y(F6di*i>7;#NH zFU*ZoM@$bUQ-WkMaVve%Sl^Ahk0LKyjtOmn;5&sqay0HNJh$+*94qt&K%i;)R9E9v z|G3wB*iGp&7FtJb_za~QObP^5EgmLPh z{NyJK<52=outAPsmqSb6tR#@!S=`Z~yUqP2=uPcps zi020%QU1^$`a}QWKl}&j@SraVhj{v$)mPm4J|HqmwIiNPB0RP=oLlsJfA8=0l`+yE z*kD!x9~ho}>)0ng@d@5UlrI4++ZBIbIfq#JW}-UHVOgH?EVSyGeJxbQhdgs$_z2<4 zCV%(u{@pr3uNq2v%Kv@&7yaA6{oB9eJH8|Sc|Jo)Nx$l=z6yCaTsQ(sNHWa!z8qG( z!&1OcfBMt^?Z5pu&Cpw)fBF?Ra_2b95l-=^_k~}+Z_k%=VcxSzO9(Nx8{vyz{Ngu! z!#8*_%dT)EY><|Y-ZlK!|N38d(4LsmVRg#CV*col{^(~u^BIPY6(uIx`xKrlPbyz| z=mO?h&@+5&{lP!@2VKUV-NG5Nrr(o)LX9Yg-khUv68(`M`H}J+=EG+WG!2;M_ptzH zHBlmkbzY~=S6Q@WKg{632{0#-nd7r08$N>n+F$!?xlLn+=fovtYY3Fk>~R13U;pbk zw1pKXlA_6jpft@iet1JZwzb)t&y3l_X-7DRDn0JV`vKM#7YRZV==b0>!2mpHqJER^ zhcDnX8{2%Y$!q{Gwv4>l_~3&N9FO8CV*HUGCaZ?rmh%R7m*(IHp8!@#9lz@>imW%7 zbtyUk|9*V&;NX@ARz+Wt$@H=H6!T)Br12&7d*)*s2d}8F{K~HcZg8@iB-=s;C7+$W z0>AKuFVKviLm@IfOtY3@Jbw<#Gv!OECN^rq8c__SMGx<3@9e62K*HR}AvK z@9PB4g;)WPksXltjhjoD!zG{MkBn>LCgK1lo&WJa{s-`x^X1mi(mo}45n{_$tqy5B z9bdfe=LaS-oyL1W-46ZVS1Dirs)S50o(`82d~6ZS!;S2H=CSkDU;WjYII@stqv#pt z#9XQE5_%GnH_pe_W5m-c@3EayD&Te z)MhuWmYKt757b!};BX$NTySK`u&$adhQiE}3;;j;vReJav{WXQE$0mNic4a59B%xt zex6(ww99}JKC+PShD<@D7w3>^rrhVb@mvV7LLB0e380uxst}aZB^xV%8bYJ=@WPGK zyg|;AD-Kz8OVejX-WYbQQx<@-h}ifXAuf}4Sj~DoKQzkkA!%pzfIY2kd`>al;Ih8CAymeSo@bd!= zt5dH)yPWgZX{s%ar4X#hFF%Af^iKpZ$IbE-6I(Jh0Q%H|Kif1}C38DU7{hWjAz{WO zyqdtMDtsR)GO0-dkBKdM%epSBSfvSBl;)}P2yd=BGrnl!!7|3V*vz~Stf*#ej6oJ} zmV}%OWQ%i!4l`CGz-W|e0S4SFaP{_*GM-ZzvSh2(84k60HJnAp)0Rv-(hy%Vi8(&OABR+hCh69VC5G2!&va z)uAD!=Z{@Ta);GfuS`a6D_5*|{^$d5dmM!xVT@M+-C2g*;8y_Tx+E8ORgSj=S&e2q zZ}6Mt;GbM5P;+E9CEi3FV#9m`*ervo2}5UNsRIZb*t!f!GkiMK6*F=evn~fie%hTM z19A-~It`31U|U{+r~Hq3o>xCZU@x%hBWIy=(!2-XS5v;M*7iQ*Wa>l6t?7?Y@+dQYX0q?nO0QXv+$~Py&yr3<|gp%ConZWAs z;%qp#JXG?q(euC0NF@d8#TJzv$?u^uPbnU3%=LK zdrj_Ifolb>6?m^JuznbNSfbar;KS;6wYpZ|T7jpp!1YJEr?2VN<6RZFz6I~9&~^V> zfolbxr~;dh?dv;_ye^+8;IW$*3v?X*s(ob@_~^e8ePzV1bgmV6Q-M>@tj#0!TCZ19 zfqR|H=5Sl`K)9Em3v+)aw--i#7;ICbaq=AX8Rze)@UZi}{w(;89`}{@wF2*C1M0gqJb+g zhrasU$coP)D=BCggEDLP})7B0sR`?cK_2Fv*rPXqcFbPB03Wf3cj} zJR-)hKxP0VeY9KNyajFZ>koNMKK>3!k;c(g*jJ!qXx{89ZlzD(6JdjS4NK&sF>LD< zjf-<1iFzF9jhhboFfXudn=Lh;Kk)+qUn8AK5J12ABY`lYFhA38Lik&PX3nuHG=UR? z(oAWbiTH$D!tqvp1eLG(4F4w#{c2q~of#_A!$?i0Eb}<-n1Jgm8Ik)u0aGz)&S$FA z_;C=B{-gszpgfxscu272BUgWpl7GXNM;zP3!OAY5S_@JvvZT&adcIvGRVJ#UAmi?I z(MCCm07$Sub0P7r$rR*CNFsm_pVdSZ8U*&vVT|E6@2CC{l`SUCd)rf*8;>8}be?a| z^Ucq4n6NtkCq9^D9^snd#=Z@W!V9hXI{04Kr>I=@`wHBi&YKg`AF5irbeHCb?7iV@ z)6`hz`Wrpu$ue38y`@>s(>eaqZu#!Sr zIfJ9I_xvzTfjZ(I-%@tg5A*guS*eWSXnM?57Dr)8KgUFtbw>oFAADUv4=<-|*VdWm z4--RAGKBQTBJA<}7y<#q_*#P+&q-mj{&lL&5rEZ`D3Lo^No`;+wiH?la=}EJ$RlQ0 zHtbeRGgg#lm5eh(`X}U%K;cB`u~wZ&nJ_ax7@BFAU_v$zp7LHJKTO1RK<4~&8=nb% z7(z3!tr?1Y^8p8xqsaMV-awVu9OybhmVe~P=-$nGt*Sn>!yqNW|G;1u)pr3qA z1lm18e3YJl00b-3$^vZ5_xbrIDedU*<=mh@t6L++gt?4p_g<>CF+>u2wbL) z&leQf?Xg1%<2`h$4t61b;V=A!`ct4zpD+$HTm$(g%OCr(AM1mQUCrFzEZvwCnnT|y z!Qs4Fg&X-4tLM{W;`n&dCcR0t+Mw`pWcNkDI>Y>lYJOxrNGB`jNl-a z!>v9Qd@Z|(hEn6;Yds{=Df7SttNRid=NWQNqcXlZ6(tTOUI?s&JM{0Hm~>-Li8}Mm zTd*?O_``qr5C7l~{-C?fg&2okuF5%sgw5GdYEWnYNB+nk`L6H!E*;=t6!X-nyv2If zMnj-PkjGgMe9O0di+{A#ufAMO6MN6?Go`6d+`51G5C5UBIN|MlvP|4bKD{qhrm_g9 zHHXP6Ab`?;|L_0(+rI7Fe(I-wN}~^r1l=2l$jt8Q{opV)L zn)T1${F{IC>%ac%`-#NTgHO3UVGOASBP*TZ1T`3d!zJH&Q?%LVKKD6p`(j8A8ET=m zXxz3W{FndoUo`W4N1#(18I$-7xEBU8&eSeG5p&S1{}+?pk-z+x|MH*vbAL`TF}K7p zO3^EYvLG9u{p@Fd)vx+hG+pGZs{G?=s{`jebJ&y3Y^hMIb2M5ySzqqh7wtM(ur7-% z0Opv;W3u{L93KJ;8^YmdAhriiJhxr@ylCO!nqQ$e3Z-f`4lZJdaIMHwXbJDj8 zyJ*g$5PK62ecsZ*H3p=^@*&mJlLv!IGtXp{_^*e}w&=ZL+ui$rZcT0G$&45>{i}== zJYg(L3b&z0@a25Kh=Enr5_uA;9Z+9!>{g;77FIbIy<)CQ7zAjXlw(p}=UZX#MX4M! zG#mMh0Jr#fWLZ`myHl14q#Geyk}G{Q0ZFSKc=s4d9OzN>5)_!?_jE1eOEPZ|wom^XLDFbM8c!n1UQsmKNmCuBY1d$4?lK(0M(IjpqAkrr zG_$2ajHYT2{*(ZGYU^J5sv$c}@`*!C?&arw0#}pfj=m4pawIq`B{FO|EHHgyo(d?Y zey~MDum!vV21%%Az+f!30k?iAq#0OSmIR|8899WsBpA0lA3aZL;LUkXaKx0Jt)(#j zUsAx?1KBKSIg({V85+iLbxETPxWQ_-$gPOZ~)#N-IX0l-i+vnPY-0AK_F zr%%Syt~uC++&VRe@P*(x*{m|L5~z0CyUmuq(1bVt>`*dhtb|t8`bEehYoM6|m zYgt)5Mgr4#9?j{HM=uvv0FzX*Ibrl0ArG2?d0Qio?RY2z0tRrll$PWSHCS8b5 z7-1q7w|RC~(XGUG@`{End6ga6a7Qv6wvXf{P##1{Hb;YAL~~>U zm{ayv&K3Z98f>$oF(A$3C-9iq?F2`|Ng7)Q+k&dkYP*+jf_<3C&08>Is#`xFJtg;+ zX~42N1$e*p6>3T`rF^%t?huFboasItnpL^VQ-m?6*#joZ!-SjgA0Ojqt{Dvu4cGx( zg(s|l@~+-2H>DoHURVvut8H>8yn&rxZlVX?c&6+r9N2CE%jA8Cp34Dd&d(l9!_T4q zk;;ZBoreoA=r7POta=vuC? z+(TpdL;aVU^1?HCh2=VIAn6R%Q>hKWS;J@*gEBo$qvhlKfpZRT-EUhir8&UkV_iKQ zR-g*oQs)6Ak7kyuz%Z-52QXvwVC2S_OsrLa2{6iyhTFCh`teQ|dAQw#{IFyDalsNe z4+&}Z^Mrc=LG&Te<(i=MQ>9T7ZY@4KoyjOn-d6mR%Mn}Mu0i8Gn!u4Xr=Q)`$;g?^ zGGRHA$j;%l3UJJLh}#{Im?$3 z)}X_44V`j*K3qt?l(`yVjkSijm%M!oa+==>vv+r9YY%?EHA^@ zG3c#SH-y_Ng@F-9&b)b)dk$^w^%rVZ^W-A-wC!KH=-cWCL~5|<6+g0vRJE!+1lXO zW%A8i&`_!Il4i3^`K39pZ8W{OFU6+lkby(4^4|6(H8D9n-yuoZ0M;dWT@HCxMoWN^ z2k*P}W3mUF*PQZy%IztAQP$nkKjr^CtNrfkdB3}AifB$?m~Bh* zMzh);%J5mOyZIc=x(t7~HA=#pw;*YLKF!NM*lPBrDR+2l?iKog~iwJv4;M|fnotNEq^>Ys+t5$sDHrg_~Z8|&^kPiYBY zp5*{G!uVPBhsq70Wl`3xRTjOU`8H$@{SVavpLf0nx>Me`5-Sb_gZV5&&a$nPMG1dr z#3unv+zIN_h8sGZ0W4>ppc#UV2V0xvfS*>lc?*gf#pVK>3BL!&du9K$EMJ?qeR1BQ z+=u)Kd-8Lj^Vz6FuUnc&&-Mj@yxgs}mm{D40I2r=CvkY%;wDsX?dkU-J za2r<%D`sMGNN?VNAFzxY!+f6ia4Kj_PVJue`Bb~2dp?v7nOk!sIg;cNo+|X^e%}25 zf(&r=tCS3%dmTPXMS6f056 zXL=t9$N$a0xZnPHwoZ_S&^%@DWGx|O(Me@a8Eq!U$Y3({>*~OiJkXd2uo{xHwVQC` z>vS^&|Utb;3L`tu)X$fDia)ovAz9yyY$hnJDplvfVv%@`W}J})8KD-zF& zvnPB?zehfyCT?b(+7;!Zp+5#Nv-xX!Y zgr!@Tb{zN z;MX84zRGJM2d8Zehc#JH4#_f-uZJ%yOS=sF+h%LN(Dq z-y7{saSvJ?io1JpDYQVLg<=g_+-WEh+*4X8?pD0G6?b<+p-|i*xCNKw&G+}-xpV)` zK0BGrIkWe3p8Z*Cp{>V_Q$7P)t@sWD<2ou>G=B7}jy|w^j0-4rdPbMMS%~%!Bm=lA zWVcg((x}Xv;9}Nu+aHjxR3E8|H-YZsS)^r56HYOEk)+UPXx1n7w9do(!TzK9XOYn) zMx|`ICwC+{6l&c{p@gV5$a8;=Oa2Kzm@UWxmXk7|)k2hy(lrdArcw1Ea8NUk;?;Zh0q`)erow0YU(?rfqX9r^JI?4gcG9Sa&DvIzTzyEY&O4;% zx6aKIr_Nm`mR-IxdJ%0q>u^)HiGv|-^EX>z(ife3g_^wI--MGJWZk4(h^wV|N(0J~ zpAl#wOsnDRT_WFx0XgMOZf_EY&QK~_D5pE|!UU>ohcW{Y z_BRNU2ARzz-3gx1YOeS<;Kn=~yekH$&1d{%)Fb|Cj*NpTxKUBOijok^gCbyN*(y>RjJaP|PgV;L7xwTIKEj;@kj#8Ux9+zqC+jB%povV*VL zP4bu=c~)xQrroDXgCvEg8HHosLw`Q_(V-`(IQQdnV(ATzt}GUXPwzhirNY&%J}=;04dozdS)B6rswQ`RnkCge%XXhkdY38f4duju^ed8-DO8ECNNDJ}RsO>joXaE>&Il;!1~Nm1b9AgsvB(HHX7)k^NX zr6pBa>bx)m++e}13XCE_BQzn*ddtJ>)$3BJKTU9pmLC(?m`DiTz-D2962+>Z`}{~1 z$d6J4w=stti{yG~8Y8?K-8G%5jKbxkYna;z5aFpT*Bvh62I08T1$`ee^dB&+p>5L5 zp@@_SF1SP!vpxVXdOz0{X*Zk_wOD9ri6m(qPB!U5pS3j-4=p-4*y{*9nb+z=>z0-Zsf!JxH2?LZwTy8b3kYg@B z8|i4Vd!HC2p3c}Pj*v7+X}3fdbsfmxuml7KV;AK(7Y%wK7&Z@xo}txSj~UjbfS9f8 zHcxqBS(LdGq+G76i{D@exn|EM9F>L6@Y;JBISP6*e?}U<;8Y2--AYuuq}w|Vq97+v zoBRPfQ*rw->l!ok4RmP*G8@iIXKEZMdlRYK1^^Ry(a`%_`Y5c0_FP97H2mw5h&lRD z8QA;wWvtuz(Dt6{`!ZksRpWQ4Q$<<;?bA!iXGXj*=Ds*F>=qoRrj#opqHQbtSeN8& zX~@%BV(9dTRiz(lPej~5!=)EwInLrjGKcy!@n_vxh{=7!v;UHC{DPqkZhPXx*Y_46 z*6GB^@DW#SoasZ=;u)XB7d3zCV(qOXtvf#Y0W2!W_B^!<5bE6^48OAkN!NJhFQj~a z%dmR?2_hXw^k~y`5oVz-!H|*ECUKGu*7da)XVrJ6n6=%+U5jH#@BLmt+B+bk?WiP9ncfxeeUeY_2Sw$3v1Yk#ew4@3+Z0Bg ztqc%DQKB}0j_-tJQu!S)HD0nf>9xkP?6|rQO<5YQn34?EXz8jm5fhM6z(&~c zlkRIFI`AAd{hU80u}jPnsR1qdAz6r|SaHyW-sP-6QFub;Db7$pai7bn<>|4kEs6_~ z-!Wcb|D@Hq{VY*3WNu}F_R*dUy*!Fb4AX;DC*4^#%ead1LSfyLcgLR0cA@W?Eip07 zzK?ozIsHkGvAGX4*z4ADmjMDLWuTFqJL6z`H66ZGa#p6ld z2m!CKY{dh?j8B=nlYq4=l)lF~+o7(6#cLISJ~-;tTsbPLZSY7lpAED>GG*ZLXn2;Z zv`XU(7;cen!n6YTfr;cZf69^QEfP&>fy?JJoMmO5jg{u=;{G+uoy-vW47f=(i8I=I zdp-!2K@9vjAT=_{kIp6yNw0g`ubV&a$jC9F-;Rqi(>Q;VP^!n0`ch}O`tpHVDmT?{ z{=xrG(~DN&A2{HmPUDl7&R0Y^!nvZ<6F}<*Ku3!AN>MJqvhk&HG@&$@h|fmbVCUf4 zW}AAD*?76mD1zDJ0R1N39YkYjmFCWA!SqE-qH4~Dl96qLB4pN45N2s5<9c)3l;4sF z{TKtX)KyWt)dm2@H2HEos+hjbC-fP`z`iz&yEmdkMF3lNmu{w95nn6!Ur0Dp_N3JI z+TI9rpN;r;#5R4Fzb3}Oy$)7Fx$f}q><7Bv5)FuvrNu%TX(2YgiXk~rOdYm~ z#DDOC)>K&D?^@c%SqW-z#Kc8XBITq11^XXP2C+E;iAL6}P3hnf-#EKQ?E0ofC+x@V z-kc44vT?x?m{1S1&~o>1WF>d_xovU;;ri5p z*{EDm@*{gy{*X@9+>WR)mAxz#g-*tMvPaE}%1tYACX|dO-N$L!`oc1iWbm8Ny$S#_ zO65zi`VJBIC7NIT>w-1t_2n@S#Q!(&$Hg(IP1HAAc*iuNaZrWECCTe1Ll~^QQIkX0 z_~2fFohXaE55kp?u45TmD)TRFKL>L{^fpBJCWIVzhfK!wJw~A&m(t6b&IyYc_6Ayk z8HNEh`YQ62mqMfL8uD~z5KIJTxDCCo!FZBGcC2Np!v`0~y+Dc(HQdsOi9x$O3P;$$mF;aO=hFp&l! z#KoV_od5V&2A!T_r5?&m#0(m`d^>f?zs+^|!ROXW+?Yg7Vc7Eq1YRcNIN8~S#cw^z z9wn^IQZA%Dnu48ZVIHqA;CJ7kLKlzJ9M^@<=3)!VBNscAD+kKE4|uud`r*i;$!@7jLAb zX4_y{mug^C)B0O>S9OYsdbV*uOKnL@_>GkifJ-lnz}LPLow4s2&jnJFFejI#S6uS< z%{G{)a^VkDDZEK0gOd%M$4k$FCB{e8Xo?NIdlMuLHA#=L?2WR4a~bAM(Iry4m-r9f zWjCU!py5z*1>6kRA$R#*dHXb%SE)QkgDx)`KaKh}6Gf}x$DoiY`Lpq%V~ya|pHV8* zqz(tj#_^sEK&s>q`J`?gG-^^ z#?dE^jio%ir#oH`i&l#>HDQt;CH|X^7VbcruK=N6Mz*kGh4uJEdiPJP<-z z8*}`ff6P96OC@aEJ@Hl2UR&6?`FD@ubaEFoTSGc)v+oyg+$ti_f1Z!oC2iwkHV>=@ z<4L(E5MqpUDXxS*u6?-c>l&jE&Z$h#85}P&|02Vd3v#AOK=mMz>y^`D@E4_Y*G+`# zv9jpXh3Q%j(GS=RiCLm0r3v90*(5mnWWwF9Vor>y|63U(aYnByqVvn_R3Jf+B!+f+H<&& zou~;R_Q}933vu!xuNqB}q;f{mBk4f=A_^^-AeO5~BoyW*6+1z!V^k}R2sK7M~& zURVCvDX@bmgdJJdRNSAr{hk;8T z(|W#61hO!Gc2{jT+-I2^%D>zG%-cvza8CACtK#)wNy^+cLx0ZoP6qvMRx-N5b7MMd z?*+UB$>9LpwD&)>Uc2t9;)0&4YdrrHN;7KX37$WXMxjvjPt5rr{YS%>GiG;=bZk8H z7@ytX7?F+$KEF}+)xjz!5FesQp9(7`VF;I2Vra*H$=wuM;gtJr9OKadeQL@x2g=F4v^ z4Y=fJ+oFG@POr60fV1F%pOrnn2;b-4x|yOMSrW+wI4 zZAX}5)2u3i?)KV)DZH9kxdb9Nyy(d+iQBcN5onpxfb77Mlp_;^CHRGAJC<~D z+c1TB@Zp%ADwEz5e4+7sRG6?#wD}!xP?5WJgQ)o@#H3|mu>u8BJ?K(B-uvA80LB>f zd^w?_mglv1ojm-)%Enc)yeU~G;m1BC=oWGnt?F-*`~mO+7%o+yKK0Q{Zmjd1uIo?A z`;0_qi^w93@fI9mq(E6xTho^4{CIbx?7lw@2`oi+oQP@O12@xJh9dl_0-lSQ3A#rK z5|J+=6BY~r5wM@1SM9LYtl}i6bzB_i_jDfnbuMG)FU4&2SNy1B-1P49P^vw_hdRN; zHZ98B*;4=PT^+=>&H=vb=P)R8w7&TcHcAx;)@3f{?QUhbR0;0x*TOqvLT&|xD|J`U z+$%5`obiZ0_EL48wLk-iT|{JE&B%CjDUsnIZi=tYFM{E*$lF*y>U?G_D#%X_9Wp~) zX!?JY06fB2KN?7yEl69?!Zuf$a>lOEwVnD%hBPZmxC;Jx`yCVoOiT44C@T&B4AKnH zO!-EjrDs5ieroA2{UF?uI`!c^}t3s6L;yHwCz^JqPGO&*at;p@oRizta zk~OrhGq)&7l*YJt8WSVS$sz6XJ|+S;OcdbZ+thh z@;^hjleMR|0Kyo4`H!wPi0!)ONIt^J5!<@W+hQJ_{W4X>$VUr#a1KfM+VxUkrW?-{ zxt+pyf|t~7R6pz`t2sJ#Z&CAuN^Z}aJgW^~JffcG!@rDmjFQtrLJ~S6+gBgdko2KO zC()DF<|%(yle8c({$QHXkqF63ZRA~@cDMXz?ZLS zV_U|jr5iT30w^qu;O;Sc-JJ+X=1@)tLS;JoNF6+D(^~d#e9RnTwmhEAD%j|mDCB3C zyF`YMq7U$BV0pg$VT2FI?~mJk)M3+kebiZ1Tw^tlJa;ZFY$Zl6ED|^hd^YxWAN{mH zeEpiXO(PF%;#I8(I%V9=W_9Z;!Czwepf3uGdnCsmfe-uBzJvq~k9&B&j$(q?kcjm6 zfan=N$|dV2HBz`sStG^m~$=JMZs!47tnul5Z;eC4ecyOildhJ}rYL zECY4RnYn-3`+@I#*cJcTm6xJVEH)?7xi?6u+{XhyN#nhDUmpd_diSf71s1kgCz}TO z^pj+vLtLE!6Is0IdDxXQqUXiuA4J-U+{!iNX#S{8vyPWa_hjH~GGJDvXF3}qFmhCT@75l1+_^Ig+ zm~vZNZRnc#L&T}mgTcfj5G`UkSzQ`rR@~vWQ7I4Y_SJ^}n!7C5WMRSWw~;6#Y^W_K zqqAq{$I5$apU9R<69*|19dcVYKQlO)TMwvj>7V|C`kzIr(+lIfKh$yM7t-64^XK0w znb>k!r<~4=<-{Rg{UuCSe-}tAjB)7RDvzEVERC`+k_WuR>3hAHpbZL5Y+zfu7}RiW zc?O$QVI*d9 zT(&sjLc4Wvc@O%M+tf~pb<7IMJ+TprA=ix;ZKvIM4RLpI02S?nyL-!gRhja1($^ek z)x!7vUf&cr|B$dl%9r%v^q?yxsmWdLmC6$b#xN(xK$4qu;O7s;eImThB_uK8Gqo$u z#$~{^`d99{@?Kw>mEE0+nH0+5DtGLwq4WK3h#7l~@B!f}>9a(j*^&rC4-zi= zh{GK(=e&~rvFK=BBM4*ZueFz-qg(#?$)G+$CL(5J5IJ}z>*Fy6sS+?`>AEmislFd$ zK>1S9EGmyv(w!}q7qDf)YFb26&az;YPCjdfKYyaOe3QiX(NlA*;+3_ozg0A*yk~Q~ z?udc2x&00t%#$abU#Ciw|0t>`oB!iR{{u>Yp`%FB2J-*=N#~dUkki2ZoF{Skf8(eN zdnkR}5T)1m&;8v2CPdZ$|J>B7U?g4V`E*F^W(SjC?_m&w$CpOKl?L>G`0d`5XBS2u zzObBiI)sye;hpgR7+1ZH^5g#vTT!NYkF;Gpr|&&A%3EV-{TDTM7rxTv93L1nLI3=GW7Bo zSZ1A(dRLW3;`(+CH_0y%4_{h+?(=C+s{J=zy&jz@Zi}XMGDGiAk&j`acxYE%&K?FD7>!+8&ZV!q=Iryf z{e<6}^lZDzPzO(CYD^z7;Y^CTHLkzPa;HO;8YsNgv3rKv&!0m%={2)GvMQ>6GXxgWNE*TCCS-+HdCTM|Faj z@D;y*Qs&;o_z{h4P~``+eqfS^@i(vtrgBC^z4}@v@=c$eJ4U7Hyq1nER}8YQvU6qE z(^uE-roo>t8l8j12<8XC^hVZxZ@ApFp~Z-q239>Xux7|pO?P!khsARye(v9%`b& zL;k%7-1yVeL(P)!9lM$QG1J_(`(q!z=7{*g#2TCL%c}3o{)@FOJsM@-``~7Ub!t9~ zl81EunCgoUQu5m*p>{P=LQI?AYYLwNQ`S){jBL~I@AYm8y?H}4aNS4a6>uYk1; z)ZrA;SpP6xbYT1-3?P3tVg4wCZjfXrz#8pV0H=&v&aZXIytf=CK`laEw^Ts`hW=R4 z&vTye)J{Wd5a#v09<9xn$~ut(PL>_+$AGKO`w#F3ZL#z+I|zGRtv43N{wW$c1rE9B zcDnCLw*O^gDxtan&r~U#(GLw{MbLkPpd$JQCs<)g{Bjf}=ZebG(r9sHL<+um@xu56 z`;Vm@cp2Uq6nUqhu9au#3wh+W?1cGsmXv`!?Qqjh5htg%;>pGZvSxE!|8bY5?I$^$ zv>G?GPDj>1qI_R_Z*{4;&c(_$&!1|wFyz}V9~RiW$m=&TBpJ^if_Oj;IRK{IamZ^bk1 z4zpKwc5d#VL7jW|5S*y*^Yi`PXZl3W@q%ybRZj7}?;$M@yMKtkSJsX?NWgD`kT*`u zRl7DqM2$CYhq1_Wg%d&7YVB|-eK8@O$d9xhDik_*ddz5N`x*7e?Q=$ScORDZ?)`V? z{ut7)f6mYfH z)E;Y@Ms8#7PN_#vk$11Xr7D$k;EbdK*?hJ2owJ}V1C~#}nG57LmdsiABaxJ{{d3eUjXsnqLQR z%?VIj{%D3>U^|!6{<_X3u6^t7kLUMDfr-Y1cm-BO9?5m36-y{~LLH0Td0I7IvZ`Bf zU_cb~p**Mll!#@-z-J-SO@~Khfd7 zOsY`$GTuQOfy3ZsgnyIgBq6!*ihb=LG7pZ!H83!w^V)-#?WFZ1qc5E8( z^4gh59RbF29ZveDbtm9ici}<$(-MW&s9YKc0zMyFsAS9HTJdcRp2n87IYU6m?&=5s zljV!`Z9r$+Pxk7yZpidn9A1|ps%L#s>q)xJa(=I82{4Y>zaw~IK5#1S_qBRaXc^sy zo_yTnRKg%Gqu%P6Z)(Y6j$M9*qsIT@#ojk#8w+R4b;CuJSoFgepS&1CAbw%a$`@un zc9!oUm0AKx3(CZD#11@deRcW*JreTY3DkaRQYy&vOWyYFT=DxDrQB$gzG?-T=4BKR z2bRft)^M$89q*BzeaK-tDrsAp5H9cLHq;1dQEzVnO7`YOnR57JOK9d^{H-LA(87&N za=2#p!4Pup`T8m>C{TN2Ce;&V2Y1#j%R~@zR|@l7m%8OH6N~r-*1l6HQh2r7a&=o^ zog&ghB7CQ{_f4;ESH6vYQ$I}7X4^PvHNs8fAwNy3LSpH3T179% zg!m0*V|-ZUfbkBIPfFPN6#b4Fu2;^r(VHm@togpsgk#HOY@K)c;CYv6bIWSI6pQL` z;?|qB^d!omc@)BtPnV^#inq(W8;1vxSEm`zDy9ghn|Q&*dUlNl z(GqHr6>!fse_ldpC#gYY7Jlya=w?zMK>2@bGlA;vh|@>{%haI`7ABLBL*Q9YQ5&t< zf3l(mbU<}?JMQV#)}Ox3w-u1|t~CQxVfPTw`S0j|^TE7l>)!L!X6Emqe#+k9uK!0R zgc{eu+P(4`+#?&Ofj_u*xHmsc`?cMozW;a*N&EDFlt)$gK6j>TLEg`AmV1u+%1&>*Cp2LQ?%HJ;JRn zQ>>2D>Y|@{#d0$y9KJN>DTMWIHT;ffO|SIxvnTO&L?c~$+qPocM6F>stxHmG^fddmvBXHi}N$<d7*xrJJ_t(V(7AS6Q;! zWn?y`lwXe>6L@LYFIzu>@;3M(ahSl!wf@RmF?~D{XoyEcI{clg_F~7CH>>CuvG?pZ zlK78L1!$L;_j(xJbE@qKKB*!fyYPKH@8so5FJa&1qnTfZdu`NbEBWX3!leoq^khG) zR$k<1(!R2q4{M%(?2cJk%+5*E_kUOO6)c7$aiNic0Osh@QH8bK5!Jh^7OnM=t= zOpOjm@7OR4qckj_N&;(VaXpt1Hnbt2w_vKiUFB zHcec=|L!cM;_EDZx-`?(lJ9E+w=)dVDPwFnE6@4;AkduV&$88S?3 zioebLJS6X+uEoKY_7+xf^C_o1Xk$+A9VAC}@?WX6Q*0PzyQR?;`lZV1$J~xQQ;g}k z-!TxrbnL|BXd}4>yvboy>(}bk%gAM19f=lF&SkSyS0YO^nd6IBrIOYI=mQ;f#)Zwg z$$=s6$uvzV-9lnyOb~Dy*oggX{N0Plu#rY%02PCL4Zim#FQb&KLJt|&EYmb74Oj&l zD)gXU9EGB^0rPdq1!NlrbGO!QtrH}X(}_F=A`{lJ%b1IT>C|+-$QvYLE%#hB5W8u` z`#p(DHJ2aftaNl0HcB9Pqwjl6`*yuOd&doV+_ggWIZsp6FaWw*_53`747tbjRB-yx zd3xA6i|;2CgK%dudg@%edFXr`>oPH%^)G2Xm>R)I%C}~}bUYbxz56e%U=4A+cA`eZ zPVihZRG1C#7vitZ(_ixkr=ZF<%Y7w9vz1Pdy7t1BY1e(O?0^4tT6g}d9QQwC7xN{E zSFgwK%O!MPq3rcDJNGlotYd3Feo{W`V{^mbdpPKxHVTbkGO&6LxT8Y!n!CHpMgMkE z7oyL3Lrom-R+<|ShaxO4P*LgpzsSd}WpS8tQ=9`}hK6WTY0(@r$+AU%JFlI(u455@ z6!6Ex*t-Yej-NEoF-l;CT#ds?0~vREx%Yo_Z^?tu*?~Wr?YtFMM8@AhdNH8656iIs zRjuPsxBB=(rq7iL>q8|w;WAzD@~-=G4}DnHK2y={>gki&+TAOQPgqQV^~5_3u3lX04n9WniQ z)rI)Cma{Ywn_wE1l6mj-{PBOzaPW6-Cc3|(e9XG-kWZoU-1m_QefRyS`WSUNa&vCQ zDW!Rc*FX%Ps@!Nt~KSn~s!( zJnLBx4%3TbNsSn-uW;Mq)K}i4ePTu$uYq;E6NDq!-NDb)R;6-nv_uLk3XeezG!~8M zDhbb2g>_xevK}s86HSHXFX+Zg4y4y1rvOhRhJPmQtcmT+5jW!IaB*h>VVIMHk;KPI zdLm3}-&drI8sv$4E&H7b?{sZ6zUtm3(Af~d2LuEEKttQ#etpc!K*3*K($M7W+(T&S z4BlzyaGXh|3sY~RCQRbS@dzL&l zxm-KIEw2ge$QsN7(?hGnt)TTwS+?j|86K_V!bCoAfV@7-YhyEp%NLUA2IU$DU&Rw* zq3y?-fBQn2CTG|BzAwLM8WVzCS{KYP?}_zql8+E2ro=(+aky@(?6(If8^4l1hJR~U zcHnFyx+i@%kVP3nS;$UPyv#g8`4#&lNRH8LwK;KN^>rnbH;t>O zZOoSRnGBXkVE4AoLU2?hdyQ$0b*R$*aXyDMj!@|xmYgjK^0a+y}_^6j={)R@)H_ z40gq_fd#8@$3)d+j;Bd<3V)WxY$K=r+UWK25to7o^tO4uH|-UR-YSI`1)Rs zmPAuqDkSAAHX3=#NeZF0{0gSA9Q!uX_?&+R*V!4$w-K|vskI9;@P^A5bBb1LL`dyS zoX}69YUMJG>W^#jGDnuii4!2oFOjAb2fO60)UsLo2?Bj4c<5)eu2)E{iz!t4!M_{b zIPGKYI4t&0A#E5vvc`KWitC@Rv_6=RS7O?5(ktoiu_E zdEs@K??s^Mz-FZ>0X%3mGdw_PoKz@>3+rac=~bI-ldQy*75K1uZyw!c(!^}T%B9u; zVQC=%*U3<=H^Jjs>xs2>K(9I>=LvFwrVZgd2#x>=l#E8iPe~Q6CUn=uGY3zOEq6r^ zEwt9#CrVAKF=7`VXuuyYOi`B6KRTBO^bC%6=~a*YqY?(wBYtl(!k;U+yb1^6wU(Tt zy=?#mGHfKB{4K?qVqXms2-`A$J9nQLvq+JESIBi0Q;Aa(P!l!vD%#~=a}ww0{@X6* zCuT{Y9H~8KcTDD4L0SZY|*;&1gr(GT$HW9d>T%6tjnT?KImh{%@ zwh~%RX4Y=n;T@IyO8JN$X&WbL+Z2gsYmF9-IYerqC4s)J24CNix1kl^kCJvV8MRfZ zNM@Ym&h+E$*3yd~;!*KXPPgra-tmRL;)4?f#^m2wZZ;0GG!bUu(E89SH%u(kmnT^V zN0HshemRG0iKcl0eb*?y*0t5=ST%~Ny*J>r$(Hm$s}~-{G~mXo5Ye(KrdT|B^+Sgv zo|&NIyz!ZlK^zL6Ihmmg1X15bM2J?HrHusi%|4?m*GtYCBUkj8+T$E+K=<=#JDd;q ztF@7x804_0Wt#!4W8Z&vAM2>Y1YBhr)n~aEFw^rGc8iWUnOtNHw>GGm3zr89LdK!o zZdMIZ^7nX>z0U00;FS*1xxv0x6X}xNp$`5WBEuK+jP0$9W6n@s0#Xhb?EGQn&(~xK zYqq+pDZ*XZ2Owg&!9}qjxJRi7Gn> zoZ#7LJdJ|25{a4)Ap^WEyR7J%rVbO)_h}WN$s1-1gB_mJFl;knF>JP?_;yJx(KgKW z7*GYa1Z}Sr)P3CUyRCjzBjmy|=_`XP!%J{p)6f3vtm_PwZ_q-Mg6a#=2tVQ`s_Ck7 zY^|T^RLl!sS1qocq0YxW(84I#sC6>d3SWVeG@h$a0nFT;tk;naRpVW-f_9&?eiF-ZGob+3YSL-p( zW8A;{fZrevLtHH*tuRw;J-!e6%MsTJ17odkh2Z&_bXg>}lXe*@Wl6BDlV@NVw<`lL z$h?|+QsOK0ZhL{km-0BdkUP7uKb-R`X-8qx{rr|&8^)CJ6t&y6e8W%<-udNds>j$1uyzjfdXKT6x+Y%7#oZk4mEN z14b%FMVq|IsgfUmuOTN$#=0QGwZfG^^SII3G zfvSur$c|Co34v`8LIAr8gB`-vg^#8#LWdXHzTI1i z{)y0Iqh#w=qPiXYf|gUCs3wanjTd(m`y=p9hh>7UsL*+C`5VxKV-Mn~9?7!XSiSnF z5W4ymF}AGqH@Cww*rfy4$tNBSZo5m* z{z5M~5UL4ivDf_(r0u(eda^o@VswD8E|Xy$H}gOIbh5x!D$EQ`db1zf{JT`X^5k*~ zhlD2he&uhcEO!6IlGLWp4jFW*=W(PPT?2(56#acF-!d600B9vW?SrDJk9cZxlBQm&j;r`ZVi&E!7#hoX*v=DvMl7TiiwONjpdl>=~JM*Je2192KD8M(4U$2poc}%Pi*GF?e(tNsVi5`NUt=4N zr6MEmOR0~nAVsAu;hT8?Lu>O%o%%RyOo3?9(0-8e6!baULUcRH@S)_`N7o!y%RS3s z+pH%CpIbx~ge#HHNXvFm6j9NdmH#dQ2d;%Kl6VyUvuDo4Quy+*JQ<40l&}?l@aqe&Y_p|=ifm83swOsvII(?=IkH|up(eG&dZ8j>axV%Th zyN!!_)Zaz|cwLi+*VyQCq5NN|g+)bniV~;|R%zXIFzWKy*NGkz4|Up{Hd8W;N15>~ zZ0~!%>jvawR?|+*ICPgxdh3V~0hUF?!mR{cY5$Qhp#d?0;d+6L)j?5BKM7esRs&xe z(uOLfk>M=y>B(>Kad9w$d6r5&s`e?L@Cw=)4KEVvy3*JWMZ|R;PRfbQRqCgI@NBgc zDzDFC7Go3H?pwxB`x}Lyb(njwv%oLQXOFyIO}q-Zgd7LWLGO+4pw`V1`>|@f&sPQJ zU+y+r8sxY(7Y(LS<*}>4&n%T^tc2U|E3|WT2AOG9M(WhD4H%q~%3wKfV(EhH^cB8L zF`Q6XyMcb;#bTqYU?%|0sq=l$x%)qEYYlR;85YIyGWt#u+fr%-&9b>I6DxY5ZVavQ zgG_!yA}ewI=hv}-oxP&<3LJ%;TmvIk;#z!}r0u#C2EK%ekcqO&VCkd^CEH;geIBLV zl)5k|1}{HmF?dumcWbRK(X)#p5hm3QiN1Sj*XEeuMEL%I2(@J0Ar#gyQ&EU;^EG3R z2As^WX?gomG-wxkne53pL?-caGJvC`tWjNFi}kmto|8GE7vob&4ix~7#IH>H`!Ie3 zze6xwouWcn-!|a!kb^7tzaS3GpUQU`-(=)4N0Zuir+nM5HbqvgUA6fWWEZuGDSW^( zvzwIuL)e9CWdsIY|4ZTOpa|Om6NQ(J-BBSo%~c00&pI;9LKt1jm*Q!9e_p0T{nd(3 z%GA?ro*JhGFy+tMpYBjRRR~rcMSS3nC}PGb=k)f+>3SaQ)g%u5Q|K2$vH!iz|9i|Z zFE|RsR~-a%?=urE?BAhW-I;DTm=Knc*0isCnGwo1V(2n2nDmC9UN1&rM3+-m0R3Zj zm~JtG6bbf)uf90OvWbR}-NL5!>PgwrvGW+IWs4mB5%63jUC@@>&&stg#42bN*w^&E zmrGKyd3XP{IXbVddGTC|w7x!OgqmXgCG0f8JI>I<56EHwazqv}R|nk*B8vjw(c_dL zT^w>+(G~eJ@M20bop#Lw(2hPvK5KLDKaT9F#M!+^WnlfhzQk2DW}#{gz~v*ejUR_z zK84EZeQ-o4_L!9mj}Y`{hASV*!RGj? zXo7_{dYL9~k=rQv%mk1Z@PXpe{ey~m(!qBx8Z`%HCVYGU>-yZC7#BdB2>;L%A$(sa zXfZKgl_Nq0rt`~0ljpZmp8^Mi@G}~Xu|AE)fqp&RI^9HWW^nF4&07Nqyj>^_*0T65 z*|wMT5{kp*KSfo$8Jp={az}xDIFMmD{g;uqTk)lwm(=bN1<>iRE(7bCP>J=MZyJd+ z({=wK{^s86;TAw-Co$hl?5k(y4A$_?d<^AC+c3W37>2DTAk7wzdppX;lP2RBnK2trjzWmJt25rZ&8bt z7!9Dcg&JsxyNp#dvvx(lQ}tFUC~vlb-ls+(65fAk)2lx6U8#%wF<5-th(6CQBgJu_ zAoSaC;W>b3q)UURpy=8Z>P?8}eC#_7ZYG)AE6>8KA+^i4ntD*@N1kgg^VQ?O5fFf7 z5akYAy&|SZGs`&3Zu`d*6G`+L4UIwJjjGZI5nUmidQCJ@H*8v5pSiK@CVE#P!4_3C z9e8^niOkhjGv=)7QwV!Lddhst?auFi75`YfRlfvsWh*NXgBSOL_2jYiT1&NV<7 zt(SOq_QOCl~hPcG~-5Rm^6@8;nP426QUr=-yE8{_22fd z5;3!9&u#87=EaaI8Yruq?2$hzb@{n^*QXtBxTkb(>L6JXYPE+eR%_#|Zol8Y&K=-B zwC!y{g&W=t%p0bwgB~OLD9ff+HMO$bymM;)Zkzq^L{j^qQCALn_ z5M7Wmkt>%~09(jhSO}0BAZ4u+bU+!hz)$S&mMx<3gc}_!j#B?_QQTu z(l+cdPsATxvg)Lh+{uv#kBqrqu(b{4UevQ}iLR#k%)HPtKgFVsB>$p?ww;C(#Sv5+xU|_^MR9nw+k3KDxyhhT%$RI*fq>EC*bixYtxgy$~L?02iizU zg|q`2k(-rogT-G`$^-q)UN>Xbvs90L_RMpSI(7+&hTa49<9pr^u$$8d7zH6U(mMQ^2tcn zvnJ2TtkGiyulFT>&=DR-^)@97zRXVQYKd;jTc_HbbUQFEUYQEr|z@ScV+E*whgq6 zTJ=$xA{?yHl5b+Y6VJDU$xqneue(*#o9TamsLdE{obdocU9wXF@w~Z)%Alg!H+J>n znnD-py^D)St|?AGXOGJiSl3#E;5skBlOw7QG$YSo?m{Um6yAAS!t=@_}R8K_@aBBBn`l&!d zo~JT|#_E$sr_m6`YWz?Rc$6z_WKLG_SY0k;-mEiMZ)Aal=)ZrNpgC_z9$}T4)aU*y z8~R+WhOAb@ww_~NGg|$hiViNL8nR)uzr6;E^mSv;m)6RvPpsRDrbxB6!5E(4IIf0UpiQLiA4UK9zo&Jcoi#aY|&Z&*ecM@)o?@`+4NU7@zm~ zOuMKy*2|#om0nQ0=9bB)nB-^O&C0wv(G|1G=l!q9lu_<%-!8}Y@J&>ccI>#hT zyXFQAVepw)Qf`<89_VuJuG^tgw$q}C!l*tK@ ztY)lRe!#K><1-->^M3HKSEk8!0ED8fB*U2d-HAf4hM7!=wk&yLl22Cswu~jY5hnb` z$#{E0LFjvV^XnXy7dHi&yf|6qd-)9fkpD(hNL4d?F!@~*mCYB;;dlV8w_zjVdu!}@P=upobZCh_T?!$kV$b;GNTifGST=-K1C0l02Hv;eZUsA@6 zRqdtW(z_~7nV)`FsX#O-Ep5rjtT_G%84aXgw?7jaVY~f4wVA7O$=k+|5~Y4$&@Wb7 zmM<8kqVZt11T&DSCn05lOo1##G1C~3mO|f@@Aj9GfoZt1I~?FgzEI$#!M0&39RI@6 z@I%0gUaV3h(}QIKT)3$ZV!5SYBPOf< z@p45_6CunMT(b3>Wo=MdW{yuS5eG7p3Qm(-GbCmD@MHk72mxRY$D9rr8ZeXZD%&-9 z^JDJq_MhphOg!NedK>g6Jw}WnKY|@ z08c9@tjmHSZtI~Gni5GELCqB*0=A4ZWFGPs%%fRZyROYQp^nCx@ULp?i2IFBl{K8Y zW2?~pEs`!(CKqPmU^<)TvC36S?~g**J;evIEe}3D(L?_fn0^8s3VTEOatlmo7bW*( zWXs%Y01em8^lc3EW#Laz1UQUX9~VLjSyhBXJXd!63vGQ$=q&1f5e*#J#?Y>s*k$5x z~OGkcL%h3Q=L{-?JfQ#q>&WZ6&Tg|9^XTtSVWxgmL^41S11M zFjEW!LlJxpHSq}yO^l871q{qIFf$iS3{+6jKtY5NG*S`4C%C`yKbDK$efsw4X=l!i zy@GXX*Q!C4pX(e{8U_;a2v|+EnoX>H0s|7+-KFKqi%nZ51%hOGW5c;EQZvR|!t5es zOkZcp)ZQ(g72CCBkQzI?DARx^s6kV*apDnvNX(Pzj+4EQ|9tG-yS!H^Ofh^D3gVz) z1_y9^?H?57u)G7f0;AiIqmv?fZZ1sf?@r*f{tg(AwpRjIyhkri ze;rZbx0Y*^<5$bBvjK)G3nceKPu7!2XUt!kuNiEV2>bkO}xlPhR@S0rQ+ zs}!@cpkc}WzEc1ynV&O2|u`KFDUUSH;U>;Ecv9lve9 zDl28X-_uhN*^4oU zh5=XfSRIO1ge~crj5U%~O4MD|Z|n94PA*@~`N}J=V6tOnu1jlx=2Bzt@%P_tH2B%goD%-Eu!=Ri^C%UobnbFCMaU~ZbmYE0v{Rj#+udTTX^&s z*DIEM#hoJ|Wh~c`Q;hA#9nD%8^12aw{QEw?C!c)MlDcZ#)nLb!N2uO-ZHyKB{~`L3~eumq16kNcuitL;`*FRlfk-lH!=+F zh@XD?>61@B;RhH$G!sCbtjRRu8p$ud_#%pm8%0u<8clO%8L<5F%P)ObDuJ0yWt~}W zGh64nmlIp2g;s-yMwX!A%Ry^SoXcI}DB7E&60p>qR^6@0VQfsX+Qp23WZrzgozJg1 zwAa!!_BMnqAAkIDZ&otTxoTeRt03^VZr%Fv#~%UEJhcIMRdDQQJG1`rhG!nwv$5La z)}H2>XP%KMOR+ra&wlP~<7^>t=<}tIP<{jwh#6y^jjQ-vw;wN;dl6?BWoZgcHpC?t z9U=IsnaL$Sdk+Ywyah$gqu4M7OJc`3h>_=t{2{SMVW;W|T zy)w9s^6yuEGN@@_v&)th{6smg5K-mAa{$Z$pkgSpG_^hwz$tG*I8YN`L8)nu4EZ3M z$+wR@7_S{=QGZNT{%>B{w{eUqN6uAUrQNSONcmBC#csP^tPr_c<#B$DFy44p-&$OM z*Hx1#|Bdm96UHDhj-msn!d|Z2L_+Y)iA>pZva&JG>wZhwGqc3W7>tn8?50yM_M+J6 zdg}UUBTb`?fiF9jkx6O$c)qRx!-OE?M2<9^7pNaPbIZV(5N)Kv2^kVw+BNoszc$_3 z1*!ynY7xa@6a}%iuWrXb18#S+J5aCL_+SZgj3op{J`QEAOD$F9t1_x3yaE|uva=R% zZQ)_K)idl7Cptatkl(QSS1)abhHlmWWzw!fnheyabU|aONEwQ2OgMy zaOrXCKCUJmOLhU{6a{I7F zBNs*1awoHw?~cvG@mQvAZJ9=R$>PV-khvy{3d}@4}(`kCuXDS6iCd z7c?Q~W}Ni?Bcrqm&gxdkpc?VKlm6EJLDvi+*qirX{7Ws)*BpnC**IpiEBp3Nr&XOD zo7FS9p3h6s50wfA#aUmY4Eez3u7XlCTz=*pUJ&P zW@9xMc2A+yY?pIzhJvCaADxWzzt#G@)o=yg}4Tc z%Pa62WL-=z3|ttvFmRB8%UkduJvVZ3`(xkwL*b2td;xV~;C?c2IUx6w{TmX2W~`F$zm<%f*>Li;7?g@H3N zaCr-!k<5GQYVO}&ftR=7y<{Kx!~eaEdx>>219Lz|IN8-@<3q;4p4BVFvidS)g)j z`2D#E=h<&D_osi(<$r#`Q3$`H6!Y>rkVRm^28J#DZj&urRQ$(Mt9JRtEXp4DZeb&Y zId5$Cnr&mj2U2zoC3 z6X;w5U~5ggoH<8M`aAz3YJtk%&6Arwh^uKBZO6I5J*b2JvGRvvaR^XglQTW$6cCkM|5gV(_Z0yb9Qa)gR70!QK58mG4y!bodeXUP# zZn>Q66(}kG#Wj~8{`ogw_q^-{PsuHZI9F(g(IX|z_%CjjWHzd!xFD%AO<8Al_cOQt zR=cj?7KTCu?CzcOAT_fTgy28$gtIvRH=I<6W^5?EN*Vo;VG(b?z^6;3_x0Cb|M};i zEEFmFwy>t0+og*J1K2ZT$=4)3{`lhrgXStePb1B#`|i8%6swDPqHMhteXGA;8az0Y zW?x2=jIp^9&Vq`6q5eV+w7~azCx72zmKOV+TmyCaU10-JP7yJdG^_7dl8Nqhikpo z$De=x`TOs`S7=JZ7M8tEwsEhk;mVf_@;M)g1fn#q>uRsP9_wWFI^h-rz@N+i-k>Ka z_u`>^^wCG3dg`fY&+VPJU}+#uhEAQwIn^hG|Br7$w8MtwgiZxw_2Lz?;bo^xGNv!94yWhrqcIVkM9Z8ZgEQ$Ioq_D4l=ds`y?%Wm+tdy8iZB zQsyUPkC9_GR^+q2)GQ5$u4Av;F}UFZ{GE}CRTfjYvw&A4dhhg$c?5aN| zI(wxVOHm9OEwSTveFRC?#j19ZFn;bv;4lJQJEzrNTE4H^;1Y1yL z>Xx{Z50zv(W^F#ugQW_7a+xY2VkZYQu{_c}fJWkZlW!HIDETf8As)B@@St;;* zHt&wWl5`>`#_paU9y*ygA#*zyYs?Hkr%@Eu`RpJGCxru_a;#3!(`9kcuUI1KE-C@=Z0M@EO7{Y74&N+#TjXO*LU2c*ZdpF)84FpXhY_8&(~FW_@C+wc-XG8KN9xY&4z~+8>Ip2%vSHb z1?vpYYRLj$jLr`0zvHkY(R|(JJBFo>&|Jid^>0Ku2Fb}b$dN_=R-@(Wx|6-F8>5|u z;C?Za>*q6ebw{Qd_+qUvc4Rh;0qCM+f1qS@9yuYiwB24~$F0X)X$DswgYu<6;D77n z9%!VnHww(2iXG$~4>$ACwF7o_sTThO%^Iw`yX}ve00000NkvXXu0mjfwlE=W diff --git a/assets/community-wecom-assistant.png b/assets/community-wecom-assistant.png index 71fc1aba61f49f7183ce0ee292daf81c16b62074..b735f2ccc71020628e6840136458d7a602139785 100644 GIT binary patch literal 60324 zcmX6_cOaJS_qX@nGkd)D-aDJDWMz-YN>=vXdyi}qk`NNIS5}g&WM+o!9e$_p@BXLv z#q+qI>%OjYKI@3p(Ne+1qQXKzK)_W~Rn$X3K!pE9M8H6Te4~-m%kK>s8}~dA}qjbp9p+t^eZk#Yyaku@W9y3v_ zVyQftBmqW*0>iEUrN!p?^>fO?WL~>Y@?czeA%oA4<;Q(Hr{4r46&U{5IUxjFTQCq{ zFcV?QFjL^Hmg@`d?uFgOC+&9(@1M`_o$0W{TORBOznUy-Wg&`HD2dTQbL{Mv&A$qa zpyoZTm({~H^~T(;MK&AI^4{h9_zH{W@6U+d6}OKIu2uS1bi3>9ovO@w>?C?s88>cf zd=w<{{fUW*)dn^2G2B~z?w`l^TYC#!#}1V0P~e~mQ$2Y8{BUccEK}W%kAlX5Vww7r z`7<-Kg897xl-#VW*ZLf7t*sK0lKgG){i_iXC{g)@m~op@w(AeajWAsAp)Xf*oU0la!eFh@HeCzWW7c=MrzK z>ffNdA5Bg>J3CX3O-uWC$tOW?8ehG7b@*$rqP)DGl%;!#$MoaDZo@bh3R0%}x_4Xf z>O1XrJ_3xs{{DsMgS0FxEQDwXtsR=I4JI|?(&wfwE;afbkE--}JO8?yn=hX2%^TL3 z*fq>4l%yz^`Tji|WP9+E1Ow%O{px6MzPa;ofZFG!K1YGj({E+TGOfXPx7p@?YV-sj zP2c_e`IFl9qt);4Rqib`lZvxxzqEO>osKugEP`*mY;4LDO86*nWUuGOUuzd7VIMfc z=gCxea&j_!Yqa7f276_~;nUuS`PZ7crIXu6^El&DfmbKI!Iv7La$jd=4E6MmhB<31 z^*J=Pk*7+=H`CS26-wOJhco9txCrKI@?`HMN&Ycv^{molwQ=G8R9aoVgCBg+JCx2w ziWND&d40Wf=PE>1T#ma8XySoOF+y&PcEvBg|^tt=ywdY?;?l(0x z!NFoppWE|>`~CLKeYq=ianU?fu2_%bS=*k7qt^*{qxHjwlYbW4;Na1dq;ZnO#>RGA z)-^SGjTcJuP40PLSL&8o;;OLY->#isQ&Usp(@N+Y8nR`ok3Bi|nlT&XmpbTmZQh@2 zK(Ef4b1sw#lz6Rd;{FuD)5~jbp^Y5>{4!v6uP&aVlbO9nj$X{`H%V*3_-5}#1(jv| znx{nP&Dnfh99F#%4Gx-%NS-FEq}#IG=~-e_mZPq`z%LQZzpDE$gv_#d1iv& zs8|Uf`?UuK2I|W$;p6{R;mGV!f5?$(UYos8dNaFz|JWw<>@q;POt(rOF9`Gf{NC(P zNw(!<=O&ZG`QOJY*O$?Qze;3%Kbcod#-@MQ$BX`z#>$;MXwxtUhihrSdCnQRU6cT$ zSOXOav3lzFq0fa)0vf5yAuZmZQZ(aW01*a?YcuuT`|uR+MjzBd&AWK3kRE@jd(pk2 zEm6l2-G=d66|fDkB9U%>>y<=~NY0M6D{`G(-asj7+fAL4j%a|tc&N%T=IE&0be%3w(H91w)NdLAJ-7nmrI`E(y9no5qIjyfxF;tEZ z3dKa3%5{K@51J+`@rM?nnpG8JV`EcOnoKqc2@@_dI7uf}6@?1T(+)yg1y*ckU##Eg zb8LPokhB{nDTe3q*+IyimHcN~Ztmqq-m|NlAbLZ;cJs1{2rnwzCr@N*RRQSpyvWSVbbN$h7qIa=qaXBnk)#YDUD6LPIoJ;nY2P z^vM7GPfcwto9KuoIs!IH0;S-_5L?mT`sigti@>R$KeFUSldO3Q}q1m-@cGKmNA zQ_QW6f7>~Qe$vp;P+pEIX&I}SmYtoQ@$c&MbvFIqWxInk8SLfN)NhR_kdvREpOUhC zetms)#h2QfLh)Iu+@)NV8L7^u-U#}YF0w!_*MI*FIS9QR+kh?;edBhtgE;Quf_Q&JMj19kZD@Q^C;$;H7+KIh2ru$Xv_=9svF3uhs2^L+@g%wxEY=`Lr z^1fG#sRII>$02$ioXHg0jZ)7Q^1<;fmd_iGPYX!UyV;K8`m zF^;oeu4YzFj?bT;EjsKG3k*@imUur*jJdL?pM4^vM$6Sa8I>XL;`t9+u{{bmQ&Rg6eYU_qSXh12Fv&Zo}ehmCQ_IqjOM~9SU0X z6%&w^(*5Jxl>wA;_c6R!7M0hwIxMf_EjNtj7I7N1q2{BY!zGP+D0OD`SGVse>X{ik z@`pOYfZ5&j*uDGOzeM>5Q%C<(jtCm%6=%?LZZq}mwC=P!_<}WLxBKLs+xPeDWfi!$ zznH>9pn}vG3=R(3bQp4E7Lz`0`f+jLW7Gv$>@A`M#U@^6mXS4Dc<9e&zH=`V7pNWq zMy%;-<$93?b#?-|bIxd6&O%fGyo|UEs`Syq5%ERy#>B*RTs$@i%k?NpNtGh`^Tue3 z$Qho%L$0Z*X?(P-k95s=wYXpG8QW*c*EcW#1yL&6AR*oxE$Du<%TBdI!!Kei-XHJN zy3ZRlP(zqxb6aUcoxGWgvSW_Nec6LBx4_|BgUhg&Qa=W(#d`@9-Y@!-q+c~l9w*K7&8<#b`s=1jwGdCqA zq#M~X`p?+dSm2+QP1ppwg==eTjg3OZNV`ZqzNm|Z`S}4$f#=*tbzM8BVcn@|X$k{E z586{*^pjjJZQ3$t?S88pBD_)Y`EtHDAMH(*P=V9_^+`k3)bIXy^6=+;stwT%J$M^D za9W{N<>n5F7ya*|o9=3JusK-bOjR97pzQt6(fof`L>0<7f3D_?MX)s8;aYYs{)e>a z2x%y`a9y6iH;hv(-P+oEI{7+sui)(%@foRKdtvy8Nbbc<8h~lkqOQ)*p3Q7~hR<0R z$A{Ouj|tBp@YtBCW$&ZM@VNr=5nT#6u8_UKlp%5dt|GJM?rU#f(QTQ-XQg0mUAnZ- zW<5>MW_dxVT_m$GJ&m>|Upr%OZ;yOouaYsoSzTKz>wm^2{vjHdItz;KWqx-83)R_R z5^Z%&4QdmoxOmH}SBiizrTrSKs?@m1u5WI8dU`&6`t;__8*Fl(kTs@Eb!=?xhYugl zZ5HQCOG~%C*jJ_=v3(Ce5)lzGJ#DbeA@>uotAK#OkNNrY{iS5-96*C`caI;>1Kh1Q zi{gc=wyf;e?p%WrqC$yIKtO=6uebs7bkCpPza@N+n0bh?A~7*B=jP_zXus)k5yb*8 zN~V=WlfjT%gMwZ*@!4B_^xVtKi%lzE?y$713~KqB`z5^#%I%kruU~Iu8k$$VeVdS! zbT3A!rwCha8W0l&0y3pxHgY%?N*Fp_0D%XeT&xcJ_r=BAK4NXtZ(Hb?)ENow{^#!z zw&<;NC-l|;oeD6mSN(%11 zLtFV)|35A0ya3NfvbcA)x9jJeVZq>sI5O3%^pVg45Btdl1qCzJ%azLj?!+R5|Mrw1 z;bma30+ztd&3$(mM6-2l?>hJle)tgL!Baw3%h5T@9F5XK`5O~TgH2rf+Lq+Ug~&Ebm^62u9UBUFeMLlWng+*TF~|U(%H$$*Z!E! zxsT6n0s{Un@9BL&|A#W1RZwx%HBRh$io@;{eGJ#;N^5It+uEq7J)S+|<)1PN=cT}D zUHAh;bkv9^JD#20)AV=Hh-)*kGA4>30mjMM8IcQKOvU8(?)LVj>mL#fG{$e20WwIo z$e{?WRU_++vyIi&*q!a>yzMiNO{>Xcjk@`@jJ`%?hYn~q?OBO*kB)ajaa%~C~=`d7`q+nk2)YYPM@$M9CsvX^?-Icwd zp5*LKLi^#B(%+-3fZGvg>?-KOd1?1raMzctH_6StScb$q6Z=~3ium-YT>9>G5;sG? zKF;EkdjT#DggNBGI-#6q9IL)wXb2Tg(J?PTi|AfAAP9WbZKH4Xk z{7E!F<{}06oSP<9qOxYS4@U9hh#ITxw-XMQA_PT93}(RiB_ycM;k${-Oe9z!B>;wY za^j>gebSJ-s3B?M%ngTO{>P64x$tf|AvV6qulp-S1D-sos_=E)ARp4t0zI8pt+nkX~s@C<}>-{1@d%VhiIIghInTe#&W^Llhc?Z5wTzmsk2)sD# zL7gV+$k-UJQ^UsES^#kNEf-(|OiaBFLSOR51(}%ce;q&8(AEa2p*ITmac7Y9Yum0f zn}LK&fIo=8)EQGl&?K$oTjO!@7e}Gm0vVMc{jjuQnruy zPF+m!ha?XV9tGuwV1d?Pt)wMW%(d;9YxNWsk0BpL#*ppM&=62BmKVz^+S=MLUWi`h z>s5Wmc;<1SdR6D2=OZ&+{z~eGrzQm&P z{wFg*DH+~5{m|3|Bpzq~D#1oQk}O~PIbq`#KeQibQT5%Xm8V(88@YMstbTwBA-#K_z9W`~{yL zid&^A&$*A(fm?SsBT+06pJtoEq#r*_B3P4)_*SONHAJ5+ezG6Gm#F;f`0@z|67Y$l zqM}ZBW@e_QtPnD?vc9|&)?iHi3p&cXckh%nd*VnrzdN1|XL5#SDcD;MrLh2rn0)=9 zLc7SjZ2>Eik%eV_fcjZNa`GVGMjP$B=`3fy`7O?X-McMBxzr;H1gN1V&8`Jgj*-48 zg@t%AiGm299ZQd438V4u1^h}B4GHb*>*F$OB|%1Dq}0!YR^$U;B@olo(IFru6%M#? ztJ06tsrp=qG94LFKQlAa9C&>O%Yu|33Y^gY%(>nC?ri=U6XU3@01F$N{gWpknOxO0 zFZKun5Czp zG54=gE}MIAHxh+Q4Gcx0gq@qa0J?$c7sKqYcXtLMh`LB2!*J|2o?2MY?L@UzS|-i! zD4p;T$dNVJY!ZnXsM3W<3AhbBU+hsXche%;{pH?bw8*~U!?-^0ED~q)P22qxJ z^Vj32O^25OpozRg5ds)r6|}4hl9h8t!{oN2RlXM6V<`f&ZGo=K3xXUuAKJiW`u6R+ zX9%W*^SO!pw*KFgM30ig!JFvLcdY-9p5%$>3h3b#w|)pwKX1FsS7Se%~hh(zZSi*&>gLWGLB~FqRHZ-s zbh-ONj+sae;ES?y)cju5k1&%mknUhZlf?rElb6CSc2rl78{a&>zJdD4nvTimps9(I z#YHc|-cWhh^;n4Nfu5coz&9hVKik`}iHV>E0yJ=J`e7>|PJ^fD4<{a=?1v8`O(uJX zKC8ce5qcKo=bKtsByU;uodaO@^7QN~)p+m#J${-Mis5|6Q&!NP{$G2U-YjbVgW*s#GA`MzZm(M~KDPRdc zpo^L*2n%ZBt7&nG&q--%Z!Uf%^ICM|uO4=1Ui>{C2jRX0$;R^b?re$n zU4AGc4lf%Xk4X6*t(BHCR!m}=Q3m{Y7JNNFNEb}=oDdjGl|C66S;y7yYK(ofcX1_0 zGo81j>`(@WzkD%ZCn*ZL`j4BcvRa4zWW?h3C=~sk+!oHn)4S&L+ad=9MbQ^x?xj*&vz+F)WOL zI-xhG^Z0}6^yc+z z@*E+9BAh%}W>CH2WtBWIFaXDL#8#kro|cZz!o*~FiS?%M{hK>t^sY=4iDhMWEQx|I z=ZpT&Kr}X}e#DXa#NM9Qtkn}LWJ}NklLn&YjiUQaU z?rjVAlG%iXy-t5mL6r+So3m%ptD+}CDmX}0xd;1_CmTD5{;E`!`RZg+d*+>4_2f1U z-r%R5+F&VZGiIV2D4n;f@w|;DHDgcww@RYLkV78T*^E8+u@8;YBgh@!oNx8ofk#6A zbz*gOHH+6m#%2Jgj+QVLLp~Z-rpBxddK2mK6~Ow*$w^R=;YgqlZypb=yT>XXZOY#H zg4*uazPRVT07x7>>5QzKzmk_(Gww0b_sl&oAX`!Ojx3df~wT_HKyO%Xn^Da zCjo||lM_&<#AtFdvK}^_M~}R&PM+@OQBzU%Xen{wD;)F|qkj9-A1|jcut!TvYi4G) zRV9#%gN!i#^x3o8%F4=`n#kj(x;ij5KCiofla#L|#X#8{FY0t#K`LDO@dJww!H36Q zy_DMOY}WY$s3pR}!YkU~NhFc~@FK{o1ISQXiewLaczzG$!0d?%URk2FO{Lq|&u$c} zM*C>K()?=gQh57`5}2eC6<>?_p*z=i{t87!QV6C0d{MV0fOKD>gusvJmL-d&;L~@% z3OO$kilU$2xE>@XFA{9@)>7ix6HB0FQw`u6#RgK17|<{1g+(#E3-JA^Xb^*N8te6x z&k19InXT@k!Y#sz((ZXD<;+0c-0g#HcYZy)UOy(R-(&O?+0ZldLv#E zyTvvkC6^04{5-fkpDo2ekfC&+7%eUoYXrCU;QHpv?T@xyOgtCGJ1ia+(P4VzhId~O z=s$p{*M%4UH^K*4%9y(4 z+4}M0$Bqt}=J|q*43rfPRirQqVsg6iH%fJ!0HPB>8r?aC*MG*`WY!t!4kp}qV$cNl zo;&uWc7_@U4R}#8>EQ3CWplZd3&88BKk)BiXrQsC7t0_9Q4LZfjR?Cmx`YNOkt=S@tgPl~Dha=)yG-#yu)n#6H*)bkti!vYvqSi5h&WBb zZw<5?X+oV(Y|3bP(9+Y4=y6I|8`OP4kP2sQl63>+8`7AV-%L5ywx5~wb%vj3rKXk` zRPTQ}{vz(NVHt)p=5w|?mx8L2nxW1@gH1A{k~7dSF4Jb+k2N|6+R2wta*KdN(auX; z5wr{pn}bgX-cwm4>oaCA76AR#fB3w91akH4q^;8mGC7Z_&tB8aDkp+U7>#_N_SNCP z;y~VcfvRj`ZOyp-3-6V)+|pxn^A4+CG!wnzi;*Cz1A5DB{3e|3buBRgRv(0h*_i z6EYvtH%5jM=kkb1flGxLAo_4fE>M1E78Q;EF|LXLsRvFJP;;JaPHE`{OTGw&5-6_V zpMsw4-hzdVji{*1`nuQD_1Uw#qY>cPSmqA^AseX;Saxb>56C@x2G%R>C{c?k-ZM)Z zn_nPbuCyLq27uxK7!jMgkZ!tr^gl-ni=`Hi&7ZEK3C;ytKxI}vB|y+vnw`an;Sv$? z2GPg0`5LrsIK6!AQhwR3$gfXDq@{15Y1J8VIX3yF++aOSo7`ru%b^V_>8}1^A;d~C zW2!Ir>;Ro|HPt4}ifDNcG?eD0Aj#7UD5_J{h8|(Ax~gD5ZOg*%-O#9=+3}R9Cq|fA zjwCm?Oicl9Lpe*Av8MV^k_3zU@rQ(WpSEA;agoJOIhOw=M+#kzWh=A{cS3)|9`Jdw z-T!G0B~DbfMG$2UJ|j+QQ%L4m@8&XQZO0XdIGLx!!ax5qd*rmA+@ct-{>^BfD1HJh zGu?rYl(QHwn|Xqr#IirM^gg_P5D^Rv3_dhA{`8!DP#F-bC;)~}VPPR4_ZS{dUS5^G z5;R6tCPr3@p5$zXKwr#nF*XDA-n(!5Q7pc%`1vl@*L`!fGE^g@yXZFBw_q`9vQ2tV zWrW|yok);NNa_BhXtdKZ<+K;g`OVV0lTPlx6awiV1}&>wO(VFZQFJ^?k$?27)&S*)_OylrCNAEXWuK9-{`}bCQ#1 z=jCC$G@P8A)Dc?co3ZBEXM2PW*@k_hw00pTBB~QOD2fu}YBBwD>IeLb|CE)5WreJB z3IA$LDf6D%BOY#U+(QJk@NQdy`fCjX`Iw^Veg~l^PoDG?I1A*KmX@YGVFk@7;2t~q z^HHacpU;e*;+VdkaCrazJ%L0*2nFzypV+>>zIf61Inv9^%Ml~w{+&V92O89sXBT-w zH3sp!42JC%x-Zr-WX-=IbZN@@@R4m*SK{q?x7CN^-14DL$uY13u>w8`*XK6`#Kg#F zh>}enjBmv`KI9wla&rf+rK;3*XfUTGB;bVT)6{9x6O88YBl{KbWLJOuXjG+-71;xa zOo3@>+cQjdP@8G6ia!I8?8<}+9jdQMOfI+Y`+G{{9z>z7Urgxlx;E!A>esmeg8Ghg55qI2kBX;P^Yr>Ag`?*V#FhXP;AC8M!%S$# z3Z7z-3f)hL@9Xl501I@xIIvo)X2!FCY7L6j#~*6letv#b)YLTwfUHSk`-6(K8B;a$ z#SQ^|pGII3&$<#k{VOc`@4^mxLo!GB{SiarNAURGyy5Usv$nPde1>pVf4b$}rd=S> zWHX3&5eUWhlkYJW7S;usqmmLTAEFNjY%Nyp!nb-=M(Eu4+JJY0*0`z}6m+{bls@Gs z9Bm5351&pZ;P1ur$`95h8}aGj51ll!UUva6hVxZg52yJjNR12DJUe z*w~g|Ns{!l1KUkd_GSG}*b}lK6_A-J9DExv%DVew_UqTWr<1H}vbd27k&%&QD#^+* z($!20KYxCD{!6)SA*tgY9i6P*a0YmJGPx(Cxq^?IUHjpEV*!zd7e6x^iHmBU-+Kq9 zNKFmtU*`Yb>xS)n_sVAYP!XW9JU4q;loA*bG*Y{qaw;2k%hHq^`ic+}&FsBxY)Go* z1*~9ySn|cf!om%J+*}uAQ{_|(6xZ7g(N3!!tHn>gE-o&w*gu>5g4TM>3xc0{?abz} z)#IOYbC-a`iMfrd^gF=UwJIlk@#p7I$2nB`uEF=)stDiTS#%ci0KJQRgG%;d8S&#S zh;nwichF^{GnId~dO5K&nLLL^eNW6SL>=Qoj07w2bjr|Kh4;Vz#67nNu<$)eWfe-k za@KxQ$R;HxFEhE|W2ZOqS^YXp6dRGY^SSo7{N*#bYve#}j#NvId=Zx)NwktYNZ~}v zQA>tB??1lc?mo{mEA&;DU2_+w*$4lo#vuKs*96a&7IC->jpuDKRU7hsjRQ)P-JpU$ z*8RhnR0FmpdR1MzEX`<3%r=Oouhi_)@#`Lv__OrI7?m(*rT0jn%yEsJFf92dQA#G> z1bmoCr6To5_%5gsYLz)?d~8;(hdaV%n<1)_ac3H*eqW0$%8HMlT4OCRe_=0*$aJ_}2Glyqwo;N8|0+*MD1g-reT{ z5CV{kr8)$Ms6?kyhaCzG0XeyS!(7Ty31Ra%);4D?_7LSM95Cr3w)(3X4>Bl;mFC8dc^XOp!EAfA@!|33BW zIBO*^k_Vd!Vq)#)wR%-3#ojC{j@h(}8|T+kj$Y6igMwswUU%ftqU$Wsho>nZ)rF;_ zhV7zczf2Q(A9p3kvngMwNM++EgMn?>T!_Bp_O~u?ga>o8+@Vd5zRqqW3;eB2buYEp zueA~bF?IVrJqj1g9dwtnb3(y$UU72^o5!@`?ypKp5M}hsCX94+Qb4`k$>Lh5bJ=$j z15XB+B`&skje*6B1uyu_P+$AGLAU|it+7$RM5j(ypTg_!$nqy*cY|5^Cl zi<8?8X&6EKFZq%$@I<0adFVs}e3bpJEQzWwZ*Dz67`;7vOhEx&D(D%-#l;ZXx<1=r4sdWa7|H3C;3s?|pUNaXC!)`Rd1KO#-l3`sp8Nfi~F^Upd_ zu^%uKm4lbIx!I74!)_0&3TXoxJajqghB>JxqZFyCo?Bl5bt~(8>Fa+#*`Ab?l*F6> z=KfObIb+w)J3B^W=WhlQbuVxfrRrQhreR+guA-MCSx$PMpPYbZnG;t~Q1F0{J%O<` zzA${0AEIU-KAas6(%HN0Bqb$*3X+T*4uCVlE_~5_gqzE67DR>ld4I4&zYf_K1&WYh zNuU4pIAH1h>l2P1{{EE`3DF(MC*-#mDr7~MpdCTNrQ>21dz!{wqF}%CPR1%juj-_J z@SaE8LQ%jGrg%RpQg;|Cc3Af^Xw+MyVDUlj2XyAq*9>`*FL=6(9bCiYpL(DM9RF=C?pX(fOI*Fx~k64$HB$n${VU#E8 zM87S=-N{QpWT{V7*87jl9)+k_p92v&ZFsS{a%#FTlH5cZ_kO>|BQjNbgn=iVj~a-&qF^$I7!ucYU_C*Rb*UP} zlT;~SHPv`ntZJX+f;FZ-T#xr&65XB|iH3RrOXK^B+gH}N4GqL6h-4CqwF;{I)HkqG zF-Qje582L`1MnctVqL$isjZ!CA0ka>fS{$xx31E|sUt%6zAHTySM6)jM@)WF*XA|| zvURZ|L3HMW&#e1JfQ*3(qy&j`N%S=8e%u7fwuk8nqK3;?PpPYFX=~$GAaP4eBbVf7 zpe8&(xKA7YiG8-a0l$Ptu^=Mmk29}=1?{VC(nb8PFmCdK8uVd|k=%oryMT#|GOKV* z;~1*u&$jP@M=E#h_W0>su|g~SCvd9ncpQfq4~L7g(9!(ZEz{0A+n%pi3_ zG>Vx6DDJD*ucH)7Dsw2*wO#_6fBqRDjhDAKlET=?2yv_;6tsUw@X;eui9tyJq9VyZ zefnR76;KYw1<)KW4u4g@dE>Bz)G7RkTpiA(u-9+>SwZXikCl}ebJxHynTW7J*E8bc zVP{VnvITXRm{n6QHy#UHm)lAbr|5mZ#l2WNl9t}Owaw~M5@s6B5B}YDu|M$ih&Xpw zDY715<`v@H^Z8@6Piju}!Q0_s_dut+fF-_u1I;Em6{aNdkNe@|V;nDaFuu?mALUpW zPjO85q9Tw;5+BKeCMK41QB^Z15FXg|$8pw&szWlFtkRNCHSYe~THOBL?_cyDpbJo< zIWCRJy?f_padXe+sjI7u`(`-@$ zg$~^qH3d~C43}C2z#!Cnov~f-YhdFLA%;xL;4d|Gbt-=A2=#J_=c|4HAC_Hk<>lb` zS7dhFV(Yq|zYgBbfu@kMP4@cWt=-+9AD@?vtcNw3nVRP3 z=8AttkCJ}*^5y?0q;;5&{G{NyGN~ldyh4bca$KmlQF;8B`iNPxKq52UG#aN4eilr? zwNpN-MEEI4gZ*f*#~0fJzzH7O?7q2OGlABAQ&}Mj-7vxM$XQ>os|G{D<@D`HP4GW&wibs$5t8cizSA5 ziFm}i#v(Gr9FI50JE4R^o!p}oPl(Inq4<3wF*LJ+oVb9mv1kgU1KsgCGb6<*@ou6sDcV`;`W-C3R6?-A+jL4=yShzMzY`w zDmIzaIi=VLWSwUNw%X@u=_)+gk87qMRT~t@fEcO) z2AjG%))xL6p-SN~zU*H&h{kxgnek*p$gbA3<>-6W!_JF-UIgw0YSBNCGf5p;4|oc3 z-qz>820)}XpKD4*faw1b-YXmv1 zE~Z|_Hz94HJN7y@85kNqe00Bpuq-mi`$TA(o+MTg678_Ep0$v~R4vC6P1ZEP@F}mPqQEoXHc7D)(Gi#*ru=|ZY(ih0nb1wXQMzib^ZJ}1>?U`RyfX7 zRMgMs0L|8aHq_Vm^!8pAd|K_{i!3LU62V=Rb{Xif-T(J>0IA~iZAWG1V64sRAmw{+ z+3bzjKdOeed_qCRxRc8b_6>px7f5`SKP&5%iwC{UD&Qj&k= zFiXLe>Rn72>BeE}^nKfNmnPWvFJU9bmeajtbWaD8WYXU&iUq_{iM34i5?VsiN=|Y% z3r`wCPam|xbji0p?}o3GogO2kSVxv!@`&x+TqPJEQH#_oCdCV2M&Z?jgAPTafrhi& zZ)d8+*VWY;9GR;OT>V8Madl$DA;{p30^A$}FCTi@h9$@@VYQe&h=>1PvZW3&7Se5AR-FQMpSQetun^Z1C0>z2{vj z{cOXbB~wyTLWE9`>;_WDkP=K)6$-dG*m>8+!@)5O$OI>@o7nhqq#*K2Eifs_QEPz6 zLSzL#tf{%PSUWbRAZSkXa%iv7(8p;pq#*|aBErb{IGBdB$PtN;W_C`&buYb_pPGv3 zH4JqNk~7i0x)AHoVI{0FkaYacu9*!d%+Ah^{$Rna7dL|rS3FZCfg&_V+l?4hDos{^ zpRSOP)T$tk?_VYl8~XP1XTtJ03tlqFWBsAa(5Kz}y;%43TFj5I4@vDz z;)wMEaM%|J>_*VJI6ZvJ&N|t;lqq-Cs0g>#$DnZt+s<-=ERx1YO zmvwhqnShUFWylU{#>SKu-P(L^s)r!^rO2Zwev(&5aO69tj2WbY*GX)0%ftSPr zluv&@zdG4_lHQPkf-J;8mv)yiQ{BVEL+yiN*T@Hj`#rV-cDA-S?gB9C0TB#v-%tl0 znV7uH%zOmaoT1^Sn;63Q=H@1`a4_Fu$jIb(x)?V9gXQk1D6~k0l~cdet^voULU9kY zEMz3=_Yh0h+Xg_;+Sc}*=wcfX%R~c1qLIFSU$V;u=$ql6W>(yUgoM6NO(C*E_RiI&Wy9 zr_r*15glK@Wu+M&+z_{|BG}bA^N|8kYN5#~d%;zubXVn`uOe%D`|%e^=;1lk0)m1N zeS!N~3c7YlVTHugLv3kcm<|Y_8jcP8(h+!V?!PCz$_y3!Y$cj5OTAnUU!2G9rG?cc znB35q0(Pcr4&0?qzTSt)1E|jCok4;A{*um<>m%9GW62SyaWB(P@_F-iG*-S)(A2uXY}NMU78oNUcUSRTH5b${4a&#;T&`s`UW{1V(4SM{8E?rYAtsy(?(lQblG;2feLjYegv|*FLq}S zFE@+AKVx7ry{c|;SWq|0OT+muF8=s303DA;4AP+8kNEr@5Dxee{hTy3Mu5r2aG{Q% zw`qR~QI@rNPI|Qcz68mByzmAlBf8v&#>e;f_CO*9YK=+}9T#HbuwN)0sKrJ$*7m10 zKJ$Vp*dNB63Z?xW%%a%&^auj8I0W3!2R8CAotsmwJyb~JoI&^&KuY~129 zFQVxI^IXd#b!&|p!~?5+IUXGW^sH#r>wSdf)>Bop1kShkcqzm0PIK4}*nVt0?5$hR zIC(r3aQxElOKNSj_2wmicYd0OqM-3f?3mT?70LwyW5qW{e1wi?nfnZw)PCABSRyZP zuQ{w0-;0eYJ{o>6juys?&S4*eE{BiOdDJ#3_iW`;Qh21!EPwE)L$Aq>!LK}yyWXCj zbtYL>p+*8ls!7VM>GhJN?7;*U`A-bq<{>IS%S;4s7{-f!@9nXaT0@xTY!Vk2*9UvA z5&E{cO3IRyb1owBinezfZB?IYS_G@%?aO%as^}G2Yh8CS8aVO@_aU~(-t3P;9Am=i z{+as5GH^x6F6|5xM@f?y#ESgY7SnfG8&4$WU>ve;6o%v^Vheasv<^CfhSzz>b+ciR zX3Ei+zuf5NUeDpDnMa$(Qxa*w%tOtl-k+bGyr1?OrY@L?$F$yBG3_&_W`lc(73!QX zFJ^3{nv{H>g_RYgj$h|sh3b+AC>ZdLIBl-;ld^y9vOjvp(5jdoSflo zAna1&pk=BHLo6ppjwlv>C16gZSDTH5ohE43p6>5xG`oga2=o4b%ruAJrcPH)RW(GD zw&FitbX1r~rN^_3v!3!n3I8l5C-g$h39V%woAVH}3vW`;*DYl{<38@7wE{auQJUH$ zb!<@&78dpz?iy!g9|9`{aAJLq5+6;CT=nu+XEzD1RbRDbOaUvsLxcrAdh{tAK4TNi z6-LEd;rB09f813>zu@^VD$i5mv#%(Hz&2?=%H%H~G_rpWdLhvFHWt?6U-n~&`0H~R zd;#W1BkqoJ_gF`#&S3%;=-}V@%xpb!jj-eQ%IJH37;Wa>JeZFqA&@;~XwmNQixe4+8yzOA*M*UV z1-gKPZU|R?W)cExKq;OKS3i+l8uFp%f99K??VEphgk2VRzC?$G26M5ez?-bqzioT| zdlv|r(Tx9`5d2Drfnqw^jroja#{+tR^QWiQ)~nD+Zh|_;o_I(Uz>$3T3qIA*1Y}>L za43;*HlwIri__sF_x7q?B`d_GETOX08*zooh2(gM(FgoX9o4Zd`TW8~+BM3;(4$wl zn10eAPqAazc}2Q&`xkf~%u0gQ?)0wZbxTXGtBRGXNQ!!llu$l~e$3;&+4^wq#o)X1 zV5X}Gn40Nog?Y}PyX&O}t#|OaAu|I(qAcbK5a(bU(|0Y+&w~S=>hW#!IPm6l1|XT| z9IWw+{l!GDsTH^7`|Qe;MF@zN^h$zHMhW;3hoK%o8md$f)J{NI-IfO*=3UFu!JdRc z-&1&k8(#`IE%kOGG61cwA=7QY{rvs!)bMe^2s(&Obz}~$GNr11vG}NCVF8vA$r*QM zX6C`HyG#ddhl}EqjDe>B}G^!EbqUw;XS(L^S6EOFjy6a`Yy{ zkD-=)Ihw3$ozu+mMRks$$cU1SH3|hG_#=dml2WwLIF+59xuV)99QrE$BZ-4463|~q z+nzK~awBQuWp&8WBOHQs%p(;?N`Mh56Q$=M40(`vu-eo0LB^8&PR5F zqHziXoIv_lNVGB5nlOkp_JnDi(5gNss-Ck;u=_=M26F~Wb}zx24vFy@kd@K{7x(XN z3$Af7{U1VwiF*}z^l3e%b!h)a2}kmlx*#u&eR2QH=(DUAk<6Gkhxs4U*MwEVF1sd^ z?jK$1FmQyPA`qr~1Cx_)IKd#|Nx*p?b{fL=kkN`a+>YT2$?@Z^TH1Db^Rj3bD~BMp z`6vUqhhF}{iu|yhyfb$6g4VUro8K_)C_=35L&DC*NG)E7+i7ECvpJfZo|hN@TkFAt zeyP3|QC8L`!x{ggdV`*fXI|O=en6$9$Mq*aYP%rn{ zPGPuD#%+Q^LiAK`TbV2mpVJo#ej|K8p&Xb349Nou!g0&d7)Yd6@xiEQ;dN%+O ztXlaFB6;HP^6ENhZ6`sf`DDuK;V-3EB_t_H{U#Q2yxis{`uY*4lwOg-Y~bSZ@MzV} z030OCLk9r`NJnwlKh|T!jiG}ldHk)}BX01&4+hn={MLOC^T&A159XEPFST^m(3AD^ zYnU%sGZ&-wW5|<>^SX*qx`$@+6aJC_AVxINH!=(ip|)|`Ls}IL)zu?U8e$b0JC|xF zw?TU=*L$j>q5`?Ao<7JQSWcuNOF3H|%x@k~O;3k?gds7#hYufdJbLlsg^CJ#>IxAt zF(kES@h?Laa&*`UFx+@qwcss8@?gXleisH_O!}*z6WQpVkfqegI`>a*&>5(yVU`ON62Sk2b!2pOMJXv?VTKvt z!$PmKNV?@?qdWSFOQQxPD`~QL)Om$sa~+t!a6*1QuyZ=R?w(>KuANm!`h8&mmzk85 zgqAjO_tTaYAI*Q#!uGDn;UQsLVk=x1h=Lh(4~gjL=*Y6rugM6Y+k7c9GR@l%qfARK{0dABDtFR&WT{A)z{bWKJFQwSs?}8 z;Ey2Ay$)Sy)3BRnGrSHC<$n@CB*Aedn_^M(3M)w+s&A%T7PIsZEt!>c};H#{RR$`KBqj+%}AVPxHkTkLm z5&Q*cRwXidg@rPZFRQm1boZ;9-;?n4#NN|cAH)^&+-D1vS%S3G zlJ6#M2p^>HiTY!P@$TFQRvcLVw%8JCe8;EH6~TbMONBe(_k z=$_AV=s&R#?g5mL+S+|c=@!Ta2Z2g;z26zUF-rNl6Ex2tn0F!YED3l(xa=DwO(PR< z0SY20;>*1-9P!Js>1u?x)3n)@_DJwwtQT&trKKfb2c>rA8YmL{VTHjJH%o+n)?vy` zZ?<(Cd-@QJpYI3X!F05rSn3AMi+OBl_PoC!!TjI@cm$SXw)q)dfU(2L$B$y_`N!cY zEgc;l5Hf3M`3?~25C-7BfA4!jC+|x4?T((p6V^u+U9pnyTO55gIj0)>g3`Ato1*(^ zFW!D($Ya=mM#@BASzK&6_2!WeJyBE-A51s@bJ}|RcBbDNKeVv815tOnIf8Q3s)Cot&Uxb+s=Nf}Yk91dQS`GVN^1p4P#%9@ElQWhh zz?W~<=^)T@wG_xQ>cQ7Qv~I9*TUD%gDCOh3|CF#I{L^8?SHvh}OZ7kadZ@M*-9vZ} zoFqmJ6H~PF#@NtT_x63=?dBF!WGc4O?n{|H9&>XVmK9m#-(;Aoqm8OE z&+OWscIEJ$iyPF-%Vyw8QK5~wA~>ldS-HhK%H{1_^s6l~Tzj&7{aAUO_~ZfU=p^ZY z+UHasr5ZoNzgMj*0xY;D^+>nPuuSW3l{7t#&%|7MtX9eCS z1VppUr=+DRxU9OKZHn-)v}BR12RxX^h9WdP|BZ%q&GioYFkZwNT)tdwDS3#URxT#C z$uOCZrPFNL2!BRGqV(xgmJ|0zJZ>c<>@g;dOGw~4;7De1Rqz09+7#Tf6oSka0nOVb zrKRC@xiAFPyoM9iBCe;acgR(tY>s&UmULtM*C3|2JclG$k|{TLb_q6UHnU^L_KS-X zDOg%rQL%@;ImblZ`{s?btSqGt=||Sah#cox-)n$mPFy}Hx&kz^Om47LsWJ9^G%(JE zg#{#7v;`mlqbOtZSGPCRNn&RAqvUUnFG1mhmrtDyKoZxB7qw4)#OJNpBD-_b=lh^U zvvh2Ml!OGa_QV(9srGtp~pZTm>+nmHk#zI%M;yPOhZpk(-T~hz0&=OxRa+(Yxj07`r~B6 z1ON@SM?_Pu!^mf|1sm2=!ydm{CQcjtoZhpPbTKt`NY>-FGwGAKV$+fXLCL-!Bqkr_Vh8KyX{ZB60WVN~e%Y&QF4S(GHmo>38o!*49*C9|Y?L zoWQQ_Xdx+4Q^4Fn?9FLw4So#MAk02xc1^pWev~q^vV!0?^Bs-=9Mu4oqjrONXM8BYUxpU_ZXwdhW4sACOzkzeV^|)C>B=AoF zy_McWH|Gbee+p-5j()rj{5-3djg|r&v$Zp+hxwHHl>NZ#3EKrF>$%JPoL@zFR)d9w zbzJU^T>e^d?72%XXTOv4NS;+qm|T_I0m@|I;5#y+9PHWoK_f3(|9Orza73&qJv7bq z-CkdYz@*Bg|I(-09F;5aJgOLAI~fj!Z2GZ{ll2bI`w7yJw4?Pw`QO(=@deIoXf7Qe z`h3Q9&Nq+MMNCo4fSEcE6`9qCOVBwv{LK4+i|d_a(8<_QoEv)P^y#Z`(o`#qjgF4u z!3V-%mqsT!RbU{Tov0j^NJ6T$kCipLsr6vY>|Rr^2RY3`28Yp)PGl^+Zg!RzpxPru z^XJKhlC|yUW@(9zCy%o$N~TG3t8|9u1!i#i)7V%;P(oH~U-*k4lYci5BSy<})EJ zr$X6Jg~wqW^V{=`lKMP*pA0n{NiwdD?kV&Ay}b($$+W5i$g0jecI{1W5m7j-H$;6@46XDlCk=Pl;_Uy(C5F#_fof zyrSY5QW+;TQLZ?-kpw1RLH^a?;zM?d!yw=GahB_awB9Sa2$>{?7wZjlJ62+h=QQ4F z?jRP*{I8)wH9n}brw6zMW(Bn10&Oy4Vq&lye-F;fz(9|}!fdUsx+hd|Fg-(Cf(WHy%N}%zZ-}=4hRZlIZ3lhD#%|pM5&V|D}@P+ zp}R`lG3o&mZ1r>`6$RkT<27ikNas1zmy#VTttsE7-$jicU9m-Ae&}T z7$)o-Q$o9&s2553`qisuxjIN_p*A!hQpusO6n7ZTb8d~uyZu@_TZ)5P_)dsO-&Q0g z8)Lsw6=Y?O8}*xK259GH=4Q;{1OTnlmLxq`o#n12)J8Z9D$;Ny>KGi z%+xe=p|Yd%+V=FUzvwu5mcbswa4Uf&zAI$?ykWsqWgR)wf7@T*i)Clo+ePs?Iqw7n zj7U>SRQVg&m?Tfc7}?M+oMkv>(rM18;^&H*i3wh(x(Pm*=8M8?%=)rPsV=G29Zu0l zOD|XD(AgdjO-qkz%dyvGv`*LZPtYqA_s{kTWa^>%=6r4PedwI+%CvnkxzS-0&O!cl z)#1ab-3qoXqX!WJx9HzCDxf0yB|>kiICTBMYobX-?kZ*pn%%TIUqgW#sn$uo+PW8p z_bAmJ?s6;)CHc;n6?9w3y5m3o{t}_D?3bc7uNJ&*9`6|7sC~0gT`_rtX*;Z1Llf;xg?(bDARxjh_7n`|z+a>t$^Q~ONryRSlx>Twqx(?`POM9qq zQE&1wx>+6Lr5{@OFRUVRM2dOjPWm}c@l2Xe_dLklhRbdT&l{_;%9rT~bIG(CuC~ex z8D9HGnHis9t3#9I!Nd^CZOtxtFe{ol+yJEe(qGb5@(hIZAXZ>}iSkHvsv?W_o!&t$ zGBRS>=CpIsBYs60r(JuIJ_lK3`A4{)^BABxE*{WyC6Z9Ks-yXE@|Fqrx_ypm%zG<< zHu9NCpZo3Q^4^q5{?T9*INh`Rwew|F_2BJBk_zfUtN)Z^^fYabR*5Ka2i&SGL=*x| zv|a&_0hS>{w`S`x|wlJm^ParBy+(%Xs1YHhOJIvbkTW5q{V@fc(! z*gATqC7gvgqF{aBT%Cu43&LS(HsDpvCa<3u{J$J}zBreHq0mw?hL!`ldT1pnjtc|a zLWDz4y*TmY_qQz$7dCTgLuk0(Fr3odU$)K{Ga6;E_HTFTA5c@%;)6(l`0N}J+kY!y z7hzmksj1prH_%orN1C;EyWBYJwAmQGuko*7e{8nZLb$kj+M`Sln+0yU%So#8iN{kU zzCQm15G-_IPyP!|MdNn++W(yEd`ULML(?L4HQHlSuWjkC&~9H?7IB=c{z~(5U#C3v zLXxohqt9mUGR`i|hZ4ri4jFU4DEoU{^*{t6^^o+wIniN)9GEPamq?+$-=- zqSRpd)8G32rQ=KbDMrp`smVxifa9uecM+t+ARu7)cd&(MnKsGro6d$oZ+3SS1`!I1kQil-^b^Gl$O7t>%OY}LxY1Ful8n7LcW13 zoO|TzPxylK(lSgQLTd4(veE|xL&^C{tL%ICR4|#?vv}0++Q|{we}7t2gDB6v%9W(y z8tC6+8HHXsE`y*z;w0mPQ1p~i>D>Skpas~QpzY^JK%7LFy1;;Qa&m_C>*(vhyLV`h z<}<2)$Bd1$@%v9i&EBqKXRd@s}a+ zoKS_|zI6+EMG>~;|7KFn&YU?j@rDEE4B&^E=3$Orm+Bn&Ey3kvMEAW!jY7Bj=g%Li zTs$a*$fuj`{*Tu~i6E)lndbXPa08od!4KHk+pGJF?6n_11G0$F<0CyzKxcxMqAgqb z@{PTGVRO1!Z{+9o=C0bzx`Z_6;V1?= zLut+0gS3YXL_M?`k%SY`ZT;JGhvc4XR#q0Q;X&{`KW)cn#0!cDAZ?~-uTxQ@4`rGF zxG@F7`*jJ!b$`D_kp=aO^N`3m7UF3EQu2q8O*QxrNZl=H?efj>wSR-)pIq?_M!kFY z;`v=3Ty`Sz`10ZpK?rBwfbi3H+0X;dok^GmLV*s-`TYL>)eQMK zA6Q5-e#zH=G2M8IX&XW$t8ggW@|`4io>2u%@vyjHI89qKw7DZvcdj=FJF#{glFvA^X8nwa@W5n zq;Ib%iotEFX#N#bZj#H3FPK&=Z+!(Mkt1?_a&qDq_Ow!KxIE)zzh(c$ejrlGFXCy^RxDLU-+g=gWG_0>G~2c(Ib(jkc|hF3miu0 ziDa3GBV+3?NF{y0^X00AI(0o44CwcqM;7^93q54WO`#9pL>7ggh`4HY;a#OJN?zf8 zIm(?Eh);w&Q%wvN7^;*x3%Xp4sPvYldh&k1;B}78qMq4S`>@Kl8!Hw3Dn3Mpv`GiM zM;e?M0~N)X{?P=fAKy?$q^z%Lbo%EPFDO-HHrd{&T1rUr>FwzbGkGXnsQZGo^C}hl zJ@s@)uJ~QlfX|*+qqeVS(=&hA6COxrcYD9)?X&EfBHx+;Y3jYR&L z>hCuPK@ukE^B(r(?i;Z7KmghXrrM|*+*4)X`Fwp>5Sq~(!A28}!GenC>vLrUaD9E3 zo130aepy{zozLPj9wz;Ge}o0q=9!2l(3bQ~HRoGE{z1(wx(!(jS+5m5jA?1?v^Q{n zi3tnyCtCRVJvAyqpyJLz?k-t~QmN%VQ2&-`OD*iGlTkxK^{Qj9PF~$(t_%6xe#Adu zG#p-nIGE-8XXCpvJcry_qTay{qQKb;2L$OXF%=xS2lSY{|>?+_hhO8dU&CuAcyl$75W$5 zAFB$9WNz(UuTP25Y7I?Fb}8da&kq?o%<6If#2G`1@mJiG+zn;{q9gCr^~4WeB`1=f zT_*V5t9@sUM#*IB7i%f`0`icmOmG`r{mDH#O;Fq(`e@U3y&Ioy7b0O8m?QX7va+^d zy2AxIXWP0L-skGvodv*CC29Tr{qVi;oY-SQN7R2xoCS;wf~-6*U20ddu5mwk{CFRR zu601ij{9WpcHKu;4*fJ@cbw6H{%U~w3DCs^P!ofq@GJg^Wk!N%Y?m{Jr{Km{;a@{J zCFg!R-%x~jOi>YfGZ&n)C^mUVec3`XO(+gTqd>VhJHP7aD0q@ol2IM7Yj#9Oun$`4 z-PL0C$pRQ_2><7tr4z~WbEsvJ{x9OU7~Q9Q`4K*)Ad>g1F@ z2a$px@}v~K#!ONy02Jvs1p@&9<{GhUF01pS)whVd07EKFm;5GqNDpnHgb1YCmo-pvhiWodnZgro2q`lA_xlO2OA zgqwtOJzI&<;iz1xtlJr$n{n-3Og$GOeObztB21B|FdP1JaZy()kKVeQ4H5DD3`pFt z{{+m^NSp=Jh$G%x#BQwIy_M!O7g+zS=jyfZIqP!ghYJ5b1DU%BKRRv~V;JLV>~D7) z(&wq6P0DJvAy~%5pLaDeiL> zkED9=PAMSGw)|VdfStmF2)*ZRlW+{!G==UE<}Mgst44^!xs&47b9}@ZqR2>^#!*`~ zK>ZfbqW0pRvTX?PK`m^t58J!!zMq8jq}o4cXGyY)d-t%PywqQQt0FO<^TUrn?lt#L z5ltAoy3(qrc9CVo`tisb`OVrLOp-qqprT-0%|=BQ9%>MEl!KV_LfuD&(x~&>dQ_ow zH-aR38mCX}vu;J1zW8yW-kZ$4z?Sg*V4DJuY6{LM#G7l7lZ710X|W zppReQ@PWvw6h@@7b8&In224gn6psTSOAO&V)r)Z(8rH|5i-D^p~6o4 z_Wsc>$h$#r>Fmvi^KcOcEcnF2LvV_r}^YkcuhyW{-A!YdN; zMYZ7pU_gWf$)pppDX(|QK23$Mul`%ko8c=^9gk$kfQ+Y}>MHV9;UL1~!;*0A_&ag2 z`6P4kg}FJ98u>Hv^Yin0!u;nrn6%&<=ytAx3qkk}LNRdDVrasj)s9Ft7l-N_wP(=% z3PiYw!V}L%z$L=-Mr;gJ_FBdQ$C^9QOm{aq*+DVOI+jfz-B*;5n=B$x;_XW+NaUY> z%QqT^Z-ftT7HxiHEz7U1$b7sFg)Eb4F%v=ziksU!oKkIi-BYe!Ubv68aJJm$Q-2AU zV?ujtpq_UAdkh7H8x-QIYLB!Yc8ca!Ob0yllx`{_!osobQ{TV4!}Wa*Va2zgl~L{O z-w*KuEIPio!u0N^r(=Nt6lr}gDIx`+o`^8cuDYgrA0Kz7NplNF5F&&GA4_)M0VRc) zrqibpF&C{1(`H9U#|axsE^|Z;<0jstu{Wg)LnH2E$OjT{ajR>n`Xb4jQBEZqsBaa#{*j%C&p2`?1CHeGBdy=k4u+AR=UKH41{Zr|IJ0vDD0>nBUSjF+uPfy`jD9~e0uh7)|cRk z#8jiZ`~g0pEX_k>#>U3}j$gkHx&3pb?NZ%McIG?>xXkM-hz8i?zJ4Wi7q?W2 z%C?t8TKAvtRf0|qGj%LAxVWetUm>Jkm!h^VEO48A_yoEZVJiTU@$hMw?31~~v;ov8 z5IQQW(nVvH_b>VF-y%umPj+hR@Auk!QRVRXgW$-$=Z5sA5-C%XH2iygz7Q7Vx#Ttl zEITH&SHY+M!e@D^9aYz3g{439@uNp)D;>#emdZo_5VF8p_sFvB+lOp+Fu8z03A+#= z?Lxi-cq6U0{b!!KeyY8cO)FIL4lEMxi|HZQgMnAMU%Irj=yg3I2-mH=?(4k||9cT6 z18ClI9wW8(<;(lM>N}CDEikm;Ga}CAeF>udQOIWI+24r9^;*Xqu(zH6 z@dKkQ_ei(5AY$6?-Q#@0B%wj*)GuHq1;PSfi1=hRyA z_Jh0yDCN?;vYmUB9yYX1mXwthcI&^f$75T=SV-II8G)w)&ct(ZW{>bHDPfSCzZubD zf91*_kOOg_+T2Sj+2bI#2ws=V`Uj%}u3dj4Y$pe1@uj}H3L%u7ymHV*M&m+r2C9$Ccgd`7q8bVal|N@JVjMoDVX~c_~3nIrD^kF zYTfidVgN{fuZ!P@VS8G&Ot-`0HasxBE?W~wJ=~ltfS@hI#K5!8xhn+;Mm`8s5dIwJ zDSWr5 zPQ40`mN%T0^mxHJH4?bRXcnqGviH?M>}YfTeufcZb?88Tqr?ebmebrq>AF4@CkF9U z-!bcUliDa}v#Rfluj(M$#j(2=$=OKg&%S@(lskTHZ4K;@Lx=A*GG>;xzuMj$uO&YT zdPFIx%jYolCpl6ThqSHH8Bw)9REa6=iW_y%6;htgCLQg!lV~F<_R702VU)ZmmmMxC z;6RX^0*S7HU0ei)xGo=cI<=du`&d|5KEr?(cF5Ssi2pwoq*My0fo0v;*ueY)$qf41 z39%P8PvCYFxMUv~_`)WiiaZjP5hKY==D3R{0t;K+puk38NQeMMFEWk-iF+Dx4d87X8 zy^9c5`iwctBd39uNI>8R-j zXgfcZbN>q>`!P4C;eY;aPkKfMRG~3DM|8x~jLyUTg6D&QINMg{ZdR|0bhOTcSI=Rh zO*-G+Y-(TtdM0@0IiBLi#+=QVQ;*2GVp0`vIBvZEhER`H;8+M3z4yQy2QQ&;;_Gv$ zn*63fm9>41UpPzt4uVE@A+IL4Bg!JiN(>lgWsxn_WI{)wL6$P`@neja4wG2EIhG;7 z&7{c)Xia;HoBqn!tgnFKK}~NM6_ICy=7b$_L;@HvPrl4M7u7M1_C%-T@xZ(Z(vb}e zP|jm)<)7S6NI00)i?XRfl|O|xq3`_2Nh+bj+S(6`{*lSJtkQRTunQ?koa+RWNH;-n za0H(}Fi@pxdYj)QIuLs)5{QN&O?&(SO|_HM{<}Q|1qEP8T3@)S^6vHBY;BDGyo_gO z`;K-|#RbfDcy+pjEq=o1u$Qqkhrn}u3EM=l$ti|9ywK9~S(bBnJ|E+$d$111A8YAK zW~a((6=tEyQ48Tb;(YdIJl#41Y4%e`D(HG<~< zY$8(`%bk$M-c=Ue@L}H~MfMA=0SKWLugG>U_}0NCL%o7N42{--1If942^UG|c=a^& z!6gMF5xUvVA80m2It6B2$0sFHEnP@jvT`-~5m0c`YPBG>iduzPPy;U}7Il#q~sBnCqw^9W7hIGpsi#~{E{y#x%xOm!LQv_hdCUZAZ% zit$}<0F!?E;~tGA0G~l;&Txuwa7yost(J+||E$*qrHkOq*apJLtvG1G&+xRiR*;M7 zKc<4zj1X>ru`H1k?QzQA91dH9|B~(zNfC98we9&dIOtcATh!T_m(3d16hwbS(f$Le zoN~Y~e)9An!g7^ZImW8Na<+?fq7SU3QDWzIL$*|HWl!C>j9wV_+TY_vFMf?I>HcvX zxH9v}D{E8v7hrQi9+nGY$p+?+UadLk));7#@}I?!iono}3COeekgd~XUktVnwn98`lGF zUkyB}GLZf^$aJlKi77u`C#~^2d@d}TJc?i1bURqHlDL-~9n5cDt~HXFJ}kA;##mBV z?6dyKPd2Oa#_h+|d$~>aI{&7!xHcTCUvs8cWl*SR$xuefCgJ%@1IBj7heBq|3C?xr zWIhyi@BQdFeM9-d-ffe?fJ67&zAnG!xZR=6ND?ZVm$}*?bEb*gI#BRR%HYAb{3oTf zJjw&P3&xi)*T5km{TXrrhMmhCQX0c80NiX$1o_r&t|ys&S`=-&cg61pYt7fsumVu7 zoJo>ZjBx)V;&Z1$LgX2b0L`}Hnmi>@O(24jftJ(ui)*}wHok(9z%c}YF(BV@`<+B9 zwcvj(Z|TAnL0CPUZXd1np457;dWf?ZmjV4mbH@hk z_;;|33Vv@w!|X z&RkH-q*jmJ@QhZ3_uzR%s-M1k_zox5R-hNO9n?KbLd&hQtPbT5dUalVo2GGfr1U}# z+O~1!+T~#llMpsJgqt8`byx=t9u#QE!l+c5KHq6$Cs_wOF!NigO^Q7AU1l4ZeexN3 z_YJioevd&@tV%a6hm&*Y-3wY``tBs^^E8i7q1g+63;j25o6@s|XgdUT}?f}?ZwY;h@Qs_a5HX0e&7 zL2xCi`$_(IW<^8NTdC6ulTp?w--xLvArx)`g;0qkBy3>9B&*jn`KWF0OImItEW+Bf zEX2eCX%K)$h;OlG2(uPoKqVoe$U<44f{#B4kzX4C1)(W}h0nsm7nhcem6h>C!qibU z9IF7f-kU=maQ5fREzeNeMcsO}JEi!YgyRs*c|@_`!Gpg6jlctspBw|JkHt%0Jk1OZ zuOZ1RnJrdVNaXHE%LT7WD=aR9o*$Fh0VN|8n>S2vEHbX@3MTiu903*qm2@S9+vx}^ zDCo01bqWU-l}t6>ZiV6#?EU!fztQ@u1be*{!$Bh}vJ0|rpbUpaw5C-~A z5u=d;N_8TulV31QqUQsW(>Cji?Sk<2J?}EjRcpks@BGxu)ARLiRQk(?Y+?pQa*D5R zg}wrvH*?2$gCyepg>+qwJ~L%5ko!|c@3Z)HS+T~0nmQ+sWgt7Lv!y4OpX3I~H-|nj zExHro=l<(^*O~_39G;&4*NGDqe)Ur!0ALvz86dIF2q?e(+GFa2H2Pyzfg#wWUY{eLHClnT~uXf0XViozn+G%(kHx%%Vxv=d?g2?F5PR<*>CG7$XoKKwA#lb zikQd2;{wmjlUvXIK+hKsw9HY~WPBx+rb-%({6QqcUUMd~u?#{f1L45P{Q5_GDij1y zD;auOO0sU|Vu#GUUo+*%XD^4Mx#j(E`u{H+;+iTiHme8(!R+x=T-K^$0(dQ$&2SBk z#}R<+|o$IK!2SqjKg_PMTy8oMsI&L?z;^m9gk#86vlSXg!caT@84s$4GUbG6imZ_ zNK}K?%Cz$5e*D0q33Bf)eP5{U$B@%%++{B}Gds)ZAm^Ka{0rznPoF&5LW2*C=0&$W zk^6hIMeqUI-Cr^4gm{s#^Wm&7arUFH#3d>l{gFOFQ}I)-0VMbpV1VY$@f!S4LED$(7r!2|qOeoq7YTR;+C9ZXhXmFKJQQ!UABZs6Sm4cj`0y*{bGh@!L{E5n%G{vq zN!mjZ31KW+-@!WM9JnoAHQXaQ`quMVF3g35e_8?GjW1_5+Rn5ihz%cdPafns!FrVl zdq(WjhK~|uKFC~o5Hr4n<&Fx>LM|klCFX&|Q*ntrVZlV(Gtx8bKqT%#+h=Ybt>qxc zZorcAdkju@tbAZH^!1hJ%SuqK*MG=%Vzya)Z?x8rkLA~q&iU({>st&2;EI~K4!Y2m z^4jFvlF|&|Lk$h#ZUm-%U3-`(c>v8E=0N<=yWZX_^!}Qoqz+<%2bxbm9RCv%|I0Z0DQ9jX2bU z0H0-|LZRt!kSy7 zSs4)gRS4h`F9i}3foy}9b+P!RdV~-ofVu9w-wT5C1Z#-$x>0z(T>F-TZzQs&kR$z!g~i2$8VkVb`uffi%7eXMFYZEc=HBGK76*O& z0?9};wYA%zAkdX_wXoI+|)$6{LT2YXQdTAuPPP0 zB|ifTE9h4WiQDLAW7+@w^B7dF4t^+^W zX7Y+d5|@7gJVye1{-fWplIWXXwm*EK>`<53+~t+QD&rG2HlLAIx(k#Cf!mb^Q77lh zukT1rRcU_yR;I;$TmJg%2QSH|i~sxYI{~%F3LC7dV(iBnU_?R#0K~k3v>`&=u_~4s zDP}FAcwggZfQv9qvq`xn()qoR&6z_&knT{a%27+zw()-djER+N|3=v$u z_Vl>9xZlqOYiFW}*`rWUe{j&3o2#q706&U*^@xs^13!DVg3kkUaaC}#UoxVO2+(>pv4z_h+9#d{v(BVVgJ|M@=og#^b^a6*Gpv zdGeVLJcZO`XX^6Q`=~_SgdenV*x&6O)4aQ}6Dpt`Sr9t%>67tatkSc{c4jmiPJ`5b zUCJSi+lweBq}_8>`N#y7`Yl;=!*nlO7) zu(pOw{f+kMhYz(d*y3N9%LP1mFa-b#9Ll=-zinu_x5XrS6cR;dX!FX zGV=F@jSQ0Ca(Wk+?H}pgqviig8L64ju62|+nXU9gg*E=UN%>ayUq__LD8i@|oYIZjD}_cP(8S)q z&)aSH&Zq9TNQkTQS0aB#3zf@xo2dJ_|F*xOKOlqwMr;DELfp4k=x?qfi#m@H`HK5i zZ8!eA)wc8c8qz31WB3)&h$KNY{Y~iWD&+bX=z~R%9NEIJBg7;E!2gZ= zieuzGT%Lr&@&<(0-st6{^$vHH?v28sk6l^+vCy@Y>aEIUn&`y|5@bZ?`Ic3QZw=Xu zbW^%!&*aEB*U*qhXvm4D_VmqS$7AfxK{JIjkDphk_HRd>^qYBOt|Lwn!hXbwE|O%2 z-&lAEu&ubXH1;;hoq?%RLYtS4C-j5y_6PSGq?OLR#%>L^gm%&DYoGvtTYEkO(wC+*c|55c#UpBCYdQ&LRUnYB;kTd{z8 z(4I)@^b^8oz+>aZ{g0ucL|j2rFv83sRm_&L^CUs58D{(A8tcW@l( z<$||eYQ$sa78WG0v;>pER-~B7U*KcM<^@Yj==6B#^`UiFQv`YZ{5kv7D~Q+-JtFwQ zVfBGBV4rTiTTwJwSb=I{(A z_u|yW{;BXU$r%~3*P^5XnjzT7?l@HoN=UA{PC8@9P9pcvHA8P_tDu}O zrUawJ^}xyKbM;qKg|H?~750$p@YUf2hICHWXr7?iJw(sZJ9pv`; zv=FOh=m8GVcu&JcvGQ1KS#!mk?l&gJW+>QE64C8^k-q@l zV%J<)KCUZNFzZPy`p=1mP>IlUB!%vko5LV2LFXAD!*I&VC?0~OM%yJs{4m_%q=^Q_ zm9N)nhdpm$?|!hZ{$K`%oG~{CL4faY-b~rU#IjF|@au@~e1X&ajRQ8`F8!vC(o+0z z$2Rdb`ep9o@OR$;vbnpth4b;c?}N({Zr*FMj191i5y>yQ+(S z;cjB3A=gP1U+U2)qcqw~cpkteN-RQq3^Nq;TwxvBLWiWJ9_8hQsY}MbHSB)``8(u@ z!NI>_=}CJpE+!VkdNl9Uz`P%x+3kImX{k#^jPQ06HfKd$oe21v36jbD^5x$^#teGq zQOl{Na-MiF0v*0G+atgtlG=p? z4FOF5NKMBNS>Q0=fQnLmXZ1u1>x0uVtR7g;_y1dKS!l`z<{`dB$i*shAJ|s|vrUYR zK?K?~1|DiYk!j*0$L`tq=hPcE176NaRweJufqAsADknuJ@|w11W#u+z+cH!L)z&J2ZvjCvCs|D}7JG&tg7)DhmVrb4gpWHYYmQvh zF}(lS7W2t@W@PE1=AfN0JXYsD*@`wEO+66%KEqhW;=;nbaLA(4Bu*spq`Tj@St8&s zhi38N5N3`=82Gf1U;1ujR63zBUjqt5pdwCHyH`=<&qF=HsE-Wte&J7#WB#=r^$8M`E2;8Xl9(JXkaWU4*(6N%?o$IfwNHE zIhuL#`AysKaUzv@){F;MvCWQ^@4fu>bzP2ft;YSi^&l#lb?<*S8+X3?f{t6GE=yx- z;mK~aB%9cCEV{~}?;psoT8|N5z^%B=!Zju?e5cgPcB~x!vAn)jM*&GLL_okDus7=3 ze9>K`X2Mnh-1e()9f~oa-Q-O!QxSPvEWd^Z0-Xh#ph3=F3>jj_?x94V#DN+lO@wx}-ss{T$q`SozyVGqR=?WjYh z*0xr4M00%8;jZH?a(5|xGYy9ud?eH3jflF%^@+Xs4~x0To+*_emNRy2Y4Ux|ug5Jm zOYOpZM?5sZn(Q9kMFEC0`d#*}F<5i2>*yoLkXKl{@Js_KzaJPg8w@qLh@@`0kcBX| zTFVU)A8J*sEG>0|H5d)l8FbQC(gY_soMr?*7d+M@)x=Bh%WWrz(RU}9xAK+A)qNA?J5?;`zPe zHz4Eo&7|$7PjkPwd;YM1!qR)~)={^}xPkSS!^q~~Bw{heWGmj~ZFN`ayA~G1KRuH> zF3T3DVLwB3DK-NYS2CT3IwJ2M6-7E2n>cRv2S!CCR1CBfSh+66Y&g_%HIHUf*OZQe zbW_AlUy_BUpoK_JsnY^xsh7tepQ?72c*zuKHM4I}fz9SYguuZRD=du<#yZW!v}ln? z>Nk_#9>Wy^l9KMAAQ0YPUP{QOY{Jw^@YqAHh|NsAFmkz)A#@DD3cPMoLPFCB@+PDj zlay8zPmvzVewBf(vuYgDo>Vt1wj6W%=Ka#_;1lbn(D3h=Gx= z(xSMd6 zmk%C9c(cY!f=SCzaO)?)eYg4en3>z?9|J;zhhLq6il8|l&=uHb0GQUL_g;Dm-b(+} zpFlnY62X3(q)O>R6Iy9)t_l??o=rkQn>4B(kxuRUi7^niN>y-U9F-rb>a}0mDv0d4 zUZ79Ur?w4aC6OxvPlqchr@V6BtFu9)e3z$OxAu zRMN_^Vz!qQvvLEbs9)(yuwb{Xog&{_P)Fg%ALLmqiO}jms3XUYfxB7nz||Y)$Qo?R z+a~i8m3z6lT|X@S)qb^ymlR8Iyis$s&i76)qa%W$sCvYkMBhEa!nP9uI7cLi9{K38A|2rQL(BWcx7+Na{WSj5;< z&SABDuM2BhVksW7l)-(K-G|i8d4a3Y2_Ebi^bLcTqz4T%G zrSohJ6=Tt9LH}lfRNc3AT&Hf|X`1(NcaL!5F7t~j_RfZ<00%Kb(vyB1P*xssmOpnR zFEnaYn3S*{6A~GMY#nGb1dWitfR?5t%6gDVIiTxGd7BH7^6(NMkdF7~?+ttTIGqRZ z-O?Wz$cwn~rTntZ1Uu2NFLFw<6*5f_AraYkY=XJSyb_HD$e0qEM7`AX^ypuoQ5|mj z|8L7L%bnLpIx9kQ-%-9|CY6OX&or*06<%Ov&F1buv}#*Dv*)fEX1dJrXDq-#5Y`Z{ zSHJ=I7s44GIgX z8yqD2(9Ieuo6c5u5?|z_7Y(34S{+8d?Oj#2x&zS~U!elS8$51s|6~{{tTS1%`}*R~dXaM`gCWZ+8szjTqjND=T6t z={>x>@gmw|y~tcV%0X!E^tV@IuU)G947G-=zbMdqw(RS58K5HiBWOVLe*c!n8D+}y z=PlNsMD{I?MBbhJdazn~Mc83uIhcH>f-zT^QpePYe(2_x%aJE|YPT65aLUXFQHN+N z8bmmX>->EbXFsn}B zboLBON^ec~@f*_z_bK}{a<>W=zuC6F5n@Ufxwg_~wZRi1JM_wqveoq5_S=rzNm_x+ z=zJdy#h;V*H{i}x6SlzuR$^Kj%7ZaKUz_c;`lo6BSNQAVM)$1dNQdClCG0L$#diy5 z1{fizvyqkc1m&=Y`E+WRvtB{+%}}}Pl&PDE4_WWriRm*iBdxmG$dLnNR#->(cq}*H z9x2JUp0jRAki_ zSYEz-u;0~@2}^dx3%^pxrd&1*D%E^w-LyahB^vl>2umaL&S8B6|J5hl53CT;gXalc zg}5FLG=uoSk#@ufBOjdV!wg*4V3&{~31u^EFK=$RRM$O!jt1j*(6u~JD*4I&C`C;i1aL5UHZfrWSg`U%OImFMdL z=IWge#g>xC*>5$j^SxmSIoTRq-Ypg;sg+)CE^Z>qtncE@&p`2abkX120a_1WyKvj5 z4ODhvcx>gs#U0IaE$uuY{ro^vNG97fUTiKYl!Xt-tWcw|D9Y@&R=f#{vX@0hWn{vBoW^KVuIVp%NeVxv09-Os1RzN@mTg4f(_?e-8Q;1V zd#k3<5X@UZCoeX(gh`zk=tpQDB>%=DxJ{rS68fq1zO6;*s`{GGh__@6M_}o5#hpJ; z>!DjiK3J6C0A?15Uf+JRuQDqbt;eK;99D{{I2@5nV?p?Pu=-z8U~d)$V|0CUAeSV( z8EUzbk3agD^=|Wmcgx3iHlWrv4^KTJC@z?3yGi~M*80JD%TL&VfbIc1Eio(X+kXaq zLK+P@#U*5dH#~`&*$t!PR7?p>>QP_{VBCdxGe+%|9=lVZy+o9i1w!9C7G2D4YAU*-&2QlI|PV{q^mBRRyw>AxWmg~#s_*_mOx0|_sOZnA1S|&v+ zg|c@EKXqq?YWF;ny14dBz#~w)xUaNw!T(65V}5dMD$CiMyL5l${?L8MH`R@{FKF}B zw9=Dc-jMuYVZ^_}hB`!izEvlk=#>xUVmfAXF> zm2!;3IL$47(521irL18S>5uO;!*=J+&biYGvju)t&5RAP{5B(&PgAHT94fD08aB`+ z-XeGM(7on&gX(Uz7R2vgw%EV#_}sHb_f`V}xR%|6&rh#vpHyD$GU$(G3AuWFg`}f^ zSV#K60Y+6{#4kL3Y40cKE&)D@>rwXk4XWyk&yDD9%P zB#Tm-<69EkcgmHN_*p+`T7RKwA)4xV#grHyk0%EB29%6AQ7S|`8uXSsuEE!N21Xf4@)OH#Z=CVg8lnGE&97|f{ud$c<>t!4-eHO@DqrXa19Iy z2Ejam)ULGTH(+qT0TR=074J<2y)uIkv%^;ogkD@QGFoSzSGBX+hTDYWk{`L>0Np zoQXG<)M>KJ@4X2LCVF79en~E)Q1+jM>pyiRqW5tEO4K*8;8#~)KhnH66b}eAUi@=d zd5i=%hNUyV+GYyV#6Mx3bWu@d;qg1)V`8cD&FB2<^Syu(@vmr;D0gN?tVK`LE>k3b z(YZTnvON`Y+L7#g`PpZ;EM>i(PZCUIZHe8d%yGH^+cWFbM@|C@DFNUDujmCVMq8Wo zzauz&aRlNxBk$s{u_?8LE07Q(hSh8AjAsFo!ZM_L$4#+_NI#ashQD~AF7VHHwr<^^?+`dL?-%nwBZx|?H+%Wko{-3OpE9)gs&t0Gt2rNwA z9|9Z;drs);ho{EDKjIYI!(3}6{kF5y>Z$8-X!kDWwe7vUGSfw{$S|~VK~1H-_b6F1 ziX~EV37a0EsKSwqLkl!j=*G${64!>XliaoTTtmPz<}F~v*e550WqfxGs;aAy;(5gJ z6_w6hffIjiTw6|l)Z@Z&?OPXABCoeqJ#6A5LerglefQdxD>Zp`(E)JCN(*qAY=VPKd*7p z39ch5DiC5u88`;d1HEJLH&J?MAWR6hfkuyUl0V(3r@I>?rSA8&LRv8v8VET*mfM+q zn8&2lGCVzqr&S4+5_^ws@WxTSLxc|Q2>Mz&BYEIhgoIm&36fL@p_MCP{C=saBnihP z68Q4kys2C={M&q^T3?X~xko83kX5bxHio(_QJ=UK|8xV^c@gaoJ4?JA_G71z7gMyQNjq|`mSMq-b}JJCzkkmO6T z&2r5-N!$+~OBicy4YU6@V8}P{(m^+vl381xU9%I0{fgiZw#9VfH-n~Tk~ld&PqVA0 zJ>M6}+axis93nPZ6*W5`Wkte#F*oTQ#6KjzS{k`)NH`yf?|&5C>G@FT(=7+7WFfKc z{;x_S+%giR4@4-4iNK6m*M>*za0tMYf~4?6Ky5FI}@gY*1WLAxazT zSTdx@PWx;|SxQC^>1Y}b6JKuimN>zg^@`q-p?c)zfoAHr&R_O1Zcd$_E28t;BX+iH zqPo7tzzNGU?A3W`a3snG`1NGRf?;6z+bV zr!loP+L}$eVKeV_ME1(b+!P(qpz+TBnn&xo{dDg_SGfCnkegefSH4eXT3S>ZC5f$( z{jah25?Ex06WO9d!=5&hGSGwj2zF&);fLeT@Uw{NS#Eg{t|f?cA|&Te5P`}7!z-E^ zx2hr}{F2AOcvmu|>&g3+jb&N^PAA2z$JkWXZA}u+5133%?LJ>QeA8!7oY4NF@n{G~ zRDL9r7f1R?-U0X|NN<^CU6hat&qInbohjg zhOw-c$?x=!zjasD;eA2JhZcjF#|9miXzD!774`=voCLL7JycDh?9kTMhI(LCD=$Kv zEdd~<4}9l!HeiyWp2G_f%r+RG{W>sD17LEf7Vr_g?cfO;LMTiVM1wOxat}BmTSoSt zfFMb70L((LSz|dk_5!P`Hz6BGm`PKIE-nSXu2Sgs=i8dqfUZA3b;E9LJuh(?nYW0M zGw}M_;Zlra0NSdsi_l>|G|jmOGmt-pKnGf9xs1cuDh4VP8CaQczkJGqY31(S)9228 z864DcutPaP{eq9f>(Zs@FqzNtAc$rv3c{G{zYr*V0ckQ$U%i55NPzKgI^N>Vz0EkF zEzCsNhk&d9y1LI5?Yv^=Ep>)K2W|DEynFLDA(%J$28*{rFNv6xyekAOlh*}UY*ABb zDWFiNJ+j?nQ5Gvt$WcQQ;_(Hl^scG0_1W$6oOl8ih}Bux_DVL`PclGknIX44ipr=h9AQ6BNeE z&!UdXiSFfA%KP{u9DA%q2@;w2y$!zoXPrg4U87xjZg)gpSqHW}J3H&G3Z5Lhfm(iE z{ljOlq7nXo9G!PK)@>ig?Y&n*LN-}RLUyvUAKmsyLJ~q!$;_6Stn5-*KLwvxg%TAL^s+vqR_nZZJT8(-`o<;-fZX5$D7? zLO$NTQ%FZSwt~z{B!0s}E3g@6C7BPd3^C&^MN!CI=l313yAgr$7b)0+dO-JZaB)pe zOdLFPh?td=VJ~&?Ag7zMnsB0`kVG)+6Gkx?Cf8#T#Vm%J|LJh==be3;EnNPZAWkAy zyXcxgrAC^eyw<+xEGnU(#FjDVSUC%JlS;nHqll(Af4%i1nfnDd_k^A_=`_fg>7Bjr z5O5%#pLS|nbGEnQ9ksw)icbUDlnn=N3y(G@vY+p>K6u1>ZtuH5^TSkRbswC*HahED z`YMGV9k1>b9X#5`O3BViW4`yLaY?yA*OlHdx26x?ds)6cJDc~GbZ}wU^ng-Zb)f)KADk-#;6z@6^j-A2oCt7Y-OCb@^@H$9lOv@AXo(#_yDW z5X4d3I%hJxT+@7va6?e+qVL<7m@0OzUGK$oUG36CB+qib4q2EGudK`Px>|L zJ+QRQR?6Q*cK1qca#2>@d|K3j@*kd&{de^YC{9rux4;64{npol$ZyPFXkA}vzK=`k z%l%|wSf+sY5A&&M=s6+jWD-T7V{CAl-sus~M!15-ZM|Ux` zO1u7A`WAUv5mRoMwDkKSt)V~rbR{!ymzGX{3X;BV_2NWoD&3?tN^1pLRI1p?*3Tep zMQcD}BOlIn90z_15)yGbV}%O(Wuu54*5{5miR?UVnZC6nHx`kMS8CxH0sAy;;mh}} z)bk2zycuJES6EgiB{M(576%Ur+(U~q=&j3)vV>xGv2|&#BwXk8fA3jjb~7bK4!tV= z-q?0Tk92o;YevE-jrepZrqIEHxy0+!EC_p9?jk;swZXogq2=nao&I<0@P47~KG~ff zz<-5DgXI=wY^UA^5n};-4pGE+*n3)zKm#cm#?V0RF~yMc{N%W`SFkHhQvg`3Rs?wo zJVir?g|4`Ff$6bRmQH>ghMfvW{_GR<&uez9c7p2_jK_6WSXW1RtA}MfK5k%!v*)4p z-784)isYxXLiavx)&K(8hRqLqj2@jX1RBY!vDnz`JK}UwPKTS*c!uE)F);!!+qFa4lbj&R!t@c>E%IuOvW@bJ3V`yRuwt9s#Dt!KS4q0EVL(KJ z(&3tIKGeGyx3JREbrVsfcoeZQt*We~2;)W$A2NZ^pClV#EsSCeJJtBAdV84yITvj( zXJC)RZAE(cV*0ZN?BrpGL{(Y%Mo9h>K35Jp%GzpAt~vZ3@#k3Yr(|Uv0^z2}tQqGu zMqR>c2(cguuDf62!}ya~|)iss&LMB{Hys&gY9qJmA#C8K+o zdS5o4>0s>sh83{$?OtK6-QIFfUK_h@Yp(qy{AKk^yQw-e`;D&qr_N@EV$}aL4nN@L zM`0wlv?OtuOmofO+`22aY|tZlkD;7>E95sjRvrxheOUB2n54Y8HVq0 zmq_R^&>64HV(g)Jg2<7>fXBU_^hM9N)`e{u4!Uh9z{QTkyu1Q^ToyS^oqsgpwOKag z^0I9kY)6K?m3H8ILB=i--JB1pney)%G;|T66ZwE4VtjWMH(S>=#u6zgIiXO1r(E;& zt&oorHJmfHZA;g9Vd}hy4O?-skP2-dclQged#9N6-ly8~?O43$T??UQD5clTrlpER zk5z7AtOv)6u7ks#E#q;)9^d-v!hyfr)M96tPVl6jqfV#n{8i7S7n@PCU^?opp=zjOUFW!$Q z_LOPugYOTXD{e)dqR?ZBY?d6;sIYm;+OC^Wzv(MYe{+m(h1~lwL$Vy#lLl|slcC&i ze#w<<3eeC}bU3FZRhO;Ypt<~vhN8V@GtK41L`~zMYnCE&?S_uhMJbKl;({KJLvIM> za&TTfbq=uaj=kzB=>oSFK25V(Jh_v8IiNu2&Ku|1ymQOcdg;kx6C`aB+loqKOU&_8 zFJ#~DyEP}ZPib{=${ zJUrKKZt9%>cI{(F_9^+vuHs<6&;os7?KJD(%YxBlp4~urqXyFLP0jC8Hs+1h3z-G{LVFGqOU# zE^XJSbIjD5PK*@yYpG$oh1$n!&|8VTh4KX5XGynVv%6Nf&zh$^6gzpq{lHy^L99^G z@bWL-Bt7pu%`5a2WWH)r$Xh5EZ|5#t5YQw0FUgU{kbd?_m;ZQIP-FPd*L-n==f*Ey zoNT|}4tDg! z>kDi<|KwgLoUK_kCm>SJjXboS1zR)-R=8CH$_>l3uW`G5;@1dOQ;0*LGg9zM)84C@ zA(Ie#Pl#E+{zcp3`w&I0pkz4BmGZ$?NDlc;fbXNA;QE?zMqoBSF|MYNktyaR4my&v z0IRwv@*Lzz8geIx*QXSNWf87~qnO=f8n#z^-#LAnVsd{{_u@d7Z12mmu@5+g@KPf; z1l{No*Wj~ftO-3x@g#1Rxlc-FdcmqCluEPp26G6^uCfLWBJ2u|e#lGQ_y9lwVVTm6Uj$eQKQXzG)Vw=C8c(FUOdMO~CWT1vUmMwDDnDC-W&ze~|2# zqLttWHjSt*!9%f!05Q>)f`!%`kn6TaqUopH-IKZHJKgI)&9*+MXyyHtGxVMqi305` zIP1-akWK?vDnzJgicssX&oJZIj z0`Wk=NmVBd@-IZjFY*p|d1*52QE9*u2#Oh)%me)Kf}xj#IL1X*=QEp9fzsm*q*+V5 zshxh#cZ1hR14?(;r#c@;csvq_41Yi!BEhS(-m_c)wY|B*L9-LkVq;B!n&Y?_C*4uN z0ty%7U50%?=pEDTMiD#B-`Wi1CQ+?4Bqx`s4-5bFWNGg_ z6##ZdJ^O)#9M&ey@X1%{mlVA2PN%GGKV}>EB0SA-&xmR-lq2QvQcHg>tE z2}=PRjd0>a?#aGV(>D$0q6W&(6s=3l)BeYFzw`^RWUg@(JthCbI(;`eRd}y{k#VsJ z&v4!|aDgB07#ts~G}uXgOFap;qRh!8)v^u3ftuiJ{u%J1BX zc`i_-*2&}H>3$$BW}d2cMOn<|B7`sR#XQ)}C;e0PyVKkehAwY6tajWXs(wK`u-=3D z*7eKBWv=g-W*pmL!TbVtswDjwS9xI@Vyg(Qy0OaYQMF{pj3|qimhtZ~|mzTD< z*a};0$6@Fg6CH$=Ae1NOTfd?m_tdyMqyCHPJ4V1EMUCqR6mIvz_5cW zI!D6}{#M^t%tpikaO@iQg0c5eXkNZOL0LppB}Y z8Ox9EJQ;lTi9n413S~D86JkN2%q_*yBK9&!>OUerC}A8H#eQfm?3s0 z#yA#{tV(~ZDu!9G< zq+&ucRbTT4S#?gNk*zeBup#CzeJ!b(nQ*(~If>!iE&T~NxnMV$H(^xPi0jc)>(uGk zw>LJDWs+5A;luwmtt75^SOHH!RvWw#xJuglcO~@Tv%{SaF@VlLrqVSNBO^Rdsv#TV zt`SJ?1yTtusF@s>4&-F8nPS1Ll#7fTR~sE^h2@pcpI@~EN;Ti7i!QFIk%KX2Qt~v( z*DWxBuRwheoPotMp4uZv+OTPEYT}Y0*vp&<2?>EH3u|N?fh8jzj~u^XiH)moE$9-y z0QU2hk5N&ggw$-=b)?ez491QZEjq+3gwVwDOLT*;y)YO%+9>LJPf<6 ztEY6fl114P6?0hSce4nS@d6|O&?Im{@30Za6o!K?Gb2OVu1OjTzFX2Sr|OI+`hNH{ z+M?n6jrFw71&PClFAn7##KRBrkAfi@Jz!+4ZEZskVFMG>4jVCOSqxSMB)Q~bRSq&0 z^n+Ig`4_RMM}+P2i3H?C1gx+qPPi##J62zX>tSqkGz=_E$7*~x4;mUCZGNm+Yyeac z!w6LwndJ2K9Cr~qfo}eQoqyYKS&=1sLlOMw+fxiW3h*T`Y}|qfTvrG|*)8a*LbqlY ze13ndFxA*Hu9(=o{22JX)5yPopcUWqIvQqqQleHE0Xh?_KML9Wtx1}62Hvg1R7Q*j zzzUryMyJRO`8X6>Z7COSZ+lEz7wWsFB;$4xV42330)=#O9PT!3xR9qV?ziX%t2`K* zmq3DHxi7$#kR@$HCMNo0?gv_t= zE*Kbin||V(S}A0Ui#of|*Fo+rtsvR`H)#4*#I;2HaFssY@`7+tquabD`w?~~Vqci_8 z1Z1^!R{bU`Ta#-TaCxbpJX=qdF!3q)NWdlPKv9~Wc@n&$d9kQVJfch$}T0#L#Lfj z-an-(&uhr5l=9 zIUA{c@q@5r(Nz80#@P|$**K%Hka>JMxmNMFPMHPcZUr}tD`JN*1;V?ArR>ES|My*1s1TF&^jWQX1j?p!p^nGnIN*%-7 zZxR7+TvLQOGS%{l2+aN(<9DugsMq&0F}9-=@Lhd%)j|Y1fSR( zeoD~RjxZKIgXibmImFW9?j+VT1_nM4W)anSos}UL(O=LmBdG3!8h}VZ8JUSoR@~d< zW9oC(Ovy<9z$kKzO50dlAsdqto%cLXY1J*~uhIm2wj-83w!k}$w5i(pr*<;C^yH!g zZg86_>-fJI43MgjdVr)ZRDYV{+P*DLn4S(u2`b;b&X6Ta{^wKBCW*txuOCzNXBJP!V%p5HLi48K+K?z)Lih&waXT}o3*KeT zy!i&UHfb1JLJx$|A#Jam<$RrIwCDt{GDqT++bp@R-kHp+RW{{t!GRF%s8q_*bOJus zj}sNJ4>>2}gWg%sdQy4+ekg1cg;WPH=LOIK(c~w$H-8Y@W~wJOHD7Po`N;DmK~M(G zTCT<20A)Trdp31$&sx7cvh-UAz8>HvTw5qS@l(T6y9NC$X%$o+b68E{lm7Dfy9r=@ z1ZhMo5h1a_L1%pyW5MqWQoVE2HKY;oC}W6f2prr$&?$CO{U^?Ws>#02jn>_;?w^am z734nf9`b>}3qg9Lr3SdrPGy%8EMO;t_yG`b>>Fg#pIJ#xU@U`olE~0wlZ04F%DPhD z&~S6;TxeuAB&9^)25Mv4*6H;J?0gsaqyN?h@9_>$a!uwOJ(+)NSmGk$aq;2E)j;UC z1VfqY>(W4kjK2BS{>{q9#(*$+Jpi1*lxuv0o00OWe+1*thqs^@zWKG)yOW{_0Iv0&v5PN`{7MnbNKdcFr3;Nn##=Y9 z_oz0*#=8wl?ICS}<(t)pPU{To>8bk#x$eWL-^U6uY0a_w0N`6xacx}7z};z85Il%6>LMRJ#e z4$Z#dm%;AhU@IQ?;yXN^@N{iQlQ-k6q{&7IVMprB`8O5LaqBwIXda#J6$xjPRtaAa zCO33(z3JiU)tku4K-Dw2Tiv6}B%a3UEsaJhd2DC?bVzrm_cyA#|IEmx!&z@jhO&r6 z*_khK?r1vW&FyW$ z$-%7c;^h9Hib8K4EsS3Pz`n-t^qdxm3;UySZq7)h$qrch|J38c{UJr*-hDRS_jU_BN0a=Y-zOOp#PrjHCY zJ72dOP&_cKM&)6b+Em6$V;-c)J@Y`5#%Ijob4lQ%HQzvs^(ck4luITd&f)fd&}c_kqAr6 zB;IWD#mGuKE5{9*8NAaUOaF#y2tC2tvwBL3HR00Ve;7m+g&ah#7Jj~!Ucl`jOfxL= zM+go#x%g3L!ucwTyRI<|21u>liX6T(?{jAsxobExgyXcC4(>&#TV?lPcwa9jbwzgL zr%t-MB2V@{Op_G9NQ5xIn}TJ{zbX~m(`X?u+Pt!a_U(J;e|R=?=FiOo5^F~qPGvoI z?EX4k8H@Z|Oq<1vJ$6T&nF%>BG(A#(zEQ|6adhY7VZk(=QJ*!19=a_-qrwpnV$+`u z*G|MiJ_g~nR*UTCZ$6WB25j3O|LTxK5*A)_8;U%X`WBv?dnm~IHp@uA3vx-B=mavI z2{laEldH6Kcq{mXRN{0MFzmu1#xx#7_r%H3@i7px zKomt=%)I%IdSBM*@n4X^&uhwsCA!Id40*=%<1mTa8kO^KPc_T&MJ6Gwr=KVYX)3vW zivs7DJP{_1T`y5pOb`!hy#k*gFvQGPf0Jti*i(ljg5M+OB`n%0=Y%_MDE|;@mEcN% zAj^h8h~-y8xeY99O1wgD38!N*269-#0sdUN)aKj~f%EUYnoado>(!lqxDnDXO%)$a zAkOsg+s<+fiL-D<&{}7fQ)qTpR?M>(&T__BN8!uUMMv~$|JIS_ss^#|bx#6!1N6!- z5Zpr;IIYCKKu>a1EGsMPDlSsYZo%KsE0GrxdJQLw+#lDhIi&XJq$VeQx%APHk6Gb)zv-@QwmLo)FxhfR-qHL7o| z)nhkpP!%c>>`Lj|I`77)ov|9)zt9mtv6p5i{irf;x!)bqDjlA1X#=@jp)>#_1sBKyKFo5s|WCG%DB7M&v+~Hq_#yo2qQ>Chlrnts+hj` z13j%$r%>fT4cWYVa=9-*{d8Vcy+pe>2_de}1K`f;U^Wc!;NsvkCq&a7l$IzeDk3o3 z#8X7o0`}Ckg!wj?0KP9=FK6m~X2NIX*zn^T3iy}Zw(1442M(m?-;8XO{&rU3zyXP?<4AG#_sdIp zg@GN`E2bg3DU!7G^pQ4&FP3$V`vwFAAUP;(0O6et4T@}>w;!@R0pr^$--KG7!7zq; z>G+G{%fwrq;f?b$`gS1>5t{NDF7FbN4e_OG1q1H@M8vCTYGbq8cL~6;mr`|E!yf|h zf<1;!j71|RCWd;Wljd(CH>&VfG)i|1_WDw4zC>r_T3d3MVLT2$hZ}Fr-K4lU&=-L7 z9zFmSIatoohrcaKhesy0qZpiP38c58X`P3`b3)8kGcXO$c*GjVWD3&VDGu0w069b^{-#?UcMR~_5bnlze;Ab2M9PtnlOd})iy)g zc;f#Kas|U+9;mFVW0*wdiQ%RxibBf2l&&vo=U+h*K4%&?Ar0OrbiA zxa}Mi#y{LJNo)C@=W>K2a$vBfYbjnDFt}wiI6>Jl93f`B`DP)sW z)>^cFjX8O@8P-ayMzE74?IFy}WN{`I&6Cj@x!!~hCrOXIO9+a#WXc?C*=>qbd03$A z{C%;5PGJcjb0HIMP^@MNkAiDEoCUs0I>)ie<$=2SlA_pv^%vVRiSbfwERD4YMbWN~ zRpB&)?^{!xF2Apqw{CL_6<{?3@I(qvuv}8$U&}LRRsn&twXun_|9^Jl-o3I>TJZnC zsFH@=Ef+8vFVwy#!m?SVU2yOIoa@V(8C(b#u=COk1R9uxMe+u(bfzI(-o(IT<*~5p zx_}R(o@2KurNbDM$;dy(oxhV$9Lt82#c_iTJQAG7ojY`aJE)< z2i*d2b`VSa$I{c|>Ua6_Uvg$O&2<{9n$cw*ZB9qb!oWDiON=YXGtXW=Eotd9QW$b;%MUkR&l)zw$+mz8Da6^z!F$Ni6*F5rx-FNBcS zu3dwwo;YMZdKKmjyn&Ea?$aRIMdMB9olDk9c|m}}RYaZK*3&m|sFI4QLWSEmthSGB zVDsboa%zrOY}SHQTlbAcOAO;2y_l$5AVfHvETi{mAhhLoY((($y1*jouzftSNqe2e z8Au}TZC*80|#*)od?%@3Q9fz9Awt`AKP zE5AH2l3n@DWM`MuBa;^PNt+ne-PYEm`T39ElR6KF_0t4jyx>k* zc(*)DM*Ap##t1rDsF8guHFp~>#$-Ix*1_SnC%#+oq9}cdTT^pXaK>7oL~$%ON%8R( z6%#U9^zBSi;nz5AWU^wSqkDRLb^IG(`S|a-GGhtT81IR3?a;2u4IZx3olSnUH))ZW zg(;+v5g|*3&P3TjZU#jTFmORq>!s@aWh+0cw z?YlcE?S*FM_ABY}B)v!Kl_&H+@xlhj)3%B`oNp@o3Av3fdQiL)uYGo@TA1y9A}3uB zjOCz=e&ju%pwMhj_Y#^v;CHX{9cF901NOq~!6goEW2rFJ^dm`4*N8|^5DM|16fIM# zRMiykD|B;3Z-J^0-gOxPB}~FgMz9YU{19Lv%4={+jc4Ap!1wUO84)qD5&?EWv*7># zb5)3*Ec&4y9FC|~&Utx}t+T>CZnnR}=fP>9^@N231r5WOWsxPPo-;(7Lg<*g=jt#8dW@9q|tWi4R30=u6+HL<+kF^V#*%P7k2E0np`XGQy(SsV4Xw%07VD=z;RR`rQoG(~p>gl5S zx2|?P+h`l7YS80^GXs{sr>=B|-vOoaW$xj3)Cj@RNGq_zA@5jyOkOot68yMDBnfFw z0I~!JA2gVoSoVZq=2|WJxaT$K^Z3iRSD*ZoqH40Odfwm9b0lN~`-nbM-8*AMwi*Vy zL<1g_>)!+*Hhl8CN0vCpIlpW&{&^*!1^WfWCRD?Nf=!C>YCc5&Y?f)<9puQVTAO?b82hMzSx>+Ak-6dcs+oX8D1uW5dwNpe3S zHEzb+=ggT)?=nxYT*rBYPG%0`AUFaBTEP3+a~L3n)O{YO!4|^&Bis1rQp{e&)1-QF z-U3sgeum*xOBqO} zPrk}f-?C<=c@>+f8B23vUxcT387#KatG3O)f&wl9tQM;pK$zN{YZGbtq>EnwMsBUx zPvFQk&vC_viHfvv_XY*%wg?`8jtHVhtt+pAD1!(ImVnvT3$hM}_8>xgy5epIUtNnv4%BvUzOn6oevB<3zTT}CSge>OB5 z$k@<@I3IE}URNOg4Y~Hb zv>{ECz|;B(uQHmL zva!W>H$!m{XDp~A)1;+YG^wFpdvB!D9sZ1S5N|}kJY0uny5H!nD>7?*eHPH3c#v=> z=~-!8%GlG0*M~!vJG%M<(jE7Dum&jHBK;LYt-g(!nkDSN@bv4oy}PMM;^Drl+ihIO zsjFI2g_&rND{17wmtS43+8%fJ^EO1E+@U6ss#T0N*PY#Y|K8nA+?+1)6+<~)mq1~) zR8ActC&OrzyKBnkHe>|X_O&?tOGuN~J-AXg+|ao*N*88MoSA=~fd6}Vm_*$juqs}$ zfR=gnr_`-b61BDM33Uu$hR>^6#;%B7BL4aF=U8j!&5Vyny|$2ZDKCQagxvNklK8Zn zPjqv*)wk@^oFFj!s!4o&$-~1l%$l2%gY0$->EZ?Yt<3lHCzusS(;YJ6SKl|Z+`Ols&m_a5lf)UH2i^IDoQrC7rR+m z!*i}X(#;SQP68zDSlwHS6jA3x$1D9pve-q939Ui<~jK?AvX?AF=RFPfsrh-So5vm<9q?8_{$~fMNON2O_;)+1S9K=tt5!US>c?5S-XUJ!eH6{m{`g^(?BXg)&I)vUcP#Df5J;p zEc#g}4&aozx1Wc-m0n~Ypf);WO;R#aZYIu;89sRS(h@vLRBkSxU3yYfB*n#V;^k{P zH9QB3J#?}Zuia5zw>9;?k&u#V4c%4=G1VATS%m(uA3c6_RFty>nwMAuQIk9xDUzEi zXdsT@do$J8R^+`;nSM)mWOrP?<{{aepKDV>+LzvKOP7@$p&hpKX#H2-_qKHMX-8oj z$N4w7$8{PhIH)Wi+;;w*efri6^3vi&gwnqv@{OU5W@z;4-aV=M#5L0irz?$+t0}g^ zUXOG9?0n0?#j&E~-6h&(7L*hb&9VD#iazw#bh$qE;W8-Aa*_fYuL?Ldq3E9X!I}Bs z$u=>CQrf0UW2%Q~;uFyOZCg+Vf{|9Sk;EL4c#YV#NoswF(a>>I;A&1iPHzxcNy zKtrMZ8UKMxJbd8dvc|ZRjjcbzldy?6H`g4V?GH5rH0aR2p?rSq{|@{R*tJ42{N4!J zhNv*E+*BwP1_~L67R>K3`j5eO9of)KU}f4?VX1>4?V^__ZrDI^Hk5l|ZCbE$co!vW zjkD?3V72leB@HKQz5zn;2;+Yw!NopR$M2{_FNy6ILO_YqG@{d2`-OY`5dg<=hP?S! zL*Lh~U5L*ZM=RC<9c|nVQ(-G46e9tFfyA2#=d!n_C(3wKiKr&v7sE0KNbYNW@6$w# zAkP3 zw9X*HJ62y z$sKmpBH)D*rIHJ}94YPECnv2bjBs?jNeDF97Ctv5NA5#vhm<~}Yc2PL;B?9&6+l2^ zAG#M(C~p57V$^p@*^_d8{F3O+ir~-J9h`E<3@RzS#jmJ4VTFZw&a;@a;n&vEqEbns znIhkU*&3Qu=Vu=SRHE4w{+(-)W=@{(e!iVyR8>hH>4CIQtK1|}1WT&0Mq2F`ByyaU z{Lu+P`n=jJ<^#88jKb+plNnK{-{9H)@43EAZ-jAst?xUnz=IwAYq~mXRB|eDk^7(0 z1=+P{>%U(cJWlPIv*`ASpg+F+y_S(Xg-b?QiQ1~E^nsow+ti`Zaq=*S5opwL0omKz z!{?~ffg|0kar2p2LFK)Bo%|%73KV=JvPcF+!wv~|$`Z&tnJ<2^k&P&V&HGD$5#DI| z(7(ZM&BQeuAdUGZQ!ihtK+FAPq2Sgnywm+S0Wc*R`=FP|%{tsJ<=m~XGA%kiy_k$a zjIN#@-t7Ra4#oc&;`U@@#EKCb9T3q->2~q*R#;b@sIrCJYvdDDyQvDfpbit?pxoSj zLPCS?--$?h&W){Yb!X1-rl8L9$iQ7(KO}9RdpZv5WDmWE$q)TjXEK+X_|ogW{QQpr zsQ_fa!wV1>In_A+^{eMd24U-l4z+Tr6oS@zcgBM(2Ex8UPOne`yw z!{$22IjmC`twvaXi%BECvY!^9Ka6`ZcHpV$rB9$(DVE-ob40xD6MKirV27ru&*Nja zcjumSi-va!SYS)jBO-q{K|d>JO>x=Iy836Ai_&?>+O72C0tkq_3)1x-qC3No{N^{; zq`{nVJGG#tAHyTqI?HD}f8}j7JagNec@g?FKBoS^dBq`BzGNK2hX7=BDDWhSZBFak zyBs6A5UvSH6H!>hnTs;jCK@M!PQC73D*)@~U29o-l3tbpFS7Y#^~8O9tp{khu#y>G z{SmxZT5tos5|DIS*|9yY1|}x_3T}P);jj@v=s84j+S=L(Q(E{UD=jUJ-;SapmIrYB zI5#j^J5ZN}K$P5N>7mFYTndptXy>#tStfUkpb#=PuEdz*df(~~T#`_aleRB$-N%dx zyJB!VN<@Pp&Bw<~M&=>M4OtxAvf`?urI%oJ#Ri;d{2EckB`SJ5>z=$V!Me)!AigZ- z6=ZLclalh4&gN(riAzeVVEe(Or>h%Q6^!KsAg;);fE)`eVF}CIzCXtFH@UdDZe(T( zmN_eAi_ZUybqo{H5flfb|MJxxZb8I@2L&6~3Mp(PcEMTIt!@^|8Bn^bOTpG6UTUo z_IvTX4-q5tl5%zbGi}A+LgLvNZ?(4yEC{g0!3<_@WkuoN`eNCx*|(_2l_y`Fh4rXS)D7vuA!j6mRCrhJzbpkNZGu3U@P#kh^lw~=_Cnmb>x}1mPg*G&Y_#asl zM%L?znK_!os7A^+-(}ctaXbP1y(`l9{>M2-V@BqTV;*=1R2eB#$|A z3UG%bp5*lx#9X82KN;T^^ofVbu{DTsW*GZ@t%hU5Y%t%L@yX7e7-qW8G2aK7%m^Nd zV6|Jg-J$Ylbz$-<-9I$sb~S09eju^fNklSJS?r){j z{{BHIJWSVDQg*-3qn^&E8W@$ps~|33cnLLg)r8j(#2MpWEw{OCTENf6MfJ|sRTD&r z8zsBMIpXm&MnsVLb7C-QY+`cljfhASt35(zA*3Q@q&DMap#*6`TtWifZ{mtl32(b% z7In(s-@iyUtmvY(ujJk{`E&8d*?!>~dg}u*^W3Ta;w|~U1)45GahWBFnGKq;v$405 zH2Qk$OkeNnknm=~Ha{%Co~FgN>fgP(n1@$eWLzY?37smuedlzJaI{dQ8+D$TzRVTw zEiK*Ue~IQ+gaGrlR9}-XHK+V#cQyLHs?pi^+5G~0flxf4RaGY3W;SBm6+q4>x$P$uk^Vw7l}|M!jK)|;smkhn2Kj1o+~!GGXi_JIkMEDIxf{Y`QxrBCP-(}- z*`wo_8^TP*#yJx4Pj@NGH}fR3|03-&&x_-Mh3D(?BEsIka{JdasV8`}kG5T)!cbY3 zwt7sDtN-$vY3;rIJO@T8hmXv+I9=?*O0<3JnAVKMwohO0eY5)c^S7;3T6m(A^~K5J zzEB0l@5o;#9fZbjQ%vKJ0h%Ysf}5$(eqaDL_2kd-Q>P%L(!D4yeq-+XP2<}Tjs=rn zQsW1btd?LV+@62G}7RM%m1t5Tr--68~k6`kTiGE~<98mB1CU+)1a&mJ75`+U{q2GfpC@wY@ zTxoE{kncfuxAG^gt%9Or0OUj%tA%MD!_EBl7H(9G0I0?Wu=mOx(u-ascaJO%F%o8j z@O68M`D)l1WY@6ZWV;hq^ugEzV9SeJ z;ybz)WJHvU0xmX-nOeb>pEim@6i#c!ZMxMIF%c}h8yYgoojtzZ|{1(?7ZP{ z*9wadtboa)N8sGTzr@YC{T(Ryj_3KG@5`j>bL`&z5KwGRs7%YW99Y@UbDY;@2Ah7|KX?nU@W}~i6?M1cM91< z(=dKizOt$4PzKs*;<;MKk)XV>eZ{)mJ+JfFXc@!s#c=r}Uo-vqufkBeG96TxE}U7)!w?j~GiJ%Xev0LH7&cyWZ&tjbCTY1-?0JM82mT z7014gqY-eaG7E`R{X)v9UDtbTOGa2UNrSZ{(|0pabtafS?=9X7NUx6+&1=7-_h_kZ zg)x77rFmPRnS3gGKUaYY#TG-Sz}Y+&(SBCVoLd#lIQH%kEIqix`!=)^B#Q*#+(BoZ;Bh&1d?`WiFeK?^(wlZ39hf`4fG= zUVA)TTkovmUh~}WSUZqbz!M|8bk0z>@b0DXDuQ(RPJUG6%Vu51S!Hk4s}qcPx$g?R zYTD;Ap%D3B`7B(pz3nvpE#UsbrrS(scKT^?#8hw@TD?hqF%Ymt>?maJ29slah} z47e`=z(FF4U@O#DtAQ=x7ZmahE`QH976q_0C8Z|hhgV&J)xa=Pm)4&vk}XhVy@?; zxk=Y%k`oS#2nsF%YT7qAs2d%Mqn?n>(py>$7$sh49XzqY#pt!68GUGve3f-9z6;Yy z8vxv+OmdXWWZJDDEG(>BWJav)hHqp%bAwjO{H~R_4b>NML?kl2BoK;C17C%eipnf& zcJW&_k9Z6Y4Mi)*THNJ>YtgZ~K>kXLUKQ2qE3d}R9b`bON=niNmp^mU{@qUho{@&q z%g5&x2Dq59ljd$5ljKY|clz`ldzpm>Pj zC_!hLc(nHE%Qy}l33%* zC%p94%(jyzycj*ozMcJ@q|dHFNB=_x^xs=66ZGfH^SN$~>xe7b`2^ zYVhXK`a%JQ413xW98{zOb+%RFw@FvEN=7v6-)^1n7aAXU^G(x)J(A*|F^6 zL`ffbhpp<(5P|+Pa@;lbt|uI3!is%kZzLhNh!DJOGfu+V|IWWTabqDN?c^tbWp!&a zc9Xgv3+elM5dvqL{=0v|R!b&%FEHKUE*q2IMqg4rH9I+}*Dn5k9mhY|ISibmMyD8E znqYZmQ>rK07{MG`f9M1GNyQko2eax|k8!gf&xz)wSlN_Mg+<(T@tUVRX}9Nt*@y8oFJ(r zk@t*Zu-Zdod2(kt&iUwm=jjL=V9>nG`~Y<<__uKfYh2g35n0?1Yv3Q?NcM07vK~l- zP$+X>sBcx;7qKMhVpt0^2$C17;S3?}%}R2Kyn~s#Q#j~n8$8Ew1J*baQ#Ns7K{t#$ z;`xggP-O$)jtr3)38RAd7Z>kW;STA8SI?%=YXaK{W`4Ebqeikt?6Z}VjSnB9$_W1~ zZwCAW0CvTa1cy_TV^<-uZcM=V!lE_2s|cdi5_<+O~!C z?7L2Uk2H3^YslI+L&5vV@f>Wd7^;qZSkc%|3`U8J{ z=evm`|9w^XyH4M_C<;5)cb^(3szH2|e}JI94EdJH9pW{4`!;cn7d913KYr&q-PRM_ z*E<7F|NIx*Nrms7Rhq@Cgc7Lm?Nl|Xz}t9AsrhDd$5ihozSTlw(ethI5dR7%lLwpM z6qw0xnf)Y#S{<=Wfm+qQmJSZbtqur#fM*5$0qt7F-MiUn!qF!wx^NMViGXtQ=;HS|p9@%WrY^;ojb7R%?Yz%ZvV+hJ>mJrqQ^@H2? z!^53^mqujvvOI`s{K%g|x2Hl+Uyy=7QQuv<+2l^gMOsVm@|nTxU|1DM3d1D6&Ewhc z{O^OY__Dx+h${srxk{)%yQHU08kd855FdemhtysfNjRuhkjtrd^2QO`O0OYK46%jp?< zUfLipL2=92V1H^GTW;!>+F?nlX6>mml{eMZm+TC4T7}%5xM)NzC6@NoeYbz{>5IR+ zoOTrJ1tSaXh7y5Jn%kY#A-v~lUtX(i)|b6?q{CH^E0D9eZ6l(*wO-ZsBlq}Og0l*@ z$4stT%ZNv*WZf6FrVj6_snxBG^Y0cf236d#u7I4<-qMo%Je_i54f&p`+Y??;*lv#% z{NvC}pYZzc|6m8=n%M*@e5_ws5_%vxAZGcDIAA6L^#NUpGGPKH0!%WToAgLIUV9Et z+H|^Wvii>o&0oz3d@1n|7vWA`- z-q(x|!D{?gp(e1shU^TtrwzPgirFV7b{ZXprYyv=nyq^GZS&X}7k}RwU%DnH{C7-a zn>~7q(1@)LTx#-PaCiXmzwtrRpxPNDeqe;_>)EGeGIgoO;ubqk7PV}mwoZyg9DCYZ zIj0&P7OEbK6e#0ya#?%+Yjr&o`#1F5g+oCpP!3_?LmQPHC0A~ykfuWdp%0=g)=4n( zJ~qTV%UbK=;o%Xc<^?aLb;WT*Lw}Wg0D!@(JdCZ>AtfcubX;yjiw4jP;LOleV)CU~ zHRK*y>W)zp5S>9!vB%y%WPxC3+5P)_`1S6aO;=i%j7-0L8UMNsOU7tzR(^gTh3u%j zCXCuJKlZ&2U&oO9d1XG6JM}PuTx8BrKdPsPDFa-e^daXUt-@D>1P!x!yFo~Cu*_7R zW1vYmsex`vWa_>P9e~Y!m%vbk3nVoy2ntQt9>=B{#YQ4otf4`30`Zp^Knncod}l>) z-~aa;q?Vv2G-rT%h*Z*DyQsMi*&P?87oC-YRu`KZ3`$hHZk()|kK*%tD>AG}7>Ax` z-se!ZF*I|erzxAthRd4Oy_9lMMaz~_*Ef)joRuY0SP^BQ%iYhwpZEZ)419r zG4S8w-l|#Uy@DtC-`zyu*Yu7LvM+$2hUl0@ zBuifyzX*KE6BQG{n@*wya*)Z=F49LtD(+!`X`A;y_7(m7!cKrY09P&%3SCNEu(lUg za!|4if*(m{=7t1? zQzbsxW;=-i6#uRqv@B@s@#YwKPFJeQ`c-kV zhDY~&6T>bRx1&dUFv=ix)hC9=i59##VQ+8zTQuGWFCcy7^B4U>+Vn>D=HeXK`cX(| z&oHw^yUoVV>w_u?b($7sKWaJ+gfE7>j?llGR$U2l3jHHuu8ZM=ZIz6)wA(;;&23Cc zqLrKUqat0~E8PHLinW_!ca_Oi2~B5+gNndRc$tT=mrI#}(&u%(NG8F!n!;81v){?G=1f`S8%8 z)bm1Kx<~#O!2&-0?9+CQF3Nrviwyk&Y3L%EN@uc8(_($dbJJ$vcm#SWJXGt-nQQz9ZF zjvYI83L(9nQyMMp=^m@xxHsbCQZeZ94{wVd&+tyU{g)Ir-`i3GY&UauF4YHZ@IR%=R1N^EQ_>|*M zT@8y24*ITs@J1U@g#c?f{T;rhZ%CK1M#n#39}-G{Q2$`LAHDaLJ0n=c8hRsD!gXaX zTglG8_ybEEJu>$dt|ElpR&u@`tlM8d#oyUd8;)kfEizp4ctEvKgXr!AG1J`7=9}5l zP_7Y#-GkK;V`Zbhe&ioky?#JO^Bfw(l7jC1prxpW+q`n33K&=asU7T07*qoM6N<$f-!Kdvj6}9 literal 26676 zcmZ^~1ymeCvoN~2dk7MOJ7KZKEeRS}ba8jr1%kVU;1=91VHXQQgA?4{-8Hz&Blq6- z-|sw`J+o6&*4;JT)78~A5z2}(IGE&^0002zldPob%eDUBiH`X4zoJqV_i{nD{Gjjw z0H}(^dN4+Lxu-UjRaF20ychw1fDi!S?gbUF3jnxr0s#9)0Dw>`06^lD*{CA&LQpo> z`edP?0APKA(E*4EgaD)$2;t=i2)70x{}&7Zyl8qkka7|Jmzs<%t;|E=Wz)+1@|VhXi(aGzRg{+YUqS!p`0sj}dszQ(Ne(Xm)2x>Ua{QxkZ~-|v{=dXrtu6k4#QstK zTkOBu_20#b{8J{RZ0%ugr!8r1Z|>moQZ+Fy0dA51D(3%1`QM8EhoshjN`n4V@;@m5 zPe}H`4p0iPs4sCgh9F1bHgE~w8uFMbN5W}W>#9AHH9M*J%+ zKR@$pNrX45gL;Qr_-{y2tY2f(ehrBK6NYT7R!L;~0mnq5{aBAp%5Rp9;YMWV^0s`= zMQr7-dkaqke;?IxPqX*5!9nw~?UC=i*nQ^tt=Or;%7wznz5mv8bX%wNsz$(^zQOa| zjQHRd*U?9Cl03`L$^tcw??ESk|)pM(T-J|Gh*_sw{^h%7Pzu=?~~)Ah*9|sm8NYT`+X~Bx~Kj= zl+xUaj;zAPY^l}lU^*RX*7G9RG2qxTP746L{7aZLP9#2TyJd*$3)u{%!uvE=!p;&Hyh{LxtaF#K_Q!mT8{3v`Td@-)@i^4MZofWxgEPnHqgL}r8u86=pED+ZC^k~Lr?tJQeyP7k z62r*{s*4Y;f3F|KLU;}13fE*++3rr@eYM--zDKqVlMk`ar{Ygrtq&=6 zN!iy;&rd7Q!nSBa2;B}BQ-+u7UMC$SEpbn772ZoPEYAr~eM~uOhLGc>-L^X?{-dvWX^t);!V5w4H~S1^#rJ{B>o5jJe`A5rq1K;l~^4@nhI`xO><%PaTZXkP*!wlx&drsr?}UN*PPtla7P%jd_Y zxEc&keU5ZIw{ID8y}1+YZzG(iQBDrKNWeKwwW!Byu}w_jZl+rqWz(v{pUz57i&DTL zJBst~S#6qxbf;J(qdDPk$00p2v~H%Pj=TlLPDzl4a_7<^C0yN$!s{!x2=o5$JtHYs-U)lK{fn$y^n$29n`Hm*p+csxM;LlanVF;5^GphIHUz6q!n zI?8&7++3Mcd$0|S$0PDgH~ngZzCawdL%r#yoXsEqO5V%dBc`FDI5V^*%qC-y5|ckY zbIS1A&G1_Mspnb1sN5#KWed1@Ne3mCxFc!3>3Tk)dg?@-$?RJ^&sw?7;;M7Qau$`C z{`-*CdcN{}@84>?buaI~$H8mcGOj|QPsPZf8i6+cNDk$oZ^PuW{uv|bU# zw=LCz>2UbP+^n}mu$39WwWHDX^-D2*>xBEAqSdWU7(KQijgE+%7b4}^ON*X|(eVo} z^jiI}8}{%1;05h#7IxIL+;+kw`H0qcI7q?CIT4uD?Q zN8xW5HdtRszOg+Y$#P@EHUh6W(`q)JQ>o5PImvk=1KNCg9;Yh&F8Rv6opUY84>mso zA5xyr3c0H( z8Rczzird9zI>>{uY7>rjZT*umC2U^tTUg&GSCrA2%+U>9_@(IQL1_aE#3#s zSyn^OK&=lm14kL0AsLdP@w>+LJzQ*jsWfm?+v{>A7CyHIf+Rik6_4Nr%+)39^RJQ@ zp!AYmlHcCs0h~4g5~BR)1kyDoRwwZLQLVo+A}C@{NY)};oN81A^4>9uzfkm}G{2?{ zs+9jRFiw5cpS=5wa#9!;=&JhI+*FP&&~9S-9{9@fg0Ju@+*3Q_&hYubzp4?Q`{>qs zJmdRE#z!&>v9gMVw{Lru5ob)tPx1{D&fK|F%Bn{Iiy*lYDtqaVPdM%H-fS*?b6$kQ2xnPS`%+|U3jZ~Z zhfpr;TdEr*|F%g<$LH4ODARzKITmlcShe`}Wh&39H3=RBhRA6~DK9J{-A;8etBR!Fj&-e|A(k z#EIkZ8jA$WizYaKF|$in`&;!2Dwq&BlS%X5`7Tg1qW}g*@*@7kHs*|;4WhyP?+&YAtI)zE~ zwl>6{HZ)hl`}t56V;ppq<89LipN3j*`7>mNu2TnVi;$86?2-wcgytx6JUV_@NzL#3 zZ&f@HdyixQ-Dv;|Lg|Z!ZMb|AlS~$7o_CM%Ys@TGZHolBg8KNZ*w6nqy1?5V@xR zkkNuH#d$~2faN&lv{5{&OIJWC+1P3&H0JM`=(?c9x<1|Tn?*}$X~nR9+eFd}3`E@EGiWg4gJBib>IwA|$?TDkiPR z%?X=XYZ3^`2`g}kY9Ih)kK8wnxYSpuFisI@B`&cwUleh4bxJvKQxLV^r}$t0ebU#! za<3&y!6e!mxgirTK=vDOyk!r^U?BygberxNtUm;bpP=cqiWlyPz9H{>&VKPlh4u{U zDWBOF<@_W?W+~}=;;BM1Yu-z^d>82^lk&frhM~hanCtv!`rg5+t1_^FwdKE&I^!dc z6i(6+AYG!N@n1{jm9CrNq);`@MafYlm~PsTiha8F7u$W#?>cEUwyfK=dU8>1`?#T$ zmTc8*G+Ne3veY6e#EFDI``$J6*`*Q-rg=|0J5dqkC2PkdXMip04APYU!Z;=>c6_+m zG=JylSSE~Ib)&ty6eMw@%P_@;gu_w4o4IYCG4ycSak5d9=$f>Jz%XSxE$cl)X_z=^ zSoAVY5p!qM*xKbJ&P%l}%+=pPfi_4TI^<{QPB?f(V1}N9b~xd}*~)Kiay&QB&p^@8 zhEKA$fuGcRz%)bi=#&x3qG|M4=1~TxoI*VU*Id{)TH_F=D2i(VOg7ez((AtnL5>1t+>XvvBr1{x=xaWpU9v- zv=s@+E7H6@$MK29^HMSVY<{Yi0uP~m?=LPR!P5C3#X$S663?Qy5>Th8wVua%svW6Y zxDCgWr?k3cfd516v-3}#iLgO=`|Ex#oHqYErRN{``=^a^R*(;Oe)-m;oRE1!1h6~j zBt>bQ5v^+Z8eL9f#y+| z?s(k!DOFHTqZ%QRmrdeH z<@E^4=KOQs^7p0(yQSQduoE=oaF0g{>XxQ2RoJ;d?I3A6MZTyMFsk?cYF zL9k?QzM$y+BTrI9Fwj=iNTYJ?_W8QQX3H-LBdIw)wqz>u`Ndz7$PAvO@Fa#7Rvi`L zXed}wG%^EHx#a_uw;gJ1#wCH#n~loR?Acs`*2Eyn%kFc9mB~iGH1|~(!6Za=Dsb#r zlJO^pmK24uA{+VHZl3tiYB&l1gLcGeFG_UALK6FB#B}z?Djbc%4tjj%;pKTa53a0YNsq2 zvgH*lXTzB>eMNT@c)p6A#E0K8z6u8vWt(OR0>~8@sWuy0&E2Xd^m^s`+O_|@=`VCcBf7~#piMCX7NZq1#sYxy*9kl6j4pEJ^ zOp0YU+IX{5L|@We6a9-;u1ds2yKJU+;fp{5_OIw>3d{p{QFLNUeJ0N!;dJe*ZaaC8 z$F@(Y0Yi2=zT1^Gt(H@ zw?8A4?VInuD&+SaJSh+G6~#1qgGcj0#+4|{?$pm9tcc)|t@Vs8<9fFB;7f6~N!auC z^V159#(93B7eWDWL8RO=#TqZ?;7U45Ub%cP@5>I_=_huQ5KKrL?3d7y{z($cnQ1%3eg%o>yNmW5Z4Nn0M&mL(9mDA(g#FX zS{E|qWK;f~%%-f+NcAK>>*Da^f*5S*O4dBG^!#vdDJ!j>@IgYc`y6!Cs#^!PU?Or> za(RUSnmjPj)`4xGnu&-Nt;?tC5QefjR53G20?1-J*4 zqY@M~9ttmZy0~hhFx9}r1E&$SDH2@&G0Dj62~~#MD5M%0Sp#}o*EJt7u?TU0zqmjo&FND+oCZmQbuh6B?DZ1= zyAs{BqSFu3Roynz>%`nKn6P?V?rD7ynZitdOby$d`LDD>qFN#taNacZsZ(7A>nB^x zk360osU_YA{pzs~z`tiecz?b3yZvwVF{I&cl&IT7qA^#s=S)Gql+Eq)>hin1CpIXnDNSH|lvlmOY<;5}Lh!@z_1WTp(TR#gd?W9zxO%iA9e-wH8 z-J!9de#fajBh-xJ^rVkRw5c;Lz#N@)c(e^#Lb3A7AQp(y+1t{Vp@F%R-jPNP>PtqZ zB1@+D%@7e226egdq*FZiQr*%eZKlJ|_5V%b_w~-_tY&*@gFnO6u2~B+tB1{MKZM!o zzprJiPB+Mz9slhH)1<*r(e_-pyLv|)NEvJ`tZdeq81NB#?Vc}Xf~fmyflKmJqMr#K zqrwnIp7y)Tz{+AF9l%E;gN53a1}kjWTl{rRrf|zC0&YHY&JYDpDXQSEO8Y`z;i<(Y zpw{>#>y%ZGZ;*q*y_gU^%>et{G3h4*v_gZ5&Cu`JqX;(T4P~pG))wyrD%zy}JL zRlqK}AlN5}4#-W*g^#qT7~0F?bH@n@U(8Z8h*o@nBlCtOdWz%iwAc?vJ{mPyCDE2{ z7#@tL(rXf>iCwGGmJs-wasKq;^Ca)TkWge!{D3+e_$F9i3`cuT%^MMgw=!cJ{wJ+b z>xTcNiz`P}KX9;6(7<-F8eOLA@hCk5J47V^s#YYGF}a=S71?)$cDrg1#xewKY-loX z$$3ca9p#lDvEM$Iq@v+=2p7S4tmZ0!p(!X)zQxA~{UY305Fb~)1#MWB^+G2l!#3ag zT?#FsNd|tq#xPgcH|u1XM9#rJ_#lWyXB;~36jjc~J&y8if zNJ)lI1OB(za4r$}x;N+3g8#iE2bIX{`{%ir6$a@$rv)v(kQ5nh|IOHk`01ew*q0VT zsQa`G4Jha0Q_imzF3RnG@~ktN=Upn^_h%Y*he?p%`exNr|NQ;rq_XcHzm}#I%tumh z+w$V1QN6i)At+j zWoF2hBb=WAt5lKsLTBf@gZVdWl-L<&^91kT#dF=a{f8bX$HzbI&T*8N7|nRoiZF`B z{E5#vp1N9@N9+-t#cP*d<6Aw92fbGky;So(HKoYsoc#=_@S1{Y@#nlfJYfsZm@I)| z8~j$~<^L%;bKQYD|;uaEK!p@b05F51VI*SsLl}sT)4L#gtHu?3xS|bFoim1I5NLGk?<@ zIeL*C9e2M>y?{5F>K;1*qK4vg-VK@WXxrumGeixr44#cxw+|fz8{`KPjrRpC$UO%8 zjp9L>&(B1nmL0jSum|(7`&AqVvaBV2QX;=>`A}w|p6|+hr%U&8W-*GROKOto zF_@UiGFTa`i{|gWTYoFJk@(Y@I((+dWk+%80`ZlvtcF@=;;Jz9QlX=KgIbN#421Jd zZ>Ov*6X~xBj)JdcZsH&1bB$yz*uWa$UrKlos_EXB&5|yn=U%qk$>*urMHrx)sBZSZ zVv(WY-P_1Ro2Hj#OHEIP4sk#}^nuSXD#yvPnxa)orO+hz(%co$c=8asEm~7S+bV zz%wda+TlUAd?!vA!ep5EE|IrdQ-Yd}C*YP@q|Nb8q4h^jwcqbL@82akeqJUD=;@87 z{U)D(uv{?tbTHNbdah}`ngL}6dTqWjb`zoK8ZxiR9$1^g!F^A@@m@LPB)-v6!A=lE ztJr1tel{HAhW{aKWfg~%gT~2S(MIgU3UfO?eSrqIBBr_ATBQxAqeKEf-5456jg)($>jr;)83z zto3%ul+i0YAQvIgm_8}aL*BBJ@Y!;+x9mDWRcsBYZ19_U@4mGJ`s6%4Fr&s<9DSmR5d^7h#D}_pHJGrM%OG=&`s5SjR+}3M7RC=7@D2viyW^rqaBKk6l zK&(*TlRl!el;9e=6f7+D#K&2yU2)B@=BK7RXHR3)zSvoQxqucZe3%K**=IW9U?M)b*kY`eEJ8VD1;nY;p(MN1&kK{Vmj1 zfPw`FVn%b@g_!k!ARJf9`ow6oCC=C(fZJ!3`YJUDxBk(CPMdHc9V4MI&>Vl#3ctMHjSl*lQr?Z=MP&q+)8!tBjN|Hb)?w zC8YST*8`9(kJ;wi&0kUHv4-Vc&<6Or&M(e< z4gPD$TE3`KN!Q3K{SK*39@s^2k;6F1x-qD)NW?INtxbPxf%&OmleA%*o+TQQ;XBWf z;=&AZx+l)g4Iy9Yl2d}_0#J#An#qeBa$*wATf~^BLQZN<7SrYqMIDgW&zsBF3n`BJ zYJ|qhPZv!8$m^DxH)Kq~%QU6pAn}8X;c5@?Sad4Qq1A%XhOzG~(tEqjyCHn+SvAfq zL3lp@Vs@E{?+*SuD3?KrdX}hC%hYApk*R_Duf>z5;}pZ zC4oe7moX5nXsnnzKYCdf5vr-gU|9X!Lc^B{bn^X74o;M68}Lop=Ml!PG+ANb0G}`-ME)c zKoBMrI8GBJBS4eAtf{G4xYhBoa^A?mZW_5(5{plSDAHmx1ml%`jS@D&`YnO@x(xg- z{=8#V(h4kJ;W%x)i*%#FAo5jwZR^L^8A`+jLL)QAmf|(T3n|0R-XGQsLhimfUoaBO z@a6jR&o5aEKTxYZ2(g2KHb3Ldg8WO|y_i}|$tf9&R&1!A;@Z}D*=qtiUmiode3%c(nAY> zRc|uG@9(=nEQJ=8DLq>+hO_nwJIhy5lmoY(QC`Q5Tloi`Q;)K#z&q@}r^!7aE$~*y z;T6OJkUnKD&P@VcGj5XIj($UqMH3t~>T_iN65~K|+vhVs#)2XtJkNG1l^bt}8NMT_ z%N>)8J-a$uSSA|S_sNE?zYMS$uq;tjUs_J?9M6~-Fr|qsgX!LnjPuE$t&L2n05p`e z4}yCLtn;I&43r?Gd4i4P{#I%)B7R;&?^GL3mrejrghu3!Dped5&s(^SMSQ^dX5E>X zB!XdjT)1z>AP*(o0WPx5V+ci)7U}fvrhq&WbcpF7DxmM3&ddSrJ|iR~ zj?gI@(hHF0*#2Q2X=qKa&)D0sMiYG0eH7_W6UT{B!hu|zpi;3gaJ3~r7smJ|&SzoI zWl@M&STDYG$^5-0pov-XTeIUmKq$-Viq(v0pgO=xbqMP4$%1_Lh=_zH6cdxl7=2Jj4#@xxzlW^5C zj2x`!jxJ?FBkn1bA%bpDjA!AFZ$?hjwpWf; zfIa)FuoFh681*wkN+Hp@%sr?8tF{RjC_x#(JB0ZrY8Q!Z-MDueRGy%@-LV(!DkaE! zO_30fpA;f5IFp1b^7uAvZ^q~=sU;1riiY{Zn}C_MlUx-qDi={n-%lc`MRqf!iLcSzG-Y=c2??wuO|-4t!xzX{1=_zUx%KGSjJr?o z+#sNAqNOlj1GzD60S*yRJsZiO=_%Zs!kNY~K| zhxlH|`2WgH$~hOzF>UD6!Ee6J6}ORCodPQPbq-*Mf64m3pSA0V?nzI&ULm~6?I^oJ zWiBh1SBA;x@y($*o)IQgDowggCw@lvILX)k+n-S@WKR~_OH)D*OU~O;g}i;9f1D`l z5xMx660&{Ww4=QfKTXnl?3R_-waO>h^@iXiB&`j`ZA)IWrRe@T&Y~TcI-@n${dm#1 zhy$|%A}0L9r%8)^Jj5R{nYgD1`2A16sE&8vEvYD_e~3+pMC8jD%O#8AH04d7qjd=F zHwNEsEAk~!dRTkSqe#%L2b9EOOuXC0rfW`^VI{fqE60ChMfIC~FjyBj?vvpB5)ira zn|?PNGKefOaXBSSl`d4Ep<(#R_H$=#+7&(x9iG!k{{^X=zLSJNODanwcYn|8b;peO zcqMJYv{&TQHbXTff!4dmxV*MTNK#s8d>?P_QcXReLnmy407z!2Mh;N)IHr-I0BUI) z_=iXy8vn5;Ig0s%zDP~J=W^nhKuRs?Y8rZ_ILjD$r*O-La5tlMkgorM8bdA%)d`rU@p0?j{3u~lnpO{C{EpO=Hkqh9*UuX0r=SiIj50&w1>y{Q;H+IFp+=Aw z`>s{NgiF&G=NgS;f(PdqI+ zigrtxzFyac6-%s)I1s#RA7c}PMU=jg&r}t`t(vfQ*RS zav7S#x4jqn+d3erAy3`!IZYYg{I8`IVuU4MO>1-JX?gg2B#6IM;`ie8= zm5`v8i}O6y$_k4YqH<;u3jKe*yu!`GzH>n_{kNUn1 z+n%lZB)i|5TYVAVdOKs(T@-%M5B~zf*~Z@EW3qBr$+`LFB0z<5sfA&!97k+0#l1kh zP%fvf$%6vi0~NiAqA-fB)z>yE#ejze{1xCNfhVSzys)i+4`}CKFq>Vc+tq9BW z&{eWrCvYx}Dd=Z!v!39H1X&bh$@6M-#PtBQwK16RA$JqSZvFe6R;V&Ze~|K>!`$I6 z$0#3KvrQ;jvx!)2*BSuz6&CB}ALkbg$G#cvBs;Sp9fRbst2{CL;|aTiQ^zOlxDQUP z9XXd8T*67_edv4&8+T(jp%RsL@!o~|>O$AfP1rFH&G^t)KVwlKjff<*HE)xcZ2|-F@7YS|VKZumxDy14ZW_hDXfbAR)xWkj~ zqOd(ZhfZo5fkJ_NUh&Yw?(5;R=bkhX95Ah)b)wk3{0lMZI6`r(X7uPxDUv5Sq z3KIt0vK5(WHMbs1Sc7i#XEwGPRF^7LC`M1iMMO7(=blPA`q7!hODXE^gfl1isK3W} z`jShDogP*FmPhVA)BAZ__(56IDj!YlK=y(k5ys)Jx|?sco70E4-g*n=;s{whDn)oQ zlx!+Wj2=N}=kHOzkhlk&7WEb4>bVRBF28p%?jPe<^z+z#ah<|NS0#Twhrp;PPR8RV z>VG$l+`&hnrQ((b1tRW02^v1_-hCItnHQ65)`k*YXKeaEvjXf_qqi9k7gVFpe_9Vkift$P8d7nM4c{gdu*;kp=BP%HB7E=tQIYHM~vN4GH z15f=A&(H0M_1j3?F0qFbs?WX4(k|AVk7+=C;(CYgSsxdM^grl@t+GsUX}ybR|DAfa z7cKz^;Y_}Qx{2Ukcmy<~PQzbIOp_MJ7#=a5h&^qH4ZpJnhctnAv%U6Nl#-tQ)lHWX z)tAhHyzAYvQbX!?#qr3Gca~Hs==Sn;6ix~Prd#Zi3ySfj7T&e@7|p-CPq&LFib~jN z*t5SMA=FN*zZ2_J>9)a*FTg5Xb6{)yJlnZ@FC`e%=l^B_-_^XzvW+JV`UZZ%GU5z-i#m)G9FEPG z4y`N^g3TFi$UAw@9dz2lVVmqFGp)<=4S3SJ-V7$LbzksK$zoTd?y+AVk)>lW= z=citCV?Vkyv-z<><;XnJ4WXb;@NHJxFJn|k;YrNh~ zCMy~yga7&Z=bAcYLl5{HhbP3qj4IblZ~wiuBy%2NBx?dr<#`nMqhc$LYe-8eFW%Co z@1zK&{}!9!o^p0Ha;wTw5my(_8;n8Tu}x_f{KUFOiZ7=-9tytway{2HK~W;LA9HGl zT8J54WK;Xi>QU#LfLFwo&fwuJI?uT?@9G30mzWtXA*z;)(0WT-3XEMsGF>O4VYJ zZYh&g-b2(&dXs^slc<3L8`50$AZ0_msOV`1EwcIB>4=5gr1v$zkh=Zze{r*GbnrX6 zT`Y2W1^%?z4qeIVgBZ;LMGLiPrNLPXQ*^JFRIu!`0P8Tx@vk<(scB>JYxRoKzaYPi zV+IaSjP|aqf|7`0a=7~y@$#PI<5@Q~Q6+Qvl9aRV`#lboj31mV5`H#N#m3?*7w_^R z03(`xE%Bnf2gpGzt6X!U2r5H7A^uqM{Huav=#2;tDdh;Yf@a1=AX(Bj=H z?V7m_$nBft8s>6WH{gZvwdfWMz=jkZo2&3%aaIEc&%F*fvjmsJd5z z1*e=lS#i@ik=Xk9U13}y16}dg%{2k+o?MtXbKNDByZKwCq>Wj*8wdpf`dPZDX+E&DmZ+ zs5#bt)H&|EmpDGew}s&E>ym$py)41@37gxhSkMkjrUaZk(C-}f$9 zc5o$G`kiDB$v%3oNh2RMmDR-w31cEn>NYpkX9NaT6sOYX(+~<(#cR5HpVHzn9E}ASsbHdq@cVgwjT_TNHNmVfv)-5I z+UbX#NC|2|vJ*3H4{6)Jy*IeXCz)%E4oz-GA32?|{imWCZSQ335&G!m$y1aL zUf0I;#q(mjkccan_su8s3UX#!e2($pHeVnf36b9m>k4k%{^Y+s@{qQuN!mat?%uIR z&!0&$8~$M1%a;&ocF`;Jl`MzKgIk8Bin&*A6($?mvK=R4z?ZxL$~h4j(;>d>-jp+k zZs>mko-F5qRt(FeM}(8Qdp2-6O3RC3n_iZ{-M`EjM?L;}N(#421h^p3AN> z+8f%9mj&V=2Nw-dX>p%R^5VxMCafzjl)ZctCKL6J3Hf1zadw!SD+ZT>4jcO%B-Vb| z_|o^eDBZ)=4IR(Jw0WuJ*ur3j8ZX9{=Zuifd#asEdi+A(ws+?*tCZM+x48%XoJDQ@ z)BGczq#zxo&x^-RP4 z0VE@c9Qi$3s4$po!`8`KYia@LBo$#6wN~i=D_HtF;J3=i%;or-_MP5v zoBD+eCWOdSE=bG67RSyo$Qqwg&O;P{)WM0UkLeKP?=VkM=jUj^-)Ht_&^M{roucpP zIPEJpi|8;}m(5pmyuxXwJ#({2baHibEt)kKz_onrGp`Q`G0@+k>2}U|2Ff*QKh0P6$mhduygF>* zV>$@1jB_7Xy?0+QG*d)n-uMRLoL>E|5&!O5na#g3#NSW!LNck9O$?*)K77LsH}X6VZd|p%sBi;5t;dEQUEuPP7+KbXA(m4V*I>44nP>OE z%QZ3U7CpK|1~8|+)3;%DxZqBC3v{9|oRJU#Bam;7v4+gagjGv{b~7`MEO5JIo7v#o zca~^B3Aa?s$k|whUysWH>T*U($(}f|m#SF(iQ^%`g_8v5bDoo4s+SL5(=UKx@2`SB4aZE^tX?l z_2=HbB%V8DJg>taWheP=ff@IkR>4xj(2#VEp&{KN;9ERQzJ7`+!xI$4)%LGGdcjRi z>)MhrVQe&;^ArsYEOKdTp`oz?UIaYl%4J_wmN)dpp#8Cr^ok3BN!_oW!m5 z$nQrq_fF?-rniKq+FoJ~|mKBqtb_$)P3dD#^ z6D@RciQau;iEgr19Y2xd$pmjYGiiNW&i2sHB(UFO%JETs%jo3Rf@+&iDdMS&`E0=9 zR}~o(E<7taNU~geiiCKf$jTSxZ2>!kC(;Pko{MN=H*gO&z4R)u1mEgqrG;B>ZD=EX zAd{}((6{_WSxO3K>?_vGT}uj?>a4H4gV_(gK(crlS5TtdBp4#Hc8J5zZyHBgYYuJT zA~}~?xk*@>z*9m@G-op^p}o|KWC#TD_BAG9>uDa)L(-9uI3IN~^VzX|W+#;Vmu4JW z5q$nGi@HQU6_RQl^Lz$^xx7UO4Y-l|w_d`tZ0saP72gDje9Cx+&a-!hrwM!SG_=%I zzsd~ByL7}q$`w_kSd7@=^||B(y6GBC3o5u&^a`HQ{?47HHN(P5`m9G96n?T_`>q{w zxA*GAtm9SQP6bl2+OZ`{`v=jYVx2uZ!Qv3`CPDApn5=13KFbDpgPyvnX}@`yDU7m% z7gV$zBCuLk)M$55X_7jq6CjHAbfNToA$Gxj?4hk*%_P_nz-B=RZ=WWITG2dC;vHa; z4ig~4Yc>a{!Z-sHN(6z{)6AP>J{>mX32QWJLGd#6l_I%h2eoW0Ln`~Vf?v;FI!m7s zroHZQI($dV@QP(f3hEwdov|#}+Ut6FrvOO{Eb9?WxGqUPFapBC!rJIx!TQ;TxBZ%o z-Yx-C6Gm?m#?E(65~VwII@y*2UATyOmp)U;#!Spj!UwE7B_+YIFIQ!0qNAyGCT(*T zveOr0IIy=i1&wY4L9>5w3iwnKd0^|_zF6?z_3CgbnrnWPa6tt7CD-YAKCP-jm2FL$ z4Gi%b9yyjvSlmx?qO>352ZM>{tRaTHCBFmI9x&c_^zhy(N=|_}UiJc`Ej&`k%LHXb zhDVYL#*Qut<1`=t-Z1?V!-8QLf!u8+Qv(0U9tsusVbf%m!mq#u0;yAo0Q zqUkdFwM2}(V2Su-I~2}A6jX_eXd7VM>t6dY=6dNGVP?=4-ej^1&J`>^2tA4llFwO^ z7>L?=2}NbGKS~B|A8xQk<{WS)fwJ0|NGtoYV5Et5;8D(c2A9$=a~-H3ocq;h!WXB~ zvow2gm2au5&b1MphdL&Pku8SDu8xBe93KtO!4|$R5%k(eqvu#^dzirTF#qGlb_@hv z@wUzTY)5i^%MI&IdXiPn%gS|R?cw-~c5k>(Z}_Yf+*Bx!oOWU`KO~bv+R5L+Jiodk zGM%Nw&pAGMUCk`;&rN-x6^Pq-LYpok{Lq(=j+z3y;%F#Uw+thEopxJ6;zSXep9I-tyrn69v_bidJB(r~6g{rS%cp`+@%QIlE!@Jn zNaZ5Sl&UI;ubynKGU}Q>tbK4R=1kVdYIsi4QokA3IfHJgTIlHreaL6o=dK#Tn*@F zacm$RgC_;k>lCZCU>pnLpwL1*&m4zP0}d=x$f>5BiYTxH%!5sYfw=ZzW=CDkp$_wl@wb zd^24h?~7wQf7n+zRY@U!6D&SU9wWsUPjMkCeDS4b^0$f!D{+mC!?A$XV$goDX75k2 z$BT($m3tNoPR7XB8qKa4Wg{P#1b&5crD?tvHLS7`BdO8<^Qg1r$?Tt2Z=^jV9#G_E zot@oW=i-5G=jK0sY0vYwU=p5jykL*=%L98R=ds%VoAgAau-N+eqDI(NYpS`MzaPTF z$Hl`RThy7((k88Sx9}R)wBzMwd1dVTZ~oCTr5Pb6fA_d(f6h$sOin%CTic)CUPpW`(*jmZkOqj_KS4L?00Ph9(3UN2BPIuvMIU@B1ITn z!{TsJ@yK~K+uE1Na|r@Kj7H}Tt<@ZbZ#z~i@6=_drIWXPxECruatm$?X20Yp<5E~N zMo&a4T@-0*7Uj9v}Ps&(c-9$&Pl`b`#}^O-IdsfrDl$ zC)#|UDRKzi4(x~c1usSwitep-zh%di&%|`%=d>IqpI!|PBMQQaEQ%?&+tIgjTbz=? zABKf^Eo9S?{;vQ?Cb!ujhVujBX&s)Q0~TNFY)n`YG{qn%wA?G~Cr=`{nMwCBIL_YLW*gC(2Hc3XtG$?R%{K|8*L~=GYRadHV@fQF9B^gOXK~!BPHIt*a5bI=? zY5w@+p3D77^m(i_rFU)>VmsXZv+XjwU_T-R9sO=RRp&}6DuV&gNJHM5yH!mF8_j0h zt(k%W)NBYw37JXFq*hoJO?8^7!)tCa_A;icgn^B474q@)rOJ2BmMmOK!Zatu3SO0g z>)z;3%Gwv3br@J}S;kc}@`clBXBf_e(}<7OKE*TVY9;}u-i;4zm4OWjblbALbC)8e z8h!}#t(kj08O^ycQ7#n*KUpQHb?s7@RS8yxrLmeGRh~@7an($EVa8u#a=xFKr*Gj$_p}BfZ;rZSeq+n`0>i5 zR-(=Es(OM>@{+o&(~ty5zvL(vJzIVKNm6#!TVR&xNFiUb@a zT`QRItA}%Sr-#ovf~K;aQ9zZwd7Ab3lEu}|f~mIy>CM6jito;YO`YRTurXND0psgU zA0M)t?r7qnf$^lire7b-r4v{iMrM@d_k~~hg_D4Z8-2q!aW574dOpli6wBV`cUFFD zsvmkr3CY*W=B50Pq^u)0(z@Z@6ZkSuF(%l;1Sq{~{Uxvx2DU~w|C6U8XL=LiHkPF} zZ03AfU;5IQHl(wc07FWEqs3hJ6Oc5fp(0v;BP)~~l?i%UN12@5SZA{spCB+sO>X@P zs?IZM@)}1P$bSEn>^|OWVAyh`fh6~K#r(Q(<2W@;%=0^{nic@)Vb)mm=S51uP56P$ zmo+W_OUx`ry^hzpyIVO*fkfY2E@ndK$eU;+gG3!qU6YR}$xL|20gTm}A!PuV5hku- zTnE-{7cH2=(fWOZV6B{{DC5f{D7|DnQ>*EA$>7+&XhVjnrr9?6sFK4KU_)GFJVF39 zjKY0fl81eeqan1lINF8PX!D9NdDWzkssoNZfDr;9r%4&P(ckd9IaAi~YYo34_adw0 zsR<{l9iVwAEA2`GrWv_9A>T$|I#tk20~=utmr@<`Bt}C{zve@ulu0gAC#>WR0X&nE zX*++UsvVtGKVLYGv&9notfn_6N4W|m$JaW6AKPTI!EWz=gT_mQ1yg&J;3#M9zIxpl zlS2u(a!mr>cZ`9l{Qv_^E+gbTgU*7z?{Xy+@yBlFtCGs`st^idg>`n{5bF4y<5{b+Y4vV09eP- zLwnz?)ih8Nc9(9IJleWEAx`H5Z_D{g1*1(a7_-jQ4Vn=sm2qAf(_@E^ht~wl>bpxC zvZZ1REza=mH%7{WQYM@P`koJC^F&l{ootyjJ^ysVB;d(07hXl2Uk2w06PQU;H_=K@ z(+8ntRWH^Wm56<|Lw490$1ay(Ub$T}cacS_lz`Ej1cboj63irFUDk2=6w7v!0Mk`z ztSKGjye_RF(+{o8lXXM_WXUvEWME~Q6NqvcHl;QZT_=|{=VO7jYeHfvs^!1@PmTUTp?7;aZ zc;TLlUI18bwlEr!QbZqf6KFhq=T*XMJ!x2CMgpuD9KHmOY8W5wC3~iC7x6Q%Ssm!u zCZYtqbm5Gc)rz*)b+f8VSY4ObG#)CigFM}rWSy!WezEF{#rI*3Vemt;`i_#yVwO{0O-gyGt%UeyMxIAP1D)Jp=M`?tQk_x%RH;&Qd9qJ zjGB&YRCw$VU~_clRUK!Jcp%BV1aex!!_nE|BK`aS!c6jlhGZ7qNobBs8VPq&DRb{F zXYIVrQA7oaB1t{fl#CE%UR25%qWgK=K$0h_Eyl$O9*-o|2XC5&j=n)i7)Q;69CP|1 zJnax$d*7&IfD4)+vxAAAW{O}l%DJrWtO~F?eU5|CBv%uZkY%Nbe52UQ2HWv#RxDsl z2^+-)Nj=Y0y<#@DyIu5y zS9$F_eIcfvJTuWNLtgL3i#`(#AuD`cpj1wiS#M8$%*TGLHnR)FZhD}KsCq&YfG87& zw`Q=l_A5w^Fffy1*|^;|nc{BpxOSV1i;K0EGVtNGhg+VIX*Tcs$dCL;rv#4f_~V~6 z9Mk=Y2pdvIoPmbN0cVQW^LLl9$kiAob7>^=FHqtE437b)mj*&0U)yAEROD`i4HL0pyc% z*s`WP0SXx+c{K-`aV)Sp%{eljbL;45hnQ3jp=%1U3dJ2HUm;KhTdnEGm#JjJ9Pl-V zrhjUMlAuZ>X1etq3q!W)Bz6YoCDkK1;TN{GnBXt+-o_X5S z`+GeAc6_xWrG#pK(;`~ugFWB-R;MWIj5y8bJ#Y`dx`!XlDwqrVdzYBq4x9&F6Cms1 zp8IwQe&6?f-(+vL>PRo;(=^wPs<>YDonH5mx)WP{0dwNyrMdorY?}UbLLpeK=f*bm ze5B60h6^ySLiR&Ch?|KZOh1jk04W+U0lFs^5C*K#p%-Yq(QC&kZX`m`F#MKCiGy zGL_t|Re#|pZjNh| zqNAx$u#qv1>TGYFO(=-upi z_mQTIW6&I`5n}L_c^~iF13vkaKiLgP3n3m6dvVi`40xJ_%H79%yvKX^NSHfE9g*Qs z5qxCihbjo(^)%laQ&IXwXsP3;!P+-=?(s+@tuc}Nke6QqZfBXSONYfGXr2bfq zrUWds_ziLM7>-uw{6IzwL#r9T+Ixn5gLC`#?fxcRR;Kn&UKN^n^7Si~wg`=dHMf?H zJS4&9mqtAL<<4tm^Ay_Otb&xeCm6A5uKWesREo(gQY!nS*8@^c?UBJ|dj9k67L$@H%liBHS z{A(2QaWV_7OYOE(BO)740v|F#5p^*1G@68Db=HJY=BTErkj2e?2oFN|BCbhd2-y%A zuQ+QSNVeu4H#W60y&&fcMaaauVg?ZZj8(o9ZX1Zb(EHaesV-22S=BkJSE{TNYrrFv zUUekV;%Sdb32+bqN+WX34X~#{s6;!2DYr`xgLNUNaWc<&ei%aSW%^#x=&uAjpxu!| z_7nZZo_c2=oqpmmWe7gz3qZ>E4Cn{=a-ZKa(Dz+(fr>#r^i}+msF??!q}N zD7~>S zm$^p=U>4PalUsY35*6M$D*O}VML7{;~>K+H58HH{}g zzL_S(i7lJ+r$-WOi1f$UWv=$Hz(GuQ7F9g0aDLOYbYU$r4EA;BNLfAM%_PW>wzrE& za@HXs41NI8>!}K>2W;{Yi|leE0r}LlVWcNY$((ltN!v^Z?G25{WZv(*35v6)tYvkm z0gP1xQUV_3bO4|-^d$h+hG`L*$(2{f2?$x$WP-Y(gVa-c(ZA$NzNCIhbv=U~lBo#^ zg9Md>!PenrVkDf4ql3I~#=Hb3y37rTX1h_zl;I)J=~%b+VtuUPHeK!KN>?ZfrJc^V z0(}E*o4H#1iUg9cubjOuWm*Sm1iNth%tyC%<0UV7iJ#_T(haYhn9urv*6U|Dof4jW z@<|hsBHq1wSFVsX$$lN$w2PqN@iSd|2;fv_nnKw?N8S&Bq4h~ihj=_{&xB3e;fCpMYo=skx$=9aA}$?7Jv2j6MR9C(_ODQW< z1EY?J5*`2{*$H4Yln$inNJBd5oeKfNs|!I;x*A}foVf?^*5fEetdzrfeR?Qp$3d!p zTYYgT&)$?qEygGzYtq|>HYt-}>UuI><6^>=bw!dPIi5}+I~v2d-)Ey*aw}DuzzO7? z;B=HEPo0a=i8HWTbf&CZHcOQ8jbCk)Q|3jc%oo-84sDt+z%xWN3K&9y-8U+l1ho=R z$~5OSPJq}pQna$VI913ko|9?sZ-i>20dPG(_Xlop+EnNcsSFFDQpm#7%%Uy1fmlf> zBi#D44=XF>V90eQ!WfdPCtQw{8zi1cg8D{FG@HWEiA-brTl%}c$(_5_mE z3XOWwOB4BOowP$vpnOw?NmHO|`l|}Sq0A<EP=!$!ZhRBy4XN7gQVDQ05UoIxF|Tv4*!;}y2D^33?aSJW z1G(k{m!1dqpy#Y1Gl9|T7@1I71>ADFm?veuc_Puq5bZ;Kw-6?J``vzN6#bOso@Zl9 zLpbU8<8{q5(}dF`5125fONBwQO5-YgrgLk0yF%{jQ$G9tQAC(E|Bw@l5bUb@jlH8t zXvTMPB{Z^=rLj0@#&nI)2(MYch$uv>X)C@^h zf(`Rk0wfdgIz9tFrMhE6jwxZ1horI7jAoD%f~H>35EL4Y(P&oF#(Jbm%JJ*tC@HjL65os zJo$@??CIvyPe0A-jY&;~X&44+nFr?P9r45K*2nNzpjw|$<@KAsYxq$TGyHhTtgnw2Vzx{nzN zckbK)2$t1KXn&~Il#-_5Dpi`(8ReP%vs+q&bi;(ldVAerB_KtdktGAw*b-dwIjAxFi z7J{wvahG1150xgRUDGE;nd~tRo_qVR$G-c!zq=`O`nKXYUMkpLjew0coAy#9Wywr! z%{QbS(Yd_DXb2WIy;73311v9^2QEG1!yNhzuW`2LMSgzNPEd~pN(+94QCj)#y-`~f zzM(w8E=?827xr9Ot5=vi0zt*H|E>BP%4IG+rxSYs!3pg8tXM^qP2=ltV0@+Dhuy#a z=U&`7${(7>7V8FA0C_@AZ6xhGf*QsdlhXFE>8t!e?Q%w(4RN}-%5us$KQz&s0MH^- z15eb|G1K)yv#vaKY~?wZ3oWRjFUkRfkSVH50SEk{$)ydDphhTM!T~(ZtuM=#-~i9M z>G$GdG~jE5VznTC4J?zaX2iB|d#vKF0J2mje=fs(I-`_jo~!@h9$T3HqgAH45~g%< z0ia)#AuApt_WD_yoCfSFwqXXdK=KhE@eyhA8Y{sn$nAaNVjPv#bQ2k2UQa&xq>GxS zsYY2{m77P_btL|~ckeo>aD4myThuZ{)i_+A1B}8YuWP`;N)^~R2ljBAz*^1Zdn@S; zA(wnNJgEkA#VZkZYUiaJmcY)s@CU~W%I#kd0*eJ^S0$?pK_+B9uLF->GfghZS(8`m zcqObZU?JBUOml^;j^s>hoy(YF8|5@F)ljZwz=U3!oB=#M;FQ3WyvEmpo5RUA&esg4 z5Cb6ar6g3yJ(AR%d{&wA^211&n-^)xsYB}Ewe5)ymM!Fd?AoQg;_CT6NAD+4GChdh zT9n9r*Hh=+{c4Urt6Mf!#SdOsnMH^Vvz6Hcq1#$k#jB%uytfOf*(*-unx3UwJ~wfx z+28EijT^0?AMgPmkjZaR>4>AS=KMvn`l9yIh0~1fCOuO{qkl+gZCWhYc%J`!r>Iq* zJicg4rdmhF1X;6DQY%82o|RdE+_^CMJDj=?&=1CXmz1o)vqCCGzkEl@cEdV4^_JAW z6|ZpwusiR-6F3*cO_;QXA#0|t;p3jr7_GiYboHDHCq4WDur-(K4l2b+!4n$L1}+U{ z43w-&*3IprcY`FbHrRvIS^7g^jn+SS4pyd(XDDc@&dM=5r}BE7yI&jCR2q0(R3a&1 zbuc3aS(A{=D@T|?CWp!Ql+)ThFH!pI@#Eu`=_YFof+6ujP`uSEt@El!P-BG`q9`Q_ z9LZn^(-{H)e2z@{))^*SZcZdjqd&0KJopxu3oCi{TAHZBv!+=&SEU>v>qsu+m`lkY zlw%^yARHFlTs2%_Ltax$&(F!Yln<3TiZ|Re>*MOXYU(>{x#>uwJ^g)P9c5)1+11*Y zvD3U>5c_&SflJFmZPN&AP%iVn1ePTRYv+*+*vB~j@HwSTXkn^ugyEuOQd?>L&=37k zj*9)#x{D8gLYjGaOVX>En$}@I^;17}d<_ca%9Fg-k)%nUdX#gjKqvuvhn#MjDgt{r z>_GB8aCjfo_&IXxT98&kp!!;>y=7piSySCV1iYf z2BOk=lUaL7d(8mSw8Nc()mR%(Q!z8xzU$eGryen{zR#{4zc-QXtOcEq)N2Ct z>b&NQ_n$boCuOplJg*tZe;vk~$g7J15vZbrbE?2&aA=sO<91dFFm+j9tD!p~gC_>4Z6#^)6G!D-F? z<8`9Sb)C%mrs1*YC`M{%XELh;>3vZ`RxD0f$>>3@jQfUw<32=N4dX>Jf?}~%opt3e z5R)%C;F+BBDT`u6Y%?3o2RP2miiq20c+Sd}>t00kuUPgHar@9jSlujDCPhB_xDCha zUvCro)}*)ExX?UOn#DB&XnpC@h-u!D<8Yn~YR zXgdgL0;ow{y8nVL~-M4cd?#P5wQC zw^Q;`UiGS10kASDGB1b8#7FA%0InT4Ct~aF10(doTL7G>CZ%$Kp(HCsRD0grk0(e* zAp4MS=g0wuKQHx*_CG$!>QEW}V3VHSIZCrui)#RRZGGNPIq9Rl*k4Y&&2#>bJcJiU z_^rMOxHb3f2cV>u?jQ-7>O*>7lpEphGLE@V9S>_kM<0nHBd~&nQ7gf?I4x~}i|HOy zIZP(3Yo}rxcd$l0&W(C6m~C~i$*KfaS|-@2=r`~(deQ|*A7<+G#U(3vs$s}X-IE@|Lp_9h?DLIW>F!M@Hr4Ml2SCbuNz6`=RLV3k2Ug7me zFtS=Ee%_a0;^n@QaC&_ zV=8D=@vO8n#2e>0?)zURE^9I|<7CZ59>QX&H`v9oJG3YL#bLlJ$M~`3PEf{cFs!@B zR;@0RQts#V0EUxBh)A%l`i=bJVR()-Hl=!Hes(6akqV<60<6K30l=L7oap?Ro1A*z z$LA+Hpg&-qo%%W^m}N?9ny=oi@w*cB!!`Y8nul8!k$A0(o<(sja23mo=I-6Q9;1k8 zHA&M_0gZ^WfDv+PoXKS_y)BYV#0+CigJb%Cq^`0IF{Vp6*BdGcr4>ko&xA!nkL zx%+t`^q)9`sNw9)x zsVW$&x91H6y$h-v4H?!kQwnwZVuVKhs?xL`}BU*!f=0$FVs?tQh(q-g>~L*}Sh z-)m#jyCbt2rtr0Gtb%{d*L)2bOaffm6=+Pbq*n-52`C%g#j#rxV7GizpE9xPG9LNl zE1zz}YM$4Vo&&%ku?{k3c$~$Wh?GJY=YF0^N9@xvpVBKQjVXt_o&XQ6g*nFzCt;o* zuduw-HoRWxzd9w&Ae};(6kCPTWVWXL64;cmrpc_WLbg5B-eEAA&7^K&jeFq|CIn%S z&H+|h?RJ~yE#AWW3BgKv43n>PbGALa$013vRp`y#wH62pb)iYIV9^tKW^3%ljhg^t+V~ZJLGOGx8r*s3(byo6wrybLXUhbBxBX$X7+6Sz>8!0EKGW4_Mgo;^>PLKM2X=&K1y zY}=Ub^IV#*+b>uI;i#`EHow7?ZRv$vyNsbURwY=;tFzKfhL=ocIY(3gZjV&*D(c9q zP!elz@lz^WUdt6{^-69xf+3XEChx<#4eh?o(mQ!-W+Fse&|JpEYGebX9C>SAT)*>D zM-p<~7-XebIpzXCX~zsxiE5&+N=P@*qN5sG{kd?x?%#4l&QV>^lw$Fu*G#hpB~xbQ zm1BS_&nOe7EJHt1U8FUeac4@eRy2kC?9cvefHk>bYOlaqgkZJ#;a~Q$mo+Eo*E0Pz zW-}Nt?~l1&Kt|$1V0P&_Q6VTRHL;D*&=i8~uZFl@XaXqnM?`V~a2fSiSf)wl)Q)ZqJc!}?zwO;ya@#Nrh2fd5B-vHov;RHxlYSRP zm5e7&+NYEc$RUW!At+mvB|CfcK30jYUAJ$WS&ph!Iva?#PBx@1d2|aN*P*d9Ugofe z23HH`0{7Vqpnj}HwB}!u7}&%1pfu!`Ri7w z!t%1SR@nHA<4jWpj_;8AhUxhVv^Rxk?{6Zxv{=W?wR2v72*b5Mv>)qm%+MRacPmKd6!QF6U^F#k2AtFmL36=xH5pv=N){Q?)}cosvFaz`drH@ktsnOr=N~`ZJ)U$9 zl<-Vy5|xX*{KPqf3yn0C?jFk`ltyW702+@%>h>t4u1{ts@Av}Yz#ZxCu^^i3c5&pb z) zjBd*@14@n6;G)f}bx~)QB{@TI#yfas>9_G)OPa0Bal03`bUPIN_T52pc~|Bl&iLjy zc_pe28gTY()*j_t-C5f4|2l|MS;>H~K*5L2*K@s%a1DOeZt4YiMR#=&v4h`9 zOervDP?roRr%;VHolEIAne96c{`K|sNVfLX9Cc&1SLIH?&kdC&--E$=tEgnj3z8FR6dGPE(PtS+K0cBn>J< zw+arqzXHlGlsUQxsv7}H-4=#M7mkdVSNhn7<70?2%}lL0hMH0O>_<`xo&lwHZ^&gLa-*RWq za%%>cdL+wg2eg)C#tls<$_|=6h2mth<+~9IIPP_~*C%iUMh47iG%dgG&ORL8THX$n qPf+>q@~tZH*G`Aus%qbGvOfV;xBnH+M)`jL00002 diff --git a/assets/community-wecom-survey.png b/assets/community-wecom-survey.png index d6f6040ba700f27fbb35647ed81e8b8d28083b4f..800865f78531d8a2592f9ab01497f3e88690aed7 100644 GIT binary patch literal 30477 zcmX7w1yt2p7scr=k?wBk?(Xg`K^g(+?i6W|?(XgqknRSN1}P~)K;pa1_g}NtxEy)B zhv%NV&u{NDQL4%^s7M4z5D*ZkakYiHda zS(;Ky!u|ptD$|M{DkLuPbYd8~QdnX-xPwF36E&DHuy2FQVvykauvPopj)M`k&9taS z9vaFjBM~vEqNos|6@R549py|N{T;sd>XBOPc02j`8-L~R%`+RRLxpmfLF+e-X|FHj z*~$vNLcKySI;0%;B2kh%oZ3Sc?D!~f{(dW*6e{fL6Js7zsZ;un9h|GS<+IkD1hM+> zO4Z9X8HQR1O4#sFXp*9GOZZ4zgu^$r12=OvwISpZi)5*;mJB{pCymZ)rP$SWx0IF9 zWh)O%;KmK>RO!yn%!n#SFB^VR5)*?gdE={HW9W6YCl^9KU;ETB&Ma_J)tKjc_isCb zR9jm+F*O2}aH+@7hkep2*RRFn-1u?RmEZ4vKh5KGB|)*#Y#`k4-)(~X2q%SGNOG?K z!_l7g#%y=eyk!rOXjd z@WQuS{UM{AMcE&6{>>k`W^y}7f5vl`uPvEB(qu?cF0HJnP(E*M^SVB8<iZ0MOA{#)x)YUvha_9Z=c}~dqWL3FL1t_GW7hZIQO2g4Z00Xa`qzH6 ze=6tX+4SW|IRHNn;n?@5!N|;c-iwNkM^{%@6bZ5%0okfqv(`5g|lDfi;2+SZ+z6$-sp#Oa%aZM@49!gp*~uki4ruf zX30_|k70U^G+0ctj#{wu@aRPB|M+28fn7yhIxko3+-^uDFzNeEktT^GPG%p2C~jC~ z8NLq(>82lDlsk3=+8vZcI4OjWH|0ACf|l@63(WZ~lT}VuKKc}DPlSUe&2ra%i8@=x z6;6Au5zfhbNV>)0s)r3uwJ^!GkDLTbG;jSOXp#^GaEH@pt&7}8_j-3eXl~}oj9+Y? zx)a$Vbi>$~@<3IGWMmnC4YG$_NOA}}^%(D=x2OMtWN*Ws4%4Vfknldd-*hHO9x=yQ zv)BF8!9Y_~jw}Dh%8IOibG|AaEiHWK*Xyw(>Ekut1V4DU$l+a0f`;&mW!q-;kUrby zobTv?4pN*1T4!vla`Cq1r%t7Fp#x?KxPAl?_#Z7+&TeB^dR81;OV#O#zc#7c#Y(>y zBzbwfo|eeR7_J(%AYd~eyxbjrhlA`p#+`X~Qrr8p+lS|r$8@ga;v2G@Avgj7pl;pV z+`tFL{5pAXd~AD1tJK*52@Tg|zlwRl9ny~xH@x2ZF^+@ovHS6A+@Q(YtZ_9jCUJBx zUm{|u#wb&ksxNZUR><{Ne92s6XY1)=<+7etHtY=>L2QC-k=1mLZoseBjZTl(xAmb> zuO;!wbS3%IATh%o-$gAEB3L0Yhr?*8LNon zXmoOt+9YSx0x4pkLV`A_5%L8wOgw9D+oKJU;&1-~bsm)*g=gBxt`o23*@cfHqJTLm zCgeD?<=LM+(bKoF(ygG>Vx?ivi%k8R*3UpMoQaUCP{ua#zb~FXjFB$nmAd)8vA%mr zhGfA>5OB8*pF5p)54)Ko)Tw!Snv<-(PeXD6|L(cR~Ev?~)X1 zYHFAJX(mwqP){0aYC$Iuj~g9smBYJHk`xUl+5M)GL*_=E?hf-Ms8)=0a&uGJ0z3|D zFzyiJ$Dq-H;v>hk5d3%A2#-corfKz6gWu!#gdTj}YoV!GHrvdXD5Np#<0~20dVngG zFH5%nNQD{I(9l346N93y-7)oi9x0T!m0J&lOPMD zTZR)ujfYa9f9u`dZ;Bz3qRF78tNY89pZZJ~rMjEse|WxNa!iVu&EzGE(Oa){Yv!U6=~+9u^Hh|@E{za zS-1E1_UOo^+G4#V)d>;}YrCEj z(5cq9Y+c`$XC{g3ye#hmd{I0)D8&_etFcfJts4%_u5@blc_TE^-a#~#NjlLiL66UW=g^3pN z9=ssB&>z)nfzHQVV@Q`zpNP>Sv|q}zvWPl299!4BtnZ6xZev&FwyIPCX*B!L8 zZd{dpVP9HS#Oy>UJO#SIiI*r!lGCAnrKV1o$uj_c1!6U~*AHUy55#YU4$m0-esWws z#>T>+W=eK*(Wy|^#03v3GP}sV#;TQ|5=cKKU+M%SwR-s|N%6;@$F1mO8WRzrTz6j~ zo_R9WZg4LLIBz0bgEdmcwzds$;HzN8bQ9o?>7H8AMW=nG8;toD-e7*(i;-4KrGBTb zXF)vDkR0iFSDR6y$d3Cnt+GVS7WFyB-?I8rVK^WxnKdJ2uS0kI;o%y5z4bYouuR~6 zsCYi;&^?dxIbzzCi;k@Z)!IdJjZx0iv8Bd&k(VcLQQ*vm;}S70w#a#LV(QD1=Z^*( zX1wIFRj58eibOOkwm`|lBOwy~O&TrQa0I2OD}lFauTZVc*wNlk&YK`BS*XUVIPRb2 zG|}hJO%OY4jRg_4DI9qE<3_)F30xN6&Dpw4m1&ax{`5Hyf`;c600mxW+8?ZA;)jiY zc;wpA)s^+_X4C61Ta^yRz(Lk)-J#X*`TkJ;E1WNF>rZbxWo5JuB?6Riy~Yoa8?emm zNuw5ediX>Bdf-(G{sU;#x3tQNRG9J7iAAq% zWXqP;#}Dr5wp8Q^kx63xZIq;#SU>&<+4DyuNEA2;pj699!I9a9j&JjTwaRwG5m6dX zeOGQmw_z-y?p6?p+iPH&dC4;vzzDy1uZt3^HHQz3$^_*xKu9h(1R16i@G zo^N7UqUA3l7xxG_C`V|KhEA4WZ0x8<5cC|MCq7ts*ttbLviyT+O5A4Odvf_8AZCn8 z0#j~#4WGpOHpcwh2ozaXL$a<(LmlS$_wD&vU0bpT**v>u`y_-4CAlX{ z!~SHo2=1ACHI#DH*I-pFq0e!Qr8m-5ZDqi7Sj#Ctep9mx&J?!}$W3 zQK19dx=i2sVnJK^MfOX82(3t=uZEr^j`FymDJBG|vL!jBqwgQ+dRQ2t@mLfbG)bf2 zDBE+dqyx3+#{;zAq;0cH*Y`g9xKpdpp{7*JdR^HC<@l<6bZ2%u7cqu+?>5?;DNk=X z<*@pL)OkJlca1zYxEz1*7RSMy)*7}qsN@Ro z6l~9=7AvHo;jxn8#Pn~d`Nx%4-;QO9mibfk*&s)OWdBWQZmCLpF!0dS2uob!S1u?Zgt$y z=l7d9q?GwWB;fv8oK@F4(%aU~E{;T~f`9kebhjCNEUilIy>tIwljf@L-=($wasBr^ za^BqBFwsauYH(*N-KN+WB^fc}GTux~{a9F^Ep5+DN`fY7wAvxp%{7*4X%Ver#o5A^ z=ip%?uF_2r9)gcz6o7Su*a{2z1>KfoR+>I};3+uuyRa_;GM|u2-tx=D1-kzTEXA8r zNs9goBhGA=&>r{nOmTuDIb2A2ycpLxtp|t<<*H~*H+Agq!DAM`8w!gAVvX%Bh#M#b zhDeR^SU$Vt&A0A4C|@iv$=;4J+ZQY@#$w49;n_18(#?7JuDt1G9$VM{dtxDir``k= zQO+Rr1v{wVG~VsQ{I8!cbV2Rvw>2IO!V@rl(32GgUrznMn2vpDv>_;w4HHGgF!VB; zUG`p`a!0j+fBu%DeGmhuhXdhWM;$VYxQ?f8q&kRZY?M#jGNp?1?S8d8G@+q_G@+V6 z9iwgpZerr-q@$ywvbJaKL!)K(VYV!la*km6phCzh4`!5N2ItX80;Q;5NRIbu{V=$; zW$i6y3#72Iu_HS{SsdmD^n5y;YOuvZkeJLB=>@~FC}Z&EYYBo&3~~&z>|2>y;qTrT zfA!~oQM5UC(*e(gt|wJZ+wCvU|7yFg#+-OR%g$D4RT_J4!zM0rm=8ue?|wJqC5jnh zw_B=;CFBv;yYK+T35o(nV5{JM)hgG>Wt2LwBQSe=AR>;C2kpe3J5%I-FG+#99fs%E zwv*@1U=+`WYZ5OzH1^%F$n)iKWo%FyRy9jjB8cC}Kp(9-; z9Cb&)nEB?7xZ&NGYmpb|O+;bv9+AS(6+xdooXTe6{+9M0pVN8H@PLyR0!QUQv;gm_*WGn4}{`KN=r$a5xR$F1W80p+$~0 zL`9obLuFJY-UfUg-W|0_l>D>WAS)1$d23(9$+tp2&Yn4`sn@~st-<`T6+3$sF3w+rQ8S0pt7(~qm6sxr{E4uWmHGX8zO3#{v>P&4#ORH>Xme(5@Fsja+1dWR zQs-605GqR`H%0lm0$t#T-nLspEYhmT1ul$f#*PjDrFTL%iomzYy?_3fL%1qBS*EV; zvqFEj7M=&+swAhS4Yc5ud{--!HVSyU*;@vhJp*0%F7O8#iJ)hEM~QBe^=$9+4NKx- zqu2F^DI?y6M{oo8oHmTlykjMaLnq)wI3&6AIn4GzBj(4NA2esG>Xv z9;&2xn?QqJA5IUe@TAC}fmXNHWb^CZrdj{xI`_qC36j5md>Z7jp2!_3YF!;BHs8YVqN3lep8BsKn~8ww-||X-_d+3-k(sqT+Lg_ z6rJrkyde`|ZIL}40es^Ovwi&iyv5UpXpPi`F5~8fEb}SBye8KJxzajXdkEA^Xovt2 z;pe=MxeP8{^Byoo;b_JT115J6BatNf=jNFXj4s|s7J{JXEw7}dRU0y4z#Q^n?hXej zgb#-FSMQM`_%LiCko5#zDssX0*&UerRB(m5LsEpo@G7+r-b5Ce;1lh6!*)l1)UdF% zI+@S<3t_K!Fkw|fGY0S)ApwExAQ=|Y{=q@wIM!WQ+3z2^=v7X+O`RQ0m3QM zmxvfJtnaREMG}K^L`iS&ymr#r{UV4zWlCL!2P2yL`{wq^fUO)<9ge1j5^3?Y97%%A{xU?JAfXN_t0y|1F$M1G^ZB2i|k`)i2hq(eN^@sWc?*)5o;v4|=T5_ya^3+t3c6>4+71{7x5IG1kO)P`Yw~B4 z2)Nq=1}Ka5Ym#RZOtZ9(mFndS058I!5z$RmLhgdub)&&DX3;k6C3bkX^@j`cLt%eh zrB3b7W;fTbK}DPt*j+N z%fqvLa+BCjKtP}ymHEz~g${OfpcIVpnl;1%?qxZDAn7S`YkQwFu8N)jcafaizF~_!e#%Kr=kGD3;(ahRia&&a$B}(mv51d{*b8j3Ya%>gALm4{= zCQWf!TwdONCTZ!CKZN;8QZP$rsGLv=)i${86KXbL^dm5_i+~yirMA-Pc8=C{D$3z= z7r||G><>l>c5ZbRFBjDvsLM}Ll@hzy0_E(n)fk6Ax3H-)=H3WNV&0NU`r{_Uj#Hjv ze9k~_I7D2%W~Rk8o?_hJIbldz+po)gpDr?jw&M$-`-w=42{&@Odo&ceNYZxe+P3Uq zWT$A)TI2QAZJ?Iu#x0&WY<%Xko1G+rXx&;i=AN{!+PY4R05d|4pg>NV5tyy0Egaa@C8)(5 zk1#DGxgBxpO2>v1qZS!GWWG(tu~S8o%2E{9r1+C>E21d+UUlr|7t^#%(g^3OU;NA$ zOIRq#A@sg&r`IW^tlOSF{n7sgAdY*p;41ACp}#*gbaaM;u)sXSSlcB|BU?KEO0EGH z>vTWseR=vg^_MtqxZC(6jWXWX*SQ+f7}Yx~Pz6rLTtBg>vZkZLay+#t^x>7p-z=NF z&j8}oWpBj&Y>hnGf)!8r>CZeUxcGMOKflD}+woAs2O`jW!F`{#ZQZ&K%z*xK^2Z+U zn`6KyWvPN)&OlS2Uw9wyyww*3WR7qY7BDrc$QL3k@WpCAP4QX%n#ot?FJhvj>offI z40q__!oJgFR5t}+y4`XO1_DWccjL6M&s>q*FI3zp$tk`=B2>dXAX?*ZzYi4y84Hwa zvP$dm{LDrug?$f5hOAl6lFz!Azy z$#{AG+p8n>MypK}>v-q-Uh)Il)HD3)-IIUox{;1fgnqS`msgNzUR@oAU#EIGmVMCO z4)tom>~ZHl^}Oh$88VnIwl$$^%1&Eg=KJ_aT0{|)0EAhAy0k2ivi(}UZr5fE06!U9 z=<~lBB`yl;4{=cC=JilcqPgs%Yb5adYtXqfVZE^6v90^tl<+Ve$cD;7_t7I zZC0^mPIuejX`4w=wNek3U#f?j&tpNh)yYSfr$MUK>+P1-%t##FiixQ|3l>7(3x1K7 zd%w!54hO@!D$#z7$9;0$N^yS1D@ZE&k=NgV_u&mLrlz8pJ4Qnx-#6WiC77j7c^l!S z!QsTTAoF>999VOb#hv)9bdk0@F?G3)dC3Jz^@NbxqShSU=_eXgp(gXn zO1y&=8#ZPo-zR8`E!bl)+5`4ry9tJi{t)=}Gk3$cm{Eh@V+p}?8B<$bUHqGJ_wo+t zQUL8Ck+@B5f&T>R6)OuZ0khFzog2eK3n|fxlR(Te^`kqe$*{1nvP%}ZxmU1XZ7|&a zK9#E6^gekZ;oolro&v&@+!Upambz z!PYY+jW&S+4#@R{&n2LZw|v|rA%0@Q8CMZ`Y6^JqFAjU-{{zU`hno|zJz^izyNhjk zLd`oN9-cJ&v{~yv|DL`g*A$bR;;)K;x7!6=2Q^D$)$7BH?ExUTM}q%SzzgzuT~UQL z?3~KkbFbIGAC}EgdH?=ZG`TIn>{QzL=@LnA4tU3+k_sDgEdvLjvTzEZ6*uj=3|M3w z)zsn7_!163f-EJ48$V3WZU5_c30koNU`&&F3yNz9(71Eecf@=y7A17?OL*^&T=i3< z5DBKJat72o2HS~7KrOxZ>=4a?vUyw8nSbmfkEYnq*tjq9yMRaq7Pxjv0K}8Kj(F5ZS4o!eJTzA?Q+i zIuR<1Tmzv*Tb*IFZKu?u|)pN(M{u2^sq+DF=?!HJGktZ$JRJ^?R|w#D6qjiVjl?Z-EaLm{g_!a64Np=64s+G69{67h^^v748BxZ3+*` zQt7bXQf<&m)6P?^-&`Pn{3BQ-mMj2vVl?tUkE*#Q&CyD-sw@RF34V% zzkG7GTuW+dr<#f~T`H$WcE`rU(^^mvYyrPbj1<{jtX{r59EXdA6)!LZrX?T)DB!

*fh?~h7zOCCo?e&+eoj- z5tiZ|V+z_$mVgKIE&572uQSD>NTqf)MIoIk`d-J)lEM5D=MQqa<|a8+GU7{zWHc-O zt|VTAFC0`9e8!PG-1-)){c%B!!x%PXi-htVxK_-na}3xC`eNf*bED5{;z6vjw##O5 zNB;i~XtXS3BAAL(B4C6XFMegFIg`t_JIT+p{r1R1Cu%-g0dUkZ`37I$x&Z-YO za>~+VF~aj%#JH=_{BR*VNb&N;qE|4pdbP_2#>QxOxE+9HartOJv{?M z!}?jnM<@)E+-V&nqu6@j2PC~hV=^U9f+5bW;vpz^9P01iGra4JEU22Bn3&k@^H=?NMj{*q*nsco=v2qP=H~YLKY90V zniv=u=;-K}n1Js^wt{oN8c&D8Ke)KGw8SU~JZDr?RN$k9rGAS9-^8Te95z|Y!~}fJ z$=`n;JI}Zq!eL=yPqR>2;NI@-@B96kmBIRsi4;~RY+TEOfgt#2Mnbu?v93FUBtrYNhNc9q#iSl_2u#4K(b1p>EF7GJy}ehxn9Mu_ zC^sF9{kKp=&7*oKXhrJ3+zp3_Sdn18l5;aJ%z|&wPd%itP7+y`5#cZ*O{9raZ zHY~wh)s7|_oGm8%Kvtfc;^w5%;z}hz?~oP9^_3oFENU?aQL%`h$%1m(il?QmB=S0A zCnCm_E30y}N&}lurG+;$tHJdTI;rbe5dw$L?XV=T%KOy?!!P~?76dUv!5lRe#LpW@ zTr<0uyi;w~5ey1TP*Yx6KL^VS6Q#x3;jiDI2bN+TNJKTGH;2KA6Bm7!h`tblf#EA! zA-urV>f;qsy!|Q+5ihy&XA>IypyGx@)LB82VBdv{lQS@q%{~ZBgICwra`JieNA}>c zwiZ35!$8>E+iNpq{s9$4jKn-LJsrW>W*T&g)r>4NhcJkU7A6jA5aAaMCSt^Z*s57n zY`*Hq`QKfAbSx})4+MRqBKa_eZ=jrW)6(EK1>0UgbcG4oiQF%`AT~BONED*SOHUN~ zyN18Nu)SfiiDj$XU~5Pc$`ngrs%o@8XyC5zovQ$bKUOqv)-V5Aw`#vaNES3kVLEG_ zJg-hS4k(DOHbsK9y?y8dRgzrHP{EDt{fjU}-Hv-Fu%SZ-MyxrP78f_122jCqiFCrn z#(o0i2Mh>-7Se@mL}+pN93>46n7>TwGy;x_(}2{2UtkW@c#ZS~{#1qeouXqbmL_Yx zr=??bGp{1DZ3QfN;m3;sU~`9zlXiXW{M~T^Mt4@`Z4TW!Q?cnBq1kt;?%n`RuAQ}R zDu1&j3z72w2yUqH(b0Z)slwTz7+iE>eoY%n#cpKvak@fm$T zO&@jIpf4H`ud0cOin0RGtkh~>JOz7zFtx^Z4B~e`m1W3n-}nuZ1WB?W+2XKVV+1Z* zy1gJQ3^kc=A&1Rv(X`KmD-aW@005{=rM}7% z^up{RdR{69a(J$s!H$3I%DbDaJwgQ}08&ayO5ljnMh!JHf`g%uEO{~~E4sJ;{?np8 z9~+Zz$t{17P5%@m>yJ6})q$IE2k$}&(5BM)C{JZxqVJsXvyQEljKu8Hg=(D}BuHVb zu>;$pzj+C)cpA2yzBYtZxhBiV2oSkhZ;`0y@A5|I|B1%>ag*4F;eDQU-Dc3k7m~hG8dfiK60DV@`u7`-2M=*`7CF)YN(K>XolF zAzorT9TGVT_Y@d(Tx~T zB!a!i!x|DC=(WJDm%uk_D$7aRN4_**5a1i@*f^dG_bVP^GkuHu;2Y=NqbPC;>xM5(oLJMJ^g zs$Id_WDFU6igNN*{egi(=ttI2gqnV^^{M&YrucnCEhnl7pXWtJ!b1n0(kl2JAQ__b z=`EcR#u`o)u;|A>{|g1P{WxlZ$QFToX^IL79JqBjxXW&YNtSLIVeC2g6SU!=0 z7YXTSwVKKT=s+wMa<&uTCRtk1##OX}a%Hw+NODv+;49<6X8W)ol83|bvwlcA5j!0Zlf98{pg@nJ%@*;b2YEzQ*S zU?P3l*vEkiv%gFpSg$9uh44;DW<&$+sziv8;~FK3?Po3Pee4Tf0B8yM+zw7p*mDoC zCI9*R^bgn#m&2r#?pRThV3OqVdvN_ldWR_;NAlFU`Gn?8V)1C~eN+rA;~*C9PXLO) z;to;LQ2e5{wy)7!?)xb^j_WN-N7*zvs66$#n+B&LgoSO4in$MSjCtj?nsd>eb_sELydq+C} z96kW0Oh;7&{_q|P(?_*U!8tH@f`8OE+N`EY`~;!qTuzp%^~O6r&b1p*0zgg@JanJG zG#KjYBAm)$HfvM^Aw(_%byNFQI)$YP1s$dWSV1#_KZV!14HyfBqy zt|g9uIkvK%dC*8R*&p)#cXTI91MQpfs2F8vAv@~KT(PYW_9M9cmKHZL%;bPdDU*mZ>H_+}QY!V^xr^i(s`eF+Wv5q~33p=Mg25 zuoJCnsxM_h_1-Z;$Q2J_i_+5(r^7wHaG^R1A5Wu4MNmRV6;q)_>LUi*um_3JkGGxc zB%X{88e}a5&ge)e`^r}ENNT@J;LP|H^{_wt>C>lCWuW0;?>|PhiKZ+DB`KpOE9@s` z+k-ZrPD6wiV()Pssg*Ey7#SZw3qd6(PX1O=LOxf5V1aDZ2^QRL*7!Vxj|gz`H6e+C zeW_pguVMG4jNZ&bX+n;C{{m z+<2a5>@6qvjDi*q4UZN|X1OMe-PK%PUJmJ!yQESLtbiy(v{W#rP8nP3XlozGvzgn7 zZ2Dfu+QtiNi~E7(a0TRrq{SpSKNSoW&mhfwWKADBxy#}KF3Wj~w`>1KDC4#^5LR+U z0(!pu^aKZmD~u!=D|qiRY-*c17~43lP3$V~-FO-cFaVh(@Z`MGWR*BzlrKQ`DM*xz zg(dDS=cp-bo!AutAz@5(G@W3?!)=+W0*F`xG=owbD<~<)#K4+kESZc|7VjB|97H_m z%ld$9F5HGn=1i_g`9-YW8gW&mNCH-5s-{PS_az*AjiU13sGco`#YaS9g%%<)%K#2stHpM|(clp9#M2P>t+LF(cuhDsiKF z2O;=F$Uh>x+zihc&0McWlQR3;CSup``tT;Wr49~W=#FRMDLv$|a`;dyf6JqYz)q<1 zvc^B3xbHtp{$^&K-HqW^obes5Zx=p^@{;H>-c#PD=#;H$Bwfl0woiL2EeTOwvd7LZ z=tNe4$}=8&3vYm#K~Go;TRar9meQVNaEwOAKtclA{sX6y5g#8Ph0#C>`6UsK+M9Z4 z`cWrGyen;-c8d95*9b|R;SFyCC=w8~BodG*d$Lhj?#dp1%_qk16-{cs%apUeYCp`8 z`2J_#qpr9=+E%__100ycIXJn+O zAI&0p&z|1%^6Vqe5L3`Bn+Rhwa`>7qpR@nbmXIj(YKW&C44{iB@;pHogA9j0{P%Cd zEL|7DXrVHj*JF&ePRBq#hz1RwK-0~D%W|SVtC`H}KQKL5+aH~G_W7A+EL3YFN45CFq8%EceGsP!nX2#fTxe~?<^`UX=nUozfk!bOyZs$qe zw~Q~T<_bXCzz>T38L~E0K}+xCi8SE8R>SpcizmxTlBF6^Ls4VtMVoD3T-jbKg^1L zMdKBsKN*3#OZ1%mmB$nll`jynbqMc6rM^lyl`7vI)I`0)k{}7`KnlU72+nqwajiCY zZNDiUGxNbFppdQy1I1u{fN9*G``?p)G{nFTD+s_`?8iq2*%D~G$iO2|B61}Bnf0{b z3DuV>)ZE=3{e7;dgp{}gD?}g6nV4}-=RI_UT1SKy(abQUkZ2*g44lt9&;biaP(0z9 zt!JV9_AKyAL9LgU=GavGc4%n{jUUgeA&pu$jgh*#%i%b ztM~B=8GqajkmYOv51M%<{U&Q5FgpC+@F|eexy1xPv&!@UW@gZ0Pu?1kX6PaZMxT@# z`XDI|+l4Z6iSWK?)Bv4Y<0p{#hB#7qy!8fX*~Iq})=@yCd;y%4j~z!eedSweps-Dx z`eEg7AO!%|^uAftNeIJ^l?Fdxc?AW&Zb+ALT9uqZH*nTa@K_qp_YfcEw5~((P&b#?nH~Io*NxE_!*V~B-e7z*AV;$(2(jgnmOmf;$lj2 zG97FO*o1arc}W9L4={aD;fn2PUEGVU_4Y8N%~T`rFH)){rBh@Hc+I0FRTmy0P0_6% zAT01DeQTNZa8SuiAHC%3-tlWjm`#w0LJ3XOha|&K45=G6IR{}7ZK3d@i9~eZ2TmvK zAV;wV%+M;##3@HvQUxzrmANKMJsL-e4c2muYh%g`CuqQ&>)g78S96eB%A~&G!jNM1 zj~)o|I3}VYLbOVl)h|!z>x4IL7j3{b(>x4jZ=92%cp7_j?%dGlDPc}S-pk-ps>$oB zj5fE(nb{OFuk<~t-pWG7RsBg465O3IVPU6a{)@uY}7$F zbQ?m5XIi~wYtM?u?f9e3Zkd_7md+C#jn~Miv#?<11p^X zxUMGdk3T<$kR1OgRmla82l_FJJNTV0%W)h`>XV<{{{R<|i>m`w1ZI8-`as^B^Uc>V zmb?$--6as{1RNhw8bZK|jg1Zcn%Zlq4u}es3;+P{z!0IlV|2FO`Z7TJ>?D7bAsSaG z6W5?~qIs6Bd^nm!JKBX|Av#PJa^a&-ij#g17DLPoqW-0VccH>hj6NX^uB&=9`#oUV zt2g(8EhQ~G72*4$l4j&%6j^W&;ORogNnUw@>*1U4%-Ib+Mp)d_2cX}8M)!SvRg`SYr9JST67L_P?$2+<+VLdugb*Nna);5g|Mioc&&&Y;qYk#ea|IFs!9 zzLK{`H6DpslDdD-`NALggGwp$y?-|Bs(gcOMX)oH+;~Hdp*_LMlv$hbn|ftXwAZ*V ze*I`+MDOs<;6!Nky2hD!bNfZqyoDQ}aV?=_jog%E5!P%D#8xG{l>I7U(vj8BoJrY~ z+;E%~Q?w#z;-;{)CFF;!_wCgw3CquY&p8sYYeSJQ1;5?#LhpI-XD4gNQQ`iGmc%yg z&40g?&~2WiOxmbEmZMsvT|@n+2w_$#HxBQGL}JwL^N_7+-{mY-b(RuQTg5M&^0iPQ z>BV?z`%F3R6=1Cw4nl^ahHsvOyoeJk-ku@@PRu?Cwum@wLAXFvR#wuhP6K1;d~@^2 zb?kdzaLV|R>$fk}N4~bBr5`tYNaEm+p~rvUo~_&2*~umEo;FT1v#`LI^7RKF1Z1!)GuZX%Fh7m=2B9Cs+vXL3bd&y^_oFF| z#iVBR5aIMQK1X<>xF?wC`D77RNV#k^!~bH({{?FwLk)KwqWXU2x>?6SJ?<`~18=D} z5Q~04m_Rv$GwN#D2UtpcrP_7wU}L203tM60V^bnKmy9;dOB7PcyQ660jR|z>=5Ogu zgC|*X&{7YqF)qRQJ;=&g1t^tc(qWj(h(iWg4&;e2t4Ksd;faU)@#%cOdf#UHzGb4$)yyO9#7CccjH8I0LH_B zrj}WJ4M9)s?@WW$3j|>|Joo(ke6fgZfKZwo)^UF0n$dv9Dd5)b3C#444t{nbGHe;y ziz5Jdz+kA3(dNqU(5#P6Dy+Dz0HpalM#c~wxN|lP1pCzn*zRj49AwFC3aceB9NMq9 zpbl&td4lBk5G$tkVrgn=ftNycl*&&8Zb>%3 zoBAPC|2Jn4Se=_wzbYvDe<~zBk0*Zi{4a=CX&;@&WfcG%8CCeUfiC{;%Pm+6EOCOv zgjLTtdS%YmaC;BCq%UO^rUNoTgNrV&Tz72s5k$y}SaJM>&DB$NRj9n7-Eugr(6mUO z&CvDX-ACLn)yRq;>W*jDq~$)1)pFY$>7{>6Mst|_xBJ{RnK#7X`8cTY_2OULC66hQ15P5(lw;k9elPee%!-`SsN!HH zI^dFuu`~9UIWYlyX76siV1`Xsn}1sjYNmB=TO}Er)@Y@X!3;tkhReUkUa3BkssCq& zgz$jhCl03NB4WA(S0dVzs^);efG7en&q3UexJ4FEl@nC9aAq+W+aS^eEM_=rXV%xK zah2({bYVR}(ovE?)s9d|fn{V`+R}!GxoxMBt1#I&%$Qc3cqqV*<_Ecj;ZI1Oq!m3M z!1x1fME6dkr~uNKAzg&ps;a8Cwv}xsQRa|-5V9y$;Y{-GL;JoJC_1hyvDH!cfCm1K zbxA#|fol;Y8kprFL=rcDM3qA2Cv5Wmec|02EdBM>l_4`O!#Z#(Iya29v|!CORIQxO zp-cqn7%>o>MES}@$uP=lYNP`=D;EjCT_=#Q8u{4*jTcx_{dm;dPI#ik_lzjO9tBGm z4q!q8`5jPI{2>3gdH(m_7kp>o-0AbbRx#ag5n%e5{)vjwDrfy#tkf|!&RIX3vLZT|!+=m> zc4m&poIe1`i;2m}oBx)tz-I;V*H;__!k9o`)VEo4j+Ltz85xmbd=>WNAA-#g@^J^B zrm_;+E=Y6>tkNvH8bHwl#r@fR>s*1Q8>SZV1n^Vz-Cl7&oOk*~(TBR#+C*@s4nNwQ zle0m`R(sQ50|JVoWTHJ^Oj*mykdu{5PmYgAyZ~K4JUndl_R#avq~r$)8}LW?h+^oH z__LM!V+iHW9zJKQN->Yqq16d{sNTLhd$vLSrodrZ)+bFZ0NWd7%lYRILyoN)?w_R# zH_uCH3@fH6&KW_pZT(!50+>zk6+`A~q#rcl)Nv6g>k|$$?TOd#TYu9{#(Zm%r=V*H zma2f~>TgrzpL(!h-a@ppi$INqt))w@3cd-_q}W}6mzW>z(CF_C=JLxy|MfW-@*+M# zY%yJt(o>%j+9}_I+$JI$=`uJH>F;-mAUdQ3rrgq13>9G{su&bHR46SuiZ=rC?a8d# zA>SlYs3VtR$jB+)IUw;@h~3Y|w$Q)1NycD(PHLu0m~?s%3skWj%qj5`paKR6kyGnxrXUN0g*xHsRFSD2uVJ;i;b9#DTBO+4SbQBmY2RYzTMOT z105Y56BEoTSZTomre8lAjQv+3Ka)$Uad7J4lXX(?Go#nv*(tfc+_Ms7K*fD~QJ z+G%<<2&y@egKrfp4Gi(j3uw{uDxk)RMf{1VB#W!~kCqk|=)86ckZ<3${(y?4%|QYy z(Cd{tEI$H(hFEv(eBH68v8?MdW}*JY?tZG<1Wg<7@zd)N*j8HVx)A>WmV5%a**^9? zZ*XO^^gg=XT=lrx+-#I5D{c7rLSGC+%*F6 zKU;q;f>;bvwt?XzS9P+ue$%q5sv?Y>t1B0|cPP;aaA2@yEH9@V8W)fDY_anfe}gmG zALbM=9fcsx4Y?~BnJc=*AkU5K#X6J%`6(e#?f_k$j?sbELa2A7g>hTqp{rx0rI4%Q zj4FrHCm2)5W?2k|(+atg&j^NB&sX$q29=`>QItCWR|YnV23hGX!o5FnnBNoMIacus z(7k1qXXJjL{QObyVd~ezcS{XLn2au;7oDCM8t>;?UkJVJ_uSXWOEQE@X$p4Pjnw3` z6U*{f24vP<>t{c~niSIeAQ*QLj_^Fs>)ZwQrKolJ(H^QAug~M%<*Vz^;S`q9`*2(- zoQob(GfG1Uv?DNF%}CKP#=!qX;b1Bo*+ngIQ4j#JS18Qa7EdJy0v7>**Nz&#E_DLe zmcC~;qU33xB>-%ps6b3Z($hH+YjzZd)#UJfIw1D=0r?L0aSv?2=(f8Q&y_>0`AiG_ z{Y)%?W2)L${%Y|0KRwVJA!aI;$Wpod16Ho{FmZ4M^`Px{pfN2*Fv`f2o54~HpcfLe zqDP&7<`fR6b6Fhq=&k3%Q3*)^BNxren*u`D7y!z9W@SWH@89i*ANGmdK`A!_x#Csg zuGJ7hB?p$NHIxPtZGmPVHfO4E2f317V5B0^&s{nI*ysaH9(~%8FT?`D4EVynfv_}@ z!0&m5>U-y}#x77s_cwwrdy!wd^#FDUlt%0s1OsmYRhKPgw`~l=c-@AXEB9b$*lE*? zD#8SNnIsO!*rM9!JO&-P$vx1DIvIvSmo+kTm7-$gI>BEk_n7EhG6A|1Erx3st@EYt zXYn*iCAWs8F4$q;5!Y*f8`_RH(8!?2ZN=k+fsI&KE&|biBxAz0BB~$!FrkMi4aX6g z*wTW4Ew0@XS%`*ubh(jWE}wxl*|dZ)CZ0}4Y|dKIF;6u9fw+?~@mp8|)#!{jh5*|D zcA)0b|5`flaH`+`j~`oPW@jEFDa{@No|YnyvBBH|fi`@~vUZ=S}1w zgfF9|9c*MP5)B@za}p+-;-Y-hItAqgyn5`^$h!Gh{SA~Yq8q~IXpP)ATBr+=X@w3J zSoYU*4*M+CmAR$!ht&kq0H?9)wQ2Zb%)A*;0gilQmC05<;qs;1+z+U`yWXI>9q389 zj){|v)H`YX{Yi|tOL;qXk&hPF5WF|7bcR!*P&uTeFYXUfQ|Y7D@^?d@=$G;QdN z&D494i{C*I^acw!oB&M$LPz|xjS!ub&yVg=boe~%uUbHq$lVPQOv}$7Hj_{3<2X*< zcTj>9(zn-l`vEGz)%8<={O-G-Sm79_{L$7(8Qf5|Gu zo8ak9K+R=WX9`c~4e<&db>@v$jmxRwsN5REQ@F(YYFU!i!#Vx8zcp&Ud$XtYMR-C7S#P`oZZvD9g+kV8i`T4sNJ4YmMb3IU5Q6b}LdTDun8c_isBH(Ln6 zGq)k1hAici@7qty@Py`gbXwb;TA$E+qkYG>tL@4o{%WQU#2rc{^~k&%OIK_0kou%k z*vXC}E?Kuq_ugJX`n!2bPw33r3)eN*P2A&3R*#k+tMx?s;a`>CL1k7S4nc=&%*%3o>~0>x9NG%n6E1PuUJv0RsG>4nLiGs zvq+9$7DQzX=2bsgbvaq35saN$UazTJejmatNLT51av1F$P zp23ADru*Aa(mUcWqmLw zGbe|Su+$E21nJB)6^&8@DC?YVJ!&t2M`6iIAwEgd{>Q8ERq~YHnfzvGk3~gNGwv)c zOzH(t7<%RgY`f6j0g-@oiqL+0x_%w>aSf7oD7gGRJDUHb!N;6957#)Yg-1w=!|@r& z1+cQ{-r%<6plkw-TP>bW;f1)B|4t*AG#<(w%3^YmvCg>TrZ9kdiv%I^5X5zYqT9iB z2R|k?$DPU2Ex;YEc{^7{RV0{>vZ=l0 z7YH9rM7~fCNqd30`FM#rCi?C}@+bN+_a(cKcA66zSo@w6|G+>n>{ojRU);KSU1_ua z{&1NGoqDnHSYEo?@RyrUk3Fio$>dIx{;N9@l?$gT@rsL!Gm`%1!QWOPo1x>?{;z)m zn~Bg^rljh+I*MS{UqaWt-X>*cs;$~ib`_6uyK2_{BCm@Ky29TX$mafL|Yluccq#Z;6KS?FbU3Grp= z2oZiAhcbMD<_af8Bjs9(y?B}ngtgfx=enujT+oHbWNrBXkW9=rd_>o>S|vq-T(yu2i?uIAuY z!4i&q>Pm->Jr$Ci=Vk8P#0~a^iHNoy!muT2c>(g17fFH~cWz8um|YV@T1V7!9hU0* z&_v1h#Tanhiac8W^!qc>eH}7-9cOG4vVRbeQ*dIPe#uS2R$lhFf{$YbJGln-%%)1h z&nRExPc~Ir@JC&{;}e$?ET6D+rCQ++eh7@qS?xvy|Tf_ooZZ z6pjUAhs+w1TOI%+fNPO>5`7uJ3+Mr5&$5WsOU8WZfuYPD}$8O9L)wMrisGIDQpjuqzQzm;8K0jH{|9$oiRBMn4 zK^=@!XOIrx_WcJ9fq$?r7#=yi{QUC`cRTOm8>;@^CgMFA`{`c4pC z!=Idc4EKvslLmC{;u1zY1>2614m%J(C^wLW_?uBShT!7N@MagZe&cysp`c!+Ug%2K zu`DoQRx0F4ox-or=3o0EbJW?Xm~v9Qd<9em=EU;C!jP~@i98*M+!`2!I>6>XnS}1= zb4kA7pDvn{1aBUc2r#+2>xpuwqdI5^FEW>ic?RQZ@j?$Co4rU^x!gO<5g5u$T=6Je z8d}xS%L*Ny%O=`nXT{#i;bT0d$7|9!dY@Tl2@z3(%DkK%hs=z3(ubn8yNgBx3UI}! zdhm)$3WP{bOD7&WSd#ZyXy3m7ecCQyufF7m)|rd1cq$_)8ISbz3JcQiF_fRq#C=K z2w#cooDXeK4e|Atzo?0kQ2(~Xt+|bQ=*LpOU>$lvh>I-SDrl6u(j&sFHmT^R#8s)6;EKdcTwk8LfSTNn1YV`0&aCb>(Y$AGwr{a z6qc*f-=}qvEp!)Izpx-adb&s!)Z5pmu;Tz?AZQF7jhx#GU5i4ES8wJFLgDLClSOa# zn`zhGwtoUV2}xR9z#7mn_&mOOa4r9-!QH$0i(h2YQ8jlzv^6&~=tGnk6S86+qI7%; zv?$O{+C?DiBI33m1YZH3%M8@WT~n2jSh4IV(eU>d5Jh<^%hF%1nKA)e4M;$S*q0=M zyuq1ifz+VvPBIK_#klxzZ`l$y|0hZZ!_~T2DW6gTKBjzBarVg9yFmd9?N|n~jbLd4 zTp@&^QxM#DNBXj-Ewc$es?D5P_~)C@P*ASZe>vF3Xay*a{54FmBJjSZw#x<1L)H^}So295w<;ZTBJ3mLg26zS#sO5KqGj zrVTNsl_!;smI*q4%1h!A(z^~5UFleD;2l^O#nbPdpPoQmV4som-b9Xj+w=-IdAAp? zyWsIgSckQh6|+`sNi%WI%aRgYve)pl!kt@kRT~B;XbAyruJ3U8%Pc`3Yp5T3=4!^x zuAk`uOzZKX(5GK~7}7n=v0X>@R-RFS+=<{sh?1R!j1ZUEd4DB1!-gZ-$%9xK|4*l{ z0_u+~X|S{~$<}$0YCcwh%N|a!cvU~G;t}EFUW<2YdQNC{T~@POXy=8{T>6Sa6H|?J z;u77aXj^ig8@}AqXh%Uxl3sKDj5_6Mk>gBz@jm2D`+FeLrGGL zQffpLtz?T~M)HPgnSur3SwK&e^riGzR{^tz@Vp+giHJOxLmRcH_Nu-D_YJh?AXahxp$_O51qOjq-SgRxa~Xru5CKfNuDs>4mc5 zLeN>DT-E@jpSf^9-1_dt>dP^PsN$dEjkY+eC=yUNU)wf;?-Lqo0${6o0|jTP>_TIWZ+A%?jf6} zx;IDFK=c5@B zX&IB0H=-6MBhcWY`Md9me0_a4XnX305GkL=g9kM~s(t%7Ghr>`oWT3I|Gy4fIn@Q3 z5D8(mvaK4#dEFB#d^k zadE(NApH>hh?((7V?g@RPZ_YW)}VtSkhujl``{K$jt00mN z5_b|;W&@~6DaE&o4=zLNZ7ZOPLj&&Q)v0hPjIo@;I2?7bV>=%Fm5wFdw)G>-gQC2g zFF$w9MSac@*QLJe2QB}~_b|>Tl6t%JrEoIJ5d7GKY><&6tNEd?IvyU9 zlhXQL=keV=W3w8QZK@L7{*Net0wb*t!B_5RUM3xcHH{hUfX*)loAPPFZ!@>AL_iOIg|+k`!P5~B7y(R$<4 z70&i%(ZXy?NLjkix#XH?ie`sm*?qh8zBSwX*a04ThT(xW#b%p?wL?6LzQ_p*TB~k} ztNNCYS|rZct(3kbaOL6ZwDc;JUcu|sCD^_2Kq|j!jV4Np_9f@_TqbHCUFOlFFl+k)$G$%+nDzb8~y8P7I;SN(+$K8GkNZ z?^r(~`hnf&CFLy?Rmo6QbiOxF6Blv8fXh_bxhV9~tE)q`UHH3iYEy4rLL)ZnO-Xg| z;5pwNnyp?kwzbAT4`rCwH%{bv_;pnN+&qoYQ)e_%qDdD{9rFdvh9&BD9$U5(N!XAN4h$@>|A4ZOwl)c?%E%PlKwl>(lT+_P2p)Q;wz7Tp0J{4H+kd^- zMEs3#LY+x?H8A=WHy54|q;zqt8S3kM9&G6AB}Fp$$-DqvC&hCLx~X-t!IRM7&|>#D zg~Cfo>XkGfu&W@&X6-5%)#Z7-XXA=@T2oOmRcEIr!5A4Mm#hw~4UBgcGo2Wp16yu8 zO(-&%nN5Ryv|rY_>8&`ygRZWs;^im)29}2pNL9QyoUzj3&0lN9;%btgcw}N=U|?yf z?e-p!0z;~1Dc*SGa!-$i8eeX~ucChTA^^lUDUU*kWhXQ*ovh`!tB*QOoKnbr3~q$k z@D8<)ji_&#ZoW>pC=xUQ#~vp-Is@zzi0evI1UQH(KA__)|n{517VsFd=O7(zD$ zb=bkwL~79X#W%)ZulG-V8``^J;4#DU)h#8V(wqG6Z(hxNFL_4+%dP6rW?Y16A>)#K z`D=cr9pN}@U5QL?75dQz;UXSNgu}YdG=1iEO}+d0M~J0cnhNcN^+^?YSN+0D5U~|f zd@3x#X{>mq)U4O8t%JcH zz0jEm#u&I|$S0?;QK0HJGB=MM`!w6r23)zlmm!P-Wg+6`(B2BU4SPVC1A4g=J}tXGcSCz?B)lR}qy()e zoRCj1fqi@MtJZcIq$HA7Ng~j&%JIooMEGG;UWc%1+P+4U9sF+mYDMfm zy>$qf<-ccvHG%dc8Huug3Fk>04w|=KjW1B(-^~3HZ)IQrYh}Zn7SwDEKLVI*M9yK^ zP2LP}!}bgvnw*KBQbB4QLZ6nmwaJnbCSeif>XZ+xrsz1t8`c+eEf$Q`>Xa}iUW3H5 z+~(h>vLEJ$$>^L#7~qx6EF>7qkRj$ZCRMV~aEFbR7MEAc68L$Mu)m_2HF-cA{+!j{ z_zz{0-#`^{S_;#Tor$ksU8Hg25TemmaeQ)6jGVfaYD9P};AzOwGOOH~%XLJ1u)j<` zVgDpqy&V}4ras7$@>KPga<9ntnqG;l{U!>z#$6o4E5+{=&)HSDM_Or85_b8MN&Geo zMe~akY|3~dM_Bt%%?Ald%;m~bBKH&Qlj-6N1k8AiY3e*UbDrW6)UXN;w2kR&C=m1O z>U?QRR`Om>`e-y@8+V1RZqtR9V0P)~IcrS1u9S%QHG2VR;*?aP7~;O44=OxDg~UC& z@9X`_>2&V)Bzx|dZb1N${zQW4bX6-)#DGIz%G2_Ga@=ICnpCAbpD7^4>Eur zlM{9?dzLmbhx1lYBtf?>Cx`eQfrpVPDq~<3ISxfwNMtww)uDdcwayeSA&}krMI0ko z_w~XFpHI6cC?gqT7~1kcXpSxlnhX@utBx>_-B+(DJN)NIiws*T0 z_hA1F@GDy7X}Ewd)`QMJt$Hm=c5HgTGONd5ddb%11UL;yQ?P2hhrJl<=$0wJ7<4{g zPNGl}t)Npt@q96S{wCdJOl#)s&y0;S@8l`SZo4yY1%H-6>K__xpvfg$05fP{V1P$p z1bPJ&L=k!tUDiS}kj4hqCV3iO{>H)PIBasT?h-ytl6M&|S~( z-=OJ*_Od-z%j{4LV>~H&?;cEA$0hit9a#SQM3zKvUj$F>83zkr*3#x}(R)YEs?M=i zjDsJXanCKP`lfl86poa4SsuZZ)P25>iA@?^xca$Qrm>>_AyYnbcZS$hCZJdl$nxxp zP$_If_P{8I!rQUc(kTg!v1WBjOFndiSI=tEoa1>ub9`p&u2?Z2xfJ~mC=zp`N~b1# zO=a)>p3=7s6SH)8bm(-pMgBOxopJOnoDaclY&`w@^a<@PT<^ysTWfjZc})FE@<)$) z{22CHl1ti>o4g;U7}KBFo7wLXBuH00CVObWJIy9Yv`3`X${H>R4_$Bo(y$%a?>>O} z*zIl3L>>@k9%>wo81Xg&dVs?#3I6$HX$+mUYE$X2nKaKzC{wKkfZDFsV4-lDy zDj}7JE(axC$2^dwlTP~O9`tVps++kw*OC^2;tf(0C~Jw)hHxJ})F48)fE9VS)*9<$ zp+@;Qn89jJkHHR)QRdQmE);nB7=1etm>hcx3f?IqSr~?$d8=O|BkE1J-o^Kih1{4PdRq4(cbBx29pz ze?7PZE+(?H)uVrA!48nfHbMo|F@E^>Q<_6X!4o=XHYSSKV7bl z)atsQ+DOU1*JAgg>QevCaHmIf9xy(*I{CGKzBQ>`b#3waXDR&H6p=cv{o6!5*a)iK z#BNJPjca5EqVk_!+~J6iPFT=HJt$X<*{luwCPCN~t6oPu+leErULv_mbIi4!rf35_^PPhEOQl{t z$*TrcWNoCJ3KR-e?vX#y*>2X}@#51axyZz!#fYxsk!u6&mwI(#!V{?(%N~ z`lr$S%isR=m6uap;`5|Mq$|RTRn<Y>e}jR3ftb548_P2r2o?121hTY-069BSsPt|Z zgF-0N1|%#_C*#4aw)m`wLqFBI=pHmiz&9>$2#R2Vp#NS60ZXvMg56-&&2kWSImFPw z!-W_${>leVJg+&B#=!CLOB+XVPy#ZHqK{dW?lO4BaI+Mr1WPCV2904KtKb^uVtw+MTs^yS_ZR*7gM|GdAHC@`8(2dsZS}cj^*&0}W2N8G6DJNM2`*L+%@YY5VbHD0(*9pWn0=;g*&>@(-$jnDi|pe)3P$9JpIxjbTZlfd>z> zEyjE0$T);0Je7aLh!?sQ;TX(k_w?d-?ETe~8@Ld741oheXaWiVEda`1LnzwrK!a(xM10{HXe57GE{+NIGVSm4L2IY`YH6r- zoXR(>j8TV7ONi%7a7G$G)M}_jncTjeKj-cVoA7M=mh>0%&@bfZyiUhKwnYDnU^QFR zrNV-Bphs;QW9(HgPy;aBz_K)?Mp^dJtWRcD$;9c&Z^<*955JYRc+A?C6QoD5Syf;e zC^49O`g`y>K3)wsl_Lx`^yu0Neb(sZqHcUhO(2FUrIL_ZVIqBHBcw@z=^cvv*!TFq zW7~*M-4b`ZC-FRyvOGFh+MyWRu!71hL~l=R9*^dJOAi@+Me`77&VqckKHr8AkBgko z$>jeWbEC~THn~yn^k~RB-Yu&3a2o$1&eC)lF-Ga4sMCu^D5ou&fwj7LqUVd4kTsM= zOfODSEo-p2#}s=hy+YJJPeQi*&6a;-sj)46r%A$I!IeF@9ObV3o_EgOs(Q)^Vcs+Zlc}Mpww9?>fdK|_3!Up8@y~kS0cU&~DCbei>cRAm&tant+8sbF*aNEw#|>W# z!$wqG5PIQhmMC<2KC|$Gc71cIj{QmeO@?PsRJx)TvWNWv3gSj_5NIeZmgOMA4Pr}T z&acA>=Hf|jgmBPhf7KY`1CabT_Woo8OQ>f!q)tZ`p3;U)_WzxA;WGFBN!2lB40g;{ zGd?0{pg@+Qsw%!*bsqEMV-yJ>(llFcYg_%0Unw!3f+7Gww{G{sRork553$#P9}P20DFK@lP!J|Nz8}dPW zc?=M8;;vH#6H#cs;90i|@agS$lBPggfL7a&(gw*W3(%|Ydg7hajxB5 z|M~RE+2L27R|A-^Tio8BPsqmvrkCb48^lg3mg<(QrsLozOHNwo%ItSL*^|$MaccDX zl|_?*4~GT7n&~&O0a~1!o2$po5q)l}XQUx`5pI+K9rUG;c;QSHin^}h(iPEr_0tRF zF@$6}kz-1#({!BGs+If!M8v@Q5z}$hyZc%!f*1GTd2eLsU{BT6tV7FDm%j)QoU5v| z@|{q)Mgr6I5?0@obo;%?xo_DU_(ZYKx4$h;Kg(~T^f7!-yuT2QY#RDrtB3Me?!Wf@ zkkG~8Y0O|x7IB)rg(M-_swbCXru^P*kLuJ;1ytRzvKJdl=SO6PjzJZ+Hu|oeiP3{> zLD}F5`}g{p11i4FefCKGgl(zK`!6&v`6!r+mQi%@8C`l9N=T*>8FoD@!J>pWxlKy* zeze+D&;V3TOCxb~JI?2BQ#BkgX*|0}HM~kBj z5_y~ySR_0aFxDYuQ5zT423)sr#V>i#dBq+S%2yC~^DKdaJks%&9?HFqJJWDDi}NeU z(7v!ecb$7L$@jSe9?i+lUtvm8D`W%!TX}8v{TEME38Xh5IbhIAhSkF+U&{IwX32^) z%nG>uAAoa^!}Q+67#WxtrF?t>;1CXH#SnBcX}~uY*B93DLZ#I5e`3Sz)OgnXMHot# zd}CPIT)X)SmgJubaLTBq#4(iNybOtUqI0p*^B8k(v}L>zuaNj4s@4|i?I|{v^#d*F zcoK9$6FnJf@{EG(9IN76@|oq`?*d{=)B=h29+_O7&J}2p)zD`&yam=X`X-WF$wS@O zF9c5!+_QFOy0+Tb%|@m;lnK4v?s48dOT$N1exp-X)8z6cWg_@**`v_TjGCN_wwAS@%s|HyrLPbk^O+f}4Kh9RiDYuRf zim1n{r+jSA9;y9fXqNHI!|5V9dr7!gToXL8ejm`!S{{?jsSqokU1#Q0&15%$HSQ*R#J$sfL7XIiUUDe*aU7!pi7zS2p>1t{19;$l5` z3aDXoLqnX=k+eO|%z;TbQ=)?GaXvK_l^)Nq)K)d@PzwdA3FCi$YmAF$ng^c8+ZpY( zs)~w=s;bbjkW6EJeFYoLLk-R!z{9=lT@JWP_#PoDI89UJt7u0xxa1T@8QvMdhVe8$ zB@}xbo>KZ(`fTgq5o^`zXG5M1e2&HXUIJtsn+}|5;Oy)Sp`>5)QP>VeJWz+1a0@wJ zhW7faN`7@rU(idBROlRhWPQI;h%@OQ=K6sSDeCzck^cm?9~71$WAlDn*NLuX3E5zq zN%6_@oK=x(R~>2P%UWh^q1OC>L1x_AVD)5`ny4xJhFzqyz#d^(mEs(98dICd{a2SQ zF>nQHtxI@P4<+sCBfqW&6=mTX_H#H3uitHS%e?W1A*fj8>{SC%9fj{rxkvZLT1$>^ zH2>R-&i>vIf)4UW)BQ2q3bw;Bj0;c9KvVr{-t2tA7xDhfSGj39oTRZ8v#j`fx@wsg zo2|-6!LJoOUJd>gPt`~hIG1X7W5d1E&zoIolESOvbX_?2Z!b{abafs+H(IHV`=Anl zmNA=n%&spPkWYhu7Rgjn^7*vy%NyQ14?g`yT>PO`@zI-Qm=l$I9!<)_TtN0qG#arH zejYAWATZ_BMj(_k2+iwuI|@c6uzjklwFq8{<>`PQR4L{AM22~CuNBIB7B7=tT&LXs zy8gRx_o~GpAoM^1-+OmEc7{`t|BA9=?}&M&QU8uF5YuXWA({aZ>cM+q`+$JO2|-YA zkF5WOzcZXV^KLvsa~{4Fcvvg`i22~JTY#sQkOuwLSf~a9Tmvb2%KS8%LUi4MVp&>s zrk{Z<>A)k&+-&ix>@Q+LJ1s5kDFoKCz0nBLt`Wbbv_=mJ2pRW+g9T*(vkzA`@5T6gDX#Uo*A1m`FbXSB^%&g3ySNZXSZ!-$8CENLA3q z96Erg~K0UA(B#ERM z6ClC5<`f7Xo^iA6B?VY$2IICx=wVM4f)FLw)YLT2eDt4!t%>cdSw(UQKg?*8CQikN zV`KbCTvK~@x%i*AW21SI*USVhYF2%|M=!x;TpEEbqVTWzLhMt1b1w4|a>XBU73j+@$=bFhvMLf3GKBi+$v!DY&9m%@0{kY$v2}W@ywBt~ zLzA|TwC3cJdM*`d#?BVyEYY2Eh6yBkay#X=w0Tu-gh^Ar4Qj(S7vu7Ov6ZQ{wtILT_ZA;YEYF?)Bu^iomU z(^qM#Dpx0VkJeXK>~AxDvll)&J9jKv|OSN+cc-uN84fgaqnek`98BUbiw%4!jbshS(0!M^Ri36%j5GLTRdnas$3u@nJ zvDzXNd)*UAVMMQk{P^+XN03JtB|L(!ERZO7g#<+SVgU58iepD2=4W7+`~l9BENSaw zes=*efIpk#QQhR=q0YexhCh7)c@uGqkOz}Qh4d4tVjEWIKHz%p!hps>X<%#&RuOqr z-OLVjYtMnGqvGtDk(mj-s?_Q=(6aTSdZ45DcIKHAoLB|!mCsLCI0pm_yCup0Q6idw z{nJ;V0S3?pNbHM32szo~g)lgAkD$mNyqS`c?&bZx`QoozH8nLozOWYu_pcSY4BVd? z5=k^cqew?xIwo_t{OeCT11`=KRLXIB#K*b0v2E(c$%@nc>o-x z#u&Z!4eQOo|3}20Xo6|wtOWl2A@QUkdKhvgK$_J$Upo3%DFVVdRar-DTprxP;9H)e z!O((_V<$M4PT>q0`Z+B`dADV-AOabVWN!H#u6xz*fq z6ryW>w5!8r3#b^_DlNQrg`x8++tXG!LlVBtm=`n#z>QFQbG5Sx77Ecr6!9NO%iT6G zP>ij=ZDfQH3zd5VBL^5#sh6()0t*pN;Y(|KSo literal 5508 zcmYjVc|6qJ+y2fp!)THznoyXCN!dy!rpPXPmaJn)mO|M^X+kq?LP(Y*TlUDFeQBPj zl%*`gG!H2r*~XN@P$tWJ{NDHTetv(=`JC^W`&{R~@9Vnnb7Ia~nFw!}+zvsIu<02? zTL^-IAq+wZfFDvwi4O!}AX7s<`*7H|tjmw~HS9F%2zdWBb(s9*d+LWJ%hBbccRYjs)7i+ z*X}TGA)Fxe&a5=H!q4g(ScZw@ngl#1ljSKIG+N0K~Pn~7clgh*TPDia(aiTUiK4&f@ z;&K8iPJbB1N{W+Cake!~M;>vv?plmZH>|Hf;|?SCA#nXU0MhBuWBMNA;GpM?^$uVz zT6?Ip~6Gw_V~su-3M=&+Ruib?%g;xqiLbj=vGt-OssUIhovb z&3LR-Ue0FyN%&%n=gQ0YH`hy$Kfix!_=L)PTv+GD=PyphDI2hj<_lBp6vob|`q;nX zpFBLL96LN%AUXZAMZzLfNnGhR$!+>j(Yd}Ho||&&=a%M zx)D<*SLPVl=66$}PYkU)b|qBR$6<5F%Ljo)y|eO6!5%lau4%sqPTlW1Qa&t?M-)8H z5shplSBVG|oU+21U99VkLXKKp5o(Qt8;xPddX03hu@)kPqeAUDh(Zj9LC!ndt{!=9R342P&o7u5wZDfR%)WiAyL_ zEZD*JYk>r6Kj4Dq+qmKbYWwNF+dW~Y3`E>f7FIN*+A5?d1MkD6d%|YXvVEiztcWn` z`i{noK;^!oP_`Sto}~OS+iE$m`p3=g`Wg3H6URtm^)+p;<;V5JLRN%pEcGAHvCV)dGs8{^>?6Fs z6=wI%5@dg=;)L$_9KvP!9sHuvBTY>DLm*OrKeIW8Z~>Y0Qr2`o%Hj<0K5rn;2`=E@J8 zMvxu@J}XFK3-xm~U|3!Myf?QQhKObrD3X(x!mqPdBv+Qze6+|vQeqpSTo~?J^!9#? z-}^U1saY*6wym~v+MUxNsi*DCw2Sz5qxrk1PD=X!xXyAiYum7GB}e|~xN_;VoC6yf zWW4Ro9SE@q7<2t5fM>wPBXm<52=v;PAMFsObi`aX+(wxHG>qa$N)CAMqQpr# zQfkzjRk5LBtNmAW)t7Dt*$vw{l9piK;zpmGh z0j35nuF*2NxG6EbDq42eBVe(AUPyg0%17 zMR<<;iK1usRY6py!d`>`kQ(s-T*@|jHsYQ$M7;c6k+|n-UUGbQozrv4I*TV?69Cf%&$lGZE!eRG=UvX+ z4${z+;pD@b!UtGS$vPe7rj)Qf)ejbpmQ5_YLfe}UhqjqSseH-)GG!~(dt!og;T0!O zqLIWjS<<>46GD{mfi=PhfYi(Y;%2@}>%@p>11|sGWrIWXZYgAvC2&3{mPVHcWXB>QV&}2J}LR*#Z0s_M3tbFhuBZfj2l)T-~Vg3(Uup0 z*HwzJIT4AmWZ91Lm;jTnS<9_lSAKvM2=dX6g13Iw_|tpUncUL8j^4Kq7QHXOR-y%L z`>i*=9YJPoLyw=E>_XFFKnMiH;qtoU=eDv+)|!mkp$im)fjM;kGQ9HJmi#5#WWAT! z^H*qb`G7EeEpry}>!K9(OUI|d7Je90YL)mZV9cgMJ)m@O8JBHUQ`bmJBC7`hin7Ez z!U#u`0#$(rXANd@4XJeILqAzpt5I1 z5$lCmzhJ^DYvMa+l5GdlLHj945!_E1AP_hA|5ini^~YJJ&QN7Gw0hvDK1i&+f8#X} zWJ?n=zZLeaSA`AQt79-S*NlLe*I5_w18V6tTgnN9}1d7Fm3MMVql2 z?~s_#dwMD6s!icCsfT>LLYI5qu`mm<>77N5Ci2aTI+EPsnHCkAZ(N5A{J)x-|10PJ zlwrgRMX-!R$+&S25K;IwnVJ>lLvyvY7C5g_@>m|Gq%tj9i<* zJUQ)*>R5iB$o)9QPXpmpvPHcPsK`aWet8iUST{FTL_u75*ZgFAed4Q=IWNeOHy>;+ z^wl&q?h+l&bT4phPh35{p|wS+4!CB1u%|u*Z`g;XH9&AQP)?;&5iZdXnsyC>O9?$l zi$$u97?ucv@s3)E!e3kFvRy6n1|70;H`Z2{97MC~iD|^9im69dQFYSr3US9aw(W z?)Luv;~x1ozu=>N{UWu{P-aGD%spI-sBoUb{B@51bwZYoF4&@r-8Jq0hZ9lYNW#~g z4AxJlxVw(^(`^8hCsE1j$gv5$$~7rZ}&_AMUiE|XAv34{YAy={&4ovDy~r?ZAG(Q z5`PYarC*WqTPO&1)W1PpmEN;FJ?9u`^7XrRWx7gEMI9+|SLLB1aDpEB$f4*6|2$%5 z&Ya_D#w>4am9vsRU0ZDT-X*@W-|`iNuzU@;ZFL-h-_niMZ=4gG`KR61nKJRqolCLY zH_L!y)hj%p2g4CSAU_()gv=Co*eqQ)Y+&D1{UeXnRdt%AGgyG;6$Bf;L;|A|Sq&Ly z@2t}s_X5O8hKWkUIqv5xOQ_go;~ z<7X^Tx(omkhB&G|v8+qJoRia508OCEYV*qy!R^7SF*nuc=f|`4e6pos$ zD&5*@qfQ3e@naqbR72%9zi99<>W`@CdezB)8G{yz6VPf!vBI=Z(M}4#tRBQQwdY~V)nYjln^z}Rl0OGKM zaU161R=ve2Jo~7icHtLj5GjSWX6vPeDb>94=>11y+GC2ive!}z0_U5E-bV_1?dv=H zrs8VPfwsqu5pw(`B8E4|{&mOEnaZ##N~S zR{Z_Cc=;;AC;kmQJuGBM*eCjt5(FWYx84Hi0syTrZZ{lWyBl0FXYFr@XmqsAFD-2@1Ydnc@lS~K@p*{p(ma&XHA<3j(rZ9b?^!>2ntW~~vc ztxgKCf2p&hRSE%Pmxc#>PRQAeTC{fhCKfKm`(<_jZS1Edkc+=*S3awkw*5}LIOrYn z+?Z`bVF6e<_d{1cU0w{;2KDgk!Ns0`WYY$A3_UFi#;%K@J+SFRO<4L7N)Np8Z!r!G zZVG~SP;(R)gam^l7D>{$hX)z(Gq+w}z6^KdWFz}8J({PU<(D9aUCmOC_z#*kC6}xm z8k2|uo|~SdXq#_N^*nwW$C+r;?}N`8Mz-v1-IRzlw^Z$4U+UYCp6bc#4@+-}8WjAC z^s2I+~HXB`U`)sdUEHYs+m$O(M5o6f|S2hSV%8lcVZ{4vN+uYy2mTqz|i# zMc*`l0<%FIS<{fFTpy)#cRlQI-x0W&7C)EBji0Lqo&#(ojr8@*(FTgSXbL zvacRkwvw`H>Jm7hKc0H@xl1BSr6}Dntnrs&gP_W^1Rwm@quD?C#m0{GE91z7VWTti)VpcbNXx%on@q*~*~WzxU5P~oDL|eE9^SxJsm0bm zdbSGa=62}+Cq#BNE*bzITR;ASt1|Ea%E=YEronWrbh+B7p<%MFVfj+j0{^8h`4Yz~ zbbexLs}tauoA>suo~fi}HvVrpwaT=1P))0d`Yi4B)n^T;=uWf1NCB^pCNdayPQY-Z z#Obz(c}YvcUOSon?AuF8Uslhkwun0B^A^iZ-`LiJLR`~Ctf5xhmuqyrea{!Jg=&Py z1?lQSBy9qEd``6JGztNT4BKykX(R&1v+x!-F(}}9xMuoCg(`iZFEp#upWPoHkJF(l zQde?CCri?@2`pywuYmP(Zs*&^;ccg%1dcz6TWcoJS^}9U5L(@gT@nk%Hz5~|&0oFR652_+o&>eS2y)XmI{(EW+SQ`b_rZ|Itwl2dxui%i=6L5+6 wuL=KcPHlfS!BgtyW}|T2Ab3j^*b>fd&{GG#l$Hq*4`v`!BP+uSeUDrJ1BKcfi2wiq From 3c3121bf8aefdeea030c938ad5e3d76a48eca35f Mon Sep 17 00:00:00 2001 From: Turtle Date: Thu, 13 Aug 2026 15:39:23 +0800 Subject: [PATCH 39/41] Update README.zh.md --- README.zh.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.zh.md b/README.zh.md index f9dacc4e3c..639d519b62 100644 --- a/README.zh.md +++ b/README.zh.md @@ -37,7 +37,7 @@ pnpm dsh web ## 社区与支持 - 欢迎通过 [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions) 提交反馈或 bug 报告。 -- 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 主题，便于被发现。 +- 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 话题，便于被发现。 - 欢迎加入 DeepSeek Harness 企微群：扫码添加企微小助手并填写入群问卷，完成后小助手会邀请你入群。 From 944a0260ca9a66acb223b097cb2f067809dc97ce Mon Sep 17 00:00:00 2001 From: imccyu <276526105+imccyu@users.noreply.github.com> Date: Thu, 13 Aug 2026 16:05:57 +0800 Subject: [PATCH 40/41] fix: static ci --- README.i18n.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.i18n.yaml b/README.i18n.yaml index 727a781767..cb21ac2fa9 100644 --- a/README.i18n.yaml +++ b/README.i18n.yaml @@ -3,4 +3,4 @@ # after editing either side, bring the other along and re-record with: # pnpm run verify-translation-pairing --write README.md README.md: 098b514f8311de092bab18bdd560722b1e485913 -README.zh.md: f9dacc4e3cce1c83bfa65df9fbc8d6410a37fcc0 +README.zh.md: 639d519b6202ffe740d46e462feec2657d7e13ad From df9ea1681f2faa714d884846284348ebc3f4b568 Mon Sep 17 00:00:00 2001 From: imccyu <276526105+imccyu@users.noreply.github.com> Date: Thu, 13 Aug 2026 16:20:19 +0800 Subject: [PATCH 41/41] fix: snapshot --- .../translation-prompt-v4/request-response.expected.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/snapshots/translation-prompt-v4/request-response.expected.json b/scripts/snapshots/translation-prompt-v4/request-response.expected.json index 627097be23..c5f0822791 100644 --- a/scripts/snapshots/translation-prompt-v4/request-response.expected.json +++ b/scripts/snapshots/translation-prompt-v4/request-response.expected.json @@ -8,11 +8,11 @@ }, { "role": "user", - "content": "# DeepSeek Harness\n\nEnglish | [中文](README.zh.md)\n\nDeepSeek Harness (`dsh`) is an open-source agent harness developed by [DeepSeek AI](https://deepseek.com).\n\nIt uses an architecture where **everything is a plugin**, and is powered by [Cordis](https://github.com/cordiverse/cordis).\n\n## Developer preview\n\nDeepSeek Harness is currently in _developer preview_ and is iterating rapidly. **THERE WILL BE COMPATIBILITY-BREAKING CHANGES.**\n\n## Run\n\n### Run from `npm`\n\nInstall `Node.js`, then run:\n\n```sh\nnpx @deepseek-ai/dsh web\n```\n\nThe command starts the Web UI, served at `http://127.0.0.1:3080` by default. See [Web UI guide](docs/user/guide/index.md).\n\n### Run from source\n\nTo run from a repository checkout:\n\n```sh\ngit clone https://github.com/deepseek-ai/deepseek-harness.git\ncd deepseek-harness\npnpm install\npnpm run build\npnpm dsh web\n```\n\n## Community and support\n\n- Feel free to submit feedback or bug reports through [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions).\n- Add the [`dsh-plugin`](https://github.com/topics/dsh-plugin) topic to your plugin repository for discoverability.\n\n## Contributing\n\nSee [CONTRIBUTING.md](CONTRIBUTING.md).\n\n## Development\n\nStart with the [development guide](docs/development.md) and [architecture documentation](docs/architecture.md).\n\nFor agents, follow [AGENTS.md](AGENTS.md).\n\n## License\n\n[MIT](LICENSE)\n\nThird-party dependencies and their licenses are disclosed in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).\n" + "content": "# DeepSeek Harness\n\nEnglish | [中文](README.zh.md)\n\nDeepSeek Harness (`dsh`) is an open-source agent harness developed by [DeepSeek AI](https://deepseek.com).\n\nIt uses an architecture where **everything is a plugin**, and is powered by [Cordis](https://github.com/cordiverse/cordis).\n\n## Developer preview\n\nDeepSeek Harness is currently in _developer preview_ and is iterating rapidly. **THERE WILL BE COMPATIBILITY-BREAKING CHANGES.**\n\n## Run\n\n### Run from `npm`\n\nInstall `Node.js`, then run:\n\n```sh\nnpx @deepseek-ai/dsh web\n```\n\nThe command starts the Web UI, served at `http://127.0.0.1:3080` by default. See [Web UI guide](docs/user/guide/index.md).\n\n### Run from source\n\nTo run from a repository checkout:\n\n```sh\ngit clone https://github.com/deepseek-ai/deepseek-harness.git\ncd deepseek-harness\npnpm install\npnpm run build\npnpm dsh web\n```\n\n## Community and support\n\n- Feel free to submit feedback or bug reports through [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions).\n- Add the [`dsh-plugin`](https://github.com/topics/dsh-plugin) topic to your plugin repository for discoverability.\n- Join DeepSeek Harness Discord community.\n\n## Contributing\n\nSee [CONTRIBUTING.md](CONTRIBUTING.md).\n\n## Development\n\nStart with the [development guide](docs/development.md) and [architecture documentation](docs/architecture.md).\n\nFor agents, follow [AGENTS.md](AGENTS.md).\n\n## License\n\n[MIT](LICENSE)\n\nThird-party dependencies and their licenses are disclosed in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).\n" }, { "role": "assistant", - "content": "# DeepSeek Harness\n\n[English](README.md) | 中文\n\nDeepSeek Harness（`dsh`）是由 [DeepSeek AI](https://deepseek.com) 开发的开源 agent harness（智能体框架）。\n\n它采用**一切皆插件**的架构，并由 [Cordis](https://github.com/cordiverse/cordis) 驱动。\n\n## 开发者预览\n\nDeepSeek Harness 目前处于 _开发者预览_ 阶段，正在快速迭代。**未来将出现破坏兼容性的变更。**\n\n## 运行\n\n### 通过 `npm` 运行\n\n安装 `Node.js`，然后运行：\n\n```sh\nnpx @deepseek-ai/dsh web\n```\n\n该命令会启动 Web UI，默认地址为 `http://127.0.0.1:3080`。详见 [Web UI 指南](docs/user/guide/index.md)。\n\n### 从源码运行\n\n如需从仓库源码运行：\n\n```sh\ngit clone https://github.com/deepseek-ai/deepseek-harness.git\ncd deepseek-harness\npnpm install\npnpm run build\npnpm dsh web\n```\n\n## 社区与支持\n\n- 欢迎通过 [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions) 提交反馈或 bug 报告。\n- 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 主题，便于被发现。\n\n## 参与贡献\n\n参见 [CONTRIBUTING.md](CONTRIBUTING.md)。\n\n## 开发\n\n请先阅读[开发指南](docs/development.md)与[架构文档](docs/architecture.md)。\n\n面向 agent：请遵循 [AGENTS.md](AGENTS.md)。\n\n## 许可证\n\n[MIT](LICENSE)\n\n第三方依赖及其许可证见 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。\n" + "content": "# DeepSeek Harness\n\n[English](README.md) | 中文\n\nDeepSeek Harness（`dsh`）是由 [DeepSeek AI](https://deepseek.com) 开发的开源 agent harness（智能体框架）。\n\n它采用**一切皆插件**的架构，并由 [Cordis](https://github.com/cordiverse/cordis) 驱动。\n\n## 开发者预览\n\nDeepSeek Harness 目前处于 _开发者预览_ 阶段，正在快速迭代。**未来将出现破坏兼容性的变更。**\n\n## 运行\n\n### 通过 `npm` 运行\n\n安装 `Node.js`，然后运行：\n\n```sh\nnpx @deepseek-ai/dsh web\n```\n\n该命令会启动 Web UI，默认地址为 `http://127.0.0.1:3080`。详见 [Web UI 指南](docs/user/guide/index.md)。\n\n### 从源码运行\n\n如需从仓库源码运行：\n\n```sh\ngit clone https://github.com/deepseek-ai/deepseek-harness.git\ncd deepseek-harness\npnpm install\npnpm run build\npnpm dsh web\n```\n\n## 社区与支持\n\n- 欢迎通过 [GitHub Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions) 提交反馈或 bug 报告。\n- 为你的插件仓库添加 [`dsh-plugin`](https://github.com/topics/dsh-plugin) 话题，便于被发现。\n- 欢迎加入 DeepSeek Harness 企微群：扫码添加企微小助手并填写入群问卷，完成后小助手会邀请你入群。\n\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
企微小助手入群问卷微信公众号
\"DeepSeek\"DeepSeek\"DeepSeek
\n\n## 参与贡献\n\n参见 [CONTRIBUTING.md](CONTRIBUTING.md)。\n\n## 开发\n\n请先阅读[开发指南](docs/development.md)与[架构文档](docs/architecture.md)。\n\n面向 agent：请遵循 [AGENTS.md](AGENTS.md)。\n\n## 许可证\n\n[MIT](LICENSE)\n\n第三方依赖及其许可证见 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。\n" }, { "role": "user",