From 81512ebacc2b1aa507d9693183e92783e0f89753 Mon Sep 17 00:00:00 2001 From: waw4303 Date: Fri, 21 Aug 2026 04:48:15 +0300 Subject: [PATCH 1/4] feat(vision): add provider-backed chat sidecars --- README.md | 5 +- .../docs/fr/getting-started/how-it-works.mdx | 5 +- .../docs/fr/getting-started/installation.md | 4 +- .../src/content/docs/fr/guides/claude-code.md | 2 - .../docs/getting-started/how-it-works.mdx | 5 +- .../docs/getting-started/installation.md | 2 +- .../src/content/docs/guides/claude-code.md | 22 +- docs-site/src/content/docs/guides/sidecars.md | 67 ++- .../src/content/docs/guides/web-dashboard.md | 4 +- .../docs/ja/getting-started/how-it-works.mdx | 5 +- .../docs/ja/getting-started/installation.md | 3 +- .../src/content/docs/ja/guides/claude-code.md | 2 - .../docs/ko/getting-started/how-it-works.mdx | 5 +- .../docs/ko/getting-started/installation.md | 3 +- .../src/content/docs/ko/guides/claude-code.md | 2 - .../src/content/docs/reference/adapters.md | 6 +- .../content/docs/reference/architecture.md | 2 +- .../docs/reference/configuration/providers.md | 2 +- .../docs/reference/configuration/server.md | 19 +- .../content/docs/reference/management-api.md | 2 +- .../docs/ru/getting-started/how-it-works.mdx | 5 +- .../docs/ru/getting-started/installation.md | 5 +- .../src/content/docs/ru/guides/claude-code.md | 2 - .../docs/tr/getting-started/how-it-works.mdx | 7 +- .../docs/tr/getting-started/installation.md | 4 +- .../content/docs/tr/reference/architecture.md | 4 +- .../zh-cn/getting-started/how-it-works.mdx | 5 +- .../zh-cn/getting-started/installation.md | 3 +- .../content/docs/zh-cn/guides/claude-code.md | 2 - .../zh-tw/getting-started/how-it-works.mdx | 5 +- .../zh-tw/getting-started/installation.md | 3 +- .../content/docs/zh-tw/guides/claude-code.md | 2 - gui/src/i18n/de.ts | 1 + gui/src/i18n/en.ts | 1 + gui/src/i18n/fr.ts | 1 + gui/src/i18n/ja.ts | 1 + gui/src/i18n/ko.ts | 1 + gui/src/i18n/ru.ts | 1 + gui/src/i18n/tr.ts | 1 + gui/src/i18n/zh-TW.ts | 1 + gui/src/i18n/zh.ts | 1 + gui/src/pages/claude-code-sections.tsx | 1 + gui/src/pages/claude-manual-env.ts | 2 +- gui/src/pages/dashboard-overview-sections.tsx | 9 +- gui/src/pages/dashboard-shared.ts | 57 ++- gui/tests/claude-code-sidecar-draft.test.tsx | 23 + gui/tests/vision-model-options.test.ts | 35 +- readme/README.fr.md | 6 +- readme/README.ja.md | 2 +- readme/README.ko.md | 2 +- readme/README.ru.md | 3 +- readme/README.tr.md | 2 +- readme/README.zh-CN.md | 2 +- readme/README.zh-TW.md | 2 +- src/providers/api-keys.ts | 20 +- .../management/agent-settings-routes.ts | 15 +- src/server/management/config-routes.ts | 6 +- .../management/vision-sidecar-options.ts | 15 +- src/server/responses/core.ts | 10 + src/types/config.ts | 4 +- src/vision/describe-chat.ts | 311 +++++++++++++ src/vision/eligibility.ts | 68 ++- src/vision/index.ts | 163 ++++++- tests/vision-cache.test.ts | 29 ++ tests/vision-chat.test.ts | 427 ++++++++++++++++++ tests/vision-eligibility.test.ts | 48 ++ tests/vision-sidecar-e2e.test.ts | 60 +++ 67 files changed, 1399 insertions(+), 146 deletions(-) create mode 100644 src/vision/describe-chat.ts create mode 100644 tests/vision-chat.test.ts diff --git a/README.md b/README.md index 22d6956c6c..51d6f12791 100644 --- a/README.md +++ b/README.md @@ -146,8 +146,9 @@ see the [installation docs](https://opencodex.me/getting-started/installation/). [sub-agent guide](https://opencodex.me/guides/sub-agent-surface/). - **Log in once, skip the API key** — OAuth for xAI, Anthropic, and Kimi; or forward `codex login`, paste a key, or use `${ENV_VAR}` references. -- **Web search & vision sidecars** — non-OpenAI models get real web search and image understanding - through a sidecar over your ChatGPT login. +- **Web search & vision sidecars** — routed models get real web search through an OpenAI/Anthropic + sidecar, while image understanding can also use an explicit provider-backed Chat vision sidecar. + Chat vision targets use `provider/model`; see the [sidecar guide](https://opencodex.me/guides/sidecars/). - **See what's happening** — the dashboard shows providers, OAuth status, model selection, and a live request log with cache token counts. - **Clean exit, zero residue** — `ocx stop` restores Codex to its original configuration. diff --git a/docs-site/src/content/docs/fr/getting-started/how-it-works.mdx b/docs-site/src/content/docs/fr/getting-started/how-it-works.mdx index ad012d22ca..6dc30901af 100644 --- a/docs-site/src/content/docs/fr/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/fr/getting-started/how-it-works.mdx @@ -71,8 +71,9 @@ le modèle et l’effort de raisonnement à utiliser. Les requêtes v2 conserven de transfert direct refuse de poursuivre si les informations d’identification requises sont indisponibles. 4. **Service auxiliaire de vision (facultatif)** — si le modèle routé figure dans `provider.noVisionModels` et que - la requête contient une image, opencodex fait décrire chaque image par le service auxiliaire de vision ChatGPT - configuré, puis la remplace par du texte afin qu’un modèle textuel puisse tout de même la traiter. + la requête contient une image, opencodex utilise le backend de vision configuré — OpenAI via la connexion + ChatGPT, Anthropic via OAuth ou le backend Chat réservé à la vision avec une cible explicite `provider/model` — + puis remplace chaque image par du texte afin qu’un modèle textuel puisse tout de même la traiter. Voir [Services auxiliaires](/fr/guides/sidecars/). 5. **Transfert direct rapide** — si l’adaptateur transfère directement les Responses (`openai-responses` ou diff --git a/docs-site/src/content/docs/fr/getting-started/installation.md b/docs-site/src/content/docs/fr/getting-started/installation.md index 5a9ae40163..47ea5f0c47 100644 --- a/docs-site/src/content/docs/fr/getting-started/installation.md +++ b/docs-site/src/content/docs/fr/getting-started/installation.md @@ -5,8 +5,8 @@ description: Installez le proxy opencodex (ocx), ses prérequis et vérifiez qu' opencodex installe deux commandes équivalentes, `ocx` et `opencodex`. Toutes deux lancent le même petit serveur HTTP local, fondé sur Bun. Les requêtes de modèles sont envoyées au fournisseur choisi par le -routage. Les services auxiliaires facultatifs de vision et de recherche web peuvent également utiliser votre connexion -ChatGPT lorsqu’un modèle routé en a besoin. +routage. La vision peut utiliser OpenAI via votre connexion ChatGPT, Anthropic via OAuth ou le backend Chat +réservé à la vision avec une cible explicite `provider/model` ; la recherche web utilise les backends dédiés. ## Prérequis diff --git a/docs-site/src/content/docs/fr/guides/claude-code.md b/docs-site/src/content/docs/fr/guides/claude-code.md index 8a5ccf79b2..0b91a104e9 100644 --- a/docs-site/src/content/docs/fr/guides/claude-code.md +++ b/docs-site/src/content/docs/fr/guides/claude-code.md @@ -368,8 +368,6 @@ La recherche web et la description d'images avec OAuth Anthropic réutilisent le d'empreintes précédent. Testez néanmoins ces fonctions avec votre compte et votre charge de travail avant de vous y fier pour de longues exécutions sans surveillance. - - ## Effort de raisonnement Le paramètre `/effort` de Claude Code est conservé sur l'ensemble de l'adaptateur : diff --git a/docs-site/src/content/docs/getting-started/how-it-works.mdx b/docs-site/src/content/docs/getting-started/how-it-works.mdx index 7ddff28cb9..c29d2f87d7 100644 --- a/docs-site/src/content/docs/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/getting-started/how-it-works.mdx @@ -71,8 +71,9 @@ effort to use; v2 requests keep Codex's native multi-agent guidance. to continue if the required pool credential is unavailable. 4. **Vision sidecar (optional)** — if the routed model is listed in `provider.noVisionModels` and the - request carries an image, opencodex describes each image with the configured ChatGPT vision - sidecar and replaces it with text, so a text-only model can still reason about it. + request carries an image, opencodex uses the configured vision backend — OpenAI via ChatGPT login, + Anthropic via OAuth, or the vision-only Chat backend with an explicit `provider/model` target — + then replaces each image with text so a text-only model can still reason about it. See [Sidecars](/guides/sidecars/). 5. **Passthrough fast path** — if the adapter is a Responses passthrough (`openai-responses` or diff --git a/docs-site/src/content/docs/getting-started/installation.md b/docs-site/src/content/docs/getting-started/installation.md index 7c68e1b840..8a6439a1ab 100644 --- a/docs-site/src/content/docs/getting-started/installation.md +++ b/docs-site/src/content/docs/getting-started/installation.md @@ -5,7 +5,7 @@ description: Install the opencodex (ocx) proxy, its prerequisites, and verify it opencodex installs two equivalent command names, `ocx` and `opencodex`. Both launch the same small local HTTP server (built on Bun). Model requests go to the provider selected by routing; optional -vision and web-search sidecars can also use your ChatGPT login when a routed model needs them. +Vision sidecars can use OpenAI via your ChatGPT login, Anthropic via OAuth, or the vision-only Chat backend with an explicit `provider/model` target. See the [sidecar guide](/guides/sidecars/). ## Prerequisites diff --git a/docs-site/src/content/docs/guides/claude-code.md b/docs-site/src/content/docs/guides/claude-code.md index 81d0e0eaea..df1055b819 100644 --- a/docs-site/src/content/docs/guides/claude-code.md +++ b/docs-site/src/content/docs/guides/claude-code.md @@ -326,12 +326,19 @@ before the main model answers: - The **vision sidecar** describes an attached image before calling a model listed in `noVisionModels`, then replaces the image with that description. -Both sidecars can use either backend: +The web-search sidecar accepts only `openai` and `anthropic`; the vision sidecar also accepts +`chat`. Chat is vision-only and never runs web search. | Backend | How it runs | What it requires | | --- | --- | --- | | `openai` | A small GPT model through the ChatGPT `forward` provider | A ChatGPT login and an enabled `authMode: "forward"` provider | | `anthropic` | Claude through stored Anthropic OAuth; web search uses `web_search_20250305` and vision sends the image to Claude for description | An enabled `adapter: "anthropic"`, `authMode: "oauth"` provider whose active stored account is not marked `needsReauth` | +| `chat` (vision only) | An OpenAI-compatible Chat Completions request through the selected configured provider | An enabled `openai-chat` or `google` provider with an API key/key pool or supported active OAuth account; keyless is limited to `openai-chat` local/key-optional providers | + +For `chat`, set `visionSidecar.model` to a provider-qualified `provider/model` value to select +exactly one provider. A bare model is accepted only when one usable provider's configured +`defaultModel`/`models` list matches it; ambiguous and live-only matches fail closed. Google is never +keyless. An explicit `backend` always wins. When it is omitted, the **web-search** sidecar always selects `openai` (`anthropic` runs only when explicitly configured), while the **vision** sidecar selects @@ -365,13 +372,13 @@ images are cached by backend, model, detail, image bytes, and request context, s image-and-context pair is not described again on every replay. Remote `https:` images are never cached because their contents can change. -See the [configuration reference](/reference/configuration/#sidecars) for every key. +See the [configuration reference](/reference/configuration/#sidecars) for every key. The Dashboard +sidecar card exposes the same vision backend/model selection, **Off**, and advanced settings; Claude's +page adds separate overrides with **Use main setting** and **Auto** inheritance controls. Anthropic-OAuth web search and image description reuse the repository's existing Claude Code OAuth fingerprint precedent, but should still be soak-tested with your account and workload before you depend on them for long unattended runs. - - ## Reasoning effort Claude Code's `/effort` setting is preserved across the adapter: @@ -484,8 +491,11 @@ the search but Claude Code still counted zero. **A sidecar does not activate** — For `backend: "openai"`, confirm you are logged into ChatGPT and have an enabled `authMode: "forward"` provider. For `backend: "anthropic"`, confirm the active stored -Anthropic OAuth account is not marked `needsReauth`. An explicit Anthropic selection without that -credential intentionally fails closed. +Anthropic OAuth account is not marked `needsReauth`. For vision `backend: "chat"`, use a provider-qualified +`provider/model` and confirm that the selected enabled `openai-chat` or `google` provider has a key, +key pool, or supported active OAuth account (keyless is only for local/key-optional `openai-chat`). +Ambiguous bare models and live-only bare matches intentionally fail closed. An explicit Anthropic +selection without its credential also fails closed. **"claude.ai connectors are disabled"** — An `ANTHROPIC_API_KEY` or `ANTHROPIC_AUTH_TOKEN` is set in your shell. `ocx claude` deliberately does NOT set `ANTHROPIC_API_KEY`; if you have it exported, diff --git a/docs-site/src/content/docs/guides/sidecars.md b/docs-site/src/content/docs/guides/sidecars.md index d92316d796..a3e6f1260c 100644 --- a/docs-site/src/content/docs/guides/sidecars.md +++ b/docs-site/src/content/docs/guides/sidecars.md @@ -1,13 +1,14 @@ --- title: "Sidecars: Web Search & Vision" -description: Give routed models real web search and text-only models image understanding through native ChatGPT sidecars. +description: Give routed models real web search and text-only models image understanding through explicit, provider-backed sidecars. --- Routed models do not all expose hosted **web search** or native **image input**. opencodex backfills those capabilities with two sidecars. Both support a ChatGPT-login (`forward`) provider or stored Anthropic OAuth provider; web search can additionally use stored Grok OAuth through the explicit -`xai` backend. Sidecar errors become bounded tool results or image markers instead of failing the -whole turn. +`xai` backend. Vision can additionally use the `chat` backend, which sends the image to a configured +chat-compatible provider. Sidecar errors become bounded tool results or image markers instead of +failing the whole turn. :::note[Automatic backend selection] Explicit `backend` config wins. The two sidecars default differently when `backend` is unset: @@ -15,7 +16,10 @@ Explicit `backend` config wins. The two sidecars default differently when `backe **Vision** defaults to `anthropic` if an enabled Anthropic OAuth provider has an active account not marked `needsReauth`, otherwise `openai`. Explicit `anthropic` without that credential fails closed. Explicit `xai` requires a usable stored Grok OAuth account and does not fall back. `openai` -requires both ChatGPT login auth and an enabled `forward` provider. +requires both ChatGPT login auth and an enabled `forward` provider. The `chat` backend is vision-only: +its model should be written as `provider/model` and must resolve to an enabled `openai-chat` or +`google` provider with usable credentials. Keyless operation is allowed only for local/key-optional +`openai-chat` providers; Google is never keyless. ::: ### Additional web-search backends (explicit-only) @@ -124,20 +128,41 @@ failures after response headers have started are delivered as `response.failed` ## Vision sidecar When the routed model is listed in its provider's `noVisionModels` and a request carries an image, -opencodex describes each image **before** the main call and replaces it with text. When -`visionSidecar.model` is absent or blank, the OpenAI execution path, Dashboard, and management API -use the `gpt-5.4-mini` fallback. Startup still migrates an explicitly persisted legacy -`gpt-5.4-mini` value to `gpt-5.6-luna`; that migration applies to a stored value, not to an absent -model field. +opencodex describes each image **before** the main call and replaces it with text. Vision is explicit: +choose a model and backend, or select **Off**. The `chat` backend is vision-only and uses the configured +provider-qualified `provider/model` target; it does not run web search. + +For `openai`/`anthropic`, when `visionSidecar.model` is absent or blank, the OpenAI execution path, +Dashboard, and management API use the `gpt-5.4-mini` fallback. Startup still migrates an explicitly +persisted legacy `gpt-5.4-mini` value to `gpt-5.6-luna`; that migration applies to a stored value, not +to an absent model field. + +For `chat`, the model is resolved as follows: + +- `provider/model` selects exactly that configured provider. The provider must be enabled, use + `openai-chat` or `google`, and have a usable API key/key pool or supported active OAuth account. +- A bare model id is accepted only when exactly one usable provider's configured `defaultModel` or + `models` list matches it. Bare matches are not inferred from live-only discovery, and ambiguous + matches fail closed rather than choosing an arbitrary provider. +- The selected provider's published model id is sent upstream. Keyless operation is limited to + `openai-chat` providers marked `authMode: "local"` or `keyOptional: true`; Google requires usable + credentials, either an API key/key pool or supported OAuth with a healthy active account. + +The provider-qualified form is recommended whenever more than one chat-compatible provider could +serve the same model id. - Images can come from user, developer, and tool-result messages, including Codex's `view_image`. - On the OpenAI path (ChatGPT-login passthrough), each image is sent to the configured vision model over the Responses endpoint with the selected `reasoning.effort` (`low` by default), and its description replaces the image part inline. The Anthropic path uses the Messages endpoint with its - own thinking-budget mapping and ignores this OpenAI-specific setting. + own thinking-budget mapping and ignores this OpenAI-specific setting. The chat path uses the + selected provider's wire: `openai-chat` sends OpenAI-compatible `POST /chat/completions`, while + `google` uses the native Gemini `streamGenerateContent` adapter (AI Studio, Vertex, or Cloud Code + Assist as configured). - For native models with known capability metadata, unsupported reasoning is normalized to the highest supported rung at or below the requested level; if none exists, the lowest supported rung is used. Unknown or custom models remain permissive when reliable capability metadata is absent. + The chat backend uses the selected provider/model's effective reasoning ladder. - Descriptions run with bounded concurrency (3 at a time, input order preserved). User context sent to the describer is capped at 800 characters, and each injected description is capped at 2,000 characters. The request does not send `max_output_tokens`, which the ChatGPT backend rejects. @@ -156,8 +181,11 @@ model field. The management API and Dashboard picker now list models that can actually accept image input. When the matching backend is available, `gpt-5.6-luna` (OpenAI) and `claude-haiku-4-5` (Anthropic) -are always offered as baseline options. `PUT /api/sidecar-settings` rejects a model known to be -text-only, but still accepts an unknown id so custom or ahead-of-catalog names keep working. +are always offered as baseline options. Chat options come from usable configured `openai-chat` or +`google` providers and are displayed as provider-qualified values such as `google/gemini-flash`. +`PUT /api/sidecar-settings` rejects a model known to be text-only, but still accepts an unknown id so +custom or ahead-of-catalog names keep working; a chat target that cannot resolve to a usable provider +is not executed. ```json { @@ -188,11 +216,16 @@ A model is marked text-only per provider: ## Dashboard controls and disabling -The Dashboard Vision sidecar card can enable or disable the sidecar, set -`maxDescriptionsPerTurn`, and set `timeoutMs`, along with the existing model, -backend, and reasoning controls. Disabling the sidecar does not delete those -settings; turning it back on keeps the previous model, backend, reasoning, -timeout, and limit. +The Dashboard Vision sidecar card uses the model picker as the activation control: choose a listed +OpenAI, Anthropic, or provider-qualified Chat model, or choose **Off**. The backend is inferred from +an eligible model; the advanced settings popover contains reasoning, `maxDescriptionsPerTurn`, and +`timeoutMs`. Web Search has its own model/backend controls and does not offer Chat, because Chat is +vision-only. Changes apply on the next request. + +Disabling the Vision sidecar does not delete its settings; turning it back on keeps the previous model, +backend, reasoning, timeout, and limit. The Claude Code page has separate per-surface overrides: **Use +main setting** inherits the global setting, **Auto** leaves backend selection unset, and an explicit +backend/model override is saved only for Claude-originated requests. `PUT /api/sidecar-settings` accepts the same fields. Partial updates leave omitted keys unchanged. `timeoutMs` uses the runtime integer bounds diff --git a/docs-site/src/content/docs/guides/web-dashboard.md b/docs-site/src/content/docs/guides/web-dashboard.md index 6c2ca81e05..4accc10718 100644 --- a/docs-site/src/content/docs/guides/web-dashboard.md +++ b/docs-site/src/content/docs/guides/web-dashboard.md @@ -40,7 +40,7 @@ the browser or password manager's decision. | --- | --- | | **Dashboard summary** | Multi-agent mode, online state, version, uptime, provider count, 30-day token total, active providers, and available native/routed models. | | **Sub-agent delegation** | Choose a native or routed model and optional reasoning effort shared by OpenCodex delegation guidance and the separate native-default opt-in. This is not a proxy-side per-spawn router; see below. | -| **Sidecars** | Choose the web-search model and effort plus the vision-description model. Changes apply on the next request. | +| **Sidecars** | Choose the web-search backend/model and effort plus the vision backend/model. Web search offers OpenAI or Anthropic; vision also offers provider-backed Chat, and **Off** disables vision without deleting its settings. Advanced vision controls include reasoning, description limit, and timeout. Changes apply on the next request. | | **Maintenance** | Resync the Codex model catalog, inspect project-local config bypass warnings, check the latest or preview release, and run an update with optional proxy restart. | | **Startup safety** | Show whether injected Codex routing survives a restart, with separate service and launcher-shim health plus exact repair commands. | | **Windows tray** | Install a per-user login tray for one-click proxy start, stop, restart, dashboard access, and status. The tray is a controller, not a proxy restart service. | @@ -203,7 +203,7 @@ The GUI is a thin client over the proxy's JSON management API. Useful endpoints | `GET` / `POST /api/windows-tray` | Read or change the Windows tray installation and visible-process state. POST accepts `install`, `start`, `stop`, or `uninstall`. | | `POST /api/sync` | Rebuild the shared model catalog and stale the Codex model cache. | | `GET /api/update/check` · `POST /api/update/run` · `GET /api/update/status` | Check, run, and monitor self-update jobs. Worker PIDs are persisted so a crashed job recovers automatically; legacy no-PID jobs recover after ten minutes. | -| `GET` / `PUT /api/sidecar-settings` | Read or set search/vision sidecar model settings. | +| `GET` / `PUT /api/sidecar-settings` | Read or set search/vision sidecar backend, model, and vision advanced settings. Web search accepts only OpenAI/Anthropic; vision may use provider-qualified Chat. | | `GET` / `PUT /api/injection-model` | Read or set the shared sub-agent model/effort selection and the independent guidance/native-default switches. | | `GET` / `PUT /api/v2` | Read or set the surface mode, Codex feature flag, and v2 thread limit. | | `GET /api/providers` · `POST /api/providers` · `PATCH /api/providers?name=...` · `DELETE /api/providers?name=...` | List, add/replace, enable/disable, set the default, or remove providers. `PATCH` uses standalone `{ "setDefault": true }` on an enabled provider; `POST` may include `setDefault` when creating/replacing (also enabled-only). Deleting the current default reassigns to the first remaining enabled provider when one exists; otherwise the API returns `409` with `code: "last_provider"` and keeps the current default. | diff --git a/docs-site/src/content/docs/ja/getting-started/how-it-works.mdx b/docs-site/src/content/docs/ja/getting-started/how-it-works.mdx index d19b222213..f3fa6aecff 100644 --- a/docs-site/src/content/docs/ja/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/ja/getting-started/how-it-works.mdx @@ -69,8 +69,9 @@ Codex は OpenAI **Responses API** を使います。opencodex は HTTP と Serv パススルーアダプターは進みません。 4. **Vision サイドカー(任意)** — ルーティングされたモデルが `provider.noVisionModels` に列挙されており - リクエストに画像が含まれる場合、opencodex は設定された ChatGPT vision サイドカーで各画像を説明した - 後テキストに置き換えます。これによりテキスト専用モデルでも該当画像を推論できます。 + リクエストに画像が含まれる場合、opencodex は設定された vision backend（ChatGPT ログイン経由の OpenAI、 + OAuth 経由の Anthropic、または明示的な `provider/model` を使う Vision 専用の Chat backend）で各画像を + 説明した後、テキストに置き換えます。これによりテキスト専用モデルでも該当画像を推論できます。 [サイドカー](/ja/guides/sidecars/)を参照してください。 5. **パススルーの高速経路** — Responses パススルーアダプター(`openai-responses` または diff --git a/docs-site/src/content/docs/ja/getting-started/installation.md b/docs-site/src/content/docs/ja/getting-started/installation.md index 52ff9d1781..f72fdc64e0 100644 --- a/docs-site/src/content/docs/ja/getting-started/installation.md +++ b/docs-site/src/content/docs/ja/getting-started/installation.md @@ -5,7 +5,8 @@ description: opencodex(ocx)プロキシと前提条件をインストールし opencodex をインストールすると同じ実行ファイルを指す `ocx` と `opencodex` コマンドが一緒に提供されます。 どちらも Bun ベースの小さなローカル HTTP サーバーを実行します。モデルリクエストはルーティングで選ばれたプロバイダーに -転送され、必要に応じて vision とウェブ検索のサイドカーが ChatGPT ログインを使うこともあります。 +転送されます。Vision サイドカーは ChatGPT ログイン経由の OpenAI、OAuth 経由の Anthropic、または +明示的な `provider/model` を使う Vision 専用の Chat backend に対応します。 ## 前提条件 diff --git a/docs-site/src/content/docs/ja/guides/claude-code.md b/docs-site/src/content/docs/ja/guides/claude-code.md index bc7e84e39d..645f713d6a 100644 --- a/docs-site/src/content/docs/ja/guides/claude-code.md +++ b/docs-site/src/content/docs/ja/guides/claude-code.md @@ -246,8 +246,6 @@ Anthropic OAuth のウェブ検索と画像説明は保存所ですでに使っ fingerprint 方式をそのまま踏襲しますが、長時間の無人作業に使う前に自身のアカウントと実際の作業で 十分 soak test するのが無難です。 - - ## 推論負荷 Claude Code の `/effort` 設定はアダプターでも維持されます。 diff --git a/docs-site/src/content/docs/ko/getting-started/how-it-works.mdx b/docs-site/src/content/docs/ko/getting-started/how-it-works.mdx index 9cc23b7c34..218510dc3e 100644 --- a/docs-site/src/content/docs/ko/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/ko/getting-started/how-it-works.mdx @@ -69,8 +69,9 @@ reasoning effort를 알려 줍니다. v2 요청은 Codex가 제공하는 멀티 passthrough adapter가 계속 진행하지 않습니다. 4. **Vision sidecar(선택)** — 라우팅된 모델이 `provider.noVisionModels`에 나열되어 있고 - 요청에 이미지가 포함된 경우, opencodex는 설정된 ChatGPT vision sidecar로 각 이미지를 설명한 - 뒤 텍스트로 치환합니다. 덕분에 텍스트 전용 모델도 해당 이미지에 대해 추론할 수 있습니다. + 요청에 이미지가 포함된 경우, opencodex는 설정된 vision backend(ChatGPT 로그인 기반 OpenAI, + OAuth 기반 Anthropic, 또는 명시적 `provider/model`을 사용하는 vision 전용 Chat backend)로 각 이미지를 + 설명한 뒤 텍스트로 치환합니다. 덕분에 텍스트 전용 모델도 해당 이미지에 대해 추론할 수 있습니다. [Sidecar](/ko/guides/sidecars/)를 참고하세요. 5. **Passthrough 빠른 경로** — Responses 패스스루 adapter(`openai-responses` 또는 diff --git a/docs-site/src/content/docs/ko/getting-started/installation.md b/docs-site/src/content/docs/ko/getting-started/installation.md index 1dfff4b156..0d2e5b3950 100644 --- a/docs-site/src/content/docs/ko/getting-started/installation.md +++ b/docs-site/src/content/docs/ko/getting-started/installation.md @@ -5,7 +5,8 @@ description: opencodex(ocx) 프록시와 사전 요구 사항을 설치하고, opencodex를 설치하면 같은 실행 파일을 가리키는 `ocx`와 `opencodex` 명령이 함께 제공됩니다. 둘 다 Bun 기반의 작은 로컬 HTTP 서버를 실행합니다. 모델 요청은 라우팅으로 선택된 프로바이더에 -전달되며, 필요할 때 vision 및 웹 검색 sidecar가 ChatGPT 로그인을 사용할 수도 있습니다. +전달됩니다. Vision sidecar는 ChatGPT 로그인 기반 OpenAI, OAuth 기반 Anthropic, 또는 명시적 +`provider/model`을 사용하는 vision 전용 Chat backend를 지원합니다. ## 사전 요구 사항 diff --git a/docs-site/src/content/docs/ko/guides/claude-code.md b/docs-site/src/content/docs/ko/guides/claude-code.md index 0183b5b72f..ccb75634b3 100644 --- a/docs-site/src/content/docs/ko/guides/claude-code.md +++ b/docs-site/src/content/docs/ko/guides/claude-code.md @@ -283,8 +283,6 @@ ChatGPT bearer는 메인 라우팅 프로바이더에는 전달하지 않아요. fingerprint 방식을 그대로 따르지만, 장시간 무인 작업에 쓰기 전에는 본인 계정과 실제 작업으로 충분히 soak test하는 편이 좋아요. - - ## 추론 강도 Claude Code의 `/effort` 설정은 어댑터에서도 유지돼요. diff --git a/docs-site/src/content/docs/reference/adapters.md b/docs-site/src/content/docs/reference/adapters.md index 29859992f7..41a2bfb779 100644 --- a/docs-site/src/content/docs/reference/adapters.md +++ b/docs-site/src/content/docs/reference/adapters.md @@ -106,8 +106,10 @@ of the HTTP retry loop. ## `google` -**Targets:** Google **Gemini**, **Vertex AI**, and Antigravity **Cloud Code Assist**. AI Studio uses -`/v1beta/models/{model}:streamGenerateContent`; the other modes use their native Google endpoints. +**Targets:** Google **Gemini**, **Vertex AI**, and Antigravity **Cloud Code Assist** through Google's +native adapter. AI Studio uses `/v1beta/models/{model}:streamGenerateContent`; the other modes use + their native Google endpoints. This is separate from `openai-chat`, which targets OpenAI-compatible +`POST {baseUrl}/chat/completions`. **Auth:** API key, Vertex ADC, or Google Antigravity OAuth, selected by `googleMode`. - System prompt → `systemInstruction`; messages → `contents[]` (assistant → `model`); tools → diff --git a/docs-site/src/content/docs/reference/architecture.md b/docs-site/src/content/docs/reference/architecture.md index 180c043a88..66fc5ffedc 100644 --- a/docs-site/src/content/docs/reference/architecture.md +++ b/docs-site/src/content/docs/reference/architecture.md @@ -62,7 +62,7 @@ the `server/responses.ts` facade and its `server/responses/*.ts` modules: seven adapters. Responses passthrough relays the native body, Cursor runs its bidirectional `runTurn` transport, and translated adapters build/fetch/parse an upstream request. 6. For routed models with a hosted `web_search` tool, `web-search/` exposes a synthetic function, - executes the real search through the configured backend (the OpenAI/ChatGPT sidecar or Anthropic), + executes the real search through the configured OpenAI/ChatGPT or Anthropic backend, feeds results back to the routed model, and repeats within the configured loop limit. This loop supports only the standard HTTP path; adapters that implement `runTurn`, such as Cursor, bypass it. 7. `bridge.ts` produces Responses SSE or JSON. `server/request-log.ts` and `usage/` collect terminal diff --git a/docs-site/src/content/docs/reference/configuration/providers.md b/docs-site/src/content/docs/reference/configuration/providers.md index 842d9a6efa..2c7111b4cc 100644 --- a/docs-site/src/content/docs/reference/configuration/providers.md +++ b/docs-site/src/content/docs/reference/configuration/providers.md @@ -119,7 +119,7 @@ differing backup and rewrites known legacy namespaced selected ids to bare ids. | `requiresReasoningPlaceholderModels?` | `string[]` | Models whose upstream rejects a tool_call continuation missing `reasoning_content` (DeepSeek thinking mode); a minimal placeholder is injected when the replay cache misses. Defaults to `preserveReasoningContentModels`; set `[]` to opt out. | | `thinkingToggleModels?` | `string[]` | Chat models using `thinking.enabled` rather than an effort ladder. | | `thinkingBudgetModels?` | `string[]` | Chat models using integer `thinking_budget`; effort maps to a budget fraction. | -| `noVisionModels?` | `string[]` | Text-only models sent through the vision sidecar; matching tolerates an Ollama `:size` tag. | +| `noVisionModels?` | `string[]` | Text-only models sent through the vision sidecar; matching tolerates an Ollama `:size` tag. The vision `chat` backend can use configured `openai-chat` or `google` providers, but its target is provider-qualified (`provider/model`) when selecting a specific provider. | | `escapeBuiltinToolNames?` | `boolean` | Escape built-in tool names for Anthropic-compatible gateways and restore them in returned calls. | | `anthropicEofTolerance?` | `boolean` | Let an Anthropic-compatible gateway complete a stream that ends before `message_stop`, only when visible text or a complete JSON-object tool input was received. Off by default. | | `googleMode?` | `"ai-studio" \| "vertex" \| "cloud-code-assist"` | Google transport/auth mode. Default `ai-studio`. | diff --git a/docs-site/src/content/docs/reference/configuration/server.md b/docs-site/src/content/docs/reference/configuration/server.md index 5ddf5588bc..f5831cc773 100644 --- a/docs-site/src/content/docs/reference/configuration/server.md +++ b/docs-site/src/content/docs/reference/configuration/server.md @@ -205,7 +205,7 @@ Images API paths and response shape expected by Codex. | Field | Type | Default | Meaning | | --- | --- | --- | --- | | `enabled?` | `boolean` | on when usable | Master switch. | -| `backend?` | `"openai" \| "anthropic" \| "xai" \| "gemini" \| "exa"` | `openai` | Explicit wins; unset always resolves to `openai`. `anthropic` and `xai` run only when explicitly configured; `gemini` and `exa` remain reserved until their executors ship. | +| `backend?` | `"openai" \| "anthropic" \| "xai" \| "gemini" \| "exa"` | `openai` | Explicit wins; unset always resolves to `openai`. `anthropic`, `xai`, `gemini`, and `exa` run only when explicitly configured. `chat` is not a web-search backend. | | `model?` | `string` | backend-dependent | `gpt-5.6-luna` for OpenAI, `claude-sonnet-5` for Anthropic, or `grok-4.6` for xAI. Legacy explicit `gpt-5.4-mini` migrates on start. | | `exaApiKey?` | `string` | none | Operator key for the `exa` backend. Write-only: management reads never return the stored value. | | `xSearch?` | `object` | omitted | xAI-only opt-in for hosted `x_search`: `enabled`, mutually exclusive `allowedXHandles` / `excludedXHandles` arrays (maximum 20), and ISO `fromDate` / `toDate` (`YYYY-MM-DD`). | @@ -223,6 +223,7 @@ hosted `web_search`, and adds hosted `x_search` when `xSearch.enabled` is true. management input returns `400`; a malformed persisted block fails closed during planning. The `gemini` and `exa` lanes never activate from credential discovery or fallback; the operator must select them explicitly. `exaApiKey` is accepted on writes but omitted from management responses. +The `chat` backend belongs to the vision sidecar only. Four clocks govern search: base `stallTimeoutSec`, `connectTimeoutMs`, routed-model inactivity, and hosted-search timeout. The effective bridge watchdog is the maximum plus 30 seconds. Routed stall is @@ -233,16 +234,22 @@ an inactivity guard, not a total generation deadline. | Field | Type | Default | Meaning | | --- | --- | --- | --- | | `enabled?` | `boolean` | on when usable | Master image-description switch. | -| `backend?` | `"openai" \| "anthropic"` | auto | Explicit wins; unset prefers a usable stored Anthropic OAuth credential, else `openai`. | -| `model?` | `string` | backend-dependent | `gpt-5.4-mini` for OpenAI or `claude-sonnet-5` for Anthropic. | +| `backend?` | `"openai" \| "anthropic" \| "chat"` | auto | Explicit wins; unset prefers a usable stored Anthropic OAuth credential, else `openai`. `chat` is vision-only and uses a configured `openai-chat` or `google` provider. | +| `model?` | `string` | backend-dependent | `gpt-5.4-mini` for OpenAI, `claude-sonnet-5` for Anthropic, or provider-qualified `provider/model` for Chat. | | `maxDescriptionsPerTurn?` | `number` | `8` | New description cache misses admitted per main turn. `0` disables calls; invalid values use default. | | `timeoutMs?` | `number` | `45000` | Sidecar fetch timeout. Integer 1–2147483647. | Vision activates only for images sent to a model in its provider's `noVisionModels`. OpenAI has the same login/forward requirements as search; explicitly selected Anthropic fails closed without a usable -credential. Successful `data:` descriptions use a bounded cache keyed by backend, model, detail, -image bytes, and normalized message context. Hits and same-turn duplicates do not consume the limit. -Remote `https:` images and failed or empty descriptions are not cached. +credential. For `chat`, the selected provider must be enabled and use `openai-chat` or `google`; it +must have an API key/key pool or a supported OAuth account. Keyless operation is allowed only for +`openai-chat` with `authMode: "local"` or `keyOptional: true`, never for Google. A provider-qualified +`provider/model` target selects exactly that provider. Bare Chat ids resolve only through one unique +configured `defaultModel`/`models` match; ambiguous or live-only matches fail closed. + +Successful `data:` descriptions use a bounded cache keyed by backend, model, detail, image bytes, and +normalized message context. Hits and same-turn duplicates do not consume the limit. Remote `https:` +images and failed or empty descriptions are not cached. Anthropic OAuth sidecars reuse opencodex's existing Claude Code OAuth fingerprint. Soak-test the intended account and workload. diff --git a/docs-site/src/content/docs/reference/management-api.md b/docs-site/src/content/docs/reference/management-api.md index bef307c3d5..a387cdd02f 100644 --- a/docs-site/src/content/docs/reference/management-api.md +++ b/docs-site/src/content/docs/reference/management-api.md @@ -111,7 +111,7 @@ See [Combos](/guides/combos/) for target strategies, cooldowns, aliases, and rou | `GET /api/update/check` | Check the `latest` or `preview` update channel | 400 invalid tag | | `POST /api/update/run` | Start an update job, optionally followed by restart | 400 invalid body; job-specific conflict/error status | | `GET /api/update/status` | Poll an update job by id | 404 unknown job | -| `GET, PUT /api/sidecar-settings` | Read or update web-search and vision sidecar model/backend settings | 400 invalid shape, backend, or limit | +| `GET, PUT /api/sidecar-settings` | Read or update web-search and vision sidecar backend/model settings; vision also accepts `enabled`, `reasoning`, `maxDescriptionsPerTurn`, and `timeoutMs` | 400 invalid shape, backend, model, or limit | | `GET, PUT /api/shadow-call-settings` | Read or update shadow-call interception settings | 400 invalid shape or value | ### Logs, usage, and storage diff --git a/docs-site/src/content/docs/ru/getting-started/how-it-works.mdx b/docs-site/src/content/docs/ru/getting-started/how-it-works.mdx index 00c83a2ef5..56ce47d4c9 100644 --- a/docs-site/src/content/docs/ru/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/ru/getting-started/how-it-works.mdx @@ -78,8 +78,9 @@ Codex даже не догадывается, что общается не с Op 4. **Vision-сайдкар (опционально)** — если маршрутизируемая модель указана в `provider.noVisionModels`, а запрос содержит изображение, opencodex описывает каждое - изображение с помощью настроенного vision-сайдкара ChatGPT и заменяет его текстом, чтобы - модель без поддержки изображений всё равно могла о нём рассуждать. + изображение через настроенный vision-бэкенд — OpenAI с входом ChatGPT, Anthropic через OAuth + или предназначенный только для vision Chat-бэкенд с явной целью `provider/model` — и заменяет его + текстом, чтобы модель без поддержки изображений всё равно могла о нём рассуждать. См. [Сайдкары](/ru/guides/sidecars/). 5. **Быстрый путь passthrough** — если адаптер является passthrough для Responses diff --git a/docs-site/src/content/docs/ru/getting-started/installation.md b/docs-site/src/content/docs/ru/getting-started/installation.md index 837178f7e4..a7506d1a30 100644 --- a/docs-site/src/content/docs/ru/getting-started/installation.md +++ b/docs-site/src/content/docs/ru/getting-started/installation.md @@ -5,8 +5,9 @@ description: Установите прокси opencodex (ocx) и необход opencodex устанавливает два эквивалентных имени команды: `ocx` и `opencodex`. Обе запускают один и тот же небольшой локальный HTTP-сервер (построенный на Bun). Запросы к моделям идут к провайдеру, -выбранному маршрутизацией; опциональные сайдкары для vision и веб-поиска также могут использовать -ваш вход в ChatGPT, когда они нужны маршрутизируемой модели. +выбранному маршрутизацией. Vision-сайдкар поддерживает OpenAI через вход ChatGPT, Anthropic через OAuth +или предназначенный только для vision Chat-бэкенд с явной целью `provider/model`; веб-поиск использует свои +отдельные бэкенды. ## Предварительные требования diff --git a/docs-site/src/content/docs/ru/guides/claude-code.md b/docs-site/src/content/docs/ru/guides/claude-code.md index b04612625b..0b807a8e3a 100644 --- a/docs-site/src/content/docs/ru/guides/claude-code.md +++ b/docs-site/src/content/docs/ru/guides/claude-code.md @@ -264,8 +264,6 @@ Claude Code — это лишь учётные данные для доступ подход к OAuth-отпечатку Claude Code, но, прежде чем полагаться на них в длительных автономных запусках, их стоит обкатать на вашем аккаунте и рабочей нагрузке. - - ## Уровень рассуждений Настройка `/effort` в Claude Code сохраняется при прохождении через адаптер: diff --git a/docs-site/src/content/docs/tr/getting-started/how-it-works.mdx b/docs-site/src/content/docs/tr/getting-started/how-it-works.mdx index 2da540397f..01df76b1f9 100644 --- a/docs-site/src/content/docs/tr/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/tr/getting-started/how-it-works.mdx @@ -90,9 +90,10 @@ istekleri Codex'in yerel çoklu ajan rehberliğini korur. 4. **Vizyon sidecar'ı (isteğe bağlı)** — yönlendirilen model `provider.noVisionModels` listesinde yer alıyorsa ve istek bir görsel - taşıyorsa, opencodex her görseli yapılandırılmış ChatGPT vizyon sidecar'ı ile - tanımlar ve metinle değiştirir; böylece salt metin bir model bile görsel - hakkında akıl yürütebilir. Bkz. [Sidecar'lar](/tr/guides/sidecars/). + taşıyorsa, opencodex her görseli yapılandırılmış vision arka ucuyla — ChatGPT oturumuyla OpenAI, + OAuth ile Anthropic veya açık bir `provider/model` hedefi kullanan yalnızca vision için Chat backend'i — + tanımlar ve metinle değiştirir; böylece salt metin bir model bile görsel hakkında akıl yürütebilir. + Bkz. [Sidecar'lar](/tr/guides/sidecars/). 5. **Doğrudan geçiş hızlı yolu (Passthrough fast path)** — adaptör bir Responses doğrudan geçişi ise (`openai-responses` veya `azure-openai`), opencodex diff --git a/docs-site/src/content/docs/tr/getting-started/installation.md b/docs-site/src/content/docs/tr/getting-started/installation.md index e138735b81..5c9fce37c7 100644 --- a/docs-site/src/content/docs/tr/getting-started/installation.md +++ b/docs-site/src/content/docs/tr/getting-started/installation.md @@ -6,8 +6,8 @@ description: opencodex (ocx) proxy'sini ve ön koşullarını kurun, çalıştı opencodex, `ocx` ve `opencodex` olmak üzere iki eşdeğer komut adı kurar. Her ikisi de aynı küçük yerel HTTP sunucusunu (Bun üzerinde oluşturulmuştur) başlatır. Model istekleri yönlendirme tarafından seçilen sağlayıcıya gider; -isteğe bağlı vizyon ve web araması sidecar'ları, yönlendirilen bir model ihtiyaç -duyduğunda ChatGPT oturumunuzu da kullanabilir. +isteğe bağlı sidecar'lar yönlendirilen bir modelin ihtiyaç duyduğu yetenekleri sağlar. Vizyon; ChatGPT oturumuyla +OpenAI'yi, OAuth ile Anthropic'i veya açık bir `provider/model` hedefi kullanan yalnızca vision için Chat backend'ini destekler. ## Ön Koşullar diff --git a/docs-site/src/content/docs/tr/reference/architecture.md b/docs-site/src/content/docs/tr/reference/architecture.md index 131c85e3e1..7fe86f82c1 100644 --- a/docs-site/src/content/docs/tr/reference/architecture.md +++ b/docs-site/src/content/docs/tr/reference/architecture.md @@ -72,8 +72,8 @@ devreder: gövdeyi iletir, Cursor çift yönlü `runTurn` aktarımını çalıştırır ve çevrilen adaptörler bir yukarı akış isteği oluşturur/getirir/ayrıştırır. 6. Barındırılan bir `web_search` aracına sahip yönlendirilen modeller için - `web-search/` sentetik bir fonksiyon sunar, gerçek aramayı ChatGPT sidecar'ı - aracılığıyla yürütür, sonuçları yönlendirilen modele geri besler ve + `web-search/` sentetik bir fonksiyon sunar, gerçek aramayı yapılandırılmış OpenAI/ChatGPT veya Anthropic + backend'i aracılığıyla yürütür, sonuçları yönlendirilen modele geri besler ve yapılandırılmış döngü sınırı içinde tekrarlar. 7. `bridge.ts` Responses SSE veya JSON üretir. `server/request-log.ts` ve `usage/` yanıtı değiştirmeden uç durumu, gecikmeyi, sağlayıcı/model diff --git a/docs-site/src/content/docs/zh-cn/getting-started/how-it-works.mdx b/docs-site/src/content/docs/zh-cn/getting-started/how-it-works.mdx index 4aed1da4f4..272dbb9667 100644 --- a/docs-site/src/content/docs/zh-cn/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/zh-cn/getting-started/how-it-works.mdx @@ -48,8 +48,9 @@ Sol/Terra/Luna 三个模型和 `gpt-5.4-mini`。仪表盘可以从原生或已 token 作为 bearer key,从而让现有的 adapter 无需改动即可完成认证。 4. **Vision sidecar(可选)** —— 如果已路由的模型被列在 `provider.noVisionModels` 中,且 - 请求携带了图像，opencodex 会通过你的 ChatGPT 登录凭据，使用已配置的 vision sidecar 描述 - 每张图像并将其替换为文本，让纯文本模型仍可对图像进行推理。 + 请求携带了图像，opencodex 会使用已配置的 vision 后端描述每张图像：OpenAI 使用 ChatGPT 登录， + Anthropic 使用 OAuth，或使用带明确 `provider/model` 目标、仅用于 Vision 的 Chat 后端；然后将图像替换为 + 文本，让纯文本模型仍可对图像进行推理。 参见 [Sidecar](/zh-cn/guides/sidecars/)。 5. **直通快速路径** —— 对于 Responses 直通 adapter（`openai-responses` 或 `azure-openai`）， diff --git a/docs-site/src/content/docs/zh-cn/getting-started/installation.md b/docs-site/src/content/docs/zh-cn/getting-started/installation.md index 8730fd20a4..e432fcff2b 100644 --- a/docs-site/src/content/docs/zh-cn/getting-started/installation.md +++ b/docs-site/src/content/docs/zh-cn/getting-started/installation.md @@ -5,7 +5,8 @@ description: 安装 opencodex(ocx)代理及其前置条件,并验证它能够运 安装 opencodex 后会得到 `ocx` 和 `opencodex` 两个等价命令，它们都指向同一个基于 Bun 的 小型本地 HTTP 服务器。模型请求会发往路由所选的 provider；当已路由模型需要时，可选的 -vision 和网络搜索 sidecar 也可以使用你的 ChatGPT 登录凭据。 +Vision sidecar 支持通过 ChatGPT 登录使用 OpenAI、通过 OAuth 使用 Anthropic，或使用带明确 +`provider/model` 目标、仅用于 Vision 的 Chat backend。 ## 前置条件 diff --git a/docs-site/src/content/docs/zh-cn/guides/claude-code.md b/docs-site/src/content/docs/zh-cn/guides/claude-code.md index e5140cb8a7..b0e59b1777 100644 --- a/docs-site/src/content/docs/zh-cn/guides/claude-code.md +++ b/docs-site/src/content/docs/zh-cn/guides/claude-code.md @@ -239,8 +239,6 @@ Claude 入站的路由重放会把主 ChatGPT 登录附加到内部请求，因 Search 和图像描述沿用仓库已有的 Claude Code OAuth fingerprint 先例，但在用于长时间无人值守任务前， 仍应使用你的账户和实际负载进行充分 soak test。 - - ## 推理强度 Claude Code 的 `/effort` 设置会完整保留并传递给适配器： diff --git a/docs-site/src/content/docs/zh-tw/getting-started/how-it-works.mdx b/docs-site/src/content/docs/zh-tw/getting-started/how-it-works.mdx index 14934a2968..dc57ef4a0a 100644 --- a/docs-site/src/content/docs/zh-tw/getting-started/how-it-works.mdx +++ b/docs-site/src/content/docs/zh-tw/getting-started/how-it-works.mdx @@ -65,8 +65,9 @@ Sol/Terra/Luna 三個模型和 `gpt-5.4-mini`。儀表板可以從原生或已 4. **Vision sidecar（可選）** —— 如果已路由的模型被列在 `provider.noVisionModels` 中，且 請求攜帶了圖像，opencodex 會透過已設定的 vision sidecar 描述每張圖像並替換為文字，讓純文字 - 模型仍可對圖像進行推理。後端可選 `openai`（ChatGPT 登入）或 `anthropic`（OAuth）；未設定時 - 會自動選擇，顯式 `anthropic` 但無可用憑證時會關閉失敗。 + 模型仍可對圖像進行推理。後端可選 OpenAI（ChatGPT 登入）、Anthropic（OAuth），或使用明確 + `provider/model` 目標、僅用於 Vision 的 Chat backend。未設定時會自動選擇，顯式 `anthropic` 但無可用 + 憑證時會關閉失敗。 參見 [Sidecar](/zh-tw/guides/sidecars/)。 5. **直通快速路徑** —— 對於 Responses 直通 adapter（`openai-responses` 或 `azure-openai`）， diff --git a/docs-site/src/content/docs/zh-tw/getting-started/installation.md b/docs-site/src/content/docs/zh-tw/getting-started/installation.md index 23b36b97da..4975989ed2 100644 --- a/docs-site/src/content/docs/zh-tw/getting-started/installation.md +++ b/docs-site/src/content/docs/zh-tw/getting-started/installation.md @@ -5,7 +5,8 @@ description: 安裝 opencodex(ocx)代理及其前置條件,並驗證它能夠執 安裝 opencodex 後會得到 `ocx` 和 `opencodex` 兩個等價命令，它們都指向同一個基於 Bun 的 小型本機 HTTP 伺服器。模型請求會發往路由所選的 provider；當已路由模型需要時，可選的 -vision 和網路搜尋 sidecar 也可以使用你的 ChatGPT 登入憑證。 +Vision sidecar 支援透過 ChatGPT 登入使用 OpenAI、透過 OAuth 使用 Anthropic，或使用帶有明確 +`provider/model` 目標、僅用於 Vision 的 Chat backend。 ## 前置條件 diff --git a/docs-site/src/content/docs/zh-tw/guides/claude-code.md b/docs-site/src/content/docs/zh-tw/guides/claude-code.md index be06746fba..d338d3a331 100644 --- a/docs-site/src/content/docs/zh-tw/guides/claude-code.md +++ b/docs-site/src/content/docs/zh-tw/guides/claude-code.md @@ -308,8 +308,6 @@ Claude 入站的路由重放會把主 ChatGPT 登入附加到內部請求，因 Search 和圖像描述沿用儲存庫已有的 Claude Code OAuth fingerprint 先例，但在用於長時間無人值守任務前， 仍應使用你的帳號和實際負載進行充分 soak test。 - - ## 推理強度 Claude Code 的 `/effort` 設定會完整保留並傳遞給適配器： diff --git a/gui/src/i18n/de.ts b/gui/src/i18n/de.ts index 8e64e29b97..8ec232cad3 100644 --- a/gui/src/i18n/de.ts +++ b/gui/src/i18n/de.ts @@ -302,6 +302,7 @@ export const de: Record = { "dash.backendAuto": "Automatisch", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "Sidecar-Einstellungen gespeichert. Angewendet bei der nächsten Anfrage.", "dash.sidecarSaveFailed": "Sidecar-Einstellungen konnten nicht gespeichert werden.", "dash.injectionLabel": "Sub-Agent-Delegation", diff --git a/gui/src/i18n/en.ts b/gui/src/i18n/en.ts index 262e913162..6b83a6f9bc 100644 --- a/gui/src/i18n/en.ts +++ b/gui/src/i18n/en.ts @@ -320,6 +320,7 @@ export const en = { "dash.backendAuto": "Auto", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "Sidecar settings saved. Applied on the next request.", "dash.sidecarSaveFailed": "Failed to save sidecar settings.", "dash.injectionLabel": "Sub-agent delegation", diff --git a/gui/src/i18n/fr.ts b/gui/src/i18n/fr.ts index 147773fd93..b36a4f5dce 100644 --- a/gui/src/i18n/fr.ts +++ b/gui/src/i18n/fr.ts @@ -310,6 +310,7 @@ export const fr: Record = { "dash.backendAuto": "Auto", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "API Chat", "dash.sidecarSaved": "Paramètres des services auxiliaires enregistrés. Ils s’appliqueront à la prochaine requête.", "dash.sidecarSaveFailed": "Échec de l’enregistrement des paramètres des services auxiliaires.", "dash.injectionLabel": "Délégation aux sous-agents", diff --git a/gui/src/i18n/ja.ts b/gui/src/i18n/ja.ts index 11a85127ea..36c4dec1be 100644 --- a/gui/src/i18n/ja.ts +++ b/gui/src/i18n/ja.ts @@ -311,6 +311,7 @@ export const ja: Record = { "dash.backendAuto": "自動", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "サイドカー設定を保存しました。次回リクエスト時に適用されます。", "dash.sidecarSaveFailed": "サイドカー設定の保存に失敗しました。", "dash.injectionLabel": "サブエージェント委任", diff --git a/gui/src/i18n/ko.ts b/gui/src/i18n/ko.ts index 5bbc14ae7d..9477152fed 100644 --- a/gui/src/i18n/ko.ts +++ b/gui/src/i18n/ko.ts @@ -306,6 +306,7 @@ export const ko: Record = { "dash.backendAuto": "자동", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "사이드카 설정이 저장됐습니다. 다음 요청부터 적용됩니다.", "dash.sidecarSaveFailed": "사이드카 설정 저장에 실패했습니다.", "dash.injectionLabel": "서브에이전트 위임", diff --git a/gui/src/i18n/ru.ts b/gui/src/i18n/ru.ts index 396ccf3ed0..7bb9b4efb2 100644 --- a/gui/src/i18n/ru.ts +++ b/gui/src/i18n/ru.ts @@ -311,6 +311,7 @@ export const ru: Record = { "dash.backendAuto": "Авто", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "Настройки сайдкара сохранены. Вступят в силу со следующего запроса.", "dash.sidecarSaveFailed": "Не удалось сохранить настройки сайдкара.", "dash.injectionLabel": "Делегирование подагентам", diff --git a/gui/src/i18n/tr.ts b/gui/src/i18n/tr.ts index f460bbeb36..72674c44bd 100644 --- a/gui/src/i18n/tr.ts +++ b/gui/src/i18n/tr.ts @@ -312,6 +312,7 @@ export const tr: Record = { "dash.backendAuto": "Otomatik", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Sohbet API", "dash.sidecarSaved": "Yan araç ayarları kaydedildi. Sonraki istekte uygulanacak.", "dash.sidecarSaveFailed": "Yan araç ayarları kaydedilemedi.", "dash.injectionLabel": "Alt ajan devri", diff --git a/gui/src/i18n/zh-TW.ts b/gui/src/i18n/zh-TW.ts index 942e21e61f..368a211983 100644 --- a/gui/src/i18n/zh-TW.ts +++ b/gui/src/i18n/zh-TW.ts @@ -205,6 +205,7 @@ export const zhTW: Record = { "dash.backendAuto": "自動", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "聊天 API", "dash.sidecarSaved": "附屬設定已儲存。將在下一個請求時生效。", "dash.sidecarSaveFailed": "儲存附屬設定失敗。", "dash.injectionLabel": "子代理委託", diff --git a/gui/src/i18n/zh.ts b/gui/src/i18n/zh.ts index b9cd4a3573..eab6d06ce6 100644 --- a/gui/src/i18n/zh.ts +++ b/gui/src/i18n/zh.ts @@ -306,6 +306,7 @@ export const zh: Record = { "dash.backendAuto": "自动", "dash.backendOpenAI": "OpenAI", "dash.backendAnthropic": "Anthropic", + "dash.backendChat": "Chat API", "dash.sidecarSaved": "附属设置已保存。将在下一个请求时生效。", "dash.sidecarSaveFailed": "保存附属设置失败。", "dash.injectionLabel": "子代理委托", diff --git a/gui/src/pages/claude-code-sections.tsx b/gui/src/pages/claude-code-sections.tsx index 70fa292fa4..183d23b3f5 100644 --- a/gui/src/pages/claude-code-sections.tsx +++ b/gui/src/pages/claude-code-sections.tsx @@ -170,6 +170,7 @@ export function ClaudeCodeSettingsCard({ { value: "auto", label: t("dash.backendAuto") }, { value: "openai", label: t("dash.backendOpenAI") }, { value: "anthropic", label: t("dash.backendAnthropic") }, + ...(key === "visionSidecar" ? [{ value: "chat", label: t("dash.backendChat") }] : []), ]} onChange={value => { // Auto may exist as an empty in-memory draft so the model input diff --git a/gui/src/pages/claude-manual-env.ts b/gui/src/pages/claude-manual-env.ts index 59f3360c83..65afc00a30 100644 --- a/gui/src/pages/claude-manual-env.ts +++ b/gui/src/pages/claude-manual-env.ts @@ -5,7 +5,7 @@ */ import { AUTO_COMPACT_WINDOW_DEFAULT } from "./claude-code-types"; -export type SidecarBackend = "openai" | "anthropic"; +export type SidecarBackend = "openai" | "anthropic" | "chat"; export interface SidecarOverride { backend?: SidecarBackend; model?: string } export interface ClaudeManualEnvState { diff --git a/gui/src/pages/dashboard-overview-sections.tsx b/gui/src/pages/dashboard-overview-sections.tsx index 6b944ed5eb..d312f8e6f9 100644 --- a/gui/src/pages/dashboard-overview-sections.tsx +++ b/gui/src/pages/dashboard-overview-sections.tsx @@ -557,7 +557,14 @@ export function DashboardSidecarPanels({ d }: { d: Dash }) { } const ladder = visionReasoningLadder(models, model); const reasoning = clampVisionReasoningToLadder(ladder, visionReasoning); - const patch: SidecarPatch = { vision: { model, backend: visionSidecarBackendForModel(models, visionModels, model), reasoning } }; + const backend = visionSidecarBackendForModel(models, visionModels, model); + const patch: SidecarPatch = { + vision: { + model, + ...(backend === "unresolved" ? { backend: null } : { backend }), + reasoning, + }, + }; // Choosing a model is the activation control: turning Vision back on from Off. if (!visionEnabled) patch.vision = { ...patch.vision, enabled: true }; void saveSidecar(patch); diff --git a/gui/src/pages/dashboard-shared.ts b/gui/src/pages/dashboard-shared.ts index 809d08c04f..83b3130d46 100644 --- a/gui/src/pages/dashboard-shared.ts +++ b/gui/src/pages/dashboard-shared.ts @@ -59,10 +59,12 @@ export interface SettingsData { diagnosticStale: boolean; }; } -export type SidecarBackend = "openai" | "anthropic"; +export type SidecarBackend = "openai" | "anthropic" | "chat"; +/** Web-search sidecars accept only OpenAI/Anthropic — `chat` is vision-only. */ +export type WebSearchBackend = "openai" | "anthropic"; export type VisionReasoning = "low" | "medium" | "high" | "xhigh" | "max"; -export interface SidecarSetting { - backend?: SidecarBackend; +export interface SidecarSetting { + backend?: B; model: string; reasoning?: VisionReasoning; streamRoutedModelOutput?: boolean; @@ -85,7 +87,7 @@ export interface WebSearchPickerOption { model?: string; } export interface SidecarData { - webSearch: SidecarSetting; + webSearch: SidecarSetting; vision: SidecarSetting; /** Server-computed eligible describers. Optional: an older server omits it and * the client falls back to the legacy provider-name list rather than showing @@ -97,7 +99,7 @@ export interface SidecarData { webSearchModels?: WebSearchModelOption[]; } export interface SidecarPatch { - webSearch?: { backend?: SidecarBackend | null; model?: string; streamRoutedModelOutput?: boolean }; + webSearch?: { backend?: WebSearchBackend | null; model?: string; streamRoutedModelOutput?: boolean }; vision?: { backend?: SidecarBackend | null; model?: string; @@ -186,10 +188,10 @@ export function updateJobLabel(status: UpdateJobStatus, t: (key: TKey) => string } } -export function mergeSidecarSetting( - current: SidecarSetting, +export function mergeSidecarSetting( + current: SidecarSetting, update?: { - backend?: SidecarBackend | null; + backend?: B | null; model?: string; reasoning?: VisionReasoning; streamRoutedModelOutput?: boolean; @@ -197,7 +199,7 @@ export function mergeSidecarSetting( maxDescriptionsPerTurn?: number; timeoutMs?: number; }, -): SidecarSetting { +): SidecarSetting { const merged = { ...current }; if (update?.model !== undefined) merged.model = update.model; if (update?.backend === null) delete merged.backend; @@ -359,11 +361,23 @@ export function visionModelOptions( current: string | undefined, currentBackend?: SidecarBackend, ): Array<{ value: string; label: string; backend?: SidecarBackend }> { - const options = serverOptions + const options: Array<{ value: string; label: string; backend?: SidecarBackend }> = serverOptions ? serverOptions.map(option => ({ value: option.value, label: option.label, backend: option.backend })) : sidecarModelOptions(models); - if (current && !options.some(option => option.value === current)) { - options.unshift({ value: current, label: current, ...(currentBackend ? { backend: currentBackend } : {}) }); + if (current) { + const currentOption = options.find(option => option.value === current); + if (currentOption) { + // On the legacy path, the persisted backend is stronger evidence than a + // catalog provider match. A chat-backed model can share an id with a + // catalog OpenAI row, and saving that row must not silently switch it. + if (serverOptions === undefined && currentBackend && currentOption.backend === undefined) { + currentOption.backend = currentBackend; + } + } else { + // A legacy server has no authoritative option/backend to provide, so keep + // the configured backend on a grandfathered model rather than guessing. + options.unshift({ value: current, label: current, ...(currentBackend ? { backend: currentBackend } : {}) }); + } } return options; } @@ -375,8 +389,21 @@ export function shadowCallModelOptions(models: ModelInfo[], current: string | un return out; } -export function sidecarBackendForModel(models: ModelInfo[], modelId: string): SidecarBackend { - return models.find(model => model.id === modelId)?.provider === "anthropic" ? "anthropic" : "openai"; +export type SidecarBackendResolution = SidecarBackend | "unresolved"; + +/** Resolve a catalog model without guessing across namespaces or providers. */ +export function sidecarBackendForModel(models: ModelInfo[], modelId: string): SidecarBackendResolution { + // Exact namespaced matches win; otherwise a bare id must match exactly one row. + // Ambiguous and unknown ids stay unresolved instead of persisting a guessed backend. + const namespacedMatches = models.filter(model => model.namespaced === modelId); + const matches = namespacedMatches.length > 0 + ? namespacedMatches + : models.filter(model => model.id === modelId); + if (matches.length !== 1) return "unresolved"; + const provider = matches[0]!.provider; + if (provider === "openai") return "openai"; + if (provider === "anthropic") return "anthropic"; + return "chat"; } /** Server provenance wins; catalog inference supports only legacy option rows. */ @@ -397,7 +424,7 @@ export function visionSidecarBackendForModel( models: ModelInfo[], options: Array<{ value: string; backend?: SidecarBackend }>, modelId: string, -): SidecarBackend { +): SidecarBackendResolution { return options.find(option => option.value === modelId)?.backend ?? sidecarBackendForModel(models, modelId); } diff --git a/gui/tests/claude-code-sidecar-draft.test.tsx b/gui/tests/claude-code-sidecar-draft.test.tsx index bfcc6cca85..8a4e55fd8c 100644 --- a/gui/tests/claude-code-sidecar-draft.test.tsx +++ b/gui/tests/claude-code-sidecar-draft.test.tsx @@ -117,6 +117,29 @@ test("Inherit → Auto stays Auto and enables the sidecar model input", async () await act(async () => { root.unmount(); }); }); +test("Chat is available only for the Vision override", async () => { + const { root, host } = await mountSettings(); + const [webSearchTrigger, visionTrigger] = sidecarBackendTriggers(host); + + await act(async () => { webSearchTrigger!.click(); }); + expect([...document.body.querySelectorAll('[role="option"]')] + .some(option => option.textContent?.includes("Chat API"))).toBe(false); + const webInherit = [...document.body.querySelectorAll('[role="option"]')] + .find(option => option.textContent?.includes("Use main setting")); + expect(webInherit).toBeTruthy(); + await act(async () => { webInherit!.click(); }); + + await act(async () => { visionTrigger!.click(); }); + expect([...document.body.querySelectorAll('[role="option"]')] + .some(option => option.textContent?.includes("Chat API"))).toBe(true); + const visionInherit = [...document.body.querySelectorAll('[role="option"]')] + .find(option => option.textContent?.includes("Use main setting")); + expect(visionInherit).toBeTruthy(); + await act(async () => { visionInherit!.click(); }); + + await act(async () => { root.unmount(); }); +}); + test("Empty Auto draft keeps model input enabled until Inherit is chosen", async () => { const { root, host, getState } = await mountSettings(); const [webSearchTrigger] = sidecarBackendTriggers(host); diff --git a/gui/tests/vision-model-options.test.ts b/gui/tests/vision-model-options.test.ts index 14c9cf4078..622603e5d6 100644 --- a/gui/tests/vision-model-options.test.ts +++ b/gui/tests/vision-model-options.test.ts @@ -70,9 +70,9 @@ test("a server-supplied vision backend wins when the catalog cannot identify its { value: model, label: model, backend: "anthropic" }, ], [], undefined); - // This documents the old save-path result: catalog inference alone defaults - // to OpenAI when there is no matching model row. - expect(sidecarBackendForModel([], model)).toBe("openai"); + // Catalog inference alone cannot name a backend for an unknown model. An + // unresolved result must never silently persist a guessed backend. + expect(sidecarBackendForModel([], model)).toBe("unresolved"); expect(visionSidecarBackendForModel([], options, model)).toBe("anthropic"); }); @@ -85,7 +85,19 @@ test("an older server with no option list cannot rewrite the persisted anthropic expect(options[0]).toMatchObject({ value: model, backend: "anthropic" }); expect(visionSidecarBackendForModel([], options, model)).toBe("anthropic"); - expect(sidecarBackendForModel([], model)).toBe("openai"); + expect(sidecarBackendForModel([], model)).toBe("unresolved"); +}); + +test("a legacy fallback keeps chat on the current option even when the catalog has the same id", () => { + const model = "shared-vision-model"; + const options = visionModelOptions(undefined, [ + { id: model, provider: "openai", namespaced: model }, + ], model, "chat"); + + // The catalog row is only a legacy fallback suggestion. The persisted chat backend must win + // for the current option, otherwise selecting it sends backend:null and reverts to auto. + expect(options[0]).toMatchObject({ value: model, backend: "chat" }); + expect(visionSidecarBackendForModel([], options, model)).toBe("chat"); }); test("an authoritative empty list still keeps the configured model and its backend", () => { @@ -109,3 +121,18 @@ test("a server web-search auth-slot option keeps its backend without a catalog r model, }); }); + +test("an ambiguous bare id is unresolved while an exact namespaced id wins", () => { + const shared: ModelInfo[] = [ + { id: "shared", provider: "openai", namespaced: "openai/shared" }, + { id: "shared", provider: "anthropic", namespaced: "anthropic/shared" }, + ]; + expect(sidecarBackendForModel(shared, "shared")).toBe("unresolved"); + expect(sidecarBackendForModel(shared, "anthropic/shared")).toBe("anthropic"); +}); + +test("a non-OpenAI and non-Anthropic catalog provider resolves to chat", () => { + const chat: ModelInfo = { id: "vision-chat", provider: "google", namespaced: "google/vision-chat" }; + expect(sidecarBackendForModel([chat], "google/vision-chat")).toBe("chat"); + expect(sidecarBackendForModel([chat], "vision-chat")).toBe("chat"); +}); diff --git a/readme/README.fr.md b/readme/README.fr.md index f4630952b9..5e46ecfdd2 100644 --- a/readme/README.fr.md +++ b/readme/README.fr.md @@ -145,9 +145,9 @@ bloqué les scripts d'installation de l'environnement inclus, consultez la [guide des sous-agents](https://opencodex.me/fr/guides/sub-agent-surface/). - **Connectez-vous une fois, oubliez la clé API** — OAuth pour xAI, Anthropic et Kimi ; ou transmettez `codex login`, collez une clé ou utilisez des références `${ENV_VAR}`. -- **Modules complémentaires de recherche web et de vision** — les modèles non-OpenAI bénéficient d'une - véritable recherche web et de la compréhension d'images grâce à un module complémentaire utilisant - votre connexion ChatGPT. +- **Modules complémentaires de recherche web et de vision** — la recherche web reste OpenAI/Anthropic ; + la vision peut aussi utiliser un backend Chat explicite via un fournisseur configuré (`provider/model`). + Consultez le [guide canonique des sidecars](https://opencodex.me/guides/sidecars/). - **Voyez ce qui se passe** — le tableau de bord affiche les fournisseurs, l'état OAuth, la sélection des modèles et un journal des requêtes en direct avec le nombre de jetons de cache. - **Arrêt propre, aucun résidu** — `ocx stop` restaure la configuration d'origine de Codex. diff --git a/readme/README.ja.md b/readme/README.ja.md index ff20cd2c90..6df581d0da 100644 --- a/readme/README.ja.md +++ b/readme/README.ja.md @@ -207,7 +207,7 @@ opencodex は 2 つの動作を分離して保持します: - **履歴セーフな注入。** ローカルインストールではプロキシは Codex 自身の組み込み `openai` プロバイダーを単一の `openai_base_url` 行で自身に向けるため、新しいスレッドはネイティブのプロバイダータグを維持し、進行中のチャット履歴が再マッピングされることはなく、クリーンでないシャットダウンでも隠せません。(古いバージョンで再タグ付けされたスレッドは初回起動時に一度だけマイグレートされます; リモート/LAN バインドは API キーヘッダーが必要なため、専用のプロバイダーエントリを使用します。) - **適切なモデルに委任。** ダッシュボードや config から最大 5 つのルーティング/ネイティブモデルを Codex サブエージェントピッカーに公開し、複雑なタスクは推論モデルへ、高速なタスクは安価なモデルへ送れます。v2 マルチエージェントサーフェス(GPT-5.6 Sol/Terra)ではプロキシが簡潔な委任ガイダンスを注入します。推奨サブエージェントモデル・負荷(`injectionModel` / `injectionEffort`)、公開モデルロスターと各モデルが対応する負荷ラダー、そしてクロスモデル `spawn_agent` オーバーライドを適用する `fork_turns` ルールまで。既知の制限: ネイティブの親がルーティング子をスポーンすると、タスク本文がバックエンド暗号化状態で到着し失われることがあります([#92](https://github.com/lidge-jun/opencodex/issues/92)) — 安定したクロスプロバイダー委任には v1 サーフェスを使ってください。表現を自分で書きたい場合は `injectionPrompt` に `{{model}}` / `{{effort}}` / `{{roster}}` プレースホルダーを入れてください。 - **preview gate された OpenAI ロールアウトに備える。** GPT-5.6 Sol/Terra/Luna の負荷ラダーを保存します。Direct/Multi は 372k Codex 契約を、OpenAI API と OpenRouter は 1.05M メタデータを使います。 -- **任意のモデルに超能力を。** OpenAI 以外のモデルも ChatGPT ログイン上で動く `gpt-5.4-mini` サイドカーで本当のウェブ検索と画像理解を得られます。 +- **Web 検索と Vision サイドカー。** Web 検索は OpenAI/Anthropic を使い、Vision は設定済みプロバイダー経由の明示的な Chat backend（`provider/model`）にも対応します。詳しくは[サイドカーガイド](https://opencodex.me/guides/sidecars/)を参照してください。 - **画像をネイティブに生成。** Codex の独立型 `image_gen` ツールは生成時に `POST /v1/images/generations`、編集時に `POST /v1/images/edits` を使います。Responses のホスト型 `image_generation` ツールとは別物です。 - **何が起きているかを可視化。** ウェブダッシュボードがプロバイダー、OAuth 状態、モデル選択、upstream が報告した cached/cache-write トークン数を含むライブリクエストログを表示します — なぜリクエストが失敗したか推測する必要はもうありません。 - **バックグラウンド実行。** システムサービス(launchd / systemd / Task Scheduler)としてインストールすれば起動時に自動開始され、気にする必要がありません。 diff --git a/readme/README.ko.md b/readme/README.ko.md index f7f11aef0a..ceee42fa78 100644 --- a/readme/README.ko.md +++ b/readme/README.ko.md @@ -198,7 +198,7 @@ opencodex는 두 가지 동작을 분리해서 유지합니다: - **Codex가 동작하는 모든 곳에서.** Codex CLI, TUI, App, SDK에 자동으로 주입됩니다. 라우팅된 모델이 네이티브 모델처럼 Codex 모델 선택기에 나타납니다. - **알맞은 모델에 위임.** 대시보드나 config에서 최대 5개의 라우팅/네이티브 모델을 Codex 서브에이전트 선택기에 노출해, 복잡한 작업은 reasoning 모델로, 빠른 작업은 저렴한 모델로 보낼 수 있습니다. v2 멀티에이전트 표면(GPT-5.6 Sol/Terra)에서는 프록시가 간결한 위임 가이드를 주입합니다. 선호 서브에이전트 모델·effort(`injectionModel` / `injectionEffort`), 노출된 모델 로스터와 각 모델이 지원하는 effort 사다리, 그리고 크로스모델 `spawn_agent` 오버라이드를 적용하는 `fork_turns` 규칙까지. 알려진 제한: 네이티브 부모가 라우팅 자식을 스폰하면 작업 본문이 백엔드 암호화 상태로 도착해 유실될 수 있습니다([#92](https://github.com/lidge-jun/opencodex/issues/92)) — 안정적인 크로스 프로바이더 위임에는 v1 표면을 쓰세요. 문구를 직접 쓰고 싶다면 `injectionPrompt`에 `{{model}}` / `{{effort}}` / `{{roster}}` 플레이스홀더를 넣으면 됩니다. - **프리뷰 게이트된 OpenAI rollout에 대비.** GPT-5.6 Sol/Terra/Luna의 effort 사다리를 보존합니다. Direct/Multi는 372k Codex 계약을, OpenAI API와 OpenRouter는 1.05M metadata를 사용합니다. -- **어떤 모델에도 초능력을.** OpenAI가 아닌 모델도 ChatGPT 로그인 위에서 도는 `gpt-5.4-mini` sidecar로 실제 웹 검색과 이미지 이해를 사용합니다. +- **Web 검색과 vision sidecar.** Web 검색은 OpenAI/Anthropic을 사용하며, vision은 구성된 provider를 통한 명시적 Chat backend(`provider/model`)도 지원합니다. 자세한 내용은 [sidecar 가이드](https://opencodex.me/guides/sidecars/)를 참조하세요. - **이미지를 네이티브로 생성.** Codex의 독립형 `image_gen` 도구는 생성할 때 `POST /v1/images/generations`, 편집할 때 `POST /v1/images/edits`를 사용합니다. Responses의 hosted `image_generation` 도구와는 별개입니다. - **무슨 일이 일어나는지 보이게.** 웹 대시보드가 프로바이더, OAuth 상태, 모델 선택, upstream이 보고한 cached/cache-write 토큰 수를 포함한 실시간 요청 로그를 보여줍니다 — 왜 요청이 실패했는지 더는 추측하지 않아도 됩니다. - **백그라운드 실행.** 시스템 서비스(launchd / systemd / Task Scheduler)로 설치하면 부팅 시 자동 시작되어 신경 쓸 필요가 없습니다. diff --git a/readme/README.ru.md b/readme/README.ru.md index 478c8772e9..d4c1e4d78e 100644 --- a/readme/README.ru.md +++ b/readme/README.ru.md @@ -233,7 +233,8 @@ OpenAI API-ключа и OpenRouter (`gpt-5.6-sol`, `gpt-5.6-terra`, `gpt-5.6-lu - **Встраивание без риска для истории.** При локальной установке прокси перенаправляет встроенный провайдер Codex `openai` на себя одной строкой `openai_base_url` — новые треды сохраняют нативный тег провайдера, поэтому текущая история чатов никогда не перепривязывается, и даже некорректное завершение работы не может её скрыть. (Треды, перетегированные старыми версиями, однократно мигрируются обратно при первом запуске; при удалённой/LAN-привязке вместо этого используется отдельная запись провайдера, поскольку ей нужен заголовок с API-ключом.) - **Делегируйте задачи подходящей модели.** Через панель управления или конфигурацию можно вывести до пяти маршрутизируемых или нативных моделей в селектор подагентов Codex — сложные задачи отправляйте модели с развитыми рассуждениями, быстрые — дешёвой. На мультиагентной поверхности v2 (GPT-5.6 Sol/Terra) прокси внедряет компактные указания по делегированию: предпочтительную модель и уровень рассуждений подагента (`injectionModel` / `injectionEffort`), список отобранных моделей со шкалой уровней, которую поддерживает каждая из них, и правила `fork_turns`, позволяющие кросс-модельным вызовам `spawn_agent` применять свои переопределения. Известное ограничение: когда нативный родитель порождает маршрутизируемого потомка, тело задачи в настоящий момент может прийти зашифрованным на бэкенде и потеряться ([#92](https://github.com/lidge-jun/opencodex/issues/92)) — для надёжного делегирования между провайдерами используйте поверхность v1. Хотите свои формулировки? Задайте `injectionPrompt` с плейсхолдерами `{{model}}` / `{{effort}}` / `{{roster}}`. - **Готовность к превью-релизам OpenAI.** Записи GPT-5.6 Sol/Terra/Luna сохраняют исходные шкалы уровней рассуждений. Direct/Multi используют контракт Codex на 372k токенов; OpenAI API и OpenRouter — метаданные на 1.05M, когда открыт вышестоящий доступ. -- **Суперспособности для любой модели.** Модели не от OpenAI получают настоящий веб-поиск и понимание изображений через сайдкар `gpt-5.4-mini`, работающий поверх вашего входа ChatGPT. +- **Веб-поиск и vision-сайдкары.** Веб-поиск использует OpenAI/Anthropic; vision также поддерживает + Chat-бэкенд через настроенного провайдера (`provider/model`). См. [руководство по сайдкарам](https://opencodex.me/guides/sidecars/). - **Нативная генерация изображений.** Автономный инструмент Codex `image_gen` использует `POST /v1/images/generations` для генерации и `POST /v1/images/edits` для правок; он не связан с размещённым инструментом Responses `image_generation`. - **Видно, что происходит.** Веб-панель управления показывает провайдеров, статус OAuth, выбор моделей и живой журнал запросов, включая количество кэшированных и записанных в кэш токенов, когда вышестоящий провайдер их сообщает, — больше не нужно гадать, почему запрос не прошёл. - **Работает в фоне.** Установите как системную службу (launchd / systemd / Task Scheduler) и забудьте о ней. На macOS/Linux прокси стартует при входе в систему; на Windows бэкенд Task Scheduler по умолчанию запускается при входе (без окон), либо используйте `ocx service install --native`, чтобы получить полноценную службу Windows, стартующую при загрузке. diff --git a/readme/README.tr.md b/readme/README.tr.md index a0388863cb..8bfaf8b838 100644 --- a/readme/README.tr.md +++ b/readme/README.tr.md @@ -85,7 +85,7 @@ ocx init # etkileşimli kurulum: ~/.opencodex/config.json yazar ve Codex'i - **Kombolar (Combos)** — Sağlayıcılar arasında yedekli (failover) veya ağırlıklı round-robin ile çalışan tek bir sanal model kimliği. [Kombo rehberine](https://opencodex.me/guides/combos/) bakın. - **Herhangi bir modelde alt ajanlar** — v1/v2 yüzey kontrolü ve yedekleme zincirleriyle Codex'in alt ajan seçicisinde yönlendirilen modelleri öne çıkarın. [Alt ajan rehberine](https://opencodex.me/guides/sub-agent-surface/) bakın. - **Bir kez giriş yapın, API anahtarını atlayın** — xAI, Anthropic ve Kimi için OAuth; veya `codex login` iletme, anahtar yapıştırma veya `${ENV_VAR}` referansları kullanma. -- **Web araması ve görsel yan araçları (sidecars)** — OpenAI dışı modeller, ChatGPT girişiniz üzerinden bir sidecar aracılığıyla gerçek web araması ve görsel anlama yeteneği kazanır. +- **Web araması ve görsel sidecar'ları** — Web araması OpenAI/Anthropic kullanır; vision ayrıca yapılandırılmış bir sağlayıcı üzerinden açık Chat backend'ini (`provider/model`) destekler. [Sidecar kılavuzuna](https://opencodex.me/guides/sidecars/) bakın. - **Ne olduğunu görün** — Panel; sağlayıcıları, OAuth durumunu, model seçimini ve önbellek jeton sayılarıyla canlı istek günlüğünü gösterir. - **Temiz çıkış, sıfır kalıntı** — `ocx stop` Codex'i orijinal yapılandırmasına geri döndürür. diff --git a/readme/README.zh-CN.md b/readme/README.zh-CN.md index fa7cc35c3a..1df9a1ddb8 100644 --- a/readme/README.zh-CN.md +++ b/readme/README.zh-CN.md @@ -133,7 +133,7 @@ npm 警告里给出的缩写命令缺少包名，会把当前目录重新安装 - **Codex 在哪里能用，它就在哪里能用。** 自动注入 Codex CLI、TUI、App 和 SDK。路由模型像原生模型一样出现在 Codex 的模型选择器里。 - **委派给合适的模型。** 在仪表盘或 config 中把最多 5 个路由/原生模型放进 Codex 的 subagent 选择器 —— 复杂任务交给 reasoning 模型，快速任务交给便宜模型。在 v2 多智能体表面（GPT-5.6 Sol/Terra）上，代理会注入精简的委派指引：首选子智能体模型与 effort（`injectionModel` / `injectionEffort`）、featured 模型清单及各自支持的 effort 阶梯，以及让跨模型 `spawn_agent` 覆盖得以应用的 `fork_turns` 规则。已知限制：原生父代理 spawn 路由子代理时，任务正文可能以后端加密形式到达而丢失（[#92](https://github.com/lidge-jun/opencodex/issues/92)）—— 需要可靠的跨 provider 委派请使用 v1 表面。想自定义文案，可在 `injectionPrompt` 中使用 `{{model}}` / `{{effort}}` / `{{roster}}` 占位符。 - **为 preview-gated OpenAI rollout 做好准备。** GPT-5.6 Sol/Terra/Luna 保留 upstream effort 阶梯。Direct/Multi 使用 372k Codex 契约，OpenAI API 与 OpenRouter 使用 1.05M 元数据。 -- **给任意模型超能力。** 非 OpenAI 模型也能通过你的 ChatGPT 登录上运行的 `gpt-5.4-mini` sidecar 获得真正的网页搜索和图片理解。 +- **Web Search 与 Vision sidecar。** Web Search 仍使用 OpenAI/Anthropic；Vision 也支持通过已配置 provider 的显式 Chat backend（`provider/model`）。详见 [sidecar 文档](https://opencodex.me/guides/sidecars/)。 - **原生生成图片。** Codex 的独立 `image_gen` 工具通过 `POST /v1/images/generations` 生成图片、通过 `POST /v1/images/edits` 编辑图片；它独立于 hosted Responses 的 `image_generation` 工具。 - **看清正在发生什么。** Web 仪表盘展示 provider、OAuth 状态、模型选择和实时请求日志；当上游返回时，也会包含 cached/cache-write token 计数 —— 不必再猜测请求为何失败。 - **后台运行。** 安装为系统服务（launchd / systemd / Task Scheduler）后开机自启，无需操心。 diff --git a/readme/README.zh-TW.md b/readme/README.zh-TW.md index d587a908cd..db322a1f87 100644 --- a/readme/README.zh-TW.md +++ b/readme/README.zh-TW.md @@ -120,7 +120,7 @@ npm 警告給的縮寫指令少了套件名，會把目前目錄重裝進去， - **Codex 在哪裡能用，它就在哪裡能用。** 自動注入 Codex CLI、TUI、App 和 SDK。路由模型像原生模型一樣出現在 Codex 的模型選擇器裡。 - **委派給合適的模型。** 在儀表板或 config 中把最多 5 個路由/原生模型放進 Codex 的 subagent 選擇器 —— 複雜任務交給 reasoning 模型，快速任務交給便宜模型。在 v2 多智慧體表面（GPT-5.6 Sol/Terra）上，代理會注入精簡的委派指引：首選子智慧體模型與 effort（`injectionModel` / `injectionEffort`）、featured 模型清單及各自支援的 effort 階梯，以及讓跨模型 `spawn_agent` 覆蓋得以應用的 `fork_turns` 規則。已知限制：原生父代理 spawn 路由子代理時，任務本文可能以後端加密形式到達而丟失（[#92](https://github.com/lidge-jun/opencodex/issues/92)）—— 需要可靠的跨 provider 委派請使用 v1 表面。想自訂文案，可在 `injectionPrompt` 中使用 `{{model}}` / `{{effort}}` / `{{roster}}` 預留位置。 - **為 preview-gated OpenAI rollout 做好準備。** GPT-5.6 Sol/Terra/Luna 保留 upstream effort 階梯。Direct/Multi 使用 372k Codex 契約，OpenAI API 與 OpenRouter 使用 1.05M 後設資料。 -- **給任意模型超能力。** 非 OpenAI 模型可透過 `gpt-5.4-mini` sidecar（使用你的 ChatGPT 登入）獲得真正的網頁搜尋與圖片理解。 +- **Web Search 與 Vision sidecar。** Web Search 仍使用 OpenAI/Anthropic；Vision 也支援透過已設定 provider 的明確 Chat backend（`provider/model`）。詳見 [sidecar 文件](https://opencodex.me/guides/sidecars/)。 - **原生生成圖片。** Codex 的獨立 `image_gen` 工具透過 `POST /v1/images/generations` 生成圖片、透過 `POST /v1/images/edits` 編輯圖片；它獨立於 hosted Responses 的 `image_generation` 工具。 - **看清正在發生什麼。** Web 儀表板展示 provider、OAuth 狀態、模型選擇和即時請求日誌；當上遊回傳時，也會包含 cached/cache-write token 計數 —— 不用再猜請求為何失敗。 - **背景執行。** 安裝為系統服務（launchd / systemd / Task Scheduler）後開機自啟，無需操心。 diff --git a/src/providers/api-keys.ts b/src/providers/api-keys.ts index 88a0d72238..a543903944 100644 --- a/src/providers/api-keys.ts +++ b/src/providers/api-keys.ts @@ -7,7 +7,7 @@ * A provider with a legacy bare `apiKey` is seeded into a one-entry pool on first touch. */ import { createHash } from "node:crypto"; -import { saveConfigPreservingClaudeCode } from "../config"; +import { resolveEnvValue, saveConfigPreservingClaudeCode } from "../config"; import type { OcxConfig, OcxProviderConfig } from "../types"; export interface ProviderApiKeyInfo { @@ -61,6 +61,24 @@ function activeEntryId(provider: OcxProviderConfig): string | null { return (pool.find(e => e.key === provider.apiKey) ?? pool[0]!).id; } +/** + * Resolve the non-mutating active credential for a provider. + * + * `provider.apiKey` is the active mirror, while `apiKeyPool` may contain the + * complete set of slots. Match that mirror to its pool entry instead of + * assuming the first slot is active. Environment references are resolved only + * for the returned value; the provider config and pool are never changed. + */ +export function resolveActiveProviderApiKey(provider: OcxProviderConfig): string | undefined { + const pool = provider.apiKeyPool ?? []; + const active = provider.apiKey !== undefined + ? pool.find(entry => entry.key === provider.apiKey) + : undefined; + const candidate = active?.key ?? provider.apiKey ?? pool[0]?.key; + const resolved = resolveEnvValue(candidate); + return sanitizeApiKeyValue(resolved); +} + export function listProviderApiKeys(config: OcxConfig, name: string): { activeId: string | null; keys: ProviderApiKeyInfo[] } { const provider = config.providers[name]; if (!provider || !isKeyAuthProvider(provider)) return { activeId: null, keys: [] }; diff --git a/src/server/management/agent-settings-routes.ts b/src/server/management/agent-settings-routes.ts index 2fbee7d5a9..080ac1b561 100644 --- a/src/server/management/agent-settings-routes.ts +++ b/src/server/management/agent-settings-routes.ts @@ -1073,13 +1073,10 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise const section = body[field]; if (section === undefined || section === null) continue; if (!isPlainObject(section)) return jsonResponse({ error: `${field} must be an object or null` }, 400); - // The widened union applies to the WEB-SEARCH override only (roadmap 060). - // Vision keeps its two-backend contract — accepting a wider id there would - // persist a backend the vision resolver reads as unset, silently activating - // a backend the operator never chose (review F1). + // Web search and vision intentionally expose different backend sets. const allowedBackends = field === "webSearchSidecar" ? ["openai", "anthropic", "xai", "gemini", "exa"] - : ["openai", "anthropic"]; + : ["openai", "anthropic", "chat"]; if (section.backend !== undefined && section.backend !== null && !allowedBackends.includes(section.backend as string)) { return jsonResponse({ error: `${field}.backend must be ${allowedBackends.join(", ")}, or null` }, 400); @@ -1138,9 +1135,11 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise delete next[field]; continue; } - // The per-field validation above guarantees vision only ever carries the two-member - // union; the cast is the loop's shared-shape compromise, not a wider write path. - const requested = section as { backend?: "openai" | "anthropic" | "xai" | "gemini" | "exa" | null; model?: string }; + // Validation above guarantees the backend belongs to this field's union. + const requested = section as { + backend?: "openai" | "anthropic" | "xai" | "gemini" | "exa" | "chat" | null; + model?: string; + }; const override = { ...next[field] } as NonNullable; if (requested.backend === null) delete override.backend; else if (requested.backend !== undefined) override.backend = requested.backend as never; diff --git a/src/server/management/config-routes.ts b/src/server/management/config-routes.ts index 1e5e1ad2c6..b3af0ede4a 100644 --- a/src/server/management/config-routes.ts +++ b/src/server/management/config-routes.ts @@ -592,8 +592,8 @@ export async function handleConfigRoutes(ctx: ManagementContext): Promise 0) backends.push("openai"); if (anthropicSidecar) backends.push("anthropic"); + // The chat describer needs a configured openai-chat/google provider with usable + // auth — same predicate the runtime chat sidecar resolver uses. + if (hasUsableChatVisionProvider(config)) backends.push("chat"); // Neither side resolvable (fresh install, no login): fall back to both so the // picker is populated rather than empty, matching the permissive-unknown rule. return backends.length > 0 ? backends : ["openai", "anthropic"]; } +/** Any configured chat/google provider the chat sidecar can actually execute. */ +function hasUsableChatVisionProvider(config: OcxConfig): boolean { + return Object.entries(config.providers ?? {}).some(([providerName, provider]) => + (provider.adapter === "openai-chat" || provider.adapter === "google") + && isChatVisionProviderUsable(providerName, provider), + ); +} + /** * Visible catalog rows in the shape the eligibility predicate consumes. * Sourced from the unified picker set (#2188): picker-visible rows ∪ auth diff --git a/src/server/responses/core.ts b/src/server/responses/core.ts index 22bf3c18c3..3fe28cf0ae 100644 --- a/src/server/responses/core.ts +++ b/src/server/responses/core.ts @@ -2728,6 +2728,15 @@ async function handleResponsesInner( const visionPlan = planVisionSidecar(config, route.provider, route.modelId, parsed, openAiSidecar); const recordSidecarOutcome = openAiSidecar?.recordOutcome; if (visionPlan) { + const visionProviderFetch = visionPlan.backend === "chat" && visionPlan.chatSidecar + ? providerFetch(visionPlan.chatSidecar.provider, options.codexWsRuntimeIdentity, { + providerName: visionPlan.chatSidecar.providerName, + modelId: visionPlan.chatSidecar.model, + }) + : providerFetch(route.provider, options.codexWsRuntimeIdentity, { + providerName: route.providerName, + modelId: route.modelId, + }); await describeImagesInPlace( parsed, visionPlan, @@ -2735,6 +2744,7 @@ async function handleResponsesInner( options.abortSignal, recordSidecarOutcome, translatorBudget, + visionProviderFetch, ); } else if (isModelTextOnly(route.provider, route.modelId)) { // Sidecar-covered model but NO plan (no forward provider / missing forwarded auth / sidecar diff --git a/src/types/config.ts b/src/types/config.ts index de84457743..b0a5df0153 100644 --- a/src/types/config.ts +++ b/src/types/config.ts @@ -130,7 +130,7 @@ export interface OcxClaudeCodeConfig { /** Claude-originated web-search override. Unset fields inherit the global sidecar settings. */ webSearchSidecar?: { backend?: "openai" | "anthropic" | "xai" | "gemini" | "exa"; model?: string }; /** Claude-originated vision override. Unset fields inherit the global sidecar settings. */ - visionSidecar?: { backend?: "openai" | "anthropic"; model?: string }; + visionSidecar?: { backend?: "openai" | "anthropic" | "chat"; model?: string }; /** Persisted Claude Desktop four-family routing profile. */ desktopProfile?: OcxClaudeDesktopProfile; /** Auto-reconcile Desktop 3P config when provider catalog changes. Default: enabled. */ @@ -775,7 +775,7 @@ export interface OcxVisionSidecarConfig { /** Master switch. Default: enabled when the selected backend has a usable credential. */ enabled?: boolean; /** Description backend. Unset prefers a usable stored Anthropic OAuth credential, else OpenAI. */ - backend?: "openai" | "anthropic"; + backend?: "openai" | "anthropic" | "chat"; /** Vision model that describes images. */ model?: string; /** Max description cache misses admitted in one main-model turn. Zero disables description calls. */ diff --git a/src/vision/describe-chat.ts b/src/vision/describe-chat.ts new file mode 100644 index 0000000000..b4bf3ece80 --- /dev/null +++ b/src/vision/describe-chat.ts @@ -0,0 +1,311 @@ +import { createGoogleAdapter } from "../adapters/google"; +import type { OcxParsedRequest, OcxProviderConfig } from "../types"; +import { signalWithTimeout, cancelBodyOnAbort } from "../lib/abort"; +import { sidecarEnter } from "../lib/sidecar-tracker"; +import { createTranslatorBudget } from "../lib/translator-budget"; +import type { SidecarOutcomeRecorder } from "../web-search/executor"; +import { getOAuthCredentialProjectId, getValidAccessToken, publicOAuthAuthenticationErrorMessage } from "../oauth"; +import { resolveActiveProviderApiKey } from "../providers/api-keys"; + +export interface ChatVisionSettings { + model: string; + timeoutMs: number; + detail?: string; + reasoning?: string; +} + +export type DescribeChatOutcome = { text: string; error?: string }; + +/** + * Fail before any credential acquisition or network activity when the destination + * is not HTTPS. The vision sidecar sends user images, so an `http:` baseUrl must + * never see a bearer token or an outbound request — checked BEFORE the OAuth token + * lookup, BEFORE Authorization construction, and BEFORE any fetch. + */ +function httpsGuardError(baseUrl: string, allowLoopbackHttp: boolean): string | null { + let parsed: URL; + try { + parsed = new URL(baseUrl); + } catch { + return "invalid provider baseUrl"; + } + if (parsed.protocol === "https:") return null; + // Cleartext is acceptable only when the bytes never leave the host: a local + // OpenAI-compatible server (e.g. http://127.0.0.1:1234/v1) is a legitimate + // chat-vision destination. Remote http: destinations stay rejected before + // any token fetch or network call. + const host = parsed.hostname.replace(/^\[|]$/g, "").toLowerCase(); + const loopback = host === "localhost" || host === "127.0.0.1" || host === "::1"; + if (allowLoopbackHttp && parsed.protocol === "http:" && loopback) return null; + return `provider baseUrl must use HTTPS (got ${parsed.protocol})`; +} + +const ALLOWED_IMAGE_MIME = new Set(["image/png", "image/jpeg", "image/jpg", "image/webp", "image/gif"]); +const MAX_IMAGE_BYTES = 20 * 1024 * 1024; + +function validateImageInput(imageUrl: string): { mime?: string; base64Data?: string; error?: string } { + if (imageUrl.startsWith("data:")) { + const match = /^data:([^;,]+?)(;base64)?,(.*)$/s.exec(imageUrl); + if (!match || !match[2]) return { error: "malformed data URL" }; + const mime = match[1].toLowerCase(); + if (!ALLOWED_IMAGE_MIME.has(mime)) return { error: `unsupported image type "${mime}"` }; + const bytes = Math.floor((match[3].length * 3) / 4); + if (bytes > MAX_IMAGE_BYTES) return { error: `image too large (~${Math.round(bytes / 1024 / 1024)}MB)` }; + return { mime, base64Data: match[3] }; + } + if (imageUrl.startsWith("https://")) { + return {}; + } + return { error: "unsupported image URL scheme (expected data: or https:)" }; +} + +function toChatImagePart(imageUrl: string, detail?: string): Record { + return { type: "image_url", image_url: { url: imageUrl, detail: detail ?? "high" } }; +} + +async function describeImageGoogle( + imageUrl: string, + detail: string | undefined, + contextText: string, + provider: OcxProviderConfig, + providerName: string, + settings: ChatVisionSettings, + abortSignal?: AbortSignal, + recordOutcome?: SidecarOutcomeRecorder, + executor: typeof globalThis.fetch = globalThis.fetch, +): Promise { + const imageValidation = validateImageInput(imageUrl); + if (imageValidation.error) return { text: "", error: imageValidation.error }; + const destinationError = httpsGuardError(provider.baseUrl, provider.authMode !== "oauth"); + if (destinationError) return { text: "", error: destinationError }; + let requestProvider = provider; + if (provider.authMode === "oauth") { + try { + const token = await getValidAccessToken(providerName); + const project = provider.googleMode === "cloud-code-assist" + ? getOAuthCredentialProjectId(providerName) + : provider.project; + requestProvider = { ...provider, apiKey: token, ...(project ? { project } : {}) }; + } catch (e) { + return { text: "", error: `google oauth token failed: ${publicOAuthAuthenticationErrorMessage(e)}` }; + } + } else { + const apiKey = resolveActiveProviderApiKey(provider); + if (!apiKey) return { text: "", error: "provider has no API key" }; + requestProvider = { ...provider, apiKey }; + } + + const parsed = { + modelId: settings.model, + context: { + messages: [{ + role: "user", + content: [ + { type: "text", text: contextText || "Describe this image." }, + { type: "image", imageUrl, detail }, + ], + timestamp: Date.now(), + }], + }, + stream: true, + options: { maxOutputTokens: 1024, reasoning: settings.reasoning ?? "low" }, + } as OcxParsedRequest; + const budget = createTranslatorBudget(); + const adapter = createGoogleAdapter(requestProvider); + const sidecarExit = sidecarEnter("vision"); + // Bound the AI Studio fallback below: created lazily, cleaned up in finally. + let fallbackSignal: ReturnType | undefined; + try { + const request = await adapter.buildRequest(parsed, { + headers: new Headers(), + translatorBudget: budget, + abortSignal, + }); + const response = adapter.fetchResponse + ? await adapter.fetchResponse(request, { + abortSignal, + timeoutMs: settings.timeoutMs, + stream: true, + returnRawErrors: true, + executor, + }) + : (fallbackSignal = signalWithTimeout(settings.timeoutMs, abortSignal), await executor(request.url, { + method: request.method, + headers: request.headers, + body: request.body, + // AI Studio leaves fetchResponse undefined, so this fallback must bound + // the request itself: without a timeout a stalled upstream holds a + // VISION_CONCURRENCY worker open indefinitely. signalWithTimeout + // merges settings.timeoutMs with the caller's abortSignal; cleanup() + // in finally releases the merged listener. + signal: fallbackSignal.signal, + })); + recordOutcome?.(response.status); + if (!response.ok) { + return { text: "", error: `google sidecar HTTP ${response.status}` }; + } + let text = ""; + for await (const event of adapter.parseStream(response, budget)) { + if (event.type === "text_delta") text += event.text; + if (event.type === "error") return { text: "", error: "google sidecar stream error" }; + } + const trimmed = text.trim(); + if (!trimmed) return { text: "", error: "google sidecar produced no description" }; + return { text: trimmed }; + } catch (e) { + const kind = e instanceof Error && e.name === "TimeoutError" ? "timeout" : "connect_error"; + recordOutcome?.(kind); + return { text: "", error: `google sidecar ${kind}` }; + } finally { + fallbackSignal?.cleanup(); + sidecarExit(); + } +} + +export async function describeImageChat( + imageUrl: string, + detail: string | undefined, + contextText: string, + provider: OcxProviderConfig, + providerName: string, + settings: ChatVisionSettings, + abortSignal?: AbortSignal, + recordOutcome?: SidecarOutcomeRecorder, + executor: typeof globalThis.fetch = globalThis.fetch, +): Promise { + const imageValidation = validateImageInput(imageUrl); + if (imageValidation.error) return { text: "", error: imageValidation.error }; + if (provider.adapter === "google") { + return describeImageGoogle( + imageUrl, + detail, + contextText, + provider, + providerName, + settings, + abortSignal, + recordOutcome, + executor, + ); + } + const destinationError = httpsGuardError(provider.baseUrl, provider.authMode !== "oauth"); + if (destinationError) return { text: "", error: destinationError }; + let authHeader = ""; + if (provider.authMode === "oauth") { + try { + const token = await getValidAccessToken(providerName); + authHeader = `Bearer ${token}`; + } catch (e) { + return { text: "", error: `oauth token failed: ${publicOAuthAuthenticationErrorMessage(e)}` }; + } + } else { + const apiKey = resolveActiveProviderApiKey(provider); + if (apiKey) { + authHeader = `Bearer ${apiKey}`; + } else if (provider.apiKey !== undefined || (provider.apiKeyPool?.length ?? 0) > 0) { + return { text: "", error: "provider has no API key or OAuth token" }; + } else { + // Preserve legacy static-header auth only when no configured key exists; + // unresolved env references must never fall through to raw placeholders. + const fallback = provider.headers?.Authorization?.match(/^Bearer\s+(.+)$/i)?.[1]?.trim(); + if (fallback) authHeader = `Bearer ${fallback}`; + else if (provider.authMode !== "local" && provider.keyOptional !== true) { + return { text: "", error: "provider has no API key or OAuth token" }; + } + } + // authMode "local" / keyOptional: keyless destination, no Authorization header. + } + + const content: unknown[] = [ + { type: "text", text: contextText || "Describe this image." }, + toChatImagePart(imageUrl, detail), + ]; + const body: Record = { + model: settings.model, + messages: [{ role: "user", content }], + stream: true, + max_tokens: 1024, + }; + // Forward the planned reasoning through the provider-aware wire mapping, + // mirroring the openai-chat adapter: OpenAI-compatible targets carry + // reasoning_effort, gateway-object targets carry reasoning.enabled/effort. + if (settings.reasoning && settings.reasoning !== "none") { + if (provider.reasoningWireFormat === "gateway-object") { + body.reasoning = { enabled: true, effort: settings.reasoning }; + } else { + body.reasoning_effort = settings.reasoning; + } + } + + const headers: Record = { + "Content-Type": "application/json", + ...(provider.headers ?? {}), + // The resolved credential must win over any static provider header: a + // configured Authorization would otherwise replace a freshly rotated OAuth + // token / API key and break every authenticated request with 401. + ...(authHeader ? { Authorization: authHeader } : {}), + }; + + const linkedSignal = signalWithTimeout(settings.timeoutMs ?? 30_000, abortSignal); + const sidecarExit = sidecarEnter("vision"); + const t0 = Date.now(); + try { + const baseUrl = provider.baseUrl.replace(/\/$/, ""); + const url = new URL(`${baseUrl}/chat/completions`); + const res = await executor(url.toString(), { + method: "POST", + headers, + body: JSON.stringify(body), + signal: linkedSignal.signal, + }); + recordOutcome?.(res.status); + if (!res.ok) { + console.warn(`[vision] chat sidecar HTTP ${res.status} (${Date.now() - t0}ms)`); + return { text: "", error: `chat sidecar HTTP ${res.status}` }; + } + if (!res.body) return { text: "", error: "chat sidecar returned no response body" }; + const detachBodyGuard = cancelBodyOnAbort(res.body, linkedSignal.signal); + let text = ""; + try { + const reader = res.body.getReader(); + const decoder = new TextDecoder(); + let buf = ""; + const consumeLine = (line: string) => { + const s = line.replace(/^data:\s*/, "").trim(); + if (!s || s === "[DONE]") return; + try { + const j = JSON.parse(s); + const delta = j.choices?.[0]?.delta?.content; + if (typeof delta === "string") text += delta; + else if (Array.isArray(delta)) { + for (const part of delta) if (typeof part?.text === "string") text += part.text; + } + const message = j.choices?.[0]?.message?.content; + if (typeof message === "string") text += message; + } catch { /* ignore non-JSON data lines */ } + }; + for (;;) { + const { done, value } = await reader.read(); + if (done) break; + buf += decoder.decode(value, { stream: true }); + const lines = buf.split(/\r?\n/); + buf = lines.pop() ?? ""; + for (const line of lines) consumeLine(line); + } + consumeLine(buf); + const trimmed = text.trim(); + if (!trimmed) return { text: "", error: "chat sidecar produced no description" }; + return { text: trimmed }; + } finally { + detachBodyGuard(); + } + } catch (e) { + const kind = e instanceof Error && e.name === "TimeoutError" ? "timeout" : "connect_error"; + recordOutcome?.(kind); + console.warn(`[vision] chat sidecar error (${Date.now() - t0}ms)`); + return { text: "", error: `chat sidecar ${kind}` }; + } finally { + sidecarExit(); + linkedSignal.cleanup(); + } +} diff --git a/src/vision/eligibility.ts b/src/vision/eligibility.ts index 7737f67844..50c9ca0819 100644 --- a/src/vision/eligibility.ts +++ b/src/vision/eligibility.ts @@ -25,16 +25,23 @@ import { getModelMetadataCaseInsensitive, resolveMetadataProvider } from "../gen import { nativeInputModalities } from "../codex/catalog/metadata"; import { SUPPORTED_NATIVE_OPENAI_SLUGS } from "../codex/catalog/native-models"; import { enrichProviderFromRegistry } from "../providers/derive"; +import { resolveActiveProviderApiKey } from "../providers/api-keys"; +import { isOAuthProvider } from "../oauth"; +import { getAccountSet } from "../oauth/store"; -/** The two wire protocols `planVisionSidecar` can actually dispatch to. */ -export type VisionSidecarBackend = "openai" | "anthropic"; +/** The wire protocols `planVisionSidecar` can actually dispatch to. */ +export type VisionSidecarBackend = "openai" | "anthropic" | "chat"; /** * Default entry per backend: cheap, image-capable, and present in every deployment. Offered * whenever its side is enabled, and withheld only when that provider explicitly lists it as a * model the sidecar describes FOR — never merely because a metadata table stayed silent. + * + * The chat side has no universal baseline: it dispatches through a CONFIGURED chat/google + * provider, and no canonical provider exists to name. Chat rows therefore come only from + * catalog/configured models, never from a fabricated default. */ -export const BASELINE_VISION_MODELS: Record = { +export const BASELINE_VISION_MODELS: Record<"openai" | "anthropic", string> = { openai: "gpt-5.6-luna", anthropic: "claude-haiku-4-5", }; @@ -56,6 +63,33 @@ export interface VisionModelOption { type EnrichedProviderCache = Map; +/** + * Whether a configured provider can actually execute a chat vision sidecar. + * OAuth is usable only for a supported OAuth provider with a healthy active account; + * keyless mode is intentionally limited to openai-chat local-compatible servers. + */ +export function isChatVisionProviderUsable(providerName: string, provider: OcxProviderConfig): boolean { + if (provider.disabled === true) return false; + if (provider.adapter !== "openai-chat" && provider.adapter !== "google") return false; + if (provider.authMode === "oauth") { + if (!isOAuthProvider(providerName)) return false; + const accountSet = getAccountSet(providerName); + const active = accountSet?.accounts.find(account => account.id === accountSet.activeAccountId); + return active !== undefined && active.needsReauth !== true; + } + if (resolveActiveProviderApiKey(provider)) return true; + if (provider.adapter === "openai-chat" && (provider.authMode === "local" || provider.keyOptional === true)) return true; + return false; +} + +export function isChatVisionCandidateUsable( + config: Pick, + providerName: string, +): boolean { + const provider = config.providers?.[providerName]; + return provider !== undefined && isChatVisionProviderUsable(providerName, provider); +} + function advertisesImageInput(modalities: readonly string[] | undefined): boolean | undefined { if (!modalities || modalities.length === 0) return undefined; return modalities.includes("image"); @@ -163,12 +197,19 @@ export function visionBackendForCandidate( // executor to name, no catalog row qualifies; the side's baseline is added separately and // keeps the picker populated. Narrowing here never widens the write gate, which is a // different predicate (`modelAcceptsImageInput`) and still treats unknown as allowed. - if (anthropicProviderName === undefined) return undefined; - return candidate.provider === anthropicProviderName ? "anthropic" : undefined; + if (anthropicProviderName !== undefined && candidate.provider === anthropicProviderName) return "anthropic"; + // A chat-side row is reachable only through its configured chat/google adapter with + // usable auth — the same predicate the runtime chat sidecar resolver uses. A routed + // row whose provider is absent, disabled, or keyless must not be offered, because + // selecting it would fail at describe time rather than at pick time. + const configured = config.providers?.[candidate.provider]; + if (!configured) return undefined; + const chatLike = configured.adapter === "openai-chat" || configured.adapter === "google"; + return chatLike && isChatVisionProviderUsable(candidate.provider, configured) ? "chat" : undefined; } function baselineCandidate( - backend: VisionSidecarBackend, + backend: "openai" | "anthropic", anthropicProviderName: string | undefined, ): VisionCandidateModel { return { @@ -194,9 +235,9 @@ function baselineCandidate( * and is the only input to rejection. Absence from this list must never imply * rejection — an unknown id stays eligible via the undefined → eligible fallback. * - * De-duplication is by BARE model id, first eligible row wins. Two providers of - * the same adapter family can expose the same id; they resolve to the same - * backend, and only `value` reaches the client, so first-wins costs nothing. + * Chat rows are provider-qualified because the selected provider is part of the + * runtime resolution identity. This also makes same-id rows from different + * providers distinct instead of silently first-wins. */ export function visionEligibleModelOptions( config: Pick, @@ -219,8 +260,13 @@ export function visionEligibleModelOptions( const backend = visionBackendForCandidate(config, candidate, anthropicProviderName); if (!backend || !enabled.has(backend)) continue; if (!isVisionEligibleModelWithCache(config, candidate, enrichedProviders)) continue; - if (byValue.has(candidate.id)) continue; - byValue.set(candidate.id, { value: candidate.id, label: candidate.id, backend }); + const value = backend === "chat" ? `${candidate.provider}/${candidate.id}` : candidate.id; + if (byValue.has(value)) continue; + byValue.set(value, { + value, + label: backend === "chat" ? `${candidate.provider} / ${candidate.id}` : candidate.id, + backend, + }); } const order = (option: VisionModelOption) => diff --git a/src/vision/index.ts b/src/vision/index.ts index 792e5db1b1..c3b00bf2c8 100644 --- a/src/vision/index.ts +++ b/src/vision/index.ts @@ -5,9 +5,11 @@ import { modelRecordValue } from "../reasoning-effort"; import type { VisionReasoningEffort } from "../reasoning-effort"; import { describeImage, type DescribeOutcome, type VisionSettings } from "./describe"; import { describeImageAnthropic } from "./anthropic-describe"; +import { describeImageChat } from "./describe-chat"; import { normalizeVisionReasoningForModel } from "./reasoning"; import type { CodexAuthContext } from "../codex/auth-context"; import { resolveSidecarAuth } from "../sidecar/auth"; +import { isChatVisionProviderUsable } from "./eligibility"; import type { ResolvedOpenAiForwardSidecar } from "../providers/openai-sidecar"; import type { SidecarOutcomeRecorder } from "../web-search/executor"; import { enforceAppOwnedMemoryBudget } from "../lib/app-owned-memory"; @@ -38,6 +40,7 @@ export function isModelTextOnly( export { describeImageAnthropic, parseAnthropicVisionSSE } from "./anthropic-describe"; export { BASELINE_VISION_MODELS, + isChatVisionProviderUsable, isVisionEligibleModel, isVisionSidecarConsumer, modelAcceptsImageInput, @@ -225,11 +228,80 @@ export function findAnthropicVisionProvider(config: OcxConfig): AnthropicVisionP return { providerName: auth.anthropicProviderName, provider: auth.anthropicProvider }; } +/** Chat-adapter or google-adapter provider selected to run the chat vision sidecar. */ +export interface ChatVisionProvider { + providerName: string; + provider: OcxProviderConfig; + model: string; +} + +/** + * Resolve the provider that runs the chat vision sidecar for `model`. + * + * A provider-qualified `provider/model` selects exactly that provider when it is + * enabled, chat-like, and has usable auth. A bare model resolves ONLY through a + * unique configured match (defaultModel or the provider's model list): an + * ambiguous match (two providers listing the same model) and a provider that only + * has live-discovered models (no configured list) both produce NO provider — + * routing a user's image to an arbitrary first authenticated provider is exactly + * the mis-send the qualified form exists to prevent. + */ +export function findChatVisionProvider(config: OcxConfig, model: string): ChatVisionProvider | undefined { + let providerName = ""; + let bareModel = model; + let qualified = false; + if (model.includes("/")) { + const sep = model.indexOf("/"); + const prefix = model.slice(0, sep); + bareModel = model.slice(sep + 1); + // The prefix is a provider qualifier ONLY when such a provider actually + // exists. A namespaced catalog id like "anthropic/claude-3-haiku" where + // "anthropic" is a model namespace (not a configured provider) must fall + // through to bare resolution against the published namespaced ids. + if (config.providers[prefix]) { + providerName = prefix; + qualified = true; + } + } + const isChatLike = (p: OcxProviderConfig) => p.adapter === "openai-chat" || p.adapter === "google"; + if (qualified) { + const provider = config.providers[providerName]; + if (provider && isChatLike(provider) && isChatVisionProviderUsable(providerName, provider)) { + return { provider, providerName, model: bareModel }; + } + return undefined; + } + const matches: Array<{ provider: OcxProviderConfig; providerName: string; model: string }> = []; + for (const [name, provider] of Object.entries(config.providers)) { + if (!isChatLike(provider)) continue; + if (!isChatVisionProviderUsable(name, provider)) continue; + const models = provider.models ?? []; + const defaultModel = provider.defaultModel; + if (bareModel === defaultModel) { + matches.push({ provider, providerName: name, model: bareModel }); + continue; + } + if (models.includes(bareModel)) { + matches.push({ provider, providerName: name, model: bareModel }); + continue; + } + // A bare id that is the suffix of a namespaced published id ("gemini-flash" + // matching "google/gemini-flash") resolves to the PUBLISHED id, not the + // bare one — the bare id is not routable upstream. + const published = models.find(m => m.endsWith("/" + bareModel)); + if (published) { + matches.push({ provider, providerName: name, model: published }); + } + } + if (matches.length === 1) return { ...matches[0]! }; + return undefined; +} + export function resolveVisionBackend( - explicit: "openai" | "anthropic" | undefined, + explicit: "openai" | "anthropic" | "chat" | undefined, anthropicSidecar: AnthropicVisionProvider | undefined, -): "openai" | "anthropic" { - if (explicit === "openai" || explicit === "anthropic") return explicit; +): "openai" | "anthropic" | "chat" { + if (explicit === "openai" || explicit === "anthropic" || explicit === "chat") return explicit; return anthropicSidecar ? "anthropic" : "openai"; } @@ -241,8 +313,11 @@ export function resolveOpenAiVisionModel(config: Pick, - backend: "openai" | "anthropic", + backend: "openai" | "anthropic" | "chat", ): string { + // The chat sidecar's model is provider-qualified and resolved separately via + // findChatVisionProvider; the generic default only applies to the forward sides. + if (backend === "chat") return resolveOpenAiVisionModel(config); return backend === "anthropic" ? config.visionSidecar?.model || DEFAULT_ANTHROPIC_VISION_MODEL : resolveOpenAiVisionModel(config); @@ -261,19 +336,20 @@ function messagesHaveImage(parsed: OcxParsedRequest): boolean { export function shouldResolveOpenAiVisionSidecar( config: OcxConfig, provider: OcxProviderConfig, - modelId: string, - parsed: OcxParsedRequest, + modelId: string, + parsed: OcxParsedRequest, ): boolean { - if (!isModelTextOnly(provider, modelId) || !messagesHaveImage(parsed)) return false; + if (!modelInList(provider.noVisionModels, modelId) || !messagesHaveImage(parsed)) return false; const cfg = config.visionSidecar ?? {}; if (cfg.enabled === false) return false; return resolveVisionBackend(cfg.backend, findAnthropicVisionProvider(config)) === "openai"; } export interface VisionPlan { - backend: "openai" | "anthropic"; + backend: "openai" | "anthropic" | "chat"; forwardSidecar?: ResolvedOpenAiForwardSidecar; anthropicSidecar?: AnthropicVisionProvider; + chatSidecar?: ChatVisionProvider; settings: VisionSettings; maxDescriptionsPerTurn: number; } @@ -291,7 +367,7 @@ export function planVisionSidecar( parsed: OcxParsedRequest, openAiSidecar?: ResolvedOpenAiForwardSidecar, ): VisionPlan | undefined { - if (!isModelTextOnly(provider, modelId)) return undefined; + if (!modelInList(provider.noVisionModels, modelId)) return undefined; if (!messagesHaveImage(parsed)) return undefined; const cfg = config.visionSidecar ?? {}; if (cfg.enabled === false) return undefined; @@ -300,6 +376,21 @@ export function planVisionSidecar( const model = resolveEffectiveVisionModel(config, backend); const maxDescriptionsPerTurn = resolveMaxDescriptionsPerTurn(cfg.maxDescriptionsPerTurn); + if (backend === "chat") { + const chatProvider = findChatVisionProvider(config, cfg.model ?? ""); + if (!chatProvider) return undefined; + return { + backend, + chatSidecar: chatProvider, + settings: { + model: chatProvider.model, + reasoning: normalizeVisionReasoningForModel(chatProvider.model, cfg.reasoning) ?? DEFAULT_REASONING, + timeoutMs: resolveVisionTimeoutMs(cfg.timeoutMs), + }, + maxDescriptionsPerTurn, + }; + } + if (backend === "anthropic") { if (!anthropicSidecar) return undefined; return { @@ -417,6 +508,35 @@ function normalizedContext(contextText: string): string { return contextText.trim().replace(/\s+/g, " "); } +function normalizedProviderBaseUrl(baseUrl: string): string { + try { + const url = new URL(baseUrl); + url.hash = ""; + url.search = ""; + url.pathname = url.pathname.replace(/\/+$/, "") || "/"; + return url.toString(); + } catch { + return baseUrl.trim().replace(/\/+$/, ""); + } +} + +function selectedProviderIdentity(plan: VisionPlan): Record { + const selected = plan.backend === "openai" + ? plan.forwardSidecar + : plan.backend === "anthropic" + ? plan.anthropicSidecar + : plan.chatSidecar; + const provider = selected?.provider; + return { + providerName: selected?.providerName ?? "", + adapter: provider?.adapter ?? "", + baseUrl: provider ? normalizedProviderBaseUrl(provider.baseUrl) : "", + ...(provider?.googleMode ? { googleMode: provider.googleMode } : {}), + ...(provider?.project ? { project: provider.project } : {}), + ...(provider?.location ? { location: provider.location } : {}), + }; +} + function descriptionIdentity(job: ImageJob, plan: VisionPlan): { key: string; persistent: boolean } { let imageHash: string; let persistent = false; @@ -430,6 +550,7 @@ function descriptionIdentity(job: ImageJob, plan: VisionPlan): { key: string; pe return { key: JSON.stringify([ plan.backend, + selectedProviderIdentity(plan), plan.settings.model, ...(plan.backend === "openai" ? [plan.settings.reasoning] : []), job.detail ?? "high", @@ -446,6 +567,7 @@ async function executeDescription( selectedForwardHeaders: Headers, abortSignal?: AbortSignal, recordSidecarOutcome?: SidecarOutcomeRecorder, + providerFetch?: typeof globalThis.fetch, ): Promise { if (plan.backend === "anthropic") { const sidecar = plan.anthropicSidecar; @@ -460,6 +582,26 @@ async function executeDescription( abortSignal, ); } + if (plan.backend === "chat") { + const sidecar = plan.chatSidecar; + if (!sidecar) return { text: "", error: "chat vision sidecar is unavailable" }; + return describeImageChat( + job.imageUrl, + job.detail, + job.contextText, + sidecar.provider, + sidecar.providerName, + { + model: sidecar.model, + timeoutMs: plan.settings.timeoutMs, + detail: job.detail, + reasoning: plan.settings.reasoning, + }, + abortSignal, + recordSidecarOutcome, + providerFetch, + ); + } if (!plan.forwardSidecar) return { text: "", error: "OpenAI vision sidecar is unavailable" }; return describeImage( job.imageUrl, @@ -486,6 +628,7 @@ export async function describeImagesInPlace( abortSignal?: AbortSignal, recordSidecarOutcome?: SidecarOutcomeRecorder, translatorBudget?: TranslatorBudget, + providerFetch?: typeof globalThis.fetch, ): Promise { const jobs: ImageJob[] = []; const targets: { msg: OcxMessage; parts: OcxContentPart[] }[] = []; @@ -542,7 +685,7 @@ export async function describeImagesInPlace( executions.push(async () => { let outcome: DescribeOutcome; try { - outcome = await executeDescription(job, plan, selectedForwardHeaders, abortSignal, recordSidecarOutcome); + outcome = await executeDescription(job, plan, selectedForwardHeaders, abortSignal, recordSidecarOutcome, providerFetch); } catch (error) { outcome = { text: "", error: error instanceof Error ? error.message : String(error) }; } diff --git a/tests/vision-cache.test.ts b/tests/vision-cache.test.ts index b2369bc00f..350b79ea3d 100644 --- a/tests/vision-cache.test.ts +++ b/tests/vision-cache.test.ts @@ -255,6 +255,35 @@ describe("vision description cache and per-turn cap", () => { expect(textParts(request, 1).join("\n")).toContain("caption-a"); }); + test("separates cache keys by selected provider identity", async () => { + let calls = 0; + globalThis.fetch = (async (_url, init) => { + calls += 1; + const body = JSON.parse(String(init?.body)); + return new Response(`data: ${JSON.stringify({ choices: [{ delta: { content: `provider-${body.model}-${calls}` } }] })}\n\ndata: [DONE]\n\n`, { + headers: { "content-type": "text/event-stream" }, + }); + }) as typeof fetch; + const headers = new Headers({ authorization: "Bearer test" }); + const sameImage = () => parsed([{ type: "input_text", text: "same context" }, { type: "input_image", image_url: DATA_A }]); + const providerA: OcxProviderConfig = { adapter: "openai-chat", baseUrl: "https://provider-a.test/v1", apiKey: "key-a" }; + const providerB: OcxProviderConfig = { adapter: "openai-chat", baseUrl: "https://provider-b.test/v1", apiKey: "key-b" }; + const chatPlan = (provider: OcxProviderConfig, providerName: string): VisionPlan => ({ + backend: "chat", + chatSidecar: { providerName, provider, model: "same-model" }, + settings: { model: "same-model", timeoutMs: 5000 }, + maxDescriptionsPerTurn: 8, + }); + + const first = sameImage(); + await describeImagesInPlace(first, chatPlan(providerA, "provider-a"), headers); + const second = sameImage(); + await describeImagesInPlace(second, chatPlan(providerB, "provider-b"), headers); + + expect(calls).toBe(2); + expect(textParts(second).join("\n")).toContain("provider-same-model-2"); + }); + test("separates cache keys by backend, model, detail, and normalized context", async () => { let calls = 0; globalThis.fetch = (async (url, init) => { diff --git a/tests/vision-chat.test.ts b/tests/vision-chat.test.ts new file mode 100644 index 0000000000..d7e97116e1 --- /dev/null +++ b/tests/vision-chat.test.ts @@ -0,0 +1,427 @@ +import { afterEach, describe, expect, test } from "bun:test"; +import { describeImageChat } from "../src/vision/describe-chat"; +import { planVisionSidecar } from "../src/vision"; +import { parseRequest } from "../src/responses/parser"; +import type { OcxConfig, OcxProviderConfig } from "../src/types"; +import { resolveActiveProviderApiKey } from "../src/providers/api-keys"; + +const originalFetch = globalThis.fetch; +const image = "data:image/png;base64,aGVsbG8="; +const settings = { model: "vision-test", timeoutMs: 5000 }; + +afterEach(() => { globalThis.fetch = originalFetch; }); + +function chatSse(text: string): Response { + const body = [ + `data: ${JSON.stringify({ choices: [{ delta: { content: text } }] })}`, + "", + "data: [DONE]", + "", + ].join("\n"); + return new Response(body, { headers: { "content-type": "text/event-stream" } }); +} + +function geminiSse(text: string): Response { + const body = [ + `data: ${JSON.stringify({ candidates: [{ content: { parts: [{ text }] } }] })}`, + "", + `data: ${JSON.stringify({ candidates: [{ finishReason: "STOP" }] })}`, + "", + ].join("\n"); + return new Response(body, { headers: { "content-type": "text/event-stream" } }); +} + +describe("chat vision sidecar", () => { + test("resolves env-backed active keys and matches the active non-first pool entry without mutation", () => { + const previous = process.env.VISION_CHAT_KEY; + process.env.VISION_CHAT_KEY = " env-active-key "; + try { + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + apiKey: "${VISION_CHAT_KEY}", + apiKeyPool: [ + { id: "first", key: "first-key" }, + { id: "active", key: "${VISION_CHAT_KEY}" }, + ], + }; + const before = structuredClone(provider); + expect(resolveActiveProviderApiKey(provider)).toBe("env-active-key"); + expect(provider).toEqual(before); + } finally { + if (previous === undefined) delete process.env.VISION_CHAT_KEY; + else process.env.VISION_CHAT_KEY = previous; + } + }); + + test("does not advertise or send an unresolved env placeholder", async () => { + const previous = process.env.VISION_CHAT_MISSING; + delete process.env.VISION_CHAT_MISSING; + try { + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + apiKey: "$VISION_CHAT_MISSING", + }; + expect(resolveActiveProviderApiKey(provider)).toBeUndefined(); + expect(await describeImageChat(image, "high", "describe this", provider, "mimo", settings)).toEqual({ + text: "", + error: "provider has no API key or OAuth token", + }); + } finally { + if (previous === undefined) delete process.env.VISION_CHAT_MISSING; + else process.env.VISION_CHAT_MISSING = previous; + } + }); + + test("sends an image_url through an OpenAI-compatible provider", async () => { + let capturedUrl = ""; + let capturedBody: Record | undefined; + globalThis.fetch = (async (url, init) => { + capturedUrl = String(url); + capturedBody = JSON.parse(String(init?.body)); + return chatSse("Mimo description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + authMode: "key", + apiKey: "test-key", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "mimo", settings); + + expect(result).toEqual({ text: "Mimo description" }); + expect(capturedUrl).toBe("https://vision.example/v1/chat/completions"); + expect(capturedBody?.model).toBe("vision-test"); + expect(capturedBody?.messages[0].content).toEqual([ + { type: "text", text: "describe this" }, + { type: "image_url", image_url: { url: image, detail: "high" } }, + ]); + }); + + test("uses the active non-first pool key for Google adapter auth", async () => { + let capturedKey = ""; + globalThis.fetch = (async (_url, init) => { + capturedKey = new Headers(init?.headers).get("x-goog-api-key") ?? ""; + return geminiSse("Gemini pool description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "google", + baseUrl: "https://generativelanguage.googleapis.com", + authMode: "key", + apiKey: "active-google-key", + apiKeyPool: [ + { id: "first", key: "first-google-key" }, + { id: "active", key: "active-google-key" }, + ], + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "gemini", { model: "gemini-test", timeoutMs: 5000 }); + + expect(result).toEqual({ text: "Gemini pool description" }); + expect(capturedKey).toBe("active-google-key"); + }); + + test("uses the native Google adapter wire format", async () => { + let capturedUrl = ""; + let capturedBody: Record | undefined; + globalThis.fetch = (async (url, init) => { + capturedUrl = String(url); + capturedBody = JSON.parse(String(init?.body)); + return geminiSse("Gemini description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "google", + baseUrl: "https://generativelanguage.googleapis.com", + authMode: "key", + apiKey: "test-key", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "gemini", { model: "gemini-test", timeoutMs: 5000 }); + + expect(result).toEqual({ text: "Gemini description" }); + expect(capturedUrl).toBe("https://generativelanguage.googleapis.com/v1beta/models/gemini-test:streamGenerateContent?alt=sse"); + expect(capturedBody?.contents?.[0]?.parts).toEqual([ + { text: "describe this" }, + { inline_data: { mime_type: "image/png", data: "aGVsbG8=" } }, + ]); + }); + + test("the resolved credential wins over a static provider Authorization header", async () => { + let capturedAuth = ""; + globalThis.fetch = (async (_url, init) => { + capturedAuth = String((init?.headers as Record)?.Authorization ?? (init?.headers as Headers)?.get?.("Authorization") ?? ""); + return chatSse("authed description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + authMode: "key", + apiKey: "fresh-key", + headers: { Authorization: "Bearer stale-static" }, + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "mimo", settings); + + expect(result.error).toBeUndefined(); + expect(capturedAuth).toBe("Bearer fresh-key"); + }); + + test("a keyless local provider (authMode local) sends no Authorization header", async () => { + let capturedAuth: string | undefined = "unset"; + globalThis.fetch = (async (_url, init) => { + const h = init?.headers as Record; + capturedAuth = h?.Authorization ?? (init?.headers as Headers)?.get?.("Authorization") ?? undefined; + return chatSse("local description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "http://127.0.0.1:1234/v1", + authMode: "local", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "local", settings); + + expect(result.error).toBeUndefined(); + expect(capturedAuth).toBeUndefined(); + }); + + test("forwards the planned reasoning through the provider-aware wire mapping", async () => { + let capturedBody: Record | undefined; + globalThis.fetch = (async (_url, init) => { + capturedBody = JSON.parse(String(init?.body)); + return chatSse("reasoned description"); + }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + authMode: "key", + apiKey: "k", + }; + + await describeImageChat(image, "high", "describe this", provider, "mimo", { ...settings, reasoning: "high" }); + + expect(capturedBody?.reasoning_effort).toBe("high"); + expect(capturedBody?.reasoning).toBeUndefined(); + + // gateway-object providers emit reasoning.enabled/effort instead. + const gateway: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://gateway.example/v1", + authMode: "key", + apiKey: "k", + reasoningWireFormat: "gateway-object", + }; + globalThis.fetch = (async (_url, init) => { + capturedBody = JSON.parse(String(init?.body)); + return chatSse("gateway description"); + }) as typeof fetch; + await describeImageChat(image, "high", "describe this", gateway, "gateway", { ...settings, reasoning: "medium" }); + + expect(capturedBody?.reasoning).toEqual({ enabled: true, effort: "medium" }); + expect(capturedBody?.reasoning_effort).toBeUndefined(); + }); +}); + +describe("chat vision destination guard", () => { + afterEach(() => { globalThis.fetch = originalFetch; }); + + test("an http: openai-compatible destination fails without any network call", async () => { + let fetchCalled = false; + globalThis.fetch = (async () => { fetchCalled = true; return chatSse("unreachable"); }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "http://vision.example/v1", + authMode: "key", + apiKey: "test-key", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "mimo", settings); + + expect(result.error).toContain("must use HTTPS"); + expect(result.text).toBe(""); + expect(fetchCalled).toBe(false); + }); + + test("an http: OAuth destination fails BEFORE token acquisition and before any network call", async () => { + let fetchCalled = false; + globalThis.fetch = (async () => { fetchCalled = true; return chatSse("unreachable"); }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "http://vision.example/v1", + authMode: "oauth", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "mimo", settings); + + // The HTTPS error, not an "oauth token failed" error: the guard must run before + // getValidAccessToken is reached. + expect(result.error).toContain("must use HTTPS"); + expect(result.error).not.toContain("oauth"); + expect(fetchCalled).toBe(false); + }); + + test("an http: Google destination fails before token acquisition and before any network call", async () => { + let fetchCalled = false; + globalThis.fetch = (async () => { fetchCalled = true; return geminiSse("unreachable"); }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "google", + baseUrl: "http://generativelanguage.googleapis.com", + authMode: "oauth", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "gemini", settings); + + expect(result.error).toContain("must use HTTPS"); + expect(result.error).not.toContain("oauth"); + expect(fetchCalled).toBe(false); + }); + + test("a loopback http: destination is allowed (cleartext never leaves the host)", async () => { + let fetchCalled = false; + globalThis.fetch = (async () => { fetchCalled = true; return chatSse("local-description"); }) as typeof fetch; + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "http://127.0.0.1:1234/v1", + authMode: "key", + apiKey: "local-key", + }; + + const result = await describeImageChat(image, "high", "describe this", provider, "local", settings); + + expect(result.error).toBeUndefined(); + expect(fetchCalled).toBe(true); + }); +}); + +describe("chat vision plan provider resolution", () => { + const routed: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://routed.test/v1", + apiKey: "routed-key", + noVisionModels: ["text-model"], + }; + const request = parseRequest({ + model: "routed/text-model", + input: [{ + type: "message", + role: "user", + content: [ + { type: "input_text", text: "what is in this picture?" }, + { type: "input_image", image_url: "data:image/png;base64,aGVsbG8=" }, + ], + }], + }); + const chatConfig = (providers: Record, model: string): OcxConfig => + ({ port: 10100, defaultProvider: "routed", providers, visionSidecar: { enabled: true, backend: "chat", model } }) as OcxConfig; + + test("a bare model with two live-only providers produces NO plan (no arbitrary first-provider pick)", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", liveModels: true }, + p2: { adapter: "openai-chat", baseUrl: "https://p2.test/v1", apiKey: "k2", liveModels: true }, + }, "gemini-flash"); + + expect(planVisionSidecar(config, routed, "text-model", request)).toBeUndefined(); + }); + + test("a bare model listed by TWO configured providers is ambiguous and produces NO plan", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", models: ["gemini-flash"] }, + p2: { adapter: "openai-chat", baseUrl: "https://p2.test/v1", apiKey: "k2", models: ["gemini-flash"] }, + }, "gemini-flash"); + + expect(planVisionSidecar(config, routed, "text-model", request)).toBeUndefined(); + }); + + test("a provider-qualified model selects exactly that provider", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", liveModels: true }, + p2: { adapter: "openai-chat", baseUrl: "https://p2.test/v1", apiKey: "k2", liveModels: true }, + }, "p2/gemini-flash"); + + const plan = planVisionSidecar(config, routed, "text-model", request); + expect(plan?.backend).toBe("chat"); + expect(plan?.chatSidecar?.providerName).toBe("p2"); + expect(plan?.chatSidecar?.model).toBe("gemini-flash"); + }); + + test("a uniquely configured bare model resolves to its provider", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", defaultModel: "gemini-flash" }, + }, "gemini-flash"); + + const plan = planVisionSidecar(config, routed, "text-model", request); + expect(plan?.backend).toBe("chat"); + expect(plan?.chatSidecar?.providerName).toBe("p1"); + }); + + test("disabled or unauthenticated chat providers produce no plan", () => { + const disabled = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", disabled: true, models: ["gemini-flash"] }, + }, "gemini-flash"); + expect(planVisionSidecar(disabled, routed, "text-model", request)).toBeUndefined(); + + const unauthenticated = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", models: ["gemini-flash"] }, + }, "gemini-flash"); + expect(planVisionSidecar(unauthenticated, routed, "text-model", request)).toBeUndefined(); + }); + + test("a namespaced model id resolves through its unique configured provider", () => { + // "anthropic" here is a MODEL NAMESPACE inside the published id, not a + // configured provider: the prefix must not be read as a provider qualifier. + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", models: ["anthropic/claude-3-haiku"] }, + }, "anthropic/claude-3-haiku"); + + const plan = planVisionSidecar(config, routed, "text-model", request); + expect(plan?.backend).toBe("chat"); + expect(plan?.chatSidecar?.providerName).toBe("p1"); + expect(plan?.chatSidecar?.model).toBe("anthropic/claude-3-haiku"); + }); + + test("a bare model matched by namespace suffix keeps the id the provider publishes", () => { + // Bare "gemini-flash" matches the suffix of "google/gemini-flash": the plan + // must carry the PUBLISHED namespaced id, not the bare (unroutable) one. + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", models: ["google/gemini-flash"] }, + }, "gemini-flash"); + + const plan = planVisionSidecar(config, routed, "text-model", request); + expect(plan?.backend).toBe("chat"); + expect(plan?.chatSidecar?.providerName).toBe("p1"); + expect(plan?.chatSidecar?.model).toBe("google/gemini-flash"); + }); + + test("an ambiguous namespaced-suffix match produces no plan", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", models: ["google/gemini-flash"] }, + p2: { adapter: "openai-chat", baseUrl: "https://p2.test/v1", apiKey: "k2", models: ["vertex/gemini-flash"] }, + }, "gemini-flash"); + + expect(planVisionSidecar(config, routed, "text-model", request)).toBeUndefined(); + }); + + test("rejects malformed data URL or unsupported image scheme", async () => { + const provider: OcxProviderConfig = { + adapter: "openai-chat", + baseUrl: "https://vision.example/v1", + apiKey: "k1", + }; + const badScheme = await describeImageChat("http://insecure.example/img.png", "high", "desc", provider, "p", settings); + expect(badScheme.error).toContain("unsupported image URL scheme"); + + const badData = await describeImageChat("data:image/unsupported;base64,123", "high", "desc", provider, "p", settings); + expect(badData.error).toContain("unsupported image type"); + }); +}); diff --git a/tests/vision-eligibility.test.ts b/tests/vision-eligibility.test.ts index 5e77cda24a..4427ae56d9 100644 --- a/tests/vision-eligibility.test.ts +++ b/tests/vision-eligibility.test.ts @@ -4,6 +4,7 @@ import type { OcxConfig } from "../src/types"; import { BASELINE_VISION_MODELS, isVisionEligibleModel, + isChatVisionProviderUsable, modelAcceptsImageInput, visionBackendForCandidate, visionEligibleModelOptions, @@ -245,6 +246,53 @@ describe("vision eligibility core", () => { expect(matches[0]?.baseline).toBe(true); }); + test("chat usability rejects missing env-backed keys", () => { + const previous = process.env.VISION_ELIGIBILITY_MISSING; + delete process.env.VISION_ELIGIBILITY_MISSING; + try { + expect(isChatVisionProviderUsable("missing-env", { + adapter: "openai-chat", baseUrl: "https://example.test", apiKey: "${VISION_ELIGIBILITY_MISSING}", + })).toBe(false); + expect(isChatVisionProviderUsable("missing-google-env", { + adapter: "google", baseUrl: "https://example.test", apiKey: "$VISION_ELIGIBILITY_MISSING", + })).toBe(false); + } finally { + if (previous === undefined) delete process.env.VISION_ELIGIBILITY_MISSING; + else process.env.VISION_ELIGIBILITY_MISSING = previous; + } + }); + + test("chat usability only allows supported OAuth accounts, API keys, and openai-chat keyless local", () => { + expect(isChatVisionProviderUsable("xai", { + adapter: "openai-chat", baseUrl: "https://xai.example", authMode: "oauth", + })).toBe(false); + expect(isChatVisionProviderUsable("not-oauth", { + adapter: "openai-chat", baseUrl: "https://example.test", authMode: "oauth", apiKey: "stale", + })).toBe(false); + expect(isChatVisionProviderUsable("google", { + adapter: "google", baseUrl: "https://google.example", authMode: "local", keyOptional: true, + })).toBe(false); + expect(isChatVisionProviderUsable("local", { + adapter: "openai-chat", baseUrl: "http://127.0.0.1:1234/v1", authMode: "local", + })).toBe(true); + expect(isChatVisionProviderUsable("local", { + adapter: "openai-chat", baseUrl: "https://example.test", apiKeyPool: [{ key: "pool-key" }], + })).toBe(true); + }); + + test("chat options preserve provider identity and qualify every chat candidate", () => { + const config = configWithProviders({ + first: { adapter: "openai-chat", baseUrl: "https://first.test/v1", apiKey: "first-key" }, + second: { adapter: "openai-chat", baseUrl: "https://second.test/v1", apiKey: "second-key" }, + }); + const options = visionEligibleModelOptions(config, [ + { provider: "first", id: "same-model", inputModalities: ["text", "image"] }, + { provider: "second", id: "same-model", inputModalities: ["text", "image"] }, + ], ["chat"]); + expect(options.map(option => option.value)).toEqual(["first/same-model", "second/same-model"]); + expect(options.map(option => option.label)).toEqual(["first / same-model", "second / same-model"]); + }); + test("8. backend routing excludes image-capable rows with no executor", () => { // cursor has no vision sidecar executor — backend is undefined and the row is absent // from the options list even when it is image-capable. diff --git a/tests/vision-sidecar-e2e.test.ts b/tests/vision-sidecar-e2e.test.ts index 9de4bef38b..ab19202a63 100644 --- a/tests/vision-sidecar-e2e.test.ts +++ b/tests/vision-sidecar-e2e.test.ts @@ -66,6 +66,23 @@ function serveSidecar(onRequest: (req: Request, bodyText: string) => void) { }); } +/** Fake chat-completions vision sidecar: records the planned provider request. */ +function serveChatVisionSidecar(record: (bodyText: string) => void) { + return Bun.serve({ + hostname: "127.0.0.1", port: 0, + async fetch(req) { + record(await req.text()); + const sse = [ + `data: ${JSON.stringify({ choices: [{ delta: { content: CAPTION } }] })}`, + "", + "data: [DONE]", + "", + ].join("\n"); + return new Response(sse, { headers: { "content-type": "text/event-stream" } }); + }, + }); +} + /** Fake text-only upstream (openai-chat wire): records the forwarded body. */ function serveUpstream(record: (bodyText: string) => void) { return Bun.serve({ @@ -149,6 +166,49 @@ describe("vision sidecar fallback (issue #88, end-to-end)", () => { expect(JSON.stringify(parsed._rawBody)).toContain("[image omitted:"); }); + test("chat vision sidecar uses the chat provider executor identity, not the routed provider", async () => { + let routedBody = ""; + let chatBody = ""; + upstream = serveUpstream(b => { routedBody = b; }); + sidecar = serveChatVisionSidecar(b => { chatBody = b; }); + const config: OcxConfig = { + port: 0, hostname: "127.0.0.1", defaultProvider: "routed", openaiProviderTierVersion: 2, + providers: { + routed: { + adapter: "openai-chat", + baseUrl: `http://127.0.0.1:${upstream.port}/v1`, + allowPrivateNetwork: true, + apiKey: "routed-key", + noVisionModels: ["blind-model"], + }, + chatvision: { + adapter: "openai-chat", + baseUrl: `http://127.0.0.1:${sidecar.port}/v1`, + allowPrivateNetwork: true, + apiKey: "chat-key", + models: ["vision-model"], + }, + }, + visionSidecar: { enabled: true, backend: "chat", model: "chatvision/vision-model" }, + } as OcxConfig; + saveConfig(config); + const server = startServer(0); + try { + const res = await fetch(new URL("/v1/responses", server.url), { + method: "POST", + headers: { "content-type": "application/json" }, + body: JSON.stringify(baseRequest("routed/blind-model")), + }); + expect(res.status).toBe(200); + expect(JSON.parse(chatBody).model).toBe("vision-model"); + expect(chatBody).toContain("aGVsbG8taW1hZ2UtYnl0ZXM="); + expect(routedBody).toContain(CAPTION); + expect(routedBody).not.toContain("aGVsbG8taW1hZ2UtYnl0ZXM="); + } finally { + await server.stop(true); + } + }); + test("noVisionModels request fires the sidecar and forwards the caption instead of the image", async () => { let upstreamBody = ""; let sidecarBody = ""; From a3f8a38a85a3fc35a179e4e9adb6f915a482b8d4 Mon Sep 17 00:00:00 2001 From: waw4303 Date: Fri, 21 Aug 2026 05:04:37 +0300 Subject: [PATCH 2/4] docs(pr): add vision sidecar screenshot --- .../screenshots/vision-chat-sidecar-picker.png | Bin 0 -> 119648 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 .github/screenshots/vision-chat-sidecar-picker.png diff --git a/.github/screenshots/vision-chat-sidecar-picker.png b/.github/screenshots/vision-chat-sidecar-picker.png new file mode 100644 index 0000000000000000000000000000000000000000..53a8a4ae1dced039f17f78d68dbc0f52e7a219a3 GIT binary patch literal 119648 zcmYJaWl&sQ*R_iUXdD`Mf;$9vmjn+QTtb2bceloa1b6q~?rtHtySux~w{t(|t<%-N zC~9}@C3B5=jj=+N6=hJ72$7(mpin=`N`8iddKU%-1sjA21N>zqi6apT3Ipn+q?np( z+HpF9A+FTp+n$0O7)zGCZ6ZHW6aynq4ih8qi!yx}wo>`a8Me}>bB0TTz>AwZDFcIX zHllwRom3n{7)BUOwk#++PZZ|B>TRqgmMOKtI@#*%$@(x~L!PbT8y2-f7gb;_Iai;VtBG=a-Opa6zZXfv1+TZ^Yr@;BA~N zF{dBaJf;QHOo7+Of<8@X167Y7D~m;NKN8Gi7sN&=7-Ku-*A%yme6KtT{ia+UN7`SF zc-O*ZB_0Ht{%WY&s;a{8-0&{Sbcsq$f=s;iv@VW$q@bEkeh_kX-^V*`0e&Xw99o2E z%a4mB&!UGTuNi zO~Bc^`urfu)Kz*#mSh3ePOcHGJ|>P7)8m~{QL_Z6+zL1^LeS?x>2;uys|gl~GNjA3 zCp>@hS+SYil(e&np@huEgzlve!!C*%AFlyVIGTLAVSe= z&n7Gej7;!>FPcIfDEWX-C{kL-%HM0w#J#>^%R?)8bYG2$mVNkB))AclJ&&tYwdk4# zr|m2Vb-e6k8uu%_j2l;u=ioACu9le-*1I{Xq{R z`0><~Q4Zd{=wQ!*gA@DNrFJEhGh0lI+^neeO)L1VNfFM!U~dn2Xv#|IC4}ZXB%Mu6 zt>arg-El1__Ff@LI@NH4r>hp-;(m+%`w%E6fD(?@24Qh_PHYYYX9Roe>5!G2Y})jT z1UlI6bGT1BqZ~=ZG)Mu3PP^j|jeKbGHb`OZJ%5J#go!vwk%H@}v>rBx8JM9k$&j;D zqKun@?1ja^vQg1Y7g3SVkNoGw)!+Wzoz!~M2MMth<5=uGF?t3{3qOKUx>sL9WVsF& zuUZht9X@yvOeieN;gm@3cgQZLg#?DH1F2UDQq72^uIJI*`RiJV3!?}zZ}S99#>fY% z;7D1)h{+@Ar{GeuDJ7YHOSi2SEOV@X9=-{9F+=^fbEsV6H>&rUO)aAm(gLBAV_kb8 z@R_E$79dpoj3V(A`^ie20jU-gWE?QOzo^6~#@P;SksebAECF&^QNwp0qy6OY$k)kE z-Mke9&eTugH2LSeD2bR_{127R>Ei<|?ARVa{SPg#IhMdv`h3}$?V>12jG$jNpqR@MFlCXsVBexIG8p70(n zei2c-;-7;}hH8ou1+%RzkJeelU`BN>4Xpg{L%Auw_Rz4?(kJ}%f}L za`y>DNSU~aBdGhEod7>^Ayobm!Ld=MoI88q;F_odM8aY;YE|^?IWO68-B%ud1Oe5^ zV8F49ydLu#k@u6b$yIoVZ=o+j`~nXP6y{q`IFUaxLS<3t#AZs)C9`X6wRk+vA8@m9 zkL4EQ1e?v77_?tL1Z14Vo&5n_`Z2_*7SwcGs2GWH>A=x;1TnYK<=p`m#3MMm0nbZb zzr$P`9^pN6_@maVKvlWOH3&7TORXG?%cnWH4T5E%OIHVBop-}k4Vj_2?H4E%kzG-+ z!-`DMEE9+C0%fzgAejZ-%?UJ3MCDH&Vx6?&FQxv#e_0FaVOUpsXBp%tlXq8%7Cx?= z!S-4{I42s8NerhB!qY+qOD4|7O>po|yp^o0ohFk0k+I*Z0~MQRiY)7gHy7+ z#7Yq&|EpjmjU`2|ZcmgS7UiU-Hoq7J?WBHQvd(k4x<5~?99lqP52q4y)S#Bl>Oie6 zn1ZtaTX5JdUgFCAu?Ddn(9fpXcjuIY|Gjq+f=8QfW#4wTm&XP{Q)Ef~_}2{hw$aFu zzdX(l7J+{r*(~Qkf1?gC#$An6qRf~+axzJNGJ`TwCNZsr1Mb4|N40-nlF`@TE{&hhoAGK|4FT5l{07P#_gB;RE?U9PTq>D3 z99H6trL?5~27-L3(<7Lk{jwHctv==pZIXqObfaRDi<$3629xv-3##QRPhA4-bqp0^ z36}nbptn)N?{8V$*=T=q;=(A%VA|_InPS3*0;LkHoW()6i;x(s^Mr76dzDwm?YFU6 z#7)xU^bqZzdI=gGzepxclHhkQA+e;{a;jNu8}CL3T)3Mo0-mMllg+@x@QxVq@hTpB zFJsodF1m1s@_@^P9<4MrrN#4)o=hC}X# z)DRsM8;YaM9E^dfqCIoUJW&M4aRTa)LEX^Eu%Z2htI2%10i`rvpH~=}#_09v+Y{^k zUm34k8A5Ym;prUWAH}KPAI+0~vsrGmOA?y4Za{eV4wIy~ycn9kBqygjFAwhZlRS0H z)j_es{uWQy*F%)TXHLb!7k-k%$voON*lR(QTiCwV5c*Oa}4 zTH4_nk|f69K%`D1XAcVti`?^bFs)KOoOUfD8tBjH=;)t6#YII$<>d#9b${a-HSO(3 zHPtm2LL4rG)~~AJ2qSkxLd|hWN#TjOxVY-->iBpy4I3Yx~;0xFB_qMOSd8fYHE$T^*gQm_Bsi)5Gt0oqC>5ir_+?AUzXR ztgs=x(^Mj(f11L&N!|p-$7Qta&waPXb(c}e&WDkl9_Mrxo06&EjI;yVE_A`$c`WsW zm>=-J<}6YRd7CmlZw1iaB*>-X=GofzPq~S{?@F> z5cb-g)saCZ^OmbAP@uqogh~W^v(VGCFflB)xR7a${Q89%7%0V3wv*}JJI`+NdYL$I zd^>)(s&m;PWrL;BsFgdCTBrdm7mZI&I)-T1!GxsqL0eW6f;T^$BNOk3%5gg;Y37#; z^H7f`BvNf-GeNbWlh3J|sccHOz;Z$C##pHX#b)nqB-I|kv>`VR3?VxsvPILv`3Lw9 z{A{Yr$+6!mP&ntJ=5sqvnovmL%w|w=b#*;k<-rQR@^OkH6-r=o>!_{8?hUVGd(t$p zT5r@AM)#CX2trWBt_4N=Sy)E`|JOWN0XN z7u?n}&GgPUYb$XI{@HhWv>0$=afVoPpfhSSMW|slMfM;2;{$J(T8@sKPB(>c2nam}9z|_Vzcoyx*O2Ou?$*vuSIcy+cFo~_ zDZ;kgKPD#4CzX^iT$zEfi_p{dladM)H~P)N#FQPNCQPBcZ?@S`P|A;>97 zA9u!83jr7@fAUpj-fGy3h!|%MOC1w3L*Iz}J4s+Hj8s(I-1?#^0?t}ZK5g~?;`aXB zuf00f;k`M`FGj`3N6;JI-Q8_DS1#7we0W~-1FILDVK5&Y7#zHCqOLC7?}$RoTlsw~ z!^p_!-Me?0KCf=x-tDT8@$qp?N@>Uaap>AShrLm++lB8vL8wQQ`QaEFoqn)H+&^p; zxU82Oxvds~LSeny`f$F{v)M+j1d;e<C}1RhBbmfmXJ8ISd7;@h8Mf+a zEeG@e6S0W?uJ9u`5I)}Oo@z78y~mzE_QU}eXQ1*^FcxtP@X0h7&-)mAeSI2{$_Xz( zGfX;5Cn!kAJMWy{%t=8(;oL&fj*W|(pPxUGjE#9`yQ%qlYVax}Eq(8qPlAoDrlW&g z(tA|VfffV3k6muJ-Wr#X;C;UlESJC(8Wxt*EvcwD8qV5&--SSijf3;@cvMkd?0&tE z2?k%SdYqlCb#xeXct;TNIEO*el3K{d@hc>KOkGz_jZR7q+v+hQDY@jz=Jul$i1vkV z5dr3h{aY1OAUX4&vJ)PH)QGVbOpJ9^;dtak}$jZCfvqRq2=uBiOpEI^x10L+w1Wf z78p!U#YNp@v(}EGrK@{6wwL*K`S+&WJW$VMAoAg_Nu(R2$ivr}^Nj{78k+7^GVgn% z)7G`|B+t>Yaa)-ZAK|whcbOo^?!OrNW#4;y9AhCUTNXF?Y2wcsRqjRBwg+=k2jK*28;QLJ;E{dVY-xQg461VhX4E z-e`I-I$6+Tz<8x`AJYA&yM)BVmXX5J(&Lu1cFI=PpHt5%W!iNmB_;eWr)icY5C|k3 zkJZ22?)m;Al0<;pa<;T_qq|DEfvrXF)bwjXG7X{RXGVF9O_xQuy$yqRTE<$z2KNeD z&GNuO$pe>x4cXKb^(`d02vq1IRkdqN=~9_cSQ+^B*!cwyU49{CFa(!bJ5BJx(*5o< z^kb+eUww46;lN~qCuf(JKkuw#Wnz5dcT*A~Uc=6bQYJP_>gJZ#ru_)ap5Sl^ey79v zn(t9gNA2Y9y0H>A{9!Co}{FtP%!ORQ&X`o zO2Q9w=65T!u7RA^%lKIS@$EiuubJM9M=ABHg^E&|;p95X>M=1`UF*R)cx?~Tch)PS zW%xX&w^w|7ZJfy1C!E!=kf7a>)BsuN8-fpCWu2XGfoDS`juz`IzkS=?`I{(YipU`G zH-T9!*AIz|-w{z99+l8>qx;?92$y}Pu$RBTKRgOP)Qm4>pc%O!UmtW^ZqYu&ub{i~ z@zO6-n=v2W$BWL;%!B?lk!J^-oMUyh&l65CV%J>-77aA?3wz}!-8t2B=+iXK%dI~o zJ^uQxpw80RAhf{7{))ZPz=@C5x3};@aGBp1(Z$SW^LyAMvc@Ce;Da=w{RJ1?%D_1>Uy<0a4IAJj;@Z0%dh$$jdi$~!5-OS9) zJjFc~6(groeUyCFm4c~!7nXCsv)*^Yd!9_@AI(>p99r&c^*Y|BxmDhc@T|eCP_eVy zUGM9dFK%we1p0WvIE%qy(1`xscQRp3;TuH2fN8;H@r20{lePHt;n{25?};LXa-*Ae ze-$__Z%!$bI_ASnr9qs#qL^Nms_Qqc3h zGE1WordzVZ`^EWWk-7-w&!0cQsRy0iYvsv%kQL+!R4|d(d&;ySprB*ousNl$t$hXS z*SNmaY5L5!IXu;$?GAg7tETbQe79PwzX@Jx(f2tK>E&GPO%^y7VWh2EQ0phA$OWa$5iguJ^wa3O(P~#e*#8T17gbaWcanqkbN;zi&~*w;npLYFD?CI=b{)rW zx$mr1Mnd?_n8Xb1>|qwZJL2GQ^y47CrG2etfE{hKuws(FBd= z^t}TVj}VEnFwbKoQyUvyqbc_9!y{6;C!k5r@q|qVeun=1f%0*-{N=}3Mke{QPxvaa z@N+`F)lxxT9#tlQ=)YHI-k6_wvnIcdvJRRQK(^~3*(4<%rR5C2* zueawtE>;tMxGW|!E82JjI7H>I)~y%)mzVY!QRGyVl(|Zo!X9_0`6m*g5fKWXK0WRv z8X$^@^Z~nF!0E8o^lt)CcR_Z*CPT;>d$`)`qp;oF*Fqmxo}8MJ5Es|3v*@!U9^_G+ z3HXs76xJA6oK4BhVgBuT%jXN5_j4nBHZejOlAiTbBnhL2XUx$i^Ck@$cQCD$d~lk4 zE9GAs@pr>zx;WN2)zw@PM-VC!hn3|e;?zdr$UaPC!S-brB2Q*S%#3e}+`%!}|qGu{JrO*h6 zZY5YTM}*-UK-R(J1a1Aj;aH!)6prj+#=(i-*f3JOgd0S#ZCz=0T55J;Ohb+qalbjl z!NK8*+Z&2!1S$$63(M(5E`k{7@yj1h5Ja2olW1VyH$r9}xp(s6SB8>>p@ zVJ%EjQtzt~9)lL=h#~OP-I>iw^UcfMni4hXoVlcE2Hh3gl2icYcUVRve^bnF!tM-6ez4r%4@Qcf#}Ie$FKA)OF5z+6Gw%S(yGAnEwg4fWI>oA#c9+ zRFvZQ!UhS6@nr@b!eM)peRAf-=1#~?wxe4o=%j-83ws8>J18w^B>Yqw?5(khsejS4 zWbuU_H5k}`lDQC(xY=dM|$@FK*)+a0~;+{db$EaS_+ zqK?svwLY@Q2)!yeFMy%kH8c0 z45Ha$yVuj{Sl$-jGE>opy;0R0Q$pme7JB$e-lXX{&SA8E-5^y<5;j}Xbgh$}A zS&)I(4cD=d(<7&v#5}Tn09$j{FXz4TkFhkDH=eQZlWo9`Y`RjRGA3nUNqQXC}MaESunpArkS$3?Yv^K(tqMi$>j^EKbA=>{k<39+eB6K}}&E zOUuGg?2Q>fsRXcKB8m4{R%`>lvP+up6*je`h94fa(GaH$^7d(c}P z541IVGuonYwM#wjtR2nK`Nv_IdODtWSRIWfg2^(J?lIY;eNws0WPakKab2u_Acy9( zBGfz5qU)1{MkuEGKn4X?ah)?vp#UwaLx`Vq;pDoh~z^L?kLc33yV5Afh zBKa^jGD5;krW*N?19gS71IMxDN? z;T3whcCQanKEAzBAQJHGB`tEZPza%I()ZCczi4_@8Xn786wcnp`6O$-7I9%I&5CmU zw#PrTnMu4xFvKtrQEg=&QA=cW^k8CQh1yrf_aMDGP{O?*cXpc$db1+AEQyA0Q%|R< zK!`r03tM?zOT2(%Bk~7^o=Q`JZPNnB9kkrU6Y`Rh^|`;!7$;--3Qq!YbB0#uD~wER ztlw5dM!8J4gec&Dm{g8;YCyZK7q)qH`6JaW2{;`m#l+}-`Qo(M8+v(pIa{V3pAa9q z_a&}x?e&()vsIFgk(JEp_tOE@?&wp5C3*VEXW|cTL+PuOuIPos;KaUPQsJx3uYu8T zFE*H-X&le?ZBv?s7-wHI1=a+a^GlkW`-z3I4bcPm?M`(gk60}E6kIo_52iA`Ui)lF zQ-}cGMSz(cbDZ>zi;j12h7C6GG(jiGtJ;FA2=>ML5c!*@o!y0pTmsPP+MT8?NCcyy zg4(^={TIid`t`}LKol5j*`-`I8O(&e)Ad$FC0!ujaWv_r@l;orSUKkA=B70PHwrcr!^I zva;S{Vv34rAh^ayrGPU+To@!NbyIajbo}VYj!s9W_ebYRh|pF!t*zoFR^s9w_S)v) zI0L10hTTFh)Vg3AT3Sr~?0{VFtFnf(4EM9f3vj*llD>|P+&#NYI=>U#0t*upal3w# z{W~h(<>l7zZ?EVW^u4+ESvTuPzbjt9FW)aUST9M(1_uXEJ--tL`wgF^xR2?%tX-|l zS~(i4g-lhfDF8*Vic;$9hEpq=2|ChKOL{as1m;M|O|3+r|T)O=}gN8Syg(cKgGwjzrMvWp_C1 z&Vzo7jQUmLiNX1KHxq(h5`0k`(ZK8=m`0Y6y*sA@#y^@lW{r$aR$b$CQ z`y4(V^|ie!7w`7^fR|dBe*>tn_r4l1 z6s#{tYttmK472%i-Jx5w{7%PT8-l|~c%a5*+MleCE_Y;9L|*@o1u$ks+@7ty1&chB z!ib43RN7Halhtchyke^jKApBiv84Y7y^0hBV5lOa{eK6CxNUw0zbC!Hk8KeD1NHiK zKZ^Liz=p2(2Fls}7~hnB{CP4LBHTH}VwRTTO%ybVqT|UVH9texIXL9&_soEwK>fU0 z4?wTAnH&8xSa>{N(YEq%!_JKvewefL^i_G&Jv$(LNMB7%Hj*+pV z+`3Y~RMhPY-wcf}K&{>xBenPk9Kt81@p(uKX74^c;yBX_dEB~gJowaF%pm1~Hq8txfSJ-}=ZV)x<%~Z_T`2C=j;fw@1onvt^eRlTT z3KGyr8ZXv*&?==Q#l^t|>Dt?00zFtNx7FjK<(reL$k=?(akul^>kEL1AQfD7Txu+N z;VVeM;s@&^K@hk4S8iL@Mx(;Q{41!b^B*4E#JakQ>FFI)hJ)ryey4rs@XNJcDTzPl z5@bT5!rUaPUxXA0>yt4x$f^_uKR? z-uDv&n^NkO@84r#ZHnBl=Yqh6Os>Zl|HgkBx<%-^pxrCIWUI!SM8MJYxJrhi;pfi` zj_-n$4%aDP<5EBOwtZp8}-lCn1;p<@U!)A+JR*pnlw(`cs@F;pZtQjyk|E>U+HI z7yQGD|GxHYiFa@$RN|%nf;urOe9gJioRdrD;ucIh-I4%1em#Fd+dJlE;c$4{>^tjr zmVI%|n^4FV!!(;J7$H%m3812oBo#DUFGV1m|F7#YAmy{CdRlG*5S6cyfx6y~u9ShO z7$9zaqZ(-t&|gp%aPjb>NWG3wd6qG7ak+s5;2e`y5LiDhIt{=^Og%r!0N56a1+V8l zGteZM@w!1$wMEA_C}lhV=1540BtGmfL*|FRF;G7}JKKEKdY+Jq&Uq6NtzP-37PNH= z`q!rad$;#Q;R{WRUFITO-#WQ!^-JK`ClT$|qq^Z#4mdYH0lGHnaZE^)=VhBUIBMDc zZzbSg=o1hac(&t;i_#aBl;Ebmu#Xs@w%n24BT@iOoPhIjoLWZFVWDEWqM~A0ShH}! z*7X4gqh>iI;`sR3^slDib82vrTwqdbYb(0QBmR40e#fHkW29LIKZ*HZgdv%uxM+o| zpl%b&w!77sRi4|!>Ec+!aPgPBol|^KehRf0ctc&sAu(_S4IIMCC3JNMK&F)UgNDc0Ly91RF zr2xrKMh>##d~xx@Ioq})SVZEiX)J{~DY-_7j-U|+8{XNh>M-ob-# z(-0g+VZROt9-{a2#Q<<#-2v-Ws_4%a@*9$0A2qe(uJ$}ocJ}-SUN3Lvh(y0=J&(3z zdN&so6@@4od2A2C!^lzMXr=*v_ik6YVp+LfC{P^O1x3)GOK! zmlnztI|5+Jks2qVrw*`s*V!X*@RF_F(5bpGQOMJUP~W;5LDejUr70Fa%ZAbeXmG=K8Lb5A@mw;YP*r%(HuKfjj(;UkG!P+1yH2t%rle!AyEblOx0 z013;+FPaC8NPtBfqN!{nDj3iPJAo5N`|~1xyoCxq>0^>%2DNG-=m>qEygBkfIZjcN zqE{0>$RO>Mt>|;X4`iTp9R+Ya=)l#EVS)^Kj3lA{f}u-4MR#J*gop?zU=%Duo|v3Y zilDc7vMZscggbNoRqqgwaa}Q{hz>`?w+;+u9|$TMdFM80iwa~+c+_1H2r|a85)Wio z1QGz&fQRhxps@d2!7Q?!x`Y`u*a=vY;1RM2E_$dsSo(Vz#xGBFm4)w-s?6p+q-=RgzP4yVLD?`ag`1}C}eZmUDIY{=!qCxyUK@7;B7wz_F96Nk#j@3JCR$6~H&KJQA zW>B*IAb!&YiGh0;2vT1#qmjq>H}d;D8+drlTccEHp+Df3J z12VPHDhv9OyZHV$=y27&5s*ZyhI{Vx|wT7ws2FBJeHo&*93FZZv zUG0uC)3f|DW}=8!aQIAz@}Obik5^ih+PE=saBfo91hKz0Wb!#ktHAe1$HZKYOQ7T6 z;e`{8^ID1D#(|aJ)?Q9sLPJ9VkA{YZ9B4Hc!QMCN&CqK?-e6qZ-E0s1egHJlDx|=b zX{xAfP^T<;8zTzqObV(yg%=(kOvG9t-O-P!3tifO*Tw@94}U@zqyPtH#H&*7L)}nC z#Ei=P_R08jo<|fzi!1ldjT=ACv5H!4WKdI4u!U*~nu}QKGTdZ!Y>f=j4~A}eX)hcc zcO~Ft?}SBqMnyw|S?;ZjWB6)jO6{szqeVL{NSjw*Uk_hYPG3P+QC?2-n5~U~jH&M{eNj{gldY)vW?qP(-{=1`N}4>5Ykr ziC>t%B++?gIPiI=AYZNCQ&T_u5_zL<^Wb4sIoix~p%o6_jxz(F`(v}502;Jq`@nGY zctMp$>HVabmH1Iyvl&>};I!*$Pln8kQ%ESCoGD4b*awy@eRN!LSSFc*8pc zhxCir7MTnMPK15}xu3s}6PyI8V_kOp;${IVy}}gOP1<}4_oJ#$k}2QUzc0eU;{TWCVCtHSy6n6~ zQv1nwHNWP$@jLK3$-6t}duWAo$P)=^W$?mLE$GM)jZyD2GmK0U#uh%^*9J>UC9@)h zJSy5Xhp}k@*-OdD+zstNjC#lc$N_%iV5KF3n0+%hD$#HE!;xQdRaF&+>+O$Q9h;7= z6g~I5a)5`D5)x`_Yd3Gd%kQB0$gF}0q@OT z5Mpoz=SMHGNOo4`$6*4FEXVoP4xhIY^-Onjd13FN;bfMP;42A(eDBCI%nz1-EQ?FG84yI?YJd^STU zW|yu02!Iy;7MT1}1I$$41p+#0+^-2np1aS0!P>W>c)`KJp;@M_u4y)wkt4o_9eMrw zbXG_mrl*!7DJ8T&NEO*{aJ`#~apm`Pw$^Sk03ap`+tuZ!a~BmaVJ9h`Q1|n$FCEYJ zjdF>joXl$Lu}T^jIHb$JHKnbsS=3y6;CXAyY!&;|fh0_rtoOPfLcPtJzGiQ$oA~$p z?O3J#TN0OLXxf*Npq(&u&$V{1z`#HNR02$NFWqI;dCBUm?M~m*QxMg!9o1kgQ{*fT zcM+jF(BCZn^6F~MZ7&@#(=PXR+5yY!`f%o`I}ll!g?MoA7o|A^Au6|7Q|%(;j?1?c zaKPS~^Zb~%UGMaJjNLQ?56bA)MpInZa#_wI{>m0{Ia?)RK#>xK(`LVDatObNAblqb z8yqaM^emL`&2PD<)3Z@8;&b#Uf_0Q5L~Wm>!6`W@c5F~kaL6(T+OSVYP5C$Ax`N*QYCf|2jiF#B>Rz6$kk(AReO51=QO-NZT_`kk z(gcp&DQ`I?1OO@EZ6hc5P|5^| zn95U!&6@Cev_f6z@v%e2^O|KZJGt>}+#j%JnLgzx6lqA;>)WjWTX{o3(L}4;72x`_ zvx>Z}dYt<0*{2WG;M$ zaP-4CPS$tv|6>6Z0bOzVrhaJlcX}@3UkVj7lbzRufQCVE+}0koQeFR{LvwF9!|TBw zIz0i#K4|ZT$hr}_+lck}5Fi?PFemV}ph0M~2%pmqvLSyfCH4HpUZ6N@lxdG>{=iTZ z=3ym6ff}bF|GHt2>D!Sj9SKPquh(mFbbE+@3&27^C*(Bj903eRUr{9mXk5AA+mpAa zexf~xQB_Jf@gf|Acm%7>wz~vTF+=ZV=cW1X?)Mgyrr*DJTn;hz8X=EhZU#U>Zy@8n z#`Cy-^EZUHhaZWJdi&4|J@rn!bNFaHy9Y4l4FlCXZ*y8th#D+D?8OMr$4 z_GW*O_hV>#b=Qj*o%Y2TCvU&s4A-$~yK%=1$7`@&AykC!^}`M7`1tW-mH|eE=!Bb_ zo3S}mX`@ZY3vLNCDzZk^Z}U&CmITMcfyj811xfr)3|wO7h3*eKi6n)t=j+)L!R5M5 zG1^<=oV?{gD>~T&c`r&0fyK1PO^?%*l_*C10EtypLZu?+vcR5ByCoZ^DN;b*uv)Cm zwj+nBEm?Y0&2krKsEplUEn@)uWPbO_gO8YrialM?&O_sN*=?6dT;1ja0ZE(OetJAB zj$ok`ahIH6rZo4tf}j?p8TZZ%1RX*K=~z*Nz|VqpHHirjt47PV^KRs8&MpEUnQ4)S zrzJLeFJFzHxNv1+Pq0?<(QSeXG@H{qf-{A7Tm9A*yl0I+poj|3O@+h_(|@ooR~AQ4kR z0(mQgn21LIw}4eCt*!(9tgYujWW(|LmJRss7Bxv}$>T?Fo+6z1cy%Hks{%Vw7g>4v zpJ5i8^b#0|O_S zi&x(Hcb-|NJ>TYw58%Czk7KxIqC2a3dqbD;9sie+iy2kN=^7X-T!cG@?SgOj|C64v zx?<#9{uCp<1mH6*nCJ}|GS*ybe>N3u4e4d>cTqjfit@S*r*h*oW~TK&7A6Z6EGzlV zc1T)We}m*BOG`}*a{}!2)zv{X;1MIB`HhKLUzWlgVBCQrMEgi?@97Eiz2{4d6) zDkXvZqtnssMA{Lu6>OmRtF4(oH0W2c)8ded*-X%*eEV7(k-e{Ywg%w&A5~^cw74AI zjwCQ&7wPF>DnfH5XZ4;exi}uG%`Ga=2B8uiEmF`QgtL}w9;DhFmZ)j=RvHqdp+;qcVgb zk8IYb3)NAbsEEgZ04^O7N;>N_-wBH{N+WC6|45F8BSclhe~+qkbK%(MHgMA9z>H=O z)>B>^M-C$o(RrRlVZZE@7kEF(g*(L_BTd}kCQzxuwUs1kgs{gkFU~_j;GpEYAvO$o z(Eg%i08&_nMWLdCd_4Q`tpLOp1BeIc#a>jNT4s9scYILXF|o0vUfW9I#IBf!aR`DF z}mH9EV5CCrGN`d70w?WS|ML*xmCq;8_KdWWonl9H%Z ziiw4Vo|&0~Nme!_nE&nN%m*yK4ke}T0A4dU=-T;v-eB%HRdQ&7Hx>dPAkc{z8WjcZ zGmjQ&6>xI@f>a^;yQKBu0Pwid)6!ZEyK==5i?H-Jfnd-H4T|4|t{Dy)-zpcvsEU~? z-F4MFWXZtUBzc+obe*bVfJ;>Y#b8riU{<{O%s(xTAvH{KW-L_zoKB2`W^ zgu#uCU^1E<3iu3+D3UBG@SosZtbIj5Az`rc+0}3G4}1=Zh`5;?&Ctej$KJ?_Rb7v&yrd==cQAe+Ppo&0k|zPgu`M3 zW8}P}eVuHu5)|;`Q^JE`2>pm%alCOo4VOXATk-j6Vqv`BZZ2QQ-Zv4aM@J_o99b*? zRr039zoU=}l)_`teO~X0+J|6ge1M|ZB75`nJ12zmOv6Uv&oWtSA8x=C&@BLXEN_-E;Cfu}0eP-<6dZNM1e%pXbD7B8c5~hT;MDoCn`{ z{Q(=K9W}>bCmv5M^^4 zD#mFh-TfDdfPlc!ABy(h95&Ry9~oD-%UWeOuD?`1@bjiV&FYcZUq|B?^mFaMu~maP z$&!A-JYOBP*1>XDR8g5|b~;K^G;89n|Ni7 zq9ptHsc)PJw6Ef=+)pz(mL7Mew?nqPJ!flYuDtMF-PY(h-_qsJR;`w;OwvB*=TQO8 z$BN_AhchNo!e%y3^JQKts@iB5JRnD@lgN^Ov>At})F1iDlw`zWt({~Weu+{VrEqN1 zkbZ^Z#@fPh=aM^!F)I&+&~SqI($HpA0W&y@$dx9#zh}-xFJ>z z=NDTvO3Csa{!q{cQJK7UhtmhjEnbH!E)%x=calIr&HN*XYinSId-myQ|F@JTtA4BF zl9fsEjO0L%1fl{OJicds8K-My?zmoy^MwS_arcr_rN}@8(Oy1c}HIzcws5tmMks5#4&;BqsEQ|jJO8enV*-jxCi~ zQsoV;q>yh!BtXMw6XnG%Dm=17-L>PVW2*#O1E|>w!?-ZH3rM5mJ@Qh9@u#Zc^yXM) zt9Pyz-<6m@dc@g2bQ+j_tQw-MLPs3;FHlVX)G?VMpU>`|RBLVP>zJcEd4B9#5>?2k z2wmPMX5G!jqN_|g^|Zt40;@%q{nmi5Q)|OIl@36V?$vzkGHu07j_!{rs=v~o>D&#u zjxYx-2VuOZLgB}k z9DGH-01V|XDi3$xGcjd+3zy^)?GJ`X&N|+p1*_NCO+R=NbIfG&iW%HX>?X44l^8Uc z8~}ah2H$ITFtH^Iv9KpZ8zy?JDUF!F8N!0R`M4~<7vx*LE^(NEXLsph+jFr+OC#T? z*J>{l@U29o7J$s?6Vj2yU3;FheX-s2uMc+#tv+wV1Y<8RU$l+xKPim606p()DT0~n z?&}LiqvhP4_%INPz#t(xDS*%MRsXHw=X`$N(~)h!!EuLtMdE9eoazx8xwWpzsU?TJ zlRo)f_-=U(BvQQvv}qT*E~CJ^tp>OpUrVvKCI=UkvtDmJiXSDY`3|1@y8wp#^y(6T zEy_fwzO)zJn<)ff5Xv8MXA5_(!Ne{nT`N?s(JPJiWQU7I&?XgQz|)q5o@sHLCJr4!(*(qhEcuP|iX2Q#(N!lMwM zU#lv;UjAiuggclncB#;+!dg8YO=I^0EWPvD!1Ld+qe;SEKrcAo_Jm+;@zoK#z8miG zldDwjE_)!Gn5QLJ8xh>QRtrjJq1fre|Mgkly|RC)*1X232mY}R5W(m6NpNiEx9wS3 zPykY%zZZYF| zzX1DW=Olqdsgt}AghK$_cH?M{1HIS+4iTVkpoGNF8NXD21%ZB02^0dHI;%8?5V)xn zQrOz$B%qS!e1(&eSM#NC%!BALYk~cKNc&7huRui4Vh3cW132KCKodYQ!!<+E75Tiu z`U82w!lEP~0DCNeE()kqYff|Ndt;fIH|xac8#STCdB3s3@jBkwkQcv&>}eH!lJx_> zn#I&Cv9{;_4%>!&07(6`FIu;#+qk6quULBBSK#^smWu!BDtbn2*VA*Nfp=iha6aiG z`VE0?mva$f@>k^T|6>9EyQWo<&CW3$?e?)?WbG%u_g@%Opfxz-0t*KXU7{#gtZU}oH1@@gTPBx!r`k}1f5LZ6mis^PJ8POB~n)|MWu zm^>^?={k<8(8*9K%2qScBK9mhRvX10om#{hxrPnP8}Ay8_;1DR2G~Hj;YAm5eC{5e zHBT^jimA=R<MZxagHtz@-lvQa#ZrX=!Qi*9Gl+oiAVh{3bdR z2)yDe1=5vo0TBc_KZ<#)-L7~PHjHyB$scU>U#JtU*9W10 z$5|90L$1Jq{#WeDW%M?mmbM_W^qWh_k|4`6GeHgr6FcIlhfUqT$rwe>GQS2Fb|C1ZYEl8Zbd7 zB@y;?73=zcG@WHsRo~ZzX}ENEcQ;7GrMp`|LRye6>AWHm3X;;&DM)uJozgAR9a7@E z`TfT`hMyR6Irqdqd(AcHvux1{J#{5+*0VO+ItMCDaDHv?3=Z~-#=gnoafO<@3x1rL zA?!K8D^Pq-$?tc%H(gA}Wx(x#M9BQhlFKTbRlNOCBsU^gxLc~$;t%$JjtH+Fdh{rq zOHuTH4jkjgBi_Aj#l3El@4u8Mz@taqTC!=$3pxqf4!!JF+XQAU4#TRE;bARULg&R8 zcnP>F^nw>_wduE(w*2rC%jw^*g+;T-DR-(t3^5W#n`XBvEsgZ%zK=i)e~>T@I|`vb zLL>9pA7!m-qi6fS>)^=3$DXHu4#GyTv9bC1;lrWN{YI}6t=q-#*Wk4e2^a)dsQuxb zVWOJM*K`AvUdv0Lh(r;ThHxjl+TG?xj{!aZD<>wS4^otc^lOclM zm^J>OyL!+GZ!RiA>4>Kkr56;uO!@c5`!3Eg0tH(l_(5c2Cp%5lb6}gp=x6o6*pg69 z1?ZqHTuMqxA79H$wWq!GH>a!7-x?1R89ZobE)Q{nn(1a8fl;o&(~9>PE{sPojroEa!97akH&L^5JNC2v6V^4`n&CDdLv||QI<$GCZg@;c#+S64D`aO~^{cxrga(7X1 zx&Rvaz=Z*~;bPht=0cA4W*n>va!U>J)DuN!3DkR_K{G?NdE9z}aI_VHBh_Ym0|PdN zY2|wy%BDB_lG+k|pq%am4g;p&*gZ%a3h2-pH(6HKo6{s&_st>ENd`&t34UB0H*Yyn z!P>{Hi!1Z^!VK05?qyq01_}Zb@S5l|&M<|G64Hr0Q-4dZ0IV728S8VW{HGxOKl%%l z5tHAk3aIsgCJY3f;%ugm=j7AIoIF%|*{*WOSc{hgWB53;;Du@2fF~iVQ&)&7QoUnxId{D!j&@*UIZd<^D6P-85_!G7x>EE$V)4k!u=K@pdf> z-G<^QMYb(Nogsb^a;vBc$ssVRY6%x8Prc3 zSNcv)*AoQxq^{=?ZW5#4xxZTLK%9wnoIXZ0$*ZqVc7jikYOy@qY!rUIindg&l@nbp zV5j~kU33H0xx%j~*49((QQ`!N1_!l)}QoxVX62!mq;}6ciLnw3~8E zd7);K%rA>hN!gf~{C~&o-QFUH1Z}dB3m!Mrf@Tzzh~IZL{w+mMT!1_9$w&x)rOtfz z75EpB&TJ~2+j1Aa;L1^G=Jbpj#I`Id^OBetbp1GdxfqLy-TQo1*j79}rHA+ZvKPMT zr@vRZS55_4ekkbHpPsjK2~|e*mAJdRuQFhgx?KopNqd8;ZE?}`W)X zx+w%SmP|}ca7pp;r@lGQbxNK6`m+|IMW}DoX}1M?u>@_|dY<-ue4J$pn3Jwv_LU2`SF;vyEII;BVq1~=XRk9Q9Ie$~jR3ROR&w1mGv7}~SzRYZjRT77N5-Ld zKUvx>&HAyjw%DOMUgoKiIk5+W<220| zElHJ`?%X?JHgR(;!RZe|tsL`#$M*X5hp+ULhtHYwO2|9#9gDQ*$sgoK=(TDtvq9c! z=imKw&UEWs<#O$H-MBC4;Aq@EPJJ1Sr+K|nMuhbOIBS5f?8ApVjX4m`k!9c%OWq2Y z0nP63-(lV_g7<`V_4Q{eQ0)c=2BxY(lV-Ic2z3QTB^(^|uyAh5g|LE(3X` ztQVx78EGPSBHG4OV>kVzapLgos&*!h3jVjMg;%UNJn+%EirH?{>ZpEM2<7GFjTgAp z^Oz1e$&B?8U^kW4IZnI4x7=4C&_+y>+B8t0E32Zi$MNqE%}qx3Y7odMM=2PV+VOwZqYHC5E9PE9s26E^!r0 zhIct~gDwNfGzVb@)Ws@O=K!-=;pY&QS#N^Jje^u?X?YgPl%0L45)B7<7xTa5M!E^f zrZoOnz&!|J3ESsH94->Ms+8hBZJ^DhqoV;*rj3F3Ag+ar)dMybyc!7BN7 ziYAVlQ2x=9_w20=ec*KV79}Dgj*g5JcBOrH%8YAOi<#k9y*KC0G@ zEK#M+tu4?XemtxjN4p=(9xbBCRUH9E#^9LwW)iKF(->>1D@zK%7`@mNE423seX{Fp zcJAKFYBhcpCqO@s=?9sY;vn<6`C|slDwm*S%=z0`xO!lZk;tHOL7UYIG6(=R2^PSi4^PL(bUw?&{UV6&jW-!Jh{z0IunuxBRMoV zyhIF_Z@jQ*R)2-vAM}8?=+EHm+wO=Mhu?Mf()0QLp7S8f*yP352wGD!j`ZNmLI_-e z$%E1YN{j)!)OeZn<0~a2NfZuiXNsdqmgcPOx}$+epp`NnvzCdJgvm zemaJe-ja6x=4ILr2ajwIuG#Zs|5wc>U(HYx&C%a3+?v5YUSUifJTC5k)h0H`>;Nb& zg^vc*2DUrgo&)dV76C2gt;T?qPfURdf~~(Ycl6)bVzD@g$MLs2DTT$UIM}_aQ>3%0)*3mQ5Rlm#~`+}t8lm@Ze5;0?A<1*m=)90Ory?q*qM3Hb&sKLA6 zb@;iDP+rzW*2Nn8KUdf7ZpgUZ;cu=tI5u&<_j5!EJnt~Ol&Cmw)wo;&W3Fu-QHnh} zr<$fF?2}_6X*CkR)v&Vh0Bd&@GpD;Qy>KJb z%2UmDnGqxVpixY~rj-qcj)9>zteVo2+!Tu^_QyzGjJ!o{hN#PZA~jbD4>?UO%`K!q zqu(*y2KViX_dYjE`w4>KpG;a^epzr%aknOZXS*KlC}^H(+I^w;En{_BcQ3}YaYN{L@?7cm`va+&(a1jwM0ZclzcUmg6 zJ&r+RfK}n_06r~K*6lS;Si7UvEx{qUD?|D1C z_kOx$InyPVc1L}Y&!%mY3-)$L?47!sBS2@%qWKm!3;b=ODypO09~d#`nB%ToXF;YL zw^qx#?*Fv_M!3n|2kX18>NafRj$W0@c46k2S{M79^p9rnTTc7eZJ8~@9A#PO6mP>^ zHmauB>!o^5l`r*KcXLoazH~Zm#ih@q4#rf)@9WfuSm*LW)i(v9X+N+t)VRV5GD;abGOWorq?>fbMO-`MvO)2cYC-k;x#I_Q)VH+3M$=h4Qt<|(ZB>2Ds0lt2nH z|6rxX3mcV2^Ew|U!o6ASk9h+xt;Ynr?m;@^|E=n&mhJ9DIgw`+@JT7QR}8n02aOOS zTeqcuTwPs9_oal^MGd0;cbF1Asx04@Mc4v$`T;vv;ni9?o*`)8sr9(;ib}yey$fhZ z7L_*EvDLypM3Q#%4d!TjON0q#$mvQHwIhCm82$&#+UCvUdlk*@Um4L%g#J!U8@KLC zVQlafLf=ZJ+l7-FyHn9S9Aszt6gzhX-00r;OWy*w~4WGoI)?To2Y$s!>r3T3L}hkj3Q9VGXJe52H?o@W7+dw$V@b`@ivlGb1JOkqx>`<#zVJ%LGTRW>ZfZJZjX{g*7TrWou>64@2obhj8wt7h&wSh=i&$(h86>cNc z*UO|tTnnqRk<9XjJQIs@=8~X{y4{8dezgrNi&Rpt<3)X!rM@o+6?75W_MQ;Mc&hSs z;-!uM(btPoKGW)G={k3y^!Fc55cq}^jgE|{udgt$PA*qq|Ydbg^Q zb#QXzdSsPT`U@ghK@k|Q`ED_tlSSlo)xJN7?tP zCo)cg@ozL=Ke)u6B49&>&wJySQ6GL}t8%X$Cxk8Y##7c`oYx6zqZxUkdsUjMsZ@P0 z!dk%1^EU-`GKrk+jWYL=h}BBL%%(nt$vKi#!~sqjzAn^C*7rdvlNU=j;fcx9M^n@0 z&qKw9Gm9J1RZYnXgAk(I3<`#wSC=!3d z?kdVL`lT6UkEeyni=l&5pLMy90n=%AB1SeMBKc#vkUTmc79~gc%}JJPw1TenCUA11 zB9rkm75~8d-7F74h{DtmJO#<+FLiate>u-TX2cZw1vn7gt;mv+l=`U0bSS+C*E?vP%+OMA4)=<>zqsE6U;X!s3bwMnX8f;XQsDha4B|%z#`VGd>1}#%lU}Ls zMQr)xAN1t^P*DNOMQh+KI&^zX32cr}|;u92W zw4My5^x#O{>k>``D3;ir5W7KcA%-VA_jGt_@fFRh)7m(!tU_8U)o+{uQtf0@ zuF%}oMc_KIceiH?1y( z?d=1D!9u&9$QmYBhYOydHla;IOQI8v?0j5%=3v;8ok$7Mhz7b3y)w?*E$v_+1>@zpT~AqXO5)3i?dg^S6HZO5PV>;FiG z6=?HTC6`gl&fKxV2+@0*YE4)PX$oXEUg4A8_tZX5)_xjKBX zA|pUXE-W5yYM{;E)A1!P;XqtRN*O+`|1a1^XSPJM-I2Y3y?XJq9I(*0{aMAI)3to< z<#ibrfm)DXAXA)s9tk_xVfK7s=jv+l`IY-IWnp-R@9xAS5SGK+wLgMrWy7o6Pqdtq zCTW(*OwK^%lh)Pjrsm=c6Yjq08nx{ONl4x-L(ln4-r`szdn66(#xl68hMlu-8@N0&jn{FN&H}L@2+4?wUoTA z<>xwAZ6v+Mj##zIS%$hSG)~-ftU%VP<4sNrc{7Z#Vucm0cmGyi?{o4O2|N-C(1r28 zn{lLj35hx6}+Rs z0crvao-bc-Fdlflqo%J8etguX|4uoa%EbaxIn}a~bbP1!b2NAMHe&4P9HUB@+;;Jn+>6in;lA zL}FrMWF(T+d(1=yAQ*2lmABttH*>c?@$Nu#es^~_TEXp73%GJYK0@&VO@;QW9<#O} z8YL26@>4MBeoJV{0ox8aQ~hZZ3FQnMQ3~WbGSKoDFl6=OZLX{!CUcJt%FUDi@-KaA z+9f;;sW(3$t0)#%jR%K~ca9B6`{x*-dG(~)~pS?IX)1 z8NKofCw_tB&3C-sf`WXsYJSjliueRiGap(l_!~&!4nTFWp%U}TO_%vVHeKBP0tUA@ zIG~XUf&%xM_kXsCobF1+Ily9qqO+BxMExb_-V&L`l6Oo9g76tT=KYZyqLRMh0He}o zE%~RL_K8+JqECZA-gQ4hpg%N=s6sE!N71U*R0T`lk#W0DuILJQDk@aP>MqIS5&;EO zXd&7Z+F1!BM|p;A3y+ z?ZFEY^st$a)<^a^a=#`EUPpC}jQph%6Jaj=J~Hy^XFc05IGW(?_*q=Pwe~;Yr}K?G zVq#AZ99T3P{nk--v2i=VVj`J@q z8=`_0UKNHb|6pkb)W#Q{C($PB-W+qzaB#qA{Y=#$?^bwh!A!$-O1`yPQ!BmMcr>fE7Jc!;QsoOr}O$pKN-JhDmWQK zDRk1?>-!dk`9g5B?XWFx;#@9nqD)phJZ*KVdL#;&>waj`@fbDhFkZtmnVXEii5VS~ z(%8@M9fj%yFABEpn;B@f(%sti8)x&PQpVyvVu}0r%mB=)Jhx0StK@|6woQpFRm_lSF<)3cg=S%;5%_7&c zX+p_~7BHcQ2}W}FaSM>u3Vko-4;hRPruvGfu;AzC}i$@&C1eIXzFz zvAF5T47*P(%WQa@8E_Egv}=lmp2))a3~!e@2tnjg=zpzOJ{(hvMMFJS^^5wVDtcxy z{81wGBb;O#{3soj5!DHkyi?qM`)7%I8k#is^BT2M*Uo!6cEVBlR%GPw2q`ngnJ_;0 zoOV+wdId4oST5H7vSseIk);4zt$=P_pequqK9x6#p`jm-d0wBl=0lvm&)&Xy{`XJs zMp5-RAFCth7p#hlw;Nu@!@aZ)SM5T~gZ`Ou3f_CB@t7YzbI@sGl;OIFlfT37qte#V z3>YFPk*5{2fwu~G@D_4IzjjE-J|U^std>xEDqcIg$yf>V(*27Q3{FtL!beTNG)3N# z4P+%ejQx4h#>=5*su)X%p6)%fN@<9$)YKwsBlO)=XCUKS%CIQGSQYn{KdB0l$5$(E ztz49_GN)y5qo<^$x(#l(O50l7t9+Y1l-M!<%!Fe(`N$262HeUk?7!53Ecs1U45r7?3r%>E=6_@NMIalh4Fn zoIUE?vjqKIcteaOD;)3o3TURtYg8_mRMEG$2=$ItF&|Vj} zp{m|&_S^wpgAUN0H>$Q^qIQBCI5PKL`DWc8dm-@@_e(;IC^*aN&j+yD=mnw3JYIMg zzkh%K*xT9y3Z<%H528fmoEgaLhQ(O%MA;I)vPDJ5Iv8u_zI2#hc!_qB`}$`=;!Kw- zeQjV6_bub_Ay%wd0-n8^tc_DJ9jip%;>@s-ZJ*W`6vA=Vt=#Ai94tv%+&+Yw;|f(t z=EwWBIhsH>;}JolwTqNK6W*;m=n4IZ7h23s*VWFc-Qe)0h4IIEr@CqKg5Bxm<>iZz zzuzqQX~7vv09$D2Isl>01Dqi+%VKue4By7Z zMcyP{SG5+$lSz`x(t3dIQJvlB_2F$P2*rS8T7)@n%yAT!&dtiHcmMe|2%dytDWmnj zZ$D~~YJXF0e!l>yUcf7u1)Lfr#KclpGt;;m>GqT%R`-bjN2Umo?;?H z@g}grDO+rOO~ZxVLOHY1iz6MEkWgHSrPOZseyhZ44(xhCqlJA83*mGAq??0*h(`UH zxrFt;gb3JYS-xRd`>vTnDdER^8S-72n;YBo$)^jVE0iu`bRF7)F5|#>G+nBi$jic_ z^j&Y6Caa8bX3)h24+&2O6`f<}xQOsbQn+54aYgLQVff5!oXxHrlyIc4%PU^pT~)Ky zTR?(j-;)bx&~=o9=}5msi$Ta}li~H4FX2^+Wlm#wGtgmV1V0}9GUyV81_oxWxJm>6 zuLy33tflHmRJya zauh(@;4-f}kH=-_+CF&PoIdeNb!9R`zgv<@U(M*95~&XXnxyu#T}pVsVA4iaPD#YY zp_vy6y2JEzLE!uq7iXcAK#dGfFD53&#FQQ#A-Mp;ZzL9eRvSH0b5-U5tNZ4lvau`l z;UwfA$9z6qA;R6h}H2i+`ijhvpOzK9k9?f6_( z?HGjbc}-2E2;G<+HbaCrcMlgl5|1}MAPYqG>{yr;;U(JlEJYL|#7LrUPL?)DtT&Dy zB2aO{!ZdoJb)lWOHxC!%a@jqRgt;1RAlu2)`M^&)9w>`Cfh~{df}rmEovelUl4gR9 z7D?URDw7&p*_?Jdlo-w+{L{bNot)P#d(2v7E$>m3ld3wK=~<5~Nd>HaWT zmEe7LOE0783TZbK%FG0Q(fsG%)VEcjjJ6fFbv4q0$t<|#U5@7*OmA3Y-k6OFxDTNE zf6jjs;5#4P36etk&hvooDE+tondb}UU0}>^cs1KX)Cccwb++jnjY)MqK=DsJ=r^W( z#P|66m6qLaoL@t>&xY{kSNSby&a+F2Lh``9fat*kg6o7{|mL z&0&Q_8kv_zHwcXP-up&=5G^H|(8(v>4hnlvN;|NIYAMKxpdkqoJs@up^dbBG!FGIi zQ@?hydgQ~2m<#|b{|4TlreqW)_KumiqJ>z<{JH&|*&>o_7%GCG07FjF{45r3O7{!$ z1=Iw!z9&){i~<4#A0{et;idmQU^oQMe*?Q{@Si3bErX}!BJ5(sa4q#c^fl!<<>WbndTGs+7qHGgxSQ(KlzP1%D!c{1oiIRw~CU_Nx z#Y!a#yo%t3Hg3EIL14hh#KBS%2t)5`E-EJNLH>q@O|baslqKpK)pT|R>mCtFHfUG) z5T8Q>&DtuEgAhH00IM$TWhZ2!#$gykA}jUvh}vZ7HwhdATXW25ql_wF&zaTbhoJy284|?f&}6l4O2$#*R3Y(GA^9 zAR_HzN18JbaGxslka**u)B%UJgS&1hzg2Ow`al{2;H3~7v_6X=Um@8919irWLJ+~! z(kqg9FTy#B$@@H z>0w1BrpHOs6HIfLauTqgv-%mW)m|tCC6aIwIbme3>MX> zIt_cjuv@|YyI*)Z;$#Sg*ob;He|UQm;D@{o>8p1r;&H;g?+S~s{N0UV;f}C>n3$9L zZ(8e(R*vX2@STxN!}RpL~40$gh4kHHq-9Aiqfo;M0x}kdm^9O~FQh zJ_Wf=*hQp15^)%*h7cTAM9+YsL*5{n^`!&%^Hs&;0MU1qdL9dOQ zD19ZiPGiwUiME3_;^%urwTNUr%b!kgv1kIH!u6W=OwjXujNsi@@X zhee3v67%u^k{v+54=)qgJs6DAKRf&a;+SE48i^yegl{i#gix(BD1LReNP`^?HidSJK5DhE8Kq!NnuTBWS{V$Gi3G34U(?;PD*L%!;rm zFY@r_qS#h?_Xy9MU3-~3Q znKcMjMwj(1;xs2VDls%g)4b08gJexTvd&E>{vP*gBW5R}1K6mR{yf|umgY!@I}voP z2E7?fph-lW%h5@2&CTt$$atOs$T@m@YrpXg7GaNxkoVFf^i~=L!}5j?U&W| z+5UG>>K2a}hKs8gqiKAImw07Lp{9J+eQvx`7Z*%e-x7m&9}3gRz|umHSq)w|Mb=1d zmNAVB7{r|G2Z<`*5P8p|QpEcfbXqU(S6cVxvCGuH0?b;zj&g}1wz zYd}umSEtps<^;)xP~yMGt==}=xjnQ|U2M5>bP`OWfcDKBzrK|q9j*8{C{4M_-7`dG z4UD+_&ObTD;H<#f{|eQ2LWQsYy<)K)+^99!rq*Z_x93L5I`{hfA2;vNx&g@);E}yD zi;Ep5v~w%9eMv=hi#PDK`#=c-8uVR|ua5o>=W=F2=@ zw6P@_octq&4bzN_OZi^sxjkQFiT~FE*`ITg_Fj$#R%85c#gfW z{9MirN&Dpzt7LYal9-r9Z})!myG=H?n9GIv65 z_)+6$i^Op&Vb7j^&1>y!nMM&94INCyA&ouH%w0Ho z)y{ioFYnz!-81rsAF8O+5(^hch<-HXKRS6)P+%{p$BNlr+SJIqd_a8nv-^8oAc?h1 z_i9%+70i|QU}r2sJo#nC5>C?op~mH@gA@=ZW~BJDn4kDsFZFMimYyadmjC4SD6>zA z$y#O_oOOZ46o=RIl6c=9)d}4U{?!~+HK1O~rK6T#SZC7mWt=UL7&-HL`SI5L0zHk1 zr#WgjP;BxI!X*5tAmFDn!J@yVCbpZ@Lk3*B(v30`pXEk8ftJGI+;b-yzIu2xs@Ivk zfuT;$#e}o^$qM2yU*z%1ExC1cItOc68HRFW4ef2mZUf>M?$N}QsB*PCr6M{((ar31 zpJ=iMcZLIj?vpnO7umu8peA|Dk~VAe^Wi(2^y+M%D2wP1!=LW|MsE%yd`gB9Ws8T| z*Xy#v9Es2&(2;|#!v!M}5t<08`YO~R0yNLdy_TsYbDAUPaesnljTyhgC~DA(#cEA`o z7IR#xV*oCxu@!f3hLTTE90~JC_}kCSg3xH;C!(T$?!NG*J$h7+E*YtYsxN!2@};(HoT)O(blB(gGu1=(J3#@?YJ)y%kSc3NJDQh(?NTB9eZT*WGD~C)1FOi*fJOUagNt)xOhBw2;Od_L`jK;e zTv=I42aDp{!D&1+-SZ&r;I<~nQ*lwR&>(%ZjGya_3C_=9SERoh@FVAfrh$-3gaZ z^Q1-gi2j%a@q(kp72bf$%2wZh+7=eaY?>gVK?@?nI);YCP)-OsK^*#-uT{87ydogE zJy|wtF^6(|-V0HxquJEyaB%2HL-udDre#T{b-!#Bl1u&GYo6nY&^ zg-ceS(Y{0$I>N4t>%32>8AVWP#Cet#{zYQ4#oz$I3b81J1z)eW<$vY>GsV<63C_th zFui}?e*4tP^|T9V^gd{O-r-ekU`+zQ*S9PA1A+q$Pd^E;F=n zUZoVosFRpC7a0o7vi}tMV`THfcCeL1GK1gmJ-V4>CYEV_Qje0AyO{I5wZOQV(h@O1 zN9KD+fqcfTyF1Y!aslgtuX1q#qPpr&h`BlSVh&n0&h^u1<4 z@w&OSxjQFdKh_2&G`!XI@bJhE*awujuKEv1{aMHO7Q=it@A9W3pJ}H72C%pw#ikY8 z2v?ypFY!z2(6PaTYINi?Gpu*)gz~K&8$vHM^FT=ASP@zncSV~m!3IOlVuMZ6C!(c? zBdhs?@eTZfGkgbq093opl(FI(lO|6Nkk_$y;v+f#PFH-_+5>Mr!X4hxNU@hn6iP}z z${-{FOg+JE+VjlBRJNxxlSVR1eK5*J0<+T56IOCYiRw8}^LWQWnDv}O=Xd#QAKPJ7 zb%%g|daP-)gKkmbe$}CQ#8Pz>$)S$N#}-Py;7ok|8ov^FF{&kbRXCmos(B{S)HdKdZhcN;JXph|og^fERvY9~=i+V=V=4Tf6ai7>u^92gDs4K?dZ{n)C(eCV`;D zO6%*jbK7CZo}r;3gK{JLM*jAL3vK$lQ=)Gi)6oi97%%JfJh_>FKekHw9e)Ii_{{xfm%@AMENyWp!DV z>sp>9D;_Q=QJcIEgx$|ui&wEiX#9Waw5(*zG041a0>%OWi$O1w2f~PrV#1i1PsNR? zyRotHM`n%4?}Bt_WVA^)Q6d|S*W$g12P?%qI@+3+nA?`=JY#}kw94yw``d+Je3${5 zb6C$gsezuUuyD%#tb$Qy^=J^L%j$b)p`qU2Tdi#??C6HsQ8QUy$JF@O_lLlt{EFa_ zG(p1x)7-gI#p?H)-R-m?0sun-*!$FRhbN*dP*Z^FCBulw-U~}&xCX8HZ@cV)QT1NT z!(oW1zqhw1CuwS&rw25E5E6b=XFuk%w@lXaG%pAUj#qO78sy>`Yrox+9F~ek@9s8O zmKtBjRM$)b?39Yi4`QkEk)U)iQDrSJ=pKw*02AmAm%qJJ9BcPt;}#|s_88m#RibB% z*`H&M9+zVoj+DsT&9C>gc0iQty>hBJ!oClR$w?T~9yyRTzJ)O7(Hhchci(yq+v`J6 zuphIK75#BvE0t}Vi3V1xdrT(@F84Ash{@@%%y^ILGl2vsa5|@^r2O5HuJ(UneA(Ff zc?~3g-=6oSO%`k*QsfefaJ4{xjPu|&cwTsv*2(>>t!Qvjiol-)Se|#O+<>JDW(vxe zS5=LTj(U%l0aXTUH}g-gKu1dxPo_;-Sv^wZ_VyNNh3uQ(@DD=c@fTC=ri6tXg{`oy z!v9nLp{yatbLW%BMmAw}(Xsh%NS#%F#{^eIGhgz5J7Rqtk%OuiXtVMx-hWnIS%GP} z#4Z^42XegVQz@Ld*OX5qam;69Hy$Fu!+Q_dD=3S7yOWKdl9OGR8b*b%cS-vD`vGG;M5UGr9_j5Iv-gAyCDTfR4uR-_MH#dH`7--V|ec$mIN~)2bCYC*2uv8<$Pime{fvHE;Et+NKURtHX$k1dB5Pr=}iy)1O6 zd|E@eW*zOe&j`%fnrp|@73j34G+A6iDGTRe&~D)G$24NP$HIBp!6Th$dq9tKi27oX*?gs|P<`VLhA@1^Hf84&CI z^#5%d>m7t4QAF7^gpd0-!v(-5f;m$#o4^42q}OEkXu6~-j#$Zs$#Z9-?-zAvImB{4 zE4frcA9bYT*O{{LU)F}GVwi@Oos`mli%9KDc{YTS8eG79C)!R7_CLd~V?;Rp^J;@n} z5~s_idj18~EQXX*m4b?96A$S�Fv}8E!3R5T5psWh|dILHTsUo!QsxvnJbUV##p) zqU0L>G`Vs(^SAyh&xA(&ov)$KR8Cx$;2sw~|8^T2Vfe~PB&TqJdb`w~%86_lHL0j|DTHlVi9hwPRs3S^ zpGc{+x&2u(uhhf@Z+%F`RS;t}1UCzs`fYt-&rzqb}8`}E~We-KSct*A)SCP-pf(|0jBNf*f z`n@roFyd7RwZJ&YnCR%mqtn`6lt3ofRq5~2ieg};HSoQYyHds$1kppueEc5mc7>B$t zvtQR_dqoOBk^o1|G!|5ppI={*T#`T51EM%+7#ILRpT&515=uf(1l;HC5#XPWrSOt02OarH;PejTUY%CvUj1b``*yx8_z~}Detvm*O)nA>_%7`pm9XzoNtSq&L_`X>D!HT^c%L(w zi%jau!6-G8?Ya_cH#awH>mIN*Uk@UIB7_bNsrqfk>;(5$_uWc;gat9nbYVw)S5VD4 zlX{PRnGV{rHDop8NNCg{b==Hs!-Wx{yPPqgNIpQ2QbyZvb5d3NZga{wjI>I3p7y{;iBwY(j5LdRMqlTI9T6KCH=( z@7CXc-U3sw1z3QO|R7EEGdh{RDN{YZo6D#F7_PC}Y z@7zu&hNiG+$0fc;HdU=-2V??$BclQj%9^gy>e5osFHX)b1mP-h;fS9uT;MgC5h^+? zE{Hj?^gsX)Z|bAGU=KL<{z=hrVgi9Ji8j136vA~GR5TnMoDU7r#PS#z7`;*i-z{UHzYwV4TEbGL7z|lyO$!un zdI@($?&2iX_k#xPoC&Gp!5(T!2x zG$zj(hL5x%qRk46H#W*nln6#nic2xo9*m8SS^z;(FvncxS)!|`We&8am)7HK!9LQ+ znAXuM2a2|4FDrK@6`>4HLpW1_GWzmk9pd79*g%TmBlf9lm zOR{mX2EXM)Dlf(ANax{xnXdizC-bU3ZkfHxKJU}-QV(h{hqkk5M^E6q6ROQ4QW%EM z6S>?<#AV~F9jAS|%ru7rFteI*+OPlJ(E&MDQB_fAxto@xpI!wJ=!=PnG=Wu$79Ph7 z@$EB*LjkmIaO0!igWCiA9w#Lgvq;nN-r|8*Og9wzzhkuoqaAs{p$73%{S;@Ke+$;@ zr+@O|A~fj8;iTba{s>q~&S2B~R8DP%%)b)O(xidn3M;!6$ly**s7|+ZM&|15J~O_O zw??f;fI^|5&kx4DUh+ihgYm)_T_`R8{u_c5Zj4XJhAS$P?m8kK|LCbj`>Li*C!s9T z+hL|8iB<(n0O)?vGoJo(2ZDi7u<^g6K&qu@)uoL+eL2N;tjelojN`m?RibMA9?U;8 zG&BSe>IJs8a3vTbm?w+>bkH`hgav7FktR{H5)s@J$|3e2Gi7x7D@lmIAtMXDoXLQ=nMsU(|3MtN{Ch!GTuYGFbBzmxdv z^!+nyDxl}0h0Il$$c^+>n1G=&U%RZCVE8ZZ4gG$=+9mMFold5UeZk;Ju&CqENCg6D zE{MW|Diw!P#0{X|q#v8W@RSd<$EO6&^EB9q3O0j&@593pio0@ib3tw%SQp~AWa66q z&hn=V(-M)C{Qvh|(um*x;+&uY0}cD>EK&B^apK$`Ui15Wc9PD2-qwEztjj9mgf zKqP#`nU`QnMXpJg(f-%7%W185h~@$dwKhrsSqvlGRop=7R@OZx-H19!=l{gwdN|7= zC@9FobJAM*yi^z(c68FQBzE0U>t0*i{<=-a-XG8;ior{(10XhC|A0SG0jSE^*ZinV z5IyU8tF(#U_f>TJzr^5uop1{`>_BOI3_2%xtL>XbnXWCsi3$+MHO_O~bikah^Xe5R zjIe2u^+|WwMP(<1QC^yq%DI(>q7E~ueVVXWMwfUFI4U<6Bw#Y0zMD71d!BNu}ki@(*x10#@7nL4^s3w?3LIe|r7Z*zP^1+Y8kH_Vx=}(wN~8oqqy<4j z0fP{w5y`veob$WSz2`Z9oagauXUDg{z1F+laA93GI4w$0x!qD{mOsQknQsH60P^W> zHqTb?l`#PxMD-5X!v;bw4vq4Tv1~#uWpZ>xguH^|Kg+RDyxf>udepoa51&_D{MVP$ z6FDU>z@))=n&PYAyiGlLkgc~JN-Ps&>fb(MgHdnVP#?8)H#lH3iQ5v9^9U+w!`pE* z+k6LnfouVrpr@mI!s&wc_R2artDx|BLrsDEl7G|S@Nn4zq6*e?t>4b_s4u1eY5_NJtY5|aJm1MEhy}GJ3E@Q#eb7`*`KV8OH>{=Qhrw+6^vf2xSNG~R2x&q1Aa0!l&;its_CL10FUjDuak zn9;RM>hfEZ%oHS|hqVhC<@$(2&X+z}SsOF(ra(u5|Bbw-`7P-q!nk|~x{XxoWTG?C z`x``TOia;RM1)V)#Bb#2r=(r1eEM|xZ07O7oXpLsa|l7FR}JY|5?ce9Jtjtkx3xT=7H$u6WK)4Tdq@Nw=zC-Y!*Qdi^8@OtbD*B#9 z)qZN7j}6vh@LBQ8`yl>hetjtCA`knm1E95qKO<_C6DHe=_ToYOo|IY0JJ}IhMK77N z_t68bt;?$Eo|cA2CxduI2eEKGjbabDlY`mV9Y`Z&C9q2LisZ$8$O^?QjfGn;-sWZf zTKd3sK@*>*8as^f_Ld5c6uQ!-dI=jV)Y=m6XPXkRY&G@WS0~8-W>oJqaNVZw-qQ15 zgZ&xVTU_VVVJ4+i+S1RGA?e6?!h5jLLruS{^ma?#z(734XlKw30&RdX7mmdazSJ21w%XB63sLj7{14;$F zxWL6UfVehJ{ryYl`J?q{kfhH^Ic9UvyP=N6Bl7u|-#9dpK&~(%$SAZLKZC~34?|}6 zesPp*r%~(ZDeAQl881Ehb|Hr0iF8xD$-+Cc;3tl(u*Z87QbuC@m(cr;zCC;v3%gWD zJ&s~23vCZ-(;DV)7<;K9G_7Z0Q*(L+E0+AcF=oARxE_P?kMParnc&FRQW$g~r>PeZ z7|Pu>mQZ4NL#WWlV$M=u-i5h`jt4p1oUTs_)bCIWF*T(lqG+~Rfmey~4rrJJ%_rB{2VZ|7(H_!H%0Kdq>Xk{^nPVsNy4m zyO)dP+*j97527-SxthG+FyQ-L;iVs8L0>^ecU%>2>L52aH%F)wZ|LC$58!+LWy5y< zX-!+9yCbfsiosYb9d;0s96L`#!fz|L$q&}Q)HG=Q=tH3^mcxS^-vVG`E|{71`Czb- zsY^_-T2Adbjk=mY8bPY(Z=^;V+Qhqd`{ypI1ThtAHEuo^dK;3j$aN!{$olY8lTwrb zZC~(}~V(tFB zHzOV!OAfdz9mgLNAB)P2=$D(9dV1yw!w=Vi<4V?OZ**CB7PDUEG1G82@PQ$zAL0ZZ z_SPrsB$_~0TuE)jqfs{+S-u|5E!Po-8a0$)a6yImuof%{NH3D_KZ^KbxH^pKT~XQ@ zQS(}Qq7)!~l;0JeGk+;5C+Cb~q(U_qS2lt0>ET1F&S4C*CO?1DXF}Sic-L8Shr2&l zQGC1|-Yacvf~Kw;`6eIZViy$ir=)0}#olWkn@!G4cPpBUw=`<*sh2+!0c+q>%c^-| zat;{^8vaEtKE+U^Z1??;`UDeKqwpZ6i7zX!)Z)%%%O8gojm|HS_G7K&g$$qM2ie;n z&@#HpD+qGL;~RCUkE;oLoey*5Qsfc18y_@z#K8I_w6~a)(?3+A9-l_mFeq|Y ze%@oY{>F!8W7@t)DyOJm|MXIg4%ydforkK59C%z{p5Z=R~kE zK#@R=5RO3I-gH8!Q;ZmOpVxTv1?Q*T1yL#C<>kWrHYLaS`o#O=?l{+TG{hV-q7Gi@ zRtdtX#Bp7u<(-HcNc9X8Vr1nSFj1sN-e!|>A>vRV2t!1>AvRhzRZsuYEbLOZFx?mE zkyDNk8BnC~c{u41WU#LreL04Y%(15(ZJ1EAXrIV4_w!heGPk~fbZkl3AH7`9)bgmw z64~e{yIc)Sn{IiTBq8B^tx!ect?qR3OGtP6)XTjuqNrH(<+>NfpJOsH1ixKNN(Azw zIK!zJ2Q5Pvz4JtwPT}_{-F+8#HH)6e1Ap6@;hgL*6+FHNnl== zf4-rE=KLVVH@tmuCesUU<1riC%xXl63&i#k-4?d#1ZhIuJW%>Z%Ki1SG0AxJYo?L% z)%=R{NIu%Lbu&u7ZR#&U64`N2PI}=hh|Ueo zP^w>wVY*u;DHIvD*mcyjV<9xBr(DPVVnfkhsn5=*WE6dfHyg0LVOmDa6ys`7;;&w? zD6+%Y_2pT)657)Y6Fgl(CRv5Op#6%1Xm5EmJe_QK0|6w4W}gYwDLurQQJ+U9gW#xY zROzK>R07=3;`7d1!kR`cw~~mNeEOU2+p4iGO>Rs_%7h>3({4 zt5+fI@KzQ;3yWxr%b41SZ^uT#%o5DpgI7f+zg=pZdr_hi&pgS)hS4{&v3VG3 zZ4;4sDnHkT=eH}C!aLG(&=X6z;sx!@>YkvX@T}L|M|BX&Gjeh-7kPgl390(49I-(59qA3Z(YXjYDbHi=A@PqBq^$>X0P5s?X;3l8_PQQHY3cM+5OPXOOK-CSjPdsYlceH1L?UFZ*-iRlf~Btw zWUj5f>7a<{u!+)=8DX7A$_E&sKH~gJ{%`$ery;5FeZ`9m!y# z^Sg4?kGy#I{ub(qj(BbQTkMmEOYn1c<4eI5t?B-8;Bw+vuPiT_i~WGGQT`dxSUfku zHQFJvJ9hLLj}vW7%*}}s%JR`Mgy@Iz!(T-#peL8;DSims6(}-O3}wXkN4iqjIrh&O zU4up<=wPMHnMvv0C_gk!YhT(`ImmhAQObJ@3N-vQ&dF{*IU9PY=t4z;mlX4VIqNmb zo+~Xr-qv}&w5raz`M|*WuV2@D=UW*bYG)tK2TA(S$gfoM^+fp1tJ791BQ`H9RlUc< z68p$ndFwKNrw9US0oa?N{k5`}mt8B}npMU+5|~>5B5GDZWxMIVlP)weVs6;+GG~+Y z=Ct6XbK5&ZbXxB&}9D`nS?ESu8M7c`cr1y@Q&Fl&5l^AW6s3# zz^xI6igH!r);Gm-Bs(IT>J1Tj4ouIqnu0n?M198!OeaI}372Q-;pO~Xe}f)Y;|D$&G**(;_X4QjQ7cBFn1+!i6Rr%vWa$2QF;&(YVBqb(2Xvwhq zV$xs@!$`%AVB@eLufwAto;nBHQPs0&$YHewif(dpavVF%hvZ@OouwgMIj_f5W7llj zTK_8LYGzK3fmOI)mNL^;SWWE%!*&XC?-PY~qMNNixgGtDw)%+ptnr4#zEaKqp1ALP za+?eG4`&PxKKT3`*5{bG%sYLeN;-!dGY#TON%S6GRa)EiGXCm(`1=0-O>?(MUlMR$ zM_1<4vqVHiVYrW8e!7XUc5pBx2nETC$URB%`9mrU4iW81R8iByTcC7%KyXiRDL8(( zgwfQ@bVDT^(e~!a@ayICwz?QPU*-scdp|I3(~CqIiVoWOhiR6-H^d0$SY>-Qi}-ms5Zs~xxYiTP zeT|5LLY;MoocSW9i>`6*2&GIUM}7@V7J-;U$^LOcD<2c4O`<`euBf=jm?~6{KltTm zX1VxAJ?>z##Yy<%K79CNI=f>o6UWignS7;AGMV5UDXRzbfB%8h_|Kst36jX;kTK@+ ze%TWCS{ja+0E~$1dQ0cSM_3^W-2aq_M+m2(0{AM$!Yr}OnojZ|Lq9zoif~e{)SXZ1 z#y{subPiCPxQ_Vn+OX}T!R*^%TM?uqExY)Ny0t<8>C4MAgD)CS3~5uKTY#IJ+rQU$ z2Bk)CLNtwzY4A6ZFwV`N*AOQ3Np&)Eb#>L&CR?Q)qy5H)@FAb&(!|y_D=#lEC+9Wr z5+Dwst++UX8NXb~_Z8$RA}RiPIDp>uTuxAy1#qqL6@+C2^$IWhg1hY9)p4)|jf#w};dqD&fVqm_$#V3t)WN6u;JPU9v*k^de{iuL~z8igqU^N zhdUR!_DV9HG!9*((Rr-e<~`hywj`N%I9XZQ%KPtSF2;v!Bf5l; zq-*Tuq#Qt*vcm$8I+l5D)+hcP|;SIFKn-1h6`{erjrJM0B*@>i7-# zO1B^X@~kkExB}Z7b;yn27#kB4?~Qr%`Yww~@ct8pJB39>Vq#)w#)y8D2!M%TRKbBB zAhQ1!b4#reKXw(8`^pWhIRcyAcAW4DmSHUM_8|))lRVrDlZdD9zOSU0bOz!-si7(4 zn)=OouG)gi4pk2{KUe_5qyH#~A#bLej6EtaW~H}=n3Py6ioWeU7LnL6KV&I6E<^>YQAqlVM!;Sb-eJ*W4KXPrtD?s=O;=~+FTwKrBlyguJYUFSXD zfuBe<^h9BM+{`FUW}{5?7{n=hu(_&8HbUEvt^_lYa6{nx#{i%ndN2aCOX&6fVP8Gu@Mmo$2OcB>iQ>)rBlljkp>bKaIMqy^_5j_=GG1i zrm`IaeIEwVj(QNCg$^eXcWeuW0RxWE+r?;PijGN8kJ;_`@PnZ!ySKxc1BiSS)YO6p z1O%NC*phK-R@wV>|!b`gG2Uin$hprH2TJflfFky~T!W?SJ! z;a!*qzDLRJ*RJ=gHAcSFji^ujws_I;jpO7|c=m-`&%NBNZ|m>A99vtmvV79Uubi^M zmP}ukK<4?_iINdwpo*p3&p*npZSKGB~*BSsd z)Of(i9UQ8xkD$jZV=$C>;&Q-{`Ybau6S_t6uYq7l3!RJKn=^79EYXROvC>7d?6~uU zH$C+4&RtriTC^v!>6RRp+m=4!7WGF`qimvqQ6*VU7a}MreofZoWsm{Jx%HdAnpv2M z6B|p*JT*`EJn|#Criq-N_cX)3J3?jhE^8IfY3*%0NUY3){=VlLZf{AiB(w{dNUPa< z5^}tqWg1OO$I3O)q%}h#Fs)`9qFOL|Mg+~%xp8A$R$-;{5_+8bMdhyxDWK%ZKK*`+ z4AA;EtnL{9*Qg(qzo{PeW_a3;R+yF5*4Dy+-=9lD%o)ncOm?T2K%4BeTJ3u6vtl~M zDSOlU_HAkFIu$KnNXC2$vvY1@Mn*=7MG*;!sG5a^1t^S&q)5GN7ru3glsbYsg<42k z=>_i1_Ns|G{~5*v0BfAn0{STgHEJXDI*)Y9AXf#xKKBoQHHu3)KusZD8;f)1ou^j6 zW1Nuq@EvPx>^26l4bX;@zYTq64r9u5{g6@&%0r`ZDHv611vsf$Vvad9i{H@3vu>cY z&o9xl&hle#k$HDVG#cK1co-^I*c@pkt8lR__2hQxPR!S|yT;nuMZOhh=mn!n-o~n} zy_2HNu|+8OzvF+V5qxAHj!G_X_4z*VMOEeY7s?EkSyM9ymUKF{i)~!!dS@64ZfS&^zJS-k|e-QxD!3H@n|jOpg4@av#!*v~m>Us%@t|x(=jh8n^ERo=Q(8>Y zF3Nu4mnoJtnm*zJE_BADagL<)2h6uhhWYTOy8)~R?{KSHMU~?nvq`dAF@Apa{yu8_ zCPRocfsqGkdeyMAU`*J~$_F7?Sxe?mJWgp7@vujevLeaO-{j=h9d-NM6tMkc`j@Y_ zHdsP~w}TP356_cbdb5UvFgy5Ye={%S zo>}(fDmew@O`5?pZY8cbu@-vKyx=YJR1N>HU{4XTPfNYRGw#jRw)gdU<|R+$x~PKx zY9PCBYMxSF<885W5`n`IaphpyN=KnyqZoa?F+ITrk7RaL-2$F>ciwhrJ?UqpyGeQB z_)3W-;b*tcFj3wJr=0GFU0+0sp)VM8T~I4Y+L`I4pY`5t#?z4!7dL?0hqv=!Y|QkW z-(@Tmmos+_Yx89(isiL21f8c`*8DxgAf)?ogM;$E@wiA%VUT_q=?z= z6PQG+p6v5!^Mo9H$V0{ADKEkjMo{m)bFX<#lH3Wl0-!bKU}1qIYgIEpl1g1vgxqKU zuaB?inwYiVU7@~;Zt!Xa>1%OHy-9iFUvNk$S-Q4m)%5aenvd^**q7g=Ka~sh-j7U` zSBg#QCR}s;{LQN&`jSGow?UtU<(&&J8|L$&0>Nfq@V%Q)=58bRBhL`SW1QwUVHxrc zMXgTjAWcqDN3YI=vV%x!9Ds|eJKT6f^Cj@7_@q2cl)=QDIWr%K0rUjxuhvzJIia#m z&&fH4DXkw&sH({q#va7Q5qNjry%O!7yFpK51uSWC9(ZZ1$Rwq)O88;&lBMJ~KDR3P zu-Vn|q2@;p)PqBLi3{oJh$*YS#lBYp-)tBrKsBbIutdH{GR|j?zOofDfODHd% zQHr5NlkLWQIL(-dILuFuC#)PtCnzc=<(M%WEf+3aVBn9%O+TE1LVfWV!p~%-w?*yB z@M%IfkVN&(49HL|RL2x<#B-r9KtM;rNUP3$U(LY7KqmkSwBo{ptro8NudVG(51Z&| z`{TdM(`jl%yw#H9NO!0WEc2J_W2eo@dZX!KakuBj_sVn^H?c~IvnQ+5)jz`tP{9>d z70(xx6F8v0l+0;Be2dKvaLP6`)QP_A1H~BVbYRl%wTT_~hYF_4=yE_WhaXJqJ1oc( zh-tP^^467JcPSr-BbR-zM9(PUkI2tQ27^I<`dJ$SUr&GkeF*pi-GDA)d-Ro`=Vlg1 z%$M*#_UZ)C<2ZP~PN-czd#g8eKQ`|dL|j9j_!a;*^mXCwv=3{qsbQtK-On<%21PU` zInhA&jEw{#cw^k|c|T9t7@G6}Xz+>JsMvg8N-}z=CP@~YI&zO+PAZ zzvFu)S|t1I{##$E#@*LV`|fJ>bnQY((YGLMXw(9aT=mBy7{=66N|b{P_F@UenKK@r zUX*MwIPjCr93Siw>Wu&Dqc#etzSLL^4H1}&=;-QVYk-!Y&yV3o4`=~TrXc0Y)vF7A z)Tj9O_z|-C+F{ynUx}9%(o3Za%}2fiW;d93FhNtb${~AgIM?7$7h5ivjDZCQGJS5( z(AIVp%I4*ik1HRp4-~0fxv~Rh9UBl3{nNdhB92y@kUzeeF8@A}S`-z&2d3mbUMumg zh>>vuxv(ol{B2+u+TuBtS-XJd13d`gHJqKt9r$pEK-~pN0#WYl1h5C3(dmeSI0ObI z5xbX< zm%PdT&heF4>s5@lPq8?^{J{^2Q3<`2kEvFS!F%@xFW6^b#g6~#e+ZkKw_YPR_;4a) zLssMa_>kV@-TM7M7xTPNcFI&0BG=|#F;%;)SF{0x1?m)?;glB-qq$3$Zg7^NMDZWk zv;`}m&k~8k2d4HsPo>F%N2hfzo=4%GB}3Ra3QLi#RKNCB*Npbp*N-=}1fKoKck5VRY@O&A}c%HHlI|APP2{)Q)qFjnKfw0fS7 zfr0qD%E5Ax&pOnUD8{7Bw5x)Jq&kI7c9!<<>xRC!w#fdKYy9-J(Eg7lQ-*z@=hv5W zTCr`&b!CV8?Tlrfxp2ElweK6$vA_giaW&^1==kCuae?kI_0dZue2T6lKCO>chtg*U z05}MOr#o#cA>0RojMTh5M;jXkR#xEh@(PHZdjwps2%F81HI7Exq+vL2Orc^A_C*RFDaV%@IZ71B2+z+VAY^z)ft zh&Hzg(L@bbZy@XxT@I`u?S+>fEf!W|q_jztwg^ac z)OyiV+dcv!Y&2(JpB_<@DVb`p8X3OSXvK1Xk^`^*BF>{n`Y%8dk-z4Y)M-b4bccw% zSM+o1yeM_~P?Kg2yl}{c30_WIcsbc0ci!kn)n^AY*8x!>ri`1<`i35`%=A7#xS@T{ z%HGU(E4Xv%Rpd)UT41ag;6NsxK zwt4!m9{?}{^d_6&5KVD01aX{#!ApIbjP0)GqNf(xY{8i5mb0YFK1hFjVA z^Z~RHVT(9TTc?Al!^pQzH~N*A3seabsMLXj9U9wRc0%@%IirT+Ptuy6ZG{vFd&}CB3eI6hZF`Cdm`UM=tiS2ddkuMT^@AB3{ch(hjqS2PaIQ7n3d z*}Oo5KB5}0LsT?fh>=-QwiR#ITFQ-yi{m}Yq;|ff2=77b?#D~8Z~X05%_TJHxPJ7Z zY}lBGkPdq=(p-0$d2cA^)$$Z#gcVj3OlMK++^s^y-UCFw3{{daRmP*M8(v&zIngaqO4~Vdir`L)n0HTp4*D+lGpTyATqC zW}ceHL31utSxW8P_bH+|NKB}f{uZ%US^l=JyJi3YL8Hf=XQd~Da$iDYZ!eGV@X{k# zbAz`;R?p!2ZD{gnAIFgTkww|)=v2&zhzD(sc&u2?0;&R4^(nv?z&wZ9Zybn5WZIPh z)dTW8>vz=V>eCvPtv)_=Er)>bX-7xFE=26TXm@&8J4EEDjUM?${69bM%vW-d>7`1p z!8Q}>mu8S9A1n~hrHaqRnwjTVdu`CRWv&7li(3*KyL&;GqAB)8PC7n z!hem|h0gY$4M~@TsdE*vLX4 zc?{+`6n9OEz^yU#aR!*d3!jb;&x2t49~!832bO|(kp@ zES{!UbCIn>#27f36<d+IH`8KGV@pN6FC|xUMoY zJ;+NJF)IxfPRz*2NYls>VV^_Zrx2SzS+Lb-|msQ9nWo8QZoQgq@QKS-X{g1c;h}bw9_Y?NK(J@mqplC;|pHpCx^p8d5>6#@c zKYzoGTt3gVweyoItF?9T{rhN|q-gvx369xK*wSdbhox2?gu}NaE{?)j7>lj9RqMS- z8W7WNeCZOD1F@GCahFSkP7V7k8}pob@zSj;jifr*_?~>nzfydc$QGlmzy79Z@Byq4 z1P}nN9|^?pqLwSFtE1ZgIS_ZadzWQyZ7A9wtWRLgBy*ooy}w^R-1mT$vy0{rS!Hhr zn(IgO*QV(}qm6BC+M&%!b(mPzO`&i25F1?c#}xEt50 z65iJ}>Rfz=x4IgJGV-Cf^0zzgtodqp@R+0_$}20uG(eRv0?7CK$e4R1IDY(JAmM-G zEgCkrx}1mJr#2H1xOSJpm$@6?hp;I~e)gli>U8K95uI?Kg#gip2%-Qb2j2%JD6{2u5yiiWjQ>fziYR&B;wg+xt;G5)KqLdbmcR#X7NrqTFQIs&>cS9$K! z_>^sJ-Twbc`|O~-!RYD(Cx79hJ~4;@s2jL1MKb1e*1=STXwmANxd0K6L>B^{Ls3RV z?gZvMrk0j(y_26zz%RnZH{&jTarylB@6reQ8pL~#Q6!2~JNOkGQC~$XML~WcADmZ_ zI(6L|_t(+57U;%6UjncbIRxWqqg)zifQOjRrfq};F$Hc2M*RQD0*arR2PP+vnXa7+ zquO~qKR-XVCH*l)Zyyf~j=Ef{bYtEP4=2RO3u>bX$~YDAl0bJ7N{rK;-~n zM9EHhi~P)_u?6mdl~fPgb%V$PbTSW`GuTO7=IZJmYAr90 zC3i;XJ#F|@eNfDCIL2b*o~MZb7vd{1H!G2Fre))FJ zmx#}j;pDJJ7^GmRr4HVO(a~>eF1o&(P%0NbB;BCr?4oC7?f13|2xxxh{Mw;Imelp4loZ86nNCoO_tU5=;E_EWVr;1Lofi455BOHv7@@v>u&c;j+jV z!S|PTH+i=TeB>c!mGUhTD7 z=mn%11lE4``o(?UCq+E~TuX5KqH|P%3i2VyoOu$CpJ*T{-f4(HLd?lo(~fq|sGv-Z zVs4PDla>v+Tzv`YOaJbq5d!y%j9rt9I7?Ptv)q?8(abXKNuTA~sI$HdPptdJU2oM! z+uf!3VDp;wC$c*t`Yd_l>$kkobn5@zfe4ZDCYMqAl9md-dS67zy@<6;d( zqyM_QegX(k|GkasVlpPeG0y$r&e-UeaOX>iYqb}i(m4nX@eBHtp8F}ysCVH zEpZ}j>W^KKr%m5d*Vost%gjs>GVJgT3=9M>H>Dov&F8rNp-={~wrnXeDAt}EL_8*jV<>>>?y75P4FmiF6iXog^JL-k zb^%$>iBD1zm!%H>9OVPM$BL#o>l*+COUO|K=o}PLg#6s z?NwWfIO1c7OlTy(7SC{2S>_qFUH~sYf4xc32DBoy_c=irAZ#R6S2sK{ZceWe8b1Pd zEx1$&S_!{7cfj1|pT*hC9X)^XAQ!+F0Ud27&V1QvIC^vZ*?nVQ2{MYAG zK1LI0=r|7VOJL2z~S=)ANv2@U5F0MnS@sa)x+adWpM#l;7QhNwYA z81}EiY@cgwPWZ~y>iut;oo`3ZV~P_kvnY%xRGELG`Qwl(WhLB#<05CJ6(X6xT==M7 z>6DoB9YPNv7N^dk)!4}LQ&L}E8l-Uvz)t#UjE4tvW&dzV^^~Ri0f-~2n_+Ht8$?#zVppzm5EeKCc7x| zhC#<@fb+kmM`4@H8zjY|DlhT#(DNE|OfJOyv7`@a#A-FM;BEr*9v03M`Z(KjN_gC_Dc(i{}wlO9!wC zKL>A%#}L}80bj$}xghl*RGNTJAHJ@Efd??Aa;<{SS>pm_7Y#{4pt_+Ub-9r7C8MqG zd~|re@oEfyQUbdI#yvhW3?h~Py9_X!@JBkl(%k`*AE3%u*x6|`N^T=Qf!C*4s~ZC5=8<59O)mjlZ%QfJun7g3mGn$>XgUd+?m6hud`a zjoO<6d0sAgMrBN z#*I(csp`Hzw6wnIHULx#1Tm3S%+%D>n`oM#*!G9l!Qc<5VRy3ndHDDUZ{tKP2=IZA&ul1P0a+Mx-51tQ_%G;O$k@+c8vrAhiga2S z%X4su`{qMBA`=1hK6+P)jm2<~xCHe?&b= zO-1hOmZjvsF(q3UKx+k{?k#g80nL^IA`I)}kKc~|ZvS^-=;F(Bf2Cu`rPD0qM|~ca z(u>5<d#HW6l?qmFFHP z;iw9EYO2fp889u}aldgxB!?4YO{qr4)7r#+HYf=w9=GvSdA{#{SDLM!GA00x1UZ zcc`a+-b?#{BB{^4vy`guSV**!{iQW zffj~gLj>0=V15WAsKQL zz0F%>P>|`U<&5rbhlc|ivY0>QBKn4)uZFu1%Flnk;qWOI4&PR!ws+8M;cMO!jZZcq z^nP2PNGkt@q4LYRKyDSMi|s0PYKl*vrP^B_?=z~?T{~ohtz}lj9U+DVyXG{^K=H3&PRr3i-^X2@wf0F zPv93k_l$+#msxIi`wf`XeF+Dz&42!uD^4q6oYD_^7C3*CWum!|?VJY-acf^wAESnw zg^oId{;QwRU#E1N{)Yu163zuRdiu&yJodIvp}Urg>^A@SJVMQV*=V8XF*eh&%&SgO zWb^V%OjSx`!c+_PfAt%d2rr#c0I~FU24UZgKx!dSXZT&-daM63>5$ zZ<)+`!ILWbK=FK=z!d_rM?e%@gpE@`fOH+~(YB?WyCP1G z4}&VRAG`lnhm3%=Pj$fNu{Sfjv$tmR&n`XPIj|-@bU(%H#j35evcB0&t8BB$?132> zLXY0xlvpW}?lo$ioXEsb``jcD2yTD%S9)ak`!C#5kJEiZkIhlIHQNLjs>vIg;y4(t z7b%4`eFsI%KTCfntR!iGLYhN%G?~;N_e{XKoYPpbv22N5f6XIImms2X>BFlB3U&f!hh?V z4v(1V9blzW{F8eLjg4!8Wa7UhxyJ$~*PeEc@73m7d{zklqMFAmuE682zl90*7Q_rKDxxsYKYpFo z%>`rFL0}COxK62f&ExG7AP9Qi72LyV!ABzy1-h8#MavTJShi3X?1=*y1wUE8t0*re{`%zEsA0Kqag1XqdlGEHDCb)^$ zVOqh%FDR&4UNubpkJlutDp;)q4rPh7E9EJe3{;yTbROJ03fcQjgo@i5INiS}H$e5L z!>d9#R~VaL?qB4e81sTPftjx8E#K20Bh1@=Ut2yk#m2JvP4K&oUvQ3n>uN4b>#4!V ziZqe(FBImMqdNDdJOA1uV-DHL`){5lyfkPOaGY!a; zO?%%@8WY=PuHu!grs7HWG?93RKVNTjQ8N6gyj8ge(d=J>w+#mKF`q+D@99wpzXh(y zhpMgn?$#%m8(8Zqq`TVQw0jL`s9X)7=BB^Q42Driv=hA<4rtM#O zJL5iiHge0=ukQ_aA^!A7*$PnDpBVfy0the>Zpg+GJP zDuNevs4Z1MaI>dg_xf^`#*c&L-ATvBzW@f$1KZE~BPwr|uEi8DZV!C5CSr2|eAleL z3NaYw*p6fZFre|&`19OFNK7`X4g?(F}tv*g~mP4B}gXJEnae43b@h(yykJ< zgXB_@th(7v+1C?Krd#^PEUWESYOHF~e$-ALSS8iIj50u$TuvP^`A|VEI>I;}B^*Lq zmgeFSGhrr)T$PiR{Ww1EdQIHrso7s3LzYjYFD-=_K$TWsxO4B%++8)&cvmteK@{*Q zv$~FPOxf<*1%j$k!N-rhxKU%3a7o0@ilg#@L#bg7YapK1vzNWJ&Gs zKrOwjXY}~|;`mSD^NQu_-UkvbB|G1K>PqadC(m$-e?%I5sV~vqjz~8}Gyyw1#YpAT z+k0LY-)hyaXmQ+4ozpBp*jiOG1?_b4x(x;_7er5+X0`Ql23hmiej7MHJl>v#Zl;M$ zssZLKnv?@+`*Lvscs&(F4=!JL0|eKj6QphAmuOy*ki(fTN3509(-H6qSlI=Kj-vqN zFsYon`9k-b8+mizq;HJz2L+Ak2z^3jc77abFVcMUf~By*bUZnHj@P{HF8#u~ zEL5A*;2DRS&eAB)+?!6Z2@ze*iuyGeK0}b)9LeMIcApYCUB$)oE3ch}zao9$`c5uh z%auDt?(UMSmpF#zR~uhcf4*?@QCq4+pjfMURM#!i+RrDl$F18#heLjCUybU2&Lk-B zWnQz~DgTFJffDx8Lg7mG+C8wHN9Y zFVys$CRHJKWm#q@zTbLw6?knNY&K@}yW&%;N17j5k85<;o(5nYpPYV+hiTYUO|hzL z`Ms}6Gn{vS@o6otET=ZsDLGni7dWMi6 z9x6=l>SXlZSx1(kA=qZ^9AClW7*wzG_rp8v4iQWlLk)GjgL8gSX>3_&&v9@`hzG>A zHeX2(&h7dv;Pof^r=VPDH*J8Y_Q2czEl#ySI4e99Q}M|{k;2HME`gk~<=Z7663hDP zhL93F`*Hl&Bz1k>{m!jC_v^W;aNK#nX+OR(dN>BJp5+*Z|_4A%fxA8Pq|JW@Cy|4{pCOvd>H6a5pB;)-&gzy{^(tQS~x zR4li*>x7!Fn1rgG{Y8G1u^eo2qGuJj2n#{!d#aiLSu!|yR1K3v>)$%00WR$HH5eW=ZfVI1|P%iV9>Eo z#ttEQat6)nU+wMjGYVQHF^=A5yrE;X15UPmi9CT)ZsWrLoNAD+cNA|%GBRgXKdJC; z89MBnh+;~WtEZ8Rv!Z3Oh3yzU(32d^%sxQw)Rrqz;IpB z7n zue}lrlghDc%M(vCRK^~ZmX^Zjb^LB8q%;|-9{W_?dY3GKt8Yqi`4!-e68Ic8t&6{# zE<@cDcn|ni30$fUlIfC;)sG#4b^y5nnw~ff2rZxHa%8(aoK@(~3o^+xlS`|5YsH2Z z-3k7$TJcwIMvqTOKTZDf&=^xFtQ*C9-==_ycv#|>asL>7zk!|qLgZc`@IJv%C2V_) zKAOWfQ^iyo^C?VEqPh6Ri?JWgzZzz6wS?kTAVK%5gXDk^jB2tRmVd$6`EY0D&i6Dc zMaf;SZd$Ebs1u`53(U&-{*ehqi ztXNoQw1So2A{ZW`{`EQri6^zowfTJ~NdB`J)AU?pg2niYzm2IeHQ-1zGCRB0szT`- z60I@^6-iq5{#UNksgaQppjWNTMhLSMVAghls^lig8Mw?7GLWdQT?f@7}$e^uWr( z;vRfn_P$IHpw0pj!4G}{QSxW(>hA`%X4;?Hpy! zTx}synLzQO&kOCVfxI{wg25Ac@3I`XrU2`0_lL zYppwfG3OX#j#*Sx1Y^p2xQar(_G-@`bQCN1HTX1}%z z{%~pkD=6XkUbeB8Hz?#Q?^LgNkHIF6sTA0D&c~{>sq;>4BQR=Ol|;>fd_ED-W#vX?XfJBawjZLTWZ62~H z=HH%sPuvt^W`PXr%qK;`=5Hj!-%K_S`U zq%FB5Y0r3%rl#uCt)6E4G6e0$&+P{Okzc`ubJ6(ss?=`YVVr#um}%2>cc-}2n5~>^@FP^b^g-1P$%a7k`L{6@k8~Z)cPu=D zQzQmQ!ylH%X>v*Gk>vhUiTlsTyr`H#KNuNQJ)h@x}VRW3u&|S%~a^<4J ztrQ8{G_TC&sYRDChq<}efuoL!<&RJIQDGeR`y?ILwu5BR(clRFVa}8 zS)Sy0zhw_8_=Nd+D?|8nrzb@sC4gHg^VldsBs`3w4AbkU_ZyD~cvu z%r5U#htmJ!fpXJw3487$1sl^P^uWaFs6DcYyKQL^K1w|AWH#dwg z6pDcd&yHmMQg)VYA3RA3z?YjLzobGwA}K5{FULCCukb~Hj?D7%{wGDY$OrPRB)f&h z#i}Z*<$q}5qaV>Xo8JD5eQ-U5NT*2a>d2d~!TES&2SpVW?CL+B-k}L28?!aJC_F4- z;O(TPeUKUFY9{hX{`vE=-!$#S!Z=O8e@lW<3@lBmB{{DXU$mr2&0_3Nt0R2Sz)Bh3vYH5vw(tD&maz8js ze5qX&{&h%dzJnO}GrsXpbo)Ci)O&5fV`#(D4w5k()R0{DC0(MyfX@1{2UlSFnXSng zwWFVW8Q%mJckSU!WCz&%gLaH_y#t^aL!jg^hf{0={r!|E8wzax@^n-69y*I~2+U|w zY~SX0Pko6ZNuh@-NT|Tth!{CE0QarH7#AQ)$TTggXWJ4+-cI1dX@$8R7Nyl_Pk$ME z*=8@2wQkM}>Uh=xM)3)c2!L3m3WU|+^wpcSPz3_1F7zjms?yHa`vt8K(ivwWty@6p zt`dCKb?_?lD(hM>ROCTg8XCG#^xGjTD+?+?pGBbKh#sE4kW^w z>&Y2`U7hT8Gyp!&aJ&IlEiVoB;@KIrMo?D7kH$RZX;?fX0cu^e^9S_amSR-H2HCvX z5MX&QUbf6TdANEQ9zoSQ;u(0Pp{1pzsaaV^9L|!q8gU0+o-13(oEK;noxvy^vNmv= z5smB<+?)IYwYb?en+VZ&{rdH*Y}zK~)Xtl25GqEw?9Y|^ZX@-yD^JJlb3jwt43$pF z#LpLA<^fz-wcRf*-5eu?fTZA26Fc3ufHbGVtK4jt&WZ-tKQmL)tZC&Nx1Pl&^Kbm& zAV39?ajq@{%LaU-YUZ;*{}K*{N0%=ZlfEFlc28I%k$Rvt5*Hp!AdE|4VF=KmXkcaH zAv}bMzi(3Xn>e49e0rvuqdki2jn+$rb zj%=w801i%P2xuGytR^MUkDAj;RAUWtO+Kk|TaF`2%`cnhToXml4>uKd_w=B_s3v>V zWT04PfYW01$9Lz0k2kJU(H|yzT_T4-$2FFO@N?QlohGHtw4h~XMT<hBV1xv zh8R2LOB_6^)g&H)u}VK&aZ1Zt5J(CD^>`Z_%tNQj>w`!_wH?#&-hnlq8#Q=kG9J7j z_XY(y<4vNl2p+I5U7RLxqC#tNC3>7~jbgYRSD4m*x#dxjqc>H*W zN91nYixBdIp$>(q&DzWbu}?(}KSDoRz7?+<+uKmEY-(tDVaVsopXY|M3nFn24^pOg z$O`lBg&bUiRU8WIO!muWqJI}Wc6C!*dR}DI1;%lt^vsfN(`^^4x>^G+CC))2L`$fP93|b-`#yrUS`4#vC4OyTn&uhA80alCo&er6=-|kPqR4m5U zdABAO#m3|j7ltezP{lT+ctf4;tQ-pasah5y73l0NguIZafKlb8LJ~Vkd1K7(TRc#Y zXnlWIwjf)G*v8@ur2br?5+*M5J6%lWZiU22Z1Sf_%t*3|K@}Y**ja+ab+=&daTpPP z8AqnOz^BgW^Wy=8Py8suez8eAeaepEBcV*92#)wfNu2_;6qK<(D>2hbCH_7Q5|7WE z`{oSWs=Tj&&1R~#<={OBR>6COJr5K*h#x3e&>}HQfIC3Dq3G~3AIUUIC*8n?sfbj2 z57ei5UyhbiSdCv*HPdn78RU*23Lm0OFtJ6di)GqUpfoUsJ#+4<8634qhlkak6OPujI~R%fjs&{l>yJw$rR(| zr~?nJ!3K2L+wCpZBNNjWQj1y9g2GFY z7yTO8-p~m`EqVPf`nW)#SVVA}L1WE>?cJl8VXNOPcz23E8RXVY1m~O);r>{A?Hc1L%0JO45bVFZo3&7q!q#GMFSB{rV;tf1`CxmZBzlZjy6kcpx6D}o zjkC&g%?rc+$6Vx1CaKZ5CUaY_&CS2*tyAylIJ$l94V>^Ap#dt<<@#e;p0N)A3W(ou zsJ+89P044MxmBokeSFN5x;y0yyxpO7rH-TNxMVVKF|3f^716?q0` zX6amGSL>=F3QQy!$L{yzzdm+v_oC(Dcp3tiWeDaQ;4~m=iF+%9& zEK({>rdCc`O&@s$%L@5(B?kpPJLkD+a-04ZPg7HI#6OVuL@R>XK{oqfvkQX5`9(!r za_D`f+=(N=?V&?6XUc}7oap(lH^U#UWn;B8^Kd(^Cgrx_{|5`mdh4LxTp8oL&R=Nv zlQ90tAMb*cGEb9a?vJK~ttlfMi=Y2q-M1)tbrevw^WoJHTh%Y2w)yc7>nAV9cKTk& zECt0OkKveKl1m|zi)j)GOd7G5(hhP&66swxai{3B!?;-0?S6i=vWU=eO0}-)DH-Wn z4PD|6GNC4*eJfJSs*_7I7 zn{OBz0j$KfnRVixMY6CDy)JPh3ks`iI_>w^lgXl-98mh_1%29IjYzCN-=1{Hxv`V; zEC+4hms8VrSFofL{8I!=28E2;iazHRwj3up%;{`Bb3FuTbVm%oSd&b))+BT4C@o$m13HQ@+ z6e@VK_IeNZw`}Ffp-}uL6*r%W|47H$WnW>T&p)azAJ;s7EJ&gFvw~XpV1vod(knNK zw*J?pTbJSoe+St@eC*<=JJl58$fwsBz_UR}!S!^b*IlA0R=c7!7;|BokBFFM_gFKt z%3fyWZ{0ZG;lwy5uR(pW)V5lTG$S)sgit{F{SL7l|5#9BrHChaq%5aGAs5piGSFtt zAeoz+68Isq=cQ58=fzL}~`?qh(NMB)u(4CsCok0$P*5@w{*iXI{?R?-kdPL*@ zSyfeH=8XA_Exv>ru}6Pu?0-Miuqpcb&lg|QSH5KDqqO+BtiQWxfLjqryKS=eyott+ zJVs^nkg7&e)7qTYpBI0qd5o0WDdTQLAl4d%9_+8)pO0Q!GyH@K(H*EoHBoXCd1VAp zRwQV~w?LcLKOkCf)0rPNdwulou3gp1+H$~Bf`E%1p_`LoCs~eHapTPaPs_rv`ny8* z^}g0I!+EXWxZSkQay4u4)f*gC53d|f`cMs*aF`GC_b~QvkN${Pur2oz9C_j~_-`Hl ztA*1pgLN1}@~yE}0FSbBwbea+l|z~y%x*u~ zmi1w|^}XM{HzrzoRN~Hi{rPG#SZWC?H=X2>m5G&kxLsOlT9B)v0>8y%NJ zTXvSQHhc4XCDIca#}f>szWDdT7!h>t?0OSes{k-L&5i)aT(c;=rvQvvTU$FjS5>JL zLbIy|N~^}35S;JV!|o5d)NL3=&0!qkeRvTVXlEQ3cQZe=@mfWGzM@BtRz>&J$GM%# z!@tX+o{@YtNzWml1aAj`_;@3~+`*GkYxxN&{v=Tp5u3(${{7c)c&y`g&bgXNd3hQ6 z>oWwqzwJ->&?(EeRA@8T{^DvT$da36cFTMT7F{QmOxn+!4B-j9Yad?*`xDS=E#d|_Odf75|9ci~^G z-TBgt)~GPe3qAtdIvDFE%r;PcJO^rySFc`WCdYd5n$W^-+gb%pRZ+#p>!ra)=H@vW z8GugfKt_XQfB70Dv1e99qu&sDoo3AN1W}2?nbPBU7#r0k@HqQ`4smeP*_$bfYwBsdskKnd~jKaW{h zSpisTz1o+OcV?y4CY*ujA%M0hgeFtGBfGm)X?eByt(3GhX~kD)!ltISpyN@*I>Y#= zwa|SX``9ARGJb)_-nuqC>~tk8hLup5sSXdLMRTU)hsvYOaf{HBanJ6xS61PTfe~=v zU4G>1bS;0HlUNZa>6X(?^10Q|>XvwwHhuY;}qx5m`s9hT}%`Zs3a*Wr( zxPZ_xRQwkf79av20TTcxU`2Fx zf0DsfjITEVu7lo8poaDqzp#W;NGuG)(`6D)-)xz3GCe%o6q$%(lfHZyQK7-X3<7!J zy8tLpj}BTZ$JT0lHo+eNla!N9xs%{V;zi(wHh^Xma#0*L@s~cEbgR(rD5Ix89?V0w z!KT4-_G=*_u{zCd?=zZ$(jy=LWrXq23TWB0aqzm<{31XUQ0CMmGiwVl%CT0NRnk!g zeuubYmK@k-^61uHz?t-dIRt^2=NRmeH&8+P8&x-CqdZ{b_vZ+2*Xg!6_Gy#$(V z4Cti5=gfWU(Qw;H;xYS{?LVCHMlsH#W<0lXU)|_&Y4)_Ia*IVh+U0tiT{$jYF;?Br zU+?AkKb*dHQlv-<)L@YGNA@#KcLyC8vZPcPF5ZK}iK=2gzU8VN?U|%|c0kahPj=91 zSB1&XB~d&WGALbdVve$>Z_KV(o+nEk{J?&tiDz@ImtTGL6P;hH8~8nJD-qfGcq-fk zq@wt0)*1i=U6B9^gV`ZymMX_SQat#J4AFO1$S|)e-h7`tyM^$H zM$up{Q*-+b(4<`ZH2}1wppmW>hst{%&?tf*K(20)mym7(0TN<5--Emza2?d-ERX&kb``CD?To+`szD?rGCjw z=D<4k5V_=8S#NLeVzYsHcF{1uZRPFgXW!rLZR7WrZvniZB5Dti6tiGYEg0f`vPG`G!0KtVurl$?`FY{{JK`RV9YtM~!8q4WRq@`vEs*+ zns8bs2bh#!6CMdFK9+HUEz=e@%u}5DaSyzK`uZmxk6GOn!=mNeAN~52;K$o!=4UZ% zND>~81{AnETWg_G^atcJrj36(A*kO+oR1b0FIO_s5m5C0G+SQ9Df^U^nfWy0)ex&5 z1O`wd;?21M2Si zg(^XC6KU}iw<*68#G735Qy{fT>IL!INwBv12R~`iz@TiDkB39XB$b?98BbA`Kh-Z>xs%Oy& z;r?CEB>#B5R9?h7q1fm2)1gEe?65T6d;)TGZf_>$q&@Vz&9B>`n@a;bb15;1$0f9U zID}P6ot5S`Ow}O-2#Ov=+E8f2{1!SKBOLOhw=bnCQA5zZ777%&Su(9_`y;sJ&x>rG z{7~2QJoiO4l*mMeddVBrpshTGtSwl!zY$Vsa^#zF5qJO{tRO?V9=2{Q^&X#`Juy4m zPY^*zQFwAtF8OnSlv%CRgyEE~ECM6GD98CUrZQkhp(NxOz@|Mw*n=7+F27-ax4SyJ z@hA|3phsD3d8w(X$;nSDHX$zg$AloDAcP#RlSV#BTCU(GP}Wk}54HggtbY#rFzo{D z#l(#i|A(qHeS_{m0TIG#5Y6R0FGvQu2P|5oR3311m%Ig@;`EJ965ghh5&&3qfciqN zX~xOsuS^N)6|X@{kc5H_#ZPUv=lPS}8s@f*=;w<9V;wqH5FsFe3iw~uB3z2_u^|MG zW^c^Q`j62Niu~T^>^UPR7fUns_>>Oo3mFr?aVN1cNqt`WkMFxI`|96IY{qkrZ|G`aoQ?z|d$zdGlGvKWEny!q{k5z14>4(0G?ousTQjJB@L!3F1F zFI@K#En1QBNc$f{)96(8E%6@XvZBI;BgRX(K92+1NzVWKAvP`9%I<0sd!GCSZn@Ts z_zH<#^T2-^oW~ueyh^1%OSkBl*vW}9IxG);G9kl8ez7(w9{p2)x|^_v%FVu9O%HnxHb1L6CoUp9Eo{$}&q!OFNaO`pRvMMMT`C zISJ%Yu8DfntHBV{2@}Cm2}_Snf61GUJ2)s|-QYX97nQb=Y&<{T3J7XeF&=&_6z|O; z&lEjUK9m;}bc2OuE|K@v))rh#OS`40_!kHtckK)8u|4Tg!cvLbtDU%jkbIbxvjLg_ zMBS!lX23<-eD=G;n>YKxD24=-tcweunJJy3-}=F^6S3gCq$l=pin>*;-!Wm8A< zdIEcwH$OlB_3KsEr&uUOY4NYH6v5o@VWb3Rd9JmtMkxh2W?qPR!C9jkzY67Q)4C=m zPEKX48H8MVyLdw=#8WootDU59HiFs7zi=ilm?N;-vr3*GrQ54UN$r$^#QcIY!EE?Kz=QcaZnO5ElKpJhi6)=QF8J=Mp#eR4Iz}U`W%B2 zI5`E?j^UyLRHOL#ZN;9bou5nq%D1?f>wg`3esC-eDr-;QJSyM!bUZ=^!hT99126dd z-v~#!-i6~M!{h(wmuLuqNyN6E{^KwiC=P`h)W*>e-#{h84wQ-7py{N>1 zq8nm2Lvyf`+DM>2GK8HD-uEJsXTa338uy|fhJHB^T}VkjjpR`{0kQ`IpZw3m2)8@b z2wFvmiiE%+2{xan=F}UYdWtuedl5|=iia?+67RRSMG1!c6qJL*znmutg4GU?kT$ue zh>KH?mOW^!)xa3ls$^o>A6O&g5@X#7+JiwNQ$c>~Eqx<4ndUvnnINPjn;^KtteSTD z$XE#sVP}kAF@IoPdGDJ-~?VY!_IrMga_I5QP)tGR&X59Qb ziUwcN`f6=6tlc(>POiUS?kURYeIz=EH%;2bY@??5<4()B`y$mR;NC^Dv9N@NLm4}W zG#tDCx`nc;>klI9s`Vl!on-Dm>F@cT>;;7H7T5$rT4Ud*A3B!+dL-@^Db5GXR(WGZkjn5J7zAzCUU2#d)XtMwEpXK!2 z2sT;Xxm!~NB!@@`LWt*^$U3{b)fIp6Dv2s~#{!G|>rC@>`4eUpqPXmA+2wwFn4OR56U6RP@B@wcIdG~C*qwLl>^IKS`$ven2y2Yew7GDcfGMyo#vQjfgtGEc} zAtxu}3n=<~vnAS+(0o&*t(j3*?c-zIGgYeWceh_VzVMtET%v4^**g^+H*n=S{IeF5It@lmw766`L2-%7On-XZVuE8JI*C=lz zg4Y8}xv3UzX2ORNT-~vs9(WUkLWdUm)F6|(oN^gs?$(agWb8{VbWAa_TW{{N5%Fxt zzILtmmA_0F`xMZ)2rHpIP<6wO@Kck}a_PjO0)G)JdeIAUg#+)O{Y|KD=n+Sh1u%U7 zLQ;cy#=;I0O6PE#tV!n*6>lfCJ!I7d$O_b&ms;ip)m!HMg>NA7efYM)Q}I^yyAM{E z%g<%ufpSyu0X@05nZ&~jC(##{Zb9&$An;R!{5^tjO1?*E(;Cs5sZbp=D&ox4)+};K z1qHZ_f+3GF!INu#P$I_s+al{V$Q_QUD7gYYoCLBE-Br>^eAmEIGN^0rV1BL*pr={9U+ zGkt6!UFTKmycjxjEfh=m`{)Zjyv2KZ-mnNt2m?XcP7IUZ7W*Xx0IZA_U;!G|i5DcwZ#{1!(@gY=!*EB5`3S%$6=&j`+n#vbc_J{zyn*cO zH{HUM;-Twv@QpN7fHtLXJX2!LWlxCBcvV$Yiom1k&{0<06P_*7l2XfSesx$&|2~K= z#xA>OPavT>vt0K%lnq0gdms@x!pwsoF*lfkfhFHAWS$4$s0;PeZ+~FnEPg*&MjuX4 zYhf{dtGQf7?@DR4(aa47&}t{;@2sn_$w2oq6DWRzT*&2JrUMYvX;~Hf^BG$Gw-oVd zt^^8PAgO`TJWLu1@8h|6Uu^62&U}|KJawCd&my0d)YMWwTETrw%)hXKeFX^mqmjdD zZk$WkU{4S{Sllo_**1r1y6QzAo$Bu=u>DN!8Q%0gQ4pekUc_2Ii$hRY(qy=P%YlX( z;4;7uuj;)UUe3e!<#iWiVr6ChcE6 z&L}JEyTfF2QqTR}a>%v^K#WS@ma|7m>R)~uCKfJd;Bx|}Yba`GynWwtT=YmoM`vZ- zbN(b)oJ}(u&o;DlqlM3(cRp1~_Mr#mWkqS6gH~eJ`1Y8+crl;l@OQ#B6tA+(9p zfvk(Q*~S)9n|fPsE*Xkz3mwo&rk0xS1i_?3s5blcYsAR3AWtXk<6w8s$tjx-2Qa`4 z)X=P^o${9IM5xv`Uevxe%ZTb^_dU*yUGRZhp1Fh6Ujh!{GVz%kn%_}j&QbAcg9d=A zaWhA|;!pvF3@71oUn)LT#y_wL3IM0+n1Kc)hVrKY4fR}RBl^$Vcl%#P0P0~6@W1f9 z#4IYvCQAAalfaeN{4CBS{8c^^gy>y&#alQ_u|47AR`syZAu<#s7C|lzGARO7fDv4q zAK))XP8~Ab9?7t1pVfDAs%WXVwPfxdZ_%N<9(ZB~dqIVA@1laY z9;^XK#g03*myGgIcICQM6(ZWWY6~MbHAodFODrcu16Sq8*P@DUk%@V1A#Yo0X+3?~ z-^$pBAMsq^9;njLDc;YPxvE+dCZY7kZ4R!!~F9I25IucUShbzAK0$U2pzbB^8KW&ML z|E=1iY5h5wO{;t}=43A>L>PEf=LgQil@5-^8w}_?z@*=tMekIM48ar*?_<9U0NM`y z`JQ;{&**~^Gz9>yfT*5q>71ybw|M<4=hHK6vi>BeV#^9_DL3ye=$tqLrbPF|H@63w zW>6fdQff3iWBJ%PuW8mJI}88Xy&uK53(I#u$F`SmtP+C&PjD{r%YOvCj{sF&7{Q=( zdlZ*jk1dwVW>}x)jv~{mlbir{*V_*|)Eqedj-8=UNwa76Pi+gHO{MJ4PQ)^oWPs^9 zG=3EsiAqngPIOu>6Ym+*Vr^?lR-)5d`nyW~qW;#~dqhh@yf=L*oA%$xdHOI@$DRE; zl~27j`>YryDN?4{!gtAe#cAXKWNHURInFW%u71Y6+s=SAZm0S1Wbf6@8@3;T)v2!}=Qq_m5O&BMB-gxZ^6!p^R$SCNI2C*tR=aIH2CL7dC!Mu%%<|vN8Mnje zsVHKF$fzmoSF7Aj^ z@z6B?V4d8(5LJ2HCPPEn+hm>cM%nT=8mx%BN%ocZLa7f&aqza?HfHHUV#%PGf<564 zEkV?~TfKk=Ip9R)BYOO}xqa(aT+i)4;O>1iuZB^inX%9Bg@73<93IK2sV~7o)I+jV z^*YM->oF0h0(zp!p7PylHC47cIbITJi{ODts4p-OMrU6+rwi4HvOas$ft04cK;`s= z$IrDa7-=Xd#4#)Ei>UUAN-O^d3uqFa(Qc_A7CkYFZy76mZ#Up!g{3Y}3>NQOpgHvD zUI#ZxElC{b^ji}EjHbn0iOQa9P*r-MmEy~rr<4FL8Bdw_0l}KY5KPO&XN!d>_&u?P zV=ZMqdYrM4ioZUcAHpS%@$P~3hw)*Qiu`6l%+a6631GdgqoAqi!(0(ZMOUQaT@()+ zSLr<>$qs(jqs^JU}&@Lfa3LeD$C=M zlLK^~po*09>S%Sf6L0X#POP5QUj@ zI>yR{d~9W$eShPGA=%20cb*|6q3a z=36bbdLGoVY8`ftOOf-eh&C;~UG#u0RQ!IiU=fG8b7F__?JJuHN#8`t47O@EL9xhd zPIEpgR3i*;g>=%8>p)BC&uHjkWi&QZZA|v>k5sBwkO4{QrM}B>@1CXR*nE}#&ePO` z2&d^HK!IwZ*AMkysoaqbW0Ly(rsqS*m7dMr5M`PxCV0kAkF+%s^%g0mGdfIoU+mI- zJEN82{ESTQu!XOM;sa1Peytw*Q`a}Q0SN1gUOdq|Ehns~W?`}E&hZo* zx^3%nRK>0Qd1&UXrtMItuL)A=BNp+b5iBiZEA5uYm{*`C>mu}6C*e})358OcH&liY z-eukL*(mOJ5Q+|DZpUDD5GWPUkFSoOIMK>+MGR*%nC3F_Hk+VB&4iBK#q1W+uPM=v zO;%X@oPra+9Ga?(p>Y^8XKd9Z*dSY2?*z@}#u- z#F)S^<0r+w3>Qk^GumCuHZ}vrKb7IiD?3ws?3r1Lo%^GNf6a7Sp=r0 z>;@i@Wj;O0a#;t~G2xy@b#Y9{Dn7Mf2P|5~XI*=bX742Pkm%3J35V5=iaC+STN9itftx{t9~DK)<)q%=>5WiZ z+*bdm|AZK$L7?{a=b0Kv`bNO#KiklJ{DJu8eax}MN%JdW+wrb3wnSS~mE$^$i0B&{ zA*zI!M^Q^MNSt0CqpoA?(u&daRrT?3vD$r4Jnp{iA>hX^8kJ>6tO8k>;{y*JUiQLvN2Hg z6Q;DN3_^lSCJnj$MkBc&z01eq@Ns1}Gp-MkyKND==oixuxOGbvkClH&sDnOJra1)8 z#?{UPOQl*8dGXtmKspK&AE_8qxC`Y5s^FPbFs*_%WZ+UD#f|bcak0MnO*9ic7b zS>3^c1XF*L`BuLxBlvB}n!KHg% z=dL(7Uc&>>QqRp#g||xSS#;x{IHkkXF$A(PNuW>FJ2CKv!X-9@56K|C9<{j6@)D}_Fi z+tBA2&*t%*Tw7hhi&cJ;-rQX^I*5gCM{$;aV2p|zto^6Iu`c3y%>jxYufc)%k#h^_ z^CKg1J^P$Klov#Zmnfyti9!c`f8DfHh{_bj&$FcyQEEy<6+G!rg|_dC;TYw zOd_zmL(yVMN-wcp0QQO+Xrq(sFb78tmh4Q=I<2cxZ*KTB6n>R|k;WVrch|k`aQ|Za zl<378F3rDs`ZL-7^3LoE{q9gHQld12pzD>$}~hi6b@e;K0r#iEpLSI`vMv z@ajdCF(7R_EeCZ(-xp%??8u)SxME)Qk|nAzA0^Hi-NybAM@3V3lS!N+!QBRKHqFP$i z{f<3jhpB-k+een`?h5bV!g_mlNm@;jvr`BH{-u7?P= zU*h7agH$h*`U^or^sJ`YPlqb{@yO=c1W_}+t~ZggnV6lbl|BuM8bz`klNZo;D4p%y z*u|EED#h4%9oz+GW8x_?%&r*ij{f0pgHUk=dg+{O*5t@q#@v3Vt@k+VQDrX;N&3f@ zM+w>4B73%dQkZr-dJnD<)|LhD_%kmm^msvlb#$GNjk^aL5ICpbn+EHEJZN#Av2;CO zuq)ECJ3h(gR{n@~NM_F6br+MoLy1pXjazJ1>6fV%m1BwUud4HzyQ1o>xZIPON%H3K z3{|+XU*P@SoXA;Gh#;=iP9OR!$7AHE7rRjTolrHLOEt&T(!;L%jCz#c&#M|n9i2An z9$V+y4AeQ&uiGX1^;hQAV{$L_Ap>75lij;id7}{rcR}fZ^+7?u_=tM0aF>*2zG?Eb zasp#RV*k9A+X?=>BAQl&(C9|D&%u_mlHn`T8x=qN;y8`sv-;1hi}F5Zx>fLT zOGAUty}18Q`fYhWR zI#on|Cu`IvaUX(RcE%Uyd)_V<#bkBc#|en{kVZrP@$6#1WwWfAEkm1Sv#n^wm+*eo z8EWbwzcyBz@i=x{RJ&ko9Zq9K-h^j?o~-Tz&&nCIeELi9Pjr7qrry|k1XPs>?4t@nG$4F-Pi2qYv9 zq1jRreX-fl^@WaFB@U>)o~Axt#W_*+8O6WSWIO+~N6--xE|%A88!;!EjF-^y#~=78 z<5crJWhV+dk?eB@eJt)Xt2?KL*;kq3&SLwx;Zo5#-A%W%)&NrQ2D$sG4>Ek!HDt1s z6f@*3Y@y|9U0uJ5X7sAl^g)lgt+rEmgF$X-zuA#|aO%}=@&Xqt(!aCs1g>G~Qhb)G zSy=+P+iK%t%rKs1EeBf@<}V#OZ9Z<$g6kyqiA3Cnlhy;IT-QCSYil2nsR4-~M z$JKSw%uzH-Mi^*uJxy7u@jvXoJ7nOjNK&|f=WXXdYVKko^fX;+X9SJ;&Y5)Ph)>21 z*uNW+{TW3wv*t~THv$jdsePv-Gi_+aG(CHh(r)%biD*Qq;C9-=Im}+OIk?&<7U)LJ z&i@|Ded)f=2GN~rw1SX0h=$Z7^+QZ|{Ppeh@+yBomXq2(ZvS%C-*|hHpy!J8khX1? z%Jv_|lik$0ZN1AS6R}@M31W0S;}F(%PWO?7B6XePN5fkb_8jx#)%K9mi;%310jk-u3@t}BB}O7YIr+UR4d@!E{C)MKy2RF8(Z+4!t1mX(%^Ebn*^ zS8K8=s=+MdT6uj&Z7tRfE#D#vUXq`4e>7&AakVwORHPQvsEyAHvHM1f^F?>-&dj>B znyEP_cwaxqloa2Hh#ypU$u6-kwO!(R<~l+}#|Sd$9UbP6%4h56Y_AnLylVTJE{u7U z83b~aDnHFyPykb4(V~r%U*rmT1YO8eaCzyrm!E)$8v_*QWy^Ll)@9w5+`Y68(tKfR+^u-%y4Y&&%G)Q;udyuHXIf|n z)v-M!DW{(W9-}+P-_%bvFqMDlyU<_K6nWh0N3v z{!2Ibd+ksaYqzW-M^i__hw$U>C{9bKmB@$REj1!t7&+{E8KUg6s^Qn4Bg$9yy%ZRf zfg|?3ZHM2N`kU$cg-w&CpJr0keCPY^+dEAUn}mWJPJ#|VEOv69K_m#(cf@wG&Ni~& zU1H-%`Ru&}KIaN!VgH2eTYs}qUK!_FBa;v(rO9;fPFDV4aUmKpH z*OFBZ)}>pW8=r@0Ys~J_kU0m#14W4!_SS~f@_GX=FQjJ_;pHv;C}F(0@4ik3CgxgwX{>bY$aT(Pa~TwKzmoGxm@c89UPo1T>8 zp@Uu#e9CT8(Y&_l*k4>4@ST!Ba!$a$wPYVeC`-s?u3WwH_%?I5;-twE@!gK-PcI28 zTkBp9Y$rv_zwa0JXi#-K`GjARaNt|y9xjm{erQ5lzB zF7nkisStUzA-awIX)Eg?+fZzkSo5{lS4?^DOvip0yo!s z?c-3Dt}}ZSA5#1u>lVGFeT7%AprH}5827n`Sdn>iv#IhG;Z>RW^8uQd-~GWSs;*{G zlp+wxJJm>>QnQcMH8gDJ?mC~v=zrr%jEjqdb*_5Pb~vGcnx#u-d0pazY#?kde2nMV ze_=v?+*E=lJ6fu$20J!1k0^cJ@K)}f66znssIZlYq3{>_UX1{;1^nT!DGseSZP*N2 z&fboWWDAjUanjb-1*~~S)uKYcs>;fjD7Z2~c(~lZgapntS-|B4JDTXdt+MsVE-F%) z`3{LBFK#zx@7Tlv)o4Go^rDlB0E&iyTyxWBxK2S4^6eV;s!8Naw zlIha8BH2p6=@v=5^;2-W@pM;skLZYmZ4~(AcRN60(3z8&IS7}ssXp@rgaAco>oK>F z*)&`Km+o2~iU4cR(S623xtg5*{HY~7NehLyu1`u~q4F9Uq+zzUMaRt^ElE;=50+wm zC84@rhMxQVp)TD8z{6eX+0F=8BYG2I{ycUP)_}y^Q5`Q=%^Q#TUAEs3o?|xv7I=Rr z&hv&93Uv-)Fk{cc8CWm(&P-n*@tUMUWY?~lrw3>lf6Z{{pm~FqyA8jOiWtmIH#Y>O#05~g0{X>w5K**8a-D!4 zQQuzs5;?mbpjI$as=eZDWxn03{(7C$C^$5UjfU_vBFSw_v1AyCmRaSvfgss=5HYAPn`@ zPDLs5XYG#|&)=p&__5~9$vV(}#CbtKt9_sYIBVe1)5}FyzFpG|xvU;~6&EZD>pa2n za6!dovUI|)V{=rrs#_EXHGBS)Tz&c;dt>rWc?y&%gUFA$EVjq{1Sw$$1r;Kq25D~O zmZrSROQ;lVlH$ps_mCmeCqEB59FMzN<(=y!O^;?r=I4#{S>Yyhi9=R;p&nZ5lcrkk z9dPq08F4vwoN10w)6mFhVi*C<_nC;)T2Cg}?S=r|MTVacW%BRWx9*e|K-n~d{)=ji zoD!l##b{w%s$#q(27&Cd0b+5_94YZnUBCldPQK<><}Ac!1G)j`cM{Z$z z;X=Dl{T%Hox94Y*a6v={jO|Nvux-hibdzoeSu0YwJ{k<~kKan`5!ewy%_7&XN829) zR4a=m%s5n(GRdgbv+te6VR>)Y#=#G~-<6;V`)L@v*mEzCn9M>*RNU!mg$KhXw}LB( zNmcsIb0;T|P6H==%Sx+SEV$rVkx>X{7=T4%P^GhE=u)9#DHv{weXdN9=7lufDy$v) z+=2!L2W3e*bOwYwQED zEDx}jDve;@pY5g4qoS&se77EA`R8hC+@KmlSAnV&7BhHcc&Y}lbwd6CgVn^$?0A|R z^U$!B#u-#t&s3Lir4^xY9(3!f@Ya|DWd14|wu_9v7ewS4;uB zuhP}W)GoU6x6OrNH{qiG=(sODy~tC z2_@V!_cPd!5qKI4tr|q@_c)E0-a2>~$`JlOFY z`6^MG0Ke^-zX@l8Vud;pwK+*Hgtm~UAhsLP|73!fU{oYUgS?GO3X<9IehSBj|3`=k zg2$j_q5k^%dXR5Io1ZDNtp-g+#c^;Eii5G$mq6DDYKrz?&Ql?!lmUU97ot!6cx*!< z08c8i8o3C}HQ3~kKRxn)%G&?wh4Rm~2Zef$2$=rge<_3)^@|y#r63vHne`Yxb$e^1 zW{FOwf_+<46}exKigbZn$jp%dIG~zAvC;zi7jj_%!NBGy%7wgM=+45&$N%So!@$Ip zo|dMdstbhgsn5&$SJr%W46YO6H39}Q2F=$)Z~KB~Ha#&>4<@-3!$0{Vh>2@Yi`Ub9K?|1|ZcF{ElPgty<&YTdivMrYl{ASm5~d05nq|y-oZLQdQfo zBVb(eY4+~>Z{%MhcqljL3%-f+IwKI3yiz(ezYM1nZi46Co&i=ydl!TiflUECpADIuI~ulhLwp@TK(K#(N>j7=d@x~_h&FuOJC!hgvH=PR{QOh%x0 z16PH7BISNW8duPlQZ1HAd8!EMVk*Rq>sP;79pcZ|ZmON+tq^Jux3`LjSD7+!y|+H=M_qMu@l6A71!FMlLMMMx!bdJVi>%+B?Fv`E1U(GPiW!~M#o5bvQ5{R zvCcvG#?N(7u*mhj|IJ$Ql)4I}2yu@K?QUN%D;+!EB_3gisAU8HTP>?dr>vnNnziYp zbNI8H(_vjtquXHBnm8Y#p#P7xzY43W|KdkcM37Lrq!FY`k?s@(>F!Vz>FySg5CH{| z?rx-0L=-`~5hMg9m6m3Y$@}~7voH2}o^x@yQ*ptXYtHc)Ru1GP}* zRb0VL5P%v)ISccnn|ycuKf8ck@B~y5S|+xu*yZ6q-=w*(trkzq1i#K6jm_cJzJok&zpq^B>?Ya=QbAR;oa`N0R{X@e@`x@C zy%Y34)k4r6s*~ic%yRc!SOE>Rf1Nrr)*p;Hl9lh-^gtVGJ!0pttm}8W3SE+#IQ zgWVZ5OIl)|rN>$>QNwaGxBRgD<=i=HS4u<~#rax}Q3a%aFXEV}WDL?%Pw_iEw z$brF~0O`4j`zEpf95C)gj-5?lcMTm-Dr`a{R;ZVUeO6}BY6%hynWV6>3D`M z8K-+-66;fCKii~NTU#2fynT-hVL5>kuC`qN{S&z#F1LVp`wNnd;_s_}HCO{YN4L}3 zjcr7=$TcqG?$CIsc;qx@om^G&$4x67zuxnMz8{}_BYUN@LhvUs>pQ?D_u028`F>6Bo9Y_ zx<97R9@oLb3}{8Xj~N+k&92uze~s(@MK*kPE=%|&j44okdgKdHy~|j=Q(h0Tm&Jq? zo7Wqo$=RWiSq*gOJBm2VxR1OT5LPq-0{rxq8o6TuPcWkb3NBLRhvm$F1N~xiANYlO zhK4qYGn{QWeYOitvpe`D9}2G@OMAHJsUvd2xucKbJAaiuf&EDGl|B96mxNd#kce2{ z{}2-FPT~f-$ReHdS*p6c9%8FSfL@;cE1vv--%n}YLF*%Jqe~5Do`NR|?6vAQIrMh{ zLPu0r$qS|L`y+h^BTRA1T;W!%Bk`tQ?|)S|D_^a~w=BOkv{l>+BI|Ev?-0ipXOj+{ zEX2@JZO)+Y&rwB01C%$1f7O?hCl}uIFaF|p{*@YNX1dy&zv6(Mdg9@DNX@vxVE8F) za?~d8T1|u4d zaL}2{=l_zN-T&y3-r-!o7mXn@vZ`ITYKmSq_o&sQv z+$Ba~uPMOy4<={O*>KGvqdR=j^}?A7W>EE(y`+px({)c7ks{Xe+-0*%PVPt4J6@L( z`HF-BL<9}rWoTevbpAiBk|e)2tpA`do0wp~tFEu_29n}U5$nR#MXep9VNyB!wNxQ4uq;+~3D;{Y6K+bWyqQSjAK7(XzygJF) zd?P?Z;zr`GTWsE7y|@~|xXd28FOb0Cyp)K65_m)NPiC2&&qwnNzk>&l{rlc(xl4z# zUtQd}BJ&9KS%J$ULXZW|Kx7U%ng=eAJZQ>fZzO67# z2yRCMJ^yGqF{ghnLLyd>Sd`X%(i}8EAQ*dpaypSbO|l$5cyMjI_bSRtdb|kiYwR5y zAW20%;#N&h&tLjWynD=fyd0!+au3{GIliAN0FH;;o89Vf~RJz(##(gnTNE{G%7P@9LT zfGPC{25Z+ewTc13pDz*fTCiY%s1L;kFn8u%3zauEnE7vaWDa{DXq2IqqPSxgI9vlg zR%DC!U(;Ao_)z{$+i)vaNvDG&aI<2OG+d}hnl(vcsR6wM2;o84at#p73)>rg-%~v`q87D zwu<@0b+YwxnxE5J!h1D#XUBo9di!~(je}N70AM`Uh4XEjs1n5XUn=As zeHa3$cn;tukW?8Wr~?UMVc`mbZrw4Hez9v)hepd`t<|8juyY0ZV2OW~8Pu*JRD9_8 zDzxNE(@%xFbba^XPv2Q4_+?p1Jw3(d zmu|gB{A7iJBs&IScKVd8vJK*GX|)~-kgbfG#szk%zcp9)yaVdni_?LN(E?M%-#ff7y^z?!)mVRZ~4(E;c5&WId@@_0@>?2g{v0HI=5i^ca zgAfa7ll2P-G9?a*L(L{7xE=0M28O@8Jmcy&C+nYeS<4-_z2(r)u6S64F{X2`5RLCq zp?uSLv+Wd5*~i6Bu;D9;OW?-z_h72-(-!MWN;ah}vPWDTfR)VPv(DlimE4G_&EUNI z{GL@)590A=*;B)5(0pK6rmMaP?3wa?>yp|`9xI*TU2jgdGXewMQl042{8OP#o5=TA z25}U9bD`O9Ga3ZT2#z>0Y)JM;3iqcVh`cmKBslv|>p6Ge=2t}=S$pZx_98tA!44kn zRv2Oon#&o97kT|h{S2f2R(+wVlPH|68L(1fs26y zw}lhWRD`dh>K$ID*!#i~e;~kwFjZJ;;z1+oOFft4M6}JaMPa!V17FaC04nKW;%K2O zPoi7+O`C?1!`7ekCVAA_CCj^iy}7*BhBc);s)p38&?1suD>F)Y!gF(Ut{hlrn(7Bv z3$`TpUmD4>*Y1!^7KW*Rp&id>9j@%s?nj>XDlMXffGXkMUha1AyIon-z#?6`UCkLs zS^iFuAk8k*;On$0du`;=CTVS*PCjZ&_uC24bKRfyVHC<$BTr(6@j+p6gEMb`+6=>5 zV65i}uAhgxe)H6+cS+yS;`nuj$KcjPjq66xc$7tsE3|~)K2&qROn2gR?431{+|O}} zx-suEvKL;UN9gMAN3SyA+esOw4fb0KP_8OWvm=Yt^j}=8xj*V4)L&p+s`@x(B}y&9 zHoLgM_^xx2UVvtmzoXVKC{>Rw*%&fEYgy!VevX-`*A`nQK0T8{FZOowM`6fYMXEa0 zV+=t?DjNT#xWiSS-_#gO`|}eR%xo4;G3lVCBp)a(E_6jVgWFW_@MQ?(awMa=*-u3Lykg zNF}D-8~G|aYCm1ry(f>2PN}@EeZnr26+j{x_G{F>h|XwNUODRak771?!`$nK>JB;K zj8hJr`rGZx-Kv@<8L|gI;EJdRIHo2xZvE}9Y@h4rYkQ0H2d~G;m0pZEzSxuo1;x1! z`T*B7$pQ@ za-q3gL6dh4X1sVcX1kJ?ZdG*?RoFw?Giop6HWWhmErMrf%qwK>6{2Q+xhq@U&q^Ix zYUew?JLAO}09ZJ?q}yt4t6Wu{shFLX#uSU3-vcpwwn;043h545F(=?pjY)qmuaF#J za3FMgP`4&SLt<5b3r#|UI(u9Kxi(o2LhyHXqnNdo74&Pdz7E93M@Qj!txWe=wQls|@ z#5L~x9iSyAx8^(_vqdNIr;RLsZ;rlEOHYN)-=TUY_=W#V`Q!W5HBtN{KWP47DUV)1 zOaENneUNDoR3%Mpw*g`lyDPkjk`46)&ckO140UR31Nv^}jofcC!_BJTK1fuFa|E zWQ#^}jL&J6(x#dvO@{y>Tl3;RzyAxj_szPOkDwmOpC-Eht}%xti|ad`HS_b5-Toy1 zKgJ$&^cObG|MxDS-m9V%Sw&iB16eL2CTa?L9+LGP3}odr^tC4V^L&Cvmm8eGb#nc; zgi`_lqlR^mJ;Nk=22UpOb7^jo_Y+_1O-l5BqthVFZi#@Ugzu0UvCcaHc`b1O)tt<@ z3}{zz-T4*j%z}+&d+HlnH2&P!<#Xf0$ELOybpnFwckNE^l5x!DBqijkaXfx>KIMsl zW#3>tkO9y(8?CRid~j{FTy#4q_fzyaGcAoN(7w;msGFa;TDbY)4S75@B(`mpEnET* zAj6!-4-ABRf5FA*^o5aL)Rg44w^ynNc%REL{wRiHdv5bC(ZLpGZRIS#MM|lIsI@>+ z_l_Org8+r@^6(2z`7_?N11?}oveH~UAnmB&^GDx!g7JN<7W+(AcC(&*-+^r$Po?r< zdl3WW9ODOjtg5qHhutxQ2TdV)Ye>DDd8|7N!@~ra6xO))A`UwT?i2YJ9_5}s;@Pb= zxebqftm(66WFI_;cun1-yflFmBL`G`H%Sw6A?I8b8RPsF>@qG~5tMH84(2kzW>52O z$N{2l0vftCx#q;ISX?5a-n5gPkS1!fKl@} z@bS+2^4q6yj?#1gM4r&2=uj9P=MArFY? zh&f5O%m3#lS*o_|HOjvM(s5X^aCw1$nJ`!YK$BbvTh5m4&y-CHB{p>kJ}eJF0peTa z>ZDC(P@s}#0KA2X-)>GmaCQ#g00agG2o2i})ot$il32i6<$9x|qoJ1;29=4eTV13X zI`302uOqM}y#~6^dL%Q3E9Fa3g2Vv$zm^Az>Xn+Rwp(xwwo6KFWSs96yipPUs*_s} ztE$0$y9;T*B{u1?-KeooFu2J?$^Sw@g z%ZzzP?fo@F+Q z|Jk}JVuy>ZKs*LY;cZYJ4KW^{{B1X_dV|{XJ0qYC#BDuch(kFTDvjGVag@^OJDr1? zv`|flh~)TBbuU+>OFDR&AqR|99L3VXcL!Y#;^M$xqZANS<&;n{#iX2^>kiY}^)c&> z$toB^{$*U8J`G4mocZ-ii`ORJx3->vjMWc@GHr7?ONgmH1HIfo_%wk4pAOeKgGV0n z{UU>fwcWs>kxe$pV^n)G>~Ku;TRw|=M^WB~^g$E&sT;8bd6SHh${S?U#R zS8|Nju54G)Q`Nz<*IAMpUaeFY&R5H?JoOe_nQ!yrN;~G*N(@ccN}O)T1dP(xZAM-^ zAJaU_az|Q0h@L?YxVAZrom=ZsWRa|YZzT#BS2qg>@6T21fU@anQ}i_@Eu~_Lj@G++ zzXul$Lishzir-@W`NmcU4_>lh!1*b}6(}6#56%53CB{;6t3HggG$vtNa`&H6*N$$Nm+ON6lQHijnf-Mu@xQF#`~=rM3r%|)#i@%90;^V z8<;r~kgNpoouA_;cbMkv@F*I(T3$s8Cnc;5$+K_n@W!-i2NqQBBCO$1KjoLx4m0RY zZ6e$)PDS~S3Q~y|?l8W^-OAoYmALqGgEKn-knDH!I2Tyu^thIGW8UzJ%u7$ukTiB`_EIbpN*?om0o_g?F@v87QHLEZ<>R3JU z&vt<>TYdB>I-J0$hlV0MO?Dldk$m$lmy+Y;dN<+gX-U}YqJD;mMJARo@Z(S5`e?}P z8yb&TrzCh?R9mxzd6=M-Mvz9aRc@cC-L?dR>Y#ybG@Ar*s6mW(=*qchvMJe^OsG|4 z{&z9l;xRC4EDGR*T=S0Nce}zDCzOPZ3lXLC;?2|_9K?KH-5(WtQ(R0xfF#BO(ZzCWO#U>x^q0H(}WhRUtxcW6}k=|{2YU1 zUXeciJ!=C%(wfxWMjzj^SQLFthOu)?(B25pg1wb)5oc#qoz_z6mKps&d2)z z$H;69GV}*Se=WkGv^>E3fgiU=vED2Y1 zng$H`c@(8jX+&*$F)@3p&Q~lQKHm0o9Fu=_7>0+f$7hCY!IXuCKls;Rar4UCC-mgB zzKGCudxqZ}#O?k)GW(?!74>dYuL#&=DJiE_ZDsM4hpKzd5wqTi8kxd#wsD%gIE6Zv zhJT;ETND%=$uuTu-DsNceVnW5_Q$T`zs;uo;E3rY+t@4>cT6V$ecXtx!|&V&E5Qts zPJ^qk_lkIc&$QDnVyChc_PrPirc2#M*s^8K?j)1Ey;f0}(jE9&fks(^Lg#lv6i9qhLjshL1ejO|-3>bJM7)yV5B3OE6!~f*`~QPq)nE`T z;}f`V(i8n^ed>skS1pYhFZv9gBc}0Sg3V#{>=ps*Doz0XV?DwTbK>b^mTM~FG&Y0*PuZk0|SvCKmJ_) zb5&Sa7|fW6St;^E(aZiL3`xcIazG`L2EN>PICB2`H|3z1kF<$S2oD7D@H1+320P%r zEad;G#e#PN$xf+W)kn*#2rZ~bZ3V9ulvIETTyj#d!#}1%ql*}^lG8YU{PL49==KVp z8+>9tY7mFg3_TMdJ6$7?27vo|S)w--A>vg)K=^ilDx<+0|NlY+LcSk{BYq!Z zBz=W*eZmO#^J!TUv-e}JqR=^5mYmrCCT={9Q*}eHW)AQV+F7k1*3^nml(^)nqBO<% zK6tP+mBe?1nMp){;pn{ok2S#hnEawZynToG^73PwnmlIQnZKRPix#V+e(}k9XM$aC z#OU0suR;`D>!7*?%jwXgD?C7%O4v<8X%F^_D{vG_ExrVg)YP0s8RJGe#FH@TzH}Wk z^hIa1`mUbFy*FmN1YU^4jZ_{k8O^IQp|ac-5*3tH$Ng8_UHiWmKE1C)FLawJ@DE+$ zpN8(UIKEB6*Za5s`=KqeI`ryG41s?*m|d>w6wN%;cvqVH--|BcXb@uEqP;@*Ds@#a zuJ^hB6Gm-_Gk{Aqv236d+)sdlEyd+l+PzFEc_m3_{r~I&c=%=idughK6hB61MoLK? zdXMed+w^!e$KR<#-G7w&D+vkaKWW72Cg~RPjD$=dJ?@R>LY&om(eAT@d2Mm<4d&1 zK9apuRBHEXV@@wGU96?h>x9EEW0fD;lkVS4sS&lR9;8vJqi0^;VTl%EN^H_v>efvt z?*H$Xsb(OnChXuM)W;={(92=@cK_>f=k=jDw07d^o9U(E7`IEtSTC>oV}o%b zqO4bh`jQWilm7g`C-+U|JfIui$qdfQC_!Sg-T7n?~ws5R8Wpw0l0_ssb3Qj;DH?DK(OMs>*!syAK@Sx-7g*a017?vY`~TI* z5OK(Ii^f$2{44GSbFeTm;lWe7M;dOPifStrDSK$Ku~3?T$qq=aMgd5*lZkD#XPeh2=BuNRq-D^Cq?+Wy(ItT{9kx?0!A&+P2R)IYl^R)lvFktL~5PId-; zTUlHva@m_uMgq~CoSfw3(0>B4Y*^|G8MUQr=>zK``rnGKo@+x4o}To!G6EgtxQ_#0 zaRaMN0qhv%;9cOZlp+?3i1A?rl}#k-MI*fW70MK>FI{*Z~Hv!oa5UI1GsVN@H;OY%IMQ%_mfN zNN1>#o=YclWhwdb{~q_I95ajT+}vD1{|K0(~zMBzc1?n4;fw0Ufozeu8+ zU@+5VP4yiKJ!F5E!otOcpfu7*3X>pR9|!G1!EFFQN5Q=cJc$A_Za1R1(yGf3av&jq z-F|YyZ*1oLr4yTGWP!0<4C~eklg+@FBd-c(9pJ|7h%o+3`^k|_GSY3cVZ^+nWAW0q zb*YXxjpAA-zj2O^{US8y4z{+gl5eg4ji>RT@3VrrgHa%@5>$tL2w`g{K?rEk`D+tq5uftm&fl5^l@^fc#l zq6c?TggC_>V26DM##uK`mFj*IVR7hN@RR3)6s9pZ3uta52|*jsSyD0s zObU4ZheWx?ic3lmD=sov@RU?k3@jDL8N=3qM%=f-UBzd*aJ5Gv>18$6W9b($iwcCu zW)Q_$(wn|W&3+O1P8SP!0h1-V+;S%!t38S@!B|)0s-zCfU3C)^nq&o9Y&wVBMHc8t z;avMjOg=3JTZ`lR#zvvZIFkxsQ1I>olmQH7vVsr7F-j@kF*5ZvU?K)>NB8R9bCjL1 zi^S=v7W)5ws)02(9jpaTpj`FHAChCY!p8~E|1G{i4h{E*&3Q`H-XmQrPxUF7$>2O&6e=DPhdDMY6VDL?TP%=vC8*GFTIf11N* zv~=zA-~H9M-5gDKbx&FD$Bg-kJBd; zi*SSmA2BMuWqFNI^#Ieis1^7K~CrNe$ zVmzO~@9@L6q)zxGhHmH^Th{2$dW}+h>TbTYbxEoE>vX?AZK__DlT06V$?|zqb#J^F z>4t83H|t1^tBUx0J1hH$(pi^HoK13yJ0HD+ zLyAZ19ZW4HPo3_D;ZT0wym}N>jxTwI?bs+Rxa#te&^o3OtAyW@!~}|&r)orC_g+Z0 zH~Mbm5y_;y|1{*W0T&_wB?{I+JFp{z4)&nFZJ)FCY-+$ie*)H=;ieeNBJn3`3$SYs zpV27Es>X8vBCoBTK$~n$;HS0eWP)q4GMF_!3q%K%-^f?v#ugek~@!a(Xe>{Kmeu_OW&k>*cz|Bg9c zO3sfL-RXl1Eq`dnCpztq2VEJ(H)u%h6iS$jzN^OCz*9h6O@H|r%-+A_wGcy2PMq4% z|EK~9VMufCVMX-N_Tbvlng+yMu%GLM%sOPh@7>(>b1u0GV*A=J&i>Yw&UO&g@+f+N zn1`45uAoaA^ICP4IQF=ZbCfir;1UfXzNE(`;~p~Zi)fo)6M%W{1_)A~HDV=!P5|B# zk{qy_fyDFySBUR?MhITr+*qO_;>jw^ z+_(^s02s_kBUVm*a$$@LsI3~)!Ad99efnAZ@mK{CunAn<#2GZ<7en-c_EDEszFtA> zpHTw8MQsxg@?NsXC0{8OHp`yc^c%(9r!jwe%~@mm{nF*p=B%k+@b{-e8EjT-VM(26 z?5^*ajUZ^?nfNE0rR>Y4AuCGblanM4X*c^9R#IrNzuTI7qf&u()fST%51?& z2bz!JeCSPg21zeoJ1i}*_Mdjdxc)&P7D2jy2rLR(uA&S6{;RTY{OVW+=+T9l*A`go z%73u}XBCEnze9f1v)Ce{v2U7$IsQAor0>(c5bY|zzEr02>%Z0+j)iz7E}4$OcW}+& zKT)6Fko$6$by>dyH@&@#bifk+9{?8+kiu9ray=R5IPf)Y(qiG{+yqOy0vo~yZkixK zO{6&<{%PxjZOBv{FOWEN-`IW1@&&DbgHjwoL`9M$5H^M1I@r$jz+kDkq+HQFp-F+S z5wvNxIYuT)znmIxFP|6&tsT1KU2+FqMIx~v-Qy8~gP|dky^7HH-WKw-`uzJ*^GuU; zJ&+0sq}T^$k0;p48{v9_^WBCV=mXc|p|d#Mcq-x2DAo8Hs7Z)?3v7X1zm6;-;x~kc z6s_pX+RJ*#ne-FnpGbUZA9y#z@qt@JT=BniKA6PKQOdYzyta*#=C>sVZ|EqBvvTv7 zTVjybIRV16z|x4<1^zOyWmj-qxwRNSq~P+W^h z8N$BnlQF)3ao{Zz)(JAu;nUjR^V1J%s-$IO9{2dIIuYFQO^ZHy!=ZxhR|WXMq4T!a z$~azZ8!~PG8V>V4>NTagWA*{K%y>devA|zfB?2(Y)}|GnLLlPjw6%#lcYvtT4al+H zRnXGR@4>_10NyR*QF%&orIVO=7;a_ zXL#Ewfa%o+s8N|k@g}5&l1vW|GJzmhuTKVtWP>s5tuFv3`yVMTkVL!sioarOiIk_p zRKf#0#NT7Q8NECz2r@^QL_EIUNDE!L`L}ujs$@1`6+upFVTWA349dn2-E~n(RFlcYBb(xpOanE zAfb`7EPhFE6559dYy(@Ws?=>2JYdSfM|mJCrPWdJV~xX9lURc-R*kB}N^_SzUVEl+ zP-~&Q=buugHp{p1U<0G~&sfpTIx=;Mw3Em4$hFuLGPSMrLqiRULVFB8NjoWz>a2&3 z-O@Xn4^9S5gg{O?VL=wJ}7D?>{ZY| z?gMW#QoG<^T3E@2wN`GC0eeOH7&e9E^fuW-+Tpb^zlLlKqvouRCoK3|G5stJ#xL4R z>xvus=eXrd!jEUs1^T9S7{5o-Q|jBO3mx;;)LW5EOLG2cc^vs8=7g%`3$! zLg}81SY=91t5B~B^IVg&>V@ajk}#-UW3@LBWbbGU+3@EECM#%bc#47o2;ssSC@yoG zw)vhOZX1M>`og^*pF7C5C+%Y0G%Y)l0l_rr^*ZF&V*ukewb@KA95lH1;(U)diQAw? zfwN*5iX$2Nw}A8A48C0?<95tC2w*qkyl1~aKCJn@L>sB^#kq>t%cVCnMz39aFXS$s z|4SQvG@Z@;KQyqOEoag&VdzzsSNx#57=jt1|8^qP)lN|Ih7?4t08Suj$s^o{TJ5Ci z3N0eWcYBQeV1dZm4QI)PM}gr9r2j8TwSW36nLt9O04by;vP?unX0k?NU=Xw&rHmfj80cwvWF z%qrIbAnMSs=LjSAx(5c_uA!zv=yCYh+-kE=smF7JhRzPwz2+=8{WHE@0Hh&WrKsK-$1W;aPCGIHt4Emb zaKDDBwnP3bUk74rSnYmuFFTZuTi!cKGYURcR(t#DBC@trn>$WvKbd)_cZ?#(pLzxQ zHAw?ephx#~tnaDlJEmmMaTx0l57bjz$Q5BL4-FYe*p+9B{c-}I_B^HKxubp$;+<8B z9Ih8^R2o{D>s3uwPi9xoSbDiy*y~0U-1~mc-O5fX!wA{08?1HedlagNC7wc)YGG+j z0!#~oL9Ro?ucV?@1fh&g;cML4?3?cFK@yBLW?OcZxY&ZV+4HIXXMC!adS$|gf>_2F zb^i4J+G!JaWp$0pL;@v-3?$uf-_jaInG%)tI@Ftquo(Sgp4MpMr=0#_mhxS|YA*5D zc5ju4n)ICUlIwbJX1zM4J|hPE&-Zrq6+8{@HUfs@ZRpJv^4#~m{h{ogf!}475?{nf z^R)g^Mnvie|6l;6+tr_?ELt0Y5)tnDfR}C z$b;lp*j<`$#rzm>4y{g>Ncls6xh1l(4R!9U{0x ze>1u4*Po3vmd$nqIq_T2zHQ{BIJ60^HSxB;#qM(f+n#~hTMd~e-(^XBz&`!ZhK&02 zY0~qkfmERpQzML&!NoY<07t2I-&Rb!4gIHSBu001L}bezE`_a_wvGqa&$_4N+puDw zgq!J}oS}V!AkS(*Tac6qLFru8xR{Ry%|FUnw0{4A>C*1_5xF3DqIoCAO4*#q2MrX1 z#P)_=t}GAwkM-NsHP+YbYMTltMD5HleaiTzGh_UJ$a0rb@XuDXm>epbn-_;#^KS(E z5pSU5KgcV37|^*-&&w1XQTl+Rz?-O{oz-aXNcUN{5#rRY61xU|$kPlsypJ;O=amgEd;5r)e?%+OwHazh zbPQ$2%u44JB3}jw3VA?-uqQBR8fsnW()&r^&UoYoDOTCXKQU^3{~*a>P{Dkg)1*a@ zuPUD?ZMuj>8$wXODk=a1>A(HltC_X4qOwlTFn&JvF*M!pl>(`m!c6>+EZfs{#A*xp zO}+3p4}kCB_`{BAyjUvhZ9TWZ_(Twwh1J8Q3}12z%>pK9iz;!y9{0_H*#nsAd!BJ1 zCgaBonu^l;OBKG$?7{~ZkZv(t0B*T?q~I~_pS@zx?kcQ+xXwd_IW;(jrQz+ib5 zIp%S1#xZCfKhi^t;m*KD?J0Fj0@2V~zDip0nBT&6(?R-VD;ZmZwS~PA)d_7LYJIm4 zl|vCV_s@90XO0*Dc)*;ND`&e6cJ0O^ZmvR`H6y?oEO?`V*x0zYO9+wc&bnCcUE8KrP zUe?28?&D+mZM4ABmBqn#4~AlL{eN#Vp`TH#C+f6+zEtM4+^_%n0Q=nR1?ixU7jeQ= zA3=ZASH2i)`+@XIA9CITdhIb~7i+2IEbsOajOCxf!h=Wvv1taF$R^r|sxhtr#njqtGQB>&P{wnI_y%f+c-nZA!# z>s6y3`C{`2QJGwnVRlE@i&0m@o+oun!RI(Q(d4yE=ialgOgN9b2Rsh%eHV?Bd34-+ z3U(x9= zcz|p^WEJGiS8=GxL$W4wQMHriF3$fQ#G&dMHuuZ8(i2aQ$;dpKrthb0Q>V1AKR)i{ zwaybh0!xl+Qm^&0`kK-wnB~ByAsu=48b@nt;aXGp+?947>ug}(t#T+ut!wRa2OLF( z9(P2BTCq|Nxd15=gjg*U9my(;D_Y83DjDL&b47fm))q3x2C9(=cS)I=idqvV&%JK5 zmZ`SwW`|-E^>dx#x{mP?+WfYBc(_E?-o;NSWG!$mausy@MrowXk&`snkG z-^;K6HvbhLGa_ifKJDW6&q@szd$0I@b?^l81K_z`?%3wpw^>*9Fu_CZ6|{<*HxQnkciHeBcTO~FH@EN{4)wIK?@jrwE#jxYx?vqc z=9~E;CgAi@S1gc}ORn;)8_pfS<-vs0?qX4O3T}`x-Dhf}T`bIzHxKg8`B?hs?`d=gUrgAJ_5UBSz|CPD0 zRta6K%bY!5BO?spWYb)Rgx#^6ZqtrN;|9S2qSPs8s`Kyjk*-M!STG6iSnKEAfY^ke zuM0YJhl%Qh*rdE(%on^RjP`D~8g(C(dsmnc@&4AVd5t=XLPG1o^g0m1JS0D_hTQUG zk=HHL2WTGArTuy)pHKUDp(Vo zkR93KD>L%gE-7^VfS#bD5z&GovzEHWm zyr|hN+{7>7p|;0F$&>*(e8kIGyxbX3AdoBHVMW4l-9%;}mts~(V4>xQ090|YO*J!E zfaNCcW2%jAW}NEJp)qoRuMfkzs(H?BmITK#W>=X{0AcL+uD6_!W#fWi#UG|J{+Pq( z;*+tY?l~b$28n2t1Jd_wIE6VufvPrYeZpWdxmaAR^s;UR!X?f+@cc7zs?fFL^C(ZJ z*;3{mHjs_`36Djs%wtR5r@@qneF+^mD4TXvX>g*kP$cQA1$lpgRKo8QfxI9cCD>V` z`(QsehYLON*wgCar6gBU6h@^}#1nA-Io>NufqpmTYPmk}PB4(BE&e~d0H819;_Rl9 z18tYB$fBbop}M@YPI=)UCd#VhrE5y)2aRh2v#y${UL3NjqGgpp44W|V;T$ix@%;)4 z>!(R1Da|WPWlbH2O0cq}Mf6-0mN=3Sl?_Djb>W>5=J5g#A1V|&xBmdhpqU2`W?V;< zp<-vYo&#jnzLQWfxsJ&0km{87Pd4o0Fy=xJIK9BggT5~ja6}=8*k6Bre~WA@(Lj<6 z--OYl9O?^5Vrhc}Sli>JuW#BxD7xMS)(59AG~gXR`V>x3*96W*CL?7!$4EM7x{%A0 z$H$V(s_*W=2K^5ZO#d;{1e|Uo$0aCvwYq`F`^0VKd;MSFbcy<(dImJLkJa6RN&W|- z=!91=@H_1R5;)NdT3PeZ~kZ+*ld;!xNMuf^9`vQy(bX?0=u?zP3&+!SdyAwv$xPBsFL2Wo88oz8X>P7;)uEDLy z&IGiovDW=@!{owbmb5HA3-iHjUnzL;M%ir3gHRt;*|@C(pw`D+86S>{fD z{Hqc2wtI%zK4tf24A=ktdad#t=x!~8XI{;O)X`Tfq6}gs3Ecn{7zF*X2n3+Fi+m1| z7hak+sYQ?gcrcrC+riMHRU4(k%pWAdjgUTUcMQC`G>@M$zzYC%H5`AZz{U`AczI23 z2n2C2@1dR|#!E;t-?UG+t~{y^bruzZ(u%bUN*aICG>?t zkSS}6%+gE3O}KgS)f|PbBsH9W+Q}cqwQtucHKZCizp;rE;$T6k$pXhgC0=PvCp_94 zIhmqTn78__g+{y$5mk;P{-o)-uMCV3fQ+NU!()wYKYjkZxG86*uCDIqCx-fSad8i` zN#;dJ2->I8!ot8YYHI4Tr4!m-1 zJ{8uJ4U>~Rsmw6Bbxq=-pB2s_305bImjar?&5VHa#&1J|cpxYb4Gm558La7eVi4)| zc;=}QYY62GBc*Dp=Y8DHg#6rj`wImb0_pJIcXU)~9J)2q=|WNydqNRIxH-z_|oAOPEX`Q ztUee>o)FskJz_{d#9J}BpF=y2`K?YE=S1-S`)K^A$(Fn2Y`9!Osg{9PO&*859U=#6})nfM&}r67?|#q0Q4sv7}#-vc+yNtGGBlM9}1wL%ddxi zOXw@0!GT>rW5A05p5SlFD3#gBt_(Q?K}e$=eaq$Uiw z*1{p``tbAq>)b7l2OCr9*GUm0f|-CdI+>O0-BbmEq$qLds9z*5j#Ss5vr;S%X2~>c zHncWucI${*og&#qkU4PzyZ<6hW-Ngp*u*HsIK<>}%#QcsBEEi0CdF(28sdp{rrOKE zN4kt9jk(Q=yNOd{nUj+7kQPeKMZ-A(8^^B%D{4e2d*F`!V98^=C+!ejLb< zsKBfKz$ke~Iy0Vpn}9Gphxzap<88IAa1{cWjR^?VTvvy?5_bZ0bjBN9eiPqH|Bw|I zo0Bw&Xxi9VEJ?ObD5Q>-P+F6y zAOTDWUyQLmXWe3A?<10xmPQ@bz#8qWii&>ynvh)kO4%)OahkYW!&xIVO~u63wPDH^9mp)J}FU&2~uKRoE1-9Jcg}D{h_QT!1y1gp!Jm^UMG+AZ zAo79{edGn>n-A!%9iH)(Gh2FgxawJSK?*=0lf`Hm0N4vWGoT*vEM?{9q8&>YUu!el z@s_ER3|U#R!Xg{s@Yb1pdpmY(OMqVHPNkjrQ0IFD2Siq-8wIxbaF4Q;M-uOeNrig^ zVTt)2yXyM^Th#6%CpB;Tjey2j5uE116#T1 z1ud3SqNF;y-etWESCme}YnWO#EbU)Di!dqD5E5pK%!z?|6{tmEwpWa~%?SnK%X-1z z#aiB1&FZcOY<|`2L~J)EL4f9tpHJ-z(K$~I{XF4Cr#Z8P73u3|K~Zz_5PAJVK? zc%JPUV>WvVapvbaODP0eh`*-)r1ZWNYn!I}ThI>4;#;Fe+>JFbQG`~gzs&)OmVaIZ zQy;AigMzZMT(jfv{48Y&e`^TNa!ZFBr7MN?$9B%>=9e7s)FhnEq z=})j8GkX67$2ssboXbJp$Iux5sI#Md%`n{^#}Gp+VFIbH8GENkyLZ|Vh0eQmV4O&P zcl{7}r6CD?fOZm1{UbCpjeT~O9^CzjB;bL=EL!mu#ZaD`*Bu^)3$CuN%7opRY7db3 zIE1rPAaRD3=(|}vk*%e1m?iTf zw`1k+wKil+xAV$4e|P**^Rc-FWlcaJF)FOi*6a{OsjDS4E0toK%=0cG+%j;swO!+@ zt##W^T%*&n3Mj|i>R**i?ZF?mL58WkY)f$rAxXS2~k2& zK$K8Y1f&EUI;518E)|t7kp@WxL`i870V(PH*0}fn-apTu=a8AX?<>|iYkBen1Q5E> zNxtEZlJd||8c9KWQ>O5I!Qb4NsL@x~Z8p$Qp}!##?bk&#RPfwb=$)vDh*f=C9H<5o zqg53Xz?`e}CGg#QFFy!Iq}71CG>Sqi)*i&ArBix3BLhL96;8=(0c;&Kb{1tec-3yRaCRlC zKzi%T$)q11FG=E=k`v?N0zYCsQQMfCfTH=+A-C7pMow+UVAQ@wsO8K9{%5MLMp}6B znosCGDwQpB1^Z~pqi-}AiX=rGFb-VWGHWxbtbQ-RC%uH}0kSMN(}5|BJs)irz+S!b zJU@^xs3e=3?G_E2qN(tEk!OON5cYXKeSZ8jl7e*`@?b%d|X=W z=>VbZK!x2`z9FJ!ovFGI83DPRzI4bi&U$oOv5A>3b{>VD*d83p9df3_66gTL^Te zY`cqcmb`z7VCDP$zc^;;?@CHYXywg6`FNX~r&TfoWALnyGc5&jTApiOkodwpiNkH# z=vTKZ^0~7!7ad1pdoz5Qqdt!yy_I-d9JD}hZjZwu+^b3S3iKd+UT&sTPZj+J4<|$t z;W4Ot{hNsh*-D0o!rRr}jyKF%UA5Yl1LF>G;OYaZ*a1faw79e|o|SBV=5LhBbFfdt zA1av;i_5igzH0Hkb(&%%6Hb8o%-}f8v_kNG`a@h=4ztS7sivn*g1-zCekekV05TQG zpB~4g{X%?*V8dpxo3^pKI{s}svCql>!vb{b*HHQ5$OY0T?6R^LG8;1kxqj#oPweu* z$Kw_PhzXp(l#hpVI0NS~l1tZM{2}qLCiHsJK8cjS&3D{F#HQQH$mze zTV96q!0s##H3*B=$)OOUb3%R)&!=;k_$ z0sT(tcW*^LLIs+v*0_4BeQ~1|k@?z~=}y35!5s$*d;PqL{+<+O-%aTp z(YS5&IRzzU(C45+O%IPg4)XI>*=<3XLf-j&{T+{B#ps6lhoI}DB_Dq4^l99>_&hQt zSikseP^FCSvgsylAl*z^`ZxQ4WZ>{>P|jT?A|@UbP|jKeL6Vhdx`?#2w1~)1@p|g{ zPd71K)D;@?UL@q#!!XkGh)$+AHDt`vimW%rnU22|>9@`No~-+enGVB8oxfXZ(?L|$ zZu=fx!ajRh8IzX+Kl7bf`75DD&ixS1!$tXJ5V8~yaxF5 zJk;L_-4W)sHM13pBWM)V_Ob@w4PzPEZLLdDBl~T~QQK!nzNN zA4r1coQC7Hk0+iO{hpGMakbPtLHpXL$E!DwbLhWl4=u|jcg0Ar*%KWoOXU5uc?H8$ zNf&q4tcYx3_9QVA(^@q`k@_7LgbJt2s|&{_CYMy!Y5RRQ}sN zCZ#=`>(bgmxG>-;nyiRlN00PgYu}bQ?;6y{?1->x5R9A;Rv~-1+w|e z@6-=YYfB4L>{Mysh)C=U+3=HqOaN%T_dGRogy2R^R%SxLWM^aYe_yif{1! zt7j{(2Y=t~M0nGD`}WPSz~}MIMHJTz&ggr~kAHuCooGm1dR_aF041N7e;>ijNdRbONEYJv66CdIBu~-SCRM(*#0N$MD}j2 z^2X~n3eKtCFQ6iqT?e=O$4Cly@dHis-#0^q$rFz;!;D`Ct86Hmt!?P+3Y5U$>SHtFQT8M2V`&JG7+1|Rc)*tb z1hL&WD)&hCY8}p>d2kqs$-Ss{Et_hJ5nvPZd?7*Q3qy35kE+YFn*r)pI9?M~!;aHe zIQ4)nT}mjk4_RohOSlW2Z1visbl??h%{-YYc5z9%x7a=+(qJ8H|ByH3<=p zCt@=PFazBJA^rF!D-7#O@Pn$@N0);lxyD{`w|O0u2H|(s0stxKQk^q4F~Qgb+|`qi z!YHj2-OtS^`mLNwB?=zVdcT;hoP5QRl?P5c>-mL+FO!p3qgF5}*3i<{;*`4V(wo9ntgobmrFtp#kGR7Sr`fzZ*A1l~ zN=`BmlaZ7}{rH}GN^S28V=A6D^|*JLJ%yZKM6N#B=A0t9tL$GJhQ<_YH1)ay=~o|d zEjXkmgi6JAHl7_lIL6LP&V@YlE>S){M`#6W35_HkeQoU0aHi~uFfsWOJ`qxXAMz>O z)#=f>A8c)}nVQy?2X@#`b$oMDVmzmgGlnyLONz}O28k(Me-;^e=SUYd#m33WDIy}m z&W_zQ+UYehm45jGhSIhy#lzj<}Qz_`CfDJ$VE*63R7?;FMLnZBZfmGcA3zP`lp+LbR3Q}&7hx>Mhk@b zFW5s3TBHlgt1E<+tid{yD%3=k7O$>KvE|bQdtMy3y~*X(9Qo~?m+7|VXpRcOXe1d& zZ!>Q8XUT3em|P~rMWTl2hdF%_E|711CHfa%|X^Ww6IsW1owav8rjlUB#~7-1+UNN^8RB&po%(1FcY}*AA-o zrFm6^9#Tjmms2&qlsh4nmdsL)14~=1w=8ZTqes$TzQm`rexaU6=!We3Jk)E$F0$8N zuquN68qdjIGW1#MaR-|46Ab<6A^?IXaeey-KIe4(e2OJBvTH2W(Gf+5Vh^t)n_#IKIlKHt)Zn#ZqbHP4e`+7D_?gym!&cjEzO0-$c%p86&eE>3my#u<-p6X93SU`Mx_MXoZ3cxxXL}g zz@dAO48dm~PF8$0KR>_!XCh1{+Wew&XW8A)88oAaDKzwfct*5IQa$EN)1reys7L|V|Uv_FpD9E012DRnA)-AqfCZArrcmI9>Xtzccv+xelicHXuknq!OIB3b;x1+U(Q!X;&IB^9q&VW<+y{Vr z6XZuNQ`b#CNMZ#kt|<~GD-j)pRGlBKet65z?6>lOoQ!nYGO}vl?^f=O^s# zwSgR*VKndcLd7Yy4asQ5c!@Zsm+91P-s%_6!%5z?+*c+*ldO%mhuscbP57>|gY5QU zU$P-spgQ%zFp_DeDRZhS_Zyjh7&zyU3%JsBA%~cqV#BGuV@oUbj4g+~dXohu$;v6n zDMbWTs$ZVf$QW>*n)MFj>p&&93uk1LguVk%;=ZA z7JmKO7^~0-y`OUYP6+#nfV4D2z1Gy>-=?$viu1pH-?-wl4tKFtiAf(@kHyZ+SS9|J zJqwLdwiZ+m=k3ZN&Hp{xMRcTdkECcvQBx~bkk#Ly|4j;8g$anl=49-obd*Dk9 zama27a;9f$?S!3s<58gJ^S*h-jY+WQNNqIx8lLDeLyx zqioP$RXu-b#OZ>}w-%|W$6V_LA{Qw3>byNY@Yh@sSTKb^)cC?fo$*&PUb&&4TxYS_ zqgmw4LltU?hH;}(v*Y4wb||An^i}WQ!r-yS#ZWtLkl#=ya=2q9_ig~1WvHdJ{DVXk ze;Uw^g3K4;Nak$ogD~{YR}q_(l}p@4>P)c z-Dz&d`NXH?(L}W~A@O7Dpo-#Ro~YAH@8@C;nSH*%4E2~!Lu%gek10`PN51z&R3>e1 zX6mUS9H{gtcxBi2mqF=vmf8u``=I##GuD#}uLwt%hhKjK-U>x=^2g=r^-LT~p5<>J z!Nibn8AWQ>FC*r|rqzXuEYN#-v;9E|c^_B)i2>FY2OdUpCbpLe?J zamFG+%3_FVHZ8yEDo0a(FH9g)S>mLA!fN){d8#hvAHIW}o_NvZwAFHKVM21o0R z`Jy*BH@D_LPlGhb-YTd1=6LId0V$gihUmMAFQ=@XBL3jzdLyyc%PY4+SqOKAG0b=Q z?bnSgVZtKU20!_FwJWtPPx)@Bop;AF%j~4Yakr<2G`feeXgD~FZ}n=iVktqW&(6IE z{)#tmzC1KSOyM&}dn>?zo9kh1nfDCDZl9?WsC^`@zck3P;wq#utkTfrWQ>F@w0pN^?gxJ6D$ zN$Gu;dHn6e?}s=*Z64^L17O;NiOKY4viXP8Dtt-VS2{T;kuTjtiOQ0?#>Ui{kCCrz za_2cEM;yK{ZQdPvZ#n<{dL9{9UtV3>71aBHxrcKfXJ6(TO7cf~Bd2C*pFi2PrRjYU z`fHIe2N3&Gly%KaVwvy0^UhnTTU1}4b>cA%;@*6N*uaQ#ZV`;VRz%4K_ADnsDsO<;%u;g@b!pr>hIq zvet3~f9zRwHPa|-noMYs($V+jN(Yl8r*CDo-1-^36)lT0EhcEFD&FOd0Vgppt2@l| z$mT|m<3jh>&|q<=KgbmKCdE2fy3B9i&SbwrDQj_JIipljxAcpeni?Gz78VjRD=8*6 z+_UC|MP8$xS6%%hCf=a2Js>hnH0q0wZjDZ^=G&G?snxX?rCH0?tci}vP1cQE#Hi%5 zQli&23xrw1fL>gCCEZ=!h|7yQ3yglC_;(**{kC<8C%H$6FBY=Ne%W>_GVCp4 zOH9wKNo6RFJ2?+pB52uGQ8{4arJc6(dkeaT&xY>#yxFLv`1nES6rd=~8)M@?>JIK- zV!32{%5m&^++{E@kc0h<{)02n6Y{MGP98TH=BVO)2kaxFquT{D9b8>q>q7O!_#o%* znz|8ggRD}x0?yl8d{$!H19yRZE7<{R0Q%<>>s%GQI7PR4@_|pT{o*5jph-{YUg}RT ziz4M=D8{!n#%3pnAY5SOfeEO-%_1he8>veB_t}<9R*`C421*W4Qskmo_m8oVa9OwI z0hF%`B@dx%n`+S89%V54{eIBX0c{|hWnA5c(I5&@X=rwOU0ggs$JLH6MolS| z#5(`*0v@*8ccFWO7QOxbyMMQ4^9=_q0NiH2{m@ONIS0vE+Dyj_xCS7*aOa<%ZajTH zWvCV&#`Aq3EEw{Fa{pik(c~eqXWt8KTC=A7Bd()61N#jF+~tUeS@T$eCejlUg446I zvRsgfM0jp7Z|M#|l%n|v8~Jl|Ffw+BMb1Z4s>JR10GgMPWEAdzOcKB118?XbAy`%( z=Gpk4g|x{Up4N)Fw2p%WV9JGO5Ira7C3!#k+K1**pP(*mRbOqJjW%P=iu8sa5Vf1rYc+hk*cG=rTywm-U|dXfORSIO+^=^1Z$ zB5IVgIuAv5GVc|N%h1h)`5Acg@Ydpp6yfY!Lskv@Er^9i#4sv&#k{_oYryl4C>blU z-19|L&N$Nz}#Rag2RWSoDq}RjN;5FK@p#7v-SCQ)1uh5Mt?bwp!*x_ zzOwv8g}kM+!8WHU7s<+?lqNQ3oWn*sxOE$Ocaz3jm#JK$G|4jxNS~z%h>bAJiK4by zZe6b07gsx>|GPxTXqQhfOkW=o!wA!#pblNiday#>?o{G;3Vd_Oo{Fbub%hzr9{fj&XiEhwkqiE zxKCfEsjjZ>{QmnJy+*1(0S(r+E?;^gO})d11q?ZJIO) z)&u>!*COrGsuJJO(AL3cCji1QlK5$#)hp>=Jda0sg@uJBB~2)saDRp^9}4jB2;sY5 zz;h#neMK>MeRA)UJ~nZ6XSifsP0yTNyEPLbCfs&^V;W*RpDa2YEFmSOfb9k19>R_w zb(c2mM+vUFhDLHy(&&e8Ic*~!p0wmaGH}P;Ii~Nl>H{^a0Y0y+)Ie)eQ+hf)H_O4r z!o9pgiPZD^4Cae{=;-;CPeMUmv9~cjebFZGgEgJ!hwgf-lg%R>I>FoRcgvr8M&e2- z=`mK>F=M{t5DBgW&(PdV;-#tPiVw!_?(S-8A&tw?qAXnQrky@sr_KCniTrZ zBCD9sQ|u#t52$e}E5#NU{*V$9mYLDCA{3f3@$N(b>AFbkt!qL5=^k=H?^W zM-dB`K@4^ZN8vg6=_bM4O(xm|$|s;Io?cXm+k>#&A{N$5?RBM5lbi+$@ks<9A#eig zT9}h+b6vhw_y+=;WB9k9`frTh;o6Ru;lQhIQV%<1j6&yaZEYRBs;uMgF?d#dAA6$> ziuxGHvL+c6%s2d!DM$QAxB3r(0Xih)DwCXbz^Au2-;EaqF;;z=tR!w&{g!aKGe=-aGcoBi9b z6JB;Ng0P1* z8=Ng-BBBgEeW}MQNfvAZC~j_z@}UodW@ojBUDv7D&*7Pyv$LJR8l-9j6}K#+F5~_$ zDBN4p@k6l3RV^)l0uA_PvbAT`@oZeh4M4rm;3TMdIF?(9bvaI9b7+oto+g+x=nrTJ z3kW^I`W9$~OQ;h6mXM6BT0kiNW~_#vkwGRK=Vo(LO5Ojk0L8?6;9h|W%P{CG2)bZ; z+cSQn+ZV>zA7!+fp|uzyDU`ACi<}fze=Z4q9j|tJYmozM2I4Y^Re9xhwk3pU4(sSV_HE{l5TNCAN@xyiuQD(>6GyrE{!_|t=a32-s=g)+wvUw0SkO0nPvf!AV zrgT@@@1RuYHE5EzV2K&l?%ipi)aM8pFApp)rtX&=1cBMg9CS{8%n3&WbN4exw#191xq_eWs_zv{gK zF2LwKPuNilIHMVFgdx2B!UI;jN(J0h97p1$RXEn=f&&VSG^tref<+m~=>=)sFAxbP z#I#M2{kioXL-$D##k%JkNcB#u2MaqgL8esQ8Ie#ae53+jlN(hX$Tl&<;^|r*ylxWR zYn}`F$v;6Wh}^is$>L9^&$Mx6{noW>WSQJGL5$9ktZ!HYZ2{lOGLL1(=5pp2a3upGJ zdQnvrKY^X)eiuRKBhc=|6~zPuC0sTwRjhWS&GP`Ou45g~7$hk8LdY0X59|8u<#P;} zSPb)~(qFy0LK!_+}RiShHTvQJY8?(%;XA!63rvC3wH#xF}cEM zQZX(r-INPgS?fjkuBEC<-t(jnp+}OFmacDTVA7-5 zL7>PIG;czEqRN!2;DFnG>BSIjc!Crn1IBHEFg%|*FKdtsHAhWL>-l>~P5XVafnasJ zS@pxz1CvBvDwyB?lKm$rJ`yU*NRIRdaN^S|D4!iMD~eIGaJT+8GBS$Z*K10Zpv#@! z11%E6-^!-1d;2|O{ha8yrRM%j*HM?f>-)RSP)7ql&SMfd)&Si6q5I1hFHZNLp4T|1 zoZeD*xoF^g$7-Asfo-0$4wDN%C$rj(RXQM7 zxCo~|`ASCXBbdI*{*5-|tp$Nol7x2a*b`I<+l$j|eBLHwVIFd#Jbte56X@sy&Q1=G z48MLM^>}#>J42(Glia@9W4gwLl}{txweGM>37y%Dx7`jZD%8ZD3)$t{CPl%yQyS^B zVDd2;_dN!iZj@I9$k&w9?^aXE zAXu^0G!=t92^}dH`9W7vBG`N%*XcEAAKQL(NH7H3Tejc>gU@jEXy9PrxpEVDDU_M5 zWFytJ06NK5Z9bsur6&~`-5Xs88L#6280pz=bu&%a<3%ohc*e&xTWbhY?hMRH--%`2 zN??q39sBXsUYFkuBt4uCh8HJsg~tuoKx>(6g{Vp9rkLirrAeRvFpdg_zE#+EQ`z(T zWUIyzml@(ldnwxD8A?)QW@MDy37@2$?^uz%sV(EPW1o)hG}0=gR3Z;@#L?eYjiaRxdrk%=nN*O{sjrIfromZO!JiGMnOX3-07Ao7F28Rht9ET5LI0ehnU z!sd*s?=*FE;E(bo7w_0@<^wwT&?Ci0Hed5X?hXCALPLv##D`*h++Lt42Dy#x3iFyR zedSe1`GH*<@jFVMl_^9b$a1jAI*db0Svi<9Oq%Vb!otO3!d!Va)t8DY;{Xc2uy4Ms z5#sd7(|~qxLY?pDj z^f#5~s)oJ(e2T#~{sBtY$OB<-MW6H@L{$WB%!5aAeRqA`-8G>2a)GhFJ2>g>LH*B& z?m{^f8TXQ`#KQCpenlcZy^X{E_c%oTG@JiW(2%ZMx*wYyP&)i0El+k)gdm!gvUGHO zqaruK#3@#&Y;BMal)kA})T&7A@Qb&iv?aV3U5K?2W9(d9_yr+kHmvkng_tQ5)8h5n z1Q4b2C7NCoGOS3|R63*KoqyfB`PY&J=WfLoty8stso zfqj_+9MJl{TYltvKO;Sm(;gQSyg&Dxs6$gr>na9p`IThGQp=t+Ab%wnRsLRM5<;*zmaFJz8D z=l$bEgJz&dX* zQ8xgm6@C@WC%}cltIE^xg6DSd7sDQ6zB5b_&VCq60e3ZflHpAdq9H@l$UQMX;lS#6EWh@oaTY|T5^1k zYaHz^ABY`EWA5D#nf)SmfRG1E}l4>AH+GCkQ`XMaHa{zHnOiXlYBP^8` zgGcXnP^ew^gPa8WKH#h;=05j)Le7$6T#iD6uv04+29LYEhLUF}IYHa`ru9{F_i++R z^R6is?}=e%S9kXlh{eig#xTjlAaW^hfOU|~J7W)&poG&nS}=aS;3+HwiBz`x;P1Z@=GMt%!D(T$9IYp}&b5v4y$?gyg&R7llq^aa=3zi+IZ!9#aTj0%bT zHZ(La2Ps~r5IH!oZiKFdJV-bWFfA~YzKoL29ukS;?Xlv9V@VQmMHU=lV$>3kyuGES zOiv;w0_J$x_Kojgt>`;By+fxfNU4S2&3Lb{BK$;|X&X2X&Hcm=m4})Kw#zEGN{)_v z0Xd&#l=Uqjywx8A*t#D0qkHBAoJKsS zow~M_9n4;nsHlWk261TY|A8~_2>AtB4z*5q%Lg7|W_4 z;09mA3qnFbbzS~4j790@`hPwUD`xe|xw@VV!{he-+VNB8MYRI!$+b;Nijl(~D7AkY zW--83V9$|}lG4~Ef&%mHyLT8f!n$0CQ#A3TxSK#YSw=tdY|sPSL>_T35;m1y%S!8Z z=>4bn@5`9H<>qI=eM~gxls0<$#bh`uM`Cc>zBu#RFFw}OG0W}u4|KmWJO*mTTJW7N z%zF4wcA&L&MmCuGKt~OLV7+7-A{v{eiF?Yklr-jGp0Oy3OQoVuK2sadCjD~Gk zzj;4B%aeIaaZUKR7PY|{tB=PTv6elf@ zM+!zU2r=eIrLZ|7(Q&jy9%0MN%TR_3Sk@Q6#1kNGC0d|a#7k{MgH~Z-!FG{(vgEmi zR%bUe<`Yq8h#OG!_TC3Z1}0C#s{-W=v}Rr~zR+=S1{*d^af6nUQVSHqz{FRAICGIX zO>88uEa`urOH73MSbcD}g5MRO#Hh%~dZ_2&X2jrBWDulU0b6_&z%1&3yEZleJ0~V4 zRsc|0(0_0dPIe$`baZs=`cmS7R8;I@LO>D$$q?ZD8ft2@H83h0*zyD?Xz8JMrl6(0 zPa>AN3|SyAjI=VtJ)xR7wwYf8<4$L&*3#$atXU%Wh=>AHYTpCq#7B%mlEU0_S)Xa#f`ywvsqcR}1o9x?}sDSMg9Ig_-!#vHdruhu>L z_v)W#ODG{6NSjweyZslsC`}K9Iyyp4(oV^bPZpu928FZrEC;0KlW@sZlBBW%gi78X zMuj!c`lcOVxrh|-@BmgE&onnbKT=}$Y!gn_R&9+paLFr^1^$dxJh5R!C35L0pM8B` zrDCBRz7rS+213%q(IooU0E1Wh9lCdaHd_M4tO2`$L@^KYEBDtZAFAmL$ zPWVA}Aa(FGkSX%VYZV4WwrlDU_!6a2eOtu5xG0`x=v~*Mm>C#|VidQ{YF$w_?2p1Z z2G}UV??k;9%hv07bT{*ZBv7pJCXl;MKPa@+zPA2v zQ#u6j=)%4rr@)4lMa#^53h3-g5Ui>YwHU>eWh(5`T!0!GOZ!knU5F@9$3va;_U$jT z@Q{sY0KC_jmmrEptCiZ7QzmhgLIf1CMSA|>`F^}Z-N-3au^xwz~ zt7aOgXBUN&li8766v~E7aJb@neu;HID0~?We!hQa3JQHd#zQF*1wg=2TtWgiF%u(< z9SPbJ9Na-bi4YMPxiVTd4?2ZiMM@DUiuuVzUZL*N+kU}w4}dcWV{gRn$|o#{;DF!N zf{%@|&Auq|y_Jhqi~rt75aJD^VHxpW>|vu^`kEye%V~kE9&sP18vqaGOTqVd%vFe6cNh^>a#Tp=~IwqyZ{`M*$_W-VZ6?y%ODZu>0egX{%%i zhPQ>ocEUs&6p8H!)9tZ!16vIz0o(PfKtmi?;TsdCilK;~vgv0q2Vq#Rp(W>Vmut+N zO5Ftywf~Btt_eh^au}%FW>+Fws(=iug{p=em^;WEf2*t1V#`9%^Gt-BiwjDfFDX|e zhnIVpp~^K1P>j3P#uF?eDoTUG!b9u(E2ohMq9ZnfG37`D{?X?z8DAdrYEATcmSh4$ zS0Dne1BAfbaRt3wo=3Q*69F0%fun(&WEq9xvDB_Q%oC46Cb>- z+Kch(qEL{jVZ@2U@tC2Ulo!R%{}#SYcD7<&aLr%tfA<4ir@_Krsaj8RFHula55KpR zDX7bE5_5-Wk=zdZg{7t2^}`1|j4r?Q|GV7s#jQl5gWn6^!X6-7Sy_Qpl6Txnww#oM zIb;9#Cw*L(MH07Fn-gEWxR-IunprDk;f>k<{qONo6NuBml>qyrHWEAO7Mrz!L7eT- z<^TNbp;KUyZbh@ z>HEMZnszG~6u*1dA^u}zgdZMgJ8|~Q*KZ#^QF6Ws_>po$r0@4c-*DxYL1d7&y}iAu zX-b>AmaeAeNXo@Af%osOym=k}$GNObI96SlEpcY77(*c;I3#Pp=&;()#V7PrY z=P+5>u#cbRVy+SXLjnqMaq(J4U{?@ZWX1O!9Vg?tP352#+G1J1p|2;Mw@m>g9b_p0 z*^&73zrB20{_6WddphClZG`qf-TLLkxojHe=~by?$^{P_j!D+-?a|9+hLeo`+VPC}^M<*072Ka~MrU*p7gN)Y2J0RX=;-_*XXd$b3I=@2*RMbR!Ixs=f5H>9 z^b~BvtWcwXf3>q2ELRX^-s1_Nqd(vA2@awQDQv>ki&I@f7u#cc zD{q2-4~cjh>EPf1Df7RfPmBE{vtE1m&v+FkVhl)m(nOc>N{0cqY&{YtDGKvW7@L7< zav}F^WO&$PW6Cl?C4JOxWvuM+T%WLN&FH9qY@rF_I4a7wy<;qlgP(Dl;>)(nx5AiD ziM@~xpU42*;&U$%X%1I^{p?McY6KO-zl9?PmCubAG+(%k(_CLSHrCfien-Mvb(!(p z9j0zz*H^T^2-7Y=2?@npsV_jl(6m_Ltl;#GfWnDnLJGGZyIO$#Uy0L$=Lu8aVpO0w zea07L4>rt$pN;+>*-dbGd#$BzXH&H0Je>jU>6mJ1LQcg=)8SG&RA+qLGq1tZ(yV&D`z`?Cd~GgSgAbP>hU4_97CAnCorBNr0t?IDzo{%?Z_p5u5!v`EGm|W_3R3+Y66K+71r{Ar z8!5vnAvI|E14fNFQR#rwuS_Z9y2{SZzV=h4ME23ryC9rtNWzbMMdIf4aII^2*tgob z>gyFw&iwN7A?-6ria_J%R1z|OXgqpjc(t`{W$M#0q?kEhIuD$O6$tlNN7cL<>A)pT zc!&@%l%q7iaZ*?D=Cy?~7roPe&V~z_Z!;%b=o+~_<1Wn?~9RvL4KQZT}lKjv8HuGhuhi=$POAX&=X)W{Q0a431GAu*-pBg3z*rv&hp zZ77F1;2{0=C39;yW9sj(FJ+i5J)|moTdporeDdJnOz| z{LMfvCqQ|3SjaIqHS`+K)0f;Jhz*^_j5?ab6_a6`6Z@Iv=;5&gZQI&UU2mDEHCqJG z_|D;^$(IhiqIs59-xK%2gm-)Mu;I=LTao+L?f+o`&sDd+L|8_TP9BV_6pR?0TI2wQS;4kbfHDCtcUZ4$uOe+`N2z z=9TvG>|cTgZkU>01e7f433B-^FAtAvF*AG{K!D7|R1$;7(M4ZYZcg5BZ%QKMZ$%$3 z?z(gc#*z3%Qof@&4qKlN4k>GRsl%{fzEhZ;{I#RPOrJaJ`qP8<2bU1_myHf60Iu}3 z=drmlrBjQZd zC~czpZ_R#o42gR4j9e{}E2G~=T7ilebPxG7pEdS>6!CjexWuKWGv?-4s2aTjd6f8r zGq}4h`Hd22JLPVzom!+L9A6eKGboWd-Dn!*5^zZQOz3{xiGR2qkBis&w?=v3`#GTl zb<P7^K?=q?x5}`ZCx?T%h7gn(+EQazEh#2iHk&EU{yZkE+4nQGOb^;}MY85^C2!w~K8>Kf!pHZfwpI!(Cx?1x0`VCc z(I)^@q}WsuIrWdD^~YV#6r5W(wvtiEA4Tr93O218wfEN!lFMihmfQm!ak0!F?r-%D zeKh4^y&br(zo_s?uEFQ^*|KkNt%kKVN);U)9StfOF}9V}Rn(=fp?h&8@K$VtzJhgm z|Ht5_CpJR#F>p;bjKqn>HK<13e6umxcnmZ^L1P(D9qE?$%N{zUHzNhXnce99?P~Gue#LJ=&n2XDuJs~Cb!F}@krBSB6p(3>uw0mvlzh-CQRN9W( zgd!Eh_W+nUI(0l=6qxz~b)%nlwgZx-P%SpyUTM62v70HtKwI#rX-6UAYtt0b3gx>C zc9H}7_lOk|`7C&^#p&y;&5c=5@uoe!7&5G%9NbX0&a)Uns~MvXzV&Uge}8f^be=1X zS7zT{!YTL}*JT@jp2Xge0wL?*JB`^%C_mi`U9|6?Q*ZJqy`&~u{QB0{RCiWz)kiVE zHou#i)45b>>#G76wMsY@SCtv2Sig zxgq;KMVvM67qmXgD4BV1V%HAXi$^*23rN)SRnhB?UVTLbH-@(A!yb&A%42`IMr? zii~Fop7CDpC0D|dPRLCSGqm8fL53Or1N`RbYK!zLhp#g84XhDmIU=vvO{zBQE^m%d z!gER6H|7jUys;Y}+})l8zVK>SD(tCAITWZ~i~T@qjsK(H)MaRosLk z!t-xj*s3o!olwQv6g69~jb{ZLg-@(yKhp%8uUL?KarwaKwll*zhu*DK92{u>0pby; zAQekXOQ-&O&@l;GzA<5G`T6g+x~0N(4aNM!;U7P4Li$=#((s7yvS8|en;So6FentO z+Zy9QLMjc-V$b#3^>7TxC;;tRQd%0(jojK=(|^z@=J5w#`{77B1~W_bBDHzDnu=xB zo=H)9sO8vO6e4b-DINgH2kcBC41k1^;D7&$82dh1^sCAp5`F1P!Xdf=XIXs^E1I%H z(3zavDaiPsL&21paM>%HGYNTGZRgwB@_ePrFOgbZSctu;0qqcwNATrqAFGB({{q7T z6w7bky}O~;HgPCP2ia|qw)Fr1f*AB7T3X$Bc!xcC*`G~rnY91DOx}Zh7akWE2PZ~p zX(>S3-$zD9z*8>*k)}yqU0smz)*xWe3slrbX86pXlk|8{kte0jbN%~L2-Fppi}F>E z9~%x1(ky2FO?sUZlY?-tE_tj8nSAW;0s$J`+3_$F#eXSLiF5j@S-mY%gke#%D3_{)UCto@`n|cad+;K<6s& zy$5A}n|dAI@3)YfH)tc~{^*gQnK#|1S5GUDQ1((UT%8vBZ--5VK!=6E>*IBqvF|Xf z?|gWuC{z6Q?KhLCGHiB^h;Xw0O!!B%w6wJXqW}Fp?W9(?A)z7s8x#v&x47V}xd!O| zt5A2!|8&y(1YkaZgtz~`6B?o5*0$E9k%37AT>25l-OYvAzP>(C(!qlAdrkS;(A+%o z>=%f>9&b#^2?}m_H66cVmq!T;8#*Wlx)XDfkdmr#!CUE1Xvzvy9^&P~ylFr^ZVU?f z{J*NMJD%$Q``a!evS-)2WL|sknTW{DCVO2WvL%=76cV{AuA+) z=j!wMejdMnJbHLk_ulvWeb4Kh=Q?~NkCu_m>^x?|60dY2KCTvkNdUJ%Wxy@xGXmPf zbgXki03^yl8ZX>v0F=!-d*LyAwx;llGCMDiEd5z$zdJm;(tt1_S0MVZ5G;g%Lnu?SD{5qf~p(M#Bn- zphsX@^|OckVaNh~BbxC8lq_X8Rh5ukgLF@e1D)~~t|H*LEzkmUqK30h zhKGlbjpk<5&K(^GDjif}>xy*$0UI2M_C3bAlM#IK@-3j-Js!Q0-Gl(tdJ-%_;OohI zk zH=;i%EV(fO&ajM0z#5A>mB9D{eu73#C^xmXO)$Z_Uj#;z-~>N?dVs(j^7bsk3X)5Z zumC4usWeCfNincah}VE2_#f`su-xu=*3s`+dAR66yi37t5)l!xas$>(OG^u0=D3W9 zaYRG}e1(B004mB~RSPL9a6(j6W^mH~fA22qT4MK~59A-j``CxbBCJYaS=`IOkdS6S zMFBuwV1$yRxP=85SuKRH^EmoU}nfWn6 zD1k8;AEo;VOgifeVs@p3?92 zr*X&;)~%!H6o34C!?QGRwORdnJIL9p3?A+ja4d%u!Zx{Gcx67zu{a$79%6rgoa|d? zM>`Ykz5$W4>oH0@9S}ocg0aEeV}nqlB4JBj9?He|rn-Y}7E4@{LNIKe0|X2poy)s! zT)lCe2!E0pfWM+#1a;OG_JOSle+@c;i$F=g8MzAcgJP7RmJ2Dviy5`9Slej}hnCTbfexMm}y7(z{i#j< z1nTwn%a%1^dX>^kQ(|MuX=%FqirM#7dCm&wnO@3MLlKhYrXk(xCm_wg*Lo%4@;AbZ z!3YXD*)jn`Am0Y*aTkCi5_Zi!F*9*WGc+<#x~j1e#$yk&*!=9>s^3vB>%)bX`9&Xo z`ND+@_lb*1of~V%mx1Jg^53Etu;XR7=8QBor*rIi7*N>xEIf# zpFSP{G=Keu3Z$z-B;T*xn|tmfRcAokh6rIfZfkk=tj(a)9SBUlssa=m)!#=)0EzZt zoUxG9(3t!|ke64P$Ku*j11?k%0m_iABmIhm z`pU~%@aAN2DS;%G$?sbQFOGzV@C*?Wj*?G8ZukiP%q@_wirF@jeFU+U-u-iFzQzch zfjsfO=bhc%lW;x^trODx6OXV<--i~IeTg3e8#}xzG^GJ$C1RrfRL}{`Kd&X5gR}Mvz~IvI^HpG>wHhSkff$8O@->_- zuuD{68j@`R%tLfi_`%Z$aesU_5nT?aEH&G6$p!o=FLjz zyXhOryeoEQwT|$phJ&Yr?i6{k7t}JVHKERfcmZN=7HKj^XT#t%I;{7U=?SRAa8G_! zD-mu8pyoH!5mx$9G!4E!_0A4X=nND{qaqD11J1KcP`vg|{-#_OHRqD2 zk8Dc+4LTeB7&!qhX%lELF^2az6SVd9yRN@&8_2k1Uxv_Py}3pr1gQ3e-vL$Ty<)?}zL_~rWZJ`k@`kT>Q8>JT&6$OJEpDyVpy(3l6*Q#b?5mhd2 z<|`bheaIz>PZ4U}j3u=1LrRHZ)_Bd8@$vTEQ|;=*=&)xA;^Ms*jLIQxovmp=xqM`F zoD3JWy{Qm*sg=d%oIL4g2mics)B2GSjSA0mZ9F9tWo~ajrY&RiAjwOp!*tshW2%+) zAi`u1LqI+D=ndPew)~hxm*%VJAX3%W$ymf6K=7rp&J8cE_gI5=p%ZvZTR+M=Z+ zzUi%ghg{p`ZK`lcIh2PS!MOlaX!hlb3&XyKf1q>;M>UuHNa zKuMpI1;rB%K#08kTxEWzva+mkZdK~ASOya1lJ$!h&TJNplxmU2{v6WTNj%f?XDl^{1JTYGcHKB0@P1$S)K^MveF!>w2I z9PGIHRaLoSgMplBDJOtJkt9wfg->Bg5%*}yQS9kR{kDM-R*jM(ZtKR`*zSQC13CV# z8n1C?a=NOotJ1)#|A11=ng0%uFK|#NtrEzD<%tN8K0r++oRlGxhGtTb$5Yp8q)m>F zSeqlnzUkz8f$8NsOzO4F34R3OfM+V7kbuAhXgvWY*Ug8m%m*I?YW@jIJ{)5NhBOVb zjhEQaQ%RHRkDduE@Mo&GLzm**+aha+@j{gyyh2TQy)2bm65^362H}Ibqho-*OXnrK z=F@{E0}s5K+d%iArM#BH7lE+K7(mToAx|y;NtPAOCWYOb0*SD^7sbrQuxz9TW=*hP&-DLb9b$pFjF5wg*jXvs(&elnS=( zoPho!3i6S@fA_l(0aha-0tfe1bMgZe9*O zLKED?VKTXq!ejN`mN%Ymj%Xu8n;X(O6Ex#A-1fxDy`4!PAv$?=HDwi=N#WBKK9k1E z6ZhJ0uO_bfA}gOYE>{)2zeC>jnB>$#&4T8mHIw5{6-Q;Qyu7OFb+n{5FzDolAG(J-jhFF<$wXEgN9t8gIHXEJLW!odY@BH!rN zPKeK!1?VdpbDmwzB}ZvLX!qAjEJ)J`(G6n_#8;mIB5usG48dfY#_ayB5DA9G3nLv% z1waykzYED(D`L1%v%_7fL#Ru?mTB25TU)mYVQd==OGvXO_)djE<8+8;%;*epX_Fq& z{|RKKr=WUyo4ZzpoS=*kcY?li1>Q~VCD`PFW~aU~0|>W-pkFhuPcf3lO&CWqpJHW@ zp7iS-1Hgar2Hl_6U6xdo-$cH;Z6cldLJ|7{{pdw0Gn=-*Nng!vH^ZEoPZsti&cR9w zADW8%%Dhhqs#qyrkDqQmTOS-z-krk8t->L>_mLgV9r&^NOG~d1+HuX&+PrZVuk$J3 z?Y-yWf2?0GsQyS{taj^GoMli8u-}?6De_RhIgo%mx$yu%0Ym1tw#iFW+LhZ7+0DU! zQ#q8Hn%h;I)eL9oX?{N*u9nGqy`->Dl zcBZ7JURJj`dzMU#co;%0u6ogb!tkkOv`tb+mX?%eC1>JnDD=y+s`$@LPrK&k;V#w*bx~2}>lRiS!I zGE;xcGk$8q&&w*Zzv*b2rXS!cC{N$VDK{1s?$av2ntvRK4YBv|`A9KHy5q^kv5;|U zUOtRBRMT3c>Zc6x z?m3>fz4gunU#@E%ha7cSH7Z9(o$yR1N)oIJL5%0jF%oLk9{W z;{`c6;B=6t{3?K9j^9?ye$~u?pf=N|rlv0a#y<{9^AgzxC~O5?7GuVBgnp>O1&=(b zc~?u2iJkrK;cya_8bAd@`?-`rDIDHnj6Xm!@2HkbTCuy8CRLH*;tMS)<4nglX7xG% zRIdE2`%o9!_c7e6Rg9tI!fluAxn6S;wo_uoBmLEFF}hY^$zs z_06lSPv^hsFZpB4@4Xqh*;kT8$)A(1ha~GkAlT-h-P8Bw!YOZ%R5WH(=qn6NPfw#{ zirhOp0dj!gei#7?A+my!;{0<6Y@B-w&lw^7lwOXW9hazx=m?AMvkwgHGs@MBwwI{|rH0i(MgrZ@Pq12Rn*IzgHXvLqS8~~Ocl$;7lGb$^ z$QJBwWw)Iar8D5%lw8mnD!Za@9TW2e!b`PH#rM1gdTaRu_J$ZdJUsEcCF3pU@EsY}k{LIOiYLOp?&W1< zj8OHbt*~Jc=r!^D*EKz%-naq#-xY#bd1$LYv#&Rw?!wxTypWko0qhXSGS^3NprXF{ z64*z~hM;%$(DlZWoSa~QGF}W2Xy-Hd`MEhjGf`@4+|pVgGXg{=_Up)rA^|fplxfLc zs?#1x#4_|dP$G|g2I31OgW3p2+d0@-b%CwF1O|tV%~d2)JkBHc2wm z*J@@JZobbaBp>Mx$;DqBm>aaj&>65RvM|d={%KT~3igm5NueF=sJJv}$^EFG>r2r0 z&ip0JhunplizWBXMegyvKff~P`n9Jf?C@I3|9V}vG<)Q%sx+F|4?ZC@bU-(MosTjy za<1VNG9qk0BP3owp@|@&=)n8A9O%%|f8w^xSbjqMpa+WH_xB$tvPeO?qA`ZOH|!;g zQv)k!)bthBG~QGe@y3)U_%?nRtBOy*C(Cp=POQhH0BvMSo628#tl;wE2L|IIZrS{f zzJF9bmJx*Fp18>FiSjbsk=kg5W~$Kh7{+<-K8G`{)n-A#l)R2^`^WGhbhcf1qs7Oa z*%34x)`L1|E_C0*P}q4#{Jbr)V9{lYrtTGk9cuj7c((Fz)@TiFu6}*6m{jbmhbm!} zYv^&YBahM23iBQC$DE0oKlLVa=m`%aqv9}Q{pyNI-P~*qHmT~%vvb`^Qd4$Tq-eowRyyHEsPu{cy{*#sCokBCDwWM%9%e*QC!TtZ zAS?kndHI~N)(ttFWW>+DW(rg0oZG)%209q4%9z-j`>>~<6*5XY+4;L7Z0RerQvKLO z!8}50zW6Sqk?Q#=Rcq;7>7u;XP04S{iz~I<3f0~Py(;pkw&tEx!uUp1_Lw`aHy6xu zuz8Jw@zf!U{GRP7gNk#g5hx z3utNoWhy!}0rqou7sw+E`O)|LWd&WqF&!kG|LzQpuEjNw6N-q5$)?0@l}JXLwo)36 z-5O?m7f@)hXGR7|jw0G51YI(iFNK}5^Ybes>5=ihqp5Z6rha~YCMM}eeByX8z2XmH z3>Sc2U-BdXxR#cqps{U(gzVkjOKR%XWD*blPGD+;32dnvxQd#mObqO5n*%2vNB;Wy z?g0%9pHVOfKVA`Yu(Gt}c{8Q+wwjyvRmH7aoiQHR^t;C)v;A60=KGa~jBS;N>_o1A zP^Hn4TgLT`VgZV&UO&@d4Ge-;g2;u>ij;E*xnD+1dn(Fi9N`JjW7RQ5t-q?^8pD+{ zuCA^y5`~`Mfsh4OFT^G;gMPx9&54?ps-@lpP;OYG!OX-|7+yT2wQ?4$k53$np2jyu zl-?9Gv^^_)L$7%$@lX-onk38wa9tJFJx@0yN$NC^IZzeUAnvzHPo-CUsP*m6Axt2 zEz4Cns!ebs7`dt#$Q*${?wXn!Us?AadjPBpDdYkC-3u!`e)vsIy#)%uakp(f-~M)1 zV=s2Ewv%rMI$3Y)Ag=(6GnH14+7J;wHo~%Qsn?PCk@_%60YiD#89d5!GXB4bh=|)x z>S~?M!ySDs>!VfqYKv$z4wHT6a44LSsg{fSzC+Xh6d*aQqf${S@XJS!E(Pg@2ATd9 z)GzaI-aM?Iymb`6cesr>9YC{dXKz38Jsl6c3<9s8?iCVk0acW68R17VjUp$)%+ivaUsX_0&trc#2jrr73En((6jz=w97pG*JeO?pBPHUE85=Q@?YmvR`0B0F^pT(SMX9yhY#i7&(WH4 z&{x#Z9s7ErflK~1-G4IV&geahvQ^i+ss;DY{OeC3d~jK+SPS7jGbxM}(&7L8J|9Ut zI Date: Fri, 21 Aug 2026 15:05:33 +0300 Subject: [PATCH 3/4] fix(gui): narrow web-search sidecar backends --- gui/src/pages/dashboard-shared.ts | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/gui/src/pages/dashboard-shared.ts b/gui/src/pages/dashboard-shared.ts index 83b3130d46..713dbc27e6 100644 --- a/gui/src/pages/dashboard-shared.ts +++ b/gui/src/pages/dashboard-shared.ts @@ -76,14 +76,14 @@ export interface VisionModelOption { value: string; label: string; backend: Side export interface WebSearchModelOption { value: string; label: string; - backend: SidecarBackend; + backend: WebSearchBackend; model: string; authSlot?: boolean; } export interface WebSearchPickerOption { value: string; label: string; - backend?: SidecarBackend; + backend?: WebSearchBackend; model?: string; } export interface SidecarData { @@ -309,7 +309,7 @@ export function webSearchModelOptionsForPicker( serverOptions: WebSearchModelOption[] | undefined, models: ModelInfo[], current: string | undefined, - currentBackend?: SidecarBackend, + currentBackend?: WebSearchBackend, ): WebSearchPickerOption[] { if (serverOptions === undefined) { const legacy: WebSearchPickerOption[] = sidecarModelOptions(models); @@ -411,10 +411,11 @@ export function webSearchSidecarSelectionForModel( models: ModelInfo[], options: WebSearchPickerOption[], modelId: string, -): { backend: SidecarBackend; model: string } { +): { backend: WebSearchBackend; model: string } { const option = options.find(entry => entry.value === modelId); + const inferred = sidecarBackendForModel(models, modelId); return { - backend: option?.backend ?? sidecarBackendForModel(models, modelId), + backend: option?.backend ?? (inferred === "anthropic" ? "anthropic" : "openai"), model: option?.model ?? modelId, }; } From 2a760080b2c1028cd24ba6f20f000adea193c534 Mon Sep 17 00:00:00 2001 From: waw4303 Date: Fri, 21 Aug 2026 17:09:40 +0300 Subject: [PATCH 4/4] fix(vision): honor modality text-only hints --- src/vision/index.ts | 8 ++++---- tests/vision-cache.test.ts | 6 ++++++ tests/vision-chat.test.ts | 14 ++++++++++++++ 3 files changed, 24 insertions(+), 4 deletions(-) diff --git a/src/vision/index.ts b/src/vision/index.ts index c3b00bf2c8..60bd2789dd 100644 --- a/src/vision/index.ts +++ b/src/vision/index.ts @@ -339,7 +339,7 @@ export function shouldResolveOpenAiVisionSidecar( modelId: string, parsed: OcxParsedRequest, ): boolean { - if (!modelInList(provider.noVisionModels, modelId) || !messagesHaveImage(parsed)) return false; + if (!isModelTextOnly(provider, modelId) || !messagesHaveImage(parsed)) return false; const cfg = config.visionSidecar ?? {}; if (cfg.enabled === false) return false; return resolveVisionBackend(cfg.backend, findAnthropicVisionProvider(config)) === "openai"; @@ -356,8 +356,8 @@ export interface VisionPlan { /** * Decide whether the vision sidecar should pre-describe images for this request, returning the plan - * if so. Active when: the routed model is in `provider.noVisionModels`, the request actually carries - * an image, the sidecar isn't disabled, and the selected backend has usable auth. Returns undefined + * if so. Active when: the routed model is explicitly text-only, the request actually carries an + * image, the sidecar isn't disabled, and the selected backend has usable auth. Returns undefined * otherwise (the caller strips images before sending to a text-only model). */ export function planVisionSidecar( @@ -367,7 +367,7 @@ export function planVisionSidecar( parsed: OcxParsedRequest, openAiSidecar?: ResolvedOpenAiForwardSidecar, ): VisionPlan | undefined { - if (!modelInList(provider.noVisionModels, modelId)) return undefined; + if (!isModelTextOnly(provider, modelId)) return undefined; if (!messagesHaveImage(parsed)) return undefined; const cfg = config.visionSidecar ?? {}; if (cfg.enabled === false) return undefined; diff --git a/tests/vision-cache.test.ts b/tests/vision-cache.test.ts index 350b79ea3d..6831c08678 100644 --- a/tests/vision-cache.test.ts +++ b/tests/vision-cache.test.ts @@ -73,6 +73,12 @@ test("vision sidecar auth stays lazy for no-image and disabled branches", () => withImage, )).toBe(false); expect(shouldResolveOpenAiVisionSidecar(cfg, textOnlyProvider, "text-model", withImage)).toBe(true); + expect(shouldResolveOpenAiVisionSidecar( + cfg, + { ...textOnlyProvider, noVisionModels: undefined, modelInputModalities: { "text-model": ["text"] } }, + "text-model", + withImage, + )).toBe(true); }); function parsed(parts: Array>) { diff --git a/tests/vision-chat.test.ts b/tests/vision-chat.test.ts index d7e97116e1..9f122d0b09 100644 --- a/tests/vision-chat.test.ts +++ b/tests/vision-chat.test.ts @@ -360,6 +360,20 @@ describe("chat vision plan provider resolution", () => { expect(plan?.chatSidecar?.providerName).toBe("p1"); }); + test("modelInputModalities text-only evidence triggers chat planning", () => { + const config = chatConfig({ + routed, + p1: { adapter: "openai-chat", baseUrl: "https://p1.test/v1", apiKey: "k1", defaultModel: "gemini-flash" }, + }, "gemini-flash"); + const modalitiesOnly = { + ...routed, + noVisionModels: undefined, + modelInputModalities: { "text-model": ["text"] }, + }; + + expect(planVisionSidecar(config, modalitiesOnly, "text-model", request)?.backend).toBe("chat"); + }); + test("disabled or unauthenticated chat providers produce no plan", () => { const disabled = chatConfig({ routed,