From f40285901e5bb100df889a4d50270d8572366b05 Mon Sep 17 00:00:00 2001 From: bitkyc08-arch Date: Fri, 21 Aug 2026 13:57:03 +0900 Subject: [PATCH 1/2] feat: add xAI Responses opt-in switch --- .../fr/reference/configuration/providers.md | 1 + .../ja/reference/configuration/providers.md | 1 + .../ko/reference/configuration/providers.md | 1 + .../docs/reference/configuration/providers.md | 1 + .../ru/reference/configuration/providers.md | 1 + .../tr/reference/configuration/providers.md | 2 +- .../reference/configuration/providers.md | 1 + .../reference/configuration/providers.md | 1 + .../provider-workspace/ProviderAuthPanel.tsx | 78 ++++++++++- .../provider-workspace/ProviderDetails.tsx | 5 +- .../provider-workspace/ProviderOverview.tsx | 6 +- .../provider-workspace/ProviderSettings.tsx | 4 +- .../components/provider-workspace/types.ts | 8 ++ gui/src/i18n/de.ts | 3 + gui/src/i18n/en.ts | 3 + gui/src/i18n/fr.ts | 3 + gui/src/i18n/ja.ts | 3 + gui/src/i18n/ko.ts | 3 + gui/src/i18n/ru.ts | 3 + gui/src/i18n/tr.ts | 3 + gui/src/i18n/zh-TW.ts | 3 + gui/src/i18n/zh.ts | 3 + gui/src/pages/providers-shared.ts | 1 + gui/src/pages/use-providers-crud.ts | 13 +- gui/src/provider-workspace/catalog.ts | 2 + gui/src/styles.css | 2 + .../styles/provider-workspace-settings.css | 10 ++ gui/src/ui.tsx | 6 +- .../provider-xai-responses-optin.test.tsx | 130 ++++++++++++++++++ gui/tests/use-providers-crud-update.test.tsx | 18 ++- src/providers/xai-responses-opt-in.ts | 15 ++ src/server/auth-cors.ts | 4 + src/server/management/provider-routes.ts | 22 +++ structure/04_transports-and-sidecars.md | 5 + tests/management-provider-validation.test.ts | 98 +++++++++++++ 35 files changed, 446 insertions(+), 17 deletions(-) create mode 100644 gui/tests/provider-xai-responses-optin.test.tsx create mode 100644 src/providers/xai-responses-opt-in.ts diff --git a/docs-site/src/content/docs/fr/reference/configuration/providers.md b/docs-site/src/content/docs/fr/reference/configuration/providers.md index edf41cccc0..336627de70 100644 --- a/docs-site/src/content/docs/fr/reference/configuration/providers.md +++ b/docs-site/src/content/docs/fr/reference/configuration/providers.md @@ -98,6 +98,7 @@ sauvegarde dont le contenu diffère, puis réécrit en identifiants sans préfix | `modelSupportsReasoningSummaries?` | `Record` | Définissez un modèle sur `false` pour arrêter la publicité des résumés et supprimer les champs de livraison du résumé. | | `modelReasoningSummaryDelivery?` | `Record` | Énumération de livraison des réponses par modèle ; réécrit un champ de livraison existant. | | `modelAdapters?` | `Record` | Remplacement du protocole `openai-chat` ou `openai-responses` par modèle pour les passerelles multiprotocoles. Les entrées explicites priment sur les valeurs par défaut du registre. Le préréglage OpenCode Go sélectionne Responses pour `gpt-5.6-luna` tout en laissant les modèles apparentés sur leurs protocoles documentés ; DeepSeek peut sélectionner Responses natif pour `deepseek-v4-flash` ; GitHub Copilot déclare des valeurs par défaut limitées à Responses pour sa famille GPT-5 (`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`), car ces modèles rejettent `/chat/completions` pour le trafic des agents. Les modèles sans valeur intégrée par défaut, comme `gpt-5.4-nano`, peuvent être activés ici. Les services en amont à protocole unique et le transfert canonique ChatGPT rejettent ces remplacements. | +| Activation Responses xAI (tableau de bord) | interrupteur | Pour `xai` uniquement, définit ou efface atomiquement les entrées `modelAdapters` de `grok-4.5` et `grok-4.6`. Une seule entrée apparaît comme un état mixte jusqu’à la prochaine écriture. Les autres remplacements et le comportement des tiers restent inchangés. | | `modelPreferHostedTools?` | `Record` | Activation explicite par modèle exact pour les passerelles Responses hors transfert qui réservent un espace de noms aux outils hébergés. Seul `["image_generation"]` est actuellement accepté ; le modèle correspondant doit utiliser le protocole `openai-responses` et prendre en charge cet outil hébergé. Le proxy supprime les déclarations clientes `image_gen` en conflit et réécrit leurs sélecteurs afin de préserver le choix d'outil de l'appelant. Pour les modèles virtuels `-pro` de l'API OpenAI, l'identifiant public sélectionné est comparé en premier et l'identifiant résolu du modèle de base sur le protocole sert de repli. `modelAdapters` résout d'abord l'identifiant public, puis celui de base ; la seconde résolution détermine le protocole final. Les autres modèles conservent le comportement normal des alias. | | `reasoningEffortMap?` | `Record` | Alias ​​de fil à l’échelle du fournisseur pour les étiquettes de raisonnement. | | `modelReasoningEffortMap?` | `Record>` | Alias ​​de fil par modèle pour les étiquettes de raisonnement. | diff --git a/docs-site/src/content/docs/ja/reference/configuration/providers.md b/docs-site/src/content/docs/ja/reference/configuration/providers.md index 5a02ccc2f5..27cf1406ec 100644 --- a/docs-site/src/content/docs/ja/reference/configuration/providers.md +++ b/docs-site/src/content/docs/ja/reference/configuration/providers.md @@ -86,6 +86,7 @@ account を削除しても mapping は保持され、同じ id を再追加す | `modelSupportsReasoningSummaries?` | `Record` |モデルを `false` に設定して、概要の広告を停止し、概要配信フィールドを削除します。 | | `modelReasoningSummaryDelivery?` | `Record` |モデルごとの応答配信列挙型。既存の配信フィールドを書き換えます。 | | `modelAdapters?` | `Record` | 混合配線ゲートウェイのモデルごとの `openai-chat` または `openai-responses` 配線オーバーライド。明示的なエントリはレジストリのデフォルトを破ります。DeepSeek のプリセットは `deepseek-v4-flash` のネイティブ Responses を選択でき、GitHub Copilot は GPT-5 ファミリー (`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`) を Responses 専用デフォルトとして宣言します。これらのモデルはエージェント トラフィックで `/chat/completions` を拒否するためです。`gpt-5.4-nano` のようなビルトイン デフォルトのないモデルはここでオプトインできます。単線アップストリーム ピンと正規の ChatGPT 転送はオーバーライドを拒否します。 | +| xAI Responses オプトイン(ダッシュボード) | スイッチ | `xai` のみで、`grok-4.5` と `grok-4.6` の `modelAdapters` エントリを原子的に設定または削除します。片方だけの場合は、次のスイッチ操作で両方が正規化されるまで混合状態を表示します。他のオーバーライドと tier 動作は変わりません。 | | `modelPreferHostedTools?` | `Record` | hosted tool namespace を予約する非 forward Responses gateway 向けの完全一致モデル opt-in。現在は `["image_generation"]` のみを受け付けます。一致したモデルは `openai-responses` wire を使い、その hosted tool をサポートする必要があります。競合するクライアント `image_gen` 宣言を除去し、呼び出し元の tool choice を維持するため selector も書き換えます。OpenAI API の仮想 `-pro` モデルでは、まず選択した公開 ID に一致させ、解決後のベース wire-model ID をフォールバックとして使用します。`modelAdapters` は公開 ID、次にベース ID の順に解決し、後者の結果が最終 wire を決めます。未設定のモデルは通常の alias 動作を維持します。 | | `reasoningEffortMap?` | `Record` |ラベルを推論するためのプロバイダー全体のワイヤ エイリアス。 | | `modelReasoningEffortMap?` | `Record>` |推論ラベルのモデルごとのワイヤ エイリアス。 | diff --git a/docs-site/src/content/docs/ko/reference/configuration/providers.md b/docs-site/src/content/docs/ko/reference/configuration/providers.md index d33312e176..707129b2ed 100644 --- a/docs-site/src/content/docs/ko/reference/configuration/providers.md +++ b/docs-site/src/content/docs/ko/reference/configuration/providers.md @@ -86,6 +86,7 @@ managed map을 활성화하면 privacy-safe selector를 만들고, 이후 계정 | `modelSupportsReasoningSummaries?` | `Record` | 모델을 `false`로 두면 summary 광고를 멈추고 summary 전달 필드를 제거합니다. | | `modelReasoningSummaryDelivery?` | `Record` | 모델별 Responses 전달 enum입니다. 기존 delivery 필드를 다시 씁니다. | | `modelAdapters?` | `Record` | 혼합 와이어 게이트웨이를 위한 모델별 `openai-chat` 또는 `openai-responses` 와이어 재정의입니다. 명시적 항목이 레지스트리 기본값보다 우선합니다. DeepSeek 프리셋은 `deepseek-v4-flash`에 네이티브 Responses를 선택할 수 있고, GitHub Copilot은 GPT-5 계열(`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`)을 Responses 전용 기본값으로 선언합니다. 이 모델들은 에이전트 트래픽에서 `/chat/completions`를 거부하기 때문입니다. `gpt-5.4-nano`처럼 기본값이 없는 모델은 여기서 직접 옵트인할 수 있습니다. 단일 와이어 상위 항목과 정식 ChatGPT forward는 재정의를 거부합니다. | +| xAI Responses 옵트인(대시보드) | 스위치 | `xai`에서만 `grok-4.5`와 `grok-4.6`의 `modelAdapters` 항목을 원자적으로 설정하거나 지웁니다. 한 항목만 있으면 다음 스위치 쓰기가 둘을 정규화할 때까지 혼합 상태로 표시됩니다. 다른 재정의와 티어 동작은 바뀌지 않습니다. | | `modelPreferHostedTools?` | `Record` | hosted tool namespace를 예약하는 non-forward Responses gateway용 정확한 모델 ID opt-in입니다. 현재 `["image_generation"]`만 허용하며, 일치하는 모델은 `openai-responses` wire를 사용하고 해당 hosted tool을 지원해야 합니다. 충돌하는 클라이언트 `image_gen` 선언을 제거하고 호출자의 tool choice를 유지하도록 selector도 다시 씁니다. OpenAI API 가상 `-pro` 모델은 선택한 공개 ID를 먼저 일치시키고, 해석된 기본 wire-model ID를 대체값으로 사용합니다. `modelAdapters`는 공개 ID를 먼저, 그 다음 기본 ID를 해석하며, 두 번째 결과가 최종 wire를 결정합니다. 설정하지 않은 모델은 일반 alias 동작을 유지합니다. | | `reasoningEffortMap?` | `Record` | reasoning 레이블의 공급자 전반 와이어 별칭입니다. | | `modelReasoningEffortMap?` | `Record>` | reasoning 레이블의 모델별 와이어 별칭입니다. | diff --git a/docs-site/src/content/docs/reference/configuration/providers.md b/docs-site/src/content/docs/reference/configuration/providers.md index a12ed68f3b..135f8f9632 100644 --- a/docs-site/src/content/docs/reference/configuration/providers.md +++ b/docs-site/src/content/docs/reference/configuration/providers.md @@ -99,6 +99,7 @@ differing backup and rewrites known legacy namespaced selected ids to bare ids. | `modelSupportsReasoningSummaries?` | `Record` | Set a model to `false` to stop advertising summaries and strip summary-delivery fields. | | `modelReasoningSummaryDelivery?` | `Record` | Per-model Responses delivery enum; rewrites an existing delivery field. | | `modelAdapters?` | `Record` | Per-model `openai-chat` or `openai-responses` wire override for mixed-wire gateways. Explicit entries beat registry defaults. The OpenCode Go preset selects Responses for `gpt-5.6-luna` while leaving sibling models on their documented wires; DeepSeek can select native Responses for `deepseek-v4-flash`; and GitHub Copilot declares Responses-only defaults for its GPT-5 family (`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`) because those models reject `/chat/completions` for agent traffic. Models without a built-in default (for example `gpt-5.4-nano`) can be opted in here. Single-wire upstream pins and canonical ChatGPT forward reject overrides. | +| xAI Responses opt-in (dashboard) | switch | For `xai` only, atomically sets or clears the `grok-4.5` and `grok-4.6` `modelAdapters` entries. A hand-edited single entry appears as mixed until the next switch write normalizes both. Other overrides and tier behavior are unchanged. | | `modelPreferHostedTools?` | `Record` | Exact-model opt-in for non-forward Responses gateways that reserve a hosted-tool namespace. Currently accepts only `["image_generation"]`; a matching model must use the `openai-responses` wire and support that hosted tool. It removes colliding client `image_gen` declarations and rewrites their selectors to preserve caller tool choice. For OpenAI API virtual `-pro` models, the selected public ID is matched first and the resolved base wire-model ID is a fallback. `modelAdapters` resolves the public ID first, then the base ID; the second resolution determines the final wire. Other models retain normal alias behavior. | | `reasoningEffortMap?` | `Record` | Provider-wide wire aliases for reasoning labels. | | `modelReasoningEffortMap?` | `Record>` | Per-model wire aliases for reasoning labels. | diff --git a/docs-site/src/content/docs/ru/reference/configuration/providers.md b/docs-site/src/content/docs/ru/reference/configuration/providers.md index 56ad0154bf..21b70bebb5 100644 --- a/docs-site/src/content/docs/ru/reference/configuration/providers.md +++ b/docs-site/src/content/docs/ru/reference/configuration/providers.md @@ -99,6 +99,7 @@ cross-route credential fallback не существует. Строки API GPT- | `modelSupportsReasoningSummaries?` | `Record` | Установите `false` для модели, чтобы перестать рекламировать summary и вырезать поля доставки summary. | | `modelReasoningSummaryDelivery?` | `Record` | Responses delivery enum по моделям; переписывает уже существующее поле delivery. | | `modelAdapters?` | `Record` | Wire-override по модели для `openai-chat` или `openai-responses` в gateway с несколькими wire-форматами. Явные записи имеют приоритет над default'ами registry; preset DeepSeek может выбирать native Responses для `deepseek-v4-flash`, а GitHub Copilot объявляет Responses-only default'ы для семейства GPT-5 (`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`), потому что эти модели отклоняют `/chat/completions` для агентного трафика. Модели без встроенного default'а (например, `gpt-5.4-nano`) можно включить здесь. Single-wire upstream pin'ы и canonical ChatGPT forward override не принимают. | +| Opt-in xAI Responses (панель) | переключатель | Только для `xai`: атомарно задаёт или удаляет записи `modelAdapters` для `grok-4.5` и `grok-4.6`. Одна запись отображается как смешанное состояние до следующего переключения. Остальные override и поведение tier не меняются. | | `modelPreferHostedTools?` | `Record` | Opt-in для точного model ID в non-forward Responses gateway, который резервирует namespace hosted tool. Сейчас допускается только `["image_generation"]`; совпавшая модель должна использовать wire `openai-responses` и поддерживать этот hosted tool. Прокси удаляет конфликтующие клиентские объявления `image_gen` и переписывает их selectors, сохраняя caller tool choice. Для виртуальных моделей OpenAI API `-pro` сначала сопоставляется выбранный публичный ID, а затем в качестве fallback используется ID базовой wire-модели. `modelAdapters` сначала разрешается по публичному ID, затем по базовому ID; второй результат определяет итоговый wire. Остальные модели сохраняют обычное alias-поведение. | | `reasoningEffortMap?` | `Record` | Provider-wide wire-alias'ы для reasoning-label'ов. | | `modelReasoningEffortMap?` | `Record>` | Wire-alias'ы для reasoning-label'ов по отдельным моделям. | diff --git a/docs-site/src/content/docs/tr/reference/configuration/providers.md b/docs-site/src/content/docs/tr/reference/configuration/providers.md index c7b13d56c9..d4e414700a 100644 --- a/docs-site/src/content/docs/tr/reference/configuration/providers.md +++ b/docs-site/src/content/docs/tr/reference/configuration/providers.md @@ -105,6 +105,7 @@ alanlı seçilmiş kimlikleri yalın kimliklere yeniden yazar. | `modelSupportsReasoningSummaries?` | `Record` | Özetlerin bildirilmesini durdurmak ve özet teslim alanlarını kaldırmak için bir modeli `false` olarak ayarlayın. | | `modelReasoningSummaryDelivery?` | `Record` | Model başına Responses teslim enum'ı; mevcut bir teslim alanını yeniden yazar. | | `modelAdapters?` | `Record` | Karışık hatlı ağ geçitleri için model başına `openai-chat` veya `openai-responses` hat geçersiz kılma. Açık girdiler kayıt defteri varsayılanlarını yener. OpenCode Go önayarı, kardeş modelleri belgelenmiş hatlarında bırakırken `gpt-5.6-luna` için Responses'ı seçer; DeepSeek, `deepseek-v4-flash` için yerel Responses seçebilir; ve GitHub Copilot, GPT-5 ailesi (`gpt-5.3-codex`, `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.5`, `gpt-5.6-luna`, `gpt-5.6-sol`, `gpt-5.6-terra`) için yalnızca Responses varsayılanlarını bildirir çünkü bu modeller ajan trafiği için `/chat/completions`'ı reddeder. Yerleşik varsayılanı olmayan modeller (örneğin `gpt-5.4-nano`) burada dahil edilebilir. Tek hatlı yukarı akış pinleri ve kurallı ChatGPT iletme geçersiz kılmaları reddeder. | +| xAI Responses katılımı (panel) | anahtar | Yalnızca `xai` için `grok-4.5` ve `grok-4.6` `modelAdapters` girdilerini atomik olarak ayarlar veya temizler. Tek girdi, sonraki anahtar yazımı ikisini eşitleyene kadar karma durum olarak görünür. Diğer geçersiz kılmalar ve katman davranışı değişmez. | | `modelPreferHostedTools?` | `Record` | Barındırılan bir araç ad alanı ayıran iletme harici Responses ağ geçitleri için tam model dahil etme. Şu anda yalnızca `["image_generation"]` kabul eder; eşleşen bir model `openai-responses` hattını kullanmalı ve bu barındırılan aracı desteklemelidir. Çakışan istemci `image_gen` bildirimlerini kaldırır ve arayan araç seçimini korumak için seçicilerini yeniden yazar. OpenAI API sanal `-pro` modelleri için önce seçilen genel kimlik eşleştirilir ve çözümlenen temel hat model kimliği bir geri dönüştür. `modelAdapters` önce genel kimliği, ardından temel kimliği çözer; ikinci çözümleme son hattı belirler. Diğer modeller normal takma ad davranışını korur. | | `reasoningEffortMap?` | `Record` | Akıl yürütme etiketleri için sağlayıcı genelinde hat takma adları. | | `modelReasoningEffortMap?` | `Record>` | Akıl yürütme etiketleri için model başına hat takma adları. | @@ -479,4 +480,3 @@ bildirir; senkronize edilen katalog `xhigh`'ı ayrı tutarken `max` bildirir. } ``` - diff --git a/docs-site/src/content/docs/zh-cn/reference/configuration/providers.md b/docs-site/src/content/docs/zh-cn/reference/configuration/providers.md index f37f372cfd..1564842cbb 100644 --- a/docs-site/src/content/docs/zh-cn/reference/configuration/providers.md +++ b/docs-site/src/content/docs/zh-cn/reference/configuration/providers.md @@ -86,6 +86,7 @@ selector,而不是分配一个新名称。 | `modelSupportsReasoningSummaries?` | `Record` | 将某个模型设为 `false`,即可停止暴露摘要并移除摘要交付字段。 | | `modelReasoningSummaryDelivery?` | `Record` | 按模型设置的 Responses 交付枚举;会重写现有的 delivery 字段。 | | `modelAdapters?` | `Record` | 按模型设置的 `openai-chat` 或 `openai-responses` 线协议覆盖项,用于混合线协议网关。显式条目优先于注册表默认值;DeepSeek 预设可以为 `deepseek-v4-flash` 选择原生 Responses,GitHub Copilot 则为 GPT-5 系列(`gpt-5.3-codex`、`gpt-5.4`、`gpt-5.4-mini`、`gpt-5.5`、`gpt-5.6-luna`、`gpt-5.6-sol`、`gpt-5.6-terra`)声明了 Responses 专用默认值,因为这些模型在代理流量下会拒绝 `/chat/completions`。没有内置默认值的模型(例如 `gpt-5.4-nano`)可以在此手动启用。单一线协议上游固定项和规范 ChatGPT forward 会拒绝覆盖。 | +| xAI Responses 启用项(仪表板) | 开关 | 仅用于 `xai`,以原子方式设置或清除 `grok-4.5` 和 `grok-4.6` 的 `modelAdapters` 条目。若只存在一个条目,则显示混合状态,直到下次开关写入将两者统一。其他覆盖项和层级行为不变。 | | `modelPreferHostedTools?` | `Record` | 非 forward Responses gateway 的精确模型 ID opt-in,用于上游预留 hosted tool namespace 的情况。目前只支持 `["image_generation"]`;匹配模型必须使用 `openai-responses` wire 且支持该 hosted 工具。它会移除冲突的客户端 `image_gen` 声明,并改写其 selector 以保持调用方的 tool choice。对于 OpenAI API 的虚拟 `-pro` 模型,先匹配所选公开 ID,未命中时才使用解析出的基础 wire-model ID 作为回退。`modelAdapters` 会先按公开 ID、再按基础 ID 解析;后一次结果决定最终 wire。未配置模型保持普通 alias 行为。 | | `reasoningEffortMap?` | `Record` | 提供者级、用于推理标签的线协议别名。 | | `modelReasoningEffortMap?` | `Record>` | 按模型设置的推理标签线协议别名。 | diff --git a/docs-site/src/content/docs/zh-tw/reference/configuration/providers.md b/docs-site/src/content/docs/zh-tw/reference/configuration/providers.md index 326aa348d5..f47b5bef05 100644 --- a/docs-site/src/content/docs/zh-tw/reference/configuration/providers.md +++ b/docs-site/src/content/docs/zh-tw/reference/configuration/providers.md @@ -67,6 +67,7 @@ description: 供應商項目、認證、端點、模型目錄、配額、context | `modelSupportsReasoningSummaries?` | `Record` | 將模型設為 `false` 以停止廣告摘要並剝離 summary-delivery 欄位。 | | `modelReasoningSummaryDelivery?` | `Record` | Per-model Responses delivery 列舉;重寫既有的 delivery 欄位。 | | `modelAdapters?` | `Record` | 混合 wire 閘道的 Per-model `openai-chat` 或 `openai-responses` wire 覆寫。明確項目勝過 registry 預設;DeepSeek 的預設可為 `deepseek-v4-flash` 選擇原生 Responses。單一 wire 上游 pin 與規範 ChatGPT forward 拒絕覆寫。 | +| xAI Responses 選用(儀表板) | 開關 | 僅用於 `xai`,以原子方式設定或清除 `grok-4.5` 與 `grok-4.6` 的 `modelAdapters` 項目。若只有一個項目,會顯示混合狀態,直到下次開關寫入統一兩者。其他覆寫與層級行為不變。 | | `reasoningEffortMap?` | `Record` | 供應商範圍的 reasoning 標籤 wire 別名。 | | `modelReasoningEffortMap?` | `Record>` | Per-model 的 reasoning 標籤 wire 別名。 | | `noReasoningModels?` | `string[]` | 拒絕 reasoning/thinking 參數的模型。 | diff --git a/gui/src/components/provider-workspace/ProviderAuthPanel.tsx b/gui/src/components/provider-workspace/ProviderAuthPanel.tsx index 60c15225de..928e15d93c 100644 --- a/gui/src/components/provider-workspace/ProviderAuthPanel.tsx +++ b/gui/src/components/provider-workspace/ProviderAuthPanel.tsx @@ -22,13 +22,80 @@ import { LoginUrlBlock } from "../login-url-block"; import QuotaBars from "../QuotaBars"; import { useCopyFeedback } from "../use-copy-feedback"; import type { CodexAccountPoolController } from "../../hooks/useCodexAccountPool"; -import type { AccountLoadState, OAuthAccountRow, ApiKeyRow, LoginHint, ProviderAuthHandlers } from "./types"; +import { Switch } from "../../ui"; +import type { + AccountLoadState, + OAuthAccountRow, + ApiKeyRow, + LoginHint, + ProviderAuthHandlers, + ProviderUpdatePatch, + ProviderUpdateResult, +} from "./types"; const QUOTA_ENRICH_RESERVE_MS = 4_000; const COCKPIT_IMPORT_MAX_BYTES = 256 * 1024; const EMPTY_OAUTH_ACCOUNTS: OAuthAccountRow[] = []; const EMPTY_API_KEYS: ApiKeyRow[] = []; +function XaiResponsesOptInControl({ + initialState, + onUpdateProvider, +}: { + initialState: NonNullable; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; +}) { + const t = useT(); + const [state, setState] = useState(initialState); + const [seenInitialState, setSeenInitialState] = useState(initialState); + const [saving, setSaving] = useState(false); + const [error, setError] = useState(""); + if (initialState !== seenInitialState) { + setSeenInitialState(initialState); + setState(initialState); + } + const mixed = state === "mixed"; + + const toggle = async () => { + if (!onUpdateProvider || saving) return; + const next = state !== true; + setSaving(true); + setError(""); + try { + const result = await onUpdateProvider("xai", { xaiResponsesOptIn: next }); + if (!result.ok) { + setError(result.error ?? t("prov.updateFail")); + return; + } + setState(result.xaiResponsesOptInState ?? next); + } catch { + setError(t("prov.networkError")); + } finally { + setSaving(false); + } + }; + + return ( +
+
+ {t("pws.xaiResponsesOptIn")} + + {t("pws.xaiResponsesOptInDesc")} + {mixed && {t("pws.xaiResponsesOptInMixed")}} + + {error && {error}} +
+ { void toggle(); }} + disabled={!onUpdateProvider || saving} + label={t("pws.xaiResponsesOptIn")} + /> +
+ ); +} + type CockpitImportResult = { importedCount: number; updatedCount: number; @@ -99,7 +166,7 @@ function safeCockpitImportResult(value: unknown): CockpitImportResult | null { export default function ProviderAuthPanel({ item, apiBase, oauth, accounts = EMPTY_OAUTH_ACCOUNTS, keys = EMPTY_API_KEYS, accountLoadState = "ready", switchingAccountId = null, busy = false, loginHint, authHandlers, onCodexActiveNeedsReauthChange, - codexController, + codexController, onUpdateProvider, }: { item: WorkspaceItem; apiBase: string; @@ -112,6 +179,7 @@ export default function ProviderAuthPanel({ loginHint?: LoginHint | null; authHandlers?: ProviderAuthHandlers; onCodexActiveNeedsReauthChange?: (needs: boolean) => void; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; /** Shared Codex account state owned by Providers (WP3). */ codexController?: CodexAccountPoolController; }) { @@ -248,6 +316,12 @@ export default function ProviderAuthPanel({

{isOauth ? t("pws.availableAccounts") : t("pws.apiKeys")}

+ {item.name === "xai" && ( + + )} {isOauth && ( <> {item.name === "anthropic" && ( diff --git a/gui/src/components/provider-workspace/ProviderDetails.tsx b/gui/src/components/provider-workspace/ProviderDetails.tsx index 62cf94cad8..1b02517835 100644 --- a/gui/src/components/provider-workspace/ProviderDetails.tsx +++ b/gui/src/components/provider-workspace/ProviderDetails.tsx @@ -20,7 +20,7 @@ import type { CodexAccountPoolController } from "../../hooks/useCodexAccountPool import ProviderSettings from "./ProviderSettings"; import { UnsavedLeaveDialog } from "./ProviderDialogs"; import type { ProviderQuotaReportView } from "../../provider-workspace/report"; -import type { AccountLoadState, ProviderModelUsageRow, ProviderUsageTotals, OAuthAccountRow, ApiKeyRow, LoginHint, ProviderAuthHandlers, ProviderUpdatePatch } from "./types"; +import type { AccountLoadState, ProviderModelUsageRow, ProviderUsageTotals, OAuthAccountRow, ApiKeyRow, LoginHint, ProviderAuthHandlers, ProviderUpdatePatch, ProviderUpdateResult } from "./types"; type Tab = "overview" | "models" | "usage" | "accounts" | "settings"; @@ -85,7 +85,7 @@ export default function ProviderDetails({ onCodexActiveNeedsReauthChange?: (needs: boolean) => void; /** Shared Codex account state owned by Providers (WP3). */ codexController?: CodexAccountPoolController; - onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise<{ ok: boolean; error?: string }>; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; isDefault?: boolean; onRemoveProvider?: (name: string) => void; onSetDisabled?: (name: string, disabled: boolean) => void; @@ -310,6 +310,7 @@ export default function ProviderDetails({ busy={busyProvider === item.name} loginHint={loginHint} authHandlers={authHandlers} + onUpdateProvider={onUpdateProvider} onCodexActiveNeedsReauthChange={onCodexActiveNeedsReauthChange} codexController={codexController} /> diff --git a/gui/src/components/provider-workspace/ProviderOverview.tsx b/gui/src/components/provider-workspace/ProviderOverview.tsx index d4b7f3619d..5c5e7468cf 100644 --- a/gui/src/components/provider-workspace/ProviderOverview.tsx +++ b/gui/src/components/provider-workspace/ProviderOverview.tsx @@ -11,7 +11,7 @@ import { formatRelativeTime, relativeTimeLabelsFromT, formatRequestCount, format import { accountQuotaFromReport, formatQuotaSourceLabel, type ProviderQuotaReportView } from "../../provider-workspace/report"; import type { ProviderUsageTotals } from "./types"; import { authModeLabel } from "./ProviderRail"; -import type { ProviderUpdatePatch } from "./types"; +import type { ProviderUpdatePatch, ProviderUpdateResult } from "./types"; import { ProviderCapacityQuota } from "./ProviderCapacityQuota"; type ConnectionTestResult = { @@ -46,7 +46,7 @@ export default function ProviderOverview({ connectionIdentity?: string; onEditSettings?: () => void; onViewUsage?: () => void; - onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise<{ ok: boolean; error?: string }>; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; onReauthenticate?: () => void; onCancelLogin?: () => void; reauthBusy?: boolean; @@ -306,7 +306,7 @@ export default function ProviderOverview({ function NotesSection({ item, onUpdateProvider }: { item: WorkspaceItem; - onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise<{ ok: boolean; error?: string }>; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; }) { const t = useT(); const [editing, setEditing] = useState(false); diff --git a/gui/src/components/provider-workspace/ProviderSettings.tsx b/gui/src/components/provider-workspace/ProviderSettings.tsx index 1509e13a14..847fe7e712 100644 --- a/gui/src/components/provider-workspace/ProviderSettings.tsx +++ b/gui/src/components/provider-workspace/ProviderSettings.tsx @@ -19,7 +19,7 @@ import { openAiAccountProviderState } from "../../provider-payload"; import { providerSupportsLiveModelDiscovery } from "../../provider-workspace/catalog"; import type { CatalogPreset } from "../provider-catalog/provider-presets"; import { authModeLabel } from "./ProviderRail"; -import type { WorkspaceItem, ProviderUpdatePatch } from "./types"; +import type { WorkspaceItem, ProviderUpdatePatch, ProviderUpdateResult } from "./types"; const ADAPTERS = ["openai-responses", "openai-chat", "anthropic", "google", "azure-openai", "cursor"] as const; const EMPTY_MODELS: string[] = []; @@ -63,7 +63,7 @@ export default function ProviderSettings({ availableModels?: string[]; /** When set, load endpoint choices for catalog providers that expose baseUrlChoices. */ apiBase?: string; - onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise<{ ok: boolean; error?: string }>; + onUpdateProvider?: (name: string, patch: ProviderUpdatePatch) => Promise; onDirtyChange?: (dirty: boolean) => void; /** Lets parent dialogs trigger the same save path as the sticky bar. */ onRegisterSave?: (save: (() => Promise) | null) => void; diff --git a/gui/src/components/provider-workspace/types.ts b/gui/src/components/provider-workspace/types.ts index 24dd218f3b..d23464500e 100644 --- a/gui/src/components/provider-workspace/types.ts +++ b/gui/src/components/provider-workspace/types.ts @@ -102,4 +102,12 @@ export type ProviderUpdatePatch = { requestPacing?: WorkspaceItem["requestPacing"] | null; /** Dedicated field: the API PATCHes it alone for the canonical `openai` provider. */ codexAccountMode?: "direct" | "pool"; + /** Management-only write that atomically owns the two supported xAI Grok adapter rows. */ + xaiResponsesOptIn?: boolean; +}; + +export type ProviderUpdateResult = { + ok: boolean; + error?: string; + xaiResponsesOptInState?: WorkspaceItem["xaiResponsesOptInState"]; }; diff --git a/gui/src/i18n/de.ts b/gui/src/i18n/de.ts index 57e0d93f79..8e64e29b97 100644 --- a/gui/src/i18n/de.ts +++ b/gui/src/i18n/de.ts @@ -1695,6 +1695,9 @@ export const de: Record = { "pws.allowPrivateNetwork": "Lokales/privates Netzwerk erlauben", "pws.liveModels": "Modelle beim Anbieter erkennen", "pws.liveModelsDesc": "Lädt den Live-Modellkatalog des Anbieters. Ausschalten, um nur konfigurierte statische Modelle zu verwenden.", + "pws.xaiResponsesOptIn": "Responses API für Grok 4.5 und 4.6 verwenden", + "pws.xaiResponsesOptInDesc": "Leitet beide Modelle über openai-responses. Andere Grok-Modelle und das Tier-Verhalten bleiben unverändert.", + "pws.xaiResponsesOptInMixed": "Teilweise aktiviert.", "pws.cursorTransport": "Cursor-Transport", "pws.cursorTransportHttp2": "HTTP/2 (Standard)", "pws.cursorTransportHttp1": "HTTP/1.1 (Proxy-Kompatibilität)", diff --git a/gui/src/i18n/en.ts b/gui/src/i18n/en.ts index ae3650e545..262e913162 100644 --- a/gui/src/i18n/en.ts +++ b/gui/src/i18n/en.ts @@ -1193,6 +1193,9 @@ export const en = { "pws.allowPrivateNetwork": "Allow local/private network", "pws.liveModels": "Discover models from provider", "pws.liveModelsDesc": "Fetch the provider's live model catalog. Turn this off to use only configured/static models.", + "pws.xaiResponsesOptIn": "Use Responses API for Grok 4.5 and 4.6", + "pws.xaiResponsesOptInDesc": "Routes both models through openai-responses. Other Grok models and tier behavior are unchanged.", + "pws.xaiResponsesOptInMixed": "Partially enabled.", "pws.cursorTransport": "Cursor transport", "pws.cursorTransportHttp2": "HTTP/2 (default)", "pws.cursorTransportHttp1": "HTTP/1.1 (proxy compatibility)", diff --git a/gui/src/i18n/fr.ts b/gui/src/i18n/fr.ts index cbd5b0b526..147773fd93 100644 --- a/gui/src/i18n/fr.ts +++ b/gui/src/i18n/fr.ts @@ -1166,6 +1166,9 @@ export const fr: Record = { "pws.allowPrivateNetwork": "Autoriser le réseau local/privé", "pws.liveModels": "Détecter les modèles auprès du fournisseur", "pws.liveModelsDesc": "Récupérez le catalogue de modèles en direct du fournisseur. Désactivez cette option pour utiliser uniquement les modèles configurés/statiques.", + "pws.xaiResponsesOptIn": "Utiliser l’API Responses pour Grok 4.5 et 4.6", + "pws.xaiResponsesOptInDesc": "Achemine les deux modèles via openai-responses. Les autres modèles Grok et le comportement des tiers restent inchangés.", + "pws.xaiResponsesOptInMixed": "Activation partielle.", "pws.cursorTransport": "Transport Cursor", "pws.cursorTransportHttp2": "HTTP/2 (par défaut)", "pws.cursorTransportHttp1": "HTTP/1.1 (compatibilité proxy)", diff --git a/gui/src/i18n/ja.ts b/gui/src/i18n/ja.ts index 3031ae4f34..11a85127ea 100644 --- a/gui/src/i18n/ja.ts +++ b/gui/src/i18n/ja.ts @@ -1126,6 +1126,9 @@ export const ja: Record = { "pws.allowPrivateNetwork": "ローカル/プライベートネットワークを許可", "pws.liveModels": "プロバイダーからモデルを検出", "pws.liveModelsDesc": "プロバイダーのライブモデルカタログを取得します。オフにすると設定済みの静的モデルのみを使用します。", + "pws.xaiResponsesOptIn": "Grok 4.5 と 4.6 で Responses API を使用", + "pws.xaiResponsesOptInDesc": "両モデルを openai-responses 経由でルーティングします。他の Grok モデルと tier 動作は変わりません。", + "pws.xaiResponsesOptInMixed": "一部のみ有効です。", "pws.cursorTransport": "Cursor トランスポート", "pws.cursorTransportHttp2": "HTTP/2(デフォルト)", "pws.cursorTransportHttp1": "HTTP/1.1(プロキシ互換)", diff --git a/gui/src/i18n/ko.ts b/gui/src/i18n/ko.ts index 6536e54cd1..5bbc14ae7d 100644 --- a/gui/src/i18n/ko.ts +++ b/gui/src/i18n/ko.ts @@ -1722,6 +1722,9 @@ export const ko: Record = { "pws.allowPrivateNetwork": "로컬/사설 네트워크 허용", "pws.liveModels": "프로바이더에서 모델 검색", "pws.liveModelsDesc": "프로바이더의 실시간 모델 카탈로그를 가져옵니다. 끄면 설정된 정적 모델만 사용합니다.", + "pws.xaiResponsesOptIn": "Grok 4.5와 4.6에 Responses API 사용", + "pws.xaiResponsesOptInDesc": "두 모델을 openai-responses로 라우팅합니다. 다른 Grok 모델과 티어 동작은 바뀌지 않습니다.", + "pws.xaiResponsesOptInMixed": "일부만 활성화됨.", "pws.cursorTransport": "Cursor 전송", "pws.cursorTransportHttp2": "HTTP/2 (기본값)", "pws.cursorTransportHttp1": "HTTP/1.1 (프록시 호환)", diff --git a/gui/src/i18n/ru.ts b/gui/src/i18n/ru.ts index 5d31cc95de..396ccf3ed0 100644 --- a/gui/src/i18n/ru.ts +++ b/gui/src/i18n/ru.ts @@ -1177,6 +1177,9 @@ export const ru: Record = { "pws.allowPrivateNetwork": "Разрешить локальную/частную сеть", "pws.liveModels": "Обнаруживать модели провайдера", "pws.liveModelsDesc": "Загружать актуальный каталог моделей провайдера. Выключите, чтобы использовать только настроенные статические модели.", + "pws.xaiResponsesOptIn": "Использовать Responses API для Grok 4.5 и 4.6", + "pws.xaiResponsesOptInDesc": "Направляет обе модели через openai-responses. Другие модели Grok и поведение tier не меняются.", + "pws.xaiResponsesOptInMixed": "Включено частично.", "pws.cursorTransport": "Транспорт Cursor", "pws.cursorTransportHttp2": "HTTP/2 (по умолчанию)", "pws.cursorTransportHttp1": "HTTP/1.1 (совместимость с прокси)", diff --git a/gui/src/i18n/tr.ts b/gui/src/i18n/tr.ts index 2fb2ca52fc..f460bbeb36 100644 --- a/gui/src/i18n/tr.ts +++ b/gui/src/i18n/tr.ts @@ -1184,6 +1184,9 @@ export const tr: Record = { "pws.allowPrivateNetwork": "Yerel/özel ağa izin ver", "pws.liveModels": "Sağlayıcıdan canlı model keşfet", "pws.liveModelsDesc": "Sağlayıcının canlı model kataloğunu çekin.", + "pws.xaiResponsesOptIn": "Grok 4.5 ve 4.6 için Responses API kullan", + "pws.xaiResponsesOptInDesc": "İki modeli de openai-responses üzerinden yönlendirir. Diğer Grok modelleri ve katman davranışı değişmez.", + "pws.xaiResponsesOptInMixed": "Kısmen etkin.", "pws.cursorTransport": "Cursor aktarımı", "pws.cursorTransportHttp2": "HTTP/2 (varsayılan)", "pws.cursorTransportHttp1": "HTTP/1.1 (proxy uyumluluğu)", diff --git a/gui/src/i18n/zh-TW.ts b/gui/src/i18n/zh-TW.ts index db77768547..942e21e61f 100644 --- a/gui/src/i18n/zh-TW.ts +++ b/gui/src/i18n/zh-TW.ts @@ -972,6 +972,9 @@ export const zhTW: Record = { "pws.allowPrivateNetwork": "允許本地/私有網路", "pws.liveModels": "從供應商發現模型", "pws.liveModelsDesc": "取得供應商的即時模型目錄。關閉後僅使用已配置的靜態模型。", + "pws.xaiResponsesOptIn": "讓 Grok 4.5 與 4.6 使用 Responses API", + "pws.xaiResponsesOptInDesc": "透過 openai-responses 路由這兩個模型。其他 Grok 模型與層級行為不變。", + "pws.xaiResponsesOptInMixed": "已部分啟用。", "pws.cursorTransport": "Cursor 傳輸協定", "pws.cursorTransportHttp2": "HTTP/2(預設)", "pws.cursorTransportHttp1": "HTTP/1.1(代理相容)", diff --git a/gui/src/i18n/zh.ts b/gui/src/i18n/zh.ts index 38d6499c4b..b9cd4a3573 100644 --- a/gui/src/i18n/zh.ts +++ b/gui/src/i18n/zh.ts @@ -1715,6 +1715,9 @@ export const zh: Record = { "pws.allowPrivateNetwork": "允许本地/私有网络", "pws.liveModels": "从提供方发现模型", "pws.liveModelsDesc": "获取提供方的实时模型目录。关闭后仅使用已配置的静态模型。", + "pws.xaiResponsesOptIn": "为 Grok 4.5 和 4.6 使用 Responses API", + "pws.xaiResponsesOptInDesc": "通过 openai-responses 路由这两个模型。其他 Grok 模型和层级行为不变。", + "pws.xaiResponsesOptInMixed": "已部分启用。", "pws.cursorTransport": "Cursor 传输协议", "pws.cursorTransportHttp2": "HTTP/2(默认)", "pws.cursorTransportHttp1": "HTTP/1.1(代理兼容)", diff --git a/gui/src/pages/providers-shared.ts b/gui/src/pages/providers-shared.ts index b87b66bd9e..3b8607dc75 100644 --- a/gui/src/pages/providers-shared.ts +++ b/gui/src/pages/providers-shared.ts @@ -16,6 +16,7 @@ export interface ProvidersConfig { disabled?: boolean; note?: string; codexAccountMode?: "direct" | "pool"; + xaiResponsesOptInState?: boolean | "mixed"; }>; } diff --git a/gui/src/pages/use-providers-crud.ts b/gui/src/pages/use-providers-crud.ts index 20794ad582..926db4451a 100644 --- a/gui/src/pages/use-providers-crud.ts +++ b/gui/src/pages/use-providers-crud.ts @@ -1,6 +1,6 @@ import { useCallback } from "react"; import type { TFn } from "../i18n/shared"; -import type { ProviderUpdatePatch } from "../components/provider-workspace/types"; +import type { ProviderUpdatePatch, ProviderUpdateResult } from "../components/provider-workspace/types"; import { apiErrorMessage } from "../api-error"; type ProviderError = { code?: unknown; combos?: unknown; error?: unknown }; @@ -93,7 +93,7 @@ export function useProvidersCrud({ fetchProviderQuotas(true); }, [apiBase, fetchConfig, fetchOauth, fetchProviderQuotas, notify, t]); - const updateProvider = useCallback(async (name: string, patch: ProviderUpdatePatch): Promise<{ ok: boolean; error?: string }> => { + const updateProvider = useCallback(async (name: string, patch: ProviderUpdatePatch): Promise => { try { const res = await fetch(`${apiBase}/api/providers?name=${encodeURIComponent(name)}`, { method: "PATCH", @@ -103,6 +103,7 @@ export function useProvidersCrud({ if (!res.ok) { return { ok: false, error: await apiErrorMessage(res, t("prov.updateFail")) }; } + const data = await res.json().catch(() => ({})) as { xaiResponsesOptInState?: unknown }; // Await refresh so callers (e.g. notes editor) only leave edit mode once // item.note reflects the saved value. await fetchConfig(); @@ -113,7 +114,13 @@ export function useProvidersCrud({ if (refreshCodexAccount) refreshes.push(Promise.resolve(refreshCodexAccount())); await Promise.all(refreshes); } - return { ok: true }; + const state = data.xaiResponsesOptInState; + return { + ok: true, + ...(state === true || state === false || state === "mixed" + ? { xaiResponsesOptInState: state } + : {}), + }; } catch { return { ok: false, error: t("prov.networkError") }; } diff --git a/gui/src/provider-workspace/catalog.ts b/gui/src/provider-workspace/catalog.ts index d4e4a5e674..522aa32857 100644 --- a/gui/src/provider-workspace/catalog.ts +++ b/gui/src/provider-workspace/catalog.ts @@ -55,6 +55,8 @@ export interface WorkspaceProvider { }; /** Codex account routing mode for the canonical `openai` forward provider. */ codexAccountMode?: "direct" | "pool"; + /** Derived state of the two xAI Grok Responses model-adapter entries. */ + xaiResponsesOptInState?: boolean | "mixed"; } /** Three-way pricing/ownership tier for a ready provider row. */ diff --git a/gui/src/styles.css b/gui/src/styles.css index 667a477866..dadf818cad 100644 --- a/gui/src/styles.css +++ b/gui/src/styles.css @@ -1159,6 +1159,7 @@ select.input { appearance: none; } -webkit-appearance: none; } .switch.on { background: var(--toggle-on-bg); border-color: var(--toggle-on-bg); } +.switch.mixed { background: var(--amber-soft); border-color: var(--amber); } .switch:disabled { opacity: 0.6; cursor: default; } .switch .knob { width: 14px; @@ -1179,6 +1180,7 @@ select.input { appearance: none; } background: var(--toggle-dot-color); box-shadow: 0 0 0 1px rgba(0, 0, 0, 0.12); } +.switch.mixed .knob { transform: translateX(7px); } /* ---- misc ---- */ .muted { color: var(--muted); } diff --git a/gui/src/styles/provider-workspace-settings.css b/gui/src/styles/provider-workspace-settings.css index 3429106e7f..9f233c477d 100644 --- a/gui/src/styles/provider-workspace-settings.css +++ b/gui/src/styles/provider-workspace-settings.css @@ -26,6 +26,16 @@ .pwi-auth-actions { display: flex; gap: 8px; flex-wrap: wrap; } +.pwi-auth-optin-row { + display: flex; align-items: center; justify-content: space-between; gap: 16px; + padding: 10px 12px; border: 1px solid var(--border-soft); border-radius: var(--radius-xs); + background: var(--raised); +} +.pwi-auth-optin-copy { min-width: 0; display: flex; flex-direction: column; gap: 3px; } +.pwi-auth-optin-label { font-size: var(--text-control); font-weight: 600; color: var(--text); } +.pwi-auth-optin-mixed { color: var(--amber); font-weight: 600; } +.pwi-auth-optin-error { color: var(--red); font-size: var(--text-caption); } + .pwi-auth-wait { display: flex; flex-direction: column; gap: 6px; } .pwi-auth-wait-title { font-size: var(--text-control); font-weight: 600; color: var(--text); } .pwi-auth-wait-copy { font-size: var(--text-label); color: var(--muted); line-height: 1.45; } diff --git a/gui/src/ui.tsx b/gui/src/ui.tsx index 409bd3e16b..b5db510953 100644 --- a/gui/src/ui.tsx +++ b/gui/src/ui.tsx @@ -5,10 +5,10 @@ import { IconCheck, IconAlert } from "./icons"; import { IconChevron } from "./icons"; import { computeSelectMenuStyle } from "./select-position"; -export function Switch({ on, onClick, disabled, label }: { on: boolean; onClick: () => void; disabled?: boolean; label?: string }) { +export function Switch({ on, mixed = false, onClick, disabled, label }: { on: boolean; mixed?: boolean; onClick: () => void; disabled?: boolean; label?: string }) { return ( - ); diff --git a/gui/tests/provider-xai-responses-optin.test.tsx b/gui/tests/provider-xai-responses-optin.test.tsx new file mode 100644 index 0000000000..bdece63dc8 --- /dev/null +++ b/gui/tests/provider-xai-responses-optin.test.tsx @@ -0,0 +1,130 @@ +import { afterEach, beforeEach, expect, test } from "bun:test"; +import { Window } from "happy-dom"; +import { act } from "react"; +import type { Root } from "react-dom/client"; +import ProviderAuthPanel from "../src/components/provider-workspace/ProviderAuthPanel"; +import type { + ProviderAuthHandlers, + ProviderUpdatePatch, + ProviderUpdateResult, +} from "../src/components/provider-workspace/types"; +import { LanguageProvider } from "../src/i18n/provider"; +import type { WorkspaceItem } from "../src/provider-workspace/catalog"; + +const globals = ["document", "window", "navigator", "localStorage", "IS_REACT_ACT_ENVIRONMENT"] as const; +let previousGlobals: Record<(typeof globals)[number], unknown>; +let testWindow: Window; +let root: Root | null = null; +let container: HTMLElement; + +const handlers: ProviderAuthHandlers = { + onLogin: () => {}, + onLogout: () => {}, + onReauth: () => {}, + onSwitchAccount: () => {}, + onRemoveAccount: () => {}, + onAddApiKey: async () => true, + onSwitchApiKey: () => {}, + onRemoveApiKey: () => {}, + onEditAlias: () => {}, +}; + +beforeEach(() => { + previousGlobals = Object.fromEntries( + globals.map(key => [key, Reflect.get(globalThis, key)]), + ) as typeof previousGlobals; + testWindow = new Window({ url: "http://localhost/#providers/workspace" }); + Object.defineProperty(testWindow.navigator, "language", { configurable: true, value: "en-US" }); + Object.defineProperties(globalThis, { + document: { configurable: true, value: testWindow.document }, + window: { configurable: true, value: testWindow }, + navigator: { configurable: true, value: testWindow.navigator }, + localStorage: { configurable: true, value: testWindow.localStorage }, + }); + (globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT?: boolean }).IS_REACT_ACT_ENVIRONMENT = true; + container = document.createElement("div"); + document.body.append(container); +}); + +afterEach(async () => { + if (root) { + const current = root; + await act(async () => { current.unmount(); }); + root = null; + } + testWindow.close(); + for (const key of globals) { + Object.defineProperty(globalThis, key, { configurable: true, value: previousGlobals[key] }); + } +}); + +function xaiItem( + authMode: "oauth" | "key", + state: boolean | "mixed", +): WorkspaceItem { + return { + name: "xai", + adapter: "openai-chat", + baseUrl: "https://api.x.ai/v1", + authMode, + hasApiKey: authMode === "key", + xaiResponsesOptInState: state, + }; +} + +async function mount( + item: WorkspaceItem, + onUpdateProvider: (name: string, patch: ProviderUpdatePatch) => Promise, +) { + const { createRoot } = await import("react-dom/client"); + await act(async () => { + root = createRoot(container); + root.render( + + + , + ); + }); +} + +function optInSwitch(): HTMLButtonElement { + const switches = container.querySelectorAll(".pwi-auth-optin-row .switch"); + expect(switches).toHaveLength(1); + return switches[0]!; +} + +test("OAuth xAI renders one mixed switch and applies the PATCH echoed effective state", async () => { + const patches: Array<{ name: string; patch: ProviderUpdatePatch }> = []; + await mount(xaiItem("oauth", "mixed"), async (name, patch) => { + patches.push({ name, patch }); + return { ok: true, xaiResponsesOptInState: true }; + }); + + expect(container.textContent).toContain("Available accounts"); + expect(container.textContent).toContain("Use Responses API for Grok 4.5 and 4.6"); + expect(container.textContent).toContain("Partially enabled."); + expect(optInSwitch().getAttribute("aria-pressed")).toBe("mixed"); + expect(optInSwitch().classList.contains("mixed")).toBe(true); + + await act(async () => { optInSwitch().click(); }); + + expect(patches).toEqual([{ name: "xai", patch: { xaiResponsesOptIn: true } }]); + expect(optInSwitch().getAttribute("aria-pressed")).toBe("true"); + expect(optInSwitch().classList.contains("mixed")).toBe(false); +}); + +test("API-key xAI renders the same single Responses opt-in switch", async () => { + await mount(xaiItem("key", false), async () => ({ + ok: true, + xaiResponsesOptInState: true, + })); + + expect(container.textContent).toContain("API Keys"); + expect(container.textContent).toContain("Use Responses API for Grok 4.5 and 4.6"); + expect(optInSwitch().getAttribute("aria-pressed")).toBe("false"); +}); diff --git a/gui/tests/use-providers-crud-update.test.tsx b/gui/tests/use-providers-crud-update.test.tsx index ef5a7ea1ea..6b72d233b8 100644 --- a/gui/tests/use-providers-crud-update.test.tsx +++ b/gui/tests/use-providers-crud-update.test.tsx @@ -3,7 +3,7 @@ import { act, useEffect, useRef, useState } from "react"; import type { Root } from "react-dom/client"; import { Window } from "happy-dom"; import { useProvidersCrud } from "../src/pages/use-providers-crud"; -import type { ProviderUpdatePatch } from "../src/components/provider-workspace/types"; +import type { ProviderUpdatePatch, ProviderUpdateResult } from "../src/components/provider-workspace/types"; const globals = ["document", "window", "navigator", "localStorage", "IS_REACT_ACT_ENVIRONMENT"] as const; const originalFetch = globalThis.fetch; @@ -60,6 +60,22 @@ test("updateProvider awaits fetchConfig before returning success", async () => { await act(async () => { root.unmount(); }); }); +test("updateProvider returns the xAI opt-in effective state echoed by PATCH", async () => { + globalThis.fetch = (async () => Response.json({ + success: true, + xaiResponsesOptInState: "mixed", + })) as typeof fetch; + const { root, updateProvider } = await mountCrud(); + + let result: ProviderUpdateResult | undefined; + await act(async () => { + result = await updateProvider("xai", { xaiResponsesOptIn: true }); + }); + + expect(result).toEqual({ ok: true, xaiResponsesOptInState: "mixed" }); + await act(async () => { root.unmount(); }); +}); + async function mountCrud(overrides: { fetchConfig?: () => Promise; fetchProviderQuotas?: (refresh?: boolean) => Promise; diff --git a/src/providers/xai-responses-opt-in.ts b/src/providers/xai-responses-opt-in.ts new file mode 100644 index 0000000000..34cbc5dccc --- /dev/null +++ b/src/providers/xai-responses-opt-in.ts @@ -0,0 +1,15 @@ +import type { OcxProviderConfig } from "../types"; + +export const XAI_RESPONSES_OPT_IN_MODELS = ["grok-4.6", "grok-4.5"] as const; + +export type XaiResponsesOptInState = boolean | "mixed"; + +/** Derived dashboard/API state for the two modelAdapters entries owned by the xAI opt-in. */ +export function xaiResponsesOptInState(provider: OcxProviderConfig): XaiResponsesOptInState { + const enabled = XAI_RESPONSES_OPT_IN_MODELS.map( + model => provider.modelAdapters?.[model] === "openai-responses", + ); + if (enabled.every(Boolean)) return true; + if (enabled.some(Boolean)) return "mixed"; + return false; +} diff --git a/src/server/auth-cors.ts b/src/server/auth-cors.ts index 5fb03f3d0c..77ffa085c2 100644 --- a/src/server/auth-cors.ts +++ b/src/server/auth-cors.ts @@ -25,6 +25,7 @@ import { providerConfigSeed } from "../providers/derive"; import type { OcxConfig, OcxProviderConfig } from "../types"; import { openRouterRoutingConfigError } from "../providers/openrouter-routing"; import { googleVertexLocationConfigError } from "../providers/google-vertex-location"; +import { xaiResponsesOptInState } from "../providers/xai-responses-opt-in"; let _corsOrigin = "http://localhost:10100"; export function setCorsOrigin(port: number): void { _corsOrigin = `http://localhost:${port}`; } @@ -688,6 +689,9 @@ export function safeConfigDTO(config: OcxConfig): unknown { hasApiKey: !!provider.apiKey, hasHeaders: !!provider.headers && Object.keys(provider.headers).length > 0, }; + if (name === "xai") { + dto.xaiResponsesOptInState = xaiResponsesOptInState(provider); + } for (const key of [ "defaultModel", "disabled", diff --git a/src/server/management/provider-routes.ts b/src/server/management/provider-routes.ts index 702f4c853d..47909e50f0 100644 --- a/src/server/management/provider-routes.ts +++ b/src/server/management/provider-routes.ts @@ -82,6 +82,10 @@ import { LOCAL_PROVIDER_RELOAD_PATH, } from "../../lib/local-provider-reload-contract"; import { refreshUserCostOverlays } from "../../usage/user-cost-overlays"; +import { + XAI_RESPONSES_OPT_IN_MODELS, + xaiResponsesOptInState, +} from "../../providers/xai-responses-opt-in"; import { isPlainRecord, parseDebugLogQuery, tokPerSecondResult, unavailableCostReason, costResult, requestLogDto, stripRegistryOnlyStaticHeaders, fetchAllModels } from "./shared"; import type { MetricUnavailableReason, TokPerSecondResult, CostEstimateReason, CostResult, MetricSource } from "./shared"; @@ -182,6 +186,20 @@ function applyProviderPatchFields( next.liveModels = rawBody.liveModels; touched = true; } + if (Object.hasOwn(rawBody, "xaiResponsesOptIn")) { + if (name !== "xai") return { error: "xaiResponsesOptIn is valid only for provider xai" }; + if (typeof rawBody.xaiResponsesOptIn !== "boolean") { + return { error: "xaiResponsesOptIn must be a boolean" }; + } + const modelAdapters = { ...(next.modelAdapters ?? {}) }; + for (const model of XAI_RESPONSES_OPT_IN_MODELS) { + if (rawBody.xaiResponsesOptIn) modelAdapters[model] = "openai-responses"; + else delete modelAdapters[model]; + } + if (Object.keys(modelAdapters).length > 0) next.modelAdapters = modelAdapters; + else delete next.modelAdapters; + touched = true; + } if (Object.hasOwn(rawBody, "requestPacing")) { const value = rawBody.requestPacing; if (value === null) { @@ -394,6 +412,7 @@ export async function handleProviderRoutes(ctx: ManagementContext): Promise { }); }); + test("xAI Responses opt-in reports mixed state and atomically normalizes both model adapters", async () => { + if (existsSync(TEST_DIR)) rmSync(TEST_DIR, { recursive: true }); + mkdirSync(TEST_DIR, { recursive: true }); + process.env.OPENCODEX_HOME = TEST_DIR; + const liveConfig: OcxConfig = { + port: 0, + hostname: "127.0.0.1", + defaultProvider: "xai", + providers: { + xai: { + adapter: "openai-chat", + baseUrl: "https://api.x.ai/v1", + authMode: "oauth", + modelAdapters: { + "grok-4.6": "openai-responses", + "other-model": "openai-chat", + }, + }, + extra: { + adapter: "openai-chat", + baseUrl: "https://extra.example.test/v1", + }, + }, + }; + saveConfig(liveConfig); + const destinationProbe = spyOn(destinationPolicy, "providerDestinationResolvedError") + .mockResolvedValue(null); + const request = async (name: string, body: unknown) => { + const req = new Request(`http://127.0.0.1/api/providers?name=${name}`, { + method: "PATCH", + headers: { "content-type": "application/json" }, + body: JSON.stringify(body), + }); + return handleManagementAPI(req, new URL(req.url), liveConfig, { + createManagementConvergeCodex: catalogConvergenceFactory(), + }); + }; + + try { + const listedRequest = new Request("http://127.0.0.1/api/providers"); + const listedResponse = await handleManagementAPI( + listedRequest, + new URL(listedRequest.url), + liveConfig, + { createManagementConvergeCodex: catalogConvergenceFactory() }, + ); + const listed = await listedResponse!.json() as Array>; + expect(listed.find(row => row.name === "xai")?.xaiResponsesOptInState).toBe("mixed"); + expect(listed.find(row => row.name === "extra")).not.toHaveProperty("xaiResponsesOptInState"); + const configDto = safeConfigDTO(liveConfig) as { + providers: Record; + }; + expect(configDto.providers.xai?.xaiResponsesOptInState).toBe("mixed"); + + const wrongProvider = await request("extra", { xaiResponsesOptIn: true }); + expect(wrongProvider?.status).toBe(400); + expect(await wrongProvider?.json()).toEqual({ + error: "xaiResponsesOptIn is valid only for provider xai", + }); + expect((await request("xai", { xaiResponsesOptIn: "true" }))?.status).toBe(400); + + const enabled = await request("xai", { xaiResponsesOptIn: true }); + expect(enabled?.status).toBe(200); + expect(await enabled?.json()).toMatchObject({ + success: true, + name: "xai", + xaiResponsesOptInState: true, + }); + expect(liveConfig.providers.xai?.modelAdapters).toEqual({ + "grok-4.6": "openai-responses", + "grok-4.5": "openai-responses", + "other-model": "openai-chat", + }); + expect(loadConfig().providers.xai?.modelAdapters).toEqual(liveConfig.providers.xai?.modelAdapters); + + for (const model of ["grok-4.6", "grok-4.5"]) { + expect(fastPolicyForModel(liveConfig.providers.xai!, model, "xai").adapter) + .toBe("openai-responses"); + expect(resolveWireProtocolOverride("xai", model, liveConfig.providers.xai!).adapter) + .toBe("openai-responses"); + } + + const cleared = await request("xai", { xaiResponsesOptIn: false }); + expect(cleared?.status).toBe(200); + expect(await cleared?.json()).toMatchObject({ + success: true, + name: "xai", + xaiResponsesOptInState: false, + }); + expect(liveConfig.providers.xai?.modelAdapters).toEqual({ "other-model": "openai-chat" }); + expect(loadConfig().providers.xai?.modelAdapters).toEqual({ "other-model": "openai-chat" }); + } finally { + destinationProbe.mockRestore(); + } + }); + test("provider PATCH field-mask edits non-reserved providers and rejects unsafe fields (WP040)", async () => { if (existsSync(TEST_DIR)) rmSync(TEST_DIR, { recursive: true }); mkdirSync(TEST_DIR, { recursive: true }); From 148290e03b9685dc25862d7e9a436acd0bbf97e7 Mon Sep 17 00:00:00 2001 From: bitkyc08-arch Date: Fri, 21 Aug 2026 14:07:13 +0900 Subject: [PATCH 2/2] docs(pr): screenshot asset for the responses opt-in switch --- .../pr-assets/xai-responses-optin-switch.png | Bin 0 -> 52838 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 .github/pr-assets/xai-responses-optin-switch.png diff --git a/.github/pr-assets/xai-responses-optin-switch.png b/.github/pr-assets/xai-responses-optin-switch.png new file mode 100644 index 0000000000000000000000000000000000000000..8f0947ace7e2f09c83b2baf016d779eb12058e67 GIT binary patch literal 52838 zcmb5V2_Teh*EoI??VH9@M4}|3WXrDSu~jo9#y%7^GMLFW_N5&YDp_WP9%?YdNQg0{ zvWB5)3>l0pLzc1cTmM_n`@P@${eJ)Nd%xdF*L^MLoa>r|Ny9r41-4GTwvj&m)w|x{g zyLw65()htaM5A#OAaugz+%<4u-&et?DDe4z!3%pJ>UZbGlU6O3*ZKGipYM|9*Zl)9 zegOa$>WMAS4hb3_f}c2W!rl-t1w`$6EAv2_6bn+x^YcFi-bzUWz$@uj0=t2o;QNje z;E&1$Vgde7ZvphZGhhoaGmGBy_Vs_A-^Wzm(ToupZtG(5y+Ab2Ka{mI`#aLywt@Zd4T`&>$^Kw!(QzHs{&DnaKmQO zX8fkHO@@bZ%`~EHK5jAoHz0mpQ-J{?2mowvi}!&FAZ zFwEM#w;*f|TIWo&5|RwdP%-9>#*nah7-Oy4yrnEX4mNHDW!l;iP{T1RwJSBgsX=Go z?K9!H1ME^YSPNZ8Kc-YY*w5DVvU_uccg7s1H}2ECVvW*hO4aK%=s+dH*1G-NwA$?= zcL_1^4Vy*6PXdw3#?Jf#qVyUg%vnK&PA!X9dS=yi7H*BQH(p-$8{j(jWP27tR6op3 z*3xXK4>Lbj+J7Xx7p=-nb1ucZ9n-GsUSPpE%-f{gnDqB-$}?_>aKz)y?AhLsj6jJQ z1EIe5{2Al1bCY#1bsXShr?VyM14#-rlQ{$V*%{w;SbFV>6n!JZj^*q7R-MM?y;Lk) zLyVJ7l@JL;kBs6HE7i{0?D^Z%PSB&9+ZI{bqu*ESBe46)k2TLL-9(V8CXKDkH;|Fp zkAA>*Tw6@6AtZ>p&)8ry^WcfrZpK<7Ow1vf!d-ELuNy3+BVI`H)!GI)OE2O+_w38{ zOv&E1?C;#%SW^Xu;H|BkT54+-Vuliq;a`o1WNsT<5BQ7S`h}&UHleNRBe(H|LRO`# z(Ir}c0jD>k7R}WLbe$pnFMBapi4{dYu6T<4xB;r1Xb|#O<0w9PVV{n~`4*^SH9GA@ z?J`e=HrpqBhyDv#ujUN2#7noI57_rdZ(5hl9=(aV|*9 zo6+1m-RnONAJy>pv={R!A-`bwZon}e!Q?EBXrgR=Sd+n(1c4t2Rp<7S{Yqa0$OMX9 z5=_X?uyD3e;-%2`Q~VqDnv--NB)Hkt(vLUTrDud-*5i0U(S2@!g%kD;aQ6)ogrbT3bzha4ExwSIn9|z$~@1sh*nMMpBZgIkZpf3W{OrkDI`VWM)S)#A>Rq3fYCuH z)P&K`_^I~Vgz@dz)!jdxj3+t|SPkrr^MtY%ybl;C#CmgWbDW9M)xz^JBn6^dPz+m6 zBk-#fgcsPgsT?=aeCg}5r+IT@*}8LG^G3Qlg68Dy1V>m&hOLLmMxOFwRK4&>4k$Ql z*VY~o{zv}KtV&&I^ZH^DQFdaszI#4%-*DLRQB{fMT-_zBMa2D3$L98VZ#TQIlfyhM z?EKn{u^3U4ofn&zo>Q1i-?-8>iO+m9Jt^3dzg(7uWVaSOaYiV-Ce7{=QZ7CfkMHyT z;HZO>P{Cd%8f%!t{=g4p~5P;#2FyaJN}Qx0rXyo*`H~ z-mj#QS>)@QCepgL429NWM$avrliY(?L}a1VJT%XtkseyBaDtaB@&TNXm|&rb56-Eu6w7LG9tPU6(%F2-7=rBqVwv&$?6Fm)9S1~ z2F0`TqPCt@)f4>%Xm`V!6QdbofvBkU!>sU>16>x~h^Q2`%6zYlD=?PYL{MFE`eUp- z4PHJ?EEsTg3tz9~_8IzzI=9a7rYGOLsi#ulepd;h_1-NRpnTBbS*XF(YNu3mizE-< z*+~8wg8i$es{+=Nzc*dH$3BZDVkJ2cPh(=`7IX)C3C*W4{nCu~l6*ZAZ&ngIj})C6n@fd5N_dq}rb?wbgISY}?A0im z=q^U45@S!t%4g|jX&aqi3XR+|iSxIdtgk($Ax}8H<~-jz+q63hsPSCyv;NR0THUsA zMUFmVb}v>!K|!`gDKxOTrM0!_^&OkiJmzC3OKhc%A6C9Eyo?*u9iG#`=-o(LGiNLh zbJw9L<$hH8jJoru#u(fSBXg#{(D<>mPkITVml#1i90tbJXjA-FQD&mt6aKmMQ21>=$?vK82;q+4D}~= zF?a%roQ!nmn!2ngnQfdf(4PK)rly!4T~ljUrQEvp!=7rh-G82{+Du2|6Po8-`};fs zCnB@!(eUvkbMoU5f3^ZCgynKp4Q`OYUVr|KryE${sjaM>>35MaiAp&;>{uK^ka2%k zrZZ>z&CR2ng+7W0CoII&zI*y!0<&hWuxS4o zDz3pHVb9>WZ9tXizeJbReag%*nrd!)u&?&p9ra5T zZ%b44K+jmBN8B(rHZtd#>6prj9~=9Z`kGDSw+l>%_L73_bvVn1Hj*mMPQDH5aF{cM zUi~0AB7!<$C7~&1@`X48`97d@9!0z}Wog7jRD{fv3!T#KY3Zl0cI`II zQUF%$FK%^j!3%rCle>g|S1(yVJu!Pi05k=_=E;-pwNJxVp65yLc)IVE$lKo-|8ucD zcc1kCf$O4-ue_Yu!8#DMr`l6;CXGJx$+Xx()CGq zhi5&3;z(-~o|~F%;SEaZ=s7w!P!s<`UHCrlhoHsz_6ko4Rarr6O>Jgh&He)BL;Jnm z9+aC}e;(MYKbjb7O?!rp@4%&XlW;yF7-&lnQ%^TUJ3?%iPg}9`xlYw`RkMbUk~jxy z;oFx4Z#sS$pA$rKt0A}%H!)xNb|i)#{o(Bn?O6DrIIybZ(5dd3sG4BhNd0cfm1uyi zS3u{xM%cfABFgbEi%Hmexf7;>NTek`)N|fg4Gx71EoxEAqDf)0^wryDh02TLp9$3v zk1$QQ$J5zz`FakmFt#gKbO2|~w1#fv#VvBQO>JEkK{LS0^vG>pw@-G9?*jJfdScJ} zpsHXHmorm?*0oTmIkWT2q{79OZo7Vq+m-N!muG7oI0&0?WYh7m|gjC-%-ZO3IuP<)$|em}zt4|l}*q!-=}sh9{@1kvYNrcE!Z;8|64c+9KZG(jZf6_=D{sf-OO6h%;m&gxCjvT;knVp zTmK+^VSn+EvDwUTRsuPc?*iMu?*9JY&h?)I+pM=g z{b%dyKWl$iwksNptiE{`-?p-uchmDAxO&7R@j@f>b|aR`&-8*e?&fsL&en6-GJ}-0 zPwbvem#JMgs!#NO5B%ME$NjL5XJ+%p4<04*?9#m-Aadsxa<>zREO?|7S?%q&5?Lu( zy2a~-m!iviDrg@;ewVv7Ov-+bp2ck82zz-IpgAMp&nHMHbc<#7O;7C7Z)RIF3rfg3 zmTeJ>fn_0Qi#TYjvVX>J#RVjeL;tQw4vfrJ2g$RKlR3(fic1ftM1BDZkrys&JSq$- zT(MgD#8KR|-n_Ff3AGga3rI3}DLGutwHN`|HaWqCAS21)E&A=>JF*ot*<4kNwlBq! zhKKTEU6Faw(R0blGngh+=4bp<g;=kN*j_(!+X2eah&`ZzBU z6U=&!@L>f2LF28r%?AknA8-G^GzG+N@{1fd-0Bm$b@Cz*wQH9UC>o`uGY?wNSE7Yp)SULtf9Wm02F#VFb{NWZGk`7X~fxI?yi6Il*Vs&yct zt)%>UIt@enQ*5Y(gQG!&((#J$7ROGHEH5T9mn4Jg=8R-om|zCQhrL5e*A>e(e5Nr@ zWnDeRa5!8Ty1-FLkgPf?NK#Q^;*t`HV~p3Vh>TXx=HW63{adikrP1my#d(hPjqU1J zDk9QJopETMPm+zk%PnKLQJe1U;(9r6?||0Ql_~!X|b81&kC5rR%M-zFQz?-p43)O zc$hn2A3Ft);OVXMY$hxr&NCw3-`qW7*sft0N7ote*XlX6k^nvP*38~eJ5qULl`#Ps zR{?_?tEkS7&4ukIHT4IVMV_xCof(7I3HOmce9n!g$i(2|1~Orb(~nq9`NKcUMdgcN zI3E(b)Y_h^?m!NGfzcR=3@l9U4crmgp{}FtoboI^M1jI01e0Pl@X5VtC7d#te~Y)Z zu_LBK%CpWc*}ozvanJ6IX3;8b)@Z541KTzyXl<~6^!k(Fnry3YIgdO^`K$T1oGd&Z zzd2Soqd7OiotfJ~G`5~9Q^Sl_(5-8E>L#0Mm07)ZMX#^-)KQ&gjJP~snLOUe+Lux5 zpjlq?Ak)1~1ldgswWPVWsy|87QZcd(+3-vJHr(BvLuqewG5em~fh4(N3E7c#4W1Qs zamRN1V(Q=w5o6sFZ`ICU!19;_R#N=2FzSfdDDRz;>vtMbG2@xvbA0Uk>AvuEE6wGb z(;4bkzC+{15jyQ~b!-NtTK^Zoou2vmBJ}D%9J*T@{8jAEb6wMgW67pA@D#UP)< zA(MLR1fMB(V{Ns|vj31HA@~=tYkD(nlKXMTo=8V>RbSElyNM~i!!ipt!_l$s-?T_^ zBhx$7)JEHj+_rZ(8?${1oQQHdwTpfdE9RS!*_(x$q8#0uwu!E3kbYmZk(EK`M~Q8Y z)vj1!=P4T<@evdn`>fd(wrbITXqjyFF$)*anTCUj=`|5~Dk3ZXFY_%J7sapsptw+mRk_%R8Z>r#YJ`b_P3ri7)jNKM024T zA&AHj-Z#yK@TCcJ&Y8e8$&!{@N1iMJsq2P0=(W!=_Zb{qg)(yTAm98rEMmZJ96;o<^Xbp!zHthc?!T97fV`7k>@M)@$P5Z8x z#2xF}o77*x1O84)is^~9l7-ZTHu7a_Rb&mq!VCecpLg zwmI_`z*L^ID1j*#1S($2fn0t0MBAfKVaPG3xX7p*_j18PW4#C>q^Eo9~nrOw%Dw2Bcl}yxwbe75a=r=V>D6TdfFnzGyYyqjR)Vefh31+tQGn|V&<*CDPMr$WB)TPr56Gk?t$6KsZVF(*ccsrqt#EaADd*?cq1|@R%1%zio+hTz zmS=gOFn+Kc;4dCzd-iH=JH=xE_~EW!z~@ z4QFP#8?2_OtjnbsNl?rVO3#^zj~YvLNIB$#MdpMWwSN9qGO?GOnoOKjw;gY!qVtG( z>15*RoE)=py$A%hMCw9J4rC9a2rmA{eo3u6X^^?m=4s)88rP|XgRTxqEaCn50E4Mg zj=NtR;N`XN&}0!2dCRG}jx4@GP$-56z^q_Cz7_gycHQ3V$JFm6=lR_Ya4769)xDCG zWJ5;xiqyB?w6umJqscX|9m}9?k1vg@v>#o}X>ia_bIvn|_Vrnidd1`juC5j1BkWl1 z1u{wwc?xsbgT0veI&x2Y@%fq3z2fsfiTO{w()^hr1QaPX_I)f-W6e@uAN^PQNAV69 z{?UcLVz|>q@pSF?x6*9&d!!!g9P7cJg8-X&8~;r5f$5jN-)@{sFK@nq%jHEh1+ z`W5RbO^TJ6cc(Q*(-U+WT4ZcUOV*eTR_-%Zg*6oJxK@*Hf;LeKw#g%=Ju|XYRVlUl z7Caz3o%|v4@W3t9;pOkP@A6^kw&jSzx3Qx%C&wyPBXEldb+t@&ewIbk8aj{O*6LbU zy6>FiN?0g3?>#hV*(OYfce6wFJ<_uj2(H?#t#WNU#tv6%e!kHD9f$8wKit|*jvY-X zv(aOtZ7bUl;}l)Ji_OS2lW#@pp5+0qC`}cf%M(xPBG2kV2L)Q|4R`9E$46&8smLtZ zcMQfGHH!;CA<}13pEKoCK5Z%$HYYBla zWZbTHN$zvioZW%`Jn&?1uO|drk7M7@Uh7jg{dj>u6N}cxTl&7XnLHsv&0%~F~d?PS?$jz>i zc)GC|Jz@I57HZz|@tnDo8avG|0qNZ`r8W!Nt2Cv<9r9(y!uF-YmO4zRm4wl1&AGjS zXTT#Qtl4Iqkey6HxdtX&3S-wc6#J5sy&SSCDpADfnB?n+PuJ8F*Eu;-EzX&9bwbs{ zN&T*!zG&MxBsp==ngKcgoo~jN>}~px#T2Qq(`b zA<*i%hy^WTz_qyFg>~i$R#$QLO;Y|(J|mMenbRnw>z7}^_E%x1_wzlM z)V-z7@14YxZh>)vGtEivz28)G(}~~-^=!k7I`!Jxm1P|QOhpGHq_eF}^_|~&Up1$y zYs1PXajA*w@FZkjshE3B&~T1NYG1t>g(E5@SW(#TTwfK!^S|YiMe=g!PI+zBwwUD} zDW36I1u`g53-wm{D&#Gx1X8JqfUjj>_+ZFL{V96&=PEVv zpPXRtzQ!{1O>59K8@--&bZ$6znCRA_u_O6M@5c;L3LT#?2*24gkvF_Ki{dG8Qxl|I z4y0W2`yLdw6!d%}R>g&>uG+;7Y8MD^N<1&HUxoqxIB8bVIbja|D^S!}%;9HFDG%nRHRjbdcEiTirD zv>34Syg!t_rSaAmbdK^IjZ5@ySWXo05@E zpc+2hbSE=ZsIx*#L64|~SK^d+YLIO%~Tn99O$23)))0RDh?S;#hmPKm3#fP_c+MggEaQ?@zm0UpasnY8}lj8ANRoy>4$C{J=h>CajQPL zSe+uEC^a*Nk;<>)bbi_qSUP=C1oxZ3`9BEmi~iT~?Mj2~96kHcszUDPB~KTDgExLN zOrv#eI!SWcW`8{Vj}C{wJNmav{-&Un{-!W!j=KI23J~Eews^gK`@X*ssxr4&{u3dS zW)E^;gDekgCRhb6xKDOOrtIm>{{<-X6;_6%HINOqsGWK4EB^Ogey_R#?5MEXqT9Cp z_p&!Y^3lIBY)AvzrVcrukC(-vz1i$AWMB$QG&j44czkhRXd1gp%;1Yksms|kb#hoK%~FWrQZ6P=BosPi+ecvJ~9PZBXNaI7T`h~b`wUOSaPw1(R|Ky zIMbD-TBT-mWkRITf-}Bq|NZn@Z={(j?kxalS07xv*sm;EjfiuPE~#`P$jOjJZZg@- zWd?+PERi1h?a%lHJ?%Kn`^z>MOUl@i7IJ|)j&Ap^G;IxB&$0_TwsEu^v(3CXG8XN^ zTJS7ti|}Np`B*P-V?)|3_AQOSUo(x;GkvW0>Q3e%1WxP$Q~4O`?LKviqmASX&$GbLJD=10q()YM)Wzx3mPTd-)U z-q}CM2GOee^`c_B-WF%=$*(a&9Wr5IFORLNc~<0ztho&oxJN6H)Q{9sQDg&du@JV$ z*T}*-%_!0^BAb895f~=TS3k-g#^+h3*zETv&%_{Xrs%4hlGe+$o7-^|55n-tmV#5~ zI}o@4n20SpFq$MAUVX>+&$*8KylVTl#X|GMNYE!ET9wj z=Ff=n?#`oQF9kni1N1~WCtG5tjHyou3Z!(RTa!Xmh}{eGc`MbC1LB=}**-Q^4dMxV zL$#RxYl%5+?uof55nGMCLUfUksU156Gj;$eb@5XM<3gfD9B(?ML{b%U%s{Ts6PI*X z9c!!2YgVy!vG0pKyCbr3P+zj)Wo|WjfN`OdR`rum)tts_HqiU@eaD^xAM=>Mx{3pB z+KXnqIXQ%0TZL|dp4%L1MpKB1`=qtX!C~ty+}uk`t*783K|wr~vHgwOV#VkS>F!-f ze4VaEC}cl*z9)_47?ahjgCIq-<&a_7^xn6sDhqqB*xLnqR3%`waw(a+Umf}Qw^aC- z@}#hUopIFfj;8`5e3q94_zi(SL@mSaN( z;bXt*a`u%^P1FQm-gt^qB<}ln%8=tKF*Wt^>H8@OnK;a;Lp)6{+YZ9$bPBv*_vO)0 z?YheGjCWD5l zeoV6b3DasX%7({jduA+Y&~9fZhxZO^_SG~w2RzHYWna_A2tC%Qs*^eNH{+> z=4fA>TKz9T{R@||oOmr=R&LnXjtzr%kC00U3hat3&AElmH&U;3`yLgbtWn}<;}2J` z?=*1>PHnj2kcCjc7wGB-n#;;s7}bfm^J6)J$1{MlrfEqN5=VlP`Wnjo!dFI@-lt~|CNxSt87%a?Ao}**Y>tdV zaSZ7F@rcQ|G|I$`?@x5U7CSEmDb}*m67%)$rb2BOb5H|vr)HBMKG_@QEIxR;RK1Rk zfn!i)JUcx%byRh{`f5me+Kb*&sV*i z1#_$o4j}4E{`}WHXrm(~vT?1s_#b-kprC;8#hsRh-$8|Ybzj^If$v?gyTa?hz84n- z0a(&?i0hx%`3;S&g#p2fg1^H+g3((6(!;mcdR?yQ2pVi14DJ8|JBFRXOuV$sR0lb1 zp>S6{HQ|fvJgZcmK2Z8V71Sly0&DLQI{XRjy~i z>eqL9vdg4AR$tt7s%QA4JbwZ0gH{{EFb+xs%-=)Gr4D5jNkwYxzp&V!@{uqxsu^_F zs){(+okdVRiy(D+KusM6L;Wg^Obefw>1jR;(%kb$b*N=C)h4H)FPgV-CUuyma*Uhv zBPYL2NyqfdkBCo-aTXgVFN|MfW|cFCeTO}{1dqb7SnOu8fv3mVYKLCIOkYWhL4O$E z=N0h?^%Vlzokb7KvDi&@C4{*(1ilMByoiaJ7=L_9Dy?*AEI1TFZ!BEz)E&q)OK6~U z-~Vbz(u|45C%oJ?Yf%I$t0@8EVjdU|f9{7j*%gQ&}%>vuM73Mm}sxp(ezED`6@4|767&^GtUdS+Rs z{n&x+tu%bhgyUtV&$2NBur+J)R zo6WYlo(45;%J~(iN=w<6*1Sd6P(5ly>!!p)#;f@*BB=;TIE5m{Wrd$|f4s)uTF(qh zh@U^Y_I|>%)YJZmFasOxNkvnf?c>%1yCX8JXuYT79b9FiIqQDfR zSeer?(S02^r7S*%C@0lLbS<+l(Dq1ZEDB!exKpI6ROjDa_Qhts!~#}%s-|sttVgk# zIQF4q9wsx?df&A-z_AqC(p~K2%s!pNeBJgqz6~{KaC7x6WW29FkIqsnxON*Ccy@Ft zE51XvhM+*qO|R7U>iVjeJiYj^MmrgImopG&lKLc{oZ?De(p@4DHTv>bg71S7(Bg^w zC(V_DIX*10i94ox{sTrEeKJ#?zJb(|Ux4cC+7**I#+oZj*b+_fwt}e{c|)xvWhA#x zy+cb@O^l1($JnO%S=0@uX{q|AHkPUSqA?=II+)6J{r%j(M*BYd=Z8rxC8mgaaB*F# z&>r#(!Buu~`}DsGq~CSEawA|-dxlal^aRT>tNAdGdMuC68&a~Z^LEX!57W4{aaR?m+mQg_0|1LGrGb&df z&46_WbW=2mxdh~?)|2zwa%?|!S)zxf^vj-kUZ$$5CI~}YjMm!goO)#fGtX*zHx!%b z;jmsz;qEf16-WJBD5N&X zkrGXCTh;i8vLaq*-oIcyVE5!w9I?eQ-lF-_%wsSm8E$1GwO>6pFXy>jZ#mI5eHc5+ z?TFNv-nUmz0{XccF`>KHQOq-rMCr{XA`K4T$}#^;q^E&=a5kusQX@+VOWS z_i7fYOt}sq?RGEd+6Afm1ayFl*r>Zb4t*0jfnavmIw^qeoL+aHQ6 z0;}juFvc4RKDTX>ARqtf+F=mJ1ydwHX69F|C-{G0V{-!5Thi;Gr_*Su7neC!zWYZ!brs zGDx>A`dvY9w$&5*A3X6mEq_Z4q?E0rkJ3mj8-Yj$c6Sz<%90RmrTLxN_Kl6vtyJ^^ z?V0ryn!_^ofpCRXFbl$gRd)>q1vD&wzl;N*X}m8=;HvRK4ZiEZ!(C4=0fG;%@&O)W z;>l8(!sfSDmHb%3Oh^Y3iH(2S6Of@>+fZosk}$!5uPS%NdZuzb;yW@ASRC1bj3>Pa zeX+TF+iw;8cN|E%b(gey>0alRgzxmG+$^LPHIi=eGSa5;08Z3osu3Zk1PVcl2~;A>}-X*y*3e#tz!ey5Ee$LbH9*AQV_@-F^-vAR8~o7!*Q!4kpV@L?(*6_oV~dK3 zab9{>`DWD-!+(T2g*UcBol*Z&0@T(H{3q;--pc3``vUMA3K|N|Ua}JaH}FHi_{1T@ zgM54o$^(e(jB0H9&s0vt z)%^vL?CM=zRS0SuVK|nEC&dQm;S(HA-R{5)oClRe(6;CV} zjTx;TnDFbDt}})BTmYAEqt@v@I>k^JL=D-tS|^p}geiNu>Quwffxu&#Q)|~dl(|DAKbWu}oAboB>83lAomj4LD+?~>8gGXm zFTwoez0|2)x1!AC2o1Qh9*R3BM0gNT*`6t`p=QMBQD%WkWm`^*RIcvh2SHN~?HAs) z?k6YS$01s9$rO*2{GKvwuZpTLT}(?3m#Aa3T+p^)Z#d){sv;Dx7GkmetE?{|tE9owGZkQ0&ahdvjENSMuM5u%s4`mlvT-fi>n3Yc!5cOF$0bkD zvI84ejI;OCL?<>nWk^d;QsV|jU=_YC-XrBYi}kI=Su++h%I7=grAEPX^S(0Fh<97H zN1M8TH#*ICwWK`l$<&XTeIJf}^(QPKT*;OZ6><~yr6|x#L7{TOa$Xy)Y@<$ijU830 zTUyv#xxO#-QdRcYVSg)Z1&X4~ru4KlsH-<5*rgA+p8C}6He(X=49#oSPS*2xC=;W= zMf`~|-5&VOqLusj?_D1|>%_fz2Q0zg0?xjqA506ewzOeZsi>B$)UO3itbSci5VK^= zJ2fv@#zk5e8IRk|*{V&c`9V$1X{M=K^th;f@fr6fcG3U|iNF8&73Q^NK1zheWit$6 z*+Bw15D%X2K`Rm&Z%^Rf7?L z(|a$os&l^hEn}%-^C{9U3e=Peq|-zc$@O$J2N`zPBttImehQXs*M&v**uTaDQ-!u)2loJQi0j{-MH)|y1yi!!n~oh`;@z|-@^CMD z%0PFll}_z_>6*AicR6KqFsy4V0u%9VU4u)VYXKTUHpuFZxKbu~Hh&(SIcMI@Te~8? zP2?p`lT0-xzhJ?s?DCi;_u;0kSsIWVDJ|1f&vvOd1K| z@1O_Dm#NhSFrh5nk|`aG{?h}m!0s?-8k!D4jE!bR&ye!i(#PB!_gt-Qjmv)R zb-AqT9siY)(y}k`@Ha6RXUSgpQPC+P=&A)P=-a_!M$tI{8>@4u`*`_c3)O7 zJCn5{eP)aG^W(<{!0S~4{CnhI@q;%*PdEVicr>ZsVThrwe*aRm5`sTIG2D7M-g2O28O0;>$-j}?})#{ zZB_5*>38f{RQ4S$GIbYOA|EXcuOJO4fMz=V*b7Z{m~C8uq|T{5Ydb*kjV2>r4|T2S zGTv{lu|6FY;~&*5QQps(ugr^StgFjneM#7VJD%d}7IgLKfjxIR&hBGonoD*sxoIj4 zBf|4*dGG+1b*;A$Gvtl;bcfOh^ir%K3mkgrQw7Xv{OZ2Vrp@ujnT?qIU?Jo zk%(P1u27e}*6}Ry83*Ix?@Uw~FHB3TNg>Ea(2RKB^o}N1PxKjeENsZatF=VY9z`g^ znJ$t{FWZ|%HwFWnQ$hyQfmco89pw_2J4*9;rdN5CR-~YIK=)CGFxJPZ6Cz36_ zKVNw3`vvWcg!D-J4pqvil?u)r##SH_v=p+RyPl34L{)}`1XbyXLyT|Ka~|8_-2ReD^c0ODisMJsb>f>!FIwJ!$W%$0ik^&k)h*>bL@-FshRSOLtjrJ*qD!dk}H zs_YrzrB=QlJ)Q*J`K-k}+gtFy#k?4*Y1d}F)mgTA0ny{|g^mQxYf*a0U(WSIxWGaC;v`iOrIn!bR%VtaogPzG?4`OQ0x8uPc zLtJjW%f9zN6+in?Jc282$=o|eZsw0o?)yF&PZh3pV+DG?e5PBC^o*XFW4mF`-o(zS zr3V_)>gLR0;*V0$abgOtp}OI@V7|0azX)9?U?w#yWVvd%Hw`;V@a`rO-0NkIIlbT= zL+ZCZwgBMYdwPJLgM7k*Lc+a(;CIWbf|m{gh^U7EUtxM2m>kd(ng~~O%1K7z+1D8j zGdAS)Q^sGak*>bOG910?BNVQcFhfWx5_RLRkAzla9?_``Od(5m6rW&Md)_97$>gS2 zX^^?Iu2&9;TJfrhLP|yebJz1YGE=`5+}RIzyQ2UD?%!T{ejAQ zNdQx)WHJ!L*qNnDZQV=*gW|dNUqGaD;p4}hYm-&GVuy{>0#BFuE>tMPC%4XP1`pIq zl$6sY%!(f(d4V)->B;;jY zcx&;+=Cj>cKTnP<``w;PJj2&M_wj~eWuy3Ll+lY|;TL!PwH@^)r>8jRsB1WcmqY}aI zRn+zTtUJ_t%&MK!+1Fdmjj6>J>gq<_G10>@spHl)X{;c3iK}ho^DpyTuCN%QljeH< zOfebF?zEsxd+&jt<>eJ|`Q28&$_@=LQ6Bhs=Su{4X2XP`cI#h-V~2%3L&AfFoO57o z`A?+VIl;t{lWMID33C=)-x*=2zAseKgjSpKz6?95mmhH{4Rk`mVZFn7L>c#*woPP@b&y!X8tOXIMFV8}w+aJ8- zdXc3PV17KU)60RD8IhKnqCi~W>3bWK8BjXtNrytA^}T^JH;U_4A5QS(c$&F!`ruEb zHNyHlS~(S<^&hE8kI0QXZ4AV(8j)bC|P|g z(-)1%xIIinYOLvLhpa3-MgC}Mp_>}#XzCAjYKhRBEt`dByE94}%;qySwQC;7VGbN> zRZmSVMMY<&W}3zQl?w3vRrm{7l#2WX__+K62G45s7uYP`t+AaSPlDMh7NI7EE$qo9 zY&qG^lo02?Qe2{|3 z@iCSIWi|g~%-->G;eQ3*3;2G6nS$c_ zTfr5O1^s~GXMw0P50Rs~Xe{Tn@OIaq#n05~nN?kD>?4@PgWHp$?=%`?#|4<@*H=jqOG6E@TWR7zemal^BP; z@MFP_vZhol5F<5Bh@1zdyXTaK7=ik}V`a`gW%-Mm1@rMq%w~&>O=rlS$cJ~(_5O=g zHQSVsvn+&qEli}gm1$v~F~2<7%}{d`x4A)~~!bdB*URqnn@%8}2s`!To#-_4`0nE#KxHvwzvTHA)Pw%SQ7 z0*Z{jSV2LcF@$-rEkj!qC?|w41vF@YU_hn-VbbHVG6<9+LlTBIXn+Jl5io`jPzj)n z4IxAl2r|nMX2Oi$2G8kf&-;Gwf4=Mg{{Q-~|N8c&d+(Js?9E=!UVE+Qxu5%aCCqSz zBP`d~xwn()UMwqHOkE^RkKx=<9Pqh$5rIn(oQ@?TOL8^wVC^buft3vu3^&(BmQ-*~i z6x5cuaqu_7-y)?Uy87QWA^^QFSTDITIAXK37DKAnA#I#~5Tb!8Te!X;lt-n7)py+U z$_ZsxL@%E_VLsL?=6T)6QWx;pf>? za&lHp;>XOi)Z#$Var-Gsn!n!Qz4UKLw0qGEBD=>zYHWXF%Ib8hZ@;a-H~j9yfqBTA z7$x2MyP6#;?qNe|ei5@Fa{<@fIzz56F1AGP7 zF7bT5K+t|;zB*plfrB6K;5hz;R`2<1aU+WQgwp9{$8$CS@dNrZ?(XEh+0-fXyU^wK zFyS7SR;i}CBf{3Au?3SqY3CKGWSsmlBG&3kb51lEHX6HG%YMR&F)5>8n#JKGL~M|P zf-AhcQ=PXPxKNnhtnNkY{%{N0J)i01kl_Qpj4*kV-g1sh8CQ5b6eLA}Wz5C?7wD~X zJkYXq@E+&8`cIIPIubHUq^p`*fTx`sAEGWZk-}qJ`oFE;b`^lb9!2Wgaw}vpZlF0n zjGgsT$sVodP*fDQHqP_A(b5!ZWb6El-AbNeM(z4ST(xCX1 zA4%+8oV)7e7*>1`JDproO`*|}#UUCqg^hO|)v{*izvVQkY@Ru3F2ng<6O#S32iwrA z>{=uu9Aw3g7P>}9A1qx=R0!3~;F9jtOMQ*L>6vv2VqJ48I8ha{lQc=&dBH^LiiV!k zED}O|YF&}RBnl0iQXEYy`e<82%TpFeo!&5=dC|KXiw`TM-m8yAmZrv7)ihfQ745o~ z6>6kk%pZS49aQ4k;b5Q|yO@hMHxCHSMx82M`8fCL1Oc0eCr#DjD@r*vTUlx?TkDBP zzfh4RBei^l?{`5@M55H`Q}8rmhS_0gYj0?TSKXcI75AQ1EC|Es8d^sNPEbvgs4@P5 zq=fjy6Mc6pf{5m%tHN+g?G~Kv&~o6a7o`sTeZpVeT-fRDLDqr{Z-B_Jfalc3I zl0heF?y6AP`SZP7b$pO;>A}KdLvj{YT3_B?<1RTbVtd1mQ_uuEJI7KB1F|{rweb0z zy^Yk}swWla=A^R$UYwYyw6% zR&i^1wK&l2;0gzA_OhRCg;>!w%x;s58||^xZEjF*qDl--T(~gT1)=AhrPWOl#~C`h z35705=jR9devK@^cWEY)hX8*UH%ZT+^16SD&D1ewieuSZ7?d$Jv1_2009=~;F#co>>E zp0-<y;D5^nuq=ap8r^j{&&aA(`QRt@d8u8;ROPsmBk~MiqSPX z4-v73HQE&$6MF7M=xWfbs^0P(D{Z%OQ&7i8k4}^ zj6_w0l+ZV<;Oim^IUMg-0k+$cc!jML-T!d*Nen*RpcAiCmg1j-rs)s?CNi#bKKMz4 zW@|@lGsh|FTiS$dibN@+7Enw`l+y`SHcsCkxoQ7_iR(p$i|z;g0EFk`$;#T3 zqZi=fKQ*4z^pjBS%zPz53oC5^(M}G&+#dq@hE(yzv zZQd8>=zVc^Km()&|4e_GcV%7)5dQC?QUGy&aPo(Dl?z7pUWI>Te!Jgt_MbBk1v(h+ zU#NfsG}rTK@loIcl`DHS8+!mF^&eBkCqkT``A#`WY*gRMeRukcCUI+%@04Zqy8h0o zwo4~Mw2mY`kd6YiZ|i~ZE8CFWEM~@DD?q(>S;Iiq*=BJo&+r^t5 zpf}qdC0Gv)5kq{!&?LD!)A9U#&Aft*;^S_cVR3w0e*LV$SDh7Mq&Z})qRl`EUb}33 zY$AzX9w8z2XL)i|8xCncq)qz0mHUjNKKEoeX&uA%t*WO?KYQ__jUhnl5mR&q z+Zs9ujs_5?Asy?Zs29wN83N;%u=$9&s!VK0hZLsN*+y{e{>gvycF#{3ZBt@@?;>Oe zu4eQxq~m(5`$mnRUx3vm=%rv7o=oCW@^-!nt1`%3q&(a1zT(N(e?c9jKc3EGD>c6= zAraQ0ttB_DPnxF5hUmpX-u~fgE-#y(v#C6lOogxubIlMW@*xP~_*RZ}rMhyU67{k- zbYxWwE?%R7MlgOcvy)B2%56J>+>G}*#x?A!(6r>xIK!Q$*TPaXnPjX8osGNZ+V&`f z{?UJjo&xi(qxru0Mw&-nsNbw`^^#3n()FKp9h)~}qzGtqN5s_+LS1a&YS0+{A6b~e zml7Ibv(>RRvU;I=I#V_FNY_lzaFIZFKmB81TGx#K|2)}d8vC&5heX$czV0Slnmtf@ zYOk{X;Q4Lv=0k-C74K@F8@vvrAE^3;*Y&UauYUV3=|=fS?Vi2bUp`<1etQ3G?MrG! z!~V5DAK9z)O&W;#uHM|^gp)ge(f>Z!;mjXOmsC~%sdd#@{g6LiP4)JllSu>lUbdg^ zmO1TT<5aI&{QlqI2HLyz2dY@{yURrF7drIwpOg6=j;Veh4=lr8PARH=eIDJPJd~T* zg7Ki3q!m9sqzbqe@jrd{%{-9zkDmE=j_=DU*&nN>D1OkQx>$j!e7tcVEC_uv#vLG~`-${V6>y6OT?PSL6TI?(1*PW#$fl29!wGF#* zyJ|6(pUGDxH^m^XT|v^Y#@9qmRN8f(eR@|EDJF`BDU;xd3rUNClGg*Y1v>wYV8d84 z#AF8jDxoC|*`614_L**c&AK^*T#wR`Jj}{|I4N$qSDG$L&D$vvrR@s9oodd$<7NSdf?)L<YL119eIB0C6t)rDYHg6ip?6#^|cD`5V`>39NeC7I9 zl#z%sHf{QtN*mE3v}RRo*|imWj##eW=Vjyj3ecF8s##&!Ie-{ov|W+;9d_|>`L*%U z5wBDt(3IVV;9LedEfW*`ierx-Z7D4}oELiNmu;_`Pw+dgVirC`R2!DMbB;8{AYt@3 zpsl{mxj&RK(-=X0K~Zq6ee2B=k5{Z3fm!Ywwo(_r-R2n4B3%bEZQ%QY zY2UU9hjx2J##%is?BiD`vxLBi_d` zBSC6q`;=%d5FW3X?7%Y#xR63Lky!MhIONUja+bdl!1S>g%p;@{>|KS3ItqXr9>Xbu zCV$gt16P$C<=9VKHi%{9l@;_$!LJ}1HUAzRKTXSHXqPP}FGpV^Ew5zwBbxgeb6I7c zqU7`{%q&u|X47s-u!GT9ORw41Z|DweXD4U)pj7U|Vbc{{AvA2h2Jv`7emS)iea!_G zy(S%?WDwACTG6cN4Zui+qKw&fIG{*^I|4z(^<+r%5%l$b5HC%!iZBiGnDds2wvgsf4u^@Ba{29EvFD)S_4{U4N?G<^((r&e-AVuX93JY zKK%LPn;-rR+}SzSlLM?Lw{+gfy_fQ?p*`>ckh8yi0S6F5Irx1i+)rQ2@m}`a2&+9G zw0~hhhmpr&d8#&t zKG<%5mA4o?f%0CPo*+&ZHdOOl;?!Q7UE0>C3_Sxd-%3spBxai@LTUy3#}tf2rI*+F z%LjU1WA|P`+dtu`*LDaIa92VI_`>+j8>;??-w=Ed<@ukUt0nYpXNd;@u$kX;toXTm z+3N(&JraTU0$GsGmwAnNo4&1irb*X}gK$@VD8$>MDqMU<_LCpP_IJXnDFaVfywEBY6ybQ*tMJ=UA{gsNq#mB$N{anm-0nC$_8bPfFtJ@dG`p6{ZMU zUBv8c9H}&IIu+3jSJ=@A(oG6q^^Qx4;OGcC2sB1Bd+m|A4mLdt1a+}VG|{m27Svel zs!ARfi)nojHonq_nZ-$PU4~g@PA(sgosNuq#fHt8%<<-sP=wasTIQ=1OQ-M#g(73Jk5v3% z*SPyf^CNeiI!D!9uTGhk^TKXCDr0l3iX;f*C8>fi#5^o-!1-3Znl`=KC)vXi&R-@UZ;+CwWTgY@sY>|vE6*b)^;9k6lX{l z8g!nt^lUU+(;rLs)JqnZ&kuuN%l{S`Ns2Bk8`)fmZsM4r1(4=9N#dC0#kGXQR6nPY z@*`gx4yGFWrUZ91vuoiB_AfJ3l81J`G9SHmz{JE=+2x`|!9_XX^!tl)iq}4XrQJW= zV#EfprnBz`IlcF05B#bv_g-q1oSNLJk50(}BJ%U!MPgr&eix5F`z-+2Lc*lK0zalm z?y71*ZMXY&x@fXI;iCBeB>p!%ga0TKd#`4^kTM9ZV@Im~?aPJoOb_WAZg7Dd!tz-MUBlm-3zb8&#{zKwO+7FF^d(G|bF1}LT`DY7%Dt4<< zgq+dJ+}r)=(9+~vQ`u+xxl|u`ergAO3me_dXMoewX3x6!+Oh_2;C+9$#=WEZDsU4D zMOSVEg|^cPJAO+a4*u=~^}F2v7bk}_((b(9ZwT+SchL;3eslQ#t7m+vC%09&u&Nif zaDg#cT-C}(LF^IBc3i&N1%D5IC4we=fW|T-k2ukyQuBm?RNMNLi6|Pt$!`5sVDe&8 zQOogjR4Z-mM7hiS3WT3?OKtc=yc7=ey=V6|I!;dG6JP$S_m)TWT8-t&laWYQKdcfW zn8;MyAptbG6tu}ghK|5YwJ(?6-`3hPza0Lt#9GAmL!7}ftIe!He z?!;^omOV`s{z_TH1sn1jMJZ?#VgYk;n+ypgjN>C=Kx~RUmO0UFCO-%nm|Bo+b-%;j z#nK+G)V)!^jau`&qKWf8ib2&@3bHV=<0ei9bq2!hY%xL+hUi#!hQKGabX4cZr#FR1 z{d|j6g=xBKu6Z)kZWmCm4W^oIYz6k}&6-R|^is4NRfdKagW*3Y&7p#y^8Rk?yI0=2g7e1^t=4y#RE~M z7f*yoxXZngd$s=$5SRU5zW-ObIq-K3`Q8liM}N6PkCE&5caP-kALO`4jySqK(POm(EEt6Yybb2f z!&;0W)r31Gf&%(@KbK2IlNb`lIjT;a#S8NTPZ!?GodEuSHb9f4mS3J2EGZXPCjiZ_ ziq3TZ{VqY*u6lBtIhk2uWW0fksUgx;s>D~Q@93s>YH0cJAq6JoJ4U8j`tkrKgpD0T zK%sWfmc{j_<{&{$QGnGs`lMGAzjnuD7x7XwNV^a~q628EO;(2i{1ZzfBQ-^UF>F2C z{=^$fDUs>QMJRyAd(dCjnR#tHKj(m^8$t`8m^73LRp@)cI3t-QS0eer?}pyc2#XfABO|3w*qcgqEgeqAXkQg=pdy z4&{`U4Ntk9YDcBLR>ERQKj>uNiZyk4QJa>G zDGbUD23+}|aTD-wdw*Sxx9Gx?GXW}v6{wgUTuLK7CMJvgCXXF?*1NnzxlveDih9-| zteG*#)5(#dO6?>XiGt6|8)}UTXyt^Q))Z_(n(+*{G7kZ+M*x10PcO*H_4S5V)eNX@ z5QU{xY3O8D*m$HJ;EW1zk+d6H&%_)zkW_mkvEv{F#BN?uaro2=GxC7_0}tWsn_S4J z*hsJ5WnQZ3=^B~|aVR%_TidHHJwbt^V|11@qrYAB_HYO39($5eZ#9aB+W;wzrh~=ccGQSUHn} zdG`W6m3tqRcI$&zuRa3~`{myM;Ij|DgZ?dzDVvVCm@q?z`Cw@2AqkaghycTGt=ztJe zTFm=2hV8^Peu@aAQBRM58tv0<=KslGY6~(-5GSq=l4YfI9jRLd(sGAp0E63u`{GVh zUoUzmoF2smmrKJh0Vq-JmUuVZXbXZI9d{qCC60n8Mo?U{IX#8nivGqQDq+KYGz=64k`LXsj3ER!PE zpY?&ZTF!e@=XI@J<7xf`e*#9At9djnw}33Yq-AURO$)EuSVO0t6gtK34!5vWm5tNR zB`wb=+We*U8EH~&(kYcOIv@zQ9Gu^QmEWT)p*uPC27JIDo2GMmJJS;SR?auPeHeAZ z$m5yd(HE48uRk8ThF>Y z=o}`9#L!irR$9#QIlOQ^WzNq%wKg)T8W!s;%BTj9*KBNZ@bQH=xYO08P6e(K^3G)S zylJeakW4OmG%+@m&@i7$d*kzRWgx$TFt7Alwli-N;*lDoEKaGwN7%t#U0m&5IFJZ> zU;LL%zQWo}?`|f-ca!Ye#q)02@ef>G%s5fKc=Y|f@!5-8;_@_Y@f_(o5-r8+GodYf zC?Ytp5Jj_PL7pC-PQ3%U`LU>Kr2>^_>V z^-QR1Wa^wxSPWYZ2@|x3*Cv;c%BE}wxvjoPwUD%0jZf}I(*&wHRZ$*IT&DLGtT7*j z$FOtW03;=;+4e3P)I|*|Ki(`WU%6?68F`6Fz@4D?j--T5)Xfy~v&gvtL$e*>g1&-! z&&|Z@-ILF1$@YN$aIGEgr(I7L8VSP&q%sUW8wy0W*e?D}Gjev#D0OyGUP(fCeZdEV zFyou6R&3=k@1^}1EHM_VX~oYfpL({`-fkv2*eYY|Dozq>y^C|`_s6bWgStQxql^cL z#W?1Sv-=cpTJ`9A3$oi;rYp0mBlG8ZP{|8+;!ngyY97mVskO}n-D6$2(3Mr{-ua9_ zO3;ROoM)6TFFl-G*aM{Wkk|p6z~Qe!F~~~&CwGEnG>2LhIz2k3Hnboiebd^ zmLj}#OSkt%jWjAX;#2kOq0^%BhMO|PMm(0K(^e0rt=|8lf3kJ!|}v;H~AjMd+NVgVEYP(m{VpzuOkSrW~3Mrpp@ z@g)bqtWRW=E$9?SC0EWUEuM*Ra8r&H7>lImh6vi&LidvR$0Ff(kXG~7*rkOjtyDLiPT#3dxXM_W zRKn=WRit{p%u9`QKEnw1DEf#vk#W?V!2EPUmfNHna^ttf*vGn71G8J-(YN4_mw_iU ze#GhQ>(0Z;GqvF!z#Lebc$YBPHal1{uFM0u4H?J|r%qda>85ow_G=a;u<>d2VyqrR z@~j;oo_onevW)pqJFdN@bb7LOOI21>@O;}cJf#{ZV0g0=b-yP~Q*pA0a6Eoj*q=<| z_&qfGvg)Zi$nWlj2sKZX(i9Q!5vynx=L>cG0!j3V38HvHGUB8R@FacQVpx?d_Nqc! zlge1AI%$_U1R!fiXz2E89&NVhdg%W{#C+>`-R1ZM(~VnLo7X4J`V_fw?ZtKEO*SR9$h$k#GO}siAik@pH~`3 zC=$kmC=oV=Qb#ATXa!RlCyS2MtLGdBG3ED{@!-oIc5Uj*`YL$1O&7yPVgwK zmOUPtII1QSG^=>#eg^nOm$^BZWR<+C)LB`J&E{t(RugOO!uX(eWnf$e^9dU49j(>4 zPb)F12=a-kl=1=2-kPLXiqA$UI4!EJFp7?B;|Yfna&MQqH~NE*cZ!U7CUYUqo@IF= zzeKIW3aQW3ZIja;x;H;1yG5{TeVVCc;pv}PG(BQbt*nk4E56-o=)$=1FkNp%!`5wh zo36!WT=i`pr?In}k^Zyc2xyoF!JV~+bT>>Z(n+rAI`vpY7BgL9o2Z-DI4PKZ!*Qy8XpSAvPu};*h;VB zyVgW^0mG9`$iJ?JuxGn2BV0S+3JO~HnvR#uw*M^>+A)wnsI6al!K88T$=HWK7B9hF z;hoG4is=R$bVzu)Y(i=`~bDBKovTb_J;GUf?+2P3U7o1oV zf7Mx78OuJxt5(sN+W}Xamr2hBEI$ZN7%vZUHuYfjMgk2RrL5f^0FmfEI4_n1JbG+4mhOORx;?Kis4?Ub8=(LZOLTK8>RJ~0#b3%1%{EAAt@?RdS&150a}{CN2?~}%LKH?H^Ot}4gUT<5_nti% z`q4!tcl+Pde>?#c0S(BNrr)X9{=AmCIOFY`>t?;9HxyTSta(NN$B#pB{M=~3ljc!+ z!NVYaTF?dBqY$k7PQ~#mhCN6zjFkdJEGb}$&Ls~`jA2JKTWf1`)55wCbyB#=1R7n+ zs0)}#PF_flK73hSzOme=xw_1=i3!fkxO)=hDy<3W)=bF1XKv-_cBb45S+B6%a=hX zk!ODkyI^3CXV^Cc47Css>sWLhRX}1}3_J_Z%*G^nd1)MtnQ@-3wbdtPPr*X83PVhM9)J_XpF8ASNnMzumPFzDecXWz=f ze(A5N_^!O2c--h!rIt>!i?W!8CIFvjF1G_$^VIx5`l{DSq555PmJciKj<3N?O{ewg zaYf5^Q(4OSHBxw}kvj)V!cqs8I)IrL9O}RaHLSw5lFS#MI)BDbJ<*slI>4o+f-|8` zf^Z%X&9DaGt8bb-;<;L02Z_@QuL`;1PBsk|0N*(mS3AchaG&YnKn*X&)brPdYO!a> zN&pn8<`b4Z+|sTi+ztVDTGR}kXr?YIw-YdAdy(FYHjaNSjYg-W2Mh&gxwb4X-NX-b z7v+N;bdQdW5A#3?}C= z315^oaoJ%qfQnEjFqvsA?NoN!iWqu9PYR+M`p!l99};x6N!LkufM$%Am$sIdEYU5w zfBRQ?d0Atyq<}UqL%_^VU<59UIHj(|&AjmSbhffTBJEb9c8fCDbPjIJwOg96vFm_J zC)dBR{A}7Sa+cNE$?`w8>tt<$lZ;aX)4$0h=A})T7N*DQy0*6VBqj;KX3H>$9XGNt zFe#%8bD+TjaI5=)ZvD{wRaEF4Uiqpg5M(E2Dg}d|0@p~7p%;||;i}~wmam>{Sf3wc z1m=-AI@%ZjDcAGmtHbWkMh4=_$x5d3e!hva6=T@Y^Uj2Mp+USD+;8RZvGk~{ zg6c6iRAQOvu!NQ2a6W2xm+Np{OiFLsl@_V)AC4JF*>@+Ly>q z37wxm9wa?WqQ+oKC3*B{iFTad;wy~@p#+_WQSe&CR5PQ?W?2d0+5*^+xhu&FQxn5f znZrZ#ji|^=c`A<$JIO9Uh*1E<=jF^34c^6Ceoy&;-3HqYXGse zk}H&D%{oERr~(UeL4k*Yu~bn*2R{@~iOM*7?l4*dX)n}g=MwLBx;b6N3{lS}XUs|A zZsP6-(RK;8skwcT7B!ny0hHz_AjWe)4+u6TUCslB!{&yw^qji+z%{9;D)!eG3{277 zj5sm190wYne#PM`+PANr<+6R`ttI;}Y;p<lZ)GSYo1NH4#&?!+Rln}Y(;qz|M55SzgZNd zYg6k7%G#5rqcku?WdjZBkt;Y(fX0H^a-)cWJMB>dU>}ZF9{c z&S#>4GuItMubhzQTCDE)e6e&M)yux5h6d(vAh#8+9Z#)`KPqb+5mq(#VX1)L!~dtc z(3zJ^r2$Gq0M(S_pHn8nuO1FmRkgtletqnM;V3c#V0N=Zg1{hV#<#gXyeFyJl7isf z1juGptWR5g83_+K4qAjXh^3mEH{@SiH18U;GKnblOtZduyz+oFAcaz~fk77r<0uI} ze-S(#QNM?UsP*HGBu&-12xZ^o670G0k^qr^d}B$TWzy?N!~ZBbX!?kQM)xA^6}<;2 zIx*DK(IsROS|?r$8M%dDe1xS5P_=X(n(PxPK!A*;>&q9-pY>G)p|WSmZU9&R%St`E zi4^8Cs?N8@;FFRv)@|k%)%OS|H6&ZG^;Q}eX1NT7gKFj<^Of!9pICm@%gzdGDKbA% zjxY@@i2-IwTbm(Z=G^ev5jHB_7Xl#XwyTZ37%3YRT3LFQGBiZ?vqoNIIpa*FD&5U+ zr1@mjS!t|gZUs+?R}Xxd1q$_28_o1fYVK88l*D6I$}omgg2!Tdq1;&ON8u<+Dj_~T z+jp~Fkzm`O#Dqwn?pvr95iNQ&0RbCS>AjZ)e4Ba>(?s#F?_UA+&4dt7AEv5 zZ-NYY-u*8m1&>oO=(4o6q=LGLoRTKSm(j<%uaP4hK9dW~r9OvA2!L#tGq8VUHw7mDVoF}T}^@E^S z-D~k@*U)un{I-hUcl?p4d*^X)<+h$2f?WtGu+_wktnM@A9WUT)?^f{__ zUQ*JO!pHJ=pXY!1@U@QsbYZ#N^F@K9w)S8o*V#)TvTj&EUJm}=6&Z%UOqNP;rc4shLWwT2o&Lw!fJu+~GhXovUjd0FZ@qg)gT6`?x zQ;WHACuNiBC2XyvlvKX88c*iN0JHi$qyTEBr5Tnv- zL@PlE7xaz!5bGHKipHb)F`OgMraTWv^v25EuFZDjF##^~i7gi>Fwax#eqjFepHh0b zOPB2{JU^>aC{6UPzPXq2x1T@Wcj5YHp+BEJ`(sRin+Lu0x4%m~)V_a^Lx++WxlX?j zZxQOs#+m^vm@>Rmd0q{-6n5ESuuCP0x}(x>oy}@=LZrl)&N6_Ivg@nK$>~LB*iFKv zEy4Ccon8l9$zEAhYs?GziG~G~`(W#U3|pk%0ipDbhiS0?KyP>e$IZvUth(QGECp@8 z*|Kb_rm=HSXFR%JF*Df>MGwc6u`(cD45GNw$YjyhUnneoBsa4`(6k@0bTb&@CZ%BX zQx=&eF+?H>Ptz&V@>mEKJnVP_rpi_k)7&(R z$#|AtfwYq|T`(ClPK(n%8M<=5Q223vM|)K0uhSFN_QzRRqD05MBxVR#{QN&&U5pf4 z*%Ah1;n{Yhyj*iv$7@zRz+edN+H&S-`ZzhOy?1?@6;nW6OgNVg;|x+xw{Ds~johBo z%r8IUr&Zr<%hj7mVVRCCY^*M9*sQ|d11}p5<)=IK2#nzh&TIsPkAlQ)@-)=n$g^Va zGNu&>k#RIbft%GR@0AxhbdQwP8WRQhWjntYaeknljjV-kA*2!cfMMGpvI<*;AyNkT8MQCd9;XAUqnK@Nm6>5SV2}dcD1F&VOLf~aCqLHl zk6)7zQz(ARx&8-QuLf4denp4TR>L{zt+j>K!%Sm(ducLTx zI8A*kY^F{iWl#x!zhy8`1Prlg^-}qY(t!R*^tEgLS9zI)E{%4#z-ny3BBfM9=vubi zxDF5_xY-xjuBW3+L5szOf;wCnvU8XNub;088CDpPp0bc+HwkaVs==dI&jj#{m67ivR(^O^$yyu_D#$GE_EOo2tz;9$1F`kbLx9ZZHRcL8jF2yeb3)A_@U52~7~gTCqc zmE8e-ElI8R)orXnsNou&V`ccyG{V;82VeGT&pFu_w&*eZAJrOrGe~7Lb1a=4IE8E) zt3w_ge8$1*u~U7lX;hj?t7vRhVoE0m7oEL}J|J9Nu_8e%W1=ox4+$dY;5QHbvbiW1>UQ!c+{AIH znIPj;2DV_LG8eUZT}Z!cBvZcZLbMBvM3J+CanOMoOM$b=77pB)OMY~7CVCq(7{-`D zkMToH>dComr|xKye!)aaaY6%%5Sg^CPW`2%3*+;_T+i7#q0U&V;r5`3cx+5Aa%RBN z^ov@3jfv9@*PNV9by*za7KwHIkP_$TF~LdqzG?$tx-keCuoQ+n zog9!(j*d2&`Aw%n*Y)|lLc{fr<)v7%n3{29a|;;ykX8pPCT{E^qQFznyC^L-Azn2= z#4;KX6>+ck=O>SiVSCCde`x%hHyaEciSlIF;rLm(@%ef3joCkY_oDN9ADyiP)LK5) zq1XZ717Pg5gTb#Q;`P0)6Uw3FlP4B!>suMk5K+q*p!g7z5_;#?9lF{M9#T%1-bJ^X zngRjLIspW^n#EwDO4~h)8%9_qZ~m4$2LbXA$^uz(!@~i@G4Mg@J6Ite7UzT;!pKjm zQ^Qsyq+q{g?_|IPltd?oXl$eLgKM#OF%xNJucPwPH}JvDafK6$P~794c;S@;g6eg& z%*hSrI_^OgZ1qZrj1ECq0WF1vX5c6mxZ&3WoTimQA!wPp-As>gQGPW(g^K7}5jN(& zl`AedAjA&O)Lcbor{&t8bjfnFXEBB#Amwm7KBzuqp3r)GT5>ClzL=Gj4U0isESKnT9-%>hCtR>JMA9$$wU z13^|GF#_Rk4Flc#(G@9%=j?l z@IU}ug@h|y)Y`l>$k+zRFGLgK*5dpF0+5;K4tYJ?4V6-X9w29eFtL}&JcKQ_jFw=q zX=na%#J6dtT8hjx>9rQ%&B|CCEHM-VA~W#nsA)&ji@Dw@v&d^Ok`b4OE{~DqiCcn} zOE#l7*k`OP!}=mOX9t_-gq5)AGImC1m=1P=rp*XQuLevevo|dy!MAd~vBz(OSG?kO zrOokCg@iKtPiFz%Daz^n7q8>;=um4Oh24uplOuTcAP2spLSNKS=aWCr`u0-)E>`G2 z*ZjvX?>y7mZDv*W9WmaU3r^k3BC7$Iy#HqV7w3y-S$16lyAWoo*^&K_TV4ZIQ-{wJ zE*eMe#n%c6Yki~j_il>`ajk7LaP10@kp|u zK<6;`IwyGPUFY=ty>p!ZpYJLIn}76o{olpppLbHT`TKpr--K~v{+klV!HQ$aQnsn>c-fM`&PklUorRlO&_^mOn9E4UiC)#{=dbyu5uIL zNxL+f{&^>FwZO1T!|D}}GuuBt6y()fl>1HDAmC2ReN$I6?FJ5pF}m49Z2w@~21}n- z@K&x;Up|fNzENk4HLnHiNg`y(R(qy`3<#cBz&X%$jzD3T4qvFKx-jco=!2^mNU0;NEJ0!LgBN!2p zQpU)mC8v}XeRT8t?`EheF?8BFAfCWi7Qll#gWyBC2v<8GGH2YEj?L|TQh~jxK9vNJ z=p`4hN_w;|A8fVl`C5e9Jv2O{;%Ob>P*n=$+lSZ4jNwd(7olrWVf}W^Vs35vkzw`J zyt;;}pa$M(8UWT6Do$BdfuOr!`E1)Mqh|_Wg%CthzF+HGIr3s5-p3)~+H8G$tByp#dL;*Lqpnu0NFML z7+aGs5_;asb+o>psE>Fn_c~)UW4q&q<5I2f?uUTo`G2%`E#Oe5eg7Fku@w=!P04Db zD6KHVB6`=M-3;bsNQ^|0!8o6$lIpE>2*}88dhYwV@BjSo)AQWt|L;G^h>_Yd2Zom&&zOWUw2Fi^6-VSC ziLR1{m_yr(rk> zH4gy9miJ^&P-uNjJgGO9gp25~+phbE*J06PO|T5LIBe;#x8QTZ=h8qcTplEH8?v$Sz?ruu74|{12>!FIT`y5sd_zs!masn8CdX+_KU2{CfAQMRFw6qUud3V z4XD5;8NPeKzE7>=pyjTJ4tu&USPTNA)zb3k8?_2eUZMPt%&m*C-CM~yscfjGjK|UA z2mnRByI^NTs~T3?L8-^(lHQ0_vN6{_DpQrEX31(OuRPo16!3J^=B$p~kdaN%IfX%G zeaj3>HK6XMN-t2)H(qG>oj+8W+`qvn??L737H4rHkn(JcJVMN%A^K)e86z%k>-fRA{Pv&)--J3|v z(R#dqzam{KAJs^8blgo-pzd%tzIM22tB{CC+_e&AFP|ng{ibL!Y(+nSKvqh>IQ+Q%DHlFBDUd7g0BQh8A;Wchqm>F zaDqH)Gr1GuLi~m~H*ti^8~kD-TK4o@+ZBD%q-oKv%&so zghBm=U#PFvN9ZWz`vvwDVz3k+%WV#)!te&8Q)3Y=wVW2@sqvFUWBo_@1kx+n{AiOs z810Vwk(`+4oH$r5t-X?jvC_Ee)ot#CA*-1+8SA-KdY8lmbWvpyP26(Bz3IJ@V^838 z!#b}l#l(9RE=4ALkqRV5YHnO~C7h*vucoKg&i4y;K#V1e?K(VUAuWjrN9C)TMZ4U& zPAA>Q~gD2ZR#+qX^V|za_y~S%&RVUTNTp*iox!_nY?bN zbH)^#xuoLJW30+YwG7H(qnGu4IYf7O7Rh}O%(}EjF{T_vaTG>e6i!ZI9y^ZO>S?4-b3rM5f$+q<3hqkv%@bAe98WLShYeC2o9;J85Qh) z+||Rd58vF{Y9DufgpmeL{SH06fF|3Zj5i zW~sZFczaL&1|i|DzGm^{hUjFRk7E;izsfH9CN3r>RKGIDQDLA+>veMojTn~G9T!I~ z*m>WZHV--DUHsIxD36K!d>YR5M?9j@eSGq3@m8VqQxQom!-CX^!R?xog~nI7@h=dm z?N3kz93=p0qr8YfcG_o|X6fu-0K%U2kIRr)5+dCz9y!d+d z`U_5-s_XSacZ;fI!*qrF*#x?$KFuBh0LMZ|c|NTv#Houek>1JT*mm5G?b6)VDq7s> zyB)N&S;_>}=|Pakz&ASLuMCG-@MCpZ9`st3{k^3b8(Jvz5TN55b!HyAQmbOzDy~iN zefg&Qd_<~aAJIx`AKEtF&)qsq4ncE7aKIMt{Uk#nyV{c2Evm;J4>ejzW}V6)1a{N? z?K{DyyW0!rzULb%W;ExnX;@}yr=GOVS9y$kn0Jcmbi>fLsKIGSzU$cNgXhzCM?BQ& zk}O{ia~`5rq{p`IiVf)`0(4v7vBvGhmYCpCku7t{F~)dIm8;R#quKi~xH_A3fPLaHl6gGX%&Le=9rsqUmvYMLAt^mNpUT;)_zz1jxz8qvfUq?X70T%&n+2 zr!o_<@>gdF!_ynv@5++VHhN|{0RxqHO#T7%Vug>MYM+y>taUCz_GUlEAm!q$XbOp> z7Xht)6tF5=KY8&VZq3v@bz|8)M>+Yz)>l#UQ0&0QN?MgirpY}nq0(?4sR8V;ex zQe$UQg8kwhqwifRM~f8zb?wREaL230Lh`BDFYXMGs2LHq*oYnCg$CQyyjW9|4xSPM z<63R`8;8%g$H}n+9OqDj(qm-b6CCb7AW6%9qnJb@-6i48%mZqTCIgWUk-q)D1T{^o z&+mFUGZ1on>>3%kF7bP#4LFi)*lgcKN<0VFNAef+=uTEYqi-A&?IfJGf9@nfAL*YC z_HG#49n+GyRoKyaNKuJgLfQ}{zpj7sC~8&-K&IyAyD-}Dhb?D0cSAXjA@OTReY8b5 zg1$Crhrc(BWOamF$V<0*Cbq;fjM(CLtiu8kef1iI(NVAK#|P!|C*K@EZtOhaM>^9? zFKo@hYfy86Ov5Rlq|3Q0-2s0@2zj%&SrI=W2&B)#{T1aycu$ZM>hnQlYF(fpbM<3-QtBubaP&Tu-tuf5a$bCGlr#~Z!w_Y=|n646o!#rfV;M15E@=peM2W{M(1W@jjD|{aubnSrk0zdXYv#O zkALjw-u7AZ_k)nYCW%e@Ux^)uOxGMV<&C=6pVx!=={Ey727oJr;P(_it}A{LHu{?= z@!L$6KYymX{OR}Z|7WkfoSB;1S){mSt^0GFq;p|-P~6d8`V+XFj)G^~8|7{Tyn&@q zzlCC1x?`TFSBEn#YTTY???2@eHI=vCwpe{g&LOuk{<@{*?7kKm9bqu^-6(yIyJs%1 zs845DC`xBs@*MWqXpt{8qc{%*YX#0jx3k~$&qFunp<-z*0MBYQ>wE6$Y#sk_#vJsj zXYN7u0DbQ2JkVA$G7lYh8e`8xhbK%oJ}8>xFOQ!V(MivEWAk(9T;x{g_^T2p+2=1h z&9Ix(nUs6z%7&3227{%Yx#7>Gqq#5Pj2yqz!K0n$PG7@{8Mi4oROqBm74BJ{@prlb zA``@K$8QHg-#XawpD;BCkQ(|MA=D+PSyxvQCV`LuFicV>L=n(I)FsrVRZS)#aA*~R z)qAOD#Z3g2k*VE174a&x3yxc!N8 z05~`$cIG^XPd=bk3lb8#_VDNdCAT9vS+ww(z;3VPXQj!)|(o+W1VPw@*NhZ zcM#0X;!T&v?a(r_E)*aeRjO=Q7}FIm3wV$7ZQ1tskgd`iw(Bc2%mRH-0a6G_08*r` zf@O~q`1mT|7vQ&C*Fr#fjqs{CDMS1}bj(y;*#NJ8TtX#f)VOo?p0uin4M?XSPfE8t zC-KzFBj32f-K=u+>k+T&E5@yMy)(+ELq^k-$dW!TmM%<77q6~Ba}PcsYA$nX*z-D) zY8;hx)b%^c;6Ii^&jhB0Sr8dAp&UlpP_z3$89+{1%uADM~)z}f{`v7vM_DX>HS z1^`3Q8>+N_f;a|uwlZf;OEll74oY?mf{_jii)bsk;WIqblB{@n^h#=D<)h+kTRjY` zTDjqz#S_P?7m5B`hK$vulpKsOxRh6kLC1dLuTEiA%vGJ+Mlsnj2~-{MHXaYP=7#1x zoAe2d-}^?x?EpPz40T#ZM{|G6b%l;R*BUQ-5+YOIZ2ZiO(~XzgMHfA5>Jsayrz>^Ys728*X(!53&MCDZUG--Zk%eNa`rErW+S=PDHeSASMRBzC zVR1G%XzXof?p|>C!sB+M)KpsH1n7+X`wDFVz^fml7UgMUc6VBDG=w;Nz67UnG(9Md zRs%4QhJLC+5rHIDm|JO67?Tzn+dZIC?;lCl7BXN)`+rx$Bv-cL7)C8!v9aAv>9yOm z&Te@&qkR)6m1fH-$sr8p*^_Ye@>5+^}f(SD=B>!^preK~*s05zhhYY{y`zii&t;Skm z8DY`20DA-EE&&QoTK|RF)fc8CI^r=aWpOG?%~iW6H~wE(C406sVDWl zqx{07^}Y3NvhT6=29&!9`+dYA$=JUsKAnWresV$G3- zhY#Ms5>I*>q2TPk{bRRUyYkf&H@}#QruN3R-G6Dr zh^8P1=!}Rg#qj9bmboiABVHNU4j1vHW|9jne5~B1{-Gzv?A|mXU$Ur#)VhtvJ!O&B z+5T{{GE=WP%q7!HKInRr;hySa+b!0MTppVlAgT_S8%Q6(4z(#xSK!izYE>ja@UzhP zBSQY|M&U#om7A?ab2|e@QDy^Lne2*tdyXbPB>TCUNm%C?p;5~1Vq$l`m$sEX%jlecUm>R%h6WJs#08?CpzZHTC|l zPrpKRK0OB4-I}p|oYvRQCZ#EEpg)Uo$=+;9)Uz&PsVHNW#l_$Ofseki zy-AF}=%DvB)4d;=e_G8peJsp5eZ20WrWw4-pv`6cJ2vB1t;cOIxw)O()MsT$3bV>m z_HEyVfm4MVc~$2Ooii@`aE7@KDCCqYM(t?&ekJ|N)03r^MXH9CXGxs0i-yBTN{UN! zqK$0Auc3oFS(s{7qiU_O?x~l3b=!^|tz%%7()^_1ai5TzKFOE|2Y`9Ssx)3c?k-!HdmFYcN6G4NHlo+$9Q;`!zK3ibV9S ztgI~PrR-B>)7EBKw6Z>0ZE`HqxyeZ-b-;>a@C&_(L7>+}g-1zt_guqRO0djw;;}7p zZJ+g7jB>AR@l4J?#%!`QYA^>t1cr#|mp~f*;#VGX6c&O0v)mvM=CJQl7a)?;k_p zkI*P79Q%~EbH}o$^YI%$>x=bQNN*uuYfwc236cIGl!TF6rHN|w9ygVz2uF&LF-2#i zu&aq*X}XeCa$H6>IJ#&&{qn%*qRi|ya!{O`(C@Y|!*cbC#f9rdl(Ii1mW+3{n2 zXYWq&Dttd>>H~$u|6f#7f(uI(&p(hO5WJMBC5X`v|Kl&BSgE0yS{Tq%E-nbidVDwm zf83V;@PGaa3RuYdxxV8J{QHS{A#d#vu1x$FhOX2HAMoT&z?|$B>g)O{67lgSV5^91 z1rq!Bhrvb`R{u0t|4D7NjxAJs`P9LU_6#+oz~4z z3(Ox?a&kS36%pLr+}H>l!AK;u{4!l)y^{S=`{orQ66{QXpnM1p2bIG!GVox&A7voH zvf^KELo$#E1O>Ya!(}TVppr%=4D9aUgY)4siCiCDDIbLCK|N734^+$vm>)t{%Hf0r zHZp{7DE#&XVLslE#}Am5CFd4tR-QZm>3(~O>D#ubfSBJJDF-|K#Q;<>TFMTn{;<=( zXa^DXE`+!yk}ntI!)qW&at#c{iue(!-%A0STKo?RG`C14z!OJd>tlRC1&U%>H3SGw z4kj!0@_6wDUr>4u5L7|gh-57?=XoY9Iajb(n%Hc-zJRpSxUg{Sv;vcrgJ6=T(65WT zymyrMN*@8O5X5sxAazk}u#XLGM#4}veg_3W*}woh{*$_!dGNq6Q!z7N-q#C0R5AsE z%n|0;A9>O77Lq}*uK9xff!kl-*@K-%UQ+^-1vVF2CvyneBPs(ya{YS}puce;cp@Y$ zSRvyo^Goh7SuQ+*4DAw@RVo8|4T8Z=gk1OY1n{QAgXOwAZb9ekKyI3)Zh`xf5#~!+ za;{+iwN)t!kauDJAfLeS0~b;sY7|8v1fUTu-B*Y;q5?c*UR}ic;>KqJQi*t_;tSO0 zymo9C6b8#xx?k7$tq(Y^;EyWi0hWrHnu4|ptqV9c^12>hRGlc`3;fJ{c@g|-Oc!(% zEj_)@{!6=`$8AI}-UPyabB{%ZeB1U0r!l(7XlF_gz`8 z336o>e6IP>g7xduqUAP%Fco*;!SVkIYa!lGw@)STsRTZiz^4-UR05w$;8O{FDuGWW M@KH+uHvjDZ0L(e68UO$Q literal 0 HcmV?d00001