From 0abc68db41028d368482ad0b1e1112285e92ad6d Mon Sep 17 00:00:00 2001 From: M00nF1sh Date: Thu, 1 Feb 2024 16:41:13 -0800 Subject: [PATCH] Deployed 2ce25f4fa to v2.7 with MkDocs 1.1.2 and mike 1.0.0 --- latest/404.html | 6 +- latest/CONTRIBUTING/index.html | 6 +- latest/code-of-conduct/index.html | 6 +- latest/controller-devel/index.html | 6 +- latest/deploy/configurations/index.html | 6 +- latest/deploy/installation/index.html | 6 +- latest/deploy/pod_readiness_gate/index.html | 6 +- latest/deploy/security_groups/index.html | 6 +- latest/deploy/subnet_discovery/index.html | 6 +- .../deploy/upgrade/migrate_v1_v2/index.html | 6 +- latest/examples/echo_server/index.html | 6 +- latest/examples/grpc_server/index.html | 6 +- latest/examples/secrets_access/index.html | 6 +- latest/guide/ingress/annotations/index.html | 6 +- .../guide/ingress/cert_discovery/index.html | 6 +- latest/guide/ingress/ingress_class/index.html | 6 +- latest/guide/ingress/spec/index.html | 6 +- .../integrations/external_dns/index.html | 6 +- latest/guide/service/annotations/index.html | 6 +- latest/guide/service/nlb/index.html | 6 +- .../guide/targetgroupbinding/spec/index.html | 6 +- .../targetgroupbinding/index.html | 6 +- .../tasks/cognito_authentication/index.html | 6 +- .../tasks/migrate_legacy_apps/index.html | 6 +- latest/guide/tasks/ssl_redirect/index.html | 6 +- latest/guide/use_cases/blue_green/index.html | 6 +- latest/guide/use_cases/frontend_sg/index.html | 6 +- .../use_cases/nlb_tls_termination/index.html | 6 +- .../use_cases/self_managed_lb/index.html | 6 +- latest/how-it-works/index.html | 6 +- latest/index.html | 6 +- latest/release/index.html | 6 +- latest/theme_overrides/main.html | 6 +- latest/theme_overrides/partials/header.html | 6 +- .../partials/version-select.html | 6 +- v2.7/404.html | 972 +++++++ v2.7/CONTRIBUTING/index.html | 1088 +++++++ v2.7/assets/images/aws_load_balancer_icon.svg | 7 + v2.7/assets/images/controller-design.png | Bin 0 -> 75747 bytes v2.7/assets/images/favicon.png | Bin 0 -> 1870 bytes v2.7/assets/images/kubernetes_icon.svg | 84 + v2.7/assets/images/subnet-tags.png | Bin 0 -> 38974 bytes .../assets/javascripts/bundle.a1609d9a.min.js | 32 + .../javascripts/bundle.a1609d9a.min.js.map | 7 + .../javascripts/lunr/min/lunr.ar.min.js | 1 + .../javascripts/lunr/min/lunr.da.min.js | 18 + .../javascripts/lunr/min/lunr.de.min.js | 18 + .../javascripts/lunr/min/lunr.du.min.js | 18 + .../javascripts/lunr/min/lunr.es.min.js | 18 + .../javascripts/lunr/min/lunr.fi.min.js | 18 + .../javascripts/lunr/min/lunr.fr.min.js | 18 + .../javascripts/lunr/min/lunr.hu.min.js | 18 + .../javascripts/lunr/min/lunr.it.min.js | 18 + .../javascripts/lunr/min/lunr.ja.min.js | 1 + .../javascripts/lunr/min/lunr.jp.min.js | 1 + .../javascripts/lunr/min/lunr.multi.min.js | 1 + .../javascripts/lunr/min/lunr.nl.min.js | 18 + .../javascripts/lunr/min/lunr.no.min.js | 18 + .../javascripts/lunr/min/lunr.pt.min.js | 18 + .../javascripts/lunr/min/lunr.ro.min.js | 18 + .../javascripts/lunr/min/lunr.ru.min.js | 18 + .../lunr/min/lunr.stemmer.support.min.js | 1 + .../javascripts/lunr/min/lunr.sv.min.js | 18 + .../javascripts/lunr/min/lunr.tr.min.js | 18 + .../javascripts/lunr/min/lunr.vi.min.js | 1 + v2.7/assets/javascripts/lunr/tinyseg.js | 206 ++ v2.7/assets/javascripts/version-select.js | 45 + .../workers/search.d351de03.min.js | 61 + .../workers/search.d351de03.min.js.map | 7 + v2.7/assets/stylesheets/main.bde7dde4.min.css | 2 + .../stylesheets/main.bde7dde4.min.css.map | 1 + .../stylesheets/palette.ef6f36e2.min.css | 2 + .../stylesheets/palette.ef6f36e2.min.css.map | 1 + v2.7/assets/stylesheets/version-select.css | 12 + v2.7/code-of-conduct/index.html | 1006 +++++++ v2.7/controller-devel/index.html | 1141 ++++++++ v2.7/deploy/configurations/index.html | 1703 +++++++++++ v2.7/deploy/installation/index.html | 1536 ++++++++++ v2.7/deploy/pod_readiness_gate/index.html | 1245 ++++++++ v2.7/deploy/security_groups/index.html | 1272 +++++++++ v2.7/deploy/subnet_discovery/index.html | 1185 ++++++++ v2.7/deploy/upgrade/migrate_v1_v2/index.html | 1243 ++++++++ v2.7/examples/2048/2048_full.yaml | 62 + v2.7/examples/2048/2048_full_dualstack.yaml | 63 + v2.7/examples/cognito-ingress-template.yaml | 73 + v2.7/examples/echo_server/index.html | 1516 ++++++++++ .../echoservice/echoserver-deployment.yaml | 21 + .../echoservice/echoserver-ingress.yaml | 20 + .../echoservice/echoserver-namespace.yaml | 4 + .../echoservice/echoserver-service.yaml | 13 + v2.7/examples/external-dns.yaml | 72 + v2.7/examples/grpc/grpcserver-deployment.yaml | 28 + v2.7/examples/grpc/grpcserver-ingress.yaml | 27 + v2.7/examples/grpc/grpcserver-namespace.yaml | 5 + v2.7/examples/grpc/grpcserver-service.yaml | 15 + v2.7/examples/grpc_server/index.html | 1234 ++++++++ v2.7/examples/secrets_access/index.html | 1095 +++++++ v2.7/guide/ingress/annotations/index.html | 2528 +++++++++++++++++ v2.7/guide/ingress/cert_discovery/index.html | 1176 ++++++++ v2.7/guide/ingress/ingress_class/index.html | 1509 ++++++++++ v2.7/guide/ingress/spec/index.html | 1090 +++++++ .../integrations/external_dns/index.html | 1221 ++++++++ v2.7/guide/service/annotations/index.html | 1988 +++++++++++++ v2.7/guide/service/nlb/index.html | 1456 ++++++++++ v2.7/guide/targetgroupbinding/spec/index.html | 1579 ++++++++++ .../targetgroupbinding/index.html | 1237 ++++++++ .../tasks/cognito_authentication/index.html | 1164 ++++++++ .../tasks/migrate_legacy_apps/index.html | 1061 +++++++ v2.7/guide/tasks/ssl_redirect/index.html | 1155 ++++++++ v2.7/guide/use_cases/blue_green/index.html | 1183 ++++++++ v2.7/guide/use_cases/frontend_sg/index.html | 1315 +++++++++ .../nlb_tls_termination/cert_arn.png | Bin 0 -> 234446 bytes .../nlb_tls_termination/dns_record.png | Bin 0 -> 186868 bytes .../use_cases/nlb_tls_termination/fig.jpg | Bin 0 -> 92491 bytes .../use_cases/nlb_tls_termination/index.html | 1311 +++++++++ .../use_cases/self_managed_lb/index.html | 1245 ++++++++ v2.7/how-it-works/index.html | 1213 ++++++++ v2.7/index.html | 1144 ++++++++ v2.7/install/iam_policy.json | 242 ++ v2.7/install/iam_policy_cn.json | 241 ++ v2.7/install/iam_policy_iso.json | 241 ++ v2.7/install/iam_policy_isob.json | 241 ++ v2.7/install/iam_policy_us-gov.json | 242 ++ .../iam_policy_v1_to_v2_additional.json | 36 + v2.7/install/v2_0_0_full.yaml | 573 ++++ v2.7/install/v2_0_1_full.yaml | 573 ++++ v2.7/install/v2_1_0_full.yaml | 581 ++++ v2.7/install/v2_1_2_full.yaml | 581 ++++ v2.7/install/v2_1_3_full.yaml | 581 ++++ v2.7/install/v2_2_0_full.yaml | 975 +++++++ v2.7/install/v2_2_1_full.yaml | 976 +++++++ v2.7/install/v2_2_2_full.yaml | 976 +++++++ v2.7/install/v2_2_3_full.yaml | 976 +++++++ v2.7/install/v2_2_4_full.yaml | 976 +++++++ v2.7/release/index.html | 1036 +++++++ v2.7/search/search_index.json | 1 + v2.7/sitemap.xml | 107 + v2.7/sitemap.xml.gz | Bin 0 -> 208 bytes .../assets/javascripts/version-select.js | 45 + .../assets/stylesheets/version-select.css | 12 + v2.7/theme_overrides/main.html | 11 + v2.7/theme_overrides/partials/header.html | 118 + .../partials/version-select.html | 23 + versions.json | 2 +- 144 files changed, 52427 insertions(+), 106 deletions(-) create mode 100644 v2.7/404.html create mode 100644 v2.7/CONTRIBUTING/index.html create mode 100644 v2.7/assets/images/aws_load_balancer_icon.svg create mode 100644 v2.7/assets/images/controller-design.png create mode 100644 v2.7/assets/images/favicon.png create mode 100644 v2.7/assets/images/kubernetes_icon.svg create mode 100644 v2.7/assets/images/subnet-tags.png create mode 100644 v2.7/assets/javascripts/bundle.a1609d9a.min.js create mode 100644 v2.7/assets/javascripts/bundle.a1609d9a.min.js.map create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.ar.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.da.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.de.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.du.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.es.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.fi.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.fr.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.hu.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.it.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.ja.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.jp.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.multi.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.nl.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.no.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.pt.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.ro.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.ru.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.stemmer.support.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.sv.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.tr.min.js create mode 100644 v2.7/assets/javascripts/lunr/min/lunr.vi.min.js create mode 100644 v2.7/assets/javascripts/lunr/tinyseg.js create mode 100644 v2.7/assets/javascripts/version-select.js create mode 100644 v2.7/assets/javascripts/workers/search.d351de03.min.js create mode 100644 v2.7/assets/javascripts/workers/search.d351de03.min.js.map create mode 100644 v2.7/assets/stylesheets/main.bde7dde4.min.css create mode 100644 v2.7/assets/stylesheets/main.bde7dde4.min.css.map create mode 100644 v2.7/assets/stylesheets/palette.ef6f36e2.min.css create mode 100644 v2.7/assets/stylesheets/palette.ef6f36e2.min.css.map create mode 100644 v2.7/assets/stylesheets/version-select.css create mode 100644 v2.7/code-of-conduct/index.html create mode 100644 v2.7/controller-devel/index.html create mode 100644 v2.7/deploy/configurations/index.html create mode 100644 v2.7/deploy/installation/index.html create mode 100644 v2.7/deploy/pod_readiness_gate/index.html create mode 100644 v2.7/deploy/security_groups/index.html create mode 100644 v2.7/deploy/subnet_discovery/index.html create mode 100644 v2.7/deploy/upgrade/migrate_v1_v2/index.html create mode 100644 v2.7/examples/2048/2048_full.yaml create mode 100644 v2.7/examples/2048/2048_full_dualstack.yaml create mode 100644 v2.7/examples/cognito-ingress-template.yaml create mode 100644 v2.7/examples/echo_server/index.html create mode 100644 v2.7/examples/echoservice/echoserver-deployment.yaml create mode 100644 v2.7/examples/echoservice/echoserver-ingress.yaml create mode 100644 v2.7/examples/echoservice/echoserver-namespace.yaml create mode 100644 v2.7/examples/echoservice/echoserver-service.yaml create mode 100644 v2.7/examples/external-dns.yaml create mode 100644 v2.7/examples/grpc/grpcserver-deployment.yaml create mode 100644 v2.7/examples/grpc/grpcserver-ingress.yaml create mode 100644 v2.7/examples/grpc/grpcserver-namespace.yaml create mode 100644 v2.7/examples/grpc/grpcserver-service.yaml create mode 100644 v2.7/examples/grpc_server/index.html create mode 100644 v2.7/examples/secrets_access/index.html create mode 100644 v2.7/guide/ingress/annotations/index.html create mode 100644 v2.7/guide/ingress/cert_discovery/index.html create mode 100644 v2.7/guide/ingress/ingress_class/index.html create mode 100644 v2.7/guide/ingress/spec/index.html create mode 100644 v2.7/guide/integrations/external_dns/index.html create mode 100644 v2.7/guide/service/annotations/index.html create mode 100644 v2.7/guide/service/nlb/index.html create mode 100644 v2.7/guide/targetgroupbinding/spec/index.html create mode 100644 v2.7/guide/targetgroupbinding/targetgroupbinding/index.html create mode 100644 v2.7/guide/tasks/cognito_authentication/index.html create mode 100644 v2.7/guide/tasks/migrate_legacy_apps/index.html create mode 100644 v2.7/guide/tasks/ssl_redirect/index.html create mode 100644 v2.7/guide/use_cases/blue_green/index.html create mode 100644 v2.7/guide/use_cases/frontend_sg/index.html create mode 100644 v2.7/guide/use_cases/nlb_tls_termination/cert_arn.png create mode 100644 v2.7/guide/use_cases/nlb_tls_termination/dns_record.png create mode 100644 v2.7/guide/use_cases/nlb_tls_termination/fig.jpg create mode 100644 v2.7/guide/use_cases/nlb_tls_termination/index.html create mode 100644 v2.7/guide/use_cases/self_managed_lb/index.html create mode 100644 v2.7/how-it-works/index.html create mode 100644 v2.7/index.html create mode 100644 v2.7/install/iam_policy.json create mode 100644 v2.7/install/iam_policy_cn.json create mode 100644 v2.7/install/iam_policy_iso.json create mode 100644 v2.7/install/iam_policy_isob.json create mode 100644 v2.7/install/iam_policy_us-gov.json create mode 100644 v2.7/install/iam_policy_v1_to_v2_additional.json create mode 100644 v2.7/install/v2_0_0_full.yaml create mode 100644 v2.7/install/v2_0_1_full.yaml create mode 100644 v2.7/install/v2_1_0_full.yaml create mode 100644 v2.7/install/v2_1_2_full.yaml create mode 100644 v2.7/install/v2_1_3_full.yaml create mode 100644 v2.7/install/v2_2_0_full.yaml create mode 100644 v2.7/install/v2_2_1_full.yaml create mode 100644 v2.7/install/v2_2_2_full.yaml create mode 100644 v2.7/install/v2_2_3_full.yaml create mode 100644 v2.7/install/v2_2_4_full.yaml create mode 100644 v2.7/release/index.html create mode 100644 v2.7/search/search_index.json create mode 100644 v2.7/sitemap.xml create mode 100644 v2.7/sitemap.xml.gz create mode 100644 v2.7/theme_overrides/assets/javascripts/version-select.js create mode 100644 v2.7/theme_overrides/assets/stylesheets/version-select.css create mode 100644 v2.7/theme_overrides/main.html create mode 100644 v2.7/theme_overrides/partials/header.html create mode 100644 v2.7/theme_overrides/partials/version-select.html diff --git a/latest/404.html b/latest/404.html index 99a04eee9..227ccb969 100644 --- a/latest/404.html +++ b/latest/404.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../v2.6/404.html... + Redirecting to ../v2.7/404.html... \ No newline at end of file diff --git a/latest/CONTRIBUTING/index.html b/latest/CONTRIBUTING/index.html index da78b1c65..7404ae56d 100644 --- a/latest/CONTRIBUTING/index.html +++ b/latest/CONTRIBUTING/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/CONTRIBUTING/... + Redirecting to ../../v2.7/CONTRIBUTING/... \ No newline at end of file diff --git a/latest/code-of-conduct/index.html b/latest/code-of-conduct/index.html index f91d38c42..fb340c203 100644 --- a/latest/code-of-conduct/index.html +++ b/latest/code-of-conduct/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/code-of-conduct/... + Redirecting to ../../v2.7/code-of-conduct/... \ No newline at end of file diff --git a/latest/controller-devel/index.html b/latest/controller-devel/index.html index f6eb9cf22..3c6400afc 100644 --- a/latest/controller-devel/index.html +++ b/latest/controller-devel/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/controller-devel/... + Redirecting to ../../v2.7/controller-devel/... \ No newline at end of file diff --git a/latest/deploy/configurations/index.html b/latest/deploy/configurations/index.html index e267e73b9..f6175e902 100644 --- a/latest/deploy/configurations/index.html +++ b/latest/deploy/configurations/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/deploy/configurations/... + Redirecting to ../../../v2.7/deploy/configurations/... \ No newline at end of file diff --git a/latest/deploy/installation/index.html b/latest/deploy/installation/index.html index f4a525f49..78900aca2 100644 --- a/latest/deploy/installation/index.html +++ b/latest/deploy/installation/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/deploy/installation/... + Redirecting to ../../../v2.7/deploy/installation/... \ No newline at end of file diff --git a/latest/deploy/pod_readiness_gate/index.html b/latest/deploy/pod_readiness_gate/index.html index 16d971a49..7eea3972e 100644 --- a/latest/deploy/pod_readiness_gate/index.html +++ b/latest/deploy/pod_readiness_gate/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/deploy/pod_readiness_gate/... + Redirecting to ../../../v2.7/deploy/pod_readiness_gate/... \ No newline at end of file diff --git a/latest/deploy/security_groups/index.html b/latest/deploy/security_groups/index.html index a368dc1c9..b9f6f3078 100644 --- a/latest/deploy/security_groups/index.html +++ b/latest/deploy/security_groups/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/deploy/security_groups/... + Redirecting to ../../../v2.7/deploy/security_groups/... \ No newline at end of file diff --git a/latest/deploy/subnet_discovery/index.html b/latest/deploy/subnet_discovery/index.html index 8f41523a4..fac46b61b 100644 --- a/latest/deploy/subnet_discovery/index.html +++ b/latest/deploy/subnet_discovery/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/deploy/subnet_discovery/... + Redirecting to ../../../v2.7/deploy/subnet_discovery/... \ No newline at end of file diff --git a/latest/deploy/upgrade/migrate_v1_v2/index.html b/latest/deploy/upgrade/migrate_v1_v2/index.html index 1247dd35d..1d5b219dc 100644 --- a/latest/deploy/upgrade/migrate_v1_v2/index.html +++ b/latest/deploy/upgrade/migrate_v1_v2/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/deploy/upgrade/migrate_v1_v2/... + Redirecting to ../../../../v2.7/deploy/upgrade/migrate_v1_v2/... \ No newline at end of file diff --git a/latest/examples/echo_server/index.html b/latest/examples/echo_server/index.html index a748db35e..70f04ee5a 100644 --- a/latest/examples/echo_server/index.html +++ b/latest/examples/echo_server/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/examples/echo_server/... + Redirecting to ../../../v2.7/examples/echo_server/... \ No newline at end of file diff --git a/latest/examples/grpc_server/index.html b/latest/examples/grpc_server/index.html index e9fb7589e..48b7ae82e 100644 --- a/latest/examples/grpc_server/index.html +++ b/latest/examples/grpc_server/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/examples/grpc_server/... + Redirecting to ../../../v2.7/examples/grpc_server/... \ No newline at end of file diff --git a/latest/examples/secrets_access/index.html b/latest/examples/secrets_access/index.html index 831629b4b..945585532 100644 --- a/latest/examples/secrets_access/index.html +++ b/latest/examples/secrets_access/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/examples/secrets_access/... + Redirecting to ../../../v2.7/examples/secrets_access/... \ No newline at end of file diff --git a/latest/guide/ingress/annotations/index.html b/latest/guide/ingress/annotations/index.html index 0980b094f..0ffe43bf9 100644 --- a/latest/guide/ingress/annotations/index.html +++ b/latest/guide/ingress/annotations/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/ingress/annotations/... + Redirecting to ../../../../v2.7/guide/ingress/annotations/... \ No newline at end of file diff --git a/latest/guide/ingress/cert_discovery/index.html b/latest/guide/ingress/cert_discovery/index.html index a8d985b33..6ee1d416f 100644 --- a/latest/guide/ingress/cert_discovery/index.html +++ b/latest/guide/ingress/cert_discovery/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/ingress/cert_discovery/... + Redirecting to ../../../../v2.7/guide/ingress/cert_discovery/... \ No newline at end of file diff --git a/latest/guide/ingress/ingress_class/index.html b/latest/guide/ingress/ingress_class/index.html index fc83948e3..62f2d961c 100644 --- a/latest/guide/ingress/ingress_class/index.html +++ b/latest/guide/ingress/ingress_class/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/ingress/ingress_class/... + Redirecting to ../../../../v2.7/guide/ingress/ingress_class/... \ No newline at end of file diff --git a/latest/guide/ingress/spec/index.html b/latest/guide/ingress/spec/index.html index caae066e1..97dce94c8 100644 --- a/latest/guide/ingress/spec/index.html +++ b/latest/guide/ingress/spec/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/ingress/spec/... + Redirecting to ../../../../v2.7/guide/ingress/spec/... \ No newline at end of file diff --git a/latest/guide/integrations/external_dns/index.html b/latest/guide/integrations/external_dns/index.html index 056968639..ff726bfc5 100644 --- a/latest/guide/integrations/external_dns/index.html +++ b/latest/guide/integrations/external_dns/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/integrations/external_dns/... + Redirecting to ../../../../v2.7/guide/integrations/external_dns/... \ No newline at end of file diff --git a/latest/guide/service/annotations/index.html b/latest/guide/service/annotations/index.html index 515636a4e..46439041f 100644 --- a/latest/guide/service/annotations/index.html +++ b/latest/guide/service/annotations/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/service/annotations/... + Redirecting to ../../../../v2.7/guide/service/annotations/... \ No newline at end of file diff --git a/latest/guide/service/nlb/index.html b/latest/guide/service/nlb/index.html index e70d2e8a9..ffb6a5ee9 100644 --- a/latest/guide/service/nlb/index.html +++ b/latest/guide/service/nlb/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/service/nlb/... + Redirecting to ../../../../v2.7/guide/service/nlb/... \ No newline at end of file diff --git a/latest/guide/targetgroupbinding/spec/index.html b/latest/guide/targetgroupbinding/spec/index.html index 857331c4a..fe6848539 100644 --- a/latest/guide/targetgroupbinding/spec/index.html +++ b/latest/guide/targetgroupbinding/spec/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/targetgroupbinding/spec/... + Redirecting to ../../../../v2.7/guide/targetgroupbinding/spec/... \ No newline at end of file diff --git a/latest/guide/targetgroupbinding/targetgroupbinding/index.html b/latest/guide/targetgroupbinding/targetgroupbinding/index.html index ec94ece9a..ea8f05e1a 100644 --- a/latest/guide/targetgroupbinding/targetgroupbinding/index.html +++ b/latest/guide/targetgroupbinding/targetgroupbinding/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/targetgroupbinding/targetgroupbinding/... + Redirecting to ../../../../v2.7/guide/targetgroupbinding/targetgroupbinding/... \ No newline at end of file diff --git a/latest/guide/tasks/cognito_authentication/index.html b/latest/guide/tasks/cognito_authentication/index.html index 81e24bf16..655eaab75 100644 --- a/latest/guide/tasks/cognito_authentication/index.html +++ b/latest/guide/tasks/cognito_authentication/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/tasks/cognito_authentication/... + Redirecting to ../../../../v2.7/guide/tasks/cognito_authentication/... \ No newline at end of file diff --git a/latest/guide/tasks/migrate_legacy_apps/index.html b/latest/guide/tasks/migrate_legacy_apps/index.html index e99b91cc1..ca96f4473 100644 --- a/latest/guide/tasks/migrate_legacy_apps/index.html +++ b/latest/guide/tasks/migrate_legacy_apps/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/tasks/migrate_legacy_apps/... + Redirecting to ../../../../v2.7/guide/tasks/migrate_legacy_apps/... \ No newline at end of file diff --git a/latest/guide/tasks/ssl_redirect/index.html b/latest/guide/tasks/ssl_redirect/index.html index cce1e40d2..70e80d093 100644 --- a/latest/guide/tasks/ssl_redirect/index.html +++ b/latest/guide/tasks/ssl_redirect/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/tasks/ssl_redirect/... + Redirecting to ../../../../v2.7/guide/tasks/ssl_redirect/... \ No newline at end of file diff --git a/latest/guide/use_cases/blue_green/index.html b/latest/guide/use_cases/blue_green/index.html index 129d9350f..b1d1a1014 100644 --- a/latest/guide/use_cases/blue_green/index.html +++ b/latest/guide/use_cases/blue_green/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/use_cases/blue_green/... + Redirecting to ../../../../v2.7/guide/use_cases/blue_green/... \ No newline at end of file diff --git a/latest/guide/use_cases/frontend_sg/index.html b/latest/guide/use_cases/frontend_sg/index.html index 379bb9429..95c1c92ad 100644 --- a/latest/guide/use_cases/frontend_sg/index.html +++ b/latest/guide/use_cases/frontend_sg/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/use_cases/frontend_sg/... + Redirecting to ../../../../v2.7/guide/use_cases/frontend_sg/... \ No newline at end of file diff --git a/latest/guide/use_cases/nlb_tls_termination/index.html b/latest/guide/use_cases/nlb_tls_termination/index.html index 13110b277..16631ebe3 100644 --- a/latest/guide/use_cases/nlb_tls_termination/index.html +++ b/latest/guide/use_cases/nlb_tls_termination/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/use_cases/nlb_tls_termination/... + Redirecting to ../../../../v2.7/guide/use_cases/nlb_tls_termination/... \ No newline at end of file diff --git a/latest/guide/use_cases/self_managed_lb/index.html b/latest/guide/use_cases/self_managed_lb/index.html index 8b505c4e8..cb541c7e4 100644 --- a/latest/guide/use_cases/self_managed_lb/index.html +++ b/latest/guide/use_cases/self_managed_lb/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../../v2.6/guide/use_cases/self_managed_lb/... + Redirecting to ../../../../v2.7/guide/use_cases/self_managed_lb/... \ No newline at end of file diff --git a/latest/how-it-works/index.html b/latest/how-it-works/index.html index 59b34d217..50706f829 100644 --- a/latest/how-it-works/index.html +++ b/latest/how-it-works/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/how-it-works/... + Redirecting to ../../v2.7/how-it-works/... \ No newline at end of file diff --git a/latest/index.html b/latest/index.html index cd12909e3..697661d39 100644 --- a/latest/index.html +++ b/latest/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../v2.6/... + Redirecting to ../v2.7/... \ No newline at end of file diff --git a/latest/release/index.html b/latest/release/index.html index 6b8469210..6cb507109 100644 --- a/latest/release/index.html +++ b/latest/release/index.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/release/... + Redirecting to ../../v2.7/release/... \ No newline at end of file diff --git a/latest/theme_overrides/main.html b/latest/theme_overrides/main.html index 440f8e1e6..f641ebe47 100644 --- a/latest/theme_overrides/main.html +++ b/latest/theme_overrides/main.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../v2.6/theme_overrides/main.html... + Redirecting to ../../v2.7/theme_overrides/main.html... \ No newline at end of file diff --git a/latest/theme_overrides/partials/header.html b/latest/theme_overrides/partials/header.html index 54b253b7f..e8e4ed671 100644 --- a/latest/theme_overrides/partials/header.html +++ b/latest/theme_overrides/partials/header.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/theme_overrides/partials/header.html... + Redirecting to ../../../v2.7/theme_overrides/partials/header.html... \ No newline at end of file diff --git a/latest/theme_overrides/partials/version-select.html b/latest/theme_overrides/partials/version-select.html index 6fbfa6255..288e82310 100644 --- a/latest/theme_overrides/partials/version-select.html +++ b/latest/theme_overrides/partials/version-select.html @@ -4,13 +4,13 @@ Redirecting - Redirecting to ../../../v2.6/theme_overrides/partials/version-select.html... + Redirecting to ../../../v2.7/theme_overrides/partials/version-select.html... \ No newline at end of file diff --git a/v2.7/404.html b/v2.7/404.html new file mode 100644 index 000000000..a3492d16f --- /dev/null +++ b/v2.7/404.html @@ -0,0 +1,972 @@ + + + + + + + + + + + + + + + + + AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ +
+
+ +
+ +
+ +
+ +
+ + + + + + + +
+
+ + + +
+
+
+ + + + + + +
+
+
+ + + +
+
+ +

404 - Not found

+ + +
+
+
+ +
+ + + + +
+
+
+
+ + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/CONTRIBUTING/index.html b/v2.7/CONTRIBUTING/index.html new file mode 100644 index 000000000..5f62d2400 --- /dev/null +++ b/v2.7/CONTRIBUTING/index.html @@ -0,0 +1,1088 @@ + + + + + + + + + + + + + + + + + Contributing Guidelines - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + + + Skip to content + + +
+
+ +
+ +
+ +
+ +
+ + + + + + + +
+
+ + + +
+
+
+ + + + + + +
+
+
+ + + +
+
+
+ + +
+
+
+ + +
+
+ + + + + + + +

Contributing Guidelines

+

Welcome to Kubernetes. We are excited about the prospect of you joining our community! The Kubernetes community abides by the CNCF code of conduct. Here is an excerpt:

+

As contributors and maintainers of this project, and in the interest of fostering an open and welcoming community, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities.

+

Getting Started

+

Building the project

+

Controller development documentation has instructions on how to build the project and project specific expectations.

+

Contributing to docs

+

The documentation is generated using Material for MkDocs. In order to generate and preview docs locally, use the steps below -

+
    +
  • Install pipenv
    • +
  • run make docs-preview. This will generate and serve docs locally at http://127.0.0.1:8000
    • +
+

Contributing

+

We also have more documentation on how to get started contributing here:

+ +

Mentorship

+
    +
  • Mentoring Initiatives - We have a diverse set of mentorship programs available that are always looking for volunteers!
    • +
+

Contact Information

+ + + + + + + + +
+
+
+ +
+ + + + +
+
+
+
+ + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/assets/images/aws_load_balancer_icon.svg b/v2.7/assets/images/aws_load_balancer_icon.svg new file mode 100644 index 000000000..105c45197 --- /dev/null +++ b/v2.7/assets/images/aws_load_balancer_icon.svg @@ -0,0 +1,7 @@ + + + Icon-Resource/Networking-and-Content-Delivery/Res_AWS-Elastic-Load-Balancing_Network-Load-Balancer_48_Light + + + + \ No newline at end of file diff --git a/v2.7/assets/images/controller-design.png b/v2.7/assets/images/controller-design.png new file mode 100644 index 0000000000000000000000000000000000000000..020e9a9ff26008ff4c701ae3dfd81b947f578d87 GIT binary patch literal 75747 zcmYg%WmH{Fuq+TfxVs$O-QC?GxCe*e?hxDw?rsT|;O-C{g1fuB^LD=6d)NB`3psnw zOixdBcXdsKvZ53sJRUq47#O0Aw74o57{nCtMFR^B{N*$3XJ;@lxO*>kEf+fvDJNqG zO9lJSX0~8p3Yvpe$1RDk8Hg^(edeh1vB->BBi|vD+pV@AD^Rei4$)ntSD?pG6*q&^erMgJLiW zu09M>0()b=A;x(|zUj;xi8jsjzY_mGF9k3AR?tT#{Y^mZU4(nm{`kC5XZX+g1^s4) z=K+`$`GMg9cE9Bnb|}&57rj2`*Y`e>fad*cRpi(8*XhoKUlU=u7Pq{k{)>wQ#J3lj zNY@Ye?w0~LdF!v)jRvM~?w?qZVYuIVB}0glMvj`YOqmfYes!{KME5yD1iyE&r@RDS zM!$%m@I1m$DSs8VN)jLPcb^?x?NqI78h!8b4@tD=mbrvNXFxcc7d#f^EL=$3y;YNh z-h^_gg;n-w)i++rL;`ph`{HFfH$K{=!g;iC+?C}HwpifzDXpTddA zatY0x_i5>dnxKdYTTx@2+GK~pXQtSh`C9aKTBeEbH8Q-MszE-N1y?x=~ z)8^OKja73iQmtk}9K!r&R%{d(1O>_0!IsPO1>4>`&*?XR6)|p(Oh({^l25r2=iamN zWyzXw7&gai_G%as!T11@w)$N97%Pc`->)*)TPPRObn3)smGf|h#SreB`N#lJ1_}O_ z*q*H{ZKz!ewVSCZ0Yzgf{6 zI<>}jbk?f~=?UkoW3kB#k$bcft=kk;@}AUoEH5P=!rG`9W;|9}{cOwf(%a@gP42tZ zF%Bzn^m?b*v%4P1lyZ}sstLX&c%s_ajOV9PtxgD$9m|n(zY6Vof~v{y&NljBByHq>flvNj_Y#k$5*5LB|#wl@`q zy@qG3e4>GcQF8mwxxpmXjm)#y(g?htUi^A&R==cm751KP^l7}-sb(cozC{!oSESfB z!`5fki(-6|>C%z%)IUh)wtjtLtWenL<;Mbm_2TpdUs>A@1xx}AzrarUUx^Gc1mJ~TLox_NNO^MCVwWz7~lpd9D+(nu+FZC zsU`JKGO4f5sw>;6KM~c{65KIE<63fXh;?ugt>lh1+QEHN7(p^=MA<>HL8v@SOrEKB z%{#awHMniAlxXv6MyA@7>wCSe43w|9GJd1Nt%>6`q6QbXrhxRQ^R(IH6BS`75k)W_`WyP~CJfIEw{|+j zraN%0-u=|9LNHuv$aw$Lvakq}+w+Dds2o-D*xC_g96Ts&w%#2QIuYjiICN&}hMbm0 zL#{9#jxmHMSR008r`iua@{MTVlUJlHF$Z*&^Nv^-o(!@&+58Zn)nSHOCQLbJKy~y3 zI4x3K<&%y1i|oMJ6L?>@YzqYe_q_MY65Gde0!rLGBiPAL9?>SLp%}&nF>59mAb)s! z@ z1ZMcShpwW{9INtYr`{$0Iqq{9gA}P3$bsCgN#6a)s!4B;Mxe&%=Wf=d+VLDcZ3-Q^ z@}LAAi_QH_>m=ee_R~5l5!qKKaQ)VBGGz11PZcV(vC4{63pwFby_Ms%?Iz+n=y8uq zREVh6)y3cpS>FU;5(-)(l&j=K)ua$?#m&O{aYDzw*eC68>NaxIu$}GT-yQAmUK!Zc z_-2(l#1bmIstY-gQ6IbtW1tU=L_mn;vih= zC&8K+gT`aGC~F@P+h6#{zvUn zFZ(kbJGs5nu%SfQQTB)(yfcN><0_QI$Udf~wqL43*EfX4u8{EgIBn?X4kX`Y11KhG zzdNJPc^EfpTt}k}F@-0!&Usd4V8d!&>1jW%er9`(R9^7-)0k`aViQW@-(1vOnTd>U zlf)-qLfLQ0maC&Lb6YeVM>C2j40dK>F5Muy7dK`Mz9WbFIkrEbI2!C!+bY!h#_uEe zK63)+0M6@?<@PMncsrFP})U3s@y5suAug~k>z2};n1n5Ax28MmttPY48 zSk&@Mwc3Sxr)&!kSV7o1i3?%nNd7-kLMOj8XM55lHpn+;*B=>~O26}w+kSQQmVzFk zA+9+eQTVC03mUd!OLLTI+jT0M8)d1zZm#%>C5FD}*vs{4v#;dW_{yKbuzkl88GMjO z{Ltqd_-`9bxhqX%G)q2MIHjCrFxolua$>7YR-Vi_zKUa?$q%juohSVLlonq*xq5|= zVTIqHYeYldA>3GmFSXn)HP2NM z9xT2YOhK6p7lt3pdyOzfium{H8$qBu!>JhX6XuId{Q$`T- z!o+ZszP9>2oR?0S@cS%lOSsyVHaDMTcxr2kfYhP?UL|5P&VQ63ipHtM!`Eu&}T) z&c8CS{D6D4DJ?L{L{YpF5g?|FHD`jR3w2J9$|>7)vO2ce0plQx?2LU*HOs-TL{T zW&g()>>+?@dcQ4rr=uLql%uG80-=dnr;57S zsIBlU!8HHqVc$W_Odtz1QMezPs)WqV$vvRAd0*hUg&XoktPm1i)$zF6fg6Y;M)vBh z*83P`**uQ$T#OCLX}b{66Y{Z8F`L(Gvs#dQ(fAd2!MsMa)`w>^OS3+!$^AUnc;wbS zZIPKOgU4bz%=lNFEQ*Jp8TbyPk+eAWcNT*P6-NzUP#&_4a;`_o-f@H7^2N)e^JqGo zR7$TgD#M7CacNqBBWj-hVy;-><&`eZn(s$Zb9}mbaF1u0&92)p98EqdJPh?^0{nPX za9XIrZ~~i18+MCJ&^if^YoqY4JqCg)%p|gWv#T)XG(k{L{4?V?^uB2$s7+&=QVC z_TUfBKtbQ9JOF7dSDI><8lo4w1mddG-1k^o=2Ikvsmza`XFpKbzN*mVKB;^$&0*t- z)+dHUh_dAQfpO?F8OA}qda&rk5A0?eR$4$J^Mk`Z% zmU?qCHbz*4?O*FFoqKrbq>AdH^@Cz>M7nCiQ;fFEKC1%jjCQcIwi)6Yy>@Ab@0=kH{xD;1eXhfRCMSiITEk>z~2Hn+1pD_cPuCHbV`YYgzhf_7NV7o;nk~R!iK*?x>jz zI2_?!6Pe>Z<-!I@^%Iq1B(-JV7C+!BkhvUuaId8Ow~-pz`mdIyfNKazA2p`_&pBd1 zYw~$yU0GR~Y_vCIxU<&MC-lDpA7K(2+!)Z9!CQDr|K{LweFTZ0GKX8UUt6lm>2BB& z5@W zKLk14jT4@nB{GeSFLy4zB3h zlh%aKJz~^+coN5QqjA}Gm zKHK(ibQhW~mMg7wj3))ozG{S}fwQ9=O(lo>`=;EC9Sh3Dms7Ddex8d{T`#ay1W&@@W@=gd29$lLBX1zKZ7b6gq}2A z$6tC19T(Z8XZH$L(_i^&d_=Qq*w`9{KZ`d#XltM<*x8uBg^!jP(?%TFwZ?Tn|Edme z>hQQl>YRA}Xu-51T8<`BukzGW;vs5tT#SrPLaAa?|OO@RC@e=Le8x!ob7BRuc+K2K^I>Q4!iy+ny@c z)bDu$0dPD{H}EwW(~Lp;j}g)rE>>MZn*1rt?4$9ljEqiDpJNsZhvOS(>`y z*tK_Jmk1qzUHT3Q$PH{hF@(8Q9+_-T+g&`pVEQv;N5lO|CFAFZxVCtSO#N~`)v(O{ zLz@+@Kl^mbw9CcictI%9N{c@al0RS9pFI4?p;E z`yV2eOlU{BE5(}Zw)l!RecK=sEQ>-pZ-;q}&F^&SQ^J&ekrFp-aU&*NW|zKtUS!0t z^*{EpWJNoD9wWYfUx`F7t=_tf5uly$v_`xY>5`@>@Ej|qFZfo?lgqTOTp^3S^E;c6 zaCt`Rl{fi9?Qu&wSFl}ju2ArYNDP8{iR3}~&hdQp=D|Uk8nU+dF@}))IAnBiS3b-c z_f^kFJ6Z}%x8Z2N+nK2c3kyB??iB&58u#LlXNJ7r8^Yh-RH zk#4TE>dL8CC__+ucL{A=mRVTr7l5PDC}zVNBMPCKSPxH%c-C|)ibw=ag~jTN??%e( zZ^R!<5UkZp+o3A(Ohw3z6KL03&9bxGsS7BqCspPlLrCI-GUiv}=Ce}oHEkCUBR@!u z2Tt?BV-1A}?Z--fH?L3DcX}_c22lD`7%AZGau{(jIg6Io$8lN|Pqolq?w0xoThtzF%+yqz+$ zbWgGtZ(HLmetxC%Ky{>7(|jx;FNejSu;GjsdfnZ^*vcyZYDHO0|3~+gnH(82HIAa9 z#HM;3HLt5}^&C!9?GvPy`1gr;1|06dD*aZI;UpSr713Mjia@fS;t@^e%SM`m$p#7n z0{EWV@b(9$4j=f4ela2RWX`k%2TE`S(F~_t&FqdC+vaO)dGS`y=dH8r!G%SdTf%26 zxD1Ubsvsib{o!=PvvdAh>sLR=rT*aWeBZ(kcBb~i!=-(Y5wP&l4}XETFBkY8H=zq} zNw63DvY&IK8Lm!{^GB9Q&2!@Zkl+o|6L;B)2~n+fM`I2-KH|h?tz_xo5z-LC=tAdw__55UT&y;^BD@7Kt&QJBRUh;jCXN(l~$S;QfkazbdrR)orT9 z?9K^PZ54A`H}#jV&-W}&JJNb>9x4`MKpnw$vr;RF0t*L+DzyX@ii*T5vk`G}DV1Ge z$mcA_ahJ>ry9c}z@h%=G)jEuzVh3efnB*!ls{D~^^uCFVNO6B;#KCgi#+rJuBPM@R zQ~@^+_d3NJoV4*Q{SLP{?yXqJ7_q}SZfB3=CZ0|gZ-mp?3a)z$Ytg1u z)f;_*W;J!}gW+&d!lD_V-{ldO!|sggKPl#_(;_(;j$oHHj_$jAzqi)BUo5_dA9TiL zp=ZK>v)}v1i#7)0J=I6NIz{)M3k_l3@Yh|RwT=Ak7x>!wmiGohd5)~ z7n)8);BXa$ExgQEJ#(*gJR{7_rBKH+VI$e*GJzHVi|`gc#veo75OC|y++W-btQ__- z@1(|RwV4e1i@UfzLvPU^q$t=>T&7CYvC=8Mwq&3HF-IMHYQ|}%uV1V65RBj>wy=XV z^$F{u$=wX8<%;m@P$hx5%L}c3trxny0t55Qyzvo}p1`lkHc#ivq9$vN+kN%q{9oap zLhu@mfdsV3fq>Ts_S(Gotsuceo`F+uu%?6~sieWSM>%VixY6p%%hg!f+7E>wM1{x$ zI^;7GkzRS(=hQZE!u;FC{Y-8OvP&AU{CwlBbu27LL-Muu_pdb7q{a^3 z*Wggs`zh?}TE<~6S}KYVlpF|0k(LsdR~gSNG(w%{9@}rIA*a`*&IP_ukyi?pIV*D; zO)|eG%T1-!t4r`%${Ce>?Iu7vh8D4}bMSwuklxWz`7G2i3YtJ`j^m9{p=VWvO=-Q> z%M3c4wKnq}{0j`@$FqL)Xj>Jvw%76U6{QE?KY`>tv(7N?gS|G6%??R)?YjeVm%q%Q z@r#|Rd&vr!jh`Lc2q)|d)IS^SC`)~TproK&LYs0*LpHq;`C`M&4}uued5s>y-cqFB zDj)>v(E8qV?;~?JqaxO?-*Q2ihY1H%kw~W2dTxcQC zWfD15m6-Y=BM{PZ9VZ=zZyN@U|dwg7~!KV^_BMpZ$pI-r;8oWR(L*- zq$vD1-m3RqchO~UB7y0Bp&yxPfb-fRYLp9n>;1!%89go+_w3Vpr>}&#$I5ZbVf~`E z^Dd?k(}F*|wsW!Hp0iW%j>h(nGiEvB!Ww%$l}5-NY9nA}ZVHyI?mSi9nqTZ$*3B>* z>>|8rl36gAn3xdo*kQwv2eVbGPkTT*%YDs4lty5X(1^I9W>FT@{AlYN4tnndAJs+> z;2UMW7nE>fnR9%UaOIn*YuTPK6Bmw!2$iUd#tO&MOE|_OVDZBHRIQT_1#xu%qNbK6 z5PRP2g~{gb1L;sLG^TxhvPD;26g7Pw)CtIxLF*Vq%xvD$kc4=d;Ud~DQGlpPIIA^5Qo=Ao4 z20))>A!kGIn@O;z<22nfMlLS*^4Pm+l#5W0!N{d-Sxnz%qU?L3ENG)O1)-U?us z-oi%D^Y87#p9)_`I{*FF8(qAfB|r2VqG{Ab-Zmeb|WAi{h*b#Jh+QP0ve_27SPjc zqtVOV1l>)Un#%F9#nT$w!dfMWzpz! zJR7a61bYkvEhVE6FSV@q<5YLIh-LgbMmqi2PIRg-Q27JniUZ@a=Z@!3t8Pll3wr^m zQXC;Zs2dXte#d_=W!_4kSmGu=*hiA8!J9OO_5uCW%Iy%F`u;y+RQm73b&ThK2qN}` zgeWgQK=|;6)qyg8zQu1mrAj;X`$FT5vp5w|F^lnbK)D77FBn9XQgv_o8i`<&aIqxQyAF-sewel=;L z;J{P76q9Dl44+5i!TYcGL!H-7Xdkx@uQ89u*L%+uA`4||S7;ZN>l0WaEj6^Q3J9eN zI7AZcaOlAWv&nYLlV!yR@39DoLJauq$*5VOp?+G3v<_3CgM?UEYMHs%P*w6C!Y2pq z*Bx)hojo3&3JsHcaCBDJjONLaqXDlNLko|I=}(14Z$koGdk!Q06_dO~_>W_g!qK0= zbvDnR&vR7EC0t$>XjpwGdXX_toJsj935mR)x_3uS z`vyvaeL3;v?R2n8C=W0CuIV6x#Z=~5_*iu^MsNwA%>y7oAdu0Q@nc2e(z}FGAw9-+ ziN+-%nJqtMEpAyeHnA_)u%BlDqG*7+;L!z1CWR5-4B`kK$QLuE>z>#KvHZk0?uGV@ z&e|kAZZ>$cvLY*>Yz}{FcwBB_0#FIDEZ@9&cLnaWJ6v9;5Eqxzt-2+&t<=z z3f{SO*^4i`EK@GBcs0vxH!NOfGcQYamx%A^#2B_c_%3N2R-_~xiCG=MWZ2m=I*Ndb znou*6gzEcz*SE7i@H!dyd{4Z!PxN|u^4m`4#jMZ~lE@3%=q-fnKwA?JJUi_gd%c=E z1+Gj>c$G^Ai|$Jb(-Z$Fk-M2$x`0*Wv4(w(nfB9}5EFr~YYSzk1ogolhK{;(Z2;x-` z$E)lD=@fD=;-E7lK`hDcGb3dz5$?{~a9tc<)TTWSV#uel6Dkp{Vjw}nz!d5~=T24X zQqk+QAsqfG9R#H|ml;-bmW{2$#C4Ik!yyrHe+5avo1QM2QLER0p+y~p#^@MNoG}a~ zQm`pzafe)@my(im<5cQ!4Q6ToF*Y*`@mI|0E|3`6ID13luvQNq=~)bqjg@SNX1F-~ zhON_R9qVW+W%L##RO>oo*wfhW&p242ag0KQ8h9q;-W@GO8FlbwY$=A>@x@a9-4sbw zRFuW+ireLQ=}<`6pS(aRmnZHLy<}rsN@?c1CjLkYz4&;Rqg3+LLWAup&5O<254gS2 z97ezQr!idwVnHlo0ik@G)YyeOD|}$OX(r^nwc$vx53wK#x$T?ZWTN7oey`BqO2@m# zGToI+O^tN-_9deA2(={sPT&+~#=ycYaaWp7HX@7Ey7}>oa zXi@zu7L_%zLSK2IAFua&hfu}hs{_y#U!8Gwhm*VS&jW`NMu;kPxdz*s*&Ns+2D|lp+s6!_wl?nL#&{(FX90XbnAGj?qU@@rU4Hp($@9mBER~AiW z#BbtWr0rg2C@J1P_#H->P|zB^G$mNBwm@OgKcEX5c9^`c*_jYojAt-STZJOw1|(8M z9a~4pE-?v2EM9GVblROcE60t1(O@@4Ah0!|z%2#vS4NoDGKp*oK4{B&Kqf$GU)pmG z;C%MiKiCD(SsD_|SLKBG<_8_jdXqTqkB4|VzoUS7y~jmCtfvQB;s`a8m7!YgPH=0T z?*WEV(f!NwN`09WG}fo;KllaPykmFi=3c0%yslFSo1E`EP%PBX*4pFl&jlunWIn94 zzN2tdXhJ=TPVMP7o^2c?_)2GuCva1>ct+iUMCA+8;Ulb5B}N>spFBwms`Yp&3Yu70 zSZYQRk(qKpj53BERS*vPRKLLecn!jAwnWINA}%=2Jg?;Roa?9ODK^&(*69$MoUWzcIs5CPQC(^(NUxPIkRAq$*?&>J@v!0dw5;yM{K4-o!Mb# z4vzlEkEv4)`kFrX?@8j~{x1(S5<&wpgy}~QjbE0NLH_RnV74oDn3{~)Slh2pv)Ca7 zvKznV@qet>K=HYq^;hC!-#9zc9k^B#HY)#67D=ktWYC~y=Z5WA%Z+C<6iL(8qF%7M zvaT)55rA$mrv)^KY*HUWdqGhFq#6q3EV3(h-{Ml`1h{fe_4yIUc zkP!D^dpr2%aJu(&Rtypvnp88VN3<`YtZ=$r%73Oz1@rN0uRF2$yTjhi6y!EJr&130 zSGCfKH!1OV7E{Kb=3|lCY^9Wrp#=dWsny*rh`L{y$-#34bmxd854I@$dyX{x3*0L4 z;DXxJ_H#V0pK4JO>146bV&{F9&f*OnRZ&44nTS;t_Df{VU@HA0{Kj2n)R3(O z6{lgMWn*29uopV|&EYE>!O3Z@)2t!LguqZbJV#(V!<-jp_I%X>B@)9CWy)Q)S*ykY z&Y;Z)%A&NO$@{$9U;L)g-jC)9m8n1tuQO_78skxIoagb2>9xHg~mH# zW0T)2Wy2S3DyKFWBs?Uk!5&a{q1^nM$L&?1rI?B}+IbxDs=Bne+RgJ>`}0DZV@$Z0 z{qj#Fg$#Dc;*=y>eOz$A92wBmuYG#?skmBG$s%4q*-n{=_j(&HhvU2UuT+pbLc95Y zQq#>wH1XTQ1rP5KQB$;yO8N#gJDGAXb?5gUcHVerh5A>Z2$@}9iFRBa)E_2porO`x zSGUih%{L@vCVo?v&^!54;?Gyd%*;$U64 z0dGX%a@BqjR72V8GJ`^JXrz;mXw^s(vL>e)yOuLGM01tv2*Yej3{)AM2ML`?b@_Bt7hpWx_D%xOT1b zX)2TW3!bd~B4)E-==w9*m^fOP|KqW5J8$f(W=D~fL(*0zT(4*lOO^fyR9{6sRW!TU z;t|ug4mIY-cQpbDoaqrQuhfx9)@g!vXwb+D;z=t3+)R-Cfa&Al*eT=dG9zK%34&UL4AFB93kKSviLJS zd`R`H=YEwhwPr&d%E5^ZwnImdJ3-*^@Idzt06u%BK{|sW!N~bD^)Xgv$jA z$5?Rt;_pMqk$R+=+i-5X0Sd8>5WSG&P5)P1*z$O3D`jO(Y>3g_K(iGD-?r8ZDpbA?#y@>v^?0vBuB-u5mr* zOoW*K3M^R$o~ltGA*urU40E>#mL2a8e|UOCJ0i!Nc$`0DqpH%97o=8eMWGMALuW%N zWTMGnlxRqUeRGIXLXN0@->Ym5e^EW-xRp~e2IL>8m56X~ft8hZXn&HRulB}t({#09 zRlXl??d~G-`o&IjpyfI$WD?7e{P8HCl;oE^&GXSRT(`ftzL!eqL9%WZ!-rwB82^fZ z%NjnG;-a3Ltv@{vSR;DrWR!ZlPO#?;<7RUBKnhoKRCgGy5;aF_!kZu4u0Wr~IzTqcR-)-?Y@3cJ$EX;`C*v*$=$IywqJ#Xk^M~WxiJjbe)%_&O^6{VVd6u%?`H2xol?8zC88v}qM%qzw$(oqES~-KPq@v1g;5=_vEW zAPSKMzDCp&9;K?Em3QxX{y{;*pyr=2ETY!ABg*=W@z!BD`F*-G6YgUweQYs$H2)=3qZ$bVz`OG%x?1<`*?%9oscQ?`WCq%mBrUa3+6Sp75U>M7|KgW=Z$7T8!L4#t2=2z1uFj*5b#pXon}LT ziAbWDH0gCku)(_@kaLxFQO9Ut$_WYfXTW4aiew6rOX(jy4NK_eJS?Y;ymNh=VjKOk zRb+WfJjW)9T8ZjFi?`{5gxT%LwoTGi>RiM>L0=GK`g%>B9zcp>*|rBC%2f@Ajy|i# z+wtt%+eRvIaWgkdE^W>AR6wCC%0e@@MGgf67f9UsW%aURYpDQuy zJ|_bVhUg8_b8k_^tb&_4>mS4%HXoI%R2Som>LUI84-r&=|3M;r6 zDYL`5KE|)cFn~vbN45g$VUO#b{GQun%qb-SpNp+kz8}YWBAbHK6+<9i2GNYyEQvaE z&z~G0$nr)IKRQYN2I-9d>g`|wr;N|)`ahDE&W(tzUAkEJQ8YXv_7hIYPmtH)r45dD zI|&~4pV1Ogr z9xPAlIDWCq_RnQXTpmd6u9h?O{rG40}){mTr73Kw!{ zGFO-}DB}e*$cd}7hkoIQk6TaXqY+0HGHh<|_es?NG&qHz+2&YiSO;>Q4=9UYH_%pv&J}fRDhkH^W!i$tFWz*S{hs$Ry=KbGZZ8$qy`h&|HNKi6>Biij zdcCmcv^xwYty5aB0K8c`Sd^s!?q9aZrP)|y9Q~L3JGjq{N0@Q&^U$KgT@3I(%6L#< z8BV}eVQ@hmb_@~{l4$Tt$k*BUvmb5OqEHz zvFg6-sd`{z5(cNGX{BYRhvzCNOh>KzzuXZ@o%4r>wEy@R%2 z^Xr;2Ev+$HvsEwGlaaiM9>K(#8sJ#x*P(zrV4ath(KJ)>eGlxs+}fpU^Lc~^`uL9L z-DKJi{fhtgf&#_PB$RoXz+uz`F>_QK)!Z&jYA6(Fn{{I)P~$&C<#%^qz#@djRTKYs z73?9WlwJISQDxYnhYJY>)%&}gI+BMk-RKh=_N0w^c0sTVF3niBT5VKL!bQ5yPw+K7Q7?=wpY+Tm|x2a4+4)Ldq6aK zQ|3_uAGLE`wJ}WpP`i2V< z;s-P5Pzhl}rF{oyXR!{SMKUK|s zg+s3~>W1Lv;n@Ua@I6x$aw$dtbD`DbKspdh7{z73mM5J60tDJ3fcSj6R4LAJd!W0& z9}4J~iLAD`vRF-%pDZ^bpPil6G&D#CLnGFBT$*4o>S;Z8JAb4!g8XZkZt`ms#Eid& znfx;n{Ko-!*SN@fO@ENpJxh0%x{Y zUYHKD&NWxjiWx|$hB2I}o@9mbOP%8vDs}2FxRcfTwquplxE zW?k|(0mZ$rDqver31;xuzvk}Tk88Jputv>GLX=%4ar`U5064Gk8AMv&rx|HVZfD!kGf--T-fh>e+L)_%y~Tw zc%cFi%_h$uP0!NA;hk?!9|2QI0>a-~n|Vf;<2gh=_cIL7 zDRe4D4A9f*a--#XNBdBEtkOFP6{S*6G+?>ji3z0#aW@(~0iOqlWZ#`o`L1}N9^%|t z+^uB+w}Nv3x@ta)Ejj4%PcE@hKwSXnv&;0FSzBBVL4D3`MkTPdCxOD}%4 zh9Mw-27;4mx)o8WEM(DmJs#`laFmwca)A&~eUf5Foj#9Opms8#OPw|B`2Oab0Hg3Y zNnT_nMw)!NJ-7{+k=yTu+i7Qr)DJtCN}<$!rrOYu0(vDJ4u=)+iBSGleooWBNi0q; z{WZ>QVn7mzmzNhWX+&c8YIg+AXCNAvj1$G6)lI>cy9gupFDnk{yn*(xl#x*$%4BVA zEy%D%v)Z8G6p*t1RiUYuDT`!Hi%4xGgqOUlJxR6I%#B1Cm8J)X0~;j=nKH%-&VU+! zC73;j!i|=VMf$c<1}E*wJ6Nt(I@#oC`f@eG1VZNRuwDEK1;~@Ig3>q%as<3TW!=j+ zPhG0)7f3_}8I)aJZcFWqWooh)*Tt;+zZ1eB6ZHYkX!PX^qpF0oG?(4dOxb<{%mkz= zK$m6AL!(dr-wgpu5DjFR-8yh;l^#xK&5-Pw&ci90=EV^=RRN7b0CDjG)asc4V05?Z2`A7*8Fg+u6{d#2YW{Zbx0JQO&Z`Ve^E~sb>lc!wMq5IC`iXQ)HV=+P63K8E>wYR?hlTc5_N&{ zML9^p)&56H1i+F7#TvRGT_p3oZjZLc0&gO}7#bR0dYu(Y#YMiz+S}Vt?%#as0k$O2 zpynq4W+zMaAB~NTw_Yr;v9TRXuIH-_Sv)R`{$3yY^yw3DlmxKowMYbYTiq%>YT>g< z6)eQh*V^#`9e;m?#`nGvb!bGqulZtOTU~)4%5)nULy?IYkEVJ4%phl@3jjBlc1BW> znGD)ca)o>zP%x}Y-{?O5pniCLy@Bqw(nS}+_?ojVwW5bBFija_Ss!WB9w26>_z~O2~hTV1nB@CGu ztFy3?D3O>-F$=|SlKU_Lr~ONt%s0v&f3FXqh;!ifi!5)i4|)Oy6TSryu!RSJ3SPY(#Z98Zz^#Q6I2BnQj9T0f`}Xz(@>Os zbz04;Xp4y)IPjdN_<*>^+=qMen{waRr(21>EckXspYbdn(a&<)50oGZ{f2BT0O71q zw{UKj~m8mbIcin6~U6rar*C#1N;%w`%>? zP{6$-lM(=wq(Yq{|3L$2F%3>qIF-|xL|fMWv@8~$$|21Z^5!u<;oaVZjY|JijCH*g2! z1>^$xJtsRm;R}%5Hgog| zdm;%IOCHjXqe&Se1*uobG)D@q(i@bq;#62um$x*fEwah954)*`;(Wu-B}~xc+W>AL@DgDc<0hf(nf&f~uUn?ssKl=bEg{#B)0}L?tUoTDki#<=4Kox$A z`xCfM#|H6Rf}KZ{%Gq|MNd;DU$wfL7MkX&Yo>D~aaoR-{W>;QKkabtpu+0Nizr_XB zBn941vWVXXZ80fR9v{knwS}Uf=Y|b#cLoTbj&)yFb+T?mLO8KiUD6@hclFdTGC3Ki zxjfL8$jbngXNZTO>roQQLDD#j--|~AF@xD=W_XgzqMHs7e@Z37g;M{bXi*VeyPe{G zd=AV1W9u!$;)(< zIe+_U*?aA^s_K=hzRduwV1LE#z-ilHTy^^N9jCPN|RDcXmD`ww$xJp?H~|r zU!Yju%>isd7v@`l}&dmD8@5u18FC_1!g;*8#&=47*TPI90rHNc# zD?XP1IA{9%AE0ZA@-1!pafB*&05c$x-K8_$pej+zf9>d_3&GJ?v+KR+H@-;X^B&9k zhNX#_2PPQ7^n?=oEoqqlchUfClK(pm98fXw(-APLy+Tzl`+*knDk zoc0lYarhIu7}c!YXr_CR9@A`s1OAjn3gsOAmM>WTlP{8eGBMWELUyT6=HqYGov+{H zIG2Po=fs}DM|H{B3T@Za`qnq&%L7nr?0>m>(9uK5>gC8<>uI0-MPr0&BXPBL}$E&|6~XF42#w6Ep=O5M znYY~mbfW^cWK3n7O;K_qmXm!VcBZ3zZ7~iD<{#~T^%<63Jm0A}%Kp^ShMT#Lg;%@u z13&*Ausr-%l_4*z2!Ey^ejb|lpMEu!w%8yG;`V1O)eniHz6=cnH8iMfKy}25I&k=2 z@Ab-k7w|Ct*MhzwFIN3A_%C=Y@cWUCE3pDv-vXD+S`4ch67A}0C+ajZ7LCx$Ri7l+ zc*4z|b%D+JuR}BRAAa7<864nW6URym%i_uiRP}A6vCPt{hQXNm9X}3(KdL}kQ{h<) zh@9i;?oUZ?RgWI>|6~;41jtlTu?}&?*5Q-4w> ze#o{_6PTMy-Sh_gcXHayy&dYbfrnlwa6JpK%vG(5o`HwM?HE9>=6H<3BM4aDJ;0Ft zFG2$VyNeWFiRtP-S_CdELfOJ2T=E81A`hE(D8#G=a0uNO#6ekLfvqh<$&I#n<%P$9 zlU^#s_n-UJhm@2jB`1gEvRMWMy#jqBBPfi_-QA#bKeWy>GwmBB6*ni4vsp;et!=o| zF-%l|(ZTe10+VVx=cjo(XAhmxHqJj*IWET92M}geBAeH-JPxMFnx?7%jK*Vw0Aj`N z0?@ek&sRaDY-d-6Ru&pwUd~AOtt_P8a;^sqJ`eUF0s4}Fy54ZMOe2}!^+&41c^<+W z4sEnqIXjr5F4Jm6d3kwB7V_@UCrF1jYbKnh7CQ6PzDn zv(i$(AJlgVG-IO^5k)d+)T{&V_yM{Tdqokj1I6O%nyHoqsBFQZB1#lt*q7i?6&B84 z-eHcg6Q;ZpV+BawXvFl+(n+jsHwmJU2$o?K8 z4+MB5>QM1cmvd3^HEHdspwB=ZPBu^i&;-IyUI14i{ldLEH;0>m+32wM89;m_5@A^A zUi{uK+93pGWSz01m1evxubK*VU05r@rz*44tv)TEsGNmZCfla4c^D8)B1I8mKn=9>^j19ru;0 zR}W{)>1Vg1i1=8XPqf>-Ux`1;CUj+azl8q&x;5Ydl*3OqOSW%4DArO@gtRZ6K>I#$ z)lhHcw%>b1aUBfM=g*(vl`S69)N734dwO~%>daLmhy@7TZ~mftzK4Oy)u=V)b~($w zBbUAgYCeCU7&GV#K{o^J_9{o+6Z9XJa5)vm_JG>GkGG(R8WZ+t}%mw1{ioEti#{dpYoEJ9K1Y>%eT0rCeelM#Z_Z`NHjg3u@U=lav zk0;T!8WTDBRCaivHa4sP$e@oZb7sfN+X)@nI=~)E?Ph!&P`&kQ=$@^=aLI9GX?&yj|ewcK5y0fnyJ2>s? z>w~_+ik`JO-|S~K8bGQupMn9{7MKETux4HZ)c#0t1O z@q0dedD2rx*Qqg{QWBw z3=$gpcZ{yE5VOOy$xJf^T)HpPPZ<;AR}!&(jvl-qfU6SbS+46ipb`8n7rjP1q@ah@ zOob{5F;VuuBU6h6eiCLJ`9fCxTJ|s2D2! zK_|ONA?=0)T>;m%g_}BBJf5XcYGV*lq8yh|GvPNX7J7cjC9pFB-hHaOn4rcx_0LTp zo(0rvJ3xmEaGK@BS8jLx0JsA-!S&(Uj?s697B*25!DHcAs3vj;R^Mn6Sa(#FfPlOy z;n?N^n1jpFhAAT+Z;t6_(ImE{<&|=1$l&pWgoMs*!_Ij4_`+#OB#LCXRTt5onO0~GESN|JWCH5HN z@%RubU-7i&{oAYLC*Y2AqkW-Z!$5oIv1W$SACPEg0v;AxewLygC!C1KIxxvd)TMV! zOcA3#^f=sKn6Tbn1%~b>sxZ;4WvEcnWXCj3#3MZzIss;?^FVt0doV7qEUXMeF0E(O zB6XDb)MDNj6uLUwz>3m3R8nA}XgCG1pUyV?i{%teY23!hd3QQFflz^M2q{FGJ*-XN ztSE2c8gfPR>BSMn%~&Bf+2+m>y$G~E%>;bdL%0P(MLhbVkQS6mTtXt?_GLS5a?2^~ zM|?=m2VsvKg@6PoX(#0BX|2OBy|k~vp`oUEQAIaa{X=Un0;1)PGn&cG&mk&s|9Z$k zGHn^LKR(wJ&Pla}6n=@&^M3vchmV0lsU)*ci3_GAE+!U;E0QMjgrM{ljqL{la-Og+ z?r;G5r$LwnbT5`%ZGYYbW zBGBWskU(NlCoBQfLN1{eu%wQg3S})XqKXITSp3<{{B@Evk)d9VrlSO`MUD!2M>rC0 zw2Rv1njGglq2zN|{Z!ow&0`6b@*ngL2vQb-eN2+D3D|E4V}lirQaDSgaKMg41=qh4 zLvF6FuoSV)GgLig#mGcHD_b_>08D5FTdxR`vrTtyGK+Kh}AUwx}3Gq#B{rcnh|HrAZEW z!}EUI_l4utbCkWELxhdS59BsoGovDF*Xz|6bqZfLNHWDlwfkB_+CovJ8gc z6&v=VwzOYhhxFUPAlV|1FN?*}n<*F12g<-iE+DoDcy3%UL-2SRUvj!Rf6WQ62 z9T(qOn<*OybA{SsY*OMyv=?7A^n{$TK;L;O2q$%OQj}T8*F60_Cx$vqkSSJeGS;w1 z%KY>ZaB$!o_DobbikPGpsHw|z11YzgDL;~en60kZBRSLKY$?TQ zVKaB5Chg5?=_Jw*!ZAkq3NV#3`F>R!fvEmMQOAl5up*PW&kzpbe*KK#>ko*B?JlYLO&#U(+T+mELq z$~~~BsHZGdHVXkbCckF}BCKWfK5e#`FwTx9$0!x)w%XuT+x^05f0v*?*`y?yT%dMx zCs4o(w%h3==e<`BB{&Hi9Zc|P0P^6O45eyc3g`7l=Bu614m{MZ2Q4IT{}fpQWhYj6IWDr(zMH!Kk1l zpg1|#L2n`q`|E(vUiM?Is$N`YofPbeUDBII%L9P5iA#9n+k%gPP9r^>R5nE+HH4e5 z&Hs=x+zI_8+N10==EZQjBudNBnmE>bVqza1yd@W_vJ%t#pwH|u(x~B=Lahv#Dju!gu$CM`(Fs1G_a$s zs5w92132-3T)FX&w_={spa>B_C6#Z%vs|3q1K$n_(6IkxlK-Z?3^ASi+2GcC@~}%8 z49Z7vsESk6Iytdk;9$ee;BgVtKF0&J#iV$G>3g7YOhH`xO@R@6Q(*c{olXvds~Se3 z9|?zw^k`&YLTt70A9b4h~V_m8W!^D9M6VY}?Ww`MtqJ+|Pb2$p_NqP<5e``@g$H(`)QRWK_L3S) zQs;KH`T=y>-c`?9&S9hV8EA|hHs_2O$9KY~A zX_SxRZ}qwuI0@u+VO6MD)csX)F_~xHz?|XX^p%7320s0W}EY^dL zf~kFZ)~i}+OQS=YG%4Bs1i6vGhAC@W-@^x(S{RBKht(5K)IrGqYz+}@?r%)z+n!px z1g*-+zv+V*s0y6B_f)yfC2$DQedB54WHkH)_q9toIy)FWE?*px3=ItpY)r|$I5}jP zyR3k`o(6{Ah^T=7@O=MEP0V#2z)I=3+(4vT z+>=yyWFYo>3Jat@CFjJc8c#%@()t#ZBICw?zwh4_V>eBoI!CIwsuTeDza(hviAvzk zt`$9N{`J;rKHnPw;@X?!{&)Liz8b2#yL*4C2z6v+B;Y*3h8!IoeIA%c#lXl2&XYnN zp)3*PJB~VWZ1}n zeZj81KnLizpD0-Xq)7(Y)c|l`Ap5HaxJ)o$R^WFzdk0We=vkwH!9ulAK6V3c{-YrHgN=P5KplE|H+^Y!&54E&6U;a$NF5hkey6lOU(08SGRi~aQrdw(?I zdU1EYk=H{goTU#Qu?NsYAge{{^m-g%4P)!DUP5|p=5yku|1weg7r&A z7a$kz7i7#?iP@L1n$K=vEm<}J^NSt&DZ#rqPTJra23$^ zwgWlc0Boet61DIN^PRXXY=IL{S5%B=@PQ(dee&Oanx_r;Jy0AYV1Ue~hE@q1u*1?+ zq#A#>OqnB}1{;qXCHkRj`>^{>J872L1ZtrFeyBeM1g-lMIlc4N`lvYqJ5(k#SWU&)dr}HL?j3a{|qm z-}Rzvco-2d0=iu8Mh2DD;8SJe0n0%0ZJO+LfUf3DFBTM zP*Mmpf62jpw!=zI3S#?!jwyEtW@3 z(jQNbn9p5YGMK`-(C<%1$ve7*IkpgcFe$N)YiK30*WKnlvgvN&-Bb4*>44MOBvW1a z%na#3T&?goaY=D9_YQ_XnapgmGj^ZeK6C>N4ccSY-RuWkg=6~u)X~Ivee*rNJ^H|W z9W*0ajTQz`KYyi>LG-cD65tXe_d!rUx#o|)Wr#Ol1#>%z;o1rZO=>B>6~nRq_Y9pU zkVGc*lUPTW&>f;*@ALW4qag2BLL^Xn!S+EJq;9+W1Ny5~2V}6yeJoi#$0yTjk-{?b z&Yvm}Q`!=ckPscdcPAeL)=$aoyf=NR+AVYS&)YDr@`>V;nDn{>WK_Y~67Jh0dU*E; z*dku;Qpb*C?KBEqy(`EhD=TOBTUzOSFI+ey8IgxGuby(nlQ2_ez@9WqrCBn9gb`og zo)Wm*KK0E);F5fBJU})x9$-yKPBvS1dqlnX?j+p1Npxj1p@y>7I~TpC)Zk>FuQ-0B zxJJc7#S3%GEGRbSr=eVK!sF>c;?1NJnsh<}b{>%j*n`82*MSqeFUFLdOsNqVpHc7x z9b>vT0GEh=nhJ3Y75x5#Bg&lA5;_LDU)+7ExoJ{bmp2D6ulPWw1t{-yy?e!4)1eWXo&);v=jf2$H9?uitFpMzp83w zqpK;9ESWUKM;EJQB5G4HyL=Y=n%cGFSgABL{Z=gjZ+(>nZchCOYu zyU2lNAj^^!q8xLgASCmr70comydGLY&8(jXyb)2MJ>W<0jYd=Yf+KOU#JPy2NUC-V zdxYR1m!WQX$1m)kkDL5_FZqVMGe{nk>Lqm;R(__cavKY&hVkLyqeoS@r)~}PvxRY~ zWEcLIKBn*26n2g=F#}L02*ItVmI<5eDE?X=39}n9qwqr5zbTfg!L)?BwjJ5?is=Jn zOEN0p>b*ui3dLALny>A}VL17=4d2(i_`S9w8w7%7*6?ouz8#j6SCLM<@BpZC ztO-_t6$-{z?3Sx%c^N0L2AeAa;+zHpuF2aqthgAhj%i7&;mg=b3yPej+_v)wqZY{m z>kOQS%QZZ@0ebOVL6`+h-NfN-ibKq34&m=v>)(N^O^DVQO>VQ;FC>|Ui`(!7z_hEq z2|QWOK4>KWuGDbvY)9WkkBAHd`R{Sccd(D^v7nDgzXfy}@|L!K5cbpaU9dXUWRT4e zcZ+o2 zUECvH;0~bzgMk%N6En)88j}nx!s}};=~r`RjGS{^*IH_>6%jywe*Wv1J8THM%*JO& zr}G1scz?;)@^I*Z@hM*)nPpf~f5bG6VABlF4Wk zJ|Bb_HW>G_USCKDMc>uHz`ucvRE73E^&(R+>Q_nO#;UJpCt?${5IgiqxSk$24-p4O z-k?19=om(K&O4XKY|Uef_{&_qU7xO}SCsWf>hSA4A8J$T z5@*yaaX^_YrTb~S+P8cfaZU+NfrJsNf;e>1gc*PG1ckv>_fvc_nf!dB)4dLNKDwiH z-VE23tno)zfxYER=aq~OoxKM=+)nR87)Ee~oT7Zn(ar04C-(@;DWXF8g`HNd4!L{W z6*)9G?pyjS#rp(#2y;ds_HdNgswIBMN2Yhg^pX>StYpGe5x(NVRQSWxOYR=bh zh{UBhTYcTN3nzMaX?BEgtBB#}_+(#s=1d&M?9+YuZf*0vMJ}rAccLi}aP&9mXrbfc z2Fn;R-f=r|Hh}E&sPqdnur(X4!gbu8)~)+KB&S9727vKRVp6`pj08^E)%=Y8^ZcKC zQIP4z2rg-|`veUPJ?Qa?#Wdjl6M>2+l+7kjJ>HWl;iP`-4J{K2Z7bU7wH`41>M#WWa^+HZs3fuY0uF-RH5LAg-d)rHw!c>O?X z;bd*;j3wX%(dT|TVmvQvRzWskxXj+g<&og`Ohq(Lg|68|9k$bBd2dqFI39-yCkbe5 z;D+0<$B|osORBaZ!%jb#d9~d&&|r&!^~WaCYP9Pva|TL(+55OqRU9sHRVS2C5333C ze4i&8QiTvfG?#ZE|7fGADMIm%@PNRDPPh&iJc~mMGu2YY-(M>Ia`J+6PrC$@S**x4 z8>}I8pmbcAZ@UL6sO_HySW!w6cfZ+b|Mf}zX<>NM$;m>fAL2_PUuD((DL+5IYjKsJ z!}4`&gYcyERr?piQHvxL605p5+yg2{&>$Qpp@3tA|6R@{Z1sXWo1vg*P(~UfSHs*S zhxA=)SNkf|H4GUm8T#<7`?{qEB*O?p6$Q6XR&e)ofkTq3kPN%u{+ifTCX_E65Alcr z_ooY@0riNUlyyWURaL28&U)o~*`LYCM1e1!usv2iEGUH!Eimc_?T}K6#N7p3b3FN< zs|cagKoZ3|wZQPtj4-dDXI95`xF%)?ksq=MR%ORkV{;!)SEcj=9}k661&&&tBVe+} z^`VeXgs{ZqgDCFy$xt?_Q8RjjMg{M%F5$_>)wLV~e;y%x04X+enFEzB5w;|ut&#vI4K5Tt3lR?aw@10L#!V9a3u zDyL8=zcK!x*A|nzCt8A9op0y&v#ujjJ##K6*Tgw%kTURk8z;4hzz}=i>wUp_k23^1 zwaUOtYCrqyW&2e{425Mh#!!J*8)SsNn8Js;h7o$wa{YC$`u}(V{t`|G?1NB=#cCs{ zhRlA6^c}$=u@Of7>c})(tf37ygK0xb?d7c%DX&a7Y)CbygcWJa|_YkkUI|z1;Vd2sU zoK^8Q-*XnRGOcEK#?*#wwDx6BY_~%K(i1sCB-rb|g%~-HnxqYb{mD|OV6)pDn+c{O zU7WMxZ#N5v#-f*j-2(LLFIG&R)gy*B%X{M!u9>BIug5lb=$g>K?L7tSoUJU0 zXi`_#403YJa#C+GKqY9j0+FRc*y28Wg+zzj-cMjpThB8rwKP`hbWLwO zaNnQRuD>AvRml>&-*V@Ag#%L+#eLkqsj&hbo4R)pjjeSCe#CsNnvy=^X{BFu{* zedPPzT=c3IG~NVzd(k{xtW*NI8q^th+fWY~B53C%H1vx(7?X^8y|J4l4bpr2@$bAa ztOy8_)ia$#m*3MDa2PxE7I@1^(blWLHDjeC=c+ZiZf>T8&!b~>J$|I5JQGDLyEZEc zE`Myy_S$+N%w?Msz;i_NeG$2{ZLC~Zk;mtGzv6z|^%(NU3ax$8^J84RDs<+)#^v`M zYY?Z$a?~iF-TgB5NlKz45X%L`gucoa(Zgis;aohQr&kx?I%$gISe&5pdK6? zgj8g|WOp`OijBTps(z2ll(m&Ld7tKS+z=h8P{ik_f@!py;Ji<@+<0YwTk4>%gi*?PgRukb^5AJ5Uv+kIP5azrW9eOqj z$D^4n_pw^H+&P9CDcK)!U6=wZV5o9lQ{xr*#m&glJ;kn-??w5QBz?%>gbcAws{Hpd z5F1!Zk|CU2`2M@)X$F&5GBn!xELTf-`k}Xm?B-y~4PZa&usiB;Q2i+Ta`PSB z$FSEw(3kvw@f{<1H>DmGQl~jV% zsw{!5U?6%VL$upGJPE+!e!!wpQZlrk&^RR#xkBamA$pbH-C{Ob12v$*lWiAEzCYIi zqut(+rySm}pr6=}&YUJh06JGc zD9hZB5m;gwpG2Z2?#p&blxJbi5*p|lyIyzR9#BMkzI$ODNnweBay2y~wu@GHwEMfx z)F&=w5S51O9q!t~A)C~HzsPcBLSxsb`nw>=pDKzO6 zr6vb!`NAmg6Il7A8ckc&tL=Gi`PZ6$U>15RR3FE@DrTA`PHA+OLwGc}=KTzwJ=56= zFBk*9+21u>k%X^z&4~2G<}?bJbj$6^ZO?pLv>$C}=e%Bt?|dBHz-z64WHFre`8(~| zJil|rnuze(O%`ctO0j!5v3ipm*`lLaO zTx5B01%kGuM18w1!Mz!OzlGa)c`$QerOA1IaQ4@lP$J~G^#SB^n*-4!B+4r^*lO>% zrLpfKuymqB0hZtM1)2hc+P{OzRb_dKLX5K6X-|DibHhFxSZ&}9AzmAdrp9#B6TFYg zg1>-UTW+OqJb`OasZ08FP45VfmAA2Z%OH-GiP+UHI%vS+x402+Mf_ZEece>d+~2=F zov0K;F1tb$8NSh}nsKM)#~s<+Ana~^wmZ2a174ThAeY$KFbkcY#sY-e@vQ_Q2`Ph< z9u8?ag?_XZNwXPc+*<8#=Z_$jb=Q`Wo|O+tO~JfH)TzhIRbNerzfIPNskOOWyn97C z4egyaS#>SMGFC6MoKgolTUE9`i^c)d}xNJ1ji22$UOs!BeBX&3ZIf7zr3 z5{U3)1-|$Cjx$Bbm~EiBmx}Npc8n=EY`D&9-2m<)c3nj>P_;cE)XqL-onCjblKb z71UI+)n!gCB%{O)%Tv$`zY@%#J8Y zB}o{i@R)k;Vx8#F@@*w`f==)AJMbaFVMs(sA80>%nc{di<^0_|=i2dnttYBepzLm` z!oO_(Fe-SqPzQruN1vUZ$l2+Anzu^v$5xM1kv+|~pSM!C69ce)innqe+doaSzWC^| ze*Kym{BYC0^z`zTMlaT%C%jhB`yO!dW%+~}Q5g+2mFTn1v;8gWY8x+@k)t4Eg-DDq z+Pb)wOXdY1CZQ3b)gj-EIVgAPLW#GzBL**A8dw?kY`A2b3-x)1N-TWRELJULigq8n z61Ob2T-Py%&J~grtJG3-X>$DmIEF6!#{?j_>yARi1@GZZen$ z6AS@q=m|JOI#8o*Y6wcc^5HVTxW8P1UGD#)-+rkLejQM7?i(Hc&N49hl7!Z7`zXm! zmlDB?oJxLS&0RRI6{HI#X~#`Grw6NND0G=V#c{;GUA>T!X~u!9&=&0ynH;UWUp9w( zsrCd4oWIY)y@9pz)BE!?bXmw=jNN1}CS<`3T}9XnD~3}1Rrc5Xc(t^g+!iWc%|JHW zajZAlftzPF2vB56H*kT+;yi&F>#7V)J6_SmH zULvEvr@(FFK#!O@P7K}5@9bg=Wf5Q!TIZ!7BZCc}rO^hVL&jdVQ~RR6Ctj6YDZ2Qp z#{K;KxU_$fi?M{>&pV{TqTqazvaY@E3@;{AH}BsWki- zw+qcbXaDzHAV?0@dTmrBZO1CHKM@{WzStP|a08cnX#?r>`hdhL999=)JE zgQ*}EV#5&uhMIZx4eSgX-eRR@zv)IPG)7{~HqTp_U@_Ewn7{oMa`p?CD`P+4#3(H-)u{EBbj8K)F_Dy{*e*F&HJ9ABz zSVmJ=;JMI8B9KMcE`o#x-2aM#$$>P`(YX$ucq6!QQQLlf3k07;xVubc#YXgrg`gYi6^fx=G+EU6DCVII+?mM%=-)wt3?QI{j zyr6BTR1XqhnNs^0#@XcfoHwsnywZFN&|I&@G zlUbx4>qoW+-w4+i({*^t?cHZ-><2BiNi19_hV$BbT~mkPC}`aHtXniT^B*q*=24|G z7x*h8UYNpo(=bl3t=nUT<{!DhrIy#?Z!|-FR*F_ALRkgCxGOqxiXP<_d7cry7m{&X zMoR#t0?TbY+EYiOB0Plfhd|u+X2H)WINHFoi#HQ~>$-FYYW7ky zY@tFX)1q2y^d63u zLMLr>XTXMpM~bxql7;htWhgER43VFkIY&emC$WIr?Yie^gjBaj7|%B*?a)j~H)&bf z0ms$|SzV;`y%)<~x!`D$PY{_O)PxnpkOk>y4O&l~5@x5nd^Vt1ek=oqNf$kqS@()P zhby9KT+DJRxQ-fQ^UD^FxxiNlA*6kq9(saLG)et$_x+Vn=h#Ki^cyxy?TWh{Y_)y$ z{(J>yr}uDMqW)?3ihgr4SNc3vk5hn=zb%WJypsBe65IMxZLsshvSfayJUO*s7%~>x|ORfMy6Yo&c*Hs0mtoBJaA~{PEw7zPGsk>Ub#31 zLC`BCU}0NB`i>wv(1Cj6DYUnEuK4{p^=Mdj72ip%BeCeso&SzIXO_jVoM-La&ku<~ z!*t&JS1ed?U7}eH<$4e+t5B2=EC#ZgyrwWg+3E(^Z7*1ewwE0=0p4c}bTCJXdSdZm zJ9amn1x>hwF+u}zXJyb}44m}Dc;@%{*Ij;PuDKe%STM~*txnqpgvY$~67{M0op9<} zd(9}+qMv)lMsY$zWs+IFVA>kXckuZZr!9sZgiwhDu&{ydg0jI{yWJD>6R-jC$7##hY~ooe<*zb!-9=`z*$UanHfWDU)yvsL}S z3mqShoXbD~Ir#2G9Oen~y4-$d;E^7L{NyN-urZ?63zn#;V@IVtO@(gC(mB`7{ZIXyXF(WdsG0#P!Zz|`J#j=}@lA22YB)_|jJU7Tx1Fya$%;+|^Anx)0 zsa9>?`w^WmvXzWh02|(%*5yVJX7TVNw=^zYa%?#*H$`@ua}(aZCy|trE{WMD>!z}nqf8>j`w{d z4m!Cm@Wi^^q;AcRbXU_H>$lOr{_1XR_t^%%m8jT>L;J`p54ge#)Nwp%se`XA_kZl zViZ`LK<|Bpmj|29pWIG%xUjB8?0*xOVO*l=OYYMZWT)e`_ptVYfwo_jRtIj zLEUU}8C-4O+2$E_qoZ2d?~cNci*j8;<0ekIkb19DH+#Y@pm8C-H)PB%t$~&Om$0+pD(^A6 zdcuqBcDMXm%Rg~O>m0%7{mbAPFC{g#Sf`>QgL=n$k;+CmA?`WqBRF2NyI7SZz2#?| z8q-LC*_4-Ql|!xn=f#IcU3nNj%wCs6Rq#`(LqCAD^_jK`F-xfJ7 zD>`##5ZT?P!O8oidP%elu5f-AN0Lk2#XNmqzcZay?4Me*>)7uQvHlc04xVJ?c#$yZ zR{aGoU@V+aS-k*mAUYFTC+~C9k3*_T?PPeczkK9|)!q;Z(#T>&F#hKM#kh4M?ZLra zfmX#@(bqpDH1_WHngJC~_|OZQk?=9U5t6(-b&f$TXR_cBTtUs3Z27x~_YEh4cZ8Uc zRYj-ix_=A=q|OU@>Z16w!p~k z=o8E9i?#@D&fvOm;P+!%>1Aj)-B;#wFVHa9r3}H5{CFsaKobjDgEI!M3}-F-TQ*Vt zUCkH!GYKDZk;WLe*A|}U7t7G&;0Az|i@0de+v>bPUBdV%_XG`YtXvDqyXKEbH4ZvT zvgw+c3XC2M*mq^y6C1CBWnS)Cyq24D9Y9gjQrq8m!f+|p7(h$>C@!W7wZv)N3-*^{ z{dvOP{qn83Qv5?kgQ5GGa{62}sU|ze^~2A8LVB&M{aIC(7}tF3bknWL^P}RWT;3Zi zp^%_!g7e$0&VkEEwHon3fMIcs*yA4SYEs6uzkV=b_^HzkG8U~HZPQ?xI2uK4ta93U z_?W<$*WbPbkYw=u(+oz^9#6OlvlCAr#q~N}v5gocH*Nx9bBVq|w!`NJ;@)os-?CV! z2D+!pl~}^TxG^OM?iV}bu`fb?GY#T);?jKAlw~BCt6q)4pH4w9UfZoIg_pfHQGMo^ z@;<9em0yq-GxvLIndEq(<{4r$SxB0on?CiTGsk-6_iH8Z$k&V4@p+Z~r3&5%n8=<0 z{LA-`M)r%IOJ93C~P_18|iBGS2~0vQP&B`zxZb!dI6{UXwjE z5#vKy1R8(H8W`}HL;Crl1h;pUQazsB)-^KXZVTy!HRbF>Wp{u9rgEtb>7h|Ne8&F!@lu~RUH-r`Xzg`x$>DdwLfe8~ zbRJ!4LdQ96Pnw+?ouw=+=+gPqyV|D3B$07^xYAfAgy7OVIk&n}oaQsx)GS263b$CVL|HdfldK`A9P3dlu4ZyHgZ>ZMkJ=AlJkx?4j@f!20 zzl0;0{1aB69_q>m#Q0hW@V0g?K`f_JQNiX_7C}5@Zm%eM&{k*L&FNgnon3pwsheYC zhTOkri~Y}MFI{8><`yukw(fLL*8b*5$OV6VlRBnjVfe>d=6uk(3AaHx9{s!i#cTNh z-5GZ^bSarRjyX@45pt`Lzm`G&tMURJf8x7&y-#yo8eRv-T+<#dB(HnC9Xb?2P6S8 z0d8i8%}jh8OwaYdUJ3NCTb8`2-%7-kWJKg2m?X_=3#Jnl&Le zjuxISaQAG)3I?I3`#LpW_(`nrMR(^cCB^vR4?!X`;FurrynJC1DzcE-D`Y{MzQ|6zF8IX{V@gz??8P-yxNT7 z9=;LsiVl;x^w^J-C?2IazJ1amcFJhOHe%j=Csn-Y*$t&#gUa83<qlF2<7d^?T3ix%$cRU?HiO$35d2Vz5WF<(AX;c@i1& z^cIlRpEjftshCeLsp}4l!(E3xax}hOorREH@s-%rLLNJzb^Xr6Z_6n%P}lFN<_N))jOQ#VC+9hT2`$ z7a~D%shrQpZp$CiFJIbS z?$d+qjNk7rm-i8)M65SwIjjo3eUb;h-eP*}cv|HR2)Dq`?=3B*VYG}_0{Sfk zXz-BP&jlVfk-ES0qKVEu?;f@%7dk0tQZ7Nm#_=?4J zL9rA<<51P1L;p*-q^GmeSPqTxckXl+mXh6jV~%vOZj+?>bGY1(R2+;~h(IZNp!uZW zdpX`y{dyuMe>8Jqt5e%fa(=<%fy=u-7C0p>dpERZ6jS=O1mPjF+UJGE0c!|7_qOpp z$K*DBmvL0j7-wDG_{mQAqfgdy zd&)Rl%VQ%ip;(=zwX}>>u7a>e=BH~j2!lrP7fV9S8Xo!a zr%Xl~@NthT9-wWUXX%N0GkhTh$t=IBHlBskDAD{_d^cOE7az%U!s<|+r}E_DZt?+% zklU_fI70qs^`)PEW`&^Eug0_*(aVS8_aiQ~J0BU(^Qtx6o(bJ^trJP9b|H0fv-gRf zglBN}7q~mt0%dZ>dEtsGO}UOYLR!)P@Ovh2nA|S@eH87PM#v4*Iv<&M?fJY*GE%gF zAo6}7GZhD2N>;*Sl ztWsa&Gk*)M9Ca}gk6NR_M&Pa$rO*1`?s4DFx;jqVYv-MUzSrY|T}8XJ3Pf`_i{cJB zj$cJYek8l~)2&XPky9BoN<6mDj!nz2wJ&{OHNRYf-Q}5qrjz~5>tTu3Vq4@?DPVJW zvwy9-uEKP-Q%1>xMNIac1BtuIC>-}A0?X4gD)s{ z^|8&3H20#X!mP?JYHFAY_o!X%SWE%G1DbE(&#}F*`W4n6tma#|++pmyqqSK6^k=gi zT3BfK3V2<^%-HFK(2SExG`OHKR(XWPpXhixTy9JwCpR+6Tof{~j!&Z&jc0_`yTiud ze?m&|54rW!q;1hvdSR zHRNGMrZ{l8{)j4L9m=r5gE4ECxv}a;{$Z=%4D+*BzGKoKu~N?S>JhPSW)D>+UQv*9 zbF>uCF_jAy&B0LO*TNNB|1|QOH1kLDL8MYvPxF#fZP{bAuMS>f*l;Pr@;l_8;zd|a z?1ZP2@H_|SoxO8w#W@d##d$B&tu{}8@d&069;`C{^&RDEB0a;f)~@!vLX+}U0stO>3Au{Mwh!UQx8)9%IQsfp z2HlqqAE4~ICzp`oqKR(>T_C@L)?Z18eLfx;PT=|xai@;0)82S+~BeUe0O}&F`E2I9W<+(=U5u_-|Nys=NC;#(4X!P$^cWy1EVxVGIRP zxZJo5#9Pc3lfd1$_v`B%-%71a{k|Nbh`XlQTQBl$Qxuk!jidG?t-^Qera-G$^lM+h_*<1EDAF!zOegw>PYA-*A%3v?F!6 z4m$j21grK#8Bslhp2S;xub@pK#BWxA=}xrBBICcAkqP7i2Kd>$P?6BfU8)#aoxsq#kn(2e2e1BGipUST}F{PH$JzxkjJ7 zJbMR}qZNF=@RV-PIo=hEBTRUh46hi%WToz9b0mPJl+m$9!d+CBl36w&%H=6{?cV$2 zm-5R9=NlFltH-1f$XjpYAk@}_ix&e=TdxhqSQg6m2h@+cwF4w4lm^{{F10EV!cV*? z4J)nP9qw(hl;T%4BP)f=6|OPoBu;tKR4Wt$}o_Jap8AZjwmFSe2`{i7A6rY zO%B(TowoI%jKm$(_?wEY;tSh@F;+e1LYzw>;)p*Mx(lv%CV%r)TcC|2?ujuxUGesL zD#lwo%a*QxLNs&Dt~BRrJU9q=97g)tika2wX#13j;c?rX)+f9SEVq`^J$5JL;w9>4 zF@4n;UevBSx#@|>4q4=iJH~_Krhc*lzp|Z84)>^Z7>gqzNyX3$DDZ=lWI^ ztCJp``{>WB2xy6kVt-Q@nETD$L6tJYt!Qs18>5{hA%8Md(bm56^#(uFP!)kfoP6i@R!N*hBvz;q#}3BS72E z+(8x6F{ILN3HQi>;&=Ry!=1j28$WK ze)sNOwp%QBBaVN9#q3wJ|1gEr@{t5b&D)?1zWE593eAz6}=(-H#xJ4q;39$7>#a~qR%t>>Ew>X z2HIoQ9kqDM0ZZ+d4uaVK6b5>23x^OVBoxEDRYWL9EONK-T@RLCAN~@8hpzSv6KJFM zmC7>kGv+gU0Yv?qH)Xuhi9${u&oc>=6XZ0jZD@a$%aYMZKJarQ-_MU|4r8QSH^t+3 zv{HlZgUPGsq9>m+9h9W4p5?s=8Wt9hFJwBrS0DxgH_Np+k#7c9#}+BKDv+IfI39 zvn8>sHO{6nQJIF24c(yZu01D090_5q9XE|6htaABUCa%gcJ`X`G-hR{KoH12oxx*- zSsAJ&V5BGAs?&aFHLbmt1!(sE0R+i*pO8Pqx{ltfN}Y>O{mR|DO@Nu}bJ15)r>8-A zTf%aN^SMU?(RHG`0>;r&bff_ncT^c08Eggv6c@aat$HJLA;*7YmzNMqaX-ylD;T0+H_aHK42d&HO82Zx{J;ykkkI2sJ zP(E^g7ZKYwg-GthRYHJ_BjWgFc_vu11Jv~P3VrG=p>i*sF+gS(G zK&q8!uQ|jE$*kXQnEM6O9R7Dtq`7!}%)yz)Xvb&fNB0E>L}U7P`jAEltP7r_5Icly z@L)?5E;18f_*c~7~6f9r*(H=xY3?%6>-n&bxL%oZ~JAsbVO~H4b6EB9sz*Fw*BXPQ_<~g=R`K2 z0Yr59!K2Fd$^-;#USHVZf(f8;kb;b(uJJ5x-iO~B@Bs)I0d)D_8!x+k0`fU*ADGQ%(IjiXx~~^M1n2Xu{n>mku_1}y%g9W zL?s3=ojer4Y~Sfd+Jn563pGm5%Eh?9Xr7Xtr|m+-hYFW$8_Qtf5Sfb`0P*VTNBin{ zz7!nC^w!#`k1i@3ezohP6yJAw^hjI2@7Ghr8Z5bVI6s>nqdo^1nY26`4n<`bm% z3^Q^>nU?Ku0Potlczw!lyI38FaaP5UOj~R8_UvKZN$5N^qjvm$MXFI^0Q-Bi*|hT< zb}6CRWmt)K)E$87a^U0EE~`0=HsAjFz1U32#f76pqBLI-$cn!FQ(yj3z?;!A~e1rvjag-BG-22 zzQ-W3>yFK=YZ0g0cPMOxDEhC@JVn1l<@!BwuU+1$&zs~z;3m@j>VwQKi&e|v3YF?M zZYnJx_H)1O1puT!uKqVu)u&GO z3ecWPLXdLD4TYosY?7bq)W@xgwEFAcy$%t3@OW~9{rQqmhWnt(s?UYW{pCw<~48GHWWEI}CGx`8)0h{-_>FW9y*Ps#z7f+~A;YMOLrAPyS;fN2^tN7y*snp2*4L3Q^GgPS*7mK;RV=cWi$9 z&xrjVj+tV9v2JFrh4#RZ^nHD+)oM4ZImc2ZmMHh3$s%bh=UTrON5|~ft%P^O$@2D1 zyjitTU^+)b4J-O+7az4wZ0}vP#YC}~X-{vj@z)DAPW!p<77*>7gV&|j`GCr$|B6QJkR65YMg1TBW?={0#3U(o9k~s8a>aL!@-&U{%ZM= z!=Gzs5l^|=^a|5AF0N}+clOKWmCR7fH-ds{`dbRlp`?dJcYkllQfra+5|7W2!V7{a zol?1OfI1&)C_hlpV#mncWS&#|I$Fog=JO|R+_B#g_rn4R5x;7B` z-ZE(#yJy+_`f2+4W13L^+Y5j1_iFFNTwHnOoI;#MKu) ze#MUvFSK>(8pj4+$u_T-5}%yn{dikUlyBXJg6q{&y-~>n+{6#=8~=?4#}*Y0+n8p> zO8n;P>3hQSM2KRw)9DZ!Ih?|PMKj&_&*yu96@Ckk*td&4PA^XPJ#>Ghc!99y#j#cjvfy)S1U1g`_DRJz!ousd&n?JAxWc&|TKy2j43v z#otSO3VlC~TXZ5A^Vz#xMeW1w24fddvR9r(`X#z+`BWKB5)3hxd2zP#WipKCp-A)t zYDjJD!NM;FrHuPCvZD71+tnOixfir#Z)jl8C7_(dI2Q@!Hw!KDlXr^BFE)SF2-93h zvOlqNL`K@Q4?#~Tuq5@BCufo`x9jPVxIQ{PHDv-Pq>fU9QZyJ2>x^-rw7cW6^g8dv<)wR2-{diGZ}Sp9}83tFNUabCk{UK);Tz*9Tp7yA~2@n(|` z1szWMm(Y#XZ>-s}*A6sNX_6xuh`GItw2DRANK1`QuR%-wWZqY{f;(~7zc|z!RMiDx znT3S{tAT^2{;B%t8byksmAa;pYasz2yV3g+Re{kb%DC_`)#NbWDrKXQJ%GCCBc!;a z;birUnNR6mA_%C%U!Y#Wn(|-nNAQ)_;&~tj+#{&JSwOt!oZ5pc8ugLXiGWSn)nb56 zgoZ?NGK&acN$wQ==4@DEPys#v^gvTe#? zDCb2;%v6!37S(SP5c1y@hI(0ed$N*U#b?Xo!> z=gWlD^(j>roElzl&J!kfNp);wMkg|cfgzJKaeZLbYmLEe5wFY+)sZF%FkXBf_NboB zCyv5leuwW2x{JmT3*a8=np$xNTUr$>*$l-(&&Q9mxf|1{Eg}Dw4cI)lwVY^ zxm$mcvX&{-EY`-D)GsUGKGR!MF5@X|X8rBM+Hv}OJruMEW8?`n^%{M+GS`0p)nB&+ zcn?#BsTSS~6f7FJY+F?60~e>TBZo8Stpw)d(%laebS?4K=vg3TbF`dW6z(b6~v0 z-=|$f(i3urFZbaVPxO9EHEq_EArOF}3w>>rJ8JTArLgOm3BadF)v=uY+HNWh*YBPd zBR@w;-dS_0Hfa)Peht}j#r;)KSd@1uQnITlf4RY!TR~+V5NxT6llLrF@Tyc37Xu>* zFo(!)E#=&JtgCO(aOPB@mh7^ONu7jdNzG&G>>30F@)nKGHZdQz2Q?}qTK);|;y?dj ziKs9}Lai}N|Jgl!^j%e&XVR(OQEV~G9zN@kxFFUfBL&?lIUfn#>XZ~g0%-S{8v|eS< zW$gU?)d+cqVrtI#D!QnEnh*A|a!LAw9hb)JkO7y5v%o7%bv4xn4KdEr(*vOwwxU=< zp0UITU7{VbNZg1h&IoY^BU@V(8X6i-y9EvF9bW=Byygn8Jo9;K+MJ(Iu_k6Y272<= z4>@6wvRCq^cnPOaXR>Ub7;bnWx{A_@<>Af@i=`152zMupKc_1rH}-oy_XXqvXqvY_ zSsl(n+WM#i=f^r)uzvncTvcG$VbSX$B7}FHI0l zBj^3x@}W!UtoEwrT+vUKNBx`5hLc&kCnqsM176H0BNGBKbS7$YD}vq+Mu0{{MN3O2 zOL&sS-}!2bt|i(pEOMMBN39BhLO6o1;?&u@CTgGS%eTx>r2T0Xv2uEyK}TFvRjM|h zXT;pq91RFhP33@#U`p|w;SY=Fu}uWllW_hm|D!O2R&Opq;RQ`dNLcbV zicH6Pa;hu;6+*YSHPKw8+or?*FWR3q8U?z~PG@JOa#p;$))(lbEgwE-67Dg zPF0&2!RKtFARz_E#i4rG%hqB@%B%b7=vH8Zh}xV)I3VBtTIx4^Z;qI2wk#gi3NF*V z^_68=N+jfIR`-15ZwF~3kt3j7m6Vamb32$p@{zV8iXqb>_&Jr9ii9pXrT?W6 z`W$H@HLaJX$fPHL20iOX+>qHcTee-Fgum6^>gmy<2k`I*Ao|5dP|x@2%1*qVM;HbH zk1=PUw7Wcd7Y#NoHC0Sm8LhCeaFUbQ5P%%^sk7gFfgUOc18`n6TqvT6Osa?d?&Ieb zv8!;vHh%f*6wUHOtKhfE_RZ^bOGZ9t;??%o)5G7pT7>O@#=kml{oIut`e}EjKL`fyl%2-(aXzl-$iO_ z4o@|?l#2o)ILF&lV~tWxrdgLi9i%VwwFC2onV8hbnxT%wJwgTW!@Tzx^K=j;fFgM+ z=AjD&TtqM2Zw3Yi`QiB3z_Nrya!OSI{Tut`%Bg|^z5|&hx2;Xsd?Y0(Q;5n?=**)T zK~oEl8UP(h6o5;8YL%x5$q6$Zcv}m@ML+TrU{y-qXK~?eD+OLOQM(^2CkV7 zKLITq`08FV3dOHB;1>v^zK#w7$U>X#8+VlnP)CkkO&0~_i-tpoz@vqO25@OyHqzhz zi9-eN>P1RR^b~>xoy*Vv?40uo^azk@_P(NLWMp*Q8cNioWk@9lokAv3HB}v91%-s} z(0p>l!>}LoH$+Ip>TbCT-iB!f0w2A+xaby4^7&UGsN3H{I~MW2eE*mm?Iay+$rdH6 z{uMeua2E(Gy5emtdKOryjj3t0b_iQ@HyEk_ z_fib0h`|{eeIFL4WVEV6n%pNaJ*lJ^xJXqXCblTLuo56rGJd9#MkEl2?wFgye<4+v z$d$sm$u<#ui-Prf?0>KTVs-ev`6ZH?V7Q+KEd%jihD&bl>nr%uqMk{&K2ml4F(ZnM zKj5lhK2aqIw6O-wsMbJdJULJAiTD>7u{o!>@5_oS4l5vxEHZNb)}(UNMpavhnCkB8 zVg+P{M1r2^^z`)3F695qvZ#r&f!Am%G!G4ffnJ!?1@E@(CG+XblY6gsg#qG2jQAAH zA7NxV!6s8`LnW_<7uL773VuZ3ZTy9q5Ra79KUV}YYLS&+NAQ}8mmY2aqC2+}S!gAq zMJFPPk&4DO20i^OS6Z5g4z+7^-$f>st<>qb10h|wQ-U9bSv7Gh%^oaps6+^w3R0N> zc_OGAf6dH;1U882RG}i^qNrIq{HR7q6`AyXvTm#r?2NI+R`4U;e~8x`^mlLcd*IeA z(ca{T$RTwKPE9doo)yK(XI%Uq2pD5@> z(V23M_4l}=!@jKL$zsMts{T|R!Elm;O<3|EI z%RK#N(8Ib;Br}9ehi*h6;yVrO3xC4E!26&GZ*cB|4uK$=Vfo6>&+l)AemW@)7gr+W zmm#R-^WtAo_5lL7xfp!fei4}X%MfYM^4bF+aRJYF5e|udrbFT!fL$ycG(gM&JduxX z@bK^k1%QNNEO_?cx~w zk-!26b7v&A+t32>V0n4@u6-Ude19;-gBk)7i^VuoJ)HVHO^fX;zc>uZONLVJ2$qNEe9dvQLq|(CDlyGETw2Q+8b$k;nuSmC4)E1-tjI zp7baa`-=})rLC1vXTO(qN{t87zMrtXd)cLJM>5Scu>TCeXPbC(^hg82|F%JGZn{6G zP8--(Ne&Ma$FfjOF9zsXk#-jTMQcIX=tUuEY?8yv*Dm_k`KXB=zkJpQYv>9J{LftY zMb`fx9KtzaZeEuNg{4{X(t#xW01a&0>w#iR1tvVC7RJ2Kp%h`NjC`=uxgy&pa0C>H zutS>6u|Y}q-?ZgQW`KpEcbPJlg_>6fqPVur)exWn1S?HIwccg*z=4ev56sD39>b^{ zaJ|Io$><^r4JpJ4LVth$5H#W-j(zp4${V3w89hg%e)&M--YNM5gpnjWiv{RJks`H# z{Ll7fYX_5{qfptv%DSyOA4^Z1WYtao#{sZ>3G}>JxpU;~wSFzvNb<;}BjmE(8|8(4 zEJ^uA=sID#?0>*+GTgzcoNhAk_n=D-U&CsGH`!ew<`&pN=>YtmGgz<0M`+sHGaO3&MGNmeutGH)P$w834}H1LLG> ze}&}lD;0qsY&qZ75#^kO%DSehN#yY5ELH?X9_{y&hxvg^FXuu-VO}io zsDQKoDMrvXjEo;`gYHx%*b-28`<0ZbBl$6BE$@!0_rmCs~ zIEJ_FJL6gLUKiVE0Rnt{XOO~Km&%anXyn7g!}sI9jar~htI>Vbh5vR$YftsKLZtu0 zJ0xL_>!G9Zy?_;6HlH5od|ZXDI;m~BI~Ve}2eQxOJBCLbSh;>>H)}^zXll(79|J(| zQw}T>18L!YlYj`{)d2gORNaS_I5nAG9mSk)xY1^{_jF6+$?Bk#h%R&J;(O)I5~GLj z#{L>=Y$!dgZWHHmK-)Wy2fQRSaN~{w?R-oDr47D-J7aqUpu3VD{6;kaf_%P|R@D-m zueU)3^5yYzx`Q|HcOKhIKa_?8Pa@m%Y~#)yKP?5D47R7}l~-lamvzO7^S2)6-2xpslcWn=jwX;S5N_^8kNQ6W%!wWiQ+W z;Ij@53W8eAFD+#t;IU`C9-RyY*J?68VB4sQxXLeI&N{OPcd+#Je&1npA)msEi)n%1 z>S)1iBP=WoIvit1;WDLJY<_-|d$QE@+Ro0-(#mSfOPv!6SmO7FK&$o^1KnS}7*Hm# zxOPCHAhx7{Ru<3^i5VJ_0(yy&1Spp`6ToE>?7IWw^ICZIh8h%G&uajE;y%i?ZKeRv zMT7gqi#`Q7kY4Mp0E+DMPaS$tb zsP{#efD(4iTL9+}pU3`(V@B=e5RT+(vjJpw#Wj#rMs7we)P*npDSejK|ccVIl!`n)Ihi|1s-#*1dlDHtB|9DmoAzEukz)w zX!9&`iEtyp(J79GiIkhVGe0wvRD_Tt4W5W961Cl+0g+sopY$SXDlbu!-tfE@9h_7w z3Snv}dMTuw_tjm&txtQ&0}(uIw7Rkq+haLpgi-hBxH?n}<^sSwNJruo1SG-X+_y7LSoH8J67x1;Nb%wwPZxB1XurJVpr9dbb)$vA}`H>cJzonZk zq3DOrqK4ESyo*Olvi5iLsaUfRFk@fgdHc({Dab4KU-!bR);i&Eo@kQ(q>A3qLVwzp zeOD2>B-X35^{3uLUDhss<}Mn#pY*sdJq2%9uOEGS`0q|D$npC+GcpUK^@ct^(?n#}5)cJ5;R@NMq*o7O(5g5UXSzDD@I`&9c*4n*RZ|PZRzZcuPa*Qb??GGq zsiXCG(mFJdp;Q$ZM*dkg@s1BH&zW+a6jl4{ak=!ppVU%xi%2#$I(2;=V)_3{Pv37j zS#G{Hs4o3wKuNR$KyzBfj^rtP_<4~(4@FZHkmx%Vsq%YFd#m~0Lz4Qmh!+;1i?WD% zfPKYZutv)CYmB$4RJypiBtVgDCh*2w%5apYTYOS~7g_i~vqY?wWB`bbcmI}P0h}&4 z@_Tn(mDGSaWOcagS}O@&2RlCS(qWHQqY51Y8R>h~td(cnq))xt&*re^ot_~wrkee# zGEGONfUK>+536PDRr6G!=3N`9jwmNA>grYhmDbyU-73xOSIq$>w5Q5qzL4i`f9_VT z;qQ3-F6~3^5NyQU)Hi$2pRX@|?zYCp#H;}#Kx)Ob$MfR$E6LKIKPlMQR41--F2I#l z6c?6RPz3rqk=kYz>M=or_ucr*dcX-_4b=U%JaC?^=7t5U=($L#c) z!(pu^ueJutWz25qC!WsRldN1Z&SjCek1Ai*nVv9nKc>ZFP)cV5CUf={w*`V12TK=f zJJ!Hy3GOr9+3jxGvz+9KY9&N z3#yEDjg|3p+XDAw=*b2|IFIDXURbGDbKRAi-qD{Xku&H5*_TD6LM+WCeg~L5sA}GR z_7C1o=W*BwIMjzt`ThaVzl4gapcw{+D&M~V(a$GE@o}{O`WcAA|KOML3wCyZEw7P6Bxl|goMgh)x&!-Kupx{6< zbdn%qiy4!P!7PmT6QA+r6x4nDqTUiN)5p~NV)OG7G~S^dK3}~*<^TR|o8P2g@~#dBlj~n~kia^so3yqhYAXJLIJ6Sv*me>setu@Cgd(;I8_U6!6;aso)NDiYE|J zOd&yQN(D~rR`OhSP2oL5kan|aIZNHYkE{3pG>@o_p6GCZgTz=sjfc#fIlRyKAP}X+ zw8nOD`axng>lVsq%pU0(U4}@I9Eq5n;0XEgLK;Jn6ba(%w)5F@`GuH03<;;o?LZS_ zLi~-GD0(D8(2>QA(eU6_CmI{l^3~JV_iM=mdD#MuduWFrUH-MZ^~9CXJNL-r&*sgn zNB6N4@Y+kTv>-j6sFY5-5#B#0|5<``WGx17${PiwfW&9{PvuNDCyeP^j3J@gLT`pD$tCh=1!z<;^2~ z9}IzfNT99z@Pso{;YI_x8O)FF_h({<)t7hw=XGhq*w0==O2(NPofO`Ww`Y-WIjH$P zj%_o!*lWqi5VYZfR+TIJ9EyVN>5dGX%KD{p>_m@O9f=-hh}9tvXKVbJVf858xjdnG zrK|*_eP~XPtUFeti+4MtFEgGoMlYViC@JR zZ~vM=T!^hc4&#uXHP3HXdZrVAevN@I!2%x^AT3DryK-8x?v$m)!3;9h?-8d_Z6bAf zIIm93iH%W?r~6hBos}4>O>!T%+Foa-#t+LlKCsz`~pPi;J_V9^skX08%&6Q|2mFi^F!C5`cY<6G?}JJ_175nN+Z3qy+1*>cGT`*Jp~ z5m${$Jr2)9gV)WJehZholNE%8BWaP<3DV>hhJVcHoi=WBOq%3&mnsO^%?7Zy2;}@# zh&+y$qz~tuP9N_$-YNZniQVT?-3+(W#AI{l>x)H0g!o1WWRm5YK@y&nZ*W1BNNK6f zPZt$;A5OCm3uZ)`j2(lcxF7F*3T+N%BO)esq>3b|kS9vQwz5V$@+q2Va+3a6YCCHb z5&_-?voq@>w5Si#HQ0kHxq67Mhx201k;fdx@R-yJp^6LvGF>o;)3?S_m+N^EtTvM^ z*<3KUd5XzN?-QtrrBO++$|Fg*jbP+jwWNg_d{&t`@AFACpQ~{1&RcMPRz~g)0T-xAv-hPGqrrO!yjYr5UoCZ@ho3H>Y7XYz=)5@iD!>osYz0@uz*j z|BOnPODgCa=&{NYbF#yNg>m%iA}j#%+0t+=t0>ZP9`Xs|Vni5yJ%L4|6u5(E%4pao zSOo|x)lw;S2L3^bb#S0Z%JujP*)W1!bgUEu-cQ%)V#&)e7d*DQ8}v_unK(}oH{H|2 zT5KjA2r)m{*~Kx08fVe-6|>-&7V1R@eG6C}=Ji_cuG7~=IlhgFVF(=^q=MKJk-ttI zG+)hD3_GUZa~Izw=>q(G&8Pk^&)tq&`(`L4Y_G7Sl|HLTYSA0MZF1h078QNPZKoff zTxnq3IdaNXN`-mk`7Vt@`gX_f@!}l@)8mEkbLy4m_03H`;J`%BbKRQ^(rvKk8b(dk zdfBm*=!uaAb=KtO%4xC7i`PciXtiCRch9QVX|bd#9Lo$PZf-E0IHX#ayevL53`^s1IQC89w#Q|+ z7{c5l!2fJ+?>026z7EJ=Zyyfd_C&o!uB92*`g-z3QL@ej7+5?$`^+H`Wz2~#k(14= z?b)L4?p{FiqOg|4q)T*6OAG^~u7d#BQQ?6jD7m!3)2(0M6~Yw*b514RsavbSu* zJqUiQus-nSnYe> zarx`Dd%9PW+XBF*$KEo=M-B_A+3V%*&$~D@ZM^~~Eg=M4*4dU5xf5dluG;aQVTo<8 zxSl^sNg_jh69UW~%GlDl?Fbr;I-zTizTClrnIXd1O05ucDebV_Z6hac-2;dVSFpDS7!X70dCk2V*3KmFGv~*u6jdORk7P zv#bL|d?)Jdblq@lyF$g_N&IpUA)x{0FFwiX_=w+i?YMA4NSHal=r%4)4B4OdfPfb! z*902nK6p~!K#dZ$lJ#8qovKmUug!kL?sZ2Ceask7r=1dyZB~TzA1d+pQF=oj&{U`c zK7P2O^y`C6l6ZUUhDcUY^#o$P)}zSfvm8bpJzKnH+WlK!s!x#?0o(A{hWLTu1DXeF zD1|rZT|}$el0O8P63mFDmGOg=?0)AOw^FZ5x(?X1gFHTJ=FBk&Yd2PdEAQV(8=>6F zQ{`Kk+%&4(uz)U+S{^z7;hz;x+>7X`hCuTVWde(W1>6sdt($KSW?A%Pe55$hP-htR zvC8@VqOOG&O8F;LrE>va`k6|T+`a@9{2(Xzl)qufXRu~JGm6v@2%Jqc+8nvBAeSO z70Siivhl(BagBOLApoeduqvBywIR#sX8zp zi^OuZ&%1zH7>?TtlYhtr=XEbC@YfJxUvd;0-!H&%`c<5gr>`lKYl4{3_iO`p#ruG1 zs}vwDnpVhoM#&ysu>MRam{L7AsRLyU4VV#KTSfbVMIA`v{|?`dsxp!(So9sj;leLu zL%*xUq0ZQ!pCjFc!g8_LxRJGmUH@c@891G)-0pZA%nO7h-tI618&jK1ToEt^T!bg< zyi764x_Ocpofbehf-wi_sR<-YR4R%ERM9uWCMWWtQ!4KR&If6VbsH)=KaL(SKXRZw zM4H!QLYBz?vrsnVr&(NT8QniKF`8k50x+tUW3WFU$-J+Ulx)uAkBh|D>0a73^uL2` za)wQOb(v57Sew~U)+3@7{U1g3Mu7SFZkn%b|82EAIzo`>e2v+(7?)3aq@~YS=Vv|{ zDHIlm5{(i}KPXPn9>BaWw`>zyI`HdBZ?IeIKx)0c-v$KBE^k4|!sqMI5^mW3e*BHPi z{G>K66KM8B+k-ckp6F}2l4RY%({XWRjuc>)R^=f_B@vvvg0oH&yDdU|KiaJghJX!* zFxoT0`6KbR$Vyh}jp_V85jcg>L>>dBV+l$sCB3A)hQ8C~>7D*|JNW)8i^C#rNQyJh zZnce=NQYMZ}Ia3fHTnmu!n9H8C8sg5nLP5eg$dI!2`ToFqgxhYx zXnQ0T0RcgU%NyL|Dh}7Uh6VisjuyCDZdQC!xb4!SxTniLVzq={j`FN(U=%O>vN8QP z@bv}TFr4#3TlI4i`d}QaBKl^3yq4h=E~7R&xKN4pM&XS93m>tAf*B|!;&Wchix;j5 zC|gz?~k)j%svO(>fh5fLmm1q$+ip zljIEJfMv6($mDZ@d&~X_!C(?hHqN*^oDNEEoew04Tn}ax5$%xlqju-2P4j&3&TlWq zMVtT`*5mDFe6ePE8s_rjcX{Js*RM3nnQMSK*&0dI4HvF%Rs&ubUgg%*MLA5yT(RN?cR7@?lNq#70XK99X~1Jnk5`FW!53a9lQNxO zaVjSPcEiAX??Hr|r~8gK;n0na_yf#Pz;?SArignKFs*jtJaYI}Q#q2%l7)FzYd)&hwX@RdlQYRjdui1VIByGjgbec^b&{d8_UKwt zf||a4toa0WQ6m4HHYi^lhLoURCUv?{!prU zyH}KTdepFL0#eoMeH&)@AU=ysm3s%lo-rnzl~Wx{-Y?av?D!!oT_zKQpQEOne@6}d z&m&jz^PeJR(p8v_XsuD3&by-pJVRgO`431C#sh-x@V)IUh8GR2N@o%Xw0}-*Qi(4a z>!f9KNx9e=k8kz4=^7tbE^t0Yv)dWVxLt)j^F~md{0|nOs0U7+QoPXR@@NqcaOr8$ zy~VB`kuc|ncTq@<9}%?D%`>vlNTEmz{*lEh9%Z?$d4Z+z9s}f#t*OpGGJ&Ph-JDfX z;6U`M`qEVX{QP|Tbh9e)*>qcP^|u=`=*HR)HeMoY5pj$w2bENs1BK{nLP*&$#b`77 zT3cr=mcm|*HP-XTX^y_5$x#ulNMNL$M0DL?mLEA>GDy@jLg3Fl2TmGR{nbrUp;PYq zu{$448T5a1-tL8)@a0FEr@`b2m3=>3_E;^^K;EXkU?pepV~zI)L2!Dv5O|o>ki*DG zb7nUX@BXm$1$c@-n^J~HLZU~4%riOjX6gsHVR^%ZS@hP{B^Np@`CNW_p?`&^vxFBR zax5RoO4?3GVEq*tVSd-Cn&v^?fi|~FKQ6xgaI*aIS_VN(; zC;U|NV^&Cd7e5&8-&9qTDE)1G_3ZPHB)54fLaw`C=#xg5)RC-pKl1xfPAEXKPYck^ zNjTd5Ep((e`(hKbi%w~bQ_?!?Ft=T6_ui;k8<~X(}jmu6CFt42YHqA!_wFRu& z&onr7K?-XSZBU25oh(!&Je~#AbRUxIRT>GbM$F93&EYeENpl4}7OvUj2^RM52(q}hU&-_me6brNS|8DQy&d1N@udb?W-BA7Hzkh{+ z8kg+Q<$gOZxq79kyWFnXFn&dHe*D(;UQ4ph!=)FebZSsUYtG^%C8>PO_yn55Cl20S zo1eKx&?;|JK0vHv8o_gzdei!cpqp>$!|eXG*U!~*lLjS7RAhaWmQX)x2GGuF@a#Gx zEw}(`m~9`gw3ZG{*!@L z{tSx9?94p1%xdhc{aOJCV3-40j`NYeMIVXP)rzUrO*=eL~o5z1*?cp0E{?40bRn%e9ANU$;^B5tJ}B53IbeKN`>5IG-k&?jQ{>t>G#&H8urM| z&m{O~+F<=pa;&7YvVG{`+F-6fyKQ9bWOv(P0LTEmBi51oBWM-eElRCj>jZWI=19IK zI=Hy=sZ0zGNMBW;=O71|v!6%DrfA7g&Mo>h|C+W41Zr|d+@565LxcpQTs3eNG}fn6 z-GFo^%HPQH#eq@!|J75COFGNiV~Ga}*sp&Du{)>PO{Oa4PJv=3)^`@ICj~8lxvUS6 zj%LZ0WVcQ6yx8KQ&0&B~mYRBl(lnO~^Wi>F!sglq1Di;ierw=ZxdkcmW>x@f-jamQ9>mz5WI()KW0`tO=YWn!W zO|WZ6&Mi_RSb87ZeuuS9b?FiV>=SQ-7ru{4Gp_aUV?z)IffFEA{ECOb|J`i>!0YVJ zAHtvJy!fAjw7|q6S0%s5Y?MVgn+9C-%GehRjYr3fO=?8_8b%@11j;ftn?I6KcVFx8 z{-Q=Z0$WxLCeSCHyp!$vZN4kb5|VAP&HVHGRy;;-AhGc%zA~smnB?s}WS9>624SU} z-pdE_C)W#?fx$G)uO69bB$#s2K&#s033Zr*>+IWW+O^@PF`PjWMl zhFV3ZFM`y0UBD8R+=+BX1E*Pv>o*9*qFb?An}VCk?qYOoz3F7c0^k8LetF#@5Ja2X z#+y3(J@A0~guYD@v#)UV4jS=(Az$`TMg;2 z`;Gh*wH7Njc-+gm+`4?^gV#4pX$cNpd2n{2YO90CW&@A?lJ0Ib4+;2GZQ8~XHFP3| z(ygo_>I^{7j%wLKe$}&9M$RvDY-44+fj``&J_7OoJRjLhFc$NOrFt{;M@sj7kjTTGYS}=db(_=^BbHayTLwu`g3P zYQ%P}{lXLur=eJ>!wp?4^h$X+>)Zu+Q&s~VZ(@Wk@2gm9em3VT;p0k*@DqcPzQV@2 zCTZ^Lyu^c$&r}p+i}yHA@9-FSYW1FcUnlD|pc6tviH3qTw9fQ5ovb8xxG9sKZ>I0u zd}CW=vnG`{QP0uY71nh3i3;rCueAS(2RHr@#^9@r5(@@Gplg&Sk&75wC_lK=`a<{5 zC8DljtX*kTkan2wy?1UfBL?y7mnY8*zWYDJsIZ)Qy;jkwdypzCnaKTO`E9J9m@U!# z+2Bgnncic&?MV{rg_h4Zc%GPB7qmzy_qEugrdg3Yw4L8ELSY9hqAu8C(H>fCM!Up$ zGe0|V+CuFBfRCXupG@#yL#^}w?#{*~4%VaXx;pp>47F|d+sqd)X&kWFF|_*I(^YJ;S=XGOy>vLW;{C&qv!vMr>9DZR zLQ@OK&8h3K;>SC$b67u6)!^?Rss?+6O|z2v_FAmZVN{43tcYKJF!SFlviKGIU&JUcMl#{4H5*~njVhXVI~JDk2dB$jYrC^_CJ(iSdrJ=^+v^)nnpg{xUFwZ% zwCS~rD{&F=Bj!!U$qu3gwN*nqmb0}X#OwyTi`S2_med6{@F9p^DA5oAr7%U1@2g!4 zAd6m6LJ*ILSTM~8(gS`rd|G=B7#a=8?gt3@{!3XkdH%B1;J{(V6qma7b=BPO`Ay4Z znrt5@BqO^uA4>CF`yY}F=FYx2O+gVhA9)$DT9EAFTe>y~e?9#0mFWHZaM6;`n9H80 zwThSI`C}4XG06Q%$a;x)J>JCxK|q2`#?k9^VAA$ju8t3!-{O4YygS3F|D8p{_qiF5 z!Qml7GMw#mX8?L9Wrx6jrXG&VOL@Bq6HZ-VEIktd$Rd)URf zaMs0@(Pm+nniV)+Fh#(8SKj;kcnKELmB-iNbw%;;@Q{qBw#Z^ZxkjmUo9Ey#?%TA{ zGY`uzH_l_$CsX&U>w5^0z+)RRSZST4k4JCx$tw^EY$@1gq;qVE+vUY^?!EtlJnp2R z6SQ7cPV!(I-XZ+weYEJVNE*`o`=D-;{~zb0I4qdG6P(jydHq{D2Dy)BH7nekL<}g3 zIRGz6dXP_dH1c=QA!dX;ALi@+qO(kJ4=Mo;6B=k6@uXdyAo640g~#Q{Ke)hRLWY`) z9%gJw5Te4PL5K=~x#FYWe$F*=^0`6Y?QzY)WnD#G?X>zF8s`P}LiFI{e7mn|~jf=?$DcN~o=MN(A+Ajo68(+H)F7530>o7~D~PL>xQM%@WjICW(k<)9>Rs_k#vyNS zT>kPu7L;?&Y~?>Qe)bx?3NnX=manKDf@p($0XB?1bI*&}GHNGjjnGl1*36J}qwV{Ge81v~KMf-!w zQhmWhqY_!Tjr_rom3E6zZwu)!KYB@Nu68Ke? zlIa3W=2KrdWx0B?*E6n2g#TB}M6MFZ&DQA*wTucYuxnkm3DuNaD(|}fTWWR^34#!N zB;+2-)@|woBejhHXVcFpu_?{dm4`}+l!LcxT&p9Lp9wOc8J+GXh5zkUDgD2ERiyse z`w#?0E6QzNL$T!0MQnyV6Us4V-&^{#P`ChEukw?g?zd;M@3HD>@b2BezW@kuq)@*X zRGZg{RIlzP2)j>2=n1ZmC-B)W0F`7%3_A^nF{pK7IjCKaH>t+c&nS>DLBPEyi{bzF z#w?*otE{BxY8UCEfRx+^S#fxBeCSBI-rCv%g+!&@+F$1@AZ>R#+oz4=vD(HnJ8_uh zuNJ<|MkR!B&Yk})GaE$xp3}PrN{q!-M4HKXG3{S;a+c3nzQ(L(+k>v5bSbS6^M0awNWl0tkbo&Jz>juCyTXz@lw9Dx{?i^FWcC13 z#WvD^d!R1V@7cYttkvpV?Emz{j{@J22rJDY{vhyZ71!qLr&uHN*d%(mPOZ~t;Je82 z?6w4XGZfx)oPKri=w`E73RddQ%XbmUvyVK*)XhVVOJMd`8K3%b0$xh&^u90~p?aIZ z3+iL>L+ma*3S_3+rUgC!HGh>gn9h&eBA2p@4WkMqawf76whX%=a37^kK3tt8@OeZa z)?6K;u+AJVxt&S1PuYnoQnn zcSwFmp^tAkvHAPdbm^VBc3DsAM@~Rg6rs?_uh(&WoSMFHNJY>c747?#bwsZ`k1lEK zgtid`5&eIsl2>xE8j0S9oAu}GOi0KW3&KCANx}WT@)Py>@z%ymR_CF?zmq$7z(tQH zk3!|)E!qexV{X-(LfHS^076~acoGGd>_&uL3 z4Hea$`0|4GF4e*!-DO8hYA+Z(q>=fO(>ECz()e9K=AA+mv|u9t40YE~{Q>55`n*)xkkg9Urh1(__v{LC2?(_2>c78S}r@NroTFQTW73rCCuNXB*!+Gg!BH^WJSfvj#APi?_Xf8fb|Nyu~izfs{%Q=8W2-! zFeHB#lH~jK0WMthgqyK0P2nnoaX*1U(a3G2-cM>Y>-`BJD|k87VAz{NYC>J_S3@*M z^bWs5R);c}o{X3+*bssv>;6vx8iYas(Y#JLrTsQ56i!ZrsP7d8F|(YLWWxfmcSt%7 z2;kdP=9=qbgE#?mM=AcRCc41&+s{D%D#sfZ;g8c8(S`3{=R{`jX~0L>TnF3$`HAlr zM*cdeTsDGU0ZPS&0|Y0pd~Bk=h#mR_t$3ro^gSd|DEVk%x6zLWR@;V;1Y~R8YX6i2 zrHcT(1)1b+McU>Puabx??%M%Rw3^8eQW{z-Y8YoYKLUMBO@e*;2%n*TO{eJ?P8N6wEAK;Cx;?&AkSw>(Um z)AwZ!dr0tO9C(H0%}377+0S;!HQc7o-A6)c)^exE82q>C-XP6wdiuC~D<66ez}($~ z15U4CN4p~cXbT9!9SLq>`jTHo}n*60rK*ggE$ej*gok+i8(XP#Ev*=IxENUQe_(@ln>X}?p zaJj`K6h!-oP~#n2-^VrzPvxVvI6^7zzIb}6ESY4o>Z zF2{EDB_f^OO&w-6QThNde{BH%dz^N&za-rfN=}MRDGUSkB$T{wW(AYvxLw zbyi63q_OFWiVx+M=m+J!_l0Y@N0ubhM57Didv#-LvOltrgL z7)itf$1mfixdL` zIcb*l#o=1oCbL=*6|nL8BNIy3Q11R-Bv$M^dAh19C{Ga$v% zfZX8pa8OPGq{)B!l68J422%)W2#M+?KG)=qqTm3!F#P8l_+;MM6d=KCa-4Pd1Bn?! zgzQh5#_0+x9dMeX13tAKkTih4*q6sh7Ielv+8Dj%L&pGb{}Z=SW`6EHXbGWkQ1)^7 zA(%>)<4+V5qSkK5o8$6*t-&OC6_%h=0zSi#;H7~+S3Ko?pnBSHNMD=z@V0k(58YH8 zr{l^rC1N}EeEqnPyZM@2vcf&F&0^RB-WS5NR>Cnck~i1@hUeqg#*psq2kI_2vEDFn z7$mg!9wve6tx&7R7x;IXrszG4d*XaZIE|>JzcV8p#tUsBK>(+rN0Ejka$9Hs4cJSu zMCY;a1t-8wNZs?3S<(FyXRtM1A`v317tf-_KUL>S1a!Zc$Ae(<5LpT|d72e(#S$4D z7=E3}bl8OgTlrkw$&8|iK{C)uQd3dA6#FGA+%8K6h13E10AnS9o`ZrQ0KD1wh^pKt za-Qsor_V?}+1Ts(`#Vs$1xELVNb`$$g`Ff+I+5D>6OjhK6!zCP_B;l6#Uul$w?R+Zci!Xq0K{w3CRncIv0X@!S31H4GDDIU+Vo$rU6o6 z5$svr669|JL5Rm>0bKlqh{lX#KovkmuloMf1CT6(8_6D?{`n^NUjM~G#Au-ocE)Qq zi_hp+$d)@+^=INgMCDiKcEO8q4@<`;wWUlqa~m)BWn)K1#a@|1V&&%91RVB|G4o=;gv+{=|86 z*2UV;;)Q}5>91Y<;my|rHuR~83?%=tg>epr+an1H_UkoVkX`}kT@QX+#e)TvL@ww( zp>G!xG;rX~&xbdFn)~h`6FspOB1yzE6tGB)pS!#r5~58B@xPnnBS8787@_r0FT>~( zJn{NCI2RaSbsvU+Y%vFeOOcT{0>q0-sX^TrA%xF0vT}&rlCr75DXK`o4w@6B4sg($ zkUU;4$s22YzaAbEvHIHQVfGoxk7Xa0($9Q|V1C6paL=(ukL_wdwKCsVg^z*y1tG8b z{@4O#maXD9btD9oVz2YojOnhgXKBV zyq%}0Nz?kvZS3)zL8h*FH{P8$Y|D{4IZeo15BstBi!gAr8(@}TlR<7ReQ)0WkJk)3 zfr0loKG+c#d>FM3u3F-(vVuY5s(y7J7;4;8#4!&+-%*no&ojb9|iK3obS9I8~m_B(J@h05lPrn!%-W8X4W09@VuABzB3s^Vv9?mzh38!+Cv6>~i~ zFceBvfF1OcVk2aeg@xXIGaJtN!NN7KR~>${>!mZ6JbrMave|xVXk`ZA8&23^Rgh{p zyVghhn4v)+gfyTy<`tRhoovrE_K>PZ2pbSSmE6^N>|)R{HaZE}+g~{oI9=&< zSGv*}kwhP@YKT#$JKr2e=XKwskRp-^tF+#nH2CUwy!X5~lWbm3i4zdrKM6=SwyZ(X zeD!&lBF3+2a@*XZJBD3Ko@3&7TTdYf3hRUdDhj7S;8rfRTSUCA@r_YN$=_h%R|zhB8EI9rBHnKxBl!p(FBqo330V_1pqdyGhl zB>=y`hN>s!qv-s`E5ES*dS{`-4KnNDXb$_yxy_Db&Lt>C%a~JA@vjOVWg5*%SHwCDRhCA~uX8&y#{HJ*@jv zXC=)iU5TA%JAC&*gYbemQPjsDd|Z;t^&EzhLv(= zU5&PrFBqP;Kw{Wza2DDgyI{BM9f+Puz35N9Sm}siuz5v-=RW6XfB(S>#x(J{_rM#ELV(+ zh(~|kW6GV_>t;zdsPm=^H$R4u;>m?Txu4&0_uO;n#A1#u;K#+ahF<;b#{UddoWqoA zZ$5|EyQ?=byPqHC1ZyZk;da1g>I{rf0(j01+u+L3#Ip_=LKH4~~ zm6kRiucGvB>;6?G#KeB%7d2LOL*ItEnFDhvWTjhJxE_wF+Reo9q$u`qI_y9b0_3iC zI@F_AYhejceKGtubcQgm1`+=9JU=c|&bh9ioMakavM@Ti2;3c_J|73I3%GM`@5f+G zp29S}qjy=8MSK(XTPyvQy~1R%PV-`i?br1_!vcK^o%!t_PdC@TrEK`2r6ovZ`m+O7 zI2whJ?V}PE3RSZZJb`D7M15c0p+UoB9$_aM>dFHyI(6?LYn=>V8owrwvU|W7xQ11s zvEX0_izT92ZI>PRw#3L9tdjj_5@#&u-B2Qz4?S@NAdsstPzVyYKWWap{N?R>c?M)d z*c5*Z>e)9i4~%L+kD)9nT=QVdk_i}4RYpF~i)?K60NJXFG9!iuXx|he;_2~%P&#)Q zKuDIpe%%2^tr*`u(^ATngNq)+NS&Mm(s-7~E&K&naqrpH|B1vXU7Xl?E^xe92R$2Z zZ0wmlN!2*$!};W3%nO;WJVswdY}1rkKC}{+L+O&_CZ*{f=P-T=l!PmD*38K~Dpww- zEmgdZdyGb*+hK6!xWx<8=Ai>~l9}u;kSl(;=`^DhOi_L`Pw9zquQsgS=JBU3aJ8l^ zu2RHOzRhDchkj$mz&eXQYUTtk{I$W1rfklYa2hjl%xf2wuOc@qmxcsCjJgtO9xb$E z2fh~{2H2FJ{7?grXl*}yxZ%=kkLJF9bHTS=&;5I%=k{$G_DtctZ#e8Wh3}ND^C6 z#iUK26qZn*-EvSS@albendRe0)Moe!Cc>Gvp6rS+Jih`wkLFy}%fgiJRNCgXI=pyN zMBR59#!{^U2`DDsR7z3+;{FM7SWa)F=C+gBG=RyK(_@GXcSrcji=c5l9rkMjXjZj* zzKlnNQU1#zF8Im#MP%RnW}RYv^OXy=wWjqY8ZST?&UI<5#f>9ib0R^vnp)g)!*7#$ zq1R)ejrAJRYr-e?JZ<4#{6f4baj=Ku=9q%kP~&+^?LD8Hug_};38rbl*K=6sJ?c3U zbUCE26tG@IM>9?G_Uer$Q?&^5*RHb`sE^~q_DtgQ6XYw_y+Mf30J8!%;oH~~RF6q_ z9CD2ziK_E0{9pKWB0VJJQZSur7gR;x6P1Q!-WAtPflF{H!PaLkG{(l8Wb#JJ{q?eS z9}UXL2ZRXE>*F-sHnWONSQ&7=I}hB{!#z$<9~gm4PM#1*r#eT!I<-H*!tcF#R$XfD z?_0(=KXc^=xvqVGReowQ`pU4Y(f(0{$POt2R}^MfiX(RBMY6EeRMim0)*B~8bRR1@ z<@#bKagz9O_-TTG>yxdx(Y9_Mrtk)N_MvPg%&J*8(#P>-Z3)>1KaBv0J>~vzu+7uw z^Z{eXNge*81!6-#iFMBcHAgVk*o5&7>u*d+f>KDzl z(%;U(``E+HAj^!~7UaF}!|97V*wk#24Ov2k!ke2H*@yY)Rh%V5^}|QS4!+lbMha*_ zt3XBNqcJ^c)er)}(d;fZI4%M-Twtv3F^;vBrIvct!-X^RRyAD`VxM1<|CWtrwD#jU z=+U+AvZ__{1&UwlS8?~eHW~E~D3JSrd6omgKX<%#~KNRerDscv(~Cfg9-9l)0B1EU4`Zgae`F4qSfA36goO6q-EyDH|kzK9KT;tvDauSERY zI)!pchfM)zJP+%|h0Y(3=oNY6aS>_0$FGhPoOjiesoU8{L(YSb=L+bBSM}R6wq4JM(rz3AzY-kUl}@_ zWnYMKwXcLYg>t)EF{j5E;U|ph9ju$1CVd8^(X(pFLmkg#2}Dkh^;L&UOUOp%JC>Ms zG6jB#g3Z{y>C*YiPiIdUxi-Bhje~zpS}kLuo7+L-vY(vIT75kqo{_j=N%neOB~!;8 zb8+G$@P&Hkx@Jw zfm|hIQ-pFu5TQ`Qb7#kZRaDnrF>kxX%@emBl313P2H*1~7) z3X!>Ll8!8;z~Pt5HCE=hi#M(3YyPsW}uuD)_Bu@lWgQ!t?vu0&V5I1#DD zG!%AU)BY6p3&&bjym^eC-r~k$rN51m({O;z=*G-@p!ZUl80X!ykg)X~!{(`BIslK> z#ri?vH;YN_N-Me#c;a!&W93pit0VXQtx`AjkJ+-O5Bj-mOnK{~} zmeU#mQvfWvB)Y10*Hqrs<(B}$zk2*^AVie7xxN}E80!u*T7LrsrOM~`Nu}x7TNjT; zbsVew%k%y2dN%t$X3U4h8B@(!LS&WJE4D*K+vTV|YAdr8esX~es=|CVtiVd59jZvXk?Nt;%?s#9K9$?vx zZi1kaKK=@!LrG8g^!*Cy^kee5@ zN>P70ROFLx9~S23G{uG7%scqh2#CKY@4H^MH;CEYe=|9{>Zwy7MlgA!K)V@fg7vWW zeucjCV9Hp$DLfHwK3=>YuS&kv_|4eq^pr$fdeyJx!KEGM1Bp%7KR09to>w&Vto$E@ z(Y?5SKZ(a`4ZR1 z`Ff_rSdKRREFqT$(RTely&@JPh8kWqBduCMqdw3g8ABxu5L~Pb=P|5(pO(e#I&`P& z1+;f{*RvH|y>qRdWZezRhA)AnO*|m(IlF<9$e*4lp{98gY-~0TpQq_s*c8G|vnwpr zs-eu1I14GdA4D97K#zsn7o(*0QT`etm8AGXSHN-dk;F?ck(?+7ud3Obz;1Qhln;&F zryr-xBbhZJvz`KYsIFzIYhZNuHmGp5}TUEYpmuXF0_#k3h6?^7+XtHK5Y-B3V*=B z4sn)(+1-P>0Mz!gY~0sAW3K!5hjr=&p#-#WGvnR_1?S&+U-Y`9jgmoo)-0t^0CDG_ zy6NTGekJ3{u?qz_)%;?ZNE>Lu69Iri<&ZRB29-*&ZT=8y3$(G}>;~chKYkNnA)XaG zN~QwiOpfF0?G{_s6DZRl^z=xl2GT*-}_QKt2~XYOE7@Q#~V zE5{0mF9J#}c?>F8I*SewVu12Xxp+M#!EuO|8B8Gko^$esQEy_8_%sasMoQs?L@adwVv7tJ>{oUyL?|#NFZK zc>*GUC~)nKG&U24)32SbksWc8kP)EY^sb}n8#9|N&NnVP>Zg5ScU8={H#510!*qAg zJYLgj)t{(Igp?e6i+o!9WKtWU zXdPqh-moZiI@?&#%A0YZK9yaLud}(ssHDB2joDt#3K*v5DR>3V z2qB21C02=iz<2?ckX5tp!A@-=x;jUOEe4@xStuQiG5i>Ye5Wls1iLIz`bm0cJd$fTNVSv;s{8qJ{uf4i@`LfMcX!m zEWgc{ZRe?4T5&SM{bXaj84f&Qo%p}|ixp(;EJ^HM^{-~n>JLoOI-PIw#d)edZg#0q z{jtt}NE&bw_@{ldwQFxwgs4A794(mqki^$b=uujRM-W%`yDVvC5A6~HpP5b{pRSR) z!M3s?S%312uy;Jz&!qRC+_yLL30qfIwiSB{cYZaH!p>Q=npq|p!TjLd{+hUqDO$NN zI%oQ!(4_m4o2t@#prg^AArFVDLoWxAwOzEOL~k{w6dsL#@rLGgji}cE$iD zoqt>UqK_7;!I?rx%2F+x0jw1{6wZJG*~}p}fWbT~+!Ct^J`GnaA~Bnxvr;0U14db4 z(N?(Yu*9<%`N^`soONA=!B3k!F6~`fsFa{5=lrALOtI0%v0}UGYWg2G-+E0B6v(-< z6-gdX9-*3vRam|w&5s{x16S71A5UMb7vqn37a-uIDy%VH`ab(&^l;}ADB4LntLs9* zjiTFF2KESZT-JaXeYNd}-zh8~&ax~C?D5h{K!<{o4zwcxePfFJzsKf?9Ghj!iyk_t z23|NJ`Lk+S-wKoBXMA0p#l086$dQIWC=Rppxxc0SwbCrN?P30pTyARVwo)mz2A$$8 z+#Yjj5B0DJ#rnp^qo7Ftg7@3gbHW6q4ljf54c)KL227$tQ zq9__5*WU8T7s)Pw2!a3`8A(i}xi*meL`(yK(XR$F$^}qh*_Rr2#ID@20K3))IP6C> zzz&K7qs%L9m{Ql2zklzUwuKDE$fKyvOICc1%d!H&p&V^X>_c2|@DF<{taYhcQJL*MadI=N2{bPWi7me)am}0G@@dR2G(gmq z9?`=U8pH10sfi}&?t4DmY0x{0+N?!t*)j~CHia(2#9$TWANHXVun)(zv%zC)1xScm zOR`3n0)k+^x>)55NAYezUs+4^Wsdo+L_ zqosahFu{!hka0Rb)4UyZAWx;!Pb-d1DI^ZqUEGH6;IKjwo@^G8@Qs!%r7`jGRJmn> z{(-2k^#PWA4zOgJ)!3=%*8!uEoOg-#DfwS)_MP4oTvjo)hjt%_+qMM}^?k5fO`e&N z%}_5fQY+GZ#fxgLAICR%X+;BdS#C-$a@$g&4F$FnpISqamYLz%xzQehNRw;JbvDp% z;N=pGvo1~f+k`^kDu6^&+z(t%i^S2Q4$OmKwh&nXtY4(#9Pp3 z=sK@JPr30oKF4h``tPFUKq)l`*iDJ9@6UnUT;AsqHw_=cA#QUx40vlko}5oDY>w-6 z-)jZ`DIkQWd+Yh_f9e(o|7lZDK&Ha@+XMB5&}^Zr^CM9pBbZ+yx_$?NARN3XT4|6Q zg|05&$4dyPhzT{Pg*kuj`Bv4nHh{O*dz>CR;hkvgw}!Cbpk~!H9W5Yl3ndQ%oh&5y zi~UUmUJ^mbgJ0SKDO|=OHz~@kUo&<~L@s$&^AhYd!I*#<7PzzS7T~%4@#sPowK*nc zv){aM2tb@JXHS@)0ngkg&|Yo&O97 z#tGvZM0fh!4y3FEHawP7FXOmO*<21y>_82EWeyzH^uV4B`g3@XYP&vv{S}nv`S)zV zjla;NU!ZM%KTu1O2{?2!u##-;45dF25Ucnt2zr78>b%qyOqPQv!MyiB^YPN|B4~UB z*l9ukh{LnG-^lq89XIjy&u~ft{b2xi2A99suGxun0-{}!kv#P@kG9e;z~~Rb?~Euz zLB0QLc9s$tHz5%6f8^@d{ossmmUGd3gaUG-?P2w4;pvT|vc1~>{Btv3e__yt0Z4QG zY8-cR=sB5Q)*g*$0+%lvXlGG?RXSX#LkScy?fwv&$RY|po2S=jE0mFp$`3&sg?3=f zR~8v@-X6>hlac^J*fQM3;DV6?EzKi7w^KHavX4HX(TE;s66SPuG&o##T!1EqWo0^nT@;BXu-=l)w5<+=LLgnDgXiJh$HStf5EoliK; zEFdFuWA_VD7+wKjK^T9k6};#B(3?P_S#FMEMu1Juuk^!OKC(ASh%|~(`Q6=k{c6y& zXYOc_xqYO@(dwuVh>7J-T7GsD5jV9zBJ-*3B%;g6{Ot zxgPPwJ9o$>-oRcdiBrkx#`Y6mrTIrJlif86Fj*E;BvZtEN1rU@sv-t#NS+1IYS2AJ zG2-J4%yI4)3auo`*^mAYf#_)s)PsB=HSl%6I7as5f9MY?KkuV3Fj-+pgXYx7&@%T6 z2il?=BqQ&|H+TaC+>%j@QJpIp7{-UO@VJ`{e^7Xb;rQbG3*UR^uPwnwf>yGq+ap`c6`< zjq+O+5R1s^I`7P!&P=2x=y}%yMB;DfBq-hg*b&?_egj+sNd0pxEj*T}?&B~cC{odY z$yG`Jue;I1P~yZTbQ+5FMPtqkE5KT!0)Ys6Ve;Ep4ntl@Pbo&mN45d7Vr$F{_e;>} zWxd@Gi~Kdvm3{(%qbRd=N#79Oh=rr4ppK!^WQXc!8cr+PC>Hv+g?yc8; z=Y!9Mis9|AC(fM$#{2hgICz1QU%v(H31cc-sk5>Y0VJ<$5|12PPtKEIHbs06jvjh0 zF}edU1{?-|&zmd9sF5OrcC09x9t;*mZh93_ad^Y^xfvTrx0^9{hQ#|C2ifUzqGEoD z573F&YZ)=;lWE5&@?b$um$#EZE}wCI1J+gw-wz)lDE}K9HJG==Vyp-yuTRERJvmmv zLA-FBLf9=!7*-@miS~jij*U^|)7;A=$F^c##EXp3Pd&#N+pBGV&1ydS3_4&eBs$J0 z2$uZQ83Om31h|YoQJ~1pCDY^vDFD>q7mHSP3UDHX9&%phfwAF$K2D}Dbc$q3bd_RE zA?7lMbFXSZ^PLm& z({WmOuaSZIH9ogBpJ?mg6cZM~XWO?3f=N7uGaQ2cJ~^8ol$=7W(lK(e&}iOv@v=Th=NC}FR>X6JTE@jZ(E ztLMf4HnN}KczGEJ^&Ooa2Su~!qzt5Im2;4pp4lQ~X+5U=mz&8$@#}baB+=*HmsHr4 z9K+rVac503j;rG(nK}K9{wy?zKl6Yw$iK&u>oi6K=W9s2BB{%m>xp4c!)?i9d_6Do znN5pSWMr4*k$pRmH&mFi$n4B{T1{0#kS=@x zk`48d_yiYNyLnXppo+d9rAmpgUrzFW+;FzYLn;%59Fos*@NQq748iq-o2f3|c4Gs6 zdhY<6qJHa5W<;|L5X#&E8?B;Kz{ur3_J{%oIOFA%%TqeiO$=#BfZhIw<-BbM-$XJr z*_6H<`PP@;gqnCNMl6q$dvb3wij z9khtQkLhi0j*+?eStciPr9@u-;bTx;h@Z%r#j7zlC)W$jEk24CTFTRqVCDGT9g#ka zo2kBcNa65Ro~^mK%A~$V7HB5wd)|o;M!mSn@-BEx}abIHVssNCX6$lv$;*_W!LONXW$+0&IeWH-L^2LACIX!{u6sWG;w%~I!&0ad{0 zjZOl2xGLne;|q_gKE5A(es>N6)FI8$lk1Bs>}Kt6+@_0|Ezd>TL)!a3txssBzlpyAd6{nDoDIv4f zVrQGEPc1nIP|Ou1w9y(I&^8^Cdpv6F;57SE;)9Q1ChxeRD{$WbqdQ_4se?1XlM_4jK3ml}etwOy_$e+JOTvt?}E+CI(9B7t$xcyNu zC5l#>kRU2znfNYqrueJ*fQ8PVQNA8=&gr99ItxRIcM@t2Fn;5<@^B=qyKc?UFi*OZ z2{GaSy5P$v*fVU2S1=igIW7gNBmBDBNZ%;U)8EsC0Un@TmNEg+ax5oNQV7CCJkQxb zXttDXCn01BLSpf3C7#!n? z-6Z(SxE4uDk!OFkoD7=Penyy=<&jh!r4zn`DdMkmMPt`${Y5zxJJX07*ZpV)Pde^U zTLqrd$I)h8mk~VKFi~_XZVJdO4Tr{YBXf#%4JVax-Imx2xqZgN@P+7M=@{GIN6t=o z>05UxELFgHryOA-UZ{TE`Mv(t=iVGv!A;X8aRKKpx-N1T4Lopqb^pmjT3DXlH1+lz zxaB3Zu9Ia1ns~hEi{FYFG^ru)m3pZ@O!!@6amxiHIb}Hk8e1;=mjo^aQ(;nQHm2k} zIgM=v6QLxJrKlV~u5@m#aYt6bI9_*QSOIqetBkfVB3G4FRc`6Uq9Tlqv0eIg zZQY*t$Tg|lr=z_`6|DA4^?1bc^Ups>UB^wXgqpneFl)BGS6&#-tfz!84tok$=S<)c z*hi&OeB#s*O0)#z(3C_h@9*T^`-zKAD)Rndm)W@&gGKs*0!+ktA2v<+Taya!sbtDK z(HJ6&r45AoZy(PRAaO3Po`jak-9ByY-gjIasFLpaCP-oP>~S?_+ryADS7!ykObk<3HUq}{tR=c% zzw1Q!AnPwhk)W&=N>3sjoD@b6wJL>|2N}|uYr;&EPZBMf8g6iKuf^I4uRzz$2RDZ$ zou~dl;>%>e%Wv#BLS9?1_!r3Chp3t5>Kc0$8n|OC9#nDskocTuO1|~v z@^Z^ebqJlSJiRdUHJL~|Hs<%=;TQo|UvebWQrXv~uy(7hCr96?6iJ(7gxpb-A+}#R z+D{_;jJ2UUpKQ#gb-F_0v9H2Z7vU+`*Mtw#F2*g6btqzEb|%(aeBeRxyV zBBQGJ4h!2^bqC5t5C!k7GqZP3=iRy7=}5Kf+_Kw<%gkwP2r#NUnj?;{j+;#m8WQLe z2l>}H|J-F|WYnrIl^7y*xMyYM^j(>^+-kPqqq?g;mYtn2&b63dcoi6aY*0gC-*(95 zVxxyjkwMjPQ4a?+&X;{Bq9Xd|_dGK0drtnJKpji3QJN)}{%NeEYWWX=U;qKO^>sew zW_L!Z)6^&CSV6|h+!E;d`IW?&-RaZ%o61^Fqsmh3gFuqCKeC=Oe)~Rx&e3;2>VDEr zX%hV=D5u|b#?6)>VMlPS-Y(lDGJezjA&uuCEZUP+CPtoIH!Mqx5q@URZhNNopeZq= zEUn>ene+uMtFrEC!cA{DwYNYIn;{EDY3Y^dI}X+up6Va68*WnG43F5^7)EQC251Cb zC?b95O=?^Z`0L}@?vi@G_ljn{76@O>^IyKK4gR5wFsF}bcJY`S9>pKvH0qWY)LVbq z_yuj)bMo36U({LnM@1YX){qe_c< zo*5@mWeVLglu42Lcj)|2I~_@ar>bgl?aHvQto1gSjv!w?vz9;zTK^2sD_ zBbp_}ek}|8#}fhs-(PL5@xK@OK12&LgB}f_hdCAak>q!$tB}L1TPZY4qZB%E@STOw zmGN#Dc5-XrH&umP6K%impH|M5F-_0(vV?gG-?yY)oP6;#Qi6#%9byoaJd?;7eI2c5 z+ad3)2AZsbmc1{*59W}UAeuJrrvr~b@W@*~7#I2wixjh1V|tkqo;(vZ^~G)F?HXFKT@ouo_;%R@a%%cr*To>ZXH@sOXC&~CI;=jLsDC%jAvh`Onp^e zRaz2i2_zWYZL$wq&Fs@jIf2`s8cP~9m;b)=pX~yE%>A#nt~?&f^^2Rqjj@d_`!ck- zrI8|3h$;J4_hv1-L?UG0D$Q?@Eut=>v1KPienVv$Mz-6OB_uRi6O$`L#P3Y^bG!ZV zo4?-AGw=JH^Pcyd_j%s4e2+E8Q%%7y|AJQ9gy!Bpmw2TT%*Bb-u<)1pt+KECzYZnFVzU1pCP4_o7KwZ7aI zhvv1>RAF_(LTj>kGp8$R_eT8!`(uGlZKu@8Ja|utA99Jk!`|b2fwjMqryidHj3rOe zUgsSFC4``oDbelRCG##-`Rkv;BkOTn283PJcV{+Ew#T;C1iyIn8>IdHge z@{XsSTcgSBjE(jU!qmmhFrP66ty4`lA=vW@SUvj;g?|<7G#c>QmFYp{tufitfGwa=%hO%_cu4zLb?r_Ra_g?)A z62i!nJ8Beok)v3h)|_Ij8FjbqTbq6NFYt@}vB-6Z_1^d{rfP9GRe2hHXfN0GDs}0T zH-_%WdzZQuoqWH&py|Im=@xRXr?!RE-c9+zzdU+3Tysl4<5b=PsIgr|EIFGx_GvgF zb5v4j+p7BN5xcp{fK6VJZ(C=l~RpV2Om#rQ^b|9sjjPOniW z;=biSOfmksVwf^hg{+}>DIO0gqRZ-Uq^tna`VQMPMI)rnhF0gHX6#23_@(E3BaQVzoIq4027D~gK`7w`Fj)1x+v(w@3?5{ud9 z)2s#wat69MQnGOK*^KD%ZKY)aNBndl&-Q$xjUAId+TGlh1cO+~UD|B^T$J_C}4XU-;kkrFTr$RK1HN zIFzKxJI1eR1k(?qE~*FhHnja>xZ`AVE6}U24xk)?X{vcykCKi$M6u$KJrS9-=dYu5 z+Uv~Dd#XzFBHd;9kk8Aaur|j!X4}j^ccsRcL`BW@v6qiT3yJxT>z4`n5(DP)W?0=D zbUlGP9>wnpLXZW`qq**~u#rZbE@C=1#I@SKR+w;~*dF~a^Nr-68vGOEB)g&CE?v6U zAVsS?)$dO7Nc%6v)7aCt?nbGJonT=+pEtMb?yQZ%Up;o6C4M5-S`ElQ3NqQBXhLYz zeALJ}x4hxwO&%#KUZMrOOIz9y=nH?)y%E|cH-0>7>84|)EyF!XyQ?ck{hjREX4(V4 zfNLjdb>ocLxurG6Sa8TP{$`a@@kPh$^Rctx8R1-ESn+&CgUMR=+`Bru9ZU(s?JL+b z%*&@H=k#vNd<7JPjWX#nUakloG`%>{AeqU|cOvk2Z{l9ldoch7=mN0FP%>GV6be3B zUPu6koE!=iNS6O$U~0+>h2F6+&`hPy=!|wysVtDgDQ1?MHy)Y-ch2~XkZQb4*O#Gg z$`5*?RB3FI*qdi~ywit2h>Ve<`volNtzvw1!u7@@uInDsGmNpyL?Z1!)@v|L?Qm%m9 z{08#ky)h#$HBNw&tpP!a`N4_=XhY-#j%vT)U@ADN1*N1CpgXXFiVFJ5l`By1nu(u< zwn$Fk>?XfHf9@Rq1p!OC?9T`=jOp#}ZUfJX-(S;aA|fL42M_Xt=d_i0DuIRCIA#X8(HImD z&$S0aMCQWqO(=lHXlRJb%F1^3^iZIbS8eSaKTXwxg=;=PupgpSHo);z^=iH}@C>Bx? zBJxy;P0bT9O6Wu)=qO^AEl8TLqmU>Uc^)0;QGs~1rTHGTY|*=wmo!e+Hm~T z`*~zCURM2jtvYV}`QHew)y{2!%n%5{+NrX-8Ba+;n{R-A!S^X2Kkm?dpkV6_1n28W1eXLQ(3ey)Yj*I8$3QyVYy+#P81#npwBM-P zBmqLHZ4fVzx#TZi(hv1U)G%(!yX)>XTP?Pkwz> zX!2Fac?zve?*nuah!niOlLEQD_HFG;XJU}*XeUBFLZK0ia^Hk0vK~bfI;gKBiSYHs z78DiFYtnp2;ub$j#bVDq)7?(isg5U+F?PSCE+;~_MLwGUhwSX<(mQt+wb&d~noQYP zR&cVivI_lF+po`@AK(E*@u4MS8PbBhiFn4>OWbYCOo(hW9m1Ks!1vH$)2daJ9^5Gy za^~W<;JMT7Ii8^ye*nH{@SD6*pE~A$K_pMN7o~z5DnDwF&*G1P9N?y{Mm;LU&zAO` z4Z4m6Yym6+_Vvqhy#*_D_&f-U$8*edWlG=NTO4LM7SR4Usr0roc8@Vz<`^UTW23*^ z@)=jCXkQUO@qZ@grSU(96-T81EMKtpAPSqmwX=C>NBPY)V<$e>H;3>rL%Au>)Ei#S-@D-s`ULIBbLpq zS@xXQFwgpFEDFX}YiBzDxen&v18l3$wO$?hX>3&(o;)^_*_}55~O6m;e9( literal 0 HcmV?d00001 diff --git a/v2.7/assets/images/favicon.png b/v2.7/assets/images/favicon.png new file mode 100644 index 0000000000000000000000000000000000000000..1cf13b9f9d978896599290a74f77d5dbe7d1655c GIT binary patch literal 1870 zcmV-U2eJ5xP)Gc)JR9QMau)O=X#!i9;T z37kk-upj^(fsR36MHs_+1RCI)NNu9}lD0S{B^g8PN?Ww(5|~L#Ng*g{WsqleV}|#l zz8@ri&cTzw_h33bHI+12+kK6WN$h#n5cD8OQt`5kw6p~9H3()bUQ8OS4Q4HTQ=1Ol z_JAocz`fLbT2^{`8n~UAo=#AUOf=SOq4pYkt;XbC&f#7lb$*7=$na!mWCQ`dBQsO0 zLFBSPj*N?#u5&pf2t4XjEGH|=pPQ8xh7tpx;US5Cx_Ju;!O`ya-yF`)b%TEt5>eP1ZX~}sjjA%FJF?h7cX8=b!DZl<6%Cv z*G0uvvU+vmnpLZ2paivG-(cd*y3$hCIcsZcYOGh{$&)A6*XX&kXZd3G8m)G$Zz-LV z^GF3VAW^Mdv!)4OM8EgqRiz~*Cji;uzl2uC9^=8I84vNp;ltJ|q-*uQwGp2ma6cY7 z;`%`!9UXO@fr&Ebapfs34OmS9^u6$)bJxrucutf>`dKPKT%%*d3XlFVKunp9 zasduxjrjs>f8V=D|J=XNZp;_Zy^WgQ$9WDjgY=z@stwiEBm9u5*|34&1Na8BMjjgf3+SHcr`5~>oz1Y?SW^=K z^bTyO6>Gar#P_W2gEMwq)ot3; zREHn~U&Dp0l6YT0&k-wLwYjb?5zGK`W6S2v+K>AM(95m2C20L|3m~rN8dprPr@t)5lsk9Hu*W z?pS990s;Ez=+Rj{x7p``4>+c0G5^pYnB1^!TL=(?HLHZ+HicG{~4F1d^5Awl_2!1jICM-!9eoLhbbT^;yHcefyTAaqRcY zmuctDopPT!%k+}x%lZRKnzykr2}}XfG_ne?nRQO~?%hkzo;@RN{P6o`&mMUWBYMTe z6i8ChtjX&gXl`nvrU>jah)2iNM%JdjqoaeaU%yVn!^70x-flljp6Q5tK}5}&X8&&G zX3fpb3E(!rH=zVI_9Gjl45w@{(ITqngWFe7@9{mX;tO25Z_8 zQHEpI+FkTU#4xu>RkN>b3Tnc3UpWzPXWm#o55GKF09j^Mh~)K7{QqbO_~(@CVq! zS<8954|P8mXN2MRs86xZ&Q4EfM@JB94b=(YGuk)s&^jiSF=t3*oNK3`rD{H`yQ?d; ztE=laAUoZx5?RC8*WKOj`%LXEkgDd>&^Q4M^z`%u0rg-It=hLCVsq!Z%^6eB-OvOT zFZ28TN&cRmgU}Elrnk43)!>Z1FCPL2K$7}gwzIc48NX}#!A1BpJP?#v5wkNprhV** z?Cpalt1oH&{r!o3eSKc&ap)iz2BTn_VV`4>9M^b3;(YY}4>#ML6{~(4mH+?%07*qo IM6N<$f(jP3KmY&$ literal 0 HcmV?d00001 diff --git a/v2.7/assets/images/kubernetes_icon.svg b/v2.7/assets/images/kubernetes_icon.svg new file mode 100644 index 000000000..bedd3b88e --- /dev/null +++ b/v2.7/assets/images/kubernetes_icon.svg @@ -0,0 +1,84 @@ + + + + + + + + + + image/svg+xml + + + + + + + + + + + + diff --git a/v2.7/assets/images/subnet-tags.png b/v2.7/assets/images/subnet-tags.png new file mode 100644 index 0000000000000000000000000000000000000000..dfdf335ccd7f07c05e9dc2d71f90b7f96d43669f GIT binary patch literal 38974 zcmcG#Wl$W?7dARb&?H!JCj@s79)bi9?(Xg`iw1%Q4<6jz9fCuE;O_3Sxa{7|?|(nt zx}V;vx3+3_rf25#^yxEwx}WEn?_U+9-k=eo0RZqu`irru5Apr3I1OR-;j8-K< z*a;+KSt)S<`tSFvqbLDZf@xx;;0^%D0WiaSu;WEol@3PoR>d$YfVB80RnMi9RgkXA zeh1$LM#V?FVJ-HeDe+dsb8MYh9qIF=a^^+tVzhqq-o3Z-j8hD@@C{pPiwrA_)u@$0 z(+iBvsEsNblVb~GGi5bsr>|FEzr<80vr%SJt6?YMkkZy?)MuQNOJjyyl<~~of+5>p zR?g!tSzxa$mvP#Cd@R8U1ThrKkgo)*-zY`@?ff)?1Y(Mze#fEx{dM+@?G&FM<-SPyGTvCW2*_VD>C}cRqxr4LVk99t{vTKo4QCF*)rixPTs%$b*0vTNEZV4#R&^BXzY zyGI1Q_P6+ZUedI9Vqb*;?6mlJSbqq7fZ3BF^6M>)H1P0Li2%8eo3YQFv1^^OUA&c{F8$WiL)tB1xN!kFK8W#r8(6(o%AF~#0L9O;2JZMn9TNXZ~1k!*UEKg_ZB<#iYS19x_Mr%MG0f&gB#DP>=X*bjW%I8EKKT6Xi9IjznWVl zz9>cfNI&Af)1vkXQ!yRjxV$P1VAA5-j^x1s3)^_I>5-U9?}lrl2JIZ!59eDA@9?6j z1p~iU3VTw;A_O&;w8`puUn6=*nAsn$d1w(p}%wv$yx9g}D-2aJ7-OBC!dZ?+-hRHm^@Bu(*ASK75mfLL4boytTP4wO z%9dS2`OTQz9<}pkH*X&i#jrlaG2r9BqkeCWe z0)DTz9|fjT-ZS>wnEb#>QId(W&8Nw0Igx=PCZw^soLR0XxM~YK!X6t1TDwMn|{UiG0DNv2Nry zFV7n-5}OL`CP?)v?GGA!HN0Z_aU}y4pI?(l4mr97W8-gTc8j&L+`3VJ_dUbMwal5i z#it$ldCg~kahzeED0K^>sM)cM^VUSJWoQj z+7nbEomrA&BD&vdYkTd413lH-;}Hk!ns~WCY6UoDDVfRPnjuPKg-jexyouh2HV zjer@ki;a!wJbBTJF<3(a8-+=bMMXEdgmvA#>aOZ$u_?r-w2U>g*ZAuu*>Rd7gtvuiX zlta%J5w5|}ISpPfIMFXojY9o+1Q}>G$q^Z13B&-RSWP1QfKfxUs4OTe#(WI7Oh)cZ zG^u=g(YRFK!Y%P!w}NW%F=A_phCF=7Nrt_rHM0>fa`w&q6-Jd-S0|k42Kd2ueBh{- z$a~$|JJG#%9FO?((5_4x;()!KjZHDL`|t70)|$7xJ-v7VqSQ%0%FD)#U4kW%-u5o3 z&DseAfnOM2rA)7RHm_LU*{^f_#)?ucHT`RPx5(`Nb=p003>naGn}uUYtr$K-0JJ4= z@&>6jQ+vPWAd88A|CW`rsi`yO4Z6Biwc54D#kI`AN8Hl7te=3@U94~6qI#xVL0uJE zQ`(12#ZI4bfeJUStf#xW0hhzYqA%lUU)0fW?9?0nfNW8w)pQ%MiY#WO+rDDsV8wo@ zv8cD)WWg9d*-F#L_N$6~l>$@ceL0XbV~U~st{{% zkgiMz05MKA+g+d@sSio#Okd*ydlLtB=evu!5r!lAyr#$DKM?YH88+2d^AlPvt1KT7 z-oNFukr?1lC~~UGc~9?i!)QDOf`+vk?*Doc;TzAE$3%n^rAwI29YBh0%CT+HQ*csf zBL;x>D4*w49LG8S&*>PV#d9B!V}1ul_}IQlbK{x?f)&7 zfKUBBQ~>#<+U!K0nK=*?xm7C@`RwHS^DP%FGM-g;$7f~YOIY>w{Z9vQ!fNJrkN_pI z&D$wzRG>QM?HM?;*PY-lZ3Uq4^Bx@+Of#%lcAo1vbWgwi>B_)-+~v+Ct5GY>NC^O% z_?)i(UgkG=nZI|>89mZx;p&-O1wN#W@VZj>)V%I>&S>yfGs~M_`+M+rSW;wd;mDd; z2xhjl-MJwG9w_XE12VkMvv|k@*!)+|$Efbyw!|HSM6(H7sW&bz8vte zFRY&Nq@#z-@nE1J!e>t}4FH<9`oNFUtzvd#>^~j8`K^u?O3H>CKZAR>yB~!L8*PTe zxv<+I$Xr+n|{LGXnPg;&wGsX-vo#7G#n<>G2g#gnXIu7Lk9APU!`9ih~l?M zuEGC&BnnY z-o4Kk?qL)GfI!aKqo5HnqnkC!vT3XR{EwbRwjbl*Nv4e|nXA|uPUxp)oA68M$L(FuE+RGo2| z1y64InRrtE9sx@6u*p)RrtRDDJy`sbFcUM<^fchpS|@xns~DHW0m8A-;0KifSQu;w z{&<=Rw844InEUiu|Cg^ezML?UUR`kDF>Kl_+Kqyclva?4wv;j6Tb9LvCV^d&p>Bg` z^MTDVX@K?LbVD_A6&dJkJSqT}A#?ZJyL^f_POOZJ=6;QYzUmLlXG+SG8`r27%q+|| z*_$YfbtpMiRZ3tCjuJ~+E3ThRJVn!|)lFOrI)8ZV?-+Y;rF+Q5a6Y}x2q81_V2tr$ z_#}MbBE~`vx)mLYS9g%nCbdj!@l-+p!t-mLvRe*|1^#X!VD_=j=?k1iO1ule4~QS7 z2Pk%&jM-Xx_Aje}Jazf65%~o~!6mI@ut-fTn0rGqf%1tB-r$JTJH+|sRwlH^v~h7& zA*`d{&cVvoN$s4BFYfaXYOji%HTKeNrrG`md40^Ggu3h)d>s3{&coHY1Mp{pP|AWSItN*h$ z#{mdYI$9VBHNfUOi{siSog^xsCp@dnn#n!K*39un8Vj9-eyz?bQQT6N96|Pv_KwT+ zxF5aeqdvYK2&_@XO(C@hqxGRae2^e|wdNJ^)iVU#-XG0j4e4po{WY^!QV;ZSz7cMl zeXETs9S@KhX4tbL5UKl+T4i)edBh}D5P|BsQte25pzk~Vw$NVnUIz^=5T4)` z40;%uaoR#q;AK-lM&}y-_|kO{qI?*R??!O!gie=`hz$=k$4J(35~u=V3bMZ@QKKsQ zU!kEo@|2w}y^x3K(g)KBG!wtR;fJPz<~BD>YbP!#wna1LX^4w{q0VWq@4x|p8OaF1 z_Qp=y3H+M?5hF&cYyMNa*K`AF`!}aM87!;-N@66qK^l=wvX`$;C8DtZ?;cXyu;J|e zdHTgXUEZ#kqqkop5@$lZSRl+3NB~9r=m(&7DsSGwGhg{bSRqgBqUCL%uC(md3ASYk zFFPz9>q_9544N8pOIa4n>HM&qoo{TItu#=yU(b)j>cMl)XW&%izNmKZP$AjU=#*;$ zhn%%aK20lSkDkK+s7^*&{*@o?#5R?967&uL##@<9R@2F#i{!gU!L;fagkDb0fhGO> zubiCSFSId^*>nV*QQ4yN+~kLhL<2>X_B7Y&PAvppn}yEGlVOf)>$cMCNXO(^TyE-y zbaqO1LF;p*`A+P`5AR%r^H6?a4H5FMmZ?srn zUn*otTs%G>ClBzd^LP=Brm*r(85^$J7fp}#SE-cYB7Su)0WyRgKKDEC>nkU=+b6i+ zQ^wbw>gm{1_H#rSk|@Mth{Ey`1?LZc$GwOQYer$4X{HuGPt5 z`vpUC89ue5o2Z_Vp)=Hdt#>g{m_Ko8qFktz zX31pbD1cF=H$z9Mm9mTuZ0-CpMFpmd4YbYhNAr!bq&-j6S%L6fXS4v)j`6tVlH^hG zzk8QjHj!l~$`*Mw{k-GqQ?2D8->xKM!DDWbLX! z143LL&c$Lzb<5GPaHL6?zwtCp>?5$t%Ze7}N+4&Dkpn}jPBRPagrpM3Jh(0DxLt>~ zlU0m3_N?;CtYaBwCH5}q5h=@7Ehw5z(`VPPx3^Ecvat4i z2pJNETKKDt%NF@#&LwK9!)XZ#`d+-Tw6d~v7|yZQh;W?sRyP!z`dz0|ns~^O)*q3- z^Gg+;Q(H(xH!nr`f|P-Ud`+uMGc#N8HG)P?O5YWb08?fE$!RBJN>4reY+a3J&pDJj zmEl(s!^#_cnBnFh_EYeS2c2Gt$1AsX2r@b)|8#8N(y~)X{xKkuRB{RZNj0nW@ZC8M zXt!@$wfBhfRL=gvkmQU;5VksuZS3_tecb3kevJt~*t}xzK|u**&u_c8t;$`f@>+Z} ztnP(HPgRAYvXa^GG^%raLsNY-iq(qB!!n~A2&ykgZ2$hb0nx31P+1dEw^{f)QyJ(WliZ-brma3DMPJtV=Y;9ew zwA5~T>8T_AA?b{1LMAF9qI=u5l~1|w%Aos)Rg~LV%$D8T1V+ER9CLr`gtgnB9GaN(CsI^tYmMzMr;V)W3HP%Ge@dmRD~} ze}5QK#KC=qdL2hq$0nl0f_<-)hY@F_Y7DG6e? zOkxMe3_<%|QNNi-bsK;6rRjP(-dr^GIN$W6k0N*Ey`l{HD-REapl_^aKUq7^I!u#W z+Frp0aIugjV8B2pUgAF@oe_d_g*0ta6!B%8^Ja`}WGIxbDlL@z81}Ymyw%d%A@c_I zR^`3c;Bd==*U(Z@7-pq|xiE--`W2JQNZldt*}A=L%Ev& zzbMzY2jqV^*zY&sfAyn;692!Jc>k{%kWXE)70#YGbcGxnKp#))CfLHaJ)TaR*8T2Q zr;8N3jw{>PeiIl)eQd44GS{rUF!b@Wxho)hyUpW2xlR#pzOK?~Nh5(x5M7;W3fXkz z6Mj0W13fi?a8MAjuwb~J$;YgzeQ>6LN6fxgi*5|o0E)?Q#F4 z@{*mgb}u(K-nH$IkfSrc?=9&&)gpK|@i?y!>b>d-WuyqtAQCbe_^c?@b<%dXb^cRY z{Ql%@B{whSIRTw2&%)OS5>GDjVmFzub053v^uEF!uJO`Ooku3RR}&=+fzgtJbHq&)_yis zq<&#qx%}OQ6WnDc!v8XGzQ)y*-R9hntdeK(M^z-L^XrR)*xEmH(S#phy?HC|3fYFf zFx0izcwB6x8Pp!ru0z_NaMOXyiWQo^$fnl>A|~t)|Af> zC!n2{-u`(zVl}-;h`#4Ttnhr=64uE`vVfNEfvd)KZ$7R#>T?FM3~F=k?6~YZ*DuS~ zyP8qW+8?Zm*j#e}L{EZ#<6{>gLAJ?tVKspA5XQpX2-f0tzu~8-H$^{Z{s&zVnS=~n zc};-i_S}A3Fq2=8%T4&HGskRr32${0awef-VReIjLkgUwlYVV9%*sF$$w?tq+1z8$ z*@2=ytmmh$hv7n5^m(C~$4BBZeD9+1pU{=o{Z7BlSONDAtBx6BLV@$pY!(&CODrr6 z`46nmm!0hv_c%|)%T=P+pAXA4#?q(iiyqy;EsU5IzC0ket1eVeVXCd8^|#PH42P!d zF4tMw@EEm%mz{^5g)hQXR9ktyuS9H~-Q9op=Sk_XUXPDMoE*l^bJ5+~f4#e(4{A`Y zEZ?g0c)s?DgC&VK(QFq$(2$Rbu`v}Dm9cRyUi<2O>n>A@Z&kqld*77tXZ!i%=n8yq zN`}3hR}*F;FQk)}PBDDi7wb~2aH`BYs;?-*4er{q{ZsZA=kmC_1eR93hG9?SXW0W@ zL^qHByhITd6MYT!v3?Cl5tYUMK6(E=OM8dOV9eYtdJ4>}x%*b#qHHH4nI)&LAlQ1? zVcouKE1f9);skvWmEA*J9MS(24g<3X+$eXjrHXL1}`hKb9m^J07JvW^?}@i!1; zIlEm$p5fU+*}$hof+a|O+2iH24sw}?oK??*WYrjg{VEuCG`8~xe#>YtGN zcvo~fyR4u2ay+|^dwqw{jSD_@m;l+IvKHPg-5%R8@Mz^yC5dP^UFugA6kau{IZUy# zKAVe!K-sbP?$)=l=HloNj1^D~@N(_C+;Z#V`unFRxbAtct%E<$ZdK)NyuarMxpnl* zcwQ=`9`tIvxAa@+HDz47puh;Ki6syHzm#JN)PF$e0*99N4M}d$XoAoxZicT zTZd&{7>;AQRcE#DfBW>3ETz$(fE9?K4+4S2L(Y5sVECmZl+LEN6olhFk+qpRr!E$-X1a(?tc8S=g&h8Tc=rQDXhDHL+vX0;J{b@afK8t?N7@`^Q`yA zUY+C{ztfl9wa!QNp^Up7e|;`}pFV8vM|F>h<@)W0eA@;BxGN0G9pEr&Qpo>kzymfV z^rORn+X&{45dy>G8M#wi_;Gi$<6LHr8Lf{`Uw@h$)*>oq7CAvua^CHM{{WbjOwSWl zyltAN#f+f)uG-T4i$XdG`KYRxb^9S@fqWNo(dp8qm(cLspPg)9_OQK7u6q(}Lu-z# zcn*bjS7nrx?mO>Kbh6U$KvL@$JI5I#{+tZrvfqt;@uYDptm^e+KwZ>-}lJ}wGp)q$~;zW(ZFDHdW3Qb;?l%UpG^odKY^MWr=_Eio2o@@;q zwc;*CMxtVA0`O5#a-0KY4E@T6d!Il}*_N55X;O+12hEiQ6ol?jk&b%LOXExym;MRp z0$fc=i4!6)p$)me#oev5nI>yx<>yzw(Y4o>+nw$GeeR+AO9e>5a*6ff2}$w7NgyMLZ?^KwndWk%&AJN{aBaQ)pYL7gz8?UPjO zaBx2=wXiVodMfT0xQ4{Wu002HKc>1(eE8GuV6FP+`C45p zPVzj|)BfOv(Qgdoc?_$1HYm(oTuNf%t5A9p-l})*B3!63tb7O- zCL3>R^sy)sB3rc=LI2q!HRC z-A&(&ipypA%nyi_Aj{xnkSyJU2^!5_Q4iH$^Y}!|hCdIFWjWnZqRgQwJ zKo;^R*OO}-P?4DEgnam8Kk8`z;GRS_Z`Um0izVJmKNL6eat+$kTR%8g{$lj{+P$+4 z1oH762QeTDPW1NQf-yN2$#mVqmFRN41)ztUhb4Lagx_?ZMAp44?~Zn}EjoofQ>R(< zb{>l3ba0A)A_ERjlS@KSi_>7Io@XrMA~g#6+b0sZmzNWgZAH*4@-1F3tEquIb|sqvjKPa^TNYlI@fX45yvz z_ucKial18Jfo`(CFB(%7stgC&_Hd@eLME0vK%P$`+sYCY1j?MA!9Km+xQp}%^Z9Uq zCmcJQ*@cGK#&t7Ab2)wR9SvmqNf_ECfMK_2l^WOJK25UNu|xX2n5IU|dLf8`2?tPM zq97T(sQt;r2hZt5?~|)!`96vL*=8NT7d-a={Qk8dz|PIjLqkKg)wzKGU{DD%>&ks@ zc{<-{2{fn)uKb1UQ1Y5|KX6^AhY#J@E#3d2_h-)No5{vc%ogjb52K$o_9`DAmbBQF zJjAbgo&}p&7SJJd7^%mP>+8aAMKQa~=hN;5I{%=2uC`MlpB{VZ+7dZ&D6~MzMH8F| zrciIPQd#oL>!ZAoj&g3?u(Nq;VI=KLo#>NXuLyq(ZrIjU^>H`}>OMa|UUFH56X1&v zuE6g5Q^?A#wQk+Xr{i}%bb9W0S5dfD)@dMkH{Nh_>RYD83(jdX&VBE9x<3w%T^D)O zUN^l1i4P2YTZ3X@vD4Xi9v^o#_I=SN^ts8L12uZMOHLFPF(5`TLg&3%=9UOchT0wK zQC>rQ6CcBF^e%9EqUsF}$X|XHl=NE*wSpC&p!L^Xpqh>K&ZRq0_5VnqL(*r;?Q38t zgQo}s2pKWueg))n(Cc6CrDt_>aj0e72TZT3cU+ecE(mHTH`3F6+6t zi`@7fyJJqnDsjeDUQA3`+_agBRBRngF|v<72Z|NMW8va%8(bwrxg8C?brJ4gAs6O* zv4@9EMzTp$d;x@x4T1T`i4EPg+c|Vh9G{6FkXA+>_q3{2rP=nir?7G&J5~5pW{Z{8bHMy$XYxIz{`!rgX+l|s_N?M zs;aPUGHd#_jdxi~QT8wLbR4&bRS|BE&-+{LYl@N!*7nJFAjCn%@QDvs1kHb!)^MJm ze=pva#j)3T+}$CFPe&A^%S)}<$L1d%KTVlGMBvysxhwuNWSLD_ zopl1d66#?Mo!JbYToYu!nQXb9HF<*gCS^Sh&7>d7$IZ(VKJ6q#jEj(3UtPty_+MzM z%C0hkYW15vFLkHa44{WWC&M#~&j(I1X=HEk%jduv?fQ+e$eS5ZUuWAak}VQqfobNrK2P*6bCn)dl~A$8>mv;`cG@vGdmM&iAvP z`?WpT?uU-MkaI!S&!Uh0Z`>WJ@7wn$+}z!>1ol}c3^wh9oVg=(-3G43Q|A zuC>^YV_8g4oPszM4NeBdc&s0*^$mLll%Pqd4jQZ-M@Oq*zF&hw*f{R+bpMJt?$iAD zhH+1r(C1-jTqqe`qcQ`!aZrWfhN$Cq3w4KmpVb5A=WC&9Gn`J&Y{TeOil;yXiaOq~ z_V}9l5#E91Ko@aVMQcLWHod!L9m1bxTnQ_fhwcNT_PxS0>P|w>&pjLNLlJ_84zCjw z{XvgqnLVS`pR1&iJtTVs2#_EG7gZas&((|1I1G3df6o>=yl$jFna*(aCy03FyR4h} z|BBeGdKdm2OS?s-qrH`NA3Jn$@^+vl@wjSM(TCbB#%M4nVSoQQKwr7ud!!5*(sUup zDn7jBe=%(aVT;AvFP5rby7TX7x(GFRLUd8@dNjDK?U#_4z9r>rY`B=!506U2lNBj! z5l~%5>focaK2!9cy6o~n2etEZa4?vUWB7}DkfG~WB8O+>$)`HQR)k%hCy|LFwI@Zg z@VqmxkLHV|^yyNK7c3UqE*H$m#UYu@2h{E9mDLmFEe^tYe9p@d|_iGIwi-eSF?OLdO^Z3OzUV~_nCk&1$ zKMlcQQ2dxi>&do@;A;uk_xjO487I}6yCvED@LsdT&Omze*I%L9$JwOIoTF^W&e5!f zKlrE$J@$dh%%wguyZM?p%n)q?92d8i{JBfm`N5f0Tp?Wny3v&^gzd#>hJzzDY(`}X zzAta+S933^n_So;zBbEcu~Lj2-e$)&*X*MnWXk|3_~8D3NWLRRl8UO9@L@aj^NzbU z-mZtS2{-6qg@(SL%{GY8#Q*WCR?EY;b4mE|An&8go?%E=GYqk2hhmSeb=f{u`NgrG zXky)&iF^LBvS<6B?9p(8P}|V%TSSBq9<5aPuC*T8%%S{zR`siKCtZV@rp{=}K38LP zjv4jNL!?WUW!RkIV|q^RfT>F>LF~VUs;TSmt(A6aLaa))2khLtn_DwjYQ|&o>(F3r zAYof761jXv=-b!#h`PYnGls$To6J@I7w)4)HTBn7^yHxXc?4u_s{MDuY>RgYtJvqz z=5KO~&QxYY$n}k`O}9%>?zEtuL$sVfpbz~}REx3^Cxie|8Ckf1UkwsE^`5E&&nCK^ zJRq-HlXVcZ9dcB!6?v6la={w9wQk&xZQ}2@xa@S~(dBb$U4=naG)fM+Y_-@$guJ9+ zIjX;0p|#1e;KyYQ+SmC2h{|^6*x!-2t8!R(U&xzC9>6;OPreHp#L!1XNdgo9$neM5 zectCmFkkb4_!m`%mg&9vr4Hf1uY!z}pX#_cB|aINcE)tJ-+_FiWuw?&x5Vsf+`N$I zK=j5THGMy~A2497&^ff5arb|$0~A?o6VDTR=yTo?RwD`{ok%--T&6Dg z2=+b^1X|qwM>m-_8KL}d=l_&~pj?8+t`=(;U8YeWTIk-;--M=j58>wHz6V_fLXtl)5`=$6>ER$)}K&+L`lm zGPcx?1%)uHboqO|DqDVtP{4Z*Z?GTLT7TDNb!YwIlKc46?fs)f!xl5L#_B6j`AR$cPmZfWRpn3q+gG(CLYK>RxETf728xzVrqhTf zC6n`MOzs%rFs)blvtR=v(A{V^sqHb>BOho$5#?kjnd$q~DcD~f@lnc8{w5HqtQR3f zvv8(@ah47s8DuQQ(6M{lgfFga=B)1D*rm^g&st1zbtQ4*Lwv%L{NsZe?q1Q5_=PiKLeoC6JnKGX$IXsU?S|5E_B zeH4?UWf_|Q4~{FPBuxKk_bKA}3-59n6d@`=xV;p`FP)VvU|+pJ=(X0#OmwvLTk<~H zb!J}m+^(9xiWoa%+cU}EA$aWc236eH%NSB9h>PlIl7^Vf?^iK-&68K zl+XUELY-mOumWE-KpffU`28AsjPC}8`3{iYAbcJ#?X?dWDcaY7N5PhfNiGd^Nwv9d zc%x2>PL(Q?o?fM*Ovyu4)Kc2IWNN}Ela--U&(C+Y@Ycl5Epu`2Ht376^P8B~jEry1 z?Ve3FJ$uH1%GThjH-$FD(Ji)0uhP35RFoZmYBiaaHyyio`bFR-e?S?M(JreIr~7^wwhnlY;scBZD?~$^XS?~j;Cm}7t6RsJ0-hJ=?6km zA3k*(1_9GsB)WpaUv$e|K`gzIqtPRoZFOdIc9Af7C*ewd^D}}Dm#U!$`|ksyhVz3- z{tq)0HTF97YZZ)YS~kZ_Z~NJzK`oErq|h6eXff!Wa^VaU+gtUbF8> zMO?U<^pY4PZY{PIt@Xs$=9mBW<+hm8IAa&kR8CIxvBSrJ*BwubvpYUp;MG6(@N_HhBlt&CN!*zug4s% zUwvZ##*qwu!vH9nkNr!a2H79a-~-yo68+z!bx+zd`c||J-wdn$i{;!VkTBRkpzhniph&ZY)Nfh= zMelL_SC>s^%ke^BA4uZhJowRuynW@5{=1crcau-}u3b=#!zS zSCe~Yov(CJxedpt!`fT<-bPs^#ZGu`X?Awe*RnT$<~q8_Cuq8y;N9Rfu`K zRo?EYNGW*4u=%?)N$a`TA%gwJbW;Av8q`7MEHpHp4oMlOl{HSttwhPS64KHdO~)#y zD>5@riyAAx$fMgMXG+cG7j)G_U41k>H1<_0+rk-AA#UQLs*>%stF!Ew*m@_z6VUac62{N;O+~b5O&AM5d9o6df zbRM7|2-eat!y@Fivm1$R>wu`^T=FpSM{tP4TADB`x8LsG`>}sbXo59Cr^b9NtzuAH zKww$XPCq%V@zRxC zOJ;R;Vk=T-VrFga*o5Q#n#(~xo0rvYta9&6G~{z7v|PZJWQ#)U#$*=PH&!e zJ}s*r1jN>|P=+q}L}3sACHDW4P2`dBLzTbkLT~~M<#TbrTmK2tJvu#Uy>457{^;&^ zOgP@951rYWwK-aWHqR_C-cEctR+RC-Iy;j!@tu8`Gxz{?xh03BVWfT#DVd+qb9NFu z@2GW~9&TROef+uamF08H>mWPF3$2WH(`z+exjRGfq9wZ@`v8gL9f7IQ7sk? z(J#_7Xw&3Sqa{^}(t2=lwIJ=q+kjt03aO=+JV)$nV(R-axe=Fie^kUPVTbawifCaA zj&K=;8*cikz6vV;$lVb-dPUe1v@R+xvAz#_VW-`K!_~_aEl|Cbg zhUHX-PQ81V{}0${$hFMjd68<|Y zH8fDy&M~#R2?9cQD`8AxSt3V7E;X82yrj^rw9}lfh4EIMj2lC$c<$GI+yhhh-c79Y zA#k9sMq)*w8Ha@OnlY}0O)VUt`NrpDWQ8hIn=*%*BdL)hp)pY^qi+V?f=(M!20#ZB!lFX{CV=A&J|5`=3MxkWWAT1LrM-?|o zU*rq3 z3k!}=2Av|BOa+Y~>!Yw4g;A8$RI22OCvP zl)ZdpYycRlfAEs7my;|qwc5?%QPBJG&o9~u1#z6r>Vw5TOYAWmd5FHc#~h}LY+Gw4 ziGf^@HzFZVYMd!T)UBW;J&xgei)`rJU8Os@8$9s*avGa<*5WX_<#V3xo^ldMsH0rD zIs*&3`8I(^izO>#I8oD?TB$r12v}JFxYqY>XaV))E=~wjyi<(yww^>-a$IHOFq=WB zur6^=F8QWiss;etu8!~IF)}K1Et6i$x#LsQ4>U2&S$UuyGCf?J+HUx!^8SDi-z5W} z@gdlU-Tn$+unq5OfgL`Z=FTy+56oQmVOw+t(V;an2R6jzF@d4OLa%|tdVx=+Nf`C= zm5Jy?&(OpVmWfDy=b@jTN*pMNwy^*^#9e8ZjjW|Gv}%+ zrJjNX!Egf+AyDm3`#xU{VcrQb9}BS35@YbR_C+^V|A&iB=b3#wo-B3V%zFN9HW* z>64sF5#55c=?OV+S<-P#gIU~%545P}>@5uMzpKLPK^CE=!y0bUdK&I zUr|VrBf!__^561sJX+@T#T%X?(o@6tWL%5F1DG<%$Ql&6J3Sxil~I_sN!=6$j+D%= zGyizbnGLnZHs7I;O53jx`_pCfi99}h8cZj@Ai7_5@G(4?AAcY3B54BOWHES;Y_nYCR^l~UX?UyC!RR82#4u9*B&OmFf&?~hEP zT>1EBED5^gdJD#%AvoA70ruG>hC{O0-AJc+S;6F#DZ463ami=}$>Cfu@hmlz`l>ur zz^zx&{_9ch>JvXxGL5W?-|1u8QhsjctD{K_qfXRUjysL0;)>D7IVC;EBTl;E$lV{l z6SbOGO(vJr5!$I5H%1VYWzOHAq9;&L3~);d+$O4Wjeuo6N_Vm2f#t@ihH+FkQoy2& zzNC5>+=O9^mls_r?IAPti9>lPT$<_r@kwL=?dbrk(>_I9&ba(-1!!hA+mX%TUX-Y{ zT>8|?;kq^IzwVj8=Y5X56HGyG%C>vFJ@H$-6D0TmtoP%qcR^8C_~4sMA+i_~GbA z{^0(qOt@Jqfb0&_EuRIlcM(}3bk13}%_`6}XcvS~0|72ex`Cn6yULE*rzgKqk*iQB zb7s>{W(x$GEJpR-4BAn;gAmZ;r<5HVbt98kt?#7s-$S%>8@^+wPa1NiA?)wM1tiMS zSFLh5ZpGGVol+DQ0HX0?8$UnU2yX@;^Q*F?+}lRaVTQ>m=gLi)pGG0&2{{JZUAxDN#hWZ{5INcNZl^Cu z`gQ#6O>bD%RSn_^y>-BjS{;^i6lLFwFh(e%XOM}D@^B43X`A#moB4DVN?`V9ono83 z%wXq8(U2lqXGrL@+V2XV_+s7ePA!SMFRn|~n7W-f` zOa1T5fW%ePgAE{{VRrWC%KN!re_7-=t@Gxt1%xd%s$+xWy_Lmru9~oA;ryF~q4SY4xR2y@W4GT6R2y2+!LaLDy^kvR}x4^89zikjh ztyC7|?H4+EWT@M?4O1xaD3lRCXs5{K#Vuo~@?u*@N05X!vW%ORmlrp+5QNQYs@u`b zw2Gqv#eCXZ)@<6Ezy`^Hb)H{*o>Y!r8c-N$s}EcU^Q+ z0;19&NJ~hE0@8|rq;#irr*tezX{3=>>F(|>2}xD;Pf#2WWXP_ZeI5EVW`!pPVxp@~tu?mJrE2dIUX|k|~_xYYlTdKYa7hMu9f- z3qkq7f@}AQV^vTl`J*>>A4LuM))jF{X^V=W z31X)o#YKEE8)Z?F=94S}i$_A+ncDFt#RWZTXw;&;(S#N&mvJqpg?+3;`8l)YPG;m~mQQ@d^Q4&=h=1$*Gx0D^X=zto%M=g6udNj1d9sV=HIviV z(Mq*qtLb%dx6b?lT%N3`#pTSi2v7;i`hbyLoTuG93n$U=GSbn5QS>wYa6nagomisu z#AfPw?e8}<_*QhMO8bR6CbkX~-whAXvzO5!tow~|jrfi%)sqWDnHLf(56y9M8FH8k zbBo4{c|p1J9eovz;4NpUY8|OG`8e3&SO+VZ+TN%v91-$Gu70hn)eig>Vn%{cXcF2n z50vzcvueNdn%HH6%P!<7F7qFrj9VRZdrhsn$+fzThkHLvx;$4wPT9RhXhIZ+p0rqo z>^-lKR&-{Wa&dlXxxZ3EZ7zi&IWB_?l@UiUryolRHsy>&-cd+_(WP>TIhsP=m|zOi z_zYcz{Aa9lx%Q+%mL8_j;vqI1YMQLdI%@ZEWG};VE{CK^jPY7oWmKUB$$5c*JR2EUK%gGM8bp_II-oYnd#cTmOX4>%*59>i;Zq>!7HbTWPbl0lCuBlwWv9 zKrCp*1weVS#U6(nI?H;S8`u*gql~9yHOuuc;blPg0-R;89X4w?lI;6qRn2S9R4hfDlT2mazm9KYZ3TKeHcSxzzfBz)R1SE;vXN(1xl=`@b zZi(1)#Jp$4Us|v>c^WC1t=czJi+>-8ZD5So8AwbgVyB8WnQ8MJ!S#y5@5~uwX|Sez=muJxyaLN#DuC?CAFNjR~D()4@l3re)I{&e{#>UFM5A(HBL6 z#+Hum%!W$@)<#la+mFYSf+`Xe}0rYQ{?sQg^K8Ms1r|xwi zmnsv38DuByRlBw}?=hUg^I*Hoob3R^IUevx*IK3V+gDX2ZC@Q%xi`BG4cVIr@G+BE;I$s{hYS8KYZlNLD#_99Q+qmd}zusRRS*Y80*_nA_ zZF-1JJ$<`1SBQ!P3pPe3UM;olw>GKA$pXaolOz zwf6Qc{aHfAcfMks`P2IHVy|I$?5rOidTxKpF@L1ogY+)u_=I*;Dhh*xfWgn%j0qVp znGpkQ@%6tkh9O(glkePa=btE-?=Ga(2?o^e>I5BlA$W_Nf6a1-Gp0tfoTuVJi@5RI z>!?B=N8~=8H#_Q`ilf%3(Ay)S`wz9V=h9AP5~!kQkIH9JD@UQl^71gNk6lu0d$)Xh zlxc}quP$bRdkeH*rF(snvn4+oeM>kEJ2f7ku|To25=y-%s5-I5HO$Zv=WvhCd0%Us zZ`!72!G@K8*2u|D6{W*(AyFrePmu=l7VPgW7ZRG98@t&gJ&TYX$V7@g)A2lUu1X;< z*(GnEbAH<;B)LEO?zpr1Zp0?v^)$nAPKI}M1&*z|ipnu>y){SqS4~*y$^7$Ysw#Fu zlbcpEVK6MW2dJ9Qy~g2J3YYE%skj##*A@$x?__Ef?xlHh^mQ}}d~z<<@t@f{k##s} z!_XYm32kmRjugL_mdt$)-bxBv#qSp&V90< z{TlSUi>q%T4flsO$5leuz$RyPr%<5=bK_0)87bdfz%v)aW;l>ZEnn>_S1``V!2r`jP<#QXVP9*FOM1c0(PF*{DeXDNZ zUzJA%o6r;qJTyPR@Lr9P>IcD-`@7%D>eMZNt08p|bw+Hdn9{tx*u#|N9TdE6xiR>- z*jjtWdKCvjdw3oV3mZ*&$yOtmjEz#Xz`f?2#maqM(Q3~*PQaEAYI%bhBQ$k$&KEz6 zes+_eRIg}1be7>PiV&E-R|nU8`5ojIzm|4c5rdLVeqt=8E6Z0S9lxm6TQfkK6tspN%q-NTmsZcAo_+pV zH)AY$FN(@0Iv>vWc@Eccj=Cs+ANHdXo_AYG3DnwX)!joWUi+tK-`Ifj)ux#|A5nC-8Vu!W1M9q5OdV^gxep$Rf|*inyj*p-$8+O7Wa?6 zE+r10bibX=Aa=O&lN}6n_Bubj5`6N=?w9w#Pc_V zE!;~q)s-+?&R?H~Zf{@9E(kB9GJu^wV|Nm;wY{r2)FJ(;jQ zP5S8Qgbu>_6<4^M;@Q&AyB+2S3EG8NlAD74?t|+jZbv@+%ts!v8tATDbkQxb-fca( zYQ;&qmb2MUh68!;%*dbdvhKi#Q6W_!OW4$*#KKA@9bsH6D zmO5H3XK&S(U4bbd*bE@Ki&=XR$E!T(?K~%5j1wMoN_p|PrEuCkCqW2eEPAh$7fpY zsESaxpv;#0jnGpNmbjzoalfcwRk~S`T<`59>hj)TcI;`U9|&FBuOppJUN7EM&cGWK zU-e`xC3o*}amy45RKxZqru>>;p4lITP6y~aU0e1I`jHb@?>C(Pv64R%>4IG)E#N}4 zoSFOS4i*cWjvlkH?zzZ?5cptttuunR8vYrb?upa`C~Z=H}S}ZGZabnP)NU^FkYD6obo_<+x0bI6#*-c<)Lz z@&1Yh-kmqy{~MhD|1UoM|6Kl>6?!-)#B$tlo_E4(!g}VhQ_rIb535H;Ka;&$Ca#-A~}C_YtlG7oUMniD8pM3%l9jN$95{{XwYf^V9g4|(8}Ja08A$j! z{1KSDHo>;7e@4ZSh{@u;ej!U7E(0IMuhH(AV{YCpcSx&6+C*O%z20;s$6A`n>J$m( zM!k!*!-bT`7no!&8=t)c?P6LTh;_Oh;JYs_&(Q)GeLkP#xhy^vYxs)5o{6djuzT~0pm^OT13bC zJ2S8^F9>hT(E>LDZtY^yP}Y76?d@OAn2;Pm*wxXqb8x4b7_>vp^4kh?Cno4za5vrf zdZ}}<;(+MD1KzUwICbAd$imJOhpzVMowqE@nUmLj&v>ETqd&_QNP@m0cXyRTc#Rwz zmj{mBL)C+NIw62n@U_0|{AQ_078Y^&iV3p)0k`yk9>?Mw-Wc3?2pwFX_hIihQY@Z&)d(m! zF5m$Yjqudbb7BZcU#Cwn;b;7q{0l-G)=Drdww0M%^q9L~RVNy159S&Y`AbX=F(PT= zUk)J?o~G9yhTqgET4Q>QPhPPvfa1zCFMd-5Bnc$UVa)5VLR~Zaa4!8>tCpj?TKHk+ zr^iREJ}chjZ+UD9mT|w=8{H=?@NHOdUbiyQO1n9qpZVQXzwUW`yD#)xpFEZ5NkQ8B zg^&N!1Dm~5S>S!Sb$U9)a^)Q{d-~Ac!>VOn_wNks+E^FT+hFVzj%{V~O|INOE5FC^ z(!@ za=zjAu>6OAJ8R_M0QcM9M@=O+A!1h`#-*$wb-9)7M-4F_gr6LmI0t77@!wP}z+25u zV0@V%Q;pdG3-z9HX=*0-AmrW?vT3{|!fI0=aVHPN4sU+=EB@~U)gNXi^b^uPzT%^5 zX5Tv^=N6rsoM|VQ?j{oj|F`x^zrC3W4D?EER+ik6x|?h&b~DcwE^J;mD*tN{5WBfz zU4}20bHDlL>Fap5E_7|PSYz~WKVa{=z)W4YNw{11gsTH1hhVc3vx7(AwqyD@XDsZ{ z44o}V%!beXT|RKc28EVZmEb062nV2Wuv+Y5%H;Dr4D;U>po<%FQWmF)Eih|33J(z@ zW~k1?cXOZb;p=~<0?l(bgXW)68_vOK4m^aw+Vsq)nW$e6<1@Y|`CsdV4HazmzLX>< z!mGBuHRmCnTh-$IHOrg1NMC={@A>6qZ7X-So^>BZ7Neiu4g3A_h@k~Helk#BNJUlB zfz!{Le+}I7)_)}UJ$V|ZrtccPpG6x9^S`~Seyq+^dR-|<Po;NnZgOA3ZqIC7nMykjrI_ptI&h?zY+~oe zL_Rj$j?B%4O%Vy}7CEdB4kSEB5X00XX4SS<#gyzq) zod|{`-v_OR@m2F|A*;?$pI?JRQ(+fY`;|jii8>d5?tWPSAH9e;3WphVgW)M{_!F;3 z3xjvJC_%He@ENVcEq7H)25WVRR!ltM9ZaUu2ctLS@}K!%V?Z8NLe1OgUVEPVEAEXD zqTAk?fmi~!8s{fs(9Q#gLxgmG7@tm)j)nHrqx42qw%y1yyh4u`)9}*jqZB06@W#oX zj+KPpvqnEN4XTllzj@U?KTgxlim~KXc9Q*B2E|*dI~Z<}Mrs(s9S^6thb4?ln;gwS zSGLO9SQQOxVmm`+hiq3_vn>T7gqx11imb`k3%caxj@o;>Cl|=_qlU-PQt<-0SUS4B zAD?~{5?F+$mI_ye0`HaFUee*i_V9nG-)zA;1Ll*lg-s6yyN_4_dtl+}nDld=@yl%o z1`R7e2lK)1M+41%FNeHLM*9ie#F(0#eCF=z*qf|gq^~YZ=tSN_PKR?+5I^isqx0^q zuGuJiB$%PS0&wABS$>X(5XpYSD0<5gA^b3W02Pa8JqRAS;?AmdAd^lm@snl5Ll+@_ z7dBOW!M$JR$3X7JW8CK$Lgwhu^{5Tpjb`s_gPkY3H=`FGg5KhtvoSpKNDEbI{1X!x zYyw7|_JwPk>+wSDq>Ed+;nycrLknlWqA~BcmizTi80o(50zTicVPcyuBn>CxaiF;R@@70Q*goA%ND+cIn z*6KM|SD=^K2rkF+K1n>>K5tcM?^22ol7`RYzWBKSmzYe0U2Xk7+lhDgL~^`%S=3DK zo5VJBhV%-?HvWed!vm?G6bzj;7`j=Rxr1wiWcttEgKBUAi_E5`?fqh_>9Kn26k}S~ z?zz$L5Q`rZz0IF=dBy8dhcq$i*h3GI4pK~7u+R@>6*ZH%F!w#e;xw_=qRxs?)4!;l zhuiJ9%l_a!*O(b^Zm5&8C4vkWVA5Sj*s8MdwMwBG&&cxBzEOtsi*Te^)EN(?b$-Md zH{_uspClf)Vot+#HF`K@Ln$Nik4w^av!bVe~j65y2Yo8IMmsZ#ZO7tGG4`n+EM`*ca!suA1>*z zKRkm$0QH{yrXveQKG1HO#i00d(s7oB1Pxu>8#Ht&{*ZiGKF3|dRpT_cY+cKAAF6xT zSY@!VH?WFIIvK~;wH69ipe5_APwV8%bQy%jy49vC)aN8weQEHu#-13*Ctk_Nixv4+ zCpKjK9+&V+ZTuec)aL>(U60Qcz$qc`O-!M05a7xd(BR8KsOi`6P>+M4fb2`|%8d0i zm>R*Vg}cL~g_!1!UpX@68tsOt(7RMlnPCe!3|9G8Fp}igD^P`J4CWZ6Kkd_%-sqyD zBG!Y@hga4{UMCBlWuncq=VKrEVIOJYp2ichXnlEZGDuj@u79^Cd+p7QQ6GMuk&=`Y zyZ)Y?y&lr*!cv)hc{I}Vsmg=oaetr{h8Qg~# zgdnnjaI|v~AMqTBp2_|O1^ZephqWKAVc3)(Mi2ik)KPPrCoyzd;C@>$FFvQQbVm zcyS*Q*koG}60N#Qnxy>fgEGhP@o6~R8S-Sf?osFMv{AtgThzAm^1}#F+aqy|?5$r{ z1-CW5eufoAGp~u==^bNP@atMy3QTY>oIvCwib2T#KSfEFrc0H?FPMym=fGuJ#Mh6p)}2 zE(1rIl&LOTWco-8jH(S&s7pan-m0ul%{PX=vi5>^wS+n8IU#FatjgY?3iM%&X-MFe z;rQNIF9amq+X5G;Axa{FjxT_goR$Mu%^_swsW^)(&3m~_(ypZ_-r=|yb9}9UQVm__ zn^~ZBCXv#r>aZ?zS2LRcR?3yJ&*Pa3@UJvibo-U}X45mbhUG~cc*8FlZsx_3LTH}d zDVO&@YXs`qlXl(rOzGS!mXFoc5#cT@W^)&iOa3ViCCHULm*uH(Q^?dTynmfEVMs%4 zpJ>S<*Y}Bq7!63So9Sgmm%4nd^{-t{NHnACELGjlavz#)CJh}Q@GsQDM7M(9XahN* z$NHv$39tL5OH=XHk8u24sj8}bCW+jvH<@n=fueM@!9djfGK%xb=gPAKkFz_it}5B) z+6{gt^OQ?odBFNr-H@erT-Bi*-Dj-(-?oSQ#yGp(z&kBZIXh6@hOb$tuGfPjBI^t- z9LR^xQl=xS43845;VQqTrl$su_!sIpJ$1Iq2C{kGU7G4$yUWIm>UmvL*RK+*fjqbB zLdk@D=*V+!w{TY=-D)gbM^d}AIeOi-$+J7EA}sqxh8JizJqNx`Si^CWH0!~M`71bp z9M~Y`PVMQnl6hRg`L^y;vCLU1XD%bAKu3L5Sfe;MOWGScFCM&7g{%_Z&Y{$vI3L`!ZB;28-YD)_Wu{SC6 zU#h^!9>8|_;xepX4g>^m4bQD?hHaWzoN_yZ-i>-~WFEH+a)_`2rLKf_X+Qa1)8633 zAb|T9KsFk8{)Fe#9#Hv?a;I%#FuA>P1G;CEx=YZHZF4KqKn!8-Z1e?~B#qH#M>}g< z&lo)ekpzSl!{A;TY*x;TxPaCXq^^;OOcC4r2PaO+B=ea#B$*kMovgwK()42S9E?H| zVwWbmk~1=4kE9=B6JwaLCsNXLYf2zMnSGjh#!o^C9(hxE8|*lt_9H}aXb`;Ieg)h% z9ik1X!Q)EZujRyt(W3s~A<%9%!7~tF)0?93T#5-Kr?=`wZ{4qWfdakii>W~V+HP3U zUwJ{#f#|JdYF~+yRQle9G)95BJgJbWL?t9iCoesPfDuDFq?1yWzIS*V4WdxmeDQ`w z#E#40Pu_iZ{moNEP}f27Fu+Pd+ehp*A|zpAoHx~V+0uybt4=)UKUnc8aEmi^N{^Pa z_O_fqLpUi`{ELhV%Lg_TsGxjcPagqIQmmiWw#m1A9B;B_{6d`p4!m~#K8gp4&(x7a~Vtem_#qdV%E~qA=RI$&< zDSIG7IN&06eV-uUI%C)b)ORFU(#d9!OlqfMV0mE!) z#Ro$XYMC~lAmkQ5WDFVeIp<)(3|w`2{-_R!KjDyYLPDmNj`mE<%M!wZ$#|lm>%%#) zNPFkA>ZtMgY&~PAr#=eMf{CJqA<=*LwsU)VKwkN>I*IZbHadh?$owk0wy z;Ly|c+oSx9FI11S`P6zdxXdGCmVQ_hwk#rj6&JBr!CW4~gS4zMP+MXvhLcNc5% z%@dzlyujirWeAC~eW7f^Wy{6!j_!#g>064g4vf)Bk`u)=lH5j&5>R9y-f&2@jResy ze*l%uLQq5N6*UxogaThbd9U{n$26c^&tV82eEL;2b=fH+4*dv=S-K+mXXId5Q(!X-c0 zZ=a#YfH5m)RB=hGkfe|vt7d+3LJFi&-Mj_HjDq7K!@tm!%ZPt)x)(fv*y0i!jTKS~ zsJtr^2Dm;ULB2ThZKVu9X>m>}m5otRAz)VRP=Y&`V-!R@t)9*O>oG8ecwboy;q~@% zxNAE$`XTA@g^u3~;OCL&8rk`PI57U?hd;+VL<+?r#OT%^KN&7ew;!8Z8A^!GU>JsV zZda*4h7!c2X3n<4Za*PxmnAS8=*-44u1bg0`T^rt(&BQLYx2*e$_(=P#t$xe8QXn? z;s~U=pS2nmoWwl>7Z??VCIR_Ekb+3rJJrC+`kEg``F$EID61C?QOh+Jx$;0Nop{Vi zK!^$@_Zzpa!qRXgsH)GJx2|K))y01|=3{0A;@^b25=?nc6w}O)y z2r&R!V63b)*wxNindP@I>OB-wpvD_D&wP0hxcy6>W*j9}OQupVdk|nC`pA()OAUN` z%wBdG_v7(*urPbaTi!5a$aFwK+4bZ*3O;hIR-MgB#JVoYL-!}MI&85_oG60WLY1Bi z=EUC83=Hdec_%y=MBxDLzFwy^GhnfF2con<7Voga& zc}#pq?}X8FaXH~Q{J!c2AArNB%MEZ91vvh{-P(V)0(}Cz{rwNdeX>4QWkrO+$W*QO zO6wCLVS&KlJaVjb9Kf<&Tr(o;`k#xn55BjaxDw9G$Cj4-cmTEh1D9K5n6#|rFvES= zn`-n5BU^2s`U@5p|G2<>t3Bv@!o3(F+qrpI@q&HrgXPWT$L-Gxi#KclNBbuCk_o?* z>inL}i`v6kE2Y?>>lP4UZ#BQEs zth`JE;SQ74H3ARlBzu@O3ggc6ciB|7w|_W&diso)ol%HYLJTZW6FeSTj_NR)4}^#fpR@gObD64AGqc|)M!&_MgTD~lQt@&-G>9C+KWze}<7kBe~J&bJaA zY+`7C<*laKB+9r-_=-sOAUfWg~5p-zu79)*u6`_;)dMR^oPlw}@@F zn9YY=bnTBGR;07gb>qY{mnQ9ysU%j`i*G(Qi$<_b$iI6jiHqpLt+Wpn6yE4s?9O+9 z2af@S_&>oxewdrVbeZ;UtJ$!7MBfUG*3Xi&L0oit6KmUpU9p8j6GRr zpgtY^7tMiUrm-#>Gf=v==K3Gt=53-|cwqv!O>fue9Dw2iCS0r%Gq!aBpwaDLi5183 z;T3lcjn-KhO_z}tA`S3O;95!q_D(x9KT#9cb#`}GT{y{~x~pVLG!Wn)I!m7Vl3J(# z)`5HIXwC$bKWUd$^02us06Yqy?;rjlXHxa(xTZC^{N`^d1BKde7>Lj`^|};UGmCyL z5arPbbWday9ZdEE-0I+F;5MCjGXSpZtb*K)UcmDxAyv`q0wL(x4XeBs4wXUmg;Xah}Th!o-8s=$b zn&8Cjc>9ru?&Rh`zi(rk^PVod&3sv*N!{By!}Gx#Mum7w!MXA7BZ0!J$&7)d>NRoh zQv~6Sqr_h~$bG(?7ShgZyL zxD5QB9)Cw!>R=+3!3KLMa84o$F5Qp%pnxNT4Y0Wa5Yq32aj|@$e)tcDpM3Eb!)v(w zG(;T=6hQMAPWc`a0lg9*Qzx!%AHiv`kzkWb$4IWZU)lTNi}WLn_{=ygh`O*}8V|h$ z2~Z#{{zc8_J6QrGu?;jXG)79uuY*wE^@bQymAI?v&9Sg<7pPg2ehGcrp+n$}3@K0( z+hY+ZAcasu-bV=D-M!~Kj`Mz2S;Ie3BQ0;H$=E0&UA=cg^S%N%(^5`d3@1o#_ zsp--Z#>Teq;(PSoO2LRg(UzKqbmZR}DafxMAbWJ+ukePej+0rJJ-_w;(f;$BBI?9| zEgmy%7m?2FGddv`v8~sOT5AI1j$vHf+vFmG^xVVh8G*zG(FmAQkBCL}6CNl3LPGmC zWFveL;5}Fzxjxcv(5Wtf zq1Jr4W_X+Q2QZ42q*iX{6$ z)Za(Eni+eggon`bSogJ|38UwlU{|ONaWw1tkSCrT@tN}=OhFX%*hKs!9C39FekXOtSb2t= zUo1}5h#);CPWOQfUUgCE*H%)Xe@9E^BlYi}oF+COg8A_%f445%gvOo+6l$P`RE`tv z`WRYu#9`q{u)Ql#R`N5|JU{+Pbowthy>&d7^e~YMM;k=SSnX zYIP!t8t9zk_&mxi1ZWCWs^$*kU?ZL9m07`#7-1x@*LP>X6S;Cs%*ho_@;!b8j*w+y z5T``&E`1!v{Pib8!1eLdagMEDVOvFhq`jIUjhhi9A|Y&+SPTc4TXeqRAujn3Zarc=lEqZFJV7+hKQs^ znb~+rL`~w4P!2_&Yc}f9*!VL1@ofT?l2?67(=wSF5;>yfpvdn0{zyV?uhBS9KW3o6 zutJf7)9^r1iPM}q_7%%Q)3lGOH}5X zYoc;o+_0k8%ptUzj(0w)zyeUU?okuWQvYQH?fMA!__q|?+;Re4KF7rpKAyq{P z^qISqyC;hx?Q`78_e?CgNLCWL6WXOEDq6LCng|d?s!WtWTl-cDYysLb{m`iLUWgwh zHG}qRpEz28Mvd-_KP(>+h$kq-lb_FOHGEC%k=7evw*E{}YZ#s5_Vc}&Q*wP%=kEKL z^1{|X%_}=}t?npSlm9>$x0Mx^4E|oubKp2d?1=|EcYG5|d;n^8ls6u#p!Q=U(@6X% z2AjVH6eIx--oAY8&R@lQ`(@GOeq$5Zq;zmvFPd&u5&F**?zF~#B8&atJ=l*Gm?z&q z8+~H=?h|R%PHO`wDqp>qA40Ptp^kDv|5V!GZvI(MS0^@2jJef!x7#kQTz|KO<+byK zZ}(ellakPXt0eAIYBwfjR>s_pQT?zI$m~33Gdjuj>v1@Rc<=-;gzWP!MQ($TB_yIl zbb7PwEI@|;g*SQe9r)4Z9q)Edn<}O9oLU>b<94q%!_4}fDp9k|7D}ld+s*!QP&fi8 ziGTbKCG7%~lxf31cL%Aq!;Q=sosu`VmM@wH6+vxz|yG$gxS6bnvT@#w|AnrsOTC9TCmrKKJv zU~qS}JtvEeC%?t!T7;hfSnFVXXZS#R2Qk4_*8$IiiM5s$&us3jV*W9FwY>({e&7V~ zNMsXm$}~^H9Z&Dzb!7a==mg0ov4&L-+JoGx;+x~rwIXm0S9R}fbmHptVe5_q%d&Tc z@^$*%33udklJf)W1w9k4EaoZV2R|FejQA4WUBLIUR^qY?(?0;#ovd?|m=4w+@CjDQ z8pQapNk(*sGPquj}d0oB?0m5oVn!Bbk4@au$d(3nX_ z`MoUDoDSAYBKG?Th5a&7SWt#=e2Vy&Fam;?A*~&G4&};!tC5Y&GF75!Y$rd-WsW|$ zL|~1eWl>QC!H>b`Ui~-<6#l85E4S!XIt7Av#`EXnmIgNm^^9+1#3GQ_OJ{aj2)w`I z-Iv(FU{3Bd{gg3lNrM8#FxccKTCr(>U2O-aO*6;PThY*r%|7@@(UQ`pYZslQ1yJDM zm2`tD-Uo$ThRF9+rJjw^OQNGg{vs)vk$g(`hmsd3BnUS5^7o=RRC zbm&zsPDTOPfDB41jZ|hHP`bx3lKb%u0rpNz1T!7l;^X?cR(mKTG)^9Rg@zVhIzFky86U??X;tEXSmOHle(tRD+hl;A&>=)WaWq!uIMX z5;IkYesH;~8Wdd4sg~2xIcZES+KPYTq9$x_RY{|d&Bn4HVg5!;PrNd@zahJ>=;zw0 z32lLFU)aG0HhtE;>d%$sBx=VP7&1B#PxG&Rx2 zz|b~k`&P1|PAq~(WTtM@ej-EN7rwYIjgya}NV;o?Ah>+@@&QCo<%6dvEU8mrb7E+7 z4=YFFTQ2@D4HozV=-7!y--q4Aic#P3T@Y~l36iR{1+SPlb{wqU}*l)vyanNq(iVb*iQg6Llom@9`x6zFII~S;bBQGA@CKbedWLne%J<2;LN;lZas; zuwBS3T@XrY%SkBV#}(#3%VCnETVGRWl#1hyqWbnlg|TyDkqApTM>38(hN;+=jY8fi zjvz+@qKL_73^C8Mz#xoeCwZ-)z{~zzSHLGz>P2R(oT7H5;;Oz61&w_sm+C_(gICca zPpx{m2m8bPAai0Qox$A0akoal-`*57haKO2@o=EWAwPd167LR6A!pQmolT!qWzt=Q z-O@DkvqpHm@`$7oIWh#iYSnkQxwiWtl1kR+D!I?0q=Es_D3p%QuiR2KdMrvsNv}8% zg|YLLStdC~dc06mX-6MDfw!4jmM0fU;M)(z-l7~PO~XZT^ppbmklmf0(Xd(Pf^oUR zV%t&@tQhH7?HCE9Upus(Y{MKz_VO&L*I;tI5C_7K#~;x*a@2L&2&8Wj6`29L9SE7Z>zYUT0jMXIG$&crvXk%fv|DK|r z!^g1bjIA%f>Fx{93;mmlHisa+-A`p2ex0pYII%@vUrB*Y)ECQuse}v{Dn^EMZa=1n zHH(g%j3I5w8bS5j2(2;+rN)ht7kq=-3rnYL$NDs!)8dW+#0l=7|u%Aa~owMZrM&BTC_iybIZvz5A! z-g0NGcBZ2Xwt+XXD(Q_rq`%vmI-G_D$RDQ!3SL+^V_OyG=5VQNGrjJMnV$7Xu~&=Y zut)x+#Fs;K+e2-?Mq3^K9({GB%@>d8eZIP`)sfw)GSNN6j_E^Y4Wjj&;*ou;idr?_ zsC>tZ3t|+6J2wQ-8Hc#~Zvz9t6*CS~!Z5$>T{6t}py;EJGG#olPhw)(*1e>V-!DOR z{14_H#jseNk6Mwfex26S#yJ)x&ne{1?J>ZScWRew7sox_$jgyj!KSY7MBEi&svxR1m)?U6tS63R&Oj4Sq%hIZV zTyspFuA#oOodW3YubY*oLr(dSuHsNB=g}I-$kzeL*0la(jmGTBJ3t)*!cQ|g?sg>d z6g1?n;amt#n(p}3wcE{?8J%7Is>lclV{_ZuW`C>Ri?jZY#B(SB=1-|0Gp(q)W4Z@y zn67?I+=&9XP-*x18reNpzZJFEuMcQeok%-VNCv260q?7V^3Ut;)1Mn+QmfX)Cx`zD zxRY6+j{t_0I_Tvt5elsw=E?LXP^cUNa+S&6`{Y#|3?H6fEgIUXm4yV z9aUI})GD!Hn*lE9iubeCV>F-v|5jWZGzV{;3hm5i*a^yLx|vp{R~6-|=_jaew){H+c_!e4XtL z9fU^^vc3B}WW>;G`Zya^ByZGN zvDGX2qTg=!z3v#H{C!aK7-~QUUDb8Q?Gr-&U~Oct*n3$ivYBNG$23LsUiN53Z}1Bb z1t1Oe5hqyysyH@!#uprg!|$H?n-W#3)Kn51xh-YP2AYxs=pxI;fVgIi_E znn{oNHQo4vfzS5MQXYfLvPf&?tz&pG#iFVQu#WLUZ4AkZFHa<{JApsOqVJVjJD z_)}*^a1VM_6!V;U4HzJ_I5rF})p8XM8Ru};zXX({+-OVg3kDptST1bhyu2Te;GZqK z-m}lp+6(Law|Kd#|94(4lKh=KHC_LXzX`FZqfseFX2J_;X4LAzEM*2h|uGs-}lzlLdbPhFO#!0(*2MYNxCf_ zvhdQpM!bvpr?h{rF)~?lsPpdkPblLl5#&TW92LaU^goe^l#|Yn)wehxpyv~lTahGLIZ0~sMnvz}{H^daLX*D!egc+7w1g^qlPZvH&d;4#AFEXh zr=U^Lh?dFk(j`qvNYVm!4%gn|&!|@!GV#8Y#tEes;dRjDTjKXy>^zW@l#!3TH+r{W zBJ?*gObaH9E4n7z1%~+VLV`PriyowBX+I&E*|W$jP>ugBV4(Z=^l$TB_W1vZWcn{D ztZZib|Vfl@UUyucc_Kq}7IVk=Y>%RHXGTP;g%&axG}6JtsK%+2=qFcL zXgUlmkyPI7lBIX<9p3o}Fyg+Ddaj7KV)*p=)JdgPzuLBz+Z}uXjTC6q!wr1on4(Aj zBzD$i^j4#PWB>5DKQD}{zI~S_EswuOgXlWBazc5>tYl`_x|l!TDf=DQfvBfd7~lJ= zCsX(T(bCLsV0h65vU(UO;;`4o+5VLZ-b)(A5H8hfd?6$x`r2dfYq&h2`)n-Fwvv?He$SP5lao-5u>w6gFc%Xva0)oilOra|3YbizmVKq$wYCL zh(dqya%E>CSae%D)rZ)4b~Kj#FZTxSYmeWpG7=epSsU4^YK^}C=EKjgMHOR8N=XIp z2t+vUlEYHbt)-5@bbHd$jm37QFnZcyo#TrUIiL!qD!AONLXGZ)!f+oeWCD+=Q{BWgnA# zIt&(**I9iX=4(5?J*gZs)^oc0lUtwktp%lG@j}1&svaggtAxd&WLz+P6yQQ6bhWf7 zr&SYI7D!OgKca?=b+}BuO)XLL$UyYHC^`*!%&)NVMR^lKn)v;GRh{PG zZ@kXWs{MdNQg23ke+`i&!%2WhWc8H@7vW2(rC-tIdF+&~V+En&(;t*blYKbjnJ3?r z1tUX2r?I$+i-e(OH-`dIhN~M-bBaoSQ4cZ-<;Vj^!U9{*kEYIMI4CXZ`S(vw&qwAo zmHZovTy8G)$T=Q7eK*KF6fY${p`j{Y)f770DEj=lsFmUl~P>kc_T|C#6ni6ib9c>za0YL_Z`9H zS~@jsZ|C&)mUb9P?aZIEr^iV%O($%oIc21?8WiRZ zKPhDSx)LNcKKq5)j!*j)tBgtnL?JQKF*(6U$~4@LV-sJS_Z^rWqX+TJGm@9J)NPrk zcedIBi2{F#?>9{}NV>5pZamI{iRTha{;AOiHdLxi{ouu9>wDfLzog&h#5<5os*X*} z@F;vAGryq>ZRLf)IN>^ zf1tXcA%Z-LvhpfF-K!6Iy4f-7J8mw~6K)VrSe#dN-Z0S?datc{;fc7nW!JrUt$g{= zaXX~vYy{~a<>K>tx0}!5yK}6z#4}{52Mf3)?Zgu$_lndyG!>;MkdeL{t~rT@Y`mey zMyC>q8Jwkv3PeW0rhXpZkU;G#l7YR6e;nLsLwhB{)*)BUsfn<}Vr)QA&W>uA<{hy{ z{=3Rky7MfZcYx$&{d)4k?P+p(i1s8ieL`57ymo(6&I~XMhZzNCtSwjSnmf`(M!6^! zyPJEd;}bjh^6+uN-LJAwTMuz;@T+{ilElmi6A1xn|VLHAKwq}`{_4xX8vc+%yZ^B zXXc#e{|vHudv)2}`@HeE-n17K>AJKkv@v6OLQbV_{0i6lraoh*?v*nZ#|;2ta5$WO zMpEXjz=K4*NA5#`Z3)q^#wj;3iOtQ-hUuXKwh0$(LlcBvRw?wnTg>0a)^@U=9<8e@ zCK`!XqV5dqyiT#Ad6pwJ;OWg;#g6y}e7Iawn8Hl}7Uo#>`%`5TbF-fIqg;Q%O!my# zGc6JMeSrZta6h)k82r^-X#3zur%gyuzp9AUSD{}ew~!FbOMbN{6JD6$m06S6URcJlf3cb++|mXfXyD%T&sbDU8@3{KWy|50|jjFnpae zLvWPzk8L?OJJdgpR{oT?^~hIMUl5MLeL-u^;cZ5E5{PM?HKU5s_0`h(ar@~ig`+3U zoJ|$5jHBR%<@t&=70QH)#(1*3i79NCk{G0KXh4`?w|WwkY_bcqUKs8E8Xk7^Du~+} zZH3AKhZ4dhxCaWawM}->vWqVc@w(;gp!2m@yL{45H zF}CY#mA?BgO!eAe4;I$omv!@cDkq=^>ebWZDdpon`Gzx18#r_@MgU?Uv`t`S|MXYo=Ksab7(~$Jb4>aodv+J4v;{(Vk%dyUCLBmh5{ztK+T z72z_z$~gN`#1R*n9XL8@DqD^&dB*~nJy;cx(TG48H}f6Uo_Z~9<>gNB#Ez8S`YYD3 zwp+bhC1GNIS9hm*&Xv(7-SRNB^CjO3T(i=L0)d6rLl7Swkl*)mgpQQ zn@eDJjR4n@7h~`7l@s_dGTZS$;wF>ImYw$EssEI*Ioq3nT`eIi`L%ULhnt+d4-ZYG@H6t~`iPf; z4woU9w?gZ2c+f-SK175w!;bL+Gd9z(Qz|}NW0fO^fSRXAcV=_3u>>1}!AZ_eT4?HL zN_m-qSv}4kS$|(ZhH+0DP+p3UEo&d8q_BV>`2fSw&6ky_jl&Mrwu!6=y@)SR^`O?$lbxh`kHMKJcp@*;f@eV|qG{J0KBPg=U2wcPM#i0?ro zi_qOjxZ(}MLVHZ_V4#~<4i<)w$MDnk12#88duXa*rk%?R>1o@P+-Iz3-Zky!1-$TYLaRUn#z^L$s-d@;NPvY;Jp8yORXuPsT{}4T zXaznHR@M1fd=Js`#CUSXO{N;j$076_>-GUQejAvXJj)uKRFtQSB%-1Ea2d(Q)?1rG zw*xZ0;g79i4J@Cc9sSJCVwxK9MNb|mNqloW`Da?*JS)V~Ksyq-RNa2(zIqr-A@gU0kGDEwR zm_`ejMt&?KuQ`fI7qz(X8s6)KmeNJJU`?NCM+K&r7qi2t34RtM^w3{*_^M5?Be5N_QKg_LK9-h9 z3pHP#NH&*Aj@3*&qd?U7l7Uk({zB2zju%|p1I-Eg{7F?KX?=?vOoy3OO(mflDD_+b zbigl1riY9rW;eK(h@g2qE&=3iP^^gvn;+u)4h<;&&fUi{H`~Bztz${bUpB1@5U)aR{kjAcQGreYZ;vlQ}L>ybn)8&LnE%= zx~3OM^y%6k+bJLk4C#PSP;MZSGW7C6W)}DBKS9Dh=%+4G!!?sCQW^2vf$q9$xlSV$ z39*TYR`bNOqlHC=xA8tTIklQKW?fuQ|yqZnmhuAHMdeAn+1CfyYWN z%~bmjXF`XwB_yrR`@8k zw8BGRXLlycR;v(H*0qYLn||?wcsEfKSK8b6+7TK)8`3P?L(W_8U6T#Ynk-Ys=Auv@ z$^xUp0|u+bi2K4=#;#eW&QM&E5i+}EpK{;d=7iGb`eD(0?A%b<6{(f|ZzHli-)gA~ zVNJfJg;iD0Ks4W|J%B3AfA8)|k4w~945QEDg$rq~=c5>(Wd1aKL}%ba+MCnM4BTU< zGBaRud!K`WY^7x(2IPEtK@7N#y^CVt?@uD<4E#rUw71)SN+lMmDKkd*J{3lutV{var Ni=Object.create,mt=Object.defineProperty;var zi=Object.getOwnPropertyDescriptor;var qi=Object.getOwnPropertyNames,dt=Object.getOwnPropertySymbols,Qi=Object.getPrototypeOf,Zt=Object.prototype.hasOwnProperty,Rr=Object.prototype.propertyIsEnumerable;var Pr=(e,t,r)=>t in e?mt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r,V=(e,t)=>{for(var r in t||(t={}))Zt.call(t,r)&&Pr(e,r,t[r]);if(dt)for(var r of dt(t))Rr.call(t,r)&&Pr(e,r,t[r]);return e};var Ki=e=>mt(e,"__esModule",{value:!0});var $r=(e,t)=>{var r={};for(var o in e)Zt.call(e,o)&&t.indexOf(o)<0&&(r[o]=e[o]);if(e!=null&&dt)for(var o of dt(e))t.indexOf(o)<0&&Rr.call(e,o)&&(r[o]=e[o]);return r};var ht=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Bi=(e,t,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of qi(t))!Zt.call(e,o)&&o!=="default"&&mt(e,o,{get:()=>t[o],enumerable:!(r=zi(t,o))||r.enumerable});return e},Xe=e=>Bi(Ki(mt(e!=null?Ni(Qi(e)):{},"default",e&&e.__esModule&&"default"in e?{get:()=>e.default,enumerable:!0}:{value:e,enumerable:!0})),e);var Wr=ht((er,Vr)=>{(function(e,t){typeof er=="object"&&typeof Vr!="undefined"?t():typeof define=="function"&&define.amd?define(t):t()})(er,function(){"use strict";function e(r){var o=!0,n=!1,i=null,a={text:!0,search:!0,url:!0,tel:!0,email:!0,password:!0,number:!0,date:!0,month:!0,week:!0,time:!0,datetime:!0,"datetime-local":!0};function s(_){return!!(_&&_!==document&&_.nodeName!=="HTML"&&_.nodeName!=="BODY"&&"classList"in _&&"contains"in _.classList)}function c(_){var ut=_.type,pt=_.tagName;return!!(pt==="INPUT"&&a[ut]&&!_.readOnly||pt==="TEXTAREA"&&!_.readOnly||_.isContentEditable)}function l(_){_.classList.contains("focus-visible")||(_.classList.add("focus-visible"),_.setAttribute("data-focus-visible-added",""))}function u(_){!_.hasAttribute("data-focus-visible-added")||(_.classList.remove("focus-visible"),_.removeAttribute("data-focus-visible-added"))}function m(_){_.metaKey||_.altKey||_.ctrlKey||(s(r.activeElement)&&l(r.activeElement),o=!0)}function p(_){o=!1}function h(_){!s(_.target)||(o||c(_.target))&&l(_.target)}function g(_){!s(_.target)||(_.target.classList.contains("focus-visible")||_.target.hasAttribute("data-focus-visible-added"))&&(n=!0,window.clearTimeout(i),i=window.setTimeout(function(){n=!1},100),u(_.target))}function b(_){document.visibilityState==="hidden"&&(n&&(o=!0),N())}function N(){document.addEventListener("mousemove",H),document.addEventListener("mousedown",H),document.addEventListener("mouseup",H),document.addEventListener("pointermove",H),document.addEventListener("pointerdown",H),document.addEventListener("pointerup",H),document.addEventListener("touchmove",H),document.addEventListener("touchstart",H),document.addEventListener("touchend",H)}function $(){document.removeEventListener("mousemove",H),document.removeEventListener("mousedown",H),document.removeEventListener("mouseup",H),document.removeEventListener("pointermove",H),document.removeEventListener("pointerdown",H),document.removeEventListener("pointerup",H),document.removeEventListener("touchmove",H),document.removeEventListener("touchstart",H),document.removeEventListener("touchend",H)}function H(_){_.target.nodeName&&_.target.nodeName.toLowerCase()==="html"||(o=!1,$())}document.addEventListener("keydown",m,!0),document.addEventListener("mousedown",p,!0),document.addEventListener("pointerdown",p,!0),document.addEventListener("touchstart",p,!0),document.addEventListener("visibilitychange",b,!0),N(),r.addEventListener("focus",h,!0),r.addEventListener("blur",g,!0),r.nodeType===Node.DOCUMENT_FRAGMENT_NODE&&r.host?r.host.setAttribute("data-js-focus-visible",""):r.nodeType===Node.DOCUMENT_NODE&&(document.documentElement.classList.add("js-focus-visible"),document.documentElement.setAttribute("data-js-focus-visible",""))}if(typeof window!="undefined"&&typeof document!="undefined"){window.applyFocusVisiblePolyfill=e;var t;try{t=new CustomEvent("focus-visible-polyfill-ready")}catch(r){t=document.createEvent("CustomEvent"),t.initCustomEvent("focus-visible-polyfill-ready",!1,!1,{})}window.dispatchEvent(t)}typeof document!="undefined"&&e(document)})});var so=ht((Ga,gt)=>{var Ur,Dr,Nr,zr,qr,Qr,Kr,Br,Jr,bt,tr,Yr,Gr,Xr,$e,Zr,eo,to,ro,oo,no,io,ao,vt;(function(e){var t=typeof global=="object"?global:typeof self=="object"?self:typeof this=="object"?this:{};typeof define=="function"&&define.amd?define("tslib",["exports"],function(o){e(r(t,r(o)))}):typeof gt=="object"&&typeof gt.exports=="object"?e(r(t,r(gt.exports))):e(r(t));function r(o,n){return o!==t&&(typeof Object.create=="function"?Object.defineProperty(o,"__esModule",{value:!0}):o.__esModule=!0),function(i,a){return o[i]=n?n(i,a):a}}})(function(e){var t=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(o,n){o.__proto__=n}||function(o,n){for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(o[i]=n[i])};Ur=function(o,n){if(typeof n!="function"&&n!==null)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(o,n);function i(){this.constructor=o}o.prototype=n===null?Object.create(n):(i.prototype=n.prototype,new i)},Dr=Object.assign||function(o){for(var n,i=1,a=arguments.length;i=0;u--)(l=o[u])&&(c=(s<3?l(c):s>3?l(n,i,c):l(n,i))||c);return s>3&&c&&Object.defineProperty(n,i,c),c},qr=function(o,n){return function(i,a){n(i,a,o)}},Qr=function(o,n){if(typeof Reflect=="object"&&typeof Reflect.metadata=="function")return Reflect.metadata(o,n)},Kr=function(o,n,i,a){function s(c){return c instanceof i?c:new i(function(l){l(c)})}return new(i||(i=Promise))(function(c,l){function u(h){try{p(a.next(h))}catch(g){l(g)}}function m(h){try{p(a.throw(h))}catch(g){l(g)}}function p(h){h.done?c(h.value):s(h.value).then(u,m)}p((a=a.apply(o,n||[])).next())})},Br=function(o,n){var i={label:0,sent:function(){if(c[0]&1)throw c[1];return c[1]},trys:[],ops:[]},a,s,c,l;return l={next:u(0),throw:u(1),return:u(2)},typeof Symbol=="function"&&(l[Symbol.iterator]=function(){return this}),l;function u(p){return function(h){return m([p,h])}}function m(p){if(a)throw new TypeError("Generator is already executing.");for(;i;)try{if(a=1,s&&(c=p[0]&2?s.return:p[0]?s.throw||((c=s.return)&&c.call(s),0):s.next)&&!(c=c.call(s,p[1])).done)return c;switch(s=0,c&&(p=[p[0]&2,c.value]),p[0]){case 0:case 1:c=p;break;case 4:return i.label++,{value:p[1],done:!1};case 5:i.label++,s=p[1],p=[0];continue;case 7:p=i.ops.pop(),i.trys.pop();continue;default:if(c=i.trys,!(c=c.length>0&&c[c.length-1])&&(p[0]===6||p[0]===2)){i=0;continue}if(p[0]===3&&(!c||p[1]>c[0]&&p[1]=o.length&&(o=void 0),{value:o&&o[a++],done:!o}}};throw new TypeError(n?"Object is not iterable.":"Symbol.iterator is not defined.")},tr=function(o,n){var i=typeof Symbol=="function"&&o[Symbol.iterator];if(!i)return o;var a=i.call(o),s,c=[],l;try{for(;(n===void 0||n-- >0)&&!(s=a.next()).done;)c.push(s.value)}catch(u){l={error:u}}finally{try{s&&!s.done&&(i=a.return)&&i.call(a)}finally{if(l)throw l.error}}return c},Yr=function(){for(var o=[],n=0;n1||u(b,N)})})}function u(b,N){try{m(a[b](N))}catch($){g(c[0][3],$)}}function m(b){b.value instanceof $e?Promise.resolve(b.value.v).then(p,h):g(c[0][2],b)}function p(b){u("next",b)}function h(b){u("throw",b)}function g(b,N){b(N),c.shift(),c.length&&u(c[0][0],c[0][1])}},eo=function(o){var n,i;return n={},a("next"),a("throw",function(s){throw s}),a("return"),n[Symbol.iterator]=function(){return this},n;function a(s,c){n[s]=o[s]?function(l){return(i=!i)?{value:$e(o[s](l)),done:s==="return"}:c?c(l):l}:c}},to=function(o){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n=o[Symbol.asyncIterator],i;return n?n.call(o):(o=typeof bt=="function"?bt(o):o[Symbol.iterator](),i={},a("next"),a("throw"),a("return"),i[Symbol.asyncIterator]=function(){return this},i);function a(c){i[c]=o[c]&&function(l){return new Promise(function(u,m){l=o[c](l),s(u,m,l.done,l.value)})}}function s(c,l,u,m){Promise.resolve(m).then(function(p){c({value:p,done:u})},l)}},ro=function(o,n){return Object.defineProperty?Object.defineProperty(o,"raw",{value:n}):o.raw=n,o};var r=Object.create?function(o,n){Object.defineProperty(o,"default",{enumerable:!0,value:n})}:function(o,n){o.default=n};oo=function(o){if(o&&o.__esModule)return o;var n={};if(o!=null)for(var i in o)i!=="default"&&Object.prototype.hasOwnProperty.call(o,i)&&vt(n,o,i);return r(n,o),n},no=function(o){return o&&o.__esModule?o:{default:o}},io=function(o,n){if(!n.has(o))throw new TypeError("attempted to get private field on non-instance");return n.get(o)},ao=function(o,n,i){if(!n.has(o))throw new TypeError("attempted to set private field on non-instance");return n.set(o,i),i},e("__extends",Ur),e("__assign",Dr),e("__rest",Nr),e("__decorate",zr),e("__param",qr),e("__metadata",Qr),e("__awaiter",Kr),e("__generator",Br),e("__exportStar",Jr),e("__createBinding",vt),e("__values",bt),e("__read",tr),e("__spread",Yr),e("__spreadArrays",Gr),e("__spreadArray",Xr),e("__await",$e),e("__asyncGenerator",Zr),e("__asyncDelegator",eo),e("__asyncValues",to),e("__makeTemplateObject",ro),e("__importStar",oo),e("__importDefault",no),e("__classPrivateFieldGet",io),e("__classPrivateFieldSet",ao)})});var _r=ht((lt,Or)=>{(function(t,r){typeof lt=="object"&&typeof Or=="object"?Or.exports=r():typeof define=="function"&&define.amd?define([],r):typeof lt=="object"?lt.ClipboardJS=r():t.ClipboardJS=r()})(lt,function(){return function(){var e={134:function(o,n,i){"use strict";i.d(n,{default:function(){return Ui}});var a=i(279),s=i.n(a),c=i(370),l=i.n(c),u=i(817),m=i.n(u);function p(E){return typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?p=function(d){return typeof d}:p=function(d){return d&&typeof Symbol=="function"&&d.constructor===Symbol&&d!==Symbol.prototype?"symbol":typeof d},p(E)}function h(E,v){if(!(E instanceof v))throw new TypeError("Cannot call a class as a function")}function g(E,v){for(var d=0;d0&&arguments[0]!==void 0?arguments[0]:{};this.action=d.action,this.container=d.container,this.emitter=d.emitter,this.target=d.target,this.text=d.text,this.trigger=d.trigger,this.selectedText=""}},{key:"initSelection",value:function(){this.text?this.selectFake():this.target&&this.selectTarget()}},{key:"createFakeElement",value:function(){var d=document.documentElement.getAttribute("dir")==="rtl";this.fakeElem=document.createElement("textarea"),this.fakeElem.style.fontSize="12pt",this.fakeElem.style.border="0",this.fakeElem.style.padding="0",this.fakeElem.style.margin="0",this.fakeElem.style.position="absolute",this.fakeElem.style[d?"right":"left"]="-9999px";var A=window.pageYOffset||document.documentElement.scrollTop;return this.fakeElem.style.top="".concat(A,"px"),this.fakeElem.setAttribute("readonly",""),this.fakeElem.value=this.text,this.fakeElem}},{key:"selectFake",value:function(){var d=this,A=this.createFakeElement();this.fakeHandlerCallback=function(){return d.removeFake()},this.fakeHandler=this.container.addEventListener("click",this.fakeHandlerCallback)||!0,this.container.appendChild(A),this.selectedText=m()(A),this.copyText(),this.removeFake()}},{key:"removeFake",value:function(){this.fakeHandler&&(this.container.removeEventListener("click",this.fakeHandlerCallback),this.fakeHandler=null,this.fakeHandlerCallback=null),this.fakeElem&&(this.container.removeChild(this.fakeElem),this.fakeElem=null)}},{key:"selectTarget",value:function(){this.selectedText=m()(this.target),this.copyText()}},{key:"copyText",value:function(){var d;try{d=document.execCommand(this.action)}catch(A){d=!1}this.handleResult(d)}},{key:"handleResult",value:function(d){this.emitter.emit(d?"success":"error",{action:this.action,text:this.selectedText,trigger:this.trigger,clearSelection:this.clearSelection.bind(this)})}},{key:"clearSelection",value:function(){this.trigger&&this.trigger.focus(),document.activeElement.blur(),window.getSelection().removeAllRanges()}},{key:"destroy",value:function(){this.removeFake()}},{key:"action",set:function(){var d=arguments.length>0&&arguments[0]!==void 0?arguments[0]:"copy";if(this._action=d,this._action!=="copy"&&this._action!=="cut")throw new Error('Invalid "action" value, use either "copy" or "cut"')},get:function(){return this._action}},{key:"target",set:function(d){if(d!==void 0)if(d&&p(d)==="object"&&d.nodeType===1){if(this.action==="copy"&&d.hasAttribute("disabled"))throw new Error('Invalid "target" attribute. Please use "readonly" instead of "disabled" attribute');if(this.action==="cut"&&(d.hasAttribute("readonly")||d.hasAttribute("disabled")))throw new Error(`Invalid "target" attribute. You can't cut text from elements with "readonly" or "disabled" attributes`);this._target=d}else throw new Error('Invalid "target" value, use a valid Element')},get:function(){return this._target}}]),E}(),$=N;function H(E){return typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?H=function(d){return typeof d}:H=function(d){return d&&typeof Symbol=="function"&&d.constructor===Symbol&&d!==Symbol.prototype?"symbol":typeof d},H(E)}function _(E,v){if(!(E instanceof v))throw new TypeError("Cannot call a class as a function")}function ut(E,v){for(var d=0;d0&&arguments[0]!==void 0?arguments[0]:{};this.action=typeof I.action=="function"?I.action:this.defaultAction,this.target=typeof I.target=="function"?I.target:this.defaultTarget,this.text=typeof I.text=="function"?I.text:this.defaultText,this.container=H(I.container)==="object"?I.container:document.body}},{key:"listenClick",value:function(I){var X=this;this.listener=l()(I,"click",function(Ge){return X.onClick(Ge)})}},{key:"onClick",value:function(I){var X=I.delegateTarget||I.currentTarget;this.clipboardAction&&(this.clipboardAction=null),this.clipboardAction=new $({action:this.action(X),target:this.target(X),text:this.text(X),container:this.container,trigger:X,emitter:this})}},{key:"defaultAction",value:function(I){return Xt("action",I)}},{key:"defaultTarget",value:function(I){var X=Xt("target",I);if(X)return document.querySelector(X)}},{key:"defaultText",value:function(I){return Xt("text",I)}},{key:"destroy",value:function(){this.listener.destroy(),this.clipboardAction&&(this.clipboardAction.destroy(),this.clipboardAction=null)}}],[{key:"isSupported",value:function(){var I=arguments.length>0&&arguments[0]!==void 0?arguments[0]:["copy","cut"],X=typeof I=="string"?[I]:I,Ge=!!document.queryCommandSupported;return X.forEach(function(Di){Ge=Ge&&!!document.queryCommandSupported(Di)}),Ge}}]),d}(s()),Ui=Wi},828:function(o){var n=9;if(typeof Element!="undefined"&&!Element.prototype.matches){var i=Element.prototype;i.matches=i.matchesSelector||i.mozMatchesSelector||i.msMatchesSelector||i.oMatchesSelector||i.webkitMatchesSelector}function a(s,c){for(;s&&s.nodeType!==n;){if(typeof s.matches=="function"&&s.matches(c))return s;s=s.parentNode}}o.exports=a},438:function(o,n,i){var a=i(828);function s(u,m,p,h,g){var b=l.apply(this,arguments);return u.addEventListener(p,b,g),{destroy:function(){u.removeEventListener(p,b,g)}}}function c(u,m,p,h,g){return typeof u.addEventListener=="function"?s.apply(null,arguments):typeof p=="function"?s.bind(null,document).apply(null,arguments):(typeof u=="string"&&(u=document.querySelectorAll(u)),Array.prototype.map.call(u,function(b){return s(b,m,p,h,g)}))}function l(u,m,p,h){return function(g){g.delegateTarget=a(g.target,m),g.delegateTarget&&h.call(u,g)}}o.exports=c},879:function(o,n){n.node=function(i){return i!==void 0&&i instanceof HTMLElement&&i.nodeType===1},n.nodeList=function(i){var a=Object.prototype.toString.call(i);return i!==void 0&&(a==="[object NodeList]"||a==="[object HTMLCollection]")&&"length"in i&&(i.length===0||n.node(i[0]))},n.string=function(i){return typeof i=="string"||i instanceof String},n.fn=function(i){var a=Object.prototype.toString.call(i);return a==="[object Function]"}},370:function(o,n,i){var a=i(879),s=i(438);function c(p,h,g){if(!p&&!h&&!g)throw new Error("Missing required arguments");if(!a.string(h))throw new TypeError("Second argument must be a String");if(!a.fn(g))throw new TypeError("Third argument must be a Function");if(a.node(p))return l(p,h,g);if(a.nodeList(p))return u(p,h,g);if(a.string(p))return m(p,h,g);throw new TypeError("First argument must be a String, HTMLElement, HTMLCollection, or NodeList")}function l(p,h,g){return p.addEventListener(h,g),{destroy:function(){p.removeEventListener(h,g)}}}function u(p,h,g){return Array.prototype.forEach.call(p,function(b){b.addEventListener(h,g)}),{destroy:function(){Array.prototype.forEach.call(p,function(b){b.removeEventListener(h,g)})}}}function m(p,h,g){return s(document.body,p,h,g)}o.exports=c},817:function(o){function n(i){var a;if(i.nodeName==="SELECT")i.focus(),a=i.value;else if(i.nodeName==="INPUT"||i.nodeName==="TEXTAREA"){var s=i.hasAttribute("readonly");s||i.setAttribute("readonly",""),i.select(),i.setSelectionRange(0,i.value.length),s||i.removeAttribute("readonly"),a=i.value}else{i.hasAttribute("contenteditable")&&i.focus();var c=window.getSelection(),l=document.createRange();l.selectNodeContents(i),c.removeAllRanges(),c.addRange(l),a=c.toString()}return a}o.exports=n},279:function(o){function n(){}n.prototype={on:function(i,a,s){var c=this.e||(this.e={});return(c[i]||(c[i]=[])).push({fn:a,ctx:s}),this},once:function(i,a,s){var c=this;function l(){c.off(i,l),a.apply(s,arguments)}return l._=a,this.on(i,l,s)},emit:function(i){var a=[].slice.call(arguments,1),s=((this.e||(this.e={}))[i]||[]).slice(),c=0,l=s.length;for(c;c{"use strict";var Ia=/["'&<>]/;ui.exports=Ra;function Ra(e){var t=""+e,r=Ia.exec(t);if(!r)return t;var o,n="",i=0,a=0;for(i=r.index;i0?e.prototype.requestAsyncId.call(this,r,o,n):(r.actions.push(this),r._scheduled||(r._scheduled=We.requestAnimationFrame(function(){return r.flush(void 0)})))},t.prototype.recycleAsyncId=function(r,o,n){if(n===void 0&&(n=0),n!=null&&n>0||n==null&&this.delay>0)return e.prototype.recycleAsyncId.call(this,r,o,n);r.actions.length===0&&(We.cancelAnimationFrame(o),r._scheduled=void 0)},t}(Ot);var Oo=function(e){K(t,e);function t(){return e!==null&&e.apply(this,arguments)||this}return t.prototype.flush=function(r){this._active=!0,this._scheduled=void 0;var o=this.actions,n,i=-1;r=r||o.shift();var a=o.length;do if(n=r.execute(r.state,r.delay))break;while(++i=2,!0))}function ne(e){e=e||{};var t=e.connector,r=t===void 0?function(){return new M}:t,o=e.resetOnComplete,n=o===void 0?!0:o,i=e.resetOnError,a=i===void 0?!0:i,s=e.resetOnRefCountZero,c=s===void 0?!0:s,l=null,u=null,m=0,p=!1,h=!1,g=function(){l=u=null,p=h=!1};return x(function(b,N){m++,u=u!=null?u:r(),N.add(function(){if(m--,c&&!m&&!h&&!p){var $=l;g(),$==null||$.unsubscribe()}}),u.subscribe(N),l||(l=new et({next:function($){return u.next($)},error:function($){h=!0;var H=u;a&&g(),H.error($)},complete:function(){p=!0;var $=u;n&&g(),$.complete()}}),ve(b).subscribe(l))})}function re(e,t,r){var o,n,i,a=!1;return e&&typeof e=="object"?(i=(o=e.bufferSize)!==null&&o!==void 0?o:Infinity,t=(n=e.windowTime)!==null&&n!==void 0?n:Infinity,a=!!e.refCount,r=e.scheduler):i=e!=null?e:Infinity,ne({connector:function(){return new rt(i,t,r)},resetOnError:!0,resetOnComplete:!1,resetOnRefCountZero:a})}function Wt(e){return k(function(t,r){return e<=r})}function vr(e){return x(function(t,r){var o=!1,n=new y(r,function(){n==null||n.unsubscribe(),o=!0},ee);z(e).subscribe(n),t.subscribe(new y(r,function(i){return o&&r.next(i)}))})}function W(){for(var e=[],t=0;tt==="focus"),W(e===je()))}var Ko=new M,Sa=we(()=>j(new ResizeObserver(e=>{for(let t of e)Ko.next(t)}))).pipe(w(e=>Z.pipe(W(e)).pipe(P(()=>e.disconnect()))),re(1));function Le(e){return{width:e.offsetWidth,height:e.offsetHeight}}function Ut(e){return{width:e.scrollWidth,height:e.scrollHeight}}function ke(e){return Sa.pipe(C(t=>t.observe(e)),w(t=>Ko.pipe(k(({target:r})=>r===e),P(()=>t.unobserve(e)),f(()=>Le(e)))),W(Le(e)))}function Bo(e){return{x:e.scrollLeft,y:e.scrollTop}}function wa(e){return R(T(e,"scroll"),T(window,"resize")).pipe(f(()=>Bo(e)),W(Bo(e)))}function Jo(e,t=16){return wa(e).pipe(f(({y:r})=>{let o=Le(e),n=Ut(e);return r>=n.height-o.height-t}),q())}function Yo(e){if(e instanceof HTMLInputElement)e.select();else throw new Error("Not implemented")}var Dt={drawer:fe("[data-md-toggle=drawer]"),search:fe("[data-md-toggle=search]")};function Go(e){return Dt[e].checked}function Ie(e,t){Dt[e].checked!==t&&Dt[e].click()}function Nt(e){let t=Dt[e];return T(t,"change").pipe(f(()=>t.checked),W(t.checked))}function Ea(e){switch(e.tagName){case"INPUT":case"SELECT":case"TEXTAREA":return!0;default:return e.isContentEditable}}function Xo(){return T(window,"keydown").pipe(k(e=>!(e.metaKey||e.ctrlKey)),f(e=>({mode:Go("search")?"search":"global",type:e.key,claim(){e.preventDefault(),e.stopPropagation()}})),k(({mode:e})=>{if(e==="global"){let t=je();if(typeof t!="undefined")return!Ea(t)}return!0}),ne())}function Zo(){return new URL(location.href)}function en(e){location.href=e.href}function tn(){return new M}function rn(){return location.hash.substring(1)}function on(e){let t=Be("a");t.href=e,t.addEventListener("click",r=>r.stopPropagation()),t.click()}function Ta(){return T(window,"hashchange").pipe(f(rn),W(rn()),k(e=>e.length>0),ne())}function nn(){return Ta().pipe(w(e=>j(ae(`[id="${e}"]`))))}function ct(e){let t=matchMedia(e);return $t(r=>t.addListener(()=>r(t.matches))).pipe(W(t.matches))}function an(){return T(window,"beforeprint").pipe(oe(void 0))}function Er(e,t){return e.pipe(w(r=>r?t():Z))}function zt(e,t={credentials:"same-origin"}){return ve(fetch(`${e}`,t)).pipe(k(r=>r.status===200))}function xe(e,t){return zt(e,t).pipe(w(r=>r.json()),re(1))}function sn(e,t){let r=new DOMParser;return zt(e,t).pipe(w(o=>o.text()),f(o=>r.parseFromString(o,"text/xml")),re(1))}function cn(){return{x:Math.max(0,pageXOffset),y:Math.max(0,pageYOffset)}}function Tr({x:e,y:t}){window.scrollTo(e||0,t||0)}function ln(){return R(T(window,"scroll",{passive:!0}),T(window,"resize",{passive:!0})).pipe(f(cn),W(cn()))}function un(){return{width:innerWidth,height:innerHeight}}function pn(){return T(window,"resize",{passive:!0}).pipe(f(un),W(un()))}function fn(){return Y([ln(),pn()]).pipe(f(([e,t])=>({offset:e,size:t})),re(1))}function qt(e,{viewport$:t,header$:r}){let o=t.pipe(U("size")),n=Y([o,r]).pipe(f(()=>({x:e.offsetLeft,y:e.offsetTop})));return Y([r,t,n]).pipe(f(([{height:i},{offset:a,size:s},{x:c,y:l}])=>({offset:{x:a.x-c,y:a.y-l+i},size:s})))}function mn(e,{tx$:t}){let r=T(e,"message").pipe(f(({data:o})=>o));return t.pipe(Sr(()=>r,{leading:!0,trailing:!0}),C(o=>e.postMessage(o)),gr(r),ne())}var Oa=fe("#__config"),Je=JSON.parse(Oa.textContent);Je.base=new URL(Je.base,Zo()).toString().replace(/\/$/,"");function se(){return Je}function Qt(e){return Je.features.includes(e)}function G(e,t){return typeof t!="undefined"?Je.translations[e].replace("#",t.toString()):Je.translations[e]}function Ce(e,t=document){return fe(`[data-md-component=${e}]`,t)}function me(e,t=document){return Q(`[data-md-component=${e}]`,t)}var Yn=Xe(_r());function dn(e,t=0){e.setAttribute("tabindex",t.toString())}function hn(e){e.removeAttribute("tabindex")}function bn(e,t){e.setAttribute("data-md-state","lock"),e.style.top=`-${t}px`}function vn(e){let t=-1*parseInt(e.style.top,10);e.removeAttribute("data-md-state"),e.style.top="",t&&window.scrollTo(0,t)}function gn(e,t){e.setAttribute("data-md-state",t)}function xn(e){e.removeAttribute("data-md-state")}function yn(e,t){e.classList.toggle("md-nav__link--active",t)}function Sn(e){e.classList.remove("md-nav__link--active")}function wn(e,t){e.firstElementChild.innerHTML=t}function En(e,t){e.setAttribute("data-md-state",t)}function Tn(e){e.removeAttribute("data-md-state")}function On(e,t){e.setAttribute("data-md-state",t)}function _n(e){e.removeAttribute("data-md-state")}function Mn(e,t){e.setAttribute("data-md-state",t)}function An(e){e.removeAttribute("data-md-state")}function Ln(e,t){e.placeholder=t}function kn(e){e.placeholder=G("search.placeholder")}function Cn(e,t){if(typeof t=="string"||typeof t=="number")e.innerHTML+=t.toString();else if(t instanceof Node)e.appendChild(t);else if(Array.isArray(t))for(let r of t)Cn(e,r)}function D(e,t,...r){let o=document.createElement(e);if(t)for(let n of Object.keys(t))typeof t[n]!="boolean"?o.setAttribute(n,t[n]):t[n]&&o.setAttribute(n,"");for(let n of r)Cn(o,n);return o}function Hn(e,t){let r=t;if(e.length>r){for(;e[r]!==" "&&--r>0;);return`${e.substring(0,r)}...`}return e}function Kt(e){if(e>999){let t=+((e-950)%1e3>99);return`${((e+1e-6)/1e3).toFixed(t)}k`}else return e.toString()}function jn(e,t){switch(t){case 0:e.textContent=G("search.result.none");break;case 1:e.textContent=G("search.result.one");break;default:e.textContent=G("search.result.other",Kt(t))}}function Fn(e){e.textContent=G("search.result.placeholder")}function In(e,t){e.appendChild(t)}function Rn(e){e.innerHTML=""}function Pn(e,t){e.style.top=`${t}px`}function $n(e){e.style.top=""}function Vn(e,t){let r=e.firstElementChild;r.style.height=`${t-2*r.offsetTop}px`}function Wn(e){let t=e.firstElementChild;t.style.height=""}function Un(e,t){e.lastElementChild.appendChild(t)}function Dn(e,t){e.lastElementChild.setAttribute("data-md-state",t)}function Nn(e,t){e.setAttribute("data-md-state",t)}function Mr(e){e.removeAttribute("data-md-state")}function zn(e,t){e.setAttribute("data-md-state",t)}function Ar(e){e.removeAttribute("data-md-state")}function qn(e){return D("button",{class:"md-clipboard md-icon",title:G("clipboard.copy"),"data-clipboard-target":`#${e} > code`})}var Re;(function(r){r[r.TEASER=1]="TEASER",r[r.PARENT=2]="PARENT"})(Re||(Re={}));function Lr(e,t){let r=t&2,o=t&1,n=Object.keys(e.terms).filter(a=>!e.terms[a]).map(a=>[D("del",null,a)," "]).flat().slice(0,-1),i=e.location;return D("a",{href:i,class:"md-search-result__link",tabIndex:-1},D("article",{class:["md-search-result__article",...r?["md-search-result__article--document"]:[]].join(" "),"data-md-score":e.score.toFixed(2)},r>0&&D("div",{class:"md-search-result__icon md-icon"}),D("h1",{class:"md-search-result__title"},e.title),o>0&&e.text.length>0&&D("p",{class:"md-search-result__teaser"},Hn(e.text,320)),o>0&&n.length>0&&D("p",{class:"md-search-result__terms"},G("search.result.term.missing"),": ",n)))}function Qn(e){let t=e[0].score,r=[...e],o=r.findIndex(l=>!l.location.includes("#")),[n]=r.splice(o,1),i=r.findIndex(l=>l.scoreLr(l,1)),...s.length?[D("details",{class:"md-search-result__more"},D("summary",{tabIndex:-1},s.length>0&&s.length===1?G("search.result.more.one"):G("search.result.more.other",s.length)),s.map(l=>Lr(l,1)))]:[]];return D("li",{class:"md-search-result__item"},c)}function Kn(e){return D("ul",{class:"md-source__facts"},Object.entries(e).map(([t,r])=>D("li",{class:`md-source__fact md-source__fact--${t}`},typeof r=="number"?Kt(r):r)))}function Bn(e){return D("div",{class:"md-typeset__scrollwrap"},D("div",{class:"md-typeset__table"},e))}function _a(e){let t=se(),r=new URL(`${e.version}/`,t.base);return D("li",{class:"md-version__item"},D("a",{href:r.toString(),class:"md-version__link"},e.title))}function Jn(e){let t=se(),[,r]=t.base.match(/([^/]+)\/?$/),o=e.find(({version:n,aliases:i})=>n===r||i.includes(r))||e[0];return D("div",{class:"md-version"},D("button",{class:"md-version__current"},o.title),D("ul",{class:"md-version__list"},e.map(_a)))}var Ma=0;function Aa(e,{viewport$:t}){let r=j(e).pipe(w(o=>{let n=o.closest("[data-tabs]");return n instanceof HTMLElement?R(...Q("input",n).map(i=>T(i,"change"))):Z}));return R(t.pipe(U("size")),r).pipe(f(()=>{let o=Le(e);return{scroll:Ut(e).width>o.width}}),U("scroll"))}function Gn(e,t){let r=new M;if(r.pipe(be(ct("(hover)"))).subscribe(([{scroll:o},n])=>{o&&n?dn(e):hn(e)}),Yn.default.isSupported()){let o=e.closest("pre");o.id=`__code_${Ma++}`,o.insertBefore(qn(o.id),e)}return Aa(e,t).pipe(C(r),P(()=>r.complete()),f(o=>V({ref:e},o)))}function La(e,{target$:t,print$:r}){return t.pipe(f(o=>o.closest("details:not([open])")),k(o=>e===o),st(r),oe(e))}function Xn(e,t){let r=new M;return r.subscribe(()=>{e.setAttribute("open",""),e.scrollIntoView()}),La(e,t).pipe(C(r),P(()=>r.complete()),oe({ref:e}))}var Zn=Be("table");function ei(e){return Fe(e,Zn),Fe(Zn,Bn(e)),j({ref:e})}function ti(e,{target$:t,viewport$:r,print$:o}){return R(...Q("pre > code",e).map(n=>Gn(n,{viewport$:r})),...Q("table:not([class])",e).map(n=>ei(n)),...Q("details",e).map(n=>Xn(n,{target$:t,print$:o})))}function ka(e,{alert$:t}){return t.pipe(w(r=>R(j(!0),j(!1).pipe(Ee(2e3))).pipe(f(o=>({message:r,open:o})))))}function ri(e,t){let r=new M;return r.pipe(J(B)).subscribe(({message:o,open:n})=>{wn(e,o),n?En(e,"open"):Tn(e)}),ka(e,t).pipe(C(r),P(()=>r.complete()),f(o=>V({ref:e},o)))}function Ca({viewport$:e}){if(!Qt("header.autohide"))return j(!1);let t=e.pipe(f(({offset:{y:n}})=>n),he(2,1),f(([n,i])=>[nMath.abs(i-n.y)>100),f(([,[n]])=>n),q()),o=Nt("search");return Y([e,o]).pipe(f(([{offset:n},i])=>n.y>400&&!i),q(),w(n=>n?r:j(!1)),W(!1))}function oi(e,t){return we(()=>{let r=getComputedStyle(e);return j(r.position==="sticky"||r.position==="-webkit-sticky")}).pipe(Vt(ke(e),Ca(t)),f(([r,{height:o},n])=>({height:r?o:0,sticky:r,hidden:n})),q((r,o)=>r.sticky===o.sticky&&r.height===o.height&&r.hidden===o.hidden),re(1))}function ni(e,{header$:t,main$:r}){let o=new M;return o.pipe(U("active"),Vt(t),J(B)).subscribe(([{active:n},{hidden:i}])=>{n?On(e,i?"hidden":"shadow"):_n(e)}),r.subscribe(n=>o.next(n)),t.pipe(f(n=>V({ref:e},n)))}function Ha(e,{viewport$:t,header$:r}){return qt(e,{header$:r,viewport$:t}).pipe(f(({offset:{y:o}})=>{let{height:n}=Le(e);return{active:o>=n}}),U("active"))}function ii(e,t){let r=new M;r.pipe(J(B)).subscribe(({active:n})=>{n?Mn(e,"active"):An(e)});let o=ae("article h1");return typeof o=="undefined"?Z:Ha(o,t).pipe(C(r),P(()=>r.complete()),f(n=>V({ref:e},n)))}function ai(e,{viewport$:t,header$:r}){let o=r.pipe(f(({height:i})=>i),q()),n=o.pipe(w(()=>ke(e).pipe(f(({height:i})=>({top:e.offsetTop,bottom:e.offsetTop+i})),U("bottom"))));return Y([o,n,t]).pipe(f(([i,{top:a,bottom:s},{offset:{y:c},size:{height:l}}])=>(l=Math.max(0,l-Math.max(0,a-c,i)-Math.max(0,l+c-s)),{offset:a-i,height:l,active:a-i<=c})),q((i,a)=>i.offset===a.offset&&i.height===a.height&&i.active===a.active))}function ja(e){let t=localStorage.getItem(__prefix("__palette")),r=JSON.parse(t)||{index:e.findIndex(n=>matchMedia(n.getAttribute("data-md-color-media")).matches)},o=j(...e).pipe(te(n=>T(n,"change").pipe(oe(n))),W(e[Math.max(0,r.index)]),f(n=>({index:e.indexOf(n),color:{scheme:n.getAttribute("data-md-color-scheme"),primary:n.getAttribute("data-md-color-primary"),accent:n.getAttribute("data-md-color-accent")}})),re(1));return o.subscribe(n=>{localStorage.setItem(__prefix("__palette"),JSON.stringify(n))}),o}function si(e){let t=new M;t.subscribe(o=>{for(let[n,i]of Object.entries(o.color))typeof i=="string"&&document.body.setAttribute(`data-md-color-${n}`,i);for(let n=0;nt.complete()),f(o=>V({ref:e},o)))}var kr=Xe(_r());function ci({alert$:e}){kr.default.isSupported()&&new O(t=>{new kr.default("[data-clipboard-target], [data-clipboard-text]").on("success",r=>t.next(r))}).subscribe(()=>e.next(G("clipboard.copied")))}function Fa(e){if(e.length<2)return e;let[t,r]=e.sort((i,a)=>i.length-a.length).map(i=>i.replace(/[^/]+$/,"")),o=0;if(t===r)o=t.length;else for(;t.charCodeAt(o)===r.charCodeAt(o);)o++;let n=se();return e.map(i=>i.replace(t.slice(0,o),`${n.base}/`))}function li({document$:e,location$:t,viewport$:r}){let o=se();if(location.protocol==="file:")return;"scrollRestoration"in history&&(history.scrollRestoration="manual",T(window,"beforeunload").subscribe(()=>{history.scrollRestoration="auto"}));let n=ae("link[rel=icon]");typeof n!="undefined"&&(n.href=n.href);let i=sn(`${o.base}/sitemap.xml`).pipe(f(l=>Fa(Q("loc",l).map(u=>u.textContent))),w(l=>T(document.body,"click").pipe(k(u=>!u.metaKey&&!u.ctrlKey),w(u=>{if(u.target instanceof Element){let m=u.target.closest("a");if(m&&!m.target&&l.includes(m.href))return u.preventDefault(),j({url:new URL(m.href)})}return Z}))),ne()),a=T(window,"popstate").pipe(k(l=>l.state!==null),f(l=>({url:new URL(location.href),offset:l.state})),ne());R(i,a).pipe(q((l,u)=>l.url.href===u.url.href),f(({url:l})=>l)).subscribe(t);let s=t.pipe(U("pathname"),w(l=>zt(l.href).pipe(qe(()=>(en(l),Z)))),ne());i.pipe(Ke(s)).subscribe(({url:l})=>{history.pushState({},"",`${l}`)});let c=new DOMParser;s.pipe(w(l=>l.text()),f(l=>c.parseFromString(l,"text/html"))).subscribe(e),R(i,a).pipe(Ke(e)).subscribe(({url:l,offset:u})=>{l.hash&&!u?on(l.hash):Tr(u||{y:0})}),e.pipe(Wt(1)).subscribe(l=>{for(let u of["title","link[rel=canonical]","meta[name=author]","meta[name=description]","[data-md-component=announce]","[data-md-component=container]","[data-md-component=header-topic]","[data-md-component=logo], .md-logo","[data-md-component=skip]"]){let m=ae(u),p=ae(u,l);typeof m!="undefined"&&typeof p!="undefined"&&Fe(m,p)}}),e.pipe(Wt(1),f(()=>Ce("container")),w(l=>j(...Q("script",l))),fr(l=>{let u=Be("script");if(l.src){for(let m of l.getAttributeNames())u.setAttribute(m,l.getAttribute(m));return Fe(l,u),new O(m=>{u.onload=()=>m.complete()})}else return u.textContent=l.textContent,Fe(l,u),de})).subscribe(),r.pipe(vr(i),mr(250),U("offset")).subscribe(({offset:l})=>{history.replaceState(l,"")}),R(i,a).pipe(he(2,1),k(([l,u])=>l.url.pathname===u.url.pathname),f(([,l])=>l)).subscribe(({offset:l})=>{Tr(l||{y:0})})}var Pa=Xe(pi());function fi(e){return e.split(/"([^"]+)"/g).map((t,r)=>r&1?t.replace(/^\b|^(?![^\x00-\x7F]|$)|\s+/g," +"):t).join("").replace(/"|(?:^|\s+)[*+\-:^~]+(?=\s+|$)/g,"").trim()}var Te;(function(n){n[n.SETUP=0]="SETUP",n[n.READY=1]="READY",n[n.QUERY=2]="QUERY",n[n.RESULT=3]="RESULT"})(Te||(Te={}));function mi(e){return e.type===1}function di(e){return e.type===2}function Bt(e){return e.type===3}function $a({config:e,docs:t,index:r}){e.lang.length===1&&e.lang[0]==="en"&&(e.lang=[G("search.config.lang")]),e.separator==="[\\s\\-]+"&&(e.separator=G("search.config.separator"));let o=G("search.config.pipeline").split(/\s*,\s*/).filter(Boolean);return{config:e,docs:t,index:r,pipeline:o}}function hi(e,t){let r=se(),o=new Worker(e),n=new M,i=mn(o,{tx$:n}).pipe(f(a=>{if(Bt(a))for(let s of a.data)for(let c of s)c.location=`${r.base}/${c.location}`;return a}),ne());return ve(t).pipe(f(a=>({type:Te.SETUP,data:$a(a)}))).subscribe(n.next.bind(n)),{tx$:n,rx$:i}}function bi(){let e=se();xe(new URL("versions.json",e.base)).subscribe(t=>{fe(".md-header__topic").appendChild(Jn(t))})}function Va(e){let t=(__search==null?void 0:__search.transform)||fi,r=Qo(e),o=R(T(e,"keyup"),T(e,"focus").pipe(Ee(1))).pipe(f(()=>t(e.value)),q());return Y([o,r]).pipe(f(([n,i])=>({value:n,focus:i})))}function vi(e,{tx$:t}){let r=new M;return r.pipe(U("value"),f(({value:o})=>({type:Te.QUERY,data:o}))).subscribe(t.next.bind(t)),r.pipe(U("focus")).subscribe(({focus:o})=>{o?(Ie("search",o),Ln(e,"")):kn(e)}),T(e.form,"reset").pipe(xr(r.pipe(hr(1)))).subscribe(()=>Ae(e)),Va(e).pipe(C(r),P(()=>r.complete()),f(o=>V({ref:e},o)))}function gi(e,{rx$:t},{query$:r}){let o=new M,n=Jo(e.parentElement).pipe(k(Boolean)),i=fe(":scope > :first-child",e);o.pipe(J(B),be(r)).subscribe(([{data:c},{value:l}])=>{l?jn(i,c.length):Fn(i)});let a=fe(":scope > :last-child",e);return o.pipe(J(B),C(()=>Rn(a)),w(({data:c})=>R(j(...c.slice(0,10)),j(...c.slice(10)).pipe(he(4),wr(n),w(([l])=>j(...l)))))).subscribe(c=>{In(a,Qn(c))}),t.pipe(k(Bt),f(({data:c})=>({data:c})),W({data:[]})).pipe(C(o),P(()=>o.complete()),f(c=>V({ref:e},c)))}function xi(e,{index$:t,keyboard$:r}){let o=se(),n=hi(o.search,t),i=Ce("search-query",e),a=Ce("search-result",e),{tx$:s,rx$:c}=n;s.pipe(k(di),Ke(c.pipe(k(mi))),Qe(1)).subscribe(s.next.bind(s)),r.pipe(k(({mode:u})=>u==="search")).subscribe(u=>{let m=je();switch(u.type){case"Enter":m===i&&u.claim();break;case"Escape":case"Tab":Ie("search",!1),Ae(i,!1);break;case"ArrowUp":case"ArrowDown":if(typeof m=="undefined")Ae(i);else{let p=[i,...Q(":not(details) > [href], summary, details[open] [href]",a)],h=Math.max(0,(Math.max(0,p.indexOf(m))+p.length+(u.type==="ArrowUp"?-1:1))%p.length);Ae(p[h])}u.claim();break;default:i!==je()&&Ae(i)}}),r.pipe(k(({mode:u})=>u==="global")).subscribe(u=>{switch(u.type){case"f":case"s":case"/":Ae(i),Yo(i),u.claim();break}});let l=vi(i,n);return R(l,gi(a,n,{query$:l}))}function Wa(e,{viewport$:t,main$:r}){let o=e.parentElement.offsetTop-e.parentElement.parentElement.offsetTop;return Y([r,t]).pipe(f(([{offset:n,height:i},{offset:{y:a}}])=>(i=i+Math.min(o,Math.max(0,a-n))-o,{height:i,locked:a>=n+o})),q((n,i)=>n.height===i.height&&n.locked===i.locked))}function Cr(e,o){var n=o,{header$:t}=n,r=$r(n,["header$"]);let i=new M;return i.pipe(J(B),be(t)).subscribe({next([{height:a},{height:s}]){Vn(e,a),Pn(e,s)},complete(){$n(e),Wn(e)}}),Wa(e,r).pipe(C(i),P(()=>i.complete()),f(a=>V({ref:e},a)))}function yi(e,t){if(typeof t!="undefined"){let r=`https://api.github.com/repos/${e}/${t}`;return at(xe(`${r}/releases/latest`).pipe(f(o=>({version:o.tag_name})),He({})),xe(r).pipe(f(o=>({stars:o.stargazers_count,forks:o.forks_count})),He({}))).pipe(f(([o,n])=>V(V({},o),n)))}else{let r=`https://api.github.com/repos/${e}`;return xe(r).pipe(f(o=>({repositories:o.public_repos})),He({}))}}function Si(e,t){let r=`https://${e}/api/v4/projects/${encodeURIComponent(t)}`;return xe(r).pipe(f(({star_count:o,forks_count:n})=>({stars:o,forks:n})),He({}))}function wi(e){let[t]=e.match(/(git(?:hub|lab))/i)||[];switch(t.toLowerCase()){case"github":let[,r,o]=e.match(/^.+github\.com\/([^/]+)\/?([^/]+)?/i);return yi(r,o);case"gitlab":let[,n,i]=e.match(/^.+?([^/]*gitlab[^/]+)\/(.+?)\/?$/i);return Si(n,i);default:return Z}}var Ua;function Da(e){return Ua||(Ua=we(()=>{let t=sessionStorage.getItem(__prefix("__source"));if(t)return j(JSON.parse(t));{let r=wi(e.href);return r.subscribe(o=>{try{sessionStorage.setItem(__prefix("__source"),JSON.stringify(o))}catch(n){}}),r}}).pipe(qe(()=>Z),k(t=>Object.keys(t).length>0),f(t=>({facts:t})),re(1)))}function Ei(e){let t=new M;return t.subscribe(({facts:r})=>{Un(e,Kn(r)),Dn(e,"done")}),Da(e).pipe(C(t),P(()=>t.complete()),f(r=>V({ref:e},r)))}function Na(e,{viewport$:t,header$:r}){return ke(document.body).pipe(w(()=>qt(e,{header$:r,viewport$:t})),f(({offset:{y:o}})=>({hidden:o>=10})),U("hidden"))}function Ti(e,t){let r=new M;return r.pipe(J(B)).subscribe({next({hidden:o}){o?Nn(e,"hidden"):Mr(e)},complete(){Mr(e)}}),Na(e,t).pipe(C(r),P(()=>r.complete()),f(o=>V({ref:e},o)))}function za(e,{viewport$:t,header$:r}){let o=new Map;for(let a of e){let s=decodeURIComponent(a.hash.substring(1)),c=ae(`[id="${s}"]`);typeof c!="undefined"&&o.set(a,c)}let n=r.pipe(f(a=>24+a.height));return ke(document.body).pipe(U("height"),f(()=>{let a=[];return[...o].reduce((s,[c,l])=>{for(;a.length&&o.get(a[a.length-1]).tagName>=l.tagName;)a.pop();let u=l.offsetTop;for(;!u&&l.parentElement;)l=l.parentElement,u=l.offsetTop;return s.set([...a=[...a,c]].reverse(),u)},new Map)}),f(a=>new Map([...a].sort(([,s],[,c])=>s-c))),w(a=>Y([n,t]).pipe(br(([s,c],[l,{offset:{y:u}}])=>{for(;c.length;){let[,m]=c[0];if(m-l=u)c=[s.pop(),...c];else break}return[s,c]},[[],[...a]]),q((s,c)=>s[0]===c[0]&&s[1]===c[1])))).pipe(f(([a,s])=>({prev:a.map(([c])=>c),next:s.map(([c])=>c)})),W({prev:[],next:[]}),he(2,1),f(([a,s])=>a.prev.length{for(let[a]of i)Sn(a),xn(a);for(let[a,[s]]of n.entries())yn(s,a===n.length-1),gn(s,"blur")});let o=Q("[href^=\\#]",e);return za(o,t).pipe(C(r),P(()=>r.complete()),f(n=>V({ref:e},n)))}function qa(e,{viewport$:t,main$:r}){let o=t.pipe(f(({offset:{y:i}})=>i),he(2,1),f(([i,a])=>i>a),q()),n=r.pipe(U("active"));return Y([n,o]).pipe(f(([{active:i},a])=>({hidden:!(i&&a)})),q((i,a)=>i.hidden===a.hidden))}function _i(e,t){let r=new M;return r.pipe(J(B)).subscribe({next({hidden:o}){o?zn(e,"hidden"):Ar(e)},complete(){Ar(e)}}),qa(e,t).pipe(C(r),P(()=>r.complete()),f(o=>V({ref:e},o)))}function Mi({document$:e,tablet$:t}){e.pipe(w(()=>j(...Q("[data-md-state=indeterminate]"))),C(r=>{r.indeterminate=!0,r.checked=!1}),te(r=>T(r,"change").pipe(yr(()=>r.hasAttribute("data-md-state")),oe(r))),be(t)).subscribe(([r,o])=>{r.removeAttribute("data-md-state"),o&&(r.checked=!1)})}function Qa(){return/(iPad|iPhone|iPod)/.test(navigator.userAgent)}function Ai({document$:e}){e.pipe(w(()=>j(...Q("[data-md-scrollfix]"))),C(t=>t.removeAttribute("data-md-scrollfix")),k(Qa),te(t=>T(t,"touchstart").pipe(oe(t)))).subscribe(t=>{let r=t.scrollTop;r===0?t.scrollTop=1:r+t.offsetHeight===t.scrollHeight&&(t.scrollTop=r-1)})}function Li({viewport$:e,tablet$:t}){Y([Nt("search"),t]).pipe(f(([r,o])=>r&&!o),w(r=>j(r).pipe(Ee(r?400:100),J(B))),be(e)).subscribe(([r,{offset:{y:o}}])=>{r?bn(document.body,o):vn(document.body)})}document.documentElement.classList.remove("no-js");document.documentElement.classList.add("js");var Ye=qo(),Hr=tn(),jr=nn(),Fr=Xo(),ue=fn(),Jt=ct("(min-width: 960px)"),ki=ct("(min-width: 1220px)"),Ci=an(),Hi=se(),Ka=document.forms.namedItem("search")?(__search==null?void 0:__search.index)||xe(`${Hi.base}/search/search_index.json`):Z,Ir=new M;ci({alert$:Ir});Qt("navigation.instant")&&li({document$:Ye,location$:Hr,viewport$:ue});var Fi;((Fi=Hi.version)==null?void 0:Fi.provider)==="mike"&&bi();R(Hr,jr).pipe(Ee(125)).subscribe(()=>{Ie("drawer",!1),Ie("search",!1)});Fr.pipe(k(({mode:e})=>e==="global")).subscribe(e=>{switch(e.type){case"p":case",":let t=ae("[href][rel=prev]");typeof t!="undefined"&&t.click();break;case"n":case".":let r=ae("[href][rel=next]");typeof r!="undefined"&&r.click();break}});Mi({document$:Ye,tablet$:Jt});Ai({document$:Ye});Li({viewport$:ue,tablet$:Jt});var Pe=oi(Ce("header"),{viewport$:ue}),Yt=Ye.pipe(f(()=>Ce("main")),w(e=>ai(e,{viewport$:ue,header$:Pe})),re(1)),Ba=R(...me("dialog").map(e=>ri(e,{alert$:Ir})),...me("header").map(e=>ni(e,{viewport$:ue,header$:Pe,main$:Yt})),...me("palette").map(e=>si(e)),...me("search").map(e=>xi(e,{index$:Ka,keyboard$:Fr})),...me("source").map(e=>Ei(e))),Ja=we(()=>R(...me("content").map(e=>ti(e,{target$:jr,viewport$:ue,print$:Ci})),...me("header-title").map(e=>ii(e,{viewport$:ue,header$:Pe})),...me("sidebar").map(e=>e.getAttribute("data-md-type")==="navigation"?Er(ki,()=>Cr(e,{viewport$:ue,header$:Pe,main$:Yt})):Er(Jt,()=>Cr(e,{viewport$:ue,header$:Pe,main$:Yt}))),...me("tabs").map(e=>Ti(e,{viewport$:ue,header$:Pe})),...me("toc").map(e=>Oi(e,{viewport$:ue,header$:Pe})),...me("top").map(e=>_i(e,{viewport$:ue,main$:Yt})))),ji=Ye.pipe(w(()=>Ja),st(Ba),re(1));ji.subscribe();window.document$=Ye;window.location$=Hr;window.target$=jr;window.keyboard$=Fr;window.viewport$=ue;window.tablet$=Jt;window.screen$=ki;window.print$=Ci;window.alert$=Ir;window.component$=ji;})(); +/*! + * clipboard.js v2.0.8 + * https://clipboardjs.com/ + * + * Licensed MIT © Zeno Rocha + */ +/*! + * escape-html + * Copyright(c) 2012-2013 TJ Holowaychuk + * Copyright(c) 2015 Andreas Lubbe + * Copyright(c) 2015 Tiancheng "Timothy" Gu + * MIT Licensed + */ +/*! ***************************************************************************** +Copyright (c) Microsoft Corporation. + +Permission to use, copy, modify, and/or distribute this software for any +purpose with or without fee is hereby granted. + +THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH +REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY +AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, +INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM +LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR +OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR +PERFORMANCE OF THIS SOFTWARE. +***************************************************************************** */ +//# sourceMappingURL=bundle.a1609d9a.min.js.map + diff --git a/v2.7/assets/javascripts/bundle.a1609d9a.min.js.map b/v2.7/assets/javascripts/bundle.a1609d9a.min.js.map new file mode 100644 index 000000000..e5753691d --- /dev/null +++ b/v2.7/assets/javascripts/bundle.a1609d9a.min.js.map @@ -0,0 +1,7 @@ +{ + "version": 3, + "sources": ["node_modules/focus-visible/dist/focus-visible.js", "node_modules/tslib/tslib.js", "node_modules/clipboard/dist/clipboard.js", "node_modules/escape-html/index.js", "src/assets/javascripts/bundle.ts", "node_modules/tslib/modules/index.js", "node_modules/rxjs/src/internal/util/isFunction.ts", "node_modules/rxjs/src/internal/util/createErrorClass.ts", "node_modules/rxjs/src/internal/util/UnsubscriptionError.ts", "node_modules/rxjs/src/internal/util/arrRemove.ts", "node_modules/rxjs/src/internal/Subscription.ts", "node_modules/rxjs/src/internal/config.ts", "node_modules/rxjs/src/internal/scheduler/timeoutProvider.ts", "node_modules/rxjs/src/internal/util/reportUnhandledError.ts", "node_modules/rxjs/src/internal/util/noop.ts", "node_modules/rxjs/src/internal/NotificationFactories.ts", "node_modules/rxjs/src/internal/Subscriber.ts", "node_modules/rxjs/src/internal/symbol/observable.ts", "node_modules/rxjs/src/internal/util/identity.ts", "node_modules/rxjs/src/internal/util/pipe.ts", "node_modules/rxjs/src/internal/Observable.ts", "node_modules/rxjs/src/internal/util/lift.ts", "node_modules/rxjs/src/internal/operators/OperatorSubscriber.ts", "node_modules/rxjs/src/internal/scheduler/animationFrameProvider.ts", "node_modules/rxjs/src/internal/util/ObjectUnsubscribedError.ts", "node_modules/rxjs/src/internal/Subject.ts", "node_modules/rxjs/src/internal/scheduler/dateTimestampProvider.ts", "node_modules/rxjs/src/internal/ReplaySubject.ts", "node_modules/rxjs/src/internal/scheduler/Action.ts", "node_modules/rxjs/src/internal/scheduler/intervalProvider.ts", "node_modules/rxjs/src/internal/scheduler/AsyncAction.ts", "node_modules/rxjs/src/internal/Scheduler.ts", "node_modules/rxjs/src/internal/scheduler/AsyncScheduler.ts", "node_modules/rxjs/src/internal/scheduler/async.ts", "node_modules/rxjs/src/internal/scheduler/AnimationFrameAction.ts", "node_modules/rxjs/src/internal/scheduler/AnimationFrameScheduler.ts", "node_modules/rxjs/src/internal/scheduler/animationFrame.ts", "node_modules/rxjs/src/internal/observable/empty.ts", "node_modules/rxjs/src/internal/scheduled/scheduleArray.ts", "node_modules/rxjs/src/internal/util/isArrayLike.ts", "node_modules/rxjs/src/internal/util/isPromise.ts", "node_modules/rxjs/src/internal/scheduled/scheduleObservable.ts", "node_modules/rxjs/src/internal/scheduled/schedulePromise.ts", "node_modules/rxjs/src/internal/symbol/iterator.ts", "node_modules/rxjs/src/internal/util/caughtSchedule.ts", "node_modules/rxjs/src/internal/scheduled/scheduleIterable.ts", "node_modules/rxjs/src/internal/scheduled/scheduleAsyncIterable.ts", "node_modules/rxjs/src/internal/util/isInteropObservable.ts", "node_modules/rxjs/src/internal/util/isIterable.ts", "node_modules/rxjs/src/internal/util/isAsyncIterable.ts", "node_modules/rxjs/src/internal/util/throwUnobservableError.ts", "node_modules/rxjs/src/internal/util/isReadableStreamLike.ts", "node_modules/rxjs/src/internal/scheduled/scheduleReadableStreamLike.ts", "node_modules/rxjs/src/internal/scheduled/scheduled.ts", "node_modules/rxjs/src/internal/observable/from.ts", "node_modules/rxjs/src/internal/observable/fromArray.ts", "node_modules/rxjs/src/internal/util/isScheduler.ts", "node_modules/rxjs/src/internal/util/args.ts", "node_modules/rxjs/src/internal/observable/of.ts", "node_modules/rxjs/src/internal/util/isDate.ts", "node_modules/rxjs/src/internal/operators/map.ts", "node_modules/rxjs/src/internal/util/mapOneOrManyArgs.ts", "node_modules/rxjs/src/internal/operators/observeOn.ts", "node_modules/rxjs/src/internal/util/argsArgArrayOrObject.ts", "node_modules/rxjs/src/internal/util/createObject.ts", "node_modules/rxjs/src/internal/observable/combineLatest.ts", "node_modules/rxjs/src/internal/operators/mergeInternals.ts", "node_modules/rxjs/src/internal/operators/mergeMap.ts", "node_modules/rxjs/src/internal/operators/mergeAll.ts", "node_modules/rxjs/src/internal/operators/concatAll.ts", "node_modules/rxjs/src/internal/observable/concat.ts", "node_modules/rxjs/src/internal/observable/defer.ts", "node_modules/rxjs/src/internal/observable/fromEvent.ts", "node_modules/rxjs/src/internal/observable/fromEventPattern.ts", "node_modules/rxjs/src/internal/observable/timer.ts", "node_modules/rxjs/src/internal/observable/merge.ts", "node_modules/rxjs/src/internal/observable/never.ts", "node_modules/rxjs/src/internal/util/argsOrArgArray.ts", "node_modules/rxjs/src/internal/operators/filter.ts", "node_modules/rxjs/src/internal/observable/zip.ts", "node_modules/rxjs/src/internal/operators/bufferCount.ts", "node_modules/rxjs/src/internal/operators/catchError.ts", "node_modules/rxjs/src/internal/operators/scanInternals.ts", "node_modules/rxjs/src/internal/operators/combineLatest.ts", "node_modules/rxjs/src/internal/operators/combineLatestWith.ts", "node_modules/rxjs/src/internal/operators/concatMap.ts", "node_modules/rxjs/src/internal/operators/debounceTime.ts", "node_modules/rxjs/src/internal/operators/defaultIfEmpty.ts", "node_modules/rxjs/src/internal/operators/take.ts", "node_modules/rxjs/src/internal/operators/ignoreElements.ts", "node_modules/rxjs/src/internal/operators/mapTo.ts", "node_modules/rxjs/src/internal/operators/delayWhen.ts", "node_modules/rxjs/src/internal/operators/delay.ts", "node_modules/rxjs/src/internal/operators/distinctUntilChanged.ts", "node_modules/rxjs/src/internal/operators/distinctUntilKeyChanged.ts", "node_modules/rxjs/src/internal/operators/finalize.ts", "node_modules/rxjs/src/internal/operators/takeLast.ts", "node_modules/rxjs/src/internal/operators/merge.ts", "node_modules/rxjs/src/internal/operators/mergeWith.ts", "node_modules/rxjs/src/internal/operators/sample.ts", "node_modules/rxjs/src/internal/operators/scan.ts", "node_modules/rxjs/src/internal/operators/share.ts", "node_modules/rxjs/src/internal/operators/shareReplay.ts", "node_modules/rxjs/src/internal/operators/skip.ts", "node_modules/rxjs/src/internal/operators/skipUntil.ts", "node_modules/rxjs/src/internal/operators/startWith.ts", "node_modules/rxjs/src/internal/operators/switchMap.ts", "node_modules/rxjs/src/internal/operators/switchMapTo.ts", "node_modules/rxjs/src/internal/operators/takeUntil.ts", "node_modules/rxjs/src/internal/operators/takeWhile.ts", "node_modules/rxjs/src/internal/operators/tap.ts", "node_modules/rxjs/src/internal/operators/throttle.ts", "node_modules/rxjs/src/internal/operators/withLatestFrom.ts", "node_modules/rxjs/src/internal/operators/zip.ts", "node_modules/rxjs/src/internal/operators/zipWith.ts", "src/assets/javascripts/browser/document/index.ts", "src/assets/javascripts/browser/element/_/index.ts", "src/assets/javascripts/browser/element/focus/index.ts", "src/assets/javascripts/browser/element/size/index.ts", "src/assets/javascripts/browser/element/offset/index.ts", "src/assets/javascripts/browser/element/selection/index.ts", "src/assets/javascripts/browser/toggle/index.ts", "src/assets/javascripts/browser/keyboard/index.ts", "src/assets/javascripts/browser/location/_/index.ts", "src/assets/javascripts/browser/location/hash/index.ts", "src/assets/javascripts/browser/media/index.ts", "src/assets/javascripts/browser/request/index.ts", "src/assets/javascripts/browser/viewport/offset/index.ts", "src/assets/javascripts/browser/viewport/size/index.ts", "src/assets/javascripts/browser/viewport/_/index.ts", "src/assets/javascripts/browser/worker/index.ts", "src/assets/javascripts/_/index.ts", "src/assets/javascripts/components/_/index.ts", "src/assets/javascripts/components/content/code/index.ts", "src/assets/javascripts/actions/_/index.ts", "src/assets/javascripts/actions/anchor/index.ts", "src/assets/javascripts/actions/dialog/index.ts", "src/assets/javascripts/actions/header/_/index.ts", "src/assets/javascripts/actions/header/title/index.ts", "src/assets/javascripts/actions/search/query/index.ts", "src/assets/javascripts/utilities/h/index.ts", "src/assets/javascripts/utilities/string/index.ts", "src/assets/javascripts/actions/search/result/index.ts", "src/assets/javascripts/actions/sidebar/index.ts", "src/assets/javascripts/actions/source/index.ts", "src/assets/javascripts/actions/tabs/index.ts", "src/assets/javascripts/actions/top/index.ts", "src/assets/javascripts/templates/clipboard/index.tsx", "src/assets/javascripts/templates/search/index.tsx", "src/assets/javascripts/templates/source/index.tsx", "src/assets/javascripts/templates/table/index.tsx", "src/assets/javascripts/templates/version/index.tsx", "src/assets/javascripts/components/content/details/index.ts", "src/assets/javascripts/components/content/table/index.ts", "src/assets/javascripts/components/content/_/index.ts", "src/assets/javascripts/components/dialog/index.ts", "src/assets/javascripts/components/header/_/index.ts", "src/assets/javascripts/components/header/title/index.ts", "src/assets/javascripts/components/main/index.ts", "src/assets/javascripts/components/palette/index.ts", "src/assets/javascripts/integrations/clipboard/index.ts", "src/assets/javascripts/integrations/instant/index.ts", "src/assets/javascripts/integrations/search/document/index.ts", "src/assets/javascripts/integrations/search/query/transform/index.ts", "src/assets/javascripts/integrations/search/worker/message/index.ts", "src/assets/javascripts/integrations/search/worker/_/index.ts", "src/assets/javascripts/integrations/version/index.ts", "src/assets/javascripts/components/search/query/index.ts", "src/assets/javascripts/components/search/result/index.ts", "src/assets/javascripts/components/search/_/index.ts", "src/assets/javascripts/components/sidebar/index.ts", "src/assets/javascripts/components/source/facts/github/index.ts", "src/assets/javascripts/components/source/facts/gitlab/index.ts", "src/assets/javascripts/components/source/facts/_/index.ts", "src/assets/javascripts/components/source/_/index.ts", "src/assets/javascripts/components/tabs/index.ts", "src/assets/javascripts/components/toc/index.ts", "src/assets/javascripts/components/top/index.ts", "src/assets/javascripts/patches/indeterminate/index.ts", "src/assets/javascripts/patches/scrollfix/index.ts", "src/assets/javascripts/patches/scrolllock/index.ts"], + "sourcesContent": ["(function (global, factory) {\n typeof exports === 'object' && typeof module !== 'undefined' ? factory() :\n typeof define === 'function' && define.amd ? define(factory) :\n (factory());\n}(this, (function () { 'use strict';\n\n /**\n * Applies the :focus-visible polyfill at the given scope.\n * A scope in this case is either the top-level Document or a Shadow Root.\n *\n * @param {(Document|ShadowRoot)} scope\n * @see https://github.com/WICG/focus-visible\n */\n function applyFocusVisiblePolyfill(scope) {\n var hadKeyboardEvent = true;\n var hadFocusVisibleRecently = false;\n var hadFocusVisibleRecentlyTimeout = null;\n\n var inputTypesAllowlist = {\n text: true,\n search: true,\n url: true,\n tel: true,\n email: true,\n password: true,\n number: true,\n date: true,\n month: true,\n week: true,\n time: true,\n datetime: true,\n 'datetime-local': true\n };\n\n /**\n * Helper function for legacy browsers and iframes which sometimes focus\n * elements like document, body, and non-interactive SVG.\n * @param {Element} el\n */\n function isValidFocusTarget(el) {\n if (\n el &&\n el !== document &&\n el.nodeName !== 'HTML' &&\n el.nodeName !== 'BODY' &&\n 'classList' in el &&\n 'contains' in el.classList\n ) {\n return true;\n }\n return false;\n }\n\n /**\n * Computes whether the given element should automatically trigger the\n * `focus-visible` class being added, i.e. whether it should always match\n * `:focus-visible` when focused.\n * @param {Element} el\n * @return {boolean}\n */\n function focusTriggersKeyboardModality(el) {\n var type = el.type;\n var tagName = el.tagName;\n\n if (tagName === 'INPUT' && inputTypesAllowlist[type] && !el.readOnly) {\n return true;\n }\n\n if (tagName === 'TEXTAREA' && !el.readOnly) {\n return true;\n }\n\n if (el.isContentEditable) {\n return true;\n }\n\n return false;\n }\n\n /**\n * Add the `focus-visible` class to the given element if it was not added by\n * the author.\n * @param {Element} el\n */\n function addFocusVisibleClass(el) {\n if (el.classList.contains('focus-visible')) {\n return;\n }\n el.classList.add('focus-visible');\n el.setAttribute('data-focus-visible-added', '');\n }\n\n /**\n * Remove the `focus-visible` class from the given element if it was not\n * originally added by the author.\n * @param {Element} el\n */\n function removeFocusVisibleClass(el) {\n if (!el.hasAttribute('data-focus-visible-added')) {\n return;\n }\n el.classList.remove('focus-visible');\n el.removeAttribute('data-focus-visible-added');\n }\n\n /**\n * If the most recent user interaction was via the keyboard;\n * and the key press did not include a meta, alt/option, or control key;\n * then the modality is keyboard. Otherwise, the modality is not keyboard.\n * Apply `focus-visible` to any current active element and keep track\n * of our keyboard modality state with `hadKeyboardEvent`.\n * @param {KeyboardEvent} e\n */\n function onKeyDown(e) {\n if (e.metaKey || e.altKey || e.ctrlKey) {\n return;\n }\n\n if (isValidFocusTarget(scope.activeElement)) {\n addFocusVisibleClass(scope.activeElement);\n }\n\n hadKeyboardEvent = true;\n }\n\n /**\n * If at any point a user clicks with a pointing device, ensure that we change\n * the modality away from keyboard.\n * This avoids the situation where a user presses a key on an already focused\n * element, and then clicks on a different element, focusing it with a\n * pointing device, while we still think we're in keyboard modality.\n * @param {Event} e\n */\n function onPointerDown(e) {\n hadKeyboardEvent = false;\n }\n\n /**\n * On `focus`, add the `focus-visible` class to the target if:\n * - the target received focus as a result of keyboard navigation, or\n * - the event target is an element that will likely require interaction\n * via the keyboard (e.g. a text box)\n * @param {Event} e\n */\n function onFocus(e) {\n // Prevent IE from focusing the document or HTML element.\n if (!isValidFocusTarget(e.target)) {\n return;\n }\n\n if (hadKeyboardEvent || focusTriggersKeyboardModality(e.target)) {\n addFocusVisibleClass(e.target);\n }\n }\n\n /**\n * On `blur`, remove the `focus-visible` class from the target.\n * @param {Event} e\n */\n function onBlur(e) {\n if (!isValidFocusTarget(e.target)) {\n return;\n }\n\n if (\n e.target.classList.contains('focus-visible') ||\n e.target.hasAttribute('data-focus-visible-added')\n ) {\n // To detect a tab/window switch, we look for a blur event followed\n // rapidly by a visibility change.\n // If we don't see a visibility change within 100ms, it's probably a\n // regular focus change.\n hadFocusVisibleRecently = true;\n window.clearTimeout(hadFocusVisibleRecentlyTimeout);\n hadFocusVisibleRecentlyTimeout = window.setTimeout(function() {\n hadFocusVisibleRecently = false;\n }, 100);\n removeFocusVisibleClass(e.target);\n }\n }\n\n /**\n * If the user changes tabs, keep track of whether or not the previously\n * focused element had .focus-visible.\n * @param {Event} e\n */\n function onVisibilityChange(e) {\n if (document.visibilityState === 'hidden') {\n // If the tab becomes active again, the browser will handle calling focus\n // on the element (Safari actually calls it twice).\n // If this tab change caused a blur on an element with focus-visible,\n // re-apply the class when the user switches back to the tab.\n if (hadFocusVisibleRecently) {\n hadKeyboardEvent = true;\n }\n addInitialPointerMoveListeners();\n }\n }\n\n /**\n * Add a group of listeners to detect usage of any pointing devices.\n * These listeners will be added when the polyfill first loads, and anytime\n * the window is blurred, so that they are active when the window regains\n * focus.\n */\n function addInitialPointerMoveListeners() {\n document.addEventListener('mousemove', onInitialPointerMove);\n document.addEventListener('mousedown', onInitialPointerMove);\n document.addEventListener('mouseup', onInitialPointerMove);\n document.addEventListener('pointermove', onInitialPointerMove);\n document.addEventListener('pointerdown', onInitialPointerMove);\n document.addEventListener('pointerup', onInitialPointerMove);\n document.addEventListener('touchmove', onInitialPointerMove);\n document.addEventListener('touchstart', onInitialPointerMove);\n document.addEventListener('touchend', onInitialPointerMove);\n }\n\n function removeInitialPointerMoveListeners() {\n document.removeEventListener('mousemove', onInitialPointerMove);\n document.removeEventListener('mousedown', onInitialPointerMove);\n document.removeEventListener('mouseup', onInitialPointerMove);\n document.removeEventListener('pointermove', onInitialPointerMove);\n document.removeEventListener('pointerdown', onInitialPointerMove);\n document.removeEventListener('pointerup', onInitialPointerMove);\n document.removeEventListener('touchmove', onInitialPointerMove);\n document.removeEventListener('touchstart', onInitialPointerMove);\n document.removeEventListener('touchend', onInitialPointerMove);\n }\n\n /**\n * When the polfyill first loads, assume the user is in keyboard modality.\n * If any event is received from a pointing device (e.g. mouse, pointer,\n * touch), turn off keyboard modality.\n * This accounts for situations where focus enters the page from the URL bar.\n * @param {Event} e\n */\n function onInitialPointerMove(e) {\n // Work around a Safari quirk that fires a mousemove on whenever the\n // window blurs, even if you're tabbing out of the page. \u00AF\\_(\u30C4)_/\u00AF\n if (e.target.nodeName && e.target.nodeName.toLowerCase() === 'html') {\n return;\n }\n\n hadKeyboardEvent = false;\n removeInitialPointerMoveListeners();\n }\n\n // For some kinds of state, we are interested in changes at the global scope\n // only. For example, global pointer input, global key presses and global\n // visibility change should affect the state at every scope:\n document.addEventListener('keydown', onKeyDown, true);\n document.addEventListener('mousedown', onPointerDown, true);\n document.addEventListener('pointerdown', onPointerDown, true);\n document.addEventListener('touchstart', onPointerDown, true);\n document.addEventListener('visibilitychange', onVisibilityChange, true);\n\n addInitialPointerMoveListeners();\n\n // For focus and blur, we specifically care about state changes in the local\n // scope. This is because focus / blur events that originate from within a\n // shadow root are not re-dispatched from the host element if it was already\n // the active element in its own scope:\n scope.addEventListener('focus', onFocus, true);\n scope.addEventListener('blur', onBlur, true);\n\n // We detect that a node is a ShadowRoot by ensuring that it is a\n // DocumentFragment and also has a host property. This check covers native\n // implementation and polyfill implementation transparently. If we only cared\n // about the native implementation, we could just check if the scope was\n // an instance of a ShadowRoot.\n if (scope.nodeType === Node.DOCUMENT_FRAGMENT_NODE && scope.host) {\n // Since a ShadowRoot is a special kind of DocumentFragment, it does not\n // have a root element to add a class to. So, we add this attribute to the\n // host element instead:\n scope.host.setAttribute('data-js-focus-visible', '');\n } else if (scope.nodeType === Node.DOCUMENT_NODE) {\n document.documentElement.classList.add('js-focus-visible');\n document.documentElement.setAttribute('data-js-focus-visible', '');\n }\n }\n\n // It is important to wrap all references to global window and document in\n // these checks to support server-side rendering use cases\n // @see https://github.com/WICG/focus-visible/issues/199\n if (typeof window !== 'undefined' && typeof document !== 'undefined') {\n // Make the polyfill helper globally available. This can be used as a signal\n // to interested libraries that wish to coordinate with the polyfill for e.g.,\n // applying the polyfill to a shadow root:\n window.applyFocusVisiblePolyfill = applyFocusVisiblePolyfill;\n\n // Notify interested libraries of the polyfill's presence, in case the\n // polyfill was loaded lazily:\n var event;\n\n try {\n event = new CustomEvent('focus-visible-polyfill-ready');\n } catch (error) {\n // IE11 does not support using CustomEvent as a constructor directly:\n event = document.createEvent('CustomEvent');\n event.initCustomEvent('focus-visible-polyfill-ready', false, false, {});\n }\n\n window.dispatchEvent(event);\n }\n\n if (typeof document !== 'undefined') {\n // Apply the polyfill to the global document, so that no JavaScript\n // coordination is required to use the polyfill in the top-level document:\n applyFocusVisiblePolyfill(document);\n }\n\n})));\n", "/*! *****************************************************************************\r\nCopyright (c) Microsoft Corporation.\r\n\r\nPermission to use, copy, modify, and/or distribute this software for any\r\npurpose with or without fee is hereby granted.\r\n\r\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH\r\nREGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY\r\nAND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,\r\nINDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM\r\nLOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR\r\nOTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR\r\nPERFORMANCE OF THIS SOFTWARE.\r\n***************************************************************************** */\r\n/* global global, define, System, Reflect, Promise */\r\nvar __extends;\r\nvar __assign;\r\nvar __rest;\r\nvar __decorate;\r\nvar __param;\r\nvar __metadata;\r\nvar __awaiter;\r\nvar __generator;\r\nvar __exportStar;\r\nvar __values;\r\nvar __read;\r\nvar __spread;\r\nvar __spreadArrays;\r\nvar __spreadArray;\r\nvar __await;\r\nvar __asyncGenerator;\r\nvar __asyncDelegator;\r\nvar __asyncValues;\r\nvar __makeTemplateObject;\r\nvar __importStar;\r\nvar __importDefault;\r\nvar __classPrivateFieldGet;\r\nvar __classPrivateFieldSet;\r\nvar __createBinding;\r\n(function (factory) {\r\n var root = typeof global === \"object\" ? global : typeof self === \"object\" ? self : typeof this === \"object\" ? this : {};\r\n if (typeof define === \"function\" && define.amd) {\r\n define(\"tslib\", [\"exports\"], function (exports) { factory(createExporter(root, createExporter(exports))); });\r\n }\r\n else if (typeof module === \"object\" && typeof module.exports === \"object\") {\r\n factory(createExporter(root, createExporter(module.exports)));\r\n }\r\n else {\r\n factory(createExporter(root));\r\n }\r\n function createExporter(exports, previous) {\r\n if (exports !== root) {\r\n if (typeof Object.create === \"function\") {\r\n Object.defineProperty(exports, \"__esModule\", { value: true });\r\n }\r\n else {\r\n exports.__esModule = true;\r\n }\r\n }\r\n return function (id, v) { return exports[id] = previous ? previous(id, v) : v; };\r\n }\r\n})\r\n(function (exporter) {\r\n var extendStatics = Object.setPrototypeOf ||\r\n ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||\r\n function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };\r\n\r\n __extends = function (d, b) {\r\n if (typeof b !== \"function\" && b !== null)\r\n throw new TypeError(\"Class extends value \" + String(b) + \" is not a constructor or null\");\r\n extendStatics(d, b);\r\n function __() { this.constructor = d; }\r\n d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());\r\n };\r\n\r\n __assign = Object.assign || function (t) {\r\n for (var s, i = 1, n = arguments.length; i < n; i++) {\r\n s = arguments[i];\r\n for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];\r\n }\r\n return t;\r\n };\r\n\r\n __rest = function (s, e) {\r\n var t = {};\r\n for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)\r\n t[p] = s[p];\r\n if (s != null && typeof Object.getOwnPropertySymbols === \"function\")\r\n for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {\r\n if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))\r\n t[p[i]] = s[p[i]];\r\n }\r\n return t;\r\n };\r\n\r\n __decorate = function (decorators, target, key, desc) {\r\n var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;\r\n if (typeof Reflect === \"object\" && typeof Reflect.decorate === \"function\") r = Reflect.decorate(decorators, target, key, desc);\r\n else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;\r\n return c > 3 && r && Object.defineProperty(target, key, r), r;\r\n };\r\n\r\n __param = function (paramIndex, decorator) {\r\n return function (target, key) { decorator(target, key, paramIndex); }\r\n };\r\n\r\n __metadata = function (metadataKey, metadataValue) {\r\n if (typeof Reflect === \"object\" && typeof Reflect.metadata === \"function\") return Reflect.metadata(metadataKey, metadataValue);\r\n };\r\n\r\n __awaiter = function (thisArg, _arguments, P, generator) {\r\n function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }\r\n return new (P || (P = Promise))(function (resolve, reject) {\r\n function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }\r\n function rejected(value) { try { step(generator[\"throw\"](value)); } catch (e) { reject(e); } }\r\n function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }\r\n step((generator = generator.apply(thisArg, _arguments || [])).next());\r\n });\r\n };\r\n\r\n __generator = function (thisArg, body) {\r\n var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;\r\n return g = { next: verb(0), \"throw\": verb(1), \"return\": verb(2) }, typeof Symbol === \"function\" && (g[Symbol.iterator] = function() { return this; }), g;\r\n function verb(n) { return function (v) { return step([n, v]); }; }\r\n function step(op) {\r\n if (f) throw new TypeError(\"Generator is already executing.\");\r\n while (_) try {\r\n if (f = 1, y && (t = op[0] & 2 ? y[\"return\"] : op[0] ? y[\"throw\"] || ((t = y[\"return\"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;\r\n if (y = 0, t) op = [op[0] & 2, t.value];\r\n switch (op[0]) {\r\n case 0: case 1: t = op; break;\r\n case 4: _.label++; return { value: op[1], done: false };\r\n case 5: _.label++; y = op[1]; op = [0]; continue;\r\n case 7: op = _.ops.pop(); _.trys.pop(); continue;\r\n default:\r\n if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }\r\n if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }\r\n if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }\r\n if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }\r\n if (t[2]) _.ops.pop();\r\n _.trys.pop(); continue;\r\n }\r\n op = body.call(thisArg, _);\r\n } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }\r\n if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };\r\n }\r\n };\r\n\r\n __exportStar = function(m, o) {\r\n for (var p in m) if (p !== \"default\" && !Object.prototype.hasOwnProperty.call(o, p)) __createBinding(o, m, p);\r\n };\r\n\r\n __createBinding = Object.create ? (function(o, m, k, k2) {\r\n if (k2 === undefined) k2 = k;\r\n Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });\r\n }) : (function(o, m, k, k2) {\r\n if (k2 === undefined) k2 = k;\r\n o[k2] = m[k];\r\n });\r\n\r\n __values = function (o) {\r\n var s = typeof Symbol === \"function\" && Symbol.iterator, m = s && o[s], i = 0;\r\n if (m) return m.call(o);\r\n if (o && typeof o.length === \"number\") return {\r\n next: function () {\r\n if (o && i >= o.length) o = void 0;\r\n return { value: o && o[i++], done: !o };\r\n }\r\n };\r\n throw new TypeError(s ? \"Object is not iterable.\" : \"Symbol.iterator is not defined.\");\r\n };\r\n\r\n __read = function (o, n) {\r\n var m = typeof Symbol === \"function\" && o[Symbol.iterator];\r\n if (!m) return o;\r\n var i = m.call(o), r, ar = [], e;\r\n try {\r\n while ((n === void 0 || n-- > 0) && !(r = i.next()).done) ar.push(r.value);\r\n }\r\n catch (error) { e = { error: error }; }\r\n finally {\r\n try {\r\n if (r && !r.done && (m = i[\"return\"])) m.call(i);\r\n }\r\n finally { if (e) throw e.error; }\r\n }\r\n return ar;\r\n };\r\n\r\n /** @deprecated */\r\n __spread = function () {\r\n for (var ar = [], i = 0; i < arguments.length; i++)\r\n ar = ar.concat(__read(arguments[i]));\r\n return ar;\r\n };\r\n\r\n /** @deprecated */\r\n __spreadArrays = function () {\r\n for (var s = 0, i = 0, il = arguments.length; i < il; i++) s += arguments[i].length;\r\n for (var r = Array(s), k = 0, i = 0; i < il; i++)\r\n for (var a = arguments[i], j = 0, jl = a.length; j < jl; j++, k++)\r\n r[k] = a[j];\r\n return r;\r\n };\r\n\r\n __spreadArray = function (to, from) {\r\n for (var i = 0, il = from.length, j = to.length; i < il; i++, j++)\r\n to[j] = from[i];\r\n return to;\r\n };\r\n\r\n __await = function (v) {\r\n return this instanceof __await ? (this.v = v, this) : new __await(v);\r\n };\r\n\r\n __asyncGenerator = function (thisArg, _arguments, generator) {\r\n if (!Symbol.asyncIterator) throw new TypeError(\"Symbol.asyncIterator is not defined.\");\r\n var g = generator.apply(thisArg, _arguments || []), i, q = [];\r\n return i = {}, verb(\"next\"), verb(\"throw\"), verb(\"return\"), i[Symbol.asyncIterator] = function () { return this; }, i;\r\n function verb(n) { if (g[n]) i[n] = function (v) { return new Promise(function (a, b) { q.push([n, v, a, b]) > 1 || resume(n, v); }); }; }\r\n function resume(n, v) { try { step(g[n](v)); } catch (e) { settle(q[0][3], e); } }\r\n function step(r) { r.value instanceof __await ? Promise.resolve(r.value.v).then(fulfill, reject) : settle(q[0][2], r); }\r\n function fulfill(value) { resume(\"next\", value); }\r\n function reject(value) { resume(\"throw\", value); }\r\n function settle(f, v) { if (f(v), q.shift(), q.length) resume(q[0][0], q[0][1]); }\r\n };\r\n\r\n __asyncDelegator = function (o) {\r\n var i, p;\r\n return i = {}, verb(\"next\"), verb(\"throw\", function (e) { throw e; }), verb(\"return\"), i[Symbol.iterator] = function () { return this; }, i;\r\n function verb(n, f) { i[n] = o[n] ? function (v) { return (p = !p) ? { value: __await(o[n](v)), done: n === \"return\" } : f ? f(v) : v; } : f; }\r\n };\r\n\r\n __asyncValues = function (o) {\r\n if (!Symbol.asyncIterator) throw new TypeError(\"Symbol.asyncIterator is not defined.\");\r\n var m = o[Symbol.asyncIterator], i;\r\n return m ? m.call(o) : (o = typeof __values === \"function\" ? __values(o) : o[Symbol.iterator](), i = {}, verb(\"next\"), verb(\"throw\"), verb(\"return\"), i[Symbol.asyncIterator] = function () { return this; }, i);\r\n function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }\r\n function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }\r\n };\r\n\r\n __makeTemplateObject = function (cooked, raw) {\r\n if (Object.defineProperty) { Object.defineProperty(cooked, \"raw\", { value: raw }); } else { cooked.raw = raw; }\r\n return cooked;\r\n };\r\n\r\n var __setModuleDefault = Object.create ? (function(o, v) {\r\n Object.defineProperty(o, \"default\", { enumerable: true, value: v });\r\n }) : function(o, v) {\r\n o[\"default\"] = v;\r\n };\r\n\r\n __importStar = function (mod) {\r\n if (mod && mod.__esModule) return mod;\r\n var result = {};\r\n if (mod != null) for (var k in mod) if (k !== \"default\" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);\r\n __setModuleDefault(result, mod);\r\n return result;\r\n };\r\n\r\n __importDefault = function (mod) {\r\n return (mod && mod.__esModule) ? mod : { \"default\": mod };\r\n };\r\n\r\n __classPrivateFieldGet = function (receiver, privateMap) {\r\n if (!privateMap.has(receiver)) {\r\n throw new TypeError(\"attempted to get private field on non-instance\");\r\n }\r\n return privateMap.get(receiver);\r\n };\r\n\r\n __classPrivateFieldSet = function (receiver, privateMap, value) {\r\n if (!privateMap.has(receiver)) {\r\n throw new TypeError(\"attempted to set private field on non-instance\");\r\n }\r\n privateMap.set(receiver, value);\r\n return value;\r\n };\r\n\r\n exporter(\"__extends\", __extends);\r\n exporter(\"__assign\", __assign);\r\n exporter(\"__rest\", __rest);\r\n exporter(\"__decorate\", __decorate);\r\n exporter(\"__param\", __param);\r\n exporter(\"__metadata\", __metadata);\r\n exporter(\"__awaiter\", __awaiter);\r\n exporter(\"__generator\", __generator);\r\n exporter(\"__exportStar\", __exportStar);\r\n exporter(\"__createBinding\", __createBinding);\r\n exporter(\"__values\", __values);\r\n exporter(\"__read\", __read);\r\n exporter(\"__spread\", __spread);\r\n exporter(\"__spreadArrays\", __spreadArrays);\r\n exporter(\"__spreadArray\", __spreadArray);\r\n exporter(\"__await\", __await);\r\n exporter(\"__asyncGenerator\", __asyncGenerator);\r\n exporter(\"__asyncDelegator\", __asyncDelegator);\r\n exporter(\"__asyncValues\", __asyncValues);\r\n exporter(\"__makeTemplateObject\", __makeTemplateObject);\r\n exporter(\"__importStar\", __importStar);\r\n exporter(\"__importDefault\", __importDefault);\r\n exporter(\"__classPrivateFieldGet\", __classPrivateFieldGet);\r\n exporter(\"__classPrivateFieldSet\", __classPrivateFieldSet);\r\n});\r\n", "/*!\n * clipboard.js v2.0.8\n * https://clipboardjs.com/\n *\n * Licensed MIT \u00A9 Zeno Rocha\n */\n(function webpackUniversalModuleDefinition(root, factory) {\n\tif(typeof exports === 'object' && typeof module === 'object')\n\t\tmodule.exports = factory();\n\telse if(typeof define === 'function' && define.amd)\n\t\tdefine([], factory);\n\telse if(typeof exports === 'object')\n\t\texports[\"ClipboardJS\"] = factory();\n\telse\n\t\troot[\"ClipboardJS\"] = factory();\n})(this, function() {\nreturn /******/ (function() { // webpackBootstrap\n/******/ \tvar __webpack_modules__ = ({\n\n/***/ 134:\n/***/ (function(__unused_webpack_module, __webpack_exports__, __webpack_require__) {\n\n\"use strict\";\n\n// EXPORTS\n__webpack_require__.d(__webpack_exports__, {\n \"default\": function() { return /* binding */ clipboard; }\n});\n\n// EXTERNAL MODULE: ./node_modules/tiny-emitter/index.js\nvar tiny_emitter = __webpack_require__(279);\nvar tiny_emitter_default = /*#__PURE__*/__webpack_require__.n(tiny_emitter);\n// EXTERNAL MODULE: ./node_modules/good-listener/src/listen.js\nvar listen = __webpack_require__(370);\nvar listen_default = /*#__PURE__*/__webpack_require__.n(listen);\n// EXTERNAL MODULE: ./node_modules/select/src/select.js\nvar src_select = __webpack_require__(817);\nvar select_default = /*#__PURE__*/__webpack_require__.n(src_select);\n;// CONCATENATED MODULE: ./src/clipboard-action.js\nfunction _typeof(obj) { \"@babel/helpers - typeof\"; if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") { _typeof = function _typeof(obj) { return typeof obj; }; } else { _typeof = function _typeof(obj) { return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj; }; } return _typeof(obj); }\n\nfunction _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError(\"Cannot call a class as a function\"); } }\n\nfunction _defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if (\"value\" in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } }\n\nfunction _createClass(Constructor, protoProps, staticProps) { if (protoProps) _defineProperties(Constructor.prototype, protoProps); if (staticProps) _defineProperties(Constructor, staticProps); return Constructor; }\n\n\n/**\n * Inner class which performs selection from either `text` or `target`\n * properties and then executes copy or cut operations.\n */\n\nvar ClipboardAction = /*#__PURE__*/function () {\n /**\n * @param {Object} options\n */\n function ClipboardAction(options) {\n _classCallCheck(this, ClipboardAction);\n\n this.resolveOptions(options);\n this.initSelection();\n }\n /**\n * Defines base properties passed from constructor.\n * @param {Object} options\n */\n\n\n _createClass(ClipboardAction, [{\n key: \"resolveOptions\",\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n this.action = options.action;\n this.container = options.container;\n this.emitter = options.emitter;\n this.target = options.target;\n this.text = options.text;\n this.trigger = options.trigger;\n this.selectedText = '';\n }\n /**\n * Decides which selection strategy is going to be applied based\n * on the existence of `text` and `target` properties.\n */\n\n }, {\n key: \"initSelection\",\n value: function initSelection() {\n if (this.text) {\n this.selectFake();\n } else if (this.target) {\n this.selectTarget();\n }\n }\n /**\n * Creates a fake textarea element, sets its value from `text` property,\n */\n\n }, {\n key: \"createFakeElement\",\n value: function createFakeElement() {\n var isRTL = document.documentElement.getAttribute('dir') === 'rtl';\n this.fakeElem = document.createElement('textarea'); // Prevent zooming on iOS\n\n this.fakeElem.style.fontSize = '12pt'; // Reset box model\n\n this.fakeElem.style.border = '0';\n this.fakeElem.style.padding = '0';\n this.fakeElem.style.margin = '0'; // Move element out of screen horizontally\n\n this.fakeElem.style.position = 'absolute';\n this.fakeElem.style[isRTL ? 'right' : 'left'] = '-9999px'; // Move element to the same position vertically\n\n var yPosition = window.pageYOffset || document.documentElement.scrollTop;\n this.fakeElem.style.top = \"\".concat(yPosition, \"px\");\n this.fakeElem.setAttribute('readonly', '');\n this.fakeElem.value = this.text;\n return this.fakeElem;\n }\n /**\n * Get's the value of fakeElem,\n * and makes a selection on it.\n */\n\n }, {\n key: \"selectFake\",\n value: function selectFake() {\n var _this = this;\n\n var fakeElem = this.createFakeElement();\n\n this.fakeHandlerCallback = function () {\n return _this.removeFake();\n };\n\n this.fakeHandler = this.container.addEventListener('click', this.fakeHandlerCallback) || true;\n this.container.appendChild(fakeElem);\n this.selectedText = select_default()(fakeElem);\n this.copyText();\n this.removeFake();\n }\n /**\n * Only removes the fake element after another click event, that way\n * a user can hit `Ctrl+C` to copy because selection still exists.\n */\n\n }, {\n key: \"removeFake\",\n value: function removeFake() {\n if (this.fakeHandler) {\n this.container.removeEventListener('click', this.fakeHandlerCallback);\n this.fakeHandler = null;\n this.fakeHandlerCallback = null;\n }\n\n if (this.fakeElem) {\n this.container.removeChild(this.fakeElem);\n this.fakeElem = null;\n }\n }\n /**\n * Selects the content from element passed on `target` property.\n */\n\n }, {\n key: \"selectTarget\",\n value: function selectTarget() {\n this.selectedText = select_default()(this.target);\n this.copyText();\n }\n /**\n * Executes the copy operation based on the current selection.\n */\n\n }, {\n key: \"copyText\",\n value: function copyText() {\n var succeeded;\n\n try {\n succeeded = document.execCommand(this.action);\n } catch (err) {\n succeeded = false;\n }\n\n this.handleResult(succeeded);\n }\n /**\n * Fires an event based on the copy operation result.\n * @param {Boolean} succeeded\n */\n\n }, {\n key: \"handleResult\",\n value: function handleResult(succeeded) {\n this.emitter.emit(succeeded ? 'success' : 'error', {\n action: this.action,\n text: this.selectedText,\n trigger: this.trigger,\n clearSelection: this.clearSelection.bind(this)\n });\n }\n /**\n * Moves focus away from `target` and back to the trigger, removes current selection.\n */\n\n }, {\n key: \"clearSelection\",\n value: function clearSelection() {\n if (this.trigger) {\n this.trigger.focus();\n }\n\n document.activeElement.blur();\n window.getSelection().removeAllRanges();\n }\n /**\n * Sets the `action` to be performed which can be either 'copy' or 'cut'.\n * @param {String} action\n */\n\n }, {\n key: \"destroy\",\n\n /**\n * Destroy lifecycle.\n */\n value: function destroy() {\n this.removeFake();\n }\n }, {\n key: \"action\",\n set: function set() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 'copy';\n this._action = action;\n\n if (this._action !== 'copy' && this._action !== 'cut') {\n throw new Error('Invalid \"action\" value, use either \"copy\" or \"cut\"');\n }\n }\n /**\n * Gets the `action` property.\n * @return {String}\n */\n ,\n get: function get() {\n return this._action;\n }\n /**\n * Sets the `target` property using an element\n * that will be have its content copied.\n * @param {Element} target\n */\n\n }, {\n key: \"target\",\n set: function set(target) {\n if (target !== undefined) {\n if (target && _typeof(target) === 'object' && target.nodeType === 1) {\n if (this.action === 'copy' && target.hasAttribute('disabled')) {\n throw new Error('Invalid \"target\" attribute. Please use \"readonly\" instead of \"disabled\" attribute');\n }\n\n if (this.action === 'cut' && (target.hasAttribute('readonly') || target.hasAttribute('disabled'))) {\n throw new Error('Invalid \"target\" attribute. You can\\'t cut text from elements with \"readonly\" or \"disabled\" attributes');\n }\n\n this._target = target;\n } else {\n throw new Error('Invalid \"target\" value, use a valid Element');\n }\n }\n }\n /**\n * Gets the `target` property.\n * @return {String|HTMLElement}\n */\n ,\n get: function get() {\n return this._target;\n }\n }]);\n\n return ClipboardAction;\n}();\n\n/* harmony default export */ var clipboard_action = (ClipboardAction);\n;// CONCATENATED MODULE: ./src/clipboard.js\nfunction clipboard_typeof(obj) { \"@babel/helpers - typeof\"; if (typeof Symbol === \"function\" && typeof Symbol.iterator === \"symbol\") { clipboard_typeof = function _typeof(obj) { return typeof obj; }; } else { clipboard_typeof = function _typeof(obj) { return obj && typeof Symbol === \"function\" && obj.constructor === Symbol && obj !== Symbol.prototype ? \"symbol\" : typeof obj; }; } return clipboard_typeof(obj); }\n\nfunction clipboard_classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError(\"Cannot call a class as a function\"); } }\n\nfunction clipboard_defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable || false; descriptor.configurable = true; if (\"value\" in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } }\n\nfunction clipboard_createClass(Constructor, protoProps, staticProps) { if (protoProps) clipboard_defineProperties(Constructor.prototype, protoProps); if (staticProps) clipboard_defineProperties(Constructor, staticProps); return Constructor; }\n\nfunction _inherits(subClass, superClass) { if (typeof superClass !== \"function\" && superClass !== null) { throw new TypeError(\"Super expression must either be null or a function\"); } subClass.prototype = Object.create(superClass && superClass.prototype, { constructor: { value: subClass, writable: true, configurable: true } }); if (superClass) _setPrototypeOf(subClass, superClass); }\n\nfunction _setPrototypeOf(o, p) { _setPrototypeOf = Object.setPrototypeOf || function _setPrototypeOf(o, p) { o.__proto__ = p; return o; }; return _setPrototypeOf(o, p); }\n\nfunction _createSuper(Derived) { var hasNativeReflectConstruct = _isNativeReflectConstruct(); return function _createSuperInternal() { var Super = _getPrototypeOf(Derived), result; if (hasNativeReflectConstruct) { var NewTarget = _getPrototypeOf(this).constructor; result = Reflect.construct(Super, arguments, NewTarget); } else { result = Super.apply(this, arguments); } return _possibleConstructorReturn(this, result); }; }\n\nfunction _possibleConstructorReturn(self, call) { if (call && (clipboard_typeof(call) === \"object\" || typeof call === \"function\")) { return call; } return _assertThisInitialized(self); }\n\nfunction _assertThisInitialized(self) { if (self === void 0) { throw new ReferenceError(\"this hasn't been initialised - super() hasn't been called\"); } return self; }\n\nfunction _isNativeReflectConstruct() { if (typeof Reflect === \"undefined\" || !Reflect.construct) return false; if (Reflect.construct.sham) return false; if (typeof Proxy === \"function\") return true; try { Date.prototype.toString.call(Reflect.construct(Date, [], function () {})); return true; } catch (e) { return false; } }\n\nfunction _getPrototypeOf(o) { _getPrototypeOf = Object.setPrototypeOf ? Object.getPrototypeOf : function _getPrototypeOf(o) { return o.__proto__ || Object.getPrototypeOf(o); }; return _getPrototypeOf(o); }\n\n\n\n\n/**\n * Helper function to retrieve attribute value.\n * @param {String} suffix\n * @param {Element} element\n */\n\nfunction getAttributeValue(suffix, element) {\n var attribute = \"data-clipboard-\".concat(suffix);\n\n if (!element.hasAttribute(attribute)) {\n return;\n }\n\n return element.getAttribute(attribute);\n}\n/**\n * Base class which takes one or more elements, adds event listeners to them,\n * and instantiates a new `ClipboardAction` on each click.\n */\n\n\nvar Clipboard = /*#__PURE__*/function (_Emitter) {\n _inherits(Clipboard, _Emitter);\n\n var _super = _createSuper(Clipboard);\n\n /**\n * @param {String|HTMLElement|HTMLCollection|NodeList} trigger\n * @param {Object} options\n */\n function Clipboard(trigger, options) {\n var _this;\n\n clipboard_classCallCheck(this, Clipboard);\n\n _this = _super.call(this);\n\n _this.resolveOptions(options);\n\n _this.listenClick(trigger);\n\n return _this;\n }\n /**\n * Defines if attributes would be resolved using internal setter functions\n * or custom functions that were passed in the constructor.\n * @param {Object} options\n */\n\n\n clipboard_createClass(Clipboard, [{\n key: \"resolveOptions\",\n value: function resolveOptions() {\n var options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};\n this.action = typeof options.action === 'function' ? options.action : this.defaultAction;\n this.target = typeof options.target === 'function' ? options.target : this.defaultTarget;\n this.text = typeof options.text === 'function' ? options.text : this.defaultText;\n this.container = clipboard_typeof(options.container) === 'object' ? options.container : document.body;\n }\n /**\n * Adds a click event listener to the passed trigger.\n * @param {String|HTMLElement|HTMLCollection|NodeList} trigger\n */\n\n }, {\n key: \"listenClick\",\n value: function listenClick(trigger) {\n var _this2 = this;\n\n this.listener = listen_default()(trigger, 'click', function (e) {\n return _this2.onClick(e);\n });\n }\n /**\n * Defines a new `ClipboardAction` on each click event.\n * @param {Event} e\n */\n\n }, {\n key: \"onClick\",\n value: function onClick(e) {\n var trigger = e.delegateTarget || e.currentTarget;\n\n if (this.clipboardAction) {\n this.clipboardAction = null;\n }\n\n this.clipboardAction = new clipboard_action({\n action: this.action(trigger),\n target: this.target(trigger),\n text: this.text(trigger),\n container: this.container,\n trigger: trigger,\n emitter: this\n });\n }\n /**\n * Default `action` lookup function.\n * @param {Element} trigger\n */\n\n }, {\n key: \"defaultAction\",\n value: function defaultAction(trigger) {\n return getAttributeValue('action', trigger);\n }\n /**\n * Default `target` lookup function.\n * @param {Element} trigger\n */\n\n }, {\n key: \"defaultTarget\",\n value: function defaultTarget(trigger) {\n var selector = getAttributeValue('target', trigger);\n\n if (selector) {\n return document.querySelector(selector);\n }\n }\n /**\n * Returns the support of the given action, or all actions if no action is\n * given.\n * @param {String} [action]\n */\n\n }, {\n key: \"defaultText\",\n\n /**\n * Default `text` lookup function.\n * @param {Element} trigger\n */\n value: function defaultText(trigger) {\n return getAttributeValue('text', trigger);\n }\n /**\n * Destroy lifecycle.\n */\n\n }, {\n key: \"destroy\",\n value: function destroy() {\n this.listener.destroy();\n\n if (this.clipboardAction) {\n this.clipboardAction.destroy();\n this.clipboardAction = null;\n }\n }\n }], [{\n key: \"isSupported\",\n value: function isSupported() {\n var action = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : ['copy', 'cut'];\n var actions = typeof action === 'string' ? [action] : action;\n var support = !!document.queryCommandSupported;\n actions.forEach(function (action) {\n support = support && !!document.queryCommandSupported(action);\n });\n return support;\n }\n }]);\n\n return Clipboard;\n}((tiny_emitter_default()));\n\n/* harmony default export */ var clipboard = (Clipboard);\n\n/***/ }),\n\n/***/ 828:\n/***/ (function(module) {\n\nvar DOCUMENT_NODE_TYPE = 9;\n\n/**\n * A polyfill for Element.matches()\n */\nif (typeof Element !== 'undefined' && !Element.prototype.matches) {\n var proto = Element.prototype;\n\n proto.matches = proto.matchesSelector ||\n proto.mozMatchesSelector ||\n proto.msMatchesSelector ||\n proto.oMatchesSelector ||\n proto.webkitMatchesSelector;\n}\n\n/**\n * Finds the closest parent that matches a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @return {Function}\n */\nfunction closest (element, selector) {\n while (element && element.nodeType !== DOCUMENT_NODE_TYPE) {\n if (typeof element.matches === 'function' &&\n element.matches(selector)) {\n return element;\n }\n element = element.parentNode;\n }\n}\n\nmodule.exports = closest;\n\n\n/***/ }),\n\n/***/ 438:\n/***/ (function(module, __unused_webpack_exports, __webpack_require__) {\n\nvar closest = __webpack_require__(828);\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction _delegate(element, selector, type, callback, useCapture) {\n var listenerFn = listener.apply(this, arguments);\n\n element.addEventListener(type, listenerFn, useCapture);\n\n return {\n destroy: function() {\n element.removeEventListener(type, listenerFn, useCapture);\n }\n }\n}\n\n/**\n * Delegates event to a selector.\n *\n * @param {Element|String|Array} [elements]\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @param {Boolean} useCapture\n * @return {Object}\n */\nfunction delegate(elements, selector, type, callback, useCapture) {\n // Handle the regular Element usage\n if (typeof elements.addEventListener === 'function') {\n return _delegate.apply(null, arguments);\n }\n\n // Handle Element-less usage, it defaults to global delegation\n if (typeof type === 'function') {\n // Use `document` as the first parameter, then apply arguments\n // This is a short way to .unshift `arguments` without running into deoptimizations\n return _delegate.bind(null, document).apply(null, arguments);\n }\n\n // Handle Selector-based usage\n if (typeof elements === 'string') {\n elements = document.querySelectorAll(elements);\n }\n\n // Handle Array-like based usage\n return Array.prototype.map.call(elements, function (element) {\n return _delegate(element, selector, type, callback, useCapture);\n });\n}\n\n/**\n * Finds closest match and invokes callback.\n *\n * @param {Element} element\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Function}\n */\nfunction listener(element, selector, type, callback) {\n return function(e) {\n e.delegateTarget = closest(e.target, selector);\n\n if (e.delegateTarget) {\n callback.call(element, e);\n }\n }\n}\n\nmodule.exports = delegate;\n\n\n/***/ }),\n\n/***/ 879:\n/***/ (function(__unused_webpack_module, exports) {\n\n/**\n * Check if argument is a HTML element.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.node = function(value) {\n return value !== undefined\n && value instanceof HTMLElement\n && value.nodeType === 1;\n};\n\n/**\n * Check if argument is a list of HTML elements.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.nodeList = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return value !== undefined\n && (type === '[object NodeList]' || type === '[object HTMLCollection]')\n && ('length' in value)\n && (value.length === 0 || exports.node(value[0]));\n};\n\n/**\n * Check if argument is a string.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.string = function(value) {\n return typeof value === 'string'\n || value instanceof String;\n};\n\n/**\n * Check if argument is a function.\n *\n * @param {Object} value\n * @return {Boolean}\n */\nexports.fn = function(value) {\n var type = Object.prototype.toString.call(value);\n\n return type === '[object Function]';\n};\n\n\n/***/ }),\n\n/***/ 370:\n/***/ (function(module, __unused_webpack_exports, __webpack_require__) {\n\nvar is = __webpack_require__(879);\nvar delegate = __webpack_require__(438);\n\n/**\n * Validates all params and calls the right\n * listener function based on its target type.\n *\n * @param {String|HTMLElement|HTMLCollection|NodeList} target\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listen(target, type, callback) {\n if (!target && !type && !callback) {\n throw new Error('Missing required arguments');\n }\n\n if (!is.string(type)) {\n throw new TypeError('Second argument must be a String');\n }\n\n if (!is.fn(callback)) {\n throw new TypeError('Third argument must be a Function');\n }\n\n if (is.node(target)) {\n return listenNode(target, type, callback);\n }\n else if (is.nodeList(target)) {\n return listenNodeList(target, type, callback);\n }\n else if (is.string(target)) {\n return listenSelector(target, type, callback);\n }\n else {\n throw new TypeError('First argument must be a String, HTMLElement, HTMLCollection, or NodeList');\n }\n}\n\n/**\n * Adds an event listener to a HTML element\n * and returns a remove listener function.\n *\n * @param {HTMLElement} node\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNode(node, type, callback) {\n node.addEventListener(type, callback);\n\n return {\n destroy: function() {\n node.removeEventListener(type, callback);\n }\n }\n}\n\n/**\n * Add an event listener to a list of HTML elements\n * and returns a remove listener function.\n *\n * @param {NodeList|HTMLCollection} nodeList\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenNodeList(nodeList, type, callback) {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.addEventListener(type, callback);\n });\n\n return {\n destroy: function() {\n Array.prototype.forEach.call(nodeList, function(node) {\n node.removeEventListener(type, callback);\n });\n }\n }\n}\n\n/**\n * Add an event listener to a selector\n * and returns a remove listener function.\n *\n * @param {String} selector\n * @param {String} type\n * @param {Function} callback\n * @return {Object}\n */\nfunction listenSelector(selector, type, callback) {\n return delegate(document.body, selector, type, callback);\n}\n\nmodule.exports = listen;\n\n\n/***/ }),\n\n/***/ 817:\n/***/ (function(module) {\n\nfunction select(element) {\n var selectedText;\n\n if (element.nodeName === 'SELECT') {\n element.focus();\n\n selectedText = element.value;\n }\n else if (element.nodeName === 'INPUT' || element.nodeName === 'TEXTAREA') {\n var isReadOnly = element.hasAttribute('readonly');\n\n if (!isReadOnly) {\n element.setAttribute('readonly', '');\n }\n\n element.select();\n element.setSelectionRange(0, element.value.length);\n\n if (!isReadOnly) {\n element.removeAttribute('readonly');\n }\n\n selectedText = element.value;\n }\n else {\n if (element.hasAttribute('contenteditable')) {\n element.focus();\n }\n\n var selection = window.getSelection();\n var range = document.createRange();\n\n range.selectNodeContents(element);\n selection.removeAllRanges();\n selection.addRange(range);\n\n selectedText = selection.toString();\n }\n\n return selectedText;\n}\n\nmodule.exports = select;\n\n\n/***/ }),\n\n/***/ 279:\n/***/ (function(module) {\n\nfunction E () {\n // Keep this empty so it's easier to inherit from\n // (via https://github.com/lipsmack from https://github.com/scottcorgan/tiny-emitter/issues/3)\n}\n\nE.prototype = {\n on: function (name, callback, ctx) {\n var e = this.e || (this.e = {});\n\n (e[name] || (e[name] = [])).push({\n fn: callback,\n ctx: ctx\n });\n\n return this;\n },\n\n once: function (name, callback, ctx) {\n var self = this;\n function listener () {\n self.off(name, listener);\n callback.apply(ctx, arguments);\n };\n\n listener._ = callback\n return this.on(name, listener, ctx);\n },\n\n emit: function (name) {\n var data = [].slice.call(arguments, 1);\n var evtArr = ((this.e || (this.e = {}))[name] || []).slice();\n var i = 0;\n var len = evtArr.length;\n\n for (i; i < len; i++) {\n evtArr[i].fn.apply(evtArr[i].ctx, data);\n }\n\n return this;\n },\n\n off: function (name, callback) {\n var e = this.e || (this.e = {});\n var evts = e[name];\n var liveEvents = [];\n\n if (evts && callback) {\n for (var i = 0, len = evts.length; i < len; i++) {\n if (evts[i].fn !== callback && evts[i].fn._ !== callback)\n liveEvents.push(evts[i]);\n }\n }\n\n // Remove event from queue to prevent memory leak\n // Suggested by https://github.com/lazd\n // Ref: https://github.com/scottcorgan/tiny-emitter/commit/c6ebfaa9bc973b33d110a84a307742b7cf94c953#commitcomment-5024910\n\n (liveEvents.length)\n ? e[name] = liveEvents\n : delete e[name];\n\n return this;\n }\n};\n\nmodule.exports = E;\nmodule.exports.TinyEmitter = E;\n\n\n/***/ })\n\n/******/ \t});\n/************************************************************************/\n/******/ \t// The module cache\n/******/ \tvar __webpack_module_cache__ = {};\n/******/ \t\n/******/ \t// The require function\n/******/ \tfunction __webpack_require__(moduleId) {\n/******/ \t\t// Check if module is in cache\n/******/ \t\tif(__webpack_module_cache__[moduleId]) {\n/******/ \t\t\treturn __webpack_module_cache__[moduleId].exports;\n/******/ \t\t}\n/******/ \t\t// Create a new module (and put it into the cache)\n/******/ \t\tvar module = __webpack_module_cache__[moduleId] = {\n/******/ \t\t\t// no module.id needed\n/******/ \t\t\t// no module.loaded needed\n/******/ \t\t\texports: {}\n/******/ \t\t};\n/******/ \t\n/******/ \t\t// Execute the module function\n/******/ \t\t__webpack_modules__[moduleId](module, module.exports, __webpack_require__);\n/******/ \t\n/******/ \t\t// Return the exports of the module\n/******/ \t\treturn module.exports;\n/******/ \t}\n/******/ \t\n/************************************************************************/\n/******/ \t/* webpack/runtime/compat get default export */\n/******/ \t!function() {\n/******/ \t\t// getDefaultExport function for compatibility with non-harmony modules\n/******/ \t\t__webpack_require__.n = function(module) {\n/******/ \t\t\tvar getter = module && module.__esModule ?\n/******/ \t\t\t\tfunction() { return module['default']; } :\n/******/ \t\t\t\tfunction() { return module; };\n/******/ \t\t\t__webpack_require__.d(getter, { a: getter });\n/******/ \t\t\treturn getter;\n/******/ \t\t};\n/******/ \t}();\n/******/ \t\n/******/ \t/* webpack/runtime/define property getters */\n/******/ \t!function() {\n/******/ \t\t// define getter functions for harmony exports\n/******/ \t\t__webpack_require__.d = function(exports, definition) {\n/******/ \t\t\tfor(var key in definition) {\n/******/ \t\t\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n/******/ \t\t\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n/******/ \t\t\t\t}\n/******/ \t\t\t}\n/******/ \t\t};\n/******/ \t}();\n/******/ \t\n/******/ \t/* webpack/runtime/hasOwnProperty shorthand */\n/******/ \t!function() {\n/******/ \t\t__webpack_require__.o = function(obj, prop) { return Object.prototype.hasOwnProperty.call(obj, prop); }\n/******/ \t}();\n/******/ \t\n/************************************************************************/\n/******/ \t// module exports must be returned from runtime so entry inlining is disabled\n/******/ \t// startup\n/******/ \t// Load entry module and return exports\n/******/ \treturn __webpack_require__(134);\n/******/ })()\n.default;\n});", "/*!\n * escape-html\n * Copyright(c) 2012-2013 TJ Holowaychuk\n * Copyright(c) 2015 Andreas Lubbe\n * Copyright(c) 2015 Tiancheng \"Timothy\" Gu\n * MIT Licensed\n */\n\n'use strict';\n\n/**\n * Module variables.\n * @private\n */\n\nvar matchHtmlRegExp = /[\"'&<>]/;\n\n/**\n * Module exports.\n * @public\n */\n\nmodule.exports = escapeHtml;\n\n/**\n * Escape special characters in the given string of html.\n *\n * @param {string} string The string to escape for inserting into HTML\n * @return {string}\n * @public\n */\n\nfunction escapeHtml(string) {\n var str = '' + string;\n var match = matchHtmlRegExp.exec(str);\n\n if (!match) {\n return str;\n }\n\n var escape;\n var html = '';\n var index = 0;\n var lastIndex = 0;\n\n for (index = match.index; index < str.length; index++) {\n switch (str.charCodeAt(index)) {\n case 34: // \"\n escape = '"';\n break;\n case 38: // &\n escape = '&';\n break;\n case 39: // '\n escape = ''';\n break;\n case 60: // <\n escape = '<';\n break;\n case 62: // >\n escape = '>';\n break;\n default:\n continue;\n }\n\n if (lastIndex !== index) {\n html += str.substring(lastIndex, index);\n }\n\n lastIndex = index + 1;\n html += escape;\n }\n\n return lastIndex !== index\n ? html + str.substring(lastIndex, index)\n : html;\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport \"focus-visible\"\nimport { NEVER, Subject, defer, merge } from \"rxjs\"\nimport {\n delay,\n filter,\n map,\n mergeWith,\n shareReplay,\n switchMap\n} from \"rxjs/operators\"\n\nimport { configuration, feature } from \"./_\"\nimport {\n at,\n getElement,\n requestJSON,\n setToggle,\n watchDocument,\n watchKeyboard,\n watchLocation,\n watchLocationTarget,\n watchMedia,\n watchPrint,\n watchViewport\n} from \"./browser\"\nimport {\n getComponentElement,\n getComponentElements,\n mountBackToTop,\n mountContent,\n mountDialog,\n mountHeader,\n mountHeaderTitle,\n mountPalette,\n mountSearch,\n mountSidebar,\n mountSource,\n mountTableOfContents,\n mountTabs,\n watchHeader,\n watchMain\n} from \"./components\"\nimport {\n SearchIndex,\n setupClipboardJS,\n setupInstantLoading,\n setupVersionSelector\n} from \"./integrations\"\nimport {\n patchIndeterminate,\n patchScrollfix,\n patchScrolllock\n} from \"./patches\"\n\n/* ----------------------------------------------------------------------------\n * Application\n * ------------------------------------------------------------------------- */\n\n/* Yay, JavaScript is available */\ndocument.documentElement.classList.remove(\"no-js\")\ndocument.documentElement.classList.add(\"js\")\n\n/* Set up navigation observables and subjects */\nconst document$ = watchDocument()\nconst location$ = watchLocation()\nconst target$ = watchLocationTarget()\nconst keyboard$ = watchKeyboard()\n\n/* Set up media observables */\nconst viewport$ = watchViewport()\nconst tablet$ = watchMedia(\"(min-width: 960px)\")\nconst screen$ = watchMedia(\"(min-width: 1220px)\")\nconst print$ = watchPrint()\n\n/* Retrieve search index, if search is enabled */\nconst config = configuration()\nconst index$ = document.forms.namedItem(\"search\")\n ? __search?.index || requestJSON(\n `${config.base}/search/search_index.json`\n )\n : NEVER\n\n/* Set up Clipboard.js integration */\nconst alert$ = new Subject()\nsetupClipboardJS({ alert$ })\n\n/* Set up instant loading, if enabled */\nif (feature(\"navigation.instant\"))\n setupInstantLoading({ document$, location$, viewport$ })\n\n/* Set up version selector */\nif (config.version?.provider === \"mike\")\n setupVersionSelector()\n\n/* Always close drawer and search on navigation */\nmerge(location$, target$)\n .pipe(\n delay(125)\n )\n .subscribe(() => {\n setToggle(\"drawer\", false)\n setToggle(\"search\", false)\n })\n\n/* Set up global keyboard handlers */\nkeyboard$\n .pipe(\n filter(({ mode }) => mode === \"global\")\n )\n .subscribe(key => {\n switch (key.type) {\n\n /* Go to previous page */\n case \"p\":\n case \",\":\n const prev = getElement(\"[href][rel=prev]\")\n if (typeof prev !== \"undefined\")\n prev.click()\n break\n\n /* Go to next page */\n case \"n\":\n case \".\":\n const next = getElement(\"[href][rel=next]\")\n if (typeof next !== \"undefined\")\n next.click()\n break\n }\n })\n\n/* Set up patches */\npatchIndeterminate({ document$, tablet$ })\npatchScrollfix({ document$ })\npatchScrolllock({ viewport$, tablet$ })\n\n/* Set up header and main area observable */\nconst header$ = watchHeader(getComponentElement(\"header\"), { viewport$ })\nconst main$ = document$\n .pipe(\n map(() => getComponentElement(\"main\")),\n switchMap(el => watchMain(el, { viewport$, header$ })),\n shareReplay(1)\n )\n\n/* Set up control component observables */\nconst control$ = merge(\n\n /* Dialog */\n ...getComponentElements(\"dialog\")\n .map(el => mountDialog(el, { alert$ })),\n\n /* Header */\n ...getComponentElements(\"header\")\n .map(el => mountHeader(el, { viewport$, header$, main$ })),\n\n /* Color palette */\n ...getComponentElements(\"palette\")\n .map(el => mountPalette(el)),\n\n /* Search */\n ...getComponentElements(\"search\")\n .map(el => mountSearch(el, { index$, keyboard$ })),\n\n /* Repository information */\n ...getComponentElements(\"source\")\n .map(el => mountSource(el))\n)\n\n/* Set up content component observables */\nconst content$ = defer(() => merge(\n\n /* Content */\n ...getComponentElements(\"content\")\n .map(el => mountContent(el, { target$, viewport$, print$ })),\n\n /* Header title */\n ...getComponentElements(\"header-title\")\n .map(el => mountHeaderTitle(el, { viewport$, header$ })),\n\n /* Sidebar */\n ...getComponentElements(\"sidebar\")\n .map(el => el.getAttribute(\"data-md-type\") === \"navigation\"\n ? at(screen$, () => mountSidebar(el, { viewport$, header$, main$ }))\n : at(tablet$, () => mountSidebar(el, { viewport$, header$, main$ }))\n ),\n\n /* Navigation tabs */\n ...getComponentElements(\"tabs\")\n .map(el => mountTabs(el, { viewport$, header$ })),\n\n /* Table of contents */\n ...getComponentElements(\"toc\")\n .map(el => mountTableOfContents(el, { viewport$, header$ })),\n\n /* Back-to-top button */\n ...getComponentElements(\"top\")\n .map(el => mountBackToTop(el, { viewport$, main$ }))\n))\n\n/* Set up component observables */\nconst component$ = document$\n .pipe(\n switchMap(() => content$),\n mergeWith(control$),\n shareReplay(1)\n )\n\n/* Subscribe to all components */\ncomponent$.subscribe()\n\n/* ----------------------------------------------------------------------------\n * Exports\n * ------------------------------------------------------------------------- */\n\nwindow.document$ = document$ /* Document observable */\nwindow.location$ = location$ /* Location subject */\nwindow.target$ = target$ /* Location target observable */\nwindow.keyboard$ = keyboard$ /* Keyboard observable */\nwindow.viewport$ = viewport$ /* Viewport observable */\nwindow.tablet$ = tablet$ /* Tablet observable */\nwindow.screen$ = screen$ /* Screen observable */\nwindow.print$ = print$ /* Print mode observable */\nwindow.alert$ = alert$ /* Alert subject */\nwindow.component$ = component$ /* Component observable */\n", "import tslib from '../tslib.js';\r\nconst {\r\n __extends,\r\n __assign,\r\n __rest,\r\n __decorate,\r\n __param,\r\n __metadata,\r\n __awaiter,\r\n __generator,\r\n __exportStar,\r\n __createBinding,\r\n __values,\r\n __read,\r\n __spread,\r\n __spreadArrays,\r\n __spreadArray,\r\n __await,\r\n __asyncGenerator,\r\n __asyncDelegator,\r\n __asyncValues,\r\n __makeTemplateObject,\r\n __importStar,\r\n __importDefault,\r\n __classPrivateFieldGet,\r\n __classPrivateFieldSet,\r\n} = tslib;\r\nexport {\r\n __extends,\r\n __assign,\r\n __rest,\r\n __decorate,\r\n __param,\r\n __metadata,\r\n __awaiter,\r\n __generator,\r\n __exportStar,\r\n __createBinding,\r\n __values,\r\n __read,\r\n __spread,\r\n __spreadArrays,\r\n __spreadArray,\r\n __await,\r\n __asyncGenerator,\r\n __asyncDelegator,\r\n __asyncValues,\r\n __makeTemplateObject,\r\n __importStar,\r\n __importDefault,\r\n __classPrivateFieldGet,\r\n __classPrivateFieldSet,\r\n};\r\n", null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, null, "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { ReplaySubject, Subject, fromEvent } from \"rxjs\"\nimport { mapTo } from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch document\n *\n * Documents are implemented as subjects, so all downstream observables are\n * automatically updated when a new document is emitted.\n *\n * @returns Document subject\n */\nexport function watchDocument(): Subject {\n const document$ = new ReplaySubject()\n fromEvent(document, \"DOMContentLoaded\")\n .pipe(\n mapTo(document)\n )\n .subscribe(document$)\n\n /* Return document */\n return document$\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve an element matching the query selector\n *\n * @template T - Element type\n *\n * @param selector - Query selector\n * @param node - Node of reference\n *\n * @returns Element or nothing\n */\nexport function getElement(\n selector: T, node?: ParentNode\n): HTMLElementTagNameMap[T]\n\nexport function getElement(\n selector: string, node?: ParentNode\n): T | undefined\n\nexport function getElement(\n selector: string, node: ParentNode = document\n): T | undefined {\n return node.querySelector(selector) || undefined\n}\n\n/**\n * Retrieve an element matching a query selector or throw a reference error\n *\n * @template T - Element type\n *\n * @param selector - Query selector\n * @param node - Node of reference\n *\n * @returns Element\n */\nexport function getElementOrThrow(\n selector: T, node?: ParentNode\n): HTMLElementTagNameMap[T]\n\nexport function getElementOrThrow(\n selector: string, node?: ParentNode\n): T\n\nexport function getElementOrThrow(\n selector: string, node: ParentNode = document\n): T {\n const el = getElement(selector, node)\n if (typeof el === \"undefined\")\n throw new ReferenceError(\n `Missing element: expected \"${selector}\" to be present`\n )\n return el\n}\n\n/**\n * Retrieve the currently active element\n *\n * @returns Element or nothing\n */\nexport function getActiveElement(): HTMLElement | undefined {\n return document.activeElement instanceof HTMLElement\n ? document.activeElement\n : undefined\n}\n\n/**\n * Retrieve all elements matching the query selector\n *\n * @template T - Element type\n *\n * @param selector - Query selector\n * @param node - Node of reference\n *\n * @returns Elements\n */\nexport function getElements(\n selector: T, node?: ParentNode\n): HTMLElementTagNameMap[T][]\n\nexport function getElements(\n selector: string, node?: ParentNode\n): T[]\n\nexport function getElements(\n selector: string, node: ParentNode = document\n): T[] {\n return Array.from(node.querySelectorAll(selector))\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Create an element\n *\n * @template T - Tag name type\n *\n * @param tagName - Tag name\n *\n * @returns Element\n */\nexport function createElement(\n tagName: T\n): HTMLElementTagNameMap[T] {\n return document.createElement(tagName)\n}\n\n/**\n * Replace an element with the given list of nodes\n *\n * @param el - Element\n * @param nodes - Replacement nodes\n */\nexport function replaceElement(\n el: HTMLElement, ...nodes: Node[]\n): void {\n el.replaceWith(...nodes)\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, merge } from \"rxjs\"\nimport { map, startWith } from \"rxjs/operators\"\n\nimport { getActiveElement } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set element focus\n *\n * @param el - Element\n * @param value - Whether the element should be focused\n */\nexport function setElementFocus(\n el: HTMLElement, value = true\n): void {\n if (value)\n el.focus()\n else\n el.blur()\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch element focus\n *\n * @param el - Element\n *\n * @returns Element focus observable\n */\nexport function watchElementFocus(\n el: HTMLElement\n): Observable {\n return merge(\n fromEvent(el, \"focus\"),\n fromEvent(el, \"blur\")\n )\n .pipe(\n map(({ type }) => type === \"focus\"),\n startWith(el === getActiveElement())\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n NEVER,\n Observable,\n Subject,\n defer,\n of\n} from \"rxjs\"\nimport {\n filter,\n finalize,\n map,\n shareReplay,\n startWith,\n switchMap,\n tap\n} from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Element offset\n */\nexport interface ElementSize {\n width: number /* Element width */\n height: number /* Element height */\n}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Resize observer entry subject\n */\nconst entry$ = new Subject()\n\n/**\n * Resize observer observable\n *\n * This observable will create a `ResizeObserver` on the first subscription\n * and will automatically terminate it when there are no more subscribers.\n * It's quite important to centralize observation in a single `ResizeObserver`,\n * as the performance difference can be quite dramatic, as the link shows.\n *\n * @see https://bit.ly/3iIYfEm - Google Groups on performance\n */\nconst observer$ = defer(() => of(\n new ResizeObserver(entries => {\n for (const entry of entries)\n entry$.next(entry)\n })\n))\n .pipe(\n switchMap(resize => NEVER.pipe(startWith(resize))\n .pipe(\n finalize(() => resize.disconnect())\n )\n ),\n shareReplay(1)\n )\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve element size\n *\n * @param el - Element\n *\n * @returns Element size\n */\nexport function getElementSize(el: HTMLElement): ElementSize {\n return {\n width: el.offsetWidth,\n height: el.offsetHeight\n }\n}\n\n/**\n * Retrieve element content size, i.e. including overflowing content\n *\n * @param el - Element\n *\n * @returns Element size\n */\nexport function getElementContentSize(el: HTMLElement): ElementSize {\n return {\n width: el.scrollWidth,\n height: el.scrollHeight\n }\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch element size\n *\n * This function returns an observable that subscribes to a single internal\n * instance of `ResizeObserver` upon subscription, and emit resize events until\n * termination. Note that this function should not be called with the same\n * element twice, as the first unsubscription will terminate observation.\n *\n * Sadly, we can't use the `DOMRect` objects returned by the observer, because\n * we need the emitted values to be consistent with `getElementSize`, which will\n * return the used values (rounded) and not actual values (unrounded). Thus, we\n * use the `offset*` properties. See the linked GitHub issue.\n *\n * @see https://bit.ly/3m0k3he - GitHub issue\n *\n * @param el - Element\n *\n * @returns Element size observable\n */\nexport function watchElementSize(\n el: HTMLElement\n): Observable {\n return observer$\n .pipe(\n tap(observer => observer.observe(el)),\n switchMap(observer => entry$\n .pipe(\n filter(({ target }) => target === el),\n finalize(() => observer.unobserve(el)),\n map(() => getElementSize(el))\n )\n ),\n startWith(getElementSize(el))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, merge } from \"rxjs\"\nimport {\n distinctUntilChanged,\n map,\n startWith\n} from \"rxjs/operators\"\n\nimport {\n getElementContentSize,\n getElementSize\n} from \"../size\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Element offset\n */\nexport interface ElementOffset {\n x: number /* Horizontal offset */\n y: number /* Vertical offset */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve element offset\n *\n * @param el - Element\n *\n * @returns Element offset\n */\nexport function getElementOffset(el: HTMLElement): ElementOffset {\n return {\n x: el.scrollLeft,\n y: el.scrollTop\n }\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch element offset\n *\n * @param el - Element\n *\n * @returns Element offset observable\n */\nexport function watchElementOffset(\n el: HTMLElement\n): Observable {\n return merge(\n fromEvent(el, \"scroll\"),\n fromEvent(window, \"resize\")\n )\n .pipe(\n map(() => getElementOffset(el)),\n startWith(getElementOffset(el))\n )\n}\n\n/**\n * Watch element threshold\n *\n * This function returns an observable which emits whether the bottom scroll\n * offset of an elements is within a certain threshold.\n *\n * @param el - Element\n * @param threshold - Threshold\n *\n * @returns Element threshold observable\n */\nexport function watchElementThreshold(\n el: HTMLElement, threshold = 16\n): Observable {\n return watchElementOffset(el)\n .pipe(\n map(({ y }) => {\n const visible = getElementSize(el)\n const content = getElementContentSize(el)\n return y >= (\n content.height - visible.height - threshold\n )\n }),\n distinctUntilChanged()\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set element text selection\n *\n * @param el - Element\n */\nexport function setElementSelection(\n el: HTMLElement\n): void {\n if (el instanceof HTMLInputElement)\n el.select()\n else\n throw new Error(\"Not implemented\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent } from \"rxjs\"\nimport { map, startWith } from \"rxjs/operators\"\n\nimport { getElementOrThrow } from \"../element\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Toggle\n */\nexport type Toggle =\n | \"drawer\" /* Toggle for drawer */\n | \"search\" /* Toggle for search */\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Toggle map\n */\nconst toggles: Record = {\n drawer: getElementOrThrow(\"[data-md-toggle=drawer]\"),\n search: getElementOrThrow(\"[data-md-toggle=search]\")\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve the value of a toggle\n *\n * @param name - Toggle\n *\n * @returns Toggle value\n */\nexport function getToggle(name: Toggle): boolean {\n return toggles[name].checked\n}\n\n/**\n * Set toggle\n *\n * Simulating a click event seems to be the most cross-browser compatible way\n * of changing the value while also emitting a `change` event. Before, Material\n * used `CustomEvent` to programmatically change the value of a toggle, but this\n * is a much simpler and cleaner solution which doesn't require a polyfill.\n *\n * @param name - Toggle\n * @param value - Toggle value\n */\nexport function setToggle(name: Toggle, value: boolean): void {\n if (toggles[name].checked !== value)\n toggles[name].click()\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch toggle\n *\n * @param name - Toggle\n *\n * @returns Toggle value observable\n */\nexport function watchToggle(name: Toggle): Observable {\n const el = toggles[name]\n return fromEvent(el, \"change\")\n .pipe(\n map(() => el.checked),\n startWith(el.checked)\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent } from \"rxjs\"\nimport { filter, map, share } from \"rxjs/operators\"\n\nimport { getActiveElement } from \"../element\"\nimport { getToggle } from \"../toggle\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Keyboard mode\n */\nexport type KeyboardMode =\n | \"global\" /* Global */\n | \"search\" /* Search is open */\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Keyboard\n */\nexport interface Keyboard {\n mode: KeyboardMode /* Keyboard mode */\n type: string /* Key type */\n claim(): void /* Key claim */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Check whether an element may receive keyboard input\n *\n * @param el - Element\n *\n * @returns Test result\n */\nfunction isSusceptibleToKeyboard(el: HTMLElement): boolean {\n switch (el.tagName) {\n\n /* Form elements */\n case \"INPUT\":\n case \"SELECT\":\n case \"TEXTAREA\":\n return true\n\n /* Everything else */\n default:\n return el.isContentEditable\n }\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch keyboard\n *\n * @returns Keyboard observable\n */\nexport function watchKeyboard(): Observable {\n return fromEvent(window, \"keydown\")\n .pipe(\n filter(ev => !(ev.metaKey || ev.ctrlKey)),\n map(ev => ({\n mode: getToggle(\"search\") ? \"search\" : \"global\",\n type: ev.key,\n claim() {\n ev.preventDefault()\n ev.stopPropagation()\n }\n } as Keyboard)),\n filter(({ mode }) => {\n if (mode === \"global\") {\n const active = getActiveElement()\n if (typeof active !== \"undefined\")\n return !isSusceptibleToKeyboard(active)\n }\n return true\n }),\n share()\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Subject } from \"rxjs\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve location\n *\n * This function returns a `URL` object (and not `Location`) to normalize the\n * typings across the application. Furthermore, locations need to be tracked\n * without setting them and `Location` is a singleton which represents the\n * current location.\n *\n * @returns URL\n */\nexport function getLocation(): URL {\n return new URL(location.href)\n}\n\n/**\n * Set location\n *\n * @param url - URL to change to\n */\nexport function setLocation(url: URL): void {\n location.href = url.href\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch location\n *\n * @returns Location subject\n */\nexport function watchLocation(): Subject {\n return new Subject()\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, of } from \"rxjs\"\nimport { filter, map, share, startWith, switchMap } from \"rxjs/operators\"\n\nimport { createElement, getElement } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve location hash\n *\n * @returns Location hash\n */\nexport function getLocationHash(): string {\n return location.hash.substring(1)\n}\n\n/**\n * Set location hash\n *\n * Setting a new fragment identifier via `location.hash` will have no effect\n * if the value doesn't change. When a new fragment identifier is set, we want\n * the browser to target the respective element at all times, which is why we\n * use this dirty little trick.\n *\n * @param hash - Location hash\n */\nexport function setLocationHash(hash: string): void {\n const el = createElement(\"a\")\n el.href = hash\n el.addEventListener(\"click\", ev => ev.stopPropagation())\n el.click()\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch location hash\n *\n * @returns Location hash observable\n */\nexport function watchLocationHash(): Observable {\n return fromEvent(window, \"hashchange\")\n .pipe(\n map(getLocationHash),\n startWith(getLocationHash()),\n filter(hash => hash.length > 0),\n share()\n )\n}\n\n/**\n * Watch location target\n *\n * @returns Location target observable\n */\nexport function watchLocationTarget(): Observable {\n return watchLocationHash()\n .pipe(\n switchMap(id => of(getElement(`[id=\"${id}\"]`)!))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n NEVER,\n Observable,\n fromEvent,\n fromEventPattern\n} from \"rxjs\"\nimport {\n mapTo,\n startWith,\n switchMap\n} from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch media query\n *\n * Note that although `MediaQueryList.addListener` is deprecated we have to\n * use it, because it's the only way to ensure proper downward compatibility.\n *\n * @see https://bit.ly/3dUBH2m - GitHub issue\n *\n * @param query - Media query\n *\n * @returns Media observable\n */\nexport function watchMedia(query: string): Observable {\n const media = matchMedia(query)\n return fromEventPattern(next => (\n media.addListener(() => next(media.matches))\n ))\n .pipe(\n startWith(media.matches)\n )\n}\n\n/**\n * Watch print mode, cross-browser\n *\n * @returns Print mode observable\n */\nexport function watchPrint(): Observable {\n return fromEvent(window, \"beforeprint\")\n .pipe(\n mapTo(undefined)\n )\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Toggle an observable with a media observable\n *\n * @template T - Data type\n *\n * @param query$ - Media observable\n * @param factory - Observable factory\n *\n * @returns Toggled observable\n */\nexport function at(\n query$: Observable, factory: () => Observable\n): Observable {\n return query$\n .pipe(\n switchMap(active => active ? factory() : NEVER)\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, from } from \"rxjs\"\nimport {\n filter,\n map,\n shareReplay,\n switchMap\n} from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Fetch the given URL\n *\n * @param url - Request URL\n * @param options - Options\n *\n * @returns Response observable\n */\nexport function request(\n url: URL | string, options: RequestInit = { credentials: \"same-origin\" }\n): Observable {\n return from(fetch(`${url}`, options))\n .pipe(\n filter(res => res.status === 200),\n )\n}\n\n/**\n * Fetch JSON from the given URL\n *\n * @template T - Data type\n *\n * @param url - Request URL\n * @param options - Options\n *\n * @returns Data observable\n */\nexport function requestJSON(\n url: URL | string, options?: RequestInit\n): Observable {\n return request(url, options)\n .pipe(\n switchMap(res => res.json()),\n shareReplay(1)\n )\n}\n\n/**\n * Fetch XML from the given URL\n *\n * @param url - Request URL\n * @param options - Options\n *\n * @returns Data observable\n */\nexport function requestXML(\n url: URL | string, options?: RequestInit\n): Observable {\n const dom = new DOMParser()\n return request(url, options)\n .pipe(\n switchMap(res => res.text()),\n map(res => dom.parseFromString(res, \"text/xml\")),\n shareReplay(1)\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, merge } from \"rxjs\"\nimport { map, startWith } from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Viewport offset\n */\nexport interface ViewportOffset {\n x: number /* Horizontal offset */\n y: number /* Vertical offset */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve viewport offset\n *\n * On iOS Safari, viewport offset can be negative due to overflow scrolling.\n * As this may induce strange behaviors downstream, we'll just limit it to 0.\n *\n * @returns Viewport offset\n */\nexport function getViewportOffset(): ViewportOffset {\n return {\n x: Math.max(0, pageXOffset),\n y: Math.max(0, pageYOffset)\n }\n}\n\n/**\n * Set viewport offset\n *\n * @param offset - Viewport offset\n */\nexport function setViewportOffset(\n { x, y }: Partial\n): void {\n window.scrollTo(x || 0, y || 0)\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch viewport offset\n *\n * @returns Viewport offset observable\n */\nexport function watchViewportOffset(): Observable {\n return merge(\n fromEvent(window, \"scroll\", { passive: true }),\n fromEvent(window, \"resize\", { passive: true })\n )\n .pipe(\n map(getViewportOffset),\n startWith(getViewportOffset())\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent } from \"rxjs\"\nimport { map, startWith } from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Viewport size\n */\nexport interface ViewportSize {\n width: number /* Viewport width */\n height: number /* Viewport height */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve viewport size\n *\n * @returns Viewport size\n */\nexport function getViewportSize(): ViewportSize {\n return {\n width: innerWidth,\n height: innerHeight\n }\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Watch viewport size\n *\n * @returns Viewport size observable\n */\nexport function watchViewportSize(): Observable {\n return fromEvent(window, \"resize\", { passive: true })\n .pipe(\n map(getViewportSize),\n startWith(getViewportSize())\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, combineLatest } from \"rxjs\"\nimport {\n distinctUntilKeyChanged,\n map,\n shareReplay\n} from \"rxjs/operators\"\n\nimport { Header } from \"~/components\"\n\nimport {\n ViewportOffset,\n watchViewportOffset\n} from \"../offset\"\nimport {\n ViewportSize,\n watchViewportSize\n} from \"../size\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Viewport\n */\nexport interface Viewport {\n offset: ViewportOffset /* Viewport offset */\n size: ViewportSize /* Viewport size */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch at options\n */\ninterface WatchAtOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
/* Header observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch viewport\n *\n * @returns Viewport observable\n */\nexport function watchViewport(): Observable {\n return combineLatest([\n watchViewportOffset(),\n watchViewportSize()\n ])\n .pipe(\n map(([offset, size]) => ({ offset, size })),\n shareReplay(1)\n )\n}\n\n/**\n * Watch viewport relative to element\n *\n * @param el - Element\n * @param options - Options\n *\n * @returns Viewport observable\n */\nexport function watchViewportAt(\n el: HTMLElement, { viewport$, header$ }: WatchAtOptions\n): Observable {\n const size$ = viewport$\n .pipe(\n distinctUntilKeyChanged(\"size\")\n )\n\n /* Compute element offset */\n const offset$ = combineLatest([size$, header$])\n .pipe(\n map((): ViewportOffset => ({\n x: el.offsetLeft,\n y: el.offsetTop\n }))\n )\n\n /* Compute relative viewport, return hot observable */\n return combineLatest([header$, viewport$, offset$])\n .pipe(\n map(([{ height }, { offset, size }, { x, y }]) => ({\n offset: {\n x: offset.x - x,\n y: offset.y - y + height\n },\n size\n }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, Subject, fromEvent } from \"rxjs\"\nimport {\n map,\n share,\n switchMapTo,\n tap,\n throttle\n} from \"rxjs/operators\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Worker message\n */\nexport interface WorkerMessage {\n type: unknown /* Message type */\n data?: unknown /* Message data */\n}\n\n/**\n * Worker handler\n *\n * @template T - Message type\n */\nexport interface WorkerHandler<\n T extends WorkerMessage\n> {\n tx$: Subject /* Message transmission subject */\n rx$: Observable /* Message receive observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n *\n * @template T - Worker message type\n */\ninterface WatchOptions {\n tx$: Observable /* Message transmission observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch a web worker\n *\n * This function returns an observable that sends all values emitted by the\n * message observable to the web worker. Web worker communication is expected\n * to be bidirectional (request-response) and synchronous. Messages that are\n * emitted during a pending request are throttled, the last one is emitted.\n *\n * @param worker - Web worker\n * @param options - Options\n *\n * @returns Worker message observable\n */\nexport function watchWorker(\n worker: Worker, { tx$ }: WatchOptions\n): Observable {\n\n /* Intercept messages from worker-like objects */\n const rx$ = fromEvent(worker, \"message\")\n .pipe(\n map(({ data }) => data as T)\n )\n\n /* Send and receive messages, return hot observable */\n return tx$\n .pipe(\n throttle(() => rx$, { leading: true, trailing: true }),\n tap(message => worker.postMessage(message)),\n switchMapTo(rx$),\n share()\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { getElementOrThrow, getLocation } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Feature flag\n */\nexport type Flag =\n | \"header.autohide\" /* Hide header */\n | \"navigation.expand\" /* Automatic expansion */\n | \"navigation.instant\" /* Instant loading */\n | \"navigation.sections\" /* Sections navigation */\n | \"navigation.tabs\" /* Tabs navigation */\n | \"navigation.top\" /* Back-to-top button */\n | \"toc.integrate\" /* Integrated table of contents */\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Translation\n */\nexport type Translation =\n | \"clipboard.copy\" /* Copy to clipboard */\n | \"clipboard.copied\" /* Copied to clipboard */\n | \"search.config.lang\" /* Search language */\n | \"search.config.pipeline\" /* Search pipeline */\n | \"search.config.separator\" /* Search separator */\n | \"search.placeholder\" /* Search */\n | \"search.result.placeholder\" /* Type to start searching */\n | \"search.result.none\" /* No matching documents */\n | \"search.result.one\" /* 1 matching document */\n | \"search.result.other\" /* # matching documents */\n | \"search.result.more.one\" /* 1 more on this page */\n | \"search.result.more.other\" /* # more on this page */\n | \"search.result.term.missing\" /* Missing */\n\n/**\n * Translations\n */\nexport type Translations = Record\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Versioning\n */\nexport interface Versioning {\n provider: \"mike\" /* Version provider */\n}\n\n/**\n * Configuration\n */\nexport interface Config {\n base: string /* Base URL */\n features: Flag[] /* Feature flags */\n translations: Translations /* Translations */\n search: string /* Search worker URL */\n version?: Versioning /* Versioning */\n}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve global configuration and make base URL absolute\n */\nconst script = getElementOrThrow(\"#__config\")\nconst config: Config = JSON.parse(script.textContent!)\nconfig.base = new URL(config.base, getLocation())\n .toString()\n .replace(/\\/$/, \"\")\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve global configuration\n *\n * @returns Global configuration\n */\nexport function configuration(): Config {\n return config\n}\n\n/**\n * Check whether a feature flag is enabled\n *\n * @param flag - Feature flag\n *\n * @returns Test result\n */\nexport function feature(flag: Flag): boolean {\n return config.features.includes(flag)\n}\n\n/**\n * Retrieve the translation for the given key\n *\n * @param key - Key to be translated\n * @param value - Positional value, if any\n *\n * @returns Translation\n */\nexport function translation(\n key: Translation, value?: string | number\n): string {\n return typeof value !== \"undefined\"\n ? config.translations[key].replace(\"#\", value.toString())\n : config.translations[key]\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { getElementOrThrow, getElements } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Component\n */\nexport type ComponentType =\n | \"announce\" /* Announcement bar */\n | \"container\" /* Container */\n | \"content\" /* Content */\n | \"dialog\" /* Dialog */\n | \"header\" /* Header */\n | \"header-title\" /* Header title */\n | \"header-topic\" /* Header topic */\n | \"main\" /* Main area */\n | \"palette\" /* Color palette */\n | \"search\" /* Search */\n | \"search-query\" /* Search input */\n | \"search-result\" /* Search results */\n | \"sidebar\" /* Sidebar */\n | \"skip\" /* Skip link */\n | \"source\" /* Repository information */\n | \"tabs\" /* Navigation tabs */\n | \"toc\" /* Table of contents */\n | \"top\" /* Back-to-top button */\n\n/**\n * A component\n *\n * @template T - Component type\n * @template U - Reference type\n */\nexport type Component<\n T extends {} = {},\n U extends HTMLElement = HTMLElement\n> =\n T & {\n ref: U /* Component reference */\n }\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Component type map\n */\ninterface ComponentTypeMap {\n \"announce\": HTMLElement /* Announcement bar */\n \"container\": HTMLElement /* Container */\n \"content\": HTMLElement /* Content */\n \"dialog\": HTMLElement /* Dialog */\n \"header\": HTMLElement /* Header */\n \"header-title\": HTMLElement /* Header title */\n \"header-topic\": HTMLElement /* Header topic */\n \"main\": HTMLElement /* Main area */\n \"palette\": HTMLElement /* Color palette */\n \"search\": HTMLElement /* Search */\n \"search-query\": HTMLInputElement /* Search input */\n \"search-result\": HTMLElement /* Search results */\n \"sidebar\": HTMLElement /* Sidebar */\n \"skip\": HTMLAnchorElement /* Skip link */\n \"source\": HTMLAnchorElement /* Repository information */\n \"tabs\": HTMLElement /* Navigation tabs */\n \"toc\": HTMLElement /* Table of contents */\n \"top\": HTMLAnchorElement /* Back-to-top button */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Retrieve the element for a given component or throw a reference error\n *\n * @template T - Component type\n *\n * @param type - Component type\n * @param node - Node of reference\n *\n * @returns Element\n */\nexport function getComponentElement(\n type: T, node: ParentNode = document\n): ComponentTypeMap[T] {\n return getElementOrThrow(`[data-md-component=${type}]`, node)\n}\n\n/**\n * Retrieve all elements for a given component\n *\n * @template T - Component type\n *\n * @param type - Component type\n * @param node - Node of reference\n *\n * @returns Elements\n */\nexport function getComponentElements(\n type: T, node: ParentNode = document\n): ComponentTypeMap[T][] {\n return getElements(`[data-md-component=${type}]`, node)\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport ClipboardJS from \"clipboard\"\nimport {\n NEVER,\n Observable,\n Subject,\n fromEvent,\n merge,\n of\n} from \"rxjs\"\nimport {\n distinctUntilKeyChanged,\n finalize,\n map,\n switchMap,\n tap,\n withLatestFrom\n} from \"rxjs/operators\"\n\nimport { resetFocusable, setFocusable } from \"~/actions\"\nimport {\n Viewport,\n getElementContentSize,\n getElementSize,\n getElements,\n watchMedia\n} from \"~/browser\"\nimport { renderClipboardButton } from \"~/templates\"\n\nimport { Component } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Code block\n */\nexport interface CodeBlock {\n scroll: boolean /* Code block overflows */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Global index for Clipboard.js integration\n */\nlet index = 0\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch code block\n *\n * This function monitors size changes of the viewport, as well as switches of\n * content tabs with embedded code blocks, as both may trigger overflow.\n *\n * @param el - Code block element\n * @param options - Options\n *\n * @returns Code block observable\n */\nexport function watchCodeBlock(\n el: HTMLElement, { viewport$ }: WatchOptions\n): Observable {\n const container$ = of(el)\n .pipe(\n switchMap(child => {\n const container = child.closest(\"[data-tabs]\")\n if (container instanceof HTMLElement) {\n return merge(\n ...getElements(\"input\", container)\n .map(input => fromEvent(input, \"change\"))\n )\n }\n return NEVER\n })\n )\n\n /* Check overflow on resize and tab change */\n return merge(\n viewport$.pipe(distinctUntilKeyChanged(\"size\")),\n container$\n )\n .pipe(\n map(() => {\n const visible = getElementSize(el)\n const content = getElementContentSize(el)\n return {\n scroll: content.width > visible.width\n }\n }),\n distinctUntilKeyChanged(\"scroll\")\n )\n}\n\n/**\n * Mount code block\n *\n * This function ensures that an overflowing code block is focusable through\n * keyboard, so it can be scrolled without a mouse to improve on accessibility.\n *\n * @param el - Code block element\n * @param options - Options\n *\n * @returns Code block component observable\n */\nexport function mountCodeBlock(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n withLatestFrom(watchMedia(\"(hover)\"))\n )\n .subscribe(([{ scroll }, hover]) => {\n if (scroll && hover)\n setFocusable(el)\n else\n resetFocusable(el)\n })\n\n /* Render button for Clipboard.js integration */\n if (ClipboardJS.isSupported()) {\n const parent = el.closest(\"pre\")!\n parent.id = `__code_${index++}`\n parent.insertBefore(\n renderClipboardButton(parent.id),\n el\n )\n }\n\n /* Create and return component */\n return watchCodeBlock(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set focusable property\n *\n * @param el - Element\n * @param value - Tabindex value\n */\nexport function setFocusable(\n el: HTMLElement, value = 0\n): void {\n el.setAttribute(\"tabindex\", value.toString())\n}\n\n/**\n * Reset focusable property\n *\n * @param el - Element\n */\nexport function resetFocusable(\n el: HTMLElement\n): void {\n el.removeAttribute(\"tabindex\")\n}\n\n/**\n * Set scroll lock\n *\n * @param el - Scrollable element\n * @param value - Vertical offset\n */\nexport function setScrollLock(\n el: HTMLElement, value: number\n): void {\n el.setAttribute(\"data-md-state\", \"lock\")\n el.style.top = `-${value}px`\n}\n\n/**\n * Reset scroll lock\n *\n * @param el - Scrollable element\n */\nexport function resetScrollLock(\n el: HTMLElement\n): void {\n const value = -1 * parseInt(el.style.top, 10)\n el.removeAttribute(\"data-md-state\")\n el.style.top = \"\"\n if (value)\n window.scrollTo(0, value)\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set anchor state\n *\n * @param el - Anchor element\n * @param state - Anchor state\n */\nexport function setAnchorState(\n el: HTMLElement, state: \"blur\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset anchor state\n *\n * @param el - Anchor element\n */\nexport function resetAnchorState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Set anchor active\n *\n * @param el - Anchor element\n * @param value - Whether the anchor is active\n */\nexport function setAnchorActive(\n el: HTMLElement, value: boolean\n): void {\n el.classList.toggle(\"md-nav__link--active\", value)\n}\n\n/**\n * Reset anchor active\n *\n * @param el - Anchor element\n */\nexport function resetAnchorActive(\n el: HTMLElement\n): void {\n el.classList.remove(\"md-nav__link--active\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set dialog message\n *\n * @param el - Dialog element\n * @param value - Dialog message\n */\nexport function setDialogMessage(\n el: HTMLElement, value: string\n): void {\n el.firstElementChild!.innerHTML = value\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Set dialog state\n *\n * @param el - Dialog element\n * @param state - Dialog state\n */\nexport function setDialogState(\n el: HTMLElement, state: \"open\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset dialog state\n *\n * @param el - Dialog element\n */\nexport function resetDialogState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set header state\n *\n * @param el - Header element\n * @param state - Header state\n */\nexport function setHeaderState(\n el: HTMLElement, state: \"shadow\" | \"hidden\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset header state\n *\n * @param el - Header element\n */\nexport function resetHeaderState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set header title state\n *\n * @param el - Header title element\n * @param state - Header title state\n */\nexport function setHeaderTitleState(\n el: HTMLElement, state: \"active\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset header title state\n *\n * @param el - Header title element\n */\nexport function resetHeaderTitleState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { translation } from \"~/_\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set search query placeholder\n *\n * @param el - Search query element\n * @param value - Placeholder\n */\nexport function setSearchQueryPlaceholder(\n el: HTMLInputElement, value: string\n): void {\n el.placeholder = value\n}\n\n/**\n * Reset search query placeholder\n *\n * @param el - Search query element\n */\nexport function resetSearchQueryPlaceholder(\n el: HTMLInputElement\n): void {\n el.placeholder = translation(\"search.placeholder\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { JSX as JSXInternal } from \"preact\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * HTML attributes\n */\ntype Attributes =\n & JSXInternal.HTMLAttributes\n & JSXInternal.SVGAttributes\n & Record\n\n/**\n * Child element\n */\ntype Child =\n | HTMLElement\n | Text\n | string\n | number\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Append a child node to an element\n *\n * @param el - Element\n * @param child - Child node(s)\n */\nfunction appendChild(el: HTMLElement, child: Child | Child[]): void {\n\n /* Handle primitive types (including raw HTML) */\n if (typeof child === \"string\" || typeof child === \"number\") {\n el.innerHTML += child.toString()\n\n /* Handle nodes */\n } else if (child instanceof Node) {\n el.appendChild(child)\n\n /* Handle nested children */\n } else if (Array.isArray(child)) {\n for (const node of child)\n appendChild(el, node)\n }\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * JSX factory\n *\n * @param tag - HTML tag\n * @param attributes - HTML attributes\n * @param children - Child elements\n *\n * @returns Element\n */\nexport function h(\n tag: string, attributes: Attributes | null, ...children: Child[]\n): HTMLElement {\n const el = document.createElement(tag)\n\n /* Set attributes, if any */\n if (attributes)\n for (const attr of Object.keys(attributes))\n if (typeof attributes[attr] !== \"boolean\")\n el.setAttribute(attr, attributes[attr])\n else if (attributes[attr])\n el.setAttribute(attr, \"\")\n\n /* Append child nodes */\n for (const child of children)\n appendChild(el, child)\n\n /* Return element */\n return el\n}\n\n/* ----------------------------------------------------------------------------\n * Namespace\n * ------------------------------------------------------------------------- */\n\nexport declare namespace h {\n namespace JSX {\n type Element = HTMLElement\n type IntrinsicElements = JSXInternal.IntrinsicElements\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Truncate a string after the given number of characters\n *\n * This is not a very reasonable approach, since the summaries kind of suck.\n * It would be better to create something more intelligent, highlighting the\n * search occurrences and making a better summary out of it, but this note was\n * written three years ago, so who knows if we'll ever fix it.\n *\n * @param value - Value to be truncated\n * @param n - Number of characters\n *\n * @returns Truncated value\n */\nexport function truncate(value: string, n: number): string {\n let i = n\n if (value.length > i) {\n while (value[i] !== \" \" && --i > 0) { /* keep eating */ }\n return `${value.substring(0, i)}...`\n }\n return value\n}\n\n/**\n * Round a number for display with repository facts\n *\n * This is a reverse-engineered version of GitHub's weird rounding algorithm\n * for stars, forks and all other numbers. While all numbers below `1,000` are\n * returned as-is, bigger numbers are converted to fixed numbers:\n *\n * - `1,049` => `1k`\n * - `1,050` => `1.1k`\n * - `1,949` => `1.9k`\n * - `1,950` => `2k`\n *\n * @param value - Original value\n *\n * @returns Rounded value\n */\nexport function round(value: number): string {\n if (value > 999) {\n const digits = +((value - 950) % 1000 > 99)\n return `${((value + 0.000001) / 1000).toFixed(digits)}k`\n } else {\n return value.toString()\n }\n}\n\n/**\n * Simple hash function\n *\n * @see https://bit.ly/2wsVjJ4 - Original source\n *\n * @param value - Value to be hashed\n *\n * @returns Hash as 32bit integer\n */\nexport function hash(value: string): number {\n let h = 0\n for (let i = 0, len = value.length; i < len; i++) {\n h = ((h << 5) - h) + value.charCodeAt(i)\n h |= 0 // Convert to 32bit integer\n }\n return h\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { translation } from \"~/_\"\nimport { round } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set number of search results\n *\n * @param el - Search result metadata element\n * @param value - Number of results\n */\nexport function setSearchResultMeta(\n el: HTMLElement, value: number\n): void {\n switch (value) {\n\n /* No results */\n case 0:\n el.textContent = translation(\"search.result.none\")\n break\n\n /* One result */\n case 1:\n el.textContent = translation(\"search.result.one\")\n break\n\n /* Multiple result */\n default:\n el.textContent = translation(\"search.result.other\", round(value))\n }\n}\n\n/**\n * Reset number of search results\n *\n * @param el - Search result metadata element\n */\nexport function resetSearchResultMeta(\n el: HTMLElement\n): void {\n el.textContent = translation(\"search.result.placeholder\")\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Add an element to the search result list\n *\n * @param el - Search result list element\n * @param child - Search result element\n */\nexport function addToSearchResultList(\n el: HTMLElement, child: Element\n): void {\n el.appendChild(child)\n}\n\n/**\n * Reset search result list\n *\n * @param el - Search result list element\n */\nexport function resetSearchResultList(\n el: HTMLElement\n): void {\n el.innerHTML = \"\"\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set sidebar offset\n *\n * @param el - Sidebar element\n * @param value - Sidebar offset\n */\nexport function setSidebarOffset(\n el: HTMLElement, value: number\n): void {\n el.style.top = `${value}px`\n}\n\n/**\n * Reset sidebar offset\n *\n * @param el - Sidebar element\n */\nexport function resetSidebarOffset(\n el: HTMLElement\n): void {\n el.style.top = \"\"\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Set sidebar height\n *\n * This function doesn't set the height of the actual sidebar, but of its first\n * child \u2013 the `.md-sidebar__scrollwrap` element in order to mitigiate jittery\n * sidebars when the footer is scrolled into view. At some point we switched\n * from `absolute` / `fixed` positioning to `sticky` positioning, significantly\n * reducing jitter in some browsers (respectively Firefox and Safari) when\n * scrolling from the top. However, top-aligned sticky positioning means that\n * the sidebar snaps to the bottom when the end of the container is reached.\n * This is what leads to the mentioned jitter, as the sidebar's height may be\n * updated too slowly.\n *\n * This behaviour can be mitigiated by setting the height of the sidebar to `0`\n * while preserving the padding, and the height on its first element.\n *\n * @param el - Sidebar element\n * @param value - Sidebar height\n */\nexport function setSidebarHeight(\n el: HTMLElement, value: number\n): void {\n const scrollwrap = el.firstElementChild as HTMLElement\n scrollwrap.style.height = `${value - 2 * scrollwrap.offsetTop}px`\n}\n\n/**\n * Reset sidebar height\n *\n * @param el - Sidebar element\n */\nexport function resetSidebarHeight(\n el: HTMLElement\n): void {\n const scrollwrap = el.firstElementChild as HTMLElement\n scrollwrap.style.height = \"\"\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set repository facts\n *\n * @param el - Repository element\n * @param child - Repository facts element\n */\nexport function setSourceFacts(\n el: HTMLElement, child: Element\n): void {\n el.lastElementChild!.appendChild(child)\n}\n\n/**\n * Set repository state\n *\n * @param el - Repository element\n * @param state - Repository state\n */\nexport function setSourceState(\n el: HTMLElement, state: \"done\"\n): void {\n el.lastElementChild!.setAttribute(\"data-md-state\", state)\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set tabs state\n *\n * @param el - Tabs element\n * @param state - Tabs state\n */\nexport function setTabsState(\n el: HTMLElement, state: \"hidden\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset tabs state\n *\n * @param el - Tabs element\n */\nexport function resetTabsState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set back-to-top state\n *\n * @param el - Back-to-top element\n * @param state - Back-to-top state\n */\nexport function setBackToTopState(\n el: HTMLElement, state: \"hidden\"\n): void {\n el.setAttribute(\"data-md-state\", state)\n}\n\n/**\n * Reset back-to-top state\n *\n * @param el - Back-to-top element\n */\nexport function resetBackToTopState(\n el: HTMLElement\n): void {\n el.removeAttribute(\"data-md-state\")\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { translation } from \"~/_\"\nimport { h } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a 'copy-to-clipboard' button\n *\n * @param id - Unique identifier\n *\n * @returns Element\n */\nexport function renderClipboardButton(id: string): HTMLElement {\n return (\n code`}\n >\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { translation } from \"~/_\"\nimport {\n SearchDocument,\n SearchMetadata,\n SearchResult\n} from \"~/integrations/search\"\nimport { h, truncate } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Render flag\n */\nconst enum Flag {\n TEASER = 1, /* Render teaser */\n PARENT = 2 /* Render as parent */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper function\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a search document\n *\n * @param document - Search document\n * @param flag - Render flags\n *\n * @returns Element\n */\nfunction renderSearchDocument(\n document: SearchDocument & SearchMetadata, flag: Flag\n): HTMLElement {\n const parent = flag & Flag.PARENT\n const teaser = flag & Flag.TEASER\n\n /* Render missing query terms */\n const missing = Object.keys(document.terms)\n .filter(key => !document.terms[key])\n .map(key => [{key}, \" \"])\n .flat()\n .slice(0, -1)\n\n /* Render article or section, depending on flags */\n const url = document.location\n return (\n \n \n {parent > 0 &&
}\n

{document.title}

\n {teaser > 0 && document.text.length > 0 &&\n

\n {truncate(document.text, 320)}\n

\n }\n {teaser > 0 && missing.length > 0 &&\n

\n {translation(\"search.result.term.missing\")}: {...missing}\n

\n }\n \n \n )\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a search result\n *\n * @param result - Search result\n *\n * @returns Element\n */\nexport function renderSearchResult(\n result: SearchResult\n): HTMLElement {\n const threshold = result[0].score\n const docs = [...result]\n\n /* Find and extract parent article */\n const parent = docs.findIndex(doc => !doc.location.includes(\"#\"))\n const [article] = docs.splice(parent, 1)\n\n /* Determine last index above threshold */\n let index = docs.findIndex(doc => doc.score < threshold)\n if (index === -1)\n index = docs.length\n\n /* Partition sections */\n const best = docs.slice(0, index)\n const more = docs.slice(index)\n\n /* Render children */\n const children = [\n renderSearchDocument(article, Flag.PARENT | +(!parent && index === 0)),\n ...best.map(section => renderSearchDocument(section, Flag.TEASER)),\n ...more.length ? [\n
\n \n {more.length > 0 && more.length === 1\n ? translation(\"search.result.more.one\")\n : translation(\"search.result.more.other\", more.length)\n }\n \n {...more.map(section => renderSearchDocument(section, Flag.TEASER))}\n
\n ] : []\n ]\n\n /* Render search result */\n return (\n
  • \n {children}\n
    • \n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { SourceFacts } from \"~/components\"\nimport { h, round } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render repository facts\n *\n * @param facts - Repository facts\n *\n * @returns Element\n */\nexport function renderSourceFacts(facts: SourceFacts): HTMLElement {\n return (\n
      \n {Object.entries(facts).map(([key, value]) => (\n
    • \n {typeof value === \"number\" ? round(value) : value}\n
      • \n ))}\n
    \n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { h } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a table inside a wrapper to improve scrolling on mobile\n *\n * @param table - Table element\n *\n * @returns Element\n */\nexport function renderTable(table: HTMLElement): HTMLElement {\n return (\n
    \n
    \n {table}\n
    \n
    \n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { configuration } from \"~/_\"\nimport { h } from \"~/utilities\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Version\n */\nexport interface Version {\n version: string /* Version identifier */\n title: string /* Version title */\n aliases: string[] /* Version aliases */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a version\n *\n * @param version - Version\n *\n * @returns Element\n */\nfunction renderVersion(version: Version): HTMLElement {\n const config = configuration()\n\n /* Ensure trailing slash, see https://bit.ly/3rL5u3f */\n const url = new URL(`${version.version}/`, config.base)\n return (\n
  • \n \n {version.title}\n \n
    • \n )\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Render a version selector\n *\n * @param versions - Versions\n *\n * @returns Element\n */\nexport function renderVersionSelector(versions: Version[]): HTMLElement {\n const config = configuration()\n\n /* Determine active version */\n const [, current] = config.base.match(/([^/]+)\\/?$/)!\n const active =\n versions.find(({ version, aliases }) => (\n version === current || aliases.includes(current)\n )) || versions[0]\n\n /* Render version selector */\n return (\n
    \n \n
      \n {versions.map(renderVersion)}\n
    \n
    \n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, Subject } from \"rxjs\"\nimport {\n filter,\n finalize,\n map,\n mapTo,\n mergeWith,\n tap\n} from \"rxjs/operators\"\n\nimport { Component } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Details\n */\nexport interface Details {}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n target$: Observable /* Location target observable */\n print$: Observable /* Print mode observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n target$: Observable /* Location target observable */\n print$: Observable /* Print mode observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch details\n *\n * @param el - Details element\n * @param options - Options\n *\n * @returns Details observable\n */\nexport function watchDetails(\n el: HTMLDetailsElement, { target$, print$ }: WatchOptions\n): Observable
    {\n return target$\n .pipe(\n map(target => target.closest(\"details:not([open])\")!),\n filter(details => el === details),\n mergeWith(print$),\n mapTo(el)\n )\n}\n\n/**\n * Mount details\n *\n * This function ensures that `details` tags are opened on anchor jumps and\n * prior to printing, so the whole content of the page is visible.\n *\n * @param el - Details element\n * @param options - Options\n *\n * @returns Details component observable\n */\nexport function mountDetails(\n el: HTMLDetailsElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject
    ()\n internal$.subscribe(() => {\n el.setAttribute(\"open\", \"\")\n el.scrollIntoView()\n })\n\n /* Create and return component */\n return watchDetails(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n mapTo({ ref: el })\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, of } from \"rxjs\"\n\nimport { createElement, replaceElement } from \"~/browser\"\nimport { renderTable } from \"~/templates\"\n\nimport { Component } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Data table\n */\nexport interface DataTable {}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Sentinel for replacement\n */\nconst sentinel = createElement(\"table\")\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount data table\n *\n * This function wraps a data table in another scrollable container, so it can\n * be smoothly scrolled on smaller screen sizes and won't break the layout.\n *\n * @param el - Data table element\n *\n * @returns Data table component observable\n */\nexport function mountDataTable(\n el: HTMLElement\n): Observable> {\n replaceElement(el, sentinel)\n replaceElement(sentinel, renderTable(el))\n\n /* Create and return component */\n return of({ ref: el })\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, merge } from \"rxjs\"\n\nimport { Viewport, getElements } from \"~/browser\"\n\nimport { Component } from \"../../_\"\nimport { CodeBlock, mountCodeBlock } from \"../code\"\nimport { Details, mountDetails } from \"../details\"\nimport { DataTable, mountDataTable } from \"../table\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Content\n */\nexport type Content =\n | CodeBlock\n | DataTable\n | Details\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount options\n */\ninterface MountOptions {\n target$: Observable /* Location target observable */\n viewport$: Observable /* Viewport observable */\n print$: Observable /* Print mode observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount content\n *\n * This function mounts all components that are found in the content of the\n * actual article, including code blocks, data tables and details.\n *\n * @param el - Content element\n * @param options - Options\n *\n * @returns Content component observable\n */\nexport function mountContent(\n el: HTMLElement, { target$, viewport$, print$ }: MountOptions\n): Observable> {\n return merge(\n\n /* Code blocks */\n ...getElements(\"pre > code\", el)\n .map(child => mountCodeBlock(child, { viewport$ })),\n\n /* Data tables */\n ...getElements(\"table:not([class])\", el)\n .map(child => mountDataTable(child)),\n\n /* Details */\n ...getElements(\"details\", el)\n .map(child => mountDetails(child, { target$, print$ }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n merge,\n of\n} from \"rxjs\"\nimport {\n delay,\n finalize,\n map,\n observeOn,\n switchMap,\n tap\n} from \"rxjs/operators\"\n\nimport {\n resetDialogState,\n setDialogMessage,\n setDialogState\n} from \"~/actions\"\n\nimport { Component } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Dialog\n */\nexport interface Dialog {\n message: string /* Dialog message */\n open: boolean /* Dialog is visible */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n alert$: Subject /* Alert subject */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n alert$: Subject /* Alert subject */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch dialog\n *\n * @param _el - Dialog element\n * @param options - Options\n *\n * @returns Dialog observable\n */\nexport function watchDialog(\n _el: HTMLElement, { alert$ }: WatchOptions\n): Observable {\n return alert$\n .pipe(\n switchMap(message => merge(\n of(true),\n of(false).pipe(delay(2000))\n )\n .pipe(\n map(open => ({ message, open }))\n )\n )\n )\n}\n\n/**\n * Mount dialog\n *\n * This function reveals the dialog in the right cornerwhen a new alert is\n * emitted through the subject that is passed as part of the options.\n *\n * @param el - Dialog element\n * @param options - Options\n *\n * @returns Dialog component observable\n */\nexport function mountDialog(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler)\n )\n .subscribe(({ message, open }) => {\n setDialogMessage(el, message)\n if (open)\n setDialogState(el, \"open\")\n else\n resetDialogState(el)\n })\n\n /* Create and return component */\n return watchDialog(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n combineLatest,\n defer,\n of\n} from \"rxjs\"\nimport {\n bufferCount,\n combineLatestWith,\n distinctUntilChanged,\n distinctUntilKeyChanged,\n filter,\n map,\n observeOn,\n shareReplay,\n startWith,\n switchMap\n} from \"rxjs/operators\"\n\nimport { feature } from \"~/_\"\nimport { resetHeaderState, setHeaderState } from \"~/actions\"\nimport {\n Viewport,\n watchElementSize,\n watchToggle\n} from \"~/browser\"\n\nimport { Component } from \"../../_\"\nimport { Main } from \"../../main\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Header\n */\nexport interface Header {\n height: number /* Header visible height */\n sticky: boolean /* Header stickyness */\n hidden: boolean /* User scrolled past threshold */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n main$: Observable
    /* Main area observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Compute whether the header is hidden\n *\n * If the user scrolls past a certain threshold, the header can be hidden when\n * scrolling down, and shown when scrolling up.\n *\n * @param options - Options\n *\n * @returns Toggle observable\n */\nfunction isHidden({ viewport$ }: WatchOptions): Observable {\n if (!feature(\"header.autohide\"))\n return of(false)\n\n /* Compute direction and turning point */\n const direction$ = viewport$\n .pipe(\n map(({ offset: { y } }) => y),\n bufferCount(2, 1),\n map(([a, b]) => [a < b, b] as const),\n distinctUntilKeyChanged(0)\n )\n\n /* Compute whether header should be hidden */\n const hidden$ = combineLatest([viewport$, direction$])\n .pipe(\n filter(([{ offset }, [, y]]) => Math.abs(y - offset.y) > 100),\n map(([, [direction]]) => direction),\n distinctUntilChanged()\n )\n\n /* Compute threshold for hiding */\n const search$ = watchToggle(\"search\")\n return combineLatest([viewport$, search$])\n .pipe(\n map(([{ offset }, search]) => offset.y > 400 && !search),\n distinctUntilChanged(),\n switchMap(active => active ? hidden$ : of(false)),\n startWith(false)\n )\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch header\n *\n * @param el - Header element\n * @param options - Options\n *\n * @returns Header observable\n */\nexport function watchHeader(\n el: HTMLElement, options: WatchOptions\n): Observable
    {\n return defer(() => {\n const styles = getComputedStyle(el)\n return of(\n styles.position === \"sticky\" ||\n styles.position === \"-webkit-sticky\"\n )\n })\n .pipe(\n combineLatestWith(watchElementSize(el), isHidden(options)),\n map(([sticky, { height }, hidden]) => ({\n height: sticky ? height : 0,\n sticky,\n hidden\n })),\n distinctUntilChanged((a, b) => (\n a.sticky === b.sticky &&\n a.height === b.height &&\n a.hidden === b.hidden\n )),\n shareReplay(1)\n )\n}\n\n/**\n * Mount header\n *\n * This function manages the different states of the header, i.e. whether it's\n * hidden or rendered with a shadow. This depends heavily on the main area.\n *\n * @param el - Header element\n * @param options - Options\n *\n * @returns Header component observable\n */\nexport function mountHeader(\n el: HTMLElement, { header$, main$ }: MountOptions\n): Observable> {\n const internal$ = new Subject
    ()\n internal$\n .pipe(\n distinctUntilKeyChanged(\"active\"),\n combineLatestWith(header$),\n observeOn(animationFrameScheduler)\n )\n .subscribe(([{ active }, { hidden }]) => {\n if (active)\n setHeaderState(el, hidden ? \"hidden\" : \"shadow\")\n else\n resetHeaderState(el)\n })\n\n /* Connect to long-living subject and return component */\n main$.subscribe(main => internal$.next(main))\n return header$\n .pipe(\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n NEVER,\n Observable,\n Subject,\n animationFrameScheduler\n} from \"rxjs\"\nimport {\n distinctUntilKeyChanged,\n finalize,\n map,\n observeOn,\n tap\n} from \"rxjs/operators\"\n\nimport {\n resetHeaderTitleState,\n setHeaderTitleState\n} from \"~/actions\"\nimport {\n Viewport,\n getElement,\n getElementSize,\n watchViewportAt\n} from \"~/browser\"\n\nimport { Component } from \"../../_\"\nimport { Header } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Header\n */\nexport interface HeaderTitle {\n active: boolean /* User scrolled past first headline */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch header title\n *\n * @param el - Heading element\n * @param options - Options\n *\n * @returns Header title observable\n */\nexport function watchHeaderTitle(\n el: HTMLHeadingElement, { viewport$, header$ }: WatchOptions\n): Observable {\n return watchViewportAt(el, { header$, viewport$ })\n .pipe(\n map(({ offset: { y } }) => {\n const { height } = getElementSize(el)\n return {\n active: y >= height\n }\n }),\n distinctUntilKeyChanged(\"active\")\n )\n}\n\n/**\n * Mount header title\n *\n * This function swaps the header title from the site title to the title of the\n * current page when the user scrolls past the first headline.\n *\n * @param el - Header title element\n * @param options - Options\n *\n * @returns Header title component observable\n */\nexport function mountHeaderTitle(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler)\n )\n .subscribe(({ active }) => {\n if (active)\n setHeaderTitleState(el, \"active\")\n else\n resetHeaderTitleState(el)\n })\n\n /* Obtain headline, if any */\n const headline = getElement(\"article h1\")\n if (typeof headline === \"undefined\")\n return NEVER\n\n /* Create and return component */\n return watchHeaderTitle(headline, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n combineLatest\n} from \"rxjs\"\nimport {\n distinctUntilChanged,\n distinctUntilKeyChanged,\n map,\n switchMap\n} from \"rxjs/operators\"\n\nimport { Viewport, watchElementSize } from \"~/browser\"\n\nimport { Header } from \"../header\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Main area\n */\nexport interface Main {\n offset: number /* Main area top offset */\n height: number /* Main area visible height */\n active: boolean /* User scrolled past header */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch main area\n *\n * This function returns an observable that computes the visual parameters of\n * the main area which depends on the viewport vertical offset and height, as\n * well as the height of the header element, if the header is fixed.\n *\n * @param el - Main area element\n * @param options - Options\n *\n * @returns Main area observable\n */\nexport function watchMain(\n el: HTMLElement, { viewport$, header$ }: WatchOptions\n): Observable
    {\n\n /* Compute necessary adjustment for header */\n const adjust$ = header$\n .pipe(\n map(({ height }) => height),\n distinctUntilChanged()\n )\n\n /* Compute the main area's top and bottom borders */\n const border$ = adjust$\n .pipe(\n switchMap(() => watchElementSize(el)\n .pipe(\n map(({ height }) => ({\n top: el.offsetTop,\n bottom: el.offsetTop + height\n })),\n distinctUntilKeyChanged(\"bottom\")\n )\n )\n )\n\n /* Compute the main area's offset, visible height and if we scrolled past */\n return combineLatest([adjust$, border$, viewport$])\n .pipe(\n map(([header, { top, bottom }, { offset: { y }, size: { height } }]) => {\n height = Math.max(0, height\n - Math.max(0, top - y, header)\n - Math.max(0, height + y - bottom)\n )\n return {\n offset: top - header,\n height,\n active: top - header <= y\n }\n }),\n distinctUntilChanged((a, b) => (\n a.offset === b.offset &&\n a.height === b.height &&\n a.active === b.active\n ))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n fromEvent,\n of\n} from \"rxjs\"\nimport {\n finalize,\n map,\n mapTo,\n mergeMap,\n shareReplay,\n startWith,\n tap\n} from \"rxjs/operators\"\n\nimport { getElements } from \"~/browser\"\n\nimport { Component } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Palette colors\n */\nexport interface PaletteColor {\n scheme?: string /* Color scheme */\n primary?: string /* Primary color */\n accent?: string /* Accent color */\n}\n\n/**\n * Palette\n */\nexport interface Palette {\n index: number /* Palette index */\n color: PaletteColor /* Palette colors */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch color palette\n *\n * @param inputs - Color palette element\n *\n * @returns Color palette observable\n */\nexport function watchPalette(\n inputs: HTMLInputElement[]\n): Observable {\n const data = localStorage.getItem(__prefix(\"__palette\"))!\n const current = JSON.parse(data) || {\n index: inputs.findIndex(input => (\n matchMedia(input.getAttribute(\"data-md-color-media\")!).matches\n ))\n }\n\n /* Emit changes in color palette */\n const palette$ = of(...inputs)\n .pipe(\n mergeMap(input => fromEvent(input, \"change\")\n .pipe(\n mapTo(input)\n )\n ),\n startWith(inputs[Math.max(0, current.index)]),\n map(input => ({\n index: inputs.indexOf(input),\n color: {\n scheme: input.getAttribute(\"data-md-color-scheme\"),\n primary: input.getAttribute(\"data-md-color-primary\"),\n accent: input.getAttribute(\"data-md-color-accent\")\n }\n } as Palette)),\n shareReplay(1)\n )\n\n /* Persist preference in local storage */\n palette$.subscribe(palette => {\n localStorage.setItem(__prefix(\"__palette\"), JSON.stringify(palette))\n })\n\n /* Return palette */\n return palette$\n}\n\n/**\n * Mount color palette\n *\n * @param el - Color palette element\n *\n * @returns Color palette component observable\n */\nexport function mountPalette(\n el: HTMLElement\n): Observable> {\n const internal$ = new Subject()\n\n /* Set color palette */\n internal$.subscribe(palette => {\n for (const [key, value] of Object.entries(palette.color))\n if (typeof value === \"string\")\n document.body.setAttribute(`data-md-color-${key}`, value)\n\n /* Toggle visibility */\n for (let index = 0; index < inputs.length; index++) {\n const label = inputs[index].nextElementSibling\n if (label instanceof HTMLElement)\n label.hidden = palette.index !== index\n }\n })\n\n /* Create and return component */\n const inputs = getElements(\"input\", el)\n return watchPalette(inputs)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport ClipboardJS from \"clipboard\"\nimport { Observable, Subject } from \"rxjs\"\n\nimport { translation } from \"~/_\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Setup options\n */\ninterface SetupOptions {\n alert$: Subject /* Alert subject */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set up Clipboard.js integration\n *\n * @param options - Options\n */\nexport function setupClipboardJS(\n { alert$ }: SetupOptions\n): void {\n if (ClipboardJS.isSupported()) {\n new Observable(subscriber => {\n new ClipboardJS(\"[data-clipboard-target], [data-clipboard-text]\")\n .on(\"success\", ev => subscriber.next(ev))\n })\n .subscribe(() => alert$.next(translation(\"clipboard.copied\")))\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n EMPTY,\n NEVER,\n Observable,\n Subject,\n fromEvent,\n merge,\n of\n} from \"rxjs\"\nimport {\n bufferCount,\n catchError,\n concatMap,\n debounceTime,\n distinctUntilChanged,\n distinctUntilKeyChanged,\n filter,\n map,\n sample,\n share,\n skip,\n skipUntil,\n switchMap\n} from \"rxjs/operators\"\n\nimport { configuration } from \"~/_\"\nimport {\n Viewport,\n ViewportOffset,\n createElement,\n getElement,\n getElements,\n replaceElement,\n request,\n requestXML,\n setLocation,\n setLocationHash,\n setViewportOffset\n} from \"~/browser\"\nimport { getComponentElement } from \"~/components\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * History state\n */\nexport interface HistoryState {\n url: URL /* State URL */\n offset?: ViewportOffset /* State viewport offset */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Setup options\n */\ninterface SetupOptions {\n document$: Subject /* Document subject */\n location$: Subject /* Location subject */\n viewport$: Observable /* Viewport observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Preprocess a list of URLs\n *\n * This function replaces the `site_url` in the sitemap with the actual base\n * URL, to allow instant loading to work in occasions like Netlify previews.\n *\n * @param urls - URLs\n *\n * @returns Processed URLs\n */\nfunction preprocess(urls: string[]): string[] {\n if (urls.length < 2)\n return urls\n\n /* Take the first two URLs and remove everything after the last slash */\n const [root, next] = urls\n .sort((a, b) => a.length - b.length)\n .map(url => url.replace(/[^/]+$/, \"\"))\n\n /* Compute common prefix */\n let index = 0\n if (root === next)\n index = root.length\n else\n while (root.charCodeAt(index) === next.charCodeAt(index))\n index++\n\n /* Replace common prefix (i.e. base) with effective base */\n const config = configuration()\n return urls.map(url => (\n url.replace(root.slice(0, index), `${config.base}/`)\n ))\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set up instant loading\n *\n * When fetching, theoretically, we could use `responseType: \"document\"`, but\n * since all MkDocs links are relative, we need to make sure that the current\n * location matches the document we just loaded. Otherwise any relative links\n * in the document could use the old location.\n *\n * This is the reason why we need to synchronize history events and the process\n * of fetching the document for navigation changes (except `popstate` events):\n *\n * 1. Fetch document via `XMLHTTPRequest`\n * 2. Set new location via `history.pushState`\n * 3. Parse and emit fetched document\n *\n * For `popstate` events, we must not use `history.pushState`, or the forward\n * history will be irreversibly overwritten. In case the request fails, the\n * location change is dispatched regularly.\n *\n * @param options - Options\n */\nexport function setupInstantLoading(\n { document$, location$, viewport$ }: SetupOptions\n): void {\n const config = configuration()\n if (location.protocol === \"file:\")\n return\n\n /* Disable automatic scroll restoration */\n if (\"scrollRestoration\" in history) {\n history.scrollRestoration = \"manual\"\n\n /* Hack: ensure that reloads restore viewport offset */\n fromEvent(window, \"beforeunload\")\n .subscribe(() => {\n history.scrollRestoration = \"auto\"\n })\n }\n\n /* Hack: ensure absolute favicon link to omit 404s when switching */\n const favicon = getElement(\"link[rel=icon]\")\n if (typeof favicon !== \"undefined\")\n favicon.href = favicon.href\n\n /* Intercept internal navigation */\n const push$ = requestXML(`${config.base}/sitemap.xml`)\n .pipe(\n map(sitemap => preprocess(getElements(\"loc\", sitemap)\n .map(node => node.textContent!)\n )),\n switchMap(urls => fromEvent(document.body, \"click\")\n .pipe(\n filter(ev => !ev.metaKey && !ev.ctrlKey),\n switchMap(ev => {\n\n /* Handle HTML and SVG elements */\n if (ev.target instanceof Element) {\n const el = ev.target.closest(\"a\")\n if (el && !el.target && urls.includes(el.href)) {\n ev.preventDefault()\n return of({\n url: new URL(el.href)\n })\n }\n }\n return NEVER\n })\n )\n ),\n share()\n )\n\n /* Intercept history back and forward */\n const pop$ = fromEvent(window, \"popstate\")\n .pipe(\n filter(ev => ev.state !== null),\n map(ev => ({\n url: new URL(location.href),\n offset: ev.state\n })),\n share()\n )\n\n /* Emit location change */\n merge(push$, pop$)\n .pipe(\n distinctUntilChanged((a, b) => a.url.href === b.url.href),\n map(({ url }) => url)\n )\n .subscribe(location$)\n\n /* Fetch document via `XMLHTTPRequest` */\n const response$ = location$\n .pipe(\n distinctUntilKeyChanged(\"pathname\"),\n switchMap(url => request(url.href)\n .pipe(\n catchError(() => {\n setLocation(url)\n return NEVER\n })\n )\n ),\n share()\n )\n\n /* Set new location via `history.pushState` */\n push$\n .pipe(\n sample(response$)\n )\n .subscribe(({ url }) => {\n history.pushState({}, \"\", `${url}`)\n })\n\n /* Parse and emit fetched document */\n const dom = new DOMParser()\n response$\n .pipe(\n switchMap(res => res.text()),\n map(res => dom.parseFromString(res, \"text/html\"))\n )\n .subscribe(document$)\n\n /* Emit history state change */\n merge(push$, pop$)\n .pipe(\n sample(document$)\n )\n .subscribe(({ url, offset }) => {\n if (url.hash && !offset)\n setLocationHash(url.hash)\n else\n setViewportOffset(offset || { y: 0 })\n })\n\n /* Replace meta tags and components */\n document$\n .pipe(\n skip(1)\n )\n .subscribe(replacement => {\n for (const selector of [\n\n /* Meta tags */\n \"title\",\n \"link[rel=canonical]\",\n \"meta[name=author]\",\n \"meta[name=description]\",\n\n /* Components */\n \"[data-md-component=announce]\",\n \"[data-md-component=container]\",\n \"[data-md-component=header-topic]\",\n \"[data-md-component=logo], .md-logo\", // compat\n \"[data-md-component=skip]\"\n ]) {\n const source = getElement(selector)\n const target = getElement(selector, replacement)\n if (\n typeof source !== \"undefined\" &&\n typeof target !== \"undefined\"\n ) {\n replaceElement(source, target)\n }\n }\n })\n\n /* Re-evaluate scripts */\n document$\n .pipe(\n skip(1),\n map(() => getComponentElement(\"container\")),\n switchMap(el => of(...getElements(\"script\", el))),\n concatMap(el => {\n const script = createElement(\"script\")\n if (el.src) {\n for (const name of el.getAttributeNames())\n script.setAttribute(name, el.getAttribute(name)!)\n replaceElement(el, script)\n\n /* Complete when script is loaded */\n return new Observable(observer => {\n script.onload = () => observer.complete()\n })\n\n /* Complete immediately */\n } else {\n script.textContent = el.textContent\n replaceElement(el, script)\n return EMPTY\n }\n })\n )\n .subscribe()\n\n /* Debounce update of viewport offset */\n viewport$\n .pipe(\n skipUntil(push$),\n debounceTime(250),\n distinctUntilKeyChanged(\"offset\")\n )\n .subscribe(({ offset }) => {\n history.replaceState(offset, \"\")\n })\n\n /* Set viewport offset from history */\n merge(push$, pop$)\n .pipe(\n bufferCount(2, 1),\n filter(([a, b]) => a.url.pathname === b.url.pathname),\n map(([, state]) => state)\n )\n .subscribe(({ offset }) => {\n setViewportOffset(offset || { y: 0 })\n })\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport escapeHTML from \"escape-html\"\n\nimport { SearchIndexDocument } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search document\n */\nexport interface SearchDocument extends SearchIndexDocument {\n parent?: SearchIndexDocument /* Parent article */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search document mapping\n */\nexport type SearchDocumentMap = Map\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Create a search document mapping\n *\n * @param docs - Search index documents\n *\n * @returns Search document map\n */\nexport function setupSearchDocumentMap(\n docs: SearchIndexDocument[]\n): SearchDocumentMap {\n const documents = new Map()\n const parents = new Set()\n for (const doc of docs) {\n const [path, hash] = doc.location.split(\"#\")\n\n /* Extract location and title */\n const location = doc.location\n const title = doc.title\n\n /* Escape and cleanup text */\n const text = escapeHTML(doc.text)\n .replace(/\\s+(?=[,.:;!?])/g, \"\")\n .replace(/\\s+/g, \" \")\n\n /* Handle section */\n if (hash) {\n const parent = documents.get(path)!\n\n /* Ignore first section, override article */\n if (!parents.has(parent)) {\n parent.title = doc.title\n parent.text = text\n\n /* Remember that we processed the article */\n parents.add(parent)\n\n /* Add subsequent section */\n } else {\n documents.set(location, {\n location,\n title,\n text,\n parent\n })\n }\n\n /* Add article */\n } else {\n documents.set(location, {\n location,\n title,\n text\n })\n }\n }\n return documents\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search transformation function\n *\n * @param value - Query value\n *\n * @returns Transformed query value\n */\nexport type SearchTransformFn = (value: string) => string\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Default transformation function\n *\n * 1. Search for terms in quotation marks and prepend a `+` modifier to denote\n * that the resulting document must contain all terms, converting the query\n * to an `AND` query (as opposed to the default `OR` behavior). While users\n * may expect terms enclosed in quotation marks to map to span queries, i.e.\n * for which order is important, Lunr.js doesn't support them, so the best\n * we can do is to convert the terms to an `AND` query.\n *\n * 2. Replace control characters which are not located at the beginning of the\n * query or preceded by white space, or are not followed by a non-whitespace\n * character or are at the end of the query string. Furthermore, filter\n * unmatched quotation marks.\n *\n * 3. Trim excess whitespace from left and right.\n *\n * @param query - Query value\n *\n * @returns Transformed query value\n */\nexport function defaultTransform(query: string): string {\n return query\n .split(/\"([^\"]+)\"/g) /* => 1 */\n .map((terms, index) => index & 1\n ? terms.replace(/^\\b|^(?![^\\x00-\\x7F]|$)|\\s+/g, \" +\")\n : terms\n )\n .join(\"\")\n .replace(/\"|(?:^|\\s+)[*+\\-:^~]+(?=\\s+|$)/g, \"\") /* => 2 */\n .trim() /* => 3 */\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A RTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { SearchIndex, SearchResult } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search message type\n */\nexport const enum SearchMessageType {\n SETUP, /* Search index setup */\n READY, /* Search index ready */\n QUERY, /* Search query */\n RESULT /* Search results */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * A message containing the data necessary to setup the search index\n */\nexport interface SearchSetupMessage {\n type: SearchMessageType.SETUP /* Message type */\n data: SearchIndex /* Message data */\n}\n\n/**\n * A message indicating the search index is ready\n */\nexport interface SearchReadyMessage {\n type: SearchMessageType.READY /* Message type */\n}\n\n/**\n * A message containing a search query\n */\nexport interface SearchQueryMessage {\n type: SearchMessageType.QUERY /* Message type */\n data: string /* Message data */\n}\n\n/**\n * A message containing results for a search query\n */\nexport interface SearchResultMessage {\n type: SearchMessageType.RESULT /* Message type */\n data: SearchResult[] /* Message data */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * A message exchanged with the search worker\n */\nexport type SearchMessage =\n | SearchSetupMessage\n | SearchReadyMessage\n | SearchQueryMessage\n | SearchResultMessage\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Type guard for search setup messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchSetupMessage(\n message: SearchMessage\n): message is SearchSetupMessage {\n return message.type === SearchMessageType.SETUP\n}\n\n/**\n * Type guard for search ready messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchReadyMessage(\n message: SearchMessage\n): message is SearchReadyMessage {\n return message.type === SearchMessageType.READY\n}\n\n/**\n * Type guard for search query messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchQueryMessage(\n message: SearchMessage\n): message is SearchQueryMessage {\n return message.type === SearchMessageType.QUERY\n}\n\n/**\n * Type guard for search result messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchResultMessage(\n message: SearchMessage\n): message is SearchResultMessage {\n return message.type === SearchMessageType.RESULT\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A RTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { ObservableInput, Subject, from } from \"rxjs\"\nimport { map, share } from \"rxjs/operators\"\n\nimport { configuration, translation } from \"~/_\"\nimport { WorkerHandler, watchWorker } from \"~/browser\"\n\nimport { SearchIndex, SearchIndexPipeline } from \"../../_\"\nimport {\n SearchMessage,\n SearchMessageType,\n SearchSetupMessage,\n isSearchResultMessage\n} from \"../message\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search worker\n */\nexport type SearchWorker = WorkerHandler\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set up search index\n *\n * @param data - Search index\n *\n * @returns Search index\n */\nfunction setupSearchIndex(\n { config, docs, index }: SearchIndex\n): SearchIndex {\n\n /* Override default language with value from translation */\n if (config.lang.length === 1 && config.lang[0] === \"en\")\n config.lang = [\n translation(\"search.config.lang\")\n ]\n\n /* Override default separator with value from translation */\n if (config.separator === \"[\\\\s\\\\-]+\")\n config.separator = translation(\"search.config.separator\")\n\n /* Set pipeline from translation */\n const pipeline = translation(\"search.config.pipeline\")\n .split(/\\s*,\\s*/)\n .filter(Boolean) as SearchIndexPipeline\n\n /* Return search index after defaulting */\n return { config, docs, index, pipeline }\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set up search worker\n *\n * This function creates a web worker to set up and query the search index,\n * which is done using Lunr.js. The index must be passed as an observable to\n * enable hacks like _localsearch_ via search index embedding as JSON.\n *\n * @param url - Worker URL\n * @param index - Search index observable input\n *\n * @returns Search worker\n */\nexport function setupSearchWorker(\n url: string, index: ObservableInput\n): SearchWorker {\n const config = configuration()\n const worker = new Worker(url)\n\n /* Create communication channels and resolve relative links */\n const tx$ = new Subject()\n const rx$ = watchWorker(worker, { tx$ })\n .pipe(\n map(message => {\n if (isSearchResultMessage(message)) {\n for (const result of message.data)\n for (const document of result)\n document.location = `${config.base}/${document.location}`\n }\n return message\n }),\n share()\n )\n\n /* Set up search index */\n from(index)\n .pipe(\n map(data => ({\n type: SearchMessageType.SETUP,\n data: setupSearchIndex(data)\n }))\n )\n .subscribe(tx$.next.bind(tx$))\n\n /* Return search worker */\n return { tx$, rx$ }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { configuration } from \"~/_\"\nimport { getElementOrThrow, requestJSON } from \"~/browser\"\nimport { Version, renderVersionSelector } from \"~/templates\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Set up version selector\n */\nexport function setupVersionSelector(): void {\n const config = configuration()\n requestJSON(new URL(\"versions.json\", config.base))\n .subscribe(versions => {\n const topic = getElementOrThrow(\".md-header__topic\")\n topic.appendChild(renderVersionSelector(versions))\n })\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n combineLatest,\n fromEvent,\n merge\n} from \"rxjs\"\nimport {\n delay,\n distinctUntilChanged,\n distinctUntilKeyChanged,\n finalize,\n map,\n takeLast,\n takeUntil,\n tap\n} from \"rxjs/operators\"\n\nimport {\n resetSearchQueryPlaceholder,\n setSearchQueryPlaceholder\n} from \"~/actions\"\nimport {\n setElementFocus,\n setToggle,\n watchElementFocus\n} from \"~/browser\"\nimport {\n SearchMessageType,\n SearchQueryMessage,\n SearchWorker,\n defaultTransform\n} from \"~/integrations\"\n\nimport { Component } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search query\n */\nexport interface SearchQuery {\n value: string /* Query value */\n focus: boolean /* Query focus */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch search query\n *\n * Note that the focus event which triggers re-reading the current query value\n * is delayed by `1ms` so the input's empty state is allowed to propagate.\n *\n * @param el - Search query element\n *\n * @returns Search query observable\n */\nexport function watchSearchQuery(\n el: HTMLInputElement\n): Observable {\n const fn = __search?.transform || defaultTransform\n\n /* Intercept focus and input events */\n const focus$ = watchElementFocus(el)\n const value$ = merge(\n fromEvent(el, \"keyup\"),\n fromEvent(el, \"focus\").pipe(delay(1))\n )\n .pipe(\n map(() => fn(el.value)),\n distinctUntilChanged()\n )\n\n /* Combine into single observable */\n return combineLatest([value$, focus$])\n .pipe(\n map(([value, focus]) => ({ value, focus }))\n )\n}\n\n/**\n * Mount search query\n *\n * @param el - Search query element\n * @param worker - Search worker\n *\n * @returns Search query component observable\n */\nexport function mountSearchQuery(\n el: HTMLInputElement, { tx$ }: SearchWorker\n): Observable> {\n const internal$ = new Subject()\n\n /* Handle value changes */\n internal$\n .pipe(\n distinctUntilKeyChanged(\"value\"),\n map(({ value }): SearchQueryMessage => ({\n type: SearchMessageType.QUERY,\n data: value\n }))\n )\n .subscribe(tx$.next.bind(tx$))\n\n /* Handle focus changes */\n internal$\n .pipe(\n distinctUntilKeyChanged(\"focus\")\n )\n .subscribe(({ focus }) => {\n if (focus) {\n setToggle(\"search\", focus)\n setSearchQueryPlaceholder(el, \"\")\n } else {\n resetSearchQueryPlaceholder(el)\n }\n })\n\n /* Handle reset */\n fromEvent(el.form!, \"reset\")\n .pipe(\n takeUntil(internal$.pipe(takeLast(1)))\n )\n .subscribe(() => setElementFocus(el))\n\n /* Create and return component */\n return watchSearchQuery(el)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n merge,\n of\n} from \"rxjs\"\nimport {\n bufferCount,\n filter,\n finalize,\n map,\n observeOn,\n startWith,\n switchMap,\n tap,\n withLatestFrom,\n zipWith\n} from \"rxjs/operators\"\n\nimport {\n addToSearchResultList,\n resetSearchResultList,\n resetSearchResultMeta,\n setSearchResultMeta\n} from \"~/actions\"\nimport {\n getElementOrThrow,\n watchElementThreshold\n} from \"~/browser\"\nimport {\n SearchResult as SearchResultData,\n SearchWorker,\n isSearchResultMessage\n} from \"~/integrations\"\nimport { renderSearchResult } from \"~/templates\"\n\nimport { Component } from \"../../_\"\nimport { SearchQuery } from \"../query\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search result\n */\nexport interface SearchResult {\n data: SearchResultData[] /* Search result data */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount options\n */\ninterface MountOptions {\n query$: Observable /* Search query observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount search result list\n *\n * This function performs a lazy rendering of the search results, depending on\n * the vertical offset of the search result container.\n *\n * @param el - Search result list element\n * @param worker - Search worker\n * @param options - Options\n *\n * @returns Search result list component observable\n */\nexport function mountSearchResult(\n el: HTMLElement, { rx$ }: SearchWorker, { query$ }: MountOptions\n): Observable> {\n const internal$ = new Subject()\n const boundary$ = watchElementThreshold(el.parentElement!)\n .pipe(\n filter(Boolean)\n )\n\n /* Update search result metadata */\n const meta = getElementOrThrow(\":scope > :first-child\", el)\n internal$\n .pipe(\n observeOn(animationFrameScheduler),\n withLatestFrom(query$)\n )\n .subscribe(([{ data }, { value }]) => {\n if (value)\n setSearchResultMeta(meta, data.length)\n else\n resetSearchResultMeta(meta)\n })\n\n /* Update search result list */\n const list = getElementOrThrow(\":scope > :last-child\", el)\n internal$\n .pipe(\n observeOn(animationFrameScheduler),\n tap(() => resetSearchResultList(list)),\n switchMap(({ data }) => merge(\n of(...data.slice(0, 10)),\n of(...data.slice(10))\n .pipe(\n bufferCount(4),\n zipWith(boundary$),\n switchMap(([chunk]) => of(...chunk))\n )\n ))\n )\n .subscribe(result => {\n addToSearchResultList(list, renderSearchResult(result))\n })\n\n /* Filter search result list */\n const result$ = rx$\n .pipe(\n filter(isSearchResultMessage),\n map(({ data }) => ({ data })),\n startWith({ data: [] })\n )\n\n /* Create and return component */\n return result$\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { NEVER, Observable, ObservableInput, merge } from \"rxjs\"\nimport { filter, sample, take } from \"rxjs/operators\"\n\nimport { configuration } from \"~/_\"\nimport {\n Keyboard,\n getActiveElement,\n getElements,\n setElementFocus,\n setElementSelection,\n setToggle\n} from \"~/browser\"\nimport {\n SearchIndex,\n isSearchQueryMessage,\n isSearchReadyMessage,\n setupSearchWorker\n} from \"~/integrations\"\n\nimport { Component, getComponentElement } from \"../../_\"\nimport { SearchQuery, mountSearchQuery } from \"../query\"\nimport { SearchResult, mountSearchResult } from \"../result\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search\n */\nexport type Search =\n | SearchQuery\n | SearchResult\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount options\n */\ninterface MountOptions {\n index$: ObservableInput /* Search index observable */\n keyboard$: Observable /* Keyboard observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Mount search\n *\n * This function sets up the search functionality, including the underlying\n * web worker and all keyboard bindings.\n *\n * @param el - Search element\n * @param options - Options\n *\n * @returns Search component observable\n */\nexport function mountSearch(\n el: HTMLElement, { index$, keyboard$ }: MountOptions\n): Observable> {\n const config = configuration()\n const worker = setupSearchWorker(config.search, index$)\n\n /* Retrieve nested components */\n const query = getComponentElement(\"search-query\", el)\n const result = getComponentElement(\"search-result\", el)\n\n /* Re-emit query when search is ready */\n const { tx$, rx$ } = worker\n tx$\n .pipe(\n filter(isSearchQueryMessage),\n sample(rx$.pipe(filter(isSearchReadyMessage))),\n take(1)\n )\n .subscribe(tx$.next.bind(tx$))\n\n /* Set up search keyboard handlers */\n keyboard$\n .pipe(\n filter(({ mode }) => mode === \"search\")\n )\n .subscribe(key => {\n const active = getActiveElement()\n switch (key.type) {\n\n /* Enter: prevent form submission */\n case \"Enter\":\n if (active === query)\n key.claim()\n break\n\n /* Escape or Tab: close search */\n case \"Escape\":\n case \"Tab\":\n setToggle(\"search\", false)\n setElementFocus(query, false)\n break\n\n /* Vertical arrows: select previous or next search result */\n case \"ArrowUp\":\n case \"ArrowDown\":\n if (typeof active === \"undefined\") {\n setElementFocus(query)\n } else {\n const els = [query, ...getElements(\n \":not(details) > [href], summary, details[open] [href]\",\n result\n )]\n const i = Math.max(0, (\n Math.max(0, els.indexOf(active)) + els.length + (\n key.type === \"ArrowUp\" ? -1 : +1\n )\n ) % els.length)\n setElementFocus(els[i])\n }\n\n /* Prevent scrolling of page */\n key.claim()\n break\n\n /* All other keys: hand to search query */\n default:\n if (query !== getActiveElement())\n setElementFocus(query)\n }\n })\n\n /* Set up global keyboard handlers */\n keyboard$\n .pipe(\n filter(({ mode }) => mode === \"global\"),\n )\n .subscribe(key => {\n switch (key.type) {\n\n /* Open search and select query */\n case \"f\":\n case \"s\":\n case \"/\":\n setElementFocus(query)\n setElementSelection(query)\n key.claim()\n break\n }\n })\n\n /* Create and return component */\n const query$ = mountSearchQuery(query, worker)\n return merge(\n query$,\n mountSearchResult(result, worker, { query$ })\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n combineLatest\n} from \"rxjs\"\nimport {\n distinctUntilChanged,\n finalize,\n map,\n observeOn,\n tap,\n withLatestFrom\n} from \"rxjs/operators\"\n\nimport {\n resetSidebarHeight,\n resetSidebarOffset,\n setSidebarHeight,\n setSidebarOffset\n} from \"~/actions\"\nimport { Viewport } from \"~/browser\"\n\nimport { Component } from \"../_\"\nimport { Header } from \"../header\"\nimport { Main } from \"../main\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Sidebar\n */\nexport interface Sidebar {\n height: number /* Sidebar height */\n locked: boolean /* User scrolled past header */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n main$: Observable
    /* Main area observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n main$: Observable
    /* Main area observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch sidebar\n *\n * This function returns an observable that computes the visual parameters of\n * the sidebar which depends on the vertical viewport offset, as well as the\n * height of the main area. When the page is scrolled beyond the header, the\n * sidebar is locked and fills the remaining space.\n *\n * @param el - Sidebar element\n * @param options - Options\n *\n * @returns Sidebar observable\n */\nexport function watchSidebar(\n el: HTMLElement, { viewport$, main$ }: WatchOptions\n): Observable {\n const adjust =\n el.parentElement!.offsetTop -\n el.parentElement!.parentElement!.offsetTop\n\n /* Compute the sidebar's available height and if it should be locked */\n return combineLatest([main$, viewport$])\n .pipe(\n map(([{ offset, height }, { offset: { y } }]) => {\n height = height\n + Math.min(adjust, Math.max(0, y - offset))\n - adjust\n return {\n height,\n locked: y >= offset + adjust\n }\n }),\n distinctUntilChanged((a, b) => (\n a.height === b.height &&\n a.locked === b.locked\n ))\n )\n}\n\n/**\n * Mount sidebar\n *\n * @param el - Sidebar element\n * @param options - Options\n *\n * @returns Sidebar component observable\n */\nexport function mountSidebar(\n el: HTMLElement, { header$, ...options }: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler),\n withLatestFrom(header$)\n )\n .subscribe({\n\n /* Update height and offset */\n next([{ height }, { height: offset }]) {\n setSidebarHeight(el, height)\n setSidebarOffset(el, offset)\n },\n\n /* Reset on complete */\n complete() {\n resetSidebarOffset(el)\n resetSidebarHeight(el)\n }\n })\n\n /* Create and return component */\n return watchSidebar(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Repo, User } from \"github-types\"\nimport { Observable, zip } from \"rxjs\"\nimport { defaultIfEmpty, map } from \"rxjs/operators\"\n\nimport { requestJSON } from \"~/browser\"\n\nimport { SourceFacts } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * GitHub release (partial)\n */\ninterface Release {\n tag_name: string /* Tag name */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Fetch GitHub repository facts\n *\n * @param user - GitHub user\n * @param repo - GitHub repository\n *\n * @returns Repository facts observable\n */\nexport function fetchSourceFactsFromGitHub(\n user: string, repo?: string\n): Observable {\n if (typeof repo !== \"undefined\") {\n const url = `https://api.github.com/repos/${user}/${repo}`\n return zip(\n\n /* Fetch version */\n requestJSON(`${url}/releases/latest`)\n .pipe(\n map(release => ({\n version: release.tag_name\n })),\n defaultIfEmpty({})\n ),\n\n /* Fetch stars and forks */\n requestJSON(url)\n .pipe(\n map(info => ({\n stars: info.stargazers_count,\n forks: info.forks_count\n })),\n defaultIfEmpty({})\n )\n )\n .pipe(\n map(([release, info]) => ({ ...release, ...info }))\n )\n\n /* User or organization */\n } else {\n const url = `https://api.github.com/repos/${user}`\n return requestJSON(url)\n .pipe(\n map(info => ({\n repositories: info.public_repos\n })),\n defaultIfEmpty({})\n )\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { ProjectSchema } from \"gitlab\"\nimport { Observable } from \"rxjs\"\nimport { defaultIfEmpty, map } from \"rxjs/operators\"\n\nimport { requestJSON } from \"~/browser\"\n\nimport { SourceFacts } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Fetch GitLab repository facts\n *\n * @param base - GitLab base\n * @param project - GitLab project\n *\n * @returns Repository facts observable\n */\nexport function fetchSourceFactsFromGitLab(\n base: string, project: string\n): Observable {\n const url = `https://${base}/api/v4/projects/${encodeURIComponent(project)}`\n return requestJSON(url)\n .pipe(\n map(({ star_count, forks_count }) => ({\n stars: star_count,\n forks: forks_count\n })),\n defaultIfEmpty({})\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { NEVER, Observable } from \"rxjs\"\n\nimport { fetchSourceFactsFromGitHub } from \"../github\"\nimport { fetchSourceFactsFromGitLab } from \"../gitlab\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Repository facts for repositories\n */\nexport interface RepositoryFacts {\n stars?: number /* Number of stars */\n forks?: number /* Number of forks */\n version?: string /* Latest version */\n}\n\n/**\n * Repository facts for organizations\n */\nexport interface OrganizationFacts {\n repositories?: number /* Number of repositories */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Repository facts\n */\nexport type SourceFacts =\n | RepositoryFacts\n | OrganizationFacts\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Fetch repository facts\n *\n * @param url - Repository URL\n *\n * @returns Repository facts observable\n */\nexport function fetchSourceFacts(\n url: string\n): Observable {\n const [type] = url.match(/(git(?:hub|lab))/i) || []\n switch (type.toLowerCase()) {\n\n /* GitHub repository */\n case \"github\":\n const [, user, repo] = url.match(/^.+github\\.com\\/([^/]+)\\/?([^/]+)?/i)!\n return fetchSourceFactsFromGitHub(user, repo)\n\n /* GitLab repository */\n case \"gitlab\":\n const [, base, slug] = url.match(/^.+?([^/]*gitlab[^/]+)\\/(.+?)\\/?$/i)!\n return fetchSourceFactsFromGitLab(base, slug)\n\n /* Everything else */\n default:\n return NEVER\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { NEVER, Observable, Subject, defer, of } from \"rxjs\"\nimport {\n catchError,\n filter,\n finalize,\n map,\n shareReplay,\n tap\n} from \"rxjs/operators\"\n\nimport { setSourceFacts, setSourceState } from \"~/actions\"\nimport { renderSourceFacts } from \"~/templates\"\n\nimport { Component } from \"../../_\"\nimport { SourceFacts, fetchSourceFacts } from \"../facts\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Repository information\n */\nexport interface Source {\n facts: SourceFacts /* Repository facts */\n}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Repository information observable\n */\nlet fetch$: Observable\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch repository information\n *\n * This function tries to read the repository facts from session storage, and\n * if unsuccessful, fetches them from the underlying provider.\n *\n * @param el - Repository information element\n *\n * @returns Repository information observable\n */\nexport function watchSource(\n el: HTMLAnchorElement\n): Observable {\n return fetch$ ||= defer(() => {\n const data = sessionStorage.getItem(__prefix(\"__source\"))\n if (data) {\n return of(JSON.parse(data))\n } else {\n const value$ = fetchSourceFacts(el.href)\n value$.subscribe(value => {\n try {\n sessionStorage.setItem(__prefix(\"__source\"), JSON.stringify(value))\n } catch (err) {\n /* Uncritical, just swallow */\n }\n })\n\n /* Return value */\n return value$\n }\n })\n .pipe(\n catchError(() => NEVER),\n filter(facts => Object.keys(facts).length > 0),\n map(facts => ({ facts })),\n shareReplay(1)\n )\n}\n\n/**\n * Mount repository information\n *\n * @param el - Repository information element\n *\n * @returns Repository information component observable\n */\nexport function mountSource(\n el: HTMLAnchorElement\n): Observable> {\n const internal$ = new Subject()\n internal$.subscribe(({ facts }) => {\n setSourceFacts(el, renderSourceFacts(facts))\n setSourceState(el, \"done\")\n })\n\n /* Create and return component */\n return watchSource(el)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, Subject, animationFrameScheduler } from \"rxjs\"\nimport {\n distinctUntilKeyChanged,\n finalize,\n map,\n observeOn,\n switchMap,\n tap\n} from \"rxjs/operators\"\n\nimport { resetTabsState, setTabsState } from \"~/actions\"\nimport {\n Viewport,\n watchElementSize,\n watchViewportAt\n} from \"~/browser\"\n\nimport { Component } from \"../_\"\nimport { Header } from \"../header\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Navigation tabs\n */\nexport interface Tabs {\n hidden: boolean /* User scrolled past tabs */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch navigation tabs\n *\n * @param el - Navigation tabs element\n * @param options - Options\n *\n * @returns Navigation tabs observable\n */\nexport function watchTabs(\n el: HTMLElement, { viewport$, header$ }: WatchOptions\n): Observable {\n return watchElementSize(document.body)\n .pipe(\n switchMap(() => watchViewportAt(el, { header$, viewport$ })),\n map(({ offset: { y } }) => {\n return {\n hidden: y >= 10\n }\n }),\n distinctUntilKeyChanged(\"hidden\")\n )\n}\n\n/**\n * Mount navigation tabs\n *\n * This function hides the navigation tabs when scrolling past the threshold\n * and makes them reappear in a nice CSS animation when scrolling back up.\n *\n * @param el - Navigation tabs element\n * @param options - Options\n *\n * @returns Navigation tabs component observable\n */\nexport function mountTabs(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler)\n )\n .subscribe({\n\n /* Update state */\n next({ hidden }) {\n if (hidden)\n setTabsState(el, \"hidden\")\n else\n resetTabsState(el)\n },\n\n /* Reset on complete */\n complete() {\n resetTabsState(el)\n }\n })\n\n /* Create and return component */\n return watchTabs(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n combineLatest\n} from \"rxjs\"\nimport {\n bufferCount,\n distinctUntilChanged,\n distinctUntilKeyChanged,\n finalize,\n map,\n observeOn,\n scan,\n startWith,\n switchMap,\n tap\n} from \"rxjs/operators\"\n\nimport {\n resetAnchorActive,\n resetAnchorState,\n setAnchorActive,\n setAnchorState\n} from \"~/actions\"\nimport {\n Viewport,\n getElement,\n getElements,\n watchElementSize\n} from \"~/browser\"\n\nimport { Component } from \"../_\"\nimport { Header } from \"../header\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Table of contents\n */\nexport interface TableOfContents {\n prev: HTMLAnchorElement[][] /* Anchors (previous) */\n next: HTMLAnchorElement[][] /* Anchors (next) */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n header$: Observable
    /* Header observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch table of contents\n *\n * This is effectively a scroll spy implementation which will account for the\n * fixed header and automatically re-calculate anchor offsets when the viewport\n * is resized. The returned observable will only emit if the table of contents\n * needs to be repainted.\n *\n * This implementation tracks an anchor element's entire path starting from its\n * level up to the top-most anchor element, e.g. `[h3, h2, h1]`. Although the\n * Material theme currently doesn't make use of this information, it enables\n * the styling of the entire hierarchy through customization.\n *\n * Note that the current anchor is the last item of the `prev` anchor list.\n *\n * @param anchors - Anchor elements\n * @param options - Options\n *\n * @returns Table of contents observable\n */\nexport function watchTableOfContents(\n anchors: HTMLAnchorElement[], { viewport$, header$ }: WatchOptions\n): Observable {\n const table = new Map()\n for (const anchor of anchors) {\n const id = decodeURIComponent(anchor.hash.substring(1))\n const target = getElement(`[id=\"${id}\"]`)\n if (typeof target !== \"undefined\")\n table.set(anchor, target)\n }\n\n /* Compute necessary adjustment for header */\n const adjust$ = header$\n .pipe(\n map(header => 24 + header.height)\n )\n\n /* Compute partition of previous and next anchors */\n const partition$ = watchElementSize(document.body)\n .pipe(\n distinctUntilKeyChanged(\"height\"),\n\n /* Build index to map anchor paths to vertical offsets */\n map(() => {\n let path: HTMLAnchorElement[] = []\n return [...table].reduce((index, [anchor, target]) => {\n while (path.length) {\n const last = table.get(path[path.length - 1])!\n if (last.tagName >= target.tagName) {\n path.pop()\n } else {\n break\n }\n }\n\n /* If the current anchor is hidden, continue with its parent */\n let offset = target.offsetTop\n while (!offset && target.parentElement) {\n target = target.parentElement\n offset = target.offsetTop\n }\n\n /* Map reversed anchor path to vertical offset */\n return index.set(\n [...path = [...path, anchor]].reverse(),\n offset\n )\n }, new Map())\n }),\n\n /* Sort index by vertical offset (see https://bit.ly/30z6QSO) */\n map(index => new Map([...index].sort(([, a], [, b]) => a - b))),\n\n /* Re-compute partition when viewport offset changes */\n switchMap(index => combineLatest([adjust$, viewport$])\n .pipe(\n scan(([prev, next], [adjust, { offset: { y } }]) => {\n\n /* Look forward */\n while (next.length) {\n const [, offset] = next[0]\n if (offset - adjust < y) {\n prev = [...prev, next.shift()!]\n } else {\n break\n }\n }\n\n /* Look backward */\n while (prev.length) {\n const [, offset] = prev[prev.length - 1]\n if (offset - adjust >= y) {\n next = [prev.pop()!, ...next]\n } else {\n break\n }\n }\n\n /* Return partition */\n return [prev, next]\n }, [[], [...index]]),\n distinctUntilChanged((a, b) => (\n a[0] === b[0] &&\n a[1] === b[1]\n ))\n )\n )\n )\n\n /* Compute and return anchor list migrations */\n return partition$\n .pipe(\n map(([prev, next]) => ({\n prev: prev.map(([path]) => path),\n next: next.map(([path]) => path)\n })),\n\n /* Extract anchor list migrations */\n startWith({ prev: [], next: [] }),\n bufferCount(2, 1),\n map(([a, b]) => {\n\n /* Moving down */\n if (a.prev.length < b.prev.length) {\n return {\n prev: b.prev.slice(Math.max(0, a.prev.length - 1), b.prev.length),\n next: []\n }\n\n /* Moving up */\n } else {\n return {\n prev: b.prev.slice(-1),\n next: b.next.slice(0, b.next.length - a.next.length)\n }\n }\n })\n )\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Mount table of contents\n *\n * @param el - Anchor list element\n * @param options - Options\n *\n * @returns Table of contents component observable\n */\nexport function mountTableOfContents(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler),\n )\n .subscribe(({ prev, next }) => {\n\n /* Look forward */\n for (const [anchor] of next) {\n resetAnchorActive(anchor)\n resetAnchorState(anchor)\n }\n\n /* Look backward */\n for (const [index, [anchor]] of prev.entries()) {\n setAnchorActive(anchor, index === prev.length - 1)\n setAnchorState(anchor, \"blur\")\n }\n })\n\n /* Create and return component */\n const anchors = getElements(\"[href^=\\\\#]\", el)\n return watchTableOfContents(anchors, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n Subject,\n animationFrameScheduler,\n combineLatest\n} from \"rxjs\"\nimport {\n bufferCount,\n distinctUntilChanged,\n distinctUntilKeyChanged,\n finalize,\n map,\n observeOn,\n tap\n} from \"rxjs/operators\"\n\nimport { resetBackToTopState, setBackToTopState } from \"~/actions\"\nimport { Viewport } from \"~/browser\"\n\nimport { Component } from \"../_\"\nimport { Main } from \"../main\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Back-to-top button\n */\nexport interface BackToTop {\n hidden: boolean /* User scrolled up */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch options\n */\ninterface WatchOptions {\n viewport$: Observable /* Viewport observable */\n main$: Observable
    /* Main area observable */\n}\n\n/**\n * Mount options\n */\ninterface MountOptions {\n viewport$: Observable /* Viewport observable */\n main$: Observable
    /* Main area observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Watch back-to-top\n *\n * @param _el - Back-to-top element\n * @param options - Options\n *\n * @returns Back-to-top observable\n */\nexport function watchBackToTop(\n _el: HTMLElement, { viewport$, main$ }: WatchOptions\n): Observable {\n\n /* Compute direction */\n const direction$ = viewport$\n .pipe(\n map(({ offset: { y } }) => y),\n bufferCount(2, 1),\n map(([a, b]) => a > b),\n distinctUntilChanged()\n )\n\n /* Compute whether button should be hidden */\n const hidden$ = main$\n .pipe(\n distinctUntilKeyChanged(\"active\")\n )\n\n /* Compute threshold for hiding */\n return combineLatest([hidden$, direction$])\n .pipe(\n map(([{ active }, direction]) => ({\n hidden: !(active && direction)\n })),\n distinctUntilChanged((a, b) => (\n a.hidden === b.hidden\n ))\n )\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Mount back-to-top\n *\n * @param el - Back-to-top element\n * @param options - Options\n *\n * @returns Back-to-top component observable\n */\nexport function mountBackToTop(\n el: HTMLElement, options: MountOptions\n): Observable> {\n const internal$ = new Subject()\n internal$\n .pipe(\n observeOn(animationFrameScheduler)\n )\n .subscribe({\n\n /* Update state */\n next({ hidden }) {\n if (hidden)\n setBackToTopState(el, \"hidden\")\n else\n resetBackToTopState(el)\n },\n\n /* Reset on complete */\n complete() {\n resetBackToTopState(el)\n }\n })\n\n /* Create and return component */\n return watchBackToTop(el, options)\n .pipe(\n tap(internal$),\n finalize(() => internal$.complete()),\n map(state => ({ ref: el, ...state }))\n )\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, of } from \"rxjs\"\nimport {\n mapTo,\n mergeMap,\n switchMap,\n takeWhile,\n tap,\n withLatestFrom\n} from \"rxjs/operators\"\n\nimport { getElements } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch options\n */\ninterface PatchOptions {\n document$: Observable /* Document observable */\n tablet$: Observable /* Tablet breakpoint observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch indeterminate checkboxes\n *\n * This function replaces the indeterminate \"pseudo state\" with the actual\n * indeterminate state, which is used to keep navigation always expanded.\n *\n * @param options - Options\n */\nexport function patchIndeterminate(\n { document$, tablet$ }: PatchOptions\n): void {\n document$\n .pipe(\n switchMap(() => of(...getElements(\n \"[data-md-state=indeterminate]\"\n ))),\n tap(el => {\n el.indeterminate = true\n el.checked = false\n }),\n mergeMap(el => fromEvent(el, \"change\")\n .pipe(\n takeWhile(() => el.hasAttribute(\"data-md-state\")),\n mapTo(el)\n )\n ),\n withLatestFrom(tablet$)\n )\n .subscribe(([el, tablet]) => {\n el.removeAttribute(\"data-md-state\")\n if (tablet)\n el.checked = false\n })\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { Observable, fromEvent, of } from \"rxjs\"\nimport {\n filter,\n mapTo,\n mergeMap,\n switchMap,\n tap\n} from \"rxjs/operators\"\n\nimport { getElements } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch options\n */\ninterface PatchOptions {\n document$: Observable /* Document observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Check whether the given device is an Apple device\n *\n * @returns Test result\n */\nfunction isAppleDevice(): boolean {\n return /(iPad|iPhone|iPod)/.test(navigator.userAgent)\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch all elements with `data-md-scrollfix` attributes\n *\n * This is a year-old patch which ensures that overflow scrolling works at the\n * top and bottom of containers on iOS by ensuring a `1px` scroll offset upon\n * the start of a touch event.\n *\n * @see https://bit.ly/2SCtAOO - Original source\n *\n * @param options - Options\n */\nexport function patchScrollfix(\n { document$ }: PatchOptions\n): void {\n document$\n .pipe(\n switchMap(() => of(...getElements(\"[data-md-scrollfix]\"))),\n tap(el => el.removeAttribute(\"data-md-scrollfix\")),\n filter(isAppleDevice),\n mergeMap(el => fromEvent(el, \"touchstart\")\n .pipe(\n mapTo(el)\n )\n )\n )\n .subscribe(el => {\n const top = el.scrollTop\n\n /* We're at the top of the container */\n if (top === 0) {\n el.scrollTop = 1\n\n /* We're at the bottom of the container */\n } else if (top + el.offsetHeight === el.scrollHeight) {\n el.scrollTop = top - 1\n }\n })\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n Observable,\n animationFrameScheduler,\n combineLatest,\n of\n} from \"rxjs\"\nimport {\n delay,\n map,\n observeOn,\n switchMap,\n withLatestFrom\n} from \"rxjs/operators\"\n\nimport { resetScrollLock, setScrollLock } from \"~/actions\"\nimport { Viewport, watchToggle } from \"~/browser\"\n\n/* ----------------------------------------------------------------------------\n * Helper types\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch options\n */\ninterface PatchOptions {\n viewport$: Observable /* Viewport observable */\n tablet$: Observable /* Tablet breakpoint observable */\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Patch the document body to lock when search is open\n *\n * For mobile and tablet viewports, the search is rendered full screen, which\n * leads to scroll leaking when at the top or bottom of the search result. This\n * function locks the body when the search is in full screen mode, and restores\n * the scroll position when leaving.\n *\n * @param options - Options\n */\nexport function patchScrolllock(\n { viewport$, tablet$ }: PatchOptions\n): void {\n combineLatest([watchToggle(\"search\"), tablet$])\n .pipe(\n map(([active, tablet]) => active && !tablet),\n switchMap(active => of(active)\n .pipe(\n delay(active ? 400 : 100),\n observeOn(animationFrameScheduler)\n )\n ),\n withLatestFrom(viewport$)\n )\n .subscribe(([active, { offset: { y }}]) => {\n if (active)\n setScrollLock(document.body, y)\n else\n resetScrollLock(document.body)\n })\n}\n"], + "mappings": "wiCAAA,oBAAC,UAAU,EAAQ,EAAS,CAC1B,MAAO,KAAY,UAAY,MAAO,KAAW,YAAc,IAC/D,MAAO,SAAW,YAAc,OAAO,IAAM,OAAO,GACnD,MACD,GAAO,UAAY,CAAE,aASrB,WAAmC,EAAO,CACxC,GAAI,GAAmB,GACnB,EAA0B,GAC1B,EAAiC,KAEjC,EAAsB,CACxB,KAAM,GACN,OAAQ,GACR,IAAK,GACL,IAAK,GACL,MAAO,GACP,SAAU,GACV,OAAQ,GACR,KAAM,GACN,MAAO,GACP,KAAM,GACN,KAAM,GACN,SAAU,GACV,iBAAkB,IAQpB,WAA4B,EAAI,CAC9B,MACE,MACA,IAAO,UACP,EAAG,WAAa,QAChB,EAAG,WAAa,QAChB,aAAe,IACf,YAAc,GAAG,WAcrB,WAAuC,EAAI,CACzC,GAAI,IAAO,EAAG,KACV,GAAU,EAAG,QAUjB,MARI,QAAY,SAAW,EAAoB,KAAS,CAAC,EAAG,UAIxD,KAAY,YAAc,CAAC,EAAG,UAI9B,EAAG,mBAYT,WAA8B,EAAI,CAChC,AAAI,EAAG,UAAU,SAAS,kBAG1B,GAAG,UAAU,IAAI,iBACjB,EAAG,aAAa,2BAA4B,KAQ9C,WAAiC,EAAI,CACnC,AAAI,CAAC,EAAG,aAAa,6BAGrB,GAAG,UAAU,OAAO,iBACpB,EAAG,gBAAgB,6BAWrB,WAAmB,EAAG,CACpB,AAAI,EAAE,SAAW,EAAE,QAAU,EAAE,SAI3B,GAAmB,EAAM,gBAC3B,EAAqB,EAAM,eAG7B,EAAmB,IAWrB,WAAuB,EAAG,CACxB,EAAmB,GAUrB,WAAiB,EAAG,CAElB,AAAI,CAAC,EAAmB,EAAE,SAItB,IAAoB,EAA8B,EAAE,UACtD,EAAqB,EAAE,QAQ3B,WAAgB,EAAG,CACjB,AAAI,CAAC,EAAmB,EAAE,SAKxB,GAAE,OAAO,UAAU,SAAS,kBAC5B,EAAE,OAAO,aAAa,8BAMtB,GAA0B,GAC1B,OAAO,aAAa,GACpB,EAAiC,OAAO,WAAW,UAAW,CAC5D,EAA0B,IACzB,KACH,EAAwB,EAAE,SAS9B,WAA4B,EAAG,CAC7B,AAAI,SAAS,kBAAoB,UAK3B,IACF,GAAmB,IAErB,KAUJ,YAA0C,CACxC,SAAS,iBAAiB,YAAa,GACvC,SAAS,iBAAiB,YAAa,GACvC,SAAS,iBAAiB,UAAW,GACrC,SAAS,iBAAiB,cAAe,GACzC,SAAS,iBAAiB,cAAe,GACzC,SAAS,iBAAiB,YAAa,GACvC,SAAS,iBAAiB,YAAa,GACvC,SAAS,iBAAiB,aAAc,GACxC,SAAS,iBAAiB,WAAY,GAGxC,YAA6C,CAC3C,SAAS,oBAAoB,YAAa,GAC1C,SAAS,oBAAoB,YAAa,GAC1C,SAAS,oBAAoB,UAAW,GACxC,SAAS,oBAAoB,cAAe,GAC5C,SAAS,oBAAoB,cAAe,GAC5C,SAAS,oBAAoB,YAAa,GAC1C,SAAS,oBAAoB,YAAa,GAC1C,SAAS,oBAAoB,aAAc,GAC3C,SAAS,oBAAoB,WAAY,GAU3C,WAA8B,EAAG,CAG/B,AAAI,EAAE,OAAO,UAAY,EAAE,OAAO,SAAS,gBAAkB,QAI7D,GAAmB,GACnB,KAMF,SAAS,iBAAiB,UAAW,EAAW,IAChD,SAAS,iBAAiB,YAAa,EAAe,IACtD,SAAS,iBAAiB,cAAe,EAAe,IACxD,SAAS,iBAAiB,aAAc,EAAe,IACvD,SAAS,iBAAiB,mBAAoB,EAAoB,IAElE,IAMA,EAAM,iBAAiB,QAAS,EAAS,IACzC,EAAM,iBAAiB,OAAQ,EAAQ,IAOvC,AAAI,EAAM,WAAa,KAAK,wBAA0B,EAAM,KAI1D,EAAM,KAAK,aAAa,wBAAyB,IACxC,EAAM,WAAa,KAAK,eACjC,UAAS,gBAAgB,UAAU,IAAI,oBACvC,SAAS,gBAAgB,aAAa,wBAAyB,KAOnE,GAAI,MAAO,SAAW,aAAe,MAAO,WAAa,YAAa,CAIpE,OAAO,0BAA4B,EAInC,GAAI,GAEJ,GAAI,CACF,EAAQ,GAAI,aAAY,sCACjB,EAAP,CAEA,EAAQ,SAAS,YAAY,eAC7B,EAAM,gBAAgB,+BAAgC,GAAO,GAAO,IAGtE,OAAO,cAAc,GAGvB,AAAI,MAAO,WAAa,aAGtB,EAA0B,cCpT9B,oBAeA,GAAI,IACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACJ,AAAC,UAAU,EAAS,CAChB,GAAI,GAAO,MAAO,SAAW,SAAW,OAAS,MAAO,OAAS,SAAW,KAAO,MAAO,OAAS,SAAW,KAAO,GACrH,AAAI,MAAO,SAAW,YAAc,OAAO,IACvC,OAAO,QAAS,CAAC,WAAY,SAAU,EAAS,CAAE,EAAQ,EAAe,EAAM,EAAe,OAE7F,AAAI,MAAO,KAAW,UAAY,MAAO,IAAO,SAAY,SAC7D,EAAQ,EAAe,EAAM,EAAe,GAAO,WAGnD,EAAQ,EAAe,IAE3B,WAAwB,EAAS,EAAU,CACvC,MAAI,KAAY,GACZ,CAAI,MAAO,QAAO,QAAW,WACzB,OAAO,eAAe,EAAS,aAAc,CAAE,MAAO,KAGtD,EAAQ,WAAa,IAGtB,SAAU,EAAI,EAAG,CAAE,MAAO,GAAQ,GAAM,EAAW,EAAS,EAAI,GAAK,MAGnF,SAAU,EAAU,CACjB,GAAI,GAAgB,OAAO,gBACtB,CAAE,UAAW,aAAgB,QAAS,SAAU,EAAG,EAAG,CAAE,EAAE,UAAY,IACvE,SAAU,EAAG,EAAG,CAAE,OAAS,KAAK,GAAG,AAAI,OAAO,UAAU,eAAe,KAAK,EAAG,IAAI,GAAE,GAAK,EAAE,KAEhG,GAAY,SAAU,EAAG,EAAG,CACxB,GAAI,MAAO,IAAM,YAAc,IAAM,KACjC,KAAM,IAAI,WAAU,uBAAyB,OAAO,GAAK,iCAC7D,EAAc,EAAG,GACjB,YAAc,CAAE,KAAK,YAAc,EACnC,EAAE,UAAY,IAAM,KAAO,OAAO,OAAO,GAAM,GAAG,UAAY,EAAE,UAAW,GAAI,KAGnF,GAAW,OAAO,QAAU,SAAU,EAAG,CACrC,OAAS,GAAG,EAAI,EAAG,EAAI,UAAU,OAAQ,EAAI,EAAG,IAAK,CACjD,EAAI,UAAU,GACd,OAAS,KAAK,GAAG,AAAI,OAAO,UAAU,eAAe,KAAK,EAAG,IAAI,GAAE,GAAK,EAAE,IAE9E,MAAO,IAGX,GAAS,SAAU,EAAG,EAAG,CACrB,GAAI,GAAI,GACR,OAAS,KAAK,GAAG,AAAI,OAAO,UAAU,eAAe,KAAK,EAAG,IAAM,EAAE,QAAQ,GAAK,GAC9E,GAAE,GAAK,EAAE,IACb,GAAI,GAAK,MAAQ,MAAO,QAAO,uBAA0B,WACrD,OAAS,GAAI,EAAG,EAAI,OAAO,sBAAsB,GAAI,EAAI,EAAE,OAAQ,IAC/D,AAAI,EAAE,QAAQ,EAAE,IAAM,GAAK,OAAO,UAAU,qBAAqB,KAAK,EAAG,EAAE,KACvE,GAAE,EAAE,IAAM,EAAE,EAAE,KAE1B,MAAO,IAGX,GAAa,SAAU,EAAY,EAAQ,EAAK,EAAM,CAClD,GAAI,GAAI,UAAU,OAAQ,EAAI,EAAI,EAAI,EAAS,IAAS,KAAO,EAAO,OAAO,yBAAyB,EAAQ,GAAO,EAAM,EAC3H,GAAI,MAAO,UAAY,UAAY,MAAO,SAAQ,UAAa,WAAY,EAAI,QAAQ,SAAS,EAAY,EAAQ,EAAK,OACpH,QAAS,GAAI,EAAW,OAAS,EAAG,GAAK,EAAG,IAAK,AAAI,GAAI,EAAW,KAAI,GAAK,GAAI,EAAI,EAAE,GAAK,EAAI,EAAI,EAAE,EAAQ,EAAK,GAAK,EAAE,EAAQ,KAAS,GAChJ,MAAO,GAAI,GAAK,GAAK,OAAO,eAAe,EAAQ,EAAK,GAAI,GAGhE,GAAU,SAAU,EAAY,EAAW,CACvC,MAAO,UAAU,EAAQ,EAAK,CAAE,EAAU,EAAQ,EAAK,KAG3D,GAAa,SAAU,EAAa,EAAe,CAC/C,GAAI,MAAO,UAAY,UAAY,MAAO,SAAQ,UAAa,WAAY,MAAO,SAAQ,SAAS,EAAa,IAGpH,GAAY,SAAU,EAAS,EAAY,EAAG,EAAW,CACrD,WAAe,EAAO,CAAE,MAAO,aAAiB,GAAI,EAAQ,GAAI,GAAE,SAAU,EAAS,CAAE,EAAQ,KAC/F,MAAO,IAAK,IAAM,GAAI,UAAU,SAAU,EAAS,EAAQ,CACvD,WAAmB,EAAO,CAAE,GAAI,CAAE,EAAK,EAAU,KAAK,UAAkB,EAAP,CAAY,EAAO,IACpF,WAAkB,EAAO,CAAE,GAAI,CAAE,EAAK,EAAU,MAAS,UAAkB,EAAP,CAAY,EAAO,IACvF,WAAc,EAAQ,CAAE,EAAO,KAAO,EAAQ,EAAO,OAAS,EAAM,EAAO,OAAO,KAAK,EAAW,GAClG,EAAM,GAAY,EAAU,MAAM,EAAS,GAAc,KAAK,WAItE,GAAc,SAAU,EAAS,EAAM,CACnC,GAAI,GAAI,CAAE,MAAO,EAAG,KAAM,UAAW,CAAE,GAAI,EAAE,GAAK,EAAG,KAAM,GAAE,GAAI,MAAO,GAAE,IAAO,KAAM,GAAI,IAAK,IAAM,EAAG,EAAG,EAAG,EAC/G,MAAO,GAAI,CAAE,KAAM,EAAK,GAAI,MAAS,EAAK,GAAI,OAAU,EAAK,IAAM,MAAO,SAAW,YAAe,GAAE,OAAO,UAAY,UAAW,CAAE,MAAO,QAAU,EACvJ,WAAc,EAAG,CAAE,MAAO,UAAU,EAAG,CAAE,MAAO,GAAK,CAAC,EAAG,KACzD,WAAc,EAAI,CACd,GAAI,EAAG,KAAM,IAAI,WAAU,mCAC3B,KAAO,GAAG,GAAI,CACV,GAAI,EAAI,EAAG,GAAM,GAAI,EAAG,GAAK,EAAI,EAAE,OAAY,EAAG,GAAK,EAAE,OAAc,IAAI,EAAE,SAAc,EAAE,KAAK,GAAI,GAAK,EAAE,OAAS,CAAE,GAAI,EAAE,KAAK,EAAG,EAAG,KAAK,KAAM,MAAO,GAE3J,OADI,EAAI,EAAG,GAAG,GAAK,CAAC,EAAG,GAAK,EAAG,EAAE,QACzB,EAAG,QACF,OAAQ,GAAG,EAAI,EAAI,UACnB,GAAG,SAAE,QAAgB,CAAE,MAAO,EAAG,GAAI,KAAM,QAC3C,GAAG,EAAE,QAAS,EAAI,EAAG,GAAI,EAAK,CAAC,GAAI,aACnC,GAAG,EAAK,EAAE,IAAI,MAAO,EAAE,KAAK,MAAO,iBAEpC,GAAM,EAAI,EAAE,KAAM,IAAI,EAAE,OAAS,GAAK,EAAE,EAAE,OAAS,KAAQ,GAAG,KAAO,GAAK,EAAG,KAAO,GAAI,CAAE,EAAI,EAAG,SACjG,GAAI,EAAG,KAAO,GAAM,EAAC,GAAM,EAAG,GAAK,EAAE,IAAM,EAAG,GAAK,EAAE,IAAM,CAAE,EAAE,MAAQ,EAAG,GAAI,MAC9E,GAAI,EAAG,KAAO,GAAK,EAAE,MAAQ,EAAE,GAAI,CAAE,EAAE,MAAQ,EAAE,GAAI,EAAI,EAAI,MAC7D,GAAI,GAAK,EAAE,MAAQ,EAAE,GAAI,CAAE,EAAE,MAAQ,EAAE,GAAI,EAAE,IAAI,KAAK,GAAK,MAC3D,AAAI,EAAE,IAAI,EAAE,IAAI,MAChB,EAAE,KAAK,MAAO,SAEtB,EAAK,EAAK,KAAK,EAAS,SACnB,EAAP,CAAY,EAAK,CAAC,EAAG,GAAI,EAAI,SAAK,CAAU,EAAI,EAAI,EACtD,GAAI,EAAG,GAAK,EAAG,KAAM,GAAG,GAAI,MAAO,CAAE,MAAO,EAAG,GAAK,EAAG,GAAK,OAAQ,KAAM,MAIlF,GAAe,SAAS,EAAG,EAAG,CAC1B,OAAS,KAAK,GAAG,AAAI,IAAM,WAAa,CAAC,OAAO,UAAU,eAAe,KAAK,EAAG,IAAI,GAAgB,EAAG,EAAG,IAG/G,GAAkB,OAAO,OAAU,SAAS,EAAG,EAAG,EAAG,EAAI,CACrD,AAAI,IAAO,QAAW,GAAK,GAC3B,OAAO,eAAe,EAAG,EAAI,CAAE,WAAY,GAAM,IAAK,UAAW,CAAE,MAAO,GAAE,OAC1E,SAAS,EAAG,EAAG,EAAG,EAAI,CACxB,AAAI,IAAO,QAAW,GAAK,GAC3B,EAAE,GAAM,EAAE,IAGd,GAAW,SAAU,EAAG,CACpB,GAAI,GAAI,MAAO,SAAW,YAAc,OAAO,SAAU,EAAI,GAAK,EAAE,GAAI,EAAI,EAC5E,GAAI,EAAG,MAAO,GAAE,KAAK,GACrB,GAAI,GAAK,MAAO,GAAE,QAAW,SAAU,MAAO,CAC1C,KAAM,UAAY,CACd,MAAI,IAAK,GAAK,EAAE,QAAQ,GAAI,QACrB,CAAE,MAAO,GAAK,EAAE,KAAM,KAAM,CAAC,KAG5C,KAAM,IAAI,WAAU,EAAI,0BAA4B,oCAGxD,GAAS,SAAU,EAAG,EAAG,CACrB,GAAI,GAAI,MAAO,SAAW,YAAc,EAAE,OAAO,UACjD,GAAI,CAAC,EAAG,MAAO,GACf,GAAI,GAAI,EAAE,KAAK,GAAI,EAAG,EAAK,GAAI,EAC/B,GAAI,CACA,KAAQ,KAAM,QAAU,KAAM,IAAM,CAAE,GAAI,EAAE,QAAQ,MAAM,EAAG,KAAK,EAAE,aAEjE,EAAP,CAAgB,EAAI,CAAE,MAAO,UAC7B,CACI,GAAI,CACA,AAAI,GAAK,CAAC,EAAE,MAAS,GAAI,EAAE,SAAY,EAAE,KAAK,UAElD,CAAU,GAAI,EAAG,KAAM,GAAE,OAE7B,MAAO,IAIX,GAAW,UAAY,CACnB,OAAS,GAAK,GAAI,EAAI,EAAG,EAAI,UAAU,OAAQ,IAC3C,EAAK,EAAG,OAAO,GAAO,UAAU,KACpC,MAAO,IAIX,GAAiB,UAAY,CACzB,OAAS,GAAI,EAAG,EAAI,EAAG,EAAK,UAAU,OAAQ,EAAI,EAAI,IAAK,GAAK,UAAU,GAAG,OAC7E,OAAS,GAAI,MAAM,GAAI,EAAI,EAAG,EAAI,EAAG,EAAI,EAAI,IACzC,OAAS,GAAI,UAAU,GAAI,EAAI,EAAG,EAAK,EAAE,OAAQ,EAAI,EAAI,IAAK,IAC1D,EAAE,GAAK,EAAE,GACjB,MAAO,IAGX,GAAgB,SAAU,EAAI,EAAM,CAChC,OAAS,GAAI,EAAG,EAAK,EAAK,OAAQ,EAAI,EAAG,OAAQ,EAAI,EAAI,IAAK,IAC1D,EAAG,GAAK,EAAK,GACjB,MAAO,IAGX,GAAU,SAAU,EAAG,CACnB,MAAO,gBAAgB,IAAW,MAAK,EAAI,EAAG,MAAQ,GAAI,IAAQ,IAGtE,GAAmB,SAAU,EAAS,EAAY,EAAW,CACzD,GAAI,CAAC,OAAO,cAAe,KAAM,IAAI,WAAU,wCAC/C,GAAI,GAAI,EAAU,MAAM,EAAS,GAAc,IAAK,EAAG,EAAI,GAC3D,MAAO,GAAI,GAAI,EAAK,QAAS,EAAK,SAAU,EAAK,UAAW,EAAE,OAAO,eAAiB,UAAY,CAAE,MAAO,OAAS,EACpH,WAAc,EAAG,CAAE,AAAI,EAAE,IAAI,GAAE,GAAK,SAAU,EAAG,CAAE,MAAO,IAAI,SAAQ,SAAU,EAAG,EAAG,CAAE,EAAE,KAAK,CAAC,EAAG,EAAG,EAAG,IAAM,GAAK,EAAO,EAAG,OAC9H,WAAgB,EAAG,EAAG,CAAE,GAAI,CAAE,EAAK,EAAE,GAAG,UAAc,EAAP,CAAY,EAAO,EAAE,GAAG,GAAI,IAC3E,WAAc,EAAG,CAAE,EAAE,gBAAiB,IAAU,QAAQ,QAAQ,EAAE,MAAM,GAAG,KAAK,EAAS,GAAU,EAAO,EAAE,GAAG,GAAI,GACnH,WAAiB,EAAO,CAAE,EAAO,OAAQ,GACzC,WAAgB,EAAO,CAAE,EAAO,QAAS,GACzC,WAAgB,EAAG,EAAG,CAAE,AAAI,EAAE,GAAI,EAAE,QAAS,EAAE,QAAQ,EAAO,EAAE,GAAG,GAAI,EAAE,GAAG,MAGhF,GAAmB,SAAU,EAAG,CAC5B,GAAI,GAAG,EACP,MAAO,GAAI,GAAI,EAAK,QAAS,EAAK,QAAS,SAAU,EAAG,CAAE,KAAM,KAAO,EAAK,UAAW,EAAE,OAAO,UAAY,UAAY,CAAE,MAAO,OAAS,EAC1I,WAAc,EAAG,EAAG,CAAE,EAAE,GAAK,EAAE,GAAK,SAAU,EAAG,CAAE,MAAQ,GAAI,CAAC,GAAK,CAAE,MAAO,GAAQ,EAAE,GAAG,IAAK,KAAM,IAAM,UAAa,EAAI,EAAE,GAAK,GAAO,IAG/I,GAAgB,SAAU,EAAG,CACzB,GAAI,CAAC,OAAO,cAAe,KAAM,IAAI,WAAU,wCAC/C,GAAI,GAAI,EAAE,OAAO,eAAgB,EACjC,MAAO,GAAI,EAAE,KAAK,GAAM,GAAI,MAAO,KAAa,WAAa,GAAS,GAAK,EAAE,OAAO,YAAa,EAAI,GAAI,EAAK,QAAS,EAAK,SAAU,EAAK,UAAW,EAAE,OAAO,eAAiB,UAAY,CAAE,MAAO,OAAS,GAC9M,WAAc,EAAG,CAAE,EAAE,GAAK,EAAE,IAAM,SAAU,EAAG,CAAE,MAAO,IAAI,SAAQ,SAAU,EAAS,EAAQ,CAAE,EAAI,EAAE,GAAG,GAAI,EAAO,EAAS,EAAQ,EAAE,KAAM,EAAE,UAChJ,WAAgB,EAAS,EAAQ,EAAG,EAAG,CAAE,QAAQ,QAAQ,GAAG,KAAK,SAAS,EAAG,CAAE,EAAQ,CAAE,MAAO,EAAG,KAAM,KAAS,KAGtH,GAAuB,SAAU,EAAQ,EAAK,CAC1C,MAAI,QAAO,eAAkB,OAAO,eAAe,EAAQ,MAAO,CAAE,MAAO,IAAiB,EAAO,IAAM,EAClG,GAGX,GAAI,GAAqB,OAAO,OAAU,SAAS,EAAG,EAAG,CACrD,OAAO,eAAe,EAAG,UAAW,CAAE,WAAY,GAAM,MAAO,KAC9D,SAAS,EAAG,EAAG,CAChB,EAAE,QAAa,GAGnB,GAAe,SAAU,EAAK,CAC1B,GAAI,GAAO,EAAI,WAAY,MAAO,GAClC,GAAI,GAAS,GACb,GAAI,GAAO,KAAM,OAAS,KAAK,GAAK,AAAI,IAAM,WAAa,OAAO,UAAU,eAAe,KAAK,EAAK,IAAI,GAAgB,EAAQ,EAAK,GACtI,SAAmB,EAAQ,GACpB,GAGX,GAAkB,SAAU,EAAK,CAC7B,MAAQ,IAAO,EAAI,WAAc,EAAM,CAAE,QAAW,IAGxD,GAAyB,SAAU,EAAU,EAAY,CACrD,GAAI,CAAC,EAAW,IAAI,GAChB,KAAM,IAAI,WAAU,kDAExB,MAAO,GAAW,IAAI,IAG1B,GAAyB,SAAU,EAAU,EAAY,EAAO,CAC5D,GAAI,CAAC,EAAW,IAAI,GAChB,KAAM,IAAI,WAAU,kDAExB,SAAW,IAAI,EAAU,GAClB,GAGX,EAAS,YAAa,IACtB,EAAS,WAAY,IACrB,EAAS,SAAU,IACnB,EAAS,aAAc,IACvB,EAAS,UAAW,IACpB,EAAS,aAAc,IACvB,EAAS,YAAa,IACtB,EAAS,cAAe,IACxB,EAAS,eAAgB,IACzB,EAAS,kBAAmB,IAC5B,EAAS,WAAY,IACrB,EAAS,SAAU,IACnB,EAAS,WAAY,IACrB,EAAS,iBAAkB,IAC3B,EAAS,gBAAiB,IAC1B,EAAS,UAAW,IACpB,EAAS,mBAAoB,IAC7B,EAAS,mBAAoB,IAC7B,EAAS,gBAAiB,IAC1B,EAAS,uBAAwB,IACjC,EAAS,eAAgB,IACzB,EAAS,kBAAmB,IAC5B,EAAS,yBAA0B,IACnC,EAAS,yBAA0B,QC9SvC,oBAMA,AAAC,UAA0C,EAAM,EAAS,CACzD,AAAG,MAAO,KAAY,UAAY,MAAO,KAAW,SACnD,GAAO,QAAU,IACb,AAAG,MAAO,SAAW,YAAc,OAAO,IAC9C,OAAO,GAAI,GACP,AAAG,MAAO,KAAY,SAC1B,GAAQ,YAAiB,IAEzB,EAAK,YAAiB,MACrB,GAAM,UAAW,CACpB,MAAiB,WAAW,CAClB,GAAI,GAAuB,CAE/B,IACC,SAAS,EAAyB,EAAqB,EAAqB,CAEnF,aAGA,EAAoB,EAAE,EAAqB,CACzC,QAAW,UAAW,CAAE,MAAqB,OAI/C,GAAI,GAAe,EAAoB,KACnC,EAAoC,EAAoB,EAAE,GAE1D,EAAS,EAAoB,KAC7B,EAA8B,EAAoB,EAAE,GAEpD,EAAa,EAAoB,KACjC,EAA8B,EAAoB,EAAE,GAExD,WAAiB,EAAK,CAA6B,MAAI,OAAO,SAAW,YAAc,MAAO,QAAO,UAAa,SAAY,EAAU,SAAiB,EAAK,CAAE,MAAO,OAAO,IAAiB,EAAU,SAAiB,EAAK,CAAE,MAAO,IAAO,MAAO,SAAW,YAAc,EAAI,cAAgB,QAAU,IAAQ,OAAO,UAAY,SAAW,MAAO,IAAiB,EAAQ,GAEnX,WAAyB,EAAU,EAAa,CAAE,GAAI,CAAE,aAAoB,IAAgB,KAAM,IAAI,WAAU,qCAEhH,WAA2B,EAAQ,EAAO,CAAE,OAAS,GAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CAAE,GAAI,GAAa,EAAM,GAAI,EAAW,WAAa,EAAW,YAAc,GAAO,EAAW,aAAe,GAAU,SAAW,IAAY,GAAW,SAAW,IAAM,OAAO,eAAe,EAAQ,EAAW,IAAK,IAE7S,WAAsB,EAAa,EAAY,EAAa,CAAE,MAAI,IAAY,EAAkB,EAAY,UAAW,GAAiB,GAAa,EAAkB,EAAa,GAAqB,EAQzM,GAAI,GAA+B,UAAY,CAI7C,WAAyB,EAAS,CAChC,EAAgB,KAAM,GAEtB,KAAK,eAAe,GACpB,KAAK,gBAQP,SAAa,EAAiB,CAAC,CAC7B,IAAK,iBACL,MAAO,UAA0B,CAC/B,GAAI,GAAU,UAAU,OAAS,GAAK,UAAU,KAAO,OAAY,UAAU,GAAK,GAClF,KAAK,OAAS,EAAQ,OACtB,KAAK,UAAY,EAAQ,UACzB,KAAK,QAAU,EAAQ,QACvB,KAAK,OAAS,EAAQ,OACtB,KAAK,KAAO,EAAQ,KACpB,KAAK,QAAU,EAAQ,QACvB,KAAK,aAAe,KAOrB,CACD,IAAK,gBACL,MAAO,UAAyB,CAC9B,AAAI,KAAK,KACP,KAAK,aACI,KAAK,QACd,KAAK,iBAOR,CACD,IAAK,oBACL,MAAO,UAA6B,CAClC,GAAI,GAAQ,SAAS,gBAAgB,aAAa,SAAW,MAC7D,KAAK,SAAW,SAAS,cAAc,YAEvC,KAAK,SAAS,MAAM,SAAW,OAE/B,KAAK,SAAS,MAAM,OAAS,IAC7B,KAAK,SAAS,MAAM,QAAU,IAC9B,KAAK,SAAS,MAAM,OAAS,IAE7B,KAAK,SAAS,MAAM,SAAW,WAC/B,KAAK,SAAS,MAAM,EAAQ,QAAU,QAAU,UAEhD,GAAI,GAAY,OAAO,aAAe,SAAS,gBAAgB,UAC/D,YAAK,SAAS,MAAM,IAAM,GAAG,OAAO,EAAW,MAC/C,KAAK,SAAS,aAAa,WAAY,IACvC,KAAK,SAAS,MAAQ,KAAK,KACpB,KAAK,WAOb,CACD,IAAK,aACL,MAAO,UAAsB,CAC3B,GAAI,GAAQ,KAER,EAAW,KAAK,oBAEpB,KAAK,oBAAsB,UAAY,CACrC,MAAO,GAAM,cAGf,KAAK,YAAc,KAAK,UAAU,iBAAiB,QAAS,KAAK,sBAAwB,GACzF,KAAK,UAAU,YAAY,GAC3B,KAAK,aAAe,IAAiB,GACrC,KAAK,WACL,KAAK,eAON,CACD,IAAK,aACL,MAAO,UAAsB,CAC3B,AAAI,KAAK,aACP,MAAK,UAAU,oBAAoB,QAAS,KAAK,qBACjD,KAAK,YAAc,KACnB,KAAK,oBAAsB,MAGzB,KAAK,UACP,MAAK,UAAU,YAAY,KAAK,UAChC,KAAK,SAAW,QAOnB,CACD,IAAK,eACL,MAAO,UAAwB,CAC7B,KAAK,aAAe,IAAiB,KAAK,QAC1C,KAAK,aAMN,CACD,IAAK,WACL,MAAO,UAAoB,CACzB,GAAI,GAEJ,GAAI,CACF,EAAY,SAAS,YAAY,KAAK,cAC/B,EAAP,CACA,EAAY,GAGd,KAAK,aAAa,KAOnB,CACD,IAAK,eACL,MAAO,SAAsB,EAAW,CACtC,KAAK,QAAQ,KAAK,EAAY,UAAY,QAAS,CACjD,OAAQ,KAAK,OACb,KAAM,KAAK,aACX,QAAS,KAAK,QACd,eAAgB,KAAK,eAAe,KAAK,UAO5C,CACD,IAAK,iBACL,MAAO,UAA0B,CAC/B,AAAI,KAAK,SACP,KAAK,QAAQ,QAGf,SAAS,cAAc,OACvB,OAAO,eAAe,oBAOvB,CACD,IAAK,UAKL,MAAO,UAAmB,CACxB,KAAK,eAEN,CACD,IAAK,SACL,IAAK,UAAe,CAClB,GAAI,GAAS,UAAU,OAAS,GAAK,UAAU,KAAO,OAAY,UAAU,GAAK,OAGjF,GAFA,KAAK,QAAU,EAEX,KAAK,UAAY,QAAU,KAAK,UAAY,MAC9C,KAAM,IAAI,OAAM,uDAQpB,IAAK,UAAe,CAClB,MAAO,MAAK,UAQb,CACD,IAAK,SACL,IAAK,SAAa,EAAQ,CACxB,GAAI,IAAW,OACb,GAAI,GAAU,EAAQ,KAAY,UAAY,EAAO,WAAa,EAAG,CACnE,GAAI,KAAK,SAAW,QAAU,EAAO,aAAa,YAChD,KAAM,IAAI,OAAM,qFAGlB,GAAI,KAAK,SAAW,OAAU,GAAO,aAAa,aAAe,EAAO,aAAa,aACnF,KAAM,IAAI,OAAM,yGAGlB,KAAK,QAAU,MAEf,MAAM,IAAI,OAAM,gDAStB,IAAK,UAAe,CAClB,MAAO,MAAK,YAIT,KAGwB,EAAoB,EAErD,WAA0B,EAAK,CAA6B,MAAI,OAAO,SAAW,YAAc,MAAO,QAAO,UAAa,SAAY,EAAmB,SAAiB,EAAK,CAAE,MAAO,OAAO,IAAiB,EAAmB,SAAiB,EAAK,CAAE,MAAO,IAAO,MAAO,SAAW,YAAc,EAAI,cAAgB,QAAU,IAAQ,OAAO,UAAY,SAAW,MAAO,IAAiB,EAAiB,GAEvZ,WAAkC,EAAU,EAAa,CAAE,GAAI,CAAE,aAAoB,IAAgB,KAAM,IAAI,WAAU,qCAEzH,YAAoC,EAAQ,EAAO,CAAE,OAAS,GAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CAAE,GAAI,GAAa,EAAM,GAAI,EAAW,WAAa,EAAW,YAAc,GAAO,EAAW,aAAe,GAAU,SAAW,IAAY,GAAW,SAAW,IAAM,OAAO,eAAe,EAAQ,EAAW,IAAK,IAEtT,YAA+B,EAAa,EAAY,EAAa,CAAE,MAAI,IAAY,GAA2B,EAAY,UAAW,GAAiB,GAAa,GAA2B,EAAa,GAAqB,EAEpO,YAAmB,EAAU,EAAY,CAAE,GAAI,MAAO,IAAe,YAAc,IAAe,KAAQ,KAAM,IAAI,WAAU,sDAAyD,EAAS,UAAY,OAAO,OAAO,GAAc,EAAW,UAAW,CAAE,YAAa,CAAE,MAAO,EAAU,SAAU,GAAM,aAAc,MAAe,GAAY,GAAgB,EAAU,GAEnX,YAAyB,EAAG,EAAG,CAAE,UAAkB,OAAO,gBAAkB,SAAyB,EAAG,EAAG,CAAE,SAAE,UAAY,EAAU,GAAa,GAAgB,EAAG,GAErK,YAAsB,EAAS,CAAE,GAAI,GAA4B,KAA6B,MAAO,WAAgC,CAAE,GAAI,GAAQ,GAAgB,GAAU,EAAQ,GAAI,EAA2B,CAAE,GAAI,GAAY,GAAgB,MAAM,YAAa,EAAS,QAAQ,UAAU,EAAO,UAAW,OAAqB,GAAS,EAAM,MAAM,KAAM,WAAc,MAAO,IAA2B,KAAM,IAE5Z,YAAoC,EAAM,EAAM,CAAE,MAAI,IAAS,GAAiB,KAAU,UAAY,MAAO,IAAS,YAAsB,EAAe,GAAuB,GAElL,YAAgC,EAAM,CAAE,GAAI,IAAS,OAAU,KAAM,IAAI,gBAAe,6DAAgE,MAAO,GAE/J,aAAqC,CAA0E,GAApE,MAAO,UAAY,aAAe,CAAC,QAAQ,WAA6B,QAAQ,UAAU,KAAM,MAAO,GAAO,GAAI,MAAO,QAAU,WAAY,MAAO,GAAM,GAAI,CAAE,YAAK,UAAU,SAAS,KAAK,QAAQ,UAAU,KAAM,GAAI,UAAY,KAAa,SAAe,EAAP,CAAY,MAAO,IAE1T,YAAyB,EAAG,CAAE,UAAkB,OAAO,eAAiB,OAAO,eAAiB,SAAyB,EAAG,CAAE,MAAO,GAAE,WAAa,OAAO,eAAe,IAAc,GAAgB,GAWxM,YAA2B,EAAQ,EAAS,CAC1C,GAAI,GAAY,kBAAkB,OAAO,GAEzC,GAAI,EAAC,EAAQ,aAAa,GAI1B,MAAO,GAAQ,aAAa,GAQ9B,GAAI,IAAyB,SAAU,EAAU,CAC/C,GAAU,EAAW,GAErB,GAAI,GAAS,GAAa,GAM1B,WAAmB,EAAS,EAAS,CACnC,GAAI,GAEJ,SAAyB,KAAM,GAE/B,EAAQ,EAAO,KAAK,MAEpB,EAAM,eAAe,GAErB,EAAM,YAAY,GAEX,EAST,UAAsB,EAAW,CAAC,CAChC,IAAK,iBACL,MAAO,UAA0B,CAC/B,GAAI,GAAU,UAAU,OAAS,GAAK,UAAU,KAAO,OAAY,UAAU,GAAK,GAClF,KAAK,OAAS,MAAO,GAAQ,QAAW,WAAa,EAAQ,OAAS,KAAK,cAC3E,KAAK,OAAS,MAAO,GAAQ,QAAW,WAAa,EAAQ,OAAS,KAAK,cAC3E,KAAK,KAAO,MAAO,GAAQ,MAAS,WAAa,EAAQ,KAAO,KAAK,YACrE,KAAK,UAAY,EAAiB,EAAQ,aAAe,SAAW,EAAQ,UAAY,SAAS,OAOlG,CACD,IAAK,cACL,MAAO,SAAqB,EAAS,CACnC,GAAI,GAAS,KAEb,KAAK,SAAW,IAAiB,EAAS,QAAS,SAAU,GAAG,CAC9D,MAAO,GAAO,QAAQ,QAQzB,CACD,IAAK,UACL,MAAO,SAAiB,EAAG,CACzB,GAAI,GAAU,EAAE,gBAAkB,EAAE,cAEpC,AAAI,KAAK,iBACP,MAAK,gBAAkB,MAGzB,KAAK,gBAAkB,GAAI,GAAiB,CAC1C,OAAQ,KAAK,OAAO,GACpB,OAAQ,KAAK,OAAO,GACpB,KAAM,KAAK,KAAK,GAChB,UAAW,KAAK,UAChB,QAAS,EACT,QAAS,SAQZ,CACD,IAAK,gBACL,MAAO,SAAuB,EAAS,CACrC,MAAO,IAAkB,SAAU,KAOpC,CACD,IAAK,gBACL,MAAO,SAAuB,EAAS,CACrC,GAAI,GAAW,GAAkB,SAAU,GAE3C,GAAI,EACF,MAAO,UAAS,cAAc,KASjC,CACD,IAAK,cAML,MAAO,SAAqB,EAAS,CACnC,MAAO,IAAkB,OAAQ,KAMlC,CACD,IAAK,UACL,MAAO,UAAmB,CACxB,KAAK,SAAS,UAEV,KAAK,iBACP,MAAK,gBAAgB,UACrB,KAAK,gBAAkB,SAGzB,CAAC,CACH,IAAK,cACL,MAAO,UAAuB,CAC5B,GAAI,GAAS,UAAU,OAAS,GAAK,UAAU,KAAO,OAAY,UAAU,GAAK,CAAC,OAAQ,OACtF,EAAU,MAAO,IAAW,SAAW,CAAC,GAAU,EAClD,GAAU,CAAC,CAAC,SAAS,sBACzB,SAAQ,QAAQ,SAAU,GAAQ,CAChC,GAAU,IAAW,CAAC,CAAC,SAAS,sBAAsB,MAEjD,OAIJ,GACN,KAE8B,GAAa,IAIxC,IACC,SAAS,EAAQ,CAExB,GAAI,GAAqB,EAKzB,GAAI,MAAO,UAAY,aAAe,CAAC,QAAQ,UAAU,QAAS,CAC9D,GAAI,GAAQ,QAAQ,UAEpB,EAAM,QAAU,EAAM,iBACN,EAAM,oBACN,EAAM,mBACN,EAAM,kBACN,EAAM,sBAU1B,WAAkB,EAAS,EAAU,CACjC,KAAO,GAAW,EAAQ,WAAa,GAAoB,CACvD,GAAI,MAAO,GAAQ,SAAY,YAC3B,EAAQ,QAAQ,GAClB,MAAO,GAET,EAAU,EAAQ,YAI1B,EAAO,QAAU,GAKX,IACC,SAAS,EAAQ,EAA0B,EAAqB,CAEvE,GAAI,GAAU,EAAoB,KAYlC,WAAmB,EAAS,EAAU,EAAM,EAAU,EAAY,CAC9D,GAAI,GAAa,EAAS,MAAM,KAAM,WAEtC,SAAQ,iBAAiB,EAAM,EAAY,GAEpC,CACH,QAAS,UAAW,CAChB,EAAQ,oBAAoB,EAAM,EAAY,KAe1D,WAAkB,EAAU,EAAU,EAAM,EAAU,EAAY,CAE9D,MAAI,OAAO,GAAS,kBAAqB,WAC9B,EAAU,MAAM,KAAM,WAI7B,MAAO,IAAS,WAGT,EAAU,KAAK,KAAM,UAAU,MAAM,KAAM,WAIlD,OAAO,IAAa,UACpB,GAAW,SAAS,iBAAiB,IAIlC,MAAM,UAAU,IAAI,KAAK,EAAU,SAAU,EAAS,CACzD,MAAO,GAAU,EAAS,EAAU,EAAM,EAAU,MAa5D,WAAkB,EAAS,EAAU,EAAM,EAAU,CACjD,MAAO,UAAS,EAAG,CACf,EAAE,eAAiB,EAAQ,EAAE,OAAQ,GAEjC,EAAE,gBACF,EAAS,KAAK,EAAS,IAKnC,EAAO,QAAU,GAKX,IACC,SAAS,EAAyB,EAAS,CAQlD,EAAQ,KAAO,SAAS,EAAO,CAC3B,MAAO,KAAU,QACV,YAAiB,cACjB,EAAM,WAAa,GAS9B,EAAQ,SAAW,SAAS,EAAO,CAC/B,GAAI,GAAO,OAAO,UAAU,SAAS,KAAK,GAE1C,MAAO,KAAU,QACT,KAAS,qBAAuB,IAAS,4BACzC,UAAY,IACZ,GAAM,SAAW,GAAK,EAAQ,KAAK,EAAM,MASrD,EAAQ,OAAS,SAAS,EAAO,CAC7B,MAAO,OAAO,IAAU,UACjB,YAAiB,SAS5B,EAAQ,GAAK,SAAS,EAAO,CACzB,GAAI,GAAO,OAAO,UAAU,SAAS,KAAK,GAE1C,MAAO,KAAS,sBAMd,IACC,SAAS,EAAQ,EAA0B,EAAqB,CAEvE,GAAI,GAAK,EAAoB,KACzB,EAAW,EAAoB,KAWnC,WAAgB,EAAQ,EAAM,EAAU,CACpC,GAAI,CAAC,GAAU,CAAC,GAAQ,CAAC,EACrB,KAAM,IAAI,OAAM,8BAGpB,GAAI,CAAC,EAAG,OAAO,GACX,KAAM,IAAI,WAAU,oCAGxB,GAAI,CAAC,EAAG,GAAG,GACP,KAAM,IAAI,WAAU,qCAGxB,GAAI,EAAG,KAAK,GACR,MAAO,GAAW,EAAQ,EAAM,GAE/B,GAAI,EAAG,SAAS,GACjB,MAAO,GAAe,EAAQ,EAAM,GAEnC,GAAI,EAAG,OAAO,GACf,MAAO,GAAe,EAAQ,EAAM,GAGpC,KAAM,IAAI,WAAU,6EAa5B,WAAoB,EAAM,EAAM,EAAU,CACtC,SAAK,iBAAiB,EAAM,GAErB,CACH,QAAS,UAAW,CAChB,EAAK,oBAAoB,EAAM,KAc3C,WAAwB,EAAU,EAAM,EAAU,CAC9C,aAAM,UAAU,QAAQ,KAAK,EAAU,SAAS,EAAM,CAClD,EAAK,iBAAiB,EAAM,KAGzB,CACH,QAAS,UAAW,CAChB,MAAM,UAAU,QAAQ,KAAK,EAAU,SAAS,EAAM,CAClD,EAAK,oBAAoB,EAAM,OAe/C,WAAwB,EAAU,EAAM,EAAU,CAC9C,MAAO,GAAS,SAAS,KAAM,EAAU,EAAM,GAGnD,EAAO,QAAU,GAKX,IACC,SAAS,EAAQ,CAExB,WAAgB,EAAS,CACrB,GAAI,GAEJ,GAAI,EAAQ,WAAa,SACrB,EAAQ,QAER,EAAe,EAAQ,cAElB,EAAQ,WAAa,SAAW,EAAQ,WAAa,WAAY,CACtE,GAAI,GAAa,EAAQ,aAAa,YAEtC,AAAK,GACD,EAAQ,aAAa,WAAY,IAGrC,EAAQ,SACR,EAAQ,kBAAkB,EAAG,EAAQ,MAAM,QAEtC,GACD,EAAQ,gBAAgB,YAG5B,EAAe,EAAQ,UAEtB,CACD,AAAI,EAAQ,aAAa,oBACrB,EAAQ,QAGZ,GAAI,GAAY,OAAO,eACnB,EAAQ,SAAS,cAErB,EAAM,mBAAmB,GACzB,EAAU,kBACV,EAAU,SAAS,GAEnB,EAAe,EAAU,WAG7B,MAAO,GAGX,EAAO,QAAU,GAKX,IACC,SAAS,EAAQ,CAExB,YAAc,EAKd,EAAE,UAAY,CACZ,GAAI,SAAU,EAAM,EAAU,EAAK,CACjC,GAAI,GAAI,KAAK,GAAM,MAAK,EAAI,IAE5B,MAAC,GAAE,IAAU,GAAE,GAAQ,KAAK,KAAK,CAC/B,GAAI,EACJ,IAAK,IAGA,MAGT,KAAM,SAAU,EAAM,EAAU,EAAK,CACnC,GAAI,GAAO,KACX,YAAqB,CACnB,EAAK,IAAI,EAAM,GACf,EAAS,MAAM,EAAK,WAGtB,SAAS,EAAI,EACN,KAAK,GAAG,EAAM,EAAU,IAGjC,KAAM,SAAU,EAAM,CACpB,GAAI,GAAO,GAAG,MAAM,KAAK,UAAW,GAChC,EAAW,OAAK,GAAM,MAAK,EAAI,KAAK,IAAS,IAAI,QACjD,EAAI,EACJ,EAAM,EAAO,OAEjB,IAAK,EAAG,EAAI,EAAK,IACf,EAAO,GAAG,GAAG,MAAM,EAAO,GAAG,IAAK,GAGpC,MAAO,OAGT,IAAK,SAAU,EAAM,EAAU,CAC7B,GAAI,GAAI,KAAK,GAAM,MAAK,EAAI,IACxB,EAAO,EAAE,GACT,EAAa,GAEjB,GAAI,GAAQ,EACV,OAAS,GAAI,EAAG,EAAM,EAAK,OAAQ,EAAI,EAAK,IAC1C,AAAI,EAAK,GAAG,KAAO,GAAY,EAAK,GAAG,GAAG,IAAM,GAC9C,EAAW,KAAK,EAAK,IAQ3B,MAAC,GAAW,OACR,EAAE,GAAQ,EACV,MAAO,GAAE,GAEN,OAIX,EAAO,QAAU,EACjB,EAAO,QAAQ,YAAc,IAQf,EAA2B,GAG/B,WAA6B,EAAU,CAEtC,GAAG,EAAyB,GAC3B,MAAO,GAAyB,GAAU,QAG3C,GAAI,GAAS,EAAyB,GAAY,CAGjD,QAAS,IAIV,SAAoB,GAAU,EAAQ,EAAO,QAAS,GAG/C,EAAO,QAKf,MAAC,WAAW,CAEX,EAAoB,EAAI,SAAS,EAAQ,CACxC,GAAI,GAAS,GAAU,EAAO,WAC7B,UAAW,CAAE,MAAO,GAAO,SAC3B,UAAW,CAAE,MAAO,IACrB,SAAoB,EAAE,EAAQ,CAAE,EAAG,IAC5B,MAKR,UAAW,CAEX,EAAoB,EAAI,SAAS,EAAS,EAAY,CACrD,OAAQ,KAAO,GACd,AAAG,EAAoB,EAAE,EAAY,IAAQ,CAAC,EAAoB,EAAE,EAAS,IAC5E,OAAO,eAAe,EAAS,EAAK,CAAE,WAAY,GAAM,IAAK,EAAW,SAO3E,UAAW,CACX,EAAoB,EAAI,SAAS,EAAK,EAAM,CAAE,MAAO,QAAO,UAAU,eAAe,KAAK,EAAK,OAOzF,EAAoB,QAEpC,YCx7BD,oBAQA,aAOA,GAAI,IAAkB,UAOtB,GAAO,QAAU,GAUjB,YAAoB,EAAQ,CAC1B,GAAI,GAAM,GAAK,EACX,EAAQ,GAAgB,KAAK,GAEjC,GAAI,CAAC,EACH,MAAO,GAGT,GAAI,GACA,EAAO,GACP,EAAQ,EACR,EAAY,EAEhB,IAAK,EAAQ,EAAM,MAAO,EAAQ,EAAI,OAAQ,IAAS,CACrD,OAAQ,EAAI,WAAW,QAChB,IACH,EAAS,SACT,UACG,IACH,EAAS,QACT,UACG,IACH,EAAS,QACT,UACG,IACH,EAAS,OACT,UACG,IACH,EAAS,OACT,cAEA,SAGJ,AAAI,IAAc,GAChB,IAAQ,EAAI,UAAU,EAAW,IAGnC,EAAY,EAAQ,EACpB,GAAQ,EAGV,MAAO,KAAc,EACjB,EAAO,EAAI,UAAU,EAAW,GAChC,KCtDN,OAAO,SCtBP,OAAkB,SACZ,CACF,YACA,YACA,UACA,cACA,WACA,cACA,aACA,eACA,gBACA,mBACA,YACA,SACA,YACA,kBACA,gBACA,WACA,oBACA,oBACA,iBACA,wBACA,gBACA,mBACA,0BACA,2BACA,WCtBE,WAAqB,EAAU,CACnC,MAAO,OAAO,IAAU,WCIpB,YAA8B,EAAgC,CAClE,GAAM,GAAS,SAAC,EAAa,CAC3B,MAAM,KAAK,GACX,EAAS,MAAQ,GAAI,SAAQ,OAGzB,EAAW,EAAW,GAC5B,SAAS,UAAY,OAAO,OAAO,MAAM,WACzC,EAAS,UAAU,YAAc,EAC1B,ECAF,GAAM,IAA+C,GAC1D,SAAC,EAAM,CACL,MAAA,UAA4C,EAA0B,CACpE,EAAO,MACP,KAAK,QAAU,EACR,EAAO,OAAM;EACxB,EAAO,IAAI,SAAC,EAAK,EAAC,CAAK,MAAG,GAAI,EAAC,KAAK,EAAI,aAAc,KAAK;KACnD,GACJ,KAAK,KAAO,sBACZ,KAAK,OAAS,KCtBd,YAAuB,EAA6B,EAAO,CAC/D,GAAI,EAAK,CACP,GAAM,GAAQ,EAAI,QAAQ,GAC1B,GAAK,GAAS,EAAI,OAAO,EAAO,ICSpC,GAAA,IAAA,UAAA,CAyBE,WAAoB,EAA4B,CAA5B,KAAA,gBAAA,EAdb,KAAA,OAAS,GAER,KAAA,WAAmD,KAMnD,KAAA,WAAoD,KAc5D,SAAA,UAAA,YAAA,UAAA,aACM,EAEJ,GAAI,CAAC,KAAK,OAAQ,CAChB,KAAK,OAAS,GAGN,GAAA,GAAe,KAAI,WAC3B,GAAI,EAEF,GADA,KAAK,WAAa,KACd,MAAM,QAAQ,OAChB,OAAqB,GAAA,GAAA,GAAU,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAA5B,GAAM,GAAM,EAAA,MACf,EAAO,OAAO,4GAGhB,GAAW,OAAO,MAId,GAAA,GAAoB,KAAI,gBAChC,GAAI,EAAW,GACb,GAAI,CACF,UACO,EAAP,CACA,EAAS,YAAa,IAAsB,EAAE,OAAS,CAAC,GAIpD,GAAA,GAAe,KAAI,WAC3B,GAAI,EAAY,CACd,KAAK,WAAa,SAClB,OAAuB,GAAA,GAAA,GAAU,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAA9B,GAAM,GAAQ,EAAA,MACjB,GAAI,CACF,GAAa,SACN,EAAP,CACA,EAAS,GAAM,KAAN,EAAU,GACnB,AAAI,YAAe,IACjB,EAAM,EAAA,EAAA,GAAA,EAAO,IAAM,EAAK,EAAI,SAE5B,EAAO,KAAK,uGAMpB,GAAI,EACF,KAAM,IAAI,IAAoB,KAuBpC,EAAA,UAAA,IAAA,SAAI,EAAuB,OAGzB,GAAI,GAAY,IAAa,KAC3B,GAAI,KAAK,OAGP,GAAa,OACR,CACL,GAAI,YAAoB,GAAc,CAGpC,GAAI,EAAS,QAAU,EAAS,WAAW,MACzC,OAEF,EAAS,WAAW,MAEtB,AAAC,MAAK,WAAa,GAAA,KAAK,cAAU,MAAA,IAAA,OAAA,EAAI,IAAI,KAAK,KAU7C,EAAA,UAAA,WAAR,SAAmB,EAAoB,CAC7B,GAAA,GAAe,KAAI,WAC3B,MAAO,KAAe,GAAW,MAAM,QAAQ,IAAe,EAAW,SAAS,IAU5E,EAAA,UAAA,WAAR,SAAmB,EAAoB,CAC7B,GAAA,GAAe,KAAI,WAC3B,KAAK,WAAa,MAAM,QAAQ,GAAe,GAAW,KAAK,GAAS,GAAc,EAAa,CAAC,EAAY,GAAU,GAOpH,EAAA,UAAA,cAAR,SAAsB,EAAoB,CAChC,GAAA,GAAe,KAAI,WAC3B,AAAI,IAAe,EACjB,KAAK,WAAa,KACT,MAAM,QAAQ,IACvB,GAAU,EAAY,IAkB1B,EAAA,UAAA,OAAA,SAAO,EAAsC,CACnC,GAAA,GAAe,KAAI,WAC3B,GAAc,GAAU,EAAY,GAEhC,YAAoB,IACtB,EAAS,cAAc,OAhLb,EAAA,MAAS,UAAA,CACrB,GAAM,GAAQ,GAAI,GAClB,SAAM,OAAS,GACR,KAgLX,KAEO,GAAM,IAAqB,GAAa,MAEzC,YAAyB,EAAU,CACvC,MACE,aAAiB,KAChB,GAAS,UAAY,IAAS,EAAW,EAAM,SAAW,EAAW,EAAM,MAAQ,EAAW,EAAM,aAIzG,YAAsB,EAAuC,CAC3D,AAAI,EAAW,GACb,IAEA,EAAS,cC9MN,GAAM,IAAuB,CAClC,iBAAkB,KAClB,sBAAuB,KACvB,QAAS,OACT,sCAAuC,GACvC,yBAA0B,ICErB,GAAM,IAAmC,CAG9C,WAAU,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACD,GAAA,GAAa,GAAe,SACpC,MAAQ,KAAQ,KAAA,OAAR,EAAU,aAAc,YAAW,MAAA,OAAA,EAAA,GAAA,EAAI,MAEjD,aAAY,SAAC,EAAM,CACT,GAAA,GAAa,GAAe,SACpC,MAAQ,KAAQ,KAAA,OAAR,EAAU,eAAgB,cAAc,IAElD,SAAU,QCbN,YAA+B,EAAQ,CAC3C,GAAgB,WAAW,UAAA,CACjB,GAAA,GAAqB,GAAM,iBACnC,GAAI,EAEF,EAAiB,OAGjB,MAAM,KCnBN,aAAc,ECMb,GAAM,IAAyB,UAAA,CAAM,MAAA,IAAmB,IAAK,OAAW,WAOzE,YAA4B,EAAU,CAC1C,MAAO,IAAmB,IAAK,OAAW,GAQtC,YAA8B,EAAQ,CAC1C,MAAO,IAAmB,IAAK,EAAO,QASlC,YAA6B,EAAuB,EAAY,EAAU,CAC9E,MAAO,CACL,KAAI,EACJ,MAAK,EACL,MAAK,GClBT,GAAA,IAAA,SAAA,EAAA,CAAmC,EAAA,EAAA,GA6BjC,WAAY,EAA6C,CAAzD,GAAA,GACE,EAAA,KAAA,OAAO,KATC,SAAA,UAAqB,GAU7B,AAAI,EACF,GAAK,YAAc,EAGf,GAAe,IACjB,EAAY,IAAI,IAGlB,EAAK,YAAc,KAvBhB,SAAA,OAAP,SAAiB,EAAwB,EAA2B,EAAqB,CACvF,MAAO,IAAI,IAAe,EAAM,EAAO,IAiCzC,EAAA,UAAA,KAAA,SAAK,EAAS,CACZ,AAAI,KAAK,UACP,GAA0B,GAAiB,GAAQ,MAEnD,KAAK,MAAM,IAWf,EAAA,UAAA,MAAA,SAAM,EAAS,CACb,AAAI,KAAK,UACP,GAA0B,GAAkB,GAAM,MAElD,MAAK,UAAY,GACjB,KAAK,OAAO,KAUhB,EAAA,UAAA,SAAA,UAAA,CACE,AAAI,KAAK,UACP,GAA0B,GAAuB,MAEjD,MAAK,UAAY,GACjB,KAAK,cAIT,EAAA,UAAA,YAAA,UAAA,CACE,AAAK,KAAK,QACR,MAAK,UAAY,GACjB,EAAA,UAAM,YAAW,KAAA,MACjB,KAAK,YAAc,OAIb,EAAA,UAAA,MAAV,SAAgB,EAAQ,CACtB,KAAK,YAAY,KAAK,IAGd,EAAA,UAAA,OAAV,SAAiB,EAAQ,CACvB,GAAI,CACF,KAAK,YAAY,MAAM,WAEvB,KAAK,gBAIC,EAAA,UAAA,UAAV,UAAA,CACE,GAAI,CACF,KAAK,YAAY,mBAEjB,KAAK,gBAGX,GApHmC,IAsHnC,GAAA,IAAA,SAAA,EAAA,CAAuC,EAAA,EAAA,GACrC,WACE,EACA,EACA,EAA8B,CAHhC,GAAA,GAKE,EAAA,KAAA,OAAO,KAEH,EACJ,GAAI,EAAW,GAGb,EAAO,UACE,EAAgB,CAMzB,AAAG,EAA0B,EAAc,KAAlC,EAAoB,EAAc,MAA3B,EAAa,EAAc,SAC3C,GAAI,GACJ,AAAI,GAAQ,GAAO,yBAIjB,GAAU,OAAO,OAAO,GACxB,EAAQ,YAAc,UAAA,CAAM,MAAA,GAAK,gBAEjC,EAAU,EAEZ,EAAO,GAAI,KAAA,OAAJ,EAAM,KAAK,GAClB,EAAQ,GAAK,KAAA,OAAL,EAAO,KAAK,GACpB,EAAW,GAAQ,KAAA,OAAR,EAAU,KAAK,GAK5B,SAAK,YAAc,CACjB,KAAM,EAAO,GAAqB,EAAM,GAAQ,GAChD,MAAO,GAAqB,GAAK,KAAL,EAAS,GAAqB,GAC1D,SAAU,EAAW,GAAqB,EAAU,GAAQ,MAGlE,MAAA,IA3CuC,IAoDvC,YAA8B,EAA8B,EAA6B,CACvF,MAAO,WAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACN,GAAI,CACF,EAAO,MAAA,OAAA,EAAA,GAAA,EAAI,WACJ,EAAP,CACA,GAAI,GAAO,sCAIT,GAAK,EAAiB,6BACnB,EAAiB,YAAc,MAIhC,MAAM,OAKR,IAAqB,KAW7B,YAA6B,EAAQ,CACnC,KAAM,GAQR,YAAmC,EAA2C,EAA2B,CAC/F,GAAA,GAA0B,GAAM,sBACxC,GAAyB,GAAgB,WAAW,UAAA,CAAM,MAAA,GAAsB,EAAc,KAQzF,GAAM,IAA6D,CACxE,OAAQ,GACR,KAAM,GACN,MAAO,GACP,SAAU,ICjPL,GAAM,IAAc,UAAA,CAAM,MAAC,OAAO,SAAW,YAAc,OAAO,YAAe,kBCDlF,YAAsB,EAAI,CAC9B,MAAO,GCsEH,aAAc,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACnB,MAAO,IAAc,GAIjB,YAA8B,EAA+B,CACjE,MAAI,GAAI,SAAW,EACV,GAGL,EAAI,SAAW,EACV,EAAI,GAGN,SAAe,EAAQ,CAC5B,MAAO,GAAI,OAAO,SAAC,EAAW,EAAuB,CAAK,MAAA,GAAG,IAAO,ICpExE,GAAA,GAAA,UAAA,CAkBE,WAAY,EAA6E,CACvF,AAAI,GACF,MAAK,WAAa,GA8BtB,SAAA,UAAA,KAAA,SAAQ,EAAyB,CAC/B,GAAM,GAAa,GAAI,GACvB,SAAW,OAAS,KACpB,EAAW,SAAW,EACf,GA2IT,EAAA,UAAA,UAAA,SACE,EACA,EACA,EAA8B,CAE9B,GAAM,GAAa,GAAa,GAAkB,EAAiB,GAAI,IAAe,EAAgB,EAAO,GAE7G,GAAI,GAAO,sCACT,KAAK,8BAA8B,OAC9B,CACC,GAAA,GAAuB,KAArB,EAAQ,EAAA,SAAE,EAAM,EAAA,OACxB,EAAW,IACT,EAGI,EAAS,KAAK,EAAY,GAC1B,EAIA,KAAK,WAAW,GAGhB,KAAK,cAAc,IAG3B,MAAO,IAMD,EAAA,UAAA,8BAAR,SAAsC,EAA+B,CACnE,GAAM,GAAuB,EAC7B,EAAgB,6BAA+B,GACvC,GAAA,GAAa,KAAI,SACzB,GAAI,EAIF,EAAW,IAAI,EAAS,KAAK,EAAY,KAAK,aAE9C,IAAI,CACF,EAAW,IAAI,KAAK,WAAW,UACxB,EAAP,CACA,EAAgB,YAAc,EAUlC,OADI,GAAO,EACJ,GAAM,CAIX,GAAI,eAAiB,GACnB,GAAI,CACF,KAAM,GAAK,oBAEX,EAAW,cAGf,EAAO,EAAK,YAGd,EAAgB,6BAA+B,IAIvC,EAAA,UAAA,cAAV,SAAwB,EAAmB,CACzC,GAAI,CACF,MAAO,MAAK,WAAW,SAChB,EAAP,CAIA,EAAK,MAAM,KA+Df,EAAA,UAAA,QAAA,SAAQ,EAA0B,EAAoC,CAAtE,GAAA,GAAA,KACE,SAAc,GAAe,GAEtB,GAAI,GAAkB,SAAC,EAAS,EAAM,CAG3C,GAAI,GACJ,EAAe,EAAK,UAClB,SAAC,EAAK,CACJ,GAAI,CACF,EAAK,SACE,EAAP,CACA,EAAO,GACP,GAAY,MAAZ,EAAc,gBAGlB,EACA,MAMI,EAAA,UAAA,WAAV,SAAqB,EAA2B,OAC9C,MAAO,GAAA,KAAK,UAAM,MAAA,IAAA,OAAA,OAAA,EAAE,UAAU,IAQhC,EAAA,UAAC,IAAD,UAAA,CACE,MAAO,OA6FT,EAAA,UAAA,KAAA,UAAA,QAAK,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACH,MAAO,GAAW,OAAS,GAAc,GAAY,MAAQ,MA8B/D,EAAA,UAAA,UAAA,SAAU,EAAoC,CAA9C,GAAA,GAAA,KACE,SAAc,GAAe,GAEtB,GAAI,GAAY,SAAC,EAAS,EAAM,CACrC,GAAI,GACJ,EAAK,UACH,SAAC,EAAI,CAAK,MAAC,GAAQ,GACnB,SAAC,EAAQ,CAAK,MAAA,GAAO,IACrB,UAAA,CAAM,MAAA,GAAQ,QAldb,EAAA,OAAkC,SAAI,EAAwD,CACnG,MAAO,IAAI,GAAc,IAqd7B,KASA,YAAwB,EAA+C,OACrE,MAAO,GAAA,GAAW,KAAX,EAAe,GAAO,WAAO,MAAA,IAAA,OAAA,EAAI,QAG1C,YAAuB,EAAU,CAC/B,MAAO,IAAS,EAAW,EAAM,OAAS,EAAW,EAAM,QAAU,EAAW,EAAM,UAGxF,YAAyB,EAAU,CACjC,MAAQ,IAAS,YAAiB,KAAgB,GAAW,IAAU,GAAe,GCrhBlF,YAAkB,EAAW,CACjC,MAAO,GAAW,GAAM,KAAA,OAAN,EAAQ,MAOtB,WACJ,EAAqF,CAErF,MAAO,UAAC,EAAqB,CAC3B,GAAI,GAAQ,GACV,MAAO,GAAO,KAAK,SAA+B,EAA2B,CAC3E,GAAI,CACF,MAAO,GAAK,EAAc,YACnB,EAAP,CACA,KAAK,MAAM,MAIjB,KAAM,IAAI,WAAU,2CCvBxB,GAAA,GAAA,SAAA,EAAA,CAA2C,EAAA,EAAA,GAazC,WACE,EACA,EACA,EACA,EACQ,EAAuB,CALjC,GAAA,GAmBE,EAAA,KAAA,KAAM,IAAY,KAdV,SAAA,WAAA,EAeR,EAAK,MAAQ,EACT,SAAuC,EAAQ,CAC7C,GAAI,CACF,EAAO,SACA,EAAP,CACA,EAAY,MAAM,KAGtB,EAAA,UAAM,MACV,EAAK,OAAS,EACV,SAAuC,EAAQ,CAC7C,GAAI,CACF,EAAQ,SACD,EAAP,CAEA,EAAY,MAAM,WAGlB,KAAK,gBAGT,EAAA,UAAM,OACV,EAAK,UAAY,EACb,UAAA,CACE,GAAI,CACF,UACO,EAAP,CAEA,EAAY,MAAM,WAGlB,KAAK,gBAGT,EAAA,UAAM,YAGZ,SAAA,UAAA,YAAA,UAAA,OACU,EAAW,KAAI,OACvB,EAAA,UAAM,YAAW,KAAA,MAEjB,CAAC,GAAU,IAAA,KAAK,cAAU,MAAA,IAAA,QAAA,EAAA,KAAf,QAEf,GA5E2C,ICQpC,GAAM,IAAiD,CAG5D,SAAA,SAAS,EAAQ,CACf,GAAI,GAAU,sBACV,EAAkD,qBAC9C,EAAa,GAAsB,SAC3C,AAAI,GACF,GAAU,EAAS,sBACnB,EAAS,EAAS,sBAEpB,GAAM,GAAS,EAAQ,SAAC,EAAS,CAI/B,EAAS,OACT,EAAS,KAEX,MAAO,IAAI,IAAa,UAAA,CAAM,MAAA,IAAM,KAAA,OAAN,EAAS,MAEzC,sBAAqB,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACZ,GAAA,GAAa,GAAsB,SAC3C,MAAQ,KAAQ,KAAA,OAAR,EAAU,wBAAyB,uBAAsB,MAAA,OAAA,EAAA,GAAA,EAAI,MAEvE,qBAAoB,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACX,GAAA,GAAa,GAAsB,SAC3C,MAAQ,KAAQ,KAAA,OAAR,EAAU,uBAAwB,sBAAqB,MAAA,OAAA,EAAA,GAAA,EAAI,MAErE,SAAU,QCrBL,GAAM,IAAuD,GAClE,SAAC,EAAM,CACL,MAAA,WAAoC,CAClC,EAAO,MACP,KAAK,KAAO,0BACZ,KAAK,QAAU,yBCXrB,GAAA,GAAA,SAAA,EAAA,CAAgC,EAAA,EAAA,GAqB9B,YAAA,CAAA,GAAA,GAEE,EAAA,KAAA,OAAO,KAtBT,SAAA,OAAS,GAET,EAAA,UAA2B,GAE3B,EAAA,UAAY,GAEZ,EAAA,SAAW,GAEX,EAAA,YAAmB,OAkBnB,SAAA,UAAA,KAAA,SAAQ,EAAwB,CAC9B,GAAM,GAAU,GAAI,IAAiB,KAAM,MAC3C,SAAQ,SAAW,EACZ,GAIC,EAAA,UAAA,eAAV,UAAA,CACE,GAAI,KAAK,OACP,KAAM,IAAI,KAId,EAAA,UAAA,KAAA,SAAK,EAAQ,SAEX,GADA,KAAK,iBACD,CAAC,KAAK,UAAW,CACnB,GAAM,GAAO,KAAK,UAAU,YAC5B,OAAuB,GAAA,GAAA,GAAI,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAxB,GAAM,GAAQ,EAAA,MACjB,EAAS,KAAK,wGAKpB,EAAA,UAAA,MAAA,SAAM,EAAQ,CAEZ,GADA,KAAK,iBACD,CAAC,KAAK,UAAW,CACnB,KAAK,SAAW,KAAK,UAAY,GACjC,KAAK,YAAc,EAEnB,OADQ,GAAc,KAAI,UACnB,EAAU,QACf,EAAU,QAAS,MAAM,KAK/B,EAAA,UAAA,SAAA,UAAA,CAEE,GADA,KAAK,iBACD,CAAC,KAAK,UAAW,CACnB,KAAK,UAAY,GAEjB,OADQ,GAAc,KAAI,UACnB,EAAU,QACf,EAAU,QAAS,aAKzB,EAAA,UAAA,YAAA,UAAA,CACE,KAAK,UAAY,KAAK,OAAS,GAC/B,KAAK,UAAY,MAIT,EAAA,UAAA,cAAV,SAAwB,EAAyB,CAC/C,YAAK,iBACE,EAAA,UAAM,cAAa,KAAA,KAAC,IAInB,EAAA,UAAA,WAAV,SAAqB,EAAyB,CAC5C,YAAK,iBACL,KAAK,wBAAwB,GACtB,KAAK,gBAAgB,IAIpB,EAAA,UAAA,gBAAV,SAA0B,EAA2B,CAC7C,GAAA,GAAqC,KAAnC,EAAQ,EAAA,SAAE,EAAS,EAAA,UAAE,EAAS,EAAA,UACtC,MAAO,IAAY,EACf,GACC,GAAU,KAAK,GAAa,GAAI,IAAa,UAAA,CAAM,MAAA,IAAU,EAAW,OAIrE,EAAA,UAAA,wBAAV,SAAkC,EAA2B,CACrD,GAAA,GAAuC,KAArC,EAAQ,EAAA,SAAE,EAAW,EAAA,YAAE,EAAS,EAAA,UACxC,AAAI,EACF,EAAW,MAAM,GACR,GACT,EAAW,YAUf,EAAA,UAAA,aAAA,UAAA,CACE,GAAM,GAAkB,GAAI,GAC5B,SAAW,OAAS,KACb,GArGF,EAAA,OAAkC,SAAI,EAA0B,EAAqB,CAC1F,MAAO,IAAI,IAAoB,EAAa,IAsGhD,GAxHgC,GA6HhC,GAAA,IAAA,SAAA,EAAA,CAAyC,EAAA,EAAA,GACvC,WAES,EACP,EAAsB,CAHxB,GAAA,GAKE,EAAA,KAAA,OAAO,KAHA,SAAA,YAAA,EAIP,EAAK,OAAS,IAGhB,SAAA,UAAA,KAAA,SAAK,EAAQ,SACX,AAAA,GAAA,GAAA,KAAK,eAAW,MAAA,IAAA,OAAA,OAAA,EAAE,QAAI,MAAA,IAAA,QAAA,EAAA,KAAA,EAAG,IAG3B,EAAA,UAAA,MAAA,SAAM,EAAQ,SACZ,AAAA,GAAA,GAAA,KAAK,eAAW,MAAA,IAAA,OAAA,OAAA,EAAE,SAAK,MAAA,IAAA,QAAA,EAAA,KAAA,EAAG,IAG5B,EAAA,UAAA,SAAA,UAAA,SACE,AAAA,GAAA,GAAA,KAAK,eAAW,MAAA,IAAA,OAAA,OAAA,EAAE,YAAQ,MAAA,IAAA,QAAA,EAAA,KAAA,IAIlB,EAAA,UAAA,WAAV,SAAqB,EAAyB,SAC5C,MAAO,GAAA,GAAA,KAAK,UAAM,MAAA,IAAA,OAAA,OAAA,EAAE,UAAU,MAAW,MAAA,IAAA,OAAA,EAAI,IAEjD,GA1ByC,GCtIlC,GAAM,IAA+C,CAC1D,IAAG,UAAA,CAGD,MAAQ,IAAsB,UAAY,MAAM,OAElD,SAAU,QCwBZ,GAAA,IAAA,SAAA,EAAA,CAAsC,EAAA,EAAA,GAUpC,WACU,EACA,EACA,EAA6D,CAF7D,AAAA,IAAA,QAAA,GAAA,UACA,IAAA,QAAA,GAAA,UACA,IAAA,QAAA,GAAA,IAHV,GAAA,GAKE,EAAA,KAAA,OAAO,KAJC,SAAA,YAAA,EACA,EAAA,YAAA,EACA,EAAA,mBAAA,EAZF,EAAA,QAA0B,GAC1B,EAAA,oBAAsB,GAc5B,EAAK,oBAAsB,IAAgB,SAC3C,EAAK,YAAc,KAAK,IAAI,EAAG,GAC/B,EAAK,YAAc,KAAK,IAAI,EAAG,KAGjC,SAAA,UAAA,KAAA,SAAK,EAAQ,CACL,GAAA,GAA+E,KAA7E,EAAS,EAAA,UAAE,EAAO,EAAA,QAAE,EAAmB,EAAA,oBAAE,EAAkB,EAAA,mBAAE,EAAW,EAAA,YAChF,AAAK,GACH,GAAQ,KAAK,GACb,CAAC,GAAuB,EAAQ,KAAK,EAAmB,MAAQ,IAElE,KAAK,cACL,EAAA,UAAM,KAAI,KAAA,KAAC,IAIH,EAAA,UAAA,WAAV,SAAqB,EAAyB,CAC5C,KAAK,iBACL,KAAK,cAQL,OANM,GAAe,KAAK,gBAAgB,GAEpC,EAAmC,KAAjC,EAAmB,EAAA,oBAAE,EAAO,EAAA,QAG9B,EAAO,EAAQ,QACZ,EAAI,EAAG,EAAI,EAAK,QAAU,CAAC,EAAW,OAAQ,GAAK,EAAsB,EAAI,EACpF,EAAW,KAAK,EAAK,IAGvB,YAAK,wBAAwB,GAEtB,GAGD,EAAA,UAAA,YAAR,UAAA,CACQ,GAAA,GAAoE,KAAlE,EAAW,EAAA,YAAE,EAAkB,EAAA,mBAAE,EAAO,EAAA,QAAE,EAAmB,EAAA,oBAK/D,EAAsB,GAAsB,EAAI,GAAK,EAK3D,GAJA,EAAc,UAAY,EAAqB,EAAQ,QAAU,EAAQ,OAAO,EAAG,EAAQ,OAAS,GAIhG,CAAC,EAAqB,CAKxB,OAJM,GAAM,EAAmB,MAC3B,EAAO,EAGF,EAAI,EAAG,EAAI,EAAQ,QAAW,EAAQ,IAAiB,EAAK,GAAK,EACxE,EAAO,EAET,GAAQ,EAAQ,OAAO,EAAG,EAAO,KAGvC,GAzEsC,GClBtC,GAAA,IAAA,SAAA,EAAA,CAA+B,EAAA,EAAA,GAC7B,WAAY,EAAsB,EAAmD,OACnF,GAAA,KAAA,OAAO,KAYF,SAAA,UAAA,SAAP,SAAgB,EAAW,EAAiB,CAAjB,MAAA,KAAA,QAAA,GAAA,GAClB,MAEX,GAjB+B,ICJxB,GAAM,IAAqC,CAGhD,YAAW,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACF,GAAA,GAAa,GAAgB,SACrC,MAAQ,KAAQ,KAAA,OAAR,EAAU,cAAe,aAAY,MAAA,OAAA,EAAA,GAAA,EAAI,MAEnD,cAAa,SAAC,EAAM,CACV,GAAA,GAAa,GAAgB,SACrC,MAAQ,KAAQ,KAAA,OAAR,EAAU,gBAAiB,eAAe,IAEpD,SAAU,QClBZ,GAAA,IAAA,SAAA,EAAA,CAAoC,EAAA,EAAA,GAOlC,WAAsB,EAAqC,EAAmD,CAA9G,GAAA,GACE,EAAA,KAAA,KAAM,EAAW,IAAK,KADF,SAAA,UAAA,EAAqC,EAAA,KAAA,EAFjD,EAAA,QAAmB,KAMtB,SAAA,UAAA,SAAP,SAAgB,EAAW,EAAiB,CAC1C,GADyB,IAAA,QAAA,GAAA,GACrB,KAAK,OACP,MAAO,MAIT,KAAK,MAAQ,EAEb,GAAM,GAAK,KAAK,GACV,EAAY,KAAK,UAuBvB,MAAI,IAAM,MACR,MAAK,GAAK,KAAK,eAAe,EAAW,EAAI,IAK/C,KAAK,QAAU,GAEf,KAAK,MAAQ,EAEb,KAAK,GAAK,KAAK,IAAM,KAAK,eAAe,EAAW,KAAK,GAAI,GAEtD,MAGC,EAAA,UAAA,eAAV,SAAyB,EAA2B,EAAW,EAAiB,CAAjB,MAAA,KAAA,QAAA,GAAA,GACtD,GAAiB,YAAY,EAAU,MAAM,KAAK,EAAW,MAAO,IAGnE,EAAA,UAAA,eAAV,SAAyB,EAA4B,EAAS,EAAwB,CAEpF,GAF4D,IAAA,QAAA,GAAA,GAExD,GAAS,MAAQ,KAAK,QAAU,GAAS,KAAK,UAAY,GAC5D,MAAO,GAIT,GAAiB,cAAc,IAQ1B,EAAA,UAAA,QAAP,SAAe,EAAU,EAAa,CACpC,GAAI,KAAK,OACP,MAAO,IAAI,OAAM,gCAGnB,KAAK,QAAU,GACf,GAAM,GAAQ,KAAK,SAAS,EAAO,GACnC,GAAI,EACF,MAAO,GACF,AAAI,KAAK,UAAY,IAAS,KAAK,IAAM,MAc9C,MAAK,GAAK,KAAK,eAAe,KAAK,UAAW,KAAK,GAAI,QAIjD,EAAA,UAAA,SAAV,SAAmB,EAAU,EAAc,CACzC,GAAI,GAAmB,GACnB,EACJ,GAAI,CACF,KAAK,KAAK,SACH,EAAP,CACA,EAAU,GACV,EAAc,CAAC,CAAC,GAAK,GAAM,GAAI,OAAM,GAEvC,GAAI,EACF,YAAK,cACE,GAIX,EAAA,UAAA,YAAA,UAAA,CACE,GAAI,CAAC,KAAK,OAAQ,CACV,GAAA,GAAoB,KAAlB,EAAE,EAAA,GAAE,EAAS,EAAA,UACb,EAAY,EAAS,QAE7B,KAAK,KAAO,KAAK,MAAQ,KAAK,UAAY,KAC1C,KAAK,QAAU,GAEf,GAAU,EAAS,MACf,GAAM,MACR,MAAK,GAAK,KAAK,eAAe,EAAW,EAAI,OAG/C,KAAK,MAAQ,KACb,EAAA,UAAM,YAAW,KAAA,QAGvB,GAxIoC,ICiBpC,GAAA,IAAA,UAAA,CAGE,WAAoB,EAAoC,EAAiC,CAAjC,AAAA,IAAA,QAAA,GAAoB,EAAU,KAAlE,KAAA,oBAAA,EAClB,KAAK,IAAM,EA8BN,SAAA,UAAA,SAAP,SAAmB,EAAqD,EAAmB,EAAS,CAA5B,MAAA,KAAA,QAAA,GAAA,GAC/D,GAAI,MAAK,oBAAuB,KAAM,GAAM,SAAS,EAAO,IAlCvD,EAAA,IAAoB,GAAsB,IAoC1D,KCzDA,GAAA,IAAA,SAAA,EAAA,CAAoC,EAAA,EAAA,GAkBlC,WAAY,EAAgC,EAAiC,CAAjC,AAAA,IAAA,QAAA,GAAoB,GAAU,KAA1E,GAAA,GACE,EAAA,KAAA,KAAM,EAAiB,IAAI,KAlBtB,SAAA,QAAmC,GAOnC,EAAA,QAAmB,GAQnB,EAAA,WAAkB,SAMlB,SAAA,UAAA,MAAP,SAAa,EAAwB,CAC3B,GAAA,GAAY,KAAI,QAExB,GAAI,KAAK,QAAS,CAChB,EAAQ,KAAK,GACb,OAGF,GAAI,GACJ,KAAK,QAAU,GAEf,EACE,IAAK,EAAQ,EAAO,QAAQ,EAAO,MAAO,EAAO,OAC/C,YAEM,EAAS,EAAQ,SAI3B,GAFA,KAAK,QAAU,GAEX,EAAO,CACT,KAAQ,EAAS,EAAQ,SACvB,EAAO,cAET,KAAM,KAGZ,GAhDoC,IC8C7B,GAAM,IAAiB,GAAI,IAAe,IAKpC,GAAQ,GClDrB,GAAA,IAAA,SAAA,EAAA,CAA6C,EAAA,EAAA,GAC3C,WAAsB,EAA8C,EAAmD,CAAvH,GAAA,GACE,EAAA,KAAA,KAAM,EAAW,IAAK,KADF,SAAA,UAAA,EAA8C,EAAA,KAAA,IAI1D,SAAA,UAAA,eAAV,SAAyB,EAAoC,EAAU,EAAiB,CAEtF,MAFqE,KAAA,QAAA,GAAA,GAEjE,IAAU,MAAQ,EAAQ,EACrB,EAAA,UAAM,eAAc,KAAA,KAAC,EAAW,EAAI,GAG7C,GAAU,QAAQ,KAAK,MAIhB,EAAU,YAAe,GAAU,WAAa,GAAuB,sBAAsB,UAAA,CAAM,MAAA,GAAU,MAAM,aAElH,EAAA,UAAA,eAAV,SAAyB,EAAoC,EAAU,EAAiB,CAItF,GAJqE,IAAA,QAAA,GAAA,GAIhE,GAAS,MAAQ,EAAQ,GAAO,GAAS,MAAQ,KAAK,MAAQ,EACjE,MAAO,GAAA,UAAM,eAAc,KAAA,KAAC,EAAW,EAAI,GAK7C,AAAI,EAAU,QAAQ,SAAW,GAC/B,IAAuB,qBAAqB,GAC5C,EAAU,WAAa,SAK7B,GAlC6C,ICF7C,GAAA,IAAA,SAAA,EAAA,CAA6C,EAAA,EAAA,GAA7C,YAAA,gDACS,SAAA,UAAA,MAAP,SAAa,EAAyB,CACpC,KAAK,QAAU,GACf,KAAK,WAAa,OAEV,GAAA,GAAY,KAAI,QACpB,EACA,EAAQ,GACZ,EAAS,GAAU,EAAQ,QAC3B,GAAM,GAAQ,EAAQ,OAEtB,EACE,IAAK,EAAQ,EAAO,QAAQ,EAAO,MAAO,EAAO,OAC/C,YAEK,EAAE,EAAQ,GAAU,GAAS,EAAQ,UAI9C,GAFA,KAAK,QAAU,GAEX,EAAO,CACT,KAAO,EAAE,EAAQ,GAAU,GAAS,EAAQ,UAC1C,EAAO,cAET,KAAM,KAGZ,GA1B6C,ICgCtC,GAAM,GAA0B,GAAI,IAAwB,ICR5D,GAAM,IAAQ,GAAI,GAAkB,SAAC,EAAU,CAAK,MAAA,GAAW,aCxBhE,YAA2B,EAAqB,EAAwB,CAC5E,MAAO,IAAI,GAAc,SAAC,EAAU,CAElC,GAAI,GAAI,EAER,MAAO,GAAU,SAAS,UAAA,CACxB,AAAI,IAAM,EAAM,OAGd,EAAW,WAIX,GAAW,KAAK,EAAM,MAIjB,EAAW,QACd,KAAK,gBCrBR,GAAM,IAAe,SAAI,EAAM,CAAwB,MAAA,IAAK,MAAO,GAAE,QAAW,UAAY,MAAO,IAAM,YCM1G,YAAoB,EAAU,CAClC,MAAO,GAAW,GAAK,KAAA,OAAL,EAAO,MCFrB,YAAgC,EAA6B,EAAwB,CACzF,MAAO,IAAI,GAAc,SAAA,EAAU,CACjC,GAAM,GAAM,GAAI,IAChB,SAAI,IAAI,EAAU,SAAS,UAAA,CACzB,GAAM,GAA+B,EAAc,MACnD,EAAI,IAAI,EAAW,UAAU,CAC3B,KAAI,SAAC,EAAK,CAAI,EAAI,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,KAAK,OAC/D,MAAK,SAAC,EAAG,CAAI,EAAI,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,MAAM,OAC/D,SAAQ,UAAA,CAAK,EAAI,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,qBAGtD,ICbL,YAA6B,EAAuB,EAAwB,CAChF,MAAO,IAAI,GAAc,SAAC,EAAU,CAClC,MAAO,GAAU,SAAS,UAAA,CACxB,MAAA,GAAM,KACJ,SAAC,EAAK,CACJ,EAAW,IACT,EAAU,SAAS,UAAA,CACjB,EAAW,KAAK,GAChB,EAAW,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,kBAIzD,SAAC,EAAG,CACF,EAAW,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,MAAM,YChB7D,aAA2B,CAC/B,MAAI,OAAO,SAAW,YAAc,CAAC,OAAO,SACnC,aAGF,OAAO,SAGT,GAAM,IAAW,KCJlB,YACJ,EACA,EACA,EACA,EAAS,CAAT,AAAA,IAAA,QAAA,GAAA,GAEA,GAAM,GAAe,EAAU,SAAS,UAAA,CACtC,GAAI,CACF,EAAQ,KAAK,YACN,EAAP,CACA,EAAW,MAAM,KAElB,GACH,SAAW,IAAI,GACR,ECPH,YAA8B,EAAoB,EAAwB,CAC9E,MAAO,IAAI,GAAc,SAAC,EAAU,CAClC,GAAI,GAKJ,SAAW,IACT,EAAU,SAAS,UAAA,CAEjB,EAAY,EAAc,MAG1B,GAAe,EAAY,EAAW,UAAA,CAE9B,GAAA,GAAkB,EAAS,OAAzB,EAAK,EAAA,MAAE,EAAI,EAAA,KACnB,AAAI,EAKF,EAAW,WAGX,GAAW,KAAK,GAGhB,KAAK,iBAUN,UAAA,CAAM,MAAA,GAAW,GAAQ,KAAA,OAAR,EAAU,SAAW,EAAS,YC5CpD,YAAmC,EAAyB,EAAwB,CACxF,GAAI,CAAC,EACH,KAAM,IAAI,OAAM,2BAElB,MAAO,IAAI,GAAc,SAAA,EAAU,CACjC,GAAM,GAAM,GAAI,IAChB,SAAI,IACF,EAAU,SAAS,UAAA,CACjB,GAAM,GAAW,EAAM,OAAO,iBAC9B,EAAI,IAAI,EAAU,SAAS,UAAA,CAAA,GAAA,GAAA,KACzB,EAAS,OAAO,KAAK,SAAA,EAAM,CACzB,AAAI,EAAO,KACT,EAAW,WAEX,GAAW,KAAK,EAAO,OACvB,EAAK,oBAMR,ICpBL,YAA8B,EAAU,CAC5C,MAAO,GAAW,EAAM,KCFpB,YAAqB,EAAU,CACnC,MAAO,GAAW,GAAK,KAAA,OAAL,EAAQ,KCHtB,YAA6B,EAAQ,CACzC,MAAO,QAAO,eAAiB,EAAW,GAAG,KAAA,OAAH,EAAM,OAAO,gBCCnD,YAA2C,EAAU,CAEzD,MAAO,IAAI,WACT,gBACE,KAAU,MAAQ,MAAO,IAAU,SAAW,oBAAsB,IAAI,EAAK,KAAG,4HCLhF,YAAuD,EAAqC,mGAC1F,EAAS,EAAe,qEAGF,MAAA,CAAA,EAAA,GAAM,EAAO,sBAA/B,GAAkB,EAAA,OAAhB,EAAK,EAAA,MAAE,EAAI,EAAA,KACf,iBAAA,CAAA,EAAA,UACF,MAAA,CAAA,EAAA,EAAA,2BAEI,WAAN,MAAA,CAAA,EAAA,EAAA,eAAA,SAAA,wCAGF,SAAO,yCAIL,YAAkC,EAAQ,CAG9C,MAAO,GAAW,GAAG,KAAA,OAAH,EAAK,WChBnB,YAAwC,EAA8B,EAAwB,CAClG,MAAO,IAAsB,GAAmC,GAAQ,GCqBpE,YAAuB,EAA2B,EAAwB,CAC9E,GAAI,GAAS,KAAM,CACjB,GAAI,GAAoB,GACtB,MAAO,IAAmB,EAAO,GAEnC,GAAI,GAAY,GACd,MAAO,IAAc,EAAO,GAE9B,GAAI,GAAU,GACZ,MAAO,IAAgB,EAAO,GAEhC,GAAI,GAAgB,GAClB,MAAO,IAAsB,EAAO,GAEtC,GAAI,GAAW,GACb,MAAO,IAAiB,EAAO,GAEjC,GAAI,GAAqB,GACvB,MAAO,IAA2B,EAAO,GAG7C,KAAM,IAAiC,GCqEnC,YAAkB,EAA2B,EAAyB,CAC1E,MAAO,GAAY,GAAU,EAAO,GAAa,EAAU,GAMvD,WAAuB,EAAyB,CACpD,GAAI,YAAiB,GACnB,MAAO,GAET,GAAI,GAAS,KAAM,CACjB,GAAI,GAAoB,GACtB,MAAO,IAAsB,GAE/B,GAAI,GAAY,GACd,MAAO,IAAc,GAEvB,GAAI,GAAU,GACZ,MAAO,IAAY,GAErB,GAAI,GAAgB,GAClB,MAAO,IAAkB,GAE3B,GAAI,GAAW,GACb,MAAO,IAAa,GAEtB,GAAI,GAAqB,GACvB,MAAO,IAAuB,GAIlC,KAAM,IAAiC,GAOzC,YAAkC,EAAQ,CACxC,MAAO,IAAI,GAAW,SAAC,EAAyB,CAC9C,GAAM,GAAM,EAAI,MAChB,GAAI,EAAW,EAAI,WACjB,MAAO,GAAI,UAAU,GAGvB,KAAM,IAAI,WAAU,oEAWlB,YAA2B,EAAmB,CAClD,MAAO,IAAI,GAAW,SAAC,EAAyB,CAU9C,OAAS,GAAI,EAAG,EAAI,EAAM,QAAU,CAAC,EAAW,OAAQ,IACtD,EAAW,KAAK,EAAM,IAExB,EAAW,aAIf,YAAwB,EAAuB,CAC7C,MAAO,IAAI,GAAW,SAAC,EAAyB,CAC9C,EACG,KACC,SAAC,EAAK,CACJ,AAAK,EAAW,QACd,GAAW,KAAK,GAChB,EAAW,aAGf,SAAC,EAAQ,CAAK,MAAA,GAAW,MAAM,KAEhC,KAAK,KAAM,MAIlB,YAAyB,EAAqB,CAC5C,MAAO,IAAI,GAAW,SAAC,EAAyB,aAC9C,OAAoB,GAAA,GAAA,GAAQ,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAzB,GAAM,GAAK,EAAA,MAEd,GADA,EAAW,KAAK,GACZ,EAAW,OACb,yGAGJ,EAAW,aAIf,YAA8B,EAA+B,CAC3D,MAAO,IAAI,GAAW,SAAC,EAAyB,CAC9C,GAAQ,EAAe,GAAY,MAAM,SAAC,EAAG,CAAK,MAAA,GAAW,MAAM,OAIvE,YAAmC,EAAqC,CACtE,MAAO,IAAkB,GAAmC,IAG9D,YAA0B,EAAiC,EAAyB,uIACxD,EAAA,GAAA,iFAIxB,GAJe,EAAK,EAAA,MACpB,EAAW,KAAK,GAGZ,EAAW,OACb,MAAA,CAAA,8RAGJ,SAAW,oBC3OP,YAA+B,EAAqB,EAAyB,CACjF,MAAO,GAAY,GAAc,EAAO,GAAa,GAAc,GCF/D,YAAsB,EAAU,CACpC,MAAO,IAAS,EAAW,EAAM,UCAnC,YAAiB,EAAQ,CACvB,MAAO,GAAI,EAAI,OAAS,GAGpB,YAA4B,EAAW,CAC3C,MAAO,GAAW,GAAK,IAAS,EAAK,MAAQ,OAGzC,YAAuB,EAAW,CACtC,MAAO,IAAY,GAAK,IAAS,EAAK,MAAQ,OAG1C,YAAoB,EAAa,EAAoB,CACzD,MAAO,OAAO,IAAK,IAAU,SAAW,EAAK,MAAS,EC+DlD,YAAY,QAAI,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACpB,GAAM,GAAY,GAAa,GAC/B,MAAO,GAAY,GAAc,EAAa,GAAa,GAAkB,GC3EzE,YAAsB,EAAU,CACpC,MAAO,aAAiB,OAAQ,CAAC,MAAM,GCqCnC,WAAoB,EAAyC,EAAa,CAC9E,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAEhC,GAAI,GAAQ,EAGZ,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAQ,CAG1C,EAAW,KAAK,EAAQ,KAAK,EAAS,EAAO,WCpD7C,GAAA,IAAY,MAAK,QAEzB,YAA2B,EAA6B,EAAW,CAC/D,MAAO,IAAQ,GAAQ,EAAE,MAAA,OAAA,EAAA,GAAA,EAAI,KAAQ,EAAG,GAOtC,YAAiC,EAA2B,CAC9D,MAAO,GAAI,SAAA,EAAI,CAAI,MAAA,IAAY,EAAI,KC0CjC,WAAuB,EAA0B,EAAiB,CAAjB,MAAA,KAAA,QAAA,GAAA,GAC9C,EAAQ,SAAC,EAAQ,EAAU,CAChC,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CAAK,MAAA,GAAW,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,KAAK,IAAQ,KAC3E,UAAA,CAAM,MAAA,GAAW,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,YAAY,KACrE,SAAC,EAAG,CAAK,MAAA,GAAW,IAAI,EAAU,SAAS,UAAA,CAAM,MAAA,GAAW,MAAM,IAAM,SC/DxE,GAAA,IAAY,MAAK,QACjB,GAA0D,OAAM,eAArC,GAA+B,OAAM,UAAlB,GAAY,OAAM,KAQlE,YAA+D,EAAuB,CAC1F,GAAI,EAAK,SAAW,EAAG,CACrB,GAAM,GAAQ,EAAK,GACnB,GAAI,GAAQ,GACV,MAAO,CAAE,KAAM,EAAO,KAAM,MAE9B,GAAI,GAAO,GAAQ,CACjB,GAAM,GAAO,GAAQ,GACrB,MAAO,CACL,KAAM,EAAK,IAAI,SAAC,EAAG,CAAK,MAAA,GAAM,KAC9B,KAAI,IAKV,MAAO,CAAE,KAAM,EAAa,KAAM,MAGpC,YAAgB,EAAQ,CACtB,MAAO,IAAO,MAAO,IAAQ,UAAY,GAAe,KAAS,GC5B7D,YAAuB,EAAgB,EAAa,CACxD,MAAO,GAAK,OAAO,SAAC,EAAQ,EAAK,EAAC,CAAK,MAAE,GAAO,GAAO,EAAO,GAAK,GAAS,ICmMxE,YAAuB,QAAoC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAC/D,GAAM,GAAY,GAAa,GACzB,EAAiB,GAAkB,GAEnC,EAA8B,GAAqB,GAA3C,EAAW,EAAA,KAAE,EAAI,EAAA,KAE/B,GAAI,EAAY,SAAW,EAIzB,MAAO,IAAK,GAAI,GAGlB,GAAM,GAAS,GAAI,GACjB,GACE,EACA,EACA,EAEI,SAAC,EAAM,CAAK,MAAA,IAAa,EAAM,IAE/B,KAIR,MAAO,GAAkB,EAAO,KAAK,GAAiB,IAAqC,EAGvF,YACJ,EACA,EACA,EAAiD,CAAjD,MAAA,KAAA,QAAA,GAAA,IAEO,SAAC,EAA2B,CAGjC,GACE,EACA,UAAA,CAaE,OAZQ,GAAW,EAAW,OAExB,EAAS,GAAI,OAAM,GAGrB,EAAS,EAIT,EAAuB,aAGlB,EAAC,CACR,GACE,EACA,UAAA,CACE,GAAM,GAAS,GAAK,EAAY,GAAI,GAChC,EAAgB,GACpB,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CAEJ,EAAO,GAAK,EACP,GAEH,GAAgB,GAChB,KAEG,GAGH,EAAW,KAAK,EAAe,EAAO,WAG1C,UAAA,CACE,AAAK,EAAE,GAGL,EAAW,eAMrB,IAjCK,EAAI,EAAG,EAAI,EAAQ,MAAnB,IAqCX,IASN,YAAuB,EAAsC,EAAqB,EAA0B,CAC1G,AAAI,EACF,EAAa,IAAI,EAAU,SAAS,IAEpC,ICtRE,YACJ,EACA,EACA,EACA,EACA,EACA,EACA,EACA,EAA+B,CAG/B,GAAM,GAAc,GAEhB,EAAS,EAET,EAAQ,EAER,EAAa,GAKX,EAAgB,UAAA,CAIpB,AAAI,GAAc,CAAC,EAAO,QAAU,CAAC,GACnC,EAAW,YAKT,EAAY,SAAC,EAAQ,CAAK,MAAC,GAAS,EAAa,EAAW,GAAS,EAAO,KAAK,IAEjF,EAAa,SAAC,EAAQ,CAI1B,GAAU,EAAW,KAAK,GAI1B,IAKA,GAAI,GAAgB,GAGpB,EAAU,EAAQ,EAAO,MAAU,UACjC,GAAI,GACF,EACA,SAAC,EAAU,CAGT,GAAY,MAAZ,EAAe,GAEf,AAAI,EAGF,EAAU,GAGV,EAAW,KAAK,IAGpB,UAAA,CAGE,EAAgB,IAGlB,OACA,UAAA,CAIE,GAAI,EAKF,GAAI,CAIF,IAKA,qBACE,GAAM,GAAgB,EAAO,QAI7B,EAAoB,EAAW,IAAI,EAAkB,SAAS,UAAA,CAAM,MAAA,GAAW,MAAmB,EAAW,IALxG,EAAO,QAAU,EAAS,OAQjC,UACO,EAAP,CACA,EAAW,MAAM,QAS7B,SAAO,UACL,GAAI,GAAmB,EAAY,EAAW,UAAA,CAE5C,EAAa,GACb,OAMG,UAAA,CACL,GAAkB,MAAlB,KC7DE,YACJ,EACA,EACA,EAA6B,CAE7B,MAFA,KAAA,QAAA,GAAA,UAEI,EAAW,GAEN,GAAS,SAAC,EAAG,EAAC,CAAK,MAAA,GAAI,SAAC,EAAQ,EAAU,CAAK,MAAA,GAAe,EAAG,EAAG,EAAG,KAAK,EAAU,EAAQ,EAAG,MAAM,GACrG,OAAO,IAAmB,UACnC,GAAa,GAGR,EAAQ,SAAC,EAAQ,EAAU,CAAK,MAAA,IAAe,EAAQ,EAAY,EAAS,MChC/E,YAAmD,EAA6B,CAA7B,MAAA,KAAA,QAAA,GAAA,UAChD,GAAS,GAAU,GCFtB,aAAmB,CACvB,MAAO,IAAS,GCsDZ,aAAgB,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACrB,MAAO,MAAY,GAAkB,EAAM,GAAa,KCjEpD,YAAgD,EAA0B,CAC9E,MAAO,IAAI,GAA+B,SAAC,EAAU,CACnD,EAAU,KAAqB,UAAU,KC5C7C,GAAM,IAA0B,CAAC,cAAe,kBAC1C,GAAqB,CAAC,mBAAoB,uBAC1C,GAAgB,CAAC,KAAM,OA2NvB,WACJ,EACA,EACA,EACA,EAAsC,CAMtC,GAJI,EAAW,IACb,GAAiB,EACjB,EAAU,QAER,EACF,MAAO,GAAa,EAAQ,EAAW,GAAiC,KAAK,GAAiB,IAU1F,GAAA,GAAA,EAEJ,GAAc,GACV,GAAmB,IAAI,SAAC,EAAU,CAAK,MAAA,UAAC,EAAY,CAAK,MAAA,GAAO,GAAY,EAAW,EAAS,MAElG,GAAwB,GACtB,GAAwB,IAAI,GAAwB,EAAQ,IAC5D,GAA0B,GAC1B,GAAc,IAAI,GAAwB,EAAQ,IAClD,GAAE,GATD,EAAG,EAAA,GAAE,EAAM,EAAA,GAgBlB,GAAI,CAAC,GACC,GAAY,GACd,MAAO,IAAS,SAAC,EAAc,CAAK,MAAA,GAAU,EAAW,EAAW,KAClE,GAAkB,IAOxB,GAAI,CAAC,EACH,KAAM,IAAI,WAAU,wBAGtB,MAAO,IAAI,GAAc,SAAC,EAAU,CAIlC,GAAM,GAAU,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAAmB,MAAA,GAAW,KAAK,EAAI,EAAK,OAAS,EAAO,EAAK,KAElF,SAAI,GAEG,UAAA,CAAM,MAAA,GAAQ,MAWzB,YAAiC,EAAa,EAAiB,CAC7D,MAAO,UAAC,EAAkB,CAAK,MAAA,UAAC,EAAY,CAAK,MAAA,GAAO,GAAY,EAAW,KAQjF,YAAiC,EAAW,CAC1C,MAAO,GAAW,EAAO,cAAgB,EAAW,EAAO,gBAQ7D,YAAmC,EAAW,CAC5C,MAAO,GAAW,EAAO,KAAO,EAAW,EAAO,KAQpD,YAAuB,EAAW,CAChC,MAAO,GAAW,EAAO,mBAAqB,EAAW,EAAO,qBC1L5D,YACJ,EACA,EACA,EAAsC,CAEtC,MAAI,GACK,GAAoB,EAAY,GAAe,KAAK,GAAiB,IAGvE,GAAI,GAAoB,SAAC,EAAU,CACxC,GAAM,GAAU,UAAA,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAAc,MAAA,GAAW,KAAK,EAAE,SAAW,EAAI,EAAE,GAAK,IACjE,EAAW,EAAW,GAC5B,MAAO,GAAW,GAAiB,UAAA,CAAM,MAAA,GAAc,EAAS,IAAY,SClB1E,YACJ,EACA,EACA,EAAyC,CAFzC,AAAA,IAAA,QAAA,GAAA,GAEA,IAAA,QAAA,GAAA,IAIA,GAAI,GAAmB,GAEvB,MAAI,IAAuB,MAIzB,CAAI,GAAY,GACd,EAAY,EAIZ,EAAmB,GAIhB,GAAI,GAAW,SAAC,EAAU,CAI/B,GAAI,GAAM,GAAY,GAAW,CAAC,EAAU,EAAW,MAAQ,EAE/D,AAAI,EAAM,GAER,GAAM,GAIR,GAAI,GAAI,EAGR,MAAO,GAAU,SAAS,UAAA,CACxB,AAAK,EAAW,QAEd,GAAW,KAAK,KAEhB,AAAI,GAAK,EAGP,KAAK,SAAS,OAAW,GAGzB,EAAW,aAGd,KCpGD,YAAe,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACpB,GAAM,GAAY,GAAa,GACzB,EAAa,GAAU,EAAM,UAC7B,EAAU,EAChB,MAAO,AAAC,GAAQ,OAGZ,EAAQ,SAAW,EAEnB,EAAU,EAAQ,IAElB,GAAS,GAAY,GAAkB,EAAS,IALhD,GC3DC,GAAM,GAAQ,GAAI,GAAkB,ICjCnC,GAAA,IAAY,MAAK,QAMnB,YAA4B,EAAiB,CACjD,MAAO,GAAK,SAAW,GAAK,GAAQ,EAAK,IAAM,EAAK,GAAM,ECgDtD,WAAoB,EAAiD,EAAa,CACtF,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAEhC,GAAI,GAAQ,EAIZ,EAAO,UAIL,GAAI,GAAmB,EAAY,SAAC,EAAK,CAAK,MAAA,GAAU,KAAK,EAAS,EAAO,MAAY,EAAW,KAAK,QChBzG,aAAa,QAAC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAClB,GAAM,GAAiB,GAAkB,GAEnC,EAAU,GAAe,GAE/B,MAAO,GAAQ,OACX,GAAI,GAAsB,SAAC,EAAU,CAGnC,GAAI,GAAuB,EAAQ,IAAI,UAAA,CAAM,MAAA,KAKzC,EAAY,EAAQ,IAAI,UAAA,CAAM,MAAA,KAGlC,EAAW,IAAI,UAAA,CACb,EAAU,EAAY,OAMxB,mBAAS,EAAW,CAClB,EAAU,EAAQ,IAAc,UAC9B,GAAI,GACF,EACA,SAAC,EAAK,CAKJ,GAJA,EAAQ,GAAa,KAAK,GAItB,EAAQ,MAAM,SAAC,EAAM,CAAK,MAAA,GAAO,SAAS,CAC5C,GAAM,GAAc,EAAQ,IAAI,SAAC,EAAM,CAAK,MAAA,GAAO,UAEnD,EAAW,KAAK,EAAiB,EAAc,MAAA,OAAA,EAAA,GAAA,EAAI,KAAU,GAIzD,EAAQ,KAAK,SAAC,EAAQ,EAAC,CAAK,MAAA,CAAC,EAAO,QAAU,EAAU,MAC1D,EAAW,aAIjB,UAAA,CAGE,EAAU,GAAe,GAIzB,CAAC,EAAQ,GAAa,QAAU,EAAW,eA5B1C,EAAc,EAAG,CAAC,EAAW,QAAU,EAAc,EAAQ,OAAQ,MAArE,GAmCT,MAAO,WAAA,CACL,EAAU,EAAY,QAG1B,GCvDA,YAAyB,EAAoB,EAAsC,CAAtC,MAAA,KAAA,QAAA,GAAA,MAGjD,EAAmB,GAAgB,KAAhB,EAAoB,EAEhC,EAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAiB,GACjB,EAAQ,EAEZ,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,aACA,EAAuB,KAK3B,AAAI,IAAU,GAAsB,GAClC,EAAQ,KAAK,QAIf,OAAqB,GAAA,GAAA,GAAO,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAzB,GAAM,GAAM,EAAA,MACf,EAAO,KAAK,GAMR,GAAc,EAAO,QACvB,GAAS,GAAM,KAAN,EAAU,GACnB,EAAO,KAAK,sGAIhB,GAAI,MAIF,OAAqB,GAAA,GAAA,GAAM,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAxB,GAAM,GAAM,EAAA,MACf,GAAU,EAAS,GACnB,EAAW,KAAK,uGAItB,UAAA,aAGE,OAAqB,GAAA,GAAA,GAAO,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAzB,GAAM,GAAM,EAAA,MACf,EAAW,KAAK,qGAElB,EAAW,YAGb,OACA,UAAA,CAEE,EAAU,UCXd,YACJ,EAAgD,CAEhD,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAgC,KAChC,EAAY,GACZ,EAEJ,EAAW,EAAO,UAChB,GAAI,GAAmB,EAAY,OAAW,OAAW,SAAC,EAAG,CAC3D,EAAgB,EAAU,EAAS,EAAK,GAAW,GAAU,KAC7D,AAAI,EACF,GAAS,cACT,EAAW,KACX,EAAc,UAAU,IAIxB,EAAY,MAKd,GAMF,GAAS,cACT,EAAW,KACX,EAAe,UAAU,MC3HzB,YACJ,EACA,EACA,EACA,EACA,EAAqC,CAErC,MAAO,UAAC,EAAuB,EAA2B,CAIxD,GAAI,GAAW,EAIX,EAAa,EAEb,EAAQ,EAGZ,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CAEJ,GAAM,GAAI,IAEV,EAAQ,EAEJ,EAAY,EAAO,EAAO,GAIxB,GAAW,GAAO,GAGxB,GAAc,EAAW,KAAK,IAIhC,GACG,UAAA,CACC,GAAY,EAAW,KAAK,GAC5B,EAAW,eC9BjB,aAAuB,QAAO,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAClC,GAAM,GAAiB,GAAkB,GACzC,MAAO,GACH,GAAK,GAAa,MAAA,OAAA,EAAA,GAAA,EAAI,KAAO,GAAiB,IAC9C,EAAQ,SAAC,EAAQ,EAAU,CACzB,GAAiB,EAAA,CAAE,GAAM,EAAK,GAAe,MAAQ,KCUvD,aAA2B,QAC/B,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAEA,MAAO,IAAa,MAAA,OAAA,EAAA,GAAA,EAAI,KCkCpB,YACJ,EACA,EAA6G,CAE7G,MAAO,GAAW,GAAkB,GAAS,EAAS,EAAgB,GAAK,GAAS,EAAS,GCnBzF,YAA0B,EAAiB,EAAyC,CAAzC,MAAA,KAAA,QAAA,GAAA,IACxC,EAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAkC,KAClC,EAAsB,KACtB,EAA0B,KAExB,EAAO,UAAA,CACX,GAAI,EAAY,CAEd,EAAW,cACX,EAAa,KACb,GAAM,GAAQ,EACd,EAAY,KACZ,EAAW,KAAK,KAGpB,YAAqB,CAInB,GAAM,GAAa,EAAY,EACzB,EAAM,EAAU,MACtB,GAAI,EAAM,EAAY,CAEpB,EAAa,KAAK,SAAS,OAAW,EAAa,GACnD,OAGF,IAGF,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAQ,CACP,EAAY,EACZ,EAAW,EAAU,MAGhB,GACH,GAAa,EAAU,SAAS,EAAc,KAGlD,UAAA,CAGE,IACA,EAAW,YAGb,OACA,UAAA,CAEE,EAAY,EAAa,UC9E7B,YAA+B,EAAe,CAClD,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAW,GACf,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CACJ,EAAW,GACX,EAAW,KAAK,IAElB,UAAA,CACE,AAAK,GACH,EAAW,KAAK,GAElB,EAAW,gBCNf,YAAkB,EAAa,CACnC,MAAO,IAAS,EAEZ,UAAA,CAAM,MAAA,KACN,EAAQ,SAAC,EAAQ,EAAU,CACzB,GAAI,GAAO,EACX,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAK,CAIvC,AAAI,EAAE,GAAQ,GACZ,GAAW,KAAK,GAIZ,GAAS,GACX,EAAW,iBC1BrB,aAAwB,CAC5B,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,EAAO,UAAU,GAAI,GAAmB,EAAY,OCFlD,YAAmB,EAAQ,CAC/B,MAAO,GAAI,UAAA,CAAM,MAAA,KCmCb,YACJ,EACA,EAAmC,CAEnC,MAAI,GAEK,SAAC,EAAqB,CAC3B,MAAA,IAAO,EAAkB,KAAK,GAAK,GAAI,MAAmB,EAAO,KAAK,GAAU,MAG7E,GAAS,SAAC,EAAO,EAAK,CAAK,MAAA,GAAsB,EAAO,GAAO,KAAK,GAAK,GAAI,GAAM,MCvBtF,YAAmB,EAAoB,EAAyC,CAAzC,AAAA,IAAA,QAAA,GAAA,IAC3C,GAAM,GAAW,GAAM,EAAK,GAC5B,MAAO,IAAU,UAAA,CAAM,MAAA,KCoFnB,WACJ,EACA,EAA0D,CAA1D,MAAA,KAAA,QAAA,GAA+B,IAK/B,EAAa,GAAU,KAAV,EAAc,GAEpB,EAAQ,SAAC,EAAQ,EAAU,CAGhC,GAAI,GAEA,EAAQ,GAEZ,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAK,CAEvC,GAAM,GAAa,EAAY,GAK/B,AAAI,IAAS,CAAC,EAAY,EAAa,KAMrC,GAAQ,GACR,EAAc,EAGd,EAAW,KAAK,SAO1B,YAAwB,EAAQ,EAAM,CACpC,MAAO,KAAM,EC/GT,WAAwD,EAAQ,EAAuC,CAC3G,MAAO,GAAqB,SAAC,EAAM,EAAI,CAAK,MAAA,GAAU,EAAQ,EAAE,GAAM,EAAE,IAAQ,EAAE,KAAS,EAAE,KCpBzF,WAAsB,EAAoB,CAC9C,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAGhC,GAAI,CACF,EAAO,UAAU,WAEjB,EAAW,IAAI,MCpBf,YAAsB,EAAa,CACvC,MAAO,IAAS,EACZ,UAAA,CAAM,MAAA,KACN,EAAQ,SAAC,EAAQ,EAAU,CAKzB,GAAI,GAAc,GAClB,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CAEJ,EAAO,KAAK,GAGZ,EAAQ,EAAO,QAAU,EAAO,SAElC,UAAA,aAGE,OAAoB,GAAA,GAAA,GAAM,EAAA,EAAA,OAAA,CAAA,EAAA,KAAA,EAAA,EAAA,OAAE,CAAvB,GAAM,GAAK,EAAA,MACd,EAAW,KAAK,qGAElB,EAAW,YAGb,OACA,UAAA,CAEE,EAAS,UCtDjB,aAAe,QAAI,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACvB,GAAM,GAAY,GAAa,GACzB,EAAa,GAAU,EAAM,UACnC,SAAO,GAAe,GAEf,EAAQ,SAAC,EAAQ,EAAU,CAChC,GAAS,GAAY,GAAiB,EAAA,CAAE,GAAM,EAAM,IAAgC,IAAY,UAAU,KCgBxG,aAAmB,QACvB,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAEA,MAAO,IAAK,MAAA,OAAA,EAAA,GAAA,EAAI,KCHZ,YAAoB,EAAyB,CACjD,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAW,GACX,EAAsB,KAC1B,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAK,CACvC,EAAW,GACX,EAAY,KAGhB,GAAM,GAAO,UAAA,CACX,GAAI,EAAU,CACZ,EAAW,GACX,GAAM,GAAQ,EACd,EAAY,KACZ,EAAW,KAAK,KAGpB,EAAS,UAAU,GAAI,GAAmB,EAAY,EAAM,OC4B1D,YAAwB,EAA6D,EAAQ,CAMjG,MAAO,GAAQ,GAAc,EAAa,EAAW,UAAU,QAAU,EAAG,KCLxE,YAAmB,EAAwB,CAC/C,EAAU,GAAW,GACb,GAAA,GAAgH,EAAO,UAAvH,EAAS,IAAA,OAAG,UAAA,CAAM,MAAA,IAAI,IAAY,EAAE,EAA4E,EAAO,gBAAnF,EAAe,IAAA,OAAG,GAAI,EAAE,EAAoD,EAAO,aAA3D,EAAY,IAAA,OAAG,GAAI,EAAE,EAA+B,EAAO,oBAAtC,EAAmB,IAAA,OAAG,GAAI,EAE/G,EAAuC,KACvC,EAAiC,KACjC,EAAW,EACX,EAAe,GACf,EAAa,GAIX,EAAQ,UAAA,CACZ,EAAa,EAAU,KACvB,EAAe,EAAa,IAG9B,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,IAGA,EAAU,GAAO,KAAP,EAAW,IAOrB,EAAW,IAAI,UAAA,CAMb,GALA,IAKI,GAAuB,CAAC,GAAY,CAAC,GAAc,CAAC,EAAc,CAGpE,GAAM,GAAO,EACb,IACA,GAAI,MAAJ,EAAM,iBAMV,EAAQ,UAAU,GAEb,GAMH,GAAa,GAAI,IAAe,CAC9B,KAAM,SAAC,EAAQ,CAAK,MAAA,GAAS,KAAK,IAClC,MAAO,SAAC,EAAQ,CACd,EAAa,GAGb,GAAM,GAAO,EACb,AAAI,GACF,IAEF,EAAK,MAAM,IAEb,SAAU,UAAA,CACR,EAAe,GACf,GAAM,GAAO,EAGb,AAAI,GACF,IAEF,EAAK,cAGT,GAAK,GAAQ,UAAU,MC9CvB,YACJ,EACA,EACA,EAAyB,SAErB,EACA,EAAW,GACf,MAAI,IAAsB,MAAO,IAAuB,SACtD,GAAa,GAAA,EAAmB,cAAU,MAAA,IAAA,OAAA,EAAI,SAC9C,EAAa,GAAA,EAAmB,cAAU,MAAA,IAAA,OAAA,EAAI,SAC9C,EAAW,CAAC,CAAC,EAAmB,SAChC,EAAY,EAAmB,WAE/B,EAAa,GAAkB,KAAlB,EAAsB,SAE9B,GAAS,CACd,UAAW,UAAA,CAAM,MAAA,IAAI,IAAc,EAAY,EAAY,IAC3D,aAAc,GACd,gBAAiB,GACjB,oBAAqB,IC1GnB,YAAkB,EAAa,CACnC,MAAO,GAAO,SAAC,EAAG,EAAK,CAAK,MAAA,IAAS,ICUjC,YAAuB,EAAyB,CACpD,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAS,GAEP,EAAiB,GAAI,GACzB,EACA,UAAA,CACE,GAAc,MAAd,EAAgB,cAChB,EAAS,IAEX,IAGF,EAAU,GAAU,UAAU,GAE9B,EAAO,UAAU,GAAI,GAAmB,EAAY,SAAC,EAAK,CAAK,MAAA,IAAU,EAAW,KAAK,QCDvF,YAAmB,QAAO,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GAC9B,GAAM,GAAY,GAAa,GAC/B,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAIhC,AAAC,GAAY,GAAO,EAAQ,EAAQ,GAAa,GAAO,EAAQ,IAAS,UAAU,KCiBjF,WACJ,EACA,EAA6G,CAE7G,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAyD,KACzD,EAAQ,EAER,EAAa,GAIX,EAAgB,UAAA,CAAM,MAAA,IAAc,CAAC,GAAmB,EAAW,YAEzE,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,CAEJ,GAAe,MAAf,EAAiB,cACjB,GAAI,GAAa,EACX,EAAa,IAEnB,EAAU,EAAQ,EAAO,IAAa,UACnC,EAAkB,GAAI,GACrB,EAIA,SAAC,EAAU,CAAK,MAAA,GAAW,KAAK,EAAiB,EAAe,EAAO,EAAY,EAAY,KAAgB,IAC/G,UAAA,CAIE,EAAkB,KAClB,QAKR,UAAA,CACE,EAAa,GACb,SCnEJ,YACJ,EACA,EAA6G,CAE7G,MAAO,GAAW,GAAkB,EAAU,UAAA,CAAM,MAAA,IAAiB,GAAkB,EAAU,UAAA,CAAM,MAAA,KCjBnG,YAAuB,EAA8B,CACzD,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,EAAU,GAAU,UAAU,GAAI,GAAmB,EAAY,UAAA,CAAM,MAAA,GAAW,YAAY,KAC9F,CAAC,EAAW,QAAU,EAAO,UAAU,KCSrC,YAAuB,EAAiD,EAAiB,CAAjB,MAAA,KAAA,QAAA,GAAA,IACrE,EAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAQ,EACZ,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAK,CACvC,GAAM,GAAS,EAAU,EAAO,KAChC,AAAC,IAAU,IAAc,EAAW,KAAK,GACzC,CAAC,GAAU,EAAW,gBC4CxB,WACJ,EACA,EACA,EAA8B,CAK9B,GAAM,GACJ,EAAW,IAAmB,GAAS,EAAW,CAAE,KAAM,EAAsC,MAAK,EAAE,SAAQ,GAAK,EAGtH,MAAO,GACH,EAAQ,SAAC,EAAQ,EAAU,CACzB,EAAO,UACL,GAAI,GACF,EACA,SAAC,EAAK,OACJ,AAAA,GAAA,EAAY,QAAI,MAAA,IAAA,QAAA,EAAA,KAAhB,EAAmB,GACnB,EAAW,KAAK,IAElB,UAAA,OACE,AAAA,GAAA,EAAY,YAAQ,MAAA,IAAA,QAAA,EAAA,KAApB,GACA,EAAW,YAEb,SAAC,EAAG,OACF,AAAA,GAAA,EAAY,SAAK,MAAA,IAAA,QAAA,EAAA,KAAjB,EAAoB,GACpB,EAAW,MAAM,QAQzB,GClIC,GAAM,IAAwC,CACnD,QAAS,GACT,SAAU,IA+CN,YACJ,EACA,EAA6D,IAA7D,GAAA,IAAA,OAAwC,GAAqB,EAA3D,EAAO,EAAA,QAAE,EAAQ,EAAA,SAEnB,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAI,GAAW,GACX,EAAsB,KACtB,EAAiC,KACjC,EAAa,GAEX,EAAgB,UAAA,CACpB,GAAS,MAAT,EAAW,cACX,EAAY,KACR,GACF,KACA,GAAc,EAAW,aAIvB,EAAoB,UAAA,CACxB,EAAY,KACZ,GAAc,EAAW,YAGrB,EAAgB,SAAC,EAAQ,CAC7B,MAAC,GAAY,EAAU,EAAiB,IAAQ,UAAU,GAAI,GAAmB,EAAY,EAAe,KAExG,EAAO,UAAA,CACX,GAAI,EAAU,CAIZ,EAAW,GACX,GAAM,GAAQ,EACd,EAAY,KAEZ,EAAW,KAAK,GAChB,CAAC,GAAc,EAAc,KAIjC,EAAO,UACL,GAAI,GACF,EAMA,SAAC,EAAK,CACJ,EAAW,GACX,EAAY,EACZ,CAAE,IAAa,CAAC,EAAU,SAAY,GAAU,IAAS,EAAc,KAEzE,UAAA,CACE,EAAa,GACb,CAAE,IAAY,GAAY,GAAa,CAAC,EAAU,SAAW,EAAW,gBC7D5E,aAAwB,QAAO,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACnC,GAAM,GAAU,GAAkB,GAElC,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAehC,OAdM,GAAM,EAAO,OACb,EAAc,GAAI,OAAM,GAI1B,EAAW,EAAO,IAAI,UAAA,CAAM,MAAA,KAG5B,EAAQ,cAMH,EAAC,CACR,EAAU,EAAO,IAAI,UACnB,GAAI,GACF,EACA,SAAC,EAAK,CACJ,EAAY,GAAK,EACb,CAAC,GAAS,CAAC,EAAS,IAEtB,GAAS,GAAK,GAKb,GAAQ,EAAS,MAAM,MAAe,GAAW,QAKtD,MAlBG,EAAI,EAAG,EAAI,EAAK,MAAhB,GAwBT,EAAO,UACL,GAAI,GAAmB,EAAY,SAAC,EAAK,CACvC,GAAI,EAAO,CAET,GAAM,GAAM,EAAA,CAAI,GAAK,EAAK,IAC1B,EAAW,KAAK,EAAU,EAAO,MAAA,OAAA,EAAA,GAAA,EAAI,KAAU,SClFnD,aAAa,QAAO,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACxB,MAAO,GAAQ,SAAC,EAAQ,EAAU,CAChC,GAAS,MAAA,OAAA,EAAA,CAAC,GAAM,EAAK,KAAS,UAAU,KCGtC,aAAiB,QAAkC,GAAA,GAAA,EAAA,EAAA,EAAA,UAAA,OAAA,IAAA,EAAA,GAAA,UAAA,GACvD,MAAO,IAAG,MAAA,OAAA,EAAA,GAAA,EAAI,KCUT,aAA4C,CACjD,GAAM,GAAY,GAAI,IACtB,SAAU,SAAU,oBACjB,KACC,GAAM,WAEL,UAAU,GAGR,ECFF,YACL,EAAkB,EAAmB,SACtB,CACf,MAAO,GAAK,cAAiB,IAAa,OAqBrC,YACL,EAAkB,EAAmB,SAClC,CACH,GAAM,GAAK,GAAc,EAAU,GACnC,GAAI,MAAO,IAAO,YAChB,KAAM,IAAI,gBACR,8BAA8B,oBAElC,MAAO,GAQF,aAAqD,CAC1D,MAAO,UAAS,wBAAyB,aACrC,SAAS,cACT,OAqBC,WACL,EAAkB,EAAmB,SAChC,CACL,MAAO,OAAM,KAAK,EAAK,iBAAoB,IActC,YACL,EAC0B,CAC1B,MAAO,UAAS,cAAc,GASzB,YACL,KAAoB,EACd,CACN,EAAG,YAAY,GAAG,GCvGb,YACL,EAAiB,EAAQ,GACnB,CACN,AAAI,EACF,EAAG,QAEH,EAAG,OAYA,YACL,EACqB,CACrB,MAAO,GACL,EAAsB,EAAI,SAC1B,EAAsB,EAAI,SAEzB,KACC,EAAI,CAAC,CAAE,UAAW,IAAS,SAC3B,EAAU,IAAO,OCNvB,GAAM,IAAS,GAAI,GAYb,GAAY,GAAM,IAAM,EAC5B,GAAI,gBAAe,GAAW,CAC5B,OAAW,KAAS,GAClB,GAAO,KAAK,OAGf,KACC,EAAU,GAAU,EAAM,KAAK,EAAU,IACtC,KACC,EAAS,IAAM,EAAO,gBAG1B,GAAY,IAcT,YAAwB,EAA8B,CAC3D,MAAO,CACL,MAAQ,EAAG,YACX,OAAQ,EAAG,cAWR,YAA+B,EAA8B,CAClE,MAAO,CACL,MAAQ,EAAG,YACX,OAAQ,EAAG,cAyBR,YACL,EACyB,CACzB,MAAO,IACJ,KACC,EAAI,GAAY,EAAS,QAAQ,IACjC,EAAU,GAAY,GACnB,KACC,EAAO,CAAC,CAAE,YAAa,IAAW,GAClC,EAAS,IAAM,EAAS,UAAU,IAClC,EAAI,IAAM,GAAe,MAG7B,EAAU,GAAe,KC9FxB,YAA0B,EAAgC,CAC/D,MAAO,CACL,EAAG,EAAG,WACN,EAAG,EAAG,WAaH,YACL,EAC2B,CAC3B,MAAO,GACL,EAAU,EAAI,UACd,EAAU,OAAQ,WAEjB,KACC,EAAI,IAAM,GAAiB,IAC3B,EAAU,GAAiB,KAe1B,YACL,EAAiB,EAAY,GACR,CACrB,MAAO,IAAmB,GACvB,KACC,EAAI,CAAC,CAAE,OAAQ,CACb,GAAM,GAAU,GAAe,GACzB,EAAU,GAAsB,GACtC,MAAO,IACL,EAAQ,OAAS,EAAQ,OAAS,IAGtC,KC9EC,YACL,EACM,CACN,GAAI,YAAc,kBAChB,EAAG,aAEH,MAAM,IAAI,OAAM,mBCQpB,GAAM,IAA4C,CAChD,OAAQ,GAAkB,2BAC1B,OAAQ,GAAkB,4BAcrB,YAAmB,EAAuB,CAC/C,MAAO,IAAQ,GAAM,QAchB,YAAmB,EAAc,EAAsB,CAC5D,AAAI,GAAQ,GAAM,UAAY,GAC5B,GAAQ,GAAM,QAYX,YAAqB,EAAmC,CAC7D,GAAM,GAAK,GAAQ,GACnB,MAAO,GAAU,EAAI,UAClB,KACC,EAAI,IAAM,EAAG,SACb,EAAU,EAAG,UClCnB,YAAiC,EAA0B,CACzD,OAAQ,EAAG,aAGJ,YACA,aACA,WACH,MAAO,WAIP,MAAO,GAAG,mBAaT,aAA+C,CACpD,MAAO,GAAyB,OAAQ,WACrC,KACC,EAAO,GAAM,CAAE,GAAG,SAAW,EAAG,UAChC,EAAI,GAAO,EACT,KAAM,GAAU,UAAY,SAAW,SACvC,KAAM,EAAG,IACT,OAAQ,CACN,EAAG,iBACH,EAAG,sBAGP,EAAO,CAAC,CAAE,UAAW,CACnB,GAAI,IAAS,SAAU,CACrB,GAAM,GAAS,KACf,GAAI,MAAO,IAAW,YACpB,MAAO,CAAC,GAAwB,GAEpC,MAAO,KAET,MCnEC,aAA4B,CACjC,MAAO,IAAI,KAAI,SAAS,MAQnB,YAAqB,EAAgB,CAC1C,SAAS,KAAO,EAAI,KAUf,aAAuC,CAC5C,MAAO,IAAI,GCvBN,aAAmC,CACxC,MAAO,UAAS,KAAK,UAAU,GAa1B,YAAyB,EAAoB,CAClD,GAAM,GAAK,GAAc,KACzB,EAAG,KAAO,EACV,EAAG,iBAAiB,QAAS,GAAM,EAAG,mBACtC,EAAG,QAUE,aAAiD,CACtD,MAAO,GAA2B,OAAQ,cACvC,KACC,EAAI,IACJ,EAAU,MACV,EAAO,GAAQ,EAAK,OAAS,GAC7B,MASC,aAAwD,CAC7D,MAAO,MACJ,KACC,EAAU,GAAM,EAAG,GAAW,QAAQ,UChCrC,YAAoB,EAAoC,CAC7D,GAAM,GAAQ,WAAW,GACzB,MAAO,IAA0B,GAC/B,EAAM,YAAY,IAAM,EAAK,EAAM,WAElC,KACC,EAAU,EAAM,UASf,aAAwC,CAC7C,MAAO,GAAU,OAAQ,eACtB,KACC,GAAM,SAgBL,YACL,EAA6B,EACd,CACf,MAAO,GACJ,KACC,EAAU,GAAU,EAAS,IAAY,IC/CxC,YACL,EAAmB,EAAuB,CAAE,YAAa,eACnC,CACtB,MAAO,IAAK,MAAM,GAAG,IAAO,IACzB,KACC,EAAO,GAAO,EAAI,SAAW,MAc5B,YACL,EAAmB,EACJ,CACf,MAAO,IAAQ,EAAK,GACjB,KACC,EAAU,GAAO,EAAI,QACrB,GAAY,IAYX,YACL,EAAmB,EACG,CACtB,GAAM,GAAM,GAAI,WAChB,MAAO,IAAQ,EAAK,GACjB,KACC,EAAU,GAAO,EAAI,QACrB,EAAI,GAAO,EAAI,gBAAgB,EAAK,aACpC,GAAY,ICtCX,aAA6C,CAClD,MAAO,CACL,EAAG,KAAK,IAAI,EAAG,aACf,EAAG,KAAK,IAAI,EAAG,cASZ,YACL,CAAE,IAAG,KACC,CACN,OAAO,SAAS,GAAK,EAAG,GAAK,GAUxB,aAA2D,CAChE,MAAO,GACL,EAAU,OAAQ,SAAU,CAAE,QAAS,KACvC,EAAU,OAAQ,SAAU,CAAE,QAAS,MAEtC,KACC,EAAI,IACJ,EAAU,OCnCT,aAAyC,CAC9C,MAAO,CACL,MAAQ,WACR,OAAQ,aAWL,aAAuD,CAC5D,MAAO,GAAU,OAAQ,SAAU,CAAE,QAAS,KAC3C,KACC,EAAI,IACJ,EAAU,OCST,aAA+C,CACpD,MAAO,GAAc,CACnB,KACA,OAEC,KACC,EAAI,CAAC,CAAC,EAAQ,KAAW,EAAE,SAAQ,UACnC,GAAY,IAYX,YACL,EAAiB,CAAE,YAAW,WACR,CACtB,GAAM,GAAQ,EACX,KACC,EAAwB,SAItB,EAAU,EAAc,CAAC,EAAO,IACnC,KACC,EAAI,IAAuB,EACzB,EAAG,EAAG,WACN,EAAG,EAAG,cAKZ,MAAO,GAAc,CAAC,EAAS,EAAW,IACvC,KACC,EAAI,CAAC,CAAC,CAAE,UAAU,CAAE,SAAQ,QAAQ,CAAE,IAAG,QAAU,EACjD,OAAQ,CACN,EAAG,EAAO,EAAI,EACd,EAAG,EAAO,EAAI,EAAI,GAEpB,WChCD,YACL,EAAgB,CAAE,OACH,CAGf,GAAM,GAAM,EAAwB,EAAQ,WACzC,KACC,EAAI,CAAC,CAAE,UAAW,IAItB,MAAO,GACJ,KACC,GAAS,IAAM,EAAK,CAAE,QAAS,GAAM,SAAU,KAC/C,EAAI,GAAW,EAAO,YAAY,IAClC,GAAY,GACZ,MCTN,GAAM,IAAS,GAAkB,aAC3B,GAAiB,KAAK,MAAM,GAAO,aACzC,GAAO,KAAO,GAAI,KAAI,GAAO,KAAM,MAChC,WACA,QAAQ,MAAO,IAWX,aAAiC,CACtC,MAAO,IAUF,YAAiB,EAAqB,CAC3C,MAAO,IAAO,SAAS,SAAS,GAW3B,WACL,EAAkB,EACV,CACR,MAAO,OAAO,IAAU,YACpB,GAAO,aAAa,GAAK,QAAQ,IAAK,EAAM,YAC5C,GAAO,aAAa,GC5BnB,YACL,EAAS,EAAmB,SACP,CACrB,MAAO,IAAkB,sBAAsB,KAAS,GAanD,YACL,EAAS,EAAmB,SACL,CACvB,MAAO,GAAY,sBAAsB,KAAS,GCxGpD,OAAwB,SCUjB,YACL,EAAiB,EAAQ,EACnB,CACN,EAAG,aAAa,WAAY,EAAM,YAQ7B,YACL,EACM,CACN,EAAG,gBAAgB,YASd,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,QACjC,EAAG,MAAM,IAAM,IAAI,MAQd,YACL,EACM,CACN,GAAM,GAAQ,GAAK,SAAS,EAAG,MAAM,IAAK,IAC1C,EAAG,gBAAgB,iBACnB,EAAG,MAAM,IAAM,GACX,GACF,OAAO,SAAS,EAAG,GC1ChB,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBAWd,YACL,EAAiB,EACX,CACN,EAAG,UAAU,OAAO,uBAAwB,GAQvC,YACL,EACM,CACN,EAAG,UAAU,OAAO,wBCvCf,YACL,EAAiB,EACX,CACN,EAAG,kBAAmB,UAAY,EAW7B,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBC5Bd,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBCdd,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBCZd,YACL,EAAsB,EAChB,CACN,EAAG,YAAc,EAQZ,YACL,EACM,CACN,EAAG,YAAc,EAAY,sBCO/B,YAAqB,EAAiB,EAA8B,CAGlE,GAAI,MAAO,IAAU,UAAY,MAAO,IAAU,SAChD,EAAG,WAAa,EAAM,mBAGb,YAAiB,MAC1B,EAAG,YAAY,WAGN,MAAM,QAAQ,GACvB,OAAW,KAAQ,GACjB,GAAY,EAAI,GAiBf,WACL,EAAa,KAAkC,EAClC,CACb,GAAM,GAAK,SAAS,cAAc,GAGlC,GAAI,EACF,OAAW,KAAQ,QAAO,KAAK,GAC7B,AAAI,MAAO,GAAW,IAAU,UAC9B,EAAG,aAAa,EAAM,EAAW,IAC1B,EAAW,IAClB,EAAG,aAAa,EAAM,IAG5B,OAAW,KAAS,GAClB,GAAY,EAAI,GAGlB,MAAO,GChEF,YAAkB,EAAe,EAAmB,CACzD,GAAI,GAAI,EACR,GAAI,EAAM,OAAS,EAAG,CACpB,KAAO,EAAM,KAAO,KAAO,EAAE,EAAI,GAAG,CACpC,MAAO,GAAG,EAAM,UAAU,EAAG,QAE/B,MAAO,GAmBF,YAAe,EAAuB,CAC3C,GAAI,EAAQ,IAAK,CACf,GAAM,GAAS,CAAG,IAAQ,KAAO,IAAO,IACxC,MAAO,GAAK,IAAQ,MAAY,KAAM,QAAQ,UAE9C,OAAO,GAAM,WClCV,YACL,EAAiB,EACX,CACN,OAAQ,OAGD,GACH,EAAG,YAAc,EAAY,sBAC7B,UAGG,GACH,EAAG,YAAc,EAAY,qBAC7B,cAIA,EAAG,YAAc,EAAY,sBAAuB,GAAM,KASzD,YACL,EACM,CACN,EAAG,YAAc,EAAY,6BAWxB,YACL,EAAiB,EACX,CACN,EAAG,YAAY,GAQV,YACL,EACM,CACN,EAAG,UAAY,GCzDV,YACL,EAAiB,EACX,CACN,EAAG,MAAM,IAAM,GAAG,MAQb,YACL,EACM,CACN,EAAG,MAAM,IAAM,GAwBV,YACL,EAAiB,EACX,CACN,GAAM,GAAa,EAAG,kBACtB,EAAW,MAAM,OAAS,GAAG,EAAQ,EAAI,EAAW,cAQ/C,YACL,EACM,CACN,GAAM,GAAa,EAAG,kBACtB,EAAW,MAAM,OAAS,GCtDrB,YACL,EAAiB,EACX,CACN,EAAG,iBAAkB,YAAY,GAS5B,YACL,EAAiB,EACX,CACN,EAAG,iBAAkB,aAAa,gBAAiB,GCf9C,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBCdd,YACL,EAAiB,EACX,CACN,EAAG,aAAa,gBAAiB,GAQ5B,YACL,EACM,CACN,EAAG,gBAAgB,iBCVd,YAA+B,EAAyB,CAC7D,MACE,GAAC,SAAD,CACE,MAAM,uBACN,MAAO,EAAY,kBACnB,wBAAuB,IAAI,aCJjC,GAAW,IAAX,UAAW,EAAX,CACE,WAAS,GAAT,SACA,WAAS,GAAT,WAFS,aAiBX,YACE,EAA2C,EAC9B,CACb,GAAM,GAAS,EAAO,EAChB,EAAS,EAAO,EAGhB,EAAU,OAAO,KAAK,EAAS,OAClC,OAAO,GAAO,CAAC,EAAS,MAAM,IAC9B,IAAI,GAAO,CAAC,EAAC,MAAD,KAAM,GAAY,MAC9B,OACA,MAAM,EAAG,IAGN,EAAM,EAAS,SACrB,MACE,GAAC,IAAD,CAAG,KAAM,EAAK,MAAM,yBAAyB,SAAU,IACrD,EAAC,UAAD,CACE,MAAO,CAAC,4BAA6B,GAAG,EACpC,CAAC,uCACD,IACF,KAAK,KACP,gBAAe,EAAS,MAAM,QAAQ,IAErC,EAAS,GAAK,EAAC,MAAD,CAAK,MAAM,mCAC1B,EAAC,KAAD,CAAI,MAAM,2BAA2B,EAAS,OAC7C,EAAS,GAAK,EAAS,KAAK,OAAS,GACpC,EAAC,IAAD,CAAG,MAAM,4BACN,GAAS,EAAS,KAAM,MAG5B,EAAS,GAAK,EAAQ,OAAS,GAC9B,EAAC,IAAD,CAAG,MAAM,2BACN,EAAY,8BAA8B,KAAM,KAmBtD,YACL,EACa,CACb,GAAM,GAAY,EAAO,GAAG,MACtB,EAAO,CAAC,GAAG,GAGX,EAAS,EAAK,UAAU,GAAO,CAAC,EAAI,SAAS,SAAS,MACtD,CAAC,GAAW,EAAK,OAAO,EAAQ,GAGlC,EAAQ,EAAK,UAAU,GAAO,EAAI,MAAQ,GAC9C,AAAI,IAAU,IACZ,GAAQ,EAAK,QAGf,GAAM,GAAO,EAAK,MAAM,EAAG,GACrB,EAAO,EAAK,MAAM,GAGlB,EAAW,CACf,GAAqB,EAAS,EAAc,CAAE,EAAC,GAAU,IAAU,IACnE,GAAG,EAAK,IAAI,GAAW,GAAqB,EAAS,IACrD,GAAG,EAAK,OAAS,CACf,EAAC,UAAD,CAAS,MAAM,0BACb,EAAC,UAAD,CAAS,SAAU,IAChB,EAAK,OAAS,GAAK,EAAK,SAAW,EAChC,EAAY,0BACZ,EAAY,2BAA4B,EAAK,SAG/C,EAAK,IAAI,GAAW,GAAqB,EAAS,MAEtD,IAIN,MACE,GAAC,KAAD,CAAI,MAAM,0BACP,GC7GA,YAA2B,EAAiC,CACjE,MACE,GAAC,KAAD,CAAI,MAAM,oBACP,OAAO,QAAQ,GAAO,IAAI,CAAC,CAAC,EAAK,KAChC,EAAC,KAAD,CAAI,MAAO,oCAAoC,KAC5C,MAAO,IAAU,SAAW,GAAM,GAAS,KCN/C,YAAqB,EAAiC,CAC3D,MACE,GAAC,MAAD,CAAK,MAAM,0BACT,EAAC,MAAD,CAAK,MAAM,qBACR,ICUT,YAAuB,EAA+B,CACpD,GAAM,GAAS,KAGT,EAAM,GAAI,KAAI,GAAG,EAAQ,WAAY,EAAO,MAClD,MACE,GAAC,KAAD,CAAI,MAAM,oBACR,EAAC,IAAD,CAAG,KAAM,EAAI,WAAY,MAAM,oBAC5B,EAAQ,QAiBV,YAA+B,EAAkC,CACtE,GAAM,GAAS,KAGT,CAAC,CAAE,GAAW,EAAO,KAAK,MAAM,eAChC,EACJ,EAAS,KAAK,CAAC,CAAE,UAAS,aACxB,IAAY,GAAW,EAAQ,SAAS,KACpC,EAAS,GAGjB,MACE,GAAC,MAAD,CAAK,MAAM,cACT,EAAC,SAAD,CAAQ,MAAM,uBACX,EAAO,OAEV,EAAC,KAAD,CAAI,MAAM,oBACP,EAAS,IAAI,MlBHtB,GAAI,IAAQ,EAiBL,YACL,EAAiB,CAAE,aACI,CACvB,GAAM,GAAa,EAAG,GACnB,KACC,EAAU,GAAS,CACjB,GAAM,GAAY,EAAM,QAAQ,eAChC,MAAI,aAAqB,aAChB,EACL,GAAG,EAAY,QAAS,GACrB,IAAI,GAAS,EAAU,EAAO,YAG9B,KAKb,MAAO,GACL,EAAU,KAAK,EAAwB,SACvC,GAEC,KACC,EAAI,IAAM,CACR,GAAM,GAAU,GAAe,GAE/B,MAAO,CACL,OAAQ,AAFM,GAAsB,GAEpB,MAAQ,EAAQ,SAGpC,EAAwB,WAevB,YACL,EAAiB,EACiB,CAClC,GAAM,GAAY,GAAI,GAatB,GAZA,EACG,KACC,GAAe,GAAW,aAEzB,UAAU,CAAC,CAAC,CAAE,UAAU,KAAW,CAClC,AAAI,GAAU,EACZ,GAAa,GAEb,GAAe,KAInB,WAAY,cAAe,CAC7B,GAAM,GAAS,EAAG,QAAQ,OAC1B,EAAO,GAAK,UAAU,OACtB,EAAO,aACL,GAAsB,EAAO,IAC7B,GAKJ,MAAO,IAAe,EAAI,GACvB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KmBzG3B,YACL,EAAwB,CAAE,UAAS,UACd,CACrB,MAAO,GACJ,KACC,EAAI,GAAU,EAAO,QAAQ,wBAC7B,EAAO,GAAW,IAAO,GACzB,GAAU,GACV,GAAM,IAeL,YACL,EAAwB,EACQ,CAChC,GAAM,GAAY,GAAI,GACtB,SAAU,UAAU,IAAM,CACxB,EAAG,aAAa,OAAQ,IACxB,EAAG,mBAIE,GAAa,EAAI,GACrB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,GAAM,CAAE,IAAK,KCnEnB,GAAM,IAAW,GAAc,SAgBxB,YACL,EACkC,CAClC,UAAe,EAAI,IACnB,GAAe,GAAU,GAAY,IAG9B,EAAG,CAAE,IAAK,ICGZ,YACL,EAAiB,CAAE,UAAS,YAAW,UACP,CAChC,MAAO,GAGL,GAAG,EAAY,aAAc,GAC1B,IAAI,GAAS,GAAe,EAAO,CAAE,eAGxC,GAAG,EAAY,qBAAsB,GAClC,IAAI,GAAS,GAAe,IAG/B,GAAG,EAAY,UAAW,GACvB,IAAI,GAAS,GAAa,EAAO,CAAE,UAAS,aCE5C,YACL,EAAkB,CAAE,UACA,CACpB,MAAO,GACJ,KACC,EAAU,GAAW,EACnB,EAAG,IACH,EAAG,IAAO,KAAK,GAAM,OAEpB,KACC,EAAI,GAAS,EAAE,UAAS,aAiB3B,YACL,EAAiB,EACc,CAC/B,GAAM,GAAY,GAAI,GACtB,SACG,KACC,EAAU,IAET,UAAU,CAAC,CAAE,UAAS,UAAW,CAChC,GAAiB,EAAI,GACrB,AAAI,EACF,GAAe,EAAI,QAEnB,GAAiB,KAIlB,GAAY,EAAI,GACpB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCnClC,YAAkB,CAAE,aAAgD,CAClE,GAAI,CAAC,GAAQ,mBACX,MAAO,GAAG,IAGZ,GAAM,GAAa,EAChB,KACC,EAAI,CAAC,CAAE,OAAQ,CAAE,QAAU,GAC3B,GAAY,EAAG,GACf,EAAI,CAAC,CAAC,EAAG,KAAO,CAAC,EAAI,EAAG,IACxB,EAAwB,IAItB,EAAU,EAAc,CAAC,EAAW,IACvC,KACC,EAAO,CAAC,CAAC,CAAE,UAAU,CAAC,CAAE,MAAQ,KAAK,IAAI,EAAI,EAAO,GAAK,KACzD,EAAI,CAAC,CAAC,CAAE,CAAC,MAAgB,GACzB,KAIE,EAAU,GAAY,UAC5B,MAAO,GAAc,CAAC,EAAW,IAC9B,KACC,EAAI,CAAC,CAAC,CAAE,UAAU,KAAY,EAAO,EAAI,KAAO,CAAC,GACjD,IACA,EAAU,GAAU,EAAS,EAAU,EAAG,KAC1C,EAAU,KAgBT,YACL,EAAiB,EACG,CACpB,MAAO,IAAM,IAAM,CACjB,GAAM,GAAS,iBAAiB,GAChC,MAAO,GACL,EAAO,WAAa,UACpB,EAAO,WAAa,oBAGrB,KACC,GAAkB,GAAiB,GAAK,GAAS,IACjD,EAAI,CAAC,CAAC,EAAQ,CAAE,UAAU,KAAa,EACrC,OAAQ,EAAS,EAAS,EAC1B,SACA,YAEF,EAAqB,CAAC,EAAG,IACvB,EAAE,SAAW,EAAE,QACf,EAAE,SAAW,EAAE,QACf,EAAE,SAAW,EAAE,QAEjB,GAAY,IAeX,YACL,EAAiB,CAAE,UAAS,SACG,CAC/B,GAAM,GAAY,GAAI,GACtB,SACG,KACC,EAAwB,UACxB,GAAkB,GAClB,EAAU,IAET,UAAU,CAAC,CAAC,CAAE,UAAU,CAAE,aAAc,CACvC,AAAI,EACF,GAAe,EAAI,EAAS,SAAW,UAEvC,GAAiB,KAIzB,EAAM,UAAU,GAAQ,EAAU,KAAK,IAChC,EACJ,KACC,EAAI,GAAU,GAAE,IAAK,GAAO,KC9G3B,YACL,EAAwB,CAAE,YAAW,WACZ,CACzB,MAAO,IAAgB,EAAI,CAAE,UAAS,cACnC,KACC,EAAI,CAAC,CAAE,OAAQ,CAAE,QAAU,CACzB,GAAM,CAAE,UAAW,GAAe,GAClC,MAAO,CACL,OAAQ,GAAK,KAGjB,EAAwB,WAevB,YACL,EAAiB,EACmB,CACpC,GAAM,GAAY,GAAI,GACtB,EACG,KACC,EAAU,IAET,UAAU,CAAC,CAAE,YAAa,CACzB,AAAI,EACF,GAAoB,EAAI,UAExB,GAAsB,KAI9B,GAAM,GAAW,GAA+B,cAChD,MAAI,OAAO,IAAa,YACf,EAGF,GAAiB,EAAU,GAC/B,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KClE3B,YACL,EAAiB,CAAE,YAAW,WACZ,CAGlB,GAAM,GAAU,EACb,KACC,EAAI,CAAC,CAAE,YAAa,GACpB,KAIE,EAAU,EACb,KACC,EAAU,IAAM,GAAiB,GAC9B,KACC,EAAI,CAAC,CAAE,YAAc,EACnB,IAAQ,EAAG,UACX,OAAQ,EAAG,UAAY,KAEzB,EAAwB,aAMhC,MAAO,GAAc,CAAC,EAAS,EAAS,IACrC,KACC,EAAI,CAAC,CAAC,EAAQ,CAAE,MAAK,UAAU,CAAE,OAAQ,CAAE,KAAK,KAAM,CAAE,cACtD,GAAS,KAAK,IAAI,EAAG,EACjB,KAAK,IAAI,EAAG,EAAS,EAAI,GACzB,KAAK,IAAI,EAAG,EAAS,EAAI,IAEtB,CACL,OAAQ,EAAM,EACd,SACA,OAAQ,EAAM,GAAU,KAG5B,EAAqB,CAAC,EAAG,IACvB,EAAE,SAAW,EAAE,QACf,EAAE,SAAW,EAAE,QACf,EAAE,SAAW,EAAE,SC9ChB,YACL,EACqB,CACrB,GAAM,GAAO,aAAa,QAAQ,SAAS,cACrC,EAAU,KAAK,MAAM,IAAS,CAClC,MAAO,EAAO,UAAU,GACtB,WAAW,EAAM,aAAa,wBAAyB,UAKrD,EAAW,EAAG,GAAG,GACpB,KACC,GAAS,GAAS,EAAU,EAAO,UAChC,KACC,GAAM,KAGV,EAAU,EAAO,KAAK,IAAI,EAAG,EAAQ,SACrC,EAAI,GAAU,EACZ,MAAO,EAAO,QAAQ,GACtB,MAAO,CACL,OAAS,EAAM,aAAa,wBAC5B,QAAS,EAAM,aAAa,yBAC5B,OAAS,EAAM,aAAa,4BAGhC,GAAY,IAIhB,SAAS,UAAU,GAAW,CAC5B,aAAa,QAAQ,SAAS,aAAc,KAAK,UAAU,MAItD,EAUF,YACL,EACgC,CAChC,GAAM,GAAY,GAAI,GAGtB,EAAU,UAAU,GAAW,CAC7B,OAAW,CAAC,EAAK,IAAU,QAAO,QAAQ,EAAQ,OAChD,AAAI,MAAO,IAAU,UACnB,SAAS,KAAK,aAAa,iBAAiB,IAAO,GAGvD,OAAS,GAAQ,EAAG,EAAQ,EAAO,OAAQ,IAAS,CAClD,GAAM,GAAQ,EAAO,GAAO,mBAC5B,AAAI,YAAiB,cACnB,GAAM,OAAS,EAAQ,QAAU,MAKvC,GAAM,GAAS,EAA8B,QAAS,GACtD,MAAO,IAAa,GACjB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KC3HlC,OAAwB,SAyBjB,YACL,CAAE,UACI,CACN,AAAI,WAAY,eACd,GAAI,GAA8B,GAAc,CAC9C,GAAI,YAAY,kDACb,GAAG,UAAW,GAAM,EAAW,KAAK,MAEtC,UAAU,IAAM,EAAO,KAAK,EAAY,sBC+C/C,YAAoB,EAA0B,CAC5C,GAAI,EAAK,OAAS,EAChB,MAAO,GAGT,GAAM,CAAC,EAAM,GAAQ,EAClB,KAAK,CAAC,EAAG,IAAM,EAAE,OAAS,EAAE,QAC5B,IAAI,GAAO,EAAI,QAAQ,SAAU,KAGhC,EAAQ,EACZ,GAAI,IAAS,EACX,EAAQ,EAAK,WAEb,MAAO,EAAK,WAAW,KAAW,EAAK,WAAW,IAChD,IAGJ,GAAM,GAAS,KACf,MAAO,GAAK,IAAI,GACd,EAAI,QAAQ,EAAK,MAAM,EAAG,GAAQ,GAAG,EAAO,UA6BzC,YACL,CAAE,YAAW,YAAW,aAClB,CACN,GAAM,GAAS,KACf,GAAI,SAAS,WAAa,QACxB,OAGF,AAAI,qBAAuB,UACzB,SAAQ,kBAAoB,SAG5B,EAAU,OAAQ,gBACf,UAAU,IAAM,CACf,QAAQ,kBAAoB,UAKlC,GAAM,GAAU,GAA4B,kBAC5C,AAAI,MAAO,IAAY,aACrB,GAAQ,KAAO,EAAQ,MAGzB,GAAM,GAAQ,GAAW,GAAG,EAAO,oBAChC,KACC,EAAI,GAAW,GAAW,EAAY,MAAO,GAC1C,IAAI,GAAQ,EAAK,eAEpB,EAAU,GAAQ,EAAsB,SAAS,KAAM,SACpD,KACC,EAAO,GAAM,CAAC,EAAG,SAAW,CAAC,EAAG,SAChC,EAAU,GAAM,CAGd,GAAI,EAAG,iBAAkB,SAAS,CAChC,GAAM,GAAK,EAAG,OAAO,QAAQ,KAC7B,GAAI,GAAM,CAAC,EAAG,QAAU,EAAK,SAAS,EAAG,MACvC,SAAG,iBACI,EAAG,CACR,IAAK,GAAI,KAAI,EAAG,QAItB,MAAO,OAIb,MAIE,EAAO,EAAyB,OAAQ,YAC3C,KACC,EAAO,GAAM,EAAG,QAAU,MAC1B,EAAI,GAAO,EACT,IAAK,GAAI,KAAI,SAAS,MACtB,OAAQ,EAAG,SAEb,MAIJ,EAAM,EAAO,GACV,KACC,EAAqB,CAAC,EAAG,IAAM,EAAE,IAAI,OAAS,EAAE,IAAI,MACpD,EAAI,CAAC,CAAE,SAAU,IAEhB,UAAU,GAGf,GAAM,GAAY,EACf,KACC,EAAwB,YACxB,EAAU,GAAO,GAAQ,EAAI,MAC1B,KACC,GAAW,IACT,IAAY,GACL,MAIb,MAIJ,EACG,KACC,GAAO,IAEN,UAAU,CAAC,CAAE,SAAU,CACtB,QAAQ,UAAU,GAAI,GAAI,GAAG,OAInC,GAAM,GAAM,GAAI,WAChB,EACG,KACC,EAAU,GAAO,EAAI,QACrB,EAAI,GAAO,EAAI,gBAAgB,EAAK,eAEnC,UAAU,GAGf,EAAM,EAAO,GACV,KACC,GAAO,IAEN,UAAU,CAAC,CAAE,MAAK,YAAa,CAC9B,AAAI,EAAI,MAAQ,CAAC,EACf,GAAgB,EAAI,MAEpB,GAAkB,GAAU,CAAE,EAAG,MAIzC,EACG,KACC,GAAK,IAEJ,UAAU,GAAe,CACxB,OAAW,KAAY,CAGrB,QACA,sBACA,oBACA,yBAGA,+BACA,gCACA,mCACA,qCACA,4BACC,CACD,GAAM,GAAS,GAAW,GACpB,EAAS,GAAW,EAAU,GACpC,AACE,MAAO,IAAW,aAClB,MAAO,IAAW,aAElB,GAAe,EAAQ,MAMjC,EACG,KACC,GAAK,GACL,EAAI,IAAM,GAAoB,cAC9B,EAAU,GAAM,EAAG,GAAG,EAAY,SAAU,KAC5C,GAAU,GAAM,CACd,GAAM,GAAS,GAAc,UAC7B,GAAI,EAAG,IAAK,CACV,OAAW,KAAQ,GAAG,oBACpB,EAAO,aAAa,EAAM,EAAG,aAAa,IAC5C,UAAe,EAAI,GAGZ,GAAI,GAAW,GAAY,CAChC,EAAO,OAAS,IAAM,EAAS,iBAKjC,UAAO,YAAc,EAAG,YACxB,GAAe,EAAI,GACZ,MAIV,YAGL,EACG,KACC,GAAU,GACV,GAAa,KACb,EAAwB,WAEvB,UAAU,CAAC,CAAE,YAAa,CACzB,QAAQ,aAAa,EAAQ,MAInC,EAAM,EAAO,GACV,KACC,GAAY,EAAG,GACf,EAAO,CAAC,CAAC,EAAG,KAAO,EAAE,IAAI,WAAa,EAAE,IAAI,UAC5C,EAAI,CAAC,CAAC,CAAE,KAAW,IAElB,UAAU,CAAC,CAAE,YAAa,CACzB,GAAkB,GAAU,CAAE,EAAG,MCnUzC,OAAuB,SCsChB,YAA0B,EAAuB,CACtD,MAAO,GACJ,MAAM,cACJ,IAAI,CAAC,EAAO,IAAU,EAAQ,EAC3B,EAAM,QAAQ,+BAAgC,MAC9C,GAEH,KAAK,IACP,QAAQ,kCAAmC,IAC3C,OCtCE,GAAW,IAAX,UAAW,EAAX,CACL,qBACA,qBACA,qBACA,yBAJgB,aA2EX,YACL,EAC+B,CAC/B,MAAO,GAAQ,OAAS,EAUnB,YACL,EAC+B,CAC/B,MAAO,GAAQ,OAAS,EAUnB,YACL,EACgC,CAChC,MAAO,GAAQ,OAAS,EC/E1B,YACE,CAAE,SAAQ,OAAM,SACH,CAGb,AAAI,EAAO,KAAK,SAAW,GAAK,EAAO,KAAK,KAAO,MACjD,GAAO,KAAO,CACZ,EAAY,wBAIZ,EAAO,YAAc,aACvB,GAAO,UAAY,EAAY,4BAGjC,GAAM,GAAW,EAAY,0BAC1B,MAAM,WACN,OAAO,SAGV,MAAO,CAAE,SAAQ,OAAM,QAAO,YAmBzB,YACL,EAAa,EACC,CACd,GAAM,GAAS,KACT,EAAS,GAAI,QAAO,GAGpB,EAAM,GAAI,GACV,EAAM,GAAY,EAAQ,CAAE,QAC/B,KACC,EAAI,GAAW,CACb,GAAI,GAAsB,GACxB,OAAW,KAAU,GAAQ,KAC3B,OAAW,KAAY,GACrB,EAAS,SAAW,GAAG,EAAO,QAAQ,EAAS,WAErD,MAAO,KAET,MAIJ,UAAK,GACF,KACC,EAAqC,GAAS,EAC5C,KAAM,GAAkB,MACxB,KAAM,GAAiB,OAGxB,UAAU,EAAI,KAAK,KAAK,IAGtB,CAAE,MAAK,OC9FT,aAAsC,CAC3C,GAAM,GAAS,KACf,GAAuB,GAAI,KAAI,gBAAiB,EAAO,OACpD,UAAU,GAAY,CAErB,AADc,GAAkB,qBAC1B,YAAY,GAAsB,MC8CvC,YACL,EACyB,CACzB,GAAM,GAAK,gCAAU,YAAa,GAG5B,EAAS,GAAkB,GAC3B,EAAS,EACb,EAAU,EAAI,SACd,EAAU,EAAI,SAAS,KAAK,GAAM,KAEjC,KACC,EAAI,IAAM,EAAG,EAAG,QAChB,KAIJ,MAAO,GAAc,CAAC,EAAQ,IAC3B,KACC,EAAI,CAAC,CAAC,EAAO,KAAY,EAAE,QAAO,YAYjC,YACL,EAAsB,CAAE,OAC8B,CACtD,GAAM,GAAY,GAAI,GAGtB,SACG,KACC,EAAwB,SACxB,EAAI,CAAC,CAAE,WAAiC,EACtC,KAAM,GAAkB,MACxB,KAAM,MAGP,UAAU,EAAI,KAAK,KAAK,IAG7B,EACG,KACC,EAAwB,UAEvB,UAAU,CAAC,CAAE,WAAY,CACxB,AAAI,EACF,IAAU,SAAU,GACpB,GAA0B,EAAI,KAE9B,GAA4B,KAKpC,EAAU,EAAG,KAAO,SACjB,KACC,GAAU,EAAU,KAAK,GAAS,MAEjC,UAAU,IAAM,GAAgB,IAG9B,GAAiB,GACrB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCzD3B,YACL,EAAiB,CAAE,OAAqB,CAAE,UACL,CACrC,GAAM,GAAY,GAAI,GAChB,EAAY,GAAsB,EAAG,eACxC,KACC,EAAO,UAIL,EAAO,GAAkB,wBAAyB,GACxD,EACG,KACC,EAAU,GACV,GAAe,IAEd,UAAU,CAAC,CAAC,CAAE,QAAQ,CAAE,YAAa,CACpC,AAAI,EACF,GAAoB,EAAM,EAAK,QAE/B,GAAsB,KAI9B,GAAM,GAAO,GAAkB,uBAAwB,GACvD,SACG,KACC,EAAU,GACV,EAAI,IAAM,GAAsB,IAChC,EAAU,CAAC,CAAE,UAAW,EACtB,EAAG,GAAG,EAAK,MAAM,EAAG,KACpB,EAAG,GAAG,EAAK,MAAM,KACd,KACC,GAAY,GACZ,GAAQ,GACR,EAAU,CAAC,CAAC,KAAW,EAAG,GAAG,QAIlC,UAAU,GAAU,CACnB,GAAsB,EAAM,GAAmB,MAY9C,AARS,EACb,KACC,EAAO,IACP,EAAI,CAAC,CAAE,UAAY,EAAE,UACrB,EAAU,CAAE,KAAM,MAKnB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCzE3B,YACL,EAAiB,CAAE,SAAQ,aACI,CAC/B,GAAM,GAAS,KACT,EAAS,GAAkB,EAAO,OAAQ,GAG1C,EAAS,GAAoB,eAAgB,GAC7C,EAAS,GAAoB,gBAAiB,GAG9C,CAAE,MAAK,OAAQ,EACrB,EACG,KACC,EAAO,IACP,GAAO,EAAI,KAAK,EAAO,MACvB,GAAK,IAEJ,UAAU,EAAI,KAAK,KAAK,IAG7B,EACG,KACC,EAAO,CAAC,CAAE,UAAW,IAAS,WAE7B,UAAU,GAAO,CAChB,GAAM,GAAS,KACf,OAAQ,EAAI,UAGL,QACH,AAAI,IAAW,GACb,EAAI,QACN,UAGG,aACA,MACH,GAAU,SAAU,IACpB,GAAgB,EAAO,IACvB,UAGG,cACA,YACH,GAAI,MAAO,IAAW,YACpB,GAAgB,OACX,CACL,GAAM,GAAM,CAAC,EAAO,GAAG,EACrB,wDACA,IAEI,EAAI,KAAK,IAAI,EACjB,MAAK,IAAI,EAAG,EAAI,QAAQ,IAAW,EAAI,OACrC,GAAI,OAAS,UAAY,GAAK,IAE9B,EAAI,QACR,GAAgB,EAAI,IAItB,EAAI,QACJ,cAIA,AAAI,IAAU,MACZ,GAAgB,MAK5B,EACG,KACC,EAAO,CAAC,CAAE,UAAW,IAAS,WAE7B,UAAU,GAAO,CAChB,OAAQ,EAAI,UAGL,QACA,QACA,IACH,GAAgB,GAChB,GAAoB,GACpB,EAAI,QACJ,SAKV,GAAM,GAAS,GAAiB,EAAO,GACvC,MAAO,GACL,EACA,GAAkB,EAAQ,EAAQ,CAAE,YC9EjC,YACL,EAAiB,CAAE,YAAW,SACT,CACrB,GAAM,GACJ,EAAG,cAAe,UAClB,EAAG,cAAe,cAAe,UAGnC,MAAO,GAAc,CAAC,EAAO,IAC1B,KACC,EAAI,CAAC,CAAC,CAAE,SAAQ,UAAU,CAAE,OAAQ,CAAE,SACpC,GAAS,EACL,KAAK,IAAI,EAAQ,KAAK,IAAI,EAAG,EAAI,IACjC,EACG,CACL,SACA,OAAQ,GAAK,EAAS,KAG1B,EAAqB,CAAC,EAAG,IACvB,EAAE,SAAW,EAAE,QACf,EAAE,SAAW,EAAE,SAahB,YACL,EAAiB,EACe,CADf,QAAE,YAAF,EAAc,KAAd,EAAc,CAAZ,YAEnB,GAAM,GAAY,GAAI,GACtB,SACG,KACC,EAAU,GACV,GAAe,IAEd,UAAU,CAGT,KAAK,CAAC,CAAE,UAAU,CAAE,OAAQ,IAAW,CACrC,GAAiB,EAAI,GACrB,GAAiB,EAAI,IAIvB,UAAW,CACT,GAAmB,GACnB,GAAmB,MAKpB,GAAa,EAAI,GACrB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KC7G3B,YACL,EAAc,EACW,CACzB,GAAI,MAAO,IAAS,YAAa,CAC/B,GAAM,GAAM,gCAAgC,KAAQ,IACpD,MAAO,IAGL,GAAqB,GAAG,qBACrB,KACC,EAAI,GAAY,EACd,QAAS,EAAQ,YAEnB,GAAe,KAInB,GAAkB,GACf,KACC,EAAI,GAAS,EACX,MAAO,EAAK,iBACZ,MAAO,EAAK,eAEd,GAAe,MAGlB,KACC,EAAI,CAAC,CAAC,EAAS,KAAW,OAAK,GAAY,SAI1C,CACL,GAAM,GAAM,gCAAgC,IAC5C,MAAO,IAAkB,GACtB,KACC,EAAI,GAAS,EACX,aAAc,EAAK,gBAErB,GAAe,MCjDhB,YACL,EAAc,EACW,CACzB,GAAM,GAAM,WAAW,qBAAwB,mBAAmB,KAClE,MAAO,IAA2B,GAC/B,KACC,EAAI,CAAC,CAAE,aAAY,iBAAmB,EACpC,MAAO,EACP,MAAO,KAET,GAAe,KCed,YACL,EACyB,CACzB,GAAM,CAAC,GAAQ,EAAI,MAAM,sBAAwB,GACjD,OAAQ,EAAK,mBAGN,SACH,GAAM,CAAC,CAAE,EAAM,GAAQ,EAAI,MAAM,uCACjC,MAAO,IAA2B,EAAM,OAGrC,SACH,GAAM,CAAC,CAAE,EAAM,GAAQ,EAAI,MAAM,sCACjC,MAAO,IAA2B,EAAM,WAIxC,MAAO,IC7Bb,GAAI,IAgBG,YACL,EACoB,CACpB,MAAO,SAAW,GAAM,IAAM,CAC5B,GAAM,GAAO,eAAe,QAAQ,SAAS,aAC7C,GAAI,EACF,MAAO,GAAgB,KAAK,MAAM,IAC7B,CACL,GAAM,GAAS,GAAiB,EAAG,MACnC,SAAO,UAAU,GAAS,CACxB,GAAI,CACF,eAAe,QAAQ,SAAS,YAAa,KAAK,UAAU,UACrD,EAAP,KAMG,KAGR,KACC,GAAW,IAAM,GACjB,EAAO,GAAS,OAAO,KAAK,GAAO,OAAS,GAC5C,EAAI,GAAU,EAAE,WAChB,GAAY,KAWX,YACL,EAC+B,CAC/B,GAAM,GAAY,GAAI,GACtB,SAAU,UAAU,CAAC,CAAE,WAAY,CACjC,GAAe,EAAI,GAAkB,IACrC,GAAe,EAAI,UAId,GAAY,GAChB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCrC3B,YACL,EAAiB,CAAE,YAAW,WACZ,CAClB,MAAO,IAAiB,SAAS,MAC9B,KACC,EAAU,IAAM,GAAgB,EAAI,CAAE,UAAS,eAC/C,EAAI,CAAC,CAAE,OAAQ,CAAE,QACR,EACL,OAAQ,GAAK,MAGjB,EAAwB,WAevB,YACL,EAAiB,EACY,CAC7B,GAAM,GAAY,GAAI,GACtB,SACG,KACC,EAAU,IAET,UAAU,CAGT,KAAK,CAAE,UAAU,CACf,AAAI,EACF,GAAa,EAAI,UAEjB,GAAe,IAInB,UAAW,CACT,GAAe,MAKhB,GAAU,EAAI,GAClB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KC3B3B,YACL,EAA8B,CAAE,YAAW,WACd,CAC7B,GAAM,GAAQ,GAAI,KAClB,OAAW,KAAU,GAAS,CAC5B,GAAM,GAAK,mBAAmB,EAAO,KAAK,UAAU,IAC9C,EAAS,GAAW,QAAQ,OAClC,AAAI,MAAO,IAAW,aACpB,EAAM,IAAI,EAAQ,GAItB,GAAM,GAAU,EACb,KACC,EAAI,GAAU,GAAK,EAAO,SA4E9B,MAAO,AAxEY,IAAiB,SAAS,MAC1C,KACC,EAAwB,UAGxB,EAAI,IAAM,CACR,GAAI,GAA4B,GAChC,MAAO,CAAC,GAAG,GAAO,OAAO,CAAC,EAAO,CAAC,EAAQ,KAAY,CACpD,KAAO,EAAK,QAEN,AADS,EAAM,IAAI,EAAK,EAAK,OAAS,IACjC,SAAW,EAAO,SACzB,EAAK,MAOT,GAAI,GAAS,EAAO,UACpB,KAAO,CAAC,GAAU,EAAO,eACvB,EAAS,EAAO,cAChB,EAAS,EAAO,UAIlB,MAAO,GAAM,IACX,CAAC,GAAG,EAAO,CAAC,GAAG,EAAM,IAAS,UAC9B,IAED,GAAI,QAIT,EAAI,GAAS,GAAI,KAAI,CAAC,GAAG,GAAO,KAAK,CAAC,CAAC,CAAE,GAAI,CAAC,CAAE,KAAO,EAAI,KAG3D,EAAU,GAAS,EAAc,CAAC,EAAS,IACxC,KACC,GAAK,CAAC,CAAC,EAAM,GAAO,CAAC,EAAQ,CAAE,OAAQ,CAAE,SAAW,CAGlD,KAAO,EAAK,QAAQ,CAClB,GAAM,CAAC,CAAE,GAAU,EAAK,GACxB,GAAI,EAAS,EAAS,EACpB,EAAO,CAAC,GAAG,EAAM,EAAK,aAEtB,OAKJ,KAAO,EAAK,QAAQ,CAClB,GAAM,CAAC,CAAE,GAAU,EAAK,EAAK,OAAS,GACtC,GAAI,EAAS,GAAU,EACrB,EAAO,CAAC,EAAK,MAAQ,GAAG,OAExB,OAKJ,MAAO,CAAC,EAAM,IACb,CAAC,GAAI,CAAC,GAAG,KACZ,EAAqB,CAAC,EAAG,IACvB,EAAE,KAAO,EAAE,IACX,EAAE,KAAO,EAAE,OAQlB,KACC,EAAI,CAAC,CAAC,EAAM,KAAW,EACrB,KAAM,EAAK,IAAI,CAAC,CAAC,KAAU,GAC3B,KAAM,EAAK,IAAI,CAAC,CAAC,KAAU,MAI7B,EAAU,CAAE,KAAM,GAAI,KAAM,KAC5B,GAAY,EAAG,GACf,EAAI,CAAC,CAAC,EAAG,KAGH,EAAE,KAAK,OAAS,EAAE,KAAK,OAClB,CACL,KAAM,EAAE,KAAK,MAAM,KAAK,IAAI,EAAG,EAAE,KAAK,OAAS,GAAI,EAAE,KAAK,QAC1D,KAAM,IAKD,CACL,KAAM,EAAE,KAAK,MAAM,IACnB,KAAM,EAAE,KAAK,MAAM,EAAG,EAAE,KAAK,OAAS,EAAE,KAAK,WAiBlD,YACL,EAAiB,EACuB,CACxC,GAAM,GAAY,GAAI,GACtB,EACG,KACC,EAAU,IAET,UAAU,CAAC,CAAE,OAAM,UAAW,CAG7B,OAAW,CAAC,IAAW,GACrB,GAAkB,GAClB,GAAiB,GAInB,OAAW,CAAC,EAAO,CAAC,KAAY,GAAK,UACnC,GAAgB,EAAQ,IAAU,EAAK,OAAS,GAChD,GAAe,EAAQ,UAK/B,GAAM,GAAU,EAA+B,cAAe,GAC9D,MAAO,IAAqB,EAAS,GAClC,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCzL3B,YACL,EAAkB,CAAE,YAAW,SACR,CAGvB,GAAM,GAAa,EAChB,KACC,EAAI,CAAC,CAAE,OAAQ,CAAE,QAAU,GAC3B,GAAY,EAAG,GACf,EAAI,CAAC,CAAC,EAAG,KAAO,EAAI,GACpB,KAIE,EAAU,EACb,KACC,EAAwB,WAI5B,MAAO,GAAc,CAAC,EAAS,IAC5B,KACC,EAAI,CAAC,CAAC,CAAE,UAAU,KAAgB,EAChC,OAAQ,CAAE,IAAU,MAEtB,EAAqB,CAAC,EAAG,IACvB,EAAE,SAAW,EAAE,SAehB,YACL,EAAiB,EACiB,CAClC,GAAM,GAAY,GAAI,GACtB,SACG,KACC,EAAU,IAET,UAAU,CAGT,KAAK,CAAE,UAAU,CACf,AAAI,EACF,GAAkB,EAAI,UAEtB,GAAoB,IAIxB,UAAW,CACT,GAAoB,MAKrB,GAAe,EAAI,GACvB,KACC,EAAI,GACJ,EAAS,IAAM,EAAU,YACzB,EAAI,GAAU,GAAE,IAAK,GAAO,KCnG3B,YACL,CAAE,YAAW,WACP,CACN,EACG,KACC,EAAU,IAAM,EAAG,GAAG,EACpB,mCAEF,EAAI,GAAM,CACR,EAAG,cAAgB,GACnB,EAAG,QAAU,KAEf,GAAS,GAAM,EAAU,EAAI,UAC1B,KACC,GAAU,IAAM,EAAG,aAAa,kBAChC,GAAM,KAGV,GAAe,IAEd,UAAU,CAAC,CAAC,EAAI,KAAY,CAC3B,EAAG,gBAAgB,iBACf,GACF,GAAG,QAAU,MC5BvB,aAAkC,CAChC,MAAO,qBAAqB,KAAK,UAAU,WAkBtC,YACL,CAAE,aACI,CACN,EACG,KACC,EAAU,IAAM,EAAG,GAAG,EAAY,yBAClC,EAAI,GAAM,EAAG,gBAAgB,sBAC7B,EAAO,IACP,GAAS,GAAM,EAAU,EAAI,cAC1B,KACC,GAAM,MAIT,UAAU,GAAM,CACf,GAAM,GAAM,EAAG,UAGf,AAAI,IAAQ,EACV,EAAG,UAAY,EAGN,EAAM,EAAG,eAAiB,EAAG,cACtC,GAAG,UAAY,EAAM,KC9BxB,YACL,CAAE,YAAW,WACP,CACN,EAAc,CAAC,GAAY,UAAW,IACnC,KACC,EAAI,CAAC,CAAC,EAAQ,KAAY,GAAU,CAAC,GACrC,EAAU,GAAU,EAAG,GACpB,KACC,GAAM,EAAS,IAAM,KACrB,EAAU,KAGd,GAAe,IAEd,UAAU,CAAC,CAAC,EAAQ,CAAE,OAAQ,CAAE,SAAU,CACzC,AAAI,EACF,GAAc,SAAS,KAAM,GAE7B,GAAgB,SAAS,QhLFnC,SAAS,gBAAgB,UAAU,OAAO,SAC1C,SAAS,gBAAgB,UAAU,IAAI,MAGvC,GAAM,IAAY,KACZ,GAAY,KACZ,GAAY,KACZ,GAAY,KAGZ,GAAY,KACZ,GAAY,GAAW,sBACvB,GAAY,GAAW,uBACvB,GAAY,KAGZ,GAAS,KACT,GAAS,SAAS,MAAM,UAAU,UACpC,gCAAU,QAAS,GACnB,GAAG,GAAO,iCAEV,EAGE,GAAS,GAAI,GACnB,GAAiB,CAAE,YAGnB,AAAI,GAAQ,uBACV,GAAoB,CAAE,aAAW,aAAW,eA9G9C,OAiHA,AAAI,QAAO,UAAP,eAAgB,YAAa,QAC/B,KAGF,EAAM,GAAW,IACd,KACC,GAAM,MAEL,UAAU,IAAM,CACf,GAAU,SAAU,IACpB,GAAU,SAAU,MAI1B,GACG,KACC,EAAO,CAAC,CAAE,UAAW,IAAS,WAE7B,UAAU,GAAO,CAChB,OAAQ,EAAI,UAGL,QACA,IACH,GAAM,GAAO,GAAW,oBACxB,AAAI,MAAO,IAAS,aAClB,EAAK,QACP,UAGG,QACA,IACH,GAAM,GAAO,GAAW,oBACxB,AAAI,MAAO,IAAS,aAClB,EAAK,QACP,SAKV,GAAmB,CAAE,aAAW,aAChC,GAAe,CAAE,eACjB,GAAgB,CAAE,aAAW,aAG7B,GAAM,IAAU,GAAY,GAAoB,UAAW,CAAE,eACvD,GAAQ,GACX,KACC,EAAI,IAAM,GAAoB,SAC9B,EAAU,GAAM,GAAU,EAAI,CAAE,aAAW,cAC3C,GAAY,IAIV,GAAW,EAGf,GAAG,GAAqB,UACrB,IAAI,GAAM,GAAY,EAAI,CAAE,aAG/B,GAAG,GAAqB,UACrB,IAAI,GAAM,GAAY,EAAI,CAAE,aAAW,WAAS,YAGnD,GAAG,GAAqB,WACrB,IAAI,GAAM,GAAa,IAG1B,GAAG,GAAqB,UACrB,IAAI,GAAM,GAAY,EAAI,CAAE,UAAQ,gBAGvC,GAAG,GAAqB,UACrB,IAAI,GAAM,GAAY,KAIrB,GAAW,GAAM,IAAM,EAG3B,GAAG,GAAqB,WACrB,IAAI,GAAM,GAAa,EAAI,CAAE,WAAS,aAAW,aAGpD,GAAG,GAAqB,gBACrB,IAAI,GAAM,GAAiB,EAAI,CAAE,aAAW,cAG/C,GAAG,GAAqB,WACrB,IAAI,GAAM,EAAG,aAAa,kBAAoB,aAC3C,GAAG,GAAS,IAAM,GAAa,EAAI,CAAE,aAAW,WAAS,YACzD,GAAG,GAAS,IAAM,GAAa,EAAI,CAAE,aAAW,WAAS,aAI/D,GAAG,GAAqB,QACrB,IAAI,GAAM,GAAU,EAAI,CAAE,aAAW,cAGxC,GAAG,GAAqB,OACrB,IAAI,GAAM,GAAqB,EAAI,CAAE,aAAW,cAGnD,GAAG,GAAqB,OACrB,IAAI,GAAM,GAAe,EAAI,CAAE,aAAW,cAIzC,GAAa,GAChB,KACC,EAAU,IAAM,IAChB,GAAU,IACV,GAAY,IAIhB,GAAW,YAMX,OAAO,UAAa,GACpB,OAAO,UAAa,GACpB,OAAO,QAAa,GACpB,OAAO,UAAa,GACpB,OAAO,UAAa,GACpB,OAAO,QAAa,GACpB,OAAO,QAAa,GACpB,OAAO,OAAa,GACpB,OAAO,OAAa,GACpB,OAAO,WAAa", + "names": [] +} diff --git a/v2.7/assets/javascripts/lunr/min/lunr.ar.min.js b/v2.7/assets/javascripts/lunr/min/lunr.ar.min.js new file mode 100644 index 000000000..248ddc5d1 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.ar.min.js @@ -0,0 +1 @@ +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.ar=function(){this.pipeline.reset(),this.pipeline.add(e.ar.trimmer,e.ar.stopWordFilter,e.ar.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.ar.stemmer))},e.ar.wordCharacters="ء-ٛٱـ",e.ar.trimmer=e.trimmerSupport.generateTrimmer(e.ar.wordCharacters),e.Pipeline.registerFunction(e.ar.trimmer,"trimmer-ar"),e.ar.stemmer=function(){var e=this;return e.result=!1,e.preRemoved=!1,e.sufRemoved=!1,e.pre={pre1:"ف ك ب و س ل ن ا ي ت",pre2:"ال لل",pre3:"بال وال فال تال كال ولل",pre4:"فبال كبال وبال وكال"},e.suf={suf1:"ه ك ت ن ا ي",suf2:"نك نه ها وك يا اه ون ين تن تم نا وا ان كم كن ني نن ما هم هن تك ته ات يه",suf3:"تين كهم نيه نهم ونه وها يهم ونا ونك وني وهم تكم تنا تها تني تهم كما كها ناه نكم هنا تان يها",suf4:"كموه ناها ونني ونهم تكما تموه تكاه كماه ناكم ناهم نيها وننا"},e.patterns=JSON.parse('{"pt43":[{"pt":[{"c":"ا","l":1}]},{"pt":[{"c":"ا,ت,ن,ي","l":0}],"mPt":[{"c":"ف","l":0,"m":1},{"c":"ع","l":1,"m":2},{"c":"ل","l":2,"m":3}]},{"pt":[{"c":"و","l":2}],"mPt":[{"c":"ف","l":0,"m":0},{"c":"ع","l":1,"m":1},{"c":"ل","l":2,"m":3}]},{"pt":[{"c":"ا","l":2}]},{"pt":[{"c":"ي","l":2}],"mPt":[{"c":"ف","l":0,"m":0},{"c":"ع","l":1,"m":1},{"c":"ا","l":2},{"c":"ل","l":3,"m":3}]},{"pt":[{"c":"م","l":0}]}],"pt53":[{"pt":[{"c":"ت","l":0},{"c":"ا","l":2}]},{"pt":[{"c":"ا,ن,ت,ي","l":0},{"c":"ت","l":2}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ت","l":2},{"c":"ع","l":3,"m":3},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"ا","l":0},{"c":"ا","l":2}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ع","l":2,"m":3},{"c":"ل","l":3,"m":4},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"ا","l":0},{"c":"ا","l":3}],"mPt":[{"c":"ف","l":0,"m":1},{"c":"ع","l":1,"m":2},{"c":"ل","l":2,"m":4}]},{"pt":[{"c":"ا","l":3},{"c":"ن","l":4}]},{"pt":[{"c":"ت","l":0},{"c":"ي","l":3}]},{"pt":[{"c":"م","l":0},{"c":"و","l":3}]},{"pt":[{"c":"ا","l":1},{"c":"و","l":3}]},{"pt":[{"c":"و","l":1},{"c":"ا","l":2}]},{"pt":[{"c":"م","l":0},{"c":"ا","l":3}]},{"pt":[{"c":"م","l":0},{"c":"ي","l":3}]},{"pt":[{"c":"ا","l":2},{"c":"ن","l":3}]},{"pt":[{"c":"م","l":0},{"c":"ن","l":1}],"mPt":[{"c":"ا","l":0},{"c":"ن","l":1},{"c":"ف","l":2,"m":2},{"c":"ع","l":3,"m":3},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"م","l":0},{"c":"ت","l":2}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ت","l":2},{"c":"ع","l":3,"m":3},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"م","l":0},{"c":"ا","l":2}]},{"pt":[{"c":"م","l":1},{"c":"ا","l":3}]},{"pt":[{"c":"ي,ت,ا,ن","l":0},{"c":"ت","l":1}],"mPt":[{"c":"ف","l":0,"m":2},{"c":"ع","l":1,"m":3},{"c":"ا","l":2},{"c":"ل","l":3,"m":4}]},{"pt":[{"c":"ت,ي,ا,ن","l":0},{"c":"ت","l":2}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ت","l":2},{"c":"ع","l":3,"m":3},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"ا","l":2},{"c":"ي","l":3}]},{"pt":[{"c":"ا,ي,ت,ن","l":0},{"c":"ن","l":1}],"mPt":[{"c":"ا","l":0},{"c":"ن","l":1},{"c":"ف","l":2,"m":2},{"c":"ع","l":3,"m":3},{"c":"ا","l":4},{"c":"ل","l":5,"m":4}]},{"pt":[{"c":"ا","l":3},{"c":"ء","l":4}]}],"pt63":[{"pt":[{"c":"ا","l":0},{"c":"ت","l":2},{"c":"ا","l":4}]},{"pt":[{"c":"ا,ت,ن,ي","l":0},{"c":"س","l":1},{"c":"ت","l":2}],"mPt":[{"c":"ا","l":0},{"c":"س","l":1},{"c":"ت","l":2},{"c":"ف","l":3,"m":3},{"c":"ع","l":4,"m":4},{"c":"ا","l":5},{"c":"ل","l":6,"m":5}]},{"pt":[{"c":"ا,ن,ت,ي","l":0},{"c":"و","l":3}]},{"pt":[{"c":"م","l":0},{"c":"س","l":1},{"c":"ت","l":2}],"mPt":[{"c":"ا","l":0},{"c":"س","l":1},{"c":"ت","l":2},{"c":"ف","l":3,"m":3},{"c":"ع","l":4,"m":4},{"c":"ا","l":5},{"c":"ل","l":6,"m":5}]},{"pt":[{"c":"ي","l":1},{"c":"ي","l":3},{"c":"ا","l":4},{"c":"ء","l":5}]},{"pt":[{"c":"ا","l":0},{"c":"ن","l":1},{"c":"ا","l":4}]}],"pt54":[{"pt":[{"c":"ت","l":0}]},{"pt":[{"c":"ا,ي,ت,ن","l":0}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ع","l":2,"m":2},{"c":"ل","l":3,"m":3},{"c":"ر","l":4,"m":4},{"c":"ا","l":5},{"c":"ر","l":6,"m":4}]},{"pt":[{"c":"م","l":0}],"mPt":[{"c":"ا","l":0},{"c":"ف","l":1,"m":1},{"c":"ع","l":2,"m":2},{"c":"ل","l":3,"m":3},{"c":"ر","l":4,"m":4},{"c":"ا","l":5},{"c":"ر","l":6,"m":4}]},{"pt":[{"c":"ا","l":2}]},{"pt":[{"c":"ا","l":0},{"c":"ن","l":2}]}],"pt64":[{"pt":[{"c":"ا","l":0},{"c":"ا","l":4}]},{"pt":[{"c":"م","l":0},{"c":"ت","l":1}]}],"pt73":[{"pt":[{"c":"ا","l":0},{"c":"س","l":1},{"c":"ت","l":2},{"c":"ا","l":5}]}],"pt75":[{"pt":[{"c":"ا","l":0},{"c":"ا","l":5}]}]}'),e.execArray=["cleanWord","removeDiacritics","cleanAlef","removeStopWords","normalizeHamzaAndAlef","removeStartWaw","removePre432","removeEndTaa","wordCheck"],e.stem=function(){var r=0;for(e.result=!1,e.preRemoved=!1,e.sufRemoved=!1;r=0)return!0},e.normalizeHamzaAndAlef=function(){return e.word=e.word.replace("ؤ","ء"),e.word=e.word.replace("ئ","ء"),e.word=e.word.replace(/([\u0627])\1+/gi,"ا"),!1},e.removeEndTaa=function(){return!(e.word.length>2)||(e.word=e.word.replace(/[\u0627]$/,""),e.word=e.word.replace("ة",""),!1)},e.removeStartWaw=function(){return e.word.length>3&&"و"==e.word[0]&&"و"==e.word[1]&&(e.word=e.word.slice(1)),!1},e.removePre432=function(){var r=e.word;if(e.word.length>=7){var t=new RegExp("^("+e.pre.pre4.split(" ").join("|")+")");e.word=e.word.replace(t,"")}if(e.word==r&&e.word.length>=6){var c=new RegExp("^("+e.pre.pre3.split(" ").join("|")+")");e.word=e.word.replace(c,"")}if(e.word==r&&e.word.length>=5){var l=new RegExp("^("+e.pre.pre2.split(" ").join("|")+")");e.word=e.word.replace(l,"")}return r!=e.word&&(e.preRemoved=!0),!1},e.patternCheck=function(r){for(var t=0;t3){var t=new RegExp("^("+e.pre.pre1.split(" ").join("|")+")");e.word=e.word.replace(t,"")}return r!=e.word&&(e.preRemoved=!0),!1},e.removeSuf1=function(){var r=e.word;if(0==e.sufRemoved&&e.word.length>3){var t=new RegExp("("+e.suf.suf1.split(" ").join("|")+")$");e.word=e.word.replace(t,"")}return r!=e.word&&(e.sufRemoved=!0),!1},e.removeSuf432=function(){var r=e.word;if(e.word.length>=6){var t=new RegExp("("+e.suf.suf4.split(" ").join("|")+")$");e.word=e.word.replace(t,"")}if(e.word==r&&e.word.length>=5){var c=new RegExp("("+e.suf.suf3.split(" ").join("|")+")$");e.word=e.word.replace(c,"")}if(e.word==r&&e.word.length>=4){var l=new RegExp("("+e.suf.suf2.split(" ").join("|")+")$");e.word=e.word.replace(l,"")}return r!=e.word&&(e.sufRemoved=!0),!1},e.wordCheck=function(){for(var r=(e.word,[e.removeSuf432,e.removeSuf1,e.removePre1]),t=0,c=!1;e.word.length>=7&&!e.result&&t=f.limit)return;f.cursor++}for(;!f.out_grouping(w,97,248);){if(f.cursor>=f.limit)return;f.cursor++}d=f.cursor,d=d&&(r=f.limit_backward,f.limit_backward=d,f.ket=f.cursor,e=f.find_among_b(c,32),f.limit_backward=r,e))switch(f.bra=f.cursor,e){case 1:f.slice_del();break;case 2:f.in_grouping_b(p,97,229)&&f.slice_del()}}function t(){var e,r=f.limit-f.cursor;f.cursor>=d&&(e=f.limit_backward,f.limit_backward=d,f.ket=f.cursor,f.find_among_b(l,4)?(f.bra=f.cursor,f.limit_backward=e,f.cursor=f.limit-r,f.cursor>f.limit_backward&&(f.cursor--,f.bra=f.cursor,f.slice_del())):f.limit_backward=e)}function s(){var e,r,i,n=f.limit-f.cursor;if(f.ket=f.cursor,f.eq_s_b(2,"st")&&(f.bra=f.cursor,f.eq_s_b(2,"ig")&&f.slice_del()),f.cursor=f.limit-n,f.cursor>=d&&(r=f.limit_backward,f.limit_backward=d,f.ket=f.cursor,e=f.find_among_b(m,5),f.limit_backward=r,e))switch(f.bra=f.cursor,e){case 1:f.slice_del(),i=f.limit-f.cursor,t(),f.cursor=f.limit-i;break;case 2:f.slice_from("løs")}}function o(){var e;f.cursor>=d&&(e=f.limit_backward,f.limit_backward=d,f.ket=f.cursor,f.out_grouping_b(w,97,248)?(f.bra=f.cursor,u=f.slice_to(u),f.limit_backward=e,f.eq_v_b(u)&&f.slice_del()):f.limit_backward=e)}var a,d,u,c=[new r("hed",-1,1),new r("ethed",0,1),new r("ered",-1,1),new r("e",-1,1),new r("erede",3,1),new r("ende",3,1),new r("erende",5,1),new r("ene",3,1),new r("erne",3,1),new r("ere",3,1),new r("en",-1,1),new r("heden",10,1),new r("eren",10,1),new r("er",-1,1),new r("heder",13,1),new r("erer",13,1),new r("s",-1,2),new r("heds",16,1),new r("es",16,1),new r("endes",18,1),new r("erendes",19,1),new r("enes",18,1),new r("ernes",18,1),new r("eres",18,1),new r("ens",16,1),new r("hedens",24,1),new r("erens",24,1),new r("ers",16,1),new r("ets",16,1),new r("erets",28,1),new r("et",-1,1),new r("eret",30,1)],l=[new r("gd",-1,-1),new r("dt",-1,-1),new r("gt",-1,-1),new r("kt",-1,-1)],m=[new r("ig",-1,1),new r("lig",0,1),new r("elig",1,1),new r("els",-1,1),new r("løst",-1,2)],w=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,48,0,128],p=[239,254,42,3,0,0,0,0,0,0,0,0,0,0,0,0,16],f=new i;this.setCurrent=function(e){f.setCurrent(e)},this.getCurrent=function(){return f.getCurrent()},this.stem=function(){var r=f.cursor;return e(),f.limit_backward=r,f.cursor=f.limit,n(),f.cursor=f.limit,t(),f.cursor=f.limit,s(),f.cursor=f.limit,o(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return n.setCurrent(e),n.stem(),n.getCurrent()}):(n.setCurrent(e),n.stem(),n.getCurrent())}}(),e.Pipeline.registerFunction(e.da.stemmer,"stemmer-da"),e.da.stopWordFilter=e.generateStopWordFilter("ad af alle alt anden at blev blive bliver da de dem den denne der deres det dette dig din disse dog du efter eller en end er et for fra ham han hans har havde have hende hendes her hos hun hvad hvis hvor i ikke ind jeg jer jo kunne man mange med meget men mig min mine mit mod ned noget nogle nu når og også om op os over på selv sig sin sine sit skal skulle som sådan thi til ud under var vi vil ville vor være været".split(" ")),e.Pipeline.registerFunction(e.da.stopWordFilter,"stopWordFilter-da")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.de.min.js b/v2.7/assets/javascripts/lunr/min/lunr.de.min.js new file mode 100644 index 000000000..f3b5c108c --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.de.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `German` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.de=function(){this.pipeline.reset(),this.pipeline.add(e.de.trimmer,e.de.stopWordFilter,e.de.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.de.stemmer))},e.de.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.de.trimmer=e.trimmerSupport.generateTrimmer(e.de.wordCharacters),e.Pipeline.registerFunction(e.de.trimmer,"trimmer-de"),e.de.stemmer=function(){var r=e.stemmerSupport.Among,n=e.stemmerSupport.SnowballProgram,i=new function(){function e(e,r,n){return!(!v.eq_s(1,e)||(v.ket=v.cursor,!v.in_grouping(p,97,252)))&&(v.slice_from(r),v.cursor=n,!0)}function i(){for(var r,n,i,s,t=v.cursor;;)if(r=v.cursor,v.bra=r,v.eq_s(1,"ß"))v.ket=v.cursor,v.slice_from("ss");else{if(r>=v.limit)break;v.cursor=r+1}for(v.cursor=t;;)for(n=v.cursor;;){if(i=v.cursor,v.in_grouping(p,97,252)){if(s=v.cursor,v.bra=s,e("u","U",i))break;if(v.cursor=s,e("y","Y",i))break}if(i>=v.limit)return void(v.cursor=n);v.cursor=i+1}}function s(){for(;!v.in_grouping(p,97,252);){if(v.cursor>=v.limit)return!0;v.cursor++}for(;!v.out_grouping(p,97,252);){if(v.cursor>=v.limit)return!0;v.cursor++}return!1}function t(){m=v.limit,l=m;var e=v.cursor+3;0<=e&&e<=v.limit&&(d=e,s()||(m=v.cursor,m=v.limit)return;v.cursor++}}}function c(){return m<=v.cursor}function u(){return l<=v.cursor}function a(){var e,r,n,i,s=v.limit-v.cursor;if(v.ket=v.cursor,(e=v.find_among_b(w,7))&&(v.bra=v.cursor,c()))switch(e){case 1:v.slice_del();break;case 2:v.slice_del(),v.ket=v.cursor,v.eq_s_b(1,"s")&&(v.bra=v.cursor,v.eq_s_b(3,"nis")&&v.slice_del());break;case 3:v.in_grouping_b(g,98,116)&&v.slice_del()}if(v.cursor=v.limit-s,v.ket=v.cursor,(e=v.find_among_b(f,4))&&(v.bra=v.cursor,c()))switch(e){case 1:v.slice_del();break;case 2:if(v.in_grouping_b(k,98,116)){var t=v.cursor-3;v.limit_backward<=t&&t<=v.limit&&(v.cursor=t,v.slice_del())}}if(v.cursor=v.limit-s,v.ket=v.cursor,(e=v.find_among_b(_,8))&&(v.bra=v.cursor,u()))switch(e){case 1:v.slice_del(),v.ket=v.cursor,v.eq_s_b(2,"ig")&&(v.bra=v.cursor,r=v.limit-v.cursor,v.eq_s_b(1,"e")||(v.cursor=v.limit-r,u()&&v.slice_del()));break;case 2:n=v.limit-v.cursor,v.eq_s_b(1,"e")||(v.cursor=v.limit-n,v.slice_del());break;case 3:if(v.slice_del(),v.ket=v.cursor,i=v.limit-v.cursor,!v.eq_s_b(2,"er")&&(v.cursor=v.limit-i,!v.eq_s_b(2,"en")))break;v.bra=v.cursor,c()&&v.slice_del();break;case 4:v.slice_del(),v.ket=v.cursor,e=v.find_among_b(b,2),e&&(v.bra=v.cursor,u()&&1==e&&v.slice_del())}}var d,l,m,h=[new r("",-1,6),new r("U",0,2),new r("Y",0,1),new r("ä",0,3),new r("ö",0,4),new r("ü",0,5)],w=[new r("e",-1,2),new r("em",-1,1),new r("en",-1,2),new r("ern",-1,1),new r("er",-1,1),new r("s",-1,3),new r("es",5,2)],f=[new r("en",-1,1),new r("er",-1,1),new r("st",-1,2),new r("est",2,1)],b=[new r("ig",-1,1),new r("lich",-1,1)],_=[new r("end",-1,1),new r("ig",-1,2),new r("ung",-1,1),new r("lich",-1,3),new r("isch",-1,2),new r("ik",-1,2),new r("heit",-1,3),new r("keit",-1,4)],p=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,8,0,32,8],g=[117,30,5],k=[117,30,4],v=new n;this.setCurrent=function(e){v.setCurrent(e)},this.getCurrent=function(){return v.getCurrent()},this.stem=function(){var e=v.cursor;return i(),v.cursor=e,t(),v.limit_backward=e,v.cursor=v.limit,a(),v.cursor=v.limit_backward,o(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return i.setCurrent(e),i.stem(),i.getCurrent()}):(i.setCurrent(e),i.stem(),i.getCurrent())}}(),e.Pipeline.registerFunction(e.de.stemmer,"stemmer-de"),e.de.stopWordFilter=e.generateStopWordFilter("aber alle allem allen aller alles als also am an ander andere anderem anderen anderer anderes anderm andern anderr anders auch auf aus bei bin bis bist da damit dann das dasselbe dazu daß dein deine deinem deinen deiner deines dem demselben den denn denselben der derer derselbe derselben des desselben dessen dich die dies diese dieselbe dieselben diesem diesen dieser dieses dir doch dort du durch ein eine einem einen einer eines einig einige einigem einigen einiger einiges einmal er es etwas euch euer eure eurem euren eurer eures für gegen gewesen hab habe haben hat hatte hatten hier hin hinter ich ihm ihn ihnen ihr ihre ihrem ihren ihrer ihres im in indem ins ist jede jedem jeden jeder jedes jene jenem jenen jener jenes jetzt kann kein keine keinem keinen keiner keines können könnte machen man manche manchem manchen mancher manches mein meine meinem meinen meiner meines mich mir mit muss musste nach nicht nichts noch nun nur ob oder ohne sehr sein seine seinem seinen seiner seines selbst sich sie sind so solche solchem solchen solcher solches soll sollte sondern sonst um und uns unse unsem unsen unser unses unter viel vom von vor war waren warst was weg weil weiter welche welchem welchen welcher welches wenn werde werden wie wieder will wir wird wirst wo wollen wollte während würde würden zu zum zur zwar zwischen über".split(" ")),e.Pipeline.registerFunction(e.de.stopWordFilter,"stopWordFilter-de")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.du.min.js b/v2.7/assets/javascripts/lunr/min/lunr.du.min.js new file mode 100644 index 000000000..49a0f3f0a --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.du.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Dutch` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");console.warn('[Lunr Languages] Please use the "nl" instead of the "du". The "nl" code is the standard code for Dutch language, and "du" will be removed in the next major versions.'),e.du=function(){this.pipeline.reset(),this.pipeline.add(e.du.trimmer,e.du.stopWordFilter,e.du.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.du.stemmer))},e.du.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.du.trimmer=e.trimmerSupport.generateTrimmer(e.du.wordCharacters),e.Pipeline.registerFunction(e.du.trimmer,"trimmer-du"),e.du.stemmer=function(){var r=e.stemmerSupport.Among,i=e.stemmerSupport.SnowballProgram,n=new function(){function e(){for(var e,r,i,o=C.cursor;;){if(C.bra=C.cursor,e=C.find_among(b,11))switch(C.ket=C.cursor,e){case 1:C.slice_from("a");continue;case 2:C.slice_from("e");continue;case 3:C.slice_from("i");continue;case 4:C.slice_from("o");continue;case 5:C.slice_from("u");continue;case 6:if(C.cursor>=C.limit)break;C.cursor++;continue}break}for(C.cursor=o,C.bra=o,C.eq_s(1,"y")?(C.ket=C.cursor,C.slice_from("Y")):C.cursor=o;;)if(r=C.cursor,C.in_grouping(q,97,232)){if(i=C.cursor,C.bra=i,C.eq_s(1,"i"))C.ket=C.cursor,C.in_grouping(q,97,232)&&(C.slice_from("I"),C.cursor=r);else if(C.cursor=i,C.eq_s(1,"y"))C.ket=C.cursor,C.slice_from("Y"),C.cursor=r;else if(n(r))break}else if(n(r))break}function n(e){return C.cursor=e,e>=C.limit||(C.cursor++,!1)}function o(){_=C.limit,f=_,t()||(_=C.cursor,_<3&&(_=3),t()||(f=C.cursor))}function t(){for(;!C.in_grouping(q,97,232);){if(C.cursor>=C.limit)return!0;C.cursor++}for(;!C.out_grouping(q,97,232);){if(C.cursor>=C.limit)return!0;C.cursor++}return!1}function s(){for(var e;;)if(C.bra=C.cursor,e=C.find_among(p,3))switch(C.ket=C.cursor,e){case 1:C.slice_from("y");break;case 2:C.slice_from("i");break;case 3:if(C.cursor>=C.limit)return;C.cursor++}}function u(){return _<=C.cursor}function c(){return f<=C.cursor}function a(){var e=C.limit-C.cursor;C.find_among_b(g,3)&&(C.cursor=C.limit-e,C.ket=C.cursor,C.cursor>C.limit_backward&&(C.cursor--,C.bra=C.cursor,C.slice_del()))}function l(){var e;w=!1,C.ket=C.cursor,C.eq_s_b(1,"e")&&(C.bra=C.cursor,u()&&(e=C.limit-C.cursor,C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-e,C.slice_del(),w=!0,a())))}function m(){var e;u()&&(e=C.limit-C.cursor,C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-e,C.eq_s_b(3,"gem")||(C.cursor=C.limit-e,C.slice_del(),a())))}function d(){var e,r,i,n,o,t,s=C.limit-C.cursor;if(C.ket=C.cursor,e=C.find_among_b(h,5))switch(C.bra=C.cursor,e){case 1:u()&&C.slice_from("heid");break;case 2:m();break;case 3:u()&&C.out_grouping_b(z,97,232)&&C.slice_del()}if(C.cursor=C.limit-s,l(),C.cursor=C.limit-s,C.ket=C.cursor,C.eq_s_b(4,"heid")&&(C.bra=C.cursor,c()&&(r=C.limit-C.cursor,C.eq_s_b(1,"c")||(C.cursor=C.limit-r,C.slice_del(),C.ket=C.cursor,C.eq_s_b(2,"en")&&(C.bra=C.cursor,m())))),C.cursor=C.limit-s,C.ket=C.cursor,e=C.find_among_b(k,6))switch(C.bra=C.cursor,e){case 1:if(c()){if(C.slice_del(),i=C.limit-C.cursor,C.ket=C.cursor,C.eq_s_b(2,"ig")&&(C.bra=C.cursor,c()&&(n=C.limit-C.cursor,!C.eq_s_b(1,"e")))){C.cursor=C.limit-n,C.slice_del();break}C.cursor=C.limit-i,a()}break;case 2:c()&&(o=C.limit-C.cursor,C.eq_s_b(1,"e")||(C.cursor=C.limit-o,C.slice_del()));break;case 3:c()&&(C.slice_del(),l());break;case 4:c()&&C.slice_del();break;case 5:c()&&w&&C.slice_del()}C.cursor=C.limit-s,C.out_grouping_b(j,73,232)&&(t=C.limit-C.cursor,C.find_among_b(v,4)&&C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-t,C.ket=C.cursor,C.cursor>C.limit_backward&&(C.cursor--,C.bra=C.cursor,C.slice_del())))}var f,_,w,b=[new r("",-1,6),new r("á",0,1),new r("ä",0,1),new r("é",0,2),new r("ë",0,2),new r("í",0,3),new r("ï",0,3),new r("ó",0,4),new r("ö",0,4),new r("ú",0,5),new r("ü",0,5)],p=[new r("",-1,3),new r("I",0,2),new r("Y",0,1)],g=[new r("dd",-1,-1),new r("kk",-1,-1),new r("tt",-1,-1)],h=[new r("ene",-1,2),new r("se",-1,3),new r("en",-1,2),new r("heden",2,1),new r("s",-1,3)],k=[new r("end",-1,1),new r("ig",-1,2),new r("ing",-1,1),new r("lijk",-1,3),new r("baar",-1,4),new r("bar",-1,5)],v=[new r("aa",-1,-1),new r("ee",-1,-1),new r("oo",-1,-1),new r("uu",-1,-1)],q=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],j=[1,0,0,17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],z=[17,67,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],C=new i;this.setCurrent=function(e){C.setCurrent(e)},this.getCurrent=function(){return C.getCurrent()},this.stem=function(){var r=C.cursor;return e(),C.cursor=r,o(),C.limit_backward=r,C.cursor=C.limit,d(),C.cursor=C.limit_backward,s(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return n.setCurrent(e),n.stem(),n.getCurrent()}):(n.setCurrent(e),n.stem(),n.getCurrent())}}(),e.Pipeline.registerFunction(e.du.stemmer,"stemmer-du"),e.du.stopWordFilter=e.generateStopWordFilter(" aan al alles als altijd andere ben bij daar dan dat de der deze die dit doch doen door dus een eens en er ge geen geweest haar had heb hebben heeft hem het hier hij hoe hun iemand iets ik in is ja je kan kon kunnen maar me meer men met mij mijn moet na naar niet niets nog nu of om omdat onder ons ook op over reeds te tegen toch toen tot u uit uw van veel voor want waren was wat werd wezen wie wil worden wordt zal ze zelf zich zij zijn zo zonder zou".split(" ")),e.Pipeline.registerFunction(e.du.stopWordFilter,"stopWordFilter-du")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.es.min.js b/v2.7/assets/javascripts/lunr/min/lunr.es.min.js new file mode 100644 index 000000000..2989d3426 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.es.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Spanish` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,s){"function"==typeof define&&define.amd?define(s):"object"==typeof exports?module.exports=s():s()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.es=function(){this.pipeline.reset(),this.pipeline.add(e.es.trimmer,e.es.stopWordFilter,e.es.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.es.stemmer))},e.es.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.es.trimmer=e.trimmerSupport.generateTrimmer(e.es.wordCharacters),e.Pipeline.registerFunction(e.es.trimmer,"trimmer-es"),e.es.stemmer=function(){var s=e.stemmerSupport.Among,r=e.stemmerSupport.SnowballProgram,n=new function(){function e(){if(A.out_grouping(x,97,252)){for(;!A.in_grouping(x,97,252);){if(A.cursor>=A.limit)return!0;A.cursor++}return!1}return!0}function n(){if(A.in_grouping(x,97,252)){var s=A.cursor;if(e()){if(A.cursor=s,!A.in_grouping(x,97,252))return!0;for(;!A.out_grouping(x,97,252);){if(A.cursor>=A.limit)return!0;A.cursor++}}return!1}return!0}function i(){var s,r=A.cursor;if(n()){if(A.cursor=r,!A.out_grouping(x,97,252))return;if(s=A.cursor,e()){if(A.cursor=s,!A.in_grouping(x,97,252)||A.cursor>=A.limit)return;A.cursor++}}g=A.cursor}function a(){for(;!A.in_grouping(x,97,252);){if(A.cursor>=A.limit)return!1;A.cursor++}for(;!A.out_grouping(x,97,252);){if(A.cursor>=A.limit)return!1;A.cursor++}return!0}function t(){var e=A.cursor;g=A.limit,p=g,v=g,i(),A.cursor=e,a()&&(p=A.cursor,a()&&(v=A.cursor))}function o(){for(var e;;){if(A.bra=A.cursor,e=A.find_among(k,6))switch(A.ket=A.cursor,e){case 1:A.slice_from("a");continue;case 2:A.slice_from("e");continue;case 3:A.slice_from("i");continue;case 4:A.slice_from("o");continue;case 5:A.slice_from("u");continue;case 6:if(A.cursor>=A.limit)break;A.cursor++;continue}break}}function u(){return g<=A.cursor}function w(){return p<=A.cursor}function c(){return v<=A.cursor}function m(){var e;if(A.ket=A.cursor,A.find_among_b(y,13)&&(A.bra=A.cursor,(e=A.find_among_b(q,11))&&u()))switch(e){case 1:A.bra=A.cursor,A.slice_from("iendo");break;case 2:A.bra=A.cursor,A.slice_from("ando");break;case 3:A.bra=A.cursor,A.slice_from("ar");break;case 4:A.bra=A.cursor,A.slice_from("er");break;case 5:A.bra=A.cursor,A.slice_from("ir");break;case 6:A.slice_del();break;case 7:A.eq_s_b(1,"u")&&A.slice_del()}}function l(e,s){if(!c())return!0;A.slice_del(),A.ket=A.cursor;var r=A.find_among_b(e,s);return r&&(A.bra=A.cursor,1==r&&c()&&A.slice_del()),!1}function d(e){return!c()||(A.slice_del(),A.ket=A.cursor,A.eq_s_b(2,e)&&(A.bra=A.cursor,c()&&A.slice_del()),!1)}function b(){var e;if(A.ket=A.cursor,e=A.find_among_b(S,46)){switch(A.bra=A.cursor,e){case 1:if(!c())return!1;A.slice_del();break;case 2:if(d("ic"))return!1;break;case 3:if(!c())return!1;A.slice_from("log");break;case 4:if(!c())return!1;A.slice_from("u");break;case 5:if(!c())return!1;A.slice_from("ente");break;case 6:if(!w())return!1;A.slice_del(),A.ket=A.cursor,e=A.find_among_b(C,4),e&&(A.bra=A.cursor,c()&&(A.slice_del(),1==e&&(A.ket=A.cursor,A.eq_s_b(2,"at")&&(A.bra=A.cursor,c()&&A.slice_del()))));break;case 7:if(l(P,3))return!1;break;case 8:if(l(F,3))return!1;break;case 9:if(d("at"))return!1}return!0}return!1}function f(){var e,s;if(A.cursor>=g&&(s=A.limit_backward,A.limit_backward=g,A.ket=A.cursor,e=A.find_among_b(W,12),A.limit_backward=s,e)){if(A.bra=A.cursor,1==e){if(!A.eq_s_b(1,"u"))return!1;A.slice_del()}return!0}return!1}function _(){var e,s,r,n;if(A.cursor>=g&&(s=A.limit_backward,A.limit_backward=g,A.ket=A.cursor,e=A.find_among_b(L,96),A.limit_backward=s,e))switch(A.bra=A.cursor,e){case 1:r=A.limit-A.cursor,A.eq_s_b(1,"u")?(n=A.limit-A.cursor,A.eq_s_b(1,"g")?A.cursor=A.limit-n:A.cursor=A.limit-r):A.cursor=A.limit-r,A.bra=A.cursor;case 2:A.slice_del()}}function h(){var e,s;if(A.ket=A.cursor,e=A.find_among_b(z,8))switch(A.bra=A.cursor,e){case 1:u()&&A.slice_del();break;case 2:u()&&(A.slice_del(),A.ket=A.cursor,A.eq_s_b(1,"u")&&(A.bra=A.cursor,s=A.limit-A.cursor,A.eq_s_b(1,"g")&&(A.cursor=A.limit-s,u()&&A.slice_del())))}}var v,p,g,k=[new s("",-1,6),new s("á",0,1),new s("é",0,2),new s("í",0,3),new s("ó",0,4),new s("ú",0,5)],y=[new s("la",-1,-1),new s("sela",0,-1),new s("le",-1,-1),new s("me",-1,-1),new s("se",-1,-1),new s("lo",-1,-1),new s("selo",5,-1),new s("las",-1,-1),new s("selas",7,-1),new s("les",-1,-1),new s("los",-1,-1),new s("selos",10,-1),new s("nos",-1,-1)],q=[new s("ando",-1,6),new s("iendo",-1,6),new s("yendo",-1,7),new s("ándo",-1,2),new s("iéndo",-1,1),new s("ar",-1,6),new s("er",-1,6),new s("ir",-1,6),new s("ár",-1,3),new s("ér",-1,4),new s("ír",-1,5)],C=[new s("ic",-1,-1),new s("ad",-1,-1),new s("os",-1,-1),new s("iv",-1,1)],P=[new s("able",-1,1),new s("ible",-1,1),new s("ante",-1,1)],F=[new s("ic",-1,1),new s("abil",-1,1),new s("iv",-1,1)],S=[new s("ica",-1,1),new s("ancia",-1,2),new s("encia",-1,5),new s("adora",-1,2),new s("osa",-1,1),new s("ista",-1,1),new s("iva",-1,9),new s("anza",-1,1),new s("logía",-1,3),new s("idad",-1,8),new s("able",-1,1),new s("ible",-1,1),new s("ante",-1,2),new s("mente",-1,7),new s("amente",13,6),new s("ación",-1,2),new s("ución",-1,4),new s("ico",-1,1),new s("ismo",-1,1),new s("oso",-1,1),new s("amiento",-1,1),new s("imiento",-1,1),new s("ivo",-1,9),new s("ador",-1,2),new s("icas",-1,1),new s("ancias",-1,2),new s("encias",-1,5),new s("adoras",-1,2),new s("osas",-1,1),new s("istas",-1,1),new s("ivas",-1,9),new s("anzas",-1,1),new s("logías",-1,3),new s("idades",-1,8),new s("ables",-1,1),new s("ibles",-1,1),new s("aciones",-1,2),new s("uciones",-1,4),new s("adores",-1,2),new s("antes",-1,2),new s("icos",-1,1),new s("ismos",-1,1),new s("osos",-1,1),new s("amientos",-1,1),new s("imientos",-1,1),new s("ivos",-1,9)],W=[new s("ya",-1,1),new s("ye",-1,1),new s("yan",-1,1),new s("yen",-1,1),new s("yeron",-1,1),new s("yendo",-1,1),new s("yo",-1,1),new s("yas",-1,1),new s("yes",-1,1),new s("yais",-1,1),new s("yamos",-1,1),new s("yó",-1,1)],L=[new s("aba",-1,2),new s("ada",-1,2),new s("ida",-1,2),new s("ara",-1,2),new s("iera",-1,2),new s("ía",-1,2),new s("aría",5,2),new s("ería",5,2),new s("iría",5,2),new s("ad",-1,2),new s("ed",-1,2),new s("id",-1,2),new s("ase",-1,2),new s("iese",-1,2),new s("aste",-1,2),new s("iste",-1,2),new s("an",-1,2),new s("aban",16,2),new s("aran",16,2),new s("ieran",16,2),new s("ían",16,2),new s("arían",20,2),new s("erían",20,2),new s("irían",20,2),new s("en",-1,1),new s("asen",24,2),new s("iesen",24,2),new s("aron",-1,2),new s("ieron",-1,2),new s("arán",-1,2),new s("erán",-1,2),new s("irán",-1,2),new s("ado",-1,2),new s("ido",-1,2),new s("ando",-1,2),new s("iendo",-1,2),new s("ar",-1,2),new s("er",-1,2),new s("ir",-1,2),new s("as",-1,2),new s("abas",39,2),new s("adas",39,2),new s("idas",39,2),new s("aras",39,2),new s("ieras",39,2),new s("ías",39,2),new s("arías",45,2),new s("erías",45,2),new s("irías",45,2),new s("es",-1,1),new s("ases",49,2),new s("ieses",49,2),new s("abais",-1,2),new s("arais",-1,2),new s("ierais",-1,2),new s("íais",-1,2),new s("aríais",55,2),new s("eríais",55,2),new s("iríais",55,2),new s("aseis",-1,2),new s("ieseis",-1,2),new s("asteis",-1,2),new s("isteis",-1,2),new s("áis",-1,2),new s("éis",-1,1),new s("aréis",64,2),new s("eréis",64,2),new s("iréis",64,2),new s("ados",-1,2),new s("idos",-1,2),new s("amos",-1,2),new s("ábamos",70,2),new s("áramos",70,2),new s("iéramos",70,2),new s("íamos",70,2),new s("aríamos",74,2),new s("eríamos",74,2),new s("iríamos",74,2),new s("emos",-1,1),new s("aremos",78,2),new s("eremos",78,2),new s("iremos",78,2),new s("ásemos",78,2),new s("iésemos",78,2),new s("imos",-1,2),new s("arás",-1,2),new s("erás",-1,2),new s("irás",-1,2),new s("ís",-1,2),new s("ará",-1,2),new s("erá",-1,2),new s("irá",-1,2),new s("aré",-1,2),new s("eré",-1,2),new s("iré",-1,2),new s("ió",-1,2)],z=[new s("a",-1,1),new s("e",-1,2),new s("o",-1,1),new s("os",-1,1),new s("á",-1,1),new s("é",-1,2),new s("í",-1,1),new s("ó",-1,1)],x=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,4,10],A=new r;this.setCurrent=function(e){A.setCurrent(e)},this.getCurrent=function(){return A.getCurrent()},this.stem=function(){var e=A.cursor;return t(),A.limit_backward=e,A.cursor=A.limit,m(),A.cursor=A.limit,b()||(A.cursor=A.limit,f()||(A.cursor=A.limit,_())),A.cursor=A.limit,h(),A.cursor=A.limit_backward,o(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return n.setCurrent(e),n.stem(),n.getCurrent()}):(n.setCurrent(e),n.stem(),n.getCurrent())}}(),e.Pipeline.registerFunction(e.es.stemmer,"stemmer-es"),e.es.stopWordFilter=e.generateStopWordFilter("a al algo algunas algunos ante antes como con contra cual cuando de del desde donde durante e el ella ellas ellos en entre era erais eran eras eres es esa esas ese eso esos esta estaba estabais estaban estabas estad estada estadas estado estados estamos estando estar estaremos estará estarán estarás estaré estaréis estaría estaríais estaríamos estarían estarías estas este estemos esto estos estoy estuve estuviera estuvierais estuvieran estuvieras estuvieron estuviese estuvieseis estuviesen estuvieses estuvimos estuviste estuvisteis estuviéramos estuviésemos estuvo está estábamos estáis están estás esté estéis estén estés fue fuera fuerais fueran fueras fueron fuese fueseis fuesen fueses fui fuimos fuiste fuisteis fuéramos fuésemos ha habida habidas habido habidos habiendo habremos habrá habrán habrás habré habréis habría habríais habríamos habrían habrías habéis había habíais habíamos habían habías han has hasta hay haya hayamos hayan hayas hayáis he hemos hube hubiera hubierais hubieran hubieras hubieron hubiese hubieseis hubiesen hubieses hubimos hubiste hubisteis hubiéramos hubiésemos hubo la las le les lo los me mi mis mucho muchos muy más mí mía mías mío míos nada ni no nos nosotras nosotros nuestra nuestras nuestro nuestros o os otra otras otro otros para pero poco por porque que quien quienes qué se sea seamos sean seas seremos será serán serás seré seréis sería seríais seríamos serían serías seáis sido siendo sin sobre sois somos son soy su sus suya suyas suyo suyos sí también tanto te tendremos tendrá tendrán tendrás tendré tendréis tendría tendríais tendríamos tendrían tendrías tened tenemos tenga tengamos tengan tengas tengo tengáis tenida tenidas tenido tenidos teniendo tenéis tenía teníais teníamos tenían tenías ti tiene tienen tienes todo todos tu tus tuve tuviera tuvierais tuvieran tuvieras tuvieron tuviese tuvieseis tuviesen tuvieses tuvimos tuviste tuvisteis tuviéramos tuviésemos tuvo tuya tuyas tuyo tuyos tú un una uno unos vosotras vosotros vuestra vuestras vuestro vuestros y ya yo él éramos".split(" ")),e.Pipeline.registerFunction(e.es.stopWordFilter,"stopWordFilter-es")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.fi.min.js b/v2.7/assets/javascripts/lunr/min/lunr.fi.min.js new file mode 100644 index 000000000..29f5dfcea --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.fi.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Finnish` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(i,e){"function"==typeof define&&define.amd?define(e):"object"==typeof exports?module.exports=e():e()(i.lunr)}(this,function(){return function(i){if(void 0===i)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===i.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");i.fi=function(){this.pipeline.reset(),this.pipeline.add(i.fi.trimmer,i.fi.stopWordFilter,i.fi.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(i.fi.stemmer))},i.fi.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",i.fi.trimmer=i.trimmerSupport.generateTrimmer(i.fi.wordCharacters),i.Pipeline.registerFunction(i.fi.trimmer,"trimmer-fi"),i.fi.stemmer=function(){var e=i.stemmerSupport.Among,r=i.stemmerSupport.SnowballProgram,n=new function(){function i(){f=A.limit,d=f,n()||(f=A.cursor,n()||(d=A.cursor))}function n(){for(var i;;){if(i=A.cursor,A.in_grouping(W,97,246))break;if(A.cursor=i,i>=A.limit)return!0;A.cursor++}for(A.cursor=i;!A.out_grouping(W,97,246);){if(A.cursor>=A.limit)return!0;A.cursor++}return!1}function t(){return d<=A.cursor}function s(){var i,e;if(A.cursor>=f)if(e=A.limit_backward,A.limit_backward=f,A.ket=A.cursor,i=A.find_among_b(h,10)){switch(A.bra=A.cursor,A.limit_backward=e,i){case 1:if(!A.in_grouping_b(x,97,246))return;break;case 2:if(!t())return}A.slice_del()}else A.limit_backward=e}function o(){var i,e,r;if(A.cursor>=f)if(e=A.limit_backward,A.limit_backward=f,A.ket=A.cursor,i=A.find_among_b(v,9))switch(A.bra=A.cursor,A.limit_backward=e,i){case 1:r=A.limit-A.cursor,A.eq_s_b(1,"k")||(A.cursor=A.limit-r,A.slice_del());break;case 2:A.slice_del(),A.ket=A.cursor,A.eq_s_b(3,"kse")&&(A.bra=A.cursor,A.slice_from("ksi"));break;case 3:A.slice_del();break;case 4:A.find_among_b(p,6)&&A.slice_del();break;case 5:A.find_among_b(g,6)&&A.slice_del();break;case 6:A.find_among_b(j,2)&&A.slice_del()}else A.limit_backward=e}function l(){return A.find_among_b(q,7)}function a(){return A.eq_s_b(1,"i")&&A.in_grouping_b(L,97,246)}function u(){var i,e,r;if(A.cursor>=f)if(e=A.limit_backward,A.limit_backward=f,A.ket=A.cursor,i=A.find_among_b(C,30)){switch(A.bra=A.cursor,A.limit_backward=e,i){case 1:if(!A.eq_s_b(1,"a"))return;break;case 2:case 9:if(!A.eq_s_b(1,"e"))return;break;case 3:if(!A.eq_s_b(1,"i"))return;break;case 4:if(!A.eq_s_b(1,"o"))return;break;case 5:if(!A.eq_s_b(1,"ä"))return;break;case 6:if(!A.eq_s_b(1,"ö"))return;break;case 7:if(r=A.limit-A.cursor,!l()&&(A.cursor=A.limit-r,!A.eq_s_b(2,"ie"))){A.cursor=A.limit-r;break}if(A.cursor=A.limit-r,A.cursor<=A.limit_backward){A.cursor=A.limit-r;break}A.cursor--,A.bra=A.cursor;break;case 8:if(!A.in_grouping_b(W,97,246)||!A.out_grouping_b(W,97,246))return}A.slice_del(),k=!0}else A.limit_backward=e}function c(){var i,e,r;if(A.cursor>=d)if(e=A.limit_backward,A.limit_backward=d,A.ket=A.cursor,i=A.find_among_b(P,14)){if(A.bra=A.cursor,A.limit_backward=e,1==i){if(r=A.limit-A.cursor,A.eq_s_b(2,"po"))return;A.cursor=A.limit-r}A.slice_del()}else A.limit_backward=e}function m(){var i;A.cursor>=f&&(i=A.limit_backward,A.limit_backward=f,A.ket=A.cursor,A.find_among_b(F,2)?(A.bra=A.cursor,A.limit_backward=i,A.slice_del()):A.limit_backward=i)}function w(){var i,e,r,n,t,s;if(A.cursor>=f){if(e=A.limit_backward,A.limit_backward=f,A.ket=A.cursor,A.eq_s_b(1,"t")&&(A.bra=A.cursor,r=A.limit-A.cursor,A.in_grouping_b(W,97,246)&&(A.cursor=A.limit-r,A.slice_del(),A.limit_backward=e,n=A.limit-A.cursor,A.cursor>=d&&(A.cursor=d,t=A.limit_backward,A.limit_backward=A.cursor,A.cursor=A.limit-n,A.ket=A.cursor,i=A.find_among_b(S,2))))){if(A.bra=A.cursor,A.limit_backward=t,1==i){if(s=A.limit-A.cursor,A.eq_s_b(2,"po"))return;A.cursor=A.limit-s}return void A.slice_del()}A.limit_backward=e}}function _(){var i,e,r,n;if(A.cursor>=f){for(i=A.limit_backward,A.limit_backward=f,e=A.limit-A.cursor,l()&&(A.cursor=A.limit-e,A.ket=A.cursor,A.cursor>A.limit_backward&&(A.cursor--,A.bra=A.cursor,A.slice_del())),A.cursor=A.limit-e,A.ket=A.cursor,A.in_grouping_b(y,97,228)&&(A.bra=A.cursor,A.out_grouping_b(W,97,246)&&A.slice_del()),A.cursor=A.limit-e,A.ket=A.cursor,A.eq_s_b(1,"j")&&(A.bra=A.cursor,r=A.limit-A.cursor,A.eq_s_b(1,"o")?A.slice_del():(A.cursor=A.limit-r,A.eq_s_b(1,"u")&&A.slice_del())),A.cursor=A.limit-e,A.ket=A.cursor,A.eq_s_b(1,"o")&&(A.bra=A.cursor,A.eq_s_b(1,"j")&&A.slice_del()),A.cursor=A.limit-e,A.limit_backward=i;;){if(n=A.limit-A.cursor,A.out_grouping_b(W,97,246)){A.cursor=A.limit-n;break}if(A.cursor=A.limit-n,A.cursor<=A.limit_backward)return;A.cursor--}A.ket=A.cursor,A.cursor>A.limit_backward&&(A.cursor--,A.bra=A.cursor,b=A.slice_to(),A.eq_v_b(b)&&A.slice_del())}}var k,b,d,f,h=[new e("pa",-1,1),new e("sti",-1,2),new e("kaan",-1,1),new e("han",-1,1),new e("kin",-1,1),new e("hän",-1,1),new e("kään",-1,1),new e("ko",-1,1),new e("pä",-1,1),new e("kö",-1,1)],p=[new e("lla",-1,-1),new e("na",-1,-1),new e("ssa",-1,-1),new e("ta",-1,-1),new e("lta",3,-1),new e("sta",3,-1)],g=[new e("llä",-1,-1),new e("nä",-1,-1),new e("ssä",-1,-1),new e("tä",-1,-1),new e("ltä",3,-1),new e("stä",3,-1)],j=[new e("lle",-1,-1),new e("ine",-1,-1)],v=[new e("nsa",-1,3),new e("mme",-1,3),new e("nne",-1,3),new e("ni",-1,2),new e("si",-1,1),new e("an",-1,4),new e("en",-1,6),new e("än",-1,5),new e("nsä",-1,3)],q=[new e("aa",-1,-1),new e("ee",-1,-1),new e("ii",-1,-1),new e("oo",-1,-1),new e("uu",-1,-1),new e("ää",-1,-1),new e("öö",-1,-1)],C=[new e("a",-1,8),new e("lla",0,-1),new e("na",0,-1),new e("ssa",0,-1),new e("ta",0,-1),new e("lta",4,-1),new e("sta",4,-1),new e("tta",4,9),new e("lle",-1,-1),new e("ine",-1,-1),new e("ksi",-1,-1),new e("n",-1,7),new e("han",11,1),new e("den",11,-1,a),new e("seen",11,-1,l),new e("hen",11,2),new e("tten",11,-1,a),new e("hin",11,3),new e("siin",11,-1,a),new e("hon",11,4),new e("hän",11,5),new e("hön",11,6),new e("ä",-1,8),new e("llä",22,-1),new e("nä",22,-1),new e("ssä",22,-1),new e("tä",22,-1),new e("ltä",26,-1),new e("stä",26,-1),new e("ttä",26,9)],P=[new e("eja",-1,-1),new e("mma",-1,1),new e("imma",1,-1),new e("mpa",-1,1),new e("impa",3,-1),new e("mmi",-1,1),new e("immi",5,-1),new e("mpi",-1,1),new e("impi",7,-1),new e("ejä",-1,-1),new e("mmä",-1,1),new e("immä",10,-1),new e("mpä",-1,1),new e("impä",12,-1)],F=[new e("i",-1,-1),new e("j",-1,-1)],S=[new e("mma",-1,1),new e("imma",0,-1)],y=[17,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8],W=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,8,0,32],L=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,32],x=[17,97,24,1,0,0,0,0,0,0,0,0,0,0,0,0,8,0,32],A=new r;this.setCurrent=function(i){A.setCurrent(i)},this.getCurrent=function(){return A.getCurrent()},this.stem=function(){var e=A.cursor;return i(),k=!1,A.limit_backward=e,A.cursor=A.limit,s(),A.cursor=A.limit,o(),A.cursor=A.limit,u(),A.cursor=A.limit,c(),A.cursor=A.limit,k?(m(),A.cursor=A.limit):(A.cursor=A.limit,w(),A.cursor=A.limit),_(),!0}};return function(i){return"function"==typeof i.update?i.update(function(i){return n.setCurrent(i),n.stem(),n.getCurrent()}):(n.setCurrent(i),n.stem(),n.getCurrent())}}(),i.Pipeline.registerFunction(i.fi.stemmer,"stemmer-fi"),i.fi.stopWordFilter=i.generateStopWordFilter("ei eivät emme en et ette että he heidän heidät heihin heille heillä heiltä heissä heistä heitä hän häneen hänelle hänellä häneltä hänen hänessä hänestä hänet häntä itse ja johon joiden joihin joiksi joilla joille joilta joina joissa joista joita joka joksi jolla jolle jolta jona jonka jos jossa josta jota jotka kanssa keiden keihin keiksi keille keillä keiltä keinä keissä keistä keitä keneen keneksi kenelle kenellä keneltä kenen kenenä kenessä kenestä kenet ketkä ketkä ketä koska kuin kuka kun me meidän meidät meihin meille meillä meiltä meissä meistä meitä mihin miksi mikä mille millä miltä minkä minkä minua minulla minulle minulta minun minussa minusta minut minuun minä minä missä mistä mitkä mitä mukaan mutta ne niiden niihin niiksi niille niillä niiltä niin niin niinä niissä niistä niitä noiden noihin noiksi noilla noille noilta noin noina noissa noista noita nuo nyt näiden näihin näiksi näille näillä näiltä näinä näissä näistä näitä nämä ole olemme olen olet olette oli olimme olin olisi olisimme olisin olisit olisitte olisivat olit olitte olivat olla olleet ollut on ovat poikki se sekä sen siihen siinä siitä siksi sille sillä sillä siltä sinua sinulla sinulle sinulta sinun sinussa sinusta sinut sinuun sinä sinä sitä tai te teidän teidät teihin teille teillä teiltä teissä teistä teitä tuo tuohon tuoksi tuolla tuolle tuolta tuon tuona tuossa tuosta tuota tähän täksi tälle tällä tältä tämä tämän tänä tässä tästä tätä vaan vai vaikka yli".split(" ")),i.Pipeline.registerFunction(i.fi.stopWordFilter,"stopWordFilter-fi")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.fr.min.js b/v2.7/assets/javascripts/lunr/min/lunr.fr.min.js new file mode 100644 index 000000000..68cd0094a --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.fr.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `French` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.fr=function(){this.pipeline.reset(),this.pipeline.add(e.fr.trimmer,e.fr.stopWordFilter,e.fr.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.fr.stemmer))},e.fr.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.fr.trimmer=e.trimmerSupport.generateTrimmer(e.fr.wordCharacters),e.Pipeline.registerFunction(e.fr.trimmer,"trimmer-fr"),e.fr.stemmer=function(){var r=e.stemmerSupport.Among,s=e.stemmerSupport.SnowballProgram,i=new function(){function e(e,r,s){return!(!W.eq_s(1,e)||(W.ket=W.cursor,!W.in_grouping(F,97,251)))&&(W.slice_from(r),W.cursor=s,!0)}function i(e,r,s){return!!W.eq_s(1,e)&&(W.ket=W.cursor,W.slice_from(r),W.cursor=s,!0)}function n(){for(var r,s;;){if(r=W.cursor,W.in_grouping(F,97,251)){if(W.bra=W.cursor,s=W.cursor,e("u","U",r))continue;if(W.cursor=s,e("i","I",r))continue;if(W.cursor=s,i("y","Y",r))continue}if(W.cursor=r,W.bra=r,!e("y","Y",r)){if(W.cursor=r,W.eq_s(1,"q")&&(W.bra=W.cursor,i("u","U",r)))continue;if(W.cursor=r,r>=W.limit)return;W.cursor++}}}function t(){for(;!W.in_grouping(F,97,251);){if(W.cursor>=W.limit)return!0;W.cursor++}for(;!W.out_grouping(F,97,251);){if(W.cursor>=W.limit)return!0;W.cursor++}return!1}function u(){var e=W.cursor;if(q=W.limit,g=q,p=q,W.in_grouping(F,97,251)&&W.in_grouping(F,97,251)&&W.cursor=W.limit){W.cursor=q;break}W.cursor++}while(!W.in_grouping(F,97,251))}q=W.cursor,W.cursor=e,t()||(g=W.cursor,t()||(p=W.cursor))}function o(){for(var e,r;;){if(r=W.cursor,W.bra=r,!(e=W.find_among(h,4)))break;switch(W.ket=W.cursor,e){case 1:W.slice_from("i");break;case 2:W.slice_from("u");break;case 3:W.slice_from("y");break;case 4:if(W.cursor>=W.limit)return;W.cursor++}}}function c(){return q<=W.cursor}function a(){return g<=W.cursor}function l(){return p<=W.cursor}function w(){var e,r;if(W.ket=W.cursor,e=W.find_among_b(C,43)){switch(W.bra=W.cursor,e){case 1:if(!l())return!1;W.slice_del();break;case 2:if(!l())return!1;W.slice_del(),W.ket=W.cursor,W.eq_s_b(2,"ic")&&(W.bra=W.cursor,l()?W.slice_del():W.slice_from("iqU"));break;case 3:if(!l())return!1;W.slice_from("log");break;case 4:if(!l())return!1;W.slice_from("u");break;case 5:if(!l())return!1;W.slice_from("ent");break;case 6:if(!c())return!1;if(W.slice_del(),W.ket=W.cursor,e=W.find_among_b(z,6))switch(W.bra=W.cursor,e){case 1:l()&&(W.slice_del(),W.ket=W.cursor,W.eq_s_b(2,"at")&&(W.bra=W.cursor,l()&&W.slice_del()));break;case 2:l()?W.slice_del():a()&&W.slice_from("eux");break;case 3:l()&&W.slice_del();break;case 4:c()&&W.slice_from("i")}break;case 7:if(!l())return!1;if(W.slice_del(),W.ket=W.cursor,e=W.find_among_b(y,3))switch(W.bra=W.cursor,e){case 1:l()?W.slice_del():W.slice_from("abl");break;case 2:l()?W.slice_del():W.slice_from("iqU");break;case 3:l()&&W.slice_del()}break;case 8:if(!l())return!1;if(W.slice_del(),W.ket=W.cursor,W.eq_s_b(2,"at")&&(W.bra=W.cursor,l()&&(W.slice_del(),W.ket=W.cursor,W.eq_s_b(2,"ic")))){W.bra=W.cursor,l()?W.slice_del():W.slice_from("iqU");break}break;case 9:W.slice_from("eau");break;case 10:if(!a())return!1;W.slice_from("al");break;case 11:if(l())W.slice_del();else{if(!a())return!1;W.slice_from("eux")}break;case 12:if(!a()||!W.out_grouping_b(F,97,251))return!1;W.slice_del();break;case 13:return c()&&W.slice_from("ant"),!1;case 14:return c()&&W.slice_from("ent"),!1;case 15:return r=W.limit-W.cursor,W.in_grouping_b(F,97,251)&&c()&&(W.cursor=W.limit-r,W.slice_del()),!1}return!0}return!1}function f(){var e,r;if(W.cursor=q){if(s=W.limit_backward,W.limit_backward=q,W.ket=W.cursor,e=W.find_among_b(P,7))switch(W.bra=W.cursor,e){case 1:if(l()){if(i=W.limit-W.cursor,!W.eq_s_b(1,"s")&&(W.cursor=W.limit-i,!W.eq_s_b(1,"t")))break;W.slice_del()}break;case 2:W.slice_from("i");break;case 3:W.slice_del();break;case 4:W.eq_s_b(2,"gu")&&W.slice_del()}W.limit_backward=s}}function b(){var e=W.limit-W.cursor;W.find_among_b(U,5)&&(W.cursor=W.limit-e,W.ket=W.cursor,W.cursor>W.limit_backward&&(W.cursor--,W.bra=W.cursor,W.slice_del()))}function d(){for(var e,r=1;W.out_grouping_b(F,97,251);)r--;if(r<=0){if(W.ket=W.cursor,e=W.limit-W.cursor,!W.eq_s_b(1,"é")&&(W.cursor=W.limit-e,!W.eq_s_b(1,"è")))return;W.bra=W.cursor,W.slice_from("e")}}function k(){if(!w()&&(W.cursor=W.limit,!f()&&(W.cursor=W.limit,!m())))return W.cursor=W.limit,void _();W.cursor=W.limit,W.ket=W.cursor,W.eq_s_b(1,"Y")?(W.bra=W.cursor,W.slice_from("i")):(W.cursor=W.limit,W.eq_s_b(1,"ç")&&(W.bra=W.cursor,W.slice_from("c")))}var p,g,q,v=[new r("col",-1,-1),new r("par",-1,-1),new r("tap",-1,-1)],h=[new r("",-1,4),new r("I",0,1),new r("U",0,2),new r("Y",0,3)],z=[new r("iqU",-1,3),new r("abl",-1,3),new r("Ièr",-1,4),new r("ièr",-1,4),new r("eus",-1,2),new r("iv",-1,1)],y=[new r("ic",-1,2),new r("abil",-1,1),new r("iv",-1,3)],C=[new r("iqUe",-1,1),new r("atrice",-1,2),new r("ance",-1,1),new r("ence",-1,5),new r("logie",-1,3),new r("able",-1,1),new r("isme",-1,1),new r("euse",-1,11),new r("iste",-1,1),new r("ive",-1,8),new r("if",-1,8),new r("usion",-1,4),new r("ation",-1,2),new r("ution",-1,4),new r("ateur",-1,2),new r("iqUes",-1,1),new r("atrices",-1,2),new r("ances",-1,1),new r("ences",-1,5),new r("logies",-1,3),new r("ables",-1,1),new r("ismes",-1,1),new r("euses",-1,11),new r("istes",-1,1),new r("ives",-1,8),new r("ifs",-1,8),new r("usions",-1,4),new r("ations",-1,2),new r("utions",-1,4),new r("ateurs",-1,2),new r("ments",-1,15),new r("ements",30,6),new r("issements",31,12),new r("ités",-1,7),new r("ment",-1,15),new r("ement",34,6),new r("issement",35,12),new r("amment",34,13),new r("emment",34,14),new r("aux",-1,10),new r("eaux",39,9),new r("eux",-1,1),new r("ité",-1,7)],x=[new r("ira",-1,1),new r("ie",-1,1),new r("isse",-1,1),new r("issante",-1,1),new r("i",-1,1),new r("irai",4,1),new r("ir",-1,1),new r("iras",-1,1),new r("ies",-1,1),new r("îmes",-1,1),new r("isses",-1,1),new r("issantes",-1,1),new r("îtes",-1,1),new r("is",-1,1),new r("irais",13,1),new r("issais",13,1),new r("irions",-1,1),new r("issions",-1,1),new r("irons",-1,1),new r("issons",-1,1),new r("issants",-1,1),new r("it",-1,1),new r("irait",21,1),new r("issait",21,1),new r("issant",-1,1),new r("iraIent",-1,1),new r("issaIent",-1,1),new r("irent",-1,1),new r("issent",-1,1),new r("iront",-1,1),new r("ît",-1,1),new r("iriez",-1,1),new r("issiez",-1,1),new r("irez",-1,1),new r("issez",-1,1)],I=[new r("a",-1,3),new r("era",0,2),new r("asse",-1,3),new r("ante",-1,3),new r("ée",-1,2),new r("ai",-1,3),new r("erai",5,2),new r("er",-1,2),new r("as",-1,3),new r("eras",8,2),new r("âmes",-1,3),new r("asses",-1,3),new r("antes",-1,3),new r("âtes",-1,3),new r("ées",-1,2),new r("ais",-1,3),new r("erais",15,2),new r("ions",-1,1),new r("erions",17,2),new r("assions",17,3),new r("erons",-1,2),new r("ants",-1,3),new r("és",-1,2),new r("ait",-1,3),new r("erait",23,2),new r("ant",-1,3),new r("aIent",-1,3),new r("eraIent",26,2),new r("èrent",-1,2),new r("assent",-1,3),new r("eront",-1,2),new r("ât",-1,3),new r("ez",-1,2),new r("iez",32,2),new r("eriez",33,2),new r("assiez",33,3),new r("erez",32,2),new r("é",-1,2)],P=[new r("e",-1,3),new r("Ière",0,2),new r("ière",0,2),new r("ion",-1,1),new r("Ier",-1,2),new r("ier",-1,2),new r("ë",-1,4)],U=[new r("ell",-1,-1),new r("eill",-1,-1),new r("enn",-1,-1),new r("onn",-1,-1),new r("ett",-1,-1)],F=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,128,130,103,8,5],S=[1,65,20,0,0,0,0,0,0,0,0,0,0,0,0,0,128],W=new s;this.setCurrent=function(e){W.setCurrent(e)},this.getCurrent=function(){return W.getCurrent()},this.stem=function(){var e=W.cursor;return n(),W.cursor=e,u(),W.limit_backward=e,W.cursor=W.limit,k(),W.cursor=W.limit,b(),W.cursor=W.limit,d(),W.cursor=W.limit_backward,o(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return i.setCurrent(e),i.stem(),i.getCurrent()}):(i.setCurrent(e),i.stem(),i.getCurrent())}}(),e.Pipeline.registerFunction(e.fr.stemmer,"stemmer-fr"),e.fr.stopWordFilter=e.generateStopWordFilter("ai aie aient aies ait as au aura aurai auraient aurais aurait auras aurez auriez aurions aurons auront aux avaient avais avait avec avez aviez avions avons ayant ayez ayons c ce ceci celà ces cet cette d dans de des du elle en es est et eu eue eues eurent eus eusse eussent eusses eussiez eussions eut eux eûmes eût eûtes furent fus fusse fussent fusses fussiez fussions fut fûmes fût fûtes ici il ils j je l la le les leur leurs lui m ma mais me mes moi mon même n ne nos notre nous on ont ou par pas pour qu que quel quelle quelles quels qui s sa sans se sera serai seraient serais serait seras serez seriez serions serons seront ses soi soient sois soit sommes son sont soyez soyons suis sur t ta te tes toi ton tu un une vos votre vous y à étaient étais était étant étiez étions été étée étées étés êtes".split(" ")),e.Pipeline.registerFunction(e.fr.stopWordFilter,"stopWordFilter-fr")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.hu.min.js b/v2.7/assets/javascripts/lunr/min/lunr.hu.min.js new file mode 100644 index 000000000..ed9d909f7 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.hu.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Hungarian` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,n){"function"==typeof define&&define.amd?define(n):"object"==typeof exports?module.exports=n():n()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.hu=function(){this.pipeline.reset(),this.pipeline.add(e.hu.trimmer,e.hu.stopWordFilter,e.hu.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.hu.stemmer))},e.hu.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.hu.trimmer=e.trimmerSupport.generateTrimmer(e.hu.wordCharacters),e.Pipeline.registerFunction(e.hu.trimmer,"trimmer-hu"),e.hu.stemmer=function(){var n=e.stemmerSupport.Among,r=e.stemmerSupport.SnowballProgram,i=new function(){function e(){var e,n=L.cursor;if(d=L.limit,L.in_grouping(W,97,252))for(;;){if(e=L.cursor,L.out_grouping(W,97,252))return L.cursor=e,L.find_among(g,8)||(L.cursor=e,e=L.limit)return void(d=e);L.cursor++}if(L.cursor=n,L.out_grouping(W,97,252)){for(;!L.in_grouping(W,97,252);){if(L.cursor>=L.limit)return;L.cursor++}d=L.cursor}}function i(){return d<=L.cursor}function a(){var e;if(L.ket=L.cursor,(e=L.find_among_b(h,2))&&(L.bra=L.cursor,i()))switch(e){case 1:L.slice_from("a");break;case 2:L.slice_from("e")}}function t(){var e=L.limit-L.cursor;return!!L.find_among_b(p,23)&&(L.cursor=L.limit-e,!0)}function s(){if(L.cursor>L.limit_backward){L.cursor--,L.ket=L.cursor;var e=L.cursor-1;L.limit_backward<=e&&e<=L.limit&&(L.cursor=e,L.bra=e,L.slice_del())}}function c(){var e;if(L.ket=L.cursor,(e=L.find_among_b(_,2))&&(L.bra=L.cursor,i())){if((1==e||2==e)&&!t())return;L.slice_del(),s()}}function o(){L.ket=L.cursor,L.find_among_b(v,44)&&(L.bra=L.cursor,i()&&(L.slice_del(),a()))}function w(){var e;if(L.ket=L.cursor,(e=L.find_among_b(z,3))&&(L.bra=L.cursor,i()))switch(e){case 1:L.slice_from("e");break;case 2:case 3:L.slice_from("a")}}function l(){var e;if(L.ket=L.cursor,(e=L.find_among_b(y,6))&&(L.bra=L.cursor,i()))switch(e){case 1:case 2:L.slice_del();break;case 3:L.slice_from("a");break;case 4:L.slice_from("e")}}function u(){var e;if(L.ket=L.cursor,(e=L.find_among_b(j,2))&&(L.bra=L.cursor,i())){if((1==e||2==e)&&!t())return;L.slice_del(),s()}}function m(){var e;if(L.ket=L.cursor,(e=L.find_among_b(C,7))&&(L.bra=L.cursor,i()))switch(e){case 1:L.slice_from("a");break;case 2:L.slice_from("e");break;case 3:case 4:case 5:case 6:case 7:L.slice_del()}}function k(){var e;if(L.ket=L.cursor,(e=L.find_among_b(P,12))&&(L.bra=L.cursor,i()))switch(e){case 1:case 4:case 7:case 9:L.slice_del();break;case 2:case 5:case 8:L.slice_from("e");break;case 3:case 6:L.slice_from("a")}}function f(){var e;if(L.ket=L.cursor,(e=L.find_among_b(F,31))&&(L.bra=L.cursor,i()))switch(e){case 1:case 4:case 7:case 8:case 9:case 12:case 13:case 16:case 17:case 18:L.slice_del();break;case 2:case 5:case 10:case 14:case 19:L.slice_from("a");break;case 3:case 6:case 11:case 15:case 20:L.slice_from("e")}}function b(){var e;if(L.ket=L.cursor,(e=L.find_among_b(S,42))&&(L.bra=L.cursor,i()))switch(e){case 1:case 4:case 5:case 6:case 9:case 10:case 11:case 14:case 15:case 16:case 17:case 20:case 21:case 24:case 25:case 26:case 29:L.slice_del();break;case 2:case 7:case 12:case 18:case 22:case 27:L.slice_from("a");break;case 3:case 8:case 13:case 19:case 23:case 28:L.slice_from("e")}}var d,g=[new n("cs",-1,-1),new n("dzs",-1,-1),new n("gy",-1,-1),new n("ly",-1,-1),new n("ny",-1,-1),new n("sz",-1,-1),new n("ty",-1,-1),new n("zs",-1,-1)],h=[new n("á",-1,1),new n("é",-1,2)],p=[new n("bb",-1,-1),new n("cc",-1,-1),new n("dd",-1,-1),new n("ff",-1,-1),new n("gg",-1,-1),new n("jj",-1,-1),new n("kk",-1,-1),new n("ll",-1,-1),new n("mm",-1,-1),new n("nn",-1,-1),new n("pp",-1,-1),new n("rr",-1,-1),new n("ccs",-1,-1),new n("ss",-1,-1),new n("zzs",-1,-1),new n("tt",-1,-1),new n("vv",-1,-1),new n("ggy",-1,-1),new n("lly",-1,-1),new n("nny",-1,-1),new n("tty",-1,-1),new n("ssz",-1,-1),new n("zz",-1,-1)],_=[new n("al",-1,1),new n("el",-1,2)],v=[new n("ba",-1,-1),new n("ra",-1,-1),new n("be",-1,-1),new n("re",-1,-1),new n("ig",-1,-1),new n("nak",-1,-1),new n("nek",-1,-1),new n("val",-1,-1),new n("vel",-1,-1),new n("ul",-1,-1),new n("nál",-1,-1),new n("nél",-1,-1),new n("ból",-1,-1),new n("ról",-1,-1),new n("tól",-1,-1),new n("bõl",-1,-1),new n("rõl",-1,-1),new n("tõl",-1,-1),new n("ül",-1,-1),new n("n",-1,-1),new n("an",19,-1),new n("ban",20,-1),new n("en",19,-1),new n("ben",22,-1),new n("képpen",22,-1),new n("on",19,-1),new n("ön",19,-1),new n("képp",-1,-1),new n("kor",-1,-1),new n("t",-1,-1),new n("at",29,-1),new n("et",29,-1),new n("ként",29,-1),new n("anként",32,-1),new n("enként",32,-1),new n("onként",32,-1),new n("ot",29,-1),new n("ért",29,-1),new n("öt",29,-1),new n("hez",-1,-1),new n("hoz",-1,-1),new n("höz",-1,-1),new n("vá",-1,-1),new n("vé",-1,-1)],z=[new n("án",-1,2),new n("én",-1,1),new n("ánként",-1,3)],y=[new n("stul",-1,2),new n("astul",0,1),new n("ástul",0,3),new n("stül",-1,2),new n("estül",3,1),new n("éstül",3,4)],j=[new n("á",-1,1),new n("é",-1,2)],C=[new n("k",-1,7),new n("ak",0,4),new n("ek",0,6),new n("ok",0,5),new n("ák",0,1),new n("ék",0,2),new n("ök",0,3)],P=[new n("éi",-1,7),new n("áéi",0,6),new n("ééi",0,5),new n("é",-1,9),new n("ké",3,4),new n("aké",4,1),new n("eké",4,1),new n("oké",4,1),new n("áké",4,3),new n("éké",4,2),new n("öké",4,1),new n("éé",3,8)],F=[new n("a",-1,18),new n("ja",0,17),new n("d",-1,16),new n("ad",2,13),new n("ed",2,13),new n("od",2,13),new n("ád",2,14),new n("éd",2,15),new n("öd",2,13),new n("e",-1,18),new n("je",9,17),new n("nk",-1,4),new n("unk",11,1),new n("ánk",11,2),new n("énk",11,3),new n("ünk",11,1),new n("uk",-1,8),new n("juk",16,7),new n("ájuk",17,5),new n("ük",-1,8),new n("jük",19,7),new n("éjük",20,6),new n("m",-1,12),new n("am",22,9),new n("em",22,9),new n("om",22,9),new n("ám",22,10),new n("ém",22,11),new n("o",-1,18),new n("á",-1,19),new n("é",-1,20)],S=[new n("id",-1,10),new n("aid",0,9),new n("jaid",1,6),new n("eid",0,9),new n("jeid",3,6),new n("áid",0,7),new n("éid",0,8),new n("i",-1,15),new n("ai",7,14),new n("jai",8,11),new n("ei",7,14),new n("jei",10,11),new n("ái",7,12),new n("éi",7,13),new n("itek",-1,24),new n("eitek",14,21),new n("jeitek",15,20),new n("éitek",14,23),new n("ik",-1,29),new n("aik",18,26),new n("jaik",19,25),new n("eik",18,26),new n("jeik",21,25),new n("áik",18,27),new n("éik",18,28),new n("ink",-1,20),new n("aink",25,17),new n("jaink",26,16),new n("eink",25,17),new n("jeink",28,16),new n("áink",25,18),new n("éink",25,19),new n("aitok",-1,21),new n("jaitok",32,20),new n("áitok",-1,22),new n("im",-1,5),new n("aim",35,4),new n("jaim",36,1),new n("eim",35,4),new n("jeim",38,1),new n("áim",35,2),new n("éim",35,3)],W=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,1,17,52,14],L=new r;this.setCurrent=function(e){L.setCurrent(e)},this.getCurrent=function(){return L.getCurrent()},this.stem=function(){var n=L.cursor;return e(),L.limit_backward=n,L.cursor=L.limit,c(),L.cursor=L.limit,o(),L.cursor=L.limit,w(),L.cursor=L.limit,l(),L.cursor=L.limit,u(),L.cursor=L.limit,k(),L.cursor=L.limit,f(),L.cursor=L.limit,b(),L.cursor=L.limit,m(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return i.setCurrent(e),i.stem(),i.getCurrent()}):(i.setCurrent(e),i.stem(),i.getCurrent())}}(),e.Pipeline.registerFunction(e.hu.stemmer,"stemmer-hu"),e.hu.stopWordFilter=e.generateStopWordFilter("a abban ahhoz ahogy ahol aki akik akkor alatt amely amelyek amelyekben amelyeket amelyet amelynek ami amikor amit amolyan amíg annak arra arról az azok azon azonban azt aztán azután azzal azért be belül benne bár cikk cikkek cikkeket csak de e ebben eddig egy egyes egyetlen egyik egyre egyéb egész ehhez ekkor el ellen elsõ elég elõ elõször elõtt emilyen ennek erre ez ezek ezen ezt ezzel ezért fel felé hanem hiszen hogy hogyan igen ill ill. illetve ilyen ilyenkor ismét ison itt jobban jó jól kell kellett keressünk keresztül ki kívül között közül legalább legyen lehet lehetett lenne lenni lesz lett maga magát majd majd meg mellett mely melyek mert mi mikor milyen minden mindenki mindent mindig mint mintha mit mivel miért most már más másik még míg nagy nagyobb nagyon ne nekem neki nem nincs néha néhány nélkül olyan ott pedig persze rá s saját sem semmi sok sokat sokkal szemben szerint szinte számára talán tehát teljes tovább továbbá több ugyanis utolsó után utána vagy vagyis vagyok valaki valami valamint való van vannak vele vissza viszont volna volt voltak voltam voltunk által általában át én éppen és így õ õk õket össze úgy új újabb újra".split(" ")),e.Pipeline.registerFunction(e.hu.stopWordFilter,"stopWordFilter-hu")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.it.min.js b/v2.7/assets/javascripts/lunr/min/lunr.it.min.js new file mode 100644 index 000000000..344b6a3c0 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.it.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Italian` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.it=function(){this.pipeline.reset(),this.pipeline.add(e.it.trimmer,e.it.stopWordFilter,e.it.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.it.stemmer))},e.it.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.it.trimmer=e.trimmerSupport.generateTrimmer(e.it.wordCharacters),e.Pipeline.registerFunction(e.it.trimmer,"trimmer-it"),e.it.stemmer=function(){var r=e.stemmerSupport.Among,n=e.stemmerSupport.SnowballProgram,i=new function(){function e(e,r,n){return!(!x.eq_s(1,e)||(x.ket=x.cursor,!x.in_grouping(L,97,249)))&&(x.slice_from(r),x.cursor=n,!0)}function i(){for(var r,n,i,o,t=x.cursor;;){if(x.bra=x.cursor,r=x.find_among(h,7))switch(x.ket=x.cursor,r){case 1:x.slice_from("à");continue;case 2:x.slice_from("è");continue;case 3:x.slice_from("ì");continue;case 4:x.slice_from("ò");continue;case 5:x.slice_from("ù");continue;case 6:x.slice_from("qU");continue;case 7:if(x.cursor>=x.limit)break;x.cursor++;continue}break}for(x.cursor=t;;)for(n=x.cursor;;){if(i=x.cursor,x.in_grouping(L,97,249)){if(x.bra=x.cursor,o=x.cursor,e("u","U",i))break;if(x.cursor=o,e("i","I",i))break}if(x.cursor=i,x.cursor>=x.limit)return void(x.cursor=n);x.cursor++}}function o(e){if(x.cursor=e,!x.in_grouping(L,97,249))return!1;for(;!x.out_grouping(L,97,249);){if(x.cursor>=x.limit)return!1;x.cursor++}return!0}function t(){if(x.in_grouping(L,97,249)){var e=x.cursor;if(x.out_grouping(L,97,249)){for(;!x.in_grouping(L,97,249);){if(x.cursor>=x.limit)return o(e);x.cursor++}return!0}return o(e)}return!1}function s(){var e,r=x.cursor;if(!t()){if(x.cursor=r,!x.out_grouping(L,97,249))return;if(e=x.cursor,x.out_grouping(L,97,249)){for(;!x.in_grouping(L,97,249);){if(x.cursor>=x.limit)return x.cursor=e,void(x.in_grouping(L,97,249)&&x.cursor=x.limit)return;x.cursor++}k=x.cursor}function a(){for(;!x.in_grouping(L,97,249);){if(x.cursor>=x.limit)return!1;x.cursor++}for(;!x.out_grouping(L,97,249);){if(x.cursor>=x.limit)return!1;x.cursor++}return!0}function u(){var e=x.cursor;k=x.limit,p=k,g=k,s(),x.cursor=e,a()&&(p=x.cursor,a()&&(g=x.cursor))}function c(){for(var e;;){if(x.bra=x.cursor,!(e=x.find_among(q,3)))break;switch(x.ket=x.cursor,e){case 1:x.slice_from("i");break;case 2:x.slice_from("u");break;case 3:if(x.cursor>=x.limit)return;x.cursor++}}}function w(){return k<=x.cursor}function l(){return p<=x.cursor}function m(){return g<=x.cursor}function f(){var e;if(x.ket=x.cursor,x.find_among_b(C,37)&&(x.bra=x.cursor,(e=x.find_among_b(z,5))&&w()))switch(e){case 1:x.slice_del();break;case 2:x.slice_from("e")}}function v(){var e;if(x.ket=x.cursor,!(e=x.find_among_b(S,51)))return!1;switch(x.bra=x.cursor,e){case 1:if(!m())return!1;x.slice_del();break;case 2:if(!m())return!1;x.slice_del(),x.ket=x.cursor,x.eq_s_b(2,"ic")&&(x.bra=x.cursor,m()&&x.slice_del());break;case 3:if(!m())return!1;x.slice_from("log");break;case 4:if(!m())return!1;x.slice_from("u");break;case 5:if(!m())return!1;x.slice_from("ente");break;case 6:if(!w())return!1;x.slice_del();break;case 7:if(!l())return!1;x.slice_del(),x.ket=x.cursor,e=x.find_among_b(P,4),e&&(x.bra=x.cursor,m()&&(x.slice_del(),1==e&&(x.ket=x.cursor,x.eq_s_b(2,"at")&&(x.bra=x.cursor,m()&&x.slice_del()))));break;case 8:if(!m())return!1;x.slice_del(),x.ket=x.cursor,e=x.find_among_b(F,3),e&&(x.bra=x.cursor,1==e&&m()&&x.slice_del());break;case 9:if(!m())return!1;x.slice_del(),x.ket=x.cursor,x.eq_s_b(2,"at")&&(x.bra=x.cursor,m()&&(x.slice_del(),x.ket=x.cursor,x.eq_s_b(2,"ic")&&(x.bra=x.cursor,m()&&x.slice_del())))}return!0}function b(){var e,r;x.cursor>=k&&(r=x.limit_backward,x.limit_backward=k,x.ket=x.cursor,e=x.find_among_b(W,87),e&&(x.bra=x.cursor,1==e&&x.slice_del()),x.limit_backward=r)}function d(){var e=x.limit-x.cursor;if(x.ket=x.cursor,x.in_grouping_b(y,97,242)&&(x.bra=x.cursor,w()&&(x.slice_del(),x.ket=x.cursor,x.eq_s_b(1,"i")&&(x.bra=x.cursor,w()))))return void x.slice_del();x.cursor=x.limit-e}function _(){d(),x.ket=x.cursor,x.eq_s_b(1,"h")&&(x.bra=x.cursor,x.in_grouping_b(U,99,103)&&w()&&x.slice_del())}var g,p,k,h=[new r("",-1,7),new r("qu",0,6),new r("á",0,1),new r("é",0,2),new r("í",0,3),new r("ó",0,4),new r("ú",0,5)],q=[new r("",-1,3),new r("I",0,1),new r("U",0,2)],C=[new r("la",-1,-1),new r("cela",0,-1),new r("gliela",0,-1),new r("mela",0,-1),new r("tela",0,-1),new r("vela",0,-1),new r("le",-1,-1),new r("cele",6,-1),new r("gliele",6,-1),new r("mele",6,-1),new r("tele",6,-1),new r("vele",6,-1),new r("ne",-1,-1),new r("cene",12,-1),new r("gliene",12,-1),new r("mene",12,-1),new r("sene",12,-1),new r("tene",12,-1),new r("vene",12,-1),new r("ci",-1,-1),new r("li",-1,-1),new r("celi",20,-1),new r("glieli",20,-1),new r("meli",20,-1),new r("teli",20,-1),new r("veli",20,-1),new r("gli",20,-1),new r("mi",-1,-1),new r("si",-1,-1),new r("ti",-1,-1),new r("vi",-1,-1),new r("lo",-1,-1),new r("celo",31,-1),new r("glielo",31,-1),new r("melo",31,-1),new r("telo",31,-1),new r("velo",31,-1)],z=[new r("ando",-1,1),new r("endo",-1,1),new r("ar",-1,2),new r("er",-1,2),new r("ir",-1,2)],P=[new r("ic",-1,-1),new r("abil",-1,-1),new r("os",-1,-1),new r("iv",-1,1)],F=[new r("ic",-1,1),new r("abil",-1,1),new r("iv",-1,1)],S=[new r("ica",-1,1),new r("logia",-1,3),new r("osa",-1,1),new r("ista",-1,1),new r("iva",-1,9),new r("anza",-1,1),new r("enza",-1,5),new r("ice",-1,1),new r("atrice",7,1),new r("iche",-1,1),new r("logie",-1,3),new r("abile",-1,1),new r("ibile",-1,1),new r("usione",-1,4),new r("azione",-1,2),new r("uzione",-1,4),new r("atore",-1,2),new r("ose",-1,1),new r("ante",-1,1),new r("mente",-1,1),new r("amente",19,7),new r("iste",-1,1),new r("ive",-1,9),new r("anze",-1,1),new r("enze",-1,5),new r("ici",-1,1),new r("atrici",25,1),new r("ichi",-1,1),new r("abili",-1,1),new r("ibili",-1,1),new r("ismi",-1,1),new r("usioni",-1,4),new r("azioni",-1,2),new r("uzioni",-1,4),new r("atori",-1,2),new r("osi",-1,1),new r("anti",-1,1),new r("amenti",-1,6),new r("imenti",-1,6),new r("isti",-1,1),new r("ivi",-1,9),new r("ico",-1,1),new r("ismo",-1,1),new r("oso",-1,1),new r("amento",-1,6),new r("imento",-1,6),new r("ivo",-1,9),new r("ità",-1,8),new r("istà",-1,1),new r("istè",-1,1),new r("istì",-1,1)],W=[new r("isca",-1,1),new r("enda",-1,1),new r("ata",-1,1),new r("ita",-1,1),new r("uta",-1,1),new r("ava",-1,1),new r("eva",-1,1),new r("iva",-1,1),new r("erebbe",-1,1),new r("irebbe",-1,1),new r("isce",-1,1),new r("ende",-1,1),new r("are",-1,1),new r("ere",-1,1),new r("ire",-1,1),new r("asse",-1,1),new r("ate",-1,1),new r("avate",16,1),new r("evate",16,1),new r("ivate",16,1),new r("ete",-1,1),new r("erete",20,1),new r("irete",20,1),new r("ite",-1,1),new r("ereste",-1,1),new r("ireste",-1,1),new r("ute",-1,1),new r("erai",-1,1),new r("irai",-1,1),new r("isci",-1,1),new r("endi",-1,1),new r("erei",-1,1),new r("irei",-1,1),new r("assi",-1,1),new r("ati",-1,1),new r("iti",-1,1),new r("eresti",-1,1),new r("iresti",-1,1),new r("uti",-1,1),new r("avi",-1,1),new r("evi",-1,1),new r("ivi",-1,1),new r("isco",-1,1),new r("ando",-1,1),new r("endo",-1,1),new r("Yamo",-1,1),new r("iamo",-1,1),new r("avamo",-1,1),new r("evamo",-1,1),new r("ivamo",-1,1),new r("eremo",-1,1),new r("iremo",-1,1),new r("assimo",-1,1),new r("ammo",-1,1),new r("emmo",-1,1),new r("eremmo",54,1),new r("iremmo",54,1),new r("immo",-1,1),new r("ano",-1,1),new r("iscano",58,1),new r("avano",58,1),new r("evano",58,1),new r("ivano",58,1),new r("eranno",-1,1),new r("iranno",-1,1),new r("ono",-1,1),new r("iscono",65,1),new r("arono",65,1),new r("erono",65,1),new r("irono",65,1),new r("erebbero",-1,1),new r("irebbero",-1,1),new r("assero",-1,1),new r("essero",-1,1),new r("issero",-1,1),new r("ato",-1,1),new r("ito",-1,1),new r("uto",-1,1),new r("avo",-1,1),new r("evo",-1,1),new r("ivo",-1,1),new r("ar",-1,1),new r("ir",-1,1),new r("erà",-1,1),new r("irà",-1,1),new r("erò",-1,1),new r("irò",-1,1)],L=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,128,128,8,2,1],y=[17,65,0,0,0,0,0,0,0,0,0,0,0,0,0,128,128,8,2],U=[17],x=new n;this.setCurrent=function(e){x.setCurrent(e)},this.getCurrent=function(){return x.getCurrent()},this.stem=function(){var e=x.cursor;return i(),x.cursor=e,u(),x.limit_backward=e,x.cursor=x.limit,f(),x.cursor=x.limit,v()||(x.cursor=x.limit,b()),x.cursor=x.limit,_(),x.cursor=x.limit_backward,c(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return i.setCurrent(e),i.stem(),i.getCurrent()}):(i.setCurrent(e),i.stem(),i.getCurrent())}}(),e.Pipeline.registerFunction(e.it.stemmer,"stemmer-it"),e.it.stopWordFilter=e.generateStopWordFilter("a abbia abbiamo abbiano abbiate ad agl agli ai al all alla alle allo anche avemmo avendo avesse avessero avessi avessimo aveste avesti avete aveva avevamo avevano avevate avevi avevo avrai avranno avrebbe avrebbero avrei avremmo avremo avreste avresti avrete avrà avrò avuta avute avuti avuto c che chi ci coi col come con contro cui da dagl dagli dai dal dall dalla dalle dallo degl degli dei del dell della delle dello di dov dove e ebbe ebbero ebbi ed era erano eravamo eravate eri ero essendo faccia facciamo facciano facciate faccio facemmo facendo facesse facessero facessi facessimo faceste facesti faceva facevamo facevano facevate facevi facevo fai fanno farai faranno farebbe farebbero farei faremmo faremo fareste faresti farete farà farò fece fecero feci fosse fossero fossi fossimo foste fosti fu fui fummo furono gli ha hai hanno ho i il in io l la le lei li lo loro lui ma mi mia mie miei mio ne negl negli nei nel nell nella nelle nello noi non nostra nostre nostri nostro o per perché più quale quanta quante quanti quanto quella quelle quelli quello questa queste questi questo sarai saranno sarebbe sarebbero sarei saremmo saremo sareste saresti sarete sarà sarò se sei si sia siamo siano siate siete sono sta stai stando stanno starai staranno starebbe starebbero starei staremmo staremo stareste staresti starete starà starò stava stavamo stavano stavate stavi stavo stemmo stesse stessero stessi stessimo steste stesti stette stettero stetti stia stiamo stiano stiate sto su sua sue sugl sugli sui sul sull sulla sulle sullo suo suoi ti tra tu tua tue tuo tuoi tutti tutto un una uno vi voi vostra vostre vostri vostro è".split(" ")),e.Pipeline.registerFunction(e.it.stopWordFilter,"stopWordFilter-it")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.ja.min.js b/v2.7/assets/javascripts/lunr/min/lunr.ja.min.js new file mode 100644 index 000000000..5f254ebe9 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.ja.min.js @@ -0,0 +1 @@ +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");var r="2"==e.version[0];e.ja=function(){this.pipeline.reset(),this.pipeline.add(e.ja.trimmer,e.ja.stopWordFilter,e.ja.stemmer),r?this.tokenizer=e.ja.tokenizer:(e.tokenizer&&(e.tokenizer=e.ja.tokenizer),this.tokenizerFn&&(this.tokenizerFn=e.ja.tokenizer))};var t=new e.TinySegmenter;e.ja.tokenizer=function(i){var n,o,s,p,a,u,m,l,c,f;if(!arguments.length||null==i||void 0==i)return[];if(Array.isArray(i))return i.map(function(t){return r?new e.Token(t.toLowerCase()):t.toLowerCase()});for(o=i.toString().toLowerCase().replace(/^\s+/,""),n=o.length-1;n>=0;n--)if(/\S/.test(o.charAt(n))){o=o.substring(0,n+1);break}for(a=[],s=o.length,c=0,l=0;c<=s;c++)if(u=o.charAt(c),m=c-l,u.match(/\s/)||c==s){if(m>0)for(p=t.segment(o.slice(l,c)).filter(function(e){return!!e}),f=l,n=0;n=C.limit)break;C.cursor++;continue}break}for(C.cursor=o,C.bra=o,C.eq_s(1,"y")?(C.ket=C.cursor,C.slice_from("Y")):C.cursor=o;;)if(e=C.cursor,C.in_grouping(q,97,232)){if(i=C.cursor,C.bra=i,C.eq_s(1,"i"))C.ket=C.cursor,C.in_grouping(q,97,232)&&(C.slice_from("I"),C.cursor=e);else if(C.cursor=i,C.eq_s(1,"y"))C.ket=C.cursor,C.slice_from("Y"),C.cursor=e;else if(n(e))break}else if(n(e))break}function n(r){return C.cursor=r,r>=C.limit||(C.cursor++,!1)}function o(){_=C.limit,d=_,t()||(_=C.cursor,_<3&&(_=3),t()||(d=C.cursor))}function t(){for(;!C.in_grouping(q,97,232);){if(C.cursor>=C.limit)return!0;C.cursor++}for(;!C.out_grouping(q,97,232);){if(C.cursor>=C.limit)return!0;C.cursor++}return!1}function s(){for(var r;;)if(C.bra=C.cursor,r=C.find_among(p,3))switch(C.ket=C.cursor,r){case 1:C.slice_from("y");break;case 2:C.slice_from("i");break;case 3:if(C.cursor>=C.limit)return;C.cursor++}}function u(){return _<=C.cursor}function c(){return d<=C.cursor}function a(){var r=C.limit-C.cursor;C.find_among_b(g,3)&&(C.cursor=C.limit-r,C.ket=C.cursor,C.cursor>C.limit_backward&&(C.cursor--,C.bra=C.cursor,C.slice_del()))}function l(){var r;w=!1,C.ket=C.cursor,C.eq_s_b(1,"e")&&(C.bra=C.cursor,u()&&(r=C.limit-C.cursor,C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-r,C.slice_del(),w=!0,a())))}function m(){var r;u()&&(r=C.limit-C.cursor,C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-r,C.eq_s_b(3,"gem")||(C.cursor=C.limit-r,C.slice_del(),a())))}function f(){var r,e,i,n,o,t,s=C.limit-C.cursor;if(C.ket=C.cursor,r=C.find_among_b(h,5))switch(C.bra=C.cursor,r){case 1:u()&&C.slice_from("heid");break;case 2:m();break;case 3:u()&&C.out_grouping_b(j,97,232)&&C.slice_del()}if(C.cursor=C.limit-s,l(),C.cursor=C.limit-s,C.ket=C.cursor,C.eq_s_b(4,"heid")&&(C.bra=C.cursor,c()&&(e=C.limit-C.cursor,C.eq_s_b(1,"c")||(C.cursor=C.limit-e,C.slice_del(),C.ket=C.cursor,C.eq_s_b(2,"en")&&(C.bra=C.cursor,m())))),C.cursor=C.limit-s,C.ket=C.cursor,r=C.find_among_b(k,6))switch(C.bra=C.cursor,r){case 1:if(c()){if(C.slice_del(),i=C.limit-C.cursor,C.ket=C.cursor,C.eq_s_b(2,"ig")&&(C.bra=C.cursor,c()&&(n=C.limit-C.cursor,!C.eq_s_b(1,"e")))){C.cursor=C.limit-n,C.slice_del();break}C.cursor=C.limit-i,a()}break;case 2:c()&&(o=C.limit-C.cursor,C.eq_s_b(1,"e")||(C.cursor=C.limit-o,C.slice_del()));break;case 3:c()&&(C.slice_del(),l());break;case 4:c()&&C.slice_del();break;case 5:c()&&w&&C.slice_del()}C.cursor=C.limit-s,C.out_grouping_b(z,73,232)&&(t=C.limit-C.cursor,C.find_among_b(v,4)&&C.out_grouping_b(q,97,232)&&(C.cursor=C.limit-t,C.ket=C.cursor,C.cursor>C.limit_backward&&(C.cursor--,C.bra=C.cursor,C.slice_del())))}var d,_,w,b=[new e("",-1,6),new e("á",0,1),new e("ä",0,1),new e("é",0,2),new e("ë",0,2),new e("í",0,3),new e("ï",0,3),new e("ó",0,4),new e("ö",0,4),new e("ú",0,5),new e("ü",0,5)],p=[new e("",-1,3),new e("I",0,2),new e("Y",0,1)],g=[new e("dd",-1,-1),new e("kk",-1,-1),new e("tt",-1,-1)],h=[new e("ene",-1,2),new e("se",-1,3),new e("en",-1,2),new e("heden",2,1),new e("s",-1,3)],k=[new e("end",-1,1),new e("ig",-1,2),new e("ing",-1,1),new e("lijk",-1,3),new e("baar",-1,4),new e("bar",-1,5)],v=[new e("aa",-1,-1),new e("ee",-1,-1),new e("oo",-1,-1),new e("uu",-1,-1)],q=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],z=[1,0,0,17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],j=[17,67,16,1,0,0,0,0,0,0,0,0,0,0,0,0,128],C=new i;this.setCurrent=function(r){C.setCurrent(r)},this.getCurrent=function(){return C.getCurrent()},this.stem=function(){var e=C.cursor;return r(),C.cursor=e,o(),C.limit_backward=e,C.cursor=C.limit,f(),C.cursor=C.limit_backward,s(),!0}};return function(r){return"function"==typeof r.update?r.update(function(r){return n.setCurrent(r),n.stem(),n.getCurrent()}):(n.setCurrent(r),n.stem(),n.getCurrent())}}(),r.Pipeline.registerFunction(r.nl.stemmer,"stemmer-nl"),r.nl.stopWordFilter=r.generateStopWordFilter(" aan al alles als altijd andere ben bij daar dan dat de der deze die dit doch doen door dus een eens en er ge geen geweest haar had heb hebben heeft hem het hier hij hoe hun iemand iets ik in is ja je kan kon kunnen maar me meer men met mij mijn moet na naar niet niets nog nu of om omdat onder ons ook op over reeds te tegen toch toen tot u uit uw van veel voor want waren was wat werd wezen wie wil worden wordt zal ze zelf zich zij zijn zo zonder zou".split(" ")),r.Pipeline.registerFunction(r.nl.stopWordFilter,"stopWordFilter-nl")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.no.min.js b/v2.7/assets/javascripts/lunr/min/lunr.no.min.js new file mode 100644 index 000000000..92bc7e4e8 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.no.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Norwegian` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.no=function(){this.pipeline.reset(),this.pipeline.add(e.no.trimmer,e.no.stopWordFilter,e.no.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.no.stemmer))},e.no.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.no.trimmer=e.trimmerSupport.generateTrimmer(e.no.wordCharacters),e.Pipeline.registerFunction(e.no.trimmer,"trimmer-no"),e.no.stemmer=function(){var r=e.stemmerSupport.Among,n=e.stemmerSupport.SnowballProgram,i=new function(){function e(){var e,r=w.cursor+3;if(a=w.limit,0<=r||r<=w.limit){for(s=r;;){if(e=w.cursor,w.in_grouping(d,97,248)){w.cursor=e;break}if(e>=w.limit)return;w.cursor=e+1}for(;!w.out_grouping(d,97,248);){if(w.cursor>=w.limit)return;w.cursor++}a=w.cursor,a=a&&(r=w.limit_backward,w.limit_backward=a,w.ket=w.cursor,e=w.find_among_b(m,29),w.limit_backward=r,e))switch(w.bra=w.cursor,e){case 1:w.slice_del();break;case 2:n=w.limit-w.cursor,w.in_grouping_b(c,98,122)?w.slice_del():(w.cursor=w.limit-n,w.eq_s_b(1,"k")&&w.out_grouping_b(d,97,248)&&w.slice_del());break;case 3:w.slice_from("er")}}function t(){var e,r=w.limit-w.cursor;w.cursor>=a&&(e=w.limit_backward,w.limit_backward=a,w.ket=w.cursor,w.find_among_b(u,2)?(w.bra=w.cursor,w.limit_backward=e,w.cursor=w.limit-r,w.cursor>w.limit_backward&&(w.cursor--,w.bra=w.cursor,w.slice_del())):w.limit_backward=e)}function o(){var e,r;w.cursor>=a&&(r=w.limit_backward,w.limit_backward=a,w.ket=w.cursor,e=w.find_among_b(l,11),e?(w.bra=w.cursor,w.limit_backward=r,1==e&&w.slice_del()):w.limit_backward=r)}var s,a,m=[new r("a",-1,1),new r("e",-1,1),new r("ede",1,1),new r("ande",1,1),new r("ende",1,1),new r("ane",1,1),new r("ene",1,1),new r("hetene",6,1),new r("erte",1,3),new r("en",-1,1),new r("heten",9,1),new r("ar",-1,1),new r("er",-1,1),new r("heter",12,1),new r("s",-1,2),new r("as",14,1),new r("es",14,1),new r("edes",16,1),new r("endes",16,1),new r("enes",16,1),new r("hetenes",19,1),new r("ens",14,1),new r("hetens",21,1),new r("ers",14,1),new r("ets",14,1),new r("et",-1,1),new r("het",25,1),new r("ert",-1,3),new r("ast",-1,1)],u=[new r("dt",-1,-1),new r("vt",-1,-1)],l=[new r("leg",-1,1),new r("eleg",0,1),new r("ig",-1,1),new r("eig",2,1),new r("lig",2,1),new r("elig",4,1),new r("els",-1,1),new r("lov",-1,1),new r("elov",7,1),new r("slov",7,1),new r("hetslov",9,1)],d=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,48,0,128],c=[119,125,149,1],w=new n;this.setCurrent=function(e){w.setCurrent(e)},this.getCurrent=function(){return w.getCurrent()},this.stem=function(){var r=w.cursor;return e(),w.limit_backward=r,w.cursor=w.limit,i(),w.cursor=w.limit,t(),w.cursor=w.limit,o(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return i.setCurrent(e),i.stem(),i.getCurrent()}):(i.setCurrent(e),i.stem(),i.getCurrent())}}(),e.Pipeline.registerFunction(e.no.stemmer,"stemmer-no"),e.no.stopWordFilter=e.generateStopWordFilter("alle at av bare begge ble blei bli blir blitt både båe da de deg dei deim deira deires dem den denne der dere deres det dette di din disse ditt du dykk dykkar då eg ein eit eitt eller elles en enn er et ett etter for fordi fra før ha hadde han hans har hennar henne hennes her hjå ho hoe honom hoss hossen hun hva hvem hver hvilke hvilken hvis hvor hvordan hvorfor i ikke ikkje ikkje ingen ingi inkje inn inni ja jeg kan kom korleis korso kun kunne kva kvar kvarhelst kven kvi kvifor man mange me med medan meg meget mellom men mi min mine mitt mot mykje ned no noe noen noka noko nokon nokor nokre nå når og også om opp oss over på samme seg selv si si sia sidan siden sin sine sitt sjøl skal skulle slik so som som somme somt så sånn til um upp ut uten var vart varte ved vere verte vi vil ville vore vors vort vår være være vært å".split(" ")),e.Pipeline.registerFunction(e.no.stopWordFilter,"stopWordFilter-no")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.pt.min.js b/v2.7/assets/javascripts/lunr/min/lunr.pt.min.js new file mode 100644 index 000000000..6c16996d6 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.pt.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Portuguese` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.pt=function(){this.pipeline.reset(),this.pipeline.add(e.pt.trimmer,e.pt.stopWordFilter,e.pt.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.pt.stemmer))},e.pt.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.pt.trimmer=e.trimmerSupport.generateTrimmer(e.pt.wordCharacters),e.Pipeline.registerFunction(e.pt.trimmer,"trimmer-pt"),e.pt.stemmer=function(){var r=e.stemmerSupport.Among,s=e.stemmerSupport.SnowballProgram,n=new function(){function e(){for(var e;;){if(z.bra=z.cursor,e=z.find_among(k,3))switch(z.ket=z.cursor,e){case 1:z.slice_from("a~");continue;case 2:z.slice_from("o~");continue;case 3:if(z.cursor>=z.limit)break;z.cursor++;continue}break}}function n(){if(z.out_grouping(y,97,250)){for(;!z.in_grouping(y,97,250);){if(z.cursor>=z.limit)return!0;z.cursor++}return!1}return!0}function i(){if(z.in_grouping(y,97,250))for(;!z.out_grouping(y,97,250);){if(z.cursor>=z.limit)return!1;z.cursor++}return g=z.cursor,!0}function o(){var e,r,s=z.cursor;if(z.in_grouping(y,97,250))if(e=z.cursor,n()){if(z.cursor=e,i())return}else g=z.cursor;if(z.cursor=s,z.out_grouping(y,97,250)){if(r=z.cursor,n()){if(z.cursor=r,!z.in_grouping(y,97,250)||z.cursor>=z.limit)return;z.cursor++}g=z.cursor}}function t(){for(;!z.in_grouping(y,97,250);){if(z.cursor>=z.limit)return!1;z.cursor++}for(;!z.out_grouping(y,97,250);){if(z.cursor>=z.limit)return!1;z.cursor++}return!0}function a(){var e=z.cursor;g=z.limit,b=g,h=g,o(),z.cursor=e,t()&&(b=z.cursor,t()&&(h=z.cursor))}function u(){for(var e;;){if(z.bra=z.cursor,e=z.find_among(q,3))switch(z.ket=z.cursor,e){case 1:z.slice_from("ã");continue;case 2:z.slice_from("õ");continue;case 3:if(z.cursor>=z.limit)break;z.cursor++;continue}break}}function w(){return g<=z.cursor}function m(){return b<=z.cursor}function c(){return h<=z.cursor}function l(){var e;if(z.ket=z.cursor,!(e=z.find_among_b(F,45)))return!1;switch(z.bra=z.cursor,e){case 1:if(!c())return!1;z.slice_del();break;case 2:if(!c())return!1;z.slice_from("log");break;case 3:if(!c())return!1;z.slice_from("u");break;case 4:if(!c())return!1;z.slice_from("ente");break;case 5:if(!m())return!1;z.slice_del(),z.ket=z.cursor,e=z.find_among_b(j,4),e&&(z.bra=z.cursor,c()&&(z.slice_del(),1==e&&(z.ket=z.cursor,z.eq_s_b(2,"at")&&(z.bra=z.cursor,c()&&z.slice_del()))));break;case 6:if(!c())return!1;z.slice_del(),z.ket=z.cursor,e=z.find_among_b(C,3),e&&(z.bra=z.cursor,1==e&&c()&&z.slice_del());break;case 7:if(!c())return!1;z.slice_del(),z.ket=z.cursor,e=z.find_among_b(P,3),e&&(z.bra=z.cursor,1==e&&c()&&z.slice_del());break;case 8:if(!c())return!1;z.slice_del(),z.ket=z.cursor,z.eq_s_b(2,"at")&&(z.bra=z.cursor,c()&&z.slice_del());break;case 9:if(!w()||!z.eq_s_b(1,"e"))return!1;z.slice_from("ir")}return!0}function f(){var e,r;if(z.cursor>=g){if(r=z.limit_backward,z.limit_backward=g,z.ket=z.cursor,e=z.find_among_b(S,120))return z.bra=z.cursor,1==e&&z.slice_del(),z.limit_backward=r,!0;z.limit_backward=r}return!1}function d(){var e;z.ket=z.cursor,(e=z.find_among_b(W,7))&&(z.bra=z.cursor,1==e&&w()&&z.slice_del())}function v(e,r){if(z.eq_s_b(1,e)){z.bra=z.cursor;var s=z.limit-z.cursor;if(z.eq_s_b(1,r))return z.cursor=z.limit-s,w()&&z.slice_del(),!1}return!0}function p(){var e;if(z.ket=z.cursor,e=z.find_among_b(L,4))switch(z.bra=z.cursor,e){case 1:w()&&(z.slice_del(),z.ket=z.cursor,z.limit-z.cursor,v("u","g")&&v("i","c"));break;case 2:z.slice_from("c")}}function _(){if(!l()&&(z.cursor=z.limit,!f()))return z.cursor=z.limit,void d();z.cursor=z.limit,z.ket=z.cursor,z.eq_s_b(1,"i")&&(z.bra=z.cursor,z.eq_s_b(1,"c")&&(z.cursor=z.limit,w()&&z.slice_del()))}var h,b,g,k=[new r("",-1,3),new r("ã",0,1),new r("õ",0,2)],q=[new r("",-1,3),new r("a~",0,1),new r("o~",0,2)],j=[new r("ic",-1,-1),new r("ad",-1,-1),new r("os",-1,-1),new r("iv",-1,1)],C=[new r("ante",-1,1),new r("avel",-1,1),new r("ível",-1,1)],P=[new r("ic",-1,1),new r("abil",-1,1),new r("iv",-1,1)],F=[new r("ica",-1,1),new r("ância",-1,1),new r("ência",-1,4),new r("ira",-1,9),new r("adora",-1,1),new r("osa",-1,1),new r("ista",-1,1),new r("iva",-1,8),new r("eza",-1,1),new r("logía",-1,2),new r("idade",-1,7),new r("ante",-1,1),new r("mente",-1,6),new r("amente",12,5),new r("ável",-1,1),new r("ível",-1,1),new r("ución",-1,3),new r("ico",-1,1),new r("ismo",-1,1),new r("oso",-1,1),new r("amento",-1,1),new r("imento",-1,1),new r("ivo",-1,8),new r("aça~o",-1,1),new r("ador",-1,1),new r("icas",-1,1),new r("ências",-1,4),new r("iras",-1,9),new r("adoras",-1,1),new r("osas",-1,1),new r("istas",-1,1),new r("ivas",-1,8),new r("ezas",-1,1),new r("logías",-1,2),new r("idades",-1,7),new r("uciones",-1,3),new r("adores",-1,1),new r("antes",-1,1),new r("aço~es",-1,1),new r("icos",-1,1),new r("ismos",-1,1),new r("osos",-1,1),new r("amentos",-1,1),new r("imentos",-1,1),new r("ivos",-1,8)],S=[new r("ada",-1,1),new r("ida",-1,1),new r("ia",-1,1),new r("aria",2,1),new r("eria",2,1),new r("iria",2,1),new r("ara",-1,1),new r("era",-1,1),new r("ira",-1,1),new r("ava",-1,1),new r("asse",-1,1),new r("esse",-1,1),new r("isse",-1,1),new r("aste",-1,1),new r("este",-1,1),new r("iste",-1,1),new r("ei",-1,1),new r("arei",16,1),new r("erei",16,1),new r("irei",16,1),new r("am",-1,1),new r("iam",20,1),new r("ariam",21,1),new r("eriam",21,1),new r("iriam",21,1),new r("aram",20,1),new r("eram",20,1),new r("iram",20,1),new r("avam",20,1),new r("em",-1,1),new r("arem",29,1),new r("erem",29,1),new r("irem",29,1),new r("assem",29,1),new r("essem",29,1),new r("issem",29,1),new r("ado",-1,1),new r("ido",-1,1),new r("ando",-1,1),new r("endo",-1,1),new r("indo",-1,1),new r("ara~o",-1,1),new r("era~o",-1,1),new r("ira~o",-1,1),new r("ar",-1,1),new r("er",-1,1),new r("ir",-1,1),new r("as",-1,1),new r("adas",47,1),new r("idas",47,1),new r("ias",47,1),new r("arias",50,1),new r("erias",50,1),new r("irias",50,1),new r("aras",47,1),new r("eras",47,1),new r("iras",47,1),new r("avas",47,1),new r("es",-1,1),new r("ardes",58,1),new r("erdes",58,1),new r("irdes",58,1),new r("ares",58,1),new r("eres",58,1),new r("ires",58,1),new r("asses",58,1),new r("esses",58,1),new r("isses",58,1),new r("astes",58,1),new r("estes",58,1),new r("istes",58,1),new r("is",-1,1),new r("ais",71,1),new r("eis",71,1),new r("areis",73,1),new r("ereis",73,1),new r("ireis",73,1),new r("áreis",73,1),new r("éreis",73,1),new r("íreis",73,1),new r("ásseis",73,1),new r("ésseis",73,1),new r("ísseis",73,1),new r("áveis",73,1),new r("íeis",73,1),new r("aríeis",84,1),new r("eríeis",84,1),new r("iríeis",84,1),new r("ados",-1,1),new r("idos",-1,1),new r("amos",-1,1),new r("áramos",90,1),new r("éramos",90,1),new r("íramos",90,1),new r("ávamos",90,1),new r("íamos",90,1),new r("aríamos",95,1),new r("eríamos",95,1),new r("iríamos",95,1),new r("emos",-1,1),new r("aremos",99,1),new r("eremos",99,1),new r("iremos",99,1),new r("ássemos",99,1),new r("êssemos",99,1),new r("íssemos",99,1),new r("imos",-1,1),new r("armos",-1,1),new r("ermos",-1,1),new r("irmos",-1,1),new r("ámos",-1,1),new r("arás",-1,1),new r("erás",-1,1),new r("irás",-1,1),new r("eu",-1,1),new r("iu",-1,1),new r("ou",-1,1),new r("ará",-1,1),new r("erá",-1,1),new r("irá",-1,1)],W=[new r("a",-1,1),new r("i",-1,1),new r("o",-1,1),new r("os",-1,1),new r("á",-1,1),new r("í",-1,1),new r("ó",-1,1)],L=[new r("e",-1,1),new r("ç",-1,2),new r("é",-1,1),new r("ê",-1,1)],y=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,3,19,12,2],z=new s;this.setCurrent=function(e){z.setCurrent(e)},this.getCurrent=function(){return z.getCurrent()},this.stem=function(){var r=z.cursor;return e(),z.cursor=r,a(),z.limit_backward=r,z.cursor=z.limit,_(),z.cursor=z.limit,p(),z.cursor=z.limit_backward,u(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return n.setCurrent(e),n.stem(),n.getCurrent()}):(n.setCurrent(e),n.stem(),n.getCurrent())}}(),e.Pipeline.registerFunction(e.pt.stemmer,"stemmer-pt"),e.pt.stopWordFilter=e.generateStopWordFilter("a ao aos aquela aquelas aquele aqueles aquilo as até com como da das de dela delas dele deles depois do dos e ela elas ele eles em entre era eram essa essas esse esses esta estamos estas estava estavam este esteja estejam estejamos estes esteve estive estivemos estiver estivera estiveram estiverem estivermos estivesse estivessem estivéramos estivéssemos estou está estávamos estão eu foi fomos for fora foram forem formos fosse fossem fui fôramos fôssemos haja hajam hajamos havemos hei houve houvemos houver houvera houveram houverei houverem houveremos houveria houveriam houvermos houverá houverão houveríamos houvesse houvessem houvéramos houvéssemos há hão isso isto já lhe lhes mais mas me mesmo meu meus minha minhas muito na nas nem no nos nossa nossas nosso nossos num numa não nós o os ou para pela pelas pelo pelos por qual quando que quem se seja sejam sejamos sem serei seremos seria seriam será serão seríamos seu seus somos sou sua suas são só também te tem temos tenha tenham tenhamos tenho terei teremos teria teriam terá terão teríamos teu teus teve tinha tinham tive tivemos tiver tivera tiveram tiverem tivermos tivesse tivessem tivéramos tivéssemos tu tua tuas tém tínhamos um uma você vocês vos à às éramos".split(" ")),e.Pipeline.registerFunction(e.pt.stopWordFilter,"stopWordFilter-pt")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.ro.min.js b/v2.7/assets/javascripts/lunr/min/lunr.ro.min.js new file mode 100644 index 000000000..727714018 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.ro.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Romanian` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,i){"function"==typeof define&&define.amd?define(i):"object"==typeof exports?module.exports=i():i()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.ro=function(){this.pipeline.reset(),this.pipeline.add(e.ro.trimmer,e.ro.stopWordFilter,e.ro.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.ro.stemmer))},e.ro.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.ro.trimmer=e.trimmerSupport.generateTrimmer(e.ro.wordCharacters),e.Pipeline.registerFunction(e.ro.trimmer,"trimmer-ro"),e.ro.stemmer=function(){var i=e.stemmerSupport.Among,r=e.stemmerSupport.SnowballProgram,n=new function(){function e(e,i){L.eq_s(1,e)&&(L.ket=L.cursor,L.in_grouping(W,97,259)&&L.slice_from(i))}function n(){for(var i,r;;){if(i=L.cursor,L.in_grouping(W,97,259)&&(r=L.cursor,L.bra=r,e("u","U"),L.cursor=r,e("i","I")),L.cursor=i,L.cursor>=L.limit)break;L.cursor++}}function t(){if(L.out_grouping(W,97,259)){for(;!L.in_grouping(W,97,259);){if(L.cursor>=L.limit)return!0;L.cursor++}return!1}return!0}function a(){if(L.in_grouping(W,97,259))for(;!L.out_grouping(W,97,259);){if(L.cursor>=L.limit)return!0;L.cursor++}return!1}function o(){var e,i,r=L.cursor;if(L.in_grouping(W,97,259)){if(e=L.cursor,!t())return void(h=L.cursor);if(L.cursor=e,!a())return void(h=L.cursor)}L.cursor=r,L.out_grouping(W,97,259)&&(i=L.cursor,t()&&(L.cursor=i,L.in_grouping(W,97,259)&&L.cursor=L.limit)return!1;L.cursor++}for(;!L.out_grouping(W,97,259);){if(L.cursor>=L.limit)return!1;L.cursor++}return!0}function c(){var e=L.cursor;h=L.limit,k=h,g=h,o(),L.cursor=e,u()&&(k=L.cursor,u()&&(g=L.cursor))}function s(){for(var e;;){if(L.bra=L.cursor,e=L.find_among(z,3))switch(L.ket=L.cursor,e){case 1:L.slice_from("i");continue;case 2:L.slice_from("u");continue;case 3:if(L.cursor>=L.limit)break;L.cursor++;continue}break}}function w(){return h<=L.cursor}function m(){return k<=L.cursor}function l(){return g<=L.cursor}function f(){var e,i;if(L.ket=L.cursor,(e=L.find_among_b(C,16))&&(L.bra=L.cursor,m()))switch(e){case 1:L.slice_del();break;case 2:L.slice_from("a");break;case 3:L.slice_from("e");break;case 4:L.slice_from("i");break;case 5:i=L.limit-L.cursor,L.eq_s_b(2,"ab")||(L.cursor=L.limit-i,L.slice_from("i"));break;case 6:L.slice_from("at");break;case 7:L.slice_from("aţi")}}function p(){var e,i=L.limit-L.cursor;if(L.ket=L.cursor,(e=L.find_among_b(P,46))&&(L.bra=L.cursor,m())){switch(e){case 1:L.slice_from("abil");break;case 2:L.slice_from("ibil");break;case 3:L.slice_from("iv");break;case 4:L.slice_from("ic");break;case 5:L.slice_from("at");break;case 6:L.slice_from("it")}return _=!0,L.cursor=L.limit-i,!0}return!1}function d(){var e,i;for(_=!1;;)if(i=L.limit-L.cursor,!p()){L.cursor=L.limit-i;break}if(L.ket=L.cursor,(e=L.find_among_b(F,62))&&(L.bra=L.cursor,l())){switch(e){case 1:L.slice_del();break;case 2:L.eq_s_b(1,"ţ")&&(L.bra=L.cursor,L.slice_from("t"));break;case 3:L.slice_from("ist")}_=!0}}function b(){var e,i,r;if(L.cursor>=h){if(i=L.limit_backward,L.limit_backward=h,L.ket=L.cursor,e=L.find_among_b(q,94))switch(L.bra=L.cursor,e){case 1:if(r=L.limit-L.cursor,!L.out_grouping_b(W,97,259)&&(L.cursor=L.limit-r,!L.eq_s_b(1,"u")))break;case 2:L.slice_del()}L.limit_backward=i}}function v(){var e;L.ket=L.cursor,(e=L.find_among_b(S,5))&&(L.bra=L.cursor,w()&&1==e&&L.slice_del())}var _,g,k,h,z=[new i("",-1,3),new i("I",0,1),new i("U",0,2)],C=[new i("ea",-1,3),new i("aţia",-1,7),new i("aua",-1,2),new i("iua",-1,4),new i("aţie",-1,7),new i("ele",-1,3),new i("ile",-1,5),new i("iile",6,4),new i("iei",-1,4),new i("atei",-1,6),new i("ii",-1,4),new i("ului",-1,1),new i("ul",-1,1),new i("elor",-1,3),new i("ilor",-1,4),new i("iilor",14,4)],P=[new i("icala",-1,4),new i("iciva",-1,4),new i("ativa",-1,5),new i("itiva",-1,6),new i("icale",-1,4),new i("aţiune",-1,5),new i("iţiune",-1,6),new i("atoare",-1,5),new i("itoare",-1,6),new i("ătoare",-1,5),new i("icitate",-1,4),new i("abilitate",-1,1),new i("ibilitate",-1,2),new i("ivitate",-1,3),new i("icive",-1,4),new i("ative",-1,5),new i("itive",-1,6),new i("icali",-1,4),new i("atori",-1,5),new i("icatori",18,4),new i("itori",-1,6),new i("ători",-1,5),new i("icitati",-1,4),new i("abilitati",-1,1),new i("ivitati",-1,3),new i("icivi",-1,4),new i("ativi",-1,5),new i("itivi",-1,6),new i("icităi",-1,4),new i("abilităi",-1,1),new i("ivităi",-1,3),new i("icităţi",-1,4),new i("abilităţi",-1,1),new i("ivităţi",-1,3),new i("ical",-1,4),new i("ator",-1,5),new i("icator",35,4),new i("itor",-1,6),new i("ător",-1,5),new i("iciv",-1,4),new i("ativ",-1,5),new i("itiv",-1,6),new i("icală",-1,4),new i("icivă",-1,4),new i("ativă",-1,5),new i("itivă",-1,6)],F=[new i("ica",-1,1),new i("abila",-1,1),new i("ibila",-1,1),new i("oasa",-1,1),new i("ata",-1,1),new i("ita",-1,1),new i("anta",-1,1),new i("ista",-1,3),new i("uta",-1,1),new i("iva",-1,1),new i("ic",-1,1),new i("ice",-1,1),new i("abile",-1,1),new i("ibile",-1,1),new i("isme",-1,3),new i("iune",-1,2),new i("oase",-1,1),new i("ate",-1,1),new i("itate",17,1),new i("ite",-1,1),new i("ante",-1,1),new i("iste",-1,3),new i("ute",-1,1),new i("ive",-1,1),new i("ici",-1,1),new i("abili",-1,1),new i("ibili",-1,1),new i("iuni",-1,2),new i("atori",-1,1),new i("osi",-1,1),new i("ati",-1,1),new i("itati",30,1),new i("iti",-1,1),new i("anti",-1,1),new i("isti",-1,3),new i("uti",-1,1),new i("işti",-1,3),new i("ivi",-1,1),new i("ităi",-1,1),new i("oşi",-1,1),new i("ităţi",-1,1),new i("abil",-1,1),new i("ibil",-1,1),new i("ism",-1,3),new i("ator",-1,1),new i("os",-1,1),new i("at",-1,1),new i("it",-1,1),new i("ant",-1,1),new i("ist",-1,3),new i("ut",-1,1),new i("iv",-1,1),new i("ică",-1,1),new i("abilă",-1,1),new i("ibilă",-1,1),new i("oasă",-1,1),new i("ată",-1,1),new i("ită",-1,1),new i("antă",-1,1),new i("istă",-1,3),new i("ută",-1,1),new i("ivă",-1,1)],q=[new i("ea",-1,1),new i("ia",-1,1),new i("esc",-1,1),new i("ăsc",-1,1),new i("ind",-1,1),new i("ând",-1,1),new i("are",-1,1),new i("ere",-1,1),new i("ire",-1,1),new i("âre",-1,1),new i("se",-1,2),new i("ase",10,1),new i("sese",10,2),new i("ise",10,1),new i("use",10,1),new i("âse",10,1),new i("eşte",-1,1),new i("ăşte",-1,1),new i("eze",-1,1),new i("ai",-1,1),new i("eai",19,1),new i("iai",19,1),new i("sei",-1,2),new i("eşti",-1,1),new i("ăşti",-1,1),new i("ui",-1,1),new i("ezi",-1,1),new i("âi",-1,1),new i("aşi",-1,1),new i("seşi",-1,2),new i("aseşi",29,1),new i("seseşi",29,2),new i("iseşi",29,1),new i("useşi",29,1),new i("âseşi",29,1),new i("işi",-1,1),new i("uşi",-1,1),new i("âşi",-1,1),new i("aţi",-1,2),new i("eaţi",38,1),new i("iaţi",38,1),new i("eţi",-1,2),new i("iţi",-1,2),new i("âţi",-1,2),new i("arăţi",-1,1),new i("serăţi",-1,2),new i("aserăţi",45,1),new i("seserăţi",45,2),new i("iserăţi",45,1),new i("userăţi",45,1),new i("âserăţi",45,1),new i("irăţi",-1,1),new i("urăţi",-1,1),new i("ârăţi",-1,1),new i("am",-1,1),new i("eam",54,1),new i("iam",54,1),new i("em",-1,2),new i("asem",57,1),new i("sesem",57,2),new i("isem",57,1),new i("usem",57,1),new i("âsem",57,1),new i("im",-1,2),new i("âm",-1,2),new i("ăm",-1,2),new i("arăm",65,1),new i("serăm",65,2),new i("aserăm",67,1),new i("seserăm",67,2),new i("iserăm",67,1),new i("userăm",67,1),new i("âserăm",67,1),new i("irăm",65,1),new i("urăm",65,1),new i("ârăm",65,1),new i("au",-1,1),new i("eau",76,1),new i("iau",76,1),new i("indu",-1,1),new i("ându",-1,1),new i("ez",-1,1),new i("ească",-1,1),new i("ară",-1,1),new i("seră",-1,2),new i("aseră",84,1),new i("seseră",84,2),new i("iseră",84,1),new i("useră",84,1),new i("âseră",84,1),new i("iră",-1,1),new i("ură",-1,1),new i("âră",-1,1),new i("ează",-1,1)],S=[new i("a",-1,1),new i("e",-1,1),new i("ie",1,1),new i("i",-1,1),new i("ă",-1,1)],W=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,2,32,0,0,4],L=new r;this.setCurrent=function(e){L.setCurrent(e)},this.getCurrent=function(){return L.getCurrent()},this.stem=function(){var e=L.cursor;return n(),L.cursor=e,c(),L.limit_backward=e,L.cursor=L.limit,f(),L.cursor=L.limit,d(),L.cursor=L.limit,_||(L.cursor=L.limit,b(),L.cursor=L.limit),v(),L.cursor=L.limit_backward,s(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return n.setCurrent(e),n.stem(),n.getCurrent()}):(n.setCurrent(e),n.stem(),n.getCurrent())}}(),e.Pipeline.registerFunction(e.ro.stemmer,"stemmer-ro"),e.ro.stopWordFilter=e.generateStopWordFilter("acea aceasta această aceea acei aceia acel acela acele acelea acest acesta aceste acestea aceşti aceştia acolo acord acum ai aia aibă aici al ale alea altceva altcineva am ar are asemenea asta astea astăzi asupra au avea avem aveţi azi aş aşadar aţi bine bucur bună ca care caut ce cel ceva chiar cinci cine cineva contra cu cum cumva curând curînd când cât câte câtva câţi cînd cît cîte cîtva cîţi că căci cărei căror cărui către da dacă dar datorită dată dau de deci deja deoarece departe deşi din dinaintea dintr- dintre doi doilea două drept după dă ea ei el ele eram este eu eşti face fata fi fie fiecare fii fim fiu fiţi frumos fără graţie halbă iar ieri la le li lor lui lângă lîngă mai mea mei mele mereu meu mi mie mine mult multă mulţi mulţumesc mâine mîine mă ne nevoie nici nicăieri nimeni nimeri nimic nişte noastre noastră noi noroc nostru nouă noştri nu opt ori oricare orice oricine oricum oricând oricât oricînd oricît oriunde patra patru patrulea pe pentru peste pic poate pot prea prima primul prin puţin puţina puţină până pînă rog sa sale sau se spate spre sub sunt suntem sunteţi sută sînt sîntem sînteţi să săi său ta tale te timp tine toate toată tot totuşi toţi trei treia treilea tu tăi tău un una unde undeva unei uneia unele uneori unii unor unora unu unui unuia unul vi voastre voastră voi vostru vouă voştri vreme vreo vreun vă zece zero zi zice îi îl îmi împotriva în înainte înaintea încotro încât încît între întrucât întrucît îţi ăla ălea ăsta ăstea ăştia şapte şase şi ştiu ţi ţie".split(" ")),e.Pipeline.registerFunction(e.ro.stopWordFilter,"stopWordFilter-ro")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.ru.min.js b/v2.7/assets/javascripts/lunr/min/lunr.ru.min.js new file mode 100644 index 000000000..186cc485c --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.ru.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Russian` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,n){"function"==typeof define&&define.amd?define(n):"object"==typeof exports?module.exports=n():n()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.ru=function(){this.pipeline.reset(),this.pipeline.add(e.ru.trimmer,e.ru.stopWordFilter,e.ru.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.ru.stemmer))},e.ru.wordCharacters="Ѐ-҄҇-ԯᴫᵸⷠ-ⷿꙀ-ꚟ︮︯",e.ru.trimmer=e.trimmerSupport.generateTrimmer(e.ru.wordCharacters),e.Pipeline.registerFunction(e.ru.trimmer,"trimmer-ru"),e.ru.stemmer=function(){var n=e.stemmerSupport.Among,r=e.stemmerSupport.SnowballProgram,t=new function(){function e(){for(;!W.in_grouping(S,1072,1103);){if(W.cursor>=W.limit)return!1;W.cursor++}return!0}function t(){for(;!W.out_grouping(S,1072,1103);){if(W.cursor>=W.limit)return!1;W.cursor++}return!0}function w(){b=W.limit,_=b,e()&&(b=W.cursor,t()&&e()&&t()&&(_=W.cursor))}function i(){return _<=W.cursor}function u(e,n){var r,t;if(W.ket=W.cursor,r=W.find_among_b(e,n)){switch(W.bra=W.cursor,r){case 1:if(t=W.limit-W.cursor,!W.eq_s_b(1,"а")&&(W.cursor=W.limit-t,!W.eq_s_b(1,"я")))return!1;case 2:W.slice_del()}return!0}return!1}function o(){return u(h,9)}function s(e,n){var r;return W.ket=W.cursor,!!(r=W.find_among_b(e,n))&&(W.bra=W.cursor,1==r&&W.slice_del(),!0)}function c(){return s(g,26)}function m(){return!!c()&&(u(C,8),!0)}function f(){return s(k,2)}function l(){return u(P,46)}function a(){s(v,36)}function p(){var e;W.ket=W.cursor,(e=W.find_among_b(F,2))&&(W.bra=W.cursor,i()&&1==e&&W.slice_del())}function d(){var e;if(W.ket=W.cursor,e=W.find_among_b(q,4))switch(W.bra=W.cursor,e){case 1:if(W.slice_del(),W.ket=W.cursor,!W.eq_s_b(1,"н"))break;W.bra=W.cursor;case 2:if(!W.eq_s_b(1,"н"))break;case 3:W.slice_del()}}var _,b,h=[new n("в",-1,1),new n("ив",0,2),new n("ыв",0,2),new n("вши",-1,1),new n("ивши",3,2),new n("ывши",3,2),new n("вшись",-1,1),new n("ившись",6,2),new n("ывшись",6,2)],g=[new n("ее",-1,1),new n("ие",-1,1),new n("ое",-1,1),new n("ые",-1,1),new n("ими",-1,1),new n("ыми",-1,1),new n("ей",-1,1),new n("ий",-1,1),new n("ой",-1,1),new n("ый",-1,1),new n("ем",-1,1),new n("им",-1,1),new n("ом",-1,1),new n("ым",-1,1),new n("его",-1,1),new n("ого",-1,1),new n("ему",-1,1),new n("ому",-1,1),new n("их",-1,1),new n("ых",-1,1),new n("ею",-1,1),new n("ою",-1,1),new n("ую",-1,1),new n("юю",-1,1),new n("ая",-1,1),new n("яя",-1,1)],C=[new n("ем",-1,1),new n("нн",-1,1),new n("вш",-1,1),new n("ивш",2,2),new n("ывш",2,2),new n("щ",-1,1),new n("ющ",5,1),new n("ующ",6,2)],k=[new n("сь",-1,1),new n("ся",-1,1)],P=[new n("ла",-1,1),new n("ила",0,2),new n("ыла",0,2),new n("на",-1,1),new n("ена",3,2),new n("ете",-1,1),new n("ите",-1,2),new n("йте",-1,1),new n("ейте",7,2),new n("уйте",7,2),new n("ли",-1,1),new n("или",10,2),new n("ыли",10,2),new n("й",-1,1),new n("ей",13,2),new n("уй",13,2),new n("л",-1,1),new n("ил",16,2),new n("ыл",16,2),new n("ем",-1,1),new n("им",-1,2),new n("ым",-1,2),new n("н",-1,1),new n("ен",22,2),new n("ло",-1,1),new n("ило",24,2),new n("ыло",24,2),new n("но",-1,1),new n("ено",27,2),new n("нно",27,1),new n("ет",-1,1),new n("ует",30,2),new n("ит",-1,2),new n("ыт",-1,2),new n("ют",-1,1),new n("уют",34,2),new n("ят",-1,2),new n("ны",-1,1),new n("ены",37,2),new n("ть",-1,1),new n("ить",39,2),new n("ыть",39,2),new n("ешь",-1,1),new n("ишь",-1,2),new n("ю",-1,2),new n("ую",44,2)],v=[new n("а",-1,1),new n("ев",-1,1),new n("ов",-1,1),new n("е",-1,1),new n("ие",3,1),new n("ье",3,1),new n("и",-1,1),new n("еи",6,1),new n("ии",6,1),new n("ами",6,1),new n("ями",6,1),new n("иями",10,1),new n("й",-1,1),new n("ей",12,1),new n("ией",13,1),new n("ий",12,1),new n("ой",12,1),new n("ам",-1,1),new n("ем",-1,1),new n("ием",18,1),new n("ом",-1,1),new n("ям",-1,1),new n("иям",21,1),new n("о",-1,1),new n("у",-1,1),new n("ах",-1,1),new n("ях",-1,1),new n("иях",26,1),new n("ы",-1,1),new n("ь",-1,1),new n("ю",-1,1),new n("ию",30,1),new n("ью",30,1),new n("я",-1,1),new n("ия",33,1),new n("ья",33,1)],F=[new n("ост",-1,1),new n("ость",-1,1)],q=[new n("ейше",-1,1),new n("н",-1,2),new n("ейш",-1,1),new n("ь",-1,3)],S=[33,65,8,232],W=new r;this.setCurrent=function(e){W.setCurrent(e)},this.getCurrent=function(){return W.getCurrent()},this.stem=function(){return w(),W.cursor=W.limit,!(W.cursor=i&&(e-=i,t[e>>3]&1<<(7&e)))return this.cursor++,!0}return!1},in_grouping_b:function(t,i,s){if(this.cursor>this.limit_backward){var e=r.charCodeAt(this.cursor-1);if(e<=s&&e>=i&&(e-=i,t[e>>3]&1<<(7&e)))return this.cursor--,!0}return!1},out_grouping:function(t,i,s){if(this.cursors||e>3]&1<<(7&e)))return this.cursor++,!0}return!1},out_grouping_b:function(t,i,s){if(this.cursor>this.limit_backward){var e=r.charCodeAt(this.cursor-1);if(e>s||e>3]&1<<(7&e)))return this.cursor--,!0}return!1},eq_s:function(t,i){if(this.limit-this.cursor>1),f=0,l=o0||e==s||c)break;c=!0}}for(;;){var _=t[s];if(o>=_.s_size){if(this.cursor=n+_.s_size,!_.method)return _.result;var b=_.method();if(this.cursor=n+_.s_size,b)return _.result}if((s=_.substring_i)<0)return 0}},find_among_b:function(t,i){for(var s=0,e=i,n=this.cursor,u=this.limit_backward,o=0,h=0,c=!1;;){for(var a=s+(e-s>>1),f=0,l=o=0;m--){if(n-l==u){f=-1;break}if(f=r.charCodeAt(n-1-l)-_.s[m])break;l++}if(f<0?(e=a,h=l):(s=a,o=l),e-s<=1){if(s>0||e==s||c)break;c=!0}}for(;;){var _=t[s];if(o>=_.s_size){if(this.cursor=n-_.s_size,!_.method)return _.result;var b=_.method();if(this.cursor=n-_.s_size,b)return _.result}if((s=_.substring_i)<0)return 0}},replace_s:function(t,i,s){var e=s.length-(i-t),n=r.substring(0,t),u=r.substring(i);return r=n+s+u,this.limit+=e,this.cursor>=i?this.cursor+=e:this.cursor>t&&(this.cursor=t),e},slice_check:function(){if(this.bra<0||this.bra>this.ket||this.ket>this.limit||this.limit>r.length)throw"faulty slice operation"},slice_from:function(r){this.slice_check(),this.replace_s(this.bra,this.ket,r)},slice_del:function(){this.slice_from("")},insert:function(r,t,i){var s=this.replace_s(r,t,i);r<=this.bra&&(this.bra+=s),r<=this.ket&&(this.ket+=s)},slice_to:function(){return this.slice_check(),r.substring(this.bra,this.ket)},eq_v_b:function(r){return this.eq_s_b(r.length,r)}}}},r.trimmerSupport={generateTrimmer:function(r){var t=new RegExp("^[^"+r+"]+"),i=new RegExp("[^"+r+"]+$");return function(r){return"function"==typeof r.update?r.update(function(r){return r.replace(t,"").replace(i,"")}):r.replace(t,"").replace(i,"")}}}}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.sv.min.js b/v2.7/assets/javascripts/lunr/min/lunr.sv.min.js new file mode 100644 index 000000000..3e5eb6400 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.sv.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Swedish` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.sv=function(){this.pipeline.reset(),this.pipeline.add(e.sv.trimmer,e.sv.stopWordFilter,e.sv.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(e.sv.stemmer))},e.sv.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",e.sv.trimmer=e.trimmerSupport.generateTrimmer(e.sv.wordCharacters),e.Pipeline.registerFunction(e.sv.trimmer,"trimmer-sv"),e.sv.stemmer=function(){var r=e.stemmerSupport.Among,n=e.stemmerSupport.SnowballProgram,t=new function(){function e(){var e,r=w.cursor+3;if(o=w.limit,0<=r||r<=w.limit){for(a=r;;){if(e=w.cursor,w.in_grouping(l,97,246)){w.cursor=e;break}if(w.cursor=e,w.cursor>=w.limit)return;w.cursor++}for(;!w.out_grouping(l,97,246);){if(w.cursor>=w.limit)return;w.cursor++}o=w.cursor,o=o&&(w.limit_backward=o,w.cursor=w.limit,w.ket=w.cursor,e=w.find_among_b(u,37),w.limit_backward=r,e))switch(w.bra=w.cursor,e){case 1:w.slice_del();break;case 2:w.in_grouping_b(d,98,121)&&w.slice_del()}}function i(){var e=w.limit_backward;w.cursor>=o&&(w.limit_backward=o,w.cursor=w.limit,w.find_among_b(c,7)&&(w.cursor=w.limit,w.ket=w.cursor,w.cursor>w.limit_backward&&(w.bra=--w.cursor,w.slice_del())),w.limit_backward=e)}function s(){var e,r;if(w.cursor>=o){if(r=w.limit_backward,w.limit_backward=o,w.cursor=w.limit,w.ket=w.cursor,e=w.find_among_b(m,5))switch(w.bra=w.cursor,e){case 1:w.slice_del();break;case 2:w.slice_from("lös");break;case 3:w.slice_from("full")}w.limit_backward=r}}var a,o,u=[new r("a",-1,1),new r("arna",0,1),new r("erna",0,1),new r("heterna",2,1),new r("orna",0,1),new r("ad",-1,1),new r("e",-1,1),new r("ade",6,1),new r("ande",6,1),new r("arne",6,1),new r("are",6,1),new r("aste",6,1),new r("en",-1,1),new r("anden",12,1),new r("aren",12,1),new r("heten",12,1),new r("ern",-1,1),new r("ar",-1,1),new r("er",-1,1),new r("heter",18,1),new r("or",-1,1),new r("s",-1,2),new r("as",21,1),new r("arnas",22,1),new r("ernas",22,1),new r("ornas",22,1),new r("es",21,1),new r("ades",26,1),new r("andes",26,1),new r("ens",21,1),new r("arens",29,1),new r("hetens",29,1),new r("erns",21,1),new r("at",-1,1),new r("andet",-1,1),new r("het",-1,1),new r("ast",-1,1)],c=[new r("dd",-1,-1),new r("gd",-1,-1),new r("nn",-1,-1),new r("dt",-1,-1),new r("gt",-1,-1),new r("kt",-1,-1),new r("tt",-1,-1)],m=[new r("ig",-1,1),new r("lig",0,1),new r("els",-1,1),new r("fullt",-1,3),new r("löst",-1,2)],l=[17,65,16,1,0,0,0,0,0,0,0,0,0,0,0,0,24,0,32],d=[119,127,149],w=new n;this.setCurrent=function(e){w.setCurrent(e)},this.getCurrent=function(){return w.getCurrent()},this.stem=function(){var r=w.cursor;return e(),w.limit_backward=r,w.cursor=w.limit,t(),w.cursor=w.limit,i(),w.cursor=w.limit,s(),!0}};return function(e){return"function"==typeof e.update?e.update(function(e){return t.setCurrent(e),t.stem(),t.getCurrent()}):(t.setCurrent(e),t.stem(),t.getCurrent())}}(),e.Pipeline.registerFunction(e.sv.stemmer,"stemmer-sv"),e.sv.stopWordFilter=e.generateStopWordFilter("alla allt att av blev bli blir blivit de dem den denna deras dess dessa det detta dig din dina ditt du där då efter ej eller en er era ert ett från för ha hade han hans har henne hennes hon honom hur här i icke ingen inom inte jag ju kan kunde man med mellan men mig min mina mitt mot mycket ni nu när någon något några och om oss på samma sedan sig sin sina sitta själv skulle som så sådan sådana sådant till under upp ut utan vad var vara varför varit varje vars vart vem vi vid vilka vilkas vilken vilket vår våra vårt än är åt över".split(" ")),e.Pipeline.registerFunction(e.sv.stopWordFilter,"stopWordFilter-sv")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.tr.min.js b/v2.7/assets/javascripts/lunr/min/lunr.tr.min.js new file mode 100644 index 000000000..563f6ec1f --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.tr.min.js @@ -0,0 +1,18 @@ +/*! + * Lunr languages, `Turkish` language + * https://github.com/MihaiValentin/lunr-languages + * + * Copyright 2014, Mihai Valentin + * http://www.mozilla.org/MPL/ + */ +/*! + * based on + * Snowball JavaScript Library v0.3 + * http://code.google.com/p/urim/ + * http://snowball.tartarus.org/ + * + * Copyright 2010, Oleg Mazko + * http://www.mozilla.org/MPL/ + */ + +!function(r,i){"function"==typeof define&&define.amd?define(i):"object"==typeof exports?module.exports=i():i()(r.lunr)}(this,function(){return function(r){if(void 0===r)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===r.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");r.tr=function(){this.pipeline.reset(),this.pipeline.add(r.tr.trimmer,r.tr.stopWordFilter,r.tr.stemmer),this.searchPipeline&&(this.searchPipeline.reset(),this.searchPipeline.add(r.tr.stemmer))},r.tr.wordCharacters="A-Za-zªºÀ-ÖØ-öø-ʸˠ-ˤᴀ-ᴥᴬ-ᵜᵢ-ᵥᵫ-ᵷᵹ-ᶾḀ-ỿⁱⁿₐ-ₜKÅℲⅎⅠ-ↈⱠ-ⱿꜢ-ꞇꞋ-ꞭꞰ-ꞷꟷ-ꟿꬰ-ꭚꭜ-ꭤff-stＡ-Ｚａ-ｚ",r.tr.trimmer=r.trimmerSupport.generateTrimmer(r.tr.wordCharacters),r.Pipeline.registerFunction(r.tr.trimmer,"trimmer-tr"),r.tr.stemmer=function(){var i=r.stemmerSupport.Among,e=r.stemmerSupport.SnowballProgram,n=new function(){function r(r,i,e){for(;;){var n=Dr.limit-Dr.cursor;if(Dr.in_grouping_b(r,i,e)){Dr.cursor=Dr.limit-n;break}if(Dr.cursor=Dr.limit-n,Dr.cursor<=Dr.limit_backward)return!1;Dr.cursor--}return!0}function n(){var i,e;i=Dr.limit-Dr.cursor,r(Wr,97,305);for(var n=0;nDr.limit_backward&&(Dr.cursor--,e=Dr.limit-Dr.cursor,i()))?(Dr.cursor=Dr.limit-e,!0):(Dr.cursor=Dr.limit-n,r()?(Dr.cursor=Dr.limit-n,!1):(Dr.cursor=Dr.limit-n,!(Dr.cursor<=Dr.limit_backward)&&(Dr.cursor--,!!i()&&(Dr.cursor=Dr.limit-n,!0))))}function u(r){return t(r,function(){return Dr.in_grouping_b(Wr,97,305)})}function o(){return u(function(){return Dr.eq_s_b(1,"n")})}function s(){return u(function(){return Dr.eq_s_b(1,"s")})}function c(){return u(function(){return Dr.eq_s_b(1,"y")})}function l(){return t(function(){return Dr.in_grouping_b(Lr,105,305)},function(){return Dr.out_grouping_b(Wr,97,305)})}function a(){return Dr.find_among_b(ur,10)&&l()}function m(){return n()&&Dr.in_grouping_b(Lr,105,305)&&s()}function d(){return Dr.find_among_b(or,2)}function f(){return n()&&Dr.in_grouping_b(Lr,105,305)&&c()}function b(){return n()&&Dr.find_among_b(sr,4)}function w(){return n()&&Dr.find_among_b(cr,4)&&o()}function _(){return n()&&Dr.find_among_b(lr,2)&&c()}function k(){return n()&&Dr.find_among_b(ar,2)}function p(){return n()&&Dr.find_among_b(mr,4)}function g(){return n()&&Dr.find_among_b(dr,2)}function y(){return n()&&Dr.find_among_b(fr,4)}function z(){return n()&&Dr.find_among_b(br,2)}function v(){return n()&&Dr.find_among_b(wr,2)&&c()}function h(){return Dr.eq_s_b(2,"ki")}function q(){return n()&&Dr.find_among_b(_r,2)&&o()}function C(){return n()&&Dr.find_among_b(kr,4)&&c()}function P(){return n()&&Dr.find_among_b(pr,4)}function F(){return n()&&Dr.find_among_b(gr,4)&&c()}function S(){return Dr.find_among_b(yr,4)}function W(){return n()&&Dr.find_among_b(zr,2)}function L(){return n()&&Dr.find_among_b(vr,4)}function x(){return n()&&Dr.find_among_b(hr,8)}function A(){return Dr.find_among_b(qr,2)}function E(){return n()&&Dr.find_among_b(Cr,32)&&c()}function j(){return Dr.find_among_b(Pr,8)&&c()}function T(){return n()&&Dr.find_among_b(Fr,4)&&c()}function Z(){return Dr.eq_s_b(3,"ken")&&c()}function B(){var r=Dr.limit-Dr.cursor;return!(T()||(Dr.cursor=Dr.limit-r,E()||(Dr.cursor=Dr.limit-r,j()||(Dr.cursor=Dr.limit-r,Z()))))}function D(){if(A()){var r=Dr.limit-Dr.cursor;if(S()||(Dr.cursor=Dr.limit-r,W()||(Dr.cursor=Dr.limit-r,C()||(Dr.cursor=Dr.limit-r,P()||(Dr.cursor=Dr.limit-r,F()||(Dr.cursor=Dr.limit-r))))),T())return!1}return!0}function G(){if(W()){Dr.bra=Dr.cursor,Dr.slice_del();var r=Dr.limit-Dr.cursor;return Dr.ket=Dr.cursor,x()||(Dr.cursor=Dr.limit-r,E()||(Dr.cursor=Dr.limit-r,j()||(Dr.cursor=Dr.limit-r,T()||(Dr.cursor=Dr.limit-r)))),nr=!1,!1}return!0}function H(){if(!L())return!0;var r=Dr.limit-Dr.cursor;return!E()&&(Dr.cursor=Dr.limit-r,!j())}function I(){var r,i=Dr.limit-Dr.cursor;return!(S()||(Dr.cursor=Dr.limit-i,F()||(Dr.cursor=Dr.limit-i,P()||(Dr.cursor=Dr.limit-i,C()))))||(Dr.bra=Dr.cursor,Dr.slice_del(),r=Dr.limit-Dr.cursor,Dr.ket=Dr.cursor,T()||(Dr.cursor=Dr.limit-r),!1)}function J(){var r,i=Dr.limit-Dr.cursor;if(Dr.ket=Dr.cursor,nr=!0,B()&&(Dr.cursor=Dr.limit-i,D()&&(Dr.cursor=Dr.limit-i,G()&&(Dr.cursor=Dr.limit-i,H()&&(Dr.cursor=Dr.limit-i,I()))))){if(Dr.cursor=Dr.limit-i,!x())return;Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,r=Dr.limit-Dr.cursor,S()||(Dr.cursor=Dr.limit-r,W()||(Dr.cursor=Dr.limit-r,C()||(Dr.cursor=Dr.limit-r,P()||(Dr.cursor=Dr.limit-r,F()||(Dr.cursor=Dr.limit-r))))),T()||(Dr.cursor=Dr.limit-r)}Dr.bra=Dr.cursor,Dr.slice_del()}function K(){var r,i,e,n;if(Dr.ket=Dr.cursor,h()){if(r=Dr.limit-Dr.cursor,p())return Dr.bra=Dr.cursor,Dr.slice_del(),i=Dr.limit-Dr.cursor,Dr.ket=Dr.cursor,W()?(Dr.bra=Dr.cursor,Dr.slice_del(),K()):(Dr.cursor=Dr.limit-i,a()&&(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K()))),!0;if(Dr.cursor=Dr.limit-r,w()){if(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,e=Dr.limit-Dr.cursor,d())Dr.bra=Dr.cursor,Dr.slice_del();else{if(Dr.cursor=Dr.limit-e,Dr.ket=Dr.cursor,!a()&&(Dr.cursor=Dr.limit-e,!m()&&(Dr.cursor=Dr.limit-e,!K())))return!0;Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K())}return!0}if(Dr.cursor=Dr.limit-r,g()){if(n=Dr.limit-Dr.cursor,d())Dr.bra=Dr.cursor,Dr.slice_del();else if(Dr.cursor=Dr.limit-n,m())Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K());else if(Dr.cursor=Dr.limit-n,!K())return!1;return!0}}return!1}function M(r){if(Dr.ket=Dr.cursor,!g()&&(Dr.cursor=Dr.limit-r,!k()))return!1;var i=Dr.limit-Dr.cursor;if(d())Dr.bra=Dr.cursor,Dr.slice_del();else if(Dr.cursor=Dr.limit-i,m())Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K());else if(Dr.cursor=Dr.limit-i,!K())return!1;return!0}function N(r){if(Dr.ket=Dr.cursor,!z()&&(Dr.cursor=Dr.limit-r,!b()))return!1;var i=Dr.limit-Dr.cursor;return!(!m()&&(Dr.cursor=Dr.limit-i,!d()))&&(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K()),!0)}function O(){var r,i=Dr.limit-Dr.cursor;return Dr.ket=Dr.cursor,!(!w()&&(Dr.cursor=Dr.limit-i,!v()))&&(Dr.bra=Dr.cursor,Dr.slice_del(),r=Dr.limit-Dr.cursor,Dr.ket=Dr.cursor,!(!W()||(Dr.bra=Dr.cursor,Dr.slice_del(),!K()))||(Dr.cursor=Dr.limit-r,Dr.ket=Dr.cursor,!(a()||(Dr.cursor=Dr.limit-r,m()||(Dr.cursor=Dr.limit-r,K())))||(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K()),!0)))}function Q(){var r,i,e=Dr.limit-Dr.cursor;if(Dr.ket=Dr.cursor,!p()&&(Dr.cursor=Dr.limit-e,!f()&&(Dr.cursor=Dr.limit-e,!_())))return!1;if(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,r=Dr.limit-Dr.cursor,a())Dr.bra=Dr.cursor,Dr.slice_del(),i=Dr.limit-Dr.cursor,Dr.ket=Dr.cursor,W()||(Dr.cursor=Dr.limit-i);else if(Dr.cursor=Dr.limit-r,!W())return!0;return Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,K(),!0}function R(){var r,i,e=Dr.limit-Dr.cursor;if(Dr.ket=Dr.cursor,W())return Dr.bra=Dr.cursor,Dr.slice_del(),void K();if(Dr.cursor=Dr.limit-e,Dr.ket=Dr.cursor,q())if(Dr.bra=Dr.cursor,Dr.slice_del(),r=Dr.limit-Dr.cursor,Dr.ket=Dr.cursor,d())Dr.bra=Dr.cursor,Dr.slice_del();else{if(Dr.cursor=Dr.limit-r,Dr.ket=Dr.cursor,!a()&&(Dr.cursor=Dr.limit-r,!m())){if(Dr.cursor=Dr.limit-r,Dr.ket=Dr.cursor,!W())return;if(Dr.bra=Dr.cursor,Dr.slice_del(),!K())return}Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K())}else if(Dr.cursor=Dr.limit-e,!M(e)&&(Dr.cursor=Dr.limit-e,!N(e))){if(Dr.cursor=Dr.limit-e,Dr.ket=Dr.cursor,y())return Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,i=Dr.limit-Dr.cursor,void(a()?(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K())):(Dr.cursor=Dr.limit-i,W()?(Dr.bra=Dr.cursor,Dr.slice_del(),K()):(Dr.cursor=Dr.limit-i,K())));if(Dr.cursor=Dr.limit-e,!O()){if(Dr.cursor=Dr.limit-e,d())return Dr.bra=Dr.cursor,void Dr.slice_del();Dr.cursor=Dr.limit-e,K()||(Dr.cursor=Dr.limit-e,Q()||(Dr.cursor=Dr.limit-e,Dr.ket=Dr.cursor,(a()||(Dr.cursor=Dr.limit-e,m()))&&(Dr.bra=Dr.cursor,Dr.slice_del(),Dr.ket=Dr.cursor,W()&&(Dr.bra=Dr.cursor,Dr.slice_del(),K()))))}}}function U(){var r;if(Dr.ket=Dr.cursor,r=Dr.find_among_b(Sr,4))switch(Dr.bra=Dr.cursor,r){case 1:Dr.slice_from("p");break;case 2:Dr.slice_from("ç");break;case 3:Dr.slice_from("t");break;case 4:Dr.slice_from("k")}}function V(){for(;;){var r=Dr.limit-Dr.cursor;if(Dr.in_grouping_b(Wr,97,305)){Dr.cursor=Dr.limit-r;break}if(Dr.cursor=Dr.limit-r,Dr.cursor<=Dr.limit_backward)return!1;Dr.cursor--}return!0}function X(r,i,e){if(Dr.cursor=Dr.limit-r,V()){var n=Dr.limit-Dr.cursor;if(!Dr.eq_s_b(1,i)&&(Dr.cursor=Dr.limit-n,!Dr.eq_s_b(1,e)))return!0;Dr.cursor=Dr.limit-r;var t=Dr.cursor;return Dr.insert(Dr.cursor,Dr.cursor,e),Dr.cursor=t,!1}return!0}function Y(){var r=Dr.limit-Dr.cursor;(Dr.eq_s_b(1,"d")||(Dr.cursor=Dr.limit-r,Dr.eq_s_b(1,"g")))&&X(r,"a","ı")&&X(r,"e","i")&&X(r,"o","u")&&X(r,"ö","ü")}function $(){for(var r,i=Dr.cursor,e=2;;){for(r=Dr.cursor;!Dr.in_grouping(Wr,97,305);){if(Dr.cursor>=Dr.limit)return Dr.cursor=r,!(e>0)&&(Dr.cursor=i,!0);Dr.cursor++}e--}}function rr(r,i,e){for(;!Dr.eq_s(i,e);){if(Dr.cursor>=Dr.limit)return!0;Dr.cursor++}return(tr=i)!=Dr.limit||(Dr.cursor=r,!1)}function ir(){var r=Dr.cursor;return!rr(r,2,"ad")||(Dr.cursor=r,!rr(r,5,"soyad"))}function er(){var r=Dr.cursor;return!ir()&&(Dr.limit_backward=r,Dr.cursor=Dr.limit,Y(),Dr.cursor=Dr.limit,U(),!0)}var nr,tr,ur=[new i("m",-1,-1),new i("n",-1,-1),new i("miz",-1,-1),new i("niz",-1,-1),new i("muz",-1,-1),new i("nuz",-1,-1),new i("müz",-1,-1),new i("nüz",-1,-1),new i("mız",-1,-1),new i("nız",-1,-1)],or=[new i("leri",-1,-1),new i("ları",-1,-1)],sr=[new i("ni",-1,-1),new i("nu",-1,-1),new i("nü",-1,-1),new i("nı",-1,-1)],cr=[new i("in",-1,-1),new i("un",-1,-1),new i("ün",-1,-1),new i("ın",-1,-1)],lr=[new i("a",-1,-1),new i("e",-1,-1)],ar=[new i("na",-1,-1),new i("ne",-1,-1)],mr=[new i("da",-1,-1),new i("ta",-1,-1),new i("de",-1,-1),new i("te",-1,-1)],dr=[new i("nda",-1,-1),new i("nde",-1,-1)],fr=[new i("dan",-1,-1),new i("tan",-1,-1),new i("den",-1,-1),new i("ten",-1,-1)],br=[new i("ndan",-1,-1),new i("nden",-1,-1)],wr=[new i("la",-1,-1),new i("le",-1,-1)],_r=[new i("ca",-1,-1),new i("ce",-1,-1)],kr=[new i("im",-1,-1),new i("um",-1,-1),new i("üm",-1,-1),new i("ım",-1,-1)],pr=[new i("sin",-1,-1),new i("sun",-1,-1),new i("sün",-1,-1),new i("sın",-1,-1)],gr=[new i("iz",-1,-1),new i("uz",-1,-1),new i("üz",-1,-1),new i("ız",-1,-1)],yr=[new i("siniz",-1,-1),new i("sunuz",-1,-1),new i("sünüz",-1,-1),new i("sınız",-1,-1)],zr=[new i("lar",-1,-1),new i("ler",-1,-1)],vr=[new i("niz",-1,-1),new i("nuz",-1,-1),new i("nüz",-1,-1),new i("nız",-1,-1)],hr=[new i("dir",-1,-1),new i("tir",-1,-1),new i("dur",-1,-1),new i("tur",-1,-1),new i("dür",-1,-1),new i("tür",-1,-1),new i("dır",-1,-1),new i("tır",-1,-1)],qr=[new i("casına",-1,-1),new i("cesine",-1,-1)],Cr=[new i("di",-1,-1),new i("ti",-1,-1),new i("dik",-1,-1),new i("tik",-1,-1),new i("duk",-1,-1),new i("tuk",-1,-1),new i("dük",-1,-1),new i("tük",-1,-1),new i("dık",-1,-1),new i("tık",-1,-1),new i("dim",-1,-1),new i("tim",-1,-1),new i("dum",-1,-1),new i("tum",-1,-1),new i("düm",-1,-1),new i("tüm",-1,-1),new i("dım",-1,-1),new i("tım",-1,-1),new i("din",-1,-1),new i("tin",-1,-1),new i("dun",-1,-1),new i("tun",-1,-1),new i("dün",-1,-1),new i("tün",-1,-1),new i("dın",-1,-1),new i("tın",-1,-1),new i("du",-1,-1),new i("tu",-1,-1),new i("dü",-1,-1),new i("tü",-1,-1),new i("dı",-1,-1),new i("tı",-1,-1)],Pr=[new i("sa",-1,-1),new i("se",-1,-1),new i("sak",-1,-1),new i("sek",-1,-1),new i("sam",-1,-1),new i("sem",-1,-1),new i("san",-1,-1),new i("sen",-1,-1)],Fr=[new i("miş",-1,-1),new i("muş",-1,-1),new i("müş",-1,-1),new i("mış",-1,-1)],Sr=[new i("b",-1,1),new i("c",-1,2),new i("d",-1,3),new i("ğ",-1,4)],Wr=[17,65,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,8,0,0,0,0,0,0,1],Lr=[1,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,8,0,0,0,0,0,0,1],xr=[1,64,16,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1],Ar=[17,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,130],Er=[1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1],jr=[17],Tr=[65],Zr=[65],Br=[["a",xr,97,305],["e",Ar,101,252],["ı",Er,97,305],["i",jr,101,105],["o",Tr,111,117],["ö",Zr,246,252],["u",Tr,111,117]],Dr=new e;this.setCurrent=function(r){Dr.setCurrent(r)},this.getCurrent=function(){return Dr.getCurrent()},this.stem=function(){return!!($()&&(Dr.limit_backward=Dr.cursor,Dr.cursor=Dr.limit,J(),Dr.cursor=Dr.limit,nr&&(R(),Dr.cursor=Dr.limit_backward,er())))}};return function(r){return"function"==typeof r.update?r.update(function(r){return n.setCurrent(r),n.stem(),n.getCurrent()}):(n.setCurrent(r),n.stem(),n.getCurrent())}}(),r.Pipeline.registerFunction(r.tr.stemmer,"stemmer-tr"),r.tr.stopWordFilter=r.generateStopWordFilter("acaba altmış altı ama ancak arada aslında ayrıca bana bazı belki ben benden beni benim beri beş bile bin bir biri birkaç birkez birçok birşey birşeyi biz bizden bize bizi bizim bu buna bunda bundan bunlar bunları bunların bunu bunun burada böyle böylece da daha dahi de defa değil diye diğer doksan dokuz dolayı dolayısıyla dört edecek eden ederek edilecek ediliyor edilmesi ediyor elli en etmesi etti ettiği ettiğini eğer gibi göre halen hangi hatta hem henüz hep hepsi her herhangi herkesin hiç hiçbir iki ile ilgili ise itibaren itibariyle için işte kadar karşın katrilyon kendi kendilerine kendini kendisi kendisine kendisini kez ki kim kimden kime kimi kimse kırk milyar milyon mu mü mı nasıl ne neden nedenle nerde nerede nereye niye niçin o olan olarak oldu olduklarını olduğu olduğunu olmadı olmadığı olmak olması olmayan olmaz olsa olsun olup olur olursa oluyor on ona ondan onlar onlardan onları onların onu onun otuz oysa pek rağmen sadece sanki sekiz seksen sen senden seni senin siz sizden sizi sizin tarafından trilyon tüm var vardı ve veya ya yani yapacak yapmak yaptı yaptıkları yaptığı yaptığını yapılan yapılması yapıyor yedi yerine yetmiş yine yirmi yoksa yüz zaten çok çünkü öyle üzere üç şey şeyden şeyi şeyler şu şuna şunda şundan şunları şunu şöyle".split(" ")),r.Pipeline.registerFunction(r.tr.stopWordFilter,"stopWordFilter-tr")}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/min/lunr.vi.min.js b/v2.7/assets/javascripts/lunr/min/lunr.vi.min.js new file mode 100644 index 000000000..22aed28c4 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/min/lunr.vi.min.js @@ -0,0 +1 @@ +!function(e,r){"function"==typeof define&&define.amd?define(r):"object"==typeof exports?module.exports=r():r()(e.lunr)}(this,function(){return function(e){if(void 0===e)throw new Error("Lunr is not present. Please include / require Lunr before this script.");if(void 0===e.stemmerSupport)throw new Error("Lunr stemmer support is not present. Please include / require Lunr stemmer support before this script.");e.vi=function(){this.pipeline.reset(),this.pipeline.add(e.vi.stopWordFilter,e.vi.trimmer)},e.vi.wordCharacters="[A-Za-ẓ̀͐́͑̉̃̓ÂâÊêÔôĂ-ăĐ-đƠ-ơƯ-ư]",e.vi.trimmer=e.trimmerSupport.generateTrimmer(e.vi.wordCharacters),e.Pipeline.registerFunction(e.vi.trimmer,"trimmer-vi"),e.vi.stopWordFilter=e.generateStopWordFilter("là cái nhưng mà".split(" "))}}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/lunr/tinyseg.js b/v2.7/assets/javascripts/lunr/tinyseg.js new file mode 100644 index 000000000..167fa6dd6 --- /dev/null +++ b/v2.7/assets/javascripts/lunr/tinyseg.js @@ -0,0 +1,206 @@ +/** + * export the module via AMD, CommonJS or as a browser global + * Export code from https://github.com/umdjs/umd/blob/master/returnExports.js + */ +;(function (root, factory) { + if (typeof define === 'function' && define.amd) { + // AMD. Register as an anonymous module. + define(factory) + } else if (typeof exports === 'object') { + /** + * Node. Does not work with strict CommonJS, but + * only CommonJS-like environments that support module.exports, + * like Node. + */ + module.exports = factory() + } else { + // Browser globals (root is window) + factory()(root.lunr); + } +}(this, function () { + /** + * Just return a value to define the module export. + * This example returns an object, but the module + * can return a function as the exported value. + */ + + return function(lunr) { + // TinySegmenter 0.1 -- Super compact Japanese tokenizer in Javascript + // (c) 2008 Taku Kudo + // TinySegmenter is freely distributable under the terms of a new BSD licence. + // For details, see http://chasen.org/~taku/software/TinySegmenter/LICENCE.txt + + function TinySegmenter() { + var patterns = { + "[一二三四五六七八九十百千万億兆]":"M", + "[一-龠々〆ヵヶ]":"H", + "[ぁ-ん]":"I", + "[ァ-ヴーｱ-ﾝﾞｰ]":"K", + "[a-zA-Zａ-ｚＡ-Ｚ]":"A", + "[0-9０-９]":"N" + } + this.chartype_ = []; + for (var i in patterns) { + var regexp = new RegExp(i); + this.chartype_.push([regexp, patterns[i]]); + } + + this.BIAS__ = -332 + this.BC1__ = {"HH":6,"II":2461,"KH":406,"OH":-1378}; + this.BC2__ = {"AA":-3267,"AI":2744,"AN":-878,"HH":-4070,"HM":-1711,"HN":4012,"HO":3761,"IA":1327,"IH":-1184,"II":-1332,"IK":1721,"IO":5492,"KI":3831,"KK":-8741,"MH":-3132,"MK":3334,"OO":-2920}; + this.BC3__ = {"HH":996,"HI":626,"HK":-721,"HN":-1307,"HO":-836,"IH":-301,"KK":2762,"MK":1079,"MM":4034,"OA":-1652,"OH":266}; + this.BP1__ = {"BB":295,"OB":304,"OO":-125,"UB":352}; + this.BP2__ = {"BO":60,"OO":-1762}; + this.BQ1__ = {"BHH":1150,"BHM":1521,"BII":-1158,"BIM":886,"BMH":1208,"BNH":449,"BOH":-91,"BOO":-2597,"OHI":451,"OIH":-296,"OKA":1851,"OKH":-1020,"OKK":904,"OOO":2965}; + this.BQ2__ = {"BHH":118,"BHI":-1159,"BHM":466,"BIH":-919,"BKK":-1720,"BKO":864,"OHH":-1139,"OHM":-181,"OIH":153,"UHI":-1146}; + this.BQ3__ = {"BHH":-792,"BHI":2664,"BII":-299,"BKI":419,"BMH":937,"BMM":8335,"BNN":998,"BOH":775,"OHH":2174,"OHM":439,"OII":280,"OKH":1798,"OKI":-793,"OKO":-2242,"OMH":-2402,"OOO":11699}; + this.BQ4__ = {"BHH":-3895,"BIH":3761,"BII":-4654,"BIK":1348,"BKK":-1806,"BMI":-3385,"BOO":-12396,"OAH":926,"OHH":266,"OHK":-2036,"ONN":-973}; + this.BW1__ = {",と":660,",同":727,"B1あ":1404,"B1同":542,"、と":660,"、同":727,"」と":1682,"あっ":1505,"いう":1743,"いっ":-2055,"いる":672,"うし":-4817,"うん":665,"から":3472,"がら":600,"こう":-790,"こと":2083,"こん":-1262,"さら":-4143,"さん":4573,"した":2641,"して":1104,"すで":-3399,"そこ":1977,"それ":-871,"たち":1122,"ため":601,"った":3463,"つい":-802,"てい":805,"てき":1249,"でき":1127,"です":3445,"では":844,"とい":-4915,"とみ":1922,"どこ":3887,"ない":5713,"なっ":3015,"など":7379,"なん":-1113,"にし":2468,"には":1498,"にも":1671,"に対":-912,"の一":-501,"の中":741,"ませ":2448,"まで":1711,"まま":2600,"まる":-2155,"やむ":-1947,"よっ":-2565,"れた":2369,"れで":-913,"をし":1860,"を見":731,"亡く":-1886,"京都":2558,"取り":-2784,"大き":-2604,"大阪":1497,"平方":-2314,"引き":-1336,"日本":-195,"本当":-2423,"毎日":-2113,"目指":-724,"Ｂ１あ":1404,"Ｂ１同":542,"｣と":1682}; + this.BW2__ = {"..":-11822,"11":-669,"――":-5730,"−−":-13175,"いう":-1609,"うか":2490,"かし":-1350,"かも":-602,"から":-7194,"かれ":4612,"がい":853,"がら":-3198,"きた":1941,"くな":-1597,"こと":-8392,"この":-4193,"させ":4533,"され":13168,"さん":-3977,"しい":-1819,"しか":-545,"した":5078,"して":972,"しな":939,"その":-3744,"たい":-1253,"たた":-662,"ただ":-3857,"たち":-786,"たと":1224,"たは":-939,"った":4589,"って":1647,"っと":-2094,"てい":6144,"てき":3640,"てく":2551,"ては":-3110,"ても":-3065,"でい":2666,"でき":-1528,"でし":-3828,"です":-4761,"でも":-4203,"とい":1890,"とこ":-1746,"とと":-2279,"との":720,"とみ":5168,"とも":-3941,"ない":-2488,"なが":-1313,"など":-6509,"なの":2614,"なん":3099,"にお":-1615,"にし":2748,"にな":2454,"によ":-7236,"に対":-14943,"に従":-4688,"に関":-11388,"のか":2093,"ので":-7059,"のに":-6041,"のの":-6125,"はい":1073,"はが":-1033,"はず":-2532,"ばれ":1813,"まし":-1316,"まで":-6621,"まれ":5409,"めて":-3153,"もい":2230,"もの":-10713,"らか":-944,"らし":-1611,"らに":-1897,"りし":651,"りま":1620,"れた":4270,"れて":849,"れば":4114,"ろう":6067,"われ":7901,"を通":-11877,"んだ":728,"んな":-4115,"一人":602,"一方":-1375,"一日":970,"一部":-1051,"上が":-4479,"会社":-1116,"出て":2163,"分の":-7758,"同党":970,"同日":-913,"大阪":-2471,"委員":-1250,"少な":-1050,"年度":-8669,"年間":-1626,"府県":-2363,"手権":-1982,"新聞":-4066,"日新":-722,"日本":-7068,"日米":3372,"曜日":-601,"朝鮮":-2355,"本人":-2697,"東京":-1543,"然と":-1384,"社会":-1276,"立て":-990,"第に":-1612,"米国":-4268,"１１":-669}; + this.BW3__ = {"あた":-2194,"あり":719,"ある":3846,"い.":-1185,"い。":-1185,"いい":5308,"いえ":2079,"いく":3029,"いた":2056,"いっ":1883,"いる":5600,"いわ":1527,"うち":1117,"うと":4798,"えと":1454,"か.":2857,"か。":2857,"かけ":-743,"かっ":-4098,"かに":-669,"から":6520,"かり":-2670,"が,":1816,"が、":1816,"がき":-4855,"がけ":-1127,"がっ":-913,"がら":-4977,"がり":-2064,"きた":1645,"けど":1374,"こと":7397,"この":1542,"ころ":-2757,"さい":-714,"さを":976,"し,":1557,"し、":1557,"しい":-3714,"した":3562,"して":1449,"しな":2608,"しま":1200,"す.":-1310,"す。":-1310,"する":6521,"ず,":3426,"ず、":3426,"ずに":841,"そう":428,"た.":8875,"た。":8875,"たい":-594,"たの":812,"たり":-1183,"たる":-853,"だ.":4098,"だ。":4098,"だっ":1004,"った":-4748,"って":300,"てい":6240,"てお":855,"ても":302,"です":1437,"でに":-1482,"では":2295,"とう":-1387,"とし":2266,"との":541,"とも":-3543,"どう":4664,"ない":1796,"なく":-903,"など":2135,"に,":-1021,"に、":-1021,"にし":1771,"にな":1906,"には":2644,"の,":-724,"の、":-724,"の子":-1000,"は,":1337,"は、":1337,"べき":2181,"まし":1113,"ます":6943,"まっ":-1549,"まで":6154,"まれ":-793,"らし":1479,"られ":6820,"るる":3818,"れ,":854,"れ、":854,"れた":1850,"れて":1375,"れば":-3246,"れる":1091,"われ":-605,"んだ":606,"んで":798,"カ月":990,"会議":860,"入り":1232,"大会":2217,"始め":1681,"市":965,"新聞":-5055,"日,":974,"日、":974,"社会":2024,"ｶ月":990}; + this.TC1__ = {"AAA":1093,"HHH":1029,"HHM":580,"HII":998,"HOH":-390,"HOM":-331,"IHI":1169,"IOH":-142,"IOI":-1015,"IOM":467,"MMH":187,"OOI":-1832}; + this.TC2__ = {"HHO":2088,"HII":-1023,"HMM":-1154,"IHI":-1965,"KKH":703,"OII":-2649}; + this.TC3__ = {"AAA":-294,"HHH":346,"HHI":-341,"HII":-1088,"HIK":731,"HOH":-1486,"IHH":128,"IHI":-3041,"IHO":-1935,"IIH":-825,"IIM":-1035,"IOI":-542,"KHH":-1216,"KKA":491,"KKH":-1217,"KOK":-1009,"MHH":-2694,"MHM":-457,"MHO":123,"MMH":-471,"NNH":-1689,"NNO":662,"OHO":-3393}; + this.TC4__ = {"HHH":-203,"HHI":1344,"HHK":365,"HHM":-122,"HHN":182,"HHO":669,"HIH":804,"HII":679,"HOH":446,"IHH":695,"IHO":-2324,"IIH":321,"III":1497,"IIO":656,"IOO":54,"KAK":4845,"KKA":3386,"KKK":3065,"MHH":-405,"MHI":201,"MMH":-241,"MMM":661,"MOM":841}; + this.TQ1__ = {"BHHH":-227,"BHHI":316,"BHIH":-132,"BIHH":60,"BIII":1595,"BNHH":-744,"BOHH":225,"BOOO":-908,"OAKK":482,"OHHH":281,"OHIH":249,"OIHI":200,"OIIH":-68}; + this.TQ2__ = {"BIHH":-1401,"BIII":-1033,"BKAK":-543,"BOOO":-5591}; + this.TQ3__ = {"BHHH":478,"BHHM":-1073,"BHIH":222,"BHII":-504,"BIIH":-116,"BIII":-105,"BMHI":-863,"BMHM":-464,"BOMH":620,"OHHH":346,"OHHI":1729,"OHII":997,"OHMH":481,"OIHH":623,"OIIH":1344,"OKAK":2792,"OKHH":587,"OKKA":679,"OOHH":110,"OOII":-685}; + this.TQ4__ = {"BHHH":-721,"BHHM":-3604,"BHII":-966,"BIIH":-607,"BIII":-2181,"OAAA":-2763,"OAKK":180,"OHHH":-294,"OHHI":2446,"OHHO":480,"OHIH":-1573,"OIHH":1935,"OIHI":-493,"OIIH":626,"OIII":-4007,"OKAK":-8156}; + this.TW1__ = {"につい":-4681,"東京都":2026}; + this.TW2__ = {"ある程":-2049,"いった":-1256,"ころが":-2434,"しょう":3873,"その後":-4430,"だって":-1049,"ていた":1833,"として":-4657,"ともに":-4517,"もので":1882,"一気に":-792,"初めて":-1512,"同時に":-8097,"大きな":-1255,"対して":-2721,"社会党":-3216}; + this.TW3__ = {"いただ":-1734,"してい":1314,"として":-4314,"につい":-5483,"にとっ":-5989,"に当た":-6247,"ので,":-727,"ので、":-727,"のもの":-600,"れから":-3752,"十二月":-2287}; + this.TW4__ = {"いう.":8576,"いう。":8576,"からな":-2348,"してい":2958,"たが,":1516,"たが、":1516,"ている":1538,"という":1349,"ました":5543,"ません":1097,"ようと":-4258,"よると":5865}; + this.UC1__ = {"A":484,"K":93,"M":645,"O":-505}; + this.UC2__ = {"A":819,"H":1059,"I":409,"M":3987,"N":5775,"O":646}; + this.UC3__ = {"A":-1370,"I":2311}; + this.UC4__ = {"A":-2643,"H":1809,"I":-1032,"K":-3450,"M":3565,"N":3876,"O":6646}; + this.UC5__ = {"H":313,"I":-1238,"K":-799,"M":539,"O":-831}; + this.UC6__ = {"H":-506,"I":-253,"K":87,"M":247,"O":-387}; + this.UP1__ = {"O":-214}; + this.UP2__ = {"B":69,"O":935}; + this.UP3__ = {"B":189}; + this.UQ1__ = {"BH":21,"BI":-12,"BK":-99,"BN":142,"BO":-56,"OH":-95,"OI":477,"OK":410,"OO":-2422}; + this.UQ2__ = {"BH":216,"BI":113,"OK":1759}; + this.UQ3__ = {"BA":-479,"BH":42,"BI":1913,"BK":-7198,"BM":3160,"BN":6427,"BO":14761,"OI":-827,"ON":-3212}; + this.UW1__ = {",":156,"、":156,"「":-463,"あ":-941,"う":-127,"が":-553,"き":121,"こ":505,"で":-201,"と":-547,"ど":-123,"に":-789,"の":-185,"は":-847,"も":-466,"や":-470,"よ":182,"ら":-292,"り":208,"れ":169,"を":-446,"ん":-137,"・":-135,"主":-402,"京":-268,"区":-912,"午":871,"国":-460,"大":561,"委":729,"市":-411,"日":-141,"理":361,"生":-408,"県":-386,"都":-718,"｢":-463,"･":-135}; + this.UW2__ = {",":-829,"、":-829,"〇":892,"「":-645,"」":3145,"あ":-538,"い":505,"う":134,"お":-502,"か":1454,"が":-856,"く":-412,"こ":1141,"さ":878,"ざ":540,"し":1529,"す":-675,"せ":300,"そ":-1011,"た":188,"だ":1837,"つ":-949,"て":-291,"で":-268,"と":-981,"ど":1273,"な":1063,"に":-1764,"の":130,"は":-409,"ひ":-1273,"べ":1261,"ま":600,"も":-1263,"や":-402,"よ":1639,"り":-579,"る":-694,"れ":571,"を":-2516,"ん":2095,"ア":-587,"カ":306,"キ":568,"ッ":831,"三":-758,"不":-2150,"世":-302,"中":-968,"主":-861,"事":492,"人":-123,"会":978,"保":362,"入":548,"初":-3025,"副":-1566,"北":-3414,"区":-422,"大":-1769,"天":-865,"太":-483,"子":-1519,"学":760,"実":1023,"小":-2009,"市":-813,"年":-1060,"強":1067,"手":-1519,"揺":-1033,"政":1522,"文":-1355,"新":-1682,"日":-1815,"明":-1462,"最":-630,"朝":-1843,"本":-1650,"東":-931,"果":-665,"次":-2378,"民":-180,"気":-1740,"理":752,"発":529,"目":-1584,"相":-242,"県":-1165,"立":-763,"第":810,"米":509,"自":-1353,"行":838,"西":-744,"見":-3874,"調":1010,"議":1198,"込":3041,"開":1758,"間":-1257,"｢":-645,"｣":3145,"ｯ":831,"ｱ":-587,"ｶ":306,"ｷ":568}; + this.UW3__ = {",":4889,"1":-800,"−":-1723,"、":4889,"々":-2311,"〇":5827,"」":2670,"〓":-3573,"あ":-2696,"い":1006,"う":2342,"え":1983,"お":-4864,"か":-1163,"が":3271,"く":1004,"け":388,"げ":401,"こ":-3552,"ご":-3116,"さ":-1058,"し":-395,"す":584,"せ":3685,"そ":-5228,"た":842,"ち":-521,"っ":-1444,"つ":-1081,"て":6167,"で":2318,"と":1691,"ど":-899,"な":-2788,"に":2745,"の":4056,"は":4555,"ひ":-2171,"ふ":-1798,"へ":1199,"ほ":-5516,"ま":-4384,"み":-120,"め":1205,"も":2323,"や":-788,"よ":-202,"ら":727,"り":649,"る":5905,"れ":2773,"わ":-1207,"を":6620,"ん":-518,"ア":551,"グ":1319,"ス":874,"ッ":-1350,"ト":521,"ム":1109,"ル":1591,"ロ":2201,"ン":278,"・":-3794,"一":-1619,"下":-1759,"世":-2087,"両":3815,"中":653,"主":-758,"予":-1193,"二":974,"人":2742,"今":792,"他":1889,"以":-1368,"低":811,"何":4265,"作":-361,"保":-2439,"元":4858,"党":3593,"全":1574,"公":-3030,"六":755,"共":-1880,"円":5807,"再":3095,"分":457,"初":2475,"別":1129,"前":2286,"副":4437,"力":365,"動":-949,"務":-1872,"化":1327,"北":-1038,"区":4646,"千":-2309,"午":-783,"協":-1006,"口":483,"右":1233,"各":3588,"合":-241,"同":3906,"和":-837,"員":4513,"国":642,"型":1389,"場":1219,"外":-241,"妻":2016,"学":-1356,"安":-423,"実":-1008,"家":1078,"小":-513,"少":-3102,"州":1155,"市":3197,"平":-1804,"年":2416,"広":-1030,"府":1605,"度":1452,"建":-2352,"当":-3885,"得":1905,"思":-1291,"性":1822,"戸":-488,"指":-3973,"政":-2013,"教":-1479,"数":3222,"文":-1489,"新":1764,"日":2099,"旧":5792,"昨":-661,"時":-1248,"曜":-951,"最":-937,"月":4125,"期":360,"李":3094,"村":364,"東":-805,"核":5156,"森":2438,"業":484,"氏":2613,"民":-1694,"決":-1073,"法":1868,"海":-495,"無":979,"物":461,"特":-3850,"生":-273,"用":914,"町":1215,"的":7313,"直":-1835,"省":792,"県":6293,"知":-1528,"私":4231,"税":401,"立":-960,"第":1201,"米":7767,"系":3066,"約":3663,"級":1384,"統":-4229,"総":1163,"線":1255,"者":6457,"能":725,"自":-2869,"英":785,"見":1044,"調":-562,"財":-733,"費":1777,"車":1835,"軍":1375,"込":-1504,"通":-1136,"選":-681,"郎":1026,"郡":4404,"部":1200,"金":2163,"長":421,"開":-1432,"間":1302,"関":-1282,"雨":2009,"電":-1045,"非":2066,"駅":1620,"１":-800,"｣":2670,"･":-3794,"ｯ":-1350,"ｱ":551,"ｸﾞ":1319,"ｽ":874,"ﾄ":521,"ﾑ":1109,"ﾙ":1591,"ﾛ":2201,"ﾝ":278}; + this.UW4__ = {",":3930,".":3508,"―":-4841,"、":3930,"。":3508,"〇":4999,"「":1895,"」":3798,"〓":-5156,"あ":4752,"い":-3435,"う":-640,"え":-2514,"お":2405,"か":530,"が":6006,"き":-4482,"ぎ":-3821,"く":-3788,"け":-4376,"げ":-4734,"こ":2255,"ご":1979,"さ":2864,"し":-843,"じ":-2506,"す":-731,"ず":1251,"せ":181,"そ":4091,"た":5034,"だ":5408,"ち":-3654,"っ":-5882,"つ":-1659,"て":3994,"で":7410,"と":4547,"な":5433,"に":6499,"ぬ":1853,"ね":1413,"の":7396,"は":8578,"ば":1940,"ひ":4249,"び":-4134,"ふ":1345,"へ":6665,"べ":-744,"ほ":1464,"ま":1051,"み":-2082,"む":-882,"め":-5046,"も":4169,"ゃ":-2666,"や":2795,"ょ":-1544,"よ":3351,"ら":-2922,"り":-9726,"る":-14896,"れ":-2613,"ろ":-4570,"わ":-1783,"を":13150,"ん":-2352,"カ":2145,"コ":1789,"セ":1287,"ッ":-724,"ト":-403,"メ":-1635,"ラ":-881,"リ":-541,"ル":-856,"ン":-3637,"・":-4371,"ー":-11870,"一":-2069,"中":2210,"予":782,"事":-190,"井":-1768,"人":1036,"以":544,"会":950,"体":-1286,"作":530,"側":4292,"先":601,"党":-2006,"共":-1212,"内":584,"円":788,"初":1347,"前":1623,"副":3879,"力":-302,"動":-740,"務":-2715,"化":776,"区":4517,"協":1013,"参":1555,"合":-1834,"和":-681,"員":-910,"器":-851,"回":1500,"国":-619,"園":-1200,"地":866,"場":-1410,"塁":-2094,"士":-1413,"多":1067,"大":571,"子":-4802,"学":-1397,"定":-1057,"寺":-809,"小":1910,"屋":-1328,"山":-1500,"島":-2056,"川":-2667,"市":2771,"年":374,"庁":-4556,"後":456,"性":553,"感":916,"所":-1566,"支":856,"改":787,"政":2182,"教":704,"文":522,"方":-856,"日":1798,"時":1829,"最":845,"月":-9066,"木":-485,"来":-442,"校":-360,"業":-1043,"氏":5388,"民":-2716,"気":-910,"沢":-939,"済":-543,"物":-735,"率":672,"球":-1267,"生":-1286,"産":-1101,"田":-2900,"町":1826,"的":2586,"目":922,"省":-3485,"県":2997,"空":-867,"立":-2112,"第":788,"米":2937,"系":786,"約":2171,"経":1146,"統":-1169,"総":940,"線":-994,"署":749,"者":2145,"能":-730,"般":-852,"行":-792,"規":792,"警":-1184,"議":-244,"谷":-1000,"賞":730,"車":-1481,"軍":1158,"輪":-1433,"込":-3370,"近":929,"道":-1291,"選":2596,"郎":-4866,"都":1192,"野":-1100,"銀":-2213,"長":357,"間":-2344,"院":-2297,"際":-2604,"電":-878,"領":-1659,"題":-792,"館":-1984,"首":1749,"高":2120,"｢":1895,"｣":3798,"･":-4371,"ｯ":-724,"ｰ":-11870,"ｶ":2145,"ｺ":1789,"ｾ":1287,"ﾄ":-403,"ﾒ":-1635,"ﾗ":-881,"ﾘ":-541,"ﾙ":-856,"ﾝ":-3637}; + this.UW5__ = {",":465,".":-299,"1":-514,"E2":-32768,"]":-2762,"、":465,"。":-299,"「":363,"あ":1655,"い":331,"う":-503,"え":1199,"お":527,"か":647,"が":-421,"き":1624,"ぎ":1971,"く":312,"げ":-983,"さ":-1537,"し":-1371,"す":-852,"だ":-1186,"ち":1093,"っ":52,"つ":921,"て":-18,"で":-850,"と":-127,"ど":1682,"な":-787,"に":-1224,"の":-635,"は":-578,"べ":1001,"み":502,"め":865,"ゃ":3350,"ょ":854,"り":-208,"る":429,"れ":504,"わ":419,"を":-1264,"ん":327,"イ":241,"ル":451,"ン":-343,"中":-871,"京":722,"会":-1153,"党":-654,"務":3519,"区":-901,"告":848,"員":2104,"大":-1296,"学":-548,"定":1785,"嵐":-1304,"市":-2991,"席":921,"年":1763,"思":872,"所":-814,"挙":1618,"新":-1682,"日":218,"月":-4353,"査":932,"格":1356,"機":-1508,"氏":-1347,"田":240,"町":-3912,"的":-3149,"相":1319,"省":-1052,"県":-4003,"研":-997,"社":-278,"空":-813,"統":1955,"者":-2233,"表":663,"語":-1073,"議":1219,"選":-1018,"郎":-368,"長":786,"間":1191,"題":2368,"館":-689,"１":-514,"Ｅ２":-32768,"｢":363,"ｲ":241,"ﾙ":451,"ﾝ":-343}; + this.UW6__ = {",":227,".":808,"1":-270,"E1":306,"、":227,"。":808,"あ":-307,"う":189,"か":241,"が":-73,"く":-121,"こ":-200,"じ":1782,"す":383,"た":-428,"っ":573,"て":-1014,"で":101,"と":-105,"な":-253,"に":-149,"の":-417,"は":-236,"も":-206,"り":187,"る":-135,"を":195,"ル":-673,"ン":-496,"一":-277,"中":201,"件":-800,"会":624,"前":302,"区":1792,"員":-1212,"委":798,"学":-960,"市":887,"広":-695,"後":535,"業":-697,"相":753,"社":-507,"福":974,"空":-822,"者":1811,"連":463,"郎":1082,"１":-270,"Ｅ１":306,"ﾙ":-673,"ﾝ":-496}; + + return this; + } + TinySegmenter.prototype.ctype_ = function(str) { + for (var i in this.chartype_) { + if (str.match(this.chartype_[i][0])) { + return this.chartype_[i][1]; + } + } + return "O"; + } + + TinySegmenter.prototype.ts_ = function(v) { + if (v) { return v; } + return 0; + } + + TinySegmenter.prototype.segment = function(input) { + if (input == null || input == undefined || input == "") { + return []; + } + var result = []; + var seg = ["B3","B2","B1"]; + var ctype = ["O","O","O"]; + var o = input.split(""); + for (i = 0; i < o.length; ++i) { + seg.push(o[i]); + ctype.push(this.ctype_(o[i])) + } + seg.push("E1"); + seg.push("E2"); + seg.push("E3"); + ctype.push("O"); + ctype.push("O"); + ctype.push("O"); + var word = seg[3]; + var p1 = "U"; + var p2 = "U"; + var p3 = "U"; + for (var i = 4; i < seg.length - 3; ++i) { + var score = this.BIAS__; + var w1 = seg[i-3]; + var w2 = seg[i-2]; + var w3 = seg[i-1]; + var w4 = seg[i]; + var w5 = seg[i+1]; + var w6 = seg[i+2]; + var c1 = ctype[i-3]; + var c2 = ctype[i-2]; + var c3 = ctype[i-1]; + var c4 = ctype[i]; + var c5 = ctype[i+1]; + var c6 = ctype[i+2]; + score += this.ts_(this.UP1__[p1]); + score += this.ts_(this.UP2__[p2]); + score += this.ts_(this.UP3__[p3]); + score += this.ts_(this.BP1__[p1 + p2]); + score += this.ts_(this.BP2__[p2 + p3]); + score += this.ts_(this.UW1__[w1]); + score += this.ts_(this.UW2__[w2]); + score += this.ts_(this.UW3__[w3]); + score += this.ts_(this.UW4__[w4]); + score += this.ts_(this.UW5__[w5]); + score += this.ts_(this.UW6__[w6]); + score += this.ts_(this.BW1__[w2 + w3]); + score += this.ts_(this.BW2__[w3 + w4]); + score += this.ts_(this.BW3__[w4 + w5]); + score += this.ts_(this.TW1__[w1 + w2 + w3]); + score += this.ts_(this.TW2__[w2 + w3 + w4]); + score += this.ts_(this.TW3__[w3 + w4 + w5]); + score += this.ts_(this.TW4__[w4 + w5 + w6]); + score += this.ts_(this.UC1__[c1]); + score += this.ts_(this.UC2__[c2]); + score += this.ts_(this.UC3__[c3]); + score += this.ts_(this.UC4__[c4]); + score += this.ts_(this.UC5__[c5]); + score += this.ts_(this.UC6__[c6]); + score += this.ts_(this.BC1__[c2 + c3]); + score += this.ts_(this.BC2__[c3 + c4]); + score += this.ts_(this.BC3__[c4 + c5]); + score += this.ts_(this.TC1__[c1 + c2 + c3]); + score += this.ts_(this.TC2__[c2 + c3 + c4]); + score += this.ts_(this.TC3__[c3 + c4 + c5]); + score += this.ts_(this.TC4__[c4 + c5 + c6]); + // score += this.ts_(this.TC5__[c4 + c5 + c6]); + score += this.ts_(this.UQ1__[p1 + c1]); + score += this.ts_(this.UQ2__[p2 + c2]); + score += this.ts_(this.UQ3__[p3 + c3]); + score += this.ts_(this.BQ1__[p2 + c2 + c3]); + score += this.ts_(this.BQ2__[p2 + c3 + c4]); + score += this.ts_(this.BQ3__[p3 + c2 + c3]); + score += this.ts_(this.BQ4__[p3 + c3 + c4]); + score += this.ts_(this.TQ1__[p2 + c1 + c2 + c3]); + score += this.ts_(this.TQ2__[p2 + c2 + c3 + c4]); + score += this.ts_(this.TQ3__[p3 + c1 + c2 + c3]); + score += this.ts_(this.TQ4__[p3 + c2 + c3 + c4]); + var p = "O"; + if (score > 0) { + result.push(word); + word = ""; + p = "B"; + } + p1 = p2; + p2 = p3; + p3 = p; + word += seg[i]; + } + result.push(word); + + return result; + } + + lunr.TinySegmenter = TinySegmenter; + }; + +})); \ No newline at end of file diff --git a/v2.7/assets/javascripts/version-select.js b/v2.7/assets/javascripts/version-select.js new file mode 100644 index 000000000..386c00484 --- /dev/null +++ b/v2.7/assets/javascripts/version-select.js @@ -0,0 +1,45 @@ +document.addEventListener('DOMContentLoaded', () => { + const verSelDom = document.querySelector('#version-select') + const verSelListDom = verSelDom.querySelector('.mdc-list') + + const baseURL = verSelDom.dataset.baseUrl + const absBaseURL = new URL(baseURL, window.location.href) + var curDocVer = absBaseURL.pathname.match(/([^\/]*)\/?$/)[1] + curDocVer = curDocVer || "latest" + + function updateVersionSelectDOM(verItems) { + verItems.forEach((verItem) => { + var rippleSpan = document.createElement('span') + rippleSpan.classList.add("mdc-list-item__ripple") + var textSpan = document.createElement('span') + textSpan.classList.add("mdc-list-item__text") + textSpan.innerHTML = verItem.title + + var verSelListItem = document.createElement('li'); + verSelListItem.setAttribute("role", "option") + verSelListItem.setAttribute("data-value", verItem.version) + verSelListItem.classList.add("mdc-list-item") + if (verItem.version == curDocVer || verItem.aliases.includes(curDocVer)) { + verSelListItem.classList.add("mdc-list-item--selected") + } + verSelListItem.appendChild(rippleSpan) + verSelListItem.appendChild(textSpan) + verSelListDom.appendChild(verSelListItem) + }) + } + + function setupVersionSelectEventHandlers() { + const verSelMDC = new mdc.select.MDCSelect(verSelDom); + verSelMDC.listen('MDCSelect:change', () => { + const chosenDocVer = verSelMDC.value + const chosenDocURL = new URL("../" + chosenDocVer, absBaseURL) + window.location.href = chosenDocURL + }); + } + + const verJSONURL = new URL(baseURL + "/../versions.json", window.location.href) + fetch(verJSONURL) + .then(response => response.json()) + .then(updateVersionSelectDOM) + .then(setupVersionSelectEventHandlers) +}); \ No newline at end of file diff --git a/v2.7/assets/javascripts/workers/search.d351de03.min.js b/v2.7/assets/javascripts/workers/search.d351de03.min.js new file mode 100644 index 000000000..84aa5bd5c --- /dev/null +++ b/v2.7/assets/javascripts/workers/search.d351de03.min.js @@ -0,0 +1,61 @@ +(()=>{var le=Object.create,U=Object.defineProperty;var he=Object.getOwnPropertyDescriptor;var de=Object.getOwnPropertyNames;var fe=Object.getPrototypeOf,pe=Object.prototype.hasOwnProperty;var ge=t=>U(t,"__esModule",{value:!0});var q=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports);var ye=(t,e,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of de(e))!pe.call(t,n)&&n!=="default"&&U(t,n,{get:()=>e[n],enumerable:!(r=he(e,n))||r.enumerable});return t},Y=t=>ye(ge(U(t!=null?le(fe(t)):{},"default",t&&t.__esModule&&"default"in t?{get:()=>t.default,enumerable:!0}:{value:t,enumerable:!0})),t);var z=(t,e,r)=>new Promise((n,i)=>{var s=u=>{try{a(r.next(u))}catch(c){i(c)}},o=u=>{try{a(r.throw(u))}catch(c){i(c)}},a=u=>u.done?n(u.value):Promise.resolve(u.value).then(s,o);a((r=r.apply(t,e)).next())});var X=q((G,J)=>{(function(){var t=function(e){var r=new t.Builder;return r.pipeline.add(t.trimmer,t.stopWordFilter,t.stemmer),r.searchPipeline.add(t.stemmer),e.call(r,r),r.build()};t.version="2.3.9";t.utils={},t.utils.warn=function(e){return function(r){e.console&&console.warn&&console.warn(r)}}(this),t.utils.asString=function(e){return e==null?"":e.toString()},t.utils.clone=function(e){if(e==null)return e;for(var r=Object.create(null),n=Object.keys(e),i=0;i0){var d=t.utils.clone(r)||{};d.position=[a,c],d.index=s.length,s.push(new t.Token(n.slice(a,o),d))}a=o+1}}return s},t.tokenizer.separator=/[\s\-]+/;t.Pipeline=function(){this._stack=[]},t.Pipeline.registeredFunctions=Object.create(null),t.Pipeline.registerFunction=function(e,r){r in this.registeredFunctions&&t.utils.warn("Overwriting existing registered function: "+r),e.label=r,t.Pipeline.registeredFunctions[e.label]=e},t.Pipeline.warnIfFunctionNotRegistered=function(e){var r=e.label&&e.label in this.registeredFunctions;r||t.utils.warn(`Function is not registered with pipeline. This may cause problems when serialising the index. +`,e)},t.Pipeline.load=function(e){var r=new t.Pipeline;return e.forEach(function(n){var i=t.Pipeline.registeredFunctions[n];if(i)r.add(i);else throw new Error("Cannot load unregistered function: "+n)}),r},t.Pipeline.prototype.add=function(){var e=Array.prototype.slice.call(arguments);e.forEach(function(r){t.Pipeline.warnIfFunctionNotRegistered(r),this._stack.push(r)},this)},t.Pipeline.prototype.after=function(e,r){t.Pipeline.warnIfFunctionNotRegistered(r);var n=this._stack.indexOf(e);if(n==-1)throw new Error("Cannot find existingFn");n=n+1,this._stack.splice(n,0,r)},t.Pipeline.prototype.before=function(e,r){t.Pipeline.warnIfFunctionNotRegistered(r);var n=this._stack.indexOf(e);if(n==-1)throw new Error("Cannot find existingFn");this._stack.splice(n,0,r)},t.Pipeline.prototype.remove=function(e){var r=this._stack.indexOf(e);r!=-1&&this._stack.splice(r,1)},t.Pipeline.prototype.run=function(e){for(var r=this._stack.length,n=0;n1&&(oe&&(n=s),o!=e);)i=n-r,s=r+Math.floor(i/2),o=this.elements[s*2];if(o==e||o>e)return s*2;if(ou?d+=2:a==u&&(r+=n[c+1]*i[d+1],c+=2,d+=2);return r},t.Vector.prototype.similarity=function(e){return this.dot(e)/this.magnitude()||0},t.Vector.prototype.toArray=function(){for(var e=new Array(this.elements.length/2),r=1,n=0;r0){var o=s.str.charAt(0),a;o in s.node.edges?a=s.node.edges[o]:(a=new t.TokenSet,s.node.edges[o]=a),s.str.length==1&&(a.final=!0),i.push({node:a,editsRemaining:s.editsRemaining,str:s.str.slice(1)})}if(s.editsRemaining!=0){if("*"in s.node.edges)var u=s.node.edges["*"];else{var u=new t.TokenSet;s.node.edges["*"]=u}if(s.str.length==0&&(u.final=!0),i.push({node:u,editsRemaining:s.editsRemaining-1,str:s.str}),s.str.length>1&&i.push({node:s.node,editsRemaining:s.editsRemaining-1,str:s.str.slice(1)}),s.str.length==1&&(s.node.final=!0),s.str.length>=1){if("*"in s.node.edges)var c=s.node.edges["*"];else{var c=new t.TokenSet;s.node.edges["*"]=c}s.str.length==1&&(c.final=!0),i.push({node:c,editsRemaining:s.editsRemaining-1,str:s.str.slice(1)})}if(s.str.length>1){var d=s.str.charAt(0),y=s.str.charAt(1),p;y in s.node.edges?p=s.node.edges[y]:(p=new t.TokenSet,s.node.edges[y]=p),s.str.length==1&&(p.final=!0),i.push({node:p,editsRemaining:s.editsRemaining-1,str:d+s.str.slice(2)})}}}return n},t.TokenSet.fromString=function(e){for(var r=new t.TokenSet,n=r,i=0,s=e.length;i=e;r--){var n=this.uncheckedNodes[r],i=n.child.toString();i in this.minimizedNodes?n.parent.edges[n.char]=this.minimizedNodes[i]:(n.child._str=i,this.minimizedNodes[i]=n.child),this.uncheckedNodes.pop()}};t.Index=function(e){this.invertedIndex=e.invertedIndex,this.fieldVectors=e.fieldVectors,this.tokenSet=e.tokenSet,this.fields=e.fields,this.pipeline=e.pipeline},t.Index.prototype.search=function(e){return this.query(function(r){var n=new t.QueryParser(e,r);n.parse()})},t.Index.prototype.query=function(e){for(var r=new t.Query(this.fields),n=Object.create(null),i=Object.create(null),s=Object.create(null),o=Object.create(null),a=Object.create(null),u=0;u1?this._b=1:this._b=e},t.Builder.prototype.k1=function(e){this._k1=e},t.Builder.prototype.add=function(e,r){var n=e[this._ref],i=Object.keys(this._fields);this._documents[n]=r||{},this.documentCount+=1;for(var s=0;s=this.length)return t.QueryLexer.EOS;var e=this.str.charAt(this.pos);return this.pos+=1,e},t.QueryLexer.prototype.width=function(){return this.pos-this.start},t.QueryLexer.prototype.ignore=function(){this.start==this.pos&&(this.pos+=1),this.start=this.pos},t.QueryLexer.prototype.backup=function(){this.pos-=1},t.QueryLexer.prototype.acceptDigitRun=function(){var e,r;do e=this.next(),r=e.charCodeAt(0);while(r>47&&r<58);e!=t.QueryLexer.EOS&&this.backup()},t.QueryLexer.prototype.more=function(){return this.pos1&&(e.backup(),e.emit(t.QueryLexer.TERM)),e.ignore(),e.more())return t.QueryLexer.lexText},t.QueryLexer.lexEditDistance=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(t.QueryLexer.EDIT_DISTANCE),t.QueryLexer.lexText},t.QueryLexer.lexBoost=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(t.QueryLexer.BOOST),t.QueryLexer.lexText},t.QueryLexer.lexEOS=function(e){e.width()>0&&e.emit(t.QueryLexer.TERM)},t.QueryLexer.termSeparator=t.tokenizer.separator,t.QueryLexer.lexText=function(e){for(;;){var r=e.next();if(r==t.QueryLexer.EOS)return t.QueryLexer.lexEOS;if(r.charCodeAt(0)==92){e.escapeCharacter();continue}if(r==":")return t.QueryLexer.lexField;if(r=="~")return e.backup(),e.width()>0&&e.emit(t.QueryLexer.TERM),t.QueryLexer.lexEditDistance;if(r=="^")return e.backup(),e.width()>0&&e.emit(t.QueryLexer.TERM),t.QueryLexer.lexBoost;if(r=="+"&&e.width()===1||r=="-"&&e.width()===1)return e.emit(t.QueryLexer.PRESENCE),t.QueryLexer.lexText;if(r.match(t.QueryLexer.termSeparator))return t.QueryLexer.lexTerm}},t.QueryParser=function(e,r){this.lexer=new t.QueryLexer(e),this.query=r,this.currentClause={},this.lexemeIdx=0},t.QueryParser.prototype.parse=function(){this.lexer.run(),this.lexemes=this.lexer.lexemes;for(var e=t.QueryParser.parseClause;e;)e=e(this);return this.query},t.QueryParser.prototype.peekLexeme=function(){return this.lexemes[this.lexemeIdx]},t.QueryParser.prototype.consumeLexeme=function(){var e=this.peekLexeme();return this.lexemeIdx+=1,e},t.QueryParser.prototype.nextClause=function(){var e=this.currentClause;this.query.clause(e),this.currentClause={}},t.QueryParser.parseClause=function(e){var r=e.peekLexeme();if(r!=null)switch(r.type){case t.QueryLexer.PRESENCE:return t.QueryParser.parsePresence;case t.QueryLexer.FIELD:return t.QueryParser.parseField;case t.QueryLexer.TERM:return t.QueryParser.parseTerm;default:var n="expected either a field or a term, found "+r.type;throw r.str.length>=1&&(n+=" with value '"+r.str+"'"),new t.QueryParseError(n,r.start,r.end)}},t.QueryParser.parsePresence=function(e){var r=e.consumeLexeme();if(r!=null){switch(r.str){case"-":e.currentClause.presence=t.Query.presence.PROHIBITED;break;case"+":e.currentClause.presence=t.Query.presence.REQUIRED;break;default:var n="unrecognised presence operator'"+r.str+"'";throw new t.QueryParseError(n,r.start,r.end)}var i=e.peekLexeme();if(i==null){var n="expecting term or field, found nothing";throw new t.QueryParseError(n,r.start,r.end)}switch(i.type){case t.QueryLexer.FIELD:return t.QueryParser.parseField;case t.QueryLexer.TERM:return t.QueryParser.parseTerm;default:var n="expecting term or field, found '"+i.type+"'";throw new t.QueryParseError(n,i.start,i.end)}}},t.QueryParser.parseField=function(e){var r=e.consumeLexeme();if(r!=null){if(e.query.allFields.indexOf(r.str)==-1){var n=e.query.allFields.map(function(o){return"'"+o+"'"}).join(", "),i="unrecognised field '"+r.str+"', possible fields: "+n;throw new t.QueryParseError(i,r.start,r.end)}e.currentClause.fields=[r.str];var s=e.peekLexeme();if(s==null){var i="expecting term, found nothing";throw new t.QueryParseError(i,r.start,r.end)}switch(s.type){case t.QueryLexer.TERM:return t.QueryParser.parseTerm;default:var i="expecting term, found '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}}},t.QueryParser.parseTerm=function(e){var r=e.consumeLexeme();if(r!=null){e.currentClause.term=r.str.toLowerCase(),r.str.indexOf("*")!=-1&&(e.currentClause.usePipeline=!1);var n=e.peekLexeme();if(n==null){e.nextClause();return}switch(n.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+n.type+"'";throw new t.QueryParseError(i,n.start,n.end)}}},t.QueryParser.parseEditDistance=function(e){var r=e.consumeLexeme();if(r!=null){var n=parseInt(r.str,10);if(isNaN(n)){var i="edit distance must be numeric";throw new t.QueryParseError(i,r.start,r.end)}e.currentClause.editDistance=n;var s=e.peekLexeme();if(s==null){e.nextClause();return}switch(s.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}}},t.QueryParser.parseBoost=function(e){var r=e.consumeLexeme();if(r!=null){var n=parseInt(r.str,10);if(isNaN(n)){var i="boost must be numeric";throw new t.QueryParseError(i,r.start,r.end)}e.currentClause.boost=n;var s=e.peekLexeme();if(s==null){e.nextClause();return}switch(s.type){case t.QueryLexer.TERM:return e.nextClause(),t.QueryParser.parseTerm;case t.QueryLexer.FIELD:return e.nextClause(),t.QueryParser.parseField;case t.QueryLexer.EDIT_DISTANCE:return t.QueryParser.parseEditDistance;case t.QueryLexer.BOOST:return t.QueryParser.parseBoost;case t.QueryLexer.PRESENCE:return e.nextClause(),t.QueryParser.parsePresence;default:var i="Unexpected lexeme type '"+s.type+"'";throw new t.QueryParseError(i,s.start,s.end)}}},function(e,r){typeof define=="function"&&define.amd?define(r):typeof G=="object"?J.exports=r():e.lunr=r()}(this,function(){return t})})()});var K=q((we,Z)=>{"use strict";var me=/["'&<>]/;Z.exports=ve;function ve(t){var e=""+t,r=me.exec(e);if(!r)return e;var n,i="",s=0,o=0;for(s=r.index;s`${i}${s}`;return n=>{n=n.replace(/[\s*+\-:~^]+/g," ").trim();let i=new RegExp(`(^|${t.separator})(${n.replace(/[|\\{}()[\]^$+*?.-]/g,"\\$&").replace(e,"|")})`,"img");return s=>s.replace(i,r).replace(/<\/mark>(\s+)]*>/img,"$1")}}function ne(t){let e=new lunr.Query(["title","text"]);return new lunr.QueryParser(t,e).parse(),e.clauses}function ie(t,e){let r=new Set(t),n={};for(let i=0;i!n.has(i)))]}var W=class{constructor({config:e,docs:r,pipeline:n,index:i}){this.documents=te(r),this.highlight=re(e),lunr.tokenizer.separator=new RegExp(e.separator),typeof i=="undefined"?this.index=lunr(function(){e.lang.length===1&&e.lang[0]!=="en"?this.use(lunr[e.lang[0]]):e.lang.length>1&&this.use(lunr.multiLanguage(...e.lang));let s=xe(["trimmer","stopWordFilter","stemmer"],n);for(let o of e.lang.map(a=>a==="en"?lunr:lunr[a]))for(let a of s)this.pipeline.remove(o[a]),this.searchPipeline.remove(o[a]);this.field("title",{boost:1e3}),this.field("text"),this.ref("location");for(let o of r)this.add(o)}):this.index=lunr.Index.load(i)}search(e){if(e)try{let r=this.highlight(e),n=ne(e).filter(s=>s.presence!==lunr.Query.presence.PROHIBITED);return[...this.index.search(`${e}*`).reduce((s,{ref:o,score:a,matchData:u})=>{let c=this.documents.get(o);if(typeof c!="undefined"){let{location:d,title:y,text:p,parent:b}=c,m=ie(n,Object.keys(u.metadata)),Q=+!b+ +Object.values(m).every(f=>f);s.push({location:d,title:r(y),text:r(p),score:a*(1+Q),terms:m})}return s},[]).sort((s,o)=>o.score-s.score).reduce((s,o)=>{let a=this.documents.get(o.location);if(typeof a!="undefined"){let u="parent"in a?a.parent.location:a.location;s.set(u,[...s.get(u)||[],o])}return s},new Map).values()]}catch(r){console.warn(`Invalid query: ${e} \u2013 see https://bit.ly/2s3ChXG`)}return[]}};var R;(function(i){i[i.SETUP=0]="SETUP",i[i.READY=1]="READY",i[i.QUERY=2]="QUERY",i[i.RESULT=3]="RESULT"})(R||(R={}));var H;function Se(t){return z(this,null,function*(){let e="../lunr";if(typeof parent!="undefined"&&"IFrameWorker"in parent){let n=document.querySelector("script[src]"),[i]=n.src.split("/worker");e=e.replace("..",i)}let r=[];for(let n of t.lang)n==="ja"&&r.push(`${e}/tinyseg.js`),n!=="en"&&r.push(`${e}/min/lunr.${n}.min.js`);t.lang.length>1&&r.push(`${e}/min/lunr.multi.min.js`),r.length&&(yield importScripts(`${e}/min/lunr.stemmer.support.min.js`,...r))})}function Qe(t){return z(this,null,function*(){switch(t.type){case R.SETUP:return yield Se(t.data.config),H=new W(t.data),{type:R.READY};case R.QUERY:return{type:R.RESULT,data:H?H.search(t.data):[]};default:throw new TypeError("Invalid message type")}})}self.lunr=se.default;addEventListener("message",t=>z(void 0,null,function*(){postMessage(yield Qe(t.data))}));})(); +/*! + * escape-html + * Copyright(c) 2012-2013 TJ Holowaychuk + * Copyright(c) 2015 Andreas Lubbe + * Copyright(c) 2015 Tiancheng "Timothy" Gu + * MIT Licensed + */ +/*! + * lunr.Builder + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.Index + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.Pipeline + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.Set + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.TokenSet + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.Vector + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.stemmer + * Copyright (C) 2020 Oliver Nightingale + * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt + */ +/*! + * lunr.stopWordFilter + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.tokenizer + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.trimmer + * Copyright (C) 2020 Oliver Nightingale + */ +/*! + * lunr.utils + * Copyright (C) 2020 Oliver Nightingale + */ +/** + * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9 + * Copyright (C) 2020 Oliver Nightingale + * @license MIT + */ +//# sourceMappingURL=search.d351de03.min.js.map + diff --git a/v2.7/assets/javascripts/workers/search.d351de03.min.js.map b/v2.7/assets/javascripts/workers/search.d351de03.min.js.map new file mode 100644 index 000000000..6dc44fdc6 --- /dev/null +++ b/v2.7/assets/javascripts/workers/search.d351de03.min.js.map @@ -0,0 +1,7 @@ +{ + "version": 3, + "sources": ["node_modules/lunr/lunr.js", "node_modules/escape-html/index.js", "src/assets/javascripts/integrations/search/worker/main/index.ts", "src/assets/javascripts/integrations/search/document/index.ts", "src/assets/javascripts/integrations/search/highlighter/index.ts", "src/assets/javascripts/integrations/search/query/_/index.ts", "src/assets/javascripts/integrations/search/_/index.ts", "src/assets/javascripts/integrations/search/worker/message/index.ts"], + "sourcesContent": ["/**\n * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9\n * Copyright (C) 2020 Oliver Nightingale\n * @license MIT\n */\n\n;(function(){\n\n/**\n * A convenience function for configuring and constructing\n * a new lunr Index.\n *\n * A lunr.Builder instance is created and the pipeline setup\n * with a trimmer, stop word filter and stemmer.\n *\n * This builder object is yielded to the configuration function\n * that is passed as a parameter, allowing the list of fields\n * and other builder parameters to be customised.\n *\n * All documents _must_ be added within the passed config function.\n *\n * @example\n * var idx = lunr(function () {\n * this.field('title')\n * this.field('body')\n * this.ref('id')\n *\n * documents.forEach(function (doc) {\n * this.add(doc)\n * }, this)\n * })\n *\n * @see {@link lunr.Builder}\n * @see {@link lunr.Pipeline}\n * @see {@link lunr.trimmer}\n * @see {@link lunr.stopWordFilter}\n * @see {@link lunr.stemmer}\n * @namespace {function} lunr\n */\nvar lunr = function (config) {\n var builder = new lunr.Builder\n\n builder.pipeline.add(\n lunr.trimmer,\n lunr.stopWordFilter,\n lunr.stemmer\n )\n\n builder.searchPipeline.add(\n lunr.stemmer\n )\n\n config.call(builder, builder)\n return builder.build()\n}\n\nlunr.version = \"2.3.9\"\n/*!\n * lunr.utils\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * A namespace containing utils for the rest of the lunr library\n * @namespace lunr.utils\n */\nlunr.utils = {}\n\n/**\n * Print a warning message to the console.\n *\n * @param {String} message The message to be printed.\n * @memberOf lunr.utils\n * @function\n */\nlunr.utils.warn = (function (global) {\n /* eslint-disable no-console */\n return function (message) {\n if (global.console && console.warn) {\n console.warn(message)\n }\n }\n /* eslint-enable no-console */\n})(this)\n\n/**\n * Convert an object to a string.\n *\n * In the case of `null` and `undefined` the function returns\n * the empty string, in all other cases the result of calling\n * `toString` on the passed object is returned.\n *\n * @param {Any} obj The object to convert to a string.\n * @return {String} string representation of the passed object.\n * @memberOf lunr.utils\n */\nlunr.utils.asString = function (obj) {\n if (obj === void 0 || obj === null) {\n return \"\"\n } else {\n return obj.toString()\n }\n}\n\n/**\n * Clones an object.\n *\n * Will create a copy of an existing object such that any mutations\n * on the copy cannot affect the original.\n *\n * Only shallow objects are supported, passing a nested object to this\n * function will cause a TypeError.\n *\n * Objects with primitives, and arrays of primitives are supported.\n *\n * @param {Object} obj The object to clone.\n * @return {Object} a clone of the passed object.\n * @throws {TypeError} when a nested object is passed.\n * @memberOf Utils\n */\nlunr.utils.clone = function (obj) {\n if (obj === null || obj === undefined) {\n return obj\n }\n\n var clone = Object.create(null),\n keys = Object.keys(obj)\n\n for (var i = 0; i < keys.length; i++) {\n var key = keys[i],\n val = obj[key]\n\n if (Array.isArray(val)) {\n clone[key] = val.slice()\n continue\n }\n\n if (typeof val === 'string' ||\n typeof val === 'number' ||\n typeof val === 'boolean') {\n clone[key] = val\n continue\n }\n\n throw new TypeError(\"clone is not deep and does not support nested objects\")\n }\n\n return clone\n}\nlunr.FieldRef = function (docRef, fieldName, stringValue) {\n this.docRef = docRef\n this.fieldName = fieldName\n this._stringValue = stringValue\n}\n\nlunr.FieldRef.joiner = \"/\"\n\nlunr.FieldRef.fromString = function (s) {\n var n = s.indexOf(lunr.FieldRef.joiner)\n\n if (n === -1) {\n throw \"malformed field ref string\"\n }\n\n var fieldRef = s.slice(0, n),\n docRef = s.slice(n + 1)\n\n return new lunr.FieldRef (docRef, fieldRef, s)\n}\n\nlunr.FieldRef.prototype.toString = function () {\n if (this._stringValue == undefined) {\n this._stringValue = this.fieldName + lunr.FieldRef.joiner + this.docRef\n }\n\n return this._stringValue\n}\n/*!\n * lunr.Set\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * A lunr set.\n *\n * @constructor\n */\nlunr.Set = function (elements) {\n this.elements = Object.create(null)\n\n if (elements) {\n this.length = elements.length\n\n for (var i = 0; i < this.length; i++) {\n this.elements[elements[i]] = true\n }\n } else {\n this.length = 0\n }\n}\n\n/**\n * A complete set that contains all elements.\n *\n * @static\n * @readonly\n * @type {lunr.Set}\n */\nlunr.Set.complete = {\n intersect: function (other) {\n return other\n },\n\n union: function () {\n return this\n },\n\n contains: function () {\n return true\n }\n}\n\n/**\n * An empty set that contains no elements.\n *\n * @static\n * @readonly\n * @type {lunr.Set}\n */\nlunr.Set.empty = {\n intersect: function () {\n return this\n },\n\n union: function (other) {\n return other\n },\n\n contains: function () {\n return false\n }\n}\n\n/**\n * Returns true if this set contains the specified object.\n *\n * @param {object} object - Object whose presence in this set is to be tested.\n * @returns {boolean} - True if this set contains the specified object.\n */\nlunr.Set.prototype.contains = function (object) {\n return !!this.elements[object]\n}\n\n/**\n * Returns a new set containing only the elements that are present in both\n * this set and the specified set.\n *\n * @param {lunr.Set} other - set to intersect with this set.\n * @returns {lunr.Set} a new set that is the intersection of this and the specified set.\n */\n\nlunr.Set.prototype.intersect = function (other) {\n var a, b, elements, intersection = []\n\n if (other === lunr.Set.complete) {\n return this\n }\n\n if (other === lunr.Set.empty) {\n return other\n }\n\n if (this.length < other.length) {\n a = this\n b = other\n } else {\n a = other\n b = this\n }\n\n elements = Object.keys(a.elements)\n\n for (var i = 0; i < elements.length; i++) {\n var element = elements[i]\n if (element in b.elements) {\n intersection.push(element)\n }\n }\n\n return new lunr.Set (intersection)\n}\n\n/**\n * Returns a new set combining the elements of this and the specified set.\n *\n * @param {lunr.Set} other - set to union with this set.\n * @return {lunr.Set} a new set that is the union of this and the specified set.\n */\n\nlunr.Set.prototype.union = function (other) {\n if (other === lunr.Set.complete) {\n return lunr.Set.complete\n }\n\n if (other === lunr.Set.empty) {\n return this\n }\n\n return new lunr.Set(Object.keys(this.elements).concat(Object.keys(other.elements)))\n}\n/**\n * A function to calculate the inverse document frequency for\n * a posting. This is shared between the builder and the index\n *\n * @private\n * @param {object} posting - The posting for a given term\n * @param {number} documentCount - The total number of documents.\n */\nlunr.idf = function (posting, documentCount) {\n var documentsWithTerm = 0\n\n for (var fieldName in posting) {\n if (fieldName == '_index') continue // Ignore the term index, its not a field\n documentsWithTerm += Object.keys(posting[fieldName]).length\n }\n\n var x = (documentCount - documentsWithTerm + 0.5) / (documentsWithTerm + 0.5)\n\n return Math.log(1 + Math.abs(x))\n}\n\n/**\n * A token wraps a string representation of a token\n * as it is passed through the text processing pipeline.\n *\n * @constructor\n * @param {string} [str=''] - The string token being wrapped.\n * @param {object} [metadata={}] - Metadata associated with this token.\n */\nlunr.Token = function (str, metadata) {\n this.str = str || \"\"\n this.metadata = metadata || {}\n}\n\n/**\n * Returns the token string that is being wrapped by this object.\n *\n * @returns {string}\n */\nlunr.Token.prototype.toString = function () {\n return this.str\n}\n\n/**\n * A token update function is used when updating or optionally\n * when cloning a token.\n *\n * @callback lunr.Token~updateFunction\n * @param {string} str - The string representation of the token.\n * @param {Object} metadata - All metadata associated with this token.\n */\n\n/**\n * Applies the given function to the wrapped string token.\n *\n * @example\n * token.update(function (str, metadata) {\n * return str.toUpperCase()\n * })\n *\n * @param {lunr.Token~updateFunction} fn - A function to apply to the token string.\n * @returns {lunr.Token}\n */\nlunr.Token.prototype.update = function (fn) {\n this.str = fn(this.str, this.metadata)\n return this\n}\n\n/**\n * Creates a clone of this token. Optionally a function can be\n * applied to the cloned token.\n *\n * @param {lunr.Token~updateFunction} [fn] - An optional function to apply to the cloned token.\n * @returns {lunr.Token}\n */\nlunr.Token.prototype.clone = function (fn) {\n fn = fn || function (s) { return s }\n return new lunr.Token (fn(this.str, this.metadata), this.metadata)\n}\n/*!\n * lunr.tokenizer\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * A function for splitting a string into tokens ready to be inserted into\n * the search index. Uses `lunr.tokenizer.separator` to split strings, change\n * the value of this property to change how strings are split into tokens.\n *\n * This tokenizer will convert its parameter to a string by calling `toString` and\n * then will split this string on the character in `lunr.tokenizer.separator`.\n * Arrays will have their elements converted to strings and wrapped in a lunr.Token.\n *\n * Optional metadata can be passed to the tokenizer, this metadata will be cloned and\n * added as metadata to every token that is created from the object to be tokenized.\n *\n * @static\n * @param {?(string|object|object[])} obj - The object to convert into tokens\n * @param {?object} metadata - Optional metadata to associate with every token\n * @returns {lunr.Token[]}\n * @see {@link lunr.Pipeline}\n */\nlunr.tokenizer = function (obj, metadata) {\n if (obj == null || obj == undefined) {\n return []\n }\n\n if (Array.isArray(obj)) {\n return obj.map(function (t) {\n return new lunr.Token(\n lunr.utils.asString(t).toLowerCase(),\n lunr.utils.clone(metadata)\n )\n })\n }\n\n var str = obj.toString().toLowerCase(),\n len = str.length,\n tokens = []\n\n for (var sliceEnd = 0, sliceStart = 0; sliceEnd <= len; sliceEnd++) {\n var char = str.charAt(sliceEnd),\n sliceLength = sliceEnd - sliceStart\n\n if ((char.match(lunr.tokenizer.separator) || sliceEnd == len)) {\n\n if (sliceLength > 0) {\n var tokenMetadata = lunr.utils.clone(metadata) || {}\n tokenMetadata[\"position\"] = [sliceStart, sliceLength]\n tokenMetadata[\"index\"] = tokens.length\n\n tokens.push(\n new lunr.Token (\n str.slice(sliceStart, sliceEnd),\n tokenMetadata\n )\n )\n }\n\n sliceStart = sliceEnd + 1\n }\n\n }\n\n return tokens\n}\n\n/**\n * The separator used to split a string into tokens. Override this property to change the behaviour of\n * `lunr.tokenizer` behaviour when tokenizing strings. By default this splits on whitespace and hyphens.\n *\n * @static\n * @see lunr.tokenizer\n */\nlunr.tokenizer.separator = /[\\s\\-]+/\n/*!\n * lunr.Pipeline\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * lunr.Pipelines maintain an ordered list of functions to be applied to all\n * tokens in documents entering the search index and queries being ran against\n * the index.\n *\n * An instance of lunr.Index created with the lunr shortcut will contain a\n * pipeline with a stop word filter and an English language stemmer. Extra\n * functions can be added before or after either of these functions or these\n * default functions can be removed.\n *\n * When run the pipeline will call each function in turn, passing a token, the\n * index of that token in the original list of all tokens and finally a list of\n * all the original tokens.\n *\n * The output of functions in the pipeline will be passed to the next function\n * in the pipeline. To exclude a token from entering the index the function\n * should return undefined, the rest of the pipeline will not be called with\n * this token.\n *\n * For serialisation of pipelines to work, all functions used in an instance of\n * a pipeline should be registered with lunr.Pipeline. Registered functions can\n * then be loaded. If trying to load a serialised pipeline that uses functions\n * that are not registered an error will be thrown.\n *\n * If not planning on serialising the pipeline then registering pipeline functions\n * is not necessary.\n *\n * @constructor\n */\nlunr.Pipeline = function () {\n this._stack = []\n}\n\nlunr.Pipeline.registeredFunctions = Object.create(null)\n\n/**\n * A pipeline function maps lunr.Token to lunr.Token. A lunr.Token contains the token\n * string as well as all known metadata. A pipeline function can mutate the token string\n * or mutate (or add) metadata for a given token.\n *\n * A pipeline function can indicate that the passed token should be discarded by returning\n * null, undefined or an empty string. This token will not be passed to any downstream pipeline\n * functions and will not be added to the index.\n *\n * Multiple tokens can be returned by returning an array of tokens. Each token will be passed\n * to any downstream pipeline functions and all will returned tokens will be added to the index.\n *\n * Any number of pipeline functions may be chained together using a lunr.Pipeline.\n *\n * @interface lunr.PipelineFunction\n * @param {lunr.Token} token - A token from the document being processed.\n * @param {number} i - The index of this token in the complete list of tokens for this document/field.\n * @param {lunr.Token[]} tokens - All tokens for this document/field.\n * @returns {(?lunr.Token|lunr.Token[])}\n */\n\n/**\n * Register a function with the pipeline.\n *\n * Functions that are used in the pipeline should be registered if the pipeline\n * needs to be serialised, or a serialised pipeline needs to be loaded.\n *\n * Registering a function does not add it to a pipeline, functions must still be\n * added to instances of the pipeline for them to be used when running a pipeline.\n *\n * @param {lunr.PipelineFunction} fn - The function to check for.\n * @param {String} label - The label to register this function with\n */\nlunr.Pipeline.registerFunction = function (fn, label) {\n if (label in this.registeredFunctions) {\n lunr.utils.warn('Overwriting existing registered function: ' + label)\n }\n\n fn.label = label\n lunr.Pipeline.registeredFunctions[fn.label] = fn\n}\n\n/**\n * Warns if the function is not registered as a Pipeline function.\n *\n * @param {lunr.PipelineFunction} fn - The function to check for.\n * @private\n */\nlunr.Pipeline.warnIfFunctionNotRegistered = function (fn) {\n var isRegistered = fn.label && (fn.label in this.registeredFunctions)\n\n if (!isRegistered) {\n lunr.utils.warn('Function is not registered with pipeline. This may cause problems when serialising the index.\\n', fn)\n }\n}\n\n/**\n * Loads a previously serialised pipeline.\n *\n * All functions to be loaded must already be registered with lunr.Pipeline.\n * If any function from the serialised data has not been registered then an\n * error will be thrown.\n *\n * @param {Object} serialised - The serialised pipeline to load.\n * @returns {lunr.Pipeline}\n */\nlunr.Pipeline.load = function (serialised) {\n var pipeline = new lunr.Pipeline\n\n serialised.forEach(function (fnName) {\n var fn = lunr.Pipeline.registeredFunctions[fnName]\n\n if (fn) {\n pipeline.add(fn)\n } else {\n throw new Error('Cannot load unregistered function: ' + fnName)\n }\n })\n\n return pipeline\n}\n\n/**\n * Adds new functions to the end of the pipeline.\n *\n * Logs a warning if the function has not been registered.\n *\n * @param {lunr.PipelineFunction[]} functions - Any number of functions to add to the pipeline.\n */\nlunr.Pipeline.prototype.add = function () {\n var fns = Array.prototype.slice.call(arguments)\n\n fns.forEach(function (fn) {\n lunr.Pipeline.warnIfFunctionNotRegistered(fn)\n this._stack.push(fn)\n }, this)\n}\n\n/**\n * Adds a single function after a function that already exists in the\n * pipeline.\n *\n * Logs a warning if the function has not been registered.\n *\n * @param {lunr.PipelineFunction} existingFn - A function that already exists in the pipeline.\n * @param {lunr.PipelineFunction} newFn - The new function to add to the pipeline.\n */\nlunr.Pipeline.prototype.after = function (existingFn, newFn) {\n lunr.Pipeline.warnIfFunctionNotRegistered(newFn)\n\n var pos = this._stack.indexOf(existingFn)\n if (pos == -1) {\n throw new Error('Cannot find existingFn')\n }\n\n pos = pos + 1\n this._stack.splice(pos, 0, newFn)\n}\n\n/**\n * Adds a single function before a function that already exists in the\n * pipeline.\n *\n * Logs a warning if the function has not been registered.\n *\n * @param {lunr.PipelineFunction} existingFn - A function that already exists in the pipeline.\n * @param {lunr.PipelineFunction} newFn - The new function to add to the pipeline.\n */\nlunr.Pipeline.prototype.before = function (existingFn, newFn) {\n lunr.Pipeline.warnIfFunctionNotRegistered(newFn)\n\n var pos = this._stack.indexOf(existingFn)\n if (pos == -1) {\n throw new Error('Cannot find existingFn')\n }\n\n this._stack.splice(pos, 0, newFn)\n}\n\n/**\n * Removes a function from the pipeline.\n *\n * @param {lunr.PipelineFunction} fn The function to remove from the pipeline.\n */\nlunr.Pipeline.prototype.remove = function (fn) {\n var pos = this._stack.indexOf(fn)\n if (pos == -1) {\n return\n }\n\n this._stack.splice(pos, 1)\n}\n\n/**\n * Runs the current list of functions that make up the pipeline against the\n * passed tokens.\n *\n * @param {Array} tokens The tokens to run through the pipeline.\n * @returns {Array}\n */\nlunr.Pipeline.prototype.run = function (tokens) {\n var stackLength = this._stack.length\n\n for (var i = 0; i < stackLength; i++) {\n var fn = this._stack[i]\n var memo = []\n\n for (var j = 0; j < tokens.length; j++) {\n var result = fn(tokens[j], j, tokens)\n\n if (result === null || result === void 0 || result === '') continue\n\n if (Array.isArray(result)) {\n for (var k = 0; k < result.length; k++) {\n memo.push(result[k])\n }\n } else {\n memo.push(result)\n }\n }\n\n tokens = memo\n }\n\n return tokens\n}\n\n/**\n * Convenience method for passing a string through a pipeline and getting\n * strings out. This method takes care of wrapping the passed string in a\n * token and mapping the resulting tokens back to strings.\n *\n * @param {string} str - The string to pass through the pipeline.\n * @param {?object} metadata - Optional metadata to associate with the token\n * passed to the pipeline.\n * @returns {string[]}\n */\nlunr.Pipeline.prototype.runString = function (str, metadata) {\n var token = new lunr.Token (str, metadata)\n\n return this.run([token]).map(function (t) {\n return t.toString()\n })\n}\n\n/**\n * Resets the pipeline by removing any existing processors.\n *\n */\nlunr.Pipeline.prototype.reset = function () {\n this._stack = []\n}\n\n/**\n * Returns a representation of the pipeline ready for serialisation.\n *\n * Logs a warning if the function has not been registered.\n *\n * @returns {Array}\n */\nlunr.Pipeline.prototype.toJSON = function () {\n return this._stack.map(function (fn) {\n lunr.Pipeline.warnIfFunctionNotRegistered(fn)\n\n return fn.label\n })\n}\n/*!\n * lunr.Vector\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * A vector is used to construct the vector space of documents and queries. These\n * vectors support operations to determine the similarity between two documents or\n * a document and a query.\n *\n * Normally no parameters are required for initializing a vector, but in the case of\n * loading a previously dumped vector the raw elements can be provided to the constructor.\n *\n * For performance reasons vectors are implemented with a flat array, where an elements\n * index is immediately followed by its value. E.g. [index, value, index, value]. This\n * allows the underlying array to be as sparse as possible and still offer decent\n * performance when being used for vector calculations.\n *\n * @constructor\n * @param {Number[]} [elements] - The flat list of element index and element value pairs.\n */\nlunr.Vector = function (elements) {\n this._magnitude = 0\n this.elements = elements || []\n}\n\n\n/**\n * Calculates the position within the vector to insert a given index.\n *\n * This is used internally by insert and upsert. If there are duplicate indexes then\n * the position is returned as if the value for that index were to be updated, but it\n * is the callers responsibility to check whether there is a duplicate at that index\n *\n * @param {Number} insertIdx - The index at which the element should be inserted.\n * @returns {Number}\n */\nlunr.Vector.prototype.positionForIndex = function (index) {\n // For an empty vector the tuple can be inserted at the beginning\n if (this.elements.length == 0) {\n return 0\n }\n\n var start = 0,\n end = this.elements.length / 2,\n sliceLength = end - start,\n pivotPoint = Math.floor(sliceLength / 2),\n pivotIndex = this.elements[pivotPoint * 2]\n\n while (sliceLength > 1) {\n if (pivotIndex < index) {\n start = pivotPoint\n }\n\n if (pivotIndex > index) {\n end = pivotPoint\n }\n\n if (pivotIndex == index) {\n break\n }\n\n sliceLength = end - start\n pivotPoint = start + Math.floor(sliceLength / 2)\n pivotIndex = this.elements[pivotPoint * 2]\n }\n\n if (pivotIndex == index) {\n return pivotPoint * 2\n }\n\n if (pivotIndex > index) {\n return pivotPoint * 2\n }\n\n if (pivotIndex < index) {\n return (pivotPoint + 1) * 2\n }\n}\n\n/**\n * Inserts an element at an index within the vector.\n *\n * Does not allow duplicates, will throw an error if there is already an entry\n * for this index.\n *\n * @param {Number} insertIdx - The index at which the element should be inserted.\n * @param {Number} val - The value to be inserted into the vector.\n */\nlunr.Vector.prototype.insert = function (insertIdx, val) {\n this.upsert(insertIdx, val, function () {\n throw \"duplicate index\"\n })\n}\n\n/**\n * Inserts or updates an existing index within the vector.\n *\n * @param {Number} insertIdx - The index at which the element should be inserted.\n * @param {Number} val - The value to be inserted into the vector.\n * @param {function} fn - A function that is called for updates, the existing value and the\n * requested value are passed as arguments\n */\nlunr.Vector.prototype.upsert = function (insertIdx, val, fn) {\n this._magnitude = 0\n var position = this.positionForIndex(insertIdx)\n\n if (this.elements[position] == insertIdx) {\n this.elements[position + 1] = fn(this.elements[position + 1], val)\n } else {\n this.elements.splice(position, 0, insertIdx, val)\n }\n}\n\n/**\n * Calculates the magnitude of this vector.\n *\n * @returns {Number}\n */\nlunr.Vector.prototype.magnitude = function () {\n if (this._magnitude) return this._magnitude\n\n var sumOfSquares = 0,\n elementsLength = this.elements.length\n\n for (var i = 1; i < elementsLength; i += 2) {\n var val = this.elements[i]\n sumOfSquares += val * val\n }\n\n return this._magnitude = Math.sqrt(sumOfSquares)\n}\n\n/**\n * Calculates the dot product of this vector and another vector.\n *\n * @param {lunr.Vector} otherVector - The vector to compute the dot product with.\n * @returns {Number}\n */\nlunr.Vector.prototype.dot = function (otherVector) {\n var dotProduct = 0,\n a = this.elements, b = otherVector.elements,\n aLen = a.length, bLen = b.length,\n aVal = 0, bVal = 0,\n i = 0, j = 0\n\n while (i < aLen && j < bLen) {\n aVal = a[i], bVal = b[j]\n if (aVal < bVal) {\n i += 2\n } else if (aVal > bVal) {\n j += 2\n } else if (aVal == bVal) {\n dotProduct += a[i + 1] * b[j + 1]\n i += 2\n j += 2\n }\n }\n\n return dotProduct\n}\n\n/**\n * Calculates the similarity between this vector and another vector.\n *\n * @param {lunr.Vector} otherVector - The other vector to calculate the\n * similarity with.\n * @returns {Number}\n */\nlunr.Vector.prototype.similarity = function (otherVector) {\n return this.dot(otherVector) / this.magnitude() || 0\n}\n\n/**\n * Converts the vector to an array of the elements within the vector.\n *\n * @returns {Number[]}\n */\nlunr.Vector.prototype.toArray = function () {\n var output = new Array (this.elements.length / 2)\n\n for (var i = 1, j = 0; i < this.elements.length; i += 2, j++) {\n output[j] = this.elements[i]\n }\n\n return output\n}\n\n/**\n * A JSON serializable representation of the vector.\n *\n * @returns {Number[]}\n */\nlunr.Vector.prototype.toJSON = function () {\n return this.elements\n}\n/* eslint-disable */\n/*!\n * lunr.stemmer\n * Copyright (C) 2020 Oliver Nightingale\n * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt\n */\n\n/**\n * lunr.stemmer is an english language stemmer, this is a JavaScript\n * implementation of the PorterStemmer taken from http://tartarus.org/~martin\n *\n * @static\n * @implements {lunr.PipelineFunction}\n * @param {lunr.Token} token - The string to stem\n * @returns {lunr.Token}\n * @see {@link lunr.Pipeline}\n * @function\n */\nlunr.stemmer = (function(){\n var step2list = {\n \"ational\" : \"ate\",\n \"tional\" : \"tion\",\n \"enci\" : \"ence\",\n \"anci\" : \"ance\",\n \"izer\" : \"ize\",\n \"bli\" : \"ble\",\n \"alli\" : \"al\",\n \"entli\" : \"ent\",\n \"eli\" : \"e\",\n \"ousli\" : \"ous\",\n \"ization\" : \"ize\",\n \"ation\" : \"ate\",\n \"ator\" : \"ate\",\n \"alism\" : \"al\",\n \"iveness\" : \"ive\",\n \"fulness\" : \"ful\",\n \"ousness\" : \"ous\",\n \"aliti\" : \"al\",\n \"iviti\" : \"ive\",\n \"biliti\" : \"ble\",\n \"logi\" : \"log\"\n },\n\n step3list = {\n \"icate\" : \"ic\",\n \"ative\" : \"\",\n \"alize\" : \"al\",\n \"iciti\" : \"ic\",\n \"ical\" : \"ic\",\n \"ful\" : \"\",\n \"ness\" : \"\"\n },\n\n c = \"[^aeiou]\", // consonant\n v = \"[aeiouy]\", // vowel\n C = c + \"[^aeiouy]*\", // consonant sequence\n V = v + \"[aeiou]*\", // vowel sequence\n\n mgr0 = \"^(\" + C + \")?\" + V + C, // [C]VC... is m>0\n meq1 = \"^(\" + C + \")?\" + V + C + \"(\" + V + \")?$\", // [C]VC[V] is m=1\n mgr1 = \"^(\" + C + \")?\" + V + C + V + C, // [C]VCVC... is m>1\n s_v = \"^(\" + C + \")?\" + v; // vowel in stem\n\n var re_mgr0 = new RegExp(mgr0);\n var re_mgr1 = new RegExp(mgr1);\n var re_meq1 = new RegExp(meq1);\n var re_s_v = new RegExp(s_v);\n\n var re_1a = /^(.+?)(ss|i)es$/;\n var re2_1a = /^(.+?)([^s])s$/;\n var re_1b = /^(.+?)eed$/;\n var re2_1b = /^(.+?)(ed|ing)$/;\n var re_1b_2 = /.$/;\n var re2_1b_2 = /(at|bl|iz)$/;\n var re3_1b_2 = new RegExp(\"([^aeiouylsz])\\\\1$\");\n var re4_1b_2 = new RegExp(\"^\" + C + v + \"[^aeiouwxy]$\");\n\n var re_1c = /^(.+?[^aeiou])y$/;\n var re_2 = /^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/;\n\n var re_3 = /^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/;\n\n var re_4 = /^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/;\n var re2_4 = /^(.+?)(s|t)(ion)$/;\n\n var re_5 = /^(.+?)e$/;\n var re_5_1 = /ll$/;\n var re3_5 = new RegExp(\"^\" + C + v + \"[^aeiouwxy]$\");\n\n var porterStemmer = function porterStemmer(w) {\n var stem,\n suffix,\n firstch,\n re,\n re2,\n re3,\n re4;\n\n if (w.length < 3) { return w; }\n\n firstch = w.substr(0,1);\n if (firstch == \"y\") {\n w = firstch.toUpperCase() + w.substr(1);\n }\n\n // Step 1a\n re = re_1a\n re2 = re2_1a;\n\n if (re.test(w)) { w = w.replace(re,\"$1$2\"); }\n else if (re2.test(w)) { w = w.replace(re2,\"$1$2\"); }\n\n // Step 1b\n re = re_1b;\n re2 = re2_1b;\n if (re.test(w)) {\n var fp = re.exec(w);\n re = re_mgr0;\n if (re.test(fp[1])) {\n re = re_1b_2;\n w = w.replace(re,\"\");\n }\n } else if (re2.test(w)) {\n var fp = re2.exec(w);\n stem = fp[1];\n re2 = re_s_v;\n if (re2.test(stem)) {\n w = stem;\n re2 = re2_1b_2;\n re3 = re3_1b_2;\n re4 = re4_1b_2;\n if (re2.test(w)) { w = w + \"e\"; }\n else if (re3.test(w)) { re = re_1b_2; w = w.replace(re,\"\"); }\n else if (re4.test(w)) { w = w + \"e\"; }\n }\n }\n\n // Step 1c - replace suffix y or Y by i if preceded by a non-vowel which is not the first letter of the word (so cry -> cri, by -> by, say -> say)\n re = re_1c;\n if (re.test(w)) {\n var fp = re.exec(w);\n stem = fp[1];\n w = stem + \"i\";\n }\n\n // Step 2\n re = re_2;\n if (re.test(w)) {\n var fp = re.exec(w);\n stem = fp[1];\n suffix = fp[2];\n re = re_mgr0;\n if (re.test(stem)) {\n w = stem + step2list[suffix];\n }\n }\n\n // Step 3\n re = re_3;\n if (re.test(w)) {\n var fp = re.exec(w);\n stem = fp[1];\n suffix = fp[2];\n re = re_mgr0;\n if (re.test(stem)) {\n w = stem + step3list[suffix];\n }\n }\n\n // Step 4\n re = re_4;\n re2 = re2_4;\n if (re.test(w)) {\n var fp = re.exec(w);\n stem = fp[1];\n re = re_mgr1;\n if (re.test(stem)) {\n w = stem;\n }\n } else if (re2.test(w)) {\n var fp = re2.exec(w);\n stem = fp[1] + fp[2];\n re2 = re_mgr1;\n if (re2.test(stem)) {\n w = stem;\n }\n }\n\n // Step 5\n re = re_5;\n if (re.test(w)) {\n var fp = re.exec(w);\n stem = fp[1];\n re = re_mgr1;\n re2 = re_meq1;\n re3 = re3_5;\n if (re.test(stem) || (re2.test(stem) && !(re3.test(stem)))) {\n w = stem;\n }\n }\n\n re = re_5_1;\n re2 = re_mgr1;\n if (re.test(w) && re2.test(w)) {\n re = re_1b_2;\n w = w.replace(re,\"\");\n }\n\n // and turn initial Y back to y\n\n if (firstch == \"y\") {\n w = firstch.toLowerCase() + w.substr(1);\n }\n\n return w;\n };\n\n return function (token) {\n return token.update(porterStemmer);\n }\n})();\n\nlunr.Pipeline.registerFunction(lunr.stemmer, 'stemmer')\n/*!\n * lunr.stopWordFilter\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * lunr.generateStopWordFilter builds a stopWordFilter function from the provided\n * list of stop words.\n *\n * The built in lunr.stopWordFilter is built using this generator and can be used\n * to generate custom stopWordFilters for applications or non English languages.\n *\n * @function\n * @param {Array} token The token to pass through the filter\n * @returns {lunr.PipelineFunction}\n * @see lunr.Pipeline\n * @see lunr.stopWordFilter\n */\nlunr.generateStopWordFilter = function (stopWords) {\n var words = stopWords.reduce(function (memo, stopWord) {\n memo[stopWord] = stopWord\n return memo\n }, {})\n\n return function (token) {\n if (token && words[token.toString()] !== token.toString()) return token\n }\n}\n\n/**\n * lunr.stopWordFilter is an English language stop word list filter, any words\n * contained in the list will not be passed through the filter.\n *\n * This is intended to be used in the Pipeline. If the token does not pass the\n * filter then undefined will be returned.\n *\n * @function\n * @implements {lunr.PipelineFunction}\n * @params {lunr.Token} token - A token to check for being a stop word.\n * @returns {lunr.Token}\n * @see {@link lunr.Pipeline}\n */\nlunr.stopWordFilter = lunr.generateStopWordFilter([\n 'a',\n 'able',\n 'about',\n 'across',\n 'after',\n 'all',\n 'almost',\n 'also',\n 'am',\n 'among',\n 'an',\n 'and',\n 'any',\n 'are',\n 'as',\n 'at',\n 'be',\n 'because',\n 'been',\n 'but',\n 'by',\n 'can',\n 'cannot',\n 'could',\n 'dear',\n 'did',\n 'do',\n 'does',\n 'either',\n 'else',\n 'ever',\n 'every',\n 'for',\n 'from',\n 'get',\n 'got',\n 'had',\n 'has',\n 'have',\n 'he',\n 'her',\n 'hers',\n 'him',\n 'his',\n 'how',\n 'however',\n 'i',\n 'if',\n 'in',\n 'into',\n 'is',\n 'it',\n 'its',\n 'just',\n 'least',\n 'let',\n 'like',\n 'likely',\n 'may',\n 'me',\n 'might',\n 'most',\n 'must',\n 'my',\n 'neither',\n 'no',\n 'nor',\n 'not',\n 'of',\n 'off',\n 'often',\n 'on',\n 'only',\n 'or',\n 'other',\n 'our',\n 'own',\n 'rather',\n 'said',\n 'say',\n 'says',\n 'she',\n 'should',\n 'since',\n 'so',\n 'some',\n 'than',\n 'that',\n 'the',\n 'their',\n 'them',\n 'then',\n 'there',\n 'these',\n 'they',\n 'this',\n 'tis',\n 'to',\n 'too',\n 'twas',\n 'us',\n 'wants',\n 'was',\n 'we',\n 'were',\n 'what',\n 'when',\n 'where',\n 'which',\n 'while',\n 'who',\n 'whom',\n 'why',\n 'will',\n 'with',\n 'would',\n 'yet',\n 'you',\n 'your'\n])\n\nlunr.Pipeline.registerFunction(lunr.stopWordFilter, 'stopWordFilter')\n/*!\n * lunr.trimmer\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * lunr.trimmer is a pipeline function for trimming non word\n * characters from the beginning and end of tokens before they\n * enter the index.\n *\n * This implementation may not work correctly for non latin\n * characters and should either be removed or adapted for use\n * with languages with non-latin characters.\n *\n * @static\n * @implements {lunr.PipelineFunction}\n * @param {lunr.Token} token The token to pass through the filter\n * @returns {lunr.Token}\n * @see lunr.Pipeline\n */\nlunr.trimmer = function (token) {\n return token.update(function (s) {\n return s.replace(/^\\W+/, '').replace(/\\W+$/, '')\n })\n}\n\nlunr.Pipeline.registerFunction(lunr.trimmer, 'trimmer')\n/*!\n * lunr.TokenSet\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * A token set is used to store the unique list of all tokens\n * within an index. Token sets are also used to represent an\n * incoming query to the index, this query token set and index\n * token set are then intersected to find which tokens to look\n * up in the inverted index.\n *\n * A token set can hold multiple tokens, as in the case of the\n * index token set, or it can hold a single token as in the\n * case of a simple query token set.\n *\n * Additionally token sets are used to perform wildcard matching.\n * Leading, contained and trailing wildcards are supported, and\n * from this edit distance matching can also be provided.\n *\n * Token sets are implemented as a minimal finite state automata,\n * where both common prefixes and suffixes are shared between tokens.\n * This helps to reduce the space used for storing the token set.\n *\n * @constructor\n */\nlunr.TokenSet = function () {\n this.final = false\n this.edges = {}\n this.id = lunr.TokenSet._nextId\n lunr.TokenSet._nextId += 1\n}\n\n/**\n * Keeps track of the next, auto increment, identifier to assign\n * to a new tokenSet.\n *\n * TokenSets require a unique identifier to be correctly minimised.\n *\n * @private\n */\nlunr.TokenSet._nextId = 1\n\n/**\n * Creates a TokenSet instance from the given sorted array of words.\n *\n * @param {String[]} arr - A sorted array of strings to create the set from.\n * @returns {lunr.TokenSet}\n * @throws Will throw an error if the input array is not sorted.\n */\nlunr.TokenSet.fromArray = function (arr) {\n var builder = new lunr.TokenSet.Builder\n\n for (var i = 0, len = arr.length; i < len; i++) {\n builder.insert(arr[i])\n }\n\n builder.finish()\n return builder.root\n}\n\n/**\n * Creates a token set from a query clause.\n *\n * @private\n * @param {Object} clause - A single clause from lunr.Query.\n * @param {string} clause.term - The query clause term.\n * @param {number} [clause.editDistance] - The optional edit distance for the term.\n * @returns {lunr.TokenSet}\n */\nlunr.TokenSet.fromClause = function (clause) {\n if ('editDistance' in clause) {\n return lunr.TokenSet.fromFuzzyString(clause.term, clause.editDistance)\n } else {\n return lunr.TokenSet.fromString(clause.term)\n }\n}\n\n/**\n * Creates a token set representing a single string with a specified\n * edit distance.\n *\n * Insertions, deletions, substitutions and transpositions are each\n * treated as an edit distance of 1.\n *\n * Increasing the allowed edit distance will have a dramatic impact\n * on the performance of both creating and intersecting these TokenSets.\n * It is advised to keep the edit distance less than 3.\n *\n * @param {string} str - The string to create the token set from.\n * @param {number} editDistance - The allowed edit distance to match.\n * @returns {lunr.Vector}\n */\nlunr.TokenSet.fromFuzzyString = function (str, editDistance) {\n var root = new lunr.TokenSet\n\n var stack = [{\n node: root,\n editsRemaining: editDistance,\n str: str\n }]\n\n while (stack.length) {\n var frame = stack.pop()\n\n // no edit\n if (frame.str.length > 0) {\n var char = frame.str.charAt(0),\n noEditNode\n\n if (char in frame.node.edges) {\n noEditNode = frame.node.edges[char]\n } else {\n noEditNode = new lunr.TokenSet\n frame.node.edges[char] = noEditNode\n }\n\n if (frame.str.length == 1) {\n noEditNode.final = true\n }\n\n stack.push({\n node: noEditNode,\n editsRemaining: frame.editsRemaining,\n str: frame.str.slice(1)\n })\n }\n\n if (frame.editsRemaining == 0) {\n continue\n }\n\n // insertion\n if (\"*\" in frame.node.edges) {\n var insertionNode = frame.node.edges[\"*\"]\n } else {\n var insertionNode = new lunr.TokenSet\n frame.node.edges[\"*\"] = insertionNode\n }\n\n if (frame.str.length == 0) {\n insertionNode.final = true\n }\n\n stack.push({\n node: insertionNode,\n editsRemaining: frame.editsRemaining - 1,\n str: frame.str\n })\n\n // deletion\n // can only do a deletion if we have enough edits remaining\n // and if there are characters left to delete in the string\n if (frame.str.length > 1) {\n stack.push({\n node: frame.node,\n editsRemaining: frame.editsRemaining - 1,\n str: frame.str.slice(1)\n })\n }\n\n // deletion\n // just removing the last character from the str\n if (frame.str.length == 1) {\n frame.node.final = true\n }\n\n // substitution\n // can only do a substitution if we have enough edits remaining\n // and if there are characters left to substitute\n if (frame.str.length >= 1) {\n if (\"*\" in frame.node.edges) {\n var substitutionNode = frame.node.edges[\"*\"]\n } else {\n var substitutionNode = new lunr.TokenSet\n frame.node.edges[\"*\"] = substitutionNode\n }\n\n if (frame.str.length == 1) {\n substitutionNode.final = true\n }\n\n stack.push({\n node: substitutionNode,\n editsRemaining: frame.editsRemaining - 1,\n str: frame.str.slice(1)\n })\n }\n\n // transposition\n // can only do a transposition if there are edits remaining\n // and there are enough characters to transpose\n if (frame.str.length > 1) {\n var charA = frame.str.charAt(0),\n charB = frame.str.charAt(1),\n transposeNode\n\n if (charB in frame.node.edges) {\n transposeNode = frame.node.edges[charB]\n } else {\n transposeNode = new lunr.TokenSet\n frame.node.edges[charB] = transposeNode\n }\n\n if (frame.str.length == 1) {\n transposeNode.final = true\n }\n\n stack.push({\n node: transposeNode,\n editsRemaining: frame.editsRemaining - 1,\n str: charA + frame.str.slice(2)\n })\n }\n }\n\n return root\n}\n\n/**\n * Creates a TokenSet from a string.\n *\n * The string may contain one or more wildcard characters (*)\n * that will allow wildcard matching when intersecting with\n * another TokenSet.\n *\n * @param {string} str - The string to create a TokenSet from.\n * @returns {lunr.TokenSet}\n */\nlunr.TokenSet.fromString = function (str) {\n var node = new lunr.TokenSet,\n root = node\n\n /*\n * Iterates through all characters within the passed string\n * appending a node for each character.\n *\n * When a wildcard character is found then a self\n * referencing edge is introduced to continually match\n * any number of any characters.\n */\n for (var i = 0, len = str.length; i < len; i++) {\n var char = str[i],\n final = (i == len - 1)\n\n if (char == \"*\") {\n node.edges[char] = node\n node.final = final\n\n } else {\n var next = new lunr.TokenSet\n next.final = final\n\n node.edges[char] = next\n node = next\n }\n }\n\n return root\n}\n\n/**\n * Converts this TokenSet into an array of strings\n * contained within the TokenSet.\n *\n * This is not intended to be used on a TokenSet that\n * contains wildcards, in these cases the results are\n * undefined and are likely to cause an infinite loop.\n *\n * @returns {string[]}\n */\nlunr.TokenSet.prototype.toArray = function () {\n var words = []\n\n var stack = [{\n prefix: \"\",\n node: this\n }]\n\n while (stack.length) {\n var frame = stack.pop(),\n edges = Object.keys(frame.node.edges),\n len = edges.length\n\n if (frame.node.final) {\n /* In Safari, at this point the prefix is sometimes corrupted, see:\n * https://github.com/olivernn/lunr.js/issues/279 Calling any\n * String.prototype method forces Safari to \"cast\" this string to what\n * it's supposed to be, fixing the bug. */\n frame.prefix.charAt(0)\n words.push(frame.prefix)\n }\n\n for (var i = 0; i < len; i++) {\n var edge = edges[i]\n\n stack.push({\n prefix: frame.prefix.concat(edge),\n node: frame.node.edges[edge]\n })\n }\n }\n\n return words\n}\n\n/**\n * Generates a string representation of a TokenSet.\n *\n * This is intended to allow TokenSets to be used as keys\n * in objects, largely to aid the construction and minimisation\n * of a TokenSet. As such it is not designed to be a human\n * friendly representation of the TokenSet.\n *\n * @returns {string}\n */\nlunr.TokenSet.prototype.toString = function () {\n // NOTE: Using Object.keys here as this.edges is very likely\n // to enter 'hash-mode' with many keys being added\n //\n // avoiding a for-in loop here as it leads to the function\n // being de-optimised (at least in V8). From some simple\n // benchmarks the performance is comparable, but allowing\n // V8 to optimize may mean easy performance wins in the future.\n\n if (this._str) {\n return this._str\n }\n\n var str = this.final ? '1' : '0',\n labels = Object.keys(this.edges).sort(),\n len = labels.length\n\n for (var i = 0; i < len; i++) {\n var label = labels[i],\n node = this.edges[label]\n\n str = str + label + node.id\n }\n\n return str\n}\n\n/**\n * Returns a new TokenSet that is the intersection of\n * this TokenSet and the passed TokenSet.\n *\n * This intersection will take into account any wildcards\n * contained within the TokenSet.\n *\n * @param {lunr.TokenSet} b - An other TokenSet to intersect with.\n * @returns {lunr.TokenSet}\n */\nlunr.TokenSet.prototype.intersect = function (b) {\n var output = new lunr.TokenSet,\n frame = undefined\n\n var stack = [{\n qNode: b,\n output: output,\n node: this\n }]\n\n while (stack.length) {\n frame = stack.pop()\n\n // NOTE: As with the #toString method, we are using\n // Object.keys and a for loop instead of a for-in loop\n // as both of these objects enter 'hash' mode, causing\n // the function to be de-optimised in V8\n var qEdges = Object.keys(frame.qNode.edges),\n qLen = qEdges.length,\n nEdges = Object.keys(frame.node.edges),\n nLen = nEdges.length\n\n for (var q = 0; q < qLen; q++) {\n var qEdge = qEdges[q]\n\n for (var n = 0; n < nLen; n++) {\n var nEdge = nEdges[n]\n\n if (nEdge == qEdge || qEdge == '*') {\n var node = frame.node.edges[nEdge],\n qNode = frame.qNode.edges[qEdge],\n final = node.final && qNode.final,\n next = undefined\n\n if (nEdge in frame.output.edges) {\n // an edge already exists for this character\n // no need to create a new node, just set the finality\n // bit unless this node is already final\n next = frame.output.edges[nEdge]\n next.final = next.final || final\n\n } else {\n // no edge exists yet, must create one\n // set the finality bit and insert it\n // into the output\n next = new lunr.TokenSet\n next.final = final\n frame.output.edges[nEdge] = next\n }\n\n stack.push({\n qNode: qNode,\n output: next,\n node: node\n })\n }\n }\n }\n }\n\n return output\n}\nlunr.TokenSet.Builder = function () {\n this.previousWord = \"\"\n this.root = new lunr.TokenSet\n this.uncheckedNodes = []\n this.minimizedNodes = {}\n}\n\nlunr.TokenSet.Builder.prototype.insert = function (word) {\n var node,\n commonPrefix = 0\n\n if (word < this.previousWord) {\n throw new Error (\"Out of order word insertion\")\n }\n\n for (var i = 0; i < word.length && i < this.previousWord.length; i++) {\n if (word[i] != this.previousWord[i]) break\n commonPrefix++\n }\n\n this.minimize(commonPrefix)\n\n if (this.uncheckedNodes.length == 0) {\n node = this.root\n } else {\n node = this.uncheckedNodes[this.uncheckedNodes.length - 1].child\n }\n\n for (var i = commonPrefix; i < word.length; i++) {\n var nextNode = new lunr.TokenSet,\n char = word[i]\n\n node.edges[char] = nextNode\n\n this.uncheckedNodes.push({\n parent: node,\n char: char,\n child: nextNode\n })\n\n node = nextNode\n }\n\n node.final = true\n this.previousWord = word\n}\n\nlunr.TokenSet.Builder.prototype.finish = function () {\n this.minimize(0)\n}\n\nlunr.TokenSet.Builder.prototype.minimize = function (downTo) {\n for (var i = this.uncheckedNodes.length - 1; i >= downTo; i--) {\n var node = this.uncheckedNodes[i],\n childKey = node.child.toString()\n\n if (childKey in this.minimizedNodes) {\n node.parent.edges[node.char] = this.minimizedNodes[childKey]\n } else {\n // Cache the key for this node since\n // we know it can't change anymore\n node.child._str = childKey\n\n this.minimizedNodes[childKey] = node.child\n }\n\n this.uncheckedNodes.pop()\n }\n}\n/*!\n * lunr.Index\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * An index contains the built index of all documents and provides a query interface\n * to the index.\n *\n * Usually instances of lunr.Index will not be created using this constructor, instead\n * lunr.Builder should be used to construct new indexes, or lunr.Index.load should be\n * used to load previously built and serialized indexes.\n *\n * @constructor\n * @param {Object} attrs - The attributes of the built search index.\n * @param {Object} attrs.invertedIndex - An index of term/field to document reference.\n * @param {Object} attrs.fieldVectors - Field vectors\n * @param {lunr.TokenSet} attrs.tokenSet - An set of all corpus tokens.\n * @param {string[]} attrs.fields - The names of indexed document fields.\n * @param {lunr.Pipeline} attrs.pipeline - The pipeline to use for search terms.\n */\nlunr.Index = function (attrs) {\n this.invertedIndex = attrs.invertedIndex\n this.fieldVectors = attrs.fieldVectors\n this.tokenSet = attrs.tokenSet\n this.fields = attrs.fields\n this.pipeline = attrs.pipeline\n}\n\n/**\n * A result contains details of a document matching a search query.\n * @typedef {Object} lunr.Index~Result\n * @property {string} ref - The reference of the document this result represents.\n * @property {number} score - A number between 0 and 1 representing how similar this document is to the query.\n * @property {lunr.MatchData} matchData - Contains metadata about this match including which term(s) caused the match.\n */\n\n/**\n * Although lunr provides the ability to create queries using lunr.Query, it also provides a simple\n * query language which itself is parsed into an instance of lunr.Query.\n *\n * For programmatically building queries it is advised to directly use lunr.Query, the query language\n * is best used for human entered text rather than program generated text.\n *\n * At its simplest queries can just be a single term, e.g. `hello`, multiple terms are also supported\n * and will be combined with OR, e.g `hello world` will match documents that contain either 'hello'\n * or 'world', though those that contain both will rank higher in the results.\n *\n * Wildcards can be included in terms to match one or more unspecified characters, these wildcards can\n * be inserted anywhere within the term, and more than one wildcard can exist in a single term. Adding\n * wildcards will increase the number of documents that will be found but can also have a negative\n * impact on query performance, especially with wildcards at the beginning of a term.\n *\n * Terms can be restricted to specific fields, e.g. `title:hello`, only documents with the term\n * hello in the title field will match this query. Using a field not present in the index will lead\n * to an error being thrown.\n *\n * Modifiers can also be added to terms, lunr supports edit distance and boost modifiers on terms. A term\n * boost will make documents matching that term score higher, e.g. `foo^5`. Edit distance is also supported\n * to provide fuzzy matching, e.g. 'hello~2' will match documents with hello with an edit distance of 2.\n * Avoid large values for edit distance to improve query performance.\n *\n * Each term also supports a presence modifier. By default a term's presence in document is optional, however\n * this can be changed to either required or prohibited. For a term's presence to be required in a document the\n * term should be prefixed with a '+', e.g. `+foo bar` is a search for documents that must contain 'foo' and\n * optionally contain 'bar'. Conversely a leading '-' sets the terms presence to prohibited, i.e. it must not\n * appear in a document, e.g. `-foo bar` is a search for documents that do not contain 'foo' but may contain 'bar'.\n *\n * To escape special characters the backslash character '\\' can be used, this allows searches to include\n * characters that would normally be considered modifiers, e.g. `foo\\~2` will search for a term \"foo~2\" instead\n * of attempting to apply a boost of 2 to the search term \"foo\".\n *\n * @typedef {string} lunr.Index~QueryString\n * @example Simple single term query\n * hello\n * @example Multiple term query\n * hello world\n * @example term scoped to a field\n * title:hello\n * @example term with a boost of 10\n * hello^10\n * @example term with an edit distance of 2\n * hello~2\n * @example terms with presence modifiers\n * -foo +bar baz\n */\n\n/**\n * Performs a search against the index using lunr query syntax.\n *\n * Results will be returned sorted by their score, the most relevant results\n * will be returned first. For details on how the score is calculated, please see\n * the {@link https://lunrjs.com/guides/searching.html#scoring|guide}.\n *\n * For more programmatic querying use lunr.Index#query.\n *\n * @param {lunr.Index~QueryString} queryString - A string containing a lunr query.\n * @throws {lunr.QueryParseError} If the passed query string cannot be parsed.\n * @returns {lunr.Index~Result[]}\n */\nlunr.Index.prototype.search = function (queryString) {\n return this.query(function (query) {\n var parser = new lunr.QueryParser(queryString, query)\n parser.parse()\n })\n}\n\n/**\n * A query builder callback provides a query object to be used to express\n * the query to perform on the index.\n *\n * @callback lunr.Index~queryBuilder\n * @param {lunr.Query} query - The query object to build up.\n * @this lunr.Query\n */\n\n/**\n * Performs a query against the index using the yielded lunr.Query object.\n *\n * If performing programmatic queries against the index, this method is preferred\n * over lunr.Index#search so as to avoid the additional query parsing overhead.\n *\n * A query object is yielded to the supplied function which should be used to\n * express the query to be run against the index.\n *\n * Note that although this function takes a callback parameter it is _not_ an\n * asynchronous operation, the callback is just yielded a query object to be\n * customized.\n *\n * @param {lunr.Index~queryBuilder} fn - A function that is used to build the query.\n * @returns {lunr.Index~Result[]}\n */\nlunr.Index.prototype.query = function (fn) {\n // for each query clause\n // * process terms\n // * expand terms from token set\n // * find matching documents and metadata\n // * get document vectors\n // * score documents\n\n var query = new lunr.Query(this.fields),\n matchingFields = Object.create(null),\n queryVectors = Object.create(null),\n termFieldCache = Object.create(null),\n requiredMatches = Object.create(null),\n prohibitedMatches = Object.create(null)\n\n /*\n * To support field level boosts a query vector is created per\n * field. An empty vector is eagerly created to support negated\n * queries.\n */\n for (var i = 0; i < this.fields.length; i++) {\n queryVectors[this.fields[i]] = new lunr.Vector\n }\n\n fn.call(query, query)\n\n for (var i = 0; i < query.clauses.length; i++) {\n /*\n * Unless the pipeline has been disabled for this term, which is\n * the case for terms with wildcards, we need to pass the clause\n * term through the search pipeline. A pipeline returns an array\n * of processed terms. Pipeline functions may expand the passed\n * term, which means we may end up performing multiple index lookups\n * for a single query term.\n */\n var clause = query.clauses[i],\n terms = null,\n clauseMatches = lunr.Set.empty\n\n if (clause.usePipeline) {\n terms = this.pipeline.runString(clause.term, {\n fields: clause.fields\n })\n } else {\n terms = [clause.term]\n }\n\n for (var m = 0; m < terms.length; m++) {\n var term = terms[m]\n\n /*\n * Each term returned from the pipeline needs to use the same query\n * clause object, e.g. the same boost and or edit distance. The\n * simplest way to do this is to re-use the clause object but mutate\n * its term property.\n */\n clause.term = term\n\n /*\n * From the term in the clause we create a token set which will then\n * be used to intersect the indexes token set to get a list of terms\n * to lookup in the inverted index\n */\n var termTokenSet = lunr.TokenSet.fromClause(clause),\n expandedTerms = this.tokenSet.intersect(termTokenSet).toArray()\n\n /*\n * If a term marked as required does not exist in the tokenSet it is\n * impossible for the search to return any matches. We set all the field\n * scoped required matches set to empty and stop examining any further\n * clauses.\n */\n if (expandedTerms.length === 0 && clause.presence === lunr.Query.presence.REQUIRED) {\n for (var k = 0; k < clause.fields.length; k++) {\n var field = clause.fields[k]\n requiredMatches[field] = lunr.Set.empty\n }\n\n break\n }\n\n for (var j = 0; j < expandedTerms.length; j++) {\n /*\n * For each term get the posting and termIndex, this is required for\n * building the query vector.\n */\n var expandedTerm = expandedTerms[j],\n posting = this.invertedIndex[expandedTerm],\n termIndex = posting._index\n\n for (var k = 0; k < clause.fields.length; k++) {\n /*\n * For each field that this query term is scoped by (by default\n * all fields are in scope) we need to get all the document refs\n * that have this term in that field.\n *\n * The posting is the entry in the invertedIndex for the matching\n * term from above.\n */\n var field = clause.fields[k],\n fieldPosting = posting[field],\n matchingDocumentRefs = Object.keys(fieldPosting),\n termField = expandedTerm + \"/\" + field,\n matchingDocumentsSet = new lunr.Set(matchingDocumentRefs)\n\n /*\n * if the presence of this term is required ensure that the matching\n * documents are added to the set of required matches for this clause.\n *\n */\n if (clause.presence == lunr.Query.presence.REQUIRED) {\n clauseMatches = clauseMatches.union(matchingDocumentsSet)\n\n if (requiredMatches[field] === undefined) {\n requiredMatches[field] = lunr.Set.complete\n }\n }\n\n /*\n * if the presence of this term is prohibited ensure that the matching\n * documents are added to the set of prohibited matches for this field,\n * creating that set if it does not yet exist.\n */\n if (clause.presence == lunr.Query.presence.PROHIBITED) {\n if (prohibitedMatches[field] === undefined) {\n prohibitedMatches[field] = lunr.Set.empty\n }\n\n prohibitedMatches[field] = prohibitedMatches[field].union(matchingDocumentsSet)\n\n /*\n * Prohibited matches should not be part of the query vector used for\n * similarity scoring and no metadata should be extracted so we continue\n * to the next field\n */\n continue\n }\n\n /*\n * The query field vector is populated using the termIndex found for\n * the term and a unit value with the appropriate boost applied.\n * Using upsert because there could already be an entry in the vector\n * for the term we are working with. In that case we just add the scores\n * together.\n */\n queryVectors[field].upsert(termIndex, clause.boost, function (a, b) { return a + b })\n\n /**\n * If we've already seen this term, field combo then we've already collected\n * the matching documents and metadata, no need to go through all that again\n */\n if (termFieldCache[termField]) {\n continue\n }\n\n for (var l = 0; l < matchingDocumentRefs.length; l++) {\n /*\n * All metadata for this term/field/document triple\n * are then extracted and collected into an instance\n * of lunr.MatchData ready to be returned in the query\n * results\n */\n var matchingDocumentRef = matchingDocumentRefs[l],\n matchingFieldRef = new lunr.FieldRef (matchingDocumentRef, field),\n metadata = fieldPosting[matchingDocumentRef],\n fieldMatch\n\n if ((fieldMatch = matchingFields[matchingFieldRef]) === undefined) {\n matchingFields[matchingFieldRef] = new lunr.MatchData (expandedTerm, field, metadata)\n } else {\n fieldMatch.add(expandedTerm, field, metadata)\n }\n\n }\n\n termFieldCache[termField] = true\n }\n }\n }\n\n /**\n * If the presence was required we need to update the requiredMatches field sets.\n * We do this after all fields for the term have collected their matches because\n * the clause terms presence is required in _any_ of the fields not _all_ of the\n * fields.\n */\n if (clause.presence === lunr.Query.presence.REQUIRED) {\n for (var k = 0; k < clause.fields.length; k++) {\n var field = clause.fields[k]\n requiredMatches[field] = requiredMatches[field].intersect(clauseMatches)\n }\n }\n }\n\n /**\n * Need to combine the field scoped required and prohibited\n * matching documents into a global set of required and prohibited\n * matches\n */\n var allRequiredMatches = lunr.Set.complete,\n allProhibitedMatches = lunr.Set.empty\n\n for (var i = 0; i < this.fields.length; i++) {\n var field = this.fields[i]\n\n if (requiredMatches[field]) {\n allRequiredMatches = allRequiredMatches.intersect(requiredMatches[field])\n }\n\n if (prohibitedMatches[field]) {\n allProhibitedMatches = allProhibitedMatches.union(prohibitedMatches[field])\n }\n }\n\n var matchingFieldRefs = Object.keys(matchingFields),\n results = [],\n matches = Object.create(null)\n\n /*\n * If the query is negated (contains only prohibited terms)\n * we need to get _all_ fieldRefs currently existing in the\n * index. This is only done when we know that the query is\n * entirely prohibited terms to avoid any cost of getting all\n * fieldRefs unnecessarily.\n *\n * Additionally, blank MatchData must be created to correctly\n * populate the results.\n */\n if (query.isNegated()) {\n matchingFieldRefs = Object.keys(this.fieldVectors)\n\n for (var i = 0; i < matchingFieldRefs.length; i++) {\n var matchingFieldRef = matchingFieldRefs[i]\n var fieldRef = lunr.FieldRef.fromString(matchingFieldRef)\n matchingFields[matchingFieldRef] = new lunr.MatchData\n }\n }\n\n for (var i = 0; i < matchingFieldRefs.length; i++) {\n /*\n * Currently we have document fields that match the query, but we\n * need to return documents. The matchData and scores are combined\n * from multiple fields belonging to the same document.\n *\n * Scores are calculated by field, using the query vectors created\n * above, and combined into a final document score using addition.\n */\n var fieldRef = lunr.FieldRef.fromString(matchingFieldRefs[i]),\n docRef = fieldRef.docRef\n\n if (!allRequiredMatches.contains(docRef)) {\n continue\n }\n\n if (allProhibitedMatches.contains(docRef)) {\n continue\n }\n\n var fieldVector = this.fieldVectors[fieldRef],\n score = queryVectors[fieldRef.fieldName].similarity(fieldVector),\n docMatch\n\n if ((docMatch = matches[docRef]) !== undefined) {\n docMatch.score += score\n docMatch.matchData.combine(matchingFields[fieldRef])\n } else {\n var match = {\n ref: docRef,\n score: score,\n matchData: matchingFields[fieldRef]\n }\n matches[docRef] = match\n results.push(match)\n }\n }\n\n /*\n * Sort the results objects by score, highest first.\n */\n return results.sort(function (a, b) {\n return b.score - a.score\n })\n}\n\n/**\n * Prepares the index for JSON serialization.\n *\n * The schema for this JSON blob will be described in a\n * separate JSON schema file.\n *\n * @returns {Object}\n */\nlunr.Index.prototype.toJSON = function () {\n var invertedIndex = Object.keys(this.invertedIndex)\n .sort()\n .map(function (term) {\n return [term, this.invertedIndex[term]]\n }, this)\n\n var fieldVectors = Object.keys(this.fieldVectors)\n .map(function (ref) {\n return [ref, this.fieldVectors[ref].toJSON()]\n }, this)\n\n return {\n version: lunr.version,\n fields: this.fields,\n fieldVectors: fieldVectors,\n invertedIndex: invertedIndex,\n pipeline: this.pipeline.toJSON()\n }\n}\n\n/**\n * Loads a previously serialized lunr.Index\n *\n * @param {Object} serializedIndex - A previously serialized lunr.Index\n * @returns {lunr.Index}\n */\nlunr.Index.load = function (serializedIndex) {\n var attrs = {},\n fieldVectors = {},\n serializedVectors = serializedIndex.fieldVectors,\n invertedIndex = Object.create(null),\n serializedInvertedIndex = serializedIndex.invertedIndex,\n tokenSetBuilder = new lunr.TokenSet.Builder,\n pipeline = lunr.Pipeline.load(serializedIndex.pipeline)\n\n if (serializedIndex.version != lunr.version) {\n lunr.utils.warn(\"Version mismatch when loading serialised index. Current version of lunr '\" + lunr.version + \"' does not match serialized index '\" + serializedIndex.version + \"'\")\n }\n\n for (var i = 0; i < serializedVectors.length; i++) {\n var tuple = serializedVectors[i],\n ref = tuple[0],\n elements = tuple[1]\n\n fieldVectors[ref] = new lunr.Vector(elements)\n }\n\n for (var i = 0; i < serializedInvertedIndex.length; i++) {\n var tuple = serializedInvertedIndex[i],\n term = tuple[0],\n posting = tuple[1]\n\n tokenSetBuilder.insert(term)\n invertedIndex[term] = posting\n }\n\n tokenSetBuilder.finish()\n\n attrs.fields = serializedIndex.fields\n\n attrs.fieldVectors = fieldVectors\n attrs.invertedIndex = invertedIndex\n attrs.tokenSet = tokenSetBuilder.root\n attrs.pipeline = pipeline\n\n return new lunr.Index(attrs)\n}\n/*!\n * lunr.Builder\n * Copyright (C) 2020 Oliver Nightingale\n */\n\n/**\n * lunr.Builder performs indexing on a set of documents and\n * returns instances of lunr.Index ready for querying.\n *\n * All configuration of the index is done via the builder, the\n * fields to index, the document reference, the text processing\n * pipeline and document scoring parameters are all set on the\n * builder before indexing.\n *\n * @constructor\n * @property {string} _ref - Internal reference to the document reference field.\n * @property {string[]} _fields - Internal reference to the document fields to index.\n * @property {object} invertedIndex - The inverted index maps terms to document fields.\n * @property {object} documentTermFrequencies - Keeps track of document term frequencies.\n * @property {object} documentLengths - Keeps track of the length of documents added to the index.\n * @property {lunr.tokenizer} tokenizer - Function for splitting strings into tokens for indexing.\n * @property {lunr.Pipeline} pipeline - The pipeline performs text processing on tokens before indexing.\n * @property {lunr.Pipeline} searchPipeline - A pipeline for processing search terms before querying the index.\n * @property {number} documentCount - Keeps track of the total number of documents indexed.\n * @property {number} _b - A parameter to control field length normalization, setting this to 0 disabled normalization, 1 fully normalizes field lengths, the default value is 0.75.\n * @property {number} _k1 - A parameter to control how quickly an increase in term frequency results in term frequency saturation, the default value is 1.2.\n * @property {number} termIndex - A counter incremented for each unique term, used to identify a terms position in the vector space.\n * @property {array} metadataWhitelist - A list of metadata keys that have been whitelisted for entry in the index.\n */\nlunr.Builder = function () {\n this._ref = \"id\"\n this._fields = Object.create(null)\n this._documents = Object.create(null)\n this.invertedIndex = Object.create(null)\n this.fieldTermFrequencies = {}\n this.fieldLengths = {}\n this.tokenizer = lunr.tokenizer\n this.pipeline = new lunr.Pipeline\n this.searchPipeline = new lunr.Pipeline\n this.documentCount = 0\n this._b = 0.75\n this._k1 = 1.2\n this.termIndex = 0\n this.metadataWhitelist = []\n}\n\n/**\n * Sets the document field used as the document reference. Every document must have this field.\n * The type of this field in the document should be a string, if it is not a string it will be\n * coerced into a string by calling toString.\n *\n * The default ref is 'id'.\n *\n * The ref should _not_ be changed during indexing, it should be set before any documents are\n * added to the index. Changing it during indexing can lead to inconsistent results.\n *\n * @param {string} ref - The name of the reference field in the document.\n */\nlunr.Builder.prototype.ref = function (ref) {\n this._ref = ref\n}\n\n/**\n * A function that is used to extract a field from a document.\n *\n * Lunr expects a field to be at the top level of a document, if however the field\n * is deeply nested within a document an extractor function can be used to extract\n * the right field for indexing.\n *\n * @callback fieldExtractor\n * @param {object} doc - The document being added to the index.\n * @returns {?(string|object|object[])} obj - The object that will be indexed for this field.\n * @example Extracting a nested field\n * function (doc) { return doc.nested.field }\n */\n\n/**\n * Adds a field to the list of document fields that will be indexed. Every document being\n * indexed should have this field. Null values for this field in indexed documents will\n * not cause errors but will limit the chance of that document being retrieved by searches.\n *\n * All fields should be added before adding documents to the index. Adding fields after\n * a document has been indexed will have no effect on already indexed documents.\n *\n * Fields can be boosted at build time. This allows terms within that field to have more\n * importance when ranking search results. Use a field boost to specify that matches within\n * one field are more important than other fields.\n *\n * @param {string} fieldName - The name of a field to index in all documents.\n * @param {object} attributes - Optional attributes associated with this field.\n * @param {number} [attributes.boost=1] - Boost applied to all terms within this field.\n * @param {fieldExtractor} [attributes.extractor] - Function to extract a field from a document.\n * @throws {RangeError} fieldName cannot contain unsupported characters '/'\n */\nlunr.Builder.prototype.field = function (fieldName, attributes) {\n if (/\\//.test(fieldName)) {\n throw new RangeError (\"Field '\" + fieldName + \"' contains illegal character '/'\")\n }\n\n this._fields[fieldName] = attributes || {}\n}\n\n/**\n * A parameter to tune the amount of field length normalisation that is applied when\n * calculating relevance scores. A value of 0 will completely disable any normalisation\n * and a value of 1 will fully normalise field lengths. The default is 0.75. Values of b\n * will be clamped to the range 0 - 1.\n *\n * @param {number} number - The value to set for this tuning parameter.\n */\nlunr.Builder.prototype.b = function (number) {\n if (number < 0) {\n this._b = 0\n } else if (number > 1) {\n this._b = 1\n } else {\n this._b = number\n }\n}\n\n/**\n * A parameter that controls the speed at which a rise in term frequency results in term\n * frequency saturation. The default value is 1.2. Setting this to a higher value will give\n * slower saturation levels, a lower value will result in quicker saturation.\n *\n * @param {number} number - The value to set for this tuning parameter.\n */\nlunr.Builder.prototype.k1 = function (number) {\n this._k1 = number\n}\n\n/**\n * Adds a document to the index.\n *\n * Before adding fields to the index the index should have been fully setup, with the document\n * ref and all fields to index already having been specified.\n *\n * The document must have a field name as specified by the ref (by default this is 'id') and\n * it should have all fields defined for indexing, though null or undefined values will not\n * cause errors.\n *\n * Entire documents can be boosted at build time. Applying a boost to a document indicates that\n * this document should rank higher in search results than other documents.\n *\n * @param {object} doc - The document to add to the index.\n * @param {object} attributes - Optional attributes associated with this document.\n * @param {number} [attributes.boost=1] - Boost applied to all terms within this document.\n */\nlunr.Builder.prototype.add = function (doc, attributes) {\n var docRef = doc[this._ref],\n fields = Object.keys(this._fields)\n\n this._documents[docRef] = attributes || {}\n this.documentCount += 1\n\n for (var i = 0; i < fields.length; i++) {\n var fieldName = fields[i],\n extractor = this._fields[fieldName].extractor,\n field = extractor ? extractor(doc) : doc[fieldName],\n tokens = this.tokenizer(field, {\n fields: [fieldName]\n }),\n terms = this.pipeline.run(tokens),\n fieldRef = new lunr.FieldRef (docRef, fieldName),\n fieldTerms = Object.create(null)\n\n this.fieldTermFrequencies[fieldRef] = fieldTerms\n this.fieldLengths[fieldRef] = 0\n\n // store the length of this field for this document\n this.fieldLengths[fieldRef] += terms.length\n\n // calculate term frequencies for this field\n for (var j = 0; j < terms.length; j++) {\n var term = terms[j]\n\n if (fieldTerms[term] == undefined) {\n fieldTerms[term] = 0\n }\n\n fieldTerms[term] += 1\n\n // add to inverted index\n // create an initial posting if one doesn't exist\n if (this.invertedIndex[term] == undefined) {\n var posting = Object.create(null)\n posting[\"_index\"] = this.termIndex\n this.termIndex += 1\n\n for (var k = 0; k < fields.length; k++) {\n posting[fields[k]] = Object.create(null)\n }\n\n this.invertedIndex[term] = posting\n }\n\n // add an entry for this term/fieldName/docRef to the invertedIndex\n if (this.invertedIndex[term][fieldName][docRef] == undefined) {\n this.invertedIndex[term][fieldName][docRef] = Object.create(null)\n }\n\n // store all whitelisted metadata about this token in the\n // inverted index\n for (var l = 0; l < this.metadataWhitelist.length; l++) {\n var metadataKey = this.metadataWhitelist[l],\n metadata = term.metadata[metadataKey]\n\n if (this.invertedIndex[term][fieldName][docRef][metadataKey] == undefined) {\n this.invertedIndex[term][fieldName][docRef][metadataKey] = []\n }\n\n this.invertedIndex[term][fieldName][docRef][metadataKey].push(metadata)\n }\n }\n\n }\n}\n\n/**\n * Calculates the average document length for this index\n *\n * @private\n */\nlunr.Builder.prototype.calculateAverageFieldLengths = function () {\n\n var fieldRefs = Object.keys(this.fieldLengths),\n numberOfFields = fieldRefs.length,\n accumulator = {},\n documentsWithField = {}\n\n for (var i = 0; i < numberOfFields; i++) {\n var fieldRef = lunr.FieldRef.fromString(fieldRefs[i]),\n field = fieldRef.fieldName\n\n documentsWithField[field] || (documentsWithField[field] = 0)\n documentsWithField[field] += 1\n\n accumulator[field] || (accumulator[field] = 0)\n accumulator[field] += this.fieldLengths[fieldRef]\n }\n\n var fields = Object.keys(this._fields)\n\n for (var i = 0; i < fields.length; i++) {\n var fieldName = fields[i]\n accumulator[fieldName] = accumulator[fieldName] / documentsWithField[fieldName]\n }\n\n this.averageFieldLength = accumulator\n}\n\n/**\n * Builds a vector space model of every document using lunr.Vector\n *\n * @private\n */\nlunr.Builder.prototype.createFieldVectors = function () {\n var fieldVectors = {},\n fieldRefs = Object.keys(this.fieldTermFrequencies),\n fieldRefsLength = fieldRefs.length,\n termIdfCache = Object.create(null)\n\n for (var i = 0; i < fieldRefsLength; i++) {\n var fieldRef = lunr.FieldRef.fromString(fieldRefs[i]),\n fieldName = fieldRef.fieldName,\n fieldLength = this.fieldLengths[fieldRef],\n fieldVector = new lunr.Vector,\n termFrequencies = this.fieldTermFrequencies[fieldRef],\n terms = Object.keys(termFrequencies),\n termsLength = terms.length\n\n\n var fieldBoost = this._fields[fieldName].boost || 1,\n docBoost = this._documents[fieldRef.docRef].boost || 1\n\n for (var j = 0; j < termsLength; j++) {\n var term = terms[j],\n tf = termFrequencies[term],\n termIndex = this.invertedIndex[term]._index,\n idf, score, scoreWithPrecision\n\n if (termIdfCache[term] === undefined) {\n idf = lunr.idf(this.invertedIndex[term], this.documentCount)\n termIdfCache[term] = idf\n } else {\n idf = termIdfCache[term]\n }\n\n score = idf * ((this._k1 + 1) * tf) / (this._k1 * (1 - this._b + this._b * (fieldLength / this.averageFieldLength[fieldName])) + tf)\n score *= fieldBoost\n score *= docBoost\n scoreWithPrecision = Math.round(score * 1000) / 1000\n // Converts 1.23456789 to 1.234.\n // Reducing the precision so that the vectors take up less\n // space when serialised. Doing it now so that they behave\n // the same before and after serialisation. Also, this is\n // the fastest approach to reducing a number's precision in\n // JavaScript.\n\n fieldVector.insert(termIndex, scoreWithPrecision)\n }\n\n fieldVectors[fieldRef] = fieldVector\n }\n\n this.fieldVectors = fieldVectors\n}\n\n/**\n * Creates a token set of all tokens in the index using lunr.TokenSet\n *\n * @private\n */\nlunr.Builder.prototype.createTokenSet = function () {\n this.tokenSet = lunr.TokenSet.fromArray(\n Object.keys(this.invertedIndex).sort()\n )\n}\n\n/**\n * Builds the index, creating an instance of lunr.Index.\n *\n * This completes the indexing process and should only be called\n * once all documents have been added to the index.\n *\n * @returns {lunr.Index}\n */\nlunr.Builder.prototype.build = function () {\n this.calculateAverageFieldLengths()\n this.createFieldVectors()\n this.createTokenSet()\n\n return new lunr.Index({\n invertedIndex: this.invertedIndex,\n fieldVectors: this.fieldVectors,\n tokenSet: this.tokenSet,\n fields: Object.keys(this._fields),\n pipeline: this.searchPipeline\n })\n}\n\n/**\n * Applies a plugin to the index builder.\n *\n * A plugin is a function that is called with the index builder as its context.\n * Plugins can be used to customise or extend the behaviour of the index\n * in some way. A plugin is just a function, that encapsulated the custom\n * behaviour that should be applied when building the index.\n *\n * The plugin function will be called with the index builder as its argument, additional\n * arguments can also be passed when calling use. The function will be called\n * with the index builder as its context.\n *\n * @param {Function} plugin The plugin to apply.\n */\nlunr.Builder.prototype.use = function (fn) {\n var args = Array.prototype.slice.call(arguments, 1)\n args.unshift(this)\n fn.apply(this, args)\n}\n/**\n * Contains and collects metadata about a matching document.\n * A single instance of lunr.MatchData is returned as part of every\n * lunr.Index~Result.\n *\n * @constructor\n * @param {string} term - The term this match data is associated with\n * @param {string} field - The field in which the term was found\n * @param {object} metadata - The metadata recorded about this term in this field\n * @property {object} metadata - A cloned collection of metadata associated with this document.\n * @see {@link lunr.Index~Result}\n */\nlunr.MatchData = function (term, field, metadata) {\n var clonedMetadata = Object.create(null),\n metadataKeys = Object.keys(metadata || {})\n\n // Cloning the metadata to prevent the original\n // being mutated during match data combination.\n // Metadata is kept in an array within the inverted\n // index so cloning the data can be done with\n // Array#slice\n for (var i = 0; i < metadataKeys.length; i++) {\n var key = metadataKeys[i]\n clonedMetadata[key] = metadata[key].slice()\n }\n\n this.metadata = Object.create(null)\n\n if (term !== undefined) {\n this.metadata[term] = Object.create(null)\n this.metadata[term][field] = clonedMetadata\n }\n}\n\n/**\n * An instance of lunr.MatchData will be created for every term that matches a\n * document. However only one instance is required in a lunr.Index~Result. This\n * method combines metadata from another instance of lunr.MatchData with this\n * objects metadata.\n *\n * @param {lunr.MatchData} otherMatchData - Another instance of match data to merge with this one.\n * @see {@link lunr.Index~Result}\n */\nlunr.MatchData.prototype.combine = function (otherMatchData) {\n var terms = Object.keys(otherMatchData.metadata)\n\n for (var i = 0; i < terms.length; i++) {\n var term = terms[i],\n fields = Object.keys(otherMatchData.metadata[term])\n\n if (this.metadata[term] == undefined) {\n this.metadata[term] = Object.create(null)\n }\n\n for (var j = 0; j < fields.length; j++) {\n var field = fields[j],\n keys = Object.keys(otherMatchData.metadata[term][field])\n\n if (this.metadata[term][field] == undefined) {\n this.metadata[term][field] = Object.create(null)\n }\n\n for (var k = 0; k < keys.length; k++) {\n var key = keys[k]\n\n if (this.metadata[term][field][key] == undefined) {\n this.metadata[term][field][key] = otherMatchData.metadata[term][field][key]\n } else {\n this.metadata[term][field][key] = this.metadata[term][field][key].concat(otherMatchData.metadata[term][field][key])\n }\n\n }\n }\n }\n}\n\n/**\n * Add metadata for a term/field pair to this instance of match data.\n *\n * @param {string} term - The term this match data is associated with\n * @param {string} field - The field in which the term was found\n * @param {object} metadata - The metadata recorded about this term in this field\n */\nlunr.MatchData.prototype.add = function (term, field, metadata) {\n if (!(term in this.metadata)) {\n this.metadata[term] = Object.create(null)\n this.metadata[term][field] = metadata\n return\n }\n\n if (!(field in this.metadata[term])) {\n this.metadata[term][field] = metadata\n return\n }\n\n var metadataKeys = Object.keys(metadata)\n\n for (var i = 0; i < metadataKeys.length; i++) {\n var key = metadataKeys[i]\n\n if (key in this.metadata[term][field]) {\n this.metadata[term][field][key] = this.metadata[term][field][key].concat(metadata[key])\n } else {\n this.metadata[term][field][key] = metadata[key]\n }\n }\n}\n/**\n * A lunr.Query provides a programmatic way of defining queries to be performed\n * against a {@link lunr.Index}.\n *\n * Prefer constructing a lunr.Query using the {@link lunr.Index#query} method\n * so the query object is pre-initialized with the right index fields.\n *\n * @constructor\n * @property {lunr.Query~Clause[]} clauses - An array of query clauses.\n * @property {string[]} allFields - An array of all available fields in a lunr.Index.\n */\nlunr.Query = function (allFields) {\n this.clauses = []\n this.allFields = allFields\n}\n\n/**\n * Constants for indicating what kind of automatic wildcard insertion will be used when constructing a query clause.\n *\n * This allows wildcards to be added to the beginning and end of a term without having to manually do any string\n * concatenation.\n *\n * The wildcard constants can be bitwise combined to select both leading and trailing wildcards.\n *\n * @constant\n * @default\n * @property {number} wildcard.NONE - The term will have no wildcards inserted, this is the default behaviour\n * @property {number} wildcard.LEADING - Prepend the term with a wildcard, unless a leading wildcard already exists\n * @property {number} wildcard.TRAILING - Append a wildcard to the term, unless a trailing wildcard already exists\n * @see lunr.Query~Clause\n * @see lunr.Query#clause\n * @see lunr.Query#term\n * @example query term with trailing wildcard\n * query.term('foo', { wildcard: lunr.Query.wildcard.TRAILING })\n * @example query term with leading and trailing wildcard\n * query.term('foo', {\n * wildcard: lunr.Query.wildcard.LEADING | lunr.Query.wildcard.TRAILING\n * })\n */\n\nlunr.Query.wildcard = new String (\"*\")\nlunr.Query.wildcard.NONE = 0\nlunr.Query.wildcard.LEADING = 1\nlunr.Query.wildcard.TRAILING = 2\n\n/**\n * Constants for indicating what kind of presence a term must have in matching documents.\n *\n * @constant\n * @enum {number}\n * @see lunr.Query~Clause\n * @see lunr.Query#clause\n * @see lunr.Query#term\n * @example query term with required presence\n * query.term('foo', { presence: lunr.Query.presence.REQUIRED })\n */\nlunr.Query.presence = {\n /**\n * Term's presence in a document is optional, this is the default value.\n */\n OPTIONAL: 1,\n\n /**\n * Term's presence in a document is required, documents that do not contain\n * this term will not be returned.\n */\n REQUIRED: 2,\n\n /**\n * Term's presence in a document is prohibited, documents that do contain\n * this term will not be returned.\n */\n PROHIBITED: 3\n}\n\n/**\n * A single clause in a {@link lunr.Query} contains a term and details on how to\n * match that term against a {@link lunr.Index}.\n *\n * @typedef {Object} lunr.Query~Clause\n * @property {string[]} fields - The fields in an index this clause should be matched against.\n * @property {number} [boost=1] - Any boost that should be applied when matching this clause.\n * @property {number} [editDistance] - Whether the term should have fuzzy matching applied, and how fuzzy the match should be.\n * @property {boolean} [usePipeline] - Whether the term should be passed through the search pipeline.\n * @property {number} [wildcard=lunr.Query.wildcard.NONE] - Whether the term should have wildcards appended or prepended.\n * @property {number} [presence=lunr.Query.presence.OPTIONAL] - The terms presence in any matching documents.\n */\n\n/**\n * Adds a {@link lunr.Query~Clause} to this query.\n *\n * Unless the clause contains the fields to be matched all fields will be matched. In addition\n * a default boost of 1 is applied to the clause.\n *\n * @param {lunr.Query~Clause} clause - The clause to add to this query.\n * @see lunr.Query~Clause\n * @returns {lunr.Query}\n */\nlunr.Query.prototype.clause = function (clause) {\n if (!('fields' in clause)) {\n clause.fields = this.allFields\n }\n\n if (!('boost' in clause)) {\n clause.boost = 1\n }\n\n if (!('usePipeline' in clause)) {\n clause.usePipeline = true\n }\n\n if (!('wildcard' in clause)) {\n clause.wildcard = lunr.Query.wildcard.NONE\n }\n\n if ((clause.wildcard & lunr.Query.wildcard.LEADING) && (clause.term.charAt(0) != lunr.Query.wildcard)) {\n clause.term = \"*\" + clause.term\n }\n\n if ((clause.wildcard & lunr.Query.wildcard.TRAILING) && (clause.term.slice(-1) != lunr.Query.wildcard)) {\n clause.term = \"\" + clause.term + \"*\"\n }\n\n if (!('presence' in clause)) {\n clause.presence = lunr.Query.presence.OPTIONAL\n }\n\n this.clauses.push(clause)\n\n return this\n}\n\n/**\n * A negated query is one in which every clause has a presence of\n * prohibited. These queries require some special processing to return\n * the expected results.\n *\n * @returns boolean\n */\nlunr.Query.prototype.isNegated = function () {\n for (var i = 0; i < this.clauses.length; i++) {\n if (this.clauses[i].presence != lunr.Query.presence.PROHIBITED) {\n return false\n }\n }\n\n return true\n}\n\n/**\n * Adds a term to the current query, under the covers this will create a {@link lunr.Query~Clause}\n * to the list of clauses that make up this query.\n *\n * The term is used as is, i.e. no tokenization will be performed by this method. Instead conversion\n * to a token or token-like string should be done before calling this method.\n *\n * The term will be converted to a string by calling `toString`. Multiple terms can be passed as an\n * array, each term in the array will share the same options.\n *\n * @param {object|object[]} term - The term(s) to add to the query.\n * @param {object} [options] - Any additional properties to add to the query clause.\n * @returns {lunr.Query}\n * @see lunr.Query#clause\n * @see lunr.Query~Clause\n * @example adding a single term to a query\n * query.term(\"foo\")\n * @example adding a single term to a query and specifying search fields, term boost and automatic trailing wildcard\n * query.term(\"foo\", {\n * fields: [\"title\"],\n * boost: 10,\n * wildcard: lunr.Query.wildcard.TRAILING\n * })\n * @example using lunr.tokenizer to convert a string to tokens before using them as terms\n * query.term(lunr.tokenizer(\"foo bar\"))\n */\nlunr.Query.prototype.term = function (term, options) {\n if (Array.isArray(term)) {\n term.forEach(function (t) { this.term(t, lunr.utils.clone(options)) }, this)\n return this\n }\n\n var clause = options || {}\n clause.term = term.toString()\n\n this.clause(clause)\n\n return this\n}\nlunr.QueryParseError = function (message, start, end) {\n this.name = \"QueryParseError\"\n this.message = message\n this.start = start\n this.end = end\n}\n\nlunr.QueryParseError.prototype = new Error\nlunr.QueryLexer = function (str) {\n this.lexemes = []\n this.str = str\n this.length = str.length\n this.pos = 0\n this.start = 0\n this.escapeCharPositions = []\n}\n\nlunr.QueryLexer.prototype.run = function () {\n var state = lunr.QueryLexer.lexText\n\n while (state) {\n state = state(this)\n }\n}\n\nlunr.QueryLexer.prototype.sliceString = function () {\n var subSlices = [],\n sliceStart = this.start,\n sliceEnd = this.pos\n\n for (var i = 0; i < this.escapeCharPositions.length; i++) {\n sliceEnd = this.escapeCharPositions[i]\n subSlices.push(this.str.slice(sliceStart, sliceEnd))\n sliceStart = sliceEnd + 1\n }\n\n subSlices.push(this.str.slice(sliceStart, this.pos))\n this.escapeCharPositions.length = 0\n\n return subSlices.join('')\n}\n\nlunr.QueryLexer.prototype.emit = function (type) {\n this.lexemes.push({\n type: type,\n str: this.sliceString(),\n start: this.start,\n end: this.pos\n })\n\n this.start = this.pos\n}\n\nlunr.QueryLexer.prototype.escapeCharacter = function () {\n this.escapeCharPositions.push(this.pos - 1)\n this.pos += 1\n}\n\nlunr.QueryLexer.prototype.next = function () {\n if (this.pos >= this.length) {\n return lunr.QueryLexer.EOS\n }\n\n var char = this.str.charAt(this.pos)\n this.pos += 1\n return char\n}\n\nlunr.QueryLexer.prototype.width = function () {\n return this.pos - this.start\n}\n\nlunr.QueryLexer.prototype.ignore = function () {\n if (this.start == this.pos) {\n this.pos += 1\n }\n\n this.start = this.pos\n}\n\nlunr.QueryLexer.prototype.backup = function () {\n this.pos -= 1\n}\n\nlunr.QueryLexer.prototype.acceptDigitRun = function () {\n var char, charCode\n\n do {\n char = this.next()\n charCode = char.charCodeAt(0)\n } while (charCode > 47 && charCode < 58)\n\n if (char != lunr.QueryLexer.EOS) {\n this.backup()\n }\n}\n\nlunr.QueryLexer.prototype.more = function () {\n return this.pos < this.length\n}\n\nlunr.QueryLexer.EOS = 'EOS'\nlunr.QueryLexer.FIELD = 'FIELD'\nlunr.QueryLexer.TERM = 'TERM'\nlunr.QueryLexer.EDIT_DISTANCE = 'EDIT_DISTANCE'\nlunr.QueryLexer.BOOST = 'BOOST'\nlunr.QueryLexer.PRESENCE = 'PRESENCE'\n\nlunr.QueryLexer.lexField = function (lexer) {\n lexer.backup()\n lexer.emit(lunr.QueryLexer.FIELD)\n lexer.ignore()\n return lunr.QueryLexer.lexText\n}\n\nlunr.QueryLexer.lexTerm = function (lexer) {\n if (lexer.width() > 1) {\n lexer.backup()\n lexer.emit(lunr.QueryLexer.TERM)\n }\n\n lexer.ignore()\n\n if (lexer.more()) {\n return lunr.QueryLexer.lexText\n }\n}\n\nlunr.QueryLexer.lexEditDistance = function (lexer) {\n lexer.ignore()\n lexer.acceptDigitRun()\n lexer.emit(lunr.QueryLexer.EDIT_DISTANCE)\n return lunr.QueryLexer.lexText\n}\n\nlunr.QueryLexer.lexBoost = function (lexer) {\n lexer.ignore()\n lexer.acceptDigitRun()\n lexer.emit(lunr.QueryLexer.BOOST)\n return lunr.QueryLexer.lexText\n}\n\nlunr.QueryLexer.lexEOS = function (lexer) {\n if (lexer.width() > 0) {\n lexer.emit(lunr.QueryLexer.TERM)\n }\n}\n\n// This matches the separator used when tokenising fields\n// within a document. These should match otherwise it is\n// not possible to search for some tokens within a document.\n//\n// It is possible for the user to change the separator on the\n// tokenizer so it _might_ clash with any other of the special\n// characters already used within the search string, e.g. :.\n//\n// This means that it is possible to change the separator in\n// such a way that makes some words unsearchable using a search\n// string.\nlunr.QueryLexer.termSeparator = lunr.tokenizer.separator\n\nlunr.QueryLexer.lexText = function (lexer) {\n while (true) {\n var char = lexer.next()\n\n if (char == lunr.QueryLexer.EOS) {\n return lunr.QueryLexer.lexEOS\n }\n\n // Escape character is '\\'\n if (char.charCodeAt(0) == 92) {\n lexer.escapeCharacter()\n continue\n }\n\n if (char == \":\") {\n return lunr.QueryLexer.lexField\n }\n\n if (char == \"~\") {\n lexer.backup()\n if (lexer.width() > 0) {\n lexer.emit(lunr.QueryLexer.TERM)\n }\n return lunr.QueryLexer.lexEditDistance\n }\n\n if (char == \"^\") {\n lexer.backup()\n if (lexer.width() > 0) {\n lexer.emit(lunr.QueryLexer.TERM)\n }\n return lunr.QueryLexer.lexBoost\n }\n\n // \"+\" indicates term presence is required\n // checking for length to ensure that only\n // leading \"+\" are considered\n if (char == \"+\" && lexer.width() === 1) {\n lexer.emit(lunr.QueryLexer.PRESENCE)\n return lunr.QueryLexer.lexText\n }\n\n // \"-\" indicates term presence is prohibited\n // checking for length to ensure that only\n // leading \"-\" are considered\n if (char == \"-\" && lexer.width() === 1) {\n lexer.emit(lunr.QueryLexer.PRESENCE)\n return lunr.QueryLexer.lexText\n }\n\n if (char.match(lunr.QueryLexer.termSeparator)) {\n return lunr.QueryLexer.lexTerm\n }\n }\n}\n\nlunr.QueryParser = function (str, query) {\n this.lexer = new lunr.QueryLexer (str)\n this.query = query\n this.currentClause = {}\n this.lexemeIdx = 0\n}\n\nlunr.QueryParser.prototype.parse = function () {\n this.lexer.run()\n this.lexemes = this.lexer.lexemes\n\n var state = lunr.QueryParser.parseClause\n\n while (state) {\n state = state(this)\n }\n\n return this.query\n}\n\nlunr.QueryParser.prototype.peekLexeme = function () {\n return this.lexemes[this.lexemeIdx]\n}\n\nlunr.QueryParser.prototype.consumeLexeme = function () {\n var lexeme = this.peekLexeme()\n this.lexemeIdx += 1\n return lexeme\n}\n\nlunr.QueryParser.prototype.nextClause = function () {\n var completedClause = this.currentClause\n this.query.clause(completedClause)\n this.currentClause = {}\n}\n\nlunr.QueryParser.parseClause = function (parser) {\n var lexeme = parser.peekLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n switch (lexeme.type) {\n case lunr.QueryLexer.PRESENCE:\n return lunr.QueryParser.parsePresence\n case lunr.QueryLexer.FIELD:\n return lunr.QueryParser.parseField\n case lunr.QueryLexer.TERM:\n return lunr.QueryParser.parseTerm\n default:\n var errorMessage = \"expected either a field or a term, found \" + lexeme.type\n\n if (lexeme.str.length >= 1) {\n errorMessage += \" with value '\" + lexeme.str + \"'\"\n }\n\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n}\n\nlunr.QueryParser.parsePresence = function (parser) {\n var lexeme = parser.consumeLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n switch (lexeme.str) {\n case \"-\":\n parser.currentClause.presence = lunr.Query.presence.PROHIBITED\n break\n case \"+\":\n parser.currentClause.presence = lunr.Query.presence.REQUIRED\n break\n default:\n var errorMessage = \"unrecognised presence operator'\" + lexeme.str + \"'\"\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n var nextLexeme = parser.peekLexeme()\n\n if (nextLexeme == undefined) {\n var errorMessage = \"expecting term or field, found nothing\"\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n switch (nextLexeme.type) {\n case lunr.QueryLexer.FIELD:\n return lunr.QueryParser.parseField\n case lunr.QueryLexer.TERM:\n return lunr.QueryParser.parseTerm\n default:\n var errorMessage = \"expecting term or field, found '\" + nextLexeme.type + \"'\"\n throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)\n }\n}\n\nlunr.QueryParser.parseField = function (parser) {\n var lexeme = parser.consumeLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n if (parser.query.allFields.indexOf(lexeme.str) == -1) {\n var possibleFields = parser.query.allFields.map(function (f) { return \"'\" + f + \"'\" }).join(', '),\n errorMessage = \"unrecognised field '\" + lexeme.str + \"', possible fields: \" + possibleFields\n\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n parser.currentClause.fields = [lexeme.str]\n\n var nextLexeme = parser.peekLexeme()\n\n if (nextLexeme == undefined) {\n var errorMessage = \"expecting term, found nothing\"\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n switch (nextLexeme.type) {\n case lunr.QueryLexer.TERM:\n return lunr.QueryParser.parseTerm\n default:\n var errorMessage = \"expecting term, found '\" + nextLexeme.type + \"'\"\n throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)\n }\n}\n\nlunr.QueryParser.parseTerm = function (parser) {\n var lexeme = parser.consumeLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n parser.currentClause.term = lexeme.str.toLowerCase()\n\n if (lexeme.str.indexOf(\"*\") != -1) {\n parser.currentClause.usePipeline = false\n }\n\n var nextLexeme = parser.peekLexeme()\n\n if (nextLexeme == undefined) {\n parser.nextClause()\n return\n }\n\n switch (nextLexeme.type) {\n case lunr.QueryLexer.TERM:\n parser.nextClause()\n return lunr.QueryParser.parseTerm\n case lunr.QueryLexer.FIELD:\n parser.nextClause()\n return lunr.QueryParser.parseField\n case lunr.QueryLexer.EDIT_DISTANCE:\n return lunr.QueryParser.parseEditDistance\n case lunr.QueryLexer.BOOST:\n return lunr.QueryParser.parseBoost\n case lunr.QueryLexer.PRESENCE:\n parser.nextClause()\n return lunr.QueryParser.parsePresence\n default:\n var errorMessage = \"Unexpected lexeme type '\" + nextLexeme.type + \"'\"\n throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)\n }\n}\n\nlunr.QueryParser.parseEditDistance = function (parser) {\n var lexeme = parser.consumeLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n var editDistance = parseInt(lexeme.str, 10)\n\n if (isNaN(editDistance)) {\n var errorMessage = \"edit distance must be numeric\"\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n parser.currentClause.editDistance = editDistance\n\n var nextLexeme = parser.peekLexeme()\n\n if (nextLexeme == undefined) {\n parser.nextClause()\n return\n }\n\n switch (nextLexeme.type) {\n case lunr.QueryLexer.TERM:\n parser.nextClause()\n return lunr.QueryParser.parseTerm\n case lunr.QueryLexer.FIELD:\n parser.nextClause()\n return lunr.QueryParser.parseField\n case lunr.QueryLexer.EDIT_DISTANCE:\n return lunr.QueryParser.parseEditDistance\n case lunr.QueryLexer.BOOST:\n return lunr.QueryParser.parseBoost\n case lunr.QueryLexer.PRESENCE:\n parser.nextClause()\n return lunr.QueryParser.parsePresence\n default:\n var errorMessage = \"Unexpected lexeme type '\" + nextLexeme.type + \"'\"\n throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)\n }\n}\n\nlunr.QueryParser.parseBoost = function (parser) {\n var lexeme = parser.consumeLexeme()\n\n if (lexeme == undefined) {\n return\n }\n\n var boost = parseInt(lexeme.str, 10)\n\n if (isNaN(boost)) {\n var errorMessage = \"boost must be numeric\"\n throw new lunr.QueryParseError (errorMessage, lexeme.start, lexeme.end)\n }\n\n parser.currentClause.boost = boost\n\n var nextLexeme = parser.peekLexeme()\n\n if (nextLexeme == undefined) {\n parser.nextClause()\n return\n }\n\n switch (nextLexeme.type) {\n case lunr.QueryLexer.TERM:\n parser.nextClause()\n return lunr.QueryParser.parseTerm\n case lunr.QueryLexer.FIELD:\n parser.nextClause()\n return lunr.QueryParser.parseField\n case lunr.QueryLexer.EDIT_DISTANCE:\n return lunr.QueryParser.parseEditDistance\n case lunr.QueryLexer.BOOST:\n return lunr.QueryParser.parseBoost\n case lunr.QueryLexer.PRESENCE:\n parser.nextClause()\n return lunr.QueryParser.parsePresence\n default:\n var errorMessage = \"Unexpected lexeme type '\" + nextLexeme.type + \"'\"\n throw new lunr.QueryParseError (errorMessage, nextLexeme.start, nextLexeme.end)\n }\n}\n\n /**\n * export the module via AMD, CommonJS or as a browser global\n * Export code from https://github.com/umdjs/umd/blob/master/returnExports.js\n */\n ;(function (root, factory) {\n if (typeof define === 'function' && define.amd) {\n // AMD. Register as an anonymous module.\n define(factory)\n } else if (typeof exports === 'object') {\n /**\n * Node. Does not work with strict CommonJS, but\n * only CommonJS-like enviroments that support module.exports,\n * like Node.\n */\n module.exports = factory()\n } else {\n // Browser globals (root is window)\n root.lunr = factory()\n }\n }(this, function () {\n /**\n * Just return a value to define the module export.\n * This example returns an object, but the module\n * can return a function as the exported value.\n */\n return lunr\n }))\n})();\n", "/*!\n * escape-html\n * Copyright(c) 2012-2013 TJ Holowaychuk\n * Copyright(c) 2015 Andreas Lubbe\n * Copyright(c) 2015 Tiancheng \"Timothy\" Gu\n * MIT Licensed\n */\n\n'use strict';\n\n/**\n * Module variables.\n * @private\n */\n\nvar matchHtmlRegExp = /[\"'&<>]/;\n\n/**\n * Module exports.\n * @public\n */\n\nmodule.exports = escapeHtml;\n\n/**\n * Escape special characters in the given string of html.\n *\n * @param {string} string The string to escape for inserting into HTML\n * @return {string}\n * @public\n */\n\nfunction escapeHtml(string) {\n var str = '' + string;\n var match = matchHtmlRegExp.exec(str);\n\n if (!match) {\n return str;\n }\n\n var escape;\n var html = '';\n var index = 0;\n var lastIndex = 0;\n\n for (index = match.index; index < str.length; index++) {\n switch (str.charCodeAt(index)) {\n case 34: // \"\n escape = '"';\n break;\n case 38: // &\n escape = '&';\n break;\n case 39: // '\n escape = ''';\n break;\n case 60: // <\n escape = '<';\n break;\n case 62: // >\n escape = '>';\n break;\n default:\n continue;\n }\n\n if (lastIndex !== index) {\n html += str.substring(lastIndex, index);\n }\n\n lastIndex = index + 1;\n html += escape;\n }\n\n return lastIndex !== index\n ? html + str.substring(lastIndex, index)\n : html;\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A RTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport lunr from \"lunr\"\n\nimport { Search, SearchIndexConfig } from \"../../_\"\nimport {\n SearchMessage,\n SearchMessageType\n} from \"../message\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Add support for usage with `iframe-worker` polyfill\n *\n * While `importScripts` is synchronous when executed inside of a web worker,\n * it's not possible to provide a synchronous polyfilled implementation. The\n * cool thing is that awaiting a non-Promise is a noop, so extending the type\n * definition to return a `Promise` shouldn't break anything.\n *\n * @see https://bit.ly/2PjDnXi - GitHub comment\n */\ndeclare global {\n function importScripts(...urls: string[]): Promise | void\n}\n\n/* ----------------------------------------------------------------------------\n * Data\n * ------------------------------------------------------------------------- */\n\n/**\n * Search index\n */\nlet index: Search\n\n/* ----------------------------------------------------------------------------\n * Helper functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Fetch (= import) multi-language support through `lunr-languages`\n *\n * This function automatically imports the stemmers necessary to process the\n * languages, which are defined through the search index configuration.\n *\n * If the worker runs inside of an `iframe` (when using `iframe-worker` as\n * a shim), the base URL for the stemmers to be loaded must be determined by\n * searching for the first `script` element with a `src` attribute, which will\n * contain the contents of this script.\n *\n * @param config - Search index configuration\n *\n * @returns Promise resolving with no result\n */\nasync function setupSearchLanguages(\n config: SearchIndexConfig\n): Promise {\n let base = \"../lunr\"\n\n /* Detect `iframe-worker` and fix base URL */\n if (typeof parent !== \"undefined\" && \"IFrameWorker\" in parent) {\n const worker = document.querySelector(\"script[src]\")!\n const [path] = worker.src.split(\"/worker\")\n\n /* Prefix base with path */\n base = base.replace(\"..\", path)\n }\n\n /* Add scripts for languages */\n const scripts = []\n for (const lang of config.lang) {\n if (lang === \"ja\") scripts.push(`${base}/tinyseg.js`)\n if (lang !== \"en\") scripts.push(`${base}/min/lunr.${lang}.min.js`)\n }\n\n /* Add multi-language support */\n if (config.lang.length > 1)\n scripts.push(`${base}/min/lunr.multi.min.js`)\n\n /* Load scripts synchronously */\n if (scripts.length)\n await importScripts(\n `${base}/min/lunr.stemmer.support.min.js`,\n ...scripts\n )\n}\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Message handler\n *\n * @param message - Source message\n *\n * @returns Target message\n */\nexport async function handler(\n message: SearchMessage\n): Promise {\n switch (message.type) {\n\n /* Search setup message */\n case SearchMessageType.SETUP:\n await setupSearchLanguages(message.data.config)\n index = new Search(message.data)\n return {\n type: SearchMessageType.READY\n }\n\n /* Search query message */\n case SearchMessageType.QUERY:\n return {\n type: SearchMessageType.RESULT,\n data: index ? index.search(message.data) : []\n }\n\n /* All other messages */\n default:\n throw new TypeError(\"Invalid message type\")\n }\n}\n\n/* ----------------------------------------------------------------------------\n * Worker\n * ------------------------------------------------------------------------- */\n\n/* @ts-ignore - expose Lunr.js in global scope, or stemmers will not work */\nself.lunr = lunr\n\n/* Handle messages */\naddEventListener(\"message\", async ev => {\n postMessage(await handler(ev.data))\n})\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport escapeHTML from \"escape-html\"\n\nimport { SearchIndexDocument } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search document\n */\nexport interface SearchDocument extends SearchIndexDocument {\n parent?: SearchIndexDocument /* Parent article */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search document mapping\n */\nexport type SearchDocumentMap = Map\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Create a search document mapping\n *\n * @param docs - Search index documents\n *\n * @returns Search document map\n */\nexport function setupSearchDocumentMap(\n docs: SearchIndexDocument[]\n): SearchDocumentMap {\n const documents = new Map()\n const parents = new Set()\n for (const doc of docs) {\n const [path, hash] = doc.location.split(\"#\")\n\n /* Extract location and title */\n const location = doc.location\n const title = doc.title\n\n /* Escape and cleanup text */\n const text = escapeHTML(doc.text)\n .replace(/\\s+(?=[,.:;!?])/g, \"\")\n .replace(/\\s+/g, \" \")\n\n /* Handle section */\n if (hash) {\n const parent = documents.get(path)!\n\n /* Ignore first section, override article */\n if (!parents.has(parent)) {\n parent.title = doc.title\n parent.text = text\n\n /* Remember that we processed the article */\n parents.add(parent)\n\n /* Add subsequent section */\n } else {\n documents.set(location, {\n location,\n title,\n text,\n parent\n })\n }\n\n /* Add article */\n } else {\n documents.set(location, {\n location,\n title,\n text\n })\n }\n }\n return documents\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { SearchIndexConfig } from \"../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search highlight function\n *\n * @param value - Value\n *\n * @returns Highlighted value\n */\nexport type SearchHighlightFn = (value: string) => string\n\n/**\n * Search highlight factory function\n *\n * @param query - Query value\n *\n * @returns Search highlight function\n */\nexport type SearchHighlightFactoryFn = (query: string) => SearchHighlightFn\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Create a search highlighter\n *\n * @param config - Search index configuration\n *\n * @returns Search highlight factory function\n */\nexport function setupSearchHighlighter(\n config: SearchIndexConfig\n): SearchHighlightFactoryFn {\n const separator = new RegExp(config.separator, \"img\")\n const highlight = (_: unknown, data: string, term: string) => {\n return `${data}${term}`\n }\n\n /* Return factory function */\n return (query: string) => {\n query = query\n .replace(/[\\s*+\\-:~^]+/g, \" \")\n .trim()\n\n /* Create search term match expression */\n const match = new RegExp(`(^|${config.separator})(${\n query\n .replace(/[|\\\\{}()[\\]^$+*?.-]/g, \"\\\\$&\")\n .replace(separator, \"|\")\n })`, \"img\")\n\n /* Highlight string value */\n return value => value\n .replace(match, highlight)\n .replace(/<\\/mark>(\\s+)]*>/img, \"$1\")\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search query clause\n */\nexport interface SearchQueryClause {\n presence: lunr.Query.presence /* Clause presence */\n term: string /* Clause term */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search query terms\n */\nexport type SearchQueryTerms = Record\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Parse a search query for analysis\n *\n * @param value - Query value\n *\n * @returns Search query clauses\n */\nexport function parseSearchQuery(\n value: string\n): SearchQueryClause[] {\n const query = new (lunr as any).Query([\"title\", \"text\"])\n const parser = new (lunr as any).QueryParser(value, query)\n\n /* Parse and return query clauses */\n parser.parse()\n return query.clauses\n}\n\n/**\n * Analyze the search query clauses in regard to the search terms found\n *\n * @param query - Search query clauses\n * @param terms - Search terms\n *\n * @returns Search query terms\n */\nexport function getSearchQueryTerms(\n query: SearchQueryClause[], terms: string[]\n): SearchQueryTerms {\n const clauses = new Set(query)\n\n /* Match query clauses against terms */\n const result: SearchQueryTerms = {}\n for (let t = 0; t < terms.length; t++)\n for (const clause of clauses)\n if (terms[t].startsWith(clause.term)) {\n result[clause.term] = true\n clauses.delete(clause)\n }\n\n /* Annotate unmatched query clauses */\n for (const clause of clauses)\n result[clause.term] = false\n\n /* Return query terms */\n return result\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport {\n SearchDocument,\n SearchDocumentMap,\n setupSearchDocumentMap\n} from \"../document\"\nimport {\n SearchHighlightFactoryFn,\n setupSearchHighlighter\n} from \"../highlighter\"\nimport {\n SearchQueryTerms,\n getSearchQueryTerms,\n parseSearchQuery\n} from \"../query\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search index configuration\n */\nexport interface SearchIndexConfig {\n lang: string[] /* Search languages */\n separator: string /* Search separator */\n}\n\n/**\n * Search index document\n */\nexport interface SearchIndexDocument {\n location: string /* Document location */\n title: string /* Document title */\n text: string /* Document text */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search index pipeline function\n */\nexport type SearchIndexPipelineFn =\n | \"trimmer\" /* Trimmer */\n | \"stopWordFilter\" /* Stop word filter */\n | \"stemmer\" /* Stemmer */\n\n/**\n * Search index pipeline\n */\nexport type SearchIndexPipeline = SearchIndexPipelineFn[]\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search index\n *\n * This interfaces describes the format of the `search_index.json` file which\n * is automatically built by the MkDocs search plugin.\n */\nexport interface SearchIndex {\n config: SearchIndexConfig /* Search index configuration */\n docs: SearchIndexDocument[] /* Search index documents */\n index?: object /* Prebuilt index */\n pipeline?: SearchIndexPipeline /* Search index pipeline */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search metadata\n */\nexport interface SearchMetadata {\n score: number /* Score (relevance) */\n terms: SearchQueryTerms /* Search query terms */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * Search result\n */\nexport type SearchResult = Array\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Compute the difference of two lists of strings\n *\n * @param a - 1st list of strings\n * @param b - 2nd list of strings\n *\n * @returns Difference\n */\nfunction difference(a: string[], b: string[]): string[] {\n const [x, y] = [new Set(a), new Set(b)]\n return [\n ...new Set([...x].filter(value => !y.has(value)))\n ]\n}\n\n/* ----------------------------------------------------------------------------\n * Class\n * ------------------------------------------------------------------------- */\n\n/**\n * Search index\n */\nexport class Search {\n\n /**\n * Search document mapping\n *\n * A mapping of URLs (including hash fragments) to the actual articles and\n * sections of the documentation. The search document mapping must be created\n * regardless of whether the index was prebuilt or not, as Lunr.js itself\n * only stores the actual index.\n */\n protected documents: SearchDocumentMap\n\n /**\n * Search highlight factory function\n */\n protected highlight: SearchHighlightFactoryFn\n\n /**\n * The underlying Lunr.js search index\n */\n protected index: lunr.Index\n\n /**\n * Create the search integration\n *\n * @param data - Search index\n */\n public constructor({ config, docs, pipeline, index }: SearchIndex) {\n this.documents = setupSearchDocumentMap(docs)\n this.highlight = setupSearchHighlighter(config)\n\n /* Set separator for tokenizer */\n lunr.tokenizer.separator = new RegExp(config.separator)\n\n /* If no index was given, create it */\n if (typeof index === \"undefined\") {\n this.index = lunr(function () {\n\n /* Set up multi-language support */\n if (config.lang.length === 1 && config.lang[0] !== \"en\") {\n this.use((lunr as any)[config.lang[0]])\n } else if (config.lang.length > 1) {\n this.use((lunr as any).multiLanguage(...config.lang))\n }\n\n /* Compute functions to be removed from the pipeline */\n const fns = difference([\n \"trimmer\", \"stopWordFilter\", \"stemmer\"\n ], pipeline!)\n\n /* Remove functions from the pipeline for registered languages */\n for (const lang of config.lang.map(language => (\n language === \"en\" ? lunr : (lunr as any)[language]\n ))) {\n for (const fn of fns) {\n this.pipeline.remove(lang[fn])\n this.searchPipeline.remove(lang[fn])\n }\n }\n\n /* Set up fields and reference */\n this.field(\"title\", { boost: 1000 })\n this.field(\"text\")\n this.ref(\"location\")\n\n /* Index documents */\n for (const doc of docs)\n this.add(doc)\n })\n\n /* Handle prebuilt index */\n } else {\n this.index = lunr.Index.load(index)\n }\n }\n\n /**\n * Search for matching documents\n *\n * The search index which MkDocs provides is divided up into articles, which\n * contain the whole content of the individual pages, and sections, which only\n * contain the contents of the subsections obtained by breaking the individual\n * pages up at `h1` ... `h6`. As there may be many sections on different pages\n * with identical titles (for example within this very project, e.g. \"Usage\"\n * or \"Installation\"), they need to be put into the context of the containing\n * page. For this reason, section results are grouped within their respective\n * articles which are the top-level results that are returned.\n *\n * @param query - Query value\n *\n * @returns Search results\n */\n public search(query: string): SearchResult[] {\n if (query) {\n try {\n const highlight = this.highlight(query)\n\n /* Parse query to extract clauses for analysis */\n const clauses = parseSearchQuery(query)\n .filter(clause => (\n clause.presence !== lunr.Query.presence.PROHIBITED\n ))\n\n /* Perform search and post-process results */\n const groups = this.index.search(`${query}*`)\n\n /* Apply post-query boosts based on title and search query terms */\n .reduce((results, { ref, score, matchData }) => {\n const document = this.documents.get(ref)\n if (typeof document !== \"undefined\") {\n const { location, title, text, parent } = document\n\n /* Compute and analyze search query terms */\n const terms = getSearchQueryTerms(\n clauses,\n Object.keys(matchData.metadata)\n )\n\n /* Highlight title and text and apply post-query boosts */\n const boost = +!parent + +Object.values(terms).every(t => t)\n results.push({\n location,\n title: highlight(title),\n text: highlight(text),\n score: score * (1 + boost),\n terms\n })\n }\n return results\n }, [])\n\n /* Sort search results again after applying boosts */\n .sort((a, b) => b.score - a.score)\n\n /* Group search results by page */\n .reduce((results, result) => {\n const document = this.documents.get(result.location)\n if (typeof document !== \"undefined\") {\n const ref = \"parent\" in document\n ? document.parent!.location\n : document.location\n results.set(ref, [...results.get(ref) || [], result])\n }\n return results\n }, new Map())\n\n /* Expand grouped search results */\n return [...groups.values()]\n\n /* Log errors to console (for now) */\n } catch {\n console.warn(`Invalid query: ${query} \u2013 see https://bit.ly/2s3ChXG`)\n }\n }\n\n /* Return nothing in case of error or empty query */\n return []\n }\n}\n", "/*\n * Copyright (c) 2016-2021 Martin Donath \n *\n * Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to\n * deal in the Software without restriction, including without limitation the\n * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or\n * sell copies of the Software, and to permit persons to whom the Software is\n * furnished to do so, subject to the following conditions:\n *\n * The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n *\n * THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n * FITNESS FOR A RTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE\n * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS\n * IN THE SOFTWARE.\n */\n\nimport { SearchIndex, SearchResult } from \"../../_\"\n\n/* ----------------------------------------------------------------------------\n * Types\n * ------------------------------------------------------------------------- */\n\n/**\n * Search message type\n */\nexport const enum SearchMessageType {\n SETUP, /* Search index setup */\n READY, /* Search index ready */\n QUERY, /* Search query */\n RESULT /* Search results */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * A message containing the data necessary to setup the search index\n */\nexport interface SearchSetupMessage {\n type: SearchMessageType.SETUP /* Message type */\n data: SearchIndex /* Message data */\n}\n\n/**\n * A message indicating the search index is ready\n */\nexport interface SearchReadyMessage {\n type: SearchMessageType.READY /* Message type */\n}\n\n/**\n * A message containing a search query\n */\nexport interface SearchQueryMessage {\n type: SearchMessageType.QUERY /* Message type */\n data: string /* Message data */\n}\n\n/**\n * A message containing results for a search query\n */\nexport interface SearchResultMessage {\n type: SearchMessageType.RESULT /* Message type */\n data: SearchResult[] /* Message data */\n}\n\n/* ------------------------------------------------------------------------- */\n\n/**\n * A message exchanged with the search worker\n */\nexport type SearchMessage =\n | SearchSetupMessage\n | SearchReadyMessage\n | SearchQueryMessage\n | SearchResultMessage\n\n/* ----------------------------------------------------------------------------\n * Functions\n * ------------------------------------------------------------------------- */\n\n/**\n * Type guard for search setup messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchSetupMessage(\n message: SearchMessage\n): message is SearchSetupMessage {\n return message.type === SearchMessageType.SETUP\n}\n\n/**\n * Type guard for search ready messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchReadyMessage(\n message: SearchMessage\n): message is SearchReadyMessage {\n return message.type === SearchMessageType.READY\n}\n\n/**\n * Type guard for search query messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchQueryMessage(\n message: SearchMessage\n): message is SearchQueryMessage {\n return message.type === SearchMessageType.QUERY\n}\n\n/**\n * Type guard for search result messages\n *\n * @param message - Search worker message\n *\n * @returns Test result\n */\nexport function isSearchResultMessage(\n message: SearchMessage\n): message is SearchResultMessage {\n return message.type === SearchMessageType.RESULT\n}\n"], + "mappings": "+yBAAA,gBAMC,AAAC,WAAU,CAiCZ,GAAI,GAAO,SAAU,EAAQ,CAC3B,GAAI,GAAU,GAAI,GAAK,QAEvB,SAAQ,SAAS,IACf,EAAK,QACL,EAAK,eACL,EAAK,SAGP,EAAQ,eAAe,IACrB,EAAK,SAGP,EAAO,KAAK,EAAS,GACd,EAAQ,SAGjB,EAAK,QAAU,QACf,AASA,EAAK,MAAQ,GASb,EAAK,MAAM,KAAQ,SAAU,EAAQ,CAEnC,MAAO,UAAU,EAAS,CACxB,AAAI,EAAO,SAAW,QAAQ,MAC5B,QAAQ,KAAK,KAIhB,MAaH,EAAK,MAAM,SAAW,SAAU,EAAK,CACnC,MAAI,AAAkB,IAAQ,KACrB,GAEA,EAAI,YAoBf,EAAK,MAAM,MAAQ,SAAU,EAAK,CAChC,GAAI,GAAQ,KACV,MAAO,GAMT,OAHI,GAAQ,OAAO,OAAO,MACtB,EAAO,OAAO,KAAK,GAEd,EAAI,EAAG,EAAI,EAAK,OAAQ,IAAK,CACpC,GAAI,GAAM,EAAK,GACX,EAAM,EAAI,GAEd,GAAI,MAAM,QAAQ,GAAM,CACtB,EAAM,GAAO,EAAI,QACjB,SAGF,GAAI,MAAO,IAAQ,UACf,MAAO,IAAQ,UACf,MAAO,IAAQ,UAAW,CAC5B,EAAM,GAAO,EACb,SAGF,KAAM,IAAI,WAAU,yDAGtB,MAAO,IAET,EAAK,SAAW,SAAU,EAAQ,EAAW,EAAa,CACxD,KAAK,OAAS,EACd,KAAK,UAAY,EACjB,KAAK,aAAe,GAGtB,EAAK,SAAS,OAAS,IAEvB,EAAK,SAAS,WAAa,SAAU,EAAG,CACtC,GAAI,GAAI,EAAE,QAAQ,EAAK,SAAS,QAEhC,GAAI,IAAM,GACR,KAAM,6BAGR,GAAI,GAAW,EAAE,MAAM,EAAG,GACtB,EAAS,EAAE,MAAM,EAAI,GAEzB,MAAO,IAAI,GAAK,SAAU,EAAQ,EAAU,IAG9C,EAAK,SAAS,UAAU,SAAW,UAAY,CAC7C,MAAI,MAAK,cAAgB,MACvB,MAAK,aAAe,KAAK,UAAY,EAAK,SAAS,OAAS,KAAK,QAG5D,KAAK,cAEd,AAUA,EAAK,IAAM,SAAU,EAAU,CAG7B,GAFA,KAAK,SAAW,OAAO,OAAO,MAE1B,EAAU,CACZ,KAAK,OAAS,EAAS,OAEvB,OAAS,GAAI,EAAG,EAAI,KAAK,OAAQ,IAC/B,KAAK,SAAS,EAAS,IAAM,OAG/B,MAAK,OAAS,GAWlB,EAAK,IAAI,SAAW,CAClB,UAAW,SAAU,EAAO,CAC1B,MAAO,IAGT,MAAO,UAAY,CACjB,MAAO,OAGT,SAAU,UAAY,CACpB,MAAO,KAWX,EAAK,IAAI,MAAQ,CACf,UAAW,UAAY,CACrB,MAAO,OAGT,MAAO,SAAU,EAAO,CACtB,MAAO,IAGT,SAAU,UAAY,CACpB,MAAO,KAUX,EAAK,IAAI,UAAU,SAAW,SAAU,EAAQ,CAC9C,MAAO,CAAC,CAAC,KAAK,SAAS,IAWzB,EAAK,IAAI,UAAU,UAAY,SAAU,EAAO,CAC9C,GAAI,GAAG,EAAG,EAAU,EAAe,GAEnC,GAAI,IAAU,EAAK,IAAI,SACrB,MAAO,MAGT,GAAI,IAAU,EAAK,IAAI,MACrB,MAAO,GAGT,AAAI,KAAK,OAAS,EAAM,OACtB,GAAI,KACJ,EAAI,GAEJ,GAAI,EACJ,EAAI,MAGN,EAAW,OAAO,KAAK,EAAE,UAEzB,OAAS,GAAI,EAAG,EAAI,EAAS,OAAQ,IAAK,CACxC,GAAI,GAAU,EAAS,GACvB,AAAI,IAAW,GAAE,UACf,EAAa,KAAK,GAItB,MAAO,IAAI,GAAK,IAAK,IAUvB,EAAK,IAAI,UAAU,MAAQ,SAAU,EAAO,CAC1C,MAAI,KAAU,EAAK,IAAI,SACd,EAAK,IAAI,SAGd,IAAU,EAAK,IAAI,MACd,KAGF,GAAI,GAAK,IAAI,OAAO,KAAK,KAAK,UAAU,OAAO,OAAO,KAAK,EAAM,aAU1E,EAAK,IAAM,SAAU,EAAS,EAAe,CAC3C,GAAI,GAAoB,EAExB,OAAS,KAAa,GACpB,AAAI,GAAa,UACjB,IAAqB,OAAO,KAAK,EAAQ,IAAY,QAGvD,GAAI,GAAK,GAAgB,EAAoB,IAAQ,GAAoB,IAEzE,MAAO,MAAK,IAAI,EAAI,KAAK,IAAI,KAW/B,EAAK,MAAQ,SAAU,EAAK,EAAU,CACpC,KAAK,IAAM,GAAO,GAClB,KAAK,SAAW,GAAY,IAQ9B,EAAK,MAAM,UAAU,SAAW,UAAY,CAC1C,MAAO,MAAK,KAuBd,EAAK,MAAM,UAAU,OAAS,SAAU,EAAI,CAC1C,YAAK,IAAM,EAAG,KAAK,IAAK,KAAK,UACtB,MAUT,EAAK,MAAM,UAAU,MAAQ,SAAU,EAAI,CACzC,SAAK,GAAM,SAAU,EAAG,CAAE,MAAO,IAC1B,GAAI,GAAK,MAAO,EAAG,KAAK,IAAK,KAAK,UAAW,KAAK,WAE3D,AAuBA,EAAK,UAAY,SAAU,EAAK,EAAU,CACxC,GAAI,GAAO,MAAQ,GAAO,KACxB,MAAO,GAGT,GAAI,MAAM,QAAQ,GAChB,MAAO,GAAI,IAAI,SAAU,EAAG,CAC1B,MAAO,IAAI,GAAK,MACd,EAAK,MAAM,SAAS,GAAG,cACvB,EAAK,MAAM,MAAM,MASvB,OAJI,GAAM,EAAI,WAAW,cACrB,EAAM,EAAI,OACV,EAAS,GAEJ,EAAW,EAAG,EAAa,EAAG,GAAY,EAAK,IAAY,CAClE,GAAI,GAAO,EAAI,OAAO,GAClB,EAAc,EAAW,EAE7B,GAAK,EAAK,MAAM,EAAK,UAAU,YAAc,GAAY,EAAM,CAE7D,GAAI,EAAc,EAAG,CACnB,GAAI,GAAgB,EAAK,MAAM,MAAM,IAAa,GAClD,EAAc,SAAc,CAAC,EAAY,GACzC,EAAc,MAAW,EAAO,OAEhC,EAAO,KACL,GAAI,GAAK,MACP,EAAI,MAAM,EAAY,GACtB,IAKN,EAAa,EAAW,GAK5B,MAAO,IAUT,EAAK,UAAU,UAAY,UAC3B,AAkCA,EAAK,SAAW,UAAY,CAC1B,KAAK,OAAS,IAGhB,EAAK,SAAS,oBAAsB,OAAO,OAAO,MAmClD,EAAK,SAAS,iBAAmB,SAAU,EAAI,EAAO,CACpD,AAAI,IAAS,MAAK,qBAChB,EAAK,MAAM,KAAK,6CAA+C,GAGjE,EAAG,MAAQ,EACX,EAAK,SAAS,oBAAoB,EAAG,OAAS,GAShD,EAAK,SAAS,4BAA8B,SAAU,EAAI,CACxD,GAAI,GAAe,EAAG,OAAU,EAAG,QAAS,MAAK,oBAEjD,AAAK,GACH,EAAK,MAAM,KAAK;AAAA,EAAmG,IAcvH,EAAK,SAAS,KAAO,SAAU,EAAY,CACzC,GAAI,GAAW,GAAI,GAAK,SAExB,SAAW,QAAQ,SAAU,EAAQ,CACnC,GAAI,GAAK,EAAK,SAAS,oBAAoB,GAE3C,GAAI,EACF,EAAS,IAAI,OAEb,MAAM,IAAI,OAAM,sCAAwC,KAIrD,GAUT,EAAK,SAAS,UAAU,IAAM,UAAY,CACxC,GAAI,GAAM,MAAM,UAAU,MAAM,KAAK,WAErC,EAAI,QAAQ,SAAU,EAAI,CACxB,EAAK,SAAS,4BAA4B,GAC1C,KAAK,OAAO,KAAK,IAChB,OAYL,EAAK,SAAS,UAAU,MAAQ,SAAU,EAAY,EAAO,CAC3D,EAAK,SAAS,4BAA4B,GAE1C,GAAI,GAAM,KAAK,OAAO,QAAQ,GAC9B,GAAI,GAAO,GACT,KAAM,IAAI,OAAM,0BAGlB,EAAM,EAAM,EACZ,KAAK,OAAO,OAAO,EAAK,EAAG,IAY7B,EAAK,SAAS,UAAU,OAAS,SAAU,EAAY,EAAO,CAC5D,EAAK,SAAS,4BAA4B,GAE1C,GAAI,GAAM,KAAK,OAAO,QAAQ,GAC9B,GAAI,GAAO,GACT,KAAM,IAAI,OAAM,0BAGlB,KAAK,OAAO,OAAO,EAAK,EAAG,IAQ7B,EAAK,SAAS,UAAU,OAAS,SAAU,EAAI,CAC7C,GAAI,GAAM,KAAK,OAAO,QAAQ,GAC9B,AAAI,GAAO,IAIX,KAAK,OAAO,OAAO,EAAK,IAU1B,EAAK,SAAS,UAAU,IAAM,SAAU,EAAQ,CAG9C,OAFI,GAAc,KAAK,OAAO,OAErB,EAAI,EAAG,EAAI,EAAa,IAAK,CAIpC,OAHI,GAAK,KAAK,OAAO,GACjB,EAAO,GAEF,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,GAAI,GAAS,EAAG,EAAO,GAAI,EAAG,GAE9B,GAAI,KAAW,MAA6B,IAAW,IAEvD,GAAI,MAAM,QAAQ,GAChB,OAAS,GAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,EAAK,KAAK,EAAO,QAGnB,GAAK,KAAK,GAId,EAAS,EAGX,MAAO,IAaT,EAAK,SAAS,UAAU,UAAY,SAAU,EAAK,EAAU,CAC3D,GAAI,GAAQ,GAAI,GAAK,MAAO,EAAK,GAEjC,MAAO,MAAK,IAAI,CAAC,IAAQ,IAAI,SAAU,EAAG,CACxC,MAAO,GAAE,cAQb,EAAK,SAAS,UAAU,MAAQ,UAAY,CAC1C,KAAK,OAAS,IAUhB,EAAK,SAAS,UAAU,OAAS,UAAY,CAC3C,MAAO,MAAK,OAAO,IAAI,SAAU,EAAI,CACnC,SAAK,SAAS,4BAA4B,GAEnC,EAAG,SAGd,AAqBA,EAAK,OAAS,SAAU,EAAU,CAChC,KAAK,WAAa,EAClB,KAAK,SAAW,GAAY,IAc9B,EAAK,OAAO,UAAU,iBAAmB,SAAU,EAAO,CAExD,GAAI,KAAK,SAAS,QAAU,EAC1B,MAAO,GAST,OANI,GAAQ,EACR,EAAM,KAAK,SAAS,OAAS,EAC7B,EAAc,EAAM,EACpB,EAAa,KAAK,MAAM,EAAc,GACtC,EAAa,KAAK,SAAS,EAAa,GAErC,EAAc,GACf,GAAa,GACf,GAAQ,GAGN,EAAa,GACf,GAAM,GAGJ,GAAc,IAIlB,EAAc,EAAM,EACpB,EAAa,EAAQ,KAAK,MAAM,EAAc,GAC9C,EAAa,KAAK,SAAS,EAAa,GAO1C,GAJI,GAAc,GAId,EAAa,EACf,MAAO,GAAa,EAGtB,GAAI,EAAa,EACf,MAAQ,GAAa,GAAK,GAa9B,EAAK,OAAO,UAAU,OAAS,SAAU,EAAW,EAAK,CACvD,KAAK,OAAO,EAAW,EAAK,UAAY,CACtC,KAAM,qBAYV,EAAK,OAAO,UAAU,OAAS,SAAU,EAAW,EAAK,EAAI,CAC3D,KAAK,WAAa,EAClB,GAAI,GAAW,KAAK,iBAAiB,GAErC,AAAI,KAAK,SAAS,IAAa,EAC7B,KAAK,SAAS,EAAW,GAAK,EAAG,KAAK,SAAS,EAAW,GAAI,GAE9D,KAAK,SAAS,OAAO,EAAU,EAAG,EAAW,IASjD,EAAK,OAAO,UAAU,UAAY,UAAY,CAC5C,GAAI,KAAK,WAAY,MAAO,MAAK,WAKjC,OAHI,GAAe,EACf,EAAiB,KAAK,SAAS,OAE1B,EAAI,EAAG,EAAI,EAAgB,GAAK,EAAG,CAC1C,GAAI,GAAM,KAAK,SAAS,GACxB,GAAgB,EAAM,EAGxB,MAAO,MAAK,WAAa,KAAK,KAAK,IASrC,EAAK,OAAO,UAAU,IAAM,SAAU,EAAa,CAOjD,OANI,GAAa,EACb,EAAI,KAAK,SAAU,EAAI,EAAY,SACnC,EAAO,EAAE,OAAQ,EAAO,EAAE,OAC1B,EAAO,EAAG,EAAO,EACjB,EAAI,EAAG,EAAI,EAER,EAAI,GAAQ,EAAI,GACrB,EAAO,EAAE,GAAI,EAAO,EAAE,GACtB,AAAI,EAAO,EACT,GAAK,EACA,AAAI,EAAO,EAChB,GAAK,EACI,GAAQ,GACjB,IAAc,EAAE,EAAI,GAAK,EAAE,EAAI,GAC/B,GAAK,EACL,GAAK,GAIT,MAAO,IAUT,EAAK,OAAO,UAAU,WAAa,SAAU,EAAa,CACxD,MAAO,MAAK,IAAI,GAAe,KAAK,aAAe,GAQrD,EAAK,OAAO,UAAU,QAAU,UAAY,CAG1C,OAFI,GAAS,GAAI,OAAO,KAAK,SAAS,OAAS,GAEtC,EAAI,EAAG,EAAI,EAAG,EAAI,KAAK,SAAS,OAAQ,GAAK,EAAG,IACvD,EAAO,GAAK,KAAK,SAAS,GAG5B,MAAO,IAQT,EAAK,OAAO,UAAU,OAAS,UAAY,CACzC,MAAO,MAAK,UAGd,AAiBA,EAAK,QAAW,UAAU,CACxB,GAAI,GAAY,CACZ,QAAY,MACZ,OAAW,OACX,KAAS,OACT,KAAS,OACT,KAAS,MACT,IAAQ,MACR,KAAS,KACT,MAAU,MACV,IAAQ,IACR,MAAU,MACV,QAAY,MACZ,MAAU,MACV,KAAS,MACT,MAAU,KACV,QAAY,MACZ,QAAY,MACZ,QAAY,MACZ,MAAU,KACV,MAAU,MACV,OAAW,MACX,KAAS,OAGX,EAAY,CACV,MAAU,KACV,MAAU,GACV,MAAU,KACV,MAAU,KACV,KAAS,KACT,IAAQ,GACR,KAAS,IAGX,EAAI,WACJ,EAAI,WACJ,EAAI,EAAI,aACR,EAAI,EAAI,WAER,EAAO,KAAO,EAAI,KAAO,EAAI,EAC7B,EAAO,KAAO,EAAI,KAAO,EAAI,EAAI,IAAM,EAAI,MAC3C,EAAO,KAAO,EAAI,KAAO,EAAI,EAAI,EAAI,EACrC,EAAM,KAAO,EAAI,KAAO,EAEtB,EAAU,GAAI,QAAO,GACrB,EAAU,GAAI,QAAO,GACrB,EAAU,GAAI,QAAO,GACrB,EAAS,GAAI,QAAO,GAEpB,EAAQ,kBACR,EAAS,iBACT,EAAQ,aACR,EAAS,kBACT,EAAU,KACV,EAAW,cACX,EAAW,GAAI,QAAO,sBACtB,EAAW,GAAI,QAAO,IAAM,EAAI,EAAI,gBAEpC,EAAQ,mBACR,EAAO,2IAEP,EAAO,iDAEP,EAAO,sFACP,EAAQ,oBAER,EAAO,WACP,EAAS,MACT,EAAQ,GAAI,QAAO,IAAM,EAAI,EAAI,gBAEjC,EAAgB,SAAuB,EAAG,CAC5C,GAAI,GACF,EACA,EACA,EACA,EACA,EACA,EAEF,GAAI,EAAE,OAAS,EAAK,MAAO,GAiB3B,GAfA,EAAU,EAAE,OAAO,EAAE,GACjB,GAAW,KACb,GAAI,EAAQ,cAAgB,EAAE,OAAO,IAIvC,EAAK,EACL,EAAM,EAEN,AAAI,EAAG,KAAK,GAAM,EAAI,EAAE,QAAQ,EAAG,QAC1B,EAAI,KAAK,IAAM,GAAI,EAAE,QAAQ,EAAI,SAG1C,EAAK,EACL,EAAM,EACF,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAK,EACD,EAAG,KAAK,EAAG,KACb,GAAK,EACL,EAAI,EAAE,QAAQ,EAAG,aAEV,EAAI,KAAK,GAAI,CACtB,GAAI,GAAK,EAAI,KAAK,GAClB,EAAO,EAAG,GACV,EAAM,EACF,EAAI,KAAK,IACX,GAAI,EACJ,EAAM,EACN,EAAM,EACN,EAAM,EACN,AAAI,EAAI,KAAK,GAAM,EAAI,EAAI,IACtB,AAAI,EAAI,KAAK,GAAM,GAAK,EAAS,EAAI,EAAE,QAAQ,EAAG,KAC9C,EAAI,KAAK,IAAM,GAAI,EAAI,MAMpC,GADA,EAAK,EACD,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAO,EAAG,GACV,EAAI,EAAO,IAKb,GADA,EAAK,EACD,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAO,EAAG,GACV,EAAS,EAAG,GACZ,EAAK,EACD,EAAG,KAAK,IACV,GAAI,EAAO,EAAU,IAMzB,GADA,EAAK,EACD,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAO,EAAG,GACV,EAAS,EAAG,GACZ,EAAK,EACD,EAAG,KAAK,IACV,GAAI,EAAO,EAAU,IAOzB,GAFA,EAAK,EACL,EAAM,EACF,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAO,EAAG,GACV,EAAK,EACD,EAAG,KAAK,IACV,GAAI,WAEG,EAAI,KAAK,GAAI,CACtB,GAAI,GAAK,EAAI,KAAK,GAClB,EAAO,EAAG,GAAK,EAAG,GAClB,EAAM,EACF,EAAI,KAAK,IACX,GAAI,GAMR,GADA,EAAK,EACD,EAAG,KAAK,GAAI,CACd,GAAI,GAAK,EAAG,KAAK,GACjB,EAAO,EAAG,GACV,EAAK,EACL,EAAM,EACN,EAAM,EACF,GAAG,KAAK,IAAU,EAAI,KAAK,IAAS,CAAE,EAAI,KAAK,KACjD,GAAI,GAIR,SAAK,EACL,EAAM,EACF,EAAG,KAAK,IAAM,EAAI,KAAK,IACzB,GAAK,EACL,EAAI,EAAE,QAAQ,EAAG,KAKf,GAAW,KACb,GAAI,EAAQ,cAAgB,EAAE,OAAO,IAGhC,GAGT,MAAO,UAAU,EAAO,CACtB,MAAO,GAAM,OAAO,OAIxB,EAAK,SAAS,iBAAiB,EAAK,QAAS,WAC7C,AAkBA,EAAK,uBAAyB,SAAU,EAAW,CACjD,GAAI,GAAQ,EAAU,OAAO,SAAU,EAAM,EAAU,CACrD,SAAK,GAAY,EACV,GACN,IAEH,MAAO,UAAU,EAAO,CACtB,GAAI,GAAS,EAAM,EAAM,cAAgB,EAAM,WAAY,MAAO,KAiBtE,EAAK,eAAiB,EAAK,uBAAuB,CAChD,IACA,OACA,QACA,SACA,QACA,MACA,SACA,OACA,KACA,QACA,KACA,MACA,MACA,MACA,KACA,KACA,KACA,UACA,OACA,MACA,KACA,MACA,SACA,QACA,OACA,MACA,KACA,OACA,SACA,OACA,OACA,QACA,MACA,OACA,MACA,MACA,MACA,MACA,OACA,KACA,MACA,OACA,MACA,MACA,MACA,UACA,IACA,KACA,KACA,OACA,KACA,KACA,MACA,OACA,QACA,MACA,OACA,SACA,MACA,KACA,QACA,OACA,OACA,KACA,UACA,KACA,MACA,MACA,KACA,MACA,QACA,KACA,OACA,KACA,QACA,MACA,MACA,SACA,OACA,MACA,OACA,MACA,SACA,QACA,KACA,OACA,OACA,OACA,MACA,QACA,OACA,OACA,QACA,QACA,OACA,OACA,MACA,KACA,MACA,OACA,KACA,QACA,MACA,KACA,OACA,OACA,OACA,QACA,QACA,QACA,MACA,OACA,MACA,OACA,OACA,QACA,MACA,MACA,SAGF,EAAK,SAAS,iBAAiB,EAAK,eAAgB,kBACpD,AAoBA,EAAK,QAAU,SAAU,EAAO,CAC9B,MAAO,GAAM,OAAO,SAAU,EAAG,CAC/B,MAAO,GAAE,QAAQ,OAAQ,IAAI,QAAQ,OAAQ,OAIjD,EAAK,SAAS,iBAAiB,EAAK,QAAS,WAC7C,AA0BA,EAAK,SAAW,UAAY,CAC1B,KAAK,MAAQ,GACb,KAAK,MAAQ,GACb,KAAK,GAAK,EAAK,SAAS,QACxB,EAAK,SAAS,SAAW,GAW3B,EAAK,SAAS,QAAU,EASxB,EAAK,SAAS,UAAY,SAAU,EAAK,CAGvC,OAFI,GAAU,GAAI,GAAK,SAAS,QAEvB,EAAI,EAAG,EAAM,EAAI,OAAQ,EAAI,EAAK,IACzC,EAAQ,OAAO,EAAI,IAGrB,SAAQ,SACD,EAAQ,MAYjB,EAAK,SAAS,WAAa,SAAU,EAAQ,CAC3C,MAAI,gBAAkB,GACb,EAAK,SAAS,gBAAgB,EAAO,KAAM,EAAO,cAElD,EAAK,SAAS,WAAW,EAAO,OAmB3C,EAAK,SAAS,gBAAkB,SAAU,EAAK,EAAc,CAS3D,OARI,GAAO,GAAI,GAAK,SAEhB,EAAQ,CAAC,CACX,KAAM,EACN,eAAgB,EAChB,IAAK,IAGA,EAAM,QAAQ,CACnB,GAAI,GAAQ,EAAM,MAGlB,GAAI,EAAM,IAAI,OAAS,EAAG,CACxB,GAAI,GAAO,EAAM,IAAI,OAAO,GACxB,EAEJ,AAAI,IAAQ,GAAM,KAAK,MACrB,EAAa,EAAM,KAAK,MAAM,GAE9B,GAAa,GAAI,GAAK,SACtB,EAAM,KAAK,MAAM,GAAQ,GAGvB,EAAM,IAAI,QAAU,GACtB,GAAW,MAAQ,IAGrB,EAAM,KAAK,CACT,KAAM,EACN,eAAgB,EAAM,eACtB,IAAK,EAAM,IAAI,MAAM,KAIzB,GAAI,EAAM,gBAAkB,EAK5B,IAAI,KAAO,GAAM,KAAK,MACpB,GAAI,GAAgB,EAAM,KAAK,MAAM,SAChC,CACL,GAAI,GAAgB,GAAI,GAAK,SAC7B,EAAM,KAAK,MAAM,KAAO,EAiC1B,GA9BI,EAAM,IAAI,QAAU,GACtB,GAAc,MAAQ,IAGxB,EAAM,KAAK,CACT,KAAM,EACN,eAAgB,EAAM,eAAiB,EACvC,IAAK,EAAM,MAMT,EAAM,IAAI,OAAS,GACrB,EAAM,KAAK,CACT,KAAM,EAAM,KACZ,eAAgB,EAAM,eAAiB,EACvC,IAAK,EAAM,IAAI,MAAM,KAMrB,EAAM,IAAI,QAAU,GACtB,GAAM,KAAK,MAAQ,IAMjB,EAAM,IAAI,QAAU,EAAG,CACzB,GAAI,KAAO,GAAM,KAAK,MACpB,GAAI,GAAmB,EAAM,KAAK,MAAM,SACnC,CACL,GAAI,GAAmB,GAAI,GAAK,SAChC,EAAM,KAAK,MAAM,KAAO,EAG1B,AAAI,EAAM,IAAI,QAAU,GACtB,GAAiB,MAAQ,IAG3B,EAAM,KAAK,CACT,KAAM,EACN,eAAgB,EAAM,eAAiB,EACvC,IAAK,EAAM,IAAI,MAAM,KAOzB,GAAI,EAAM,IAAI,OAAS,EAAG,CACxB,GAAI,GAAQ,EAAM,IAAI,OAAO,GACzB,EAAQ,EAAM,IAAI,OAAO,GACzB,EAEJ,AAAI,IAAS,GAAM,KAAK,MACtB,EAAgB,EAAM,KAAK,MAAM,GAEjC,GAAgB,GAAI,GAAK,SACzB,EAAM,KAAK,MAAM,GAAS,GAGxB,EAAM,IAAI,QAAU,GACtB,GAAc,MAAQ,IAGxB,EAAM,KAAK,CACT,KAAM,EACN,eAAgB,EAAM,eAAiB,EACvC,IAAK,EAAQ,EAAM,IAAI,MAAM,OAKnC,MAAO,IAaT,EAAK,SAAS,WAAa,SAAU,EAAK,CAYxC,OAXI,GAAO,GAAI,GAAK,SAChB,EAAO,EAUF,EAAI,EAAG,EAAM,EAAI,OAAQ,EAAI,EAAK,IAAK,CAC9C,GAAI,GAAO,EAAI,GACX,EAAS,GAAK,EAAM,EAExB,GAAI,GAAQ,IACV,EAAK,MAAM,GAAQ,EACnB,EAAK,MAAQ,MAER,CACL,GAAI,GAAO,GAAI,GAAK,SACpB,EAAK,MAAQ,EAEb,EAAK,MAAM,GAAQ,EACnB,EAAO,GAIX,MAAO,IAaT,EAAK,SAAS,UAAU,QAAU,UAAY,CAQ5C,OAPI,GAAQ,GAER,EAAQ,CAAC,CACX,OAAQ,GACR,KAAM,OAGD,EAAM,QAAQ,CACnB,GAAI,GAAQ,EAAM,MACd,EAAQ,OAAO,KAAK,EAAM,KAAK,OAC/B,EAAM,EAAM,OAEhB,AAAI,EAAM,KAAK,OAKb,GAAM,OAAO,OAAO,GACpB,EAAM,KAAK,EAAM,SAGnB,OAAS,GAAI,EAAG,EAAI,EAAK,IAAK,CAC5B,GAAI,GAAO,EAAM,GAEjB,EAAM,KAAK,CACT,OAAQ,EAAM,OAAO,OAAO,GAC5B,KAAM,EAAM,KAAK,MAAM,MAK7B,MAAO,IAaT,EAAK,SAAS,UAAU,SAAW,UAAY,CAS7C,GAAI,KAAK,KACP,MAAO,MAAK,KAOd,OAJI,GAAM,KAAK,MAAQ,IAAM,IACzB,EAAS,OAAO,KAAK,KAAK,OAAO,OACjC,EAAM,EAAO,OAER,EAAI,EAAG,EAAI,EAAK,IAAK,CAC5B,GAAI,GAAQ,EAAO,GACf,EAAO,KAAK,MAAM,GAEtB,EAAM,EAAM,EAAQ,EAAK,GAG3B,MAAO,IAaT,EAAK,SAAS,UAAU,UAAY,SAAU,EAAG,CAU/C,OATI,GAAS,GAAI,GAAK,SAClB,EAAQ,OAER,EAAQ,CAAC,CACX,MAAO,EACP,OAAQ,EACR,KAAM,OAGD,EAAM,QAAQ,CACnB,EAAQ,EAAM,MAWd,OALI,GAAS,OAAO,KAAK,EAAM,MAAM,OACjC,EAAO,EAAO,OACd,EAAS,OAAO,KAAK,EAAM,KAAK,OAChC,EAAO,EAAO,OAET,EAAI,EAAG,EAAI,EAAM,IAGxB,OAFI,GAAQ,EAAO,GAEV,EAAI,EAAG,EAAI,EAAM,IAAK,CAC7B,GAAI,GAAQ,EAAO,GAEnB,GAAI,GAAS,GAAS,GAAS,IAAK,CAClC,GAAI,GAAO,EAAM,KAAK,MAAM,GACxB,EAAQ,EAAM,MAAM,MAAM,GAC1B,EAAQ,EAAK,OAAS,EAAM,MAC5B,EAAO,OAEX,AAAI,IAAS,GAAM,OAAO,MAIxB,GAAO,EAAM,OAAO,MAAM,GAC1B,EAAK,MAAQ,EAAK,OAAS,GAM3B,GAAO,GAAI,GAAK,SAChB,EAAK,MAAQ,EACb,EAAM,OAAO,MAAM,GAAS,GAG9B,EAAM,KAAK,CACT,MAAO,EACP,OAAQ,EACR,KAAM,MAOhB,MAAO,IAET,EAAK,SAAS,QAAU,UAAY,CAClC,KAAK,aAAe,GACpB,KAAK,KAAO,GAAI,GAAK,SACrB,KAAK,eAAiB,GACtB,KAAK,eAAiB,IAGxB,EAAK,SAAS,QAAQ,UAAU,OAAS,SAAU,EAAM,CACvD,GAAI,GACA,EAAe,EAEnB,GAAI,EAAO,KAAK,aACd,KAAM,IAAI,OAAO,+BAGnB,OAAS,GAAI,EAAG,EAAI,EAAK,QAAU,EAAI,KAAK,aAAa,QACnD,EAAK,IAAM,KAAK,aAAa,GAD8B,IAE/D,IAGF,KAAK,SAAS,GAEd,AAAI,KAAK,eAAe,QAAU,EAChC,EAAO,KAAK,KAEZ,EAAO,KAAK,eAAe,KAAK,eAAe,OAAS,GAAG,MAG7D,OAAS,GAAI,EAAc,EAAI,EAAK,OAAQ,IAAK,CAC/C,GAAI,GAAW,GAAI,GAAK,SACpB,EAAO,EAAK,GAEhB,EAAK,MAAM,GAAQ,EAEnB,KAAK,eAAe,KAAK,CACvB,OAAQ,EACR,KAAM,EACN,MAAO,IAGT,EAAO,EAGT,EAAK,MAAQ,GACb,KAAK,aAAe,GAGtB,EAAK,SAAS,QAAQ,UAAU,OAAS,UAAY,CACnD,KAAK,SAAS,IAGhB,EAAK,SAAS,QAAQ,UAAU,SAAW,SAAU,EAAQ,CAC3D,OAAS,GAAI,KAAK,eAAe,OAAS,EAAG,GAAK,EAAQ,IAAK,CAC7D,GAAI,GAAO,KAAK,eAAe,GAC3B,EAAW,EAAK,MAAM,WAE1B,AAAI,IAAY,MAAK,eACnB,EAAK,OAAO,MAAM,EAAK,MAAQ,KAAK,eAAe,GAInD,GAAK,MAAM,KAAO,EAElB,KAAK,eAAe,GAAY,EAAK,OAGvC,KAAK,eAAe,QAGxB,AAqBA,EAAK,MAAQ,SAAU,EAAO,CAC5B,KAAK,cAAgB,EAAM,cAC3B,KAAK,aAAe,EAAM,aAC1B,KAAK,SAAW,EAAM,SACtB,KAAK,OAAS,EAAM,OACpB,KAAK,SAAW,EAAM,UA0ExB,EAAK,MAAM,UAAU,OAAS,SAAU,EAAa,CACnD,MAAO,MAAK,MAAM,SAAU,EAAO,CACjC,GAAI,GAAS,GAAI,GAAK,YAAY,EAAa,GAC/C,EAAO,WA6BX,EAAK,MAAM,UAAU,MAAQ,SAAU,EAAI,CAoBzC,OAZI,GAAQ,GAAI,GAAK,MAAM,KAAK,QAC5B,EAAiB,OAAO,OAAO,MAC/B,EAAe,OAAO,OAAO,MAC7B,EAAiB,OAAO,OAAO,MAC/B,EAAkB,OAAO,OAAO,MAChC,EAAoB,OAAO,OAAO,MAO7B,EAAI,EAAG,EAAI,KAAK,OAAO,OAAQ,IACtC,EAAa,KAAK,OAAO,IAAM,GAAI,GAAK,OAG1C,EAAG,KAAK,EAAO,GAEf,OAAS,GAAI,EAAG,EAAI,EAAM,QAAQ,OAAQ,IAAK,CAS7C,GAAI,GAAS,EAAM,QAAQ,GACvB,EAAQ,KACR,EAAgB,EAAK,IAAI,MAE7B,AAAI,EAAO,YACT,EAAQ,KAAK,SAAS,UAAU,EAAO,KAAM,CAC3C,OAAQ,EAAO,SAGjB,EAAQ,CAAC,EAAO,MAGlB,OAAS,GAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CACrC,GAAI,GAAO,EAAM,GAQjB,EAAO,KAAO,EAOd,GAAI,GAAe,EAAK,SAAS,WAAW,GACxC,EAAgB,KAAK,SAAS,UAAU,GAAc,UAQ1D,GAAI,EAAc,SAAW,GAAK,EAAO,WAAa,EAAK,MAAM,SAAS,SAAU,CAClF,OAAS,GAAI,EAAG,EAAI,EAAO,OAAO,OAAQ,IAAK,CAC7C,GAAI,GAAQ,EAAO,OAAO,GAC1B,EAAgB,GAAS,EAAK,IAAI,MAGpC,MAGF,OAAS,GAAI,EAAG,EAAI,EAAc,OAAQ,IASxC,OAJI,GAAe,EAAc,GAC7B,EAAU,KAAK,cAAc,GAC7B,EAAY,EAAQ,OAEf,EAAI,EAAG,EAAI,EAAO,OAAO,OAAQ,IAAK,CAS7C,GAAI,GAAQ,EAAO,OAAO,GACtB,EAAe,EAAQ,GACvB,EAAuB,OAAO,KAAK,GACnC,EAAY,EAAe,IAAM,EACjC,EAAuB,GAAI,GAAK,IAAI,GAoBxC,GAbI,EAAO,UAAY,EAAK,MAAM,SAAS,UACzC,GAAgB,EAAc,MAAM,GAEhC,EAAgB,KAAW,QAC7B,GAAgB,GAAS,EAAK,IAAI,WASlC,EAAO,UAAY,EAAK,MAAM,SAAS,WAAY,CACrD,AAAI,EAAkB,KAAW,QAC/B,GAAkB,GAAS,EAAK,IAAI,OAGtC,EAAkB,GAAS,EAAkB,GAAO,MAAM,GAO1D,SAgBF,GANA,EAAa,GAAO,OAAO,EAAW,EAAO,MAAO,SAAU,GAAG,GAAG,CAAE,MAAO,IAAI,KAM7E,GAAe,GAInB,QAAS,GAAI,EAAG,EAAI,EAAqB,OAAQ,IAAK,CAOpD,GAAI,GAAsB,EAAqB,GAC3C,EAAmB,GAAI,GAAK,SAAU,EAAqB,GAC3D,EAAW,EAAa,GACxB,EAEJ,AAAK,GAAa,EAAe,MAAuB,OACtD,EAAe,GAAoB,GAAI,GAAK,UAAW,EAAc,EAAO,GAE5E,EAAW,IAAI,EAAc,EAAO,GAKxC,EAAe,GAAa,KAWlC,GAAI,EAAO,WAAa,EAAK,MAAM,SAAS,SAC1C,OAAS,GAAI,EAAG,EAAI,EAAO,OAAO,OAAQ,IAAK,CAC7C,GAAI,GAAQ,EAAO,OAAO,GAC1B,EAAgB,GAAS,EAAgB,GAAO,UAAU,IAahE,OAHI,GAAqB,EAAK,IAAI,SAC9B,EAAuB,EAAK,IAAI,MAE3B,EAAI,EAAG,EAAI,KAAK,OAAO,OAAQ,IAAK,CAC3C,GAAI,GAAQ,KAAK,OAAO,GAExB,AAAI,EAAgB,IAClB,GAAqB,EAAmB,UAAU,EAAgB,KAGhE,EAAkB,IACpB,GAAuB,EAAqB,MAAM,EAAkB,KAIxE,GAAI,GAAoB,OAAO,KAAK,GAChC,EAAU,GACV,EAAU,OAAO,OAAO,MAY5B,GAAI,EAAM,YAAa,CACrB,EAAoB,OAAO,KAAK,KAAK,cAErC,OAAS,GAAI,EAAG,EAAI,EAAkB,OAAQ,IAAK,CACjD,GAAI,GAAmB,EAAkB,GACrC,EAAW,EAAK,SAAS,WAAW,GACxC,EAAe,GAAoB,GAAI,GAAK,WAIhD,OAAS,GAAI,EAAG,EAAI,EAAkB,OAAQ,IAAK,CASjD,GAAI,GAAW,EAAK,SAAS,WAAW,EAAkB,IACtD,EAAS,EAAS,OAEtB,GAAI,EAAC,EAAmB,SAAS,IAI7B,GAAqB,SAAS,GAIlC,IAAI,GAAc,KAAK,aAAa,GAChC,EAAQ,EAAa,EAAS,WAAW,WAAW,GACpD,EAEJ,GAAK,GAAW,EAAQ,MAAa,OACnC,EAAS,OAAS,EAClB,EAAS,UAAU,QAAQ,EAAe,QACrC,CACL,GAAI,GAAQ,CACV,IAAK,EACL,MAAO,EACP,UAAW,EAAe,IAE5B,EAAQ,GAAU,EAClB,EAAQ,KAAK,KAOjB,MAAO,GAAQ,KAAK,SAAU,GAAG,GAAG,CAClC,MAAO,IAAE,MAAQ,GAAE,SAYvB,EAAK,MAAM,UAAU,OAAS,UAAY,CACxC,GAAI,GAAgB,OAAO,KAAK,KAAK,eAClC,OACA,IAAI,SAAU,EAAM,CACnB,MAAO,CAAC,EAAM,KAAK,cAAc,KAChC,MAED,EAAe,OAAO,KAAK,KAAK,cACjC,IAAI,SAAU,EAAK,CAClB,MAAO,CAAC,EAAK,KAAK,aAAa,GAAK,WACnC,MAEL,MAAO,CACL,QAAS,EAAK,QACd,OAAQ,KAAK,OACb,aAAc,EACd,cAAe,EACf,SAAU,KAAK,SAAS,WAU5B,EAAK,MAAM,KAAO,SAAU,EAAiB,CAC3C,GAAI,GAAQ,GACR,EAAe,GACf,EAAoB,EAAgB,aACpC,EAAgB,OAAO,OAAO,MAC9B,EAA0B,EAAgB,cAC1C,EAAkB,GAAI,GAAK,SAAS,QACpC,EAAW,EAAK,SAAS,KAAK,EAAgB,UAElD,AAAI,EAAgB,SAAW,EAAK,SAClC,EAAK,MAAM,KAAK,4EAA8E,EAAK,QAAU,sCAAwC,EAAgB,QAAU,KAGjL,OAAS,GAAI,EAAG,EAAI,EAAkB,OAAQ,IAAK,CACjD,GAAI,GAAQ,EAAkB,GAC1B,EAAM,EAAM,GACZ,EAAW,EAAM,GAErB,EAAa,GAAO,GAAI,GAAK,OAAO,GAGtC,OAAS,GAAI,EAAG,EAAI,EAAwB,OAAQ,IAAK,CACvD,GAAI,GAAQ,EAAwB,GAChC,EAAO,EAAM,GACb,EAAU,EAAM,GAEpB,EAAgB,OAAO,GACvB,EAAc,GAAQ,EAGxB,SAAgB,SAEhB,EAAM,OAAS,EAAgB,OAE/B,EAAM,aAAe,EACrB,EAAM,cAAgB,EACtB,EAAM,SAAW,EAAgB,KACjC,EAAM,SAAW,EAEV,GAAI,GAAK,MAAM,IAExB,AA6BA,EAAK,QAAU,UAAY,CACzB,KAAK,KAAO,KACZ,KAAK,QAAU,OAAO,OAAO,MAC7B,KAAK,WAAa,OAAO,OAAO,MAChC,KAAK,cAAgB,OAAO,OAAO,MACnC,KAAK,qBAAuB,GAC5B,KAAK,aAAe,GACpB,KAAK,UAAY,EAAK,UACtB,KAAK,SAAW,GAAI,GAAK,SACzB,KAAK,eAAiB,GAAI,GAAK,SAC/B,KAAK,cAAgB,EACrB,KAAK,GAAK,IACV,KAAK,IAAM,IACX,KAAK,UAAY,EACjB,KAAK,kBAAoB,IAe3B,EAAK,QAAQ,UAAU,IAAM,SAAU,EAAK,CAC1C,KAAK,KAAO,GAmCd,EAAK,QAAQ,UAAU,MAAQ,SAAU,EAAW,EAAY,CAC9D,GAAI,KAAK,KAAK,GACZ,KAAM,IAAI,YAAY,UAAY,EAAY,oCAGhD,KAAK,QAAQ,GAAa,GAAc,IAW1C,EAAK,QAAQ,UAAU,EAAI,SAAU,EAAQ,CAC3C,AAAI,EAAS,EACX,KAAK,GAAK,EACL,AAAI,EAAS,EAClB,KAAK,GAAK,EAEV,KAAK,GAAK,GAWd,EAAK,QAAQ,UAAU,GAAK,SAAU,EAAQ,CAC5C,KAAK,IAAM,GAoBb,EAAK,QAAQ,UAAU,IAAM,SAAU,EAAK,EAAY,CACtD,GAAI,GAAS,EAAI,KAAK,MAClB,EAAS,OAAO,KAAK,KAAK,SAE9B,KAAK,WAAW,GAAU,GAAc,GACxC,KAAK,eAAiB,EAEtB,OAAS,GAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,GAAI,GAAY,EAAO,GACnB,EAAY,KAAK,QAAQ,GAAW,UACpC,EAAQ,EAAY,EAAU,GAAO,EAAI,GACzC,EAAS,KAAK,UAAU,EAAO,CAC7B,OAAQ,CAAC,KAEX,EAAQ,KAAK,SAAS,IAAI,GAC1B,EAAW,GAAI,GAAK,SAAU,EAAQ,GACtC,EAAa,OAAO,OAAO,MAE/B,KAAK,qBAAqB,GAAY,EACtC,KAAK,aAAa,GAAY,EAG9B,KAAK,aAAa,IAAa,EAAM,OAGrC,OAAS,GAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CACrC,GAAI,GAAO,EAAM,GAUjB,GARI,EAAW,IAAS,MACtB,GAAW,GAAQ,GAGrB,EAAW,IAAS,EAIhB,KAAK,cAAc,IAAS,KAAW,CACzC,GAAI,GAAU,OAAO,OAAO,MAC5B,EAAQ,OAAY,KAAK,UACzB,KAAK,WAAa,EAElB,OAAS,GAAI,EAAG,EAAI,EAAO,OAAQ,IACjC,EAAQ,EAAO,IAAM,OAAO,OAAO,MAGrC,KAAK,cAAc,GAAQ,EAI7B,AAAI,KAAK,cAAc,GAAM,GAAW,IAAW,MACjD,MAAK,cAAc,GAAM,GAAW,GAAU,OAAO,OAAO,OAK9D,OAAS,GAAI,EAAG,EAAI,KAAK,kBAAkB,OAAQ,IAAK,CACtD,GAAI,GAAc,KAAK,kBAAkB,GACrC,EAAW,EAAK,SAAS,GAE7B,AAAI,KAAK,cAAc,GAAM,GAAW,GAAQ,IAAgB,MAC9D,MAAK,cAAc,GAAM,GAAW,GAAQ,GAAe,IAG7D,KAAK,cAAc,GAAM,GAAW,GAAQ,GAAa,KAAK,OAYtE,EAAK,QAAQ,UAAU,6BAA+B,UAAY,CAOhE,OALI,GAAY,OAAO,KAAK,KAAK,cAC7B,EAAiB,EAAU,OAC3B,EAAc,GACd,EAAqB,GAEhB,EAAI,EAAG,EAAI,EAAgB,IAAK,CACvC,GAAI,GAAW,EAAK,SAAS,WAAW,EAAU,IAC9C,EAAQ,EAAS,UAErB,EAAmB,IAAW,GAAmB,GAAS,GAC1D,EAAmB,IAAU,EAE7B,EAAY,IAAW,GAAY,GAAS,GAC5C,EAAY,IAAU,KAAK,aAAa,GAK1C,OAFI,GAAS,OAAO,KAAK,KAAK,SAErB,EAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,GAAI,GAAY,EAAO,GACvB,EAAY,GAAa,EAAY,GAAa,EAAmB,GAGvE,KAAK,mBAAqB,GAQ5B,EAAK,QAAQ,UAAU,mBAAqB,UAAY,CAMtD,OALI,GAAe,GACf,EAAY,OAAO,KAAK,KAAK,sBAC7B,EAAkB,EAAU,OAC5B,EAAe,OAAO,OAAO,MAExB,EAAI,EAAG,EAAI,EAAiB,IAAK,CAaxC,OAZI,GAAW,EAAK,SAAS,WAAW,EAAU,IAC9C,EAAY,EAAS,UACrB,EAAc,KAAK,aAAa,GAChC,EAAc,GAAI,GAAK,OACvB,EAAkB,KAAK,qBAAqB,GAC5C,EAAQ,OAAO,KAAK,GACpB,EAAc,EAAM,OAGpB,EAAa,KAAK,QAAQ,GAAW,OAAS,EAC9C,EAAW,KAAK,WAAW,EAAS,QAAQ,OAAS,EAEhD,EAAI,EAAG,EAAI,EAAa,IAAK,CACpC,GAAI,GAAO,EAAM,GACb,EAAK,EAAgB,GACrB,EAAY,KAAK,cAAc,GAAM,OACrC,EAAK,EAAO,EAEhB,AAAI,EAAa,KAAU,OACzB,GAAM,EAAK,IAAI,KAAK,cAAc,GAAO,KAAK,eAC9C,EAAa,GAAQ,GAErB,EAAM,EAAa,GAGrB,EAAQ,EAAQ,OAAK,IAAM,GAAK,GAAO,MAAK,IAAO,GAAI,KAAK,GAAK,KAAK,GAAM,GAAc,KAAK,mBAAmB,KAAe,GACjI,GAAS,EACT,GAAS,EACT,EAAqB,KAAK,MAAM,EAAQ,KAAQ,IAQhD,EAAY,OAAO,EAAW,GAGhC,EAAa,GAAY,EAG3B,KAAK,aAAe,GAQtB,EAAK,QAAQ,UAAU,eAAiB,UAAY,CAClD,KAAK,SAAW,EAAK,SAAS,UAC5B,OAAO,KAAK,KAAK,eAAe,SAYpC,EAAK,QAAQ,UAAU,MAAQ,UAAY,CACzC,YAAK,+BACL,KAAK,qBACL,KAAK,iBAEE,GAAI,GAAK,MAAM,CACpB,cAAe,KAAK,cACpB,aAAc,KAAK,aACnB,SAAU,KAAK,SACf,OAAQ,OAAO,KAAK,KAAK,SACzB,SAAU,KAAK,kBAkBnB,EAAK,QAAQ,UAAU,IAAM,SAAU,EAAI,CACzC,GAAI,GAAO,MAAM,UAAU,MAAM,KAAK,UAAW,GACjD,EAAK,QAAQ,MACb,EAAG,MAAM,KAAM,IAcjB,EAAK,UAAY,SAAU,EAAM,EAAO,EAAU,CAShD,OARI,GAAiB,OAAO,OAAO,MAC/B,EAAe,OAAO,KAAK,GAAY,IAOlC,EAAI,EAAG,EAAI,EAAa,OAAQ,IAAK,CAC5C,GAAI,GAAM,EAAa,GACvB,EAAe,GAAO,EAAS,GAAK,QAGtC,KAAK,SAAW,OAAO,OAAO,MAE1B,IAAS,QACX,MAAK,SAAS,GAAQ,OAAO,OAAO,MACpC,KAAK,SAAS,GAAM,GAAS,IAajC,EAAK,UAAU,UAAU,QAAU,SAAU,EAAgB,CAG3D,OAFI,GAAQ,OAAO,KAAK,EAAe,UAE9B,EAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CACrC,GAAI,GAAO,EAAM,GACb,EAAS,OAAO,KAAK,EAAe,SAAS,IAEjD,AAAI,KAAK,SAAS,IAAS,MACzB,MAAK,SAAS,GAAQ,OAAO,OAAO,OAGtC,OAAS,GAAI,EAAG,EAAI,EAAO,OAAQ,IAAK,CACtC,GAAI,GAAQ,EAAO,GACf,EAAO,OAAO,KAAK,EAAe,SAAS,GAAM,IAErD,AAAI,KAAK,SAAS,GAAM,IAAU,MAChC,MAAK,SAAS,GAAM,GAAS,OAAO,OAAO,OAG7C,OAAS,GAAI,EAAG,EAAI,EAAK,OAAQ,IAAK,CACpC,GAAI,GAAM,EAAK,GAEf,AAAI,KAAK,SAAS,GAAM,GAAO,IAAQ,KACrC,KAAK,SAAS,GAAM,GAAO,GAAO,EAAe,SAAS,GAAM,GAAO,GAEvE,KAAK,SAAS,GAAM,GAAO,GAAO,KAAK,SAAS,GAAM,GAAO,GAAK,OAAO,EAAe,SAAS,GAAM,GAAO,QAexH,EAAK,UAAU,UAAU,IAAM,SAAU,EAAM,EAAO,EAAU,CAC9D,GAAI,CAAE,KAAQ,MAAK,UAAW,CAC5B,KAAK,SAAS,GAAQ,OAAO,OAAO,MACpC,KAAK,SAAS,GAAM,GAAS,EAC7B,OAGF,GAAI,CAAE,KAAS,MAAK,SAAS,IAAQ,CACnC,KAAK,SAAS,GAAM,GAAS,EAC7B,OAKF,OAFI,GAAe,OAAO,KAAK,GAEtB,EAAI,EAAG,EAAI,EAAa,OAAQ,IAAK,CAC5C,GAAI,GAAM,EAAa,GAEvB,AAAI,IAAO,MAAK,SAAS,GAAM,GAC7B,KAAK,SAAS,GAAM,GAAO,GAAO,KAAK,SAAS,GAAM,GAAO,GAAK,OAAO,EAAS,IAElF,KAAK,SAAS,GAAM,GAAO,GAAO,EAAS,KAejD,EAAK,MAAQ,SAAU,EAAW,CAChC,KAAK,QAAU,GACf,KAAK,UAAY,GA2BnB,EAAK,MAAM,SAAW,GAAI,QAAQ,KAClC,EAAK,MAAM,SAAS,KAAO,EAC3B,EAAK,MAAM,SAAS,QAAU,EAC9B,EAAK,MAAM,SAAS,SAAW,EAa/B,EAAK,MAAM,SAAW,CAIpB,SAAU,EAMV,SAAU,EAMV,WAAY,GA0Bd,EAAK,MAAM,UAAU,OAAS,SAAU,EAAQ,CAC9C,MAAM,UAAY,IAChB,GAAO,OAAS,KAAK,WAGjB,SAAW,IACf,GAAO,MAAQ,GAGX,eAAiB,IACrB,GAAO,YAAc,IAGjB,YAAc,IAClB,GAAO,SAAW,EAAK,MAAM,SAAS,MAGnC,EAAO,SAAW,EAAK,MAAM,SAAS,SAAa,EAAO,KAAK,OAAO,IAAM,EAAK,MAAM,UAC1F,GAAO,KAAO,IAAM,EAAO,MAGxB,EAAO,SAAW,EAAK,MAAM,SAAS,UAAc,EAAO,KAAK,MAAM,KAAO,EAAK,MAAM,UAC3F,GAAO,KAAO,GAAK,EAAO,KAAO,KAG7B,YAAc,IAClB,GAAO,SAAW,EAAK,MAAM,SAAS,UAGxC,KAAK,QAAQ,KAAK,GAEX,MAUT,EAAK,MAAM,UAAU,UAAY,UAAY,CAC3C,OAAS,GAAI,EAAG,EAAI,KAAK,QAAQ,OAAQ,IACvC,GAAI,KAAK,QAAQ,GAAG,UAAY,EAAK,MAAM,SAAS,WAClD,MAAO,GAIX,MAAO,IA6BT,EAAK,MAAM,UAAU,KAAO,SAAU,EAAM,EAAS,CACnD,GAAI,MAAM,QAAQ,GAChB,SAAK,QAAQ,SAAU,EAAG,CAAE,KAAK,KAAK,EAAG,EAAK,MAAM,MAAM,KAAa,MAChE,KAGT,GAAI,GAAS,GAAW,GACxB,SAAO,KAAO,EAAK,WAEnB,KAAK,OAAO,GAEL,MAET,EAAK,gBAAkB,SAAU,EAAS,EAAO,EAAK,CACpD,KAAK,KAAO,kBACZ,KAAK,QAAU,EACf,KAAK,MAAQ,EACb,KAAK,IAAM,GAGb,EAAK,gBAAgB,UAAY,GAAI,OACrC,EAAK,WAAa,SAAU,EAAK,CAC/B,KAAK,QAAU,GACf,KAAK,IAAM,EACX,KAAK,OAAS,EAAI,OAClB,KAAK,IAAM,EACX,KAAK,MAAQ,EACb,KAAK,oBAAsB,IAG7B,EAAK,WAAW,UAAU,IAAM,UAAY,CAG1C,OAFI,GAAQ,EAAK,WAAW,QAErB,GACL,EAAQ,EAAM,OAIlB,EAAK,WAAW,UAAU,YAAc,UAAY,CAKlD,OAJI,GAAY,GACZ,EAAa,KAAK,MAClB,EAAW,KAAK,IAEX,EAAI,EAAG,EAAI,KAAK,oBAAoB,OAAQ,IACnD,EAAW,KAAK,oBAAoB,GACpC,EAAU,KAAK,KAAK,IAAI,MAAM,EAAY,IAC1C,EAAa,EAAW,EAG1B,SAAU,KAAK,KAAK,IAAI,MAAM,EAAY,KAAK,MAC/C,KAAK,oBAAoB,OAAS,EAE3B,EAAU,KAAK,KAGxB,EAAK,WAAW,UAAU,KAAO,SAAU,EAAM,CAC/C,KAAK,QAAQ,KAAK,CAChB,KAAM,EACN,IAAK,KAAK,cACV,MAAO,KAAK,MACZ,IAAK,KAAK,MAGZ,KAAK,MAAQ,KAAK,KAGpB,EAAK,WAAW,UAAU,gBAAkB,UAAY,CACtD,KAAK,oBAAoB,KAAK,KAAK,IAAM,GACzC,KAAK,KAAO,GAGd,EAAK,WAAW,UAAU,KAAO,UAAY,CAC3C,GAAI,KAAK,KAAO,KAAK,OACnB,MAAO,GAAK,WAAW,IAGzB,GAAI,GAAO,KAAK,IAAI,OAAO,KAAK,KAChC,YAAK,KAAO,EACL,GAGT,EAAK,WAAW,UAAU,MAAQ,UAAY,CAC5C,MAAO,MAAK,IAAM,KAAK,OAGzB,EAAK,WAAW,UAAU,OAAS,UAAY,CAC7C,AAAI,KAAK,OAAS,KAAK,KACrB,MAAK,KAAO,GAGd,KAAK,MAAQ,KAAK,KAGpB,EAAK,WAAW,UAAU,OAAS,UAAY,CAC7C,KAAK,KAAO,GAGd,EAAK,WAAW,UAAU,eAAiB,UAAY,CACrD,GAAI,GAAM,EAEV,EACE,GAAO,KAAK,OACZ,EAAW,EAAK,WAAW,SACpB,EAAW,IAAM,EAAW,IAErC,AAAI,GAAQ,EAAK,WAAW,KAC1B,KAAK,UAIT,EAAK,WAAW,UAAU,KAAO,UAAY,CAC3C,MAAO,MAAK,IAAM,KAAK,QAGzB,EAAK,WAAW,IAAM,MACtB,EAAK,WAAW,MAAQ,QACxB,EAAK,WAAW,KAAO,OACvB,EAAK,WAAW,cAAgB,gBAChC,EAAK,WAAW,MAAQ,QACxB,EAAK,WAAW,SAAW,WAE3B,EAAK,WAAW,SAAW,SAAU,EAAO,CAC1C,SAAM,SACN,EAAM,KAAK,EAAK,WAAW,OAC3B,EAAM,SACC,EAAK,WAAW,SAGzB,EAAK,WAAW,QAAU,SAAU,EAAO,CAQzC,GAPI,EAAM,QAAU,GAClB,GAAM,SACN,EAAM,KAAK,EAAK,WAAW,OAG7B,EAAM,SAEF,EAAM,OACR,MAAO,GAAK,WAAW,SAI3B,EAAK,WAAW,gBAAkB,SAAU,EAAO,CACjD,SAAM,SACN,EAAM,iBACN,EAAM,KAAK,EAAK,WAAW,eACpB,EAAK,WAAW,SAGzB,EAAK,WAAW,SAAW,SAAU,EAAO,CAC1C,SAAM,SACN,EAAM,iBACN,EAAM,KAAK,EAAK,WAAW,OACpB,EAAK,WAAW,SAGzB,EAAK,WAAW,OAAS,SAAU,EAAO,CACxC,AAAI,EAAM,QAAU,GAClB,EAAM,KAAK,EAAK,WAAW,OAe/B,EAAK,WAAW,cAAgB,EAAK,UAAU,UAE/C,EAAK,WAAW,QAAU,SAAU,EAAO,CACzC,OAAa,CACX,GAAI,GAAO,EAAM,OAEjB,GAAI,GAAQ,EAAK,WAAW,IAC1B,MAAO,GAAK,WAAW,OAIzB,GAAI,EAAK,WAAW,IAAM,GAAI,CAC5B,EAAM,kBACN,SAGF,GAAI,GAAQ,IACV,MAAO,GAAK,WAAW,SAGzB,GAAI,GAAQ,IACV,SAAM,SACF,EAAM,QAAU,GAClB,EAAM,KAAK,EAAK,WAAW,MAEtB,EAAK,WAAW,gBAGzB,GAAI,GAAQ,IACV,SAAM,SACF,EAAM,QAAU,GAClB,EAAM,KAAK,EAAK,WAAW,MAEtB,EAAK,WAAW,SAczB,GARI,GAAQ,KAAO,EAAM,UAAY,GAQjC,GAAQ,KAAO,EAAM,UAAY,EACnC,SAAM,KAAK,EAAK,WAAW,UACpB,EAAK,WAAW,QAGzB,GAAI,EAAK,MAAM,EAAK,WAAW,eAC7B,MAAO,GAAK,WAAW,UAK7B,EAAK,YAAc,SAAU,EAAK,EAAO,CACvC,KAAK,MAAQ,GAAI,GAAK,WAAY,GAClC,KAAK,MAAQ,EACb,KAAK,cAAgB,GACrB,KAAK,UAAY,GAGnB,EAAK,YAAY,UAAU,MAAQ,UAAY,CAC7C,KAAK,MAAM,MACX,KAAK,QAAU,KAAK,MAAM,QAI1B,OAFI,GAAQ,EAAK,YAAY,YAEtB,GACL,EAAQ,EAAM,MAGhB,MAAO,MAAK,OAGd,EAAK,YAAY,UAAU,WAAa,UAAY,CAClD,MAAO,MAAK,QAAQ,KAAK,YAG3B,EAAK,YAAY,UAAU,cAAgB,UAAY,CACrD,GAAI,GAAS,KAAK,aAClB,YAAK,WAAa,EACX,GAGT,EAAK,YAAY,UAAU,WAAa,UAAY,CAClD,GAAI,GAAkB,KAAK,cAC3B,KAAK,MAAM,OAAO,GAClB,KAAK,cAAgB,IAGvB,EAAK,YAAY,YAAc,SAAU,EAAQ,CAC/C,GAAI,GAAS,EAAO,aAEpB,GAAI,GAAU,KAId,OAAQ,EAAO,UACR,GAAK,WAAW,SACnB,MAAO,GAAK,YAAY,kBACrB,GAAK,WAAW,MACnB,MAAO,GAAK,YAAY,eACrB,GAAK,WAAW,KACnB,MAAO,GAAK,YAAY,kBAExB,GAAI,GAAe,4CAA8C,EAAO,KAExE,KAAI,GAAO,IAAI,QAAU,GACvB,IAAgB,gBAAkB,EAAO,IAAM,KAG3C,GAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,OAIzE,EAAK,YAAY,cAAgB,SAAU,EAAQ,CACjD,GAAI,GAAS,EAAO,gBAEpB,GAAI,GAAU,KAId,QAAQ,EAAO,SACR,IACH,EAAO,cAAc,SAAW,EAAK,MAAM,SAAS,WACpD,UACG,IACH,EAAO,cAAc,SAAW,EAAK,MAAM,SAAS,SACpD,cAEA,GAAI,GAAe,kCAAoC,EAAO,IAAM,IACpE,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGvE,GAAI,GAAa,EAAO,aAExB,GAAI,GAAc,KAAW,CAC3B,GAAI,GAAe,yCACnB,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGrE,OAAQ,EAAW,UACZ,GAAK,WAAW,MACnB,MAAO,GAAK,YAAY,eACrB,GAAK,WAAW,KACnB,MAAO,GAAK,YAAY,kBAExB,GAAI,GAAe,mCAAqC,EAAW,KAAO,IAC1E,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAW,MAAO,EAAW,QAIjF,EAAK,YAAY,WAAa,SAAU,EAAQ,CAC9C,GAAI,GAAS,EAAO,gBAEpB,GAAI,GAAU,KAId,IAAI,EAAO,MAAM,UAAU,QAAQ,EAAO,MAAQ,GAAI,CACpD,GAAI,GAAiB,EAAO,MAAM,UAAU,IAAI,SAAU,EAAG,CAAE,MAAO,IAAM,EAAI,MAAO,KAAK,MACxF,EAAe,uBAAyB,EAAO,IAAM,uBAAyB,EAElF,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGrE,EAAO,cAAc,OAAS,CAAC,EAAO,KAEtC,GAAI,GAAa,EAAO,aAExB,GAAI,GAAc,KAAW,CAC3B,GAAI,GAAe,gCACnB,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGrE,OAAQ,EAAW,UACZ,GAAK,WAAW,KACnB,MAAO,GAAK,YAAY,kBAExB,GAAI,GAAe,0BAA4B,EAAW,KAAO,IACjE,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAW,MAAO,EAAW,QAIjF,EAAK,YAAY,UAAY,SAAU,EAAQ,CAC7C,GAAI,GAAS,EAAO,gBAEpB,GAAI,GAAU,KAId,GAAO,cAAc,KAAO,EAAO,IAAI,cAEnC,EAAO,IAAI,QAAQ,MAAQ,IAC7B,GAAO,cAAc,YAAc,IAGrC,GAAI,GAAa,EAAO,aAExB,GAAI,GAAc,KAAW,CAC3B,EAAO,aACP,OAGF,OAAQ,EAAW,UACZ,GAAK,WAAW,KACnB,SAAO,aACA,EAAK,YAAY,cACrB,GAAK,WAAW,MACnB,SAAO,aACA,EAAK,YAAY,eACrB,GAAK,WAAW,cACnB,MAAO,GAAK,YAAY,sBACrB,GAAK,WAAW,MACnB,MAAO,GAAK,YAAY,eACrB,GAAK,WAAW,SACnB,SAAO,aACA,EAAK,YAAY,sBAExB,GAAI,GAAe,2BAA6B,EAAW,KAAO,IAClE,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAW,MAAO,EAAW,QAIjF,EAAK,YAAY,kBAAoB,SAAU,EAAQ,CACrD,GAAI,GAAS,EAAO,gBAEpB,GAAI,GAAU,KAId,IAAI,GAAe,SAAS,EAAO,IAAK,IAExC,GAAI,MAAM,GAAe,CACvB,GAAI,GAAe,gCACnB,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGrE,EAAO,cAAc,aAAe,EAEpC,GAAI,GAAa,EAAO,aAExB,GAAI,GAAc,KAAW,CAC3B,EAAO,aACP,OAGF,OAAQ,EAAW,UACZ,GAAK,WAAW,KACnB,SAAO,aACA,EAAK,YAAY,cACrB,GAAK,WAAW,MACnB,SAAO,aACA,EAAK,YAAY,eACrB,GAAK,WAAW,cACnB,MAAO,GAAK,YAAY,sBACrB,GAAK,WAAW,MACnB,MAAO,GAAK,YAAY,eACrB,GAAK,WAAW,SACnB,SAAO,aACA,EAAK,YAAY,sBAExB,GAAI,GAAe,2BAA6B,EAAW,KAAO,IAClE,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAW,MAAO,EAAW,QAIjF,EAAK,YAAY,WAAa,SAAU,EAAQ,CAC9C,GAAI,GAAS,EAAO,gBAEpB,GAAI,GAAU,KAId,IAAI,GAAQ,SAAS,EAAO,IAAK,IAEjC,GAAI,MAAM,GAAQ,CAChB,GAAI,GAAe,wBACnB,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAO,MAAO,EAAO,KAGrE,EAAO,cAAc,MAAQ,EAE7B,GAAI,GAAa,EAAO,aAExB,GAAI,GAAc,KAAW,CAC3B,EAAO,aACP,OAGF,OAAQ,EAAW,UACZ,GAAK,WAAW,KACnB,SAAO,aACA,EAAK,YAAY,cACrB,GAAK,WAAW,MACnB,SAAO,aACA,EAAK,YAAY,eACrB,GAAK,WAAW,cACnB,MAAO,GAAK,YAAY,sBACrB,GAAK,WAAW,MACnB,MAAO,GAAK,YAAY,eACrB,GAAK,WAAW,SACnB,SAAO,aACA,EAAK,YAAY,sBAExB,GAAI,GAAe,2BAA6B,EAAW,KAAO,IAClE,KAAM,IAAI,GAAK,gBAAiB,EAAc,EAAW,MAAO,EAAW,QAQ7E,SAAU,EAAM,EAAS,CACzB,AAAI,MAAO,SAAW,YAAc,OAAO,IAEzC,OAAO,GACF,AAAI,MAAO,IAAY,SAM5B,EAAO,QAAU,IAGjB,EAAK,KAAO,KAEd,KAAM,UAAY,CAMlB,MAAO,WCh5GX,iBAQA,aAOA,GAAI,IAAkB,UAOtB,EAAO,QAAU,GAUjB,YAAoB,EAAQ,CAC1B,GAAI,GAAM,GAAK,EACX,EAAQ,GAAgB,KAAK,GAEjC,GAAI,CAAC,EACH,MAAO,GAGT,GAAI,GACA,EAAO,GACP,EAAQ,EACR,EAAY,EAEhB,IAAK,EAAQ,EAAM,MAAO,EAAQ,EAAI,OAAQ,IAAS,CACrD,OAAQ,EAAI,WAAW,QAChB,IACH,EAAS,SACT,UACG,IACH,EAAS,QACT,UACG,IACH,EAAS,QACT,UACG,IACH,EAAS,OACT,UACG,IACH,EAAS,OACT,cAEA,SAGJ,AAAI,IAAc,GAChB,IAAQ,EAAI,UAAU,EAAW,IAGnC,EAAY,EAAQ,EACpB,GAAQ,EAGV,MAAO,KAAc,EACjB,EAAO,EAAI,UAAU,EAAW,GAChC,KCtDN,OAAiB,OCAjB,OAAuB,OAiChB,YACL,EACmB,CACnB,GAAM,GAAY,GAAI,KAChB,EAAY,GAAI,KACtB,OAAW,KAAO,GAAM,CACtB,GAAM,CAAC,EAAM,GAAQ,EAAI,SAAS,MAAM,KAGlC,EAAW,EAAI,SACf,EAAW,EAAI,MAGf,EAAO,eAAW,EAAI,MACzB,QAAQ,mBAAoB,IAC5B,QAAQ,OAAQ,KAGnB,GAAI,EAAM,CACR,GAAM,GAAS,EAAU,IAAI,GAG7B,AAAK,EAAQ,IAAI,GASf,EAAU,IAAI,EAAU,CACtB,WACA,QACA,OACA,WAZF,GAAO,MAAQ,EAAI,MACnB,EAAO,KAAQ,EAGf,EAAQ,IAAI,QAcd,GAAU,IAAI,EAAU,CACtB,WACA,QACA,SAIN,MAAO,GC9CF,YACL,EAC0B,CAC1B,GAAM,GAAY,GAAI,QAAO,EAAO,UAAW,OACzC,EAAY,CAAC,EAAY,EAAc,IACpC,GAAG,4BAA+B,WAI3C,MAAO,AAAC,IAAkB,CACxB,EAAQ,EACL,QAAQ,gBAAiB,KACzB,OAGH,GAAM,GAAQ,GAAI,QAAO,MAAM,EAAO,cACpC,EACG,QAAQ,uBAAwB,QAChC,QAAQ,EAAW,QACnB,OAGL,MAAO,IAAS,EACb,QAAQ,EAAO,GACf,QAAQ,8BAA+B,OC7BvC,YACL,EACqB,CACrB,GAAM,GAAS,GAAK,MAAa,MAAM,CAAC,QAAS,SAIjD,MAHe,IAAK,MAAa,YAAY,EAAO,GAG7C,QACA,EAAM,QAWR,YACL,EAA4B,EACV,CAClB,GAAM,GAAU,GAAI,KAAuB,GAGrC,EAA2B,GACjC,OAAS,GAAI,EAAG,EAAI,EAAM,OAAQ,IAChC,OAAW,KAAU,GACnB,AAAI,EAAM,GAAG,WAAW,EAAO,OAC7B,GAAO,EAAO,MAAQ,GACtB,EAAQ,OAAO,IAIrB,OAAW,KAAU,GACnB,EAAO,EAAO,MAAQ,GAGxB,MAAO,GC2BT,YAAoB,EAAa,EAAuB,CACtD,GAAM,CAAC,EAAG,GAAK,CAAC,GAAI,KAAI,GAAI,GAAI,KAAI,IACpC,MAAO,CACL,GAAG,GAAI,KAAI,CAAC,GAAG,GAAG,OAAO,GAAS,CAAC,EAAE,IAAI,MAWtC,WAAa,CA2BX,YAAY,CAAE,SAAQ,OAAM,WAAU,SAAsB,CACjE,KAAK,UAAY,GAAuB,GACxC,KAAK,UAAY,GAAuB,GAGxC,KAAK,UAAU,UAAY,GAAI,QAAO,EAAO,WAG7C,AAAI,MAAO,IAAU,YACnB,KAAK,MAAQ,KAAK,UAAY,CAG5B,AAAI,EAAO,KAAK,SAAW,GAAK,EAAO,KAAK,KAAO,KACjD,KAAK,IAAK,KAAa,EAAO,KAAK,KAC1B,EAAO,KAAK,OAAS,GAC9B,KAAK,IAAK,KAAa,cAAc,GAAG,EAAO,OAIjD,GAAM,GAAM,GAAW,CACrB,UAAW,iBAAkB,WAC5B,GAGH,OAAW,KAAQ,GAAO,KAAK,IAAI,GACjC,IAAa,KAAO,KAAQ,KAAa,IAEzC,OAAW,KAAM,GACf,KAAK,SAAS,OAAO,EAAK,IAC1B,KAAK,eAAe,OAAO,EAAK,IAKpC,KAAK,MAAM,QAAS,CAAE,MAAO,MAC7B,KAAK,MAAM,QACX,KAAK,IAAI,YAGT,OAAW,KAAO,GAChB,KAAK,IAAI,KAKb,KAAK,MAAQ,KAAK,MAAM,KAAK,GAoB1B,OAAO,EAA+B,CAC3C,GAAI,EACF,GAAI,CACF,GAAM,GAAY,KAAK,UAAU,GAG3B,EAAU,GAAiB,GAC9B,OAAO,GACN,EAAO,WAAa,KAAK,MAAM,SAAS,YA+C5C,MAAO,CAAC,GAAG,AA3CI,KAAK,MAAM,OAAO,GAAG,MAGjC,OAAqB,CAAC,EAAS,CAAE,MAAK,QAAO,eAAgB,CAC5D,GAAM,GAAW,KAAK,UAAU,IAAI,GACpC,GAAI,MAAO,IAAa,YAAa,CACnC,GAAM,CAAE,WAAU,QAAO,OAAM,UAAW,EAGpC,EAAQ,GACZ,EACA,OAAO,KAAK,EAAU,WAIlB,EAAQ,CAAC,CAAC,EAAS,EAAC,OAAO,OAAO,GAAO,MAAM,GAAK,GAC1D,EAAQ,KAAK,CACX,WACA,MAAO,EAAU,GACjB,KAAM,EAAU,GAChB,MAAO,EAAS,GAAI,GACpB,UAGJ,MAAO,IACN,IAGF,KAAK,CAAC,EAAG,IAAM,EAAE,MAAQ,EAAE,OAG3B,OAAO,CAAC,EAAS,IAAW,CAC3B,GAAM,GAAW,KAAK,UAAU,IAAI,EAAO,UAC3C,GAAI,MAAO,IAAa,YAAa,CACnC,GAAM,GAAM,UAAY,GACpB,EAAS,OAAQ,SACjB,EAAS,SACb,EAAQ,IAAI,EAAK,CAAC,GAAG,EAAQ,IAAI,IAAQ,GAAI,IAE/C,MAAO,IACN,GAAI,MAGS,gBAGZ,EAAN,CACA,QAAQ,KAAK,kBAAkB,uCAKnC,MAAO,KChQJ,GAAW,GAAX,UAAW,EAAX,CACL,qBACA,qBACA,qBACA,yBAJgB,WLwBlB,GAAI,GAqBJ,YACE,EACe,gCACf,GAAI,GAAO,UAGX,GAAI,MAAO,SAAW,aAAe,gBAAkB,QAAQ,CAC7D,GAAM,GAAS,SAAS,cAAiC,eACnD,CAAC,GAAQ,EAAO,IAAI,MAAM,WAGhC,EAAO,EAAK,QAAQ,KAAM,GAI5B,GAAM,GAAU,GAChB,OAAW,KAAQ,GAAO,KACxB,AAAI,IAAS,MAAM,EAAQ,KAAK,GAAG,gBAC/B,IAAS,MAAM,EAAQ,KAAK,GAAG,cAAiB,YAItD,AAAI,EAAO,KAAK,OAAS,GACvB,EAAQ,KAAK,GAAG,2BAGd,EAAQ,QACV,MAAM,eACJ,GAAG,oCACH,GAAG,MAeT,YACE,EACwB,gCACxB,OAAQ,EAAQ,UAGT,GAAkB,MACrB,YAAM,IAAqB,EAAQ,KAAK,QACxC,EAAQ,GAAI,GAAO,EAAQ,MACpB,CACL,KAAM,EAAkB,WAIvB,GAAkB,MACrB,MAAO,CACL,KAAM,EAAkB,OACxB,KAAM,EAAQ,EAAM,OAAO,EAAQ,MAAQ,YAK7C,KAAM,IAAI,WAAU,2BAS1B,KAAK,KAAO,WAGZ,iBAAiB,UAAW,AAAM,GAAM,0BACtC,YAAY,KAAM,IAAQ,EAAG", + "names": [] +} diff --git a/v2.7/assets/stylesheets/main.bde7dde4.min.css b/v2.7/assets/stylesheets/main.bde7dde4.min.css new file mode 100644 index 000000000..069d65ca0 --- /dev/null +++ b/v2.7/assets/stylesheets/main.bde7dde4.min.css @@ -0,0 +1,2 @@ +@charset "UTF-8";html{box-sizing:border-box;-webkit-text-size-adjust:none;-ms-text-size-adjust:none;text-size-adjust:none}*,:after,:before{box-sizing:inherit}body{margin:0}a,button,input,label{-webkit-tap-highlight-color:transparent}a{color:inherit;text-decoration:none}hr{border:0;box-sizing:initial;display:block;height:.05rem;overflow:visible;padding:0}small{font-size:80%}sub,sup{line-height:1em}img{border-style:none}table{border-collapse:initial;border-spacing:0}td,th{font-weight:400;vertical-align:top}button{background:transparent;border:0;font-family:inherit;font-size:inherit;margin:0;padding:0}input{border:0;outline:none}:root{--md-default-fg-color:rgba(0,0,0,0.87);--md-default-fg-color--light:rgba(0,0,0,0.54);--md-default-fg-color--lighter:rgba(0,0,0,0.32);--md-default-fg-color--lightest:rgba(0,0,0,0.07);--md-default-bg-color:#fff;--md-default-bg-color--light:hsla(0,0%,100%,0.7);--md-default-bg-color--lighter:hsla(0,0%,100%,0.3);--md-default-bg-color--lightest:hsla(0,0%,100%,0.12);--md-primary-fg-color:#4051b5;--md-primary-fg-color--light:#5d6cc0;--md-primary-fg-color--dark:#303fa1;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7);--md-accent-fg-color:#526cfe;--md-accent-fg-color--transparent:rgba(83,108,254,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}:root>*{--md-code-fg-color:#36464e;--md-code-bg-color:#f5f5f5;--md-code-hl-color:rgba(255,255,0,0.5);--md-code-hl-number-color:#d52a2a;--md-code-hl-special-color:#db1457;--md-code-hl-function-color:#a846b9;--md-code-hl-constant-color:#6e59d9;--md-code-hl-keyword-color:#3f6ec6;--md-code-hl-string-color:#1c7d4d;--md-code-hl-name-color:var(--md-code-fg-color);--md-code-hl-operator-color:var(--md-default-fg-color--light);--md-code-hl-punctuation-color:var(--md-default-fg-color--light);--md-code-hl-comment-color:var(--md-default-fg-color--light);--md-code-hl-generic-color:var(--md-default-fg-color--light);--md-code-hl-variable-color:var(--md-default-fg-color--light);--md-typeset-color:var(--md-default-fg-color);--md-typeset-a-color:var(--md-primary-fg-color);--md-typeset-mark-color:rgba(255,255,0,0.5);--md-typeset-del-color:rgba(245,80,61,0.15);--md-typeset-ins-color:rgba(11,213,112,0.15);--md-typeset-kbd-color:#fafafa;--md-typeset-kbd-accent-color:#fff;--md-typeset-kbd-border-color:#b8b8b8;--md-admonition-fg-color:var(--md-default-fg-color);--md-admonition-bg-color:var(--md-default-bg-color);--md-footer-fg-color:#fff;--md-footer-fg-color--light:hsla(0,0%,100%,0.7);--md-footer-fg-color--lighter:hsla(0,0%,100%,0.3);--md-footer-bg-color:rgba(0,0,0,0.87);--md-footer-bg-color--dark:rgba(0,0,0,0.32)}.md-icon svg{fill:currentColor;display:block;height:1.2rem;width:1.2rem}body{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body,input{font-family:var(--md-text-font-family,_),-apple-system,BlinkMacSystemFont,Helvetica,Arial,sans-serif;font-feature-settings:"kern","liga"}body,code,input,kbd,pre{color:var(--md-typeset-color)}code,kbd,pre{font-family:var(--md-code-font-family,_),SFMono-Regular,Consolas,Menlo,monospace;font-feature-settings:"kern"}:root{--md-typeset-table--ascending:url('data:image/svg+xml;charset=utf-8,');--md-typeset-table--descending:url('data:image/svg+xml;charset=utf-8,')}.md-typeset{-webkit-print-color-adjust:exact;color-adjust:exact;font-size:.8rem;line-height:1.6}@media print{.md-typeset{font-size:.68rem}}.md-typeset blockquote,.md-typeset dl,.md-typeset figure,.md-typeset ol,.md-typeset pre,.md-typeset ul{margin:1em 0}.md-typeset h1{color:var(--md-default-fg-color--light);font-size:2em;line-height:1.3;margin:0 0 1.25em}.md-typeset h1,.md-typeset h2{font-weight:300;letter-spacing:-.01em}.md-typeset h2{font-size:1.5625em;line-height:1.4;margin:1.6em 0 .64em}.md-typeset h3{font-size:1.25em;font-weight:400;letter-spacing:-.01em;line-height:1.5;margin:1.6em 0 .8em}.md-typeset h2+h3{margin-top:.8em}.md-typeset h4{font-weight:700;letter-spacing:-.01em;margin:1em 0}.md-typeset h5,.md-typeset h6{color:var(--md-default-fg-color--light);font-size:.8em;font-weight:700;letter-spacing:-.01em;margin:1.25em 0}.md-typeset h5{text-transform:uppercase}.md-typeset hr{border-bottom:.05rem solid var(--md-default-fg-color--lightest);display:flow-root;margin:1.5em 0}.md-typeset a{color:var(--md-typeset-a-color);word-break:break-word}.md-typeset a,.md-typeset a:before{transition:color 125ms}.md-typeset a:focus,.md-typeset a:hover{color:var(--md-accent-fg-color)}.md-typeset a.focus-visible{outline-color:var(--md-accent-fg-color);outline-offset:.2rem}.md-typeset code,.md-typeset kbd,.md-typeset pre{color:var(--md-code-fg-color);direction:ltr}@media print{.md-typeset code,.md-typeset kbd,.md-typeset pre{white-space:pre-wrap}}.md-typeset code{background-color:var(--md-code-bg-color);border-radius:.1rem;-webkit-box-decoration-break:clone;box-decoration-break:clone;font-size:.85em;padding:0 .2941176471em;word-break:break-word}.md-typeset code:not(.focus-visible){-webkit-tap-highlight-color:transparent;outline:none}.md-typeset h1 code,.md-typeset h2 code,.md-typeset h3 code,.md-typeset h4 code,.md-typeset h5 code,.md-typeset h6 code{background-color:initial;box-shadow:none;margin:initial;padding:initial}.md-typeset a code{color:currentColor}.md-typeset pre{display:flow-root;line-height:1.4;position:relative}.md-typeset pre>code{scrollbar-width:thin;scrollbar-color:var(--md-default-fg-color--lighter) transparent;-webkit-box-decoration-break:slice;box-decoration-break:slice;box-shadow:none;display:block;margin:0;overflow:auto;padding:.7720588235em 1.1764705882em;touch-action:auto;word-break:normal}.md-typeset pre>code:hover{scrollbar-color:var(--md-accent-fg-color) transparent}.md-typeset pre>code::-webkit-scrollbar{height:.2rem;width:.2rem}.md-typeset pre>code::-webkit-scrollbar-thumb{background-color:var(--md-default-fg-color--lighter)}.md-typeset pre>code::-webkit-scrollbar-thumb:hover{background-color:var(--md-accent-fg-color)}@media screen and (max-width:44.9375em){.md-typeset>pre{margin:1em -.8rem}.md-typeset>pre code{border-radius:0}}.md-typeset kbd{background-color:var(--md-typeset-kbd-color);border-radius:.1rem;box-shadow:0 .1rem 0 .05rem var(--md-typeset-kbd-border-color),0 .1rem 0 var(--md-typeset-kbd-border-color),0 -.1rem .2rem var(--md-typeset-kbd-accent-color) inset;color:var(--md-default-fg-color);display:inline-block;font-size:.75em;padding:0 .6666666667em;vertical-align:text-top;word-break:break-word}.md-typeset mark{background-color:var(--md-typeset-mark-color);-webkit-box-decoration-break:clone;box-decoration-break:clone;color:inherit;word-break:break-word}.md-typeset abbr{border-bottom:.05rem dotted var(--md-default-fg-color--light);cursor:help;text-decoration:none}@media (hover:none){.md-typeset abbr{position:relative}.md-typeset abbr[title]:focus:after,.md-typeset abbr[title]:hover:after{background-color:var(--md-default-fg-color);border-radius:.1rem;box-shadow:0 2px 2px 0 rgba(0,0,0,.14),0 1px 5px 0 rgba(0,0,0,.12),0 3px 1px -2px rgba(0,0,0,.2);color:var(--md-default-bg-color);content:attr(title);display:inline-block;font-size:.7rem;left:0;margin-top:2em;max-width:80%;min-width:-webkit-max-content;min-width:-moz-max-content;min-width:max-content;padding:.2rem .3rem;position:absolute;width:auto}}.md-typeset small{opacity:.75}.md-typeset sub,.md-typeset sup{margin-left:.078125em}[dir=rtl] .md-typeset sub,[dir=rtl] .md-typeset sup{margin-left:0;margin-right:.078125em}.md-typeset blockquote{border-left:.2rem solid var(--md-default-fg-color--lighter);color:var(--md-default-fg-color--light);display:flow-root;padding-left:.6rem}[dir=rtl] .md-typeset blockquote{border-left:initial;border-right:.2rem solid var(--md-default-fg-color--lighter);padding-left:0;padding-right:.6rem}.md-typeset ul{list-style-type:disc}.md-typeset ol,.md-typeset ul{display:flow-root;margin-left:.625em;padding:0}[dir=rtl] .md-typeset ol,[dir=rtl] .md-typeset ul{margin-left:0;margin-right:.625em}.md-typeset ol ol,.md-typeset ul ol{list-style-type:lower-alpha}.md-typeset ol ol ol,.md-typeset ul ol ol{list-style-type:lower-roman}.md-typeset ol li,.md-typeset ul li{margin-bottom:.5em;margin-left:1.25em}[dir=rtl] .md-typeset ol li,[dir=rtl] .md-typeset ul li{margin-left:0;margin-right:1.25em}.md-typeset ol li blockquote,.md-typeset ol li p,.md-typeset ul li blockquote,.md-typeset ul li p{margin:.5em 0}.md-typeset ol li:last-child,.md-typeset ul li:last-child{margin-bottom:0}.md-typeset ol li ol,.md-typeset ol li ul,.md-typeset ul li ol,.md-typeset ul li ul{margin:.5em 0 .5em .625em}[dir=rtl] .md-typeset ol li ol,[dir=rtl] .md-typeset ol li ul,[dir=rtl] .md-typeset ul li ol,[dir=rtl] .md-typeset ul li ul{margin-left:0;margin-right:.625em}.md-typeset dd{margin:1em 0 1.5em 1.875em}[dir=rtl] .md-typeset dd{margin-left:0;margin-right:1.875em}.md-typeset img,.md-typeset svg{height:auto;max-width:100%}.md-typeset img[align=left],.md-typeset svg[align=left]{margin:1em 1em 1em 0}.md-typeset img[align=right],.md-typeset svg[align=right]{margin:1em 0 1em 1em}.md-typeset img[align]:only-child,.md-typeset svg[align]:only-child{margin-top:0}.md-typeset figure{display:flow-root;margin:0 auto;max-width:100%;text-align:center;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content}.md-typeset figure img{display:block}.md-typeset figcaption{font-style:italic;margin:1em auto 2em;max-width:24rem}.md-typeset iframe{max-width:100%}.md-typeset table:not([class]){background-color:var(--md-default-bg-color);border-radius:.1rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.05),0 0 .05rem rgba(0,0,0,.1);display:inline-block;font-size:.64rem;max-width:100%;overflow:auto;touch-action:auto}@media print{.md-typeset table:not([class]){display:table}}.md-typeset table:not([class])+*{margin-top:1.5em}.md-typeset table:not([class]) td>:first-child,.md-typeset table:not([class]) th>:first-child{margin-top:0}.md-typeset table:not([class]) td>:last-child,.md-typeset table:not([class]) th>:last-child{margin-bottom:0}.md-typeset table:not([class]) td:not([align]),.md-typeset table:not([class]) th:not([align]){text-align:left}[dir=rtl] .md-typeset table:not([class]) td:not([align]),[dir=rtl] .md-typeset table:not([class]) th:not([align]){text-align:right}.md-typeset table:not([class]) th{background-color:var(--md-default-fg-color--light);color:var(--md-default-bg-color);min-width:5rem;padding:.9375em 1.25em;vertical-align:top}.md-typeset table:not([class]) th a{color:inherit}.md-typeset table:not([class]) td{border-top:.05rem solid var(--md-default-fg-color--lightest);padding:.9375em 1.25em;vertical-align:top}.md-typeset table:not([class]) tr{transition:background-color 125ms}.md-typeset table:not([class]) tr:hover{background-color:rgba(0,0,0,.035);box-shadow:0 .05rem 0 var(--md-default-bg-color) inset}.md-typeset table:not([class]) tr:first-child td{border-top:0}.md-typeset table:not([class]) a{word-break:normal}.md-typeset table th[role=columnheader]{cursor:pointer}.md-typeset table th[role=columnheader]:after{content:"";display:inline-block;height:1.2em;margin-left:.5em;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;vertical-align:sub;width:1.2em}.md-typeset table th[role=columnheader][aria-sort=ascending]:after{background-color:currentColor;-webkit-mask-image:var(--md-typeset-table--ascending);mask-image:var(--md-typeset-table--ascending)}.md-typeset table th[role=columnheader][aria-sort=descending]:after{background-color:currentColor;-webkit-mask-image:var(--md-typeset-table--descending);mask-image:var(--md-typeset-table--descending)}.md-typeset__scrollwrap{margin:1em -.8rem;overflow-x:auto;touch-action:auto}.md-typeset__table{display:inline-block;margin-bottom:.5em;padding:0 .8rem}@media print{.md-typeset__table{display:block}}html .md-typeset__table table{display:table;margin:0;overflow:hidden;width:100%}html{font-size:125%;height:100%;overflow-x:hidden}@media screen and (min-width:100em){html{font-size:137.5%}}@media screen and (min-width:125em){html{font-size:150%}}body{background-color:var(--md-default-bg-color);display:flex;flex-direction:column;font-size:.5rem;min-height:100%;position:relative;width:100%}@media print{body{display:block}}@media screen and (max-width:59.9375em){body[data-md-state=lock]{position:fixed}}.md-grid{margin-left:auto;margin-right:auto;max-width:61rem}.md-container{display:flex;flex-direction:column;flex-grow:1}@media print{.md-container{display:block}}.md-main{flex-grow:1}.md-main__inner{display:flex;height:100%;margin-top:1.5rem}.md-ellipsis{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.md-toggle{display:none}.md-option{height:0;opacity:0;position:absolute;width:0}.md-option:checked+label:not([hidden]){display:block}.md-option.focus-visible+label{outline-color:var(--md-accent-fg-color);outline-style:auto}.md-skip{background-color:var(--md-default-fg-color);border-radius:.1rem;color:var(--md-default-bg-color);font-size:.64rem;margin:.5rem;opacity:0;outline-color:var(--md-accent-fg-color);padding:.3rem .5rem;position:fixed;transform:translateY(.4rem);z-index:-1}.md-skip:focus{opacity:1;transform:translateY(0);transition:transform .25s cubic-bezier(.4,0,.2,1),opacity 175ms 75ms;z-index:10}@page{margin:25mm}.md-announce{background-color:var(--md-footer-bg-color);overflow:auto}@media print{.md-announce{display:none}}.md-announce__inner{color:var(--md-footer-fg-color);font-size:.7rem;margin:.6rem auto;padding:0 .8rem}:root{--md-clipboard-icon:url('data:image/svg+xml;charset=utf-8,')}.md-clipboard{border-radius:.1rem;color:var(--md-default-fg-color--lightest);cursor:pointer;height:1.5em;outline-color:var(--md-accent-fg-color);outline-offset:.1rem;position:absolute;right:.5em;top:.5em;transition:color .25s;width:1.5em;z-index:1}@media print{.md-clipboard{display:none}}.md-clipboard:not(.focus-visible){-webkit-tap-highlight-color:transparent;outline:none}:hover>.md-clipboard{color:var(--md-default-fg-color--light)}.md-clipboard:focus,.md-clipboard:hover{color:var(--md-accent-fg-color)}.md-clipboard:after{background-color:currentColor;content:"";display:block;height:1.125em;margin:0 auto;-webkit-mask-image:var(--md-clipboard-icon);mask-image:var(--md-clipboard-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;width:1.125em}.md-clipboard--inline{cursor:pointer}.md-clipboard--inline code{transition:color .25s,background-color .25s}.md-clipboard--inline:focus code,.md-clipboard--inline:hover code{background-color:var(--md-accent-fg-color--transparent);color:var(--md-accent-fg-color)}.md-content{scroll-padding-top:51.2rem;flex-grow:1;overflow:hidden}.md-content__inner{margin:0 .8rem 1.2rem;padding-top:.6rem}@media screen and (min-width:76.25em){.md-sidebar--primary:not([hidden])~.md-content>.md-content__inner{margin-left:1.2rem}[dir=rtl] .md-sidebar--primary:not([hidden])~.md-content>.md-content__inner{margin-left:.8rem;margin-right:1.2rem}.md-sidebar--secondary:not([hidden])~.md-content>.md-content__inner{margin-right:1.2rem}[dir=rtl] .md-sidebar--secondary:not([hidden])~.md-content>.md-content__inner{margin-left:1.2rem;margin-right:.8rem}}.md-content__inner:before{content:"";display:block;height:.4rem}.md-content__inner>:last-child{margin-bottom:0}.md-content__button{float:right;margin:.4rem 0 .4rem .4rem;padding:0}@media print{.md-content__button{display:none}}[dir=rtl] .md-content__button{float:left;margin-left:0;margin-right:.4rem}[dir=rtl] .md-content__button svg{transform:scaleX(-1)}.md-typeset .md-content__button{color:var(--md-default-fg-color--lighter)}.md-content__button svg{display:inline;vertical-align:top}.md-dialog{background-color:var(--md-default-fg-color);border-radius:.1rem;bottom:.8rem;box-shadow:0 2px 2px 0 rgba(0,0,0,.14),0 1px 5px 0 rgba(0,0,0,.12),0 3px 1px -2px rgba(0,0,0,.2);left:auto;min-width:11.1rem;opacity:0;padding:.4rem .6rem;pointer-events:none;position:fixed;right:.8rem;transform:translateY(100%);transition:transform 0ms .4s,opacity .4s;z-index:2}@media print{.md-dialog{display:none}}[dir=rtl] .md-dialog{left:.8rem;right:auto}.md-dialog[data-md-state=open]{opacity:1;pointer-events:auto;transform:translateY(0);transition:transform .4s cubic-bezier(.075,.85,.175,1),opacity .4s}.md-dialog__inner{color:var(--md-default-bg-color);font-size:.7rem}.md-typeset .md-button{border:.1rem solid;border-radius:.1rem;color:var(--md-primary-fg-color);display:inline-block;font-weight:700;padding:.625em 2em;transition:color 125ms,background-color 125ms,border-color 125ms}.md-typeset .md-button--primary{background-color:var(--md-primary-fg-color);border-color:var(--md-primary-fg-color);color:var(--md-primary-bg-color)}.md-typeset .md-button:focus,.md-typeset .md-button:hover{background-color:var(--md-accent-fg-color);border-color:var(--md-accent-fg-color);color:var(--md-accent-bg-color)}.md-typeset .md-input{border-radius:.1rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.1),0 .025rem .05rem rgba(0,0,0,.1);font-size:.8rem;height:1.8rem;padding:0 .6rem;transition:box-shadow .25s}.md-typeset .md-input:focus,.md-typeset .md-input:hover{box-shadow:0 .4rem 1rem rgba(0,0,0,.15),0 .025rem .05rem rgba(0,0,0,.15)}.md-typeset .md-input--stretch{width:100%}.md-header{background-color:var(--md-primary-fg-color);box-shadow:0 0 .2rem transparent,0 .2rem .4rem transparent;color:var(--md-primary-bg-color);left:0;position:-webkit-sticky;position:sticky;right:0;top:0;z-index:2}@media print{.md-header{display:none}}.md-header[data-md-state=shadow]{box-shadow:0 0 .2rem rgba(0,0,0,.1),0 .2rem .4rem rgba(0,0,0,.2);transition:transform .25s cubic-bezier(.1,.7,.1,1),box-shadow .25s}.md-header[data-md-state=hidden]{transform:translateY(-100%);transition:transform .25s cubic-bezier(.8,0,.6,1),box-shadow .25s}.md-header__inner{align-items:center;display:flex;padding:0 .2rem}.md-header__button{color:currentColor;cursor:pointer;margin:.2rem;outline-color:var(--md-accent-fg-color);padding:.4rem;position:relative;transition:opacity .25s;vertical-align:middle;z-index:1}.md-header__button:hover{opacity:.7}.md-header__button:not([hidden]){display:inline-block}.md-header__button:not(.focus-visible){-webkit-tap-highlight-color:transparent;outline:none}.md-header__button.md-logo{margin:.2rem;padding:.4rem}@media screen and (max-width:76.1875em){.md-header__button.md-logo{display:none}}.md-header__button.md-logo img,.md-header__button.md-logo svg{fill:currentColor;display:block;height:1.2rem;width:1.2rem}@media screen and (min-width:60em){.md-header__button[for=__search]{display:none}}.no-js .md-header__button[for=__search]{display:none}[dir=rtl] .md-header__button[for=__search] svg{transform:scaleX(-1)}@media screen and (min-width:76.25em){.md-header__button[for=__drawer]{display:none}}.md-header__topic{display:flex;max-width:100%;position:absolute;transition:transform .4s cubic-bezier(.1,.7,.1,1),opacity .15s}.md-header__topic+.md-header__topic{opacity:0;pointer-events:none;transform:translateX(1.25rem);transition:transform .4s cubic-bezier(1,.7,.1,.1),opacity .15s;z-index:-1}[dir=rtl] .md-header__topic+.md-header__topic{transform:translateX(-1.25rem)}.md-header__title{flex-grow:1;font-size:.9rem;height:2.4rem;line-height:2.4rem;margin-left:1rem;margin-right:.4rem}.md-header__title[data-md-state=active] .md-header__topic{opacity:0;pointer-events:none;transform:translateX(-1.25rem);transition:transform .4s cubic-bezier(1,.7,.1,.1),opacity .15s;z-index:-1}[dir=rtl] .md-header__title[data-md-state=active] .md-header__topic{transform:translateX(1.25rem)}.md-header__title[data-md-state=active] .md-header__topic+.md-header__topic{opacity:1;pointer-events:auto;transform:translateX(0);transition:transform .4s cubic-bezier(.1,.7,.1,1),opacity .15s;z-index:0}.md-header__title>.md-header__ellipsis{height:100%;position:relative;width:100%}.md-header__option{display:flex;flex-shrink:0;max-width:100%;transition:max-width 0ms .25s,opacity .25s .25s;white-space:nowrap}[data-md-toggle=search]:checked~.md-header .md-header__option{max-width:0;opacity:0;transition:max-width 0ms,opacity 0ms}.md-header__source{display:none}@media screen and (min-width:60em){.md-header__source{display:block;margin-left:1rem;max-width:11.7rem;width:11.7rem}[dir=rtl] .md-header__source{margin-left:0;margin-right:1rem}}@media screen and (min-width:76.25em){.md-header__source{margin-left:1.4rem}[dir=rtl] .md-header__source{margin-right:1.4rem}}.md-footer{background-color:var(--md-footer-bg-color);color:var(--md-footer-fg-color)}@media print{.md-footer{display:none}}.md-footer__inner{overflow:auto;padding:.2rem}.md-footer__link{display:flex;outline-color:var(--md-accent-fg-color);padding-bottom:.4rem;padding-top:1.4rem;transition:opacity .25s}@media screen and (min-width:45em){.md-footer__link{width:50%}}.md-footer__link:focus,.md-footer__link:hover{opacity:.7}.md-footer__link--prev{float:left}@media screen and (max-width:44.9375em){.md-footer__link--prev{width:25%}.md-footer__link--prev .md-footer__title{display:none}}[dir=rtl] .md-footer__link--prev{float:right}[dir=rtl] .md-footer__link--prev svg{transform:scaleX(-1)}.md-footer__link--next{float:right;text-align:right}@media screen and (max-width:44.9375em){.md-footer__link--next{width:75%}}[dir=rtl] .md-footer__link--next{float:left;text-align:left}[dir=rtl] .md-footer__link--next svg{transform:scaleX(-1)}.md-footer__title{flex-grow:1;font-size:.9rem;line-height:2.4rem;max-width:calc(100% - 2.4rem);padding:0 1rem;position:relative}.md-footer__button{margin:.2rem;padding:.4rem}.md-footer__direction{font-size:.64rem;left:0;margin-top:-1rem;opacity:.7;padding:0 1rem;position:absolute;right:0}.md-footer-meta{background-color:var(--md-footer-bg-color--dark)}.md-footer-meta__inner{display:flex;flex-wrap:wrap;justify-content:space-between;padding:.2rem}html .md-footer-meta.md-typeset a{color:var(--md-footer-fg-color--light)}html .md-footer-meta.md-typeset a:focus,html .md-footer-meta.md-typeset a:hover{color:var(--md-footer-fg-color)}.md-footer-copyright{color:var(--md-footer-fg-color--lighter);font-size:.64rem;margin:auto .6rem;padding:.4rem 0;width:100%}@media screen and (min-width:45em){.md-footer-copyright{width:auto}}.md-footer-copyright__highlight{color:var(--md-footer-fg-color--light)}.md-footer-social{margin:0 .4rem;padding:.2rem 0 .6rem}@media screen and (min-width:45em){.md-footer-social{padding:.6rem 0}}.md-footer-social__link{display:inline-block;height:1.6rem;text-align:center;width:1.6rem}.md-footer-social__link:before{line-height:1.9}.md-footer-social__link svg{fill:currentColor;max-height:.8rem;vertical-align:-25%}:root{--md-nav-icon--prev:url('data:image/svg+xml;charset=utf-8,');--md-nav-icon--next:url('data:image/svg+xml;charset=utf-8,');--md-toc-icon:url('data:image/svg+xml;charset=utf-8,')}.md-nav{font-size:.7rem;line-height:1.3}.md-nav__title{display:block;font-weight:700;overflow:hidden;padding:0 .6rem;text-overflow:ellipsis}.md-nav__title .md-nav__button{display:none}.md-nav__title .md-nav__button img{height:100%;width:auto}.md-nav__title .md-nav__button.md-logo img,.md-nav__title .md-nav__button.md-logo svg{fill:currentColor;display:block;height:2.4rem;width:2.4rem}.md-nav__list{list-style:none;margin:0;padding:0}.md-nav__item{padding:0 .6rem}.md-nav__item .md-nav__item{padding-right:0}[dir=rtl] .md-nav__item .md-nav__item{padding-left:0;padding-right:.6rem}.md-nav__link{scroll-snap-align:start;cursor:pointer;display:block;margin-top:.625em;overflow:hidden;text-overflow:ellipsis;transition:color 125ms}.md-nav__link[data-md-state=blur]{color:var(--md-default-fg-color--light)}.md-nav__item .md-nav__link--active{color:var(--md-typeset-a-color)}.md-nav__item--nested>.md-nav__link{color:inherit}.md-nav__link:focus,.md-nav__link:hover{color:var(--md-accent-fg-color)}.md-nav__link.focus-visible{outline-color:var(--md-accent-fg-color);outline-offset:.2rem}.md-nav--primary .md-nav__link[for=__toc]{display:none}.md-nav--primary .md-nav__link[for=__toc] .md-icon:after{background-color:currentColor;display:block;height:100%;-webkit-mask-image:var(--md-toc-icon);mask-image:var(--md-toc-icon);width:100%}.md-nav--primary .md-nav__link[for=__toc]~.md-nav,.md-nav__source{display:none}@media screen and (max-width:76.1875em){.md-nav--primary,.md-nav--primary .md-nav{background-color:var(--md-default-bg-color);display:flex;flex-direction:column;height:100%;left:0;position:absolute;right:0;top:0;z-index:1}.md-nav--primary .md-nav__item,.md-nav--primary .md-nav__title{font-size:.8rem;line-height:1.5}.md-nav--primary .md-nav__title{background-color:var(--md-default-fg-color--lightest);color:var(--md-default-fg-color--light);cursor:pointer;font-weight:400;height:5.6rem;line-height:2.4rem;padding:3rem .8rem .2rem;position:relative;white-space:nowrap}.md-nav--primary .md-nav__title .md-nav__icon{display:block;height:1.2rem;left:.4rem;margin:.2rem;position:absolute;top:.4rem;width:1.2rem}[dir=rtl] .md-nav--primary .md-nav__title .md-nav__icon{left:auto;right:.4rem}.md-nav--primary .md-nav__title .md-nav__icon:after{background-color:currentColor;content:"";display:block;height:100%;-webkit-mask-image:var(--md-nav-icon--prev);mask-image:var(--md-nav-icon--prev);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;width:100%}.md-nav--primary .md-nav__title~.md-nav__list{background-color:var(--md-default-bg-color);box-shadow:0 .05rem 0 var(--md-default-fg-color--lightest) inset;overflow-y:auto;-ms-scroll-snap-type:y mandatory;scroll-snap-type:y mandatory;touch-action:pan-y}.md-nav--primary .md-nav__title~.md-nav__list>:first-child{border-top:0}.md-nav--primary .md-nav__title[for=__drawer]{background-color:var(--md-primary-fg-color);color:var(--md-primary-bg-color)}.md-nav--primary .md-nav__title .md-logo{display:block;left:.2rem;margin:.2rem;padding:.4rem;position:absolute;top:.2rem}[dir=rtl] .md-nav--primary .md-nav__title .md-logo{left:auto;right:.2rem}.md-nav--primary .md-nav__list{flex:1}.md-nav--primary .md-nav__item{border-top:.05rem solid var(--md-default-fg-color--lightest);padding:0}.md-nav--primary .md-nav__item--nested>.md-nav__link{padding-right:2.4rem}[dir=rtl] .md-nav--primary .md-nav__item--nested>.md-nav__link{padding-left:2.4rem;padding-right:.8rem}.md-nav--primary .md-nav__item--active>.md-nav__link{color:var(--md-typeset-a-color)}.md-nav--primary .md-nav__item--active>.md-nav__link:focus,.md-nav--primary .md-nav__item--active>.md-nav__link:hover{color:var(--md-accent-fg-color)}.md-nav--primary .md-nav__link{margin-top:0;padding:.6rem .8rem;position:relative}.md-nav--primary .md-nav__link .md-nav__icon{color:inherit;font-size:1.2rem;height:1.2rem;margin-top:-.6rem;position:absolute;right:.6rem;top:50%;width:1.2rem}[dir=rtl] .md-nav--primary .md-nav__link .md-nav__icon{left:.6rem;right:auto}.md-nav--primary .md-nav__link .md-nav__icon:after{background-color:currentColor;content:"";display:block;height:100%;-webkit-mask-image:var(--md-nav-icon--next);mask-image:var(--md-nav-icon--next);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;width:100%}[dir=rtl] .md-nav--primary .md-nav__icon:after{transform:scale(-1)}.md-nav--primary .md-nav--secondary .md-nav__link{position:static}.md-nav--primary .md-nav--secondary .md-nav{background-color:initial;position:static}.md-nav--primary .md-nav--secondary .md-nav .md-nav__link{padding-left:1.4rem}[dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav__link{padding-left:0;padding-right:1.4rem}.md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav__link{padding-left:2rem}[dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav__link{padding-left:0;padding-right:2rem}.md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav__link{padding-left:2.6rem}[dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav__link{padding-left:0;padding-right:2.6rem}.md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav .md-nav__link{padding-left:3.2rem}[dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav .md-nav__link{padding-left:0;padding-right:3.2rem}.md-nav--secondary{background-color:initial}.md-nav__toggle~.md-nav{display:flex;opacity:0;transform:translateX(100%);transition:transform .25s cubic-bezier(.8,0,.6,1),opacity 125ms 50ms}[dir=rtl] .md-nav__toggle~.md-nav{transform:translateX(-100%)}.md-nav__toggle:checked~.md-nav{opacity:1;transform:translateX(0);transition:transform .25s cubic-bezier(.4,0,.2,1),opacity 125ms 125ms}.md-nav__toggle:checked~.md-nav>.md-nav__list{-webkit-backface-visibility:hidden;backface-visibility:hidden}}@media screen and (max-width:59.9375em){.md-nav--primary .md-nav__link[for=__toc]{display:block;padding-right:2.4rem}[dir=rtl] .md-nav--primary .md-nav__link[for=__toc]{padding-left:2.4rem;padding-right:.8rem}.md-nav--primary .md-nav__link[for=__toc] .md-icon:after{content:""}.md-nav--primary .md-nav__link[for=__toc]+.md-nav__link{display:none}.md-nav--primary .md-nav__link[for=__toc]~.md-nav{display:flex}.md-nav__source{background-color:var(--md-primary-fg-color--dark);color:var(--md-primary-bg-color);display:block;padding:0 .2rem}}@media screen and (min-width:60em) and (max-width:76.1875em){.md-nav--integrated .md-nav__link[for=__toc]{scroll-snap-align:none;display:block;padding-right:2.4rem}[dir=rtl] .md-nav--integrated .md-nav__link[for=__toc]{padding-left:2.4rem;padding-right:.8rem}.md-nav--integrated .md-nav__link[for=__toc] .md-icon:after{content:""}.md-nav--integrated .md-nav__link[for=__toc]+.md-nav__link{display:none}.md-nav--integrated .md-nav__link[for=__toc]~.md-nav{display:flex}}@media screen and (min-width:60em){.md-nav--secondary .md-nav__title[for=__toc]{scroll-snap-align:start}.md-nav--secondary .md-nav__title .md-nav__icon{display:none}}@media screen and (min-width:76.25em){.md-nav{transition:max-height .25s cubic-bezier(.86,0,.07,1)}.md-nav--primary .md-nav__title[for=__drawer]{scroll-snap-align:start}.md-nav--primary .md-nav__title .md-nav__icon,.md-nav__toggle~.md-nav{display:none}.md-nav__toggle:checked~.md-nav,.md-nav__toggle:indeterminate~.md-nav{display:block}.md-nav__item--nested>.md-nav>.md-nav__title{display:none}.md-nav__item--section{display:block;margin:1.25em 0}.md-nav__item--section:last-child{margin-bottom:0}.md-nav__item--section>.md-nav__link{display:none}.md-nav__item--section>.md-nav{display:block}.md-nav__item--section>.md-nav>.md-nav__title{scroll-snap-align:start;display:block;padding:0;pointer-events:none}.md-nav__item--section>.md-nav>.md-nav__list>.md-nav__item{padding:0}.md-nav__icon{float:right;height:.9rem;transition:transform .25s;width:.9rem}[dir=rtl] .md-nav__icon{float:left;transform:rotate(180deg)}.md-nav__icon:after{background-color:currentColor;content:"";display:inline-block;height:100%;-webkit-mask-image:var(--md-nav-icon--next);mask-image:var(--md-nav-icon--next);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;vertical-align:-.1rem;width:100%}.md-nav__item--nested .md-nav__toggle:checked~.md-nav__link .md-nav__icon,.md-nav__item--nested .md-nav__toggle:indeterminate~.md-nav__link .md-nav__icon{transform:rotate(90deg)}.md-nav--lifted>.md-nav__list>.md-nav__item,.md-nav--lifted>.md-nav__list>.md-nav__item--nested,.md-nav--lifted>.md-nav__title{display:none}.md-nav--lifted>.md-nav__list>.md-nav__item--active{display:block;padding:0}.md-nav--lifted>.md-nav__list>.md-nav__item--active>.md-nav__link{display:none}.md-nav--lifted>.md-nav__list>.md-nav__item--active>.md-nav>.md-nav__title{scroll-snap-align:start;display:block;padding:0 .6rem;pointer-events:none}.md-nav--lifted .md-nav[data-md-level="1"]{display:block}.md-nav--lifted .md-nav[data-md-level="1"]>.md-nav__list>.md-nav__item{padding-right:.6rem}.md-nav--integrated .md-nav__link[for=__toc]~.md-nav{border-left:.05rem solid var(--md-primary-fg-color);display:block;margin-bottom:1.25em}.md-nav--integrated .md-nav__link[for=__toc]~.md-nav>.md-nav__title{display:none}}:root{--md-search-result-icon:url('data:image/svg+xml;charset=utf-8,')}.md-search{position:relative}@media screen and (min-width:60em){.md-search{padding:.2rem 0}}.no-js .md-search{display:none}.md-search__overlay{opacity:0;z-index:1}@media screen and (max-width:59.9375em){.md-search__overlay{background-color:var(--md-default-bg-color);border-radius:1rem;height:2rem;left:-2.2rem;overflow:hidden;pointer-events:none;position:absolute;top:.2rem;transform-origin:center;transition:transform .3s .1s,opacity .2s .2s;width:2rem}[dir=rtl] .md-search__overlay{left:auto;right:-2.2rem}[data-md-toggle=search]:checked~.md-header .md-search__overlay{opacity:1;transition:transform .4s,opacity .1s}}@media screen and (min-width:60em){.md-search__overlay{background-color:rgba(0,0,0,.54);cursor:pointer;height:0;left:0;position:fixed;top:0;transition:width 0ms .25s,height 0ms .25s,opacity .25s;width:0}[dir=rtl] .md-search__overlay{left:auto;right:0}[data-md-toggle=search]:checked~.md-header .md-search__overlay{height:200vh;opacity:1;transition:width 0ms,height 0ms,opacity .25s;width:100%}}@media screen and (max-width:29.9375em){[data-md-toggle=search]:checked~.md-header .md-search__overlay{transform:scale(45)}}@media screen and (min-width:30em) and (max-width:44.9375em){[data-md-toggle=search]:checked~.md-header .md-search__overlay{transform:scale(60)}}@media screen and (min-width:45em) and (max-width:59.9375em){[data-md-toggle=search]:checked~.md-header .md-search__overlay{transform:scale(75)}}.md-search__inner{-webkit-backface-visibility:hidden;backface-visibility:hidden}@media screen and (max-width:59.9375em){.md-search__inner{height:100%;left:100%;opacity:0;position:fixed;top:0;transform:translateX(5%);transition:right 0ms .3s,left 0ms .3s,transform .15s cubic-bezier(.4,0,.2,1) .15s,opacity .15s .15s;width:100%;z-index:2}[data-md-toggle=search]:checked~.md-header .md-search__inner{left:0;opacity:1;transform:translateX(0);transition:right 0ms 0ms,left 0ms 0ms,transform .15s cubic-bezier(.1,.7,.1,1) .15s,opacity .15s .15s}[dir=rtl] [data-md-toggle=search]:checked~.md-header .md-search__inner{left:auto;right:0}html [dir=rtl] .md-search__inner{left:auto;right:100%;transform:translateX(-5%)}}@media screen and (min-width:60em){.md-search__inner{float:right;padding:.1rem 0;position:relative;transition:width .25s cubic-bezier(.1,.7,.1,1);width:11.7rem}[dir=rtl] .md-search__inner{float:left}}@media screen and (min-width:60em) and (max-width:76.1875em){[data-md-toggle=search]:checked~.md-header .md-search__inner{width:23.4rem}}@media screen and (min-width:76.25em){[data-md-toggle=search]:checked~.md-header .md-search__inner{width:34.4rem}}.md-search__form{position:relative}@media screen and (min-width:60em){.md-search__form{border-radius:.1rem}}.md-search__input{background-color:var(--md-default-bg-color);box-shadow:0 0 .6rem transparent;padding:0 2.2rem 0 3.6rem;position:relative;text-overflow:ellipsis;transition:color .25s,background-color .25s,box-shadow .25s;z-index:2}[dir=rtl] .md-search__input{padding:0 3.6rem 0 2.2rem}.md-search__input::-webkit-input-placeholder{-webkit-transition:color .25s;transition:color .25s}.md-search__input::-moz-placeholder{-moz-transition:color .25s;transition:color .25s}.md-search__input::-ms-input-placeholder{-ms-transition:color .25s;transition:color .25s}.md-search__input::placeholder{transition:color .25s}.md-search__input::-webkit-input-placeholder{color:var(--md-default-fg-color--light)}.md-search__input::-moz-placeholder{color:var(--md-default-fg-color--light)}.md-search__input::-ms-input-placeholder{color:var(--md-default-fg-color--light)}.md-search__input::placeholder,.md-search__input~.md-search__icon{color:var(--md-default-fg-color--light)}.md-search__input::-ms-clear{display:none}[data-md-toggle=search]:checked~.md-header .md-search__input{box-shadow:0 0 .6rem rgba(0,0,0,.07)}@media screen and (max-width:59.9375em){.md-search__input{font-size:.9rem;height:2.4rem;width:100%}}@media screen and (min-width:60em){.md-search__input{background-color:rgba(0,0,0,.26);border-radius:.1rem;color:inherit;font-size:.8rem;height:1.8rem;padding-left:2.2rem;width:100%}[dir=rtl] .md-search__input{padding-right:2.2rem}.md-search__input+.md-search__icon{color:var(--md-primary-bg-color)}.md-search__input::-webkit-input-placeholder{color:var(--md-primary-bg-color--light)}.md-search__input::-moz-placeholder{color:var(--md-primary-bg-color--light)}.md-search__input::-ms-input-placeholder{color:var(--md-primary-bg-color--light)}.md-search__input::placeholder{color:var(--md-primary-bg-color--light)}.md-search__input:hover{background-color:hsla(0,0%,100%,.12)}[data-md-toggle=search]:checked~.md-header .md-search__input{background-color:var(--md-default-bg-color);border-radius:.1rem .1rem 0 0;color:var(--md-default-fg-color);text-overflow:clip}[data-md-toggle=search]:checked~.md-header .md-search__input::-webkit-input-placeholder{color:var(--md-default-fg-color--light)}[data-md-toggle=search]:checked~.md-header .md-search__input::-moz-placeholder{color:var(--md-default-fg-color--light)}[data-md-toggle=search]:checked~.md-header .md-search__input::-ms-input-placeholder{color:var(--md-default-fg-color--light)}[data-md-toggle=search]:checked~.md-header .md-search__input+.md-search__icon,[data-md-toggle=search]:checked~.md-header .md-search__input::placeholder{color:var(--md-default-fg-color--light)}}.md-search__icon{cursor:pointer;height:1.2rem;position:absolute;transition:color .25s,opacity .25s;width:1.2rem;z-index:2}.md-search__icon:hover{opacity:.7}.md-search__icon[for=__search]{left:.5rem;top:.3rem}[dir=rtl] .md-search__icon[for=__search]{left:auto;right:.5rem}[dir=rtl] .md-search__icon[for=__search] svg{transform:scaleX(-1)}@media screen and (max-width:59.9375em){.md-search__icon[for=__search]{left:.8rem;top:.6rem}[dir=rtl] .md-search__icon[for=__search]{left:auto;right:.8rem}.md-search__icon[for=__search] svg:first-child{display:none}}@media screen and (min-width:60em){.md-search__icon[for=__search]{pointer-events:none}.md-search__icon[for=__search] svg:last-child{display:none}}.md-search__icon[type=reset]{opacity:0;pointer-events:none;right:.5rem;top:.3rem;transform:scale(.75);transition:transform .15s cubic-bezier(.1,.7,.1,1),opacity .15s}[dir=rtl] .md-search__icon[type=reset]{left:.5rem;right:auto}@media screen and (max-width:59.9375em){.md-search__icon[type=reset]{right:.8rem;top:.6rem}[dir=rtl] .md-search__icon[type=reset]{left:.8rem;right:auto}}[data-md-toggle=search]:checked~.md-header .md-search__input:valid~.md-search__icon[type=reset]{opacity:1;pointer-events:auto;transform:scale(1)}[data-md-toggle=search]:checked~.md-header .md-search__input:valid~.md-search__icon[type=reset]:hover{opacity:.7}.md-search__output{border-radius:0 0 .1rem .1rem;overflow:hidden;position:absolute;width:100%;z-index:1}@media screen and (max-width:59.9375em){.md-search__output{bottom:0;top:2.4rem}}@media screen and (min-width:60em){.md-search__output{opacity:0;top:1.9rem;transition:opacity .4s}[data-md-toggle=search]:checked~.md-header .md-search__output{box-shadow:0 6px 10px 0 rgba(0,0,0,.14),0 1px 18px 0 rgba(0,0,0,.12),0 3px 5px -1px rgba(0,0,0,.4);opacity:1}}.md-search__scrollwrap{-webkit-backface-visibility:hidden;backface-visibility:hidden;background-color:var(--md-default-bg-color);height:100%;overflow-y:auto;touch-action:pan-y}@media (-webkit-max-device-pixel-ratio:1),(max-resolution:1dppx){.md-search__scrollwrap{transform:translateZ(0)}}@media screen and (min-width:60em) and (max-width:76.1875em){.md-search__scrollwrap{width:23.4rem}}@media screen and (min-width:76.25em){.md-search__scrollwrap{width:34.4rem}}@media screen and (min-width:60em){.md-search__scrollwrap{scrollbar-width:thin;scrollbar-color:var(--md-default-fg-color--lighter) transparent;max-height:0}[data-md-toggle=search]:checked~.md-header .md-search__scrollwrap{max-height:75vh}.md-search__scrollwrap:hover{scrollbar-color:var(--md-accent-fg-color) transparent}.md-search__scrollwrap::-webkit-scrollbar{height:.2rem;width:.2rem}.md-search__scrollwrap::-webkit-scrollbar-thumb{background-color:var(--md-default-fg-color--lighter)}.md-search__scrollwrap::-webkit-scrollbar-thumb:hover{background-color:var(--md-accent-fg-color)}}.md-search-result{color:var(--md-default-fg-color);word-break:break-word}.md-search-result__meta{scroll-snap-align:start;background-color:var(--md-default-fg-color--lightest);color:var(--md-default-fg-color--light);font-size:.64rem;line-height:1.8rem;padding:0 .8rem}@media screen and (min-width:60em){.md-search-result__meta{padding-left:2.2rem}[dir=rtl] .md-search-result__meta{padding-left:0;padding-right:2.2rem}}.md-search-result__list{list-style:none;margin:0;padding:0}.md-search-result__item{box-shadow:0 -.05rem 0 var(--md-default-fg-color--lightest)}.md-search-result__item:first-child{box-shadow:none}.md-search-result__link{scroll-snap-align:start;display:block;outline:none;transition:background-color .25s}.md-search-result__link:focus,.md-search-result__link:hover{background-color:var(--md-accent-fg-color--transparent)}.md-search-result__link:last-child p:last-child{margin-bottom:.6rem}.md-search-result__more summary{scroll-snap-align:start;color:var(--md-typeset-a-color);cursor:pointer;display:block;font-size:.64rem;outline:none;padding:.75em .8rem;transition:color .25s,background-color .25s}@media screen and (min-width:60em){.md-search-result__more summary{padding-left:2.2rem}[dir=rtl] .md-search-result__more summary{padding-left:.8rem;padding-right:2.2rem}}.md-search-result__more summary:focus,.md-search-result__more summary:hover{background-color:var(--md-accent-fg-color--transparent);color:var(--md-accent-fg-color)}.md-search-result__more summary::-webkit-details-marker,.md-search-result__more summary::marker{display:none}.md-search-result__more summary~*>*{opacity:.65}.md-search-result__article{overflow:hidden;padding:0 .8rem;position:relative}@media screen and (min-width:60em){.md-search-result__article{padding-left:2.2rem}[dir=rtl] .md-search-result__article{padding-left:.8rem;padding-right:2.2rem}}.md-search-result__article--document .md-search-result__title{font-size:.8rem;font-weight:400;line-height:1.4;margin:.55rem 0}.md-search-result__icon{color:var(--md-default-fg-color--light);height:1.2rem;left:0;margin:.5rem;position:absolute;width:1.2rem}@media screen and (max-width:59.9375em){.md-search-result__icon{display:none}}.md-search-result__icon:after{background-color:currentColor;content:"";display:inline-block;height:100%;-webkit-mask-image:var(--md-search-result-icon);mask-image:var(--md-search-result-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;width:100%}[dir=rtl] .md-search-result__icon{left:auto;right:0}[dir=rtl] .md-search-result__icon:after{transform:scaleX(-1)}.md-search-result__title{font-size:.64rem;font-weight:700;line-height:1.6;margin:.5em 0}.md-search-result__teaser{-webkit-box-orient:vertical;-webkit-line-clamp:2;color:var(--md-default-fg-color--light);display:-webkit-box;font-size:.64rem;line-height:1.6;margin:.5em 0;max-height:2rem;overflow:hidden;text-overflow:ellipsis}@media screen and (max-width:44.9375em){.md-search-result__teaser{-webkit-line-clamp:3;max-height:3rem}}@media screen and (min-width:60em) and (max-width:76.1875em){.md-search-result__teaser{-webkit-line-clamp:3;max-height:3rem}}.md-search-result__teaser mark{background-color:initial;text-decoration:underline}.md-search-result__terms{font-size:.64rem;font-style:italic;margin:.5em 0}.md-search-result mark{background-color:initial;color:var(--md-accent-fg-color)}.md-select{position:relative;z-index:1}.md-select__inner{background-color:var(--md-default-bg-color);border-radius:.1rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.1),0 0 .05rem rgba(0,0,0,.25);color:var(--md-default-fg-color);left:50%;margin-top:.2rem;max-height:0;opacity:0;position:absolute;top:calc(100% - .2rem);transform:translate3d(-50%,.3rem,0);transition:transform .25s 375ms,opacity .25s .25s,max-height 0ms .5s}.md-select:focus-within .md-select__inner,.md-select:hover .md-select__inner{max-height:10rem;opacity:1;transform:translate3d(-50%,0,0);transition:transform .25s cubic-bezier(.1,.7,.1,1),opacity .25s,max-height 0ms}.md-select__inner:after{border-bottom:.2rem solid transparent;border-bottom-color:var(--md-default-bg-color);border-left:.2rem solid transparent;border-right:.2rem solid transparent;border-top:0;content:"";height:0;left:50%;margin-left:-.2rem;margin-top:-.2rem;position:absolute;top:0;width:0}.md-select__list{border-radius:.1rem;font-size:.8rem;list-style-type:none;margin:0;max-height:inherit;overflow:auto;padding:0}.md-select__item{line-height:1.8rem}.md-select__link{scroll-snap-align:start;cursor:pointer;display:block;outline:none;padding-left:.6rem;padding-right:1.2rem;transition:background-color .25s,color .25s;width:100%}[dir=rtl] .md-select__link{padding-left:1.2rem;padding-right:.6rem}.md-select__link:focus,.md-select__link:hover{color:var(--md-accent-fg-color)}.md-select__link:focus{background-color:var(--md-default-fg-color--lightest)}.md-sidebar{align-self:flex-start;flex-shrink:0;padding:1.2rem 0;position:-webkit-sticky;position:sticky;top:2.4rem;width:12.1rem}@media print{.md-sidebar{display:none}}@media screen and (max-width:76.1875em){.md-sidebar--primary{background-color:var(--md-default-bg-color);display:block;height:100%;left:-12.1rem;position:fixed;top:0;transform:translateX(0);transition:transform .25s cubic-bezier(.4,0,.2,1),box-shadow .25s;width:12.1rem;z-index:3}[dir=rtl] .md-sidebar--primary{left:auto;right:-12.1rem}[data-md-toggle=drawer]:checked~.md-container .md-sidebar--primary{box-shadow:0 8px 10px 1px rgba(0,0,0,.14),0 3px 14px 2px rgba(0,0,0,.12),0 5px 5px -3px rgba(0,0,0,.4);transform:translateX(12.1rem)}[dir=rtl] [data-md-toggle=drawer]:checked~.md-container .md-sidebar--primary{transform:translateX(-12.1rem)}.md-sidebar--primary .md-sidebar__scrollwrap{bottom:0;left:0;margin:0;overflow:hidden;position:absolute;right:0;-ms-scroll-snap-type:none;scroll-snap-type:none;top:0}}@media screen and (min-width:76.25em){.md-sidebar{height:0}.no-js .md-sidebar{height:auto}}.md-sidebar--secondary{display:none;order:2}@media screen and (min-width:60em){.md-sidebar--secondary{height:0}.no-js .md-sidebar--secondary{height:auto}.md-sidebar--secondary:not([hidden]){display:block}.md-sidebar--secondary .md-sidebar__scrollwrap{touch-action:pan-y}}.md-sidebar__scrollwrap{scrollbar-width:thin;scrollbar-color:var(--md-default-fg-color--lighter) transparent;-webkit-backface-visibility:hidden;backface-visibility:hidden;margin:0 .2rem;overflow-y:auto}.md-sidebar__scrollwrap:hover{scrollbar-color:var(--md-accent-fg-color) transparent}.md-sidebar__scrollwrap::-webkit-scrollbar{height:.2rem;width:.2rem}.md-sidebar__scrollwrap::-webkit-scrollbar-thumb{background-color:var(--md-default-fg-color--lighter)}.md-sidebar__scrollwrap::-webkit-scrollbar-thumb:hover{background-color:var(--md-accent-fg-color)}@media screen and (max-width:76.1875em){.md-overlay{background-color:rgba(0,0,0,.54);height:0;opacity:0;position:fixed;top:0;transition:width 0ms .25s,height 0ms .25s,opacity .25s;width:0;z-index:3}[data-md-toggle=drawer]:checked~.md-overlay{height:100%;opacity:1;transition:width 0ms,height 0ms,opacity .25s;width:100%}}@-webkit-keyframes md-source__facts--done{0%{height:0}to{height:.65rem}}@keyframes md-source__facts--done{0%{height:0}to{height:.65rem}}@-webkit-keyframes md-source__fact--done{0%{opacity:0;transform:translateY(100%)}50%{opacity:0}to{opacity:1;transform:translateY(0)}}@keyframes md-source__fact--done{0%{opacity:0;transform:translateY(100%)}50%{opacity:0}to{opacity:1;transform:translateY(0)}}:root{--md-source-forks-icon:url('data:image/svg+xml;charset=utf-8,');--md-source-repositories-icon:url('data:image/svg+xml;charset=utf-8,');--md-source-stars-icon:url('data:image/svg+xml;charset=utf-8,');--md-source-version-icon:url('data:image/svg+xml;charset=utf-8,')}.md-source{-webkit-backface-visibility:hidden;backface-visibility:hidden;display:block;font-size:.65rem;line-height:1.2;outline-color:var(--md-accent-fg-color);transition:opacity .25s;white-space:nowrap}.md-source:hover{opacity:.7}.md-source__icon{display:inline-block;height:2.4rem;vertical-align:middle;width:2rem}.md-source__icon svg{margin-left:.6rem;margin-top:.6rem}[dir=rtl] .md-source__icon svg{margin-left:0;margin-right:.6rem}.md-source__icon+.md-source__repository{margin-left:-2rem;padding-left:2rem}[dir=rtl] .md-source__icon+.md-source__repository{margin-left:0;margin-right:-2rem;padding-left:0;padding-right:2rem}.md-source__repository{display:inline-block;margin-left:.6rem;max-width:calc(100% - 1.2rem);overflow:hidden;text-overflow:ellipsis;vertical-align:middle}.md-source__facts{font-size:.55rem;list-style-type:none;margin:.1rem 0 0;opacity:.75;overflow:hidden;padding:0}[data-md-state=done] .md-source__facts{-webkit-animation:md-source__facts--done .25s ease-in;animation:md-source__facts--done .25s ease-in}.md-source__fact{display:inline-block}[data-md-state=done] .md-source__fact{-webkit-animation:md-source__fact--done .4s ease-out;animation:md-source__fact--done .4s ease-out}.md-source__fact:before{background-color:currentColor;content:"";display:inline-block;height:.6rem;margin-right:.1rem;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;vertical-align:text-top;width:.6rem}.md-source__fact:nth-child(1n+2):before{margin-left:.4rem}[dir=rtl] .md-source__fact{margin-left:.1rem;margin-right:0}[dir=rtl] .md-source__fact:nth-child(1n+2):before{margin-left:0;margin-right:.4rem}.md-source__fact--version:before{-webkit-mask-image:var(--md-source-version-icon);mask-image:var(--md-source-version-icon)}.md-source__fact--stars:before{-webkit-mask-image:var(--md-source-stars-icon);mask-image:var(--md-source-stars-icon)}.md-source__fact--forks:before{-webkit-mask-image:var(--md-source-forks-icon);mask-image:var(--md-source-forks-icon)}.md-source__fact--repositories:before{-webkit-mask-image:var(--md-source-repositories-icon);mask-image:var(--md-source-repositories-icon)}.md-tabs{background-color:var(--md-primary-fg-color);color:var(--md-primary-bg-color);overflow:auto;width:100%}@media print{.md-tabs{display:none}}@media screen and (max-width:76.1875em){.md-tabs{display:none}}.md-tabs[data-md-state=hidden]{pointer-events:none}.md-tabs__list{contain:content;list-style:none;margin:0 0 0 .2rem;padding:0;white-space:nowrap}[dir=rtl] .md-tabs__list{margin-left:0;margin-right:.2rem}.md-tabs__item{display:inline-block;height:2.4rem;padding-left:.6rem;padding-right:.6rem}.md-tabs__link{-webkit-backface-visibility:hidden;backface-visibility:hidden;display:block;font-size:.7rem;margin-top:.8rem;opacity:.7;outline-color:var(--md-accent-fg-color);outline-offset:.2rem;transition:transform .4s cubic-bezier(.1,.7,.1,1),opacity .25s}.md-tabs__link--active,.md-tabs__link:focus,.md-tabs__link:hover{color:inherit;opacity:1}.md-tabs__item:nth-child(2) .md-tabs__link{transition-delay:20ms}.md-tabs__item:nth-child(3) .md-tabs__link{transition-delay:40ms}.md-tabs__item:nth-child(4) .md-tabs__link{transition-delay:60ms}.md-tabs__item:nth-child(5) .md-tabs__link{transition-delay:80ms}.md-tabs__item:nth-child(6) .md-tabs__link{transition-delay:.1s}.md-tabs__item:nth-child(7) .md-tabs__link{transition-delay:.12s}.md-tabs__item:nth-child(8) .md-tabs__link{transition-delay:.14s}.md-tabs__item:nth-child(9) .md-tabs__link{transition-delay:.16s}.md-tabs__item:nth-child(10) .md-tabs__link{transition-delay:.18s}.md-tabs__item:nth-child(11) .md-tabs__link{transition-delay:.2s}.md-tabs__item:nth-child(12) .md-tabs__link{transition-delay:.22s}.md-tabs__item:nth-child(13) .md-tabs__link{transition-delay:.24s}.md-tabs__item:nth-child(14) .md-tabs__link{transition-delay:.26s}.md-tabs__item:nth-child(15) .md-tabs__link{transition-delay:.28s}.md-tabs__item:nth-child(16) .md-tabs__link{transition-delay:.3s}.md-tabs[data-md-state=hidden] .md-tabs__link{opacity:0;transform:translateY(50%);transition:transform 0ms .1s,opacity .1s}.md-top{background:var(--md-primary-fg-color);border-radius:100%;bottom:.4rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.1),0 .025rem .05rem rgba(0,0,0,.1);color:var(--md-primary-bg-color);float:right;margin:-2.8rem .4rem .4rem;outline:none;padding:.4rem;position:-webkit-sticky;position:sticky;transform:translateY(0);transition:opacity 125ms,transform 125ms cubic-bezier(.4,0,.2,1),background-color 125ms;z-index:1}[dir=rtl] .md-top{float:left}.md-top[data-md-state=hidden]{opacity:0;pointer-events:none;transform:translateY(-.2rem)}.md-top:focus,.md-top:hover{background:var(--md-accent-fg-color);transform:scale(1.1)}:root{--md-version-icon:url('data:image/svg+xml;charset=utf-8,')}.md-version{flex-shrink:0;font-size:.8rem;height:2.4rem}.md-version__current{color:inherit;cursor:pointer;margin-left:1.4rem;margin-right:.4rem;outline:none;position:relative;top:.05rem}[dir=rtl] .md-version__current{margin-left:.4rem;margin-right:1.4rem}.md-version__current:after{background-color:currentColor;content:"";display:inline-block;height:.6rem;margin-left:.4rem;-webkit-mask-image:var(--md-version-icon);mask-image:var(--md-version-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;width:.4rem}[dir=rtl] .md-version__current:after{margin-left:0;margin-right:.4rem}.md-version__list{background-color:var(--md-default-bg-color);border-radius:.1rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.1),0 0 .05rem rgba(0,0,0,.25);color:var(--md-default-fg-color);list-style-type:none;margin:.2rem .8rem;max-height:0;opacity:0;overflow:auto;padding:0;position:absolute;-ms-scroll-snap-type:y mandatory;scroll-snap-type:y mandatory;top:.15rem;transition:max-height 0ms .5s,opacity .25s .25s;z-index:1}.md-version:focus-within .md-version__list,.md-version:hover .md-version__list{max-height:10rem;opacity:1;transition:max-height 0ms,opacity .25s}.md-version__item{line-height:1.8rem}.md-version__link{scroll-snap-align:start;cursor:pointer;display:block;outline:none;padding-left:.6rem;padding-right:1.2rem;transition:color .25s,background-color .25s;white-space:nowrap;width:100%}[dir=rtl] .md-version__link{padding-left:1.2rem;padding-right:.6rem}.md-version__link:focus,.md-version__link:hover{color:var(--md-accent-fg-color)}.md-version__link:focus{background-color:var(--md-default-fg-color--lightest)}:root{--md-admonition-icon--note:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--abstract:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--info:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--tip:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--success:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--question:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--warning:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--failure:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--danger:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--bug:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--example:url('data:image/svg+xml;charset=utf-8,');--md-admonition-icon--quote:url('data:image/svg+xml;charset=utf-8,')}.md-typeset .admonition,.md-typeset details{background-color:var(--md-admonition-bg-color);border-left:.2rem solid #448aff;border-radius:.1rem;box-shadow:0 .2rem .5rem rgba(0,0,0,.05),0 .025rem .05rem rgba(0,0,0,.05);color:var(--md-admonition-fg-color);font-size:.64rem;margin:1.5625em 0;overflow:hidden;padding:0 .6rem;page-break-inside:avoid}@media print{.md-typeset .admonition,.md-typeset details{box-shadow:none}}[dir=rtl] .md-typeset .admonition,[dir=rtl] .md-typeset details{border-left:none;border-right:.2rem solid #448aff}.md-typeset .admonition .admonition,.md-typeset .admonition details,.md-typeset details .admonition,.md-typeset details details{margin-bottom:1em;margin-top:1em}.md-typeset .admonition .md-typeset__scrollwrap,.md-typeset details .md-typeset__scrollwrap{margin:1em -.6rem}.md-typeset .admonition .md-typeset__table,.md-typeset details .md-typeset__table{padding:0 .6rem}.md-typeset .admonition>.tabbed-set:only-child,.md-typeset details>.tabbed-set:only-child{margin-top:0}html .md-typeset .admonition>:last-child,html .md-typeset details>:last-child{margin-bottom:.6rem}.md-typeset .admonition-title,.md-typeset summary{background-color:rgba(68,138,255,.1);border-left:.2rem solid #448aff;font-weight:700;margin:0 -.6rem 0 -.8rem;padding:.4rem .6rem .4rem 2rem;position:relative}[dir=rtl] .md-typeset .admonition-title,[dir=rtl] .md-typeset summary{border-left:none;border-right:.2rem solid #448aff;margin:0 -.8rem 0 -.6rem;padding:.4rem 2rem .4rem .6rem}html .md-typeset .admonition-title:last-child,html .md-typeset summary:last-child{margin-bottom:0}.md-typeset .admonition-title:before,.md-typeset summary:before{background-color:#448aff;content:"";height:1rem;left:.6rem;-webkit-mask-image:var(--md-admonition-icon--note);mask-image:var(--md-admonition-icon--note);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;position:absolute;width:1rem}[dir=rtl] .md-typeset .admonition-title:before,[dir=rtl] .md-typeset summary:before{left:auto;right:.6rem}.md-typeset .admonition-title+.tabbed-set:last-child,.md-typeset summary+.tabbed-set:last-child{margin-top:0}.md-typeset .admonition.note,.md-typeset details.note{border-color:#448aff}.md-typeset .note>.admonition-title,.md-typeset .note>summary{background-color:rgba(68,138,255,.1);border-color:#448aff}.md-typeset .note>.admonition-title:before,.md-typeset .note>summary:before{background-color:#448aff;-webkit-mask-image:var(--md-admonition-icon--note);mask-image:var(--md-admonition-icon--note);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.abstract,.md-typeset .admonition.summary,.md-typeset .admonition.tldr,.md-typeset details.abstract,.md-typeset details.summary,.md-typeset details.tldr{border-color:#00b0ff}.md-typeset .abstract>.admonition-title,.md-typeset .abstract>summary,.md-typeset .summary>.admonition-title,.md-typeset .summary>summary,.md-typeset .tldr>.admonition-title,.md-typeset .tldr>summary{background-color:rgba(0,176,255,.1);border-color:#00b0ff}.md-typeset .abstract>.admonition-title:before,.md-typeset .abstract>summary:before,.md-typeset .summary>.admonition-title:before,.md-typeset .summary>summary:before,.md-typeset .tldr>.admonition-title:before,.md-typeset .tldr>summary:before{background-color:#00b0ff;-webkit-mask-image:var(--md-admonition-icon--abstract);mask-image:var(--md-admonition-icon--abstract);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.info,.md-typeset .admonition.todo,.md-typeset details.info,.md-typeset details.todo{border-color:#00b8d4}.md-typeset .info>.admonition-title,.md-typeset .info>summary,.md-typeset .todo>.admonition-title,.md-typeset .todo>summary{background-color:rgba(0,184,212,.1);border-color:#00b8d4}.md-typeset .info>.admonition-title:before,.md-typeset .info>summary:before,.md-typeset .todo>.admonition-title:before,.md-typeset .todo>summary:before{background-color:#00b8d4;-webkit-mask-image:var(--md-admonition-icon--info);mask-image:var(--md-admonition-icon--info);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.hint,.md-typeset .admonition.important,.md-typeset .admonition.tip,.md-typeset details.hint,.md-typeset details.important,.md-typeset details.tip{border-color:#00bfa5}.md-typeset .hint>.admonition-title,.md-typeset .hint>summary,.md-typeset .important>.admonition-title,.md-typeset .important>summary,.md-typeset .tip>.admonition-title,.md-typeset .tip>summary{background-color:rgba(0,191,165,.1);border-color:#00bfa5}.md-typeset .hint>.admonition-title:before,.md-typeset .hint>summary:before,.md-typeset .important>.admonition-title:before,.md-typeset .important>summary:before,.md-typeset .tip>.admonition-title:before,.md-typeset .tip>summary:before{background-color:#00bfa5;-webkit-mask-image:var(--md-admonition-icon--tip);mask-image:var(--md-admonition-icon--tip);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.check,.md-typeset .admonition.done,.md-typeset .admonition.success,.md-typeset details.check,.md-typeset details.done,.md-typeset details.success{border-color:#00c853}.md-typeset .check>.admonition-title,.md-typeset .check>summary,.md-typeset .done>.admonition-title,.md-typeset .done>summary,.md-typeset .success>.admonition-title,.md-typeset .success>summary{background-color:rgba(0,200,83,.1);border-color:#00c853}.md-typeset .check>.admonition-title:before,.md-typeset .check>summary:before,.md-typeset .done>.admonition-title:before,.md-typeset .done>summary:before,.md-typeset .success>.admonition-title:before,.md-typeset .success>summary:before{background-color:#00c853;-webkit-mask-image:var(--md-admonition-icon--success);mask-image:var(--md-admonition-icon--success);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.faq,.md-typeset .admonition.help,.md-typeset .admonition.question,.md-typeset details.faq,.md-typeset details.help,.md-typeset details.question{border-color:#64dd17}.md-typeset .faq>.admonition-title,.md-typeset .faq>summary,.md-typeset .help>.admonition-title,.md-typeset .help>summary,.md-typeset .question>.admonition-title,.md-typeset .question>summary{background-color:rgba(100,221,23,.1);border-color:#64dd17}.md-typeset .faq>.admonition-title:before,.md-typeset .faq>summary:before,.md-typeset .help>.admonition-title:before,.md-typeset .help>summary:before,.md-typeset .question>.admonition-title:before,.md-typeset .question>summary:before{background-color:#64dd17;-webkit-mask-image:var(--md-admonition-icon--question);mask-image:var(--md-admonition-icon--question);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.attention,.md-typeset .admonition.caution,.md-typeset .admonition.warning,.md-typeset details.attention,.md-typeset details.caution,.md-typeset details.warning{border-color:#ff9100}.md-typeset .attention>.admonition-title,.md-typeset .attention>summary,.md-typeset .caution>.admonition-title,.md-typeset .caution>summary,.md-typeset .warning>.admonition-title,.md-typeset .warning>summary{background-color:rgba(255,145,0,.1);border-color:#ff9100}.md-typeset .attention>.admonition-title:before,.md-typeset .attention>summary:before,.md-typeset .caution>.admonition-title:before,.md-typeset .caution>summary:before,.md-typeset .warning>.admonition-title:before,.md-typeset .warning>summary:before{background-color:#ff9100;-webkit-mask-image:var(--md-admonition-icon--warning);mask-image:var(--md-admonition-icon--warning);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.fail,.md-typeset .admonition.failure,.md-typeset .admonition.missing,.md-typeset details.fail,.md-typeset details.failure,.md-typeset details.missing{border-color:#ff5252}.md-typeset .fail>.admonition-title,.md-typeset .fail>summary,.md-typeset .failure>.admonition-title,.md-typeset .failure>summary,.md-typeset .missing>.admonition-title,.md-typeset .missing>summary{background-color:rgba(255,82,82,.1);border-color:#ff5252}.md-typeset .fail>.admonition-title:before,.md-typeset .fail>summary:before,.md-typeset .failure>.admonition-title:before,.md-typeset .failure>summary:before,.md-typeset .missing>.admonition-title:before,.md-typeset .missing>summary:before{background-color:#ff5252;-webkit-mask-image:var(--md-admonition-icon--failure);mask-image:var(--md-admonition-icon--failure);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.danger,.md-typeset .admonition.error,.md-typeset details.danger,.md-typeset details.error{border-color:#ff1744}.md-typeset .danger>.admonition-title,.md-typeset .danger>summary,.md-typeset .error>.admonition-title,.md-typeset .error>summary{background-color:rgba(255,23,68,.1);border-color:#ff1744}.md-typeset .danger>.admonition-title:before,.md-typeset .danger>summary:before,.md-typeset .error>.admonition-title:before,.md-typeset .error>summary:before{background-color:#ff1744;-webkit-mask-image:var(--md-admonition-icon--danger);mask-image:var(--md-admonition-icon--danger);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.bug,.md-typeset details.bug{border-color:#f50057}.md-typeset .bug>.admonition-title,.md-typeset .bug>summary{background-color:rgba(245,0,87,.1);border-color:#f50057}.md-typeset .bug>.admonition-title:before,.md-typeset .bug>summary:before{background-color:#f50057;-webkit-mask-image:var(--md-admonition-icon--bug);mask-image:var(--md-admonition-icon--bug);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.example,.md-typeset details.example{border-color:#7c4dff}.md-typeset .example>.admonition-title,.md-typeset .example>summary{background-color:rgba(124,77,255,.1);border-color:#7c4dff}.md-typeset .example>.admonition-title:before,.md-typeset .example>summary:before{background-color:#7c4dff;-webkit-mask-image:var(--md-admonition-icon--example);mask-image:var(--md-admonition-icon--example);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}.md-typeset .admonition.cite,.md-typeset .admonition.quote,.md-typeset details.cite,.md-typeset details.quote{border-color:#9e9e9e}.md-typeset .cite>.admonition-title,.md-typeset .cite>summary,.md-typeset .quote>.admonition-title,.md-typeset .quote>summary{background-color:hsla(0,0%,62%,.1);border-color:#9e9e9e}.md-typeset .cite>.admonition-title:before,.md-typeset .cite>summary:before,.md-typeset .quote>.admonition-title:before,.md-typeset .quote>summary:before{background-color:#9e9e9e;-webkit-mask-image:var(--md-admonition-icon--quote);mask-image:var(--md-admonition-icon--quote);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}:root{--md-footnotes-icon:url('data:image/svg+xml;charset=utf-8,')}.md-typeset .footnote{color:var(--md-default-fg-color--light);font-size:.64rem}.md-typeset .footnote>ol{margin-left:0}.md-typeset .footnote>ol>li{transition:color 125ms}.md-typeset .footnote>ol>li:target{color:var(--md-default-fg-color)}.md-typeset .footnote>ol>li:hover .footnote-backref,.md-typeset .footnote>ol>li:target .footnote-backref{opacity:1;transform:translateX(0)}.md-typeset .footnote>ol>li>:first-child{margin-top:0}.md-typeset .footnote-ref{font-size:.75em;font-weight:700}html .md-typeset .footnote-ref{outline-offset:.1rem}.md-typeset .footnote-backref{color:var(--md-typeset-a-color);display:inline-block;font-size:0;opacity:0;transform:translateX(.25rem);transition:color .25s,transform .25s .25s,opacity 125ms .25s;vertical-align:text-bottom}@media print{.md-typeset .footnote-backref{color:var(--md-typeset-a-color);opacity:1;transform:translateX(0)}}[dir=rtl] .md-typeset .footnote-backref{transform:translateX(-.25rem)}.md-typeset .footnote-backref:hover{color:var(--md-accent-fg-color)}.md-typeset .footnote-backref:before{background-color:currentColor;content:"";display:inline-block;height:.8rem;-webkit-mask-image:var(--md-footnotes-icon);mask-image:var(--md-footnotes-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;width:.8rem}[dir=rtl] .md-typeset .footnote-backref:before svg{transform:scaleX(-1)}.md-typeset [id^="fnref:"]:target{scroll-margin-top:0;margin-top:-3.4rem;padding-top:3.4rem}.md-typeset [id^="fnref:"]:target>.footnote-ref{outline:auto}.md-typeset [id^="fn:"]:target{scroll-margin-top:0;margin-top:-3.45rem;padding-top:3.45rem}.md-typeset .headerlink{color:var(--md-default-fg-color--lighter);display:inline-block;margin-left:.5rem;opacity:0;transition:color .25s,opacity 125ms}@media print{.md-typeset .headerlink{display:none}}[dir=rtl] .md-typeset .headerlink{margin-left:0;margin-right:.5rem}.md-typeset .headerlink:focus,.md-typeset :hover>.headerlink,.md-typeset :target>.headerlink{opacity:1;transition:color .25s,opacity 125ms}.md-typeset .headerlink:focus,.md-typeset .headerlink:hover,.md-typeset :target>.headerlink{color:var(--md-accent-fg-color)}.md-typeset :target{scroll-margin-top:3.6rem}.md-typeset h1:target,.md-typeset h2:target,.md-typeset h3:target{scroll-margin-top:0}.md-typeset h1:target:before,.md-typeset h2:target:before,.md-typeset h3:target:before{content:"";display:block;margin-top:-3.4rem;padding-top:3.4rem}.md-typeset h4:target{scroll-margin-top:0}.md-typeset h4:target:before{content:"";display:block;margin-top:-3.45rem;padding-top:3.45rem}.md-typeset h5:target,.md-typeset h6:target{scroll-margin-top:0}.md-typeset h5:target:before,.md-typeset h6:target:before{content:"";display:block;margin-top:-3.6rem;padding-top:3.6rem}.md-typeset div.arithmatex{overflow:auto}@media screen and (max-width:44.9375em){.md-typeset div.arithmatex{margin:0 -.8rem}}.md-typeset div.arithmatex>*{margin:1em auto!important;padding:0 .8rem;touch-action:auto;width:-webkit-min-content;width:-moz-min-content;width:min-content}.md-typeset .critic.comment,.md-typeset del.critic,.md-typeset ins.critic{-webkit-box-decoration-break:clone;box-decoration-break:clone}.md-typeset del.critic{background-color:var(--md-typeset-del-color)}.md-typeset ins.critic{background-color:var(--md-typeset-ins-color)}.md-typeset .critic.comment{color:var(--md-code-hl-comment-color)}.md-typeset .critic.comment:before{content:"/* "}.md-typeset .critic.comment:after{content:" */"}.md-typeset .critic.block{box-shadow:none;display:block;margin:1em 0;overflow:auto;padding-left:.8rem;padding-right:.8rem}.md-typeset .critic.block>:first-child{margin-top:.5em}.md-typeset .critic.block>:last-child{margin-bottom:.5em}:root{--md-details-icon:url('data:image/svg+xml;charset=utf-8,')}.md-typeset details{display:flow-root;overflow:visible;padding-top:0}.md-typeset details[open]>summary:after{transform:rotate(90deg)}.md-typeset details:not([open]){box-shadow:none;padding-bottom:0}.md-typeset details:not([open])>summary{border-radius:.1rem}.md-typeset details:after{content:"";display:table}.md-typeset summary{border-top-left-radius:.1rem;border-top-right-radius:.1rem;cursor:pointer;display:block;min-height:1rem;padding:.4rem 1.8rem .4rem 2rem}[dir=rtl] .md-typeset summary{padding:.4rem 2.2rem .4rem 1.8rem}.md-typeset summary:not(.focus-visible){-webkit-tap-highlight-color:transparent;outline:none}.md-typeset summary:after{background-color:currentColor;content:"";height:1rem;-webkit-mask-image:var(--md-details-icon);mask-image:var(--md-details-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;position:absolute;right:.4rem;top:.4rem;transform:rotate(0deg);transition:transform .25s;width:1rem}[dir=rtl] .md-typeset summary:after{left:.4rem;right:auto;transform:rotate(180deg)}.md-typeset summary::-webkit-details-marker,.md-typeset summary::marker{display:none}.md-typeset .emojione,.md-typeset .gemoji,.md-typeset .twemoji{display:inline-flex;height:1.125em;vertical-align:text-top}.md-typeset .emojione svg,.md-typeset .gemoji svg,.md-typeset .twemoji svg{fill:currentColor;max-height:100%;width:1.125em}.highlight .o,.highlight .ow{color:var(--md-code-hl-operator-color)}.highlight .p{color:var(--md-code-hl-punctuation-color)}.highlight .cpf,.highlight .l,.highlight .s,.highlight .s1,.highlight .s2,.highlight .sb,.highlight .sc,.highlight .si,.highlight .ss{color:var(--md-code-hl-string-color)}.highlight .cp,.highlight .se,.highlight .sh,.highlight .sr,.highlight .sx{color:var(--md-code-hl-special-color)}.highlight .il,.highlight .m,.highlight .mb,.highlight .mf,.highlight .mh,.highlight .mi,.highlight .mo{color:var(--md-code-hl-number-color)}.highlight .k,.highlight .kd,.highlight .kn,.highlight .kp,.highlight .kr,.highlight .kt{color:var(--md-code-hl-keyword-color)}.highlight .kc,.highlight .n{color:var(--md-code-hl-name-color)}.highlight .bp,.highlight .nb,.highlight .no{color:var(--md-code-hl-constant-color)}.highlight .nc,.highlight .ne,.highlight .nf,.highlight .nn{color:var(--md-code-hl-function-color)}.highlight .nd,.highlight .ni,.highlight .nl,.highlight .nt{color:var(--md-code-hl-keyword-color)}.highlight .c,.highlight .c1,.highlight .ch,.highlight .cm,.highlight .cs,.highlight .sd{color:var(--md-code-hl-comment-color)}.highlight .na,.highlight .nv,.highlight .vc,.highlight .vg,.highlight .vi{color:var(--md-code-hl-variable-color)}.highlight .ge,.highlight .gh,.highlight .go,.highlight .gp,.highlight .gr,.highlight .gs,.highlight .gt,.highlight .gu{color:var(--md-code-hl-generic-color)}.highlight .gd,.highlight .gi{border-radius:.1rem;margin:0 -.125em;padding:0 .125em}.highlight .gd{background-color:var(--md-typeset-del-color)}.highlight .gi{background-color:var(--md-typeset-ins-color)}.highlight .hll{background-color:var(--md-code-hl-color);display:block;margin:0 -1.1764705882em;padding:0 1.1764705882em}.highlight [data-linenos]:before{background-color:var(--md-code-bg-color);box-shadow:-.05rem 0 var(--md-default-fg-color--lightest) inset;color:var(--md-default-fg-color--light);content:attr(data-linenos);float:left;left:-1.1764705882em;margin-left:-1.1764705882em;margin-right:1.1764705882em;padding-left:1.1764705882em;position:-webkit-sticky;position:sticky;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.highlighttable{display:flow-root;overflow:hidden}.highlighttable tbody,.highlighttable td{display:block;padding:0}.highlighttable tr{display:flex}.highlighttable pre{margin:0}.highlighttable .linenos{background-color:var(--md-code-bg-color);font-size:.85em;padding:.7720588235em 0 .7720588235em 1.1764705882em;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.highlighttable .linenodiv{box-shadow:-.05rem 0 var(--md-default-fg-color--lightest) inset;padding-right:.5882352941em}.highlighttable .linenodiv pre{color:var(--md-default-fg-color--light);text-align:right}.highlighttable .code{flex:1;overflow:hidden}.md-typeset .highlighttable{border-radius:.1rem;direction:ltr;margin:1em 0}.md-typeset .highlighttable code{border-radius:0}@media screen and (max-width:44.9375em){.md-typeset>.highlight{margin:1em -.8rem}.md-typeset>.highlight .hll{margin:0 -.8rem;padding:0 .8rem}.md-typeset>.highlight code{border-radius:0}.md-typeset>.highlighttable{border-radius:0;margin:1em -.8rem}.md-typeset>.highlighttable .hll{margin:0 -.8rem;padding:0 .8rem}}.md-typeset .keys kbd:after,.md-typeset .keys kbd:before{-moz-osx-font-smoothing:initial;-webkit-font-smoothing:initial;color:inherit;margin:0;position:relative}.md-typeset .keys span{color:var(--md-default-fg-color--light);padding:0 .2em}.md-typeset .keys .key-alt:before,.md-typeset .keys .key-left-alt:before,.md-typeset .keys .key-right-alt:before{content:"⎇";padding-right:.4em}.md-typeset .keys .key-command:before,.md-typeset .keys .key-left-command:before,.md-typeset .keys .key-right-command:before{content:"⌘";padding-right:.4em}.md-typeset .keys .key-control:before,.md-typeset .keys .key-left-control:before,.md-typeset .keys .key-right-control:before{content:"⌃";padding-right:.4em}.md-typeset .keys .key-left-meta:before,.md-typeset .keys .key-meta:before,.md-typeset .keys .key-right-meta:before{content:"◆";padding-right:.4em}.md-typeset .keys .key-left-option:before,.md-typeset .keys .key-option:before,.md-typeset .keys .key-right-option:before{content:"⌥";padding-right:.4em}.md-typeset .keys .key-left-shift:before,.md-typeset .keys .key-right-shift:before,.md-typeset .keys .key-shift:before{content:"⇧";padding-right:.4em}.md-typeset .keys .key-left-super:before,.md-typeset .keys .key-right-super:before,.md-typeset .keys .key-super:before{content:"❖";padding-right:.4em}.md-typeset .keys .key-left-windows:before,.md-typeset .keys .key-right-windows:before,.md-typeset .keys .key-windows:before{content:"⊞";padding-right:.4em}.md-typeset .keys .key-arrow-down:before{content:"↓";padding-right:.4em}.md-typeset .keys .key-arrow-left:before{content:"←";padding-right:.4em}.md-typeset .keys .key-arrow-right:before{content:"→";padding-right:.4em}.md-typeset .keys .key-arrow-up:before{content:"↑";padding-right:.4em}.md-typeset .keys .key-backspace:before{content:"⌫";padding-right:.4em}.md-typeset .keys .key-backtab:before{content:"⇤";padding-right:.4em}.md-typeset .keys .key-caps-lock:before{content:"⇪";padding-right:.4em}.md-typeset .keys .key-clear:before{content:"⌧";padding-right:.4em}.md-typeset .keys .key-context-menu:before{content:"☰";padding-right:.4em}.md-typeset .keys .key-delete:before{content:"⌦";padding-right:.4em}.md-typeset .keys .key-eject:before{content:"⏏";padding-right:.4em}.md-typeset .keys .key-end:before{content:"⤓";padding-right:.4em}.md-typeset .keys .key-escape:before{content:"⎋";padding-right:.4em}.md-typeset .keys .key-home:before{content:"⤒";padding-right:.4em}.md-typeset .keys .key-insert:before{content:"⎀";padding-right:.4em}.md-typeset .keys .key-page-down:before{content:"⇟";padding-right:.4em}.md-typeset .keys .key-page-up:before{content:"⇞";padding-right:.4em}.md-typeset .keys .key-print-screen:before{content:"⎙";padding-right:.4em}.md-typeset .keys .key-tab:after{content:"⇥";padding-left:.4em}.md-typeset .keys .key-num-enter:after{content:"⌤";padding-left:.4em}.md-typeset .keys .key-enter:after{content:"⏎";padding-left:.4em}.md-typeset .tabbed-content{box-shadow:0 -.05rem var(--md-default-fg-color--lightest);display:none;order:99;width:100%}@media print{.md-typeset .tabbed-content{display:block;order:0}}.md-typeset .tabbed-content>.highlight:only-child pre,.md-typeset .tabbed-content>.highlighttable:only-child,.md-typeset .tabbed-content>pre:only-child{margin:0}.md-typeset .tabbed-content>.highlight:only-child pre>code,.md-typeset .tabbed-content>.highlighttable:only-child>code,.md-typeset .tabbed-content>pre:only-child>code{border-top-left-radius:0;border-top-right-radius:0}.md-typeset .tabbed-content>.tabbed-set{margin:0}.md-typeset .tabbed-set{border-radius:.1rem;display:flex;flex-wrap:wrap;margin:1em 0;position:relative}.md-typeset .tabbed-set>input{height:0;opacity:0;position:absolute;width:0}.md-typeset .tabbed-set>input:checked+label{border-color:var(--md-accent-fg-color);color:var(--md-accent-fg-color)}.md-typeset .tabbed-set>input:checked+label+.tabbed-content{display:block}.md-typeset .tabbed-set>input:focus+label{outline-color:var(--md-accent-fg-color);outline-style:auto}.md-typeset .tabbed-set>input:not(.focus-visible)+label{-webkit-tap-highlight-color:transparent;outline:none}.md-typeset .tabbed-set>label{border-bottom:.1rem solid transparent;color:var(--md-default-fg-color--light);cursor:pointer;font-size:.64rem;font-weight:700;padding:.9375em 1.25em .78125em;transition:color .25s;width:auto;z-index:1}.md-typeset .tabbed-set>label:hover{color:var(--md-accent-fg-color)}:root{--md-tasklist-icon:url('data:image/svg+xml;charset=utf-8,');--md-tasklist-icon--checked:url('data:image/svg+xml;charset=utf-8,')}.md-typeset .task-list-item{list-style-type:none;position:relative}.md-typeset .task-list-item [type=checkbox]{left:-2em;position:absolute;top:.45em}[dir=rtl] .md-typeset .task-list-item [type=checkbox]{left:auto;right:-2em}.md-typeset .task-list-control [type=checkbox]{opacity:0;z-index:-1}.md-typeset .task-list-indicator:before{background-color:var(--md-default-fg-color--lightest);content:"";height:1.25em;left:-1.5em;-webkit-mask-image:var(--md-tasklist-icon);mask-image:var(--md-tasklist-icon);-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain;position:absolute;top:.15em;width:1.25em}[dir=rtl] .md-typeset .task-list-indicator:before{left:auto;right:-1.5em}.md-typeset [type=checkbox]:checked+.task-list-indicator:before{background-color:#00e676;-webkit-mask-image:var(--md-tasklist-icon--checked);mask-image:var(--md-tasklist-icon--checked)}@media screen and (min-width:45em){.md-typeset .inline{float:left;margin-bottom:.8rem;margin-right:.8rem;margin-top:0;width:11.7rem}.md-typeset .inline.end,[dir=rtl] .md-typeset .inline{float:right;margin-left:.8rem;margin-right:0}[dir=rtl] .md-typeset .inline.end{float:left;margin-left:0;margin-right:.8rem}} +/*# sourceMappingURL=main.bde7dde4.min.css.map */ \ No newline at end of file diff --git a/v2.7/assets/stylesheets/main.bde7dde4.min.css.map b/v2.7/assets/stylesheets/main.bde7dde4.min.css.map new file mode 100644 index 000000000..5562d43b8 --- /dev/null +++ b/v2.7/assets/stylesheets/main.bde7dde4.min.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["src/assets/stylesheets/main/extensions/pymdownx/_keys.scss","src/assets/stylesheets/main.scss","src/assets/stylesheets/main/_reset.scss","src/assets/stylesheets/main/_colors.scss","src/assets/stylesheets/main/_icons.scss","src/assets/stylesheets/main/_typeset.scss","src/assets/stylesheets/utilities/_break.scss","node_modules/material-shadows/material-shadows.scss","src/assets/stylesheets/main/layout/_base.scss","src/assets/stylesheets/main/layout/_announce.scss","src/assets/stylesheets/main/layout/_clipboard.scss","src/assets/stylesheets/main/layout/_content.scss","src/assets/stylesheets/main/layout/_dialog.scss","src/assets/stylesheets/main/layout/_form.scss","src/assets/stylesheets/main/layout/_header.scss","src/assets/stylesheets/main/layout/_footer.scss","src/assets/stylesheets/main/layout/_nav.scss","src/assets/stylesheets/main/layout/_search.scss","src/assets/stylesheets/main/layout/_select.scss","src/assets/stylesheets/main/layout/_sidebar.scss","src/assets/stylesheets/main/layout/_source.scss","src/assets/stylesheets/main/layout/_tabs.scss","src/assets/stylesheets/main/layout/_top.scss","src/assets/stylesheets/main/layout/_version.scss","src/assets/stylesheets/main/extensions/markdown/_admonition.scss","node_modules/material-design-color/material-color.scss","src/assets/stylesheets/main/extensions/markdown/_footnotes.scss","src/assets/stylesheets/main/extensions/markdown/_toc.scss","src/assets/stylesheets/main/extensions/pymdownx/_arithmatex.scss","src/assets/stylesheets/main/extensions/pymdownx/_critic.scss","src/assets/stylesheets/main/extensions/pymdownx/_details.scss","src/assets/stylesheets/main/extensions/pymdownx/_emoji.scss","src/assets/stylesheets/main/extensions/pymdownx/_highlight.scss","src/assets/stylesheets/main/extensions/pymdownx/_tabbed.scss","src/assets/stylesheets/main/extensions/pymdownx/_tasklist.scss","src/assets/stylesheets/main/_modifiers.scss"],"names":[],"mappings":"AAkGQ,gBC2uGR,CCjzGA,KACE,qBAAA,CACA,6BAAA,CAAA,yBAAA,CAAA,qBD1BF,CC8BA,iBAGE,kBD3BF,CC+BA,KACE,QD5BF,CCgCA,qBAIE,uCD7BF,CCiCA,EACE,aAAA,CACA,oBD9BF,CCkCA,GAME,QAAA,CAJA,kBAAA,CADA,aAAA,CAEA,aAAA,CAEA,gBAAA,CADA,SD7BF,CCmCA,MACE,aDhCF,CCoCA,QAEE,eDjCF,CCqCA,IACE,iBDlCF,CCsCA,MACE,uBAAA,CACA,gBDnCF,CCuCA,MAEE,eAAA,CACA,kBDpCF,CCwCA,OAKE,sBAAA,CACA,QAAA,CAFA,mBAAA,CADA,iBAAA,CAFA,QAAA,CACA,SDjCF,CCyCA,MACE,QAAA,CACA,YDtCF,CE9CA,MAGE,sCAAA,CACA,6CAAA,CACA,+CAAA,CACA,gDAAA,CACA,0BAAA,CACA,gDAAA,CACA,kDAAA,CACA,oDAAA,CAGA,6BAAA,CACA,oCAAA,CACA,mCAAA,CACA,0BAAA,CACA,gDAAA,CAGA,4BAAA,CACA,sDAAA,CACA,yBAAA,CACA,+CF2CF,CExCE,QAGE,0BAAA,CACA,0BAAA,CAGA,sCAAA,CACA,iCAAA,CACA,kCAAA,CACA,mCAAA,CACA,mCAAA,CACA,kCAAA,CACA,iCAAA,CACA,+CAAA,CACA,6DAAA,CACA,gEAAA,CACA,4DAAA,CACA,4DAAA,CACA,6DAAA,CAGA,6CAAA,CAGA,+CAAA,CAGA,2CAAA,CAGA,2CAAA,CACA,4CAAA,CAGA,8BAAA,CACA,kCAAA,CACA,qCAAA,CAGA,mDAAA,CACA,mDAAA,CAGA,yBAAA,CACA,+CAAA,CACA,iDAAA,CACA,qCAAA,CACA,2CFwBJ,CG/FE,aAIE,iBAAA,CAHA,aAAA,CAEA,aAAA,CADA,YHoGJ,CIzGA,KACE,kCAAA,CACA,iCJ4GF,CIxGA,WAIE,oGACE,CAFF,mCJ4GF,CIrGA,wBARE,6BJqHF,CI7GA,aAKE,gFACE,CAFF,4BJyGF,CI9FA,MACE,sNAAA,CACA,wNJiGF,CI1FA,YAGE,gCAAA,CAAA,kBAAA,CAFA,eAAA,CACA,eJ8FF,CIzFE,aAPF,YAQI,gBJ4FF,CACF,CIzFE,uGAME,YJ2FJ,CIvFE,eAEE,uCAAA,CAEA,aAAA,CACA,eAAA,CAJA,iBJ8FJ,CIrFE,8BAPE,eAAA,CAGA,qBJgGJ,CI5FE,eAGE,kBAAA,CACA,eAAA,CAHA,oBJ2FJ,CInFE,eAGE,gBAAA,CADA,eAAA,CAGA,qBAAA,CADA,eAAA,CAHA,mBJyFJ,CIjFE,kBACE,eJmFJ,CI/EE,eAEE,eAAA,CACA,qBAAA,CAFA,YJmFJ,CI7EE,8BAGE,uCAAA,CAEA,cAAA,CADA,eAAA,CAEA,qBAAA,CAJA,eJmFJ,CI3EE,eACE,wBJ6EJ,CIzEE,eAGE,+DAAA,CAFA,iBAAA,CACA,cJ4EJ,CIvEE,cACE,+BAAA,CACA,qBJyEJ,CItEI,mCAEE,sBJuEN,CInEI,wCAEE,+BJoEN,CIhEI,4BACE,uCAAA,CACA,oBJkEN,CI7DE,iDAGE,6BAAA,CACA,aJ+DJ,CI5DI,aAPF,iDAQI,oBJiEJ,CACF,CI7DE,iBAIE,wCAAA,CACA,mBAAA,CACA,kCAAA,CAAA,0BAAA,CAJA,eAAA,CADA,uBAAA,CAEA,qBJkEJ,CI5DI,qCAEE,uCAAA,CADA,YJ+DN,CIzDE,wHAQE,wBAAA,CACA,eAAA,CAHA,cAAA,CACA,eJ6DJ,CIvDE,mBACE,kBJyDJ,CIrDE,gBAEE,iBAAA,CACA,eAAA,CAFA,iBJyDJ,CIpDI,qBASE,oBAAA,CACA,+DAAA,CAHA,kCAAA,CAAA,0BAAA,CADA,eAAA,CALA,aAAA,CACA,QAAA,CAEA,aAAA,CADA,oCAAA,CAKA,iBAAA,CAHA,iBJ2DN,CInDM,2BACE,qDJqDR,CIjDM,wCAEE,YAAA,CADA,WJoDR,CI/CM,8CACE,oDJiDR,CI9CQ,oDACE,0CJgDV,CKjGI,wCD2DA,gBACE,iBJyCJ,CItCI,qBACE,eJwCN,CACF,CInCE,gBAOE,4CAAA,CACA,mBAAA,CACA,mKACE,CAPF,gCAAA,CAFA,oBAAA,CAGA,eAAA,CAFA,uBAAA,CAGA,uBAAA,CACA,qBJwCJ,CI9BE,iBAGE,6CAAA,CACA,kCAAA,CAAA,0BAAA,CAHA,aAAA,CACA,qBJkCJ,CI5BE,iBAEE,6DAAA,CACA,WAAA,CAFA,oBJgCJ,CI3BI,oBANF,iBAOI,iBJ8BJ,CI3BI,wEAcE,2CAAA,CACA,mBAAA,CE9SN,gGAAA,CF2SM,gCAAA,CAIA,mBAAA,CAVA,oBAAA,CAOA,eAAA,CARA,MAAA,CAKA,cAAA,CADA,aAAA,CADA,6BAAA,CAAA,0BAAA,CAAA,qBAAA,CAGA,mBAAA,CAPA,iBAAA,CAGA,UJoCN,CACF,CItBE,kBACE,WJwBJ,CIpBE,gCAEE,qBJsBJ,CInBI,oDAEE,aAAA,CADA,sBJuBN,CIjBE,uBAIE,2DAAA,CADA,uCAAA,CAFA,iBAAA,CACA,kBJqBJ,CIhBI,iCAIE,mBAAA,CADA,4DAAA,CADA,cAAA,CADA,mBJqBN,CIbE,eACE,oBJeJ,CIXE,8BAEE,iBAAA,CACA,kBAAA,CACA,SJaJ,CIVI,kDAEE,aAAA,CADA,mBJcN,CITI,oCACE,2BJYN,CITM,0CACE,2BJYR,CIPI,oCACE,kBAAA,CACA,kBJUN,CIPM,wDAEE,aAAA,CADA,mBJWR,CINM,kGAEE,aJUR,CINM,0DACE,eJSR,CILM,oFAEE,yBJSR,CINQ,4HAEE,aAAA,CADA,mBJYV,CIJE,eACE,0BJMJ,CIHI,yBAEE,aAAA,CADA,oBJMN,CIAE,gCAGE,WAAA,CADA,cJGJ,CICI,wDAEE,oBJEN,CIEI,0DAEE,oBJCN,CIGI,oEACE,YJAN,CIKE,mBACE,iBAAA,CAGA,aAAA,CADA,cAAA,CAEA,iBAAA,CAHA,yBAAA,CAAA,sBAAA,CAAA,iBJAJ,CIMI,uBACE,aJJN,CISE,uBAGE,iBAAA,CADA,mBAAA,CADA,eJLJ,CIWE,mBACE,cJTJ,CIaE,+BAKE,2CAAA,CACA,mBAAA,CACA,kEACE,CAPF,oBAAA,CAGA,gBAAA,CAFA,cAAA,CACA,aAAA,CAOA,iBJbJ,CIgBI,aAbF,+BAcI,aJbJ,CACF,CIkBI,iCACE,gBJhBN,CIwBM,8FACE,YJrBR,CIyBM,4FACE,eJtBR,CI2BI,8FAEE,eJzBN,CI4BM,kHACE,gBJzBR,CI8BI,kCAKE,kDAAA,CAFA,gCAAA,CAFA,cAAA,CACA,sBAAA,CAEA,kBJ3BN,CI+BM,oCACE,aJ7BR,CIkCI,kCAGE,4DAAA,CAFA,sBAAA,CACA,kBJ/BN,CIoCI,kCACE,iCJlCN,CIqCM,wCACE,iCAAA,CACA,sDJnCR,CIuCM,iDACE,YJrCR,CI0CI,iCACE,iBJxCN,CI6CE,wCACE,cJ3CJ,CI8CI,8CAQE,UAAA,CAPA,oBAAA,CAEA,YAAA,CACA,gBAAA,CAEA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CAFA,kBAAA,CAHA,WJtCN,CIgDI,mEACE,6BAAA,CACA,qDAAA,CAAA,6CJ9CN,CIkDI,oEACE,6BAAA,CACA,sDAAA,CAAA,8CJhDN,CIqDE,wBACE,iBAAA,CACA,eAAA,CACA,iBJnDJ,CIuDE,mBACE,oBAAA,CACA,kBAAA,CACA,eJrDJ,CIwDI,aANF,mBAOI,aJrDJ,CACF,CIwDI,8BACE,aAAA,CAEA,QAAA,CACA,eAAA,CAFA,UJpDN,CO5iBA,KASE,cAAA,CARA,WAAA,CACA,iBPgjBF,CKhZI,oCElKJ,KAaI,gBPyiBF,CACF,CKrZI,oCElKJ,KAkBI,cPyiBF,CACF,COpiBA,KASE,2CAAA,CAPA,YAAA,CACA,qBAAA,CAKA,eAAA,CAHA,eAAA,CAJA,iBAAA,CAGA,UP0iBF,COliBE,aAZF,KAaI,aPqiBF,CACF,CKtZI,wCE5IF,yBAII,cPkiBJ,CACF,COzhBA,SAGE,gBAAA,CADA,iBAAA,CADA,eP8hBF,COxhBA,cACE,YAAA,CACA,qBAAA,CACA,WP2hBF,COxhBE,aANF,cAOI,aP2hBF,CACF,COvhBA,SACE,WP0hBF,COvhBE,gBACE,YAAA,CACA,WAAA,CACA,iBPyhBJ,COphBA,aACE,eAAA,CAEA,sBAAA,CADA,kBPwhBF,CO9gBA,WACE,YPihBF,CO5gBA,WAGE,QAAA,CACA,SAAA,CAHA,iBAAA,CACA,OPihBF,CO5gBE,uCACE,aP8gBJ,CO1gBE,+BAEE,uCAAA,CADA,kBP6gBJ,COvgBA,SASE,2CAAA,CACA,mBAAA,CAHA,gCAAA,CACA,gBAAA,CAHA,YAAA,CAQA,SAAA,CAFA,uCAAA,CALA,mBAAA,CALA,cAAA,CAWA,2BAAA,CARA,UPihBF,COrgBE,eAGE,SAAA,CADA,uBAAA,CAEA,oEACE,CAJF,UP0gBJ,CO5fA,MACE,WP+fF,CQ1pBA,aAEE,0CAAA,CADA,aR6pBF,CQzpBE,aALF,aAMI,YR4pBF,CACF,CQzpBE,oBAGE,+BAAA,CACA,eAAA,CAHA,iBAAA,CACA,eR6pBJ,CSzqBA,MACE,+PT4qBF,CStqBA,cAQE,mBAAA,CADA,0CAAA,CAIA,cAAA,CALA,YAAA,CAGA,uCAAA,CACA,oBAAA,CATA,iBAAA,CAEA,UAAA,CADA,QAAA,CAUA,qBAAA,CAPA,WAAA,CADA,STirBF,CStqBE,aAfF,cAgBI,YTyqBF,CACF,CStqBE,kCAEE,uCAAA,CADA,YTyqBJ,CSpqBE,qBACE,uCTsqBJ,CSlqBE,wCAEE,+BTmqBJ,CS9pBE,oBAKE,6BAAA,CAIA,UAAA,CARA,aAAA,CAEA,cAAA,CACA,aAAA,CAEA,2CAAA,CAAA,mCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CANA,aTuqBJ,CS5pBE,sBACE,cT8pBJ,CS3pBI,2BACE,2CT6pBN,CSvpBI,kEAGE,uDAAA,CADA,+BTypBN,CUhuBA,YAQE,0BAAA,CAPA,WAAA,CAMA,eV+tBF,CU3tBE,mBACE,qBAAA,CACA,iBV6tBJ,CKxkBI,sCK/IE,kEACE,kBV0tBN,CUvtBM,4EAEE,iBAAA,CADA,mBV0tBR,CUptBI,oEACE,mBVstBN,CUntBM,8EAEE,kBAAA,CADA,kBVstBR,CACF,CU/sBI,0BAGE,UAAA,CAFA,aAAA,CACA,YVktBN,CU7sBI,+BACE,eV+sBN,CUzsBE,oBACE,WAAA,CAEA,0BAAA,CACA,SV2sBJ,CUxsBI,aAPF,oBAQI,YV2sBJ,CACF,CUxsBI,8BACE,UAAA,CAEA,aAAA,CADA,kBV2sBN,CUvsBM,kCACE,oBVysBR,CUpsBI,gCACE,yCVssBN,CUlsBI,wBACE,cAAA,CACA,kBVosBN,CW5xBA,WAUE,2CAAA,CACA,mBAAA,CANA,YAAA,CLPA,gGAAA,CKQA,SAAA,CAEA,iBAAA,CAKA,SAAA,CAJA,mBAAA,CAQA,mBAAA,CAdA,cAAA,CACA,WAAA,CAQA,0BAAA,CAEA,wCACE,CARF,SXsyBF,CWzxBE,aApBF,WAqBI,YX4xBF,CACF,CWzxBE,qBAEE,UAAA,CADA,UX4xBJ,CWvxBE,+BAEE,SAAA,CAIA,mBAAA,CALA,uBAAA,CAEA,kEX0xBJ,CWnxBE,kBACE,gCAAA,CACA,eXqxBJ,CY7zBE,uBAKE,kBAAA,CACA,mBAAA,CAHA,gCAAA,CAFA,oBAAA,CAGA,eAAA,CAFA,kBAAA,CAKA,gEZg0BJ,CY1zBI,gCAEE,2CAAA,CACA,uCAAA,CAFA,gCZ8zBN,CYxzBI,0DAGE,0CAAA,CACA,sCAAA,CAFA,+BZ2zBN,CYpzBE,sBAIE,mBAAA,CACA,uEACE,CAHF,eAAA,CAFA,aAAA,CACA,eAAA,CAMA,0BZozBJ,CYjzBI,wDAEE,wEZkzBN,CY5yBI,+BACE,UZ8yBN,Caj2BA,WAOE,2CAAA,CAGA,0DACE,CALF,gCAAA,CAFA,MAAA,CAHA,uBAAA,CAAA,eAAA,CAEA,OAAA,CADA,KAAA,CAGA,Sbu2BF,Ca71BE,aAfF,WAgBI,Ybg2BF,CACF,Ca71BE,iCACE,gEACE,CAEF,kEb61BJ,Cav1BE,iCACE,2BAAA,CACA,iEby1BJ,Can1BE,kBAEE,kBAAA,CADA,YAAA,CAEA,ebq1BJ,Caj1BE,mBAKE,kBAAA,CAGA,cAAA,CALA,YAAA,CAIA,uCAAA,CAHA,aAAA,CAHA,iBAAA,CAQA,uBAAA,CAHA,qBAAA,CAJA,Sb01BJ,Cah1BI,yBACE,Ubk1BN,Ca90BI,iCACE,oBbg1BN,Ca50BI,uCAEE,uCAAA,CADA,Yb+0BN,Ca10BI,2BACE,YAAA,CACA,ab40BN,CKnuBI,wCQ3GA,2BAMI,Yb40BN,CACF,Caz0BM,8DAKE,iBAAA,CAHA,aAAA,CAEA,aAAA,CADA,Yb60BR,CKlwBI,mCQpEA,iCAII,Ybs0BN,CACF,Can0BM,wCACE,Ybq0BR,Ca9zBQ,+CACE,oBbg0BV,CK7wBI,sCQ7CA,iCAII,Yb0zBN,CACF,CarzBE,kBAEE,YAAA,CACA,cAAA,CAFA,iBAAA,CAGA,8DbuzBJ,CalzBI,oCAGE,SAAA,CAIA,mBAAA,CALA,6BAAA,CAEA,8DACE,CAJF,UbwzBN,Ca/yBM,8CACE,8BbizBR,Ca3yBE,kBACE,WAAA,CAIA,eAAA,CAHA,aAAA,CAIA,kBAAA,CAFA,gBAAA,CADA,kBbgzBJ,Ca1yBI,0DAGE,SAAA,CAIA,mBAAA,CALA,8BAAA,CAEA,8DACE,CAJF,UbgzBN,CavyBM,oEACE,6BbyyBR,CaryBM,4EAGE,SAAA,CAIA,mBAAA,CALA,uBAAA,CAEA,8DACE,CAJF,Sb2yBR,CahyBI,uCAGE,WAAA,CAFA,iBAAA,CACA,UbmyBN,Ca7xBE,mBACE,YAAA,CACA,aAAA,CACA,cAAA,CAEA,+CACE,CAFF,kBbgyBJ,Ca1xBI,8DACE,WAAA,CACA,SAAA,CACA,oCb4xBN,CarxBE,mBACE,YbuxBJ,CK/0BI,mCQuDF,mBAKI,aAAA,CAGA,gBAAA,CADA,iBAAA,CADA,abyxBJ,CapxBI,6BAEE,aAAA,CADA,iBbuxBN,CACF,CK31BI,sCQuDF,mBAmBI,kBbqxBJ,CalxBI,6BACE,mBboxBN,CACF,CcrgCA,WAEE,0CAAA,CADA,+BdygCF,CcrgCE,aALF,WAMI,YdwgCF,CACF,CcrgCE,kBAEE,aAAA,CADA,adwgCJ,CcngCE,iBACE,YAAA,CAGA,uCAAA,CADA,oBAAA,CADA,kBAAA,CAGA,uBdqgCJ,CKx3BI,mCSlJF,iBASI,SdqgCJ,CACF,CclgCI,8CAEE,UdmgCN,Cc//BI,uBACE,UdigCN,CKh3BI,wCSlJA,uBAKI,SdigCN,Cc9/BM,yCACE,YdggCR,CACF,Cc5/BM,iCACE,Wd8/BR,Cc3/BQ,qCACE,oBd6/BV,Ccv/BI,uBACE,WAAA,CACA,gBdy/BN,CKl4BI,wCSzHA,uBAMI,Sdy/BN,CACF,Cct/BM,iCACE,UAAA,CACA,edw/BR,Ccr/BQ,qCACE,oBdu/BV,Cch/BE,kBAEE,WAAA,CAGA,eAAA,CACA,kBAAA,CAHA,6BAAA,CACA,cAAA,CAHA,iBdu/BJ,Cc9+BE,mBACE,YAAA,CACA,adg/BJ,Cc5+BE,sBAME,gBAAA,CAHA,MAAA,CACA,gBAAA,CAGA,UAAA,CAFA,cAAA,CAJA,iBAAA,CACA,Odm/BJ,Ccz+BA,gBACE,gDd4+BF,Ccz+BE,uBACE,YAAA,CACA,cAAA,CACA,6BAAA,CACA,ad2+BJ,Ccv+BE,kCACE,sCdy+BJ,Cct+BI,gFAEE,+Bdu+BN,Ccj+BA,qBAIE,wCAAA,CACA,gBAAA,CAHA,iBAAA,CACA,eAAA,CAFA,Udw+BF,CK98BI,mCS3BJ,qBASI,Udo+BF,CACF,Cch+BE,gCACE,sCdk+BJ,Cc79BA,kBACE,cAAA,CACA,qBdg+BF,CK39BI,mCSPJ,kBAMI,edg+BF,CACF,Cc79BE,wBACE,oBAAA,CAEA,aAAA,CACA,iBAAA,CAFA,Ydi+BJ,Cc59BI,+BACE,ed89BN,Cc19BI,4BAGE,iBAAA,CAFA,gBAAA,CACA,mBd69BN,CehpCA,MACE,0MAAA,CACA,gMAAA,CACA,yNfmpCF,Ce7oCA,QACE,eAAA,CACA,efgpCF,Ce7oCE,eACE,aAAA,CAGA,eAAA,CADA,eAAA,CADA,eAAA,CAGA,sBf+oCJ,Ce5oCI,+BACE,Yf8oCN,Ce3oCM,mCAEE,WAAA,CADA,Uf8oCR,CetoCQ,sFAKE,iBAAA,CAHA,aAAA,CAEA,aAAA,CADA,Yf0oCV,CejoCE,cAGE,eAAA,CAFA,QAAA,CACA,SfooCJ,Ce/nCE,cACE,efioCJ,Ce9nCI,4BACE,efgoCN,Ce7nCM,sCAEE,cAAA,CADA,mBfgoCR,CeznCE,cAOE,uBAAA,CAFA,cAAA,CAJA,aAAA,CACA,iBAAA,CACA,eAAA,CACA,sBAAA,CAEA,sBf4nCJ,CexnCI,kCACE,uCf0nCN,CetnCI,oCACE,+BfwnCN,CepnCI,oCACE,afsnCN,CelnCI,wCAEE,+BfmnCN,Ce/mCI,4BACE,uCAAA,CACA,oBfinCN,Ce7mCI,0CACE,Yf+mCN,Ce5mCM,yDAKE,6BAAA,CAJA,aAAA,CAEA,WAAA,CACA,qCAAA,CAAA,6BAAA,CAFA,UfinCR,CenmCE,kEACE,YfwmCJ,CKnjCI,wCU9CA,0CAUE,2CAAA,CAHA,YAAA,CACA,qBAAA,CACA,WAAA,CAJA,MAAA,CAHA,iBAAA,CAEA,OAAA,CADA,KAAA,CAGA,SfumCJ,Ce5lCI,+DAEE,eAAA,CACA,ef8lCN,Ce1lCI,gCAQE,qDAAA,CAJA,uCAAA,CAKA,cAAA,CAJA,eAAA,CAHA,aAAA,CAIA,kBAAA,CAHA,wBAAA,CAFA,iBAAA,CAMA,kBf8lCN,CezlCM,8CAIE,aAAA,CAEA,aAAA,CAHA,UAAA,CAIA,YAAA,CANA,iBAAA,CACA,SAAA,CAGA,Yf6lCR,CexlCQ,wDAEE,SAAA,CADA,Wf2lCV,CetlCQ,oDAIE,6BAAA,CAIA,UAAA,CAPA,aAAA,CAEA,WAAA,CAEA,2CAAA,CAAA,mCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CALA,Uf8lCV,CenlCM,8CAEE,2CAAA,CACA,gEACE,CAHF,eAAA,CAIA,gCAAA,CAAA,4BAAA,CACA,kBfolCR,CejlCQ,2DACE,YfmlCV,Ce9kCM,8CAEE,2CAAA,CADA,gCfilCR,Ce5kCM,yCAIE,aAAA,CADA,UAAA,CAEA,YAAA,CACA,aAAA,CALA,iBAAA,CACA,SfklCR,Ce3kCQ,mDAEE,SAAA,CADA,Wf8kCV,CevkCI,+BACE,MfykCN,CerkCI,+BAEE,4DAAA,CADA,SfwkCN,CepkCM,qDACE,oBfskCR,CenkCQ,+DAEE,mBAAA,CADA,mBfskCV,CehkCM,qDACE,+BfkkCR,Ce/jCQ,sHAEE,+BfgkCV,Ce1jCI,+BAEE,YAAA,CACA,mBAAA,CAFA,iBf8jCN,CezjCM,6CAOE,aAAA,CACA,gBAAA,CAHA,aAAA,CACA,iBAAA,CALA,iBAAA,CAEA,WAAA,CADA,OAAA,CAEA,Yf+jCR,CexjCQ,uDAEE,UAAA,CADA,Uf2jCV,CetjCQ,mDAIE,6BAAA,CAIA,UAAA,CAPA,aAAA,CAEA,WAAA,CAEA,2CAAA,CAAA,mCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CALA,Uf8jCV,Ce/iCM,+CACE,mBfijCR,CeziCM,kDACE,ef2iCR,CeviCM,4CAEE,wBAAA,CADA,ef0iCR,CetiCQ,0DACE,mBfwiCV,CeriCU,oEAEE,cAAA,CADA,oBfwiCZ,CeliCQ,kEACE,iBfoiCV,CejiCU,4EAEE,cAAA,CADA,kBfoiCZ,Ce9hCQ,0EACE,mBfgiCV,Ce7hCU,oFAEE,cAAA,CADA,oBfgiCZ,Ce1hCQ,kFACE,mBf4hCV,CezhCU,4FAEE,cAAA,CADA,oBf4hCZ,CenhCE,mBACE,wBfqhCJ,CejhCE,wBACE,YAAA,CAEA,SAAA,CADA,0BAAA,CAEA,oEfmhCJ,Ce9gCI,kCACE,2BfghCN,Ce3gCE,gCAEE,SAAA,CADA,uBAAA,CAEA,qEf6gCJ,CexgCI,8CAEE,kCAAA,CAAA,0BfygCN,CACF,CK5uCI,wCU2OA,0CACE,aAAA,CACA,oBfogCJ,CejgCI,oDAEE,mBAAA,CADA,mBfogCN,Ce//BI,yDACE,UfigCN,Ce7/BI,wDACE,Yf+/BN,Ce3/BI,kDACE,Yf6/BN,Cex/BE,gBAIE,iDAAA,CADA,gCAAA,CAFA,aAAA,CACA,ef4/BJ,CACF,CK9yCM,6DU2TF,6CAGE,sBAAA,CAFA,aAAA,CACA,oBfu/BJ,Cen/BI,uDAEE,mBAAA,CADA,mBfs/BN,Cej/BI,4DACE,Ufm/BN,Ce/+BI,2DACE,Yfi/BN,Ce7+BI,qDACE,Yf++BN,CACF,CK5yCI,mCUwUE,6CACE,uBfu+BN,Cen+BI,gDACE,Yfq+BN,CACF,CKpzCI,sCUzJJ,QA8eI,oDfm+BF,Ce79BI,8CACE,uBf+9BN,Cer9BE,sEACE,Yf09BJ,Cet9BE,sEAEE,afu9BJ,Cen9BE,6CACE,Yfq9BJ,Cej9BE,uBACE,aAAA,CACA,efm9BJ,Ceh9BI,kCACE,efk9BN,Ce98BI,qCACE,Yfg9BN,Ce58BI,+BACE,af88BN,Ce38BM,8CAIE,uBAAA,CAHA,aAAA,CACA,SAAA,CACA,mBf88BR,Cez8BM,2DACE,Sf28BR,Cer8BE,cACE,WAAA,CAEA,YAAA,CACA,yBAAA,CAFA,Wfy8BJ,Cep8BI,wBACE,UAAA,CACA,wBfs8BN,Cel8BI,oBAKE,6BAAA,CAIA,UAAA,CARA,oBAAA,CAEA,WAAA,CAGA,2CAAA,CAAA,mCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CAJA,qBAAA,CAFA,Uf28BN,Ceh8BI,0JAEE,uBfi8BN,Cen7BI,+HACE,Yfy7BN,Cet7BM,oDACE,aAAA,CACA,Sfw7BR,Cer7BQ,kEACE,Yfu7BV,Cen7BQ,2EAIE,uBAAA,CAHA,aAAA,CACA,eAAA,CACA,mBfs7BV,Ce96BI,2CACE,afg7BN,Ce76BM,uEACE,mBf+6BR,Cez6BE,qDAGE,mDAAA,CAFA,aAAA,CACA,oBf46BJ,Cex6BI,oEACE,Yf06BN,CACF,CgB1jDA,MACE,igBhB6jDF,CgBvjDA,WACE,iBhB0jDF,CKh6CI,mCW3JJ,WAKI,ehB0jDF,CACF,CgBvjDE,kBACE,YhByjDJ,CgBrjDE,oBAEE,SAAA,CADA,ShBwjDJ,CKz5CI,wCWhKF,oBAYI,2CAAA,CACA,kBAAA,CAHA,WAAA,CAFA,YAAA,CAGA,eAAA,CAOA,mBAAA,CAZA,iBAAA,CACA,SAAA,CAOA,uBAAA,CACA,4CACE,CAPF,UhB8jDJ,CgBljDI,8BAEE,SAAA,CADA,ahBqjDN,CgBhjDI,+DACE,SAAA,CACA,oChBkjDN,CACF,CKn8CI,mCW7IF,oBA0CI,gCAAA,CACA,cAAA,CAFA,QAAA,CAFA,MAAA,CAFA,cAAA,CACA,KAAA,CAMA,sDACE,CALF,OhBmjDJ,CgBziDI,8BAEE,SAAA,CADA,OhB4iDN,CgBviDI,+DAME,YAAA,CACA,SAAA,CACA,4CACE,CARF,UhB4iDN,CACF,CKt8CI,wCWxFA,+DAII,mBhB8hDN,CACF,CKp/CM,6DW/CF,+DASI,mBhB8hDN,CACF,CKz/CM,6DW/CF,+DAcI,mBhB8hDN,CACF,CgBzhDE,kBAEE,kCAAA,CAAA,0BhB0hDJ,CKx9CI,wCWpEF,kBAWI,WAAA,CAHA,SAAA,CAKA,SAAA,CAPA,cAAA,CACA,KAAA,CAKA,wBAAA,CAEA,mGACE,CALF,UAAA,CADA,ShB+hDJ,CgBnhDI,6DACE,MAAA,CAEA,SAAA,CADA,uBAAA,CAEA,oGhBqhDN,CgB9gDM,uEAEE,SAAA,CADA,OhBihDR,CgB3gDI,iCAEE,SAAA,CADA,UAAA,CAEA,yBhB6gDN,CACF,CKvgDI,mCWjDF,kBAiDI,WAAA,CAEA,eAAA,CAHA,iBAAA,CAIA,8CAAA,CAFA,ahB8gDJ,CgBzgDI,4BACE,UhB2gDN,CACF,CKziDM,6DWkCF,6DAII,ahBugDN,CACF,CKxhDI,sCWYA,6DASI,ahBugDN,CACF,CgBlgDE,iBACE,iBhBogDJ,CKhiDI,mCW2BF,iBAKI,mBhBogDJ,CACF,CgBhgDE,kBAKE,2CAAA,CACA,gCAAA,CAHA,yBAAA,CAFA,iBAAA,CAGA,sBAAA,CAGA,2DACE,CANF,ShBugDJ,CgB5/CI,4BACE,yBhB8/CN,CgB1/CI,6CACE,6BAAA,CAAA,qBhB4/CN,CgB7/CI,oCACE,0BAAA,CAAA,qBhB4/CN,CgB7/CI,yCACE,yBAAA,CAAA,qBhB4/CN,CgB7/CI,+BACE,qBhB4/CN,CgBx/CI,6CAEE,uChBy/CN,CgB3/CI,oCAEE,uChBy/CN,CgB3/CI,yCAEE,uChBy/CN,CgB3/CI,kEAEE,uChBy/CN,CgBr/CI,6BACE,YhBu/CN,CgBn/CI,6DACE,oChBq/CN,CK1iDI,wCWkBF,kBA0CI,eAAA,CADA,aAAA,CADA,UhBs/CJ,CACF,CKpkDI,mCWqCF,kBAoDI,gCAAA,CACA,mBAAA,CAHA,aAAA,CACA,eAAA,CAHA,aAAA,CACA,mBAAA,CAFA,UhB0/CJ,CgBj/CI,4BACE,oBhBm/CN,CgB/+CI,mCACE,gChBi/CN,CgB7+CI,6CACE,uChB++CN,CgBh/CI,oCACE,uChB++CN,CgBh/CI,yCACE,uChB++CN,CgBh/CI,+BACE,uChB++CN,CgB3+CI,wBACE,oChB6+CN,CgBz+CI,6DAGE,2CAAA,CACA,6BAAA,CAHA,gCAAA,CACA,kBhB6+CN,CgBx+CM,wFAEE,uChBy+CR,CgB3+CM,+EAEE,uChBy+CR,CgB3+CM,oFAEE,uChBy+CR,CgB3+CM,wJAEE,uChBy+CR,CACF,CgBn+CE,iBAKE,cAAA,CADA,aAAA,CAHA,iBAAA,CAKA,kCACE,CAJF,YAAA,CADA,ShBy+CJ,CgBh+CI,uBACE,UhBk+CN,CgB99CI,+BAEE,UAAA,CADA,ShBi+CN,CgB79CM,yCAEE,SAAA,CADA,WhBg+CR,CgB59CQ,6CACE,oBhB89CV,CKvmDI,wCW8HA,+BAkBI,UAAA,CADA,ShB69CN,CgBz9CM,yCAEE,SAAA,CADA,WhB49CR,CgBv9CM,+CACE,YhBy9CR,CACF,CKvoDI,mCWiJA,+BAkCI,mBhBw9CN,CgBr9CM,8CACE,YhBu9CR,CACF,CgBl9CI,6BAIE,SAAA,CAIA,mBAAA,CANA,WAAA,CADA,SAAA,CAEA,oBAAA,CAEA,+DhBq9CN,CgB/8CM,uCAEE,UAAA,CADA,UhBk9CR,CKxoDI,wCW0KA,6BAmBI,WAAA,CADA,ShBi9CN,CgB78CM,uCAEE,UAAA,CADA,UhBg9CR,CACF,CgB38CM,gGAGE,SAAA,CACA,mBAAA,CAFA,kBhB88CR,CgBz8CQ,sGACE,UhB28CV,CgBp8CE,mBAKE,6BAAA,CADA,eAAA,CAHA,iBAAA,CAEA,UAAA,CADA,ShBy8CJ,CKjqDI,wCWsNF,mBAUI,QAAA,CADA,UhBu8CJ,CACF,CK1rDI,mCWyOF,mBAgBI,SAAA,CADA,UAAA,CAEA,sBhBs8CJ,CgBn8CI,8DV/YJ,kGAAA,CUkZM,ShBo8CN,CACF,CgB/7CE,uBAKE,kCAAA,CAAA,0BAAA,CAFA,2CAAA,CAFA,WAAA,CACA,eAAA,CAOA,kBhB67CJ,CgB17CI,iEAZF,uBAaI,uBhB67CJ,CACF,CKvuDM,6DW4RJ,uBAkBI,ahB67CJ,CACF,CKttDI,sCWsQF,uBAuBI,ahB67CJ,CACF,CK3tDI,mCWsQF,uBA6BI,oBAAA,CACA,+DAAA,CAFA,YhB+7CJ,CgB17CI,kEACE,ehB47CN,CgBx7CI,6BACE,qDhB07CN,CgBt7CI,0CAEE,YAAA,CADA,WhBy7CN,CgBp7CI,gDACE,oDhBs7CN,CgBn7CM,sDACE,0ChBq7CR,CACF,CgB96CA,kBACE,gCAAA,CACA,qBhBi7CF,CgB96CE,wBAME,uBAAA,CADA,qDAAA,CAHA,uCAAA,CACA,gBAAA,CACA,kBAAA,CAHA,ehBq7CJ,CK/vDI,mCWyUF,wBAUI,mBhBg7CJ,CgB76CI,kCAEE,cAAA,CADA,oBhBg7CN,CACF,CgB16CE,wBAGE,eAAA,CAFA,QAAA,CACA,ShB66CJ,CgBx6CE,wBACE,2DhB06CJ,CgBv6CI,oCACE,ehBy6CN,CgBp6CE,wBAIE,uBAAA,CAHA,aAAA,CACA,YAAA,CACA,gChBu6CJ,CgBn6CI,4DAEE,uDhBo6CN,CgBh6CI,gDACE,mBhBk6CN,CgB75CE,gCAUE,uBAAA,CAPA,+BAAA,CAGA,cAAA,CALA,aAAA,CAGA,gBAAA,CACA,YAAA,CAHA,mBAAA,CAKA,2ChBg6CJ,CKzyDI,mCWkYF,gCAcI,mBhB65CJ,CgB15CI,0CAEE,kBAAA,CADA,oBhB65CN,CACF,CgBx5CI,4EAGE,uDAAA,CADA,+BhB05CN,CgBr5CI,gGAEE,YhBs5CN,CgBl5CI,oCACE,WhBo5CN,CgB/4CE,2BAGE,eAAA,CADA,eAAA,CADA,iBhBm5CJ,CKj0DI,mCW6aF,2BAOI,mBhBi5CJ,CgB94CI,qCAEE,kBAAA,CADA,oBhBi5CN,CACF,CgBz4CM,8DAGE,eAAA,CADA,eAAA,CAEA,eAAA,CAHA,ehB84CR,CgBr4CE,wBAME,uCAAA,CAFA,aAAA,CAFA,MAAA,CAGA,YAAA,CAJA,iBAAA,CAEA,YhB04CJ,CKr0DI,wCWwbF,wBAUI,YhBu4CJ,CACF,CgBp4CI,8BAIE,6BAAA,CAIA,UAAA,CAPA,oBAAA,CAEA,WAAA,CAEA,+CAAA,CAAA,uCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CALA,UhB44CN,CgBl4CI,kCAEE,SAAA,CADA,OhBq4CN,CgBj4CM,wCACE,oBhBm4CR,CgB73CE,yBAGE,gBAAA,CADA,eAAA,CAEA,eAAA,CAHA,ahBk4CJ,CgB33CE,0BASE,2BAAA,CACA,oBAAA,CALA,uCAAA,CAJA,mBAAA,CAKA,gBAAA,CACA,eAAA,CAJA,aAAA,CADA,eAAA,CAEA,eAAA,CAIA,sBhB+3CJ,CK72DI,wCWseF,0BAeI,oBAAA,CADA,ehB83CJ,CACF,CK55DM,6DW+gBJ,0BAqBI,oBAAA,CADA,ehB83CJ,CACF,CgB13CI,+BAEE,wBAAA,CADA,yBhB63CN,CgBv3CE,yBAEE,gBAAA,CACA,iBAAA,CAFA,ahB23CJ,CgBr3CE,uBAEE,wBAAA,CADA,+BhBw3CJ,CiB3jEA,WACE,iBAAA,CACA,SjB8jEF,CiB3jEE,kBAOE,2CAAA,CACA,mBAAA,CACA,kEACE,CAJF,gCAAA,CAHA,QAAA,CAEA,gBAAA,CADA,YAAA,CASA,SAAA,CAZA,iBAAA,CACA,sBAAA,CAUA,mCAAA,CAEA,oEjB2jEJ,CiBrjEI,6EAEE,gBAAA,CAEA,SAAA,CADA,+BAAA,CAEA,8EjBsjEN,CiB/iEI,wBAUE,qCAAA,CAAA,8CAAA,CAFA,mCAAA,CAAA,oCAAA,CACA,YAAA,CAEA,UAAA,CANA,QAAA,CAFA,QAAA,CAIA,kBAAA,CADA,iBAAA,CALA,iBAAA,CACA,KAAA,CAEA,OjBwjEN,CiB5iEE,iBAOE,mBAAA,CAFA,eAAA,CACA,oBAAA,CAJA,QAAA,CADA,kBAAA,CAGA,aAAA,CADA,SjBkjEJ,CiB1iEE,iBACE,kBjB4iEJ,CiBxiEE,iBAUE,uBAAA,CAJA,cAAA,CALA,aAAA,CAIA,YAAA,CADA,kBAAA,CADA,oBAAA,CAIA,2CACE,CANF,UjBgjEJ,CiBriEI,2BAEE,mBAAA,CADA,mBjBwiEN,CiBniEI,8CAEE,+BjBoiEN,CiBhiEI,uBACE,qDjBkiEN,CkBjoEA,YAIE,qBAAA,CADA,aAAA,CAGA,gBAAA,CALA,uBAAA,CAAA,eAAA,CACA,UAAA,CAGA,alBqoEF,CkBjoEE,aATF,YAUI,YlBooEF,CACF,CK19DI,wCapKA,qBAQE,2CAAA,CAHA,aAAA,CAEA,WAAA,CAJA,aAAA,CAFA,cAAA,CACA,KAAA,CAOA,uBAAA,CACA,iEACE,CALF,aAAA,CAFA,SlBuoEJ,CkB5nEI,+BAEE,SAAA,CADA,clB+nEN,CkB1nEI,mEZhBJ,sGAAA,CYmBM,6BlB2nEN,CkBxnEM,6EACE,8BlB0nER,CkBrnEI,6CAIE,QAAA,CACA,MAAA,CACA,QAAA,CAEA,eAAA,CAPA,iBAAA,CAEA,OAAA,CAIA,yBAAA,CAAA,qBAAA,CALA,KlB6nEN,CACF,CKhhEI,sCalKJ,YAiEI,QlBqnEF,CkBlnEE,mBACE,WlBonEJ,CACF,CkBhnEE,uBACE,YAAA,CACA,OlBknEJ,CK5hEI,mCaxFF,uBAMI,QlBknEJ,CkB/mEI,8BACE,WlBinEN,CkB7mEI,qCACE,alB+mEN,CkB3mEI,+CACE,kBlB6mEN,CACF,CkBxmEE,wBASE,oBAAA,CACA,+DAAA,CANA,kCAAA,CAAA,0BAAA,CAHA,cAAA,CACA,elB6mEJ,CkBlmEI,8BACE,qDlBomEN,CkBhmEI,2CAEE,YAAA,CADA,WlBmmEN,CkB9lEI,iDACE,oDlBgmEN,CkB7lEM,uDACE,0ClB+lER,CK3iEI,wCa1CF,YAME,gCAAA,CADA,QAAA,CAEA,SAAA,CANA,cAAA,CACA,KAAA,CAMA,sDACE,CALF,OAAA,CADA,SlB8lEF,CkBnlEE,4CAEE,WAAA,CACA,SAAA,CACA,4CACE,CAJF,UlBwlEJ,CACF,CmBnvEA,0CACE,GACE,QnBqvEF,CmBlvEA,GACE,anBovEF,CACF,CmB3vEA,kCACE,GACE,QnBqvEF,CmBlvEA,GACE,anBovEF,CACF,CmBhvEA,yCACE,GAEE,SAAA,CADA,0BnBmvEF,CmB/uEA,IACE,SnBivEF,CmB9uEA,GAEE,SAAA,CADA,uBnBivEF,CACF,CmB7vEA,iCACE,GAEE,SAAA,CADA,0BnBmvEF,CmB/uEA,IACE,SnBivEF,CmB9uEA,GAEE,SAAA,CADA,uBnBivEF,CACF,CmBxuEA,MACE,mgBAAA,CACA,oiBAAA,CACA,0nBAAA,CACA,mhBnB0uEF,CmBpuEA,WAOE,kCAAA,CAAA,0BAAA,CANA,aAAA,CACA,gBAAA,CACA,eAAA,CAEA,uCAAA,CAGA,uBAAA,CAJA,kBnB0uEF,CmBnuEE,iBACE,UnBquEJ,CmBjuEE,iBACE,oBAAA,CAEA,aAAA,CACA,qBAAA,CAFA,UnBquEJ,CmBhuEI,qBAEE,iBAAA,CADA,gBnBmuEN,CmB/tEM,+BAEE,aAAA,CADA,kBnBkuER,CmB5tEI,wCACE,iBAAA,CACA,iBnB8tEN,CmB3tEM,kDAEE,aAAA,CADA,kBAAA,CAGA,cAAA,CADA,kBnB8tER,CmBvtEE,uBACE,oBAAA,CAEA,iBAAA,CADA,6BAAA,CAEA,eAAA,CACA,sBAAA,CACA,qBnBytEJ,CmBrtEE,kBAIE,gBAAA,CACA,oBAAA,CAJA,gBAAA,CAKA,WAAA,CAHA,eAAA,CADA,SnB2tEJ,CmBptEI,uCACE,qDAAA,CAAA,6CnBstEN,CmBjtEE,iBACE,oBnBmtEJ,CmBhtEI,sCACE,oDAAA,CAAA,4CnBktEN,CmB9sEI,wBAME,6BAAA,CAGA,UAAA,CARA,oBAAA,CAEA,YAAA,CACA,kBAAA,CAGA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CAHA,uBAAA,CAHA,WnButEN,CmB5sEI,wCACE,iBnB8sEN,CmB1sEI,2BAEE,iBAAA,CADA,cnB6sEN,CmBzsEM,kDAEE,aAAA,CADA,kBnB4sER,CmBtsEI,iCACE,gDAAA,CAAA,wCnBwsEN,CmBpsEI,+BACE,8CAAA,CAAA,sCnBssEN,CmBlsEI,+BACE,8CAAA,CAAA,sCnBosEN,CmBhsEI,sCACE,qDAAA,CAAA,6CnBksEN,CoB92EA,SAIE,2CAAA,CADA,gCAAA,CADA,aAAA,CADA,UpBo3EF,CoB92EE,aAPF,SAQI,YpBi3EF,CACF,CKrsEI,wCerLJ,SAaI,YpBi3EF,CACF,CoB92EE,+BACE,mBpBg3EJ,CoB52EE,eAME,eAAA,CADA,eAAA,CAHA,kBAAA,CACA,SAAA,CACA,kBpBg3EJ,CoB32EI,yBAEE,aAAA,CADA,kBpB82EN,CoBx2EE,eACE,oBAAA,CACA,aAAA,CAEA,kBAAA,CADA,mBpB22EJ,CoBr2EE,eAOE,kCAAA,CAAA,0BAAA,CANA,aAAA,CAEA,eAAA,CADA,gBAAA,CAMA,UAAA,CAJA,uCAAA,CACA,oBAAA,CAIA,8DpBs2EJ,CoBj2EI,iEAGE,aAAA,CACA,SpBi2EN,CoB51EM,2CACE,qBpB81ER,CoB/1EM,2CACE,qBpBi2ER,CoBl2EM,2CACE,qBpBo2ER,CoBr2EM,2CACE,qBpBu2ER,CoBx2EM,2CACE,oBpB02ER,CoB32EM,2CACE,qBpB62ER,CoB92EM,2CACE,qBpBg3ER,CoBj3EM,2CACE,qBpBm3ER,CoBp3EM,4CACE,qBpBs3ER,CoBv3EM,4CACE,oBpBy3ER,CoB13EM,4CACE,qBpB43ER,CoB73EM,4CACE,qBpB+3ER,CoBh4EM,4CACE,qBpBk4ER,CoBn4EM,4CACE,qBpBq4ER,CoBt4EM,4CACE,oBpBw4ER,CoBl4EI,8CAEE,SAAA,CADA,yBAAA,CAEA,wCpBo4EN,CqBp9EA,QAQE,qCAAA,CACA,kBAAA,CAPA,YAAA,CASA,uEACE,CALF,gCAAA,CAHA,WAAA,CACA,0BAAA,CAKA,YAAA,CAJA,aAAA,CALA,uBAAA,CAAA,eAAA,CAaA,uBAAA,CACA,uFACE,CAbF,SrBi+EF,CqB/8EE,kBACE,UrBi9EJ,CqB78EE,8BAEE,SAAA,CACA,mBAAA,CAFA,4BrBi9EJ,CqB38EE,4BAEE,oCAAA,CACA,oBrB48EJ,CsBh/EA,MACE,iQtBm/EF,CsB7+EA,YACE,aAAA,CAEA,eAAA,CADA,atBi/EF,CsB7+EE,qBASE,aAAA,CAEA,cAAA,CAHA,kBAAA,CADA,kBAAA,CAGA,YAAA,CATA,iBAAA,CAKA,UtBg/EJ,CsBx+EI,+BAEE,iBAAA,CADA,mBtB2+EN,CsBt+EI,2BAKE,6BAAA,CAGA,UAAA,CAPA,oBAAA,CAEA,YAAA,CACA,iBAAA,CAEA,yCAAA,CAAA,iCAAA,CACA,6BAAA,CAAA,qBAAA,CALA,WtB8+EN,CsBr+EM,qCAEE,aAAA,CADA,kBtBw+ER,CsBj+EE,kBAUE,2CAAA,CACA,mBAAA,CACA,kEACE,CALF,gCAAA,CACA,oBAAA,CAJA,kBAAA,CADA,YAAA,CAWA,SAAA,CARA,aAAA,CADA,SAAA,CALA,iBAAA,CAkBA,gCAAA,CAAA,4BAAA,CAjBA,UAAA,CAcA,+CACE,CAdF,StB++EJ,CsB59EI,+EAEE,gBAAA,CACA,SAAA,CACA,sCtB69EN,CsBt9EE,kBACE,kBtBw9EJ,CsBp9EE,kBAWE,uBAAA,CAJA,cAAA,CANA,aAAA,CAKA,YAAA,CAFA,kBAAA,CADA,oBAAA,CAKA,2CACE,CAJF,kBAAA,CAHA,UtB69EJ,CsBj9EI,4BAEE,mBAAA,CADA,mBtBo9EN,CsB/8EI,gDAEE,+BtBg9EN,CsB58EI,wBACE,qDtB88EN,CuB/iFA,MAEI,2RAAA,CAAA,4MAAA,CAAA,sPAAA,CAAA,8xBAAA,CAAA,kQAAA,CAAA,gbAAA,CAAA,gMAAA,CAAA,kUAAA,CAAA,0VAAA,CAAA,0eAAA,CAAA,kUAAA,CAAA,gMvBwkFJ,CuB7jFE,4CAOE,8CAAA,CACA,+BAAA,CACA,mBAAA,CACA,yEACE,CAPF,mCAAA,CACA,gBAAA,CAJA,iBAAA,CAEA,eAAA,CADA,eAAA,CAIA,uBvBokFJ,CuB3jFI,aAfF,4CAgBI,evB8jFJ,CACF,CuB3jFI,gEAEE,gBAAA,CADA,gCvB8jFN,CuBzjFI,gIAEE,iBAAA,CADA,cvB4jFN,CuBvjFI,4FACE,iBvByjFN,CuBrjFI,kFACE,evBujFN,CuBnjFI,0FACE,YvBqjFN,CuBjjFI,8EACE,mBvBmjFN,CuB9iFE,kDAKE,oCAAA,CACA,+BAAA,CAFA,eAAA,CAFA,wBAAA,CACA,8BAAA,CAFA,iBvBqjFJ,CuB7iFI,sEAIE,gBAAA,CADA,gCAAA,CAFA,wBAAA,CACA,8BvBijFN,CuB3iFI,kFACE,evB6iFN,CuBziFI,gEAKE,wBCwIU,CDpIV,UAAA,CALA,WAAA,CAFA,UAAA,CAIA,kDAAA,CAAA,0CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CAPA,iBAAA,CAEA,UvBijFN,CuBxiFM,oFAEE,SAAA,CADA,WvB2iFR,CuBpiFI,gGACE,YvBsiFN,CuBxhFE,sDACE,oBvB2hFJ,CuBvhFE,8DACE,oCAAA,CACA,oBvB0hFJ,CuBvhFI,4EACE,wBAdG,CAeH,kDAAA,CAAA,0CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvByhFN,CuBviFE,gLACE,oBvB0iFJ,CuBtiFE,wMACE,mCAAA,CACA,oBvByiFJ,CuBtiFI,kPACE,wBAdG,CAeH,sDAAA,CAAA,8CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBwiFN,CuBtjFE,4GACE,oBvByjFJ,CuBrjFE,4HACE,mCAAA,CACA,oBvBwjFJ,CuBrjFI,wJACE,wBAdG,CAeH,kDAAA,CAAA,0CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBujFN,CuBrkFE,0KACE,oBvBwkFJ,CuBpkFE,kMACE,mCAAA,CACA,oBvBukFJ,CuBpkFI,4OACE,wBAdG,CAeH,iDAAA,CAAA,yCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBskFN,CuBplFE,0KACE,oBvBulFJ,CuBnlFE,kMACE,kCAAA,CACA,oBvBslFJ,CuBnlFI,4OACE,wBAdG,CAeH,qDAAA,CAAA,6CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBqlFN,CuBnmFE,wKACE,oBvBsmFJ,CuBlmFE,gMACE,oCAAA,CACA,oBvBqmFJ,CuBlmFI,0OACE,wBAdG,CAeH,sDAAA,CAAA,8CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBomFN,CuBlnFE,wLACE,oBvBqnFJ,CuBjnFE,gNACE,mCAAA,CACA,oBvBonFJ,CuBjnFI,0PACE,wBAdG,CAeH,qDAAA,CAAA,6CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBmnFN,CuBjoFE,8KACE,oBvBooFJ,CuBhoFE,sMACE,mCAAA,CACA,oBvBmoFJ,CuBhoFI,gPACE,wBAdG,CAeH,qDAAA,CAAA,6CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBkoFN,CuBhpFE,kHACE,oBvBmpFJ,CuB/oFE,kIACE,mCAAA,CACA,oBvBkpFJ,CuB/oFI,8JACE,wBAdG,CAeH,oDAAA,CAAA,4CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBipFN,CuB/pFE,oDACE,oBvBkqFJ,CuB9pFE,4DACE,kCAAA,CACA,oBvBiqFJ,CuB9pFI,0EACE,wBAdG,CAeH,iDAAA,CAAA,yCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvBgqFN,CuB9qFE,4DACE,oBvBirFJ,CuB7qFE,oEACE,oCAAA,CACA,oBvBgrFJ,CuB7qFI,kFACE,wBAdG,CAeH,qDAAA,CAAA,6CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvB+qFN,CuB7rFE,8GACE,oBvBgsFJ,CuB5rFE,8HACE,kCAAA,CACA,oBvB+rFJ,CuB5rFI,0JACE,wBAdG,CAeH,mDAAA,CAAA,2CAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBvB8rFN,CyB31FA,MACE,wMzB81FF,CyBr1FE,sBACE,uCAAA,CACA,gBzBw1FJ,CyBr1FI,yBACE,azBu1FN,CyBn1FM,4BACE,sBzBq1FR,CyBl1FQ,mCACE,gCzBo1FV,CyBh1FQ,yGAGE,SAAA,CADA,uBzBk1FV,CyB70FQ,yCACE,YzB+0FV,CyBx0FE,0BAEE,eAAA,CADA,ezB20FJ,CyBv0FI,+BACE,oBzBy0FN,CyBp0FE,8BAEE,+BAAA,CADA,oBAAA,CAGA,WAAA,CAGA,SAAA,CADA,4BAAA,CAEA,4DACE,CAJF,0BzBw0FJ,CyB/zFI,aAdF,8BAeI,+BAAA,CAEA,SAAA,CADA,uBzBm0FJ,CACF,CyB/zFI,wCACE,6BzBi0FN,CyB7zFI,oCACE,+BzB+zFN,CyB3zFI,qCAIE,6BAAA,CAIA,UAAA,CAPA,oBAAA,CAEA,YAAA,CAEA,2CAAA,CAAA,mCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CALA,WzBm0FN,CyBvzFQ,mDACE,oBzByzFV,CyBlzFE,kCACE,mBAAA,CACA,kBAAA,CACA,kBzBozFJ,CyBjzFI,gDACE,YzBmzFN,CyB9yFE,+BACE,mBAAA,CACA,mBAAA,CACA,mBzBgzFJ,C0Bx6FE,wBAGE,yCAAA,CAFA,oBAAA,CACA,iBAAA,CAEA,SAAA,CACA,mC1B26FJ,C0Bt6FI,aAVF,wBAWI,Y1By6FJ,CACF,C0Bt6FI,kCAEE,aAAA,CADA,kB1By6FN,C0Bn6FE,6FAGE,SAAA,CACA,mC1Bq6FJ,C0B/5FE,4FAGE,+B1Bi6FJ,C0B15FE,oBACE,wB1B45FJ,C0Bx5FE,kEAGE,mB1B05FJ,C0Bv5FI,uFAIE,UAAA,CAHA,aAAA,CACA,kBAAA,CACA,kB1B45FN,C0Bt5FE,sBACE,mB1Bw5FJ,C0Br5FI,6BAIE,UAAA,CAHA,aAAA,CACA,mBAAA,CACA,mB1Bw5FN,C0Bl5FE,4CAEE,mB1Bo5FJ,C0Bj5FI,0DAIE,UAAA,CAHA,aAAA,CACA,kBAAA,CACA,kB1Bq5FN,C2Bx+FE,2BACE,a3B2+FJ,CK1zFI,wCsBlLF,2BAKI,e3B2+FJ,CACF,C2Bx+FI,6BAGE,yBAAA,CACA,eAAA,CACA,iBAAA,CAJA,yBAAA,CAAA,sBAAA,CAAA,iB3B6+FN,C4Bv/FE,0EAGE,kCAAA,CAAA,0B5B0/FJ,C4Bt/FE,uBACE,4C5Bw/FJ,C4Bp/FE,uBACE,4C5Bs/FJ,C4Bl/FE,4BACE,qC5Bo/FJ,C4Bj/FI,mCACE,a5Bm/FN,C4B/+FI,kCACE,a5Bi/FN,C4B5+FE,0BAME,eAAA,CALA,aAAA,CACA,YAAA,CAGA,aAAA,CADA,kBAAA,CADA,mB5Bi/FJ,C4B3+FI,uCACE,e5B6+FN,C4Bz+FI,sCACE,kB5B2+FN,C6B7hGA,MACE,8L7BgiGF,C6BvhGE,oBAGE,iBAAA,CAEA,gBAAA,CADA,a7ByhGJ,C6BrhGI,wCACE,uB7BuhGN,C6BnhGI,gCAEE,eAAA,CADA,gB7BshGN,C6B/gGM,wCACE,mB7BihGR,C6B5gGI,0BAEE,UAAA,CADA,a7B+gGN,C6BzgGE,oBAME,4BAAA,CACA,6BAAA,CACA,cAAA,CALA,aAAA,CACA,eAAA,CACA,+B7B4gGJ,C6BtgGI,8BACE,iC7BwgGN,C6BpgGI,wCAEE,uCAAA,CADA,Y7BugGN,C6BlgGI,0BAME,6BAAA,CAMA,UAAA,CAPA,WAAA,CAEA,yCAAA,CAAA,iCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CARA,iBAAA,CAEA,WAAA,CADA,SAAA,CAQA,sBAAA,CACA,yBAAA,CAPA,U7B4gGN,C6BjgGM,oCAEE,UAAA,CADA,UAAA,CAEA,wB7BmgGR,C6B9/FI,wEAEE,Y7B+/FN,C8BvlGE,+DAGE,mBAAA,CACA,cAAA,CACA,uB9B0lGJ,C8BvlGI,2EAGE,iBAAA,CADA,eAAA,CADA,a9B6lGN,C+BxmGE,6BAEE,sC/B2mGJ,C+BxmGE,cACE,yC/B0mGJ,C+BvmGE,sIASE,oC/BymGJ,C+BtmGE,2EAKE,qC/BwmGJ,C+BrmGE,wGAOE,oC/BumGJ,C+BpmGE,yFAME,qC/BsmGJ,C+BnmGE,6BAEE,kC/BqmGJ,C+BlmGE,6CAGE,sC/BomGJ,C+BjmGE,4DAIE,sC/BmmGJ,C+BhmGE,4DAIE,qC/BkmGJ,C+B/lGE,yFAME,qC/BimGJ,C+B9lGE,2EAKE,sC/BgmGJ,C+B7lGE,wHAQE,qC/B+lGJ,C+B5lGE,8BAIE,mBAAA,CAFA,gBAAA,CACA,gB/B+lGJ,C+B3lGE,eACE,4C/B6lGJ,C+B1lGE,eACE,4C/B4lGJ,C+BxlGE,gBAIE,wCAAA,CAHA,aAAA,CACA,wBAAA,CACA,wB/B2lGJ,C+BtlGE,iCAQE,wCAAA,CACA,+DAAA,CAFA,uCAAA,CAGA,0BAAA,CAPA,UAAA,CADA,oBAAA,CAGA,2BAAA,CADA,2BAAA,CAEA,2BAAA,CALA,uBAAA,CAAA,eAAA,CAUA,wBAAA,CAAA,qBAAA,CAAA,oBAAA,CAAA,gB/BwlGJ,C+B/kGA,gBACE,iBAAA,CACA,e/BklGF,C+B9kGE,yCAEE,aAAA,CACA,S/BglGJ,C+B3kGE,mBACE,Y/B6kGJ,C+BxkGE,oBACE,Q/B0kGJ,C+BrkGE,yBAIE,wCAAA,CADA,eAAA,CADA,oDAAA,CAGA,wBAAA,CAAA,qBAAA,CAAA,oBAAA,CAAA,gB/BukGJ,C+BnkGE,2BAEE,+DAAA,CADA,2B/BskGJ,C+BlkGI,+BACE,uCAAA,CACA,gB/BokGN,C+B/jGE,sBACE,MAAA,CACA,e/BikGJ,C+BvjGE,4BAGE,mBAAA,CADA,aAAA,CADA,Y/B4jGJ,C+BvjGI,iCACE,e/ByjGN,CKxlGI,wC0BuCA,uBACE,iB/BojGJ,C+BjjGI,4BACE,eAAA,CACA,e/BmjGN,C+B/iGI,4BACE,e/BijGN,C+B5iGE,4BAEE,eAAA,CADA,iB/B+iGJ,C+B3iGI,iCACE,eAAA,CACA,e/B6iGN,CACF,CD3xGI,yDAKE,+BAAA,CACA,8BAAA,CAFA,aAAA,CADA,QAAA,CADA,iBCkyGN,CD1xGI,uBAEE,uCAAA,CADA,cC6xGN,CDvuGQ,iHAEE,WAnDgB,CAkDhB,kBCkvGV,CDnvGQ,6HAEE,WAnDgB,CAkDhB,kBC8vGV,CD/vGQ,6HAEE,WAnDgB,CAkDhB,kBC0wGV,CD3wGQ,oHAEE,WAnDgB,CAkDhB,kBCsxGV,CDvxGQ,0HAEE,WAnDgB,CAkDhB,kBCkyGV,CDnyGQ,uHAEE,WAnDgB,CAkDhB,kBC8yGV,CD/yGQ,uHAEE,WAnDgB,CAkDhB,kBC0zGV,CD3zGQ,6HAEE,WAnDgB,CAkDhB,kBCs0GV,CDv0GQ,yCAEE,WAnDgB,CAkDhB,kBC00GV,CD30GQ,yCAEE,WAnDgB,CAkDhB,kBC80GV,CD/0GQ,0CAEE,WAnDgB,CAkDhB,kBCk1GV,CDn1GQ,uCAEE,WAnDgB,CAkDhB,kBCs1GV,CDv1GQ,wCAEE,WAnDgB,CAkDhB,kBC01GV,CD31GQ,sCAEE,WAnDgB,CAkDhB,kBC81GV,CD/1GQ,wCAEE,WAnDgB,CAkDhB,kBCk2GV,CDn2GQ,oCAEE,WAnDgB,CAkDhB,kBCs2GV,CDv2GQ,2CAEE,WAnDgB,CAkDhB,kBC02GV,CD32GQ,qCAEE,WAnDgB,CAkDhB,kBC82GV,CD/2GQ,oCAEE,WAnDgB,CAkDhB,kBCk3GV,CDn3GQ,kCAEE,WAnDgB,CAkDhB,kBCs3GV,CDv3GQ,qCAEE,WAnDgB,CAkDhB,kBC03GV,CD33GQ,mCAEE,WAnDgB,CAkDhB,kBC83GV,CD/3GQ,qCAEE,WAnDgB,CAkDhB,kBCk4GV,CDn4GQ,wCAEE,WAnDgB,CAkDhB,kBCs4GV,CDv4GQ,sCAEE,WAnDgB,CAkDhB,kBC04GV,CD34GQ,2CAEE,WAnDgB,CAkDhB,kBC84GV,CDj4GQ,iCAEE,WARgB,CAOhB,iBCo4GV,CDr4GQ,uCAEE,WARgB,CAOhB,iBCw4GV,CDz4GQ,mCAEE,WARgB,CAOhB,iBC44GV,CgC/9GE,4BAIE,yDAAA,CAHA,YAAA,CACA,QAAA,CACA,UhCm+GJ,CgC/9GI,aAPF,4BAQI,aAAA,CACA,OhCk+GJ,CACF,CgC99GI,wJAGE,QhCg+GN,CgC79GM,uKACE,wBAAA,CACA,yBhCi+GR,CgC59GI,wCACE,QhC89GN,CgCz9GE,wBAKE,mBAAA,CAHA,YAAA,CACA,cAAA,CACA,YAAA,CAHA,iBhC+9GJ,CgCr9GI,8BAGE,QAAA,CACA,SAAA,CAHA,iBAAA,CACA,OhCy9GN,CgCp9GM,4CAEE,sCAAA,CADA,+BhCu9GR,CgCn9GQ,4DACE,ahCq9GV,CgCh9GM,0CAEE,uCAAA,CADA,kBhCm9GR,CgC98GM,wDAEE,uCAAA,CADA,YhCi9GR,CgC38GI,8BAOE,qCAAA,CAHA,uCAAA,CAIA,cAAA,CAFA,gBAAA,CADA,eAAA,CAFA,+BAAA,CAMA,qBAAA,CAPA,UAAA,CADA,ShCq9GN,CgC18GM,oCACE,+BhC48GR,CiCviHA,MACE,mVAAA,CAEA,4VjC2iHF,CiCjiHE,4BAEE,oBAAA,CADA,iBjCqiHJ,CiChiHI,4CAGE,SAAA,CAFA,iBAAA,CACA,SjCmiHN,CiC/hHM,sDAEE,SAAA,CADA,UjCkiHR,CiC3hHE,+CAEE,SAAA,CADA,UjC8hHJ,CiCzhHE,wCAME,qDAAA,CAIA,UAAA,CALA,aAAA,CAFA,WAAA,CAIA,0CAAA,CAAA,kCAAA,CACA,6BAAA,CAAA,qBAAA,CACA,yBAAA,CAAA,iBAAA,CARA,iBAAA,CACA,SAAA,CAEA,YjCiiHJ,CiCxhHI,kDAEE,SAAA,CADA,YjC2hHN,CiCrhHE,gEACE,wBT8Va,CS7Vb,mDAAA,CAAA,2CjCuhHJ,CKl7GI,mC6B5JA,oBACE,UAAA,CAIA,mBAAA,CADA,kBAAA,CADA,YAAA,CADA,alCqlHJ,CkCxkHI,sDACE,WAAA,CAEA,iBAAA,CADA,clCglHN,CkC5kHM,kCACE,UAAA,CAEA,aAAA,CADA,kBlC+kHR,CACF","file":"src/assets/stylesheets/main.scss","sourcesContent":["////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Keyboard key\n .keys {\n\n // Keyboard key icon\n kbd::before,\n kbd::after {\n position: relative;\n margin: 0;\n color: inherit;\n -moz-osx-font-smoothing: initial;\n -webkit-font-smoothing: initial;\n }\n\n // Surrounding text\n span {\n padding: 0 px2em(3.2px);\n color: var(--md-default-fg-color--light);\n }\n\n // Define keyboard keys with left icon\n @each $name, $code in (\n\n // Modifiers\n \"alt\": \"\\2387\",\n \"left-alt\": \"\\2387\",\n \"right-alt\": \"\\2387\",\n \"command\": \"\\2318\",\n \"left-command\": \"\\2318\",\n \"right-command\": \"\\2318\",\n \"control\": \"\\2303\",\n \"left-control\": \"\\2303\",\n \"right-control\": \"\\2303\",\n \"meta\": \"\\25C6\",\n \"left-meta\": \"\\25C6\",\n \"right-meta\": \"\\25C6\",\n \"option\": \"\\2325\",\n \"left-option\": \"\\2325\",\n \"right-option\": \"\\2325\",\n \"shift\": \"\\21E7\",\n \"left-shift\": \"\\21E7\",\n \"right-shift\": \"\\21E7\",\n \"super\": \"\\2756\",\n \"left-super\": \"\\2756\",\n \"right-super\": \"\\2756\",\n \"windows\": \"\\229E\",\n \"left-windows\": \"\\229E\",\n \"right-windows\": \"\\229E\",\n\n // Other keys\n \"arrow-down\": \"\\2193\",\n \"arrow-left\": \"\\2190\",\n \"arrow-right\": \"\\2192\",\n \"arrow-up\": \"\\2191\",\n \"backspace\": \"\\232B\",\n \"backtab\": \"\\21E4\",\n \"caps-lock\": \"\\21EA\",\n \"clear\": \"\\2327\",\n \"context-menu\": \"\\2630\",\n \"delete\": \"\\2326\",\n \"eject\": \"\\23CF\",\n \"end\": \"\\2913\",\n \"escape\": \"\\238B\",\n \"home\": \"\\2912\",\n \"insert\": \"\\2380\",\n \"page-down\": \"\\21DF\",\n \"page-up\": \"\\21DE\",\n \"print-screen\": \"\\2399\"\n ) {\n .key-#{$name} {\n &::before {\n padding-right: px2em(6.4px);\n content: $code;\n }\n }\n }\n\n // Define keyboard keys with right icon\n @each $name, $code in (\n \"tab\": \"\\21E5\",\n \"num-enter\": \"\\2324\",\n \"enter\": \"\\23CE\"\n ) {\n .key-#{$name} {\n &::after {\n padding-left: px2em(6.4px);\n content: $code;\n }\n }\n }\n }\n}\n","@charset \"UTF-8\";\nhtml {\n box-sizing: border-box;\n text-size-adjust: none;\n}\n\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\nbody {\n margin: 0;\n}\n\na,\nbutton,\nlabel,\ninput {\n -webkit-tap-highlight-color: transparent;\n}\n\na {\n color: inherit;\n text-decoration: none;\n}\n\nhr {\n display: block;\n box-sizing: content-box;\n height: 0.05rem;\n padding: 0;\n overflow: visible;\n border: 0;\n}\n\nsmall {\n font-size: 80%;\n}\n\nsub,\nsup {\n line-height: 1em;\n}\n\nimg {\n border-style: none;\n}\n\ntable {\n border-collapse: separate;\n border-spacing: 0;\n}\n\ntd,\nth {\n font-weight: 400;\n vertical-align: top;\n}\n\nbutton {\n margin: 0;\n padding: 0;\n font-size: inherit;\n font-family: inherit;\n background: transparent;\n border: 0;\n}\n\ninput {\n border: 0;\n outline: none;\n}\n\n:root {\n --md-default-fg-color: hsla(0, 0%, 0%, 0.87);\n --md-default-fg-color--light: hsla(0, 0%, 0%, 0.54);\n --md-default-fg-color--lighter: hsla(0, 0%, 0%, 0.32);\n --md-default-fg-color--lightest: hsla(0, 0%, 0%, 0.07);\n --md-default-bg-color: hsla(0, 0%, 100%, 1);\n --md-default-bg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-default-bg-color--lighter: hsla(0, 0%, 100%, 0.3);\n --md-default-bg-color--lightest: hsla(0, 0%, 100%, 0.12);\n --md-primary-fg-color: hsla(231, 48%, 48%, 1);\n --md-primary-fg-color--light: hsla(231, 44%, 56%, 1);\n --md-primary-fg-color--dark: hsla(232, 54%, 41%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-accent-fg-color: hsla(231, 99%, 66%, 1);\n --md-accent-fg-color--transparent: hsla(231, 99%, 66%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n:root > * {\n --md-code-fg-color: hsla(200, 18%, 26%, 1);\n --md-code-bg-color: hsla(0, 0%, 96%, 1);\n --md-code-hl-color: hsla(60, 100%, 50%, 0.5);\n --md-code-hl-number-color: hsla(0, 67%, 50%, 1);\n --md-code-hl-special-color: hsla(340, 83%, 47%, 1);\n --md-code-hl-function-color: hsla(291, 45%, 50%, 1);\n --md-code-hl-constant-color: hsla(250, 63%, 60%, 1);\n --md-code-hl-keyword-color: hsla(219, 54%, 51%, 1);\n --md-code-hl-string-color: hsla(150, 63%, 30%, 1);\n --md-code-hl-name-color: var(--md-code-fg-color);\n --md-code-hl-operator-color: var(--md-default-fg-color--light);\n --md-code-hl-punctuation-color: var(--md-default-fg-color--light);\n --md-code-hl-comment-color: var(--md-default-fg-color--light);\n --md-code-hl-generic-color: var(--md-default-fg-color--light);\n --md-code-hl-variable-color: var(--md-default-fg-color--light);\n --md-typeset-color: var(--md-default-fg-color);\n --md-typeset-a-color: var(--md-primary-fg-color);\n --md-typeset-mark-color: hsla(60, 100%, 50%, 0.5);\n --md-typeset-del-color: hsla(6, 90%, 60%, 0.15);\n --md-typeset-ins-color: hsla(150, 90%, 44%, 0.15);\n --md-typeset-kbd-color: hsla(0, 0%, 98%, 1);\n --md-typeset-kbd-accent-color: hsla(0, 100%, 100%, 1);\n --md-typeset-kbd-border-color: hsla(0, 0%, 72%, 1);\n --md-admonition-fg-color: var(--md-default-fg-color);\n --md-admonition-bg-color: var(--md-default-bg-color);\n --md-footer-fg-color: hsla(0, 0%, 100%, 1);\n --md-footer-fg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-footer-fg-color--lighter: hsla(0, 0%, 100%, 0.3);\n --md-footer-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-footer-bg-color--dark: hsla(0, 0%, 0%, 0.32);\n}\n\n.md-icon svg {\n display: block;\n width: 1.2rem;\n height: 1.2rem;\n fill: currentColor;\n}\n\nbody {\n -webkit-font-smoothing: antialiased;\n -moz-osx-font-smoothing: grayscale;\n}\n\nbody,\ninput {\n color: var(--md-typeset-color);\n font-feature-settings: \"kern\", \"liga\";\n font-family: var(--md-text-font-family, _), -apple-system, BlinkMacSystemFont, Helvetica, Arial, sans-serif;\n}\n\ncode,\npre,\nkbd {\n color: var(--md-typeset-color);\n font-feature-settings: \"kern\";\n font-family: var(--md-code-font-family, _), SFMono-Regular, Consolas, Menlo, monospace;\n}\n\n:root {\n --md-typeset-table--ascending: svg-load(\"material/arrow-down.svg\");\n --md-typeset-table--descending: svg-load(\"material/arrow-up.svg\");\n}\n\n.md-typeset {\n font-size: 0.8rem;\n line-height: 1.6;\n color-adjust: exact;\n}\n@media print {\n .md-typeset {\n font-size: 0.68rem;\n }\n}\n.md-typeset ul,\n.md-typeset ol,\n.md-typeset dl,\n.md-typeset figure,\n.md-typeset blockquote,\n.md-typeset pre {\n margin: 1em 0;\n}\n.md-typeset h1 {\n margin: 0 0 1.25em;\n color: var(--md-default-fg-color--light);\n font-weight: 300;\n font-size: 2em;\n line-height: 1.3;\n letter-spacing: -0.01em;\n}\n.md-typeset h2 {\n margin: 1.6em 0 0.64em;\n font-weight: 300;\n font-size: 1.5625em;\n line-height: 1.4;\n letter-spacing: -0.01em;\n}\n.md-typeset h3 {\n margin: 1.6em 0 0.8em;\n font-weight: 400;\n font-size: 1.25em;\n line-height: 1.5;\n letter-spacing: -0.01em;\n}\n.md-typeset h2 + h3 {\n margin-top: 0.8em;\n}\n.md-typeset h4 {\n margin: 1em 0;\n font-weight: 700;\n letter-spacing: -0.01em;\n}\n.md-typeset h5,\n.md-typeset h6 {\n margin: 1.25em 0;\n color: var(--md-default-fg-color--light);\n font-weight: 700;\n font-size: 0.8em;\n letter-spacing: -0.01em;\n}\n.md-typeset h5 {\n text-transform: uppercase;\n}\n.md-typeset hr {\n display: flow-root;\n margin: 1.5em 0;\n border-bottom: 0.05rem solid var(--md-default-fg-color--lightest);\n}\n.md-typeset a {\n color: var(--md-typeset-a-color);\n word-break: break-word;\n}\n.md-typeset a, .md-typeset a::before {\n transition: color 125ms;\n}\n.md-typeset a:focus, .md-typeset a:hover {\n color: var(--md-accent-fg-color);\n}\n.md-typeset a.focus-visible {\n outline-color: var(--md-accent-fg-color);\n outline-offset: 0.2rem;\n}\n.md-typeset code,\n.md-typeset pre,\n.md-typeset kbd {\n color: var(--md-code-fg-color);\n direction: ltr;\n}\n@media print {\n .md-typeset code,\n.md-typeset pre,\n.md-typeset kbd {\n white-space: pre-wrap;\n }\n}\n.md-typeset code {\n padding: 0 0.2941176471em;\n font-size: 0.85em;\n word-break: break-word;\n background-color: var(--md-code-bg-color);\n border-radius: 0.1rem;\n box-decoration-break: clone;\n}\n.md-typeset code:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n}\n.md-typeset h1 code,\n.md-typeset h2 code,\n.md-typeset h3 code,\n.md-typeset h4 code,\n.md-typeset h5 code,\n.md-typeset h6 code {\n margin: initial;\n padding: initial;\n background-color: transparent;\n box-shadow: none;\n}\n.md-typeset a code {\n color: currentColor;\n}\n.md-typeset pre {\n position: relative;\n display: flow-root;\n line-height: 1.4;\n}\n.md-typeset pre > code {\n display: block;\n margin: 0;\n padding: 0.7720588235em 1.1764705882em;\n overflow: auto;\n word-break: normal;\n box-shadow: none;\n box-decoration-break: slice;\n touch-action: auto;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n}\n.md-typeset pre > code:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n}\n.md-typeset pre > code::-webkit-scrollbar {\n width: 0.2rem;\n height: 0.2rem;\n}\n.md-typeset pre > code::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n}\n.md-typeset pre > code::-webkit-scrollbar-thumb:hover {\n background-color: var(--md-accent-fg-color);\n}\n@media screen and (max-width: 44.9375em) {\n .md-typeset > pre {\n margin: 1em -0.8rem;\n }\n .md-typeset > pre code {\n border-radius: 0;\n }\n}\n.md-typeset kbd {\n display: inline-block;\n padding: 0 0.6666666667em;\n color: var(--md-default-fg-color);\n font-size: 0.75em;\n vertical-align: text-top;\n word-break: break-word;\n background-color: var(--md-typeset-kbd-color);\n border-radius: 0.1rem;\n box-shadow: 0 0.1rem 0 0.05rem var(--md-typeset-kbd-border-color), 0 0.1rem 0 var(--md-typeset-kbd-border-color), 0 -0.1rem 0.2rem var(--md-typeset-kbd-accent-color) inset;\n}\n.md-typeset mark {\n color: inherit;\n word-break: break-word;\n background-color: var(--md-typeset-mark-color);\n box-decoration-break: clone;\n}\n.md-typeset abbr {\n text-decoration: none;\n border-bottom: 0.05rem dotted var(--md-default-fg-color--light);\n cursor: help;\n}\n@media (hover: none) {\n .md-typeset abbr {\n position: relative;\n }\n .md-typeset abbr[title]:focus::after, .md-typeset abbr[title]:hover::after {\n box-shadow: 0 2px 2px 0 rgba(0, 0, 0, 0.14), 0 1px 5px 0 rgba(0, 0, 0, 0.12), 0 3px 1px -2px rgba(0, 0, 0, 0.2);\n position: absolute;\n left: 0;\n display: inline-block;\n width: auto;\n min-width: max-content;\n max-width: 80%;\n margin-top: 2em;\n padding: 0.2rem 0.3rem;\n color: var(--md-default-bg-color);\n font-size: 0.7rem;\n background-color: var(--md-default-fg-color);\n border-radius: 0.1rem;\n content: attr(title);\n }\n}\n.md-typeset small {\n opacity: 0.75;\n}\n.md-typeset sup,\n.md-typeset sub {\n margin-left: 0.078125em;\n}\n[dir=rtl] .md-typeset sup,\n[dir=rtl] .md-typeset sub {\n margin-right: 0.078125em;\n margin-left: initial;\n}\n.md-typeset blockquote {\n display: flow-root;\n padding-left: 0.6rem;\n color: var(--md-default-fg-color--light);\n border-left: 0.2rem solid var(--md-default-fg-color--lighter);\n}\n[dir=rtl] .md-typeset blockquote {\n padding-right: 0.6rem;\n padding-left: initial;\n border-right: 0.2rem solid var(--md-default-fg-color--lighter);\n border-left: initial;\n}\n.md-typeset ul {\n list-style-type: disc;\n}\n.md-typeset ul,\n.md-typeset ol {\n display: flow-root;\n margin-left: 0.625em;\n padding: 0;\n}\n[dir=rtl] .md-typeset ul,\n[dir=rtl] .md-typeset ol {\n margin-right: 0.625em;\n margin-left: initial;\n}\n.md-typeset ul ol,\n.md-typeset ol ol {\n list-style-type: lower-alpha;\n}\n.md-typeset ul ol ol,\n.md-typeset ol ol ol {\n list-style-type: lower-roman;\n}\n.md-typeset ul li,\n.md-typeset ol li {\n margin-bottom: 0.5em;\n margin-left: 1.25em;\n}\n[dir=rtl] .md-typeset ul li,\n[dir=rtl] .md-typeset ol li {\n margin-right: 1.25em;\n margin-left: initial;\n}\n.md-typeset ul li p,\n.md-typeset ul li blockquote,\n.md-typeset ol li p,\n.md-typeset ol li blockquote {\n margin: 0.5em 0;\n}\n.md-typeset ul li:last-child,\n.md-typeset ol li:last-child {\n margin-bottom: 0;\n}\n.md-typeset ul li ul,\n.md-typeset ul li ol,\n.md-typeset ol li ul,\n.md-typeset ol li ol {\n margin: 0.5em 0 0.5em 0.625em;\n}\n[dir=rtl] .md-typeset ul li ul,\n[dir=rtl] .md-typeset ul li ol,\n[dir=rtl] .md-typeset ol li ul,\n[dir=rtl] .md-typeset ol li ol {\n margin-right: 0.625em;\n margin-left: initial;\n}\n.md-typeset dd {\n margin: 1em 0 1.5em 1.875em;\n}\n[dir=rtl] .md-typeset dd {\n margin-right: 1.875em;\n margin-left: initial;\n}\n.md-typeset img,\n.md-typeset svg {\n max-width: 100%;\n height: auto;\n}\n.md-typeset img[align=left],\n.md-typeset svg[align=left] {\n margin: 1em;\n margin-left: 0;\n}\n.md-typeset img[align=right],\n.md-typeset svg[align=right] {\n margin: 1em;\n margin-right: 0;\n}\n.md-typeset img[align]:only-child,\n.md-typeset svg[align]:only-child {\n margin-top: 0;\n}\n.md-typeset figure {\n display: flow-root;\n width: fit-content;\n max-width: 100%;\n margin: 0 auto;\n text-align: center;\n}\n.md-typeset figure img {\n display: block;\n}\n.md-typeset figcaption {\n max-width: 24rem;\n margin: 1em auto 2em;\n font-style: italic;\n}\n.md-typeset iframe {\n max-width: 100%;\n}\n.md-typeset table:not([class]) {\n display: inline-block;\n max-width: 100%;\n overflow: auto;\n font-size: 0.64rem;\n background-color: var(--md-default-bg-color);\n border-radius: 0.1rem;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.05), 0 0 0.05rem rgba(0, 0, 0, 0.1);\n touch-action: auto;\n}\n@media print {\n .md-typeset table:not([class]) {\n display: table;\n }\n}\n.md-typeset table:not([class]) + * {\n margin-top: 1.5em;\n}\n.md-typeset table:not([class]) th > *:first-child,\n.md-typeset table:not([class]) td > *:first-child {\n margin-top: 0;\n}\n.md-typeset table:not([class]) th > *:last-child,\n.md-typeset table:not([class]) td > *:last-child {\n margin-bottom: 0;\n}\n.md-typeset table:not([class]) th:not([align]),\n.md-typeset table:not([class]) td:not([align]) {\n text-align: left;\n}\n[dir=rtl] .md-typeset table:not([class]) th:not([align]),\n[dir=rtl] .md-typeset table:not([class]) td:not([align]) {\n text-align: right;\n}\n.md-typeset table:not([class]) th {\n min-width: 5rem;\n padding: 0.9375em 1.25em;\n color: var(--md-default-bg-color);\n vertical-align: top;\n background-color: var(--md-default-fg-color--light);\n}\n.md-typeset table:not([class]) th a {\n color: inherit;\n}\n.md-typeset table:not([class]) td {\n padding: 0.9375em 1.25em;\n vertical-align: top;\n border-top: 0.05rem solid var(--md-default-fg-color--lightest);\n}\n.md-typeset table:not([class]) tr {\n transition: background-color 125ms;\n}\n.md-typeset table:not([class]) tr:hover {\n background-color: rgba(0, 0, 0, 0.035);\n box-shadow: 0 0.05rem 0 var(--md-default-bg-color) inset;\n}\n.md-typeset table:not([class]) tr:first-child td {\n border-top: 0;\n}\n.md-typeset table:not([class]) a {\n word-break: normal;\n}\n.md-typeset table th[role=columnheader] {\n cursor: pointer;\n}\n.md-typeset table th[role=columnheader]::after {\n display: inline-block;\n width: 1.2em;\n height: 1.2em;\n margin-left: 0.5em;\n vertical-align: sub;\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n.md-typeset table th[role=columnheader][aria-sort=ascending]::after {\n background-color: currentColor;\n mask-image: var(--md-typeset-table--ascending);\n}\n.md-typeset table th[role=columnheader][aria-sort=descending]::after {\n background-color: currentColor;\n mask-image: var(--md-typeset-table--descending);\n}\n.md-typeset__scrollwrap {\n margin: 1em -0.8rem;\n overflow-x: auto;\n touch-action: auto;\n}\n.md-typeset__table {\n display: inline-block;\n margin-bottom: 0.5em;\n padding: 0 0.8rem;\n}\n@media print {\n .md-typeset__table {\n display: block;\n }\n}\nhtml .md-typeset__table table {\n display: table;\n width: 100%;\n margin: 0;\n overflow: hidden;\n}\n\nhtml {\n height: 100%;\n overflow-x: hidden;\n font-size: 125%;\n}\n@media screen and (min-width: 100em) {\n html {\n font-size: 137.5%;\n }\n}\n@media screen and (min-width: 125em) {\n html {\n font-size: 150%;\n }\n}\n\nbody {\n position: relative;\n display: flex;\n flex-direction: column;\n width: 100%;\n min-height: 100%;\n font-size: 0.5rem;\n background-color: var(--md-default-bg-color);\n}\n@media print {\n body {\n display: block;\n }\n}\n@media screen and (max-width: 59.9375em) {\n body[data-md-state=lock] {\n position: fixed;\n }\n}\n\n.md-grid {\n max-width: 61rem;\n margin-right: auto;\n margin-left: auto;\n}\n\n.md-container {\n display: flex;\n flex-direction: column;\n flex-grow: 1;\n}\n@media print {\n .md-container {\n display: block;\n }\n}\n\n.md-main {\n flex-grow: 1;\n}\n.md-main__inner {\n display: flex;\n height: 100%;\n margin-top: 1.5rem;\n}\n\n.md-ellipsis {\n overflow: hidden;\n white-space: nowrap;\n text-overflow: ellipsis;\n}\n\n.md-toggle {\n display: none;\n}\n\n.md-option {\n position: absolute;\n width: 0;\n height: 0;\n opacity: 0;\n}\n.md-option:checked + label:not([hidden]) {\n display: block;\n}\n.md-option.focus-visible + label {\n outline-style: auto;\n outline-color: var(--md-accent-fg-color);\n}\n\n.md-skip {\n position: fixed;\n z-index: -1;\n margin: 0.5rem;\n padding: 0.3rem 0.5rem;\n color: var(--md-default-bg-color);\n font-size: 0.64rem;\n background-color: var(--md-default-fg-color);\n border-radius: 0.1rem;\n outline-color: var(--md-accent-fg-color);\n transform: translateY(0.4rem);\n opacity: 0;\n}\n.md-skip:focus {\n z-index: 10;\n transform: translateY(0);\n opacity: 1;\n transition: transform 250ms cubic-bezier(0.4, 0, 0.2, 1), opacity 175ms 75ms;\n}\n\n@page {\n margin: 25mm;\n}\n.md-announce {\n overflow: auto;\n background-color: var(--md-footer-bg-color);\n}\n@media print {\n .md-announce {\n display: none;\n }\n}\n.md-announce__inner {\n margin: 0.6rem auto;\n padding: 0 0.8rem;\n color: var(--md-footer-fg-color);\n font-size: 0.7rem;\n}\n\n:root {\n --md-clipboard-icon: svg-load(\"material/content-copy.svg\");\n}\n\n.md-clipboard {\n position: absolute;\n top: 0.5em;\n right: 0.5em;\n z-index: 1;\n width: 1.5em;\n height: 1.5em;\n color: var(--md-default-fg-color--lightest);\n border-radius: 0.1rem;\n outline-color: var(--md-accent-fg-color);\n outline-offset: 0.1rem;\n cursor: pointer;\n transition: color 250ms;\n}\n@media print {\n .md-clipboard {\n display: none;\n }\n}\n.md-clipboard:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n}\n:hover > .md-clipboard {\n color: var(--md-default-fg-color--light);\n}\n.md-clipboard:focus, .md-clipboard:hover {\n color: var(--md-accent-fg-color);\n}\n.md-clipboard::after {\n display: block;\n width: 1.125em;\n height: 1.125em;\n margin: 0 auto;\n background-color: currentColor;\n mask-image: var(--md-clipboard-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n.md-clipboard--inline {\n cursor: pointer;\n}\n.md-clipboard--inline code {\n transition: color 250ms, background-color 250ms;\n}\n.md-clipboard--inline:focus code, .md-clipboard--inline:hover code {\n color: var(--md-accent-fg-color);\n background-color: var(--md-accent-fg-color--transparent);\n}\n\n.md-content {\n flex-grow: 1;\n overflow: hidden;\n scroll-padding-top: 51.2rem;\n}\n.md-content__inner {\n margin: 0 0.8rem 1.2rem;\n padding-top: 0.6rem;\n}\n@media screen and (min-width: 76.25em) {\n .md-sidebar--primary:not([hidden]) ~ .md-content > .md-content__inner {\n margin-left: 1.2rem;\n }\n [dir=rtl] .md-sidebar--primary:not([hidden]) ~ .md-content > .md-content__inner {\n margin-right: 1.2rem;\n margin-left: 0.8rem;\n }\n .md-sidebar--secondary:not([hidden]) ~ .md-content > .md-content__inner {\n margin-right: 1.2rem;\n }\n [dir=rtl] .md-sidebar--secondary:not([hidden]) ~ .md-content > .md-content__inner {\n margin-right: 0.8rem;\n margin-left: 1.2rem;\n }\n}\n.md-content__inner::before {\n display: block;\n height: 0.4rem;\n content: \"\";\n}\n.md-content__inner > :last-child {\n margin-bottom: 0;\n}\n.md-content__button {\n float: right;\n margin: 0.4rem 0;\n margin-left: 0.4rem;\n padding: 0;\n}\n@media print {\n .md-content__button {\n display: none;\n }\n}\n[dir=rtl] .md-content__button {\n float: left;\n margin-right: 0.4rem;\n margin-left: initial;\n}\n[dir=rtl] .md-content__button svg {\n transform: scaleX(-1);\n}\n.md-typeset .md-content__button {\n color: var(--md-default-fg-color--lighter);\n}\n.md-content__button svg {\n display: inline;\n vertical-align: top;\n}\n\n.md-dialog {\n box-shadow: 0 2px 2px 0 rgba(0, 0, 0, 0.14), 0 1px 5px 0 rgba(0, 0, 0, 0.12), 0 3px 1px -2px rgba(0, 0, 0, 0.2);\n position: fixed;\n right: 0.8rem;\n bottom: 0.8rem;\n left: initial;\n z-index: 2;\n min-width: 11.1rem;\n padding: 0.4rem 0.6rem;\n background-color: var(--md-default-fg-color);\n border-radius: 0.1rem;\n transform: translateY(100%);\n opacity: 0;\n transition: transform 0ms 400ms, opacity 400ms;\n pointer-events: none;\n}\n@media print {\n .md-dialog {\n display: none;\n }\n}\n[dir=rtl] .md-dialog {\n right: initial;\n left: 0.8rem;\n}\n.md-dialog[data-md-state=open] {\n transform: translateY(0);\n opacity: 1;\n transition: transform 400ms cubic-bezier(0.075, 0.85, 0.175, 1), opacity 400ms;\n pointer-events: initial;\n}\n.md-dialog__inner {\n color: var(--md-default-bg-color);\n font-size: 0.7rem;\n}\n\n.md-typeset .md-button {\n display: inline-block;\n padding: 0.625em 2em;\n color: var(--md-primary-fg-color);\n font-weight: 700;\n border: 0.1rem solid currentColor;\n border-radius: 0.1rem;\n transition: color 125ms, background-color 125ms, border-color 125ms;\n}\n.md-typeset .md-button--primary {\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n border-color: var(--md-primary-fg-color);\n}\n.md-typeset .md-button:focus, .md-typeset .md-button:hover {\n color: var(--md-accent-bg-color);\n background-color: var(--md-accent-fg-color);\n border-color: var(--md-accent-fg-color);\n}\n.md-typeset .md-input {\n height: 1.8rem;\n padding: 0 0.6rem;\n font-size: 0.8rem;\n border-radius: 0.1rem;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.1), 0 0.025rem 0.05rem rgba(0, 0, 0, 0.1);\n transition: box-shadow 250ms;\n}\n.md-typeset .md-input:focus, .md-typeset .md-input:hover {\n box-shadow: 0 0.4rem 1rem rgba(0, 0, 0, 0.15), 0 0.025rem 0.05rem rgba(0, 0, 0, 0.15);\n}\n.md-typeset .md-input--stretch {\n width: 100%;\n}\n\n.md-header {\n position: sticky;\n top: 0;\n right: 0;\n left: 0;\n z-index: 2;\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n box-shadow: 0 0 0.2rem rgba(0, 0, 0, 0), 0 0.2rem 0.4rem rgba(0, 0, 0, 0);\n}\n@media print {\n .md-header {\n display: none;\n }\n}\n.md-header[data-md-state=shadow] {\n box-shadow: 0 0 0.2rem rgba(0, 0, 0, 0.1), 0 0.2rem 0.4rem rgba(0, 0, 0, 0.2);\n transition: transform 250ms cubic-bezier(0.1, 0.7, 0.1, 1), box-shadow 250ms;\n}\n.md-header[data-md-state=hidden] {\n transform: translateY(-100%);\n transition: transform 250ms cubic-bezier(0.8, 0, 0.6, 1), box-shadow 250ms;\n}\n.md-header__inner {\n display: flex;\n align-items: center;\n padding: 0 0.2rem;\n}\n.md-header__button {\n position: relative;\n z-index: 1;\n margin: 0.2rem;\n padding: 0.4rem;\n color: currentColor;\n vertical-align: middle;\n outline-color: var(--md-accent-fg-color);\n cursor: pointer;\n transition: opacity 250ms;\n}\n.md-header__button:hover {\n opacity: 0.7;\n}\n.md-header__button:not([hidden]) {\n display: inline-block;\n}\n.md-header__button:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n}\n.md-header__button.md-logo {\n margin: 0.2rem;\n padding: 0.4rem;\n}\n@media screen and (max-width: 76.1875em) {\n .md-header__button.md-logo {\n display: none;\n }\n}\n.md-header__button.md-logo img,\n.md-header__button.md-logo svg {\n display: block;\n width: 1.2rem;\n height: 1.2rem;\n fill: currentColor;\n}\n@media screen and (min-width: 60em) {\n .md-header__button[for=__search] {\n display: none;\n }\n}\n.no-js .md-header__button[for=__search] {\n display: none;\n}\n[dir=rtl] .md-header__button[for=__search] svg {\n transform: scaleX(-1);\n}\n@media screen and (min-width: 76.25em) {\n .md-header__button[for=__drawer] {\n display: none;\n }\n}\n.md-header__topic {\n position: absolute;\n display: flex;\n max-width: 100%;\n transition: transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 150ms;\n}\n.md-header__topic + .md-header__topic {\n z-index: -1;\n transform: translateX(1.25rem);\n opacity: 0;\n transition: transform 400ms cubic-bezier(1, 0.7, 0.1, 0.1), opacity 150ms;\n pointer-events: none;\n}\n[dir=rtl] .md-header__topic + .md-header__topic {\n transform: translateX(-1.25rem);\n}\n.md-header__title {\n flex-grow: 1;\n height: 2.4rem;\n margin-right: 0.4rem;\n margin-left: 1rem;\n font-size: 0.9rem;\n line-height: 2.4rem;\n}\n.md-header__title[data-md-state=active] .md-header__topic {\n z-index: -1;\n transform: translateX(-1.25rem);\n opacity: 0;\n transition: transform 400ms cubic-bezier(1, 0.7, 0.1, 0.1), opacity 150ms;\n pointer-events: none;\n}\n[dir=rtl] .md-header__title[data-md-state=active] .md-header__topic {\n transform: translateX(1.25rem);\n}\n.md-header__title[data-md-state=active] .md-header__topic + .md-header__topic {\n z-index: 0;\n transform: translateX(0);\n opacity: 1;\n transition: transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 150ms;\n pointer-events: initial;\n}\n.md-header__title > .md-header__ellipsis {\n position: relative;\n width: 100%;\n height: 100%;\n}\n.md-header__option {\n display: flex;\n flex-shrink: 0;\n max-width: 100%;\n white-space: nowrap;\n transition: max-width 0ms 250ms, opacity 250ms 250ms;\n}\n[data-md-toggle=search]:checked ~ .md-header .md-header__option {\n max-width: 0;\n opacity: 0;\n transition: max-width 0ms, opacity 0ms;\n}\n.md-header__source {\n display: none;\n}\n@media screen and (min-width: 60em) {\n .md-header__source {\n display: block;\n width: 11.7rem;\n max-width: 11.7rem;\n margin-left: 1rem;\n }\n [dir=rtl] .md-header__source {\n margin-right: 1rem;\n margin-left: initial;\n }\n}\n@media screen and (min-width: 76.25em) {\n .md-header__source {\n margin-left: 1.4rem;\n }\n [dir=rtl] .md-header__source {\n margin-right: 1.4rem;\n }\n}\n\n.md-footer {\n color: var(--md-footer-fg-color);\n background-color: var(--md-footer-bg-color);\n}\n@media print {\n .md-footer {\n display: none;\n }\n}\n.md-footer__inner {\n padding: 0.2rem;\n overflow: auto;\n}\n.md-footer__link {\n display: flex;\n padding-top: 1.4rem;\n padding-bottom: 0.4rem;\n outline-color: var(--md-accent-fg-color);\n transition: opacity 250ms;\n}\n@media screen and (min-width: 45em) {\n .md-footer__link {\n width: 50%;\n }\n}\n.md-footer__link:focus, .md-footer__link:hover {\n opacity: 0.7;\n}\n.md-footer__link--prev {\n float: left;\n}\n@media screen and (max-width: 44.9375em) {\n .md-footer__link--prev {\n width: 25%;\n }\n .md-footer__link--prev .md-footer__title {\n display: none;\n }\n}\n[dir=rtl] .md-footer__link--prev {\n float: right;\n}\n[dir=rtl] .md-footer__link--prev svg {\n transform: scaleX(-1);\n}\n.md-footer__link--next {\n float: right;\n text-align: right;\n}\n@media screen and (max-width: 44.9375em) {\n .md-footer__link--next {\n width: 75%;\n }\n}\n[dir=rtl] .md-footer__link--next {\n float: left;\n text-align: left;\n}\n[dir=rtl] .md-footer__link--next svg {\n transform: scaleX(-1);\n}\n.md-footer__title {\n position: relative;\n flex-grow: 1;\n max-width: calc(100% - 2.4rem);\n padding: 0 1rem;\n font-size: 0.9rem;\n line-height: 2.4rem;\n}\n.md-footer__button {\n margin: 0.2rem;\n padding: 0.4rem;\n}\n.md-footer__direction {\n position: absolute;\n right: 0;\n left: 0;\n margin-top: -1rem;\n padding: 0 1rem;\n font-size: 0.64rem;\n opacity: 0.7;\n}\n\n.md-footer-meta {\n background-color: var(--md-footer-bg-color--dark);\n}\n.md-footer-meta__inner {\n display: flex;\n flex-wrap: wrap;\n justify-content: space-between;\n padding: 0.2rem;\n}\nhtml .md-footer-meta.md-typeset a {\n color: var(--md-footer-fg-color--light);\n}\nhtml .md-footer-meta.md-typeset a:focus, html .md-footer-meta.md-typeset a:hover {\n color: var(--md-footer-fg-color);\n}\n\n.md-footer-copyright {\n width: 100%;\n margin: auto 0.6rem;\n padding: 0.4rem 0;\n color: var(--md-footer-fg-color--lighter);\n font-size: 0.64rem;\n}\n@media screen and (min-width: 45em) {\n .md-footer-copyright {\n width: auto;\n }\n}\n.md-footer-copyright__highlight {\n color: var(--md-footer-fg-color--light);\n}\n\n.md-footer-social {\n margin: 0 0.4rem;\n padding: 0.2rem 0 0.6rem;\n}\n@media screen and (min-width: 45em) {\n .md-footer-social {\n padding: 0.6rem 0;\n }\n}\n.md-footer-social__link {\n display: inline-block;\n width: 1.6rem;\n height: 1.6rem;\n text-align: center;\n}\n.md-footer-social__link::before {\n line-height: 1.9;\n}\n.md-footer-social__link svg {\n max-height: 0.8rem;\n vertical-align: -25%;\n fill: currentColor;\n}\n\n:root {\n --md-nav-icon--prev: svg-load(\"material/arrow-left.svg\");\n --md-nav-icon--next: svg-load(\"material/chevron-right.svg\");\n --md-toc-icon: svg-load(\"material/table-of-contents.svg\");\n}\n\n.md-nav {\n font-size: 0.7rem;\n line-height: 1.3;\n}\n.md-nav__title {\n display: block;\n padding: 0 0.6rem;\n overflow: hidden;\n font-weight: 700;\n text-overflow: ellipsis;\n}\n.md-nav__title .md-nav__button {\n display: none;\n}\n.md-nav__title .md-nav__button img {\n width: auto;\n height: 100%;\n}\n.md-nav__title .md-nav__button.md-logo img,\n.md-nav__title .md-nav__button.md-logo svg {\n display: block;\n width: 2.4rem;\n height: 2.4rem;\n fill: currentColor;\n}\n.md-nav__list {\n margin: 0;\n padding: 0;\n list-style: none;\n}\n.md-nav__item {\n padding: 0 0.6rem;\n}\n.md-nav__item .md-nav__item {\n padding-right: 0;\n}\n[dir=rtl] .md-nav__item .md-nav__item {\n padding-right: 0.6rem;\n padding-left: 0;\n}\n.md-nav__link {\n display: block;\n margin-top: 0.625em;\n overflow: hidden;\n text-overflow: ellipsis;\n cursor: pointer;\n transition: color 125ms;\n scroll-snap-align: start;\n}\n.md-nav__link[data-md-state=blur] {\n color: var(--md-default-fg-color--light);\n}\n.md-nav__item .md-nav__link--active {\n color: var(--md-typeset-a-color);\n}\n.md-nav__item--nested > .md-nav__link {\n color: inherit;\n}\n.md-nav__link:focus, .md-nav__link:hover {\n color: var(--md-accent-fg-color);\n}\n.md-nav__link.focus-visible {\n outline-color: var(--md-accent-fg-color);\n outline-offset: 0.2rem;\n}\n.md-nav--primary .md-nav__link[for=__toc] {\n display: none;\n}\n.md-nav--primary .md-nav__link[for=__toc] .md-icon::after {\n display: block;\n width: 100%;\n height: 100%;\n mask-image: var(--md-toc-icon);\n background-color: currentColor;\n}\n.md-nav--primary .md-nav__link[for=__toc] ~ .md-nav {\n display: none;\n}\n.md-nav__source {\n display: none;\n}\n@media screen and (max-width: 76.1875em) {\n .md-nav--primary, .md-nav--primary .md-nav {\n position: absolute;\n top: 0;\n right: 0;\n left: 0;\n z-index: 1;\n display: flex;\n flex-direction: column;\n height: 100%;\n background-color: var(--md-default-bg-color);\n }\n .md-nav--primary .md-nav__title,\n.md-nav--primary .md-nav__item {\n font-size: 0.8rem;\n line-height: 1.5;\n }\n .md-nav--primary .md-nav__title {\n position: relative;\n height: 5.6rem;\n padding: 3rem 0.8rem 0.2rem;\n color: var(--md-default-fg-color--light);\n font-weight: 400;\n line-height: 2.4rem;\n white-space: nowrap;\n background-color: var(--md-default-fg-color--lightest);\n cursor: pointer;\n }\n .md-nav--primary .md-nav__title .md-nav__icon {\n position: absolute;\n top: 0.4rem;\n left: 0.4rem;\n display: block;\n width: 1.2rem;\n height: 1.2rem;\n margin: 0.2rem;\n }\n [dir=rtl] .md-nav--primary .md-nav__title .md-nav__icon {\n right: 0.4rem;\n left: initial;\n }\n .md-nav--primary .md-nav__title .md-nav__icon::after {\n display: block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-nav-icon--prev);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n .md-nav--primary .md-nav__title ~ .md-nav__list {\n overflow-y: auto;\n background-color: var(--md-default-bg-color);\n box-shadow: 0 0.05rem 0 var(--md-default-fg-color--lightest) inset;\n scroll-snap-type: y mandatory;\n touch-action: pan-y;\n }\n .md-nav--primary .md-nav__title ~ .md-nav__list > :first-child {\n border-top: 0;\n }\n .md-nav--primary .md-nav__title[for=__drawer] {\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n }\n .md-nav--primary .md-nav__title .md-logo {\n position: absolute;\n top: 0.2rem;\n left: 0.2rem;\n display: block;\n margin: 0.2rem;\n padding: 0.4rem;\n }\n [dir=rtl] .md-nav--primary .md-nav__title .md-logo {\n right: 0.2rem;\n left: initial;\n }\n .md-nav--primary .md-nav__list {\n flex: 1;\n }\n .md-nav--primary .md-nav__item {\n padding: 0;\n border-top: 0.05rem solid var(--md-default-fg-color--lightest);\n }\n .md-nav--primary .md-nav__item--nested > .md-nav__link {\n padding-right: 2.4rem;\n }\n [dir=rtl] .md-nav--primary .md-nav__item--nested > .md-nav__link {\n padding-right: 0.8rem;\n padding-left: 2.4rem;\n }\n .md-nav--primary .md-nav__item--active > .md-nav__link {\n color: var(--md-typeset-a-color);\n }\n .md-nav--primary .md-nav__item--active > .md-nav__link:focus, .md-nav--primary .md-nav__item--active > .md-nav__link:hover {\n color: var(--md-accent-fg-color);\n }\n .md-nav--primary .md-nav__link {\n position: relative;\n margin-top: 0;\n padding: 0.6rem 0.8rem;\n }\n .md-nav--primary .md-nav__link .md-nav__icon {\n position: absolute;\n top: 50%;\n right: 0.6rem;\n width: 1.2rem;\n height: 1.2rem;\n margin-top: -0.6rem;\n color: inherit;\n font-size: 1.2rem;\n }\n [dir=rtl] .md-nav--primary .md-nav__link .md-nav__icon {\n right: initial;\n left: 0.6rem;\n }\n .md-nav--primary .md-nav__link .md-nav__icon::after {\n display: block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-nav-icon--next);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n [dir=rtl] .md-nav--primary .md-nav__icon::after {\n transform: scale(-1);\n }\n .md-nav--primary .md-nav--secondary .md-nav__link {\n position: static;\n }\n .md-nav--primary .md-nav--secondary .md-nav {\n position: static;\n background-color: transparent;\n }\n .md-nav--primary .md-nav--secondary .md-nav .md-nav__link {\n padding-left: 1.4rem;\n }\n [dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav__link {\n padding-right: 1.4rem;\n padding-left: initial;\n }\n .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav__link {\n padding-left: 2rem;\n }\n [dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav__link {\n padding-right: 2rem;\n padding-left: initial;\n }\n .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav__link {\n padding-left: 2.6rem;\n }\n [dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav__link {\n padding-right: 2.6rem;\n padding-left: initial;\n }\n .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav .md-nav__link {\n padding-left: 3.2rem;\n }\n [dir=rtl] .md-nav--primary .md-nav--secondary .md-nav .md-nav .md-nav .md-nav .md-nav__link {\n padding-right: 3.2rem;\n padding-left: initial;\n }\n .md-nav--secondary {\n background-color: transparent;\n }\n .md-nav__toggle ~ .md-nav {\n display: flex;\n transform: translateX(100%);\n opacity: 0;\n transition: transform 250ms cubic-bezier(0.8, 0, 0.6, 1), opacity 125ms 50ms;\n }\n [dir=rtl] .md-nav__toggle ~ .md-nav {\n transform: translateX(-100%);\n }\n .md-nav__toggle:checked ~ .md-nav {\n transform: translateX(0);\n opacity: 1;\n transition: transform 250ms cubic-bezier(0.4, 0, 0.2, 1), opacity 125ms 125ms;\n }\n .md-nav__toggle:checked ~ .md-nav > .md-nav__list {\n backface-visibility: hidden;\n }\n}\n@media screen and (max-width: 59.9375em) {\n .md-nav--primary .md-nav__link[for=__toc] {\n display: block;\n padding-right: 2.4rem;\n }\n [dir=rtl] .md-nav--primary .md-nav__link[for=__toc] {\n padding-right: 0.8rem;\n padding-left: 2.4rem;\n }\n .md-nav--primary .md-nav__link[for=__toc] .md-icon::after {\n content: \"\";\n }\n .md-nav--primary .md-nav__link[for=__toc] + .md-nav__link {\n display: none;\n }\n .md-nav--primary .md-nav__link[for=__toc] ~ .md-nav {\n display: flex;\n }\n .md-nav__source {\n display: block;\n padding: 0 0.2rem;\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color--dark);\n }\n}\n@media screen and (min-width: 60em) and (max-width: 76.1875em) {\n .md-nav--integrated .md-nav__link[for=__toc] {\n display: block;\n padding-right: 2.4rem;\n scroll-snap-align: initial;\n }\n [dir=rtl] .md-nav--integrated .md-nav__link[for=__toc] {\n padding-right: 0.8rem;\n padding-left: 2.4rem;\n }\n .md-nav--integrated .md-nav__link[for=__toc] .md-icon::after {\n content: \"\";\n }\n .md-nav--integrated .md-nav__link[for=__toc] + .md-nav__link {\n display: none;\n }\n .md-nav--integrated .md-nav__link[for=__toc] ~ .md-nav {\n display: flex;\n }\n}\n@media screen and (min-width: 60em) {\n .md-nav--secondary .md-nav__title[for=__toc] {\n scroll-snap-align: start;\n }\n .md-nav--secondary .md-nav__title .md-nav__icon {\n display: none;\n }\n}\n@media screen and (min-width: 76.25em) {\n .md-nav {\n transition: max-height 250ms cubic-bezier(0.86, 0, 0.07, 1);\n }\n .md-nav--primary .md-nav__title[for=__drawer] {\n scroll-snap-align: start;\n }\n .md-nav--primary .md-nav__title .md-nav__icon {\n display: none;\n }\n .md-nav__toggle ~ .md-nav {\n display: none;\n }\n .md-nav__toggle:checked ~ .md-nav, .md-nav__toggle:indeterminate ~ .md-nav {\n display: block;\n }\n .md-nav__item--nested > .md-nav > .md-nav__title {\n display: none;\n }\n .md-nav__item--section {\n display: block;\n margin: 1.25em 0;\n }\n .md-nav__item--section:last-child {\n margin-bottom: 0;\n }\n .md-nav__item--section > .md-nav__link {\n display: none;\n }\n .md-nav__item--section > .md-nav {\n display: block;\n }\n .md-nav__item--section > .md-nav > .md-nav__title {\n display: block;\n padding: 0;\n pointer-events: none;\n scroll-snap-align: start;\n }\n .md-nav__item--section > .md-nav > .md-nav__list > .md-nav__item {\n padding: 0;\n }\n .md-nav__icon {\n float: right;\n width: 0.9rem;\n height: 0.9rem;\n transition: transform 250ms;\n }\n [dir=rtl] .md-nav__icon {\n float: left;\n transform: rotate(180deg);\n }\n .md-nav__icon::after {\n display: inline-block;\n width: 100%;\n height: 100%;\n vertical-align: -0.1rem;\n background-color: currentColor;\n mask-image: var(--md-nav-icon--next);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n .md-nav__item--nested .md-nav__toggle:checked ~ .md-nav__link .md-nav__icon, .md-nav__item--nested .md-nav__toggle:indeterminate ~ .md-nav__link .md-nav__icon {\n transform: rotate(90deg);\n }\n .md-nav--lifted > .md-nav__list > .md-nav__item--nested,\n.md-nav--lifted > .md-nav__title {\n display: none;\n }\n .md-nav--lifted > .md-nav__list > .md-nav__item {\n display: none;\n }\n .md-nav--lifted > .md-nav__list > .md-nav__item--active {\n display: block;\n padding: 0;\n }\n .md-nav--lifted > .md-nav__list > .md-nav__item--active > .md-nav__link {\n display: none;\n }\n .md-nav--lifted > .md-nav__list > .md-nav__item--active > .md-nav > .md-nav__title {\n display: block;\n padding: 0 0.6rem;\n pointer-events: none;\n scroll-snap-align: start;\n }\n .md-nav--lifted .md-nav[data-md-level=\"1\"] {\n display: block;\n }\n .md-nav--lifted .md-nav[data-md-level=\"1\"] > .md-nav__list > .md-nav__item {\n padding-right: 0.6rem;\n }\n .md-nav--integrated .md-nav__link[for=__toc] ~ .md-nav {\n display: block;\n margin-bottom: 1.25em;\n border-left: 0.05rem solid var(--md-primary-fg-color);\n }\n .md-nav--integrated .md-nav__link[for=__toc] ~ .md-nav > .md-nav__title {\n display: none;\n }\n}\n\n:root {\n --md-search-result-icon: svg-load(\"material/file-search-outline.svg\");\n}\n\n.md-search {\n position: relative;\n}\n@media screen and (min-width: 60em) {\n .md-search {\n padding: 0.2rem 0;\n }\n}\n.no-js .md-search {\n display: none;\n}\n.md-search__overlay {\n z-index: 1;\n opacity: 0;\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__overlay {\n position: absolute;\n top: 0.2rem;\n left: -2.2rem;\n width: 2rem;\n height: 2rem;\n overflow: hidden;\n background-color: var(--md-default-bg-color);\n border-radius: 1rem;\n transform-origin: center;\n transition: transform 300ms 100ms, opacity 200ms 200ms;\n pointer-events: none;\n }\n [dir=rtl] .md-search__overlay {\n right: -2.2rem;\n left: initial;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__overlay {\n opacity: 1;\n transition: transform 400ms, opacity 100ms;\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__overlay {\n position: fixed;\n top: 0;\n left: 0;\n width: 0;\n height: 0;\n background-color: rgba(0, 0, 0, 0.54);\n cursor: pointer;\n transition: width 0ms 250ms, height 0ms 250ms, opacity 250ms;\n }\n [dir=rtl] .md-search__overlay {\n right: 0;\n left: initial;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__overlay {\n width: 100%;\n height: 200vh;\n opacity: 1;\n transition: width 0ms, height 0ms, opacity 250ms;\n }\n}\n@media screen and (max-width: 29.9375em) {\n [data-md-toggle=search]:checked ~ .md-header .md-search__overlay {\n transform: scale(45);\n }\n}\n@media screen and (min-width: 30em) and (max-width: 44.9375em) {\n [data-md-toggle=search]:checked ~ .md-header .md-search__overlay {\n transform: scale(60);\n }\n}\n@media screen and (min-width: 45em) and (max-width: 59.9375em) {\n [data-md-toggle=search]:checked ~ .md-header .md-search__overlay {\n transform: scale(75);\n }\n}\n.md-search__inner {\n backface-visibility: hidden;\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__inner {\n position: fixed;\n top: 0;\n left: 100%;\n z-index: 2;\n width: 100%;\n height: 100%;\n transform: translateX(5%);\n opacity: 0;\n transition: right 0ms 300ms, left 0ms 300ms, transform 150ms 150ms cubic-bezier(0.4, 0, 0.2, 1), opacity 150ms 150ms;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__inner {\n left: 0;\n transform: translateX(0);\n opacity: 1;\n transition: right 0ms 0ms, left 0ms 0ms, transform 150ms 150ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 150ms 150ms;\n }\n [dir=rtl] [data-md-toggle=search]:checked ~ .md-header .md-search__inner {\n right: 0;\n left: initial;\n }\n html [dir=rtl] .md-search__inner {\n right: 100%;\n left: initial;\n transform: translateX(-5%);\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__inner {\n position: relative;\n float: right;\n width: 11.7rem;\n padding: 0.1rem 0;\n transition: width 250ms cubic-bezier(0.1, 0.7, 0.1, 1);\n }\n [dir=rtl] .md-search__inner {\n float: left;\n }\n}\n@media screen and (min-width: 60em) and (max-width: 76.1875em) {\n [data-md-toggle=search]:checked ~ .md-header .md-search__inner {\n width: 23.4rem;\n }\n}\n@media screen and (min-width: 76.25em) {\n [data-md-toggle=search]:checked ~ .md-header .md-search__inner {\n width: 34.4rem;\n }\n}\n.md-search__form {\n position: relative;\n}\n@media screen and (min-width: 60em) {\n .md-search__form {\n border-radius: 0.1rem;\n }\n}\n.md-search__input {\n position: relative;\n z-index: 2;\n padding: 0 2.2rem 0 3.6rem;\n text-overflow: ellipsis;\n background-color: var(--md-default-bg-color);\n box-shadow: 0 0 0.6rem transparent;\n transition: color 250ms, background-color 250ms, box-shadow 250ms;\n}\n[dir=rtl] .md-search__input {\n padding: 0 3.6rem 0 2.2rem;\n}\n.md-search__input::placeholder {\n transition: color 250ms;\n}\n.md-search__input ~ .md-search__icon, .md-search__input::placeholder {\n color: var(--md-default-fg-color--light);\n}\n.md-search__input::-ms-clear {\n display: none;\n}\n[data-md-toggle=search]:checked ~ .md-header .md-search__input {\n box-shadow: 0 0 0.6rem rgba(0, 0, 0, 0.07);\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__input {\n width: 100%;\n height: 2.4rem;\n font-size: 0.9rem;\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__input {\n width: 100%;\n height: 1.8rem;\n padding-left: 2.2rem;\n color: inherit;\n font-size: 0.8rem;\n background-color: rgba(0, 0, 0, 0.26);\n border-radius: 0.1rem;\n }\n [dir=rtl] .md-search__input {\n padding-right: 2.2rem;\n }\n .md-search__input + .md-search__icon {\n color: var(--md-primary-bg-color);\n }\n .md-search__input::placeholder {\n color: var(--md-primary-bg-color--light);\n }\n .md-search__input:hover {\n background-color: rgba(255, 255, 255, 0.12);\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__input {\n color: var(--md-default-fg-color);\n text-overflow: clip;\n background-color: var(--md-default-bg-color);\n border-radius: 0.1rem 0.1rem 0 0;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__input + .md-search__icon, [data-md-toggle=search]:checked ~ .md-header .md-search__input::placeholder {\n color: var(--md-default-fg-color--light);\n }\n}\n.md-search__icon {\n position: absolute;\n z-index: 2;\n width: 1.2rem;\n height: 1.2rem;\n cursor: pointer;\n transition: color 250ms, opacity 250ms;\n}\n.md-search__icon:hover {\n opacity: 0.7;\n}\n.md-search__icon[for=__search] {\n top: 0.3rem;\n left: 0.5rem;\n}\n[dir=rtl] .md-search__icon[for=__search] {\n right: 0.5rem;\n left: initial;\n}\n[dir=rtl] .md-search__icon[for=__search] svg {\n transform: scaleX(-1);\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__icon[for=__search] {\n top: 0.6rem;\n left: 0.8rem;\n }\n [dir=rtl] .md-search__icon[for=__search] {\n right: 0.8rem;\n left: initial;\n }\n .md-search__icon[for=__search] svg:first-child {\n display: none;\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__icon[for=__search] {\n pointer-events: none;\n }\n .md-search__icon[for=__search] svg:last-child {\n display: none;\n }\n}\n.md-search__icon[type=reset] {\n top: 0.3rem;\n right: 0.5rem;\n transform: scale(0.75);\n opacity: 0;\n transition: transform 150ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 150ms;\n pointer-events: none;\n}\n[dir=rtl] .md-search__icon[type=reset] {\n right: initial;\n left: 0.5rem;\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__icon[type=reset] {\n top: 0.6rem;\n right: 0.8rem;\n }\n [dir=rtl] .md-search__icon[type=reset] {\n right: initial;\n left: 0.8rem;\n }\n}\n[data-md-toggle=search]:checked ~ .md-header .md-search__input:valid ~ .md-search__icon[type=reset] {\n transform: scale(1);\n opacity: 1;\n pointer-events: initial;\n}\n[data-md-toggle=search]:checked ~ .md-header .md-search__input:valid ~ .md-search__icon[type=reset]:hover {\n opacity: 0.7;\n}\n.md-search__output {\n position: absolute;\n z-index: 1;\n width: 100%;\n overflow: hidden;\n border-radius: 0 0 0.1rem 0.1rem;\n}\n@media screen and (max-width: 59.9375em) {\n .md-search__output {\n top: 2.4rem;\n bottom: 0;\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__output {\n top: 1.9rem;\n opacity: 0;\n transition: opacity 400ms;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__output {\n box-shadow: 0 6px 10px 0 rgba(0, 0, 0, 0.14), 0 1px 18px 0 rgba(0, 0, 0, 0.12), 0 3px 5px -1px rgba(0, 0, 0, 0.4);\n opacity: 1;\n }\n}\n.md-search__scrollwrap {\n height: 100%;\n overflow-y: auto;\n background-color: var(--md-default-bg-color);\n backface-visibility: hidden;\n touch-action: pan-y;\n}\n@media (max-resolution: 1dppx) {\n .md-search__scrollwrap {\n transform: translateZ(0);\n }\n}\n@media screen and (min-width: 60em) and (max-width: 76.1875em) {\n .md-search__scrollwrap {\n width: 23.4rem;\n }\n}\n@media screen and (min-width: 76.25em) {\n .md-search__scrollwrap {\n width: 34.4rem;\n }\n}\n@media screen and (min-width: 60em) {\n .md-search__scrollwrap {\n max-height: 0;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n }\n [data-md-toggle=search]:checked ~ .md-header .md-search__scrollwrap {\n max-height: 75vh;\n }\n .md-search__scrollwrap:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n }\n .md-search__scrollwrap::-webkit-scrollbar {\n width: 0.2rem;\n height: 0.2rem;\n }\n .md-search__scrollwrap::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n }\n .md-search__scrollwrap::-webkit-scrollbar-thumb:hover {\n background-color: var(--md-accent-fg-color);\n }\n}\n\n.md-search-result {\n color: var(--md-default-fg-color);\n word-break: break-word;\n}\n.md-search-result__meta {\n padding: 0 0.8rem;\n color: var(--md-default-fg-color--light);\n font-size: 0.64rem;\n line-height: 1.8rem;\n background-color: var(--md-default-fg-color--lightest);\n scroll-snap-align: start;\n}\n@media screen and (min-width: 60em) {\n .md-search-result__meta {\n padding-left: 2.2rem;\n }\n [dir=rtl] .md-search-result__meta {\n padding-right: 2.2rem;\n padding-left: initial;\n }\n}\n.md-search-result__list {\n margin: 0;\n padding: 0;\n list-style: none;\n}\n.md-search-result__item {\n box-shadow: 0 -0.05rem 0 var(--md-default-fg-color--lightest);\n}\n.md-search-result__item:first-child {\n box-shadow: none;\n}\n.md-search-result__link {\n display: block;\n outline: none;\n transition: background-color 250ms;\n scroll-snap-align: start;\n}\n.md-search-result__link:focus, .md-search-result__link:hover {\n background-color: var(--md-accent-fg-color--transparent);\n}\n.md-search-result__link:last-child p:last-child {\n margin-bottom: 0.6rem;\n}\n.md-search-result__more summary {\n display: block;\n padding: 0.75em 0.8rem;\n color: var(--md-typeset-a-color);\n font-size: 0.64rem;\n outline: none;\n cursor: pointer;\n transition: color 250ms, background-color 250ms;\n scroll-snap-align: start;\n}\n@media screen and (min-width: 60em) {\n .md-search-result__more summary {\n padding-left: 2.2rem;\n }\n [dir=rtl] .md-search-result__more summary {\n padding-right: 2.2rem;\n padding-left: 0.8rem;\n }\n}\n.md-search-result__more summary:focus, .md-search-result__more summary:hover {\n color: var(--md-accent-fg-color);\n background-color: var(--md-accent-fg-color--transparent);\n}\n.md-search-result__more summary::marker, .md-search-result__more summary::-webkit-details-marker {\n display: none;\n}\n.md-search-result__more summary ~ * > * {\n opacity: 0.65;\n}\n.md-search-result__article {\n position: relative;\n padding: 0 0.8rem;\n overflow: hidden;\n}\n@media screen and (min-width: 60em) {\n .md-search-result__article {\n padding-left: 2.2rem;\n }\n [dir=rtl] .md-search-result__article {\n padding-right: 2.2rem;\n padding-left: 0.8rem;\n }\n}\n.md-search-result__article--document .md-search-result__title {\n margin: 0.55rem 0;\n font-weight: 400;\n font-size: 0.8rem;\n line-height: 1.4;\n}\n.md-search-result__icon {\n position: absolute;\n left: 0;\n width: 1.2rem;\n height: 1.2rem;\n margin: 0.5rem;\n color: var(--md-default-fg-color--light);\n}\n@media screen and (max-width: 59.9375em) {\n .md-search-result__icon {\n display: none;\n }\n}\n.md-search-result__icon::after {\n display: inline-block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-search-result-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n[dir=rtl] .md-search-result__icon {\n right: 0;\n left: initial;\n}\n[dir=rtl] .md-search-result__icon::after {\n transform: scaleX(-1);\n}\n.md-search-result__title {\n margin: 0.5em 0;\n font-weight: 700;\n font-size: 0.64rem;\n line-height: 1.6;\n}\n.md-search-result__teaser {\n display: -webkit-box;\n max-height: 2rem;\n margin: 0.5em 0;\n overflow: hidden;\n color: var(--md-default-fg-color--light);\n font-size: 0.64rem;\n line-height: 1.6;\n text-overflow: ellipsis;\n -webkit-box-orient: vertical;\n -webkit-line-clamp: 2;\n}\n@media screen and (max-width: 44.9375em) {\n .md-search-result__teaser {\n max-height: 3rem;\n -webkit-line-clamp: 3;\n }\n}\n@media screen and (min-width: 60em) and (max-width: 76.1875em) {\n .md-search-result__teaser {\n max-height: 3rem;\n -webkit-line-clamp: 3;\n }\n}\n.md-search-result__teaser mark {\n text-decoration: underline;\n background-color: transparent;\n}\n.md-search-result__terms {\n margin: 0.5em 0;\n font-size: 0.64rem;\n font-style: italic;\n}\n.md-search-result mark {\n color: var(--md-accent-fg-color);\n background-color: transparent;\n}\n\n.md-select {\n position: relative;\n z-index: 1;\n}\n.md-select__inner {\n position: absolute;\n top: calc(100% - 0.2rem);\n left: 50%;\n max-height: 0;\n margin-top: 0.2rem;\n color: var(--md-default-fg-color);\n background-color: var(--md-default-bg-color);\n border-radius: 0.1rem;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.1), 0 0 0.05rem rgba(0, 0, 0, 0.25);\n transform: translate3d(-50%, 0.3rem, 0);\n opacity: 0;\n transition: transform 250ms 375ms, opacity 250ms 250ms, max-height 0ms 500ms;\n}\n.md-select:focus-within .md-select__inner, .md-select:hover .md-select__inner {\n max-height: 10rem;\n transform: translate3d(-50%, 0, 0);\n opacity: 1;\n transition: transform 250ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 250ms, max-height 0ms;\n}\n.md-select__inner::after {\n position: absolute;\n top: 0;\n left: 50%;\n width: 0;\n height: 0;\n margin-top: -0.2rem;\n margin-left: -0.2rem;\n border: 0.2rem solid transparent;\n border-top: 0;\n border-bottom-color: var(--md-default-bg-color);\n content: \"\";\n}\n.md-select__list {\n max-height: inherit;\n margin: 0;\n padding: 0;\n overflow: auto;\n font-size: 0.8rem;\n list-style-type: none;\n border-radius: 0.1rem;\n}\n.md-select__item {\n line-height: 1.8rem;\n}\n.md-select__link {\n display: block;\n width: 100%;\n padding-right: 1.2rem;\n padding-left: 0.6rem;\n outline: none;\n cursor: pointer;\n transition: background-color 250ms, color 250ms;\n scroll-snap-align: start;\n}\n[dir=rtl] .md-select__link {\n padding-right: 0.6rem;\n padding-left: 1.2rem;\n}\n.md-select__link:focus, .md-select__link:hover {\n color: var(--md-accent-fg-color);\n}\n.md-select__link:focus {\n background-color: var(--md-default-fg-color--lightest);\n}\n\n.md-sidebar {\n position: sticky;\n top: 2.4rem;\n flex-shrink: 0;\n align-self: flex-start;\n width: 12.1rem;\n padding: 1.2rem 0;\n}\n@media print {\n .md-sidebar {\n display: none;\n }\n}\n@media screen and (max-width: 76.1875em) {\n .md-sidebar--primary {\n position: fixed;\n top: 0;\n left: -12.1rem;\n z-index: 3;\n display: block;\n width: 12.1rem;\n height: 100%;\n background-color: var(--md-default-bg-color);\n transform: translateX(0);\n transition: transform 250ms cubic-bezier(0.4, 0, 0.2, 1), box-shadow 250ms;\n }\n [dir=rtl] .md-sidebar--primary {\n right: -12.1rem;\n left: initial;\n }\n [data-md-toggle=drawer]:checked ~ .md-container .md-sidebar--primary {\n box-shadow: 0 8px 10px 1px rgba(0, 0, 0, 0.14), 0 3px 14px 2px rgba(0, 0, 0, 0.12), 0 5px 5px -3px rgba(0, 0, 0, 0.4);\n transform: translateX(12.1rem);\n }\n [dir=rtl] [data-md-toggle=drawer]:checked ~ .md-container .md-sidebar--primary {\n transform: translateX(-12.1rem);\n }\n .md-sidebar--primary .md-sidebar__scrollwrap {\n position: absolute;\n top: 0;\n right: 0;\n bottom: 0;\n left: 0;\n margin: 0;\n scroll-snap-type: none;\n overflow: hidden;\n }\n}\n@media screen and (min-width: 76.25em) {\n .md-sidebar {\n height: 0;\n }\n .no-js .md-sidebar {\n height: auto;\n }\n}\n.md-sidebar--secondary {\n display: none;\n order: 2;\n}\n@media screen and (min-width: 60em) {\n .md-sidebar--secondary {\n height: 0;\n }\n .no-js .md-sidebar--secondary {\n height: auto;\n }\n .md-sidebar--secondary:not([hidden]) {\n display: block;\n }\n .md-sidebar--secondary .md-sidebar__scrollwrap {\n touch-action: pan-y;\n }\n}\n.md-sidebar__scrollwrap {\n margin: 0 0.2rem;\n overflow-y: auto;\n backface-visibility: hidden;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n}\n.md-sidebar__scrollwrap:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n}\n.md-sidebar__scrollwrap::-webkit-scrollbar {\n width: 0.2rem;\n height: 0.2rem;\n}\n.md-sidebar__scrollwrap::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n}\n.md-sidebar__scrollwrap::-webkit-scrollbar-thumb:hover {\n background-color: var(--md-accent-fg-color);\n}\n\n@media screen and (max-width: 76.1875em) {\n .md-overlay {\n position: fixed;\n top: 0;\n z-index: 3;\n width: 0;\n height: 0;\n background-color: rgba(0, 0, 0, 0.54);\n opacity: 0;\n transition: width 0ms 250ms, height 0ms 250ms, opacity 250ms;\n }\n [data-md-toggle=drawer]:checked ~ .md-overlay {\n width: 100%;\n height: 100%;\n opacity: 1;\n transition: width 0ms, height 0ms, opacity 250ms;\n }\n}\n@keyframes md-source__facts--done {\n 0% {\n height: 0;\n }\n 100% {\n height: 0.65rem;\n }\n}\n@keyframes md-source__fact--done {\n 0% {\n transform: translateY(100%);\n opacity: 0;\n }\n 50% {\n opacity: 0;\n }\n 100% {\n transform: translateY(0%);\n opacity: 1;\n }\n}\n:root {\n --md-source-forks-icon: svg-load(\"octicons/repo-forked-16.svg\");\n --md-source-repositories-icon: svg-load(\"octicons/repo-16.svg\");\n --md-source-stars-icon: svg-load(\"octicons/star-16.svg\");\n --md-source-version-icon: svg-load(\"octicons/tag-16.svg\");\n}\n\n.md-source {\n display: block;\n font-size: 0.65rem;\n line-height: 1.2;\n white-space: nowrap;\n outline-color: var(--md-accent-fg-color);\n backface-visibility: hidden;\n transition: opacity 250ms;\n}\n.md-source:hover {\n opacity: 0.7;\n}\n.md-source__icon {\n display: inline-block;\n width: 2rem;\n height: 2.4rem;\n vertical-align: middle;\n}\n.md-source__icon svg {\n margin-top: 0.6rem;\n margin-left: 0.6rem;\n}\n[dir=rtl] .md-source__icon svg {\n margin-right: 0.6rem;\n margin-left: initial;\n}\n.md-source__icon + .md-source__repository {\n margin-left: -2rem;\n padding-left: 2rem;\n}\n[dir=rtl] .md-source__icon + .md-source__repository {\n margin-right: -2rem;\n margin-left: initial;\n padding-right: 2rem;\n padding-left: initial;\n}\n.md-source__repository {\n display: inline-block;\n max-width: calc(100% - 1.2rem);\n margin-left: 0.6rem;\n overflow: hidden;\n text-overflow: ellipsis;\n vertical-align: middle;\n}\n.md-source__facts {\n margin: 0.1rem 0 0;\n padding: 0;\n overflow: hidden;\n font-size: 0.55rem;\n list-style-type: none;\n opacity: 0.75;\n}\n[data-md-state=done] .md-source__facts {\n animation: md-source__facts--done 250ms ease-in;\n}\n.md-source__fact {\n display: inline-block;\n}\n[data-md-state=done] .md-source__fact {\n animation: md-source__fact--done 400ms ease-out;\n}\n.md-source__fact::before {\n display: inline-block;\n width: 0.6rem;\n height: 0.6rem;\n margin-right: 0.1rem;\n vertical-align: text-top;\n background-color: currentColor;\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n.md-source__fact:nth-child(1n+2)::before {\n margin-left: 0.4rem;\n}\n[dir=rtl] .md-source__fact {\n margin-right: initial;\n margin-left: 0.1rem;\n}\n[dir=rtl] .md-source__fact:nth-child(1n+2)::before {\n margin-right: 0.4rem;\n margin-left: initial;\n}\n.md-source__fact--version::before {\n mask-image: var(--md-source-version-icon);\n}\n.md-source__fact--stars::before {\n mask-image: var(--md-source-stars-icon);\n}\n.md-source__fact--forks::before {\n mask-image: var(--md-source-forks-icon);\n}\n.md-source__fact--repositories::before {\n mask-image: var(--md-source-repositories-icon);\n}\n\n.md-tabs {\n width: 100%;\n overflow: auto;\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n}\n@media print {\n .md-tabs {\n display: none;\n }\n}\n@media screen and (max-width: 76.1875em) {\n .md-tabs {\n display: none;\n }\n}\n.md-tabs[data-md-state=hidden] {\n pointer-events: none;\n}\n.md-tabs__list {\n margin: 0;\n margin-left: 0.2rem;\n padding: 0;\n white-space: nowrap;\n list-style: none;\n contain: content;\n}\n[dir=rtl] .md-tabs__list {\n margin-right: 0.2rem;\n margin-left: initial;\n}\n.md-tabs__item {\n display: inline-block;\n height: 2.4rem;\n padding-right: 0.6rem;\n padding-left: 0.6rem;\n}\n.md-tabs__link {\n display: block;\n margin-top: 0.8rem;\n font-size: 0.7rem;\n outline-color: var(--md-accent-fg-color);\n outline-offset: 0.2rem;\n backface-visibility: hidden;\n opacity: 0.7;\n transition: transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1), opacity 250ms;\n}\n.md-tabs__link--active, .md-tabs__link:focus, .md-tabs__link:hover {\n color: inherit;\n opacity: 1;\n}\n.md-tabs__item:nth-child(2) .md-tabs__link {\n transition-delay: 20ms;\n}\n.md-tabs__item:nth-child(3) .md-tabs__link {\n transition-delay: 40ms;\n}\n.md-tabs__item:nth-child(4) .md-tabs__link {\n transition-delay: 60ms;\n}\n.md-tabs__item:nth-child(5) .md-tabs__link {\n transition-delay: 80ms;\n}\n.md-tabs__item:nth-child(6) .md-tabs__link {\n transition-delay: 100ms;\n}\n.md-tabs__item:nth-child(7) .md-tabs__link {\n transition-delay: 120ms;\n}\n.md-tabs__item:nth-child(8) .md-tabs__link {\n transition-delay: 140ms;\n}\n.md-tabs__item:nth-child(9) .md-tabs__link {\n transition-delay: 160ms;\n}\n.md-tabs__item:nth-child(10) .md-tabs__link {\n transition-delay: 180ms;\n}\n.md-tabs__item:nth-child(11) .md-tabs__link {\n transition-delay: 200ms;\n}\n.md-tabs__item:nth-child(12) .md-tabs__link {\n transition-delay: 220ms;\n}\n.md-tabs__item:nth-child(13) .md-tabs__link {\n transition-delay: 240ms;\n}\n.md-tabs__item:nth-child(14) .md-tabs__link {\n transition-delay: 260ms;\n}\n.md-tabs__item:nth-child(15) .md-tabs__link {\n transition-delay: 280ms;\n}\n.md-tabs__item:nth-child(16) .md-tabs__link {\n transition-delay: 300ms;\n}\n.md-tabs[data-md-state=hidden] .md-tabs__link {\n transform: translateY(50%);\n opacity: 0;\n transition: transform 0ms 100ms, opacity 100ms;\n}\n\n.md-top {\n position: sticky;\n bottom: 0.4rem;\n z-index: 1;\n float: right;\n margin: -2.8rem 0.4rem 0.4rem;\n padding: 0.4rem;\n color: var(--md-primary-bg-color);\n background: var(--md-primary-fg-color);\n border-radius: 100%;\n outline: none;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.1), 0 0.025rem 0.05rem rgba(0, 0, 0, 0.1);\n transform: translateY(0);\n transition: opacity 125ms, transform 125ms cubic-bezier(0.4, 0, 0.2, 1), background-color 125ms;\n}\n[dir=rtl] .md-top {\n float: left;\n}\n.md-top[data-md-state=hidden] {\n transform: translateY(-0.2rem);\n opacity: 0;\n pointer-events: none;\n}\n.md-top:focus, .md-top:hover {\n background: var(--md-accent-fg-color);\n transform: scale(1.1);\n}\n\n:root {\n --md-version-icon: svg-load(\"fontawesome/solid/caret-down.svg\");\n}\n\n.md-version {\n flex-shrink: 0;\n height: 2.4rem;\n font-size: 0.8rem;\n}\n.md-version__current {\n position: relative;\n top: 0.05rem;\n margin-right: 0.4rem;\n margin-left: 1.4rem;\n color: inherit;\n outline: none;\n cursor: pointer;\n}\n[dir=rtl] .md-version__current {\n margin-right: 1.4rem;\n margin-left: 0.4rem;\n}\n.md-version__current::after {\n display: inline-block;\n width: 0.4rem;\n height: 0.6rem;\n margin-left: 0.4rem;\n background-color: currentColor;\n mask-image: var(--md-version-icon);\n mask-repeat: no-repeat;\n content: \"\";\n}\n[dir=rtl] .md-version__current::after {\n margin-right: 0.4rem;\n margin-left: initial;\n}\n.md-version__list {\n position: absolute;\n top: 0.15rem;\n z-index: 1;\n max-height: 0;\n margin: 0.2rem 0.8rem;\n padding: 0;\n overflow: auto;\n color: var(--md-default-fg-color);\n list-style-type: none;\n background-color: var(--md-default-bg-color);\n border-radius: 0.1rem;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.1), 0 0 0.05rem rgba(0, 0, 0, 0.25);\n opacity: 0;\n transition: max-height 0ms 500ms, opacity 250ms 250ms;\n scroll-snap-type: y mandatory;\n}\n.md-version:focus-within .md-version__list, .md-version:hover .md-version__list {\n max-height: 10rem;\n opacity: 1;\n transition: max-height 0ms, opacity 250ms;\n}\n.md-version__item {\n line-height: 1.8rem;\n}\n.md-version__link {\n display: block;\n width: 100%;\n padding-right: 1.2rem;\n padding-left: 0.6rem;\n white-space: nowrap;\n outline: none;\n cursor: pointer;\n transition: color 250ms, background-color 250ms;\n scroll-snap-align: start;\n}\n[dir=rtl] .md-version__link {\n padding-right: 0.6rem;\n padding-left: 1.2rem;\n}\n.md-version__link:focus, .md-version__link:hover {\n color: var(--md-accent-fg-color);\n}\n.md-version__link:focus {\n background-color: var(--md-default-fg-color--lightest);\n}\n\n:root {\n --md-admonition-icon--note:\n svg-load(\"material/pencil.svg\");\n --md-admonition-icon--abstract:\n svg-load(\"material/text-subject.svg\");\n --md-admonition-icon--info:\n svg-load(\"material/information.svg\");\n --md-admonition-icon--tip:\n svg-load(\"material/fire.svg\");\n --md-admonition-icon--success:\n svg-load(\"material/check-circle.svg\");\n --md-admonition-icon--question:\n svg-load(\"material/help-circle.svg\");\n --md-admonition-icon--warning:\n svg-load(\"material/alert.svg\");\n --md-admonition-icon--failure:\n svg-load(\"material/close-circle.svg\");\n --md-admonition-icon--danger:\n svg-load(\"material/flash-circle.svg\");\n --md-admonition-icon--bug:\n svg-load(\"material/bug.svg\");\n --md-admonition-icon--example:\n svg-load(\"material/format-list-numbered.svg\");\n --md-admonition-icon--quote:\n svg-load(\"material/format-quote-close.svg\");\n}\n\n.md-typeset .admonition, .md-typeset details {\n margin: 1.5625em 0;\n padding: 0 0.6rem;\n overflow: hidden;\n color: var(--md-admonition-fg-color);\n font-size: 0.64rem;\n page-break-inside: avoid;\n background-color: var(--md-admonition-bg-color);\n border-left: 0.2rem solid #448aff;\n border-radius: 0.1rem;\n box-shadow: 0 0.2rem 0.5rem rgba(0, 0, 0, 0.05), 0 0.025rem 0.05rem rgba(0, 0, 0, 0.05);\n}\n@media print {\n .md-typeset .admonition, .md-typeset details {\n box-shadow: none;\n }\n}\n[dir=rtl] .md-typeset .admonition, [dir=rtl] .md-typeset details {\n border-right: 0.2rem solid #448aff;\n border-left: none;\n}\n.md-typeset .admonition .admonition, .md-typeset details .admonition, .md-typeset .admonition details, .md-typeset details details {\n margin-top: 1em;\n margin-bottom: 1em;\n}\n.md-typeset .admonition .md-typeset__scrollwrap, .md-typeset details .md-typeset__scrollwrap {\n margin: 1em -0.6rem;\n}\n.md-typeset .admonition .md-typeset__table, .md-typeset details .md-typeset__table {\n padding: 0 0.6rem;\n}\n.md-typeset .admonition > .tabbed-set:only-child, .md-typeset details > .tabbed-set:only-child {\n margin-top: 0;\n}\nhtml .md-typeset .admonition > :last-child, html .md-typeset details > :last-child {\n margin-bottom: 0.6rem;\n}\n.md-typeset .admonition-title, .md-typeset summary {\n position: relative;\n margin: 0 -0.6rem 0 -0.8rem;\n padding: 0.4rem 0.6rem 0.4rem 2rem;\n font-weight: 700;\n background-color: rgba(68, 138, 255, 0.1);\n border-left: 0.2rem solid #448aff;\n}\n[dir=rtl] .md-typeset .admonition-title, [dir=rtl] .md-typeset summary {\n margin: 0 -0.8rem 0 -0.6rem;\n padding: 0.4rem 2rem 0.4rem 0.6rem;\n border-right: 0.2rem solid #448aff;\n border-left: none;\n}\nhtml .md-typeset .admonition-title:last-child, html .md-typeset summary:last-child {\n margin-bottom: 0;\n}\n.md-typeset .admonition-title::before, .md-typeset summary::before {\n position: absolute;\n left: 0.6rem;\n width: 1rem;\n height: 1rem;\n background-color: #448aff;\n mask-image: var(--md-admonition-icon--note);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n[dir=rtl] .md-typeset .admonition-title::before, [dir=rtl] .md-typeset summary::before {\n right: 0.6rem;\n left: initial;\n}\n.md-typeset .admonition-title + .tabbed-set:last-child, .md-typeset summary + .tabbed-set:last-child {\n margin-top: 0;\n}\n\n.md-typeset .admonition.note, .md-typeset details.note {\n border-color: #448aff;\n}\n\n.md-typeset .note > .admonition-title, .md-typeset .note > summary {\n background-color: rgba(68, 138, 255, 0.1);\n border-color: #448aff;\n}\n.md-typeset .note > .admonition-title::before, .md-typeset .note > summary::before {\n background-color: #448aff;\n mask-image: var(--md-admonition-icon--note);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.abstract, .md-typeset details.abstract, .md-typeset .admonition.tldr, .md-typeset details.tldr, .md-typeset .admonition.summary, .md-typeset details.summary {\n border-color: #00b0ff;\n}\n\n.md-typeset .abstract > .admonition-title, .md-typeset .abstract > summary, .md-typeset .tldr > .admonition-title, .md-typeset .tldr > summary, .md-typeset .summary > .admonition-title, .md-typeset .summary > summary {\n background-color: rgba(0, 176, 255, 0.1);\n border-color: #00b0ff;\n}\n.md-typeset .abstract > .admonition-title::before, .md-typeset .abstract > summary::before, .md-typeset .tldr > .admonition-title::before, .md-typeset .tldr > summary::before, .md-typeset .summary > .admonition-title::before, .md-typeset .summary > summary::before {\n background-color: #00b0ff;\n mask-image: var(--md-admonition-icon--abstract);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.info, .md-typeset details.info, .md-typeset .admonition.todo, .md-typeset details.todo {\n border-color: #00b8d4;\n}\n\n.md-typeset .info > .admonition-title, .md-typeset .info > summary, .md-typeset .todo > .admonition-title, .md-typeset .todo > summary {\n background-color: rgba(0, 184, 212, 0.1);\n border-color: #00b8d4;\n}\n.md-typeset .info > .admonition-title::before, .md-typeset .info > summary::before, .md-typeset .todo > .admonition-title::before, .md-typeset .todo > summary::before {\n background-color: #00b8d4;\n mask-image: var(--md-admonition-icon--info);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.tip, .md-typeset details.tip, .md-typeset .admonition.important, .md-typeset details.important, .md-typeset .admonition.hint, .md-typeset details.hint {\n border-color: #00bfa5;\n}\n\n.md-typeset .tip > .admonition-title, .md-typeset .tip > summary, .md-typeset .important > .admonition-title, .md-typeset .important > summary, .md-typeset .hint > .admonition-title, .md-typeset .hint > summary {\n background-color: rgba(0, 191, 165, 0.1);\n border-color: #00bfa5;\n}\n.md-typeset .tip > .admonition-title::before, .md-typeset .tip > summary::before, .md-typeset .important > .admonition-title::before, .md-typeset .important > summary::before, .md-typeset .hint > .admonition-title::before, .md-typeset .hint > summary::before {\n background-color: #00bfa5;\n mask-image: var(--md-admonition-icon--tip);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.success, .md-typeset details.success, .md-typeset .admonition.done, .md-typeset details.done, .md-typeset .admonition.check, .md-typeset details.check {\n border-color: #00c853;\n}\n\n.md-typeset .success > .admonition-title, .md-typeset .success > summary, .md-typeset .done > .admonition-title, .md-typeset .done > summary, .md-typeset .check > .admonition-title, .md-typeset .check > summary {\n background-color: rgba(0, 200, 83, 0.1);\n border-color: #00c853;\n}\n.md-typeset .success > .admonition-title::before, .md-typeset .success > summary::before, .md-typeset .done > .admonition-title::before, .md-typeset .done > summary::before, .md-typeset .check > .admonition-title::before, .md-typeset .check > summary::before {\n background-color: #00c853;\n mask-image: var(--md-admonition-icon--success);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.question, .md-typeset details.question, .md-typeset .admonition.faq, .md-typeset details.faq, .md-typeset .admonition.help, .md-typeset details.help {\n border-color: #64dd17;\n}\n\n.md-typeset .question > .admonition-title, .md-typeset .question > summary, .md-typeset .faq > .admonition-title, .md-typeset .faq > summary, .md-typeset .help > .admonition-title, .md-typeset .help > summary {\n background-color: rgba(100, 221, 23, 0.1);\n border-color: #64dd17;\n}\n.md-typeset .question > .admonition-title::before, .md-typeset .question > summary::before, .md-typeset .faq > .admonition-title::before, .md-typeset .faq > summary::before, .md-typeset .help > .admonition-title::before, .md-typeset .help > summary::before {\n background-color: #64dd17;\n mask-image: var(--md-admonition-icon--question);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.warning, .md-typeset details.warning, .md-typeset .admonition.attention, .md-typeset details.attention, .md-typeset .admonition.caution, .md-typeset details.caution {\n border-color: #ff9100;\n}\n\n.md-typeset .warning > .admonition-title, .md-typeset .warning > summary, .md-typeset .attention > .admonition-title, .md-typeset .attention > summary, .md-typeset .caution > .admonition-title, .md-typeset .caution > summary {\n background-color: rgba(255, 145, 0, 0.1);\n border-color: #ff9100;\n}\n.md-typeset .warning > .admonition-title::before, .md-typeset .warning > summary::before, .md-typeset .attention > .admonition-title::before, .md-typeset .attention > summary::before, .md-typeset .caution > .admonition-title::before, .md-typeset .caution > summary::before {\n background-color: #ff9100;\n mask-image: var(--md-admonition-icon--warning);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.failure, .md-typeset details.failure, .md-typeset .admonition.missing, .md-typeset details.missing, .md-typeset .admonition.fail, .md-typeset details.fail {\n border-color: #ff5252;\n}\n\n.md-typeset .failure > .admonition-title, .md-typeset .failure > summary, .md-typeset .missing > .admonition-title, .md-typeset .missing > summary, .md-typeset .fail > .admonition-title, .md-typeset .fail > summary {\n background-color: rgba(255, 82, 82, 0.1);\n border-color: #ff5252;\n}\n.md-typeset .failure > .admonition-title::before, .md-typeset .failure > summary::before, .md-typeset .missing > .admonition-title::before, .md-typeset .missing > summary::before, .md-typeset .fail > .admonition-title::before, .md-typeset .fail > summary::before {\n background-color: #ff5252;\n mask-image: var(--md-admonition-icon--failure);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.danger, .md-typeset details.danger, .md-typeset .admonition.error, .md-typeset details.error {\n border-color: #ff1744;\n}\n\n.md-typeset .danger > .admonition-title, .md-typeset .danger > summary, .md-typeset .error > .admonition-title, .md-typeset .error > summary {\n background-color: rgba(255, 23, 68, 0.1);\n border-color: #ff1744;\n}\n.md-typeset .danger > .admonition-title::before, .md-typeset .danger > summary::before, .md-typeset .error > .admonition-title::before, .md-typeset .error > summary::before {\n background-color: #ff1744;\n mask-image: var(--md-admonition-icon--danger);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.bug, .md-typeset details.bug {\n border-color: #f50057;\n}\n\n.md-typeset .bug > .admonition-title, .md-typeset .bug > summary {\n background-color: rgba(245, 0, 87, 0.1);\n border-color: #f50057;\n}\n.md-typeset .bug > .admonition-title::before, .md-typeset .bug > summary::before {\n background-color: #f50057;\n mask-image: var(--md-admonition-icon--bug);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.example, .md-typeset details.example {\n border-color: #7c4dff;\n}\n\n.md-typeset .example > .admonition-title, .md-typeset .example > summary {\n background-color: rgba(124, 77, 255, 0.1);\n border-color: #7c4dff;\n}\n.md-typeset .example > .admonition-title::before, .md-typeset .example > summary::before {\n background-color: #7c4dff;\n mask-image: var(--md-admonition-icon--example);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n.md-typeset .admonition.quote, .md-typeset details.quote, .md-typeset .admonition.cite, .md-typeset details.cite {\n border-color: #9e9e9e;\n}\n\n.md-typeset .quote > .admonition-title, .md-typeset .quote > summary, .md-typeset .cite > .admonition-title, .md-typeset .cite > summary {\n background-color: rgba(158, 158, 158, 0.1);\n border-color: #9e9e9e;\n}\n.md-typeset .quote > .admonition-title::before, .md-typeset .quote > summary::before, .md-typeset .cite > .admonition-title::before, .md-typeset .cite > summary::before {\n background-color: #9e9e9e;\n mask-image: var(--md-admonition-icon--quote);\n mask-repeat: no-repeat;\n mask-size: contain;\n}\n\n:root {\n --md-footnotes-icon: svg-load(\"material/keyboard-return.svg\");\n}\n\n.md-typeset .footnote {\n color: var(--md-default-fg-color--light);\n font-size: 0.64rem;\n}\n.md-typeset .footnote > ol {\n margin-left: 0;\n}\n.md-typeset .footnote > ol > li {\n transition: color 125ms;\n}\n.md-typeset .footnote > ol > li:target {\n color: var(--md-default-fg-color);\n}\n.md-typeset .footnote > ol > li:hover .footnote-backref, .md-typeset .footnote > ol > li:target .footnote-backref {\n transform: translateX(0);\n opacity: 1;\n}\n.md-typeset .footnote > ol > li > :first-child {\n margin-top: 0;\n}\n.md-typeset .footnote-ref {\n font-weight: 700;\n font-size: 0.75em;\n}\nhtml .md-typeset .footnote-ref {\n outline-offset: 0.1rem;\n}\n.md-typeset .footnote-backref {\n display: inline-block;\n color: var(--md-typeset-a-color);\n font-size: 0;\n vertical-align: text-bottom;\n transform: translateX(0.25rem);\n opacity: 0;\n transition: color 250ms, transform 250ms 250ms, opacity 125ms 250ms;\n}\n@media print {\n .md-typeset .footnote-backref {\n color: var(--md-typeset-a-color);\n transform: translateX(0);\n opacity: 1;\n }\n}\n[dir=rtl] .md-typeset .footnote-backref {\n transform: translateX(-0.25rem);\n}\n.md-typeset .footnote-backref:hover {\n color: var(--md-accent-fg-color);\n}\n.md-typeset .footnote-backref::before {\n display: inline-block;\n width: 0.8rem;\n height: 0.8rem;\n background-color: currentColor;\n mask-image: var(--md-footnotes-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n[dir=rtl] .md-typeset .footnote-backref::before svg {\n transform: scaleX(-1);\n}\n.md-typeset [id^=\"fnref:\"]:target {\n scroll-margin-top: initial;\n margin-top: -3.4rem;\n padding-top: 3.4rem;\n}\n.md-typeset [id^=\"fnref:\"]:target > .footnote-ref {\n outline: auto;\n}\n.md-typeset [id^=\"fn:\"]:target {\n scroll-margin-top: initial;\n margin-top: -3.45rem;\n padding-top: 3.45rem;\n}\n\n.md-typeset .headerlink {\n display: inline-block;\n margin-left: 0.5rem;\n color: var(--md-default-fg-color--lighter);\n opacity: 0;\n transition: color 250ms, opacity 125ms;\n}\n@media print {\n .md-typeset .headerlink {\n display: none;\n }\n}\n[dir=rtl] .md-typeset .headerlink {\n margin-right: 0.5rem;\n margin-left: initial;\n}\n.md-typeset :hover > .headerlink,\n.md-typeset :target > .headerlink,\n.md-typeset .headerlink:focus {\n opacity: 1;\n transition: color 250ms, opacity 125ms;\n}\n.md-typeset :target > .headerlink,\n.md-typeset .headerlink:focus,\n.md-typeset .headerlink:hover {\n color: var(--md-accent-fg-color);\n}\n.md-typeset :target {\n scroll-margin-top: 3.6rem;\n}\n.md-typeset h1:target,\n.md-typeset h2:target,\n.md-typeset h3:target {\n scroll-margin-top: initial;\n}\n.md-typeset h1:target::before,\n.md-typeset h2:target::before,\n.md-typeset h3:target::before {\n display: block;\n margin-top: -3.4rem;\n padding-top: 3.4rem;\n content: \"\";\n}\n.md-typeset h4:target {\n scroll-margin-top: initial;\n}\n.md-typeset h4:target::before {\n display: block;\n margin-top: -3.45rem;\n padding-top: 3.45rem;\n content: \"\";\n}\n.md-typeset h5:target,\n.md-typeset h6:target {\n scroll-margin-top: initial;\n}\n.md-typeset h5:target::before,\n.md-typeset h6:target::before {\n display: block;\n margin-top: -3.6rem;\n padding-top: 3.6rem;\n content: \"\";\n}\n\n.md-typeset div.arithmatex {\n overflow: auto;\n}\n@media screen and (max-width: 44.9375em) {\n .md-typeset div.arithmatex {\n margin: 0 -0.8rem;\n }\n}\n.md-typeset div.arithmatex > * {\n width: min-content;\n margin: 1em auto !important;\n padding: 0 0.8rem;\n touch-action: auto;\n}\n\n.md-typeset del.critic,\n.md-typeset ins.critic,\n.md-typeset .critic.comment {\n box-decoration-break: clone;\n}\n.md-typeset del.critic {\n background-color: var(--md-typeset-del-color);\n}\n.md-typeset ins.critic {\n background-color: var(--md-typeset-ins-color);\n}\n.md-typeset .critic.comment {\n color: var(--md-code-hl-comment-color);\n}\n.md-typeset .critic.comment::before {\n content: \"/* \";\n}\n.md-typeset .critic.comment::after {\n content: \" */\";\n}\n.md-typeset .critic.block {\n display: block;\n margin: 1em 0;\n padding-right: 0.8rem;\n padding-left: 0.8rem;\n overflow: auto;\n box-shadow: none;\n}\n.md-typeset .critic.block > :first-child {\n margin-top: 0.5em;\n}\n.md-typeset .critic.block > :last-child {\n margin-bottom: 0.5em;\n}\n\n:root {\n --md-details-icon: svg-load(\"material/chevron-right.svg\");\n}\n\n.md-typeset details {\n display: flow-root;\n padding-top: 0;\n overflow: visible;\n}\n.md-typeset details[open] > summary::after {\n transform: rotate(90deg);\n}\n.md-typeset details:not([open]) {\n padding-bottom: 0;\n box-shadow: none;\n}\n.md-typeset details:not([open]) > summary {\n border-radius: 0.1rem;\n}\n.md-typeset details::after {\n display: table;\n content: \"\";\n}\n.md-typeset summary {\n display: block;\n min-height: 1rem;\n padding: 0.4rem 1.8rem 0.4rem 2rem;\n border-top-left-radius: 0.1rem;\n border-top-right-radius: 0.1rem;\n cursor: pointer;\n}\n[dir=rtl] .md-typeset summary {\n padding: 0.4rem 2.2rem 0.4rem 1.8rem;\n}\n.md-typeset summary:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n}\n.md-typeset summary::after {\n position: absolute;\n top: 0.4rem;\n right: 0.4rem;\n width: 1rem;\n height: 1rem;\n background-color: currentColor;\n mask-image: var(--md-details-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n transform: rotate(0deg);\n transition: transform 250ms;\n content: \"\";\n}\n[dir=rtl] .md-typeset summary::after {\n right: initial;\n left: 0.4rem;\n transform: rotate(180deg);\n}\n.md-typeset summary::marker, .md-typeset summary::-webkit-details-marker {\n display: none;\n}\n\n.md-typeset .emojione,\n.md-typeset .twemoji,\n.md-typeset .gemoji {\n display: inline-flex;\n height: 1.125em;\n vertical-align: text-top;\n}\n.md-typeset .emojione svg,\n.md-typeset .twemoji svg,\n.md-typeset .gemoji svg {\n width: 1.125em;\n max-height: 100%;\n fill: currentColor;\n}\n\n.highlight .o,\n.highlight .ow {\n color: var(--md-code-hl-operator-color);\n}\n.highlight .p {\n color: var(--md-code-hl-punctuation-color);\n}\n.highlight .cpf,\n.highlight .l,\n.highlight .s,\n.highlight .sb,\n.highlight .sc,\n.highlight .s2,\n.highlight .si,\n.highlight .s1,\n.highlight .ss {\n color: var(--md-code-hl-string-color);\n}\n.highlight .cp,\n.highlight .se,\n.highlight .sh,\n.highlight .sr,\n.highlight .sx {\n color: var(--md-code-hl-special-color);\n}\n.highlight .m,\n.highlight .mb,\n.highlight .mf,\n.highlight .mh,\n.highlight .mi,\n.highlight .il,\n.highlight .mo {\n color: var(--md-code-hl-number-color);\n}\n.highlight .k,\n.highlight .kd,\n.highlight .kn,\n.highlight .kp,\n.highlight .kr,\n.highlight .kt {\n color: var(--md-code-hl-keyword-color);\n}\n.highlight .kc,\n.highlight .n {\n color: var(--md-code-hl-name-color);\n}\n.highlight .no,\n.highlight .nb,\n.highlight .bp {\n color: var(--md-code-hl-constant-color);\n}\n.highlight .nc,\n.highlight .ne,\n.highlight .nf,\n.highlight .nn {\n color: var(--md-code-hl-function-color);\n}\n.highlight .nd,\n.highlight .ni,\n.highlight .nl,\n.highlight .nt {\n color: var(--md-code-hl-keyword-color);\n}\n.highlight .c,\n.highlight .cm,\n.highlight .c1,\n.highlight .ch,\n.highlight .cs,\n.highlight .sd {\n color: var(--md-code-hl-comment-color);\n}\n.highlight .na,\n.highlight .nv,\n.highlight .vc,\n.highlight .vg,\n.highlight .vi {\n color: var(--md-code-hl-variable-color);\n}\n.highlight .ge,\n.highlight .gr,\n.highlight .gh,\n.highlight .go,\n.highlight .gp,\n.highlight .gs,\n.highlight .gu,\n.highlight .gt {\n color: var(--md-code-hl-generic-color);\n}\n.highlight .gd,\n.highlight .gi {\n margin: 0 -0.125em;\n padding: 0 0.125em;\n border-radius: 0.1rem;\n}\n.highlight .gd {\n background-color: var(--md-typeset-del-color);\n}\n.highlight .gi {\n background-color: var(--md-typeset-ins-color);\n}\n.highlight .hll {\n display: block;\n margin: 0 -1.1764705882em;\n padding: 0 1.1764705882em;\n background-color: var(--md-code-hl-color);\n}\n.highlight [data-linenos]::before {\n position: sticky;\n left: -1.1764705882em;\n float: left;\n margin-right: 1.1764705882em;\n margin-left: -1.1764705882em;\n padding-left: 1.1764705882em;\n color: var(--md-default-fg-color--light);\n background-color: var(--md-code-bg-color);\n box-shadow: -0.05rem 0 var(--md-default-fg-color--lightest) inset;\n content: attr(data-linenos);\n user-select: none;\n}\n\n.highlighttable {\n display: flow-root;\n overflow: hidden;\n}\n.highlighttable tbody,\n.highlighttable td {\n display: block;\n padding: 0;\n}\n.highlighttable tr {\n display: flex;\n}\n.highlighttable pre {\n margin: 0;\n}\n.highlighttable .linenos {\n padding: 0.7720588235em 1.1764705882em;\n padding-right: 0;\n font-size: 0.85em;\n background-color: var(--md-code-bg-color);\n user-select: none;\n}\n.highlighttable .linenodiv {\n padding-right: 0.5882352941em;\n box-shadow: -0.05rem 0 var(--md-default-fg-color--lightest) inset;\n}\n.highlighttable .linenodiv pre {\n color: var(--md-default-fg-color--light);\n text-align: right;\n}\n.highlighttable .code {\n flex: 1;\n overflow: hidden;\n}\n\n.md-typeset .highlighttable {\n margin: 1em 0;\n direction: ltr;\n border-radius: 0.1rem;\n}\n.md-typeset .highlighttable code {\n border-radius: 0;\n}\n@media screen and (max-width: 44.9375em) {\n .md-typeset > .highlight {\n margin: 1em -0.8rem;\n }\n .md-typeset > .highlight .hll {\n margin: 0 -0.8rem;\n padding: 0 0.8rem;\n }\n .md-typeset > .highlight code {\n border-radius: 0;\n }\n .md-typeset > .highlighttable {\n margin: 1em -0.8rem;\n border-radius: 0;\n }\n .md-typeset > .highlighttable .hll {\n margin: 0 -0.8rem;\n padding: 0 0.8rem;\n }\n}\n\n.md-typeset .keys kbd::before,\n.md-typeset .keys kbd::after {\n position: relative;\n margin: 0;\n color: inherit;\n -moz-osx-font-smoothing: initial;\n -webkit-font-smoothing: initial;\n}\n.md-typeset .keys span {\n padding: 0 0.2em;\n color: var(--md-default-fg-color--light);\n}\n.md-typeset .keys .key-alt::before {\n padding-right: 0.4em;\n content: \"⎇\";\n}\n.md-typeset .keys .key-left-alt::before {\n padding-right: 0.4em;\n content: \"⎇\";\n}\n.md-typeset .keys .key-right-alt::before {\n padding-right: 0.4em;\n content: \"⎇\";\n}\n.md-typeset .keys .key-command::before {\n padding-right: 0.4em;\n content: \"⌘\";\n}\n.md-typeset .keys .key-left-command::before {\n padding-right: 0.4em;\n content: \"⌘\";\n}\n.md-typeset .keys .key-right-command::before {\n padding-right: 0.4em;\n content: \"⌘\";\n}\n.md-typeset .keys .key-control::before {\n padding-right: 0.4em;\n content: \"⌃\";\n}\n.md-typeset .keys .key-left-control::before {\n padding-right: 0.4em;\n content: \"⌃\";\n}\n.md-typeset .keys .key-right-control::before {\n padding-right: 0.4em;\n content: \"⌃\";\n}\n.md-typeset .keys .key-meta::before {\n padding-right: 0.4em;\n content: \"◆\";\n}\n.md-typeset .keys .key-left-meta::before {\n padding-right: 0.4em;\n content: \"◆\";\n}\n.md-typeset .keys .key-right-meta::before {\n padding-right: 0.4em;\n content: \"◆\";\n}\n.md-typeset .keys .key-option::before {\n padding-right: 0.4em;\n content: \"⌥\";\n}\n.md-typeset .keys .key-left-option::before {\n padding-right: 0.4em;\n content: \"⌥\";\n}\n.md-typeset .keys .key-right-option::before {\n padding-right: 0.4em;\n content: \"⌥\";\n}\n.md-typeset .keys .key-shift::before {\n padding-right: 0.4em;\n content: \"⇧\";\n}\n.md-typeset .keys .key-left-shift::before {\n padding-right: 0.4em;\n content: \"⇧\";\n}\n.md-typeset .keys .key-right-shift::before {\n padding-right: 0.4em;\n content: \"⇧\";\n}\n.md-typeset .keys .key-super::before {\n padding-right: 0.4em;\n content: \"❖\";\n}\n.md-typeset .keys .key-left-super::before {\n padding-right: 0.4em;\n content: \"❖\";\n}\n.md-typeset .keys .key-right-super::before {\n padding-right: 0.4em;\n content: \"❖\";\n}\n.md-typeset .keys .key-windows::before {\n padding-right: 0.4em;\n content: \"⊞\";\n}\n.md-typeset .keys .key-left-windows::before {\n padding-right: 0.4em;\n content: \"⊞\";\n}\n.md-typeset .keys .key-right-windows::before {\n padding-right: 0.4em;\n content: \"⊞\";\n}\n.md-typeset .keys .key-arrow-down::before {\n padding-right: 0.4em;\n content: \"↓\";\n}\n.md-typeset .keys .key-arrow-left::before {\n padding-right: 0.4em;\n content: \"←\";\n}\n.md-typeset .keys .key-arrow-right::before {\n padding-right: 0.4em;\n content: \"→\";\n}\n.md-typeset .keys .key-arrow-up::before {\n padding-right: 0.4em;\n content: \"↑\";\n}\n.md-typeset .keys .key-backspace::before {\n padding-right: 0.4em;\n content: \"⌫\";\n}\n.md-typeset .keys .key-backtab::before {\n padding-right: 0.4em;\n content: \"⇤\";\n}\n.md-typeset .keys .key-caps-lock::before {\n padding-right: 0.4em;\n content: \"⇪\";\n}\n.md-typeset .keys .key-clear::before {\n padding-right: 0.4em;\n content: \"⌧\";\n}\n.md-typeset .keys .key-context-menu::before {\n padding-right: 0.4em;\n content: \"☰\";\n}\n.md-typeset .keys .key-delete::before {\n padding-right: 0.4em;\n content: \"⌦\";\n}\n.md-typeset .keys .key-eject::before {\n padding-right: 0.4em;\n content: \"⏏\";\n}\n.md-typeset .keys .key-end::before {\n padding-right: 0.4em;\n content: \"⤓\";\n}\n.md-typeset .keys .key-escape::before {\n padding-right: 0.4em;\n content: \"⎋\";\n}\n.md-typeset .keys .key-home::before {\n padding-right: 0.4em;\n content: \"⤒\";\n}\n.md-typeset .keys .key-insert::before {\n padding-right: 0.4em;\n content: \"⎀\";\n}\n.md-typeset .keys .key-page-down::before {\n padding-right: 0.4em;\n content: \"⇟\";\n}\n.md-typeset .keys .key-page-up::before {\n padding-right: 0.4em;\n content: \"⇞\";\n}\n.md-typeset .keys .key-print-screen::before {\n padding-right: 0.4em;\n content: \"⎙\";\n}\n.md-typeset .keys .key-tab::after {\n padding-left: 0.4em;\n content: \"⇥\";\n}\n.md-typeset .keys .key-num-enter::after {\n padding-left: 0.4em;\n content: \"⌤\";\n}\n.md-typeset .keys .key-enter::after {\n padding-left: 0.4em;\n content: \"⏎\";\n}\n\n.md-typeset .tabbed-content {\n display: none;\n order: 99;\n width: 100%;\n box-shadow: 0 -0.05rem var(--md-default-fg-color--lightest);\n}\n@media print {\n .md-typeset .tabbed-content {\n display: block;\n order: initial;\n }\n}\n.md-typeset .tabbed-content > pre:only-child,\n.md-typeset .tabbed-content > .highlight:only-child pre,\n.md-typeset .tabbed-content > .highlighttable:only-child {\n margin: 0;\n}\n.md-typeset .tabbed-content > pre:only-child > code,\n.md-typeset .tabbed-content > .highlight:only-child pre > code,\n.md-typeset .tabbed-content > .highlighttable:only-child > code {\n border-top-left-radius: 0;\n border-top-right-radius: 0;\n}\n.md-typeset .tabbed-content > .tabbed-set {\n margin: 0;\n}\n.md-typeset .tabbed-set {\n position: relative;\n display: flex;\n flex-wrap: wrap;\n margin: 1em 0;\n border-radius: 0.1rem;\n}\n.md-typeset .tabbed-set > input {\n position: absolute;\n width: 0;\n height: 0;\n opacity: 0;\n}\n.md-typeset .tabbed-set > input:checked + label {\n color: var(--md-accent-fg-color);\n border-color: var(--md-accent-fg-color);\n}\n.md-typeset .tabbed-set > input:checked + label + .tabbed-content {\n display: block;\n}\n.md-typeset .tabbed-set > input:focus + label {\n outline-style: auto;\n outline-color: var(--md-accent-fg-color);\n}\n.md-typeset .tabbed-set > input:not(.focus-visible) + label {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n}\n.md-typeset .tabbed-set > label {\n z-index: 1;\n width: auto;\n padding: 0.9375em 1.25em 0.78125em;\n color: var(--md-default-fg-color--light);\n font-weight: 700;\n font-size: 0.64rem;\n border-bottom: 0.1rem solid transparent;\n cursor: pointer;\n transition: color 250ms;\n}\n.md-typeset .tabbed-set > label:hover {\n color: var(--md-accent-fg-color);\n}\n\n:root {\n --md-tasklist-icon:\n svg-load(\"octicons/check-circle-fill-24.svg\");\n --md-tasklist-icon--checked:\n svg-load(\"octicons/check-circle-fill-24.svg\");\n}\n\n.md-typeset .task-list-item {\n position: relative;\n list-style-type: none;\n}\n.md-typeset .task-list-item [type=checkbox] {\n position: absolute;\n top: 0.45em;\n left: -2em;\n}\n[dir=rtl] .md-typeset .task-list-item [type=checkbox] {\n right: -2em;\n left: initial;\n}\n.md-typeset .task-list-control [type=checkbox] {\n z-index: -1;\n opacity: 0;\n}\n.md-typeset .task-list-indicator::before {\n position: absolute;\n top: 0.15em;\n left: -1.5em;\n width: 1.25em;\n height: 1.25em;\n background-color: var(--md-default-fg-color--lightest);\n mask-image: var(--md-tasklist-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n}\n[dir=rtl] .md-typeset .task-list-indicator::before {\n right: -1.5em;\n left: initial;\n}\n.md-typeset [type=checkbox]:checked + .task-list-indicator::before {\n background-color: #00e676;\n mask-image: var(--md-tasklist-icon--checked);\n}\n\n@media screen and (min-width: 45em) {\n .md-typeset .inline {\n float: left;\n width: 11.7rem;\n margin-top: 0;\n margin-right: 0.8rem;\n margin-bottom: 0.8rem;\n }\n [dir=rtl] .md-typeset .inline {\n float: right;\n margin-right: 0;\n margin-left: 0.8rem;\n }\n .md-typeset .inline.end {\n float: right;\n margin-right: 0;\n margin-left: 0.8rem;\n }\n [dir=rtl] .md-typeset .inline.end {\n float: left;\n margin-right: 0.8rem;\n margin-left: 0;\n }\n}\n\n/*# sourceMappingURL=main.css.map */","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Enforce correct box model and prevent adjustments of font size after\n// orientation changes in IE and iOS\nhtml {\n box-sizing: border-box;\n text-size-adjust: none;\n}\n\n// All elements shall inherit the document default\n*,\n*::before,\n*::after {\n box-sizing: inherit;\n}\n\n// Remove margin in all browsers\nbody {\n margin: 0;\n}\n\n// Reset tap outlines on iOS and Android\na,\nbutton,\nlabel,\ninput {\n -webkit-tap-highlight-color: transparent;\n}\n\n// Reset link styles\na {\n color: inherit;\n text-decoration: none;\n}\n\n// Normalize horizontal separator styles\nhr {\n display: block;\n box-sizing: content-box;\n height: px2rem(1px);\n padding: 0;\n overflow: visible;\n border: 0;\n}\n\n// Normalize font-size in all browsers\nsmall {\n font-size: 80%;\n}\n\n// Prevent subscript and superscript from affecting line-height\nsub,\nsup {\n line-height: 1em;\n}\n\n// Remove border on image\nimg {\n border-style: none;\n}\n\n// Reset table styles\ntable {\n border-collapse: separate;\n border-spacing: 0;\n}\n\n// Reset table cell styles\ntd,\nth {\n font-weight: 400;\n vertical-align: top;\n}\n\n// Reset button styles\nbutton {\n margin: 0;\n padding: 0;\n font-size: inherit;\n font-family: inherit;\n background: transparent;\n border: 0;\n}\n\n// Reset input styles\ninput {\n border: 0;\n outline: none;\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Color definitions\n:root {\n\n // Default color shades\n --md-default-fg-color: hsla(0, 0%, 0%, 0.87);\n --md-default-fg-color--light: hsla(0, 0%, 0%, 0.54);\n --md-default-fg-color--lighter: hsla(0, 0%, 0%, 0.32);\n --md-default-fg-color--lightest: hsla(0, 0%, 0%, 0.07);\n --md-default-bg-color: hsla(0, 0%, 100%, 1);\n --md-default-bg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-default-bg-color--lighter: hsla(0, 0%, 100%, 0.3);\n --md-default-bg-color--lightest: hsla(0, 0%, 100%, 0.12);\n\n // Primary color shades\n --md-primary-fg-color: hsla(#{hex2hsl($clr-indigo-500)}, 1);\n --md-primary-fg-color--light: hsla(#{hex2hsl($clr-indigo-400)}, 1);\n --md-primary-fg-color--dark: hsla(#{hex2hsl($clr-indigo-700)}, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n\n // Accent color shades\n --md-accent-fg-color: hsla(#{hex2hsl($clr-indigo-a200)}, 1);\n --md-accent-fg-color--transparent: hsla(#{hex2hsl($clr-indigo-a200)}, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n\n // Light theme (default)\n > * {\n\n // Code color shades\n --md-code-fg-color: hsla(200, 18%, 26%, 1);\n --md-code-bg-color: hsla(0, 0%, 96%, 1);\n\n // Code highlighting color shades\n --md-code-hl-color: hsla(#{hex2hsl($clr-yellow-a200)}, 0.5);\n --md-code-hl-number-color: hsla(0, 67%, 50%, 1);\n --md-code-hl-special-color: hsla(340, 83%, 47%, 1);\n --md-code-hl-function-color: hsla(291, 45%, 50%, 1);\n --md-code-hl-constant-color: hsla(250, 63%, 60%, 1);\n --md-code-hl-keyword-color: hsla(219, 54%, 51%, 1);\n --md-code-hl-string-color: hsla(150, 63%, 30%, 1);\n --md-code-hl-name-color: var(--md-code-fg-color);\n --md-code-hl-operator-color: var(--md-default-fg-color--light);\n --md-code-hl-punctuation-color: var(--md-default-fg-color--light);\n --md-code-hl-comment-color: var(--md-default-fg-color--light);\n --md-code-hl-generic-color: var(--md-default-fg-color--light);\n --md-code-hl-variable-color: var(--md-default-fg-color--light);\n\n // Typeset color shades\n --md-typeset-color: var(--md-default-fg-color);\n\n // Typeset `a` color shades\n --md-typeset-a-color: var(--md-primary-fg-color);\n\n // Typeset `mark` color shades\n --md-typeset-mark-color: hsla(#{hex2hsl($clr-yellow-a200)}, 0.5);\n\n // Typeset `del` and `ins` color shades\n --md-typeset-del-color: hsla(6, 90%, 60%, 0.15);\n --md-typeset-ins-color: hsla(150, 90%, 44%, 0.15);\n\n // Typeset `kbd` color shades\n --md-typeset-kbd-color: hsla(0, 0%, 98%, 1);\n --md-typeset-kbd-accent-color: hsla(0, 100%, 100%, 1);\n --md-typeset-kbd-border-color: hsla(0, 0%, 72%, 1);\n\n // Admonition color shades\n --md-admonition-fg-color: var(--md-default-fg-color);\n --md-admonition-bg-color: var(--md-default-bg-color);\n\n // Footer color shades\n --md-footer-fg-color: hsla(0, 0%, 100%, 1);\n --md-footer-fg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-footer-fg-color--lighter: hsla(0, 0%, 100%, 0.3);\n --md-footer-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-footer-bg-color--dark: hsla(0, 0%, 0%, 0.32);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon\n.md-icon {\n\n // SVG defaults\n svg {\n display: block;\n width: px2rem(24px);\n height: px2rem(24px);\n fill: currentColor;\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules: font definitions\n// ----------------------------------------------------------------------------\n\n// Enable font-smoothing in Webkit and FF\nbody {\n -webkit-font-smoothing: antialiased;\n -moz-osx-font-smoothing: grayscale;\n}\n\n// Define default fonts\nbody,\ninput {\n color: var(--md-typeset-color);\n font-feature-settings: \"kern\", \"liga\";\n font-family:\n var(--md-text-font-family, _),\n -apple-system, BlinkMacSystemFont, Helvetica, Arial, sans-serif;\n}\n\n// Define monospaced fonts\ncode,\npre,\nkbd {\n color: var(--md-typeset-color);\n font-feature-settings: \"kern\";\n font-family:\n var(--md-code-font-family, _),\n SFMono-Regular, Consolas, Menlo, monospace;\n}\n\n// ----------------------------------------------------------------------------\n// Rules: typesetted content\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-typeset-table--ascending: svg-load(\"material/arrow-down.svg\");\n --md-typeset-table--descending: svg-load(\"material/arrow-up.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Content that is typeset - if possible, all margins, paddings and font sizes\n// should be set in ems, so nested blocks (e.g. admonitions) render correctly.\n.md-typeset {\n font-size: px2rem(16px);\n line-height: 1.6;\n color-adjust: exact;\n\n // [print]: We'll use a smaller `font-size` for printing, so code examples\n // don't break too early, and `16px` looks too big anyway.\n @media print {\n font-size: px2rem(13.6px);\n }\n\n // Default spacing\n ul,\n ol,\n dl,\n figure,\n blockquote,\n pre {\n margin: 1em 0;\n }\n\n // Headline on level 1\n h1 {\n margin: 0 0 px2em(40px, 32px);\n color: var(--md-default-fg-color--light);\n font-weight: 300;\n font-size: px2em(32px);\n line-height: 1.3;\n letter-spacing: -0.01em;\n }\n\n // Headline on level 2\n h2 {\n margin: px2em(40px, 25px) 0 px2em(16px, 25px);\n font-weight: 300;\n font-size: px2em(25px);\n line-height: 1.4;\n letter-spacing: -0.01em;\n }\n\n // Headline on level 3\n h3 {\n margin: px2em(32px, 20px) 0 px2em(16px, 20px);\n font-weight: 400;\n font-size: px2em(20px);\n line-height: 1.5;\n letter-spacing: -0.01em;\n }\n\n // Headline on level 3 following level 2\n h2 + h3 {\n margin-top: px2em(16px, 20px);\n }\n\n // Headline on level 4\n h4 {\n margin: px2em(16px) 0;\n font-weight: 700;\n letter-spacing: -0.01em;\n }\n\n // Headline on level 5-6\n h5,\n h6 {\n margin: px2em(16px, 12.8px) 0;\n color: var(--md-default-fg-color--light);\n font-weight: 700;\n font-size: px2em(12.8px);\n letter-spacing: -0.01em;\n }\n\n // Headline on level 5\n h5 {\n text-transform: uppercase;\n }\n\n // Horizontal separator\n hr {\n display: flow-root;\n margin: 1.5em 0;\n border-bottom: px2rem(1px) solid var(--md-default-fg-color--lightest);\n }\n\n // Text link\n a {\n color: var(--md-typeset-a-color);\n word-break: break-word;\n\n // Also enable color transition on pseudo elements\n &,\n &::before {\n transition: color 125ms;\n }\n\n // Text link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Text link on keyboard focus\n &.focus-visible {\n outline-color: var(--md-accent-fg-color);\n outline-offset: px2rem(4px);\n }\n }\n\n // Code block\n code,\n pre,\n kbd {\n color: var(--md-code-fg-color);\n direction: ltr;\n\n // [print]: Wrap text and hide scollbars\n @media print {\n white-space: pre-wrap;\n }\n }\n\n // Inline code block\n code {\n padding: 0 px2em(4px, 13.6px);\n font-size: px2em(13.6px);\n word-break: break-word;\n background-color: var(--md-code-bg-color);\n border-radius: px2rem(2px);\n box-decoration-break: clone;\n\n // Hide outline for pointer devices\n &:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n }\n }\n\n // Code block in headline\n h1 code,\n h2 code,\n h3 code,\n h4 code,\n h5 code,\n h6 code {\n margin: initial;\n padding: initial;\n background-color: transparent;\n box-shadow: none;\n }\n\n // Ensure link color in code blocks\n a code {\n color: currentColor;\n }\n\n // Unformatted content\n pre {\n position: relative;\n display: flow-root;\n line-height: 1.4;\n\n // Code block\n > code {\n display: block;\n margin: 0;\n padding: px2em(10.5px, 13.6px) px2em(16px, 13.6px);\n overflow: auto;\n word-break: normal;\n box-shadow: none;\n box-decoration-break: slice;\n touch-action: auto;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n\n // Code block on hover\n &:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n }\n\n // Webkit scrollbar\n &::-webkit-scrollbar {\n width: px2rem(4px);\n height: px2rem(4px);\n }\n\n // Webkit scrollbar thumb\n &::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n\n // Webkit scrollbar thumb on hover\n &:hover {\n background-color: var(--md-accent-fg-color);\n }\n }\n }\n }\n\n // [mobile -]: Align with body copy\n @include break-to-device(mobile) {\n\n // Unformatted text\n > pre {\n margin: 1em px2rem(-16px);\n\n // Code block\n code {\n border-radius: 0;\n }\n }\n }\n\n // Keyboard key\n kbd {\n display: inline-block;\n padding: 0 px2em(8px, 12px);\n color: var(--md-default-fg-color);\n font-size: px2em(12px);\n vertical-align: text-top;\n word-break: break-word;\n background-color: var(--md-typeset-kbd-color);\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(2px) 0 px2rem(1px) var(--md-typeset-kbd-border-color),\n 0 px2rem(2px) 0 var(--md-typeset-kbd-border-color),\n 0 px2rem(-2px) px2rem(4px) var(--md-typeset-kbd-accent-color) inset;\n }\n\n // Text highlighting marker\n mark {\n color: inherit;\n word-break: break-word;\n background-color: var(--md-typeset-mark-color);\n box-decoration-break: clone;\n }\n\n // Abbreviation\n abbr {\n text-decoration: none;\n border-bottom: px2rem(1px) dotted var(--md-default-fg-color--light);\n cursor: help;\n\n // Show tooltip for touch devices\n @media (hover: none) {\n position: relative;\n\n // Tooltip\n &[title]:focus::after,\n &[title]:hover::after {\n @include z-depth(2);\n\n position: absolute;\n left: 0;\n display: inline-block;\n width: auto;\n min-width: max-content;\n max-width: 80%;\n margin-top: 2em;\n padding: px2rem(4px) px2rem(6px);\n color: var(--md-default-bg-color);\n font-size: px2rem(14px);\n background-color: var(--md-default-fg-color);\n border-radius: px2rem(2px);\n content: attr(title);\n }\n }\n }\n\n // Small text\n small {\n opacity: 0.75;\n }\n\n // Superscript and subscript\n sup,\n sub {\n margin-left: px2em(1px, 12.8px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2em(1px, 12.8px);\n margin-left: initial;\n }\n }\n\n // Blockquotes, possibly nested\n blockquote {\n display: flow-root;\n padding-left: px2rem(12px);\n color: var(--md-default-fg-color--light);\n border-left: px2rem(4px) solid var(--md-default-fg-color--lighter);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(12px);\n padding-left: initial;\n border-right: px2rem(4px) solid var(--md-default-fg-color--lighter);\n border-left: initial;\n }\n }\n\n // Unordered list\n ul {\n list-style-type: disc;\n }\n\n // Unordered and ordered list\n ul,\n ol {\n display: flow-root;\n margin-left: px2em(10px);\n padding: 0;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2em(10px);\n margin-left: initial;\n }\n\n // Nested ordered list\n ol {\n list-style-type: lower-alpha;\n\n // Triply nested ordered list\n ol {\n list-style-type: lower-roman;\n }\n }\n\n // List element\n li {\n margin-bottom: 0.5em;\n margin-left: px2em(20px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2em(20px);\n margin-left: initial;\n }\n\n // Adjust spacing\n p,\n blockquote {\n margin: 0.5em 0;\n }\n\n // Adjust spacing on last child\n &:last-child {\n margin-bottom: 0;\n }\n\n // Nested list\n ul,\n ol {\n margin: 0.5em 0 0.5em px2em(10px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2em(10px);\n margin-left: initial;\n }\n }\n }\n }\n\n // Definition list\n dd {\n margin: 1em 0 1.5em px2em(30px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2em(30px);\n margin-left: initial;\n }\n }\n\n // Image or icon\n img,\n svg {\n max-width: 100%;\n height: auto;\n\n // Adjust spacing when left-aligned\n &[align=\"left\"] {\n margin: 1em;\n margin-left: 0;\n }\n\n // Adjust spacing when right-aligned\n &[align=\"right\"] {\n margin: 1em;\n margin-right: 0;\n }\n\n // Adjust spacing when sole children\n &[align]:only-child {\n margin-top: 0;\n }\n }\n\n // Figure\n figure {\n display: flow-root;\n width: fit-content;\n max-width: 100%;\n margin: 0 auto;\n text-align: center;\n\n // Figure images\n img {\n display: block;\n }\n }\n\n // Figure caption\n figcaption {\n max-width: px2rem(480px);\n margin: 1em auto 2em;\n font-style: italic;\n }\n\n // Limit width to container\n iframe {\n max-width: 100%;\n }\n\n // Data table\n table:not([class]) {\n display: inline-block;\n max-width: 100%;\n overflow: auto;\n font-size: px2rem(12.8px);\n background-color: var(--md-default-bg-color);\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.05),\n 0 0 px2rem(1px) hsla(0, 0%, 0%, 0.1);\n touch-action: auto;\n\n // [print]: Reset display mode so table header wraps when printing\n @media print {\n display: table;\n }\n\n // Due to margin collapse because of the necessary inline-block hack, we\n // cannot increase the bottom margin on the table, so we just increase the\n // top margin on the following element\n + * {\n margin-top: 1.5em;\n }\n\n // Elements in table heading and cell\n th > *,\n td > * {\n\n // Adjust spacing on first child\n &:first-child {\n margin-top: 0;\n }\n\n // Adjust spacing on last child\n &:last-child {\n margin-bottom: 0;\n }\n }\n\n // Table heading and cell\n th:not([align]),\n td:not([align]) {\n text-align: left;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n text-align: right;\n }\n }\n\n // Table heading\n th {\n min-width: px2rem(100px);\n padding: px2em(12px, 12.8px) px2em(16px, 12.8px);\n color: var(--md-default-bg-color);\n vertical-align: top;\n background-color: var(--md-default-fg-color--light);\n\n // Links in table headings\n a {\n color: inherit;\n }\n }\n\n // Table cell\n td {\n padding: px2em(12px, 12.8px) px2em(16px, 12.8px);\n vertical-align: top;\n border-top: px2rem(1px) solid var(--md-default-fg-color--lightest);\n }\n\n // Table row\n tr {\n transition: background-color 125ms;\n\n // Table row on hover\n &:hover {\n background-color: rgba(0, 0, 0, 0.035);\n box-shadow: 0 px2rem(1px) 0 var(--md-default-bg-color) inset;\n }\n\n // Hide border on first table row\n &:first-child td {\n border-top: 0;\n }\n }\n\n // Text link in table\n a {\n word-break: normal;\n }\n }\n\n // Sortable table\n table th[role=\"columnheader\"] {\n cursor: pointer;\n\n // Sort icon\n &::after {\n display: inline-block;\n width: 1.2em;\n height: 1.2em;\n margin-left: 0.5em;\n vertical-align: sub;\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n\n // Sort ascending\n &[aria-sort=\"ascending\"]::after {\n background-color: currentColor;\n mask-image: var(--md-typeset-table--ascending);\n }\n\n // Sort descending\n &[aria-sort=\"descending\"]::after {\n background-color: currentColor;\n mask-image: var(--md-typeset-table--descending);\n }\n }\n\n // Data table scroll wrapper\n &__scrollwrap {\n margin: 1em px2rem(-16px);\n overflow-x: auto;\n touch-action: auto;\n }\n\n // Data table wrapper\n &__table {\n display: inline-block;\n margin-bottom: 0.5em;\n padding: 0 px2rem(16px);\n\n // [print]: Reset display mode so table header wraps when printing\n @media print {\n display: block;\n }\n\n // Data table\n html & table {\n display: table;\n width: 100%;\n margin: 0;\n overflow: hidden;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Variables\n// ----------------------------------------------------------------------------\n\n///\n/// Device-specific breakpoints\n///\n/// @example\n/// $break-devices: (\n/// mobile: (\n/// portrait: 220px 479px,\n/// landscape: 480px 719px\n/// ),\n/// tablet: (\n/// portrait: 720px 959px,\n/// landscape: 960px 1219px\n/// ),\n/// screen: (\n/// small: 1220px 1599px,\n/// medium: 1600px 1999px,\n/// large: 2000px\n/// )\n/// );\n///\n$break-devices: () !default;\n\n// ----------------------------------------------------------------------------\n// Helpers\n// ----------------------------------------------------------------------------\n\n///\n/// Choose minimum and maximum device widths\n///\n@function break-select-min-max($devices) {\n $min: 1000000;\n $max: 0;\n @each $key, $value in $devices {\n @while type-of($value) == map {\n $value: break-select-min-max($value);\n }\n @if type-of($value) == list {\n @each $number in $value {\n @if type-of($number) == number {\n $min: min($number, $min);\n @if $max {\n $max: max($number, $max);\n }\n } @else {\n @error \"Invalid number: #{$number}\";\n }\n }\n } @else if type-of($value) == number {\n $min: min($value, $min);\n $max: null;\n } @else {\n @error \"Invalid value: #{$value}\";\n }\n }\n @return $min, $max;\n}\n\n///\n/// Select minimum and maximum widths for a device breakpoint\n///\n@function break-select-device($device) {\n $current: $break-devices;\n @for $n from 1 through length($device) {\n @if type-of($current) == map {\n $current: map-get($current, nth($device, $n));\n } @else {\n @error \"Invalid device map: #{$devices}\";\n }\n }\n @if type-of($current) == list or type-of($current) == number {\n $current: (default: $current);\n }\n @return break-select-min-max($current);\n}\n\n// ----------------------------------------------------------------------------\n// Mixins\n// ----------------------------------------------------------------------------\n\n///\n/// A minimum-maximum media query breakpoint\n///\n@mixin break-at($breakpoint) {\n @if type-of($breakpoint) == number {\n @media screen and (min-width: $breakpoint) {\n @content;\n }\n } @else if type-of($breakpoint) == list {\n $min: nth($breakpoint, 1);\n $max: nth($breakpoint, 2);\n @if type-of($min) == number and type-of($max) == number {\n @media screen and (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// An orientation media query breakpoint\n///\n@mixin break-at-orientation($breakpoint) {\n @if type-of($breakpoint) == string {\n @media screen and (orientation: $breakpoint) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// A maximum-aspect-ratio media query breakpoint\n///\n@mixin break-at-ratio($breakpoint) {\n @if type-of($breakpoint) == number {\n @media screen and (max-aspect-ratio: $breakpoint) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// A minimum-maximum media query device breakpoint\n///\n@mixin break-at-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n @if nth($breakpoint, 2) {\n $min: nth($breakpoint, 1);\n $max: nth($breakpoint, 2);\n\n @media screen and (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n\n///\n/// A minimum media query device breakpoint\n///\n@mixin break-from-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n $min: nth($breakpoint, 1);\n\n @media screen and (min-width: $min) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n\n///\n/// A maximum media query device breakpoint\n///\n@mixin break-to-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n $max: nth($breakpoint, 2);\n\n @media screen and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n","//\n// Name: Material Shadows\n// Description: Mixins for Material Design Shadows.\n// Version: 3.0.1\n//\n// Author: Denis Malinochkin\n// Git: https://github.com/mrmlnc/material-shadows\n//\n// twitter: @mrmlnc\n//\n// ------------------------------------\n\n\n// Mixins\n// ------------------------------------\n\n@mixin z-depth-transition() {\n transition: box-shadow .28s cubic-bezier(.4, 0, .2, 1);\n}\n\n@mixin z-depth-focus() {\n box-shadow: 0 0 8px rgba(0, 0, 0, .18), 0 8px 16px rgba(0, 0, 0, .36);\n}\n\n@mixin z-depth-2dp() {\n box-shadow: 0 2px 2px 0 rgba(0, 0, 0, .14),\n 0 1px 5px 0 rgba(0, 0, 0, .12),\n 0 3px 1px -2px rgba(0, 0, 0, .2);\n}\n\n@mixin z-depth-3dp() {\n box-shadow: 0 3px 4px 0 rgba(0, 0, 0, .14),\n 0 1px 8px 0 rgba(0, 0, 0, .12),\n 0 3px 3px -2px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth-4dp() {\n box-shadow: 0 4px 5px 0 rgba(0, 0, 0, .14),\n 0 1px 10px 0 rgba(0, 0, 0, .12),\n 0 2px 4px -1px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth-6dp() {\n box-shadow: 0 6px 10px 0 rgba(0, 0, 0, .14),\n 0 1px 18px 0 rgba(0, 0, 0, .12),\n 0 3px 5px -1px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth-8dp() {\n box-shadow: 0 8px 10px 1px rgba(0, 0, 0, .14),\n 0 3px 14px 2px rgba(0, 0, 0, .12),\n 0 5px 5px -3px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth-16dp() {\n box-shadow: 0 16px 24px 2px rgba(0, 0, 0, .14),\n 0 6px 30px 5px rgba(0, 0, 0, .12),\n 0 8px 10px -5px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth-24dp() {\n box-shadow: 0 9px 46px 8px rgba(0, 0, 0, .14),\n 0 24px 38px 3px rgba(0, 0, 0, .12),\n 0 11px 15px -7px rgba(0, 0, 0, .4);\n}\n\n@mixin z-depth($dp: 2) {\n @if $dp == 2 {\n @include z-depth-2dp();\n } @else if $dp == 3 {\n @include z-depth-3dp();\n } @else if $dp == 4 {\n @include z-depth-4dp();\n } @else if $dp == 6 {\n @include z-depth-6dp();\n } @else if $dp == 8 {\n @include z-depth-8dp();\n } @else if $dp == 16 {\n @include z-depth-16dp();\n } @else if $dp == 24 {\n @include z-depth-24dp();\n }\n}\n\n\n// Class generator\n// ------------------------------------\n\n@mixin z-depth-classes($transition: false, $focus: false) {\n @if $transition == true {\n &-transition {\n @include z-depth-transition();\n }\n }\n\n @if $focus == true {\n &-focus {\n @include z-depth-focus();\n }\n }\n\n // The available values for the shadow depth\n @each $depth in 2, 3, 4, 6, 8, 16, 24 {\n &-#{$depth}dp {\n @include z-depth($depth);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules: base grid and containers\n// ----------------------------------------------------------------------------\n\n// Stretch container to viewport and set base `font-size`\nhtml {\n height: 100%;\n overflow-x: hidden;\n // Hack: normally, we would set the base `font-size` to `62.5%`, so we can\n // base all calculations on `10px`, but Chromium and Chrome define a minimal\n // `font-size` of `12px` if the system language is set to Chinese. For this\n // reason we just double the `font-size` and set it to `20px`.\n //\n // See https://github.com/squidfunk/mkdocs-material/issues/911\n font-size: 125%;\n\n // [screen medium +]: Set base `font-size` to `11px`\n @include break-from-device(screen medium) {\n font-size: 137.5%;\n }\n\n // [screen large +]: Set base `font-size` to `12px`\n @include break-from-device(screen large) {\n font-size: 150%;\n }\n}\n\n// Stretch body to container - flexbox is used, so the footer will always be\n// aligned to the bottom of the viewport\nbody {\n position: relative;\n display: flex;\n flex-direction: column;\n width: 100%;\n min-height: 100%;\n // Hack: reset `font-size` to `10px`, so the spacing for all inline elements\n // is correct again. Otherwise the spacing would be based on `20px`.\n font-size: px2rem(10px);\n background-color: var(--md-default-bg-color);\n\n // [print]: Omit flexbox layout due to a Firefox bug (https://mzl.la/39DgR3m)\n @media print {\n display: block;\n }\n\n // Body in locked state\n &[data-md-state=\"lock\"] {\n\n // [tablet portrait -]: Omit scroll bubbling\n @include break-to-device(tablet portrait) {\n position: fixed;\n }\n }\n}\n\n// ----------------------------------------------------------------------------\n\n// Grid container - this class is applied to wrapper elements within the\n// header, content area and footer, and makes sure that their width is limited\n// to `1220px`, and they are rendered centered if the screen is larger.\n.md-grid {\n max-width: px2rem(1220px);\n margin-right: auto;\n margin-left: auto;\n}\n\n// Main container\n.md-container {\n display: flex;\n flex-direction: column;\n flex-grow: 1;\n\n // [print]: Omit flexbox layout due to a Firefox bug (https://mzl.la/39DgR3m)\n @media print {\n display: block;\n }\n}\n\n// Main area - stretch to remaining space of container\n.md-main {\n flex-grow: 1;\n\n // Main area wrapper\n &__inner {\n display: flex;\n height: 100%;\n margin-top: px2rem(24px + 6px);\n }\n}\n\n// Add ellipsis in case of overflowing text\n.md-ellipsis {\n overflow: hidden;\n white-space: nowrap;\n text-overflow: ellipsis;\n}\n\n// ----------------------------------------------------------------------------\n// Rules: navigational elements\n// ----------------------------------------------------------------------------\n\n// Toggle - this class is applied to checkbox elements, which are used to\n// implement the CSS-only drawer and navigation, as well as the search\n.md-toggle {\n display: none;\n}\n\n// Option - this class is applied to radio elements, which are used to\n// implement the color palette toggle\n.md-option {\n position: absolute;\n width: 0;\n height: 0;\n opacity: 0;\n\n // Option label for checked radio button\n &:checked + label:not([hidden]) {\n display: block;\n }\n\n // Show outline for pointer devices\n &.focus-visible + label {\n outline-style: auto;\n outline-color: var(--md-accent-fg-color);\n }\n}\n\n// Skip link\n.md-skip {\n position: fixed;\n // Hack: if we don't set the negative `z-index`, the skip link will force the\n // creation of new layers when code blocks are near the header on scrolling\n z-index: -1;\n margin: px2rem(10px);\n padding: px2rem(6px) px2rem(10px);\n color: var(--md-default-bg-color);\n font-size: px2rem(12.8px);\n background-color: var(--md-default-fg-color);\n border-radius: px2rem(2px);\n outline-color: var(--md-accent-fg-color);\n transform: translateY(px2rem(8px));\n opacity: 0;\n\n // Show skip link on focus\n &:focus {\n z-index: 10;\n transform: translateY(0);\n opacity: 1;\n transition:\n transform 250ms cubic-bezier(0.4, 0, 0.2, 1),\n opacity 175ms 75ms;\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules: print styles\n// ----------------------------------------------------------------------------\n\n// Add margins to page\n@page {\n margin: 25mm;\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Announcement bar\n.md-announce {\n overflow: auto;\n background-color: var(--md-footer-bg-color);\n\n // [print]: Hide announcement bar\n @media print {\n display: none;\n }\n\n // Announcement wrapper\n &__inner {\n margin: px2rem(12px) auto;\n padding: 0 px2rem(16px);\n color: var(--md-footer-fg-color);\n font-size: px2rem(14px);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-clipboard-icon: svg-load(\"material/content-copy.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Button to copy to clipboard\n.md-clipboard {\n position: absolute;\n top: px2em(8px);\n right: px2em(8px);\n z-index: 1;\n width: px2em(24px);\n height: px2em(24px);\n color: var(--md-default-fg-color--lightest);\n border-radius: px2rem(2px);\n outline-color: var(--md-accent-fg-color);\n outline-offset: px2rem(2px);\n cursor: pointer;\n transition: color 250ms;\n\n // [print]: Hide button\n @media print {\n display: none;\n }\n\n // Hide outline for pointer devices\n &:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n }\n\n // Darken color on code block hover\n :hover > & {\n color: var(--md-default-fg-color--light);\n }\n\n // Button on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Button icon - the width and height are defined in `em`, so the size is\n // automatically adjusted for nested code blocks (e.g. in admonitions)\n &::after {\n display: block;\n width: px2em(18px);\n height: px2em(18px);\n margin: 0 auto;\n background-color: currentColor;\n mask-image: var(--md-clipboard-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n\n // Inline button\n &--inline {\n cursor: pointer;\n\n // Code block\n code {\n transition:\n color 250ms,\n background-color 250ms;\n }\n\n // Code block on focus/hover\n &:focus code,\n &:hover code {\n color: var(--md-accent-fg-color);\n background-color: var(--md-accent-fg-color--transparent);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Content area\n.md-content {\n flex-grow: 1;\n // Hack: we must use `overflow: hidden`, so the content area is capped by\n // the dimensions of its parent. Otherwise, long code blocks might lead to\n // a wider content area which will break everything. This, however, induces\n // margin collapse, which will break scroll margins. Adding a large enough\n // scroll padding seems to do the trick, at least in Chrome and Firefox.\n overflow: hidden;\n scroll-padding-top: px2rem(1024px);\n\n // Content wrapper\n &__inner {\n margin: 0 px2rem(16px) px2rem(24px);\n padding-top: px2rem(12px);\n\n // [screen +]: Adjust spacing between content area and sidebars\n @include break-from-device(screen) {\n\n // Sidebar with navigation is visible\n .md-sidebar--primary:not([hidden]) ~ .md-content > & {\n margin-left: px2rem(24px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(24px);\n margin-left: px2rem(16px);\n }\n }\n\n // Sidebar with table of contents is visible\n .md-sidebar--secondary:not([hidden]) ~ .md-content > & {\n margin-right: px2rem(24px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(16px);\n margin-left: px2rem(24px);\n }\n }\n }\n\n // Hack: add pseudo element for spacing, as the overflow of the content\n // container may not be hidden due to an imminent offset error on targets\n &::before {\n display: block;\n height: px2rem(8px);\n content: \"\";\n }\n\n // Adjust spacing on last child\n > :last-child {\n margin-bottom: 0;\n }\n }\n\n // Button inside of the content area - these buttons are meant for actions on\n // a document-level, i.e. linking to related source code files, printing etc.\n &__button {\n float: right;\n margin: px2rem(8px) 0;\n margin-left: px2rem(8px);\n padding: 0;\n\n // [print]: Hide buttons\n @media print {\n display: none;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n margin-right: px2rem(8px);\n margin-left: initial;\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n\n // Adjust default link color for icons\n .md-typeset & {\n color: var(--md-default-fg-color--lighter);\n }\n\n // Align with body copy located next to icon\n svg {\n display: inline;\n vertical-align: top;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Dialog\n.md-dialog {\n @include z-depth(2);\n\n position: fixed;\n right: px2rem(16px);\n bottom: px2rem(16px);\n left: initial;\n z-index: 2;\n min-width: px2rem(222px);\n padding: px2rem(8px) px2rem(12px);\n background-color: var(--md-default-fg-color);\n border-radius: px2rem(2px);\n transform: translateY(100%);\n opacity: 0;\n transition:\n transform 0ms 400ms,\n opacity 400ms;\n pointer-events: none;\n\n // [print]: Hide dialog\n @media print {\n display: none;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: initial;\n left: px2rem(16px);\n }\n\n // Dialog in open state\n &[data-md-state=\"open\"] {\n transform: translateY(0);\n opacity: 1;\n transition:\n transform 400ms cubic-bezier(0.075, 0.85, 0.175, 1),\n opacity 400ms;\n pointer-events: initial;\n }\n\n // Dialog wrapper\n &__inner {\n color: var(--md-default-bg-color);\n font-size: px2rem(14px);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Form button\n .md-button {\n display: inline-block;\n padding: px2em(10px) px2em(32px);\n color: var(--md-primary-fg-color);\n font-weight: 700;\n border: px2rem(2px) solid currentColor;\n border-radius: px2rem(2px);\n transition:\n color 125ms,\n background-color 125ms,\n border-color 125ms;\n\n // Primary button\n &--primary {\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n border-color: var(--md-primary-fg-color);\n }\n\n // Button on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-bg-color);\n background-color: var(--md-accent-fg-color);\n border-color: var(--md-accent-fg-color);\n }\n }\n\n // Form input\n .md-input {\n height: px2rem(36px);\n padding: 0 px2rem(12px);\n font-size: px2rem(16px);\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.1),\n 0 px2rem(0.5px) px2rem(1px) hsla(0, 0%, 0%, 0.1);\n transition: box-shadow 250ms;\n\n // Input on focus/hover\n &:focus,\n &:hover {\n box-shadow:\n 0 px2rem(8px) px2rem(20px) hsla(0, 0%, 0%, 0.15),\n 0 px2rem(0.5px) px2rem(1px) hsla(0, 0%, 0%, 0.15);\n }\n\n // Stretch to full width\n &--stretch {\n width: 100%;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Header - by default, the header will be sticky and stay always on top of the\n// viewport. If this behavior is not desired, just set `position: static`.\n.md-header {\n position: sticky;\n top: 0;\n right: 0;\n left: 0;\n z-index: 2;\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n // Hack: reduce jitter by adding a transparent box shadow of the same size\n // so the size of the layer doesn't change during animation\n box-shadow:\n 0 0 px2rem(4px) rgba(0, 0, 0, 0),\n 0 px2rem(4px) px2rem(8px) rgba(0, 0, 0, 0);\n\n // [print]: Hide header\n @media print {\n display: none;\n }\n\n // Header in shadow state, i.e. shadow is visible\n &[data-md-state=\"shadow\"] {\n box-shadow:\n 0 0 px2rem(4px) rgba(0, 0, 0, 0.1),\n 0 px2rem(4px) px2rem(8px) rgba(0, 0, 0, 0.2);\n transition:\n transform 250ms cubic-bezier(0.1, 0.7, 0.1, 1),\n box-shadow 250ms;\n }\n\n // Header in hidden state, i.e. moved out of sight\n &[data-md-state=\"hidden\"] {\n transform: translateY(-100%);\n transition:\n transform 250ms cubic-bezier(0.8, 0, 0.6, 1),\n box-shadow 250ms;\n }\n\n // Header wrapper\n &__inner {\n display: flex;\n align-items: center;\n padding: 0 px2rem(4px);\n }\n\n // Header button\n &__button {\n position: relative;\n z-index: 1;\n margin: px2rem(4px);\n padding: px2rem(8px);\n color: currentColor;\n vertical-align: middle;\n outline-color: var(--md-accent-fg-color);\n cursor: pointer;\n transition: opacity 250ms;\n\n // Button on hover\n &:hover {\n opacity: 0.7;\n }\n\n // Header button is visible\n &:not([hidden]) {\n display: inline-block;\n }\n\n // Hide outline for pointer devices\n &:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n }\n\n // Button with logo, pointing to `config.site_url`\n &.md-logo {\n margin: px2rem(4px);\n padding: px2rem(8px);\n\n // [tablet -]: Hide button\n @include break-to-device(tablet) {\n display: none;\n }\n\n // Image or icon\n img,\n svg {\n display: block;\n width: px2rem(24px);\n height: px2rem(24px);\n fill: currentColor;\n }\n }\n\n // Button for search\n &[for=\"__search\"] {\n\n // [tablet landscape +]: Hide button\n @include break-from-device(tablet landscape) {\n display: none;\n }\n\n // [no-js]: Hide button\n .no-js & {\n display: none;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n }\n\n // Button for drawer\n &[for=\"__drawer\"] {\n\n // [screen +]: Hide button\n @include break-from-device(screen) {\n display: none;\n }\n }\n }\n\n // Header topic\n &__topic {\n position: absolute;\n display: flex;\n max-width: 100%;\n transition:\n transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 150ms;\n\n // Second header topic - title of the current page\n & + & {\n z-index: -1;\n transform: translateX(px2rem(25px));\n opacity: 0;\n transition:\n transform 400ms cubic-bezier(1, 0.7, 0.1, 0.1),\n opacity 150ms;\n pointer-events: none;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n transform: translateX(px2rem(-25px));\n }\n }\n }\n\n // Header title\n &__title {\n flex-grow: 1;\n height: px2rem(48px);\n margin-right: px2rem(8px);\n margin-left: px2rem(20px);\n font-size: px2rem(18px);\n line-height: px2rem(48px);\n\n // Header title in active state, i.e. page title is visible\n &[data-md-state=\"active\"] .md-header__topic {\n z-index: -1;\n transform: translateX(px2rem(-25px));\n opacity: 0;\n transition:\n transform 400ms cubic-bezier(1, 0.7, 0.1, 0.1),\n opacity 150ms;\n pointer-events: none;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n transform: translateX(px2rem(25px));\n }\n\n // Second header topic - title of the current page\n + .md-header__topic {\n z-index: 0;\n transform: translateX(0);\n opacity: 1;\n transition:\n transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 150ms;\n pointer-events: initial;\n }\n }\n\n // Add ellipsis in case of overflowing text\n > .md-header__ellipsis {\n position: relative;\n width: 100%;\n height: 100%;\n }\n }\n\n // Header option\n &__option {\n display: flex;\n flex-shrink: 0;\n max-width: 100%;\n white-space: nowrap;\n transition:\n max-width 0ms 250ms,\n opacity 250ms 250ms;\n\n // Hide toggle when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n max-width: 0;\n opacity: 0;\n transition:\n max-width 0ms,\n opacity 0ms;\n }\n }\n\n // Repository information container\n &__source {\n display: none;\n\n // [tablet landscape +]: Show repository information\n @include break-from-device(tablet landscape) {\n display: block;\n width: px2rem(234px);\n max-width: px2rem(234px);\n margin-left: px2rem(20px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(20px);\n margin-left: initial;\n }\n }\n\n // [screen +]: Adjust spacing of search bar\n @include break-from-device(screen) {\n margin-left: px2rem(28px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(28px);\n }\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Footer\n.md-footer {\n color: var(--md-footer-fg-color);\n background-color: var(--md-footer-bg-color);\n\n // [print]: Hide footer\n @media print {\n display: none;\n }\n\n // Footer wrapper\n &__inner {\n padding: px2rem(4px);\n overflow: auto;\n }\n\n // Footer link to previous and next page\n &__link {\n display: flex;\n padding-top: px2rem(28px);\n padding-bottom: px2rem(8px);\n outline-color: var(--md-accent-fg-color);\n transition: opacity 250ms;\n\n // [tablet +]: Adjust width to 50/50\n @include break-from-device(tablet) {\n width: 50%;\n }\n\n // Footer link on focus/hover\n &:focus,\n &:hover {\n opacity: 0.7;\n }\n\n // Footer link to previous page\n &--prev {\n float: left;\n\n // [mobile -]: Adjust width to 25/75 and hide title\n @include break-to-device(mobile) {\n width: 25%;\n\n // Hide footer title\n .md-footer__title {\n display: none;\n }\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: right;\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n }\n\n // Footer link to next page\n &--next {\n float: right;\n text-align: right;\n\n // [mobile -]: Adjust width to 25/75\n @include break-to-device(mobile) {\n width: 75%;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n text-align: left;\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n }\n }\n\n // Footer title\n &__title {\n position: relative;\n flex-grow: 1;\n max-width: calc(100% - #{px2rem(48px)});\n padding: 0 px2rem(20px);\n font-size: px2rem(18px);\n line-height: px2rem(48px);\n }\n\n // Footer link button\n &__button {\n margin: px2rem(4px);\n padding: px2rem(8px);\n }\n\n // Footer link direction (i.e. prev and next)\n &__direction {\n position: absolute;\n right: 0;\n left: 0;\n margin-top: px2rem(-20px);\n padding: 0 px2rem(20px);\n font-size: px2rem(12.8px);\n opacity: 0.7;\n }\n}\n\n// Footer metadata\n.md-footer-meta {\n background-color: var(--md-footer-bg-color--dark);\n\n // Footer metadata wrapper\n &__inner {\n display: flex;\n flex-wrap: wrap;\n justify-content: space-between;\n padding: px2rem(4px);\n }\n\n // Lighten color for non-hovered text links\n html &.md-typeset a {\n color: var(--md-footer-fg-color--light);\n\n // Text link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-footer-fg-color);\n }\n }\n}\n\n// Footer copyright and theme information\n.md-footer-copyright {\n width: 100%;\n margin: auto px2rem(12px);\n padding: px2rem(8px) 0;\n color: var(--md-footer-fg-color--lighter);\n font-size: px2rem(12.8px);\n\n // [tablet portrait +]: Show copyright and social links in one line\n @include break-from-device(tablet portrait) {\n width: auto;\n }\n\n // Footer copyright highlight - this is the upper part of the copyright and\n // theme information, which will include a darker color than the theme link\n &__highlight {\n color: var(--md-footer-fg-color--light);\n }\n}\n\n// Footer social links\n.md-footer-social {\n margin: 0 px2rem(8px);\n padding: px2rem(4px) 0 px2rem(12px);\n\n // [tablet portrait +]: Show copyright and social links in one line\n @include break-from-device(tablet portrait) {\n padding: px2rem(12px) 0;\n }\n\n // Footer social link\n &__link {\n display: inline-block;\n width: px2rem(32px);\n height: px2rem(32px);\n text-align: center;\n\n // Adjust line-height to match height for correct alignment\n &::before {\n line-height: 1.9;\n }\n\n // Fill icon with current color\n svg {\n max-height: px2rem(16px);\n vertical-align: -25%;\n fill: currentColor;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-nav-icon--prev: svg-load(\"material/arrow-left.svg\");\n --md-nav-icon--next: svg-load(\"material/chevron-right.svg\");\n --md-toc-icon: svg-load(\"material/table-of-contents.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Navigation\n.md-nav {\n font-size: px2rem(14px);\n line-height: 1.3;\n\n // Navigation title\n &__title {\n display: block;\n padding: 0 px2rem(12px);\n overflow: hidden;\n font-weight: 700;\n text-overflow: ellipsis;\n\n // Navigaton button\n .md-nav__button {\n display: none;\n\n // Stretch images based on height, as it's the smaller dimension\n img {\n width: auto;\n height: 100%;\n }\n\n // Button with logo, pointing to `config.site_url`\n &.md-logo {\n\n // Image or icon\n img,\n svg {\n display: block;\n width: px2rem(48px);\n height: px2rem(48px);\n fill: currentColor;\n }\n }\n }\n }\n\n // Navigation list\n &__list {\n margin: 0;\n padding: 0;\n list-style: none;\n }\n\n // Navigation item\n &__item {\n padding: 0 px2rem(12px);\n\n // Navigation item on level 2\n & & {\n padding-right: 0;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(12px);\n padding-left: 0;\n }\n }\n }\n\n // Navigation link\n &__link {\n display: block;\n margin-top: 0.625em;\n overflow: hidden;\n text-overflow: ellipsis;\n cursor: pointer;\n transition: color 125ms;\n scroll-snap-align: start;\n\n // Link in blurred state\n &[data-md-state=\"blur\"] {\n color: var(--md-default-fg-color--light);\n }\n\n // Active link\n .md-nav__item &--active {\n color: var(--md-typeset-a-color);\n }\n\n // Navigation link in nested list\n .md-nav__item--nested > & {\n color: inherit;\n }\n\n // Navigation link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Navigation link on keyboard focus\n &.focus-visible {\n outline-color: var(--md-accent-fg-color);\n outline-offset: px2rem(4px);\n }\n\n // Navigation link to table of contents\n .md-nav--primary &[for=\"__toc\"] {\n display: none;\n\n // Table of contents icon\n .md-icon::after {\n display: block;\n width: 100%;\n height: 100%;\n mask-image: var(--md-toc-icon);\n background-color: currentColor;\n }\n\n // Hide table of contents\n ~ .md-nav {\n display: none;\n }\n }\n }\n\n // Repository information container\n &__source {\n display: none;\n }\n\n // [tablet -]: Layered navigation\n @include break-to-device(tablet) {\n\n // Primary and nested navigation\n &--primary,\n &--primary & {\n position: absolute;\n top: 0;\n right: 0;\n left: 0;\n z-index: 1;\n display: flex;\n flex-direction: column;\n height: 100%;\n background-color: var(--md-default-bg-color);\n }\n\n // Primary navigation\n &--primary {\n\n // Navigation title and item\n .md-nav__title,\n .md-nav__item {\n font-size: px2rem(16px);\n line-height: 1.5;\n }\n\n // Navigation title\n .md-nav__title {\n position: relative;\n height: px2rem(112px);\n padding: px2rem(60px) px2rem(16px) px2rem(4px);\n color: var(--md-default-fg-color--light);\n font-weight: 400;\n line-height: px2rem(48px);\n white-space: nowrap;\n background-color: var(--md-default-fg-color--lightest);\n cursor: pointer;\n\n // Navigation icon\n .md-nav__icon {\n position: absolute;\n top: px2rem(8px);\n left: px2rem(8px);\n display: block;\n width: px2rem(24px);\n height: px2rem(24px);\n margin: px2rem(4px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(8px);\n left: initial;\n }\n\n // Navigation icon in link to previous level\n &::after {\n display: block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-nav-icon--prev);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n }\n\n // Navigation list\n ~ .md-nav__list {\n overflow-y: auto;\n background-color: var(--md-default-bg-color);\n box-shadow:\n 0 px2rem(1px) 0 var(--md-default-fg-color--lightest) inset;\n scroll-snap-type: y mandatory;\n touch-action: pan-y;\n\n // Omit border on first child\n > :first-child {\n border-top: 0;\n }\n }\n\n // Top-level navigation title\n &[for=\"__drawer\"] {\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n }\n\n // Button with logo, pointing to `config.site_url`\n .md-logo {\n position: absolute;\n top: px2rem(4px);\n left: px2rem(4px);\n display: block;\n margin: px2rem(4px);\n padding: px2rem(8px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(4px);\n left: initial;\n }\n }\n }\n\n // Navigation list\n .md-nav__list {\n flex: 1;\n }\n\n // Navigation item\n .md-nav__item {\n padding: 0;\n border-top: px2rem(1px) solid var(--md-default-fg-color--lightest);\n\n // Navigation link in nested navigation\n &--nested > .md-nav__link {\n padding-right: px2rem(48px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(16px);\n padding-left: px2rem(48px);\n }\n }\n\n // Navigation link in active navigation\n &--active > .md-nav__link {\n color: var(--md-typeset-a-color);\n\n // Navigation link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n }\n }\n\n // Navigation link\n .md-nav__link {\n position: relative;\n margin-top: 0;\n padding: px2rem(12px) px2rem(16px);\n\n // Navigation icon\n .md-nav__icon {\n position: absolute;\n top: 50%;\n right: px2rem(12px);\n width: px2rem(24px);\n height: px2rem(24px);\n margin-top: px2rem(-12px);\n color: inherit;\n font-size: px2rem(24px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: initial;\n left: px2rem(12px);\n }\n\n // Navigation icon in link to next level\n &::after {\n display: block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-nav-icon--next);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n }\n }\n\n // Flip icon vertically\n .md-nav__icon {\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] &::after {\n transform: scale(-1);\n }\n }\n\n // Table of contents contained in primary navigation\n .md-nav--secondary {\n\n // Navigation link - omit unnecessary layering\n .md-nav__link {\n position: static;\n }\n\n // Navigation on level 2-6\n .md-nav {\n position: static;\n background-color: transparent;\n\n // Navigation link on level 3\n .md-nav__link {\n padding-left: px2rem(28px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(28px);\n padding-left: initial;\n }\n }\n\n // Navigation link on level 4\n .md-nav .md-nav__link {\n padding-left: px2rem(40px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(40px);\n padding-left: initial;\n }\n }\n\n // Navigation link on level 5\n .md-nav .md-nav .md-nav__link {\n padding-left: px2rem(52px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(52px);\n padding-left: initial;\n }\n }\n\n // Navigation link on level 6\n .md-nav .md-nav .md-nav .md-nav__link {\n padding-left: px2rem(64px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(64px);\n padding-left: initial;\n }\n }\n }\n }\n }\n\n // Table of contents\n &--secondary {\n background-color: transparent;\n }\n\n // Toggle for nested navigation\n &__toggle ~ & {\n display: flex;\n transform: translateX(100%);\n opacity: 0;\n transition:\n transform 250ms cubic-bezier(0.8, 0, 0.6, 1),\n opacity 125ms 50ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n transform: translateX(-100%);\n }\n }\n\n // Show nested navigation when toggle is active\n &__toggle:checked ~ & {\n transform: translateX(0);\n opacity: 1;\n transition:\n transform 250ms cubic-bezier(0.4, 0, 0.2, 1),\n opacity 125ms 125ms;\n\n // Navigation list\n > .md-nav__list {\n // Hack: promote to own layer to reduce jitter\n backface-visibility: hidden;\n }\n }\n }\n\n // [tablet portrait -]: Layered navigation with table of contents\n @include break-to-device(tablet portrait) {\n\n // Show link to table of contents\n &--primary &__link[for=\"__toc\"] {\n display: block;\n padding-right: px2rem(48px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(16px);\n padding-left: px2rem(48px);\n }\n\n // Show table of contents icon\n .md-icon::after {\n content: \"\";\n }\n\n // Hide navigation link to current page\n + .md-nav__link {\n display: none;\n }\n\n // Show table of contents\n ~ .md-nav {\n display: flex;\n }\n }\n\n // Repository information container\n &__source {\n display: block;\n padding: 0 px2rem(4px);\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color--dark);\n }\n }\n\n // [tablet landscape]: Layered navigation with table of contents\n @include break-at-device(tablet landscape) {\n\n // Show link to integrated table of contents\n &--integrated &__link[for=\"__toc\"] {\n display: block;\n padding-right: px2rem(48px);\n scroll-snap-align: initial;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(16px);\n padding-left: px2rem(48px);\n }\n\n // Show table of contents icon\n .md-icon::after {\n content: \"\";\n }\n\n // Hide navigation link to current page\n + .md-nav__link {\n display: none;\n }\n\n // Show table of contents\n ~ .md-nav {\n display: flex;\n }\n }\n }\n\n // [tablet landscape +]: Tree-like table of contents\n @include break-from-device(tablet landscape) {\n\n // Navigation title\n &--secondary &__title {\n\n // Adjust snapping behavior\n &[for=\"__toc\"] {\n scroll-snap-align: start;\n }\n\n // Hide navigation icon\n .md-nav__icon {\n display: none;\n }\n }\n }\n\n // [screen +]: Tree-like navigation\n @include break-from-device(screen) {\n transition: max-height 250ms cubic-bezier(0.86, 0, 0.07, 1);\n\n // Navigation title\n &--primary &__title {\n\n // Adjust snapping behavior\n &[for=\"__drawer\"] {\n scroll-snap-align: start;\n }\n\n // Hide navigation icon\n .md-nav__icon {\n display: none;\n }\n }\n\n // Hide toggle for nested navigation\n &__toggle ~ & {\n display: none;\n }\n\n // Show nested navigation when toggle is active or indeterminate\n &__toggle:checked ~ &,\n &__toggle:indeterminate ~ & {\n display: block;\n }\n\n // Hide navigation title in nested navigation\n &__item--nested > & > &__title {\n display: none;\n }\n\n // Navigation section\n &__item--section {\n display: block;\n margin: 1.25em 0;\n\n // Adjust spacing on last child\n &:last-child {\n margin-bottom: 0;\n }\n\n // Hide navigation link, as sections are always expanded\n > .md-nav__link {\n display: none;\n }\n\n // Navigation\n > .md-nav {\n display: block;\n\n // Navigation title\n > .md-nav__title {\n display: block;\n padding: 0;\n pointer-events: none;\n scroll-snap-align: start;\n }\n\n // Adjust spacing on next level item\n > .md-nav__list > .md-nav__item {\n padding: 0;\n }\n }\n }\n\n // Navigation icon\n &__icon {\n float: right;\n width: px2rem(18px);\n height: px2rem(18px);\n transition: transform 250ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n transform: rotate(180deg);\n }\n\n // Navigation icon content\n &::after {\n display: inline-block;\n width: 100%;\n height: 100%;\n vertical-align: px2rem(-2px);\n background-color: currentColor;\n mask-image: var(--md-nav-icon--next);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n\n // Navigation icon - rotate icon when toggle is active or indeterminate\n .md-nav__item--nested .md-nav__toggle:checked ~ .md-nav__link &,\n .md-nav__item--nested .md-nav__toggle:indeterminate ~ .md-nav__link & {\n transform: rotate(90deg);\n }\n }\n\n // Modifier for when navigation tabs are rendered\n &--lifted {\n\n // Hide nested level 0 items and site title\n > .md-nav__list > .md-nav__item--nested,\n > .md-nav__title {\n display: none;\n }\n\n // Hide level 0 items\n > .md-nav__list > .md-nav__item {\n display: none;\n\n // Active parent navigation item\n &--active {\n display: block;\n padding: 0;\n\n // Hide nested links\n > .md-nav__link {\n display: none;\n }\n\n // Show title and adjust spacing\n > .md-nav > .md-nav__title {\n display: block;\n padding: 0 px2rem(12px);\n pointer-events: none;\n scroll-snap-align: start;\n }\n }\n }\n\n // Hack: Always show active navigation tab on breakpoint screen, despite\n // of checkbox being checked or not. Fixes #1655.\n .md-nav[data-md-level=\"1\"] {\n display: block;\n\n // Adjust spacing for level 1 items\n > .md-nav__list > .md-nav__item {\n padding-right: px2rem(12px);\n }\n }\n }\n\n // Modifier for when table of contents is rendered in primary navigation\n &--integrated &__link[for=\"__toc\"] ~ .md-nav {\n display: block;\n margin-bottom: 1.25em;\n border-left: px2rem(1px) solid var(--md-primary-fg-color);\n\n // Hide navigation title\n > .md-nav__title {\n display: none;\n }\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-search-result-icon: svg-load(\"material/file-search-outline.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Search\n.md-search {\n position: relative;\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n padding: px2rem(4px) 0;\n }\n\n // [no-js]: Hide search\n .no-js & {\n display: none;\n }\n\n // Search overlay\n &__overlay {\n z-index: 1;\n opacity: 0;\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n position: absolute;\n top: px2rem(4px);\n left: px2rem(-44px);\n width: px2rem(40px);\n height: px2rem(40px);\n overflow: hidden;\n background-color: var(--md-default-bg-color);\n border-radius: px2rem(20px);\n transform-origin: center;\n transition:\n transform 300ms 100ms,\n opacity 200ms 200ms;\n pointer-events: none;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(-44px);\n left: initial;\n }\n\n // Show overlay when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n opacity: 1;\n transition:\n transform 400ms,\n opacity 100ms;\n }\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n position: fixed;\n top: 0;\n left: 0;\n width: 0;\n height: 0;\n background-color: hsla(0, 0%, 0%, 0.54);\n cursor: pointer;\n transition:\n width 0ms 250ms,\n height 0ms 250ms,\n opacity 250ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: 0;\n left: initial;\n }\n\n // Show overlay when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n width: 100%;\n // Hack: when the header is translated upon scrolling, a new layer is\n // induced, which means that the height will now refer to the height of\n // the header, albeit positioning is fixed. This should be mitigated\n // in all cases when setting the height to 2x the viewport.\n height: 200vh;\n opacity: 1;\n transition:\n width 0ms,\n height 0ms,\n opacity 250ms;\n }\n }\n\n // Adjust appearance when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n\n // [mobile portrait -]: Scale up 45 times\n @include break-to-device(mobile portrait) {\n transform: scale(45);\n }\n\n // [mobile landscape]: Scale up 60 times\n @include break-at-device(mobile landscape) {\n transform: scale(60);\n }\n\n // [tablet portrait]: Scale up 75 times\n @include break-at-device(tablet portrait) {\n transform: scale(75);\n }\n }\n }\n\n // Search wrapper\n &__inner {\n // Hack: promote to own layer to reduce jitter\n backface-visibility: hidden;\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n position: fixed;\n top: 0;\n left: 100%;\n z-index: 2;\n width: 100%;\n height: 100%;\n transform: translateX(5%);\n opacity: 0;\n transition:\n right 0ms 300ms,\n left 0ms 300ms,\n transform 150ms 150ms cubic-bezier(0.4, 0, 0.2, 1),\n opacity 150ms 150ms;\n\n // Adjust appearance when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n left: 0;\n transform: translateX(0);\n opacity: 1;\n transition:\n right 0ms 0ms,\n left 0ms 0ms,\n transform 150ms 150ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 150ms 150ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: 0;\n left: initial;\n }\n }\n\n // Adjust for right-to-left languages\n html [dir=\"rtl\"] & {\n right: 100%;\n left: initial;\n transform: translateX(-5%);\n }\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n position: relative;\n float: right;\n width: px2rem(234px);\n padding: px2rem(2px) 0;\n transition: width 250ms cubic-bezier(0.1, 0.7, 0.1, 1);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n }\n }\n\n // Adjust appearance when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n\n // [tablet landscape]: Omit overlaying header title\n @include break-at-device(tablet landscape) {\n width: px2rem(468px);\n }\n\n // [screen +]: Match width of content area\n @include break-from-device(screen) {\n width: px2rem(688px);\n }\n }\n }\n\n // Search form\n &__form {\n position: relative;\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n border-radius: px2rem(2px);\n }\n }\n\n // Search input\n &__input {\n position: relative;\n z-index: 2;\n padding: 0 px2rem(44px) 0 px2rem(72px);\n text-overflow: ellipsis;\n background-color: var(--md-default-bg-color);\n box-shadow: 0 0 px2rem(12px) transparent;\n transition:\n color 250ms,\n background-color 250ms,\n box-shadow 250ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding: 0 px2rem(72px) 0 px2rem(44px);\n }\n\n // Search placeholder\n &::placeholder {\n transition: color 250ms;\n }\n\n // Search icon and placeholder\n ~ .md-search__icon,\n &::placeholder {\n color: var(--md-default-fg-color--light);\n }\n\n // Remove the \"x\" rendered by Internet Explorer\n &::-ms-clear {\n display: none;\n }\n\n // Adjust appearance when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n box-shadow: 0 0 px2rem(12px) hsla(0, 0%, 0%, 0.07);\n }\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n width: 100%;\n height: px2rem(48px);\n font-size: px2rem(18px);\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n width: 100%;\n height: px2rem(36px);\n padding-left: px2rem(44px);\n color: inherit;\n font-size: px2rem(16px);\n background-color: hsla(0, 0%, 0%, 0.26);\n border-radius: px2rem(2px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(44px);\n }\n\n // Search icon\n + .md-search__icon {\n color: var(--md-primary-bg-color);\n }\n\n // Search placeholder\n &::placeholder {\n color: var(--md-primary-bg-color--light);\n }\n\n // Search input on hover\n &:hover {\n background-color: hsla(0, 0%, 100%, 0.12);\n }\n\n // Adjust appearance when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n color: var(--md-default-fg-color);\n text-overflow: clip;\n background-color: var(--md-default-bg-color);\n border-radius: px2rem(2px) px2rem(2px) 0 0;\n\n // Search icon and placeholder\n + .md-search__icon,\n &::placeholder {\n color: var(--md-default-fg-color--light);\n }\n }\n }\n }\n\n // Search icon\n &__icon {\n position: absolute;\n z-index: 2;\n width: px2rem(24px);\n height: px2rem(24px);\n cursor: pointer;\n transition:\n color 250ms,\n opacity 250ms;\n\n // Search icon on hover\n &:hover {\n opacity: 0.7;\n }\n\n // Search focus button\n &[for=\"__search\"] {\n top: px2rem(6px);\n left: px2rem(10px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(10px);\n left: initial;\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n top: px2rem(12px);\n left: px2rem(16px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(16px);\n left: initial;\n }\n\n // Hide the magnifying glass\n svg:first-child {\n display: none;\n }\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n pointer-events: none;\n\n // Hide the back arrow\n svg:last-child {\n display: none;\n }\n }\n }\n\n // Search reset button\n &[type=\"reset\"] {\n top: px2rem(6px);\n right: px2rem(10px);\n transform: scale(0.75);\n opacity: 0;\n transition:\n transform 150ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 150ms;\n pointer-events: none;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: initial;\n left: px2rem(10px);\n }\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n top: px2rem(12px);\n right: px2rem(16px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: initial;\n left: px2rem(16px);\n }\n }\n\n // Show reset button when search is active and input non-empty\n [data-md-toggle=\"search\"]:checked ~ .md-header\n .md-search__input:valid ~ & {\n transform: scale(1);\n opacity: 1;\n pointer-events: initial;\n\n // Search focus icon\n &:hover {\n opacity: 0.7;\n }\n }\n }\n }\n\n // Search output\n &__output {\n position: absolute;\n z-index: 1;\n width: 100%;\n overflow: hidden;\n border-radius: 0 0 px2rem(2px) px2rem(2px);\n\n // [tablet portrait -]: Search modal\n @include break-to-device(tablet portrait) {\n top: px2rem(48px);\n bottom: 0;\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n top: px2rem(38px);\n opacity: 0;\n transition: opacity 400ms;\n\n // Show output when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n @include z-depth(6);\n\n opacity: 1;\n }\n }\n }\n\n // Search scroll wrapper\n &__scrollwrap {\n height: 100%;\n overflow-y: auto;\n background-color: var(--md-default-bg-color);\n // Hack: promote to own layer to reduce jitter\n backface-visibility: hidden;\n // Hack: Chrome 88+ has weird overscroll behavior. Overall, scroll snapping\n // seems to be something that is not ready for prime time on some browsers.\n // scroll-snap-type: y mandatory;\n touch-action: pan-y;\n\n // Mitigiate excessive repaints on non-retina devices\n @media (max-resolution: 1dppx) {\n transform: translateZ(0);\n }\n\n // [tablet landscape]: Set fixed width to omit unnecessary reflow\n @include break-at-device(tablet landscape) {\n width: px2rem(468px);\n }\n\n // [screen +]: Set fixed width to omit unnecessary reflow\n @include break-from-device(screen) {\n width: px2rem(688px);\n }\n\n // [tablet landscape +]: Limit height to viewport\n @include break-from-device(tablet landscape) {\n max-height: 0;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n\n // Show scroll wrapper when search is active\n [data-md-toggle=\"search\"]:checked ~ .md-header & {\n max-height: 75vh;\n }\n\n // Search scroll wrapper on hover\n &:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n }\n\n // Webkit scrollbar\n &::-webkit-scrollbar {\n width: px2rem(4px);\n height: px2rem(4px);\n }\n\n // Webkit scrollbar thumb\n &::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n\n // Webkit scrollbar thumb on hover\n &:hover {\n background-color: var(--md-accent-fg-color);\n }\n }\n }\n }\n}\n\n// Search result\n.md-search-result {\n color: var(--md-default-fg-color);\n word-break: break-word;\n\n // Search result metadata\n &__meta {\n padding: 0 px2rem(16px);\n color: var(--md-default-fg-color--light);\n font-size: px2rem(12.8px);\n line-height: px2rem(36px);\n background-color: var(--md-default-fg-color--lightest);\n scroll-snap-align: start;\n\n // [tablet landscape +]: Adjust spacing\n @include break-from-device(tablet landscape) {\n padding-left: px2rem(44px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(44px);\n padding-left: initial;\n }\n }\n }\n\n // Search result list\n &__list {\n margin: 0;\n padding: 0;\n list-style: none;\n }\n\n // Search result item\n &__item {\n box-shadow: 0 px2rem(-1px) 0 var(--md-default-fg-color--lightest);\n\n // Omit border on first child\n &:first-child {\n box-shadow: none;\n }\n }\n\n // Search result link\n &__link {\n display: block;\n outline: none;\n transition: background-color 250ms;\n scroll-snap-align: start;\n\n // Search result link on focus/hover\n &:focus,\n &:hover {\n background-color: var(--md-accent-fg-color--transparent);\n }\n\n // Adjust spacing on last child of last link\n &:last-child p:last-child {\n margin-bottom: px2rem(12px);\n }\n }\n\n // Search result more link\n &__more summary {\n display: block;\n padding: px2em(12px) px2rem(16px);\n color: var(--md-typeset-a-color);\n font-size: px2rem(12.8px);\n outline: none;\n cursor: pointer;\n transition:\n color 250ms,\n background-color 250ms;\n scroll-snap-align: start;\n\n // [tablet landscape +]: Adjust spacing\n @include break-from-device(tablet landscape) {\n padding-left: px2rem(44px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(44px);\n padding-left: px2rem(16px);\n }\n }\n\n // Search result more link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n background-color: var(--md-accent-fg-color--transparent);\n }\n\n // Hide native details marker\n &::marker,\n &::-webkit-details-marker {\n display: none;\n }\n\n // Adjust transparency of less relevant results\n ~ * > * {\n opacity: 0.65;\n }\n }\n\n // Search result article\n &__article {\n position: relative;\n padding: 0 px2rem(16px);\n overflow: hidden;\n\n // [tablet landscape +]: Adjust spacing\n @include break-from-device(tablet landscape) {\n padding-left: px2rem(44px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(44px);\n padding-left: px2rem(16px);\n }\n }\n\n // Search result article document\n &--document {\n\n // Search result title\n .md-search-result__title {\n margin: px2rem(11px) 0;\n font-weight: 400;\n font-size: px2rem(16px);\n line-height: 1.4;\n }\n }\n }\n\n // Search result icon\n &__icon {\n position: absolute;\n left: 0;\n width: px2rem(24px);\n height: px2rem(24px);\n margin: px2rem(10px);\n color: var(--md-default-fg-color--light);\n\n // [tablet portrait -]: Hide icon\n @include break-to-device(tablet portrait) {\n display: none;\n }\n\n // Search result icon content\n &::after {\n display: inline-block;\n width: 100%;\n height: 100%;\n background-color: currentColor;\n mask-image: var(--md-search-result-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: 0;\n left: initial;\n\n // Flip icon vertically\n &::after {\n transform: scaleX(-1);\n }\n }\n }\n\n // Search result title\n &__title {\n margin: 0.5em 0;\n font-weight: 700;\n font-size: px2rem(12.8px);\n line-height: 1.6;\n }\n\n // Search result teaser\n &__teaser {\n display: -webkit-box;\n max-height: px2rem(40px);\n margin: 0.5em 0;\n overflow: hidden;\n color: var(--md-default-fg-color--light);\n font-size: px2rem(12.8px);\n line-height: 1.6;\n text-overflow: ellipsis;\n -webkit-box-orient: vertical;\n -webkit-line-clamp: 2;\n\n // [mobile -]: Adjust number of lines\n @include break-to-device(mobile) {\n max-height: px2rem(60px);\n -webkit-line-clamp: 3;\n }\n\n // [tablet landscape]: Adjust number of lines\n @include break-at-device(tablet landscape) {\n max-height: px2rem(60px);\n -webkit-line-clamp: 3;\n }\n\n // Search term highlighting\n mark {\n text-decoration: underline;\n background-color: transparent;\n }\n }\n\n // Search result terms\n &__terms {\n margin: 0.5em 0;\n font-size: px2rem(12.8px);\n font-style: italic;\n }\n\n // Search term highlighting\n mark {\n color: var(--md-accent-fg-color);\n background-color: transparent;\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Selection\n.md-select {\n position: relative;\n z-index: 1;\n\n // Selection bubble\n &__inner {\n position: absolute;\n top: calc(100% - #{px2rem(4px)});\n left: 50%;\n max-height: 0;\n margin-top: px2rem(4px);\n color: var(--md-default-fg-color);\n background-color: var(--md-default-bg-color);\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.1),\n 0 0 px2rem(1px) hsla(0, 0%, 0%, 0.25);\n transform: translate3d(-50%, px2rem(6px), 0);\n opacity: 0;\n transition:\n transform 250ms 375ms,\n opacity 250ms 250ms,\n max-height 0ms 500ms;\n\n // Selection bubble on parent focus/hover\n .md-select:focus-within &,\n .md-select:hover & {\n max-height: px2rem(200px);\n transform: translate3d(-50%, 0, 0);\n opacity: 1;\n transition:\n transform 250ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 250ms,\n max-height 0ms;\n }\n\n // Selection bubble handle\n &::after {\n position: absolute;\n top: 0;\n left: 50%;\n width: 0;\n height: 0;\n margin-top: px2rem(-4px);\n margin-left: px2rem(-4px);\n border: px2rem(4px) solid transparent;\n border-top: 0;\n border-bottom-color: var(--md-default-bg-color);\n content: \"\";\n }\n }\n\n // Selection list\n &__list {\n max-height: inherit;\n margin: 0;\n padding: 0;\n overflow: auto;\n font-size: px2rem(16px);\n list-style-type: none;\n border-radius: px2rem(2px);\n }\n\n // Selection item\n &__item {\n line-height: px2rem(36px);\n }\n\n // Selection link\n &__link {\n display: block;\n width: 100%;\n padding-right: px2rem(24px);\n padding-left: px2rem(12px);\n outline: none;\n cursor: pointer;\n transition:\n background-color 250ms,\n color 250ms;\n scroll-snap-align: start;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(12px);\n padding-left: px2rem(24px);\n }\n\n // Link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Link on focus\n &:focus {\n background-color: var(--md-default-fg-color--lightest);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Sidebar\n.md-sidebar {\n position: sticky;\n top: px2rem(48px);\n flex-shrink: 0;\n align-self: flex-start;\n width: px2rem(242px);\n padding: px2rem(24px) 0;\n\n // [print]: Hide sidebar\n @media print {\n display: none;\n }\n\n // [tablet -]: Show navigation as drawer\n @include break-to-device(tablet) {\n\n // Primary sidebar with navigation\n &--primary {\n position: fixed;\n top: 0;\n left: px2rem(-242px);\n z-index: 3;\n display: block;\n width: px2rem(242px);\n height: 100%;\n background-color: var(--md-default-bg-color);\n transform: translateX(0);\n transition:\n transform 250ms cubic-bezier(0.4, 0, 0.2, 1),\n box-shadow 250ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(-242px);\n left: initial;\n }\n\n // Show sidebar when drawer is active\n [data-md-toggle=\"drawer\"]:checked ~ .md-container & {\n @include z-depth(8);\n\n transform: translateX(px2rem(242px));\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n transform: translateX(px2rem(-242px));\n }\n }\n\n // Stretch scroll wrapper for primary sidebar\n .md-sidebar__scrollwrap {\n position: absolute;\n top: 0;\n right: 0;\n bottom: 0;\n left: 0;\n margin: 0;\n scroll-snap-type: none;\n overflow: hidden;\n }\n }\n }\n\n // [screen +]: Show navigation as sidebar\n @include break-from-device(screen) {\n height: 0;\n\n // [no-js]: Switch to native sticky behavior\n .no-js & {\n height: auto;\n }\n }\n\n // Secondary sidebar with table of contents\n &--secondary {\n display: none;\n order: 2;\n\n // [tablet landscape +]: Show table of contents as sidebar\n @include break-from-device(tablet landscape) {\n height: 0;\n\n // [no-js]: Switch to native sticky behavior\n .no-js & {\n height: auto;\n }\n\n // Sidebar is visible\n &:not([hidden]) {\n display: block;\n }\n\n // Ensure smooth scrolling on iOS\n .md-sidebar__scrollwrap {\n touch-action: pan-y;\n }\n }\n }\n\n // Sidebar scroll wrapper\n &__scrollwrap {\n margin: 0 px2rem(4px);\n overflow-y: auto;\n // Hack: promote to own layer to reduce jitter\n backface-visibility: hidden;\n // Hack: Chrome 81+ exhibits a strange bug, where it scrolls the container\n // to the bottom if `scroll-snap-type` is set on the initial render. For\n // this reason, we disable scroll snapping until this is resolved (#1667).\n // scroll-snap-type: y mandatory;\n scrollbar-width: thin;\n scrollbar-color: var(--md-default-fg-color--lighter) transparent;\n\n // Sidebar scroll wrapper on hover\n &:hover {\n scrollbar-color: var(--md-accent-fg-color) transparent;\n }\n\n // Webkit scrollbar\n &::-webkit-scrollbar {\n width: px2rem(4px);\n height: px2rem(4px);\n }\n\n // Webkit scrollbar thumb\n &::-webkit-scrollbar-thumb {\n background-color: var(--md-default-fg-color--lighter);\n\n // Webkit scrollbar thumb on hover\n &:hover {\n background-color: var(--md-accent-fg-color);\n }\n }\n }\n}\n\n// [tablet -]: Show overlay on active drawer\n@include break-to-device(tablet) {\n\n // Sidebar overlay\n .md-overlay {\n position: fixed;\n top: 0;\n z-index: 3;\n width: 0;\n height: 0;\n background-color: hsla(0, 0%, 0%, 0.54);\n opacity: 0;\n transition:\n width 0ms 250ms,\n height 0ms 250ms,\n opacity 250ms;\n\n // Show overlay when drawer is active\n [data-md-toggle=\"drawer\"]:checked ~ & {\n width: 100%;\n height: 100%;\n opacity: 1;\n transition:\n width 0ms,\n height 0ms,\n opacity 250ms;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Keyframes\n// ----------------------------------------------------------------------------\n\n// Show repository facts\n@keyframes md-source__facts--done {\n 0% {\n height: 0;\n }\n\n 100% {\n height: px2rem(13px);\n }\n}\n\n// Show repository fact\n@keyframes md-source__fact--done {\n 0% {\n transform: translateY(100%);\n opacity: 0;\n }\n\n 50% {\n opacity: 0;\n }\n\n 100% {\n transform: translateY(0%);\n opacity: 1;\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-source-forks-icon: svg-load(\"octicons/repo-forked-16.svg\");\n --md-source-repositories-icon: svg-load(\"octicons/repo-16.svg\");\n --md-source-stars-icon: svg-load(\"octicons/star-16.svg\");\n --md-source-version-icon: svg-load(\"octicons/tag-16.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Repository information\n.md-source {\n display: block;\n font-size: px2rem(13px);\n line-height: 1.2;\n white-space: nowrap;\n outline-color: var(--md-accent-fg-color);\n // Hack: promote to own layer to reduce jitter\n backface-visibility: hidden;\n transition: opacity 250ms;\n\n // Repository information on hover\n &:hover {\n opacity: 0.7;\n }\n\n // Repository icon\n &__icon {\n display: inline-block;\n width: px2rem(40px);\n height: px2rem(48px);\n vertical-align: middle;\n\n // Align with margin only (as opposed to normal button alignment)\n svg {\n margin-top: px2rem(12px);\n margin-left: px2rem(12px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(12px);\n margin-left: initial;\n }\n }\n\n // Adjust spacing if icon is present\n + .md-source__repository {\n margin-left: px2rem(-40px);\n padding-left: px2rem(40px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(-40px);\n margin-left: initial;\n padding-right: px2rem(40px);\n padding-left: initial;\n }\n }\n }\n\n // Repository name\n &__repository {\n display: inline-block;\n max-width: calc(100% - #{px2rem(24px)});\n margin-left: px2rem(12px);\n overflow: hidden;\n text-overflow: ellipsis;\n vertical-align: middle;\n }\n\n // Repository facts\n &__facts {\n margin: px2rem(2px) 0 0;\n padding: 0;\n overflow: hidden;\n font-size: px2rem(11px);\n list-style-type: none;\n opacity: 0.75;\n\n // Show after the data was loaded\n [data-md-state=\"done\"] & {\n animation: md-source__facts--done 250ms ease-in;\n }\n }\n\n // Repository fact\n &__fact {\n display: inline-block;\n\n // Show after the data was loaded\n [data-md-state=\"done\"] & {\n animation: md-source__fact--done 400ms ease-out;\n }\n\n // Repository fact icon\n &::before {\n display: inline-block;\n width: px2rem(12px);\n height: px2rem(12px);\n margin-right: px2rem(2px);\n vertical-align: text-top;\n background-color: currentColor;\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n }\n\n // Adjust spacing for repository fact icon\n &:nth-child(1n+2)::before {\n margin-left: px2rem(8px);\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: initial;\n margin-left: px2rem(2px);\n\n // Adjust spacing for repository fact icon\n &:nth-child(1n+2)::before {\n margin-right: px2rem(8px);\n margin-left: initial;\n }\n }\n\n // Repository fact: version\n &--version::before {\n mask-image: var(--md-source-version-icon);\n }\n\n // Repository fact: stars\n &--stars::before {\n mask-image: var(--md-source-stars-icon);\n }\n\n // Repository fact: forks\n &--forks::before {\n mask-image: var(--md-source-forks-icon);\n }\n\n // Repository fact: repositories\n &--repositories::before {\n mask-image: var(--md-source-repositories-icon);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Navigation tabs\n.md-tabs {\n width: 100%;\n overflow: auto;\n color: var(--md-primary-bg-color);\n background-color: var(--md-primary-fg-color);\n\n // [print]: Hide tabs\n @media print {\n display: none;\n }\n\n // [tablet -]: Hide tabs\n @include break-to-device(tablet) {\n display: none;\n }\n\n // Tabs in hidden state, i.e. when scrolling down\n &[data-md-state=\"hidden\"] {\n pointer-events: none;\n }\n\n // Navigation tabs list\n &__list {\n margin: 0;\n margin-left: px2rem(4px);\n padding: 0;\n white-space: nowrap;\n list-style: none;\n contain: content;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(4px);\n margin-left: initial;\n }\n }\n\n // Navigation tabs item\n &__item {\n display: inline-block;\n height: px2rem(48px);\n padding-right: px2rem(12px);\n padding-left: px2rem(12px);\n }\n\n // Navigation tabs link - could be defined as block elements and aligned via\n // line height, but this would imply more repaints when scrolling\n &__link {\n display: block;\n margin-top: px2rem(16px);\n font-size: px2rem(14px);\n outline-color: var(--md-accent-fg-color);\n outline-offset: px2rem(4px);\n // Hack: save a repaint when tabs are appearing on scrolling up\n backface-visibility: hidden;\n opacity: 0.7;\n transition:\n transform 400ms cubic-bezier(0.1, 0.7, 0.1, 1),\n opacity 250ms;\n\n // Active link and link on focus/hover\n &--active,\n &:focus,\n &:hover {\n color: inherit;\n opacity: 1;\n }\n\n // Delay transitions by a small amount\n @for $i from 2 through 16 {\n .md-tabs__item:nth-child(#{$i}) & {\n transition-delay: 20ms * ($i - 1);\n }\n }\n\n // Hide tabs upon scrolling - disable transition to minimizes repaints\n // while scrolling down, while scrolling up seems to be okay\n .md-tabs[data-md-state=\"hidden\"] & {\n transform: translateY(50%);\n opacity: 0;\n transition:\n transform 0ms 100ms,\n opacity 100ms;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Back-to-top button\n.md-top {\n position: sticky;\n bottom: px2rem(8px);\n z-index: 1;\n float: right;\n margin: px2rem(-56px) px2rem(8px) px2rem(8px);\n padding: px2rem(8px);\n color: var(--md-primary-bg-color);\n background: var(--md-primary-fg-color);\n border-radius: 100%;\n outline: none;\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.1),\n 0 px2rem(0.5px) px2rem(1px) hsla(0, 0%, 0%, 0.1);\n transform: translateY(0);\n transition:\n opacity 125ms,\n transform 125ms cubic-bezier(0.4, 0, 0.2, 1),\n background-color 125ms;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n }\n\n // Back-to-top button in hidden state\n &[data-md-state=\"hidden\"] {\n transform: translateY(px2rem(-4px));\n opacity: 0;\n pointer-events: none;\n }\n\n // Back-to-top button on focus/hover\n &:focus,\n &:hover {\n background: var(--md-accent-fg-color);\n transform: scale(1.1);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-version-icon: svg-load(\"fontawesome/solid/caret-down.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Version selection\n.md-version {\n flex-shrink: 0;\n height: px2rem(48px);\n font-size: px2rem(16px);\n\n // Current selection\n &__current {\n position: relative;\n // Hack: in general, we would use `vertical-align` to align the version at\n // the bottom with the title, but since the list uses absolute positioning,\n // this won't work consistently. Furthermore, we would need to use inline\n // positioning to align the links, which looks jagged.\n top: px2rem(1px);\n margin-right: px2rem(8px);\n margin-left: px2rem(28px);\n color: inherit;\n outline: none;\n cursor: pointer;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(28px);\n margin-left: px2rem(8px);\n }\n\n // Version selection icon\n &::after {\n display: inline-block;\n width: px2rem(8px);\n height: px2rem(12px);\n margin-left: px2rem(8px);\n background-color: currentColor;\n mask-image: var(--md-version-icon);\n mask-repeat: no-repeat;\n content: \"\";\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(8px);\n margin-left: initial;\n }\n }\n }\n\n // Version selection list\n &__list {\n position: absolute;\n top: px2rem(3px);\n z-index: 1;\n max-height: 0;\n margin: px2rem(4px) px2rem(16px);\n padding: 0;\n overflow: auto;\n color: var(--md-default-fg-color);\n list-style-type: none;\n background-color: var(--md-default-bg-color);\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.1),\n 0 0 px2rem(1px) hsla(0, 0%, 0%, 0.25);\n opacity: 0;\n transition:\n max-height 0ms 500ms,\n opacity 250ms 250ms;\n scroll-snap-type: y mandatory;\n\n // Version selection list on parent focus/hover\n .md-version:focus-within &,\n .md-version:hover & {\n max-height: px2rem(200px);\n opacity: 1;\n transition:\n max-height 0ms,\n opacity 250ms;\n }\n }\n\n // Version selection item\n &__item {\n line-height: px2rem(36px);\n }\n\n // Version selection link\n &__link {\n display: block;\n width: 100%;\n padding-right: px2rem(24px);\n padding-left: px2rem(12px);\n white-space: nowrap;\n outline: none;\n cursor: pointer;\n transition:\n color 250ms,\n background-color 250ms;\n scroll-snap-align: start;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding-right: px2rem(12px);\n padding-left: px2rem(24px);\n }\n\n // Link on focus/hover\n &:focus,\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Link on focus\n &:focus {\n background-color: var(--md-default-fg-color--lightest);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Variables\n// ----------------------------------------------------------------------------\n\n/// Admonition flavours\n$admonitions: (\n note: pencil $clr-blue-a200,\n abstract summary tldr: text-subject $clr-light-blue-a400,\n info todo: information $clr-cyan-a700,\n tip hint important: fire $clr-teal-a700,\n success check done: check-circle $clr-green-a700,\n question help faq: help-circle $clr-light-green-a700,\n warning caution attention: alert $clr-orange-a400,\n failure fail missing: close-circle $clr-red-a200,\n danger error: flash-circle $clr-red-a400,\n bug: bug $clr-pink-a400,\n example: format-list-numbered $clr-deep-purple-a200,\n quote cite: format-quote-close $clr-grey\n) !default;\n\n// ----------------------------------------------------------------------------\n// Rules: layout\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n @each $names, $props in $admonitions {\n --md-admonition-icon--#{nth($names, 1)}:\n svg-load(\"material/#{nth($props, 1)}.svg\");\n }\n}\n\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Admonition\n .admonition {\n margin: px2em(20px, 12.8px) 0;\n padding: 0 px2rem(12px);\n overflow: hidden;\n color: var(--md-admonition-fg-color);\n font-size: px2rem(12.8px);\n page-break-inside: avoid;\n background-color: var(--md-admonition-bg-color);\n border-left: px2rem(4px) solid $clr-blue-a200;\n border-radius: px2rem(2px);\n box-shadow:\n 0 px2rem(4px) px2rem(10px) hsla(0, 0%, 0%, 0.05),\n 0 px2rem(0.5px) px2rem(1px) hsla(0, 0%, 0%, 0.05);\n\n // [print]: Omit shadow as it may lead to rendering errors\n @media print {\n box-shadow: none;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n border-right: px2rem(4px) solid $clr-blue-a200;\n border-left: none;\n }\n\n // Adjust vertical spacing for nested admonitions\n .admonition {\n margin-top: 1em;\n margin-bottom: 1em;\n }\n\n // Adjust spacing for contained table wrappers\n .md-typeset__scrollwrap {\n margin: 1em px2rem(-12px);\n }\n\n // Adjust spacing for contained tables\n .md-typeset__table {\n padding: 0 px2rem(12px);\n }\n\n // Adjust spacing for single-child tabbed block container\n > .tabbed-set:only-child {\n margin-top: 0;\n }\n\n // Adjust spacing on last child\n html & > :last-child {\n margin-bottom: px2rem(12px);\n }\n }\n\n // Admonition title\n .admonition-title {\n position: relative;\n margin: 0 px2rem(-12px) 0 px2rem(-16px);\n padding: px2rem(8px) px2rem(12px) px2rem(8px) px2rem(40px);\n font-weight: 700;\n background-color: transparentize($clr-blue-a200, 0.9);\n border-left: px2rem(4px) solid $clr-blue-a200;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin: 0 px2rem(-16px) 0 px2rem(-12px);\n padding: px2rem(8px) px2rem(40px) px2rem(8px) px2rem(12px);\n border-right: px2rem(4px) solid $clr-blue-a200;\n border-left: none;\n }\n\n // Adjust spacing for title-only admonitions\n html &:last-child {\n margin-bottom: 0;\n }\n\n // Admonition icon\n &::before {\n position: absolute;\n left: px2rem(12px);\n width: px2rem(20px);\n height: px2rem(20px);\n background-color: $clr-blue-a200;\n mask-image: var(--md-admonition-icon--note);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2rem(12px);\n left: initial;\n }\n }\n\n // Adjust spacing on last tabbed block container child - if the tabbed\n // block container is the sole child, it looks better to omit the margin\n + .tabbed-set:last-child {\n margin-top: 0;\n }\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules: flavours\n// ----------------------------------------------------------------------------\n\n@each $names, $props in $admonitions {\n $name: nth($names, 1);\n $tint: nth($props, 2);\n\n // Admonition flavour\n .md-typeset .admonition.#{$name} {\n border-color: $tint;\n }\n\n // Admonition flavour title\n .md-typeset .#{$name} > .admonition-title {\n background-color: transparentize($tint, 0.9);\n border-color: $tint;\n\n // Admonition icon\n &::before {\n background-color: $tint;\n mask-image: var(--md-admonition-icon--#{$name});\n mask-repeat: no-repeat;\n mask-size: contain;\n }\n }\n\n // Define synonyms for flavours\n @if length($names) > 1 {\n @for $n from 2 through length($names) {\n .#{nth($names, $n)} {\n @extend .#{$name};\n }\n }\n }\n}\n","// ==========================================================================\n//\n// Name: UI Color Palette\n// Description: The color palette of material design.\n// Version: 2.3.1\n//\n// Author: Denis Malinochkin\n// Git: https://github.com/mrmlnc/material-color\n//\n// twitter: @mrmlnc\n//\n// ==========================================================================\n\n\n//\n// List of base colors\n//\n\n// $clr-red\n// $clr-pink\n// $clr-purple\n// $clr-deep-purple\n// $clr-indigo\n// $clr-blue\n// $clr-light-blue\n// $clr-cyan\n// $clr-teal\n// $clr-green\n// $clr-light-green\n// $clr-lime\n// $clr-yellow\n// $clr-amber\n// $clr-orange\n// $clr-deep-orange\n// $clr-brown\n// $clr-grey\n// $clr-blue-grey\n// $clr-black\n// $clr-white\n\n\n//\n// Red\n//\n\n$clr-red-list: (\n \"base\": #f44336,\n \"50\": #ffebee,\n \"100\": #ffcdd2,\n \"200\": #ef9a9a,\n \"300\": #e57373,\n \"400\": #ef5350,\n \"500\": #f44336,\n \"600\": #e53935,\n \"700\": #d32f2f,\n \"800\": #c62828,\n \"900\": #b71c1c,\n \"a100\": #ff8a80,\n \"a200\": #ff5252,\n \"a400\": #ff1744,\n \"a700\": #d50000\n);\n\n$clr-red: map-get($clr-red-list, \"base\");\n\n$clr-red-50: map-get($clr-red-list, \"50\");\n$clr-red-100: map-get($clr-red-list, \"100\");\n$clr-red-200: map-get($clr-red-list, \"200\");\n$clr-red-300: map-get($clr-red-list, \"300\");\n$clr-red-400: map-get($clr-red-list, \"400\");\n$clr-red-500: map-get($clr-red-list, \"500\");\n$clr-red-600: map-get($clr-red-list, \"600\");\n$clr-red-700: map-get($clr-red-list, \"700\");\n$clr-red-800: map-get($clr-red-list, \"800\");\n$clr-red-900: map-get($clr-red-list, \"900\");\n$clr-red-a100: map-get($clr-red-list, \"a100\");\n$clr-red-a200: map-get($clr-red-list, \"a200\");\n$clr-red-a400: map-get($clr-red-list, \"a400\");\n$clr-red-a700: map-get($clr-red-list, \"a700\");\n\n\n//\n// Pink\n//\n\n$clr-pink-list: (\n \"base\": #e91e63,\n \"50\": #fce4ec,\n \"100\": #f8bbd0,\n \"200\": #f48fb1,\n \"300\": #f06292,\n \"400\": #ec407a,\n \"500\": #e91e63,\n \"600\": #d81b60,\n \"700\": #c2185b,\n \"800\": #ad1457,\n \"900\": #880e4f,\n \"a100\": #ff80ab,\n \"a200\": #ff4081,\n \"a400\": #f50057,\n \"a700\": #c51162\n);\n\n$clr-pink: map-get($clr-pink-list, \"base\");\n\n$clr-pink-50: map-get($clr-pink-list, \"50\");\n$clr-pink-100: map-get($clr-pink-list, \"100\");\n$clr-pink-200: map-get($clr-pink-list, \"200\");\n$clr-pink-300: map-get($clr-pink-list, \"300\");\n$clr-pink-400: map-get($clr-pink-list, \"400\");\n$clr-pink-500: map-get($clr-pink-list, \"500\");\n$clr-pink-600: map-get($clr-pink-list, \"600\");\n$clr-pink-700: map-get($clr-pink-list, \"700\");\n$clr-pink-800: map-get($clr-pink-list, \"800\");\n$clr-pink-900: map-get($clr-pink-list, \"900\");\n$clr-pink-a100: map-get($clr-pink-list, \"a100\");\n$clr-pink-a200: map-get($clr-pink-list, \"a200\");\n$clr-pink-a400: map-get($clr-pink-list, \"a400\");\n$clr-pink-a700: map-get($clr-pink-list, \"a700\");\n\n\n//\n// Purple\n//\n\n$clr-purple-list: (\n \"base\": #9c27b0,\n \"50\": #f3e5f5,\n \"100\": #e1bee7,\n \"200\": #ce93d8,\n \"300\": #ba68c8,\n \"400\": #ab47bc,\n \"500\": #9c27b0,\n \"600\": #8e24aa,\n \"700\": #7b1fa2,\n \"800\": #6a1b9a,\n \"900\": #4a148c,\n \"a100\": #ea80fc,\n \"a200\": #e040fb,\n \"a400\": #d500f9,\n \"a700\": #aa00ff\n);\n\n$clr-purple: map-get($clr-purple-list, \"base\");\n\n$clr-purple-50: map-get($clr-purple-list, \"50\");\n$clr-purple-100: map-get($clr-purple-list, \"100\");\n$clr-purple-200: map-get($clr-purple-list, \"200\");\n$clr-purple-300: map-get($clr-purple-list, \"300\");\n$clr-purple-400: map-get($clr-purple-list, \"400\");\n$clr-purple-500: map-get($clr-purple-list, \"500\");\n$clr-purple-600: map-get($clr-purple-list, \"600\");\n$clr-purple-700: map-get($clr-purple-list, \"700\");\n$clr-purple-800: map-get($clr-purple-list, \"800\");\n$clr-purple-900: map-get($clr-purple-list, \"900\");\n$clr-purple-a100: map-get($clr-purple-list, \"a100\");\n$clr-purple-a200: map-get($clr-purple-list, \"a200\");\n$clr-purple-a400: map-get($clr-purple-list, \"a400\");\n$clr-purple-a700: map-get($clr-purple-list, \"a700\");\n\n\n//\n// Deep purple\n//\n\n$clr-deep-purple-list: (\n \"base\": #673ab7,\n \"50\": #ede7f6,\n \"100\": #d1c4e9,\n \"200\": #b39ddb,\n \"300\": #9575cd,\n \"400\": #7e57c2,\n \"500\": #673ab7,\n \"600\": #5e35b1,\n \"700\": #512da8,\n \"800\": #4527a0,\n \"900\": #311b92,\n \"a100\": #b388ff,\n \"a200\": #7c4dff,\n \"a400\": #651fff,\n \"a700\": #6200ea\n);\n\n$clr-deep-purple: map-get($clr-deep-purple-list, \"base\");\n\n$clr-deep-purple-50: map-get($clr-deep-purple-list, \"50\");\n$clr-deep-purple-100: map-get($clr-deep-purple-list, \"100\");\n$clr-deep-purple-200: map-get($clr-deep-purple-list, \"200\");\n$clr-deep-purple-300: map-get($clr-deep-purple-list, \"300\");\n$clr-deep-purple-400: map-get($clr-deep-purple-list, \"400\");\n$clr-deep-purple-500: map-get($clr-deep-purple-list, \"500\");\n$clr-deep-purple-600: map-get($clr-deep-purple-list, \"600\");\n$clr-deep-purple-700: map-get($clr-deep-purple-list, \"700\");\n$clr-deep-purple-800: map-get($clr-deep-purple-list, \"800\");\n$clr-deep-purple-900: map-get($clr-deep-purple-list, \"900\");\n$clr-deep-purple-a100: map-get($clr-deep-purple-list, \"a100\");\n$clr-deep-purple-a200: map-get($clr-deep-purple-list, \"a200\");\n$clr-deep-purple-a400: map-get($clr-deep-purple-list, \"a400\");\n$clr-deep-purple-a700: map-get($clr-deep-purple-list, \"a700\");\n\n\n//\n// Indigo\n//\n\n$clr-indigo-list: (\n \"base\": #3f51b5,\n \"50\": #e8eaf6,\n \"100\": #c5cae9,\n \"200\": #9fa8da,\n \"300\": #7986cb,\n \"400\": #5c6bc0,\n \"500\": #3f51b5,\n \"600\": #3949ab,\n \"700\": #303f9f,\n \"800\": #283593,\n \"900\": #1a237e,\n \"a100\": #8c9eff,\n \"a200\": #536dfe,\n \"a400\": #3d5afe,\n \"a700\": #304ffe\n);\n\n$clr-indigo: map-get($clr-indigo-list, \"base\");\n\n$clr-indigo-50: map-get($clr-indigo-list, \"50\");\n$clr-indigo-100: map-get($clr-indigo-list, \"100\");\n$clr-indigo-200: map-get($clr-indigo-list, \"200\");\n$clr-indigo-300: map-get($clr-indigo-list, \"300\");\n$clr-indigo-400: map-get($clr-indigo-list, \"400\");\n$clr-indigo-500: map-get($clr-indigo-list, \"500\");\n$clr-indigo-600: map-get($clr-indigo-list, \"600\");\n$clr-indigo-700: map-get($clr-indigo-list, \"700\");\n$clr-indigo-800: map-get($clr-indigo-list, \"800\");\n$clr-indigo-900: map-get($clr-indigo-list, \"900\");\n$clr-indigo-a100: map-get($clr-indigo-list, \"a100\");\n$clr-indigo-a200: map-get($clr-indigo-list, \"a200\");\n$clr-indigo-a400: map-get($clr-indigo-list, \"a400\");\n$clr-indigo-a700: map-get($clr-indigo-list, \"a700\");\n\n\n//\n// Blue\n//\n\n$clr-blue-list: (\n \"base\": #2196f3,\n \"50\": #e3f2fd,\n \"100\": #bbdefb,\n \"200\": #90caf9,\n \"300\": #64b5f6,\n \"400\": #42a5f5,\n \"500\": #2196f3,\n \"600\": #1e88e5,\n \"700\": #1976d2,\n \"800\": #1565c0,\n \"900\": #0d47a1,\n \"a100\": #82b1ff,\n \"a200\": #448aff,\n \"a400\": #2979ff,\n \"a700\": #2962ff\n);\n\n$clr-blue: map-get($clr-blue-list, \"base\");\n\n$clr-blue-50: map-get($clr-blue-list, \"50\");\n$clr-blue-100: map-get($clr-blue-list, \"100\");\n$clr-blue-200: map-get($clr-blue-list, \"200\");\n$clr-blue-300: map-get($clr-blue-list, \"300\");\n$clr-blue-400: map-get($clr-blue-list, \"400\");\n$clr-blue-500: map-get($clr-blue-list, \"500\");\n$clr-blue-600: map-get($clr-blue-list, \"600\");\n$clr-blue-700: map-get($clr-blue-list, \"700\");\n$clr-blue-800: map-get($clr-blue-list, \"800\");\n$clr-blue-900: map-get($clr-blue-list, \"900\");\n$clr-blue-a100: map-get($clr-blue-list, \"a100\");\n$clr-blue-a200: map-get($clr-blue-list, \"a200\");\n$clr-blue-a400: map-get($clr-blue-list, \"a400\");\n$clr-blue-a700: map-get($clr-blue-list, \"a700\");\n\n\n//\n// Light Blue\n//\n\n$clr-light-blue-list: (\n \"base\": #03a9f4,\n \"50\": #e1f5fe,\n \"100\": #b3e5fc,\n \"200\": #81d4fa,\n \"300\": #4fc3f7,\n \"400\": #29b6f6,\n \"500\": #03a9f4,\n \"600\": #039be5,\n \"700\": #0288d1,\n \"800\": #0277bd,\n \"900\": #01579b,\n \"a100\": #80d8ff,\n \"a200\": #40c4ff,\n \"a400\": #00b0ff,\n \"a700\": #0091ea\n);\n\n$clr-light-blue: map-get($clr-light-blue-list, \"base\");\n\n$clr-light-blue-50: map-get($clr-light-blue-list, \"50\");\n$clr-light-blue-100: map-get($clr-light-blue-list, \"100\");\n$clr-light-blue-200: map-get($clr-light-blue-list, \"200\");\n$clr-light-blue-300: map-get($clr-light-blue-list, \"300\");\n$clr-light-blue-400: map-get($clr-light-blue-list, \"400\");\n$clr-light-blue-500: map-get($clr-light-blue-list, \"500\");\n$clr-light-blue-600: map-get($clr-light-blue-list, \"600\");\n$clr-light-blue-700: map-get($clr-light-blue-list, \"700\");\n$clr-light-blue-800: map-get($clr-light-blue-list, \"800\");\n$clr-light-blue-900: map-get($clr-light-blue-list, \"900\");\n$clr-light-blue-a100: map-get($clr-light-blue-list, \"a100\");\n$clr-light-blue-a200: map-get($clr-light-blue-list, \"a200\");\n$clr-light-blue-a400: map-get($clr-light-blue-list, \"a400\");\n$clr-light-blue-a700: map-get($clr-light-blue-list, \"a700\");\n\n\n//\n// Cyan\n//\n\n$clr-cyan-list: (\n \"base\": #00bcd4,\n \"50\": #e0f7fa,\n \"100\": #b2ebf2,\n \"200\": #80deea,\n \"300\": #4dd0e1,\n \"400\": #26c6da,\n \"500\": #00bcd4,\n \"600\": #00acc1,\n \"700\": #0097a7,\n \"800\": #00838f,\n \"900\": #006064,\n \"a100\": #84ffff,\n \"a200\": #18ffff,\n \"a400\": #00e5ff,\n \"a700\": #00b8d4\n);\n\n$clr-cyan: map-get($clr-cyan-list, \"base\");\n\n$clr-cyan-50: map-get($clr-cyan-list, \"50\");\n$clr-cyan-100: map-get($clr-cyan-list, \"100\");\n$clr-cyan-200: map-get($clr-cyan-list, \"200\");\n$clr-cyan-300: map-get($clr-cyan-list, \"300\");\n$clr-cyan-400: map-get($clr-cyan-list, \"400\");\n$clr-cyan-500: map-get($clr-cyan-list, \"500\");\n$clr-cyan-600: map-get($clr-cyan-list, \"600\");\n$clr-cyan-700: map-get($clr-cyan-list, \"700\");\n$clr-cyan-800: map-get($clr-cyan-list, \"800\");\n$clr-cyan-900: map-get($clr-cyan-list, \"900\");\n$clr-cyan-a100: map-get($clr-cyan-list, \"a100\");\n$clr-cyan-a200: map-get($clr-cyan-list, \"a200\");\n$clr-cyan-a400: map-get($clr-cyan-list, \"a400\");\n$clr-cyan-a700: map-get($clr-cyan-list, \"a700\");\n\n\n//\n// Teal\n//\n\n$clr-teal-list: (\n \"base\": #009688,\n \"50\": #e0f2f1,\n \"100\": #b2dfdb,\n \"200\": #80cbc4,\n \"300\": #4db6ac,\n \"400\": #26a69a,\n \"500\": #009688,\n \"600\": #00897b,\n \"700\": #00796b,\n \"800\": #00695c,\n \"900\": #004d40,\n \"a100\": #a7ffeb,\n \"a200\": #64ffda,\n \"a400\": #1de9b6,\n \"a700\": #00bfa5\n);\n\n$clr-teal: map-get($clr-teal-list, \"base\");\n\n$clr-teal-50: map-get($clr-teal-list, \"50\");\n$clr-teal-100: map-get($clr-teal-list, \"100\");\n$clr-teal-200: map-get($clr-teal-list, \"200\");\n$clr-teal-300: map-get($clr-teal-list, \"300\");\n$clr-teal-400: map-get($clr-teal-list, \"400\");\n$clr-teal-500: map-get($clr-teal-list, \"500\");\n$clr-teal-600: map-get($clr-teal-list, \"600\");\n$clr-teal-700: map-get($clr-teal-list, \"700\");\n$clr-teal-800: map-get($clr-teal-list, \"800\");\n$clr-teal-900: map-get($clr-teal-list, \"900\");\n$clr-teal-a100: map-get($clr-teal-list, \"a100\");\n$clr-teal-a200: map-get($clr-teal-list, \"a200\");\n$clr-teal-a400: map-get($clr-teal-list, \"a400\");\n$clr-teal-a700: map-get($clr-teal-list, \"a700\");\n\n\n//\n// Green\n//\n\n$clr-green-list: (\n \"base\": #4caf50,\n \"50\": #e8f5e9,\n \"100\": #c8e6c9,\n \"200\": #a5d6a7,\n \"300\": #81c784,\n \"400\": #66bb6a,\n \"500\": #4caf50,\n \"600\": #43a047,\n \"700\": #388e3c,\n \"800\": #2e7d32,\n \"900\": #1b5e20,\n \"a100\": #b9f6ca,\n \"a200\": #69f0ae,\n \"a400\": #00e676,\n \"a700\": #00c853\n);\n\n$clr-green: map-get($clr-green-list, \"base\");\n\n$clr-green-50: map-get($clr-green-list, \"50\");\n$clr-green-100: map-get($clr-green-list, \"100\");\n$clr-green-200: map-get($clr-green-list, \"200\");\n$clr-green-300: map-get($clr-green-list, \"300\");\n$clr-green-400: map-get($clr-green-list, \"400\");\n$clr-green-500: map-get($clr-green-list, \"500\");\n$clr-green-600: map-get($clr-green-list, \"600\");\n$clr-green-700: map-get($clr-green-list, \"700\");\n$clr-green-800: map-get($clr-green-list, \"800\");\n$clr-green-900: map-get($clr-green-list, \"900\");\n$clr-green-a100: map-get($clr-green-list, \"a100\");\n$clr-green-a200: map-get($clr-green-list, \"a200\");\n$clr-green-a400: map-get($clr-green-list, \"a400\");\n$clr-green-a700: map-get($clr-green-list, \"a700\");\n\n\n//\n// Light green\n//\n\n$clr-light-green-list: (\n \"base\": #8bc34a,\n \"50\": #f1f8e9,\n \"100\": #dcedc8,\n \"200\": #c5e1a5,\n \"300\": #aed581,\n \"400\": #9ccc65,\n \"500\": #8bc34a,\n \"600\": #7cb342,\n \"700\": #689f38,\n \"800\": #558b2f,\n \"900\": #33691e,\n \"a100\": #ccff90,\n \"a200\": #b2ff59,\n \"a400\": #76ff03,\n \"a700\": #64dd17\n);\n\n$clr-light-green: map-get($clr-light-green-list, \"base\");\n\n$clr-light-green-50: map-get($clr-light-green-list, \"50\");\n$clr-light-green-100: map-get($clr-light-green-list, \"100\");\n$clr-light-green-200: map-get($clr-light-green-list, \"200\");\n$clr-light-green-300: map-get($clr-light-green-list, \"300\");\n$clr-light-green-400: map-get($clr-light-green-list, \"400\");\n$clr-light-green-500: map-get($clr-light-green-list, \"500\");\n$clr-light-green-600: map-get($clr-light-green-list, \"600\");\n$clr-light-green-700: map-get($clr-light-green-list, \"700\");\n$clr-light-green-800: map-get($clr-light-green-list, \"800\");\n$clr-light-green-900: map-get($clr-light-green-list, \"900\");\n$clr-light-green-a100: map-get($clr-light-green-list, \"a100\");\n$clr-light-green-a200: map-get($clr-light-green-list, \"a200\");\n$clr-light-green-a400: map-get($clr-light-green-list, \"a400\");\n$clr-light-green-a700: map-get($clr-light-green-list, \"a700\");\n\n\n//\n// Lime\n//\n\n$clr-lime-list: (\n \"base\": #cddc39,\n \"50\": #f9fbe7,\n \"100\": #f0f4c3,\n \"200\": #e6ee9c,\n \"300\": #dce775,\n \"400\": #d4e157,\n \"500\": #cddc39,\n \"600\": #c0ca33,\n \"700\": #afb42b,\n \"800\": #9e9d24,\n \"900\": #827717,\n \"a100\": #f4ff81,\n \"a200\": #eeff41,\n \"a400\": #c6ff00,\n \"a700\": #aeea00\n);\n\n$clr-lime: map-get($clr-lime-list, \"base\");\n\n$clr-lime-50: map-get($clr-lime-list, \"50\");\n$clr-lime-100: map-get($clr-lime-list, \"100\");\n$clr-lime-200: map-get($clr-lime-list, \"200\");\n$clr-lime-300: map-get($clr-lime-list, \"300\");\n$clr-lime-400: map-get($clr-lime-list, \"400\");\n$clr-lime-500: map-get($clr-lime-list, \"500\");\n$clr-lime-600: map-get($clr-lime-list, \"600\");\n$clr-lime-700: map-get($clr-lime-list, \"700\");\n$clr-lime-800: map-get($clr-lime-list, \"800\");\n$clr-lime-900: map-get($clr-lime-list, \"900\");\n$clr-lime-a100: map-get($clr-lime-list, \"a100\");\n$clr-lime-a200: map-get($clr-lime-list, \"a200\");\n$clr-lime-a400: map-get($clr-lime-list, \"a400\");\n$clr-lime-a700: map-get($clr-lime-list, \"a700\");\n\n\n//\n// Yellow\n//\n\n$clr-yellow-list: (\n \"base\": #ffeb3b,\n \"50\": #fffde7,\n \"100\": #fff9c4,\n \"200\": #fff59d,\n \"300\": #fff176,\n \"400\": #ffee58,\n \"500\": #ffeb3b,\n \"600\": #fdd835,\n \"700\": #fbc02d,\n \"800\": #f9a825,\n \"900\": #f57f17,\n \"a100\": #ffff8d,\n \"a200\": #ffff00,\n \"a400\": #ffea00,\n \"a700\": #ffd600\n);\n\n$clr-yellow: map-get($clr-yellow-list, \"base\");\n\n$clr-yellow-50: map-get($clr-yellow-list, \"50\");\n$clr-yellow-100: map-get($clr-yellow-list, \"100\");\n$clr-yellow-200: map-get($clr-yellow-list, \"200\");\n$clr-yellow-300: map-get($clr-yellow-list, \"300\");\n$clr-yellow-400: map-get($clr-yellow-list, \"400\");\n$clr-yellow-500: map-get($clr-yellow-list, \"500\");\n$clr-yellow-600: map-get($clr-yellow-list, \"600\");\n$clr-yellow-700: map-get($clr-yellow-list, \"700\");\n$clr-yellow-800: map-get($clr-yellow-list, \"800\");\n$clr-yellow-900: map-get($clr-yellow-list, \"900\");\n$clr-yellow-a100: map-get($clr-yellow-list, \"a100\");\n$clr-yellow-a200: map-get($clr-yellow-list, \"a200\");\n$clr-yellow-a400: map-get($clr-yellow-list, \"a400\");\n$clr-yellow-a700: map-get($clr-yellow-list, \"a700\");\n\n\n//\n// amber\n//\n\n$clr-amber-list: (\n \"base\": #ffc107,\n \"50\": #fff8e1,\n \"100\": #ffecb3,\n \"200\": #ffe082,\n \"300\": #ffd54f,\n \"400\": #ffca28,\n \"500\": #ffc107,\n \"600\": #ffb300,\n \"700\": #ffa000,\n \"800\": #ff8f00,\n \"900\": #ff6f00,\n \"a100\": #ffe57f,\n \"a200\": #ffd740,\n \"a400\": #ffc400,\n \"a700\": #ffab00\n);\n\n$clr-amber: map-get($clr-amber-list, \"base\");\n\n$clr-amber-50: map-get($clr-amber-list, \"50\");\n$clr-amber-100: map-get($clr-amber-list, \"100\");\n$clr-amber-200: map-get($clr-amber-list, \"200\");\n$clr-amber-300: map-get($clr-amber-list, \"300\");\n$clr-amber-400: map-get($clr-amber-list, \"400\");\n$clr-amber-500: map-get($clr-amber-list, \"500\");\n$clr-amber-600: map-get($clr-amber-list, \"600\");\n$clr-amber-700: map-get($clr-amber-list, \"700\");\n$clr-amber-800: map-get($clr-amber-list, \"800\");\n$clr-amber-900: map-get($clr-amber-list, \"900\");\n$clr-amber-a100: map-get($clr-amber-list, \"a100\");\n$clr-amber-a200: map-get($clr-amber-list, \"a200\");\n$clr-amber-a400: map-get($clr-amber-list, \"a400\");\n$clr-amber-a700: map-get($clr-amber-list, \"a700\");\n\n\n//\n// Orange\n//\n\n$clr-orange-list: (\n \"base\": #ff9800,\n \"50\": #fff3e0,\n \"100\": #ffe0b2,\n \"200\": #ffcc80,\n \"300\": #ffb74d,\n \"400\": #ffa726,\n \"500\": #ff9800,\n \"600\": #fb8c00,\n \"700\": #f57c00,\n \"800\": #ef6c00,\n \"900\": #e65100,\n \"a100\": #ffd180,\n \"a200\": #ffab40,\n \"a400\": #ff9100,\n \"a700\": #ff6d00\n);\n\n$clr-orange: map-get($clr-orange-list, \"base\");\n\n$clr-orange-50: map-get($clr-orange-list, \"50\");\n$clr-orange-100: map-get($clr-orange-list, \"100\");\n$clr-orange-200: map-get($clr-orange-list, \"200\");\n$clr-orange-300: map-get($clr-orange-list, \"300\");\n$clr-orange-400: map-get($clr-orange-list, \"400\");\n$clr-orange-500: map-get($clr-orange-list, \"500\");\n$clr-orange-600: map-get($clr-orange-list, \"600\");\n$clr-orange-700: map-get($clr-orange-list, \"700\");\n$clr-orange-800: map-get($clr-orange-list, \"800\");\n$clr-orange-900: map-get($clr-orange-list, \"900\");\n$clr-orange-a100: map-get($clr-orange-list, \"a100\");\n$clr-orange-a200: map-get($clr-orange-list, \"a200\");\n$clr-orange-a400: map-get($clr-orange-list, \"a400\");\n$clr-orange-a700: map-get($clr-orange-list, \"a700\");\n\n\n//\n// Deep orange\n//\n\n$clr-deep-orange-list: (\n \"base\": #ff5722,\n \"50\": #fbe9e7,\n \"100\": #ffccbc,\n \"200\": #ffab91,\n \"300\": #ff8a65,\n \"400\": #ff7043,\n \"500\": #ff5722,\n \"600\": #f4511e,\n \"700\": #e64a19,\n \"800\": #d84315,\n \"900\": #bf360c,\n \"a100\": #ff9e80,\n \"a200\": #ff6e40,\n \"a400\": #ff3d00,\n \"a700\": #dd2c00\n);\n\n$clr-deep-orange: map-get($clr-deep-orange-list, \"base\");\n\n$clr-deep-orange-50: map-get($clr-deep-orange-list, \"50\");\n$clr-deep-orange-100: map-get($clr-deep-orange-list, \"100\");\n$clr-deep-orange-200: map-get($clr-deep-orange-list, \"200\");\n$clr-deep-orange-300: map-get($clr-deep-orange-list, \"300\");\n$clr-deep-orange-400: map-get($clr-deep-orange-list, \"400\");\n$clr-deep-orange-500: map-get($clr-deep-orange-list, \"500\");\n$clr-deep-orange-600: map-get($clr-deep-orange-list, \"600\");\n$clr-deep-orange-700: map-get($clr-deep-orange-list, \"700\");\n$clr-deep-orange-800: map-get($clr-deep-orange-list, \"800\");\n$clr-deep-orange-900: map-get($clr-deep-orange-list, \"900\");\n$clr-deep-orange-a100: map-get($clr-deep-orange-list, \"a100\");\n$clr-deep-orange-a200: map-get($clr-deep-orange-list, \"a200\");\n$clr-deep-orange-a400: map-get($clr-deep-orange-list, \"a400\");\n$clr-deep-orange-a700: map-get($clr-deep-orange-list, \"a700\");\n\n\n//\n// Brown\n//\n\n$clr-brown-list: (\n \"base\": #795548,\n \"50\": #efebe9,\n \"100\": #d7ccc8,\n \"200\": #bcaaa4,\n \"300\": #a1887f,\n \"400\": #8d6e63,\n \"500\": #795548,\n \"600\": #6d4c41,\n \"700\": #5d4037,\n \"800\": #4e342e,\n \"900\": #3e2723,\n);\n\n$clr-brown: map-get($clr-brown-list, \"base\");\n\n$clr-brown-50: map-get($clr-brown-list, \"50\");\n$clr-brown-100: map-get($clr-brown-list, \"100\");\n$clr-brown-200: map-get($clr-brown-list, \"200\");\n$clr-brown-300: map-get($clr-brown-list, \"300\");\n$clr-brown-400: map-get($clr-brown-list, \"400\");\n$clr-brown-500: map-get($clr-brown-list, \"500\");\n$clr-brown-600: map-get($clr-brown-list, \"600\");\n$clr-brown-700: map-get($clr-brown-list, \"700\");\n$clr-brown-800: map-get($clr-brown-list, \"800\");\n$clr-brown-900: map-get($clr-brown-list, \"900\");\n\n\n//\n// Grey\n//\n\n$clr-grey-list: (\n \"base\": #9e9e9e,\n \"50\": #fafafa,\n \"100\": #f5f5f5,\n \"200\": #eeeeee,\n \"300\": #e0e0e0,\n \"400\": #bdbdbd,\n \"500\": #9e9e9e,\n \"600\": #757575,\n \"700\": #616161,\n \"800\": #424242,\n \"900\": #212121,\n);\n\n$clr-grey: map-get($clr-grey-list, \"base\");\n\n$clr-grey-50: map-get($clr-grey-list, \"50\");\n$clr-grey-100: map-get($clr-grey-list, \"100\");\n$clr-grey-200: map-get($clr-grey-list, \"200\");\n$clr-grey-300: map-get($clr-grey-list, \"300\");\n$clr-grey-400: map-get($clr-grey-list, \"400\");\n$clr-grey-500: map-get($clr-grey-list, \"500\");\n$clr-grey-600: map-get($clr-grey-list, \"600\");\n$clr-grey-700: map-get($clr-grey-list, \"700\");\n$clr-grey-800: map-get($clr-grey-list, \"800\");\n$clr-grey-900: map-get($clr-grey-list, \"900\");\n\n\n//\n// Blue grey\n//\n\n$clr-blue-grey-list: (\n \"base\": #607d8b,\n \"50\": #eceff1,\n \"100\": #cfd8dc,\n \"200\": #b0bec5,\n \"300\": #90a4ae,\n \"400\": #78909c,\n \"500\": #607d8b,\n \"600\": #546e7a,\n \"700\": #455a64,\n \"800\": #37474f,\n \"900\": #263238,\n);\n\n$clr-blue-grey: map-get($clr-blue-grey-list, \"base\");\n\n$clr-blue-grey-50: map-get($clr-blue-grey-list, \"50\");\n$clr-blue-grey-100: map-get($clr-blue-grey-list, \"100\");\n$clr-blue-grey-200: map-get($clr-blue-grey-list, \"200\");\n$clr-blue-grey-300: map-get($clr-blue-grey-list, \"300\");\n$clr-blue-grey-400: map-get($clr-blue-grey-list, \"400\");\n$clr-blue-grey-500: map-get($clr-blue-grey-list, \"500\");\n$clr-blue-grey-600: map-get($clr-blue-grey-list, \"600\");\n$clr-blue-grey-700: map-get($clr-blue-grey-list, \"700\");\n$clr-blue-grey-800: map-get($clr-blue-grey-list, \"800\");\n$clr-blue-grey-900: map-get($clr-blue-grey-list, \"900\");\n\n\n//\n// Black\n//\n\n$clr-black-list: (\n \"base\": #000\n);\n\n$clr-black: map-get($clr-black-list, \"base\");\n\n\n//\n// White\n//\n\n$clr-white-list: (\n \"base\": #fff\n);\n\n$clr-white: map-get($clr-white-list, \"base\");\n\n\n//\n// List for all Colors for looping\n//\n\n$clr-list-all: (\n \"red\": $clr-red-list,\n \"pink\": $clr-pink-list,\n \"purple\": $clr-purple-list,\n \"deep-purple\": $clr-deep-purple-list,\n \"indigo\": $clr-indigo-list,\n \"blue\": $clr-blue-list,\n \"light-blue\": $clr-light-blue-list,\n \"cyan\": $clr-cyan-list,\n \"teal\": $clr-teal-list,\n \"green\": $clr-green-list,\n \"light-green\": $clr-light-green-list,\n \"lime\": $clr-lime-list,\n \"yellow\": $clr-yellow-list,\n \"amber\": $clr-amber-list,\n \"orange\": $clr-orange-list,\n \"deep-orange\": $clr-deep-orange-list,\n \"brown\": $clr-brown-list,\n \"grey\": $clr-grey-list,\n \"blue-grey\": $clr-blue-grey-list,\n \"black\": $clr-black-list,\n \"white\": $clr-white-list\n);\n\n\n//\n// Typography\n//\n\n$clr-ui-display-4: $clr-grey-600;\n$clr-ui-display-3: $clr-grey-600;\n$clr-ui-display-2: $clr-grey-600;\n$clr-ui-display-1: $clr-grey-600;\n$clr-ui-headline: $clr-grey-900;\n$clr-ui-title: $clr-grey-900;\n$clr-ui-subhead-1: $clr-grey-900;\n$clr-ui-body-2: $clr-grey-900;\n$clr-ui-body-1: $clr-grey-900;\n$clr-ui-caption: $clr-grey-600;\n$clr-ui-menu: $clr-grey-900;\n$clr-ui-button: $clr-grey-900;\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-footnotes-icon: svg-load(\"material/keyboard-return.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Footnote container\n .footnote {\n color: var(--md-default-fg-color--light);\n font-size: px2rem(12.8px);\n\n // Footnote list - omit left indentation\n > ol {\n margin-left: 0;\n\n // Footnote item - footnote items can contain lists, so we need to scope\n // the spacing adjustments to the top-level footnote item.\n > li {\n transition: color 125ms;\n\n // Darken color on target\n &:target {\n color: var(--md-default-fg-color);\n }\n\n // Show backreferences on footnote hover\n &:hover .footnote-backref,\n &:target .footnote-backref {\n transform: translateX(0);\n opacity: 1;\n }\n\n // Adjust spacing on first child\n > :first-child {\n margin-top: 0;\n }\n }\n }\n }\n\n // Footnote reference\n .footnote-ref {\n font-weight: 700;\n font-size: px2em(12px, 16px);\n\n // Hack: increase specificity to override default\n html & {\n outline-offset: px2rem(2px);\n }\n }\n\n // Footnote backreference\n .footnote-backref {\n display: inline-block;\n color: var(--md-typeset-a-color);\n // Hack: omit Unicode arrow for replacement with icon\n font-size: 0;\n vertical-align: text-bottom;\n transform: translateX(px2rem(5px));\n opacity: 0;\n transition:\n color 250ms,\n transform 250ms 250ms,\n opacity 125ms 250ms;\n\n // [print]: Show footnote backreferences\n @media print {\n color: var(--md-typeset-a-color);\n transform: translateX(0);\n opacity: 1;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n transform: translateX(px2rem(-5px));\n }\n\n // Adjust color on hover\n &:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Footnote backreference icon\n &::before {\n display: inline-block;\n width: px2rem(16px);\n height: px2rem(16px);\n background-color: currentColor;\n mask-image: var(--md-footnotes-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n\n // Flip icon vertically\n svg {\n transform: scaleX(-1);\n }\n }\n }\n }\n\n // Footnote reference wrapper\n [id^=\"fnref:\"]:target {\n scroll-margin-top: initial;\n margin-top: -1 * px2rem(48px + 24px - 4px);\n padding-top: px2rem(48px + 24px - 4px);\n\n // Show outline for all devices\n > .footnote-ref {\n outline: auto;\n }\n }\n\n // Footnote wrapper\n [id^=\"fn:\"]:target {\n scroll-margin-top: initial;\n margin-top: -1 * px2rem(48px + 24px - 3px);\n padding-top: px2rem(48px + 24px - 3px);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Headerlink\n .headerlink {\n display: inline-block;\n margin-left: px2rem(10px);\n color: var(--md-default-fg-color--lighter);\n opacity: 0;\n transition:\n color 250ms,\n opacity 125ms;\n\n // [print]: Hide headerlinks\n @media print {\n display: none;\n }\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n margin-right: px2rem(10px);\n margin-left: initial;\n }\n }\n\n // Show headerlinks on parent hover\n :hover > .headerlink,\n :target > .headerlink,\n .headerlink:focus {\n opacity: 1;\n transition:\n color 250ms,\n opacity 125ms;\n }\n\n // Adjust color on parent target or focus/hover\n :target > .headerlink,\n .headerlink:focus,\n .headerlink:hover {\n color: var(--md-accent-fg-color);\n }\n\n // Adjust scroll offset for all elements with `id` attributes - general scroll\n // margin offset for anything that can be targeted. Browser support is pretty\n // decent by now, but Edge <79 and Safari (iOS and macOS) still don't support\n // it properly, so we settle with a cross-browser anchor correction solution.\n :target {\n scroll-margin-top: px2rem(48px + 24px);\n }\n\n // Adjust scroll offset for headlines of level 1-3\n h1:target,\n h2:target,\n h3:target {\n scroll-margin-top: initial;\n\n // Anchor correction hack\n &::before {\n display: block;\n margin-top: -1 * px2rem(48px + 24px - 4px);\n padding-top: px2rem(48px + 24px - 4px);\n content: \"\";\n }\n }\n\n // Adjust scroll offset for headlines of level 4\n h4:target {\n scroll-margin-top: initial;\n\n // Anchor correction hack\n &::before {\n display: block;\n margin-top: -1 * px2rem(48px + 24px - 3px);\n padding-top: px2rem(48px + 24px - 3px);\n content: \"\";\n }\n }\n\n // Adjust scroll offset for headlines of level 5-6\n h5:target,\n h6:target {\n scroll-margin-top: initial;\n\n // Anchor correction hack\n &::before {\n display: block;\n margin-top: -1 * px2rem(48px + 24px);\n padding-top: px2rem(48px + 24px);\n content: \"\";\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Arithmatex container\n div.arithmatex {\n overflow: auto;\n\n // [mobile -]: Align with body copy\n @include break-to-device(mobile) {\n margin: 0 px2rem(-16px);\n }\n\n // Arithmatex content\n > * {\n width: min-content;\n // stylelint-disable-next-line declaration-no-important\n margin: 1em auto !important;\n padding: 0 px2rem(16px);\n touch-action: auto;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Deletion, addition or comment\n del.critic,\n ins.critic,\n .critic.comment {\n box-decoration-break: clone;\n }\n\n // Deletion\n del.critic {\n background-color: var(--md-typeset-del-color);\n }\n\n // Addition\n ins.critic {\n background-color: var(--md-typeset-ins-color);\n }\n\n // Comment\n .critic.comment {\n color: var(--md-code-hl-comment-color);\n\n // Comment opening mark\n &::before {\n content: \"/* \";\n }\n\n // Comment closing mark\n &::after {\n content: \" */\";\n }\n }\n\n // Critic block\n .critic.block {\n display: block;\n margin: 1em 0;\n padding-right: px2rem(16px);\n padding-left: px2rem(16px);\n overflow: auto;\n box-shadow: none;\n\n // Adjust spacing on first child\n > :first-child {\n margin-top: 0.5em;\n }\n\n // Adjust spacing on last child\n > :last-child {\n margin-bottom: 0.5em;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-details-icon: svg-load(\"material/chevron-right.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Details\n details {\n @extend .admonition;\n\n display: flow-root;\n padding-top: 0;\n overflow: visible;\n\n // Details title icon - rotate icon on transition to open state\n &[open] > summary::after {\n transform: rotate(90deg);\n }\n\n // Adjust spacing for details in closed state\n &:not([open]) {\n padding-bottom: 0;\n box-shadow: none;\n\n // Hack: we cannot set `overflow: hidden` on the `details` element (which\n // is why we set it to `overflow: visible`, as the outline would not be\n // visible when focusing. Therefore, we must set the border radius on the\n // summary explicitly.\n > summary {\n border-radius: px2rem(2px);\n }\n }\n\n // Hack: omit margin collapse\n &::after {\n display: table;\n content: \"\";\n }\n }\n\n // Details title\n summary {\n @extend .admonition-title;\n\n display: block;\n min-height: px2rem(20px);\n padding: px2rem(8px) px2rem(36px) px2rem(8px) px2rem(40px);\n border-top-left-radius: px2rem(2px);\n border-top-right-radius: px2rem(2px);\n cursor: pointer;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n padding: px2rem(8px) px2rem(44px) px2rem(8px) px2rem(36px);\n }\n\n // Hide outline for pointer devices\n &:not(.focus-visible) {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n }\n\n // Details marker\n &::after {\n position: absolute;\n top: px2rem(8px);\n right: px2rem(8px);\n width: px2rem(20px);\n height: px2rem(20px);\n background-color: currentColor;\n mask-image: var(--md-details-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n transform: rotate(0deg);\n transition: transform 250ms;\n content: \"\";\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: initial;\n left: px2rem(8px);\n transform: rotate(180deg);\n }\n }\n\n // Hide native details marker\n &::marker,\n &::-webkit-details-marker {\n display: none;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Emoji and icon container\n .emojione,\n .twemoji,\n .gemoji {\n display: inline-flex;\n height: px2em(18px);\n vertical-align: text-top;\n\n // Icon - inlined via mkdocs-material-extensions\n svg {\n width: px2em(18px);\n max-height: 100%;\n fill: currentColor;\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules: syntax highlighting\n// ----------------------------------------------------------------------------\n\n// Code block\n.highlight {\n .o, // Operator\n .ow { // Operator, word\n color: var(--md-code-hl-operator-color);\n }\n\n .p { // Punctuation\n color: var(--md-code-hl-punctuation-color);\n }\n\n .cpf, // Comment, preprocessor file\n .l, // Literal\n .s, // Literal, string\n .sb, // Literal, string backticks\n .sc, // Literal, string char\n .s2, // Literal, string double\n .si, // Literal, string interpol\n .s1, // Literal, string single\n .ss { // Literal, string symbol\n color: var(--md-code-hl-string-color);\n }\n\n .cp, // Comment, pre-processor\n .se, // Literal, string escape\n .sh, // Literal, string heredoc\n .sr, // Literal, string regex\n .sx { // Literal, string other\n color: var(--md-code-hl-special-color);\n }\n\n .m, // Number\n .mb, // Number, binary\n .mf, // Number, float\n .mh, // Number, hex\n .mi, // Number, integer\n .il, // Number, integer long\n .mo { // Number, octal\n color: var(--md-code-hl-number-color);\n }\n\n .k, // Keyword,\n .kd, // Keyword, declaration\n .kn, // Keyword, namespace\n .kp, // Keyword, pseudo\n .kr, // Keyword, reserved\n .kt { // Keyword, type\n color: var(--md-code-hl-keyword-color);\n }\n\n .kc, // Keyword, constant\n .n { // Name\n color: var(--md-code-hl-name-color);\n }\n\n .no, // Name, constant\n .nb, // Name, builtin\n .bp { // Name, builtin pseudo\n color: var(--md-code-hl-constant-color);\n }\n\n .nc, // Name, class\n .ne, // Name, exception\n .nf, // Name, function\n .nn { // Name, namespace\n color: var(--md-code-hl-function-color);\n }\n\n .nd, // Name, decorator\n .ni, // Name, entity\n .nl, // Name, label\n .nt { // Name, tag\n color: var(--md-code-hl-keyword-color);\n }\n\n .c, // Comment\n .cm, // Comment, multiline\n .c1, // Comment, single\n .ch, // Comment, shebang\n .cs, // Comment, special\n .sd { // Literal, string doc\n color: var(--md-code-hl-comment-color);\n }\n\n .na, // Name, attribute\n .nv, // Variable,\n .vc, // Variable, class\n .vg, // Variable, global\n .vi { // Variable, instance\n color: var(--md-code-hl-variable-color);\n }\n\n .ge, // Generic, emph\n .gr, // Generic, error\n .gh, // Generic, heading\n .go, // Generic, output\n .gp, // Generic, prompt\n .gs, // Generic, strong\n .gu, // Generic, subheading\n .gt { // Generic, traceback\n color: var(--md-code-hl-generic-color);\n }\n\n .gd, // Diff, delete\n .gi { // Diff, insert\n margin: 0 px2em(-2px);\n padding: 0 px2em(2px);\n border-radius: px2rem(2px);\n }\n\n .gd { // Diff, delete\n background-color: var(--md-typeset-del-color);\n }\n\n .gi { // Diff, insert\n background-color: var(--md-typeset-ins-color);\n }\n\n // Highlighted line\n .hll {\n display: block;\n margin: 0 px2em(-16px, 13.6px);\n padding: 0 px2em(16px, 13.6px);\n background-color: var(--md-code-hl-color);\n }\n\n // Code block line numbers (inline)\n [data-linenos]::before {\n position: sticky;\n left: px2em(-16px, 13.6px);\n float: left;\n margin-right: px2em(16px, 13.6px);\n margin-left: px2em(-16px, 13.6px);\n padding-left: px2em(16px, 13.6px);\n color: var(--md-default-fg-color--light);\n background-color: var(--md-code-bg-color);\n box-shadow: px2rem(-1px) 0 var(--md-default-fg-color--lightest) inset;\n content: attr(data-linenos);\n user-select: none;\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules: layout\n// ----------------------------------------------------------------------------\n\n// Code block with line numbers\n.highlighttable {\n display: flow-root;\n overflow: hidden;\n\n // Set table elements to block layout, because otherwise the whole flexbox\n // hacking won't work correctly\n tbody,\n td {\n display: block;\n padding: 0;\n }\n\n // We need to use flexbox layout, because otherwise it's not possible to\n // make the code container scroll while keeping the line numbers static\n tr {\n display: flex;\n }\n\n // The pre tags are nested inside a table, so we need to omit the margin\n // because it collapses below all the overflows\n pre {\n margin: 0;\n }\n\n // Code block line numbers - disable user selection, so code can be easily\n // copied without accidentally also copying the line numbers\n .linenos {\n padding: px2em(10.5px, 13.6px) px2em(16px, 13.6px);\n padding-right: 0;\n font-size: px2em(13.6px);\n background-color: var(--md-code-bg-color);\n user-select: none;\n }\n\n // Code block line numbers container\n .linenodiv {\n padding-right: px2em(8px, 13.6px);\n box-shadow: px2rem(-1px) 0 var(--md-default-fg-color--lightest) inset;\n\n // Adjust colors and alignment\n pre {\n color: var(--md-default-fg-color--light);\n text-align: right;\n }\n }\n\n // Code block container - stretch to remaining space\n .code {\n flex: 1;\n overflow: hidden;\n }\n}\n\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Code block with line numbers\n .highlighttable {\n margin: 1em 0;\n direction: ltr;\n border-radius: px2rem(2px);\n\n // Omit rounded borders on contained code block\n code {\n border-radius: 0;\n }\n }\n\n // [mobile -]: Align with body copy\n @include break-to-device(mobile) {\n\n // Top-level code block\n > .highlight {\n margin: 1em px2rem(-16px);\n\n // Highlighted line\n .hll {\n margin: 0 px2rem(-16px);\n padding: 0 px2rem(16px);\n }\n\n // Omit rounded borders\n code {\n border-radius: 0;\n }\n }\n\n // Top-level code block with line numbers\n > .highlighttable {\n margin: 1em px2rem(-16px);\n border-radius: 0;\n\n // Highlighted line\n .hll {\n margin: 0 px2rem(-16px);\n padding: 0 px2rem(16px);\n }\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Tabbed block content\n .tabbed-content {\n display: none;\n order: 99;\n width: 100%;\n box-shadow: 0 px2rem(-1px) var(--md-default-fg-color--lightest);\n\n // [print]: Show all tabs (even hidden ones) when printing\n @media print {\n display: block;\n order: initial;\n }\n\n // Code block is the only child of a tab - remove margin and mirror\n // previous (now deprecated) SuperFences code block grouping behavior\n > pre:only-child,\n > .highlight:only-child pre,\n > .highlighttable:only-child {\n margin: 0;\n\n // Omit rounded borders\n > code {\n border-top-left-radius: 0;\n border-top-right-radius: 0;\n }\n }\n\n // Adjust spacing for nested tab\n > .tabbed-set {\n margin: 0;\n }\n }\n\n // Tabbed block container\n .tabbed-set {\n position: relative;\n display: flex;\n flex-wrap: wrap;\n margin: 1em 0;\n border-radius: px2rem(2px);\n\n // Tab radio button - the Tabbed extension will generate radio buttons with\n // labels, so tabs can be triggered without the necessity for JavaScript.\n // This is pretty cool, as it has great accessibility out-of-the box, so\n // we just hide the radio button and toggle the label color for indication.\n > input {\n position: absolute;\n width: 0;\n height: 0;\n opacity: 0;\n\n // Tab label for checked radio button\n &:checked + label {\n color: var(--md-accent-fg-color);\n border-color: var(--md-accent-fg-color);\n\n // Show tabbed block content\n + .tabbed-content {\n display: block;\n }\n }\n\n // Tab label on focus\n &:focus + label {\n outline-style: auto;\n outline-color: var(--md-accent-fg-color);\n }\n\n // Hide outline for pointer devices\n &:not(.focus-visible) + label {\n outline: none;\n -webkit-tap-highlight-color: transparent;\n }\n }\n\n // Tab label\n > label {\n z-index: 1;\n width: auto;\n padding: px2em(12px, 12.8px) 1.25em px2em(10px, 12.8px);\n color: var(--md-default-fg-color--light);\n font-weight: 700;\n font-size: px2rem(12.8px);\n border-bottom: px2rem(2px) solid transparent;\n cursor: pointer;\n transition: color 250ms;\n\n // Tab label on hover\n &:hover {\n color: var(--md-accent-fg-color);\n }\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Icon definitions\n:root {\n --md-tasklist-icon:\n svg-load(\"octicons/check-circle-fill-24.svg\");\n --md-tasklist-icon--checked:\n svg-load(\"octicons/check-circle-fill-24.svg\");\n}\n\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // Tasklist item\n .task-list-item {\n position: relative;\n list-style-type: none;\n\n // Make checkbox items align with normal list items, but position\n // everything in ems for correct layout at smaller font sizes\n [type=\"checkbox\"] {\n position: absolute;\n top: 0.45em;\n left: -2em;\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: -2em;\n left: initial;\n }\n }\n }\n\n // Hide native checkbox, when custom classes are enabled\n .task-list-control [type=\"checkbox\"] {\n z-index: -1;\n opacity: 0;\n }\n\n // Tasklist indicator in unchecked state\n .task-list-indicator::before {\n position: absolute;\n top: 0.15em;\n left: px2em(-24px);\n width: px2em(20px);\n height: px2em(20px);\n background-color: var(--md-default-fg-color--lightest);\n mask-image: var(--md-tasklist-icon);\n mask-repeat: no-repeat;\n mask-size: contain;\n content: \"\";\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n right: px2em(-24px);\n left: initial;\n }\n }\n\n // Tasklist indicator in checked state\n [type=\"checkbox\"]:checked + .task-list-indicator::before {\n background-color: $clr-green-a400;\n mask-image: var(--md-tasklist-icon--checked);\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Scoped in typesetted content to match specificity of regular content\n.md-typeset {\n\n // [tablet +]: Allow for rendering content as sidebars\n @include break-from-device(tablet) {\n\n // Modifier to float block elements\n .inline {\n float: left;\n width: px2rem(234px);\n margin-top: 0;\n margin-right: px2rem(16px);\n margin-bottom: px2rem(16px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: right;\n margin-right: 0;\n margin-left: px2rem(16px);\n }\n\n // Modifier to move to end (ltr: right, rtl: left)\n &.end {\n float: right;\n margin-right: 0;\n margin-left: px2rem(16px);\n\n // Adjust for right-to-left languages\n [dir=\"rtl\"] & {\n float: left;\n margin-right: px2rem(16px);\n margin-left: 0;\n }\n }\n }\n }\n}\n"]} \ No newline at end of file diff --git a/v2.7/assets/stylesheets/palette.ef6f36e2.min.css b/v2.7/assets/stylesheets/palette.ef6f36e2.min.css new file mode 100644 index 000000000..e0711bd57 --- /dev/null +++ b/v2.7/assets/stylesheets/palette.ef6f36e2.min.css @@ -0,0 +1,2 @@ +[data-md-color-accent=red]{--md-accent-fg-color:#ff1a47;--md-accent-fg-color--transparent:rgba(255,26,71,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=pink]{--md-accent-fg-color:#f50056;--md-accent-fg-color--transparent:rgba(245,0,86,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=purple]{--md-accent-fg-color:#df41fb;--md-accent-fg-color--transparent:rgba(223,65,251,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=deep-purple]{--md-accent-fg-color:#7c4dff;--md-accent-fg-color--transparent:rgba(124,77,255,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=indigo]{--md-accent-fg-color:#526cfe;--md-accent-fg-color--transparent:rgba(83,108,254,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=blue]{--md-accent-fg-color:#4287ff;--md-accent-fg-color--transparent:rgba(66,136,255,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=light-blue]{--md-accent-fg-color:#0091eb;--md-accent-fg-color--transparent:rgba(0,145,235,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=cyan]{--md-accent-fg-color:#00bad6;--md-accent-fg-color--transparent:rgba(0,186,214,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=teal]{--md-accent-fg-color:#00bda4;--md-accent-fg-color--transparent:rgba(0,189,164,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=green]{--md-accent-fg-color:#00c753;--md-accent-fg-color--transparent:rgba(0,199,83,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=light-green]{--md-accent-fg-color:#63de17;--md-accent-fg-color--transparent:rgba(99,222,23,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-accent=lime]{--md-accent-fg-color:#b0eb00;--md-accent-fg-color--transparent:rgba(176,235,0,0.1);--md-accent-bg-color:rgba(0,0,0,0.87);--md-accent-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-accent=yellow]{--md-accent-fg-color:#ffd500;--md-accent-fg-color--transparent:rgba(255,213,0,0.1);--md-accent-bg-color:rgba(0,0,0,0.87);--md-accent-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-accent=amber]{--md-accent-fg-color:#fa0;--md-accent-fg-color--transparent:rgba(255,170,0,0.1);--md-accent-bg-color:rgba(0,0,0,0.87);--md-accent-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-accent=orange]{--md-accent-fg-color:#ff9100;--md-accent-fg-color--transparent:rgba(255,145,0,0.1);--md-accent-bg-color:rgba(0,0,0,0.87);--md-accent-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-accent=deep-orange]{--md-accent-fg-color:#ff6e42;--md-accent-fg-color--transparent:rgba(255,110,66,0.1);--md-accent-bg-color:#fff;--md-accent-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=red]{--md-primary-fg-color:#ef5552;--md-primary-fg-color--light:#e57171;--md-primary-fg-color--dark:#e53734;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=pink]{--md-primary-fg-color:#e92063;--md-primary-fg-color--light:#ec417a;--md-primary-fg-color--dark:#c3185d;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=purple]{--md-primary-fg-color:#ab47bd;--md-primary-fg-color--light:#bb69c9;--md-primary-fg-color--dark:#8c24a8;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=deep-purple]{--md-primary-fg-color:#7e56c2;--md-primary-fg-color--light:#9574cd;--md-primary-fg-color--dark:#673ab6;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=indigo]{--md-primary-fg-color:#4051b5;--md-primary-fg-color--light:#5d6cc0;--md-primary-fg-color--dark:#303fa1;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=blue]{--md-primary-fg-color:#2094f3;--md-primary-fg-color--light:#42a5f5;--md-primary-fg-color--dark:#1975d2;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=light-blue]{--md-primary-fg-color:#02a6f2;--md-primary-fg-color--light:#28b5f6;--md-primary-fg-color--dark:#0287cf;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=cyan]{--md-primary-fg-color:#00bdd6;--md-primary-fg-color--light:#25c5da;--md-primary-fg-color--dark:#0097a8;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=teal]{--md-primary-fg-color:#009485;--md-primary-fg-color--light:#26a699;--md-primary-fg-color--dark:#007a6c;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=green]{--md-primary-fg-color:#4cae4f;--md-primary-fg-color--light:#68bb6c;--md-primary-fg-color--dark:#398e3d;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=light-green]{--md-primary-fg-color:#8bc34b;--md-primary-fg-color--light:#9ccc66;--md-primary-fg-color--dark:#689f38;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=lime]{--md-primary-fg-color:#cbdc38;--md-primary-fg-color--light:#d3e156;--md-primary-fg-color--dark:#b0b52c;--md-primary-bg-color:rgba(0,0,0,0.87);--md-primary-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-primary=yellow]{--md-primary-fg-color:#ffec3d;--md-primary-fg-color--light:#ffee57;--md-primary-fg-color--dark:#fbc02d;--md-primary-bg-color:rgba(0,0,0,0.87);--md-primary-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-primary=amber]{--md-primary-fg-color:#ffc105;--md-primary-fg-color--light:#ffc929;--md-primary-fg-color--dark:#ffa200;--md-primary-bg-color:rgba(0,0,0,0.87);--md-primary-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-primary=orange]{--md-primary-fg-color:#ffa724;--md-primary-fg-color--light:#ffa724;--md-primary-fg-color--dark:#fa8900;--md-primary-bg-color:rgba(0,0,0,0.87);--md-primary-bg-color--light:rgba(0,0,0,0.54)}[data-md-color-primary=deep-orange]{--md-primary-fg-color:#ff6e42;--md-primary-fg-color--light:#ff8a66;--md-primary-fg-color--dark:#f4511f;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=brown]{--md-primary-fg-color:#795649;--md-primary-fg-color--light:#8d6e62;--md-primary-fg-color--dark:#5d4037;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=grey]{--md-primary-fg-color:#757575;--md-primary-fg-color--light:#9e9e9e;--md-primary-fg-color--dark:#616161;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=blue-grey]{--md-primary-fg-color:#546d78;--md-primary-fg-color--light:#607c8a;--md-primary-fg-color--dark:#455a63;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7)}[data-md-color-primary=white]{--md-primary-fg-color:#fff;--md-primary-fg-color--light:hsla(0,0%,100%,0.7);--md-primary-fg-color--dark:rgba(0,0,0,0.07);--md-primary-bg-color:rgba(0,0,0,0.87);--md-primary-bg-color--light:rgba(0,0,0,0.54);--md-typeset-a-color:#4051b5}@media screen and (min-width:60em){[data-md-color-primary=white] .md-search__input{background-color:rgba(0,0,0,.07)}[data-md-color-primary=white] .md-search__input+.md-search__icon{color:rgba(0,0,0,.87)}[data-md-color-primary=white] .md-search__input::-webkit-input-placeholder{color:rgba(0,0,0,.54)}[data-md-color-primary=white] .md-search__input::-moz-placeholder{color:rgba(0,0,0,.54)}[data-md-color-primary=white] .md-search__input::-ms-input-placeholder{color:rgba(0,0,0,.54)}[data-md-color-primary=white] .md-search__input::placeholder{color:rgba(0,0,0,.54)}[data-md-color-primary=white] .md-search__input:hover{background-color:rgba(0,0,0,.32)}}@media screen and (min-width:76.25em){[data-md-color-primary=white] .md-tabs{border-bottom:.05rem solid rgba(0,0,0,.07)}}[data-md-color-primary=black]{--md-primary-fg-color:#000;--md-primary-fg-color--light:rgba(0,0,0,0.54);--md-primary-fg-color--dark:#000;--md-primary-bg-color:#fff;--md-primary-bg-color--light:hsla(0,0%,100%,0.7);--md-typeset-a-color:#4051b5}[data-md-color-primary=black] .md-header{background-color:#000}@media screen and (max-width:59.9375em){[data-md-color-primary=black] .md-nav__source{background-color:rgba(0,0,0,.87)}}@media screen and (min-width:60em){[data-md-color-primary=black] .md-search__input{background-color:hsla(0,0%,100%,.12)}[data-md-color-primary=black] .md-search__input:hover{background-color:hsla(0,0%,100%,.3)}}@media screen and (max-width:76.1875em){html [data-md-color-primary=black] .md-nav--primary .md-nav__title[for=__drawer]{background-color:#000}}@media screen and (min-width:76.25em){[data-md-color-primary=black] .md-tabs{background-color:#000}}@media screen{[data-md-color-scheme=slate]{--md-hue:232;--md-default-fg-color:hsla(var(--md-hue),75%,95%,1);--md-default-fg-color--light:hsla(var(--md-hue),75%,90%,0.62);--md-default-fg-color--lighter:hsla(var(--md-hue),75%,90%,0.32);--md-default-fg-color--lightest:hsla(var(--md-hue),75%,90%,0.12);--md-default-bg-color:hsla(var(--md-hue),15%,21%,1);--md-default-bg-color--light:hsla(var(--md-hue),15%,21%,0.54);--md-default-bg-color--lighter:hsla(var(--md-hue),15%,21%,0.26);--md-default-bg-color--lightest:hsla(var(--md-hue),15%,21%,0.07);--md-code-fg-color:hsla(var(--md-hue),18%,86%,1);--md-code-bg-color:hsla(var(--md-hue),15%,15%,1);--md-code-hl-color:rgba(66,136,255,0.15);--md-code-hl-number-color:#e6695b;--md-code-hl-special-color:#f06090;--md-code-hl-function-color:#c973d9;--md-code-hl-constant-color:#9383e2;--md-code-hl-keyword-color:#6791e0;--md-code-hl-string-color:#2fb170;--md-code-hl-name-color:var(--md-code-fg-color);--md-code-hl-operator-color:var(--md-default-fg-color--light);--md-code-hl-punctuation-color:var(--md-default-fg-color--light);--md-code-hl-comment-color:var(--md-default-fg-color--light);--md-code-hl-generic-color:var(--md-default-fg-color--light);--md-code-hl-variable-color:var(--md-default-fg-color--light);--md-typeset-color:var(--md-default-fg-color);--md-typeset-a-color:var(--md-primary-fg-color);--md-typeset-mark-color:rgba(66,136,255,0.3);--md-typeset-kbd-color:hsla(var(--md-hue),15%,94%,0.12);--md-typeset-kbd-accent-color:hsla(var(--md-hue),15%,94%,0.2);--md-typeset-kbd-border-color:hsla(var(--md-hue),15%,14%,1);--md-admonition-bg-color:hsla(var(--md-hue),0%,100%,0.025);--md-footer-bg-color:hsla(var(--md-hue),15%,12%,0.87);--md-footer-bg-color--dark:hsla(var(--md-hue),15%,10%,1)}[data-md-color-scheme=slate][data-md-color-primary=black],[data-md-color-scheme=slate][data-md-color-primary=white]{--md-typeset-a-color:#5d6cc0}} +/*# sourceMappingURL=palette.ef6f36e2.min.css.map */ \ No newline at end of file diff --git a/v2.7/assets/stylesheets/palette.ef6f36e2.min.css.map b/v2.7/assets/stylesheets/palette.ef6f36e2.min.css.map new file mode 100644 index 000000000..80516686e --- /dev/null +++ b/v2.7/assets/stylesheets/palette.ef6f36e2.min.css.map @@ -0,0 +1 @@ +{"version":3,"sources":["src/assets/stylesheets/palette/_accent.scss","src/assets/stylesheets/palette.scss","src/assets/stylesheets/palette/_primary.scss","src/assets/stylesheets/utilities/_break.scss","src/assets/stylesheets/palette/_scheme.scss"],"names":[],"mappings":"AA8CE,2BACE,4BAAA,CACA,qDAAA,CAOE,yBAAA,CACA,+CCnDN,CDyCE,4BACE,4BAAA,CACA,oDAAA,CAOE,yBAAA,CACA,+CC5CN,CDkCE,8BACE,4BAAA,CACA,sDAAA,CAOE,yBAAA,CACA,+CCrCN,CD2BE,mCACE,4BAAA,CACA,sDAAA,CAOE,yBAAA,CACA,+CC9BN,CDoBE,8BACE,4BAAA,CACA,sDAAA,CAOE,yBAAA,CACA,+CCvBN,CDaE,4BACE,4BAAA,CACA,sDAAA,CAOE,yBAAA,CACA,+CChBN,CDME,kCACE,4BAAA,CACA,qDAAA,CAOE,yBAAA,CACA,+CCTN,CDDE,4BACE,4BAAA,CACA,qDAAA,CAOE,yBAAA,CACA,+CCFN,CDRE,4BACE,4BAAA,CACA,qDAAA,CAOE,yBAAA,CACA,+CCKN,CDfE,6BACE,4BAAA,CACA,oDAAA,CAOE,yBAAA,CACA,+CCYN,CDtBE,mCACE,4BAAA,CACA,qDAAA,CAOE,yBAAA,CACA,+CCmBN,CD7BE,4BACE,4BAAA,CACA,qDAAA,CAIE,qCAAA,CACA,4CC6BN,CDpCE,8BACE,4BAAA,CACA,qDAAA,CAIE,qCAAA,CACA,4CCoCN,CD3CE,6BACE,yBAAA,CACA,qDAAA,CAIE,qCAAA,CACA,4CC2CN,CDlDE,8BACE,4BAAA,CACA,qDAAA,CAIE,qCAAA,CACA,4CCkDN,CDzDE,mCACE,4BAAA,CACA,sDAAA,CAOE,yBAAA,CACA,+CCsDN,CC7DE,4BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0DN,CCrEE,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkEN,CC7EE,+BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0EN,CCrFE,oCACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkFN,CC7FE,+BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0FN,CCrGE,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkGN,CC7GE,mCACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0GN,CCrHE,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkHN,CC7HE,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0HN,CCrIE,8BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkIN,CC7IE,oCACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0IN,CCrJE,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAIE,sCAAA,CACA,6CDqJN,CC7JE,+BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAIE,sCAAA,CACA,6CD6JN,CCrKE,8BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAIE,sCAAA,CACA,6CDqKN,CC7KE,+BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAIE,sCAAA,CACA,6CD6KN,CCrLE,oCACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkLN,CC7LE,8BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0LN,CCrME,6BACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDDkMN,CC7ME,kCACE,6BAAA,CACA,oCAAA,CACA,mCAAA,CAOE,0BAAA,CACA,gDD0MN,CChMA,8BACE,0BAAA,CACA,gDAAA,CACA,4CAAA,CACA,sCAAA,CACA,6CAAA,CAGA,4BDiMF,CElFI,mCDzGA,gDACE,gCD8LJ,CC3LI,iEACE,qBD6LN,CCzLI,2EACE,qBD2LN,CC5LI,kEACE,qBD2LN,CC5LI,uEACE,qBD2LN,CC5LI,6DACE,qBD2LN,CCvLI,sDACE,gCDyLN,CACF,CEhGI,sCDjFA,uCACE,0CDoLJ,CACF,CC3KA,8BACE,0BAAA,CACA,6CAAA,CACA,gCAAA,CACA,0BAAA,CACA,gDAAA,CAGA,4BD4KF,CCzKE,yCACE,qBD2KJ,CE9FI,wCDtEA,8CACE,gCDuKJ,CACF,CEtHI,mCD1CA,gDACE,oCDmKJ,CChKI,sDACE,mCDkKN,CACF,CE3GI,wCD/CA,iFACE,qBD6JJ,CACF,CEnII,sCDnBA,uCACE,qBDyJJ,CACF,CG1SA,cAGE,6BAKE,YAAA,CAGA,mDAAA,CACA,6DAAA,CACA,+DAAA,CACA,gEAAA,CACA,mDAAA,CACA,6DAAA,CACA,+DAAA,CACA,gEAAA,CAGA,gDAAA,CACA,gDAAA,CAGA,wCAAA,CACA,iCAAA,CACA,kCAAA,CACA,mCAAA,CACA,mCAAA,CACA,kCAAA,CACA,iCAAA,CACA,+CAAA,CACA,6DAAA,CACA,gEAAA,CACA,4DAAA,CACA,4DAAA,CACA,6DAAA,CAGA,6CAAA,CAGA,+CAAA,CAGA,4CAAA,CAGA,uDAAA,CACA,6DAAA,CACA,2DAAA,CAGA,0DAAA,CAGA,qDAAA,CACA,wDHqRF,CGlRE,oHAIE,4BHiRJ,CACF","file":"src/assets/stylesheets/palette.scss","sourcesContent":["////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n@each $name, $color in (\n \"red\": $clr-red-a400,\n \"pink\": $clr-pink-a400,\n \"purple\": $clr-purple-a200,\n \"deep-purple\": $clr-deep-purple-a200,\n \"indigo\": $clr-indigo-a200,\n \"blue\": $clr-blue-a200,\n \"light-blue\": $clr-light-blue-a700,\n \"cyan\": $clr-cyan-a700,\n \"teal\": $clr-teal-a700,\n \"green\": $clr-green-a700,\n \"light-green\": $clr-light-green-a700,\n \"lime\": $clr-lime-a700,\n \"yellow\": $clr-yellow-a700,\n \"amber\": $clr-amber-a700,\n \"orange\": $clr-orange-a400,\n \"deep-orange\": $clr-deep-orange-a200\n) {\n\n // Color palette\n [data-md-color-accent=\"#{$name}\"] {\n --md-accent-fg-color: hsla(#{hex2hsl($color)}, 1);\n --md-accent-fg-color--transparent: hsla(#{hex2hsl($color)}, 0.1);\n\n // Inverted text for lighter shades\n @if index(\"lime\" \"yellow\" \"amber\" \"orange\", $name) {\n --md-accent-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-accent-bg-color--light: hsla(0, 0%, 0%, 0.54);\n } @else {\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n }\n }\n}\n","[data-md-color-accent=red] {\n --md-accent-fg-color: hsla(348, 100%, 55%, 1);\n --md-accent-fg-color--transparent: hsla(348, 100%, 55%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=pink] {\n --md-accent-fg-color: hsla(339, 100%, 48%, 1);\n --md-accent-fg-color--transparent: hsla(339, 100%, 48%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=purple] {\n --md-accent-fg-color: hsla(291, 96%, 62%, 1);\n --md-accent-fg-color--transparent: hsla(291, 96%, 62%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=deep-purple] {\n --md-accent-fg-color: hsla(256, 100%, 65%, 1);\n --md-accent-fg-color--transparent: hsla(256, 100%, 65%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=indigo] {\n --md-accent-fg-color: hsla(231, 99%, 66%, 1);\n --md-accent-fg-color--transparent: hsla(231, 99%, 66%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=blue] {\n --md-accent-fg-color: hsla(218, 100%, 63%, 1);\n --md-accent-fg-color--transparent: hsla(218, 100%, 63%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=light-blue] {\n --md-accent-fg-color: hsla(203, 100%, 46%, 1);\n --md-accent-fg-color--transparent: hsla(203, 100%, 46%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=cyan] {\n --md-accent-fg-color: hsla(188, 100%, 42%, 1);\n --md-accent-fg-color--transparent: hsla(188, 100%, 42%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=teal] {\n --md-accent-fg-color: hsla(172, 100%, 37%, 1);\n --md-accent-fg-color--transparent: hsla(172, 100%, 37%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=green] {\n --md-accent-fg-color: hsla(145, 100%, 39%, 1);\n --md-accent-fg-color--transparent: hsla(145, 100%, 39%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=light-green] {\n --md-accent-fg-color: hsla(97, 81%, 48%, 1);\n --md-accent-fg-color--transparent: hsla(97, 81%, 48%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-accent=lime] {\n --md-accent-fg-color: hsla(75, 100%, 46%, 1);\n --md-accent-fg-color--transparent: hsla(75, 100%, 46%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-accent-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-accent=yellow] {\n --md-accent-fg-color: hsla(50, 100%, 50%, 1);\n --md-accent-fg-color--transparent: hsla(50, 100%, 50%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-accent-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-accent=amber] {\n --md-accent-fg-color: hsla(40, 100%, 50%, 1);\n --md-accent-fg-color--transparent: hsla(40, 100%, 50%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-accent-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-accent=orange] {\n --md-accent-fg-color: hsla(34, 100%, 50%, 1);\n --md-accent-fg-color--transparent: hsla(34, 100%, 50%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-accent-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-accent=deep-orange] {\n --md-accent-fg-color: hsla(14, 100%, 63%, 1);\n --md-accent-fg-color--transparent: hsla(14, 100%, 63%, 0.1);\n --md-accent-bg-color: hsla(0, 0%, 100%, 1);\n --md-accent-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=red] {\n --md-primary-fg-color: hsla(1, 83%, 63%, 1);\n --md-primary-fg-color--light: hsla(0, 69%, 67%, 1);\n --md-primary-fg-color--dark: hsla(1, 77%, 55%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=pink] {\n --md-primary-fg-color: hsla(340, 82%, 52%, 1);\n --md-primary-fg-color--light: hsla(340, 82%, 59%, 1);\n --md-primary-fg-color--dark: hsla(336, 78%, 43%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=purple] {\n --md-primary-fg-color: hsla(291, 47%, 51%, 1);\n --md-primary-fg-color--light: hsla(291, 47%, 60%, 1);\n --md-primary-fg-color--dark: hsla(287, 65%, 40%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=deep-purple] {\n --md-primary-fg-color: hsla(262, 47%, 55%, 1);\n --md-primary-fg-color--light: hsla(262, 47%, 63%, 1);\n --md-primary-fg-color--dark: hsla(262, 52%, 47%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=indigo] {\n --md-primary-fg-color: hsla(231, 48%, 48%, 1);\n --md-primary-fg-color--light: hsla(231, 44%, 56%, 1);\n --md-primary-fg-color--dark: hsla(232, 54%, 41%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=blue] {\n --md-primary-fg-color: hsla(207, 90%, 54%, 1);\n --md-primary-fg-color--light: hsla(207, 90%, 61%, 1);\n --md-primary-fg-color--dark: hsla(210, 79%, 46%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=light-blue] {\n --md-primary-fg-color: hsla(199, 98%, 48%, 1);\n --md-primary-fg-color--light: hsla(199, 92%, 56%, 1);\n --md-primary-fg-color--dark: hsla(201, 98%, 41%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=cyan] {\n --md-primary-fg-color: hsla(187, 100%, 42%, 1);\n --md-primary-fg-color--light: hsla(187, 71%, 50%, 1);\n --md-primary-fg-color--dark: hsla(186, 100%, 33%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=teal] {\n --md-primary-fg-color: hsla(174, 100%, 29%, 1);\n --md-primary-fg-color--light: hsla(174, 63%, 40%, 1);\n --md-primary-fg-color--dark: hsla(173, 100%, 24%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=green] {\n --md-primary-fg-color: hsla(122, 39%, 49%, 1);\n --md-primary-fg-color--light: hsla(123, 38%, 57%, 1);\n --md-primary-fg-color--dark: hsla(123, 43%, 39%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=light-green] {\n --md-primary-fg-color: hsla(88, 50%, 53%, 1);\n --md-primary-fg-color--light: hsla(88, 50%, 60%, 1);\n --md-primary-fg-color--dark: hsla(92, 48%, 42%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=lime] {\n --md-primary-fg-color: hsla(66, 70%, 54%, 1);\n --md-primary-fg-color--light: hsla(66, 70%, 61%, 1);\n --md-primary-fg-color--dark: hsla(62, 61%, 44%, 1);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-primary=yellow] {\n --md-primary-fg-color: hsla(54, 100%, 62%, 1);\n --md-primary-fg-color--light: hsla(54, 100%, 67%, 1);\n --md-primary-fg-color--dark: hsla(43, 96%, 58%, 1);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-primary=amber] {\n --md-primary-fg-color: hsla(45, 100%, 51%, 1);\n --md-primary-fg-color--light: hsla(45, 100%, 58%, 1);\n --md-primary-fg-color--dark: hsla(38, 100%, 50%, 1);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-primary=orange] {\n --md-primary-fg-color: hsla(36, 100%, 57%, 1);\n --md-primary-fg-color--light: hsla(36, 100%, 57%, 1);\n --md-primary-fg-color--dark: hsla(33, 100%, 49%, 1);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n}\n\n[data-md-color-primary=deep-orange] {\n --md-primary-fg-color: hsla(14, 100%, 63%, 1);\n --md-primary-fg-color--light: hsla(14, 100%, 70%, 1);\n --md-primary-fg-color--dark: hsla(14, 91%, 54%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=brown] {\n --md-primary-fg-color: hsla(16, 25%, 38%, 1);\n --md-primary-fg-color--light: hsla(16, 18%, 47%, 1);\n --md-primary-fg-color--dark: hsla(14, 26%, 29%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=grey] {\n --md-primary-fg-color: hsla(0, 0%, 46%, 1);\n --md-primary-fg-color--light: hsla(0, 0%, 62%, 1);\n --md-primary-fg-color--dark: hsla(0, 0%, 38%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=blue-grey] {\n --md-primary-fg-color: hsla(199, 18%, 40%, 1);\n --md-primary-fg-color--light: hsla(200, 18%, 46%, 1);\n --md-primary-fg-color--dark: hsla(199, 18%, 33%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n}\n\n[data-md-color-primary=white] {\n --md-primary-fg-color: hsla(0, 0%, 100%, 1);\n --md-primary-fg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-primary-fg-color--dark: hsla(0, 0%, 0%, 0.07);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n --md-typeset-a-color: hsla(231, 48%, 48%, 1);\n}\n@media screen and (min-width: 60em) {\n [data-md-color-primary=white] .md-search__input {\n background-color: rgba(0, 0, 0, 0.07);\n }\n [data-md-color-primary=white] .md-search__input + .md-search__icon {\n color: rgba(0, 0, 0, 0.87);\n }\n [data-md-color-primary=white] .md-search__input::placeholder {\n color: rgba(0, 0, 0, 0.54);\n }\n [data-md-color-primary=white] .md-search__input:hover {\n background-color: rgba(0, 0, 0, 0.32);\n }\n}\n@media screen and (min-width: 76.25em) {\n [data-md-color-primary=white] .md-tabs {\n border-bottom: 0.05rem solid rgba(0, 0, 0, 0.07);\n }\n}\n\n[data-md-color-primary=black] {\n --md-primary-fg-color: hsla(0, 0%, 0%, 1);\n --md-primary-fg-color--light: hsla(0, 0%, 0%, 0.54);\n --md-primary-fg-color--dark: hsla(0, 0%, 0%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-typeset-a-color: hsla(231, 48%, 48%, 1);\n}\n[data-md-color-primary=black] .md-header {\n background-color: black;\n}\n@media screen and (max-width: 59.9375em) {\n [data-md-color-primary=black] .md-nav__source {\n background-color: rgba(0, 0, 0, 0.87);\n }\n}\n@media screen and (min-width: 60em) {\n [data-md-color-primary=black] .md-search__input {\n background-color: rgba(255, 255, 255, 0.12);\n }\n [data-md-color-primary=black] .md-search__input:hover {\n background-color: rgba(255, 255, 255, 0.3);\n }\n}\n@media screen and (max-width: 76.1875em) {\n html [data-md-color-primary=black] .md-nav--primary .md-nav__title[for=__drawer] {\n background-color: black;\n }\n}\n@media screen and (min-width: 76.25em) {\n [data-md-color-primary=black] .md-tabs {\n background-color: black;\n }\n}\n\n@media screen {\n [data-md-color-scheme=slate] {\n --md-hue: 232;\n --md-default-fg-color: hsla(var(--md-hue), 75%, 95%, 1);\n --md-default-fg-color--light: hsla(var(--md-hue), 75%, 90%, 0.62);\n --md-default-fg-color--lighter: hsla(var(--md-hue), 75%, 90%, 0.32);\n --md-default-fg-color--lightest: hsla(var(--md-hue), 75%, 90%, 0.12);\n --md-default-bg-color: hsla(var(--md-hue), 15%, 21%, 1);\n --md-default-bg-color--light: hsla(var(--md-hue), 15%, 21%, 0.54);\n --md-default-bg-color--lighter: hsla(var(--md-hue), 15%, 21%, 0.26);\n --md-default-bg-color--lightest: hsla(var(--md-hue), 15%, 21%, 0.07);\n --md-code-fg-color: hsla(var(--md-hue), 18%, 86%, 1);\n --md-code-bg-color: hsla(var(--md-hue), 15%, 15%, 1);\n --md-code-hl-color: hsla(218, 100%, 63%, 0.15);\n --md-code-hl-number-color: hsla(6, 74%, 63%, 1);\n --md-code-hl-special-color: hsla(340, 83%, 66%, 1);\n --md-code-hl-function-color: hsla(291, 57%, 65%, 1);\n --md-code-hl-constant-color: hsla(250, 62%, 70%, 1);\n --md-code-hl-keyword-color: hsla(219, 66%, 64%, 1);\n --md-code-hl-string-color: hsla(150, 58%, 44%, 1);\n --md-code-hl-name-color: var(--md-code-fg-color);\n --md-code-hl-operator-color: var(--md-default-fg-color--light);\n --md-code-hl-punctuation-color: var(--md-default-fg-color--light);\n --md-code-hl-comment-color: var(--md-default-fg-color--light);\n --md-code-hl-generic-color: var(--md-default-fg-color--light);\n --md-code-hl-variable-color: var(--md-default-fg-color--light);\n --md-typeset-color: var(--md-default-fg-color);\n --md-typeset-a-color: var(--md-primary-fg-color);\n --md-typeset-mark-color: hsla(218, 100%, 63%, 0.3);\n --md-typeset-kbd-color: hsla(var(--md-hue), 15%, 94%, 0.12);\n --md-typeset-kbd-accent-color: hsla(var(--md-hue), 15%, 94%, 0.2);\n --md-typeset-kbd-border-color: hsla(var(--md-hue), 15%, 14%, 1);\n --md-admonition-bg-color: hsla(var(--md-hue), 0%, 100%, 0.025);\n --md-footer-bg-color: hsla(var(--md-hue), 15%, 12%, 0.87);\n --md-footer-bg-color--dark: hsla(var(--md-hue), 15%, 10%, 1);\n }\n [data-md-color-scheme=slate][data-md-color-primary=black], [data-md-color-scheme=slate][data-md-color-primary=white] {\n --md-typeset-a-color: hsla(231, 44%, 56%, 1);\n }\n}\n\n/*# sourceMappingURL=palette.css.map */","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n@each $name, $colors in (\n \"red\": $clr-red-400 $clr-red-300 $clr-red-600,\n \"pink\": $clr-pink-500 $clr-pink-400 $clr-pink-700,\n \"purple\": $clr-purple-400 $clr-purple-300 $clr-purple-600,\n \"deep-purple\": $clr-deep-purple-400 $clr-deep-purple-300 $clr-deep-purple-500,\n \"indigo\": $clr-indigo-500 $clr-indigo-400 $clr-indigo-700,\n \"blue\": $clr-blue-500 $clr-blue-400 $clr-blue-700,\n \"light-blue\": $clr-light-blue-500 $clr-light-blue-400 $clr-light-blue-700,\n \"cyan\": $clr-cyan-500 $clr-cyan-400 $clr-cyan-700,\n \"teal\": $clr-teal-500 $clr-teal-400 $clr-teal-700,\n \"green\": $clr-green-500 $clr-green-400 $clr-green-700,\n \"light-green\": $clr-light-green-500 $clr-light-green-400 $clr-light-green-700,\n \"lime\": $clr-lime-500 $clr-lime-400 $clr-lime-700,\n \"yellow\": $clr-yellow-500 $clr-yellow-400 $clr-yellow-700,\n \"amber\": $clr-amber-500 $clr-amber-400 $clr-amber-700,\n \"orange\": $clr-orange-400 $clr-orange-400 $clr-orange-600,\n \"deep-orange\": $clr-deep-orange-400 $clr-deep-orange-300 $clr-deep-orange-600,\n \"brown\": $clr-brown-500 $clr-brown-400 $clr-brown-700,\n \"grey\": $clr-grey-600 $clr-grey-500 $clr-grey-700,\n \"blue-grey\": $clr-blue-grey-600 $clr-blue-grey-500 $clr-blue-grey-700\n) {\n\n // Color palette\n [data-md-color-primary=\"#{$name}\"] {\n --md-primary-fg-color: hsla(#{hex2hsl(nth($colors, 1))}, 1);\n --md-primary-fg-color--light: hsla(#{hex2hsl(nth($colors, 2))}, 1);\n --md-primary-fg-color--dark: hsla(#{hex2hsl(nth($colors, 3))}, 1);\n\n // Inverted text for lighter shades\n @if index(\"lime\" \"yellow\" \"amber\" \"orange\", $name) {\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n } @else {\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n }\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules: white\n// ----------------------------------------------------------------------------\n\n// Color palette\n[data-md-color-primary=\"white\"] {\n --md-primary-fg-color: hsla(0, 0%, 100%, 1);\n --md-primary-fg-color--light: hsla(0, 0%, 100%, 0.7);\n --md-primary-fg-color--dark: hsla(0, 0%, 0%, 0.07);\n --md-primary-bg-color: hsla(0, 0%, 0%, 0.87);\n --md-primary-bg-color--light: hsla(0, 0%, 0%, 0.54);\n\n // Typeset color shades\n --md-typeset-a-color: hsla(#{hex2hsl($clr-indigo-500)}, 1);\n\n // [tablet portrait +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n\n // Search input\n .md-search__input {\n background-color: hsla(0, 0%, 0%, 0.07);\n\n // Search icon color\n + .md-search__icon {\n color: hsla(0, 0%, 0%, 0.87);\n }\n\n // Placeholder color\n &::placeholder {\n color: hsla(0, 0%, 0%, 0.54);\n }\n\n // Search input on hover\n &:hover {\n background-color: hsla(0, 0%, 0%, 0.32);\n }\n }\n }\n\n // [screen +]: Add bottom border for tabs\n @include break-from-device(screen) {\n\n // Navigation tabs\n .md-tabs {\n border-bottom: px2rem(1px) solid hsla(0, 0%, 0%, 0.07);\n }\n }\n}\n\n// ----------------------------------------------------------------------------\n// Rules: black\n// ----------------------------------------------------------------------------\n\n// Color palette\n[data-md-color-primary=\"black\"] {\n --md-primary-fg-color: hsla(0, 0%, 0%, 1);\n --md-primary-fg-color--light: hsla(0, 0%, 0%, 0.54);\n --md-primary-fg-color--dark: hsla(0, 0%, 0%, 1);\n --md-primary-bg-color: hsla(0, 0%, 100%, 1);\n --md-primary-bg-color--light: hsla(0, 0%, 100%, 0.7);\n\n // Text color shades\n --md-typeset-a-color: hsla(#{hex2hsl($clr-indigo-500)}, 1);\n\n // Header\n .md-header {\n background-color: hsla(0, 0%, 0%, 1);\n }\n\n // [tablet portrait -]: Layered navigation\n @include break-to-device(tablet portrait) {\n\n // Repository information container\n .md-nav__source {\n background-color: hsla(0, 0%, 0%, 0.87);\n }\n }\n\n // [tablet landscape +]: Header-embedded search\n @include break-from-device(tablet landscape) {\n\n // Search input\n .md-search__input {\n background-color: hsla(0, 0%, 100%, 0.12);\n\n // Search form on hover\n &:hover {\n background-color: hsla(0, 0%, 100%, 0.3);\n }\n }\n }\n\n // [tablet -]: Layered navigation\n @include break-to-device(tablet) {\n\n // Site title in main navigation\n html & .md-nav--primary .md-nav__title[for=\"__drawer\"] {\n background-color: hsla(0, 0%, 0%, 1);\n }\n }\n\n // [screen +]: Set background color for tabs\n @include break-from-device(screen) {\n\n // Navigation tabs\n .md-tabs {\n background-color: hsla(0, 0%, 0%, 1);\n }\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Variables\n// ----------------------------------------------------------------------------\n\n///\n/// Device-specific breakpoints\n///\n/// @example\n/// $break-devices: (\n/// mobile: (\n/// portrait: 220px 479px,\n/// landscape: 480px 719px\n/// ),\n/// tablet: (\n/// portrait: 720px 959px,\n/// landscape: 960px 1219px\n/// ),\n/// screen: (\n/// small: 1220px 1599px,\n/// medium: 1600px 1999px,\n/// large: 2000px\n/// )\n/// );\n///\n$break-devices: () !default;\n\n// ----------------------------------------------------------------------------\n// Helpers\n// ----------------------------------------------------------------------------\n\n///\n/// Choose minimum and maximum device widths\n///\n@function break-select-min-max($devices) {\n $min: 1000000;\n $max: 0;\n @each $key, $value in $devices {\n @while type-of($value) == map {\n $value: break-select-min-max($value);\n }\n @if type-of($value) == list {\n @each $number in $value {\n @if type-of($number) == number {\n $min: min($number, $min);\n @if $max {\n $max: max($number, $max);\n }\n } @else {\n @error \"Invalid number: #{$number}\";\n }\n }\n } @else if type-of($value) == number {\n $min: min($value, $min);\n $max: null;\n } @else {\n @error \"Invalid value: #{$value}\";\n }\n }\n @return $min, $max;\n}\n\n///\n/// Select minimum and maximum widths for a device breakpoint\n///\n@function break-select-device($device) {\n $current: $break-devices;\n @for $n from 1 through length($device) {\n @if type-of($current) == map {\n $current: map-get($current, nth($device, $n));\n } @else {\n @error \"Invalid device map: #{$devices}\";\n }\n }\n @if type-of($current) == list or type-of($current) == number {\n $current: (default: $current);\n }\n @return break-select-min-max($current);\n}\n\n// ----------------------------------------------------------------------------\n// Mixins\n// ----------------------------------------------------------------------------\n\n///\n/// A minimum-maximum media query breakpoint\n///\n@mixin break-at($breakpoint) {\n @if type-of($breakpoint) == number {\n @media screen and (min-width: $breakpoint) {\n @content;\n }\n } @else if type-of($breakpoint) == list {\n $min: nth($breakpoint, 1);\n $max: nth($breakpoint, 2);\n @if type-of($min) == number and type-of($max) == number {\n @media screen and (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// An orientation media query breakpoint\n///\n@mixin break-at-orientation($breakpoint) {\n @if type-of($breakpoint) == string {\n @media screen and (orientation: $breakpoint) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// A maximum-aspect-ratio media query breakpoint\n///\n@mixin break-at-ratio($breakpoint) {\n @if type-of($breakpoint) == number {\n @media screen and (max-aspect-ratio: $breakpoint) {\n @content;\n }\n } @else {\n @error \"Invalid breakpoint: #{$breakpoint}\";\n }\n}\n\n///\n/// A minimum-maximum media query device breakpoint\n///\n@mixin break-at-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n @if nth($breakpoint, 2) {\n $min: nth($breakpoint, 1);\n $max: nth($breakpoint, 2);\n\n @media screen and (min-width: $min) and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n\n///\n/// A minimum media query device breakpoint\n///\n@mixin break-from-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n $min: nth($breakpoint, 1);\n\n @media screen and (min-width: $min) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n\n///\n/// A maximum media query device breakpoint\n///\n@mixin break-to-device($device) {\n @if type-of($device) == string {\n $device: $device,;\n }\n @if type-of($device) == list {\n $breakpoint: break-select-device($device);\n $max: nth($breakpoint, 2);\n\n @media screen and (max-width: $max) {\n @content;\n }\n } @else {\n @error \"Invalid device: #{$device}\";\n }\n}\n","////\n/// Copyright (c) 2016-2021 Martin Donath \n///\n/// Permission is hereby granted, free of charge, to any person obtaining a\n/// copy of this software and associated documentation files (the \"Software\"),\n/// to deal in the Software without restriction, including without limitation\n/// the rights to use, copy, modify, merge, publish, distribute, sublicense,\n/// and/or sell copies of the Software, and to permit persons to whom the\n/// Software is furnished to do so, subject to the following conditions:\n///\n/// The above copyright notice and this permission notice shall be included in\n/// all copies or substantial portions of the Software.\n///\n/// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n/// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n/// FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL\n/// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n/// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING\n/// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER\n/// DEALINGS\n////\n\n// ----------------------------------------------------------------------------\n// Rules\n// ----------------------------------------------------------------------------\n\n// Only use dark mode on screens\n@media screen {\n\n // Slate theme, i.e. dark mode\n [data-md-color-scheme=\"slate\"] {\n\n // Slate's hue in the range [0,360] - change this variable to alter the tone\n // of the theme, e.g. to make it more redish or greenish. This is a slate-\n // specific variable, but the same approach may be adapted to custom themes.\n --md-hue: 232;\n\n // Default color shades\n --md-default-fg-color: hsla(var(--md-hue), 75%, 95%, 1);\n --md-default-fg-color--light: hsla(var(--md-hue), 75%, 90%, 0.62);\n --md-default-fg-color--lighter: hsla(var(--md-hue), 75%, 90%, 0.32);\n --md-default-fg-color--lightest: hsla(var(--md-hue), 75%, 90%, 0.12);\n --md-default-bg-color: hsla(var(--md-hue), 15%, 21%, 1);\n --md-default-bg-color--light: hsla(var(--md-hue), 15%, 21%, 0.54);\n --md-default-bg-color--lighter: hsla(var(--md-hue), 15%, 21%, 0.26);\n --md-default-bg-color--lightest: hsla(var(--md-hue), 15%, 21%, 0.07);\n\n // Code color shades\n --md-code-fg-color: hsla(var(--md-hue), 18%, 86%, 1);\n --md-code-bg-color: hsla(var(--md-hue), 15%, 15%, 1);\n\n // Code highlighting color shades\n --md-code-hl-color: hsla(#{hex2hsl($clr-blue-a200)}, 0.15);\n --md-code-hl-number-color: hsla(6, 74%, 63%, 1);\n --md-code-hl-special-color: hsla(340, 83%, 66%, 1);\n --md-code-hl-function-color: hsla(291, 57%, 65%, 1);\n --md-code-hl-constant-color: hsla(250, 62%, 70%, 1);\n --md-code-hl-keyword-color: hsla(219, 66%, 64%, 1);\n --md-code-hl-string-color: hsla(150, 58%, 44%, 1);\n --md-code-hl-name-color: var(--md-code-fg-color);\n --md-code-hl-operator-color: var(--md-default-fg-color--light);\n --md-code-hl-punctuation-color: var(--md-default-fg-color--light);\n --md-code-hl-comment-color: var(--md-default-fg-color--light);\n --md-code-hl-generic-color: var(--md-default-fg-color--light);\n --md-code-hl-variable-color: var(--md-default-fg-color--light);\n\n // Typeset color shades\n --md-typeset-color: var(--md-default-fg-color);\n\n // Typeset `a` color shades\n --md-typeset-a-color: var(--md-primary-fg-color);\n\n // Typeset `mark` color shades\n --md-typeset-mark-color: hsla(#{hex2hsl($clr-blue-a200)}, 0.3);\n\n // Typeset `kbd` color shades\n --md-typeset-kbd-color: hsla(var(--md-hue), 15%, 94%, 0.12);\n --md-typeset-kbd-accent-color: hsla(var(--md-hue), 15%, 94%, 0.2);\n --md-typeset-kbd-border-color: hsla(var(--md-hue), 15%, 14%, 1);\n\n // Admonition color shades\n --md-admonition-bg-color: hsla(var(--md-hue), 0%, 100%, 0.025);\n\n // Footer color shades\n --md-footer-bg-color: hsla(var(--md-hue), 15%, 12%, 0.87);\n --md-footer-bg-color--dark: hsla(var(--md-hue), 15%, 10%, 1);\n\n // Black and white primary colors\n &[data-md-color-primary=\"black\"],\n &[data-md-color-primary=\"white\"] {\n\n // Typeset color shades\n --md-typeset-a-color: hsla(#{hex2hsl($clr-indigo-400)}, 1);\n }\n }\n}\n"]} \ No newline at end of file diff --git a/v2.7/assets/stylesheets/version-select.css b/v2.7/assets/stylesheets/version-select.css new file mode 100644 index 000000000..500c9e94b --- /dev/null +++ b/v2.7/assets/stylesheets/version-select.css @@ -0,0 +1,12 @@ +#version-select .mdc-select__anchor { + display: flex; + align-items: center; +} + +#version-select { + width: 120px; +} + +#version-select .mdc-select__selected-text { + color: var(--md-primary-bg-color) +} \ No newline at end of file diff --git a/v2.7/code-of-conduct/index.html b/v2.7/code-of-conduct/index.html new file mode 100644 index 000000000..ae47a5fb1 --- /dev/null +++ b/v2.7/code-of-conduct/index.html @@ -0,0 +1,1006 @@ + + + + + + + + + + + + + + + + + Kubernetes Community Code of Conduct - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    + +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/controller-devel/index.html b/v2.7/controller-devel/index.html new file mode 100644 index 000000000..fa23ee7cf --- /dev/null +++ b/v2.7/controller-devel/index.html @@ -0,0 +1,1141 @@ + + + + + + + + + + + + + + + + + AWS Load Balancer Controller Development Guide - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    AWS Load Balancer Controller Development Guide

    +

    We'll walk you through the setup to start contributing to the AWS Load Balancer +Controller project. No matter if you're contributing code or docs, +follow the steps below to set up your development environment.

    +
    +

    Issue before PR

    +

    Of course we're happy about code drops via PRs, however, in order to give +us time to plan ahead and also to avoid disappointment, consider creating +an issue first and submit a PR later. This also helps us to coordinate +between different contributors and should in general help keeping everyone +happy.

    +
    +

    Prerequisites

    +

    Please ensure that you have properly installed Go.

    +
    +

    Go version

    +

    We recommend to use a Go version of 1.14 or above for development.

    +
    +

    Fork upstream repository

    +

    The first step in setting up your AWS Load Balancer controller development +environment is to fork the upstream AWS Load Balancer controller repository to your +personal Github account.

    +

    Ensure source code organization directories exist

    +

    Make sure in your $GOPATH/src that you have directories for the +sigs.k8s.io organization:

    +
    mkdir -p $GOPATH/src/github.com/sigs.k8s.io
+
    +

    git clone forked repository and add upstream remote

    +

    For the forked repository, you will git clone the repository into +the appropriate folder in your $GOPATH. Once git clone'd, you will want to +set up a Git remote called "upstream" (remember that "origin" will be pointing +at your forked repository location in your personal Github space).

    +

    You can use this script to do this for you:

    +
    GITHUB_ID="your GH username"
+
+cd $GOPATH/src/github.com/sigs.k8s.io
+git clone git@github.com:$GITHUB_ID/aws-load-balancer-controller
+cd aws-load-balancer-controller/
+git remote add upstream git@github.com:kubernetes-sigs/aws-load-balancer-controller
+git fetch --all
+
    +

    Create your local branch

    +

    Next, you create a local branch where you work on your feature or bug fix. +Let's say you want to enhance the docs, so set BRANCH_NAME=docs-improve and +then:

    +
    git fetch --all && git checkout -b $BRANCH_NAME upstream/main
+
    +

    Commit changes

    +

    Make your changes locally, commit and push using:

    +
    git commit -a -m "improves the docs a lot"
+
+git push origin $BRANCH_NAME
+
    +

    Create a pull request

    +

    Finally, submit a pull request against the upstream source repository.

    +

    We monitor the GitHub repo and try to follow up with comments within a working +day.

    +

    Building the controller

    +

    To build the controller binary, run the following command.

    +
    make controller
+
    +

    To install CRDs into a Kubernetes cluster, run the following command.

    +
    make install
+
    +

    To uninstall CRD from a Kubernetes cluster, run the following command.

    +
    make uninstall
+
    +

    To build the container image for the controller and push to a container registry, run the following command.

    +
    make docker-push
+
    +

    To deploy the CRDs and the container image to a Kubernetes cluster, run the following command.

    +
    make deploy
+
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/configurations/index.html b/v2.7/deploy/configurations/index.html new file mode 100644 index 000000000..c931f7e22 --- /dev/null +++ b/v2.7/deploy/configurations/index.html @@ -0,0 +1,1703 @@ + + + + + + + + + + + + + + + + + Configurations - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Controller configuration options

    +

    This document covers configuration of the AWS Load Balancer controller

    +
    +

    limitation

    +

    The v2.0.0+ version of AWSLoadBalancerController currently only support one controller deployment(with one or multiple replicas) per cluster.

    +

    The AWSLoadBalancerController assumes it's the solo owner of worker node security group rules with elbv2.k8s.aws/targetGroupBinding=shared description, running multiple controller deployment will cause these controllers compete with each other updating worker node security group rules.

    +

    We will remove this limitation in future versions: tracking issue

    +
    +

    AWS API Access

    +

    To perform operations, the controller must have required IAM role capabilities for accessing and +provisioning ALB resources. There are many ways to achieve this, such as loading AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY as environment variables or using kube2iam.

    +

    Refer to the installation guide for installing the controller in your kubernetes cluster and for the minimum required IAM permissions.

    +

    Setting Ingress Resource Scope

    +

    You can limit the ingresses ALB ingress controller controls by combining following two approaches:

    +

    Limiting ingress class

    +

    Setting the --ingress-class argument constrains the controller's scope to ingresses with matching ingressClassName field.

    +

    An example of the container spec portion of the controller, only listening for resources with the class "alb", would be as follows.

    +
    spec:
+  containers:
+  - args:
+    - --ingress-class=alb
+
    +

    Now, only ingress resources with the appropriate class are picked up, as seen below.

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: echoserver
+  namespace: echoserver
+spec:
+  ingressClassName: alb
+  ...
+
    +

    If the ingress class is not specified, the controller will reconcile Ingress objects without the ingress class specified or ingress class alb.

    +

    Limiting Namespaces

    +

    Setting the --watch-namespace argument constrains the controller's scope to a single namespace. Ingress events outside of the namespace specified are not be seen by the controller.

    +

    An example of the container spec, for a controller watching only the default namespace, is as follows.

    +
    spec:
+  containers:
+  - args:
+    - --watch-namespace=default
+
    +
    +

    Currently, you can set only 1 namespace to watch in this flag. See this Kubernetes issue for more details.

    +

    Controller command line flags

    +
    +

    The --cluster-name flag is mandatory and the value must match the name of the kubernetes cluster. If you specify an incorrect name, the subnet auto-discovery will not work.

    +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FlagTypeDefaultDescription
    aws-api-endpointsAWS API Endpoints ConfigAWS API endpoints mapping, format: serviceID1=URL1,serviceID2=URL2
    aws-api-throttleAWS Throttle Configdefault valuethrottle settings for AWS APIs, format: serviceID1:operationRegex1=rate:burst,serviceID2:operationRegex2=rate:burst
    aws-max-retriesint10Maximum retries for AWS APIs
    aws-regionstringinstance metadataAWS Region for the kubernetes cluster
    aws-vpc-idstringinstance metadataAWS VPC ID for the Kubernetes cluster
    backend-security-groupstringBackend security group id to use for the ingress rules on the worker node SG
    cluster-namestringKubernetes cluster name
    default-ssl-policystringELBSecurityPolicy-2016-08Default SSL Policy that will be applied to all Ingresses or Services that do not have the SSL Policy annotation
    default-tagsstringMapAWS Tags that will be applied to all AWS resources managed by this controller. Specified Tags takes highest priority
    default-target-typestringinstanceDefault target type for Ingresses and Services - ip, instance
    disable-ingress-class-annotationbooleanfalseDisable new usage of the kubernetes.io/ingress.class annotation
    disable-ingress-group-name-annotationbooleanfalseDisallow new use of the alb.ingress.kubernetes.io/group.name annotation
    disable-restricted-sg-rulesbooleanfalseDisable the usage of restricted security group rules
    enable-backend-security-groupbooleantrueEnable sharing of security groups for backend traffic
    enable-endpoint-slicesbooleanfalseUse EndpointSlices instead of Endpoints for pod endpoint and TargetGroupBinding resolution for load balancers with IP targets.
    enable-leader-electionbooleantrueEnable leader election for the load balancer controller manager. Enabling this will ensure there is only one active controller manager
    enable-pod-readiness-gate-injectbooleantrueIf enabled, targetHealth readiness gate will get injected to the pod spec for the matching endpoint pods
    enable-shieldbooleantrueEnable Shield addon for ALB
    enable-wafbooleantrueEnable WAF addon for ALB
    enable-wafv2booleantrueEnable WAF V2 addon for ALB
    external-managed-tagsstringListAWS Tag keys that will be managed externally. Specified Tags are ignored during reconciliation
    feature-gatesstringMapA set of key=value pairs to enable or disable features
    health-probe-bind-addrstring:61779The address the health probes binds to
    ingress-classstringalbName of the ingress class this controller satisfies
    ingress-max-concurrent-reconcilesint3Maximum number of concurrently running reconcile loops for ingress
    kubeconfigstringin-cluster configPath to the kubeconfig file containing authorization and API server information
    leader-election-idstringaws-load-balancer-controller-leaderName of the leader election ID to use for this controller
    leader-election-namespacestringName of the leader election ID to use for this controller
    load-balancer-classstringservice.k8s.aws/nlbName of the load balancer class specified in service spec.loadBalancerClass reconciled by this controller
    log-levelstringinfoSet the controller log level - info, debug
    metrics-bind-addrstring:8080The address the metric endpoint binds to
    service-max-concurrent-reconcilesint3Maximum number of concurrently running reconcile loops for service
    sync-periodduration10h0m0sPeriod at which the controller forces the repopulation of its local object stores
    targetgroupbinding-max-concurrent-reconcilesint3Maximum number of concurrently running reconcile loops for targetGroupBinding
    targetgroupbinding-max-exponential-backoff-delayduration16m40sMaximum duration of exponential backoff for targetGroupBinding reconcile failures
    tolerate-non-existent-backend-servicebooleantrueWhether to allow rules which refer to backend services that do not exist (When enabled, it will return 503 error if backend service not exist)
    tolerate-non-existent-backend-actionbooleantrueWhether to allow rules which refer to backend actions that do not exist (When enabled, it will return 503 error if backend action not exist)
    watch-namespacestringNamespace the controller watches for updates to Kubernetes objects, If empty, all namespaces are watched.
    webhook-bind-portint9443The TCP port the Webhook server binds to
    webhook-cert-dirstring/tmp/k8s-webhook-server/serving-certsThe directory that contains the server key and certificate
    webhook-cert-filestringtls.crtThe server certificate name
    webhook-key-filestringtls.keyThe server key name
    +

    disable-ingress-class-annotation

    +

    --disable-ingress-class-annotation controls whether to disable new usage of the kubernetes.io/ingress.class annotation.

    +

    Once disabled:

    +
      +
    • +

      you can no longer create Ingresses with the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller).

      +
      • +
    • +

      you can no longer update Ingresses to set the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller).

      +
      • +
    • +

      you can still create Ingresses with a kubernetes.io/ingress.class annotation that has other values (for example: "nginx")

      +
      • +
    +

    disable-ingress-group-name-annotation

    +

    --disable-ingress-group-name-annotation controls whether to disable new usage of alb.ingress.kubernetes.io/group.name annotation.

    +

    Once disabled:

    +
      +
    • you can no longer create Ingresses with the alb.ingress.kubernetes.io/group.name annotation.
      • +
    • you can no longer alter the value of an alb.ingress.kubernetes.io/group.name annotation on an existing Ingress.
      • +
    +

    sync-period

    +

    --sync-period defines a fixed interval for the controller to reconcile all resources even if there is no change, default to 10 hr. Please be mindful that frequent reconciliations may incur unnecessary AWS API usage.

    +

    As best practice, we do not recommend users to manually modify the resources managed by the controller. And users should not depend on the controller auto-reconciliation to revert the manual modification, or to mitigate any security risks.

    +

    waf-addons

    +

    By default, the controller assumes sole ownership of the WAF addons associated to the provisioned ALBs, via the flag --enable-waf and --enable-wafv2. +And the users should disable them accordingly if they want a third party like AWS Firewall Manager to associate or remove the WAF-ACL of the ALBs. +Once disabled, the controller shall not take any actions on the waf addons of the provisioned ALBs.

    +

    throttle config

    +

    Controller uses the following default throttle config:

    +

    WAF Regional:^AssociateWebACL|DisassociateWebACL=0.5:1,WAF Regional:^GetWebACLForResource|ListResourcesForWebACL=1:1,WAFV2:^AssociateWebACL|DisassociateWebACL=0.5:1,WAFV2:^GetWebACLForResource|ListResourcesForWebACL=1:1,Elastic Load Balancing v2:^RegisterTargets|^DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40
+
    +Client side throttling enables gradual scaling of the api calls. Additional throttle config can be specified via the --aws-api-throttle flag. You can get the ServiceID from the API definition in AWS SDK. For e.g, ELBv2 it is Elastic Load Balancing v2.

    +

    Here is an example of throttle config to specify client side throttling of ELBv2 calls.

    +
    --aws-api-throttle=Elastic Load Balancing v2:RegisterTargets|DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40
+
    +

    Instance metadata

    +

    If running on EC2, the default values are obtained from the instance metadata service.

    +

    Feature Gates

    +

    They are a set of kye=value pairs that describe AWS load balance controller features. You can use it as flags --feature-gates=key1=value1,key2=value2

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Features-gate Supported KeyTypeDefault ValueDescription
    ListenerRulesTaggingstringtrueEnable or disable tagging AWS load balancer listeners and rules
    WeightedTargetGroupsstringtrueEnable or disable weighted target groups
    ServiceTypeLoadBalancerOnlystringfalseIf enabled, controller will be limited to reconciling service of type LoadBalancer
    EndpointsFailOpenstringtrueEnable or disable allowing endpoints with ready:unknown state in the target groups.
    EnableServiceControllerstringtrueToggles support for Service type resources.
    EnableIPTargetTypestringtrueUsed to toggle support for target-type ip across Ingress and Service type resources.
    EnableRGTAPIstringfalseIf enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, tag:GetResources is needed in controller IAM policy.
    SubnetsClusterTagCheckstringtrueEnable or disable the check for kubernetes.io/cluster/${cluster-name} during subnet auto-discovery
    NLBHealthCheckAdvancedConfigurationstringtrueEnable or disable advanced health check configuration for NLB, for example health check timeout
    ALBSingleSubnetstringfalseIf enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance
    NLBSecurityGroupstringtrueEnable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/installation/index.html b/v2.7/deploy/installation/index.html new file mode 100644 index 000000000..471283e11 --- /dev/null +++ b/v2.7/deploy/installation/index.html @@ -0,0 +1,1536 @@ + + + + + + + + + + + + + + + + + Installation Guide - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    AWS Load Balancer Controller installation

    +

    The AWS Load Balancer controller (LBC) provisions AWS Network Load Balancer (NLB) and Application Load Balancer (ALB) resources. The LBC watches for new service or ingress Kubernetes resources and configures AWS resources.

    +

    The LBC is supported by AWS. Some clusters may be using the legacy "in-tree" functionality to provision AWS load balancers. The AWS Load Balancer Controller should be installed instead.

    +
    +

    Existing AWS ALB Ingress Controller users

    +

    The AWS ALB Ingress controller must be uninstalled before installing the AWS Load Balancer Controller. +Please follow our migration guide to do a migration.

    +
    +
    +

    When using AWS Load Balancer Controller v2.5+

    +

    The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerClass field for service of type LoadBalancer on create. +This makes the AWS LBC the default controller for service of type LoadBalancer. You can disable this feature and revert to set Cloud Controller Manager (in-tree controller) as the default by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false . +You will no longer be able to provision new Classic Load Balancer (CLB) from your kubernetes service unless you disable this feature. Existing CLB will continue to work fine.

    +
    +

    Supported Kubernetes versions

    +
      +
    • AWS Load Balancer Controller v2.0.0~v2.1.3 requires Kubernetes 1.15+
      • +
    • AWS Load Balancer Controller v2.2.0~v2.3.1 requires Kubernetes 1.16-1.21
      • +
    • AWS Load Balancer Controller v2.4.0+ requires Kubernetes 1.19+
      • +
    • AWS Load Balancer Controller v2.5.0+ requires Kubernetes 1.22+
      • +
    +

    Deployment considerations

    +

    Additional requirements for non-EKS clusters:

    +
      +
    • Ensure subnets are tagged appropriately for auto-discovery to work
      • +
    • For IP targets, pods must have IPs from the VPC subnets. You can configure the amazon-vpc-cni-k8s plugin for this purpose.
      • +
    +

    Additional requirements for isolated cluster:

    +

    Isolated clusters are clusters without internet access, and instead reply on VPC endpoints for all required connects. +When installing the AWS LBC in isolated clusters, you need to disable shield, waf and wafv2 via controller flags --enable-shield=false, --enable-waf=false, --enable-wafv2=false

    +

    Using the Amazon EC2 instance metadata server version 2 (IMDSv2)

    +

    We recommend blocking the access to instance metadata by requiring the instance to use IMDSv2 only. For more information, please refer to the AWS guidance here. If you are using the IMDSv2, set the hop limit to 2 or higher in order to allow the LBC to perform the metadata introspection.

    +

    You can set the IMDSv2 as follows: +

    aws ec2 modify-instance-metadata-options --http-put-response-hop-limit 2 --http-tokens required --region <region> --instance-id <instance-id>
+

    +

    Instead of depending on IMDSv2, you can specify the AWS Region and the VPC via the controller flags --aws-region and --aws-vpc-id.

    +

    Configure IAM

    +

    The controller runs on the worker nodes, so it needs access to the AWS ALB/NLB APIs with IAM permissions.

    +

    The IAM permissions can either be setup using IAM roles for service accounts (IRSA) or can be attached directly to the worker node IAM roles. The best practice is using IRSA if you're using Amazon EKS. If you're using kOps or self-hosted Kubernetes, you must manually attach polices to node instances.

    + +

    The reference IAM policies contain the following permissive configuration: +

    {
+    "Effect": "Allow",
+    "Action": [
+        "ec2:AuthorizeSecurityGroupIngress",
+        "ec2:RevokeSecurityGroupIngress"
+    ],
+    "Resource": "*"
+},
+

    +

    We recommend further scoping down this configuration based on the VPC ID or cluster name resource tag.

    +

    Example condition for VPC ID: +

        "Condition": {
+        "ArnEquals": {
+            "ec2:Vpc": "arn:aws:ec2:<REGION>:<ACCOUNT-ID>:vpc/<VPC-ID>"
+        }
+    }
+

    +

    Example condition for cluster name resource tag: +

        "Condition": {
+        "Null": {
+            "aws:ResourceTag/kubernetes.io/cluster/<CLUSTER-NAME>": "false"
+        }
+    }
+

    +
      +
    1. +

      Create an IAM OIDC provider. You can skip this step if you already have one for your cluster. + 

      eksctl utils associate-iam-oidc-provider \
+    --region <region-code> \
+    --cluster <your-cluster-name> \
+    --approve
+

      +
      2. +
    2. +

      Download an IAM policy for the LBC using one of the following commands:

      + If your cluster is in a US Gov Cloud region: + 

      curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_us-gov.json
+
      + If your cluster is in a China region: + 
      curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_cn.json
+
      + If your cluster is in any other region: + 
      curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json
+

      +
      3. +
    3. +

      Create an IAM policy named AWSLoadBalancerControllerIAMPolicy. If you downloaded a different policy, replace iam-policy with the name of the policy that you downloaded. + 

      aws iam create-policy \
+    --policy-name AWSLoadBalancerControllerIAMPolicy \
+    --policy-document file://iam-policy.json
+
      + Take note of the policy ARN that's returned.

      +
      4. +
    4. +

      Create an IAM role and Kubernetes ServiceAccount for the LBC. Use the ARN from the previous step. + 

      eksctl create iamserviceaccount \
+--cluster=<cluster-name> \
+--namespace=kube-system \
+--name=aws-load-balancer-controller \
+--attach-policy-arn=arn:aws:iam::<AWS_ACCOUNT_ID>:policy/AWSLoadBalancerControllerIAMPolicy \
+--override-existing-serviceaccounts \
+--region <region-code> \
+--approve
+

      +
      5. +
    +

    Option B: Attach IAM policies to nodes

    +

    If you're not setting up IAM roles for service accounts, apply the IAM policies from the following URL at a minimum. Please be aware of the possibility that the controller permissions may be assumed by other users in a pod after retrieving the node role credentials, so the best practice would be using IRSA instead of attaching IAM policy directly. +

    curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json
+

    +

    The following IAM permissions subset is for those using TargetGroupBinding only and don't plan to use the LBC to manage security group rules:

    +
    {
+    "Statement": [
+        {
+            "Action": [
+                "ec2:DescribeVpcs",
+                "ec2:DescribeSecurityGroups",
+                "ec2:DescribeInstances",
+                "elasticloadbalancing:DescribeTargetGroups",
+                "elasticloadbalancing:DescribeTargetHealth",
+                "elasticloadbalancing:ModifyTargetGroup",
+                "elasticloadbalancing:ModifyTargetGroupAttributes",
+                "elasticloadbalancing:RegisterTargets",
+                "elasticloadbalancing:DeregisterTargets"
+            ],
+            "Effect": "Allow",
+            "Resource": "*"
+        }
+    ],
+    "Version": "2012-10-17"
+}
+
    +

    Network configuration

    +

    Review the worker nodes security group docs. Your node security group must permit incoming traffic on TCP port 9443 from the Kubernetes control plane. This is needed for webhook access.

    +

    If you use eksctl, this is the default configuration.

    +

    If you use custom networking, please refer to the EKS Best Practices Guides for network configuration.

    +

    Add controller to cluster

    +

    We recommend using the Helm chart to install the controller. The chart supports Fargate and facilitates updating the controller.

    +
    +

    If you want to run the controller on Fargate, use the Helm chart, since it doesn't depend on the cert-manager.

    +

    Detailed instructions

    +

    Follow the instructions in the aws-load-balancer-controller Helm chart.

    +

    Summary

    +
      +
    1. Add the EKS chart repo to Helm +
      helm repo add eks https://aws.github.io/eks-charts
+
      2. +
    2. +

      If upgrading the chart via helm upgrade, install the TargetGroupBinding CRDs. +

      wget https://raw.githubusercontent.com/aws/eks-charts/master/stable/aws-load-balancer-controller/crds/crds.yaml
+kubectl apply -f crds.yaml
+

      +
      +

      Tip

      +

      The helm install command automatically applies the CRDs, but helm upgrade doesn't.

      +
      +
      3. +
    +

    Helm install command for clusters with IRSA: +

    helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName=<cluster-name> --set serviceAccount.create=false --set serviceAccount.name=aws-load-balancer-controller
+

    +

    Helm install command for clusters not using IRSA: +

    helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName=<cluster-name>
+

    +
    +
    +

    Install cert-manager

    +
    kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.12.3/cert-manager.yaml
+
    +

    Apply YAML

    +
      +
    1. Download the spec for the LBC. +
      wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_full.yaml
+
      2. +
    2. Edit the saved yaml file, go to the Deployment spec, and set the controller --cluster-name arg value to your EKS cluster name +
      apiVersion: apps/v1
+kind: Deployment
+. . .
+name: aws-load-balancer-controller
+namespace: kube-system
+spec:
+    . . .
+    template:
+        spec:
+            containers:
+                - args:
+                    - --cluster-name=<your-cluster-name>
+
      3. +
    3. If you use IAM roles for service accounts, we recommend that you delete the ServiceAccount from the yaml spec. If you delete the installation section from the yaml spec, deleting the ServiceAccount preserves the eksctl created iamserviceaccount. +
      apiVersion: v1
+kind: ServiceAccount
+
      4. +
    4. Apply the yaml file +
      kubectl apply -f v2_7_0_full.yaml
+
      5. +
    5. Optionally download the default ingressclass and ingressclass params +
      wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_ingclass.yaml
+
      6. +
    6. Apply the ingressclass and params +
      kubectl apply -f v2_7_0_ingclass.yaml
+
      7. +
    +
    +
    +

    Create Update Strategy

    +

    The controller doesn't receive security updates automatically. You need to manually upgrade to a newer version when it becomes available.

    +

    You can upgrade using helm upgrade or another strategy to manage the controller deployment.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/pod_readiness_gate/index.html b/v2.7/deploy/pod_readiness_gate/index.html new file mode 100644 index 000000000..8047fb05f --- /dev/null +++ b/v2.7/deploy/pod_readiness_gate/index.html @@ -0,0 +1,1245 @@ + + + + + + + + + + + + + + + + + Pod Readiness Gate - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Pod readiness gate

    +

    AWS Load Balancer controller supports »Pod readiness gates« to indicate that pod is registered to the ALB/NLB and healthy to receive traffic. +The controller automatically injects the necessary readiness gate configuration to the pod spec via mutating webhook during pod creation.

    +

    For readiness gate configuration to be injected to the pod spec, you need to apply the label elbv2.k8s.aws/pod-readiness-gate-inject: enabled to the pod namespace. However, note that this only works with target-type: ip, since when using target-type: instance, it's the node used as backend, the ALB itself is not aware of pod/podReadiness in such case.

    +

    The pod readiness gate is needed under certain circumstances to achieve full zero downtime rolling deployments. Consider the following example:

    +
      +
    • Low number of replicas in a deployment
      • +
    • Start a rolling update of the deployment
      • +
    • Rollout of new pods takes less time than it takes the AWS Load Balancer controller to register the new pods and for their health state turn »Healthy« in the target group
      • +
    • At some point during this rolling update, the target group might only have registered targets that are in »Initial« or »Draining« state; this results in service outage
      • +
    +

    In order to avoid this situation, the AWS Load Balancer controller can set the readiness condition on the pods that constitute your ingress or service backend. The condition status on a pod will be set to True only when the corresponding target in the ALB/NLB target group shows a health state of »Healthy«. +This prevents the rolling update of a deployment from terminating old pods until the newly created pods are »Healthy« in the ALB/NLB target group and ready to take traffic.

    +
    +

    upgrading from AWS ALB ingress controller

    +

    If you have a pod spec with legacy readiness gate configuration, ensure you label the namespace and create the Service/Ingress objects before applying the pod/deployment manifest. +The load balancer controller will remove all legacy readiness-gate configuration and add new ones during pod creation.

    +
    +

    Configuration

    +

    Pod readiness gate support is enabled by default on the AWS load balancer controller. You need to apply the readiness gate inject label to each of the namespace that you would +like to use this feature. You can create and label a namespace as follows -

    +

    $ kubectl create namespace readiness
+namespace/readiness created
+
+$ kubectl label namespace readiness elbv2.k8s.aws/pod-readiness-gate-inject=enabled
+namespace/readiness labeled
+
+$ kubectl describe namespace readiness
+Name:         readiness
+Labels:       elbv2.k8s.aws/pod-readiness-gate-inject=enabled
+Annotations:  <none>
+Status:       Active
+
    +Once labelled, the controller will add the pod readiness gates config to all the pods created subsequently that meet all the following conditions

    +
      +
    • There exists a service matching the pod labels in the same namespace
      • +
    • There exists at least one target group binding that refers to the matching service
      • +
    • The target type is IP
      • +
    +

    The readiness gates have the prefix target-health.elbv2.k8s.aws and the controller injects the config to the pod spec only during pod creation.

    +
    +

    create ingress or service before pod

    +

    To ensure all of your pods in a namespace get the readiness gate config, you need create your Ingress or Service and label the namespace before creating the pods

    +
    +

    Object Selector

    +

    The default webhook configuration matches all pods in the namespaces containing the label elbv2.k8s.aws/pod-readiness-gate-inject=enabled. You can modify the webhook configuration further +to select specific pods from the labeled namespace by specifying the objectSelector. For example, in order to select resources with elbv2.k8s.aws/pod-readiness-gate-inject: enabled label, +you can add the following objectSelector to the webhook: +

      objectSelector:
+    matchLabels:
+      elbv2.k8s.aws/pod-readiness-gate-inject: enabled
+
    +To edit, +
    $ kubectl edit mutatingwebhookconfigurations aws-load-balancer-webhook
+  ...
+  name: mpod.elbv2.k8s.aws
+  namespaceSelector:
+    matchExpressions:
+    - key: elbv2.k8s.aws/pod-readiness-gate-inject
+      operator: In
+      values:
+      - enabled
+  objectSelector:
+    matchLabels:
+      elbv2.k8s.aws/pod-readiness-gate-inject: enabled
+  ...
+
    +When you specify multiple selectors, pods matching all the conditions will get mutated.

    +

    Upgrading from AWS ALB Ingress controller

    +

    If you have a pod spec with the AWS ALB ingress controller (aka v1) style readiness-gate configuration, the controller will automatically remove the legacy readiness gates config and add new ones during pod creation if the pod namespace is labelled correctly. Other than the namespace labeling, no further configuration is necessary. +The legacy readiness gates have the target-health.alb.ingress.k8s.aws prefix.

    +

    Disabling the readiness gate inject

    +

    You can specify the controller flag --enable-pod-readiness-gate-inject=false during controller startup to disable the controller from modifying the pod spec.

    +

    Checking the pod condition status

    +

    The status of the readiness gates can be verified with kubectl get pod -o wide: +

    NAME                          READY   STATUS    RESTARTS   AGE   IP         NODE                       READINESS GATES
+nginx-test-5744b9ff84-7ftl9   1/1     Running   0          81s   10.1.2.3   ip-10-1-2-3.ec2.internal   0/1
+

    +

    When the target is registered and healthy in the ALB/NLB, the output will look like: +

    NAME                          READY   STATUS    RESTARTS   AGE   IP         NODE                       READINESS GATES
+nginx-test-5744b9ff84-7ftl9   1/1     Running   0          81s   10.1.2.3   ip-10-1-2-3.ec2.internal   1/1
+

    +

    If a readiness gate doesn't get ready, you can check the reason via:

    +
    $ kubectl get pod nginx-test-545d8f4d89-l7rcl -o yaml | grep -B7 'type: target-health'
+status:
+  conditions:
+  - lastProbeTime: null
+    lastTransitionTime: null
+    message: Initial health checks in progress
+    reason: Elb.InitialHealthChecking
+    status: "True"
+    type: target-health.elbv2.k8s.aws/k8s-readines-perf1000-7848e5026b
+
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/security_groups/index.html b/v2.7/deploy/security_groups/index.html new file mode 100644 index 000000000..79a2531be --- /dev/null +++ b/v2.7/deploy/security_groups/index.html @@ -0,0 +1,1272 @@ + + + + + + + + + + + + + + + + + Security Group Management - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Security Groups for Load Balancers

    +

    Use security groups to limit client connections to your load balancers, and restrict connections with nodes. The AWS Load Balancer Controller (LBC) defines two classifications of security groups: frontend and backend.

    +
      +
    • Frontend Security Groups: Determine the clients that can access the load balancers.
      • +
    • Backend Security Groups: Permit the load balancer to connect to targets, such as EC2 instances or ENIs.
      • +
    +

    Frontend Security Groups

    +

    Frontend security groups control access to load balancers by specifying which clients can connect to them.

    +

    Use cases for Frontent Security Groups include:

    +
      +
    • Placing the load balancer behind another service, such as AWS Web Application Firewall or AWS CloudFront.
      • +
    • Blocking the IP address range (CIDR) of a region.
      • +
    • Configuring the Load Balancer for private or internal use, by specifying internal CIDRs and Security Groups.
      • +
    +

    In the default configuration, the LBC automatically creates one security group per load balancer, allowing traffic from inbound-cidrs to listen-ports.

    +

    Configuration

    +

    Apply custom frontend security groups with an annotation. This disables automatic generation of frontend security groups.

    + +

    Backend Security Groups

    +

    Backend Security Groups control traffic between AWS Load Balancers and their target EC2 instances or ENIs. For example, backend security groups can restrict the ports load balancers may access on nodes.

    +
      +
    • Backend security groups permit traffic from AWS Load Balancers to their targets.
      • +
    • LBC uses a single, shared backend security group, attaching it to each load balancer and using as the traffic source in the security group rules it adds to targets.
      • +
    • When configuring security group rules at the ENI/Instance level, use the Security Group ID of the backend security group. Avoid using the IP addresses of a specific AWS Load Balancer, these IPs are dynamic and the security group rules aren't updated automatically.
      • +
    +

    Configuration

    +

    Enable or Disable: Use --enable-backend-security-group (default true) to enable/disable the shared backend security group.

    +

    You can turn off the shared backend security group feature by setting it to false. However, if you have a high number of Ingress resources with frontend security groups auto-generated by the controller, you might run into security group rule limits on the instance/ENI security groups.

    +

    Specification: Use --backend-security-group to pass in a security group ID to use as a custom shared backend security group.

    +

    If --backend-security-group is left empty, a security group with the following attributes will be created:

    +
    name: k8s-traffic-<cluster_name>-<hash_of_cluster_name>
+tags: 
+    elbv2.k8s.aws/cluster: <cluster_name>
+    elbv2.k8s.aws/resource: backend-sg
+
    +

    Coordination of Frontend and Backend Security Groups

    +
      +
    • If the LBC auto-creates the frontend security group for a load balancer, it automatically adds the security group rules to allow traffic from the load balancer to the backend instances/ENIs.
      • +
    • If the frontend security groups are manually specified, the LBC will not by default add any rules to the backend security group.
      • +
    +

    Enable Autogeneration of Backend Security Group Rules

    +
      +
    • If using custom frontend security groups, the LBC can be configured to automatically manage backend security group rules.
      • +
    • To enable managing backend security group rules, apply an additional annotation to Ingress and Service resources.
      • +
    • For Ingress resources, set the alb.ingress.kubernetes.io/manage-backend-security-group-rules annotation to true.
      • +
    • For Service resources, set the service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules annotation to true.
      • +
    • If management of backend security group rules is enabled with an annotation on a Service or Ingress, then --enable-backend-security-group must be set to true.
      • +
    • These annotations are ignored when using auto-generated frontend security groups.
      • +
    +

    Port Range Restrictions

    +

    From version v2.3.0 onwards, the controller restricts port ranges in the backend security group rules by default. This improves the security of the default configuration. The LBC should generate the necessary rules to permit traffic, based on the Service and Ingress resources.

    +

    If needed, set the controller flag --disable-restricted-sg-rules to true to permit traffic to all ports. This may be appropriate for backwards compatability, or troubleshooting.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/subnet_discovery/index.html b/v2.7/deploy/subnet_discovery/index.html new file mode 100644 index 000000000..a1e9cb2f2 --- /dev/null +++ b/v2.7/deploy/subnet_discovery/index.html @@ -0,0 +1,1185 @@ + + + + + + + + + + + + + + + + + Subnet Discovery - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Subnet auto-discovery

    +

    By default, the AWS Load Balancer Controller (LBC) auto-discovers network subnets that it can create AWS Network Load Balancers (NLB) and AWS Application Load Balancers (ALB) in. ALBs require at least two subnets across Availability Zones by default, +set Feature Gate ALBSingleSubnet to "true" allows using only 1 subnet for provisioning ALB. NLBs require one subnet. +The subnets must be tagged appropriately for auto-discovery to work. The controller chooses one subnet from each Availability Zone. During auto-discovery, the controller +considers subnets with at least eight available IP addresses. In the case of multiple qualified tagged subnets in an Availability Zone, the controller chooses the first one in lexicographical +order by the subnet IDs. +For more information about the subnets for the LBC, see Application Load Balancers +and Network Load Balancers. +If you used eksctl or an Amazon EKS AWS CloudFormation template to create your VPC after March 26, 2020, then the subnets are tagged appropriately when they're created. For +more information about the Amazon EKS AWS CloudFormation VPC templates, see Creating a VPC for your Amazon EKS cluster.

    +

    Public subnets

    +

    Public subnets are used for internet-facing load balancers. These subnets must have the following tags:

    + + + + + + + + + + + + + +
    KeyValue
    kubernetes.io/role/elb1 or ``
    +

    Private subnets

    +

    Private subnets are used for internal load balancers. These subnets must have the following tags:

    + + + + + + + + + + + + + +
    KeyValue
    kubernetes.io/role/internal-elb1 or ``
    +

    Common tag

    +

    In version v2.1.1 and older of the LBC, both the public and private subnets must be tagged with the cluster name as follows:

    + + + + + + + + + + + + + +
    KeyValue
    kubernetes.io/cluster/${cluster-name}owned or shared
    +

    ${cluster-name} is the name of the Kubernetes cluster.

    +

    The cluster tag is not required in versions v2.1.2 to v2.4.1, unless a cluster tag for another cluster is present.

    +

    With versions v2.4.2 and later, you can disable the cluster tag check completely by specifying the feature gate SubnetsClusterTagCheck=false

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/deploy/upgrade/migrate_v1_v2/index.html b/v2.7/deploy/upgrade/migrate_v1_v2/index.html new file mode 100644 index 000000000..000bf92d0 --- /dev/null +++ b/v2.7/deploy/upgrade/migrate_v1_v2/index.html @@ -0,0 +1,1243 @@ + + + + + + + + + + + + + + + + + Migrate v1 to v2 - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Migrate from v1 to v2

    +

    This document contains the information necessary to migrate from an existing installation of AWSALBIngressController(v1) to the new AWSLoadBalancerController(v2).

    +

    Prerequisites

    +
      +
    • AWSALBIngressController >=v1.1.3
      • +
    +
    +

    If you have AWSALBIngressController(<1.1.3) installed, you need to upgrade to version>=v1.1.3(e.g. v1.1.9) first.

    +
    +

    Backwards compatibility

    +

    The AWSLoadBalancerController(v2.0.1) is backwards-compatible with AWSALBIngressController(>=v1.1.3).

    +

    It supports existing AWS resources provisioned by AWSALBIngressController(>=v1.1.3) for Ingress resources with below caveats:

    +
      +
    1. +

      The AWS LoadBalancer resource created for your Ingress will be preserved. If migrating from <v1.1.3, a new AWS LoadBalancer resource will be created and the old AWS LoadBalancer will remain in the account. However, the old AWS LoadBalancer will not be used for the ingress resource.

      +
      2. +
    2. +

      If security-groups annotation isn't used, the SecurityGroup rule on worker node's SecurityGroup that allow LoadBalancer traffic should be manually adjusted post migration.

      +
      +

      details

      +

      when security-groups annotation isn't used:

      +
        +
      • a managed SecurityGroup will be created and attached to ALB. This SecurityGroup will be preserved.
        • +
      • an inbound rule will be added to your worker node securityGroups which allow traffic from the above managed SecurityGroup for ALB.
          +
        • The AWSALBIngressController didn't add any description for that inbound rule.
          • +
        • The AWSLoadBalancerController will use elbv2.k8s.aws/targetGroupBinding=shared for that inbound rule
          • +
        +
        • +
      • You'll need to manually add elbv2.k8s.aws/targetGroupBinding=shared description to that inbound rule so that AWSLoadBalancerController can delete such rule when you delete your Ingress.
          +
        • The following shell pipeline can be used to update the rules automatically. Replace $REGION and $SG_ID with your own values. After running it change DryRun: true to DryRun: false to have it actually update your security group: + 
          aws --region $REGION ec2 update-security-group-rule-descriptions-ingress --cli-input-json "$(aws --region $REGION ec2 describe-security-groups --group-ids $SG_ID | jq '.SecurityGroups[0] | {DryRun: true, GroupId: .GroupId ,IpPermissions: (.IpPermissions | map(select(.FromPort==0 and .ToPort==65535) | .UserIdGroupPairs |= map(.Description="elbv2.k8s.aws/targetGroupBinding=shared"))) }' -M)"
+
          • +
        +
        • +
      +
      +
      +

      sample

      +

      inbound rule on worker node securityGroups that allow traffic from the managed LB securityGroup before migration:

      + + + + + + + + + + + + + + + + + + + +
      TypeProtocolPort rangeSourceDescription - optional
      All TCPTCP0 - 65535sg-008c920b1(managed LB SG)-
      +

      inbound rule on worker node securityGroups that allow traffic from the managed LB securityGroup after migration:

      + + + + + + + + + + + + + + + + + + + +
      TypeProtocolPort rangeSourceDescription - optional
      All TCPTCP0 - 65535sg-008c920b1(managed LB SG)elbv2.k8s.aws/targetGroupBinding=shared
      +
      +
      3. +
    3. +

      If you have used podReadinessGate feature, please refer PodReadinessGate for the guide about new readinessGate configuration.

      +
      +

      old pod readinessGate

      +

      once configured properly, AWS Load Balancer Controller will automatically inject the new format of podReadinessGates into your pods, and remove old podReadinessGates if any.

      +

      However, we still recommend you to remove the old podReadinessGates from your Deployments since it's not used.

      +
      +
      4. +
    +

    Upgrade steps

    +
      +
    1. +

      Determine existing installed AWSALBIngressController version. +

      foo@bar:~$ kubectl describe deployment  -n kube-system  alb-ingress-controller | grep Image
+    Image:      docker.io/amazon/aws-alb-ingress-controller:v1.1.9
+

      +
      2. +
    2. +

      Uninstalling existing AWSALBIngressController(>=v1.1.3).

      +

      Existing AWSALBIngressController needs to be uninstalled first before install new AWSLoadBalancerController.

      +
      +

      Existing Ingress resources do not need to be deleted.

      +
      +
      3. +
    3. +

      Install new AWSLoadBalancerController

      +
        +
      1. Install AWSLoadBalancerController(v2.5.0) by following the installation instructions
        2. +
      2. Grant additional IAM policy needed for migration to the controller.
        3. +
      +
      4. +
    4. +

      Verify all Ingresses works as expected.

      +
      5. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/examples/2048/2048_full.yaml b/v2.7/examples/2048/2048_full.yaml new file mode 100644 index 000000000..8164724d1 --- /dev/null +++ b/v2.7/examples/2048/2048_full.yaml @@ -0,0 +1,62 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: game-2048 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + namespace: game-2048 + name: deployment-2048 +spec: + selector: + matchLabels: + app.kubernetes.io/name: app-2048 + replicas: 5 + template: + metadata: + labels: + app.kubernetes.io/name: app-2048 + spec: + containers: + - image: public.ecr.aws/l6m2t8p7/docker-2048:latest + imagePullPolicy: Always + name: app-2048 + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + namespace: game-2048 + name: service-2048 +spec: + ports: + - port: 80 + targetPort: 80 + protocol: TCP + type: NodePort + selector: + app.kubernetes.io/name: app-2048 +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + namespace: game-2048 + name: ingress-2048 + annotations: + alb.ingress.kubernetes.io/scheme: internet-facing + alb.ingress.kubernetes.io/target-type: ip +spec: + ingressClassName: alb + rules: + - http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: service-2048 + port: + number: 80 diff --git a/v2.7/examples/2048/2048_full_dualstack.yaml b/v2.7/examples/2048/2048_full_dualstack.yaml new file mode 100644 index 000000000..4a59d0aee --- /dev/null +++ b/v2.7/examples/2048/2048_full_dualstack.yaml @@ -0,0 +1,63 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: game-2048 +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + namespace: game-2048 + name: deployment-2048 +spec: + selector: + matchLabels: + app.kubernetes.io/name: app-2048 + replicas: 5 + template: + metadata: + labels: + app.kubernetes.io/name: app-2048 + spec: + containers: + - image: public.ecr.aws/l6m2t8p7/docker-2048:latest + imagePullPolicy: Always + name: app-2048 + ports: + - containerPort: 80 +--- +apiVersion: v1 +kind: Service +metadata: + namespace: game-2048 + name: service-2048 +spec: + ports: + - port: 80 + targetPort: 80 + protocol: TCP + type: NodePort + selector: + app.kubernetes.io/name: app-2048 +--- +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + namespace: game-2048 + name: ingress-2048 + annotations: + alb.ingress.kubernetes.io/scheme: internet-facing + alb.ingress.kubernetes.io/target-type: ip + alb.ingress.kubernetes.io/ip-address-type: dualstack +spec: + ingressClassName: alb + rules: + - http: + paths: + - path: / + pathType: Prefix + backend: + service: + name: service-2048 + port: + number: 80 diff --git a/v2.7/examples/cognito-ingress-template.yaml b/v2.7/examples/cognito-ingress-template.yaml new file mode 100644 index 000000000..6deaeb128 --- /dev/null +++ b/v2.7/examples/cognito-ingress-template.yaml @@ -0,0 +1,73 @@ +# Requirements: +# +# - For this template, Cognito should have the following basic settings: +# - User Pool ARN ( Cognito -> General Settings ) +# `arn:aws:cognito-idp:::userpool/` +# - User Pool Client ID ( Cognito -> App Integration -> Application Client Settings ) +# `` +# - Domain Name ( Cognito -> App Integration -> Domain Name) +# `` +# - OAuth Scopes ( Cognito -> App Integration -> Application Client Settings ) +# `[x] openid` +# - OAuth Flows ( Cognito -> App Integration -> Application Client Settings ) +# `[x] Authorization code grant` +# - Callback URL(s) ( Cognito -> App Integration -> Application Client Settings ) +# `https://./oauth2/idpresponse` +# +# - Related Kubernetes service/application +# + +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: # app.example.com + namespace: # default + annotations: + alb.ingress.kubernetes.io/scheme: internet-facing + alb.ingress.kubernetes.io/tags: Environment=,Owner= + # For each `listen-ports` object defined an ALB lister is created + # For each listener created the rules defined in `spec` apply with some basic caveats + # SSL redirect rule is applied only to the HTTP listener. Cognito authentication rule + # is applied to the HTTPS listener + alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]' + # Detailed redirect settings + alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}' + # Authentication type must be cognito + alb.ingress.kubernetes.io/auth-type: cognito + # Required parameter for ALB/Cognito integration + alb.ingress.kubernetes.io/auth-scope: openid + # Session timeout on authentication credentials + alb.ingress.kubernetes.io/auth-session-timeout: '3600' + # Session cookie name + alb.ingress.kubernetes.io/auth-session-cookie: AWSELBAuthSessionCookie + # Action to take when a request is not authenticated + alb.ingress.kubernetes.io/auth-on-unauthenticated-request: authenticate + # Cognito parameters required for creation of authentication rules + # The subdomain name only is sufficient for `UserPoolDomain` + # e.g. if `FQDN=app.auth.ap-northeast-1.amazoncognito.com` then `UserPoolDomain=app` + alb.ingress.kubernetes.io/auth-idp-cognito: '{"UserPoolArn": "arn:aws:cognito-idp:::userpool/","UserPoolClientId":"","UserPoolDomain":""}' + # ACM certificate ARN for your TLS domain + alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:::certificate/ +spec: + ingressClassName: alb + rules: + # If you are using ExternalDNS, this will become your application's FQDN + - host: + http: + paths: + # This first path should perform an ssl-redirect as below + - path: / + pathType: Prefix + backend: + service: + name: ssl-redirect + # Configured via the redirect settings in the annotations + port: + name: use-annotation + - path: + pathType: Prefix + backend: + service: + name: + port: + number: diff --git a/v2.7/examples/echo_server/index.html b/v2.7/examples/echo_server/index.html new file mode 100644 index 000000000..958924261 --- /dev/null +++ b/v2.7/examples/echo_server/index.html @@ -0,0 +1,1516 @@ + + + + + + + + + + + + + + + + + EchoServer - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    walkthrough: echoserver

    +

    In this walkthrough, you'll

    +
      +
    • Create a cluster with EKS
      • +
    • Deploy an aws-load-balancer-controller
      • +
    • Create deployments and ingress resources in the cluster
      • +
    • Verify access to the service
      • +
    • (Optional) Use external-dns to create a DNS record pointing to the load balancer created by the aws-load-balancer-controller.
        +
      • This assumes you have a route53 hosted zone available. Otherwise you can access the service using the load balancer DNS.
        • +
      +
      • +
    +

    Create the EKS cluster

    +
      +
    1. +

      Install eksctl: https://eksctl.io

      +
      2. +
    2. +

      Create EKS cluster via eksctl

      +
      eksctl create cluster
+
      +
      2018-08-14T11:19:09-07:00 [ℹ]  setting availability zones to [us-west-2c us-west-2a us-west-2b]
+2018-08-14T11:19:09-07:00 [ℹ]  importing SSH public key "/Users/kamador/.ssh/id_rsa.pub" as "eksctl-exciting-gopher-1534270749-b7:71:da:f6:f3:63:7a:ee:ad:7a:10:37:28:ff:44:d1"
+2018-08-14T11:19:10-07:00 [ℹ]  creating EKS cluster "exciting-gopher-1534270749" in "us-west-2" region
+2018-08-14T11:19:10-07:00 [ℹ]  creating ServiceRole stack "EKS-exciting-gopher-1534270749-ServiceRole"
+2018-08-14T11:19:10-07:00 [ℹ]  creating VPC stack "EKS-exciting-gopher-1534270749-VPC"
+2018-08-14T11:19:50-07:00 [✔]  created ServiceRole stack "EKS-exciting-gopher-1534270749-ServiceRole"
+2018-08-14T11:20:30-07:00 [✔]  created VPC stack "EKS-exciting-gopher-1534270749-VPC"
+2018-08-14T11:20:30-07:00 [ℹ]  creating control plane "exciting-gopher-1534270749"
+2018-08-14T11:31:52-07:00 [✔]  created control plane "exciting-gopher-1534270749"
+2018-08-14T11:31:52-07:00 [ℹ]  creating DefaultNodeGroup stack "EKS-exciting-gopher-1534270749-DefaultNodeGroup"
+2018-08-14T11:35:33-07:00 [✔]  created DefaultNodeGroup stack "EKS-exciting-gopher-1534270749-DefaultNodeGroup"
+2018-08-14T11:35:33-07:00 [✔]  all EKS cluster "exciting-gopher-1534270749" resources has been created
+2018-08-14T11:35:33-07:00 [✔]  saved kubeconfig as "/Users/kamador/.kube/config"
+2018-08-14T11:35:34-07:00 [ℹ]  the cluster has 0 nodes
+2018-08-14T11:35:34-07:00 [ℹ]  waiting for at least 2 nodes to become ready
+2018-08-14T11:36:05-07:00 [ℹ]  the cluster has 2 nodes
+2018-08-14T11:36:05-07:00 [ℹ]  node "ip-192-168-139-176.us-west-2.compute.internal" is ready
+2018-08-14T11:36:05-07:00 [ℹ]  node "ip-192-168-214-126.us-west-2.compute.internal" is ready
+2018-08-14T11:36:05-07:00 [✔]  EKS cluster "exciting-gopher-1534270749" in "us-west-2" region is ready
+
      +
      3. +
    +

    Setup the AWS Load Balancer controller

    +
      +
    1. +

      Refer to the installation instructions to setup the controller

      +
      2. +
    2. +

      Verify the deployment was successful and the controller started.

      +
      kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name=aws-load-balancer-controller
+
      +

      Should display output similar to the following.

      +
      {"level":"info","ts":1602778062.2588625,"logger":"setup","msg":"version","GitVersion":"v2.0.0-rc3-13-gcdc8f715-dirty","GitCommit":"cdc8f715919cc65ca8161b6083c4091222632d6b","BuildDate":"2020-10-15T15:58:31+0000"}
+{"level":"info","ts":1602778065.4515743,"logger":"controller-runtime.metrics","msg":"metrics server is starting to listen","addr":":8080"}
+{"level":"info","ts":1602778065.4536595,"logger":"controller-runtime.webhook","msg":"registering webhook","path":"/mutate-v1-pod"}
+{"level":"info","ts":1602778065.4537156,"logger":"controller-runtime.webhook","msg":"registering webhook","path":"/mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding"}
+{"level":"info","ts":1602778065.4537542,"logger":"controller-runtime.webhook","msg":"registering webhook","path":"/validate-elbv2-k8s-aws-v1beta1-targetgroupbinding"}
+{"level":"info","ts":1602778065.4537594,"logger":"setup","msg":"starting manager"}
+I1015 16:07:45.453851       1 leaderelection.go:242] attempting to acquire leader lease  kube-system/aws-load-balancer-controller-leader...
+{"level":"info","ts":1602778065.5544264,"logger":"controller-runtime.manager","msg":"starting metrics server","path":"/metrics"}
+{"level":"info","ts":1602778065.5544496,"logger":"controller-runtime.webhook.webhooks","msg":"starting webhook server"}
+{"level":"info","ts":1602778065.5549548,"logger":"controller-runtime.certwatcher","msg":"Updated current TLS certificate"}
+{"level":"info","ts":1602778065.5550802,"logger":"controller-runtime.webhook","msg":"serving webhook server","host":"","port":9443}
+{"level":"info","ts":1602778065.5551715,"logger":"controller-runtime.certwatcher","msg":"Starting certificate watcher"}
+I1015 16:08:03.662023       1 leaderelection.go:252] successfully acquired lease kube-system/aws-load-balancer-controller-leader
+{"level":"info","ts":1602778083.663017,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"targetGroupBinding","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.6631303,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"targetGroupBinding","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.6633205,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"ingress","source":"channel source: 0xc0007340f0"}
+{"level":"info","ts":1602778083.6633654,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"ingress","source":"channel source: 0xc000734140"}
+{"level":"info","ts":1602778083.6633892,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"ingress","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.663441,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"ingress","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.6634624,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"ingress","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.6635776,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"service","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.6636262,"logger":"controller-runtime.controller","msg":"Starting Controller","controller":"service"}
+{"level":"info","ts":1602778083.7634695,"logger":"controller-runtime.controller","msg":"Starting EventSource","controller":"targetGroupBinding","source":"kind source: /, Kind="}
+{"level":"info","ts":1602778083.7637022,"logger":"controller-runtime.controller","msg":"Starting workers","controller":"service","worker count":3}
+{"level":"info","ts":1602778083.7641861,"logger":"controller-runtime.controller","msg":"Starting Controller","controller":"ingress"}
+{"level":"info","ts":1602778083.8641882,"logger":"controller-runtime.controller","msg":"Starting Controller","controller":"targetGroupBinding"}
+{"level":"info","ts":1602778083.864236,"logger":"controller-runtime.controller","msg":"Starting workers","controller":"targetGroupBinding","worker count":3}
+{"level":"info","ts":1602778083.8643816,"logger":"controller-runtime.controller","msg":"Starting workers","controller":"ingress","worker count":3}
+
      +
      3. +
    +

    Deploy the echoserver resources

    +
      +
    1. +

      Deploy all the echoserver resources (namespace, service, deployment)

      +
      kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-namespace.yaml &&\
+kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-service.yaml &&\
+kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-deployment.yaml
+
      +
      2. +
    2. +

      List all the resources to ensure they were created.

      +
      kubectl get -n echoserver deploy,svc
+
      +

      Should resolve similar to the following.

      +
      NAME             CLUSTER-IP   EXTERNAL-IP   PORT(S)        AGE
+svc/echoserver   10.3.31.76   <nodes>       80:31027/TCP   4d
+
+NAME                DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
+deploy/echoserver   1         1         1            1           4d
+
      +
      3. +
    +

    Deploy ingress for echoserver

    +
      +
    1. +

      Download the echoserver ingress manifest locally.

      +
      wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-ingress.yaml
+
      +
      2. +
    2. +

      Configure the subnets, either by add annotation to the ingress or add tags to subnets. This step is optional in lieu of auto-discovery.

      +
      +

      Tip

      +

      If you'd like to use external dns, alter the host field to a domain that you own in Route 53. Assuming you managed example.com in Route 53.

      +
      +
        +
      • +

        Edit the alb.ingress.kubernetes.io/subnets annotation to include at least two subnets. Subnets must be from different Availability Zones. + 

        eksctl get cluster exciting-gopher-1534270749
+

        +
        NAME                        VERSION STATUS         CREATED          VPC                     SUBNETS                             SECURITYGROUPS
+exciting-gopher-1534270749  1.10    ACTIVE  2018-08-14T18:20:32Z    vpc-0aa01b07b3c922c9c   subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516  sg-05ceb5eee9fd7cac4
+
        +
        apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: echoserver
+    namespace: echoserver
+    annotations:
+        alb.ingress.kubernetes.io/scheme: internet-facing
+        alb.ingress.kubernetes.io/target-type: ip
+        alb.ingress.kubernetes.io/subnets: subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516
+        alb.ingress.kubernetes.io/tags: Environment=dev,Team=test
+spec:
+    rules:
+    - http:
+        paths:
+
        +
        • +
      • +

        Adding tags to subnets for auto-discovery(instead of alb.ingress.kubernetes.io/subnets annotation)

        +

        you must include the following tags on desired subnets.

        +
          +
        • kubernetes.io/cluster/$CLUSTER_NAME where $CLUSTER_NAME is the same CLUSTER_NAME specified in the above step.
          • +
        • kubernetes.io/role/internal-elb should be set to 1 or an empty tag value for internal load balancers.
          • +
        • kubernetes.io/role/elb should be set to 1 or an empty tag value for internet-facing load balancers.
          • +
        +

        An example of a subnet with the correct tags for the cluster joshcalico is as follows.

        +

        subnet-tags

        +
        • +
      +
      3. +
    3. +

      Deploy the ingress resource for echoserver

      +
      kubectl apply -f echoserver-ingress.yaml
+
      +
      4. +
    4. +

      Verify the aws-load-balancer-controller creates the resources

      +
      kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name=aws-load-balancer-controller | grep 'echoserver\/echoserver'
+
      +

      You should see similar to the following.

      +
      {"level":"info","ts":1602803965.264764,"logger":"controllers.ingress","msg":"successfully built model","model":"{\"id\":\"echoserver/echoserver\",\"resources\":{\"AWS::EC2::SecurityGroup\":{\"ManagedLBSecurityGroup\":{\"spec\":{\"groupName\":\"k8s-echoserv-echoserv-4e1e34cae5\",\"description\":\"[k8s] Managed SecurityGroup for LoadBalancer\",\"tags\":{\"Environment\":\"dev\",\"Team\":\"test\"},\"ingress\":[{\"ipProtocol\":\"tcp\",\"fromPort\":80,\"toPort\":80,\"ipRanges\":[{\"cidrIP\":\"0.0.0.0/0\"}]}]}}},\"AWS::ElasticLoadBalancingV2::Listener\":{\"80\":{\"spec\":{\"loadBalancerARN\":{\"$ref\":\"#/resources/AWS::ElasticLoadBalancingV2::LoadBalancer/LoadBalancer/status/loadBalancerARN\"},\"port\":80,\"protocol\":\"HTTP\",\"defaultActions\":[{\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"404\"}}]}}},\"AWS::ElasticLoadBalancingV2::ListenerRule\":{\"80:1\":{\"spec\":{\"listenerARN\":{\"$ref\":\"#/resources/AWS::ElasticLoadBalancingV2::Listener/80/status/listenerARN\"},\"priority\":1,\"actions\":[{\"type\":\"forward\",\"forwardConfig\":{\"targetGroups\":[{\"targetGroupARN\":{\"$ref\":\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\"}}]}}],\"conditions\":[{\"field\":\"host-header\",\"hostHeaderConfig\":{\"values\":[\"echoserver.example.com\"]}},{\"field\":\"path-pattern\",\"pathPatternConfig\":{\"values\":[\"/\"]}}]}}},\"AWS::ElasticLoadBalancingV2::LoadBalancer\":{\"LoadBalancer\":{\"spec\":{\"name\":\"k8s-echoserv-echoserv-d4d6bd65d0\",\"type\":\"application\",\"scheme\":\"internet-facing\",\"ipAddressType\":\"ipv4\",\"subnetMapping\":[{\"subnetID\":\"subnet-01b35707c23b0a43b\"},{\"subnetID\":\"subnet-0f7814a7ab4dfcc2c\"}],\"securityGroups\":[{\"$ref\":\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\"}],\"tags\":{\"Environment\":\"dev\",\"Team\":\"test\"}}}},\"AWS::ElasticLoadBalancingV2::TargetGroup\":{\"echoserver/echoserver-echoserver:80\":{\"spec\":{\"name\":\"k8s-echoserv-echoserv-d989093207\",\"targetType\":\"instance\",\"port\":1,\"protocol\":\"HTTP\",\"healthCheckConfig\":{\"port\":\"traffic-port\",\"protocol\":\"HTTP\",\"path\":\"/\",\"matcher\":{\"httpCode\":\"200\"},\"intervalSeconds\":15,\"timeoutSeconds\":5,\"healthyThresholdCount\":2,\"unhealthyThresholdCount\":2},\"tags\":{\"Environment\":\"dev\",\"Team\":\"test\"}}}},\"K8S::ElasticLoadBalancingV2::TargetGroupBinding\":{\"echoserver/echoserver-echoserver:80\":{\"spec\":{\"template\":{\"metadata\":{\"name\":\"k8s-echoserv-echoserv-d989093207\",\"namespace\":\"echoserver\",\"creationTimestamp\":null},\"spec\":{\"targetGroupARN\":{\"$ref\":\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\"},\"targetType\":\"instance\",\"serviceRef\":{\"name\":\"echoserver\",\"port\":80},\"networking\":{\"ingress\":[{\"from\":[{\"securityGroup\":{\"groupID\":{\"$ref\":\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\"}}}],\"ports\":[{\"protocol\":\"TCP\"}]}]}}}}}}}}"}
+{"level":"info","ts":1602803966.411922,"logger":"controllers.ingress","msg":"creating targetGroup","stackID":"echoserver/echoserver","resourceID":"echoserver/echoserver-echoserver:80"}
+{"level":"info","ts":1602803966.6606336,"logger":"controllers.ingress","msg":"created targetGroup","stackID":"echoserver/echoserver","resourceID":"echoserver/echoserver-echoserver:80","arn":"arn:aws:elasticloadbalancing:us-west-2:019453415603:targetgroup/k8s-echoserv-echoserv-d989093207/63225ae3ead3deb6"}
+{"level":"info","ts":1602803966.798019,"logger":"controllers.ingress","msg":"creating loadBalancer","stackID":"echoserver/echoserver","resourceID":"LoadBalancer"}
+{"level":"info","ts":1602803967.5472538,"logger":"controllers.ingress","msg":"created loadBalancer","stackID":"echoserver/echoserver","resourceID":"LoadBalancer","arn":"arn:aws:elasticloadbalancing:us-west-2:019453415603:loadbalancer/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1"}
+{"level":"info","ts":1602803967.5863476,"logger":"controllers.ingress","msg":"creating listener","stackID":"echoserver/echoserver","resourceID":"80"}
+{"level":"info","ts":1602803967.6436293,"logger":"controllers.ingress","msg":"created listener","stackID":"echoserver/echoserver","resourceID":"80","arn":"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0"}
+{"level":"info","ts":1602803967.6528971,"logger":"controllers.ingress","msg":"creating listener rule","stackID":"echoserver/echoserver","resourceID":"80:1"}
+{"level":"info","ts":1602803967.7160048,"logger":"controllers.ingress","msg":"created listener rule","stackID":"echoserver/echoserver","resourceID":"80:1","arn":"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener-rule/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0/23ef859380e792e8"}
+{"level":"info","ts":1602803967.8484688,"logger":"controllers.ingress","msg":"successfully deployed model","ingressGroup":"echoserver/echoserver"}
+
      +
      5. +
    5. +

      Check the events of the ingress to see what has occur.

      +
      kubectl describe ing -n echoserver echoserver
+
      +

      You should see similar to the following.

      +
      Name:                   echoserver
+Namespace:              echoserver
+Address:                joshcalico-echoserver-echo-2ad7-1490890749.us-east-2.elb.amazonaws.com
+Default backend:        default-http-backend:80 (10.2.1.28:8080)
+Rules:
+  Host                          Path    Backends
+  ----                          ----    --------
+  *
+                                /       echoserver:80 (<none>)
+Annotations:
+Events:
+  FirstSeen     LastSeen        Count   From                    SubObjectPath   Type            Reason  Message
+  ---------     --------        -----   ----                    -------------   --------        ------  -------
+  3m            3m              1       ingress-controller                      Normal          CREATE  Ingress echoserver/echoserver
+  3m            32s             3       ingress-controller                      Normal          UPDATE  Ingress echoserver/echoserver
+
      +

      The address seen above is the ALB's DNS name. This will be referenced via records created by external-dns if you choose to set it up.

      +
      6. +
    +

    Verify that you can access the service

    +

    Make a curl request to the echoserver service and verify that it returns a response payload. Use the address from the output of kubectl describe ing command above.

    +
    curl <load-balancer-dns-name>
+
    +

    You should get back a valid response.

    +

    (Optional) Use external-dns to create a DNS record

    +
      +
    1. +

      Deploy external-dns to your cluster using these instructions - Setup external-dns

      +
      2. +
    2. +

      Update your ingress resource and add spec.rules[0].host and set the value to your domain name. The example below uses echoserver.example.org.

      +
      3. +
    +

         spec:
+         rules:
+         - host: echoserver.example.org
+           http:
+             paths:
+
    +1. external-dns will then create a DNS record for the host you specified. This assumes you have the hosted zone corresponding to the domain you are trying to create a record in.

    +
      +
    1. +

      Annotate the ingress with the external-dns specific configuration

      +
      annotations:
+  kubernetes.io/ingress.class: alb
+  alb.ingress.kubernetes.io/scheme: internet-facing
+
+  # external-dns specific configuration for creating route53 record-set
+  external-dns.alpha.kubernetes.io/hostname: my-app.test-dns.com # give your domain name here
+
      +
      2. +
    2. +

      Verify the DNS has propagated

      +
      dig echoserver.example.org
+
      +
      ;; QUESTION SECTION:
+;echoserver.example.org.  IN      A
+
+;; ANSWER SECTION:
+echoserver.example.org. 60 IN     A       13.59.147.105
+echoserver.example.org. 60 IN     A       18.221.65.39
+echoserver.example.org. 60 IN     A       52.15.186.25
+
      +
      3. +
    3. +

      Once it has, you can make a call to echoserver and it should return a response payload.

      +
      curl echoserver.example.org
+
      +
      CLIENT VALUES:
+client_address=10.0.50.185
+command=GET
+real path=/
+query=nil
+request_version=1.1
+request_uri=http://echoserver.example.org:8080/
+
+SERVER VALUES:
+server_version=nginx: 1.10.0 - lua: 10001
+
+HEADERS RECEIVED:
+accept=*/*
+host=echoserver.example.org
+user-agent=curl/7.54.0
+x-amzn-trace-id=Root=1-59c08da5-113347df69640735312371bd
+x-forwarded-for=67.173.237.250
+x-forwarded-port=80
+x-forwarded-proto=http
+BODY:
+
      +
      4. +
    +

    Kube2iam setup

    +

    follow below steps if you want to use kube2iam to provide the AWS credentials

    +
      +
    1. +

      configure the proper policy + The policy to be used can be fetched from https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json

      +
      2. +
    2. +

      configure the proper role and create the trust relationship + You have to find which role is associated with your K8S nodes. Once you found take note of the full arn:

      +
      arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node
+
      +
      3. +
    3. +

      create the role, called k8s-lb-controller, attach the above policy and add a Trust Relationship like:

      +
      {
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ec2.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    },
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "AWS": "arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+
      +

      The new role will have a similar arn:

      +
      arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller
+
      +
      4. +
    4. +

      update the alb-load-balancer-controller deployment

      +

      Add the annotations in the template's metadata point

      +
      spec:
+replicas: 1
+selector:
+matchLabels:
+  app.kubernetes.io/component: controller
+  app.kubernetes.io/name: aws-load-balancer-controller
+strategy:
+  rollingUpdate:
+    maxSurge: 1
+    maxUnavailable: 1
+  type: RollingUpdate
+template:
+  metadata:
+    annotations:
+      iam.amazonaws.com/role: arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller
+
      +
      5. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/examples/echoservice/echoserver-deployment.yaml b/v2.7/examples/echoservice/echoserver-deployment.yaml new file mode 100644 index 000000000..69e9523b6 --- /dev/null +++ b/v2.7/examples/echoservice/echoserver-deployment.yaml @@ -0,0 +1,21 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: echoserver + namespace: echoserver +spec: + selector: + matchLabels: + app: echoserver + replicas: 1 + template: + metadata: + labels: + app: echoserver + spec: + containers: + - image: k8s.gcr.io/e2e-test-images/echoserver:2.5 + imagePullPolicy: Always + name: echoserver + ports: + - containerPort: 8080 diff --git a/v2.7/examples/echoservice/echoserver-ingress.yaml b/v2.7/examples/echoservice/echoserver-ingress.yaml new file mode 100644 index 000000000..5dc6a9550 --- /dev/null +++ b/v2.7/examples/echoservice/echoserver-ingress.yaml @@ -0,0 +1,20 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: echoserver + namespace: echoserver + annotations: + alb.ingress.kubernetes.io/scheme: internet-facing + alb.ingress.kubernetes.io/tags: Environment=dev,Team=test +spec: + ingressClassName: alb + rules: + - http: + paths: + - path: / + pathType: Exact + backend: + service: + name: echoserver + port: + number: 80 diff --git a/v2.7/examples/echoservice/echoserver-namespace.yaml b/v2.7/examples/echoservice/echoserver-namespace.yaml new file mode 100644 index 000000000..8a319129e --- /dev/null +++ b/v2.7/examples/echoservice/echoserver-namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: echoserver diff --git a/v2.7/examples/echoservice/echoserver-service.yaml b/v2.7/examples/echoservice/echoserver-service.yaml new file mode 100644 index 000000000..46f159ff5 --- /dev/null +++ b/v2.7/examples/echoservice/echoserver-service.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: Service +metadata: + name: echoserver + namespace: echoserver +spec: + ports: + - port: 80 + targetPort: 8080 + protocol: TCP + type: NodePort + selector: + app: echoserver diff --git a/v2.7/examples/external-dns.yaml b/v2.7/examples/external-dns.yaml new file mode 100644 index 000000000..8b19ac9b3 --- /dev/null +++ b/v2.7/examples/external-dns.yaml @@ -0,0 +1,72 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: external-dns + labels: + app.kubernetes.io/name: external-dns +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: external-dns + labels: + app.kubernetes.io/name: external-dns +rules: +- apiGroups: [""] + resources: ["services", "endpoints", "pods", "nodes"] + verbs: ["get","watch","list"] +- apiGroups: ["extensions", "networking.k8s.io"] + resources: ["ingresses"] + verbs: ["get","watch","list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: external-dns-viewer + labels: + app.kubernetes.io/name: external-dns +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: external-dns +subjects: +- kind: ServiceAccount + name: external-dns + namespace: default +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: external-dns + labels: + app.kubernetes.io/name: external-dns +spec: + selector: + matchLabels: + app.kubernetes.io/name: external-dns + strategy: + type: Recreate + template: + metadata: + labels: + app.kubernetes.io/name: external-dns + spec: + serviceAccountName: external-dns + securityContext: + fsGroup: 65534 + containers: + - name: external-dns + image: bitnami/external-dns:0.13.1 + # must specify env AWS_REGION in AWS china regions + # env: + # - name: AWS_REGION + # value: cn-north-1 + args: + - --source=service + - --source=ingress + - --domain-filter=external-dns-test.my-org.com # will make ExternalDNS see only the hosted zones matching provided domain, omit to process all available hosted zones + - --provider=aws + - --policy=upsert-only # would prevent ExternalDNS from deleting any records, omit to enable full synchronization + - --aws-zone-type=public # only look at public hosted zones (valid values are public, private or no value for both) + - --registry=txt + - --txt-owner-id=my-identifier diff --git a/v2.7/examples/grpc/grpcserver-deployment.yaml b/v2.7/examples/grpc/grpcserver-deployment.yaml new file mode 100644 index 000000000..69527c3a6 --- /dev/null +++ b/v2.7/examples/grpc/grpcserver-deployment.yaml @@ -0,0 +1,28 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: grpcserver + namespace: grpcserver +spec: + selector: + matchLabels: + app: grpcserver + replicas: 1 + template: + metadata: + labels: + app: grpcserver + spec: + containers: + - name: grpc-demo + image: placeexchange/grpc-demo:latest + imagePullPolicy: Always + ports: + - name: grpc-api + containerPort: 50051 + env: + - name: POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + restartPolicy: Always diff --git a/v2.7/examples/grpc/grpcserver-ingress.yaml b/v2.7/examples/grpc/grpcserver-ingress.yaml new file mode 100644 index 000000000..2f9e87c34 --- /dev/null +++ b/v2.7/examples/grpc/grpcserver-ingress.yaml @@ -0,0 +1,27 @@ +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + annotations: + alb.ingress.kubernetes.io/ssl-redirect: '443' + alb.ingress.kubernetes.io/backend-protocol-version: GRPC + alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]' + alb.ingress.kubernetes.io/scheme: internet-facing + alb.ingress.kubernetes.io/target-type: ip + labels: + app: grpcserver + environment: dev + name: grpcserver + namespace: grpcserver +spec: + ingressClassName: alb + rules: + - host: grpcserver.example.com + http: + paths: + - backend: + service: + name: grpcserver + port: + number: 50051 + path: /helloworld.Greeter + pathType: Prefix diff --git a/v2.7/examples/grpc/grpcserver-namespace.yaml b/v2.7/examples/grpc/grpcserver-namespace.yaml new file mode 100644 index 000000000..a4cad3bcf --- /dev/null +++ b/v2.7/examples/grpc/grpcserver-namespace.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: grpcserver diff --git a/v2.7/examples/grpc/grpcserver-service.yaml b/v2.7/examples/grpc/grpcserver-service.yaml new file mode 100644 index 000000000..65022fab1 --- /dev/null +++ b/v2.7/examples/grpc/grpcserver-service.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: grpcserver + namespace: grpcserver +spec: + # bypass kube-proxy + ports: + - port: 50051 + protocol: TCP + targetPort: 50051 + clusterIP: None + selector: + app: grpcserver diff --git a/v2.7/examples/grpc_server/index.html b/v2.7/examples/grpc_server/index.html new file mode 100644 index 000000000..7773ac774 --- /dev/null +++ b/v2.7/examples/grpc_server/index.html @@ -0,0 +1,1234 @@ + + + + + + + + + + + + + + + + + gRPCServer - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    walkthrough: grpcserver

    +

    In this walkthrough, you'll

    +
      +
    • Deploy a grpc service to an existing EKS cluster
      • +
    • Send a test message to the hosted service over TLS
      • +
    +

    Prerequsites

    +

    The following resources are required prior to deployment:

    +
      +
    • EKS cluster
      • +
    • aws-load-balancer-controller
      • +
    • external-dns
      • +
    +

    See echo_server.md and external_dns.md for setup instructions for those resources.

    +

    Create an ACM certificate

    +
    +

    NOTE: An ACM certificate is required for this demo as the application uses the grpc.secure_channel method.

    +
    +

    If you already have an ACM certificate (including wildcard certificates) for the domain you would like to use in this example, you can skip this step.

    +
      +
    • Request a certificate for a domain you own using the steps described in the official AWS ACM documentation.
      • +
    • Once the status for the certificate is "Issued" continue to the next step.
      • +
    +

    Deploy the grpcserver manifests

    +
      +
    1. +

      Deploy all the manifests from GitHub.

      +
      kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-namespace.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-service.yaml
+kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-deployment.yaml
+
      +
      2. +
    2. +

      Confirm that all resources were created.

      +
      kubectl get -n grpcserver all
+
      +

      You should see the pod, service, and deployment.

      +
      NAME                             READY   STATUS    RESTARTS   AGE
+pod/grpcserver-5455b7d4d-jshk5   1/1     Running   0          35m
+
+NAME                 TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)     AGE
+service/grpcserver   ClusterIP   None         <none>        50051/TCP   77m
+
+NAME                         READY   UP-TO-DATE   AVAILABLE   AGE
+deployment.apps/grpcserver   1/1     1            1           77m
+
+NAME                                   DESIRED   CURRENT   READY   AGE
+replicaset.apps/grpcserver-5455b7d4d   1         1         1       35m
+
      +
      3. +
    +

    Customize the ingress for grpcserver

    +
      +
    1. +

      Download the grpcserver ingress manifest.

      +
      wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-ingress.yaml
+
      +
      2. +
    2. +

      Change the domain name from grpcserver.example.com to your desired domain.

      +
      3. +
    3. +

      The example manifest assumes that you have tagged your subnets for the aws-load-balancer-controller. Otherwise add your subnets using the alb.ingress.kubernetes.io/subnets annotation.

      +
      4. +
    4. +

      Deploy the ingress resource for grpcserver.

      +
      kubectl apply -f grpcserver-ingress.yaml
+
      +
      5. +
    5. +

      Wait a few minutes for the ALB to provision and for DNS to update.

      +
      6. +
    6. +

      Check the aws-load-balancer-controller logs to ensure the ALB is created. Also ensure that external-dns creates a DNS record that points your domain to the ALB.

      +
      kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name=aws-load-balancer-controller | grep 'grpcserver\/grpcserver'
+kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name=external-dns | grep 'YOUR_DOMAIN_NAME'
+
      +
      7. +
    7. +

      Next check that your ingress shows the correct ALB address and custom domain name.

      +
      kubectl get ingress -n grpcserver grpcserver
+
      +

      You should see similar to the following.

      +
      NNAME         CLASS    HOSTS              ADDRESS     PORTS    AGE
+grpcserver     alb   YOUR_DOMAIN_NAME   ALB-DNS-NAME   80      90m
+
      +
      8. +
    8. +

      Finally, test your secure gRPC service by running the greeter client, substituting YOUR_DOMAIN_NAME for the domain you used in the ingress manifest.

      +
      docker run --rm -it --env BACKEND=YOUR_DOMAIN_NAME placeexchange/grpc-demo:latest python greeter_client.py
+
      +

      You should see the following response. +

      Greeter client received: Hello, you!
+

      +
      9. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/examples/secrets_access/index.html b/v2.7/examples/secrets_access/index.html new file mode 100644 index 000000000..b763c6c72 --- /dev/null +++ b/v2.7/examples/secrets_access/index.html @@ -0,0 +1,1095 @@ + + + + + + + + + + + + + + + + + RBAC to access OIDC Secret - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    RBAC configuration for secrets resources

    +

    In this walkthrough, you will

    +
      +
    • configure RBAC permissions for the controller to access specific secrets resource in a particular namespace.
      • +
    +

    Create Role

    +
      +
    1. +

      Prepare the role manifest with the appropriate name, namespace, and secretName, for example:

      +
      apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+    name: example-role
+    namespace: example-namespace
+rules:
+  - apiGroups:
+       - ""
+    resourceNames:
+      - example-secret
+    resources:
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
+
      +
      2. +
    2. +

      Apply the role manifest

      +
      kubectl apply -f role.yaml
+
      +
      3. +
    +

    Create RoleBinding

    +
      +
    1. +

      Prepare the rolebinding manifest with the appropriate name, namespace and role reference. For example:

      +
      apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+    name: example-rolebinding
+    namespace: example-namespace
+roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: Role
+    name: example-role
+subjects:
+  - kind: ServiceAccount
+    name: aws-load-balancer-controller
+    namespace: kube-system
+
      +
      2. +
    2. +

      Apply the rolebinding manifest

      +
      kubectl apply -f rolebinding.yaml
+
      +
      3. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/ingress/annotations/index.html b/v2.7/guide/ingress/annotations/index.html new file mode 100644 index 000000000..db906883e --- /dev/null +++ b/v2.7/guide/ingress/annotations/index.html @@ -0,0 +1,2528 @@ + + + + + + + + + + + + + + + + + Annotations - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Ingress annotations

    +

    You can add annotations to kubernetes Ingress and Service objects to customize their behavior.

    +
    +
      +
    • Annotation keys and values can only be strings. Advanced format should be encoded as below:
        +
      • boolean: 'true'
        • +
      • integer: '42'
        • +
      • stringList: s1,s2,s3
        • +
      • stringMap: k1=v1,k2=v2
        • +
      • json: 'jsonContent'
        • +
      +
      • +
    • Annotations applied to Service have higher priority over annotations applied to Ingress. Location column below indicates where that annotation can be applied to.
      • +
    • Annotations that configures LoadBalancer / Listener behaviors have different merge behavior when IngressGroup feature is been used. MergeBehavior column below indicates how such annotation will be merged.
        +
      • Exclusive: such annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup.
        • +
      • Merge: such annotation can be specified on all Ingresses within IngressGroup, and will be merged together.
        • +
      +
      • +
    +
    +

    Annotations

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    NameTypeDefaultLocationMergeBehavior
    alb.ingress.kubernetes.io/load-balancer-namestringN/AIngressExclusive
    alb.ingress.kubernetes.io/group.namestringN/AIngressN/A
    alb.ingress.kubernetes.io/group.orderinteger0IngressN/A
    alb.ingress.kubernetes.io/tagsstringMapN/AIngress,ServiceMerge
    alb.ingress.kubernetes.io/ip-address-typeipv4 | dualstackipv4IngressExclusive
    alb.ingress.kubernetes.io/schemeinternal | internet-facinginternalIngressExclusive
    alb.ingress.kubernetes.io/subnetsstringListN/AIngressExclusive
    alb.ingress.kubernetes.io/security-groupsstringListN/AIngressExclusive
    alb.ingress.kubernetes.io/manage-backend-security-group-rulesbooleanN/AIngressExclusive
    alb.ingress.kubernetes.io/customer-owned-ipv4-poolstringN/AIngressExclusive
    alb.ingress.kubernetes.io/load-balancer-attributesstringMapN/AIngressExclusive
    alb.ingress.kubernetes.io/wafv2-acl-arnstringN/AIngressExclusive
    alb.ingress.kubernetes.io/waf-acl-idstringN/AIngressExclusive
    alb.ingress.kubernetes.io/shield-advanced-protectionbooleanN/AIngressExclusive
    alb.ingress.kubernetes.io/listen-portsjson'[{"HTTP": 80}]' | '[{"HTTPS": 443}]'IngressMerge
    alb.ingress.kubernetes.io/ssl-redirectintegerN/AIngressExclusive
    alb.ingress.kubernetes.io/inbound-cidrsstringList0.0.0.0/0, ::/0IngressExclusive
    alb.ingress.kubernetes.io/certificate-arnstringListN/AIngressMerge
    alb.ingress.kubernetes.io/ssl-policystringELBSecurityPolicy-2016-08IngressExclusive
    alb.ingress.kubernetes.io/target-typeinstance | ipinstanceIngress,ServiceN/A
    alb.ingress.kubernetes.io/backend-protocolHTTP | HTTPSHTTPIngress,ServiceN/A
    alb.ingress.kubernetes.io/backend-protocol-versionstringHTTP1Ingress,ServiceN/A
    alb.ingress.kubernetes.io/target-group-attributesstringMapN/AIngress,ServiceN/A
    alb.ingress.kubernetes.io/healthcheck-portinteger | traffic-porttraffic-portIngress,ServiceN/A
    alb.ingress.kubernetes.io/healthcheck-protocolHTTP | HTTPSHTTPIngress,ServiceN/A
    alb.ingress.kubernetes.io/healthcheck-pathstring/ | /AWS.ALB/healthcheckIngress,ServiceN/A
    alb.ingress.kubernetes.io/healthcheck-interval-secondsinteger'15'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/healthcheck-timeout-secondsinteger'5'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/healthy-threshold-countinteger'2'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/unhealthy-threshold-countinteger'2'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/success-codesstring'200' | '12'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/auth-typenone|oidc|cognitononeIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-idp-cognitojsonN/AIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-idp-oidcjsonN/AIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-on-unauthenticated-requestauthenticate|allow|denyauthenticateIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-scopestringopenidIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-session-cookiestringAWSELBAuthSessionCookieIngress,ServiceN/A
    alb.ingress.kubernetes.io/auth-session-timeoutinteger'604800'Ingress,ServiceN/A
    alb.ingress.kubernetes.io/actions.${action-name}jsonN/AIngressN/A
    alb.ingress.kubernetes.io/conditions.${conditions-name}jsonN/AIngressN/A
    alb.ingress.kubernetes.io/target-node-labelsstringMapN/AIngress,ServiceN/A
    alb.ingress.kubernetes.io/mutual-authenticationjson'[{"port": 443, "mode": "off"}]'IngressExclusive
    +

    IngressGroup

    +

    IngressGroup feature enables you to group multiple Ingress resources together. +The controller will automatically merge Ingress rules for all Ingresses within IngressGroup and support them with a single ALB. +In addition, most annotations defined on an Ingress only apply to the paths defined by that Ingress.

    +

    By default, Ingresses don't belong to any IngressGroup, and we treat it as a "implicit IngressGroup" consisting of the Ingress itself.

    +
      +
    • +

      alb.ingress.kubernetes.io/group.name specifies the group name that this Ingress belongs to.

      +
      +
        +
      • Ingresses with same group.name annotation will form an "explicit IngressGroup".
        • +
      • groupName must consist of lower case alphanumeric characters, - or ., and must start and end with an alphanumeric character.
        • +
      • groupName must be no more than 63 character.
        • +
      +
      +
      +

      Security Risk

      +

      IngressGroup feature should only be used when all Kubernetes users with RBAC permission to create/modify Ingress resources are within trust boundary.

      +

      If you turn your Ingress to belong a "explicit IngressGroup" by adding group.name annotation, +other Kubernetes users may create/modify their Ingresses to belong to the same IngressGroup, and can thus add more rules or overwrite existing rules with higher priority to the ALB for your Ingress.

      +

      We'll add more fine-grained access-control in future versions.

      +
      +
      +

      Rename behavior

      +

      The ALB for an IngressGroup is found by searching for an AWS tag ingress.k8s.aws/stack tag with the name of the IngressGroup as its value. For an implicit IngressGroup, the value is namespace/ingressname.

      +

      When the groupName of an IngressGroup for an Ingress is changed, the Ingress will be moved to a new IngressGroup and be supported by the ALB for the new IngressGroup. If the ALB for the new IngressGroup doesn't exist, a new ALB will be created.

      +

      If an IngressGroup no longer contains any Ingresses, the ALB for that IngressGroup will be deleted and any deletion protection of that ALB will be ignored.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/group.name: my-team.awesome-group
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/group.order specifies the order across all Ingresses within IngressGroup.

      +
      +
        +
      • You can explicitly denote the order using a number between -1000 and 1000
        • +
      • The smaller the order, the rule will be evaluated first. All Ingresses without an explicit order setting get order value as 0
        • +
      • Rules with the same order are sorted lexicographically by the Ingress’s namespace/name.
        • +
      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/group.order: '10'
+
      +
      +
      • +
    +

    Traffic Listening

    +

    Traffic Listening can be controlled with the following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/listen-ports specifies the ports that ALB listens on.

      +
      +

      Merge Behavior

      +

      listen-ports is merged across all Ingresses in IngressGroup.

      +
        +
      • You can define different listen-ports per Ingress, Ingress rules will only impact the ports defined for that Ingress.
        • +
      • If same listen-port is defined by multiple Ingress within IngressGroup, Ingress rules will be merged with respect to their group order within IngressGroup.
        • +
      +
      +
      +

      Default

      +
        +
      • defaults to '[{"HTTP": 80}]' or '[{"HTTPS": 443}]' depending on whether certificate-arn is specified.
        • +
      +
      +
      +

      You may not have duplicate load balancer ports defined.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}, {"HTTP": 8080}, {"HTTPS": 8443}]'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/ssl-redirect enables SSLRedirect and specifies the SSL port that redirects to.

      +
      +

      Merge Behavior

      +

      ssl-redirect is exclusive across all Ingresses in IngressGroup.

      +
        +
      • Once defined on a single Ingress, it impacts every Ingress within IngressGroup.
        • +
      +
      +
      +
        +
      • Once enabled SSLRedirect, every HTTP listener will be configured with a default action which redirects to HTTPS, other rules will be ignored.
        • +
      • The SSL port that redirects to must exists on LoadBalancer. See alb.ingress.kubernetes.io/listen-ports for the listen ports configuration.
        • +
      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/ssl-redirect: '443'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/ip-address-type specifies the IP address type of ALB.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/ip-address-type: ipv4
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/customer-owned-ipv4-pool specifies the customer-owned IPv4 address pool for ALB on Outpost.

      +
      +

      This annotation should be treated as immutable. To remove or change coIPv4Pool, you need to recreate Ingress.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/customer-owned-ipv4-pool: ipv4pool-coip-xxxxxxxx
+
      +
      +
      • +
    +

    Traffic Routing

    +

    Traffic Routing can be controlled with following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error.

      +
      +

      Merge Behavior

      +

      name is exclusive across all Ingresses in an IngressGroup.

      +
        +
      • Once defined on a single Ingress, it impacts every Ingress within the IngressGroup.
        • +
      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/load-balancer-name: custom-name
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/target-type specifies how to route traffic to pods. You can choose between instance and ip:

      +
        +
      • +

        instance mode will route traffic to all ec2 instances within cluster on NodePort opened for your service.

        +
        +

        service must be of type "NodePort" or "LoadBalancer" to use instance mode

        +
        +
        • +
      • +

        ip mode will route traffic directly to the pod IP.

        +
        +

        network plugin must use secondary IP addresses on ENI for pod IP to use ip mode. e.g.

        + +
        +
        +

        ip mode is required for sticky sessions to work with Application Load Balancers. The Service type does not matter, when using ip mode.

        +
        +
        • +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/target-type: instance
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/target-node-labels specifies which nodes to include in the target group registration for instance target type.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/target-node-labels: label1=value1, label2=value2
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/backend-protocol specifies the protocol used when route traffic to pods.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/backend-protocol: HTTPS
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/backend-protocol-version specifies the application protocol used to route traffic to pods. Only valid when HTTP or HTTPS is used as the backend protocol.

      +
      +

      Example

      +
        +
      • HTTP2 + 
        alb.ingress.kubernetes.io/backend-protocol-version: HTTP2
+
        • +
      • GRPC + 
        alb.ingress.kubernetes.io/backend-protocol-version: GRPC
+
        • +
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/subnets specifies the Availability Zones that the ALB will route traffic to. See Load Balancer subnets for more details.

      +
      +

      You must specify at least two subnets in different AZs. Either subnetID or subnetName(Name tag on subnets) can be used.

      +
      +
      +

      Tip

      +

      You can enable subnet auto discovery to avoid specifying this annotation on every Ingress. See Subnet Discovery for instructions.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/subnets: subnet-xxxx, mySubnet
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/actions.${action-name} Provides a method for configuring custom actions on a listener, such as Redirect Actions.

      +

      The action-name in the annotation must match the serviceName in the Ingress rules, and servicePort must be use-annotation.

      +
      +

      use ARN in forward Action

      +

      ARN can be used in forward action(both simplified schema and advanced schema), it must be an targetGroup created outside of k8s, typically an targetGroup for legacy application.

      +
      +
      +

      use ServiceName/ServicePort in forward Action

      +

      ServiceName/ServicePort can be used in forward action(advanced schema only).

      +
      +
      +

      Auth related annotations on Service object will only be respected if a single TargetGroup in is used.

      +
      +
      +

      Example

      +
        +
      • response-503: return fixed 503 response
        • +
      • redirect-to-eks: redirect to an external url
        • +
      • forward-single-tg: forward to a single targetGroup [simplified schema]
        • +
      • forward-multiple-tg: forward to multiple targetGroups with different weights and stickiness config [advanced schema]
        • +
      +
      apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: default
+  name: ingress
+  annotations:
+    alb.ingress.kubernetes.io/scheme: internet-facing
+    alb.ingress.kubernetes.io/actions.response-503: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"503","messageBody":"503 error text"}}
+    alb.ingress.kubernetes.io/actions.redirect-to-eks: >
+      {"type":"redirect","redirectConfig":{"host":"aws.amazon.com","path":"/eks/","port":"443","protocol":"HTTPS","query":"k=v","statusCode":"HTTP_302"}}
+    alb.ingress.kubernetes.io/actions.forward-single-tg: >
+      {"type":"forward","targetGroupARN": "arn-of-your-target-group"}
+    alb.ingress.kubernetes.io/actions.forward-multiple-tg: >
+      {"type":"forward","forwardConfig":{"targetGroups":[{"serviceName":"service-1","servicePort":"http","weight":20},{"serviceName":"service-2","servicePort":80,"weight":20},{"targetGroupARN":"arn-of-your-non-k8s-target-group","weight":60}],"targetGroupStickinessConfig":{"enabled":true,"durationSeconds":200}}}
+spec:
+  ingressClassName: alb
+  rules:
+    - http:
+        paths:
+          - path: /503
+            pathType: Exact
+            backend:
+              service:
+                name: response-503
+                port:
+                  name: use-annotation
+          - path: /eks
+            pathType: Exact
+            backend:
+              service:
+                name: redirect-to-eks
+                port:
+                  name: use-annotation
+          - path: /path1
+            pathType: Exact
+            backend:
+              service:
+                name: forward-single-tg
+                port:
+                  name: use-annotation
+          - path: /path2
+            pathType: Exact
+            backend:
+              service:
+                name: forward-multiple-tg
+                port:
+                  name: use-annotation
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/conditions.${conditions-name} Provides a method for specifying routing conditions in addition to original host/path condition on Ingress spec.

      +

      The conditions-name in the annotation must match the serviceName in the Ingress rules. +It can be a either real serviceName or an annotation based action name when servicePort is use-annotation.

      +
      +

      limitations

      +

      General ALB limitations applies:

      +
        +
      1. +

        Each rule can optionally include up to one of each of the following conditions: host-header, http-request-method, path-pattern, and source-ip. Each rule can also optionally include one or more of each of the following conditions: http-header and query-string.

        +
        2. +
      2. +

        You can specify up to three match evaluations per condition.

        +
        3. +
      3. +

        You can specify up to five match evaluations per rule.

        +
        4. +
      +

      Refer ALB documentation for more details.

      +
      +
      +

      Example

      +
        +
      • rule-path1:
          +
        • Host is www.example.com OR anno.example.com
          • +
        • Path is /path1
          • +
        +
        • +
      • rule-path2:
          +
        • Host is www.example.com
          • +
        • Path is /path2 OR /anno/path2
          • +
        +
        • +
      • rule-path3:
          +
        • Host is www.example.com
          • +
        • Path is /path3
          • +
        • Http header HeaderName is HeaderValue1 OR HeaderValue2
          • +
        +
        • +
      • rule-path4:
          +
        • Host is www.example.com
          • +
        • Path is /path4
          • +
        • Http request method is GET OR HEAD
          • +
        +
        • +
      • rule-path5:
          +
        • Host is www.example.com
          • +
        • Path is /path5
          • +
        • Query string is paramA:valueA1 OR paramA:valueA2
          • +
        +
        • +
      • rule-path6:
          +
        • Host is www.example.com
          • +
        • Path is /path6
          • +
        • Source IP is192.168.0.0/16 OR 172.16.0.0/16
          • +
        +
        • +
      • rule-path7:
          +
        • Host is www.example.com
          • +
        • Path is /path7
          • +
        • Http header HeaderName is HeaderValue
          • +
        • Query string is paramA:valueA
          • +
        • Query string is paramB:valueB
          • +
        +
        • +
      +
      apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: default
+  name: ingress
+  annotations:
+    alb.ingress.kubernetes.io/scheme: internet-facing
+    alb.ingress.kubernetes.io/actions.rule-path1: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Host is www.example.com OR anno.example.com"}}
+    alb.ingress.kubernetes.io/conditions.rule-path1: >
+      [{"field":"host-header","hostHeaderConfig":{"values":["anno.example.com"]}}]
+    alb.ingress.kubernetes.io/actions.rule-path2: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Path is /path2 OR /anno/path2"}}
+    alb.ingress.kubernetes.io/conditions.rule-path2: >
+      [{"field":"path-pattern","pathPatternConfig":{"values":["/anno/path2"]}}]
+    alb.ingress.kubernetes.io/actions.rule-path3: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Http header HeaderName is HeaderValue1 OR HeaderValue2"}}
+    alb.ingress.kubernetes.io/conditions.rule-path3: >
+      [{"field":"http-header","httpHeaderConfig":{"httpHeaderName": "HeaderName", "values":["HeaderValue1", "HeaderValue2"]}}]
+    alb.ingress.kubernetes.io/actions.rule-path4: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Http request method is GET OR HEAD"}}
+    alb.ingress.kubernetes.io/conditions.rule-path4: >
+      [{"field":"http-request-method","httpRequestMethodConfig":{"Values":["GET", "HEAD"]}}]
+    alb.ingress.kubernetes.io/actions.rule-path5: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Query string is paramA:valueA1 OR paramA:valueA2"}}
+    alb.ingress.kubernetes.io/conditions.rule-path5: >
+      [{"field":"query-string","queryStringConfig":{"values":[{"key":"paramA","value":"valueA1"},{"key":"paramA","value":"valueA2"}]}}]
+    alb.ingress.kubernetes.io/actions.rule-path6: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"Source IP is 192.168.0.0/16 OR 172.16.0.0/16"}}
+    alb.ingress.kubernetes.io/conditions.rule-path6: >
+      [{"field":"source-ip","sourceIpConfig":{"values":["192.168.0.0/16", "172.16.0.0/16"]}}]
+    alb.ingress.kubernetes.io/actions.rule-path7: >
+      {"type":"fixed-response","fixedResponseConfig":{"contentType":"text/plain","statusCode":"200","messageBody":"multiple conditions applies"}}
+    alb.ingress.kubernetes.io/conditions.rule-path7: >
+      [{"field":"http-header","httpHeaderConfig":{"httpHeaderName": "HeaderName", "values":["HeaderValue"]}},{"field":"query-string","queryStringConfig":{"values":[{"key":"paramA","value":"valueA"}]}},{"field":"query-string","queryStringConfig":{"values":[{"key":"paramB","value":"valueB"}]}}]
+spec:
+  ingressClassName: alb
+  rules:
+    - host: www.example.com
+      http:
+        paths:
+          - path: /path1
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path1
+                port:
+                  name: use-annotation
+          - path: /path2
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path2
+                port:
+                  name: use-annotation
+          - path: /path3
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path3
+                port:
+                  name: use-annotation
+          - path: /path4
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path4
+                port:
+                  name: use-annotation
+          - path: /path5
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path5
+                port:
+                  name: use-annotation
+          - path: /path6
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path6
+                port:
+                  name: use-annotation
+          - path: /path7
+            pathType: Exact
+            backend:
+              service:
+                name: rule-path7
+                port:
+                  name: use-annotation
+
      +
      +
      +

      Note

      +

      If you are using alb.ingress.kubernetes.io/target-group-attributes with stickiness.enabled=true, you should add TargetGroupStickinessConfig under alb.ingress.kubernetes.io/actions.weighted-routing

      +
      +
      +

      Example

      +
          apiVersion: networking.k8s.io/v1
+    kind: Ingress
+    metadata:
+    namespace: default
+    name: ingress
+    annotations:
+        alb.ingress.kubernetes.io/scheme: internet-facing
+        alb.ingress.kubernetes.io/target-type: ip
+        alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60
+        alb.ingress.kubernetes.io/actions.weighted-routing: |
+        {
+            "type":"forward",
+            "forwardConfig":{
+            "targetGroups":[
+                {
+                "serviceName":"service-1",
+                "servicePort":"80",
+                "weight":50
+                },
+                {
+                "serviceName":"service-2",
+                "servicePort":"80",
+                "weight":50
+                }
+            ],
+            "TargetGroupStickinessConfig": {
+                "Enabled": true,
+                "DurationSeconds": 120
+            }
+            }
+        }
+    spec:
+    ingressClassName: alb
+    rules:
+        - host: www.example.com
+        http:
+            paths:
+            - path: /
+                pathType: Prefix
+                backend:
+                service:
+                    name: weighted-routing
+                    port:
+                    name: use-annotation
+
      +
      +
      • +
    +

    Access control

    +

    Access control for LoadBalancer can be controlled with following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/scheme specifies whether your LoadBalancer will be internet facing. See Load balancer scheme in the AWS documentation for more details.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/scheme: internal
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/inbound-cidrs specifies the CIDRs that are allowed to access LoadBalancer.

      +
      +

      Merge Behavior

      +

      inbound-cidrs is merged across all Ingresses in IngressGroup, but is exclusive per listen-port.

      +
        +
      • the inbound-cidrs will only impact the ports defined for that Ingress.
        • +
      • if same listen-port is defined by multiple Ingress within IngressGroup, inbound-cidrs should only be defined on one of the Ingress.
        • +
      +
      +
      +

      Default

      +
        +
      • 0.0.0.0/0 will be used if the IPAddressType is "ipv4"
        • +
      • 0.0.0.0/0 and ::/0 will be used if the IPAddressType is "dualstack"
        • +
      +
      +
      +

      this annotation will be ignored if alb.ingress.kubernetes.io/security-groups is specified.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/24
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/security-groups specifies the securityGroups you want to attach to LoadBalancer.

      +
      +

      When this annotation is not present, the controller will automatically create one security group, the security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports. +Also, the securityGroups for Node/Pod will be modified to allow inbound traffic from this securityGroup.

      +
      +
      +

      If you specify this annotation, you need to configure the security groups on your Node/Pod to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the access rules.

      +
      +
      +

      Both name or ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/security-groups: sg-xxxx, nameOfSg1, nameOfSg2
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/manage-backend-security-group-rules specifies whether you want the controller to configure security group rules on Node/Pod for traffic access when you specify security-groups.

      +
      +

      This annotation applies only in case you specify the security groups via security-groups annotation. If set to true, controller attaches an additional shared backend security group to your load balancer. This backend security group is used in the Node/Pod security group rules.

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/manage-backend-security-group-rules: "true"
+
      +
      +
      • +
    +

    Authentication

    +

    ALB supports authentication with Cognito or OIDC. See Authenticate Users Using an Application Load Balancer for more details.

    +
    +

    HTTPS only

    +

    Authentication is only supported for HTTPS listeners. See TLS for configuring HTTPS listeners.

    +
    +
      +
    • +

      alb.ingress.kubernetes.io/auth-type specifies the authentication type on targets.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-type: cognito
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-idp-cognito specifies the cognito idp configuration.

      +
      +

      If you are using Amazon Cognito Domain, the userPoolDomain should be set to the domain prefix(my-domain) instead of full domain(https://my-domain.auth.us-west-2.amazoncognito.com)

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-idp-cognito: '{"userPoolARN":"arn:aws:cognito-idp:us-west-2:xxx:userpool/xxx","userPoolClientID":"my-clientID","userPoolDomain":"my-domain"}'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-idp-oidc specifies the oidc idp configuration.

      +
      +

      You need to create an secret within the same namespace as Ingress to hold your OIDC clientID and clientSecret. The format of secret is as below: +

      apiVersion: v1
+kind: Secret
+metadata:
+  namespace: testcase
+  name: my-k8s-secret
+data:
+  clientID: base64 of your plain text clientId
+  clientSecret: base64 of your plain text clientSecret
+

      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-idp-oidc: '{"issuer":"https://example.com","authorizationEndpoint":"https://authorization.example.com","tokenEndpoint":"https://token.example.com","userInfoEndpoint":"https://userinfo.example.com","secretName":"my-k8s-secret"}'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-on-unauthenticated-request specifies the behavior if the user is not authenticated.

      +
      +

      options:

      +
        +
      • authenticate: try authenticate with configured IDP.
        • +
      • deny: return an HTTP 401 Unauthorized error.
        • +
      • allow: allow the request to be forwarded to the target.
        • +
      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-on-unauthenticated-request: authenticate
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-scope specifies the set of user claims to be requested from the IDP(cognito or oidc), in a space-separated list.

      +
      +

      options:

      +
        +
      • phone
        • +
      • email
        • +
      • profile
        • +
      • openid
        • +
      • aws.cognito.signin.user.admin
        • +
      +
      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-scope: 'email openid'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-session-cookie specifies the name of the cookie used to maintain session information

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-session-cookie: custom-cookie
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/auth-session-timeout specifies the maximum duration of the authentication session, in seconds

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/auth-session-timeout: '86400'
+
      +
      +
      • +
    +

    Health Check

    +

    Health check on target groups can be controlled with following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/healthcheck-protocol specifies the protocol used when performing health check on targets.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/healthcheck-protocol: HTTPS
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/healthcheck-port specifies the port used when performing health check on targets.

      +
      +

      When using target-type: instance with a service of type "NodePort", the healthcheck port can be set to traffic-port to automatically point to the correct port.

      +
      +
      +

      Example

      +
        +
      • set the healthcheck port to the traffic port + 
        alb.ingress.kubernetes.io/healthcheck-port: traffic-port
+
        • +
      • set the healthcheck port to the NodePort(when target-type=instance) or TargetPort(when target-type=ip) of a named port + 
        alb.ingress.kubernetes.io/healthcheck-port: my-port
+
        • +
      • set the healthcheck port to 80/tcp + 
        alb.ingress.kubernetes.io/healthcheck-port: '80'
+
        • +
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/healthcheck-path specifies the HTTP path when performing health check on targets.

      +
      +

      Example

      +
        +
      • HTTP + 
        alb.ingress.kubernetes.io/healthcheck-path: /ping
+
        • +
      • GRPC + 
        alb.ingress.kubernetes.io/healthcheck-path: /package.service/method
+
        • +
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/healthcheck-interval-seconds specifies the interval(in seconds) between health check of an individual target.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/healthcheck-interval-seconds: '10'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/healthcheck-timeout-seconds specifies the timeout(in seconds) during which no response from a target means a failed health check

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/healthcheck-timeout-seconds: '8'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/success-codes specifies the HTTP or gRPC status code that should be expected when doing health checks against the specified health check path.

      +
      +

      Example

      +
        +
      • use single value + 
        alb.ingress.kubernetes.io/success-codes: '200'
+
        • +
      • use multiple values + 
        alb.ingress.kubernetes.io/success-codes: 200,201
+
        • +
      • use range of value + 
        alb.ingress.kubernetes.io/success-codes: 200-300
+
        • +
      • use gRPC single value + 
        alb.ingress.kubernetes.io/success-codes: '0'
+
        • +
      • use gRPC multiple value + 
        alb.ingress.kubernetes.io/success-codes: 0,1
+
        • +
      • use gRPC range of value + 
        alb.ingress.kubernetes.io/success-codes: 0-5
+
        • +
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/healthy-threshold-count specifies the consecutive health checks successes required before considering an unhealthy target healthy.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/healthy-threshold-count: '2'
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/unhealthy-threshold-count specifies the consecutive health check failures required before considering a target unhealthy.

      +
      +

      Example

      +

      alb.ingress.kubernetes.io/unhealthy-threshold-count: '2'

      +
      +
      • +
    +

    TLS

    +

    TLS support can be controlled with the following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/certificate-arn specifies the ARN of one or more certificate managed by AWS Certificate Manager

      +
      +

      The first certificate in the list will be added as default certificate. And remaining certificate will be added to the optional certificate list. +See SSL Certificates for more details.

      +
      +
      +

      Certificate Discovery

      +

      TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources. See Certificate Discovery for instructions.

      +
      +
      +

      Example

      +
        +
      • single certificate + 
        alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx
+
        • +
      • multiple certificates + 
        alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/cert1,arn:aws:acm:us-west-2:xxxxx:certificate/cert2,arn:aws:acm:us-west-2:xxxxx:certificate/cert3
+
        • +
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/ssl-policy specifies the Security Policy that should be assigned to the ALB, allowing you to control the protocol and ciphers.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS-1-1-2017-01
+
      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/mutual-authentication specifies the mutual authentication configuration that should be assigned to the Application Load Balancer secure listener ports. See Mutual authentication with TLS in the AWS documentation for more details.

      +
      +

      Configuration Options

      +
        +
      • port: listen port +
        • +
      • mode: "off" (default) | "passthrough" | "verify"
          +
        • verify mode requires an existing trust store resource.
          • +
        • See Create a trust store in the AWS documentation for more details.
          • +
        +
        • +
      • trustStore: ARN (arn:aws:elasticloadbalancing:trustStoreArn) | Name (my-trust-store)
          +
        • Both ARN and Name of trustStore are supported values.
          • +
        • trustStore is required when mode is verify.
          • +
        +
        • +
      • ignoreClientCertificateExpiry : true | false (default)
        • +
      +
      +
      +

      Example

      +
        +
      • listen-ports specifies four HTTPS ports: 80, 443, 8080, 8443
        • +
      • listener HTTPS:80 will be set to passthrough mode
        • +
      • listener HTTPS:443 will be set to verify mode, associated with trust store arn arn:aws:elasticloadbalancing:trustStoreArn and have ignoreClientCertificateExpiry set to true
        • +
      • listeners HTTPS:8080 and HTTPS:8443 remain in the default mode off. + 
        alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS": 80}, {"HTTPS": 443}, {"HTTPS": 8080}, {"HTTPS": 8443}]'
+alb.ingress.kubernetes.io/mutual-authentication: '[{"port": 80, "mode": "passthrough"},
+                                                   {"port": 443, "mode": "verify", "trustStore": "arn:aws:elasticloadbalancing:trustStoreArn", "ignoreClientCertificateExpiry" : true}]'
+
        • +
      +
      +
      +

      Note

      +

      To avoid conflict errors in IngressGroup, this annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup.

      +
      +
      +

      Trust stores limit per Application Load Balancer

      +

      A maximum of two different trust stores can be associated among listeners on the same ingress. See Quotas for your Application Load Balancers in the AWS documentation for more details.

      +
      +
      • +
    +

    Custom attributes

    +

    Custom attributes to LoadBalancers and TargetGroups can be controlled with following annotations:

    +
      +
    • +

      alb.ingress.kubernetes.io/load-balancer-attributes specifies Load Balancer Attributes that should be applied to the ALB.

      +
      +

      Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values(access_logs.s3.enabled=false) and omitting them is not sufficient.

      +
      +
      +
        +
      • If deletion_protection.enabled=true is in annotation, the controller will not be able to delete the ALB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource.
        • +
      • Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource.
        • +
      +
      +
      +

      Example

      +
        +
      • enable access log to s3 + 
        alb.ingress.kubernetes.io/load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app
+
        • +
      • enable deletion protection + 
        alb.ingress.kubernetes.io/load-balancer-attributes: deletion_protection.enabled=true
+
        • +
      • enable invalid header fields removal + 
        alb.ingress.kubernetes.io/load-balancer-attributes: routing.http.drop_invalid_header_fields.enabled=true
+
        • +
      • enable http2 support + 
        alb.ingress.kubernetes.io/load-balancer-attributes: routing.http2.enabled=true
+
        • +
      • set idle_timeout delay to 600 seconds + 
        alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=600
+
        • +
      • enable connection logs + 
        alb.ingress.kubernetes.io/load-balancer-attributes: connection_logs.s3.enabled=true,connection_logs.s3.bucket=my-connection-log-bucket,connection_logs.s3.prefix=my-app
+
        • +
      +
      + +
      +

      Example

      +
        +
      • set the slow start duration to 30 seconds (available range is 30-900 seconds) + 
        alb.ingress.kubernetes.io/target-group-attributes: slow_start.duration_seconds=30
+
        • +
      • set the deregistration delay to 30 seconds (available range is 0-3600 seconds) + 
        alb.ingress.kubernetes.io/target-group-attributes: deregistration_delay.timeout_seconds=30
+
        • +
      • enable sticky sessions (requires alb.ingress.kubernetes.io/target-type be set to ip) + 
        alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60
+alb.ingress.kubernetes.io/target-type: ip
+
        • +
      • set load balancing algorithm to least outstanding requests + 
        alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=least_outstanding_requests
+
        • +
      • enable Automated Target Weights(ATW) on HTTP/HTTPS target groups to increase application availability. Set your load balancing algorithm to weighted random and turn on anomaly mitigation (recommended) + 
        alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=weighted_random,load_balancing.algorithm.anomaly_mitigation=on
+
        • +
      +
      +
      • +
    +

    Resource Tags

    +

    The AWS Load Balancer Controller automatically applies following tags to the AWS resources (ALB/TargetGroups/SecurityGroups/Listener/ListenerRule) it creates:

    +
      +
    • elbv2.k8s.aws/cluster: ${clusterName}
      • +
    • ingress.k8s.aws/stack: ${stackID}
      • +
    • ingress.k8s.aws/resource: ${resourceID}
      • +
    +

    In addition, you can use annotations to specify additional tags

    +
      +
    • +

      alb.ingress.kubernetes.io/tags specifies additional tags that will be applied to AWS resources created. + In case of target group, the controller will merge the tags from the ingress and the backend service giving precedence + to the values specified on the service when there is conflict.

      +
      +

      Example

      +
      alb.ingress.kubernetes.io/tags: Environment=dev,Team=test
+
      +
      +
      • +
    +

    Addons

    +
    +

    Note

    +

    If waf-acl-arn is specified via the ingress annotations, the controller will make sure the waf-acl is associated to the provisioned ALB with the ingress. +If there is not such annotation, the controller will make sure no waf-acl is associated, so it may remove the existing waf-acl on the ALB provisioned. +If users do not want the controller to manage the waf-acl on the ALBs, they can disable the feature by setting controller command line flags --enable-waf=false or --enable-wafv2=false

    +
    +
      +
    • +

      alb.ingress.kubernetes.io/waf-acl-id specifies the identifier for the Amazon WAF web ACL.

      +
      +

      Only Regional WAF is supported.

      +
      +
      +

      Example

      +

      alb.ingress.kubernetes.io/waf-acl-id: 499e8b99-6671-4614-a86d-adb1810b7fbe

      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/wafv2-acl-arn specifies ARN for the Amazon WAFv2 web ACL.

      +
      +

      Only Regional WAFv2 is supported.

      +
      +
      +

      To get the WAFv2 Web ACL ARN from the Console, click the gear icon in the upper right and enable the ARN column.

      +
      +
      +

      Example

      +

      alb.ingress.kubernetes.io/wafv2-acl-arn: arn:aws:wafv2:us-west-2:xxxxx:regional/webacl/xxxxxxx/3ab78708-85b0-49d3-b4e1-7a9615a6613b

      +
      +
      • +
    • +

      alb.ingress.kubernetes.io/shield-advanced-protection turns on / off the AWS Shield Advanced protection for the load balancer.

      +
      +

      Example

      +

      alb.ingress.kubernetes.io/shield-advanced-protection: 'true'

      +
      +
      • +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/ingress/cert_discovery/index.html b/v2.7/guide/ingress/cert_discovery/index.html new file mode 100644 index 000000000..e6c4a5a92 --- /dev/null +++ b/v2.7/guide/ingress/cert_discovery/index.html @@ -0,0 +1,1176 @@ + + + + + + + + + + + + + + + + + Certificate Discovery - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Certificate Discovery

    +

    TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources if the alb.ingress.kubernetes.io/certificate-arn annotation is not specified.

    +

    The controller will attempt to discover TLS certificates from the tls field in Ingress and host field in Ingress rules.

    +
    +

    You need to explicitly specify to use HTTPS listener with listen-ports annotation.

    +
    +

    Discover via Ingress tls

    +
    +

    Example

      +
    • attaches certs for www.example.com to the ALB + 
      apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+namespace: default
+name: ingress
+annotations:
+  alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
+spec:
+  ingressClassName: alb
+  tls:
+  - hosts:
+    - www.example.com
+  rules:
+  - http:
+      paths:
+      - path: /users
+        pathType: Prefix
+        backend:
+          service:
+            name: user-service
+            port:
+              number: 80
+
      • +
    +

    +
    +

    Discover via Ingress rule host.

    +
    +

    Example

      +
    • attaches a cert for dev.example.com or *.example.com to the ALB + 
      apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+namespace: default
+name: ingress
+annotations:
+  alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
+spec:
+  ingressClassName: alb
+  rules:
+  - host: dev.example.com
+    http:
+      paths:
+      - path: /users
+        pathType: Prefix
+        backend:
+          service:
+            name: user-service
+            port:
+              number: 80
+
      • +
    +

    +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/ingress/ingress_class/index.html b/v2.7/guide/ingress/ingress_class/index.html new file mode 100644 index 000000000..f49079fa9 --- /dev/null +++ b/v2.7/guide/ingress/ingress_class/index.html @@ -0,0 +1,1509 @@ + + + + + + + + + + + + + + + + + IngressClass - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    IngressClass

    +

    Ingresses can be implemented by different controllers, often with different configuration. Each Ingress should specify a +class, a reference to an IngressClass resource that contains additional configuration including the name of the +controller that should implement the class. IngressClass resources contain an optional parameters field. This can be +used to reference additional implementation-specific configuration for this class. +For the AWS Load Balancer controller, the implementation-specific configuration is +IngressClassParams in the elbv2.k8s.aws API group.

    +
    +

    Example

    +
      +
    • specify controller as ingress.k8s.aws/alb to denote Ingresses should be managed by AWS Load Balancer Controller. +
      apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: awesome-class
+spec:
+  controller: ingress.k8s.aws/alb
+
      • +
    • specify additional configurations by referencing an IngressClassParams resource. +
      apiVersion: networking.k8s.io/v1
+kind: IngressClass
+metadata:
+  name: awesome-class
+spec:
+  controller: ingress.k8s.aws/alb
+  parameters:
+    apiGroup: elbv2.k8s.aws
+    kind: IngressClassParams
+    name: awesome-class-cfg
+
      • +
    +
    +
    +

    default IngressClass

    +

    You can mark a particular IngressClass as the default for your cluster. Setting the +ingressclass.kubernetes.io/is-default-class annotation to true on an IngressClass resource will ensure that new +Ingresses without an ingressClassName field specified will be assigned this default IngressClass.

    +
    +

    Deprecated kubernetes.io/ingress.class annotation

    +

    Before the IngressClass resource and ingressClassName field were added in Kubernetes 1.18, Ingress classes were +specified with a kubernetes.io/ingress.class annotation on the Ingress. This annotation was never formally defined, +but was widely supported by Ingress controllers.

    +

    The newer ingressClassName field on Ingresses is a replacement for that annotation, but is not a direct equivalent. +While the annotation was generally used to reference the name of the Ingress controller that should implement the +Ingress, the field is a reference to an IngressClass resource that contains additional Ingress configuration, including +the name of the Ingress controller.

    +
    +

    disable kubernetes.io/ingress.class annotation

    +

    In order to maintain backwards-compatibility, kubernetes.io/ingress.class annotation is still supported currently. +You can enforce IngressClass resource adoption by disabling the kubernetes.io/ingress.class annotation via --disable-ingress-class-annotation controller flag.

    +
    +

    IngressClassParams

    +

    IngressClassParams is a CRD specific to the AWS Load Balancer Controller, which can be used along with IngressClass’s parameter field. +You can use IngressClassParams to enforce settings for a set of Ingresses.

    +
    +

    Example

    +
      +
    • with scheme & ipAddressType & tags +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+  name: awesome-class
+spec:
+  scheme: internal
+  ipAddressType: dualstack
+  tags:
+  - key: org
+    value: my-org
+
      • +
    • with namespaceSelector +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+  name: awesome-class
+spec:
+  namespaceSelector:
+    matchLabels:
+      team: team-a
+
      • +
    • with IngressGroup +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+  name: awesome-class
+spec:
+  group:
+    name: my-group
+
      • +
    • with loadBalancerAttributes +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+    name: awesome-class
+spec:
+  loadBalancerAttributes:
+  - key: deletion_protection.enabled
+    value: "true"
+  - key: idle_timeout.timeout_seconds
+    value: "120"
+
      • +
    • with subnets.ids +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+  name: awesome-class
+spec:
+  subnets:
+    ids:
+    - subnet-xxx
+    - subnet-123
+
      • +
    • with subnets.tags +
      apiVersion: elbv2.k8s.aws/v1beta1
+kind: IngressClassParams
+metadata:
+  name: class2048-config
+spec:
+  subnets:
+  tags:
+    kubernetes.io/role/internal-elb:
+    - "1"
+    myKey:
+    - myVal0
+    - myVal1
+
      • +
    +
    +

    IngressClassParams specification

    +

    spec.namespaceSelector

    +

    namespaceSelector is an optional setting that follows general Kubernetes +label selector +semantics.

    +

    Cluster administrators can use the namespaceSelector field to restrict the namespaces of Ingresses that are allowed to specify the IngressClass.

    +
      +
    1. If namespaceSelector specified, only Ingresses in selected namespaces can use IngressClasses with this parameter. The controller will refuse to reconcile for Ingresses that violates namespaceSelector.
      2. +
    2. If namespaceSelector un-specified, all Ingresses in any namespace can use IngressClasses with this parameter.
      3. +
    +

    spec.group

    +

    group is an optional setting. The only available sub-field is group.name.

    +

    Cluster administrators can use group.name field to denote the groupName for all Ingresses belong to this IngressClass.

    +
      +
    1. If group.name specified, all Ingresses with this IngressClass will belong to the same IngressGroup specified and result in a single ALB. +If group.name is not specified, Ingresses with this IngressClass can use the older / legacy alb.ingress.kubernetes.io/group.name annotation to specify their IngressGroup. Ingresses that belong to the same IngressClass can form different IngressGroups via that annotation.
      2. +
    +

    spec.scheme

    +

    scheme is an optional setting. The available options are internet-facing or internal.

    +

    Cluster administrators can use the scheme field to restrict the scheme for all Ingresses that belong to this IngressClass.

    +
      +
    1. If scheme specified, all Ingresses with this IngressClass will have the specified scheme.
      2. +
    2. If scheme un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/scheme annotation to specify scheme.
      3. +
    +

    spec.inboundCIDRs

    +

    Cluster administrators can use the optional inboundCIDRs field to specify the CIDRs that are allowed to access the load balancers that belong to this IngressClass. +If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/inbound-cidrs annotation.

    +

    spec.sslPolicy

    +

    Cluster administrators can use the optional sslPolicy field to specify the SSL policy for the load balancers that belong to this IngressClass. +If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/ssl-policy annotation.

    +

    spec.subnets

    +

    Cluster administrators can use the optional subnets field to specify the subnets for the load balancers that belong to this IngressClass. +They may specify either ids or tags. If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/subnets annotation annotation.

    +
    spec.subnets.ids
    +

    If ids is specified, it must be a set of at least one resource ID of a subnet in the VPC. No two subnets may be in the same availability zone.

    +
    spec.subnets.tags
    +

    If tags is specified, it is a map of tag filters. The filters will match subnets in the VPC for which +each listed tag key is present and has one of the corresponding tag values.

    +

    Unless the SubnetsClusterTagCheck feature gate is disabled, subnets without a cluster tag and with the cluster tag for another cluster will be excluded.

    +

    Within any given availability zone, subnets with a cluster tag will be chosen over subnets without, then the subnet with the lowest-sorting resource ID will be chosen.

    +

    spec.ipAddressType

    +

    ipAddressType is an optional setting. The available options are ipv4 or dualstack.

    +

    Cluster administrators can use ipAddressType field to restrict the ipAddressType for all Ingresses that belong to this IngressClass.

    +
      +
    1. If ipAddressType specified, all Ingresses with this IngressClass will have the specified ipAddressType.
      2. +
    2. If ipAddressType un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/ip-address-type annotation to specify ipAddressType.
      3. +
    +

    spec.tags

    +

    tags is an optional setting.

    +

    Cluster administrators can use tags field to specify the custom tags for AWS resources provisioned for all Ingresses belong to this IngressClass.

    +
      +
    1. If tags is set, AWS resources provisioned for all Ingresses with this IngressClass will have the specified tags.
      2. +
    2. You can also use controller-level flag --default-tags or alb.ingress.kubernetes.io/tags annotation to specify custom tags. These tags will be merged together based on tag-key. If same tag-key appears in multiple sources, the priority is as follows:
        +
      1. controller-level flag --default-tags will have the highest priority.
        2. +
      2. spec.tags in IngressClassParams will have the middle priority.
        3. +
      3. alb.ingress.kubernetes.io/tags annotation will have the lowest priority.
        4. +
      +
      3. +
    +

    spec.loadBalancerAttributes

    +

    loadBalancerAttributes is an optional setting.

    +

    Cluster administrators can use loadBalancerAttributes field to specify the Load Balancer Attributes that should be applied to the load balancers that belong to this IngressClass. You can specify the list of load balancer attribute name and the desired value in the spec.loadBalancerAttributes field.

    +
      +
    1. If loadBalancerAttributes is set, the attributes defined will be applied to the load balancer that belong to this IngressClass. If you specify invalid keys or values for the load balancer attributes, the controller will fail to reconcile ingresses belonging to the particular ingress class.
      2. +
    2. If loadBalancerAttributes un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/load-balancer-attributes annotation to specify the load balancer attributes.
      3. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/ingress/spec/index.html b/v2.7/guide/ingress/spec/index.html new file mode 100644 index 000000000..cbfa4782f --- /dev/null +++ b/v2.7/guide/ingress/spec/index.html @@ -0,0 +1,1090 @@ + + + + + + + + + + + + + + + + + Specification - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Ingress specification

    +

    This document covers how ingress resources work in relation to The AWS Load Balancer Controller.

    +
    +
      +
    • Beginning from v2.4.3 of the AWS LBC, rules are ordered as follows:
        +
      • pathType: Exact paths are always ordered first
        • +
      • followed by pathType: Prefix paths, with the longest prefix first
        • +
      • followed by pathType: ImplementationSpecific paths, in the order they are listed in the manifest
        • +
      +
      • +
    +
    +

    An example ingress, from example is as follows.

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: "2048-ingress"
+  namespace: "2048-game"
+  labels:
+    app: 2048-nginx-ingress
+spec:
+  ingressClassName: alb
+  rules:
+    - host: 2048.example.com
+      http:
+        paths:
+          - path: /*
+            pathType: ImplementationSpecific
+            backend:
+              service:
+                name: "service-2048"
+                port:
+                  number: 80
+
    +

    The host field specifies the eventual Route 53-managed domain that will route to this service.

    +

    The service, service-2048, must be of type NodePort in order for the provisioned ALB to route to it.(see echoserver-service.yaml)

    +

    The AWS Load Balancer Controller does not support the resource field of backend.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/integrations/external_dns/index.html b/v2.7/guide/integrations/external_dns/index.html new file mode 100644 index 000000000..640d0e8a0 --- /dev/null +++ b/v2.7/guide/integrations/external_dns/index.html @@ -0,0 +1,1221 @@ + + + + + + + + + + + + + + + + + Setup External DNS - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Setup External DNS

    +

    external-dns provisions DNS records based on the host information. This project will setup and manage records in Route 53 that point to controller deployed ALBs.

    +

    Prerequisites

    +

    Role Permissions

    +

    Adequate roles and policies must be configured in AWS and available to the node(s) running the external-dns. See https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/aws.md#iam-permissions.

    +

    Installation

    +
      +
    1. +

      Download sample external-dns manifest

      +
      wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/external-dns.yaml
+
      +
      2. +
    2. +

      Edit the --domain-filter flag to include your hosted zone(s)

      +

      The following example is for a hosted zone test-dns.com:

      +
      args:
+- --source=service
+- --source=ingress
+- --domain-filter=test-dns.com # will make ExternalDNS see only the hosted zones matching provided domain, omit to process all available hosted zones
+- --provider=aws
+- --policy=upsert-only # would prevent ExternalDNS from deleting any records, omit to enable full synchronization
+- --aws-zone-type=public # only look at public hosted zones (valid values are public, private or no value for both)
+- --registry=txt
+- --txt-owner-id=my-identifier
+
      +
      3. +
    3. +

      Deploy external-dns

      +
      kubectl apply -f external-dns.yaml
+
      +
      4. +
    4. +

      Verify it deployed successfully.

      +
      kubectl logs -f $(kubectl get po | egrep -o 'external-dns[A-Za-z0-9-]+')
+
      +

      Should display output similar to the following: +

      time="2019-12-11T10:26:05Z" level=info msg="config: {Master: KubeConfig: RequestTimeout:30s IstioIngressGateway:istio-system/istio-ingressgateway Sources:[service ingress] Namespace: AnnotationFilter: FQDNTemplate: CombineFQDNAndAnnotation:false Compatibility: PublishInternal:false PublishHostIP:false ConnectorSourceServer:localhost:8080 Provider:aws GoogleProject: DomainFilter:[test-dns.com] ZoneIDFilter:[] AlibabaCloudConfigFile:/etc/kubernetes/alibaba-cloud.json AlibabaCloudZoneType: AWSZoneType:public AWSAssumeRole: AWSBatchChangeSize:4000 AWSBatchChangeInterval:1s AWSEvaluateTargetHealth:true AzureConfigFile:/etc/kubernetes/azure.json AzureResourceGroup: CloudflareProxied:false InfobloxGridHost: InfobloxWapiPort:443 InfobloxWapiUsername:admin InfobloxWapiPassword: InfobloxWapiVersion:2.3.1 InfobloxSSLVerify:true DynCustomerName: DynUsername: DynPassword: DynMinTTLSeconds:0 OCIConfigFile:/etc/kubernetes/oci.yaml InMemoryZones:[] PDNSServer:http://localhost:8081 PDNSAPIKey: PDNSTLSEnabled:false TLSCA: TLSClientCert: TLSClientCertKey: Policy:upsert-only Registry:txt TXTOwnerID:my-identifier TXTPrefix: Interval:1m0s Once:false DryRun:false LogFormat:text MetricsAddress::7979 LogLevel:info TXTCacheInterval:0s ExoscaleEndpoint:https://api.exoscale.ch/dns ExoscaleAPIKey: ExoscaleAPISecret: CRDSourceAPIVersion:externaldns.k8s.io/v1alpha CRDSourceKind:DNSEndpoint ServiceTypeFilter:[] RFC2136Host: RFC2136Port:0 RFC2136Zone: RFC2136Insecure:false RFC2136TSIGKeyName: RFC2136TSIGSecret: RFC2136TSIGSecretAlg: RFC2136TAXFR:false}"
+time="2019-12-11T10:26:05Z" level=info msg="Created Kubernetes client https://10.100.0.1:443"
+

      +
      5. +
    +

    Usage

    +
      +
    1. +

      To create a record set in the subdomain, from your ingress which has been created by the ingress-controller, add the following annotation in the ingress objectresource:

      +
      annotations:
+  kubernetes.io/ingress.class: alb
+  alb.ingress.kubernetes.io/scheme: internet-facing
+
+  # external-dns specific configuration for creating route53 record-set
+  external-dns.alpha.kubernetes.io/hostname: my-app.test-dns.com # give your domain name here
+
      +
      2. +
    2. +

      A snippet of the external-dns pod log indicating route53 update:

      +
      time="2019-12-11T10:26:08Z" level=info msg="Desired change: CREATE my-app.test-dns.com A"
+time="2019-12-11T10:26:08Z" level=info msg="Desired change: CREATE my-app.test-dns.com TXT"
+time="2019-12-11T10:26:08Z" level=info msg="2 record(s) in zone my-app.test-dns.com. were successfully updated"
+
      +
      3. +
    3. +

      External DNS configures Simple routing policy for the route53 records. You can configure Weighted policy by specifying the weight and the identifier via annotation. Weighted policy allows you to split the traffic between multiple load balancers. Here is an example to specify weight and identifier: + 

       annotations:
+   # For creating weighted route53 records
+   external-dns.alpha.kubernetes.io/hostname: my-app.test-dns.com
+   external-dns.alpha.kubernetes.io/aws-weight: "100"
+   external-dns.alpha.kubernetes.io/set-identifier: "3"
+
      + You can refer to the External DNS documentation for further details [link].

      +
      4. +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/service/annotations/index.html b/v2.7/guide/service/annotations/index.html new file mode 100644 index 000000000..d0f6a657a --- /dev/null +++ b/v2.7/guide/service/annotations/index.html @@ -0,0 +1,1988 @@ + + + + + + + + + + + + + + + + + Annotations - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Annotations

    + +

    Service annotations

    +
    +
      +
    • Annotation keys and values can only be strings. All other types below must be string-encoded, for example:
        +
      • boolean: "true"
        • +
      • integer: "42"
        • +
      • stringList: "s1,s2,s3"
        • +
      • stringMap: "k1=v1,k2=v2"
        • +
      • json: "{ \"key\": \"value\" }"
        • +
      +
      • +
    +
    +

    Annotations

    +
    +

    Warning

    +

    These annotations are specific to the kubernetes service resources reconciled by the AWS Load Balancer Controller. Although the list was initially derived from the k8s in-tree kube-controller-manager, this +documentation is not an accurate reference for the services reconciled by the in-tree controller.

    +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    NameTypeDefaultNotes
    service.beta.kubernetes.io/load-balancer-source-rangesstringList
    service.beta.kubernetes.io/aws-load-balancer-typestring
    service.beta.kubernetes.io/aws-load-balancer-nlb-target-typestringdefault instance in case of LoadBalancerClass
    service.beta.kubernetes.io/aws-load-balancer-namestring
    service.beta.kubernetes.io/aws-load-balancer-internalbooleanfalsedeprecated, in favor of aws-load-balancer-scheme
    service.beta.kubernetes.io/aws-load-balancer-schemestringinternal
    service.beta.kubernetes.io/aws-load-balancer-proxy-protocolstringSet to "*" to enable
    service.beta.kubernetes.io/aws-load-balancer-ip-address-typestringipv4ipv4 | dualstack
    service.beta.kubernetes.io/aws-load-balancer-access-log-enabledbooleanfalsedeprecated, in favor of aws-load-balancer-attributes
    service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-namestringdeprecated, in favor of aws-load-balancer-attributes
    service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefixstringdeprecated, in favor of aws-load-balancer-attributes
    service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabledbooleanfalsedeprecated, in favor of aws-load-balancer-attributes
    service.beta.kubernetes.io/aws-load-balancer-ssl-certstringList
    service.beta.kubernetes.io/aws-load-balancer-ssl-portsstringList
    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policystringELBSecurityPolicy-2016-08
    service.beta.kubernetes.io/aws-load-balancer-backend-protocolstring
    service.beta.kubernetes.io/aws-load-balancer-additional-resource-tagsstringMap
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocolstringTCP
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-port integer | traffic-porttraffic-port
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-pathstring"/" for HTTP(S) protocols
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-thresholdinteger3
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-thresholdinteger3
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeoutinteger10
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-intervalinteger10
    service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codesstring200-399
    service.beta.kubernetes.io/aws-load-balancer-eip-allocationsstringListinternet-facing lb only. Length must match the number of subnets
    service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addressesstringListinternal lb only. Length must match the number of subnets
    service.beta.kubernetes.io/aws-load-balancer-ipv6-addressesstringListdualstack lb only. Length must match the number of subnets
    service.beta.kubernetes.io/aws-load-balancer-target-group-attributesstringMap
    service.beta.kubernetes.io/aws-load-balancer-subnetsstringList
    service.beta.kubernetes.io/aws-load-balancer-alpn-policystring
    service.beta.kubernetes.io/aws-load-balancer-target-node-labelsstringMap
    service.beta.kubernetes.io/aws-load-balancer-attributesstringMap
    service.beta.kubernetes.io/aws-load-balancer-security-groupsstringList
    service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rulesbooleantrue
    +

    Traffic Routing

    +

    Traffic Routing can be controlled with following annotations:

    +
      +
    • +

      service.beta.kubernetes.io/aws-load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error.

      +
      +

      limitations

      +
        +
      • If you modify this annotation after service creation, there is no effect.
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-name: custom-name
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-type specifies the load balancer type. This controller reconciles those service resources with this annotation set to either nlb-ip or external.

      +
      +

      Tip

      +

      This annotation specifies the controller used to provision LoadBalancers (as specified in legacy-cloud-provider). Refer to lb-scheme to specify whether the LoadBalancer is internet-facing or internal.

      +
      +
      +
        +
      • [Deprecated] For type nlb-ip, the controller will provision an NLB with targets registered by IP address. This value is supported for backwards compatibility.
        • +
      • For type external, the NLB target type depends on the nlb-target-type annotation.
        • +
      +
      +
      +

      limitations

      +
        +
      • This annotation should not be modified after service creation.
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-type: external
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-nlb-target-type specifies the target type to configure for NLB. You can choose between +instance and ip.

      +
        +
      • +

        instance mode will route traffic to all EC2 instances within cluster on the NodePort opened for your service. The kube-proxy on the individual worker nodes sets up the forwarding of the traffic from the NodePort to the pods behind the service.

        +
        +
          +
        • service must be of type NodePort or LoadBalancer for instance targets
          • +
        • for k8s 1.22 and later if spec.allocateLoadBalancerNodePorts is set to false, NodePort must be allocated manually
          • +
        +
        +
        +

        default value

        +

        If you configure spec.loadBalancerClass, the controller defaults to instance target type

        +
        +
        +

        NodePort allocation

        +

        k8s version 1.22 and later support disabling NodePort allocation by setting the service field spec.allocateLoadBalancerNodePorts to false. If the NodePort is not allocated for a service port, the controller will fail to reconcile instance mode NLB.

        +
        +
        • +
      • +

        ip mode will route traffic directly to the pod IP. In this mode, AWS NLB sends traffic directly to the Kubernetes pods behind the service, eliminating the need for an extra network hop through the worker nodes in the Kubernetes cluster.

        +
        +
          +
        • ip target mode supports pods running on AWS EC2 instances and AWS Fargate
          • +
        • network plugin must use native AWS VPC networking configuration for pod IP, for example Amazon VPC CNI plugin.
          • +
        +
        +
        • +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-subnets specifies the Availability Zone +the NLB will route traffic to. See Network Load Balancers for more details.

      +
      +

      Tip

      +

      Subnets are auto-discovered if this annotation is not specified, see Subnet Discovery for further details.

      +
      +
      +

      You must specify at least one subnet in any of the AZs, both subnetID or subnetName(Name tag on subnets) can be used.

      +
      +
      +

      limitations

      +
        +
      • Each subnets must be from a different Availability Zone
        • +
      • AWS has restrictions on disabling existing subnets for NLB. As a result, you might not be able to edit this annotation once the NLB gets provisioned.
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-subnets: subnet-xxxx, mySubnet
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-alpn-policy allows you to configure the ALPN policies +on the load balancer.

      +
      +

      supported policies

      +
        +
      • HTTP1Only Negotiate only HTTP/1.*. The ALPN preference list is http/1.1, http/1.0.
        • +
      • HTTP2Only Negotiate only HTTP/2. The ALPN preference list is h2.
        • +
      • HTTP2Optional Prefer HTTP/1.* over HTTP/2 (which can be useful for HTTP/2 testing). The ALPN preference list is http/1.1, http/1.0, h2.
        • +
      • HTTP2Preferred Prefer HTTP/2 over HTTP/1.*. The ALPN preference list is h2, http/1.1, http/1.0.
        • +
      • None Do not negotiate ALPN. This is the default.
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-alpn-policy: HTTP2Preferred
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-target-node-labels specifies which nodes to include in the target group registration for instance target type.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-target-node-labels: label1=value1, label2=value2
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-eip-allocations specifies a list of elastic IP address configuration for an internet-facing NLB.

      +
      +

      Note

      +
        +
      • This configuration is optional, and you can use it to assign static IP addresses to your NLB
        • +
      • You must specify the same number of eip allocations as load balancer subnets annotation
        • +
      • NLB must be internet-facing
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-eip-allocations: eipalloc-xyz, eipalloc-zzz
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses specifies a list of private IPv4 addresses for an internal NLB.

      +
      +

      Note

      +
        +
      • NLB must be internal
        • +
      • This configuration is optional, and you can use it to assign static IPv4 addresses to your NLB
        • +
      • You must specify the same number of private IPv4 addresses as load balancer subnets annotation
        • +
      • You must specify the IPv4 addresses from the load balancer subnet IPv4 ranges
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses: 192.168.10.15, 192.168.32.16
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses specifies a list of IPv6 addresses for an dualstack NLB.

      +
      +

      Note

      +
        +
      • NLB must be dualstack
        • +
      • This configuration is optional, and you can use it to assign static IPv6 addresses to your NLB
        • +
      • You must specify the same number of private IPv6 addresses as load balancer subnets annotation
        • +
      • You must specify the IPv6 addresses from the load balancer subnet IPv6 ranges
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses: 2600:1f13:837:8501::1, 2600:1f13:837:8504::1
+
      +
      +
      • +
    +

    Traffic Listening

    +

    Traffic Listening can be controlled with following annotations:

    + +

    Resource attributes

    +

    NLB resource attributes can be controlled via the following annotations:

    +
      +
    • +

      service.beta.kubernetes.io/aws-load-balancer-proxy-protocol specifies whether to enable proxy protocol v2 on the target group. +Set to '*' to enable proxy protocol v2. This annotation takes precedence over the annotation service.beta.kubernetes.io/aws-load-balancer-target-group-attributes +for proxy protocol v2 configuration.

      +
      +

      The only valid value for this annotation is *.

      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-target-group-attributes specifies the +Target Group Attributes to be configured.

      +
      +

      Example

      +
        +
      • set the deregistration delay to 120 seconds (available range is 0-3600 seconds) + 
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.timeout_seconds=120
+
        • +
      • enable source IP affinity + 
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: stickiness.enabled=true,stickiness.type=source_ip
+
        • +
      • enable proxy protocol version 2 + 
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: proxy_protocol_v2.enabled=true
+
        • +
      • enable connection termination on deregistration + 
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.connection_termination.enabled=true
+
        • +
      • enable client IP preservation + 
        service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: preserve_client_ip.enabled=true
+
        • +
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-attributes specifies Load Balancer Attributes that should be applied to the NLB.

      +
      +

      Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values(access_logs.s3.enabled=false) and omitting them is not sufficient. +Custom attributes set in this annotation's config map will be overriden by annotation-specific attributes. For backwards compatibility, existing annotations for the individual load balancer attributes get precedence in case of ties.

      +
      +
      +
        +
      • If deletion_protection.enabled=true is in the annotation, the controller will not be able to delete the NLB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource.
        • +
      • Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource.
        • +
      +
      +
      +

      Example

      +
        +
      • enable access log to s3 +
        service.beta.kubernetes.io/aws-load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app
+
        • +
      • enable NLB deletion protection +
        service.beta.kubernetes.io/aws-load-balancer-attributes: deletion_protection.enabled=true
+
        • +
      • enable cross zone load balancing +
        service.beta.kubernetes.io/aws-load-balancer-attributes: load_balancing.cross_zone.enabled=true
+
        • +
      +
      +
      • +
    • +

      the following annotations are deprecated in v2.3.0 release in favor of service.beta.kubernetes.io/aws-load-balancer-attributes

      +
      +
      service.beta.kubernetes.io/aws-load-balancer-access-log-enabled
+service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name
+service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix
+service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled 
+
      +
      +
      • +
    +

    AWS Resource Tags

    +

    The AWS Load Balancer Controller automatically applies following tags to the AWS resources it creates (NLB/TargetGroups/Listener/ListenerRule):

    +
      +
    • elbv2.k8s.aws/cluster: ${clusterName}
      • +
    • service.k8s.aws/stack: ${stackID}
      • +
    • service.k8s.aws/resource: ${resourceID}
      • +
    +

    In addition, you can use annotations to specify additional tags

    +
      +
    • +

      service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags specifies additional tags to apply to the AWS resources.

      +
      +
        +
      • you cannot override the default controller tags mentioned above or the tags specified in the --default-tags controller flag
        • +
      • if any of the tag conflicts with the ones configured via --external-managed-tags controller flag, the controller fails to reconcile the service
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: Environment=dev,Team=test
+
      +
      +
      • +
    +

    Health Check

    +

    Health check on target groups can be configured with following annotations:

    +
      +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol specifies the target group health check protocol.

      +
      +
        +
      • you can specify tcp, or http or https, tcp is the default
        • +
      • tcp is the default health check protocol if the service spec.externalTrafficPolicy is Cluster, http if Local
        • +
      • if the service spec.externalTrafficPolicy is Local, do not use tcp for health check
        • +
      • Supports only single protocol per service
        • +
      +
      +
      +

      Example

      +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol: http

      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-port specifies the TCP port to use for target group health check.

      +
      +

      default value

      +
        +
      • if you do not specify the health check port, the default value will be spec.healthCheckNodePort when externalTrafficPolicy=local or traffic-port otherwise.
        • +
      +
      +
      +

      Example

      +
        +
      • set the health check port to traffic-port + 
        service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: traffic-port
+
        • +
      • set the health check port to port 80 + 
        service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: "80"
+
        • +
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-path specifies the http path for the health check in case of http/https protocol.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-path: /healthz
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold specifies the consecutive health check successes required before a target is considered healthy.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: "3"
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold specifies the consecutive health check failures before a target gets marked unhealthy.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: "3"
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval specifies the interval between consecutive health checks.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: "10"
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes specifies the http success codes for the health check in case of http/https protocol.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes: "200-399"
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout specifies the target group health check timeout. The target has to respond within the timeout for a successful health check.

      +
      +

      Note

      +

      The controller currently ignores the timeout configuration due to the limitations on the AWS NLB. The default timeout for TCP is 10s and HTTP is 6s.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: "10"
+
      +
      +
      • +
    +

    TLS

    +

    You can configure TLS support via the following annotations:

    +
      +
    • +

      service.beta.kubernetes.io/aws-load-balancer-ssl-cert specifies the ARN of one or more certificates managed by the AWS Certificate Manager.

      +
      +

      The first certificate in the list is the default certificate and remaining certificates are for the optional certificate list. +See Server Certificates for further details.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-ssl-ports specifies the frontend ports with TLS listeners.

      +
      +
        +
      • You must configure at least one certificate for TLS listeners
        • +
      • You can specify a list of port names or port values, * does not match any ports
        • +
      • If you don't specify this annotation, controller creates TLS listener for all the service ports
        • +
      • Specify this annotation if you need both TLS and non-TLS listeners on the same load balancer
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-ssl-ports: 443, custom-port
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy specifies the Security Policy for NLB frontend connections, allowing you to control the protocol and ciphers.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-backend-protocol specifies whether to use TLS for the backend traffic between the load balancer and the kubernetes pods.

      +
      +
        +
      • If you specify ssl as the backend protocol, NLB uses TLS connections for the traffic to your kubernetes pods in case of TLS listeners
        • +
      • You can specify ssl or tcp (default)
        • +
      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ssl
+
      +
      +
      • +
    +

    Access control

    +

    Load balancer access can be controlled via following annotations:

    +
      +
    • +

      service.beta.kubernetes.io/load-balancer-source-ranges specifies the CIDRs that are allowed to access the NLB.

      +
      +

      Tip

      +

      we recommend specifying CIDRs in the service spec.loadBalancerSourceRanges instead

      +
      +
      +

      Default

      +
        +
      • 0.0.0.0/0 will be used if the IPAddressType is "ipv4"
        • +
      • 0.0.0.0/0 and ::/0 will be used if the IPAddressType is "dualstack"
        • +
      • The VPC CIDR will be used if service.beta.kubernetes.io/aws-load-balancer-scheme is internal
        • +
      +
      +
      +

      This annotation will be ignored in case preserve client IP is not enabled. +- preserve client IP is disabled by default for IP targets +- preserve client IP is enabled by default for instance targets

      +
      +
      +

      Preserve client IP has no effect on traffic converted from IPv4 to IPv6 and on traffic converted from IPv6 to IPv4. The source IP of this type of traffic is always the private IP address of the Network Load Balancer. +- This could cause the clients that have their traffic converted to bypass the specified CIDRs that are allowed to access the NLB.

      +
      +
      +

      this annotation will be ignored if service.beta.kubernetes.io/aws-load-balancer-security-groups is specified.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/load-balancer-source-ranges: 10.0.0.0/24
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-scheme specifies whether the NLB will be internet-facing or internal. Valid values are internal, internet-facing. If not specified, default is internal.

      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-internal specifies whether the NLB will be internet-facing or internal.

      +
      +

      deprecation note

      +

      This annotation is deprecated starting v2.2.0 release in favor of the new aws-load-balancer-scheme annotation. It will be supported, but in case of ties, the aws-load-balancer-scheme gets precedence.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-internal: "true"
+
      +
      + +
      +

      When this annotation is not present, the controller will automatically create one security group. The security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports. +Also, the securityGroups for target instances/ENIs will be modified to allow inbound traffic from this securityGroup.

      +
      +
      +

      If you specify this annotation, you need to configure the security groups on your target instances/ENIs to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the security group rules.

      +
      +
      +

      Both name and ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-security-groups: sg-xxxx, nameOfSg1, nameOfSg2
+
      +
      +
      • +
    • +

      service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules specifies whether the controller should automatically add the ingress rules to the instance/ENI security group.

      +
      +

      If you disable the automatic management of security group rules for an NLB, you will need to manually add appropriate ingress rules to your EC2 instance or ENI security groups to allow access to the traffic and health check ports.

      +
      +
      +

      Example

      +
      service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules: "false"
+
      +
      +
      • +
    +

    Legacy Cloud Provider

    +

    The AWS Load Balancer Controller manages Kubernetes Services in a compatible way with the AWS cloud provider's legacy service controller.

    +
      +
    • For users on v2.5.0+, The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerCLass field for Serive of type LoadBalancer, effectively making the AWS LBC the default controller for Service of type LoadBalancer. + Users can disable this feature and revert to using the AWS Cloud Controller Manager as the default service controller by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false .
      • +
    • For users on older versions, the annotation service.beta.kubernetes.io/aws-load-balancer-type is used to determine which controller reconciles the service. If the annotation value is nlb-ip or external, + recent versions of the legacy cloud provider ignore the Service resource so that the AWS LBC can take over. For all other values of the annotation, the legacy cloud provider will handle the service. + Note that this annotation should be specified during service creation and not edited later. Support for the annotation was added to the legacy cloud provider in Kubernetes v1.20, and is backported to v1.18.18+ and v1.19.10+.
      • +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/service/nlb/index.html b/v2.7/guide/service/nlb/index.html new file mode 100644 index 000000000..fe0ba017f --- /dev/null +++ b/v2.7/guide/service/nlb/index.html @@ -0,0 +1,1456 @@ + + + + + + + + + + + + + + + + + Network Load Balancer - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Network Load Balancer

    +

    The AWS Load Balancer Controller (LBC) supports reconciliation for Kubernetes Service resources of type LoadBalancer by provisioning an AWS Network Load Balancer (NLB) with an instance or ip target type.

    +
    +

    Secure by default

    +

    Since the v2.2.0 release, the LBC provisions an internal NLB by default.

    +

    To create an internet-facing NLB, the following annotation is required on your service:

    +
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
+
    +
    +

    For backwards compatibility, if the service.beta.kubernetes.io/aws-load-balancer-scheme annotation is absent, an existing NLB's scheme remains unchanged.

    +
    +
    +

    Prerequisites

    +
      +
    • LBC >= v2.2.0
      • +
    • For Kubernetes Service resources of type LoadBalancer:
        +
      • Kubernetes >= v1.20 or
        • +
      • Kubernetes >= v1.19.10 for 1.19 or
        • +
      • Kubernetes >= v1.18.18 for 1.18 or
        • +
      • EKS >= v1.16
        • +
      +
      • +
    • For Kubernetes Service resources of type NodePort:
        +
      • Kubernetes >= v1.16
        • +
      +
      • +
    • For ip target type:
        +
      • Pods have native AWS VPC networking configured. For more information, see the Amazon VPC CNI plugin documentation.
        • +
      +
      • +
    +

    Configuration

    +

    By default, Kubernetes Service resources of type LoadBalancer get reconciled by the Kubernetes controller built into the CloudProvider component of the kube-controller-manager or the cloud-controller-manager(also known as the in-tree controller).

    +

    In order for the LBC to manage the reconciliation of Kubernetes Service resources of type LoadBalancer, you need to offload the reconciliation from the in-tree controller to the LBC, explicitly.

    +
    +

    The LBC supports the LoadBalancerClass feature since the v2.4.0 release for Kubernetes v1.22+ clusters.

    +

    The LoadBalancerClass feature provides a CloudProvider agnostic way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller.

    +

    When you specify the spec.loadBalancerClass to be service.k8s.aws/nlb on a Kubernetes Service resource of type LoadBalancer, the LBC takes charge of reconciliation by provisioning an NLB.

    +
    +

    Warning

    +
      +
    • +

      If you modify a Service resource with matching spec.loadBalancerClass by changing its type from LoadBalancer to anything else, the controller will cleanup the provisioned NLB for that Service.

      +
      • +
    • +

      If the spec.loadBalancerClass is set to a loadBalancerClass that isn't recognized by the LBC, it ignores the Service resource, regardless of the service.beta.kubernetes.io/aws-load-balancer-type annotation.

      +
      • +
    +
    +
    +

    Tip

    + +
    +
    +

    Example: instance mode

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: echoserver
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
+spec:
+  selector:
+    app: echoserver
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP
+  type: LoadBalancer
+  loadBalancerClass: service.k8s.aws/nlb
+
    +
    +
    +

    Example: ip mode

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: echoserver
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
+spec:
+  selector:
+    app: echoserver
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP
+  type: LoadBalancer
+  loadBalancerClass: service.k8s.aws/nlb
+
    +
    +
    +
    +

    The AWS in-tree controller supports an AWS specific way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller.

    +

    When you specify the service.beta.kubernetes.io/aws-load-balancer-type annotation to be external on a Kubernetes Service resource of type LoadBalancer, the in-tree controller ignores the Service resource. In addition, if you specify the service.beta.kubernetes.io/aws-load-balancer-nlb-target-type annotation on the Service resource, the LBC takes charge of reconciliation by provisioning an NLB.

    +
    +

    Warning

    +
      +
    • +

      It's not recommended to modify or add the service.beta.kubernetes.io/aws-load-balancer-type annotation on an existing Service resource. If a change is desired, delete the existing Service resource and create a new one instead of modifying an existing Service.

      +
      • +
    • +

      If you modify this annotation on an existing Service resource, you might end up with leaked LBC resources.

      +
      • +
    +
    +
    +

    backwards compatibility for nlb-ip type

    +

    For backwards compatibility, both the in-tree and LBC controller supports nlb-ip as a value for the service.beta.kubernetes.io/aws-load-balancer-type annotation. The controllers treats it as if you specified both of the following annotations: +

    service.beta.kubernetes.io/aws-load-balancer-type: external
+service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
+

    +
    +
    +

    Example: instance mode

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: echoserver
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-type: external
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
+spec:
+  selector:
+    app: echoserver
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP
+  type: LoadBalancer
+
    +
    +
    +

    Example: ip mode

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: echoserver
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-type: external
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
+spec:
+  selector:
+    app: echoserver
+  ports:
+    - port: 80
+      targetPort: 8080
+      protocol: TCP
+  type: LoadBalancer
+
    +
    +
    +
    +

    Protocols

    +

    The LBC supports both TCP and UDP protocols. The controller also configures TLS termination on your NLB if you configure the Service with a certificate annotation.

    +

    In the case of TCP, an NLB with IP targets doesn't pass the client source IP address, unless you specifically configure it to using target group attributes. Your application pods might not see the actual client IP address, even if the NLB passes it along. For example, if you're using instance mode with externalTrafficPolicy set to Cluster. +In such cases, you can configure NLB proxy protocol v2 using an annotation if you need visibility into +the client source IP address on your application pods.

    +

    To enable proxy protocol v2, apply the following annotation to your Service: +

    service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: "*"
+

    +
    +

    If you enable proxy protocol v2, NLB health checks with HTTP/HTTPS only work if the health check port supports proxy protocol v2. Due to this behavior, you shouldn't configure proxy protocol v2 with NLB instance mode and externalTrafficPolicy set to Local.

    +
    +

    Subnet tagging requirements

    +

    See Subnet Discovery for details on configuring Elastic Load Balancing for public or private placement.

    +

    Security group

    +
      +
    • From v2.6.0, the AWS LBC creates and attaches frontend and backend security groups to NLB by default. For more information please see the security groups documentation
      • +
    • In older versions, the controller by default adds inbound rules to the worker node security groups, to allow inbound traffic from an NLB.
      • +
    +
    +

    disable worker node security group rule management

    +

    You can disable the worker node security group rule management using an annotation.

    +
    +

    Worker node security groups selection

    +

    The controller automatically selects the worker node security groups that it modifies to allow inbound traffic using the following rules:

    +
      +
    • For instance mode, the security group of each backend worker node's primary elastic network interface (ENI) is selected.
      • +
    • For ip mode, the security group of each backend pod's ENI is selected.
      • +
    +
    +

    Multiple security groups on an ENI

    +

    If there are multiple security groups attached to an ENI, the controller expects only one security group tagged with following tags:

    + + + + + + + + + + + + + +
    KeyValue
    kubernetes.io/cluster/${cluster-name}owned or shared
    +

    ${cluster-name} is the name of the Kubernetes cluster.

    +
    +

    If it is possible for multiple security groups with the tag kubernetes.io/cluster/${cluster-name} to be on a target ENI, you may use the --service-target-eni-security-group-tags flag to specify additional tags that must also match in order for a security group to be used.

    +

    Worker node security groups rules

    +
    + + + + + + + + + + + + + + + + + + + + + + + +
    RuleProtocolPort(s)IpRanges(s)
    Client Trafficspec.ports[*].protocolspec.ports[*].portTraffic Source CIDRs
    Health Check TrafficTCPHealth Check PortsNLB Subnet CIDRs
    +
    +
    + + + + + + + + + + + + + + + + + + + + + + + +
    RuleProtocolPort(s)IpRange(s)
    Client Trafficspec.ports[*].protocolspec.ports[*].portNLB Subnet CIDRs
    Health Check TrafficTCPHealth Check PortsNLB Subnet CIDRs
    +
    +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/targetgroupbinding/spec/index.html b/v2.7/guide/targetgroupbinding/spec/index.html new file mode 100644 index 000000000..ce09d8dc1 --- /dev/null +++ b/v2.7/guide/targetgroupbinding/spec/index.html @@ -0,0 +1,1579 @@ + + + + + + + + + + + + + + + + + Specification - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    + + + + + + + +

    Specification

    + +

    Packages:

    + +

    elbv2.k8s.aws/v1beta1

    +

    +

    Package v1beta1 contains API Schema definitions for the elbv2 v1beta1 API group

    +

    +

    Resource Types:

    + +

    TargetGroupBinding +

    +

    +

    TargetGroupBinding is the Schema for the TargetGroupBinding API

    +

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    FieldDescription
    +apiVersion
    +string    		 + +elbv2.k8s.aws/v1beta1 + +
    +kind
    +string +    		TargetGroupBinding
    +metadata
    + + +Kubernetes meta/v1.ObjectMeta + + +    		 +Refer to the Kubernetes API documentation for the fields of the +metadata field. +
    +spec
    + + +TargetGroupBindingSpec + + +    		 +
    +
    + + + + + + + + + + + + + + + + + +
    +targetGroupARN
    + +string + +    		 +

    targetGroupARN is the Amazon Resource Name (ARN) for the TargetGroup.

    +
    +targetType
    + + +TargetType + + +    		 +(Optional) +

    targetType is the TargetType of TargetGroup. If unspecified, it will be automatically inferred.

    +
    +serviceRef
    + + +ServiceReference + + +    		 +

    serviceRef is a reference to a Kubernetes Service and ServicePort.

    +
    +networking
    + + +TargetGroupBindingNetworking + + +    		 +(Optional) +

    networking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup.

    +
    +
    +status
    + + +TargetGroupBindingStatus + + +    		 +
    +

    IPBlock +

    +

    +(Appears on: +NetworkingPeer) +

    +

    +

    IPBlock defines source/destination IPBlock in networking rules.

    +

    + + + + + + + + + + + + + +
    FieldDescription
    +cidr
    + +string + +    		 +

    CIDR is the network CIDR. +Both IPV4 or IPV6 CIDR are accepted.

    +
    +

    NetworkingIngressRule +

    +

    +(Appears on: +TargetGroupBindingNetworking) +

    +

    +

    NetworkingIngressRule defines a particular set of traffic that is allowed to access TargetGroup’s targets.

    +

    + + + + + + + + + + + + + + + + + +
    FieldDescription
    +from
    + + +[]NetworkingPeer + + +    		 +

    List of peers which should be able to access the targets in TargetGroup. +At least one NetworkingPeer should be specified.

    +
    +ports
    + + +[]NetworkingPort + + +    		 +

    List of ports which should be made accessible on the targets in TargetGroup. +If ports is empty or unspecified, it defaults to all ports with TCP.

    +
    +

    NetworkingPeer +

    +

    +(Appears on: +NetworkingIngressRule) +

    +

    +

    NetworkingPeer defines the source/destination peer for networking rules.

    +

    + + + + + + + + + + + + + + + + + +
    FieldDescription
    +ipBlock
    + + +IPBlock + + +    		 +(Optional) +

    IPBlock defines an IPBlock peer. +If specified, none of the other fields can be set.

    +
    +securityGroup
    + + +SecurityGroup + + +    		 +(Optional) +

    SecurityGroup defines a SecurityGroup peer. +If specified, none of the other fields can be set.

    +
    +

    NetworkingPort +

    +

    +(Appears on: +NetworkingIngressRule) +

    +

    +

    NetworkingPort defines the port and protocol for networking rules.

    +

    + + + + + + + + + + + + + + + + + +
    FieldDescription
    +protocol
    + + +NetworkingProtocol + + +    		 +

    The protocol which traffic must match. +If protocol is unspecified, it defaults to TCP.

    +
    +port
    + +k8s.io/apimachinery/pkg/util/intstr.IntOrString + +    		 +(Optional) +

    The port which traffic must match. +When NodePort endpoints(instance TargetType) is used, this must be a numerical port. +When Port endpoints(ip TargetType) is used, this can be either numerical or named port on pods. +if port is unspecified, it defaults to all ports.

    +
    +

    NetworkingProtocol +(string alias)

    +

    +(Appears on: +NetworkingPort) +

    +

    +

    NetworkingProtocol defines the protocol for networking rules.

    +

    +

    SecurityGroup +

    +

    +(Appears on: +NetworkingPeer) +

    +

    +

    SecurityGroup defines reference to an AWS EC2 SecurityGroup.

    +

    + + + + + + + + + + + + + +
    FieldDescription
    +groupID
    + +string + +    		 +

    GroupID is the EC2 SecurityGroupID.

    +
    +

    ServiceReference +

    +

    +(Appears on: +TargetGroupBindingSpec) +

    +

    +

    ServiceReference defines reference to a Kubernetes Service and its ServicePort.

    +

    + + + + + + + + + + + + + + + + + +
    FieldDescription
    +name
    + +string + +    		 +

    Name is the name of the Service.

    +
    +port
    + +k8s.io/apimachinery/pkg/util/intstr.IntOrString + +    		 +

    Port is the port of the ServicePort.

    +
    +

    TargetGroupBindingNetworking +

    +

    +(Appears on: +TargetGroupBindingSpec) +

    +

    +

    TargetGroupBindingNetworking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup.

    +

    + + + + + + + + + + + + + +
    FieldDescription
    +ingress
    + + +[]NetworkingIngressRule + + +    		 +(Optional) +

    List of ingress rules to allow ELBV2 LoadBalancer to access targets in TargetGroup.

    +
    +

    TargetGroupBindingSpec +

    +

    +(Appears on: +TargetGroupBinding) +

    +

    +

    TargetGroupBindingSpec defines the desired state of TargetGroupBinding

    +

    + + + + + + + + + + + + + + + + + + + + + + + + + +
    FieldDescription
    +targetGroupARN
    + +string + +    		 +

    targetGroupARN is the Amazon Resource Name (ARN) for the TargetGroup.

    +
    +targetType
    + + +TargetType + + +    		 +(Optional) +

    targetType is the TargetType of TargetGroup. If unspecified, it will be automatically inferred.

    +
    +serviceRef
    + + +ServiceReference + + +    		 +

    serviceRef is a reference to a Kubernetes Service and ServicePort.

    +
    +networking
    + + +TargetGroupBindingNetworking + + +    		 +(Optional) +

    networking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup.

    +
    +

    TargetGroupBindingStatus +

    +

    +(Appears on: +TargetGroupBinding) +

    +

    +

    TargetGroupBindingStatus defines the observed state of TargetGroupBinding

    +

    + + + + + + + + + + + + + +
    FieldDescription
    +observedGeneration
    + +int64 + +    		 +(Optional) +

    The generation observed by the TargetGroupBinding controller.

    +
    +

    TargetType +(string alias)

    +

    +(Appears on: +TargetGroupBindingSpec) +

    +

    +

    TargetType is the targetType of your ELBV2 TargetGroup.

    +
      +
    • with instance TargetType, nodes with nodePort for your service will be registered as targets
      • +
    • with ip TargetType, Pods with containerPort for your service will be registered as targets
      • +
    +

    +
    +

    +Generated with gen-crd-api-reference-docs +on git commit 21418f44. +

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/targetgroupbinding/targetgroupbinding/index.html b/v2.7/guide/targetgroupbinding/targetgroupbinding/index.html new file mode 100644 index 000000000..a34d10736 --- /dev/null +++ b/v2.7/guide/targetgroupbinding/targetgroupbinding/index.html @@ -0,0 +1,1237 @@ + + + + + + + + + + + + + + + + + TargetGroupBinding - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    TargetGroupBinding

    +

    TargetGroupBinding is a custom resource (CR) that can expose your pods using an existing ALB TargetGroup or NLB TargetGroup.

    +

    This will allow you to provision the load balancer infrastructure completely outside of Kubernetes but still manage the targets with Kubernetes Service.

    +
    +

    usage to support Ingress and Service

    +

    The AWS LoadBalancer controller internally used TargetGroupBinding to support the functionality for Ingress and Service resource as well. +It automatically creates TargetGroupBinding in the same namespace of the Service used.

    +

    You can view all TargetGroupBindings in a namespace by kubectl get targetgroupbindings -n <your-namespace> -o wide

    +
    +

    TargetType

    +

    TargetGroupBinding CR supports TargetGroups of either instance or ip TargetType.

    +
    +

    If TargetType is not explicitly specified, a mutating webhook will automatically call AWS API to find the TargetType for your TargetGroup and set it to correct value.

    +
    +

    Sample YAML

    +
    apiVersion: elbv2.k8s.aws/v1beta1
+kind: TargetGroupBinding
+metadata:
+  name: my-tgb
+spec:
+  serviceRef:
+    name: awesome-service # route traffic to the awesome-service
+    port: 80
+  targetGroupARN: <arn-to-targetGroup>
+
    +

    NodeSelector

    +

    Default Node Selector

    +

    For TargetType: instance, all nodes of a cluster that match the following +selector are added to the target group by default:

    +
    matchExpressions:
+  - key: node-role.kubernetes.io/master
+    operator: DoesNotExist
+  - key: node.kubernetes.io/exclude-from-external-load-balancers
+    operator: DoesNotExist
+  - key: alpha.service-controller.kubernetes.io/exclude-balancer
+    operator: DoesNotExist
+  - key: eks.amazonaws.com/compute-type
+    operator: NotIn
+    values: ["fargate"]
+
    +

    Custom Node Selector

    +

    TargetGroupBinding CR supports NodeSelector which is a +LabelSelector. This will select nodes to attach to the +instance TargetType target group and is merged with the default node +selector above.

    +
    apiVersion: elbv2.k8s.aws/v1beta1
+kind: TargetGroupBinding
+metadata:
+  name: my-tgb
+spec:
+  nodeSelector:
+    matchLabels:
+      foo: bar
+  ...
+
    +

    Reference

    +

    See the reference for TargetGroupBinding CR

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/tasks/cognito_authentication/index.html b/v2.7/guide/tasks/cognito_authentication/index.html new file mode 100644 index 000000000..ad2c04037 --- /dev/null +++ b/v2.7/guide/tasks/cognito_authentication/index.html @@ -0,0 +1,1164 @@ + + + + + + + + + + + + + + + + + Cognito Authentication - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Setup Cognito/AWS Load Balancer Controller

    +

    This document describes how to install AWS Load Balancer Controller with AWS Cognito integration to minimal capacity, other options and or configurations may be required for production, and on an app to app basis.

    +

    Assumptions

    +

    The following assumptions are observed regarding this procedure.

    +
      +
    • ExternalDNS is installed to the cluster and will provide a custom URL for your ALB. To setup ExternalDNS refer to the install instructions.
      • +
    +

    Cognito Configuration

    +

    Configure Cognito for use with AWS Load Balancer Controller using the following links with specified caveats.

    + +

    AWS Load Balancer Controller Setup

    +

    Install the AWS Load Balancer Controller using the install instructions with the following caveats.

    +
      +
    • When setting up IAM Role Permissions, add the cognito-idp:DescribeUserPoolClient permission to the example policy.
      • +
    +

    Deploying an Ingress

    +

    Using the cognito-ingress-template you can fill in the <required> variables to create an ALB ingress connected to your Cognito user pool for authentication.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/tasks/migrate_legacy_apps/index.html b/v2.7/guide/tasks/migrate_legacy_apps/index.html new file mode 100644 index 000000000..81c0f32b0 --- /dev/null +++ b/v2.7/guide/tasks/migrate_legacy_apps/index.html @@ -0,0 +1,1061 @@ + + + + + + + + + + + + + + + + + Migrating From Legacy Apps with Manually Configured Target Groups - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Migrating From Legacy Apps with Manually Configured Target Groups

    +

    Many organizations are decomposing old legacy apps into smaller services and components.

    +

    During the transition they may be running a hybrid ecosystem with some parts of the app running in ec2 instances, +some in Kubernetes microservices, and possibly even some in serverless environments like Lambda.

    +

    The existing clients of the application expect all endpoints under one DNS entry and it's desirable to be able +to route traffic at the ALB to services running outside the Kubernetes cluster.

    +

    The actions annotation allows the definition of a forward rule to a previously configured target group. +Learn more about the actions annotation at +alb.ingress.kubernetes.io/actions.${action-name}

    +

    Example Ingress Manifest

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: testcase
+  name: echoserver
+  annotations:
+    alb.ingress.kubernetes.io/actions.legacy-app: '{"Type": "forward", "TargetGroupArn": "legacy-tg-arn"}'
+spec:
+  ingressClassName: alb
+  rules:
+    - http:
+        paths:
+          - path: /v1/endpoints
+            pathType: Exact
+            backend:
+              service:
+                name: legacy-app
+                port:
+                  name: use-annotation
+          - path: /normal-path
+            pathType: Exact
+            backend:
+              service:
+                name: echoserver
+                port:
+                  number: 80
+
    +
    +

    Note

    +

    The TargetGroupArn must be set and the user is responsible for configuring the Target group in AWS before applying +the forward rule.

    +
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/tasks/ssl_redirect/index.html b/v2.7/guide/tasks/ssl_redirect/index.html new file mode 100644 index 000000000..1e98e4478 --- /dev/null +++ b/v2.7/guide/tasks/ssl_redirect/index.html @@ -0,0 +1,1155 @@ + + + + + + + + + + + + + + + + + SSL Redirect - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Redirect Traffic from HTTP to HTTPS

    +

    You can use the alb.ingress.kubernetes.io/ssl-redirect annotation to setup an ingress to redirect http traffic to https

    +

    Example Ingress Manifest

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: default
+  name: ingress
+  annotations:
+    alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx
+    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
+    alb.ingress.kubernetes.io/ssl-redirect: '443'
+spec:
+  ingressClassName: alb
+  rules:
+    - http:
+        paths:
+         - path: /users/*
+           pathType: ImplementationSpecific
+           backend:
+             service:
+               name: user-service
+               port:
+                 number: 80
+         - path: /*
+           pathType: ImplementationSpecific
+           backend:
+             service:
+               name: default-service
+               port:
+                 number: 80
+
    +
    +

    Note

    +
      +
    • alb.ingress.kubernetes.io/listen-ports annotation must at least include [{"HTTP": 80}, {"HTTPS":443}] to listen on 80 and 443.
      • +
    • alb.ingress.kubernetes.io/certificate-arn annotation must be set to allow listen for HTTPS traffic
      • +
    • the ssl-redirect port must appear in the listen-port annotation, and must be an HTTPS port
      • +
    +
    +

    How it works

    +

    If you enable SSL redirection, the controller configures each HTTP listener with a default action to redirect to HTTPS. The controller does not add any other rules to the HTTP listener.

    +

    For the above example, the HTTP listener on port 80 will have a single default rule to redirect traffic to HTTPS on port 443.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/use_cases/blue_green/index.html b/v2.7/guide/use_cases/blue_green/index.html new file mode 100644 index 000000000..2031a361f --- /dev/null +++ b/v2.7/guide/use_cases/blue_green/index.html @@ -0,0 +1,1183 @@ + + + + + + + + + + + + + + + + + Blue/Green - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Split Traffic

    +

    You can configure an Application Load Balancer (ALB) to split traffic from the same listener across multiple target groups using rules. This facilitates A/B testing, blue/green deployment, and traffic management without additional tools. The Load Balancer Controller (LBC) supports defining this behavior alongside the standard configuration of an Ingress resource.

    +

    More specifically, the ALB supports weighted target groups and advanced request routing.

    +

    Weighted target group +Multiple target groups can be attached to the same forward action of a listener rule and specify a weight for each group. It allows developers to control how to distribute traffic to multiple versions of their application. For example, when you define a rule having two target groups with weights of 8 and 2, the load balancer will route 80 percent of the traffic to the first target group and 20 percent to the other.

    +

    Advanced request routing +In addition to the weighted target group, AWS announced the advanced request routing feature in 2019. Advanced request routing gives developers the ability to write rules (and route traffic) based on standard and custom HTTP headers and methods, the request path, the query string, and the source IP address. This new feature simplifies the application architecture by eliminating the need for a proxy fleet for routing, blocks unwanted traffic at the load balancer, and enables the implementation of A/B testing.

    +

    Overview

    +

    The ALB is configured to split traffic using annotations on the ingress resrouces. More specifically, the ingress annotation alb.ingress.kubernetes.io/actions.${service-name} configures custom actions on the listener.

    +

    The body of the annotation is a JSON document that identifies an action type, and configures it. The supported actions are redirect, forward, and fixed-response.

    +

    With forward action, multiple target groups with different weights can be defined in the annotation. The LBC provisions the target groups and configures the listener rules as per the annotation to direct the traffic.

    +

    Importantly: +* The action-name in the annotation must match the service name in the Ingress rules. For example, the annotation alb.ingress.kubernetes.io/actions.blue-green matches the service name blue-green referenced in the Ingress rules. +* The servicePort of the service in the Ingress rules must be use-annotation.

    +

    Example

    +

    The following ingress resource configures the ALB to forward all traffic to hello-kubernetes-v1 service (weight: 100 vs. 0).

    +

    Note that the annotation name includes blue-green, which matches the service name referenced in the ingress rules.

    +

    The annotation reference includes further examples of the JSON configuration for different actions.

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: "hello-kubernetes"
+  namespace: "hello-kubernetes"
+  annotations:
+    kubernetes.io/ingress.class: alb
+    alb.ingress.kubernetes.io/scheme: internet-facing
+    alb.ingress.kubernetes.io/target-type: ip
+    alb.ingress.kubernetes.io/actions.blue-green: |
+      {
+        "type":"forward",
+        "forwardConfig":{
+          "targetGroups":[
+            {
+              "serviceName":"hello-kubernetes-v1",
+              "servicePort":"80",
+              "weight":100
+            },
+            {
+              "serviceName":"hello-kubernetes-v2",
+              "servicePort":"80",
+              "weight":0
+            }
+          ]
+        }
+      }
+  labels:
+    app: hello-kubernetes
+spec:
+  rules:
+    - http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: blue-green
+                port:
+                  name: use-annotation
+
    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/use_cases/frontend_sg/index.html b/v2.7/guide/use_cases/frontend_sg/index.html new file mode 100644 index 000000000..fe5cc9c68 --- /dev/null +++ b/v2.7/guide/use_cases/frontend_sg/index.html @@ -0,0 +1,1315 @@ + + + + + + + + + + + + + + + + + Restrict Access with Frontend Security Groups - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Frontend Security Groups

    + +

    Frontend security groups limit client/internet traffic with a load balancer. This improves security by preventing unauthorized access to cluster services, and blocking unexpected outbound connections. Both AWS Network Load Balancers (NLBs) and Application Load Balancers (ALBs) support frontend security groups. Learn more about how the Load Balancer Controller uses Frontend and Backend Security Groups.

    +

    Solution Overview

    +

    Load balancers expose cluster workloads to a wider network. Creating a frontend security group limits access to these workloads (service or ingress resources). More specifically, a security group acts as a virtual firewall to control incoming and outgoing traffic. Inbound rules control the incoming traffic to your load balancer, and outbound rules control the outgoing traffic from your load balancer.

    +

    Security groups are particularly suited for defining what access other AWS resources (services, EC2 instances) have to your cluster. For example, if you have an existing security group including EC2 instances, you can permit only that security group to access a service.

    +

    In this example, you will restrict access to a cluster service. You will create a new security group for the frontend of a load balancer, and add an inbound rule permitting traffic. The rule may limit traffic to a specific port, CIDR, or existing security group.

    +

    Prerequisites

    + +

    Configure

    +

    1. Find the VPC ID of your cluster

    +
    $ aws eks describe-cluster --name <cluster-name> --query "cluster.resourcesVpcConfig.vpcId" --output text
+
+vpc-0101XXXXa356
+
    +

    Ensure you have the right cluster name, AWS region, and the AWS CLI is configured.

    +

    2. Create a security group using the VPC ID

    +
    $ aws ec2 create-security-group --group-name <sg-name> --description <description> --vpc-id <vpc-id>
+
+{
+    "GroupId": "sg-0406XXXX645c"
+}
+
    +

    Note the security group ID. This will be the frontend security group for the load balancer.

    +

    3. Create your ingress rules

    +

    Load balancers generally serve as an entrypoint for clients to access your cluster. This makes ingress rules especially important.

    +

    For example, this rule permits all traffic on port 443:

    +
    aws ec2 authorize-security-group-ingress --group-id <sg-id> --protocol all --port 443 --cidr 0.0.0.0/0
+
    +

    Learn more about how to create an ingress rule with the AWS CLI.

    +

    4. Determine your egress rules (optional)

    +

    By default, all outbound traffic is allowed. Further, security groups are stateful, and responses to an allowed connection will also be permitted.

    +

    Learn how to create an egress rule with the AWS CLI.

    +

    5. Add the security group annotation to your Ingress or Service

    +

    For Ingress resources, add the following annotation:

    +
    apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: frontend
+  annotations:
+    alb.ingress.kubernetes.io/security-groups: <sg-id>
+
    +

    For Service resources, add the following annotation:

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: frontend
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-security-groups: <sg-id>
+spec:
+    type: LoadBalancer
+    loadBalancerClass: service.k8s.aws/nlb
+
    +

    For Ingress resources, the associated Application Load Balancer will be updated. For Service resources, the associated Network Load Balancer will be updated.

    +

    6. List your load balancers and verify the security groups are attached

    +
    $ aws elbv2 describe-load-balancers
+
+{
+    "LoadBalancers": [
+        {
+            "LoadBalancerArn": "arn:aws:elasticloadbalancing:us-east-1:1853XXXX5115:loadbalancer/net/k8s-default-frontend-ae3743b818/3ad6d16fb75ff688",
+            <...>
+            "SecurityGroups": [
+                "sg-0406XXXX645c",
+                "sg-0873XXXX2bef"
+            ],
+            "IpAddressType": "ipv4"
+        }
+    ]
+}
+
    +

    If you don't see the security groups, verify:

    +
      +
    • The Load Balancer Controller is properly installed.
      • +
    • The controller has proper IAM permissions to modify load balancers. Look at the logs of the controller pods for IAM errors.
      • +
    +

    7. Clean up (Optional)

    +

    Removing the annotations from Service/Ingress resources will revert to the default frontend ecurity groups.

    +

    Load balancers may be costly. Delete Ingress and Service resources to deprovision the load balancers. If the load balancers are deleted from the console, they may be recreated by the controller.

    + + + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/use_cases/nlb_tls_termination/cert_arn.png b/v2.7/guide/use_cases/nlb_tls_termination/cert_arn.png new file mode 100644 index 0000000000000000000000000000000000000000..9ae876a675cb854ff07f38d3708baed371544a5b GIT binary patch literal 234446 zcmZ^LbzGBSxHiqmjgpeVXrx2BLqL>L3F#70I!AXSj0Q;wQIW<`qmhlSNZilzRF$Il;;)8q)omIEy3GB$bI%5OH|U_j92y%&DJ>%T#IrdH1)5Oat* zKgXSe-HkoJgZX+vYk$`-cl#Oj-?R#z6>&p;{`{$b(EA`>*$xdhmi;dS^}WJ^%eN;xggG zRF{nE&B6N%304XUiu36YWZO;$+h8@pR+$9c(};ezhxhL(i6%+GXx=$ZN5oc|0V z7VkNqb=4r4`0@RF-}jP|9Xu`EH{D+#Frit1Z!n+3+ZXPi=Pol{%SRp%M8!;74{;g;|-^QjuOjgIuD;h(I(|sJ$J@`KY#w*t}B+>W5MrY>bJ;(T?{2Je1EQS zqC3sS-0kXkP1s{sPvUAdX@$gtLVJur4O=@tqZxn>VZaIv1c5N*WdZ;D$&fmU%5es$ z(8|i{d{E+GvVJ4y!>cbZqUH;}f}^w~l_pFA{3LF6tL=MW5FCytj5XP*KgLM^^-cf% z8w}Q149|VecWqtQ2P#b-t|!j-8xNi#hZ)buw?>QOvz^-UgrSF~9j>nnZ3gR}xMpkqT%G>=9b#qF?nd%tLz3RklS~AZPt9R_i-%#ohQJG zCC-lFtuiJ@p#GlVU(@ahMzh?kFzfh%K+GEZ9w~8dEwr@k!Dk$tWrn$y+@Bx;qIjRY z23!TA)d7GYNd_46v#Xrj?1)W@uz!zps1I*i-IXWlDT)WJ?>t7+p;PTli z|Jz2656^E>Embp+lXfzbV@tc5+wNrLTWJ%jI*JkyI{>35A=m% z+Bd<>Usb~X8M8sbjIH1I^TATyU<4~h#yJ4=h888f08 zT*Zu!OTe_{_}9o}0n8-qoSfD9t9X7$84UG2*&h|jIa2s6s2p+Q!us0H^;!9}y(aFB z$B54VNg7me$_itp@1z};FOmuiy^PRss;zp>0Klv^ZCm?()%zuyo2XdL*LL|kp7T?g z=6sL|bfKn5o@i`o@b_ zZMv2JJ5~Q9C2U?|J;(nv{NN~} z^kMAchn-SU*w0m+(SkCl^~e(!vzJ6L0oHfMz_oUaID>9-5}qjx}I1wXHP zy4wo&nG7{1%g42KZBj;`l(CFIAVmeZI1k2{*#+@Sf5+!>&*f(#H@;1We98M#@sHxi zfOQ-%YZf_th_kUAUp!Osa62=u*F39@So~&PF209ZIpjJ;y5n^$SJkxjEJCc zvu2Hc@=ERAT=1G34*pd%&OJB!ynW>MyX^O7`|91>qK6uVN4|C@v`(6l_U`z?S*a$y zKs?e%H^qnAB{Rulq%O@HvE_p~Wi<=vf_Q>u6MSUWxLbk@Yoc9fU66b5XI4c;&->-amJD4Shx3 z8f~hR{KjRu2KN1|7WYM8werkEC)2iC`#7?0WB4Ss~xnK3o34 zp1tbDrv2$g zf$_VnBiFY5jxF0Q(eJpIP3JL~;qN>DSlWW%3JeFlCeI^!{ikTlrxx{d-+uQzkTrjI zWZv1q5Be&FX)AuX#b&=g`H>q@b|;AJPH9u2Owrp4wzhM+sO6?Ozaw;f_T3fs!X==S zvS-A&DW>!xQNms)w?eT6;6kp^mxAp$+?^(6U7n&|U6n7LVED@-1?GDRwi%Iy;T#Ol zvv}+T|L7a(v19dq<=6l%m(jidWU;&1B^N%kgJ^gumff)0 zySaT}E_&*=bk9hL$5UD_XsfGf-F)4Ko$#6dI)PcW`LAeiM`6jC?;ZXXTn|chgR~8t zm`8hF%OcDY7mzsxuWN8@sA?A_CiA_QuYa`L_wS$JCO;N-6kB$bX0sFm;x>Oh^=I0g zOtku)u~iQ)k?_t*qPmuv>T50Enmh-X$~c((9%ePj5Mcw)G5x!23elsBW(Omr3MXp5 zjW;oal0d0McoP`5e>|6hFI~R0YFYuQgU{aHe>&R)msP*d(p1$Jx{ckqq*OsRE76Cg z3I4`kpgruu-)h!5f&V!NgjyVux@#x1--Vp8C*WKorFVsA)?edl{HY6-%5r>(hy7Y& zV{1`MVrZlTSb5rNBoD`!GHepHAtCRS5Q4URdEa6FV7#*3PB=OIo)TfVMM2PhhQnvi z0ED?aHl3xSR%Z8v^iZKtS;W?tOuOkC+XN8HfHJ+G<%F?MX-Zm}vU!3NQt~8L>aZ2_ z%na;zswHuEI=biCa+5t5@Nk!q>_*C;AsM=j@H*K&2zY3`Tc&KOka@U5{)J1OR$aYL z_5R8xY*JA-KdJ|-R^nx(N$U}O8^HuT6?kN0a#ue5bsn8En$>#bOlXbSySwWQe)*<+&O_OM_E?-d|n$ zpNqGAo;!(YT<%5Dsp8uK+D*(Ow4=$dSj%ORX#(6vG^s7tY)9t4e*{B5&?{OCNIwjc z&};BehWW{3YEdCLFxPrB-e8p@<3GH^1rCAeS9h(oDb++N9AZA9sb3mszcwSlBb>`VQ}l$%aS%Z(Q@zZvsIL~dp2PbZx)s2q#Bfdy%++tLrPuLEIiy_2!9yoy18h1 zuqR_vuaVfVWAgSS1uy@ssS)x|bas-tK5QdP=1Vj3$jEl-<2aJIs7hN&=eIDQhBaH~ z`oaA!8W(=@`YsWS7i-YdiZ~b!uzBE^g?VxvfvmMvVonT|=|dL+Ze|vCYg_K@Z}&sf zB9z!<(qd!k4jK=nC3Y)1cB9yGz9NewuFlE>?3KY@g}-xUWWFfnsKx-D8$rMpse|4R zp-T-rSz{pwy*`rQ_=z)(^^^~@9Zv^cHGCfNW%65uOQE28$)cL{yw8D@&r%rWc7K)B zhEfCGzmO{m*(sy>uezqPI3D39R^jq0UuU@)vb?v3)T0fL5kaaKPkd> zIca4>$VMFM_2rcmO`g(c%~#`%U#;n^4Lm>i>6t&SH}|{IVZMGmMCUa;l>#`^J2Ho>=RGK>b2A*EP`Aj^C>i=IvqqSUtlUb~ zXFyf`y#n-Qw)h`oueB7FNAtcXzu~`yXB0{84w^3D4|fLvXKI5FHwzEX%y)+uDXxF< z`VUK^@=L|(ep|OC+Bh!F*!!E@{@v|{OuX%ik@wYF+Dw+1tKH#Z+nL%igi1r|Y^*hg z_vtc?l(*aI`D%0S-L5sfgIHoR5FOL*X!(~1>UYBJ-+!>*DXoR0kZQLmG>T}WE?|GQ z9zH0(L)B0juwoG}_3kfn{)_YZ)ytBKjhnocs>pu{&pLIe#HFUBCh`dM-(Y{@c{v2AI}K`!4RbL^AYG~&Ein}3eK36Bj49gtLfdg(==x0y`N@K>c<&N;ckWC3y ze@t(V(^?*%r0EOqvD0cR{Ts}&gD{+!z1W^%rdgzPgyUB2cU1hghH7aGmup>$OK-h3 z0IQ6h1_qglUG{Zq`Q<3ot<8;BPJgE?{mP68WIqj79t!>XA$!qtyBsslQJ6{VbVx?}0er(w*^x=fr3FVo5!N0nvGeMA_65d38;S8p< zxl-1tW=Gh3bE_!wF131Ejlt1yI){d99J@pYC;RH^@HVZ zFv{*wGmKrGjFZ@>O7mD5?w!x&D(apg5g^mX!-%^PnX*huM=K;Rgn;8wOhv321n<|FRyx??+y_#3C1lp$(3s-SXC}Lo|CEy_)tVoHqC3AliUpJ6@ zlIhT3%lvSN@#E{)iWr^-cJFxk5qU1K&u(P`mDSX}*G9HAr7_fuSyOfATX9Zw=#oaj z^=RF0z{jWKk(L{%s$rAWxKq}+t1NS^#q2(8J&?}tvGP&m87W1%9^g+5Z?mX({IZhI zhC-Gw$79;o0~NJ1s1}%!n!xO?>A;WI zdpeQ6FSW*&Vcf{mC{xH*djLtI{8;P2%xg#vS7~{=zuK(-eI_TY2^S1CW%e4T#h`H^ zZ(Nmx;}eIC(BEd=sxt->X~w}8ld+c)gQdepI5Ogz|Ji+SZUgvakTU! zyxOkE`D3S?i4~3Qp+0xFN16IBA7o?w&&_iOT8EPQy&WCZ+SOp!?!Z+|y`3Cl$Aoew z9R-_98EGYm1B=&$U5ZEP6ikuc8(+@Ivu zVcnOQ+?xG%6OO_HnLWB+l6^7__h8(6_#6^X!MbP`(@HStXGZW~;iH9*E-Tt4U zUR9RaqL;E*Vp|HL0Ev+>a<>uK4%8wa6X&{E=8nVr!*VIW46pZBbJ4!s^Q_$I93w-m*6_-Fie`17Oh?B@lGmVL>jRiCAeOu*IkDcZ5?+ zq87{ivYY+J@|OfRoi0E{?yHblUm@5`C^{}y`2q^HNPFvROaEPiKa|z8?vLWfL4PdY z#YAv8|FmxVQlW6{aXPH5%$Vh?5bYBBwfONdw<%CgBja6ChM@H`$L&Jg@`#Wcsna0^ z-71QfF9rWX^5_tl3D&WCEY73e_v4SP1Z(F98>G%FQm~gS|Fqkx zxa+77Z<6>R?^~eOJ=sRlIJ2ha@N-1kuhbwCmm>cWND*=!y=?`*&wpySaPJc~NfXE0 z@+;wkot*M1;i}7J+RjU&@Q@y}Eg>H#c|G~-%22v;6~wNdw3PqtWnC6+6=41;v*ns4UlZzcjpM%^7gJ{dnR3(P0 zV4Wcq%CN=Md#V>anCNkC9TthH7WwkHHK#-s@)BWj#KU3?FaW$h42re9L1)u|j2t>J z+m9U9L>+LNTs=Q6WRZ3&_65OZ0)O1~YWS17zlGcBpPpM?-Ss3et@w2UGom9nu4HxH zHYC7RoxP8+CNV>Kufa~O==@TtMYW!C0e$#4m=Zm{k?$oe-&SRN{@e;mrn#TB-1(W`9^L3(zH)fD zNYL3fOY&iQwuzXqe-pQZS?E*AYX(8ianaTC2Y)<<7FttciOK{sC<>wb7#^FZIIdoG8 zGs1a3hmT&0fK3YeJOg7uP|tZU>j4QY)=nx#nwxj>ou#NH0*)%?<339A%W_YuBy(7% zU_o3G5vOJ?8uQ-=!P!vH{6$gXE>I=I`mKy1MHC~0?LLbknJ%-x2faQtkTJH87m3cJ~&yDK3M-_DalP-n} zl)EJzP=MK4%v-pM0OOG%#N>!POf>v8Ye1*c{NZ({!lV3DZlbI@WA^K&jL+IK1WxxD5+|LA91Xxcb`@L0AfG@nEka{EWPcU2J>|}D3I~mmY>uSt z)gxFESO5Hn@}^}SoZdQt6CnR{>Pj|F(PeHt^pAs}AcQFX@l`09dZbl6>oFK{9Su$?IKHXAq*_I9fk{UQc_Nhn z&4DuFos|7?3iHUNx-mQ3xm(d=R7dhdrCC0lbR&|4X<5K8)m0&S`5VEz*@!IHL9qmK zs|8(v-bgDBsPESvQ;tpdLj}(s?NFF!crr=y~>vXZsyz&h7U$-y{h3^=mIxhBSj6Qrr&%^~zfA2~HfWr}1V1YQ1 z?8Zf}9;i(4lDu<> z%^)`nGG6*5ip<6zL7^~rkRg<7xwm&_6k?Am~3&p$cT+T_j1(#e1zvhxs>47FSi!$a?V>a_HDz7%RC zk9FeVdE6z2uu5_#oK>OJ&;zJo{fH#feiZ)_A==C46Bo?V-=Q zt9z(Ge~32Po5a@br!eIo==WR<>7Ke*&Birf8mgdt4qC(3Fl6I`76@MCQx-n)$~R=_ zXseeZ2$kV2Vl0RKS$yVSfl~2M;40F?8O2XdBn_4H1F0TRK^ik(4f`=kXhlss0&?WR zZ~!fBDtfW*F{a&6Jo|S$)&s;i6#gb_R|HXDzEWyc)ry1B|7LvFVNmpbUGn|UYA}4d z9*K?N_Dqvh{s~3oaQPpS0(xW0!GOocIwtSFHPh-3x0aUL9Aa?>lXE{IFgpscH)No{ z%CpcGKq_E)`Aa@#CbQIFZBx+OSFX#Uu3bQqxI`U-UUbGwv97Fm3ynKv*Ue^*Ag>&k z8HwX#gocA$Lyw?_X#)$POfo70*_K(GU4EO&>8nqdl>$zW5oA0Dcgx~Ob^C>CqS9ct ziOBd{Q0nRBM-cCZ*v1jt5rgD}6xWtBaFy5iD`*;a3hM!7LmTD$NGZ*t`VY=7hlfw- zc;P1jri&QrJd6FfsyP=sM09P^^quTCnZ_=?EG1A)k>s+$f3_C?L67VgFz}l6wR|^v z+OQIb&j4BvpqVCVqVU^=a%1hm)+O;ayOeSn_IpA~~o^@O_OJsyhC1y7IB5Taj z!P)^+KYqLJxc~c$^1G~Fp=u+h-sOYaGSa=TmaqD059s|b zm+HdWK1YCQ(nhN(f){eXWuhpeVdT#ZCMwy$U~BE$TKc33{5v|o$+zelCZ|dNRDnPk z_91A9K*?tWp;C+2xb1k_-+I-y3LJvaUScCfq@Sjw8uQE8os05vl^#$Sa$}Yo(IWgB z&&rq-@H(2mijn4H_ci3(Zvg5T(Qa z>Gqk0Dew0Ii&uD4)Y4`LL$9|qtE-llL<;fgQ?YQ7g1{u7PW&k)lAcr6y?nkJeYnJ@ z4f{;=qR@XXDdbc^qzfO)TesM+5ezT})f3WOMwHO;f5qzmP{2SKMr1*Z+#9=}u*(hq zKe6!l*r2j#w88w`7I=M0{?PNQ^SfsT9AYdeR$CSwq$$ON_BC4jUwJ1>%h39`MMZ7v zB;I#~U?Pe<&XgN*5?^ahj!_zf=AQO3Bk62r^tZ=g`4;=X8S)w#tn`hDiBA(ztmkox z{&5-5<8>77_tw+b*Vi#;k@@!I5sJ#i4?`n*mn-dOhhnO_2!4EBF-F#}FA$_OFH`(` z>c=60$Q8Bp#fh;{ksP(-=)fdaQv;OmqCbtd)_uZAgtWl)Kjfhm2%q<C# z@P}mhtB|j8y5S>w|MMDIGQ#W)bN39_{jRxDSF&3v@FKD>xYnj&<=tls8)B_V>Rx$d z53Jvp9I*~cZ|GZq&5*WSC%>fq{J`+aQD9Uxn4QshSt!Be& zG-zkrQxv_A|BBA=)>F4z<%;tEUJ;be9GH~bYjNz;-4j+rj*{iR0XoxopPsRX9ZUm6 zkG2ZgmDwil3@4tc)c^DFP&DSRWS{MF*V@I_>-~QtcTmwJ+pQevZM2+%Sg}?XvmwIT z1cBIO#pI(scE-8=-zwl1{jVwfr}C8t0=$0nhMK;PluadDWQqN+MtH)2R{UmJQFo&^ z)kWI|OF(tFs!AXsKMcp{=pQK~+eX69!ND($^1=+`v8%>Cl5}Q4<(g~>(_wu8w1lk` zOF|sun0#-Oh5hay8O%V2uA}I2FmH5#?7@20B0-1&73uE~t6e7L|3s^fPXSW#rfi&G zrwjk5h%9R@k5;agd*R)j=xQ!gTmZ5G0+^%zT0KhMRx&!^C6txU5Ld=A|IqR|zzQq;$ys{NBB-Q90e3sfmyJ!; zKalq8C^qq}OowJSOyc6WE5ZLKTN`y>*$_r~NDQEP z&buNVQTvin4yE|(?f5?<34%Y%8#5zN166IXdsEuK2;KsAu$PYUSsogyON;V0d5;fi&j96G(Thr06m-J2} zrV?d7RxFLOZbajWAuX*+&cO&w_t~%Cu>0!=kqg0DOUdg`EJtLwJE4eEEt9R2N6uhI z`EnMu)Jg8zS@U?A`?{vvt012P>-tka~!}()(lpiMS zxWC(TVM=SNF%|d+B~#dMjTE)zL}NY(^Cgc4LbLgvKK;2gucTx2#$F+un7}v2SU~5n z=#+{KYn~;|&>Y1B=kAs@?pHk>*DFu}6>O@nVBM&%Jh$RiRB}|u)P4K*{l%>w$u!giUy6_*20J z6yfi|?BzLSMM;bD1xX$EF!A%6+->Wwys8;E{97>puTpNhJ@(CG&V53O?MFepwD@4m z4Cj*{`<*w3D0Q<2CC&_w>-!Yi*H2yM-7JdgK5Q0H3t#ni@3rC5*PytMe)yz$jBs{` z0({9CpbD7685eDm+m_#NMx8qN9~}egP!>t-C6fK#G!Uiwhfv0fr}6;%8Lm2(8^NTV?FZ0epBkp-xr_$M(>C9ha2{`Ri;1<};BVtuX3fpui& z2ZeE}M|h4h3xDDk^)=0t@sYUZ`zZh3&yw=yY2j%bCIgcBxIZLV3i&RtmSj+IwYe8f z`;%7BU@fR?oj2er#>jiC=sa`bw(EQ$AYf;%@#49+9IHRddUSr0`!L&ll6}w_Em!a- zXAOnXs{Z=AP<}?xpT|<(HFrnx0fZV7>ytyD6;8ff*VvAlhw!qHo{6TF=h4lh{*Qb*Q zKb0ly9dg`q|Fb5n(xZ0~i{i*J3Y`0&Pg&cW>v>Ir!}y8gbajoM_P#IS-1}M(UwJWF zup9U79X-Nooax1s2yH`#-&&*3RP+{dD!`#(YJD*KL*qfSPf1e2X0$asu|5=XY-Yu_ z!iLq&zlu_AYdjbHM9#0&V+H0d9db2Xl8@eg_&C)g;njrdhVw%fN^9reqh#5Zy}FgS z5)(LBZ~^Cm;VUJ!b=~TS|7o^}V@}g$drShCy9>?PVmZ~TKjY(yiF5pf#VgH)T-^s3 z8OpY_mc_r5uyXU|6MV_BoF7mEVHK@I9fY(1is3=7J*I|>Y2f<%=?WI9MLvnE!ZBZ| z*XlQHY`nI=6`R*5uwo?K#0T6mdGk_=@5y(f z#9Nez_(&qvaGC8E=zkbem(q@++^KQV%UkZfd1~SPf2C%9-@eJ5+6tSrR(JWL!|39@ zLC?%o&ew!*%TX<{9;KHaO77KI_x?~4+Hn#X;ZG>*1-tHL%Ow|@Ln$i^%W@AKwp8dn zzc1!}c;onKh|jJly6FG1Gg*qaSIB@k&hSkcLF}7G6dS){YnRmftSZ|Q5!qCQ&}96t z%+BM-+O%faajG!;wTe;@7q;iaK5nIXeH8PqU3`7@lPSJh(1hB`q>0Bq?S=YG(?Q`L zTx8^YCSnAB;I1TGZxc*+Qb0dN7BBOT7jYVhR#zsSxrT|4BrMY5(J+*cldeOgHZ@!n5Mfd;2FIq`!xwVo&73`J7a`~cR>gA%nFOKU=Yulkmq-ujX zUhC8|&fRo-C<8>C1v^;f-8`~NVi(lbh^s9mrk)|?<009tVEo@WJSZHr7$j&=!GBOh zPmR*e4b_pDqMkywoAcw+@&3CZ;(H+%dw~kT+7v_*sY00b)-3e1S>ZV?*SX z$F49(37+CaFEG^KegEzG$MOJfZ+rRY-V0MS4Ws2rU~h%ccY~kXM6MuQO8{hX0l-`E z;vDFUZ!t{3ix`R%TTd6&x$Ve@kFuP4+jv~mmuFE|>wkmOw1r;4qWmqMT zMI2i`bzmRsv^{q$^`U(rL-naS3jG^5{O;QdPt)l`JcheKik7zXxS8EBNuEfE~ z2tm2N?nH4uvnmm*zGM~c3TuERdZ%Ef3KP_GShT8T7qxiM(E3GU8@phqPKpr`Ftd_L zihm#e%=FG;z3|ZOBamqG8s*Lzfum)R$(`FRsnP;T4WSr)ISiZa(t=zabEY9g%T_oT ze+>^r$mbXEqUvl(FBe4f-T92NkyKe%Tw%X)&1%%`Ukd`KI|4dP%Bw*HnVa&R#+D~5 z*L0HAO?_G6>+<%{qv@de#+(n~=EXs!;Y>@~e!^J!S7mlUm#b^`yXm@fK4PCXi=eBT zk5)JBSp9U&NF>bd`Pr_AmYH+ymo~Y{ysBRpQP3q!eWy4=D#)~`u}pmzSu+f0F%9&E$IIxrUaY1objHFAgaTH`A^vN;%~WB^4#7U$^GPr+tSIUfNI& zQML`T2b`02%|jzQWJ!G5rS-x)QYjvDtV9J>IQ%$aemTNw)EDOiI`mzRV$0X%HT#kfKZmnO@g2Zqd>teGlNNq zt2W~1%U`_X6Od_su=kKOOeXXVV3OX;s-DE4mN{(47eRNtGfBNi30KLQWSg`YU5z+q z;j*pYOOW>dNGBn@tSD~Csx2P z;ajEgvc$&l!W97v497dgrzyP(bjh=&^DRHAUhi%I=BLIhx&l>4{u-&PPK zV>>#85gcf37tXx-A{~47b*1LR{CJ3ny|`ELybtv;2KH%QY-^H$oXl>xOIw*}!<_Y( zqW==#hR#5FE%^(JD;6Z{ou^M@`$5<2UG@mR2!6a3`L0l3D&D8U(so3O)Fu1k&en~7 z-X@I)b2auYI(=p0LqFW62qlg>lkDdBa>Nd51noC|zB*rN96gWd{_P=dr$#$;(c-M$ zm!8s$_=zQX#drUC;Y+}VnXm=XB~Dk&>5{Y#+vCK?AvLLGzg4?Wx~T3^xHfJ@pv!ll zn)=3ng?1s*!oI6cG}jMhA*%grgy3|3G(d!uI6wsZ80B*^uSXyDlG_DWvYOE(edlw` z10Q_@(l+a2RsGb+ZT>j->Ec5nQV*CZM^8C;lzCg{MC^QXd~zk8%1mKnTgcwOild>$ zD!~OgQ^g`nHw?x2U94WBRy|LpLwQ)evl`tT&IfcgR#hY9D=Y79c44owCD4LDB9?Tia1`gTMZ0YzgPDRwpE zYiHdA0k|}N^%wyQHoaA48Xt_J@Pi?A0^2}FHVx3Vfhg)?Os@AV$V5=(A z_LEwkgTvEj?W%t-KVAN%V{32~C&dp7T5aXIzn*9rC$mz;9+Y{wwXrUYvA4*aFm!!c zL)Mqz7weTlD~wMPkqzT@f;e^}!IGPb2BA$A3qpnXR?&Of?@&<6aV%}8rrR`FY9tK? zUV^X#QQEwX&u%q=SFnF){Nb{glXDdmd zW*t$6#3K>2qshYAVG`2h>t6~YJzDz(_7;IJyv%jE3<`YfaI<@P71@AvAn*?-U?;=b zqsCT?BvC3&a|NDLB7gueaRToSJ?5hk&*R!Kr3{v*uX zd`0ohe%lnndzOf96j}5iq==gl)@CN#%TMISjDphADi(--y`akHE@iD*!ABBzkLa(J zuODCQUw?yxx`3yi2vy(9hLybmwgK;mt=}9HnI8#}^Th){DvEQw=2Md=#ANoGEJ=>o?ZGY7e@M{hcu?hocSPWZE zj#Q06rKrEK#{T*KU8nQN;n?@MS>D$=wg(E#G~fMrr>T*S6x_&nAPe`^ir~QQ3$u_8 zlT3qE0N)zWh-HYO7?oJR#>3lIr%&b#FTU!PVb_n)V1d#2#H<-d$?+iQ8;>qQ$KCe{Dk9(uRffxfImXW+(d$P z>V>p(+C~(R8A}m&jp(TB_&zGga?%wkwIa5R+8sqm#L-^(2~QFWGbKYkxR)m>faX=1 z!eU*7={qs=S1<|bZ=t4v zlElPeZGsWOvSIBnvNGxf^rcXnk<7g(8Njlk=prgKkt(c*pa{vAAym^SE@_1U+fh7+ zO8{#7q9?{jfs}XzO&f+M&1@(fbcyX+!6JpoVaSAhXV>i!J*a@Zq5^4!Z$>K9gs{`- zPICf;0kkSK00kA2_7Gff|1E3F7|Y1#A913~kt$=d74nZmFfsY<@JM^HCCvFk=YlvD z`Pa@zbMJ+wDK!G-dq$BE6gv@u@PQafC@L@ z8Nd!_Ve`e@7j^kl5U~Nn0d(9srx|D-U1iR<2p%7!D^obuF6Yo4xu}C`Yg}2BPf~61 z2VxRj%oaGl8(O*ul#v&+XpyW7!dh>`4`mMJ+!|&bIyW_YGhz?4?|dd~-0zDqo?nJ^S6`Jv8B%!H-27Tbuu-2pM6bN0N3ukENvY@p{PM zz6f3Gzz2m&M@v_fhTd~Y%l>>@!a-|y5U#8HgDi(hU9Vc5sjR@nrL5K(I({=z@pZc> z;~lPpXdkQ0jr`-2ns?yV-`za1Vw*E!`Mj1CE8Jb~fEBtfq@l)o!P7JQ_irajPfXmb zZ`&r*ZWA>gm{;sJ&3;38YDS%iykL0x$REQ@3rX<8A^h+s!KUit-X zhbz)$ZnMQ~UWhyn;)V1fe#agaW-o;vAuPDhnw7Sn)?3bQQEutkA3bPGxc`gsjKZI( zOVH`fD3Ygd>f(E&lDuCwwLIBTrtjVwWhMEZ78jzv%@4^o3x1k2=)(+s0o~9$<4rGfy$>Zwe^v@_n~3nB@+2kfr2@`H6Kj^ zLLXz%VBv|v9FKdFUhp}O&>Muo23QIE4yBolBuOA&+rq?`v-uk2=1n(z8FuS{=6G%Q z3>MUAiNb}{SjGa<6{u`1oxxibN>4PIerE@BgXl%!ex5g7fjtAUbp~Yz7Z*%B2d>@%1i@FPT@s{_UK$!?B!92p?4|XVP^HaiPYP3%xBVFLS!g>(5PXOeuA$ zz|0^wM(Jzm!O?TMLx^uToMEYlU=OX3QISf17S>r~4f+VM6%bXV?OZpi`Vz4&DDsl(Io)7-16LwG&0yaT# z++w~uE!c(N^x|S@sZd{cV091he=hx8`UNR(qoFF8si|HcYj5M&8qq-DFDdI3I0^0aM9k1=D#ueLOyHj^WGdCZjM|Udo%nzRbt;quU|@u4(uirQ2wM<9_B&X#J;P z)gX)!D??3oWSV#+V&QvWlGwwilV6@6VCjq9jW*nVTg8ptv@BZqby5e*xLA2}L=CkY zNdM0^*_S)FCJKn1YL5?(Mbr1BsF;p7MEt&z zm05t^V&X~4kM#t4*Q;@^4gvmln~z1!aaC!}T~s#)3gbjG4CUJoKcmy3_^&KUSH;8& z0o%3as31)jv*6flEsuE;*8ZG>-US3Y6=@QahUsB*C?KRTDBbLvt+q-(9$t?!jgPqG za;V-Bo@gP1TJ~_-t=wjv`YN^~{Ws)(vgor457ptQY1KWFxJ1Ds+d{aV?1c$hb+5Q^``4lS`oK*vUkJcZiwpf3o&bA z#U!ux@W?c$RZOJGHr(Q+Z^l|X10}Eac8m$8;Bw%piyRvcr)f}N*bILQ2h+YB(hh@I z9dPYF{Y=_W!9-)BJjpXB(v=7jU>s0McAQfK0g_=x1dLfNqmi|fQ7VdA_4!SHuk{4! zm}bVtAHV{63J)fFWm>N4E!dRle8u zOI0WX_zR(h^aYVBPJB-Oo23lS3Ch9T+P+D~&+G_x3)gkZ)6vrj(Jp>s zGvlxmf`zs${*-uE{KB{M`Brv=P<$Wr+4j1~Kam4sJp}D_NzT-qia$&T;^^#T5G1wYbHm;NY*b?|IHy@A{rUvyzp}p4n^W&fdT4y2}&DT-qgk zuWS`Au)}2r(gV#xnI;J->(QkE%U*T68aRfRgOzhz_i4#VkX zbS~Tekd`2M)B><{b*d8z+2BydJMWz~T$B!KLwDC=_8G6>uGDN?X8)9Rivr3!`W`>v z2<_zuapGRVWcjB-^bl!1i)G9nYLxu6QI#m(hH~Y#GBM4mi&41>)hfRcVxwd*UcPu4 zrw3M_RU2xDb4kp(0TsovbM5)kY%Ct#3toojo09dFjKRH6-S~`QjK@_3P|E1*8LV6f z1=3k`m6%kQke1Bw@~%rDJ|iOSal`>vwi>r1XXz>6iCMh|1*-5ljqTvui4iIQ(#w^b z#4-CDB^vhNoldl4FGzUZKWvw>*nZBkKWSC#^yZnP#N!tt40Ttl9>jn>bog{GVb#!n@1(&bD#bS3htq~OR ziWd6c@fV&iAxXVONb97_%+uiarb`t7I)2~qk7}$G>lkWS^y*js&yKkT&89irzUcVW zGd%egB^EZKeV7a}$g#T46dCcEX2-izKDFvC_YV8K)58}~uPpsq^_Lgk6_@LM&%G-v zolX-^PvVD+w||5z=ObMZxkXf<3|-+oQpD%A*0&1;PJ=Fhow{A!k`E8~9Og(Mh)JXl z(+*+K5Q_Kqp~ME3c)u4&?{G-;`f>@R8ZqBO@4`drHl+b79giaJ7;vKAMGiDGLv+&$ zN?OOKaBXX0@+PzPdj94{2$P!_XJtBCWAv|@>uu71LrqIgO#GFwy zH_~D5e7Z-_&JF2Gj0)(EEdUdTib9oCCg1hfkQS^p0y2q_Qv(aOFB&691W3m6SQ`N` z+Fj|RSWCYpC^+aDyWVI3;w>?ELh|}@@$o}OPL2oT3%ahm-)10dF6mcM8|FJ=8Ah3y zZS*wf;LdmhHcyR$)FL<8(&;ejJnYH)gK-FS8S=f^TsSOnDLC)0@QF@`A|}HUB50*5 z)u7YFfWfFWpCQ%ftr2tr1N-C?)=w3PQr4sn3{{<{5!{iOCiNZd5G$HV3)0zz%pxA@ z3fkcCyUENDWd0$1?OW`!kZpmxxmJ}Zn9Ysc2 zl|-4w0*l!fzwjgv88KT&^LKum&WD7+sk}LoP?12%gMnlGY)R&692V619N};JXMH$_ zPXTqs@&gh$2yA+H%#6cSH5xDTKHCFhL{ltx+~FpBKwa1MkvF46Aqu}S2t^fhz3XIW zBQ}Rs1lH4b#DjjwSE~5iufbhPi80Z3u7ZtmS(!OTNkhLT;D}h&Vc@AhmljCml~S#H zw4wP}K}B(*afeBx)kfoe2f4AGEqugozp~Gx+LPuMC(IQ};`;;)(;N1im>*(R{B=3G zp9SGjg;U(TVf}{K_->wBfvaw7APnKu+v7$^i({KEVAR7M@W~CYF2Vwl$O#pikkGy8 zr1c=)za66Bqg4nv_U;{!ep@ge7KNew`&Z&0EOuKWTlE+m{Sfk9v13sO8jtjLxg}^+ zyZZV)9kPn3n0v|iC3(f9R-pI#L5lHqIZ!lyH~G31G#CnD2z)>T-q?1u$&t)7LoUWw zh$v-zfQtF48^82MV^NtKW9J3z3;2VZLmp!iop+-gP;7V<2_B2EFD@cb-+|W-O&G)X z#KMJ@4ejG})s6?0TYGaHlzZO+j}Dl;j^XIIny12qm+6+ZmhHQDND^LDy1${;NOK1U z{3odghj5)6_vbl;;ec3tnrgO(tGh_t94MjNGnv)J7T%rp;`DT{dKxqR`s%FQfM+Vu z9MqZAtVM;6ZPm5#=CSg1NKNF#!0*<)q4Y1OAHNDtcW2-zKU=Q3le&-i?Oj`(A|zXU zHmuW(T)qbrG}jLV9k9pQI%{rq?o0~C`Iu@A{e;eU2)Pt0JX8cza*-YYolt6LzH4pZU<1!1g)f!JhqzuU;*!cJ zT%4u~ex7eBQ~Y*Jaf2TXc2oP>UK5uIrMpQW8JX*u5}+K`3a7-%4nZ<06g618#NL)= zB90SKp==hV`i|zk^5OFGHk66!qiHoZ>U(A^5u-1-(k9CCy-@q@bYji45xlV~vNySB zFAIVP>8*UT5Z-V0+3~zRT?W)}wolZk*%I5PsFS#gD*Z0d$TE0i1{bg}62`k6L2y+H zDD50qSf%l@aYq>IeHq7{ly(vdf$Xs7hVeYQX$?UlLHXg7G|Jy0mLzo60)g;i1KT=1 z*BBi}893V{j$?|jP!JLgHd&OeG*L7Pu*c^JZx@j=W!F#h0*R6R?w;C^VYhTZhLi>u zM^AVtW=oND7e91DN_eYn6rV7oT!0Su>tDsuS%0z3;e+Z68bBvuOqe2&j+DR}NSa-D z#Z3t`q9(hjzHJE!Be8&Q)i63lE%yAZ`#vF9qn=BxUd=aa`oVhj5g&U zMbnCQm}SK27AP8;!edQ!Dq;ZcGPUyr0}63zao>UQ_Tnm;^i%5i5G=93qxWqh*eU}L zQCt!>Eip%i@F?&`3Gv@(hBjk{Qb9=c84VTQ*7XgLaN`?X0>Xx=4HdrJX)^#Vr)DBN zMVFfWh=uu%u`hqUgO_2uK|dE7W{oCY=2lQfd)puSPAc1tstiC}O5_o(hF5F3VMfj4 z@K;tmF$x}nOk{vNA`~rpjIOUH@nOeSfg>+t2eCGC07z>6#cT3{wndOw{Q5C z$N`$PVTECF9xkPB5~Z?x9r}apXt=*K)dsZ_wK??@vos197~qY^kWJ_U5&4d@@l1a6 z^*Xg6u_`v~L0zPGy{?hVL}uwji)fdD2Y}pju)w5~6CIKYET+X_VuHzzM&7L7G>VRR zj$Pp+Mh0!lRg%}i zbC6BaM{EQp2saBCtND_qiG(>WJ8l=n*>YU&h9}7hCR%gtttTbv*ylhXqQ96pj)@%* z0^WpqQ<`l(O9-bi-{FZvON}5VQ&b7Xndf8UO*6&uLo1PD$?b4rOX2N`f)^!fT6ewK z57F3%ifdAgVvQcx#V@_tf+MI7s)J`^rG{ALeDmr zs`=Ndt^4TYN)zbsOV5deJ#p-u0KUB4n*iY>ZvGu=-tAq|jZ||4cXQ0Xg0na$|8dz? z*tP@4V{Z-dBj<}5=72%OJI^@l>_UtEs-}!to(i+tB}!2x2dFhmWbeDKCH?EOUg&tf z$kdlP4-OmG@wP<&uDkV*WCW0=zrH6mA01bXNkNu|dYYzY576;uI0a5UQz1?|gmgp> zat44{GLuA#Pi%@JVu3Q|YBuroH?xlp%)G#lA3Jw#yaA%$i~K7?OQ<5xka$z+fZ*PI zP@G>b%itN+XySF2jR3!?zTs!@U#ge{4hl6OqHV;YJd(Td%Vqd|K^#4!_aM#|+E&=JbRZYCY&7ah$x|QD*6_CQS7zt-wuj8M^FL^@=Tgh%SPPl1pFQ}o1u zP>Oa_GBvPEyk&_2Bl{4+IrBEH(J%&@QKs#dBApDp3|%PO_RpyJ5CLd^fq_8(hxNg; zvFKhr2)bst=U4&1`ni;GJkJ4iO$0i3Ll>aC)RL&oTk+bASK0r0`P(e z<0QJwkv#BM_zwYjv{|pSM6;PQJ)6_L16Gqcp2Rpw;!IfZp{J}CqHYB? z2;wR57pOjMeJ`j(-g<7dV7DssXs4_BI?vmXtvsL-``HmbeTj9rJp||IxiMAT<8*=H4NR8M3p(kRd+W@fb!7siDEdwAG?k z9T9jI#GyT`1&?`p1gPoseHYy)Nc?=dV0=1F>5-=PKMC{cTQrHU5R)9#4BUda2Ipo| z4^lS^q>_X`RNV+sLaaS{lIgLW8xsOtO6_s-&Vb-L3NH8Pv$y;H3r-GIM}*o$<#yHj zdj|T~Gb^{f(uv?AYP-Qt+!uIIIx@GBAa2Z6v@$YXanj}ssh|TC0E-I^To6bXy6>yd z!56L3nl{(}LrQ!40zh(ragVBf9um}jl|IB43pC@%a9cs1UjArJ)UZf_-K zOeE#wPAT2>i8rN17@93zyD+Sp>%m>TdV!SNDCi;%l0u)FEDPAghI_+sv8iPYUCRq;S_J@ zO|Yf8fo}%B8C*D2Srv(aAP@m}=wK(z-2my^*u441eo>Q~)B`ZizUo?Eq^E!~0C^pN zX@6NS&xA_JAM@5DZFwWP8`nvvv%`&IwWY^Ef%bn0BpBCnLF#Un_VaUR(2!~LySLTT zn}`}ph5h8DP8$0L4s3`0;5eev`Zt#gD~>I1#|n4My3#(OBDAocLR%j*d+>Goi-Yu2 zN;YMw;@8#q8-(MDo@SkRDu>#J2Hw6g-agP`f;S&FBrnp{8|naLU9|{cV_;rDs=qNM z7R**%y`310b%DSHVC1be#my7p4jn+|H)6=fN`-o85BcIq-kQO8bnmi6wRHDEUK!l= z<7skVl~QWu=E-Ohpb+8-D$=it{{=W{e}gctoK0Z;=F05$)arWD{DJCA zsG+1y!`)xcm2(@~uuLcUx`t1XlmmjztT$M)pG|g2mefe|1+dpYxb4~!rYrv^tNg#{ zzM=*I9M`C_1$EAo^m<;=2`luY7|i1crfDAWvs(Ax@yO+R9%$7OF;K-ravJ_DY(Mwm z^Jl`&q$n`B&Tz)}#0hspbLAm`cLf?b5gSt_hyTsK!O*5) zTpL_?MmZNGSA?&WHmHn5qyc-SYW=ND=oDiOHh6itq zyxw3v^+1$Ne-qxbHPHP%B^?ir2(OgIyu>&jCYzOkPHLgw+M5p8bpL-#PyY)5b$3Ss z_8r7Bmv_a7WpvxKDWm<$;OA8uC*A z&0%Mgh<5K!xOV@SqyBP3?C!?gZ#>K$W*9E=LHkgve9wqb+!A{xd$l!IQ4elqHd@7qlX8)WWD}kHi|4rKeui5*5UQE~E zF@0HFRuuZbPWJzTZeZ{!F4t$c5AVwV%VhcgFZCH23~>!|+(4!~`_B^O|NrLyJhlGM zEFKm|kbUXTdy@Z2{GYnyzkUuE;fx@Ju*d& zN<_&9^B2*tAMo+RbK68e&UyBzecaUU zRQe-9piZsu^^pY{lL)e8ksxMI?AI_2WJD!W?f1Ic4mQJIeqf|j)0`QgO%u+@{Rv#) z-%IImRzBsZnm67@$n5uzg!2sJ?VCS#oDQO%R>L(Z_|ax1!W`%MLrzgS4vBkrPF=jo z_yv-A3*)h>(`0KLnwP9RVQADcsa>_{r%#_)3>On&P#BV6p+a21!eJSr2DV-e%D1aD zH))~bRalk}_YszvujUF(b-wXT!CQg_X02hq7DxZ26cPHI+W#ih75Tm9~m zg#|Jre1_;IZF;q0$#HjT0VF9m%eBw|RsFPjk#*+!*9oS2^^6EfkJbR0+D27f9*0M# z59TL0D)O$4%!4wHq)Z2YaZU|AlKT%nl1=G_V%yoL2KjY0eV?6XHojkwk)UK0A-0CtW4BdLA9hKGX1b2Qp%8gxH1ALqIi}6rRxp8jyHA>7=~ChogV`xMdiTXD_hf@0L0;17po)1`L0h$%^I?d)@tAGe@>% zFV?5h0};KaEOXTS7VX{FBr{E-@|jeUX6z>s~@omewJ0UMvkPDmtz9-ed<%+PWlW)uO$b{GY7ess|agB8OI{ejhxtFDzp{Y z0BK0n3Yd9_6lSaod_e3ljL7c=dhqNH#P{@&@=L;uqL}7)zHY4J!5K)lQ^mX9EAU^@ z)^fK|(mjq?%mhJ>x5%q9n(Y+h^vSAbIdKd5hfXUh-=Eb~ve+;5zbBim1wSBjWRVr> ze!=PdVA|oR@g)i+)P1MvtCTTb=b{@gqCF-Vr2VU?$qHD{9P0kK(+wIeX0}|(tDE=* z1tO#W~+bFQic+=qB{Tvvt&25kK3@zVy#545Jy z-^HWdeC1YpbMuWpb;QEJpAjpwB15nEL7OVpcOxVFz`rG?;I&z7R*g;9%JY$>FBXS! z_d@Xvj;CPe(cSizw~hBzY*X{xLx?+?%g>tFar?|JC->DZ(H#L(A*&Ofw#1VW&xAIl ztu^hn4ADu8Zdd5!GZ?u!iFx9e^fhgFS!+HNETHA}AaK5ua)ZA%ECQWK8+S)TL|N*$ zTF*V-@QyGNacIkb_}r$N-vgBEks~%|(@Soi8JqPyzjj?Qw@`na09o=^vyKnBegrgB zKl4wTbBu70d37^OUoc`Nuw#|)n6`4{vOPXe2w5%5xH*XOIJi49iD#RN^gB5V!!$1c zdJK4ua}Dw8dbv(u+Mak{k2E6lzT@-0z4&J$-;{KEtleF9q^FR<$BP^Z+1mc zEx+L*MVo7Hot21!Z66Ep@W!`&(x`dDc8GN1+?t4I1)#>b zQg5(rqeeVM1q&~~oJ@%M??$x%G!-qY8x02a?T~3@?xu$E-W%ssK5QNPh1!A7J*-_e@Nt4oi$9F~7cw@2qHe&Ku?u%z2cH#d*SXsMq>ETy z99PvYr!i~U!ww~pz_qR)1lZj0Jz@K&Gd=xQnotizh=%{6%nuG=l~Uu+HNe|!O7BH{o|f}mr@B{>o7uQ09cU`_k+`;O~b<(<@D{(q7UIIVg^ z0$^A!4N4)Oo%S=pVuEk65$0oMUHA^uaSCL3u)E+#LRue=tK#qLP@^MUc0fxoz=z1; z5{4Jo?<9y!0<4HQjO_m@e9s_b9EkcBRRl`h`@%v`Ht~pN-yQ%t(+$p9Cb195c6HBoB7Ph-_@)jon z_Pagc3d^doi4igfNYBd+N3MvMqkS&((B4?)P#@!-qJF0^H8zN|8m?q*&r3PH-l*9= z`}rbDyb)%yUWcL2)2x19Vz7S(I%Tn@uU`1Ebo*&Kd*OU%JYm}CfvmN2eN+TUqW-k? z9PrV0-H`=B9&*Bhj1Kx&gJ;3-);ZIzX3LdJRd0^}jQs;S!G!wuu+5_K+wgcbjAzt< ziGN!WD}?=OguBg%`K^ z(aapnuP~b{wea`_*-96za;#<*)Zko{)-@cwRT5l{qZDmdJi}_fJuFQGU2df77?I2k z-YTN{3EqOucLp92u>}E)BD-RcN#gfHMrQ2wFyLebrUZX`X;KqC-OR214;(Cc$@7Ep z=kYE=9%+}z4nQCE1;ts@>b_ByS!$~55EHl;Me>-2q*>9rzdD^djzeM{f(wOjS^ew2 zcdvadT|A85JckU9k4mI?wmehnnY^}0Q>{2lcwxX|VDBK_FfTHw?GOKoy_Rv!HR?Z{ z7^p5xXG$@lG(WULz@4chR)e z`o4ZuvY!dH)z;z~;73m|x_S0s>M?poSsB-xS{l#fXw=N>NlA@$?&5c*J=fM=lJhfg z3>!KnJ9gaJW%77lvM!821GpJ<>SdR5EkL?cJdr!7S#Onslv-i;l6El_H4-~ITnBsy zu9a>2vm_U!Gh9mzG-_i(H45LuVi*5D;xMt`YvS7GifQb|EMf-*Q<_SGq6Twj(Rhq( zOQ~RiqhnGZ(sG!1Z3qDT=kK)vtn$Db*9gLQ!Gz9cv|ndT=-|dYP$bLFU;;+lXt>O} zaF-n=v0sB=m}J>S1eUI+J^HFK9XvZTm-P4&wW_>|W|{&@JtIBfye5K)KDxJV9%oRy znEWBJMFgM`Cx|3*0@}e0fnvp(i*tS__lL3+yvU8!Fv^i9kU|cWr}eOTx99%oB2{=Y@$z6+$%w zcQN!$dV_wy(*Y005IAi1hTOQ&k5P5vP9|rVC$R<%3B;fhOB!uIKfxs2TxPP+RP21l zUBSIHRz!DY{Bk3m$XUJm}0~V5M0Fb8K0~D-`CV}YC?Nyf&eiX#Y~%=ZMQrh@{f=P^}?Ga0wI8~ zm>bvyr9dr(DZM}18$8~fQ;j8gq7?SIxnrXbmz>E>3L;&+x7N6En)>?>5{-W!l6r36dF zwVvS;DsB%rO)+kaFbX#qBHSRERnhwZCJpvpmpX7HI)1zldU`BRky8kk_=eu)#mrw) z^j7wlX&-`TexYzP$#0iI{vBfyYdMMz+MVcx1oLwmnr{HWY*{7}nj%0#xa@WDpp#Xw zt@{o#3$Q%j?e?1z>Il?XvpaW7h*@2`<6twsUwY#H61!(v>41`v-H^fGH)Snqs=M@M zFqj+Y$^NukkNmr4mW#GyRDeBCr@(W16H?Yi3wQ@Vw~n8)mF(5IL!s(CR~EVY@1|*Q zVJtzleuzqCuC^XRMVs(ypbS-`NOE8}OLw?ZK6VnU8k1iyi-kBCjdd*5(R&Y?}(GF@UKr_KL!=zYvnEEMLSaM!11y97|I-L{^e?Brvs? zoC0P71MP4M^!SIs7P?bGK&@+zJCAfXcEc^wh+LJpFvoS!;VdNK z3N`)QkV;rc_oN|+RJWkzZq^liU*yE`QhIq6yZ*4y!cP#C@beeh$sZl#HNg&smG7w+ z@WPEQ9%`XoX%AREbcq!Xa|QK;>I_44P7Bp~d$5|oiI4{=_7Jh1dPPfqVdW!b(0m9A z%tP!+@bO}pKp2n8ZtAAY7!n9c^%r|EiPOAQ&9|8_)`%+ePtXz9oXk`AaaN-^>s;y< zPH}pg47_LS2`m!}Vuk*|d_(5HLp9b*b(LAd!vd-@<{H+Ni$B7SeEHi^PVVK)90mND z*7~P=Jl7Z{;2^L56rC}BPh?1RO4+Y@k(1}weQpmlcYo>SiEzlC;n7BOiMi_RazKTm zE&`|8P`&$t%=46^t2WRl^)7{R#k-VwJhhpy*mJOhD3k6!j3t@raSS%W{w^(3EOEcJe^mG<4qz`8b!G z{u(^2Hj_yq`mJ*_x^Hi7!?*RcLwfk|tNlvC*A8!lm*C}%Q;aTC>ZJ8e)H+0e zT!Js~l5X_AAi3ZMY3oKy0?@v5=uW64!wY0KYX7r4!78%)WxY`Lt!W}^3RV5pBz@vO zACwJYhHZrBI}4c7jqAK8NquSE238Y|F%FO2HW5WMdd(^_^6jV;&I!ey__JK0_*;dA z`p~y=$zj}wes9yDS(#aYF zx=G&=0nOb{li>G?Hw%BRS@-zswORiyaot-5D>VL|t>2rj!w7JHvyKpIpYPKZ&Uk-? z03=+7-i2~blGVCYo|bo(pxa+&0PCc8fSzl==Jzo$9{l}n`@_*yMf5VyJvFg|Fh+ge z7I|K8Kqp_ADsdjlD1FH1yxgrB4$_(~SioPKz2%dX?RQt*rr6rDzl;7=%TG0*Y~GY& zABh#J1~gpS=@$(4yL5;z)nY;QgJyb5HmZznepFN?esbm&WVsDuC9!VpG*;Ra`mYp9?@#A)YW6cEYyZW?+)Q!uLGqyE$f!>ZN#-%l5WHmY$Wz<% zf)x;vlDO5CcB6DN&vL-$-vI4#K}TZAO_fIkMObv&2v1rK&rZ3> zXf1F>$WnkA+0>p>PXDRGF%>2#I0Qh|NRLlov=d!(4tVk=jyfX!oke+TJ29$m z#Z*DlAYGN~>i3HOnp}__Y{Nh-zp$PYNZ)UErj5`BPwLcnStWCqLsT2XF`YJ1-4+z0 zB*ePP+{T;-&os;14(T|g=O>)hnWxFzUN`S2INK8vA+2%DlMxs|;w_Q_N+4+UEy@Db2Fti4xI3sbqqq zZl;InX&T^U9uW#bboImzQcdyRACWsf2PQ1lahl0%@Hko5hR7#pF z&x}on&flP9>kcnq6;T&5vdRZ!;uRlN;bHo2&bIQ}IH52KhtJ!3Be8#w$gV&2sEI#c zTj7Td#p?wjQG!1`48g|Y{V~wN0zhG0jwK)oN?m5e;PhlW*(Klp(}=zt#5(&bQ*_mx zbr_*;a7#fnb?&#YU4N2s=~^p)AfPJX8FLUDxF1fxm!O9@`f09x^wgVcPT+-`386IL zj%TRQmtklZ3^tUvzD@FPKqV9d*UnQz>JvF7QGFu~Ad>gG_ZU4zVdoq$v|N>^W+sTz zA)FAuz*2fiuVe2|EKbUcYQ=r2)4iP1>sM^Ey8`IAH9zz$7^a^u!#PrOl}@m;-GbpY>&`^kR^iOkO%_Mvr z$wf}`uzk%5xxQvZKnt6Et)1nwQ^OP{9?R&ycU|%CV<#BU$qCeFUflRFnij-l3BCaP zHUr2bYi9Yb*10cQHr^{6xp-Qfid??3`u;*sQLIN7%*9BYN40%D!ggnH>g3z-6y5Nu%PPwP_H#714< z7rsC9qX{;?7d!o4RJFGF0O&2jZjYu?teqXXMtlAt?#|vd(Bo;1+m(=bIU_ke(T#~8^U70n?!$Qa9`No{6)RSu3C%1 zA8>;=d5zmcaz-CQbX|#h=;?{tZBM@b3r~)7+Jb6LD>I4jAp&dnYSyl9hphkY9xngh&mCPP{QQzz z|GoOLi0@D*+?k;Ow(q=$Vwc5lny{&k^_!Y~AW4zV>Jj5Qb&pHshC|+WolEX6G(@pH zuE)9te~Ey%7JmfDe1{_g`=WcYxMC}|;&*YLr>2@OXatpRS!XXAw6GT!KM=A}eyC8x zp^oOKKZ{>`nXX@im(PSZ92R^fIq4sB3BggtB z&MR)<@Yl4(%iNbF>b-esj-5YwsC`kVTcXWL#>H_?w|~fyf=&v-!7uOC8FiUVoSLL- z8_v9Q)KrEi7!M0 zM^%Bebr$$0DK`Fbq64*ReXQYUN2IcaF^JS})X-KTv5H)Py*OK;P{+Np-s_OM_ka$#Q_O8aG|X(esxZ9YMfgLBZeIJ@*8E_+3X6-=x#PfrPQ|NkJvrdx zalOr`+gP+t4|JyJ@ar3quoAV>4t1yTV_=-obqNulc>{Nfd9Xm~uy@}QSV*eyevpxL zz35cP(K>vFep)+|SRS4>_5F3_$1YY(P&hWfZJoAzhtT9paoEeQ!&Y99ZUtvavM1B~ zNY$QAY1>V#RE;d_er03ms7{U@14mld%a0A2@P@APNiHekF)qfbGFEi= z&L36W;|PAzM@E)ZpfXt#KdOosm7{+^!JpZIS(<{RrPWdlo!y7aruFejQ|utMfs-Nu zG!mnmXn9=1aSgv_n0HgPSinE>VnVq(Jcu{GYt$FGK# zcq&~-lpUNx6;;h5*8~N>^pOpblZI2T;&@5I(V+u42;`X`76Rs>NYQ5;r07GuTVhR0*l( zK1&+>{X)&3Hij#E83RHm^M$!=Pk=%iL+Ffo(}LRMuCBeFeS?Fyr(k-SgRF1FQNa=X zX*;_~8uiLLB;sp|=UYO8JI0=g?4KrUYyxNn-2Xl(weA#ud(rU`+|Jx*6|_bmM+{o2aS zVea5-(F%jwDfaftWp89LOH}5DIUeT536WuR57Z*h7}~&o(HP zOXOsu1IQ@wQmNeW2_)9zDlS_2qj<35A*p@n>yZs^kCp5J%cox5jOfri7IWZCuo*5I zk|W0Vv15Shq}^>f|FHkUxE=;;)W6QG4Vi;7U42-`)pE&EfT2S;zq=;kp}|!gtb4z= zlyNY{^pVY*_A>obsM|3`kFZ_Qae(GD`x&C16K9v98c&qBp+@qkx=SM?kr@31x3`9y9fHwWdwU%8d5s1}#>0_K7w%?|Fd_OabNV~7K62;lRhD=!Lz$v2h-g`Z>r5?b;=Fm!-0v?V1v%uB=&t`=zO2YU1yY zvNu5eV#>#R=Pa=T`}We zx;euy?~DJ=f09GBH~2O~_@!Uak&E-`r%82r@t7wu*SDwRzdn{zKjlCTZI8DN)0k&7 zDL+S%*+PIYEpQ)pZwl+fCf)(E#v%3IJ;@=a&f>lPHbzZfo>~|Qg;Xx$fKMq72KHb;Bg4pTZRpG~LBbFj-!>A-bgXPD!T{~G&1vj}V{XIErw1jYBHl08S+3XUwOD=r?!|*@wnOfQPPRU~M`n+Y3fCx9F%&yj zv#8e?+43xX^1>Nnyc;IDznkqtCDpGm+%$-%IkqVXza47($1=`GSug3hNxBh3p>k$~ z$H(*1BT+(P?egN6JTU3RoEI?n3cxLsn1a#$1B?cxjkVD6BaFHynOy4a6E_jLY`VuL zV`cB-0IXOft0YVN*BI4Dd5z$LOGG5QzY&x(UFjOqoQ4ldj&i3OPu3WbC5_#K29cXq8xxN;6rc+2h$0{>hKwO zerf4+h!e;6b1CkGyJ3<%8_+kIYXrjcjUQ$U=h?}WcpDCo`(TCOp=f2NnS74xbJ?*W zDdZ;B5;_q2guwhToMrBRQ<_@OAR~61rqe%99A(C+l2&xfq~noKF-c0_!ETeEn!VRh z!-_cc`{ySP(IR&&ziX)K>(fBQUX!u!x6VuP4)NMYi1gmThCWz@b%4>(lAEwKr`Oq@ z9wEGdT+`gdATE*Cv3^3ZSUf^~nppK(R#^_g=rGYSr6~Aeex^b^5D@2`ZXSl?ud>@1 zyTCv?nrpzRVpAf{K%6!m@vHx&J@{Kp)@84X{@aK(virB{^oBR@o_U-lB!3j9aC$mu z<$QWznW8iY=3alF3m;ahcloYUq_wszWsNN&I}wfkrl_emG2M6)!(h1UDWCZ< zec$<3TtjrJvUp>B7Sm5_$ro<#{JUYz-}2|2 zyk$8mhqXn;P}7Pn+R*#?@CO$B{Ad%&qcWrUWL=VfXPb#{5xNFy8# z`6cpBeCF`?ha-$u*K06lLR4T8YImB>v&FK|6YcAX(OtXTK`NhTQo`F-5J6~+O~$QK zlIEu3GXnLY3SsrW>%HIhZ}KXqc1^w1KyLZSLsA0Lo5RFSj?-N}(_ZtMWGa6JDr?c@ z!3M}cIA-6X;AM9A3YV#hyDr(IXV1dY`DWtpt;b1BBNF_}N<7mA?2UB{8DFQqCd8I_ zS%4YQUgbn=Z@ZA?xh$zzNv+_wdrM6uWdBsIy)4}MlxCTNaP8M-T5 zp64dX{Q7hi-Fd#Ac9i2HuO+{c_vZ|wKf`I*>n&4Bk80fraINp9sBJ|0;hP19Ds;;G z>jeH`skJ}S^pcCRiPUSf%Vk0A011K zV#C~KHn(R4!k*G%GaNpL*yt0Nc(aSVGsu-_{kV0R)qs{o**-zIx11e28q*QSM6}A+)9HV% zu_w|p!B)HB^bxutLizqGqZQhEheU9zREO=bsiHH@M$$?bbU!W-HxpSXVckdETvPr$ zyf7=iIix$^tK&{0W~nZmDxB7b;jKfqn`OvjEG7S}9Ka~vUfwNDg~4Q_EOx=LysZpW z(y=UDcE~OK4Cp8OKGkT>1)mQUcTWf;?H zk=M5MOM2`Z=QS|?GDbp0@ot!hD1&z<{pE1vt+lP!sg+?PpU{)dZAQ1sv&=$% zY2pRpTBN`@^=x6X{ARLYrSj$5LXG-Xg`s-4({B-ok}|p^iT8wJO+v+5wZma84y`+- z57Pq{nyhO2qY(5#8n8=j<`WVy!Wc@n-(o>?wPpFtXtxg!sW0}g$y)%#;hnsMs$u@KB(6vugdgQiZUg8W4MYFe zI=7;k~i_b3e z6cs5Llo_hyC9UDpgE9ieuW|`m=WQ&*C!86X0?^;>Y=YS( zzB0sXF2uep@5E(&7_n~Zx4=pm{Sn3asB6fNH{ga~fxxVYxVV`hF7zopo4c5ask%)3 zGyOC2XQ4t6dvQ-pMIaXn66HpTxG(oCzE7{#kxd`UMyYst1&8xq<2J2Ym>fLciaXgbY$CloL%!D)rcbx}(lJ0$!UsrW6V|&Xe z-ajOw9%2NH+)m?7xs1lCf2sXS-}5DtC-UGrF-+zhZTtt%FC9t;AtlV{CyS7Vk=7KF zopK#P!{wG>lc=9Dh25>7CAau6_79~!&{bUrAmIobO9QP5pN|}Hj{7MMPr73itbsVX z)q%sdVlPx=AYkcYps%SWXs;{eKUHiwhF8EPT&GglR6U;8Ri@$x@T5PpNp5kX82lc| z;Zu2~T65+&oaX<>C$8lpW+W4ckbdaM?LeP-h4{)7YCNq0P)Pb1$lV8%x6|(6mlO4B+cFhUmhYYd0jh3&yYxS}PB zR{C6CT6llmazum;Oyq@fGu|bQ(6Q~kHYH3jY;T5x$KaSfCSIXOyD|rL{allwY z>flo(jjFD2!bX?K#!9)xS&sewx8TpT#Sy8W^Uq{1=(%+?M3IYtWdn|V?Fl2kY3ZZa zo>7Y3;b+40E2jMW%4x)~=;_8dS*T8;23wH}WQ(st>o&->N=uYQD?djAYr!vtoo{?` zlA1*5awvvA0H^UoT}6>C_o4+ZP0(GxU)0I7RPFq2KAs>hJoB~q-pcK#uSso0%h&ei z>y`F@FN&>$Rs(EpMmIkoG&4r>lB%8iPF60T_^+kD$0Ch-kvR99|J z`l$aTbq9^;Vy1Kuw^Np+>|e*=ldEGApbsL|UAdKR{;>s~sP{f6ngwkyQ6f?t&Svsq zYmf0d>?wQusc`~yTOW^D2iJ;SNH1dA=-ICC#;_X6lRKTay*t|>_q_qAj(&~5oicJ5 z4UgZw=HexE@lQmxCS~$!U4BfT(VD)~b6>N)9N5=ot8DBf}D>;`Q{a1L24&xf#qml9}K$!GnzD>-@{dIrL`>NPonKBSm@DWHW664pS zs{JXVwmK(fJ$${cqB4}gYr_{abJ#8UA?9*&V*I1*x?({`F=;JHTv$pGUW(LkO-j!) zu#`gxNAtYdu_~|TLG%xKqC!3B&KW=DAi@(<`7CEC^l)8gJJiPavV312M}ki``1FbU zP(%Mu17VPjV{tn62JM^lEkm?x-3Xc}U*XEas1wRLcUe~J#l$LrnoxBtAtKu0bV!C> zaY*T)FqJ+RG0NB+ybB$YIpjUmMb$X7PO% zY+{sFW=$mKBy*KzFf8PHX_D8$XW$Eqeym0jXVjO*WwV5-RzSIcaPUv4a#X4U=>vnDRDoo zwMQA!700?2yqc~tD6ib?b_hLNgvnKo7$zubM=7Z97|E#fL;H$;4spRLpQB?+oF)tO z9}r6f%9i=fRHRPaM<)-#=8&||iWtO#JfNGap>S{jMAi15(N(E6jmwO?g_hEsjpK;B z>_K>t35_UmiyDz#RvAOOhMwI=-c0IPG=BE?gWP;C9^Y=(EX=R|>68>*wqD!OR+n3{ zzvztPz%@oP@eK+SWAj0FPH=@HYiuRaYwK*SF;4$VK->viN%2$U>n8axNVApuH zV#4mPCFm~wT}XD`?;FnZ5Z6>zpI6_txKS(a+g0=BPUI$dSn# z56qkO)(&RDBD*Ax$ip?SFnIc1Pniy+_riI*SE|zg1--QWq_M^r%hN!f;55`FC*A86 z@wQPNSD6Nl4qTu*5Z_dR$ZS5gXp7E`T_{#H2iC@(ckimkgo~T#ZQ!M)bE>8lVwhhE zZyx;SU#0Z^r7dvQh8&ZGead_eq?Ox~UE{=3!1o=GfZ?DBIH@P<+?+sKe&TmjG~FmFVKKrVO7vDzcE!@&!k2(F z==!@D*B@9gaKGM3tt;Q+dOQrVqd1=OeAyJDzNRp8pkxoke-F8G5;AO;c_d1-5iY)a z)_#sn;tfYi90fWT?!5XtNp&-crkpPNZ>MEx`V{;M03nZ%)0m#4Vzb@n;CWrU|Ak5U z(I7@sWGb63h=pcLOca@cM~%mn#kq)V4=b%a_Ds_aQvXrU*kXvG%#i`D9>Ar<1-m1U z_kSGqudg{A$YHBNmOoXCfIO$^%Yz`?K^?w#1B5SHK1-k6cOmJMG`q%sw5UiAbuA}H zaSu3rZ7z3~Kob0pT-;{ZBC`&Jb;`f!(d)v} ztN^&C4Xyu2Fy=&@cg%3-VNd%0O5(+fi#tGv@U$6yd-AMYm@fZ$-x=|>M%87hPyT?1 zs2=s{ngDk+by@*?H`6pQwmb2nwYZ=`1-+qay*TfiF~1j0$+TrD^N~f<_Mv*5sGXho z_O07I&z~d}PICfYiZzF;USON2iQq09BsR|@B6%bB>ar!{gXQ!6fAOUJ$ry= z9yvlCd3bD87@jVFS!9w!t$1o6dFb7?w<~)XFEd!d#Te~J*}pZ@&a(En{y6-?DGIiA zQH}@ten+g4XYY!(g~?!>Zgkx*XyLhe1Er*rz0U%uMEnezVz{IEB4NuUl%M*uzGsw) zqQ@;x#zt>ZJIspINoC9759YAYcERqiY+y#SW_Oi4>4%;hCGN|2mzRcU>65e8>C!lF z`?ncVwY{XGFq-cC>of%jQAqP;DbLNR-K(di&fB$@>C){9TA;436ML*iU@4f_X|?%S zJO`7BVebjA?Y?;)amiuF!mOgo!G_zD3Vq+1%IMKA(L@5d3g7b1QU{EP_?v6eN0Xi~ zo+BQD*GH|+7Y|Fy3P4~l?%A|nvX!csL|0xhUfl3>Vu@596oR9h)GiwAmMKMGgV>Q=qc&p zWOk#Ww`n}Fk0P~+e@mM));i4d+xMuZYg~9iKgm>X3;BN$|4!z!9@E;=+I;PcLO0`< z|A(9+!HZl(j!3t%_1lD!kpp7ylVD|vGs<`8!gXoc9ip2Sb09W(>q?8A3>LAG{pUJl zBPu}OcwnH*^JIdJRxcfbr7jFPfDOs^r_^TuoC%rtVP3J{_@u)Wjo#4toV?9c*2Zc= z)NWbVi*Wy|ST3a3rK6KAmh!^;53PpP=en(~W&Zl#1NXZB`PjXA#wPOt&lsQ{H8%R! z&MW&+WYZ~~RGdkQUS(T5%P$);Xx!dkdetBms8pNMzbX2B-xS_K8`#G0dLu)T`6|JO znZ6VBY0M%Mt^uLlxnd@+GWUL<{2OwkYwF%vqSZ0TFISa^9*mW0EDo5r(1Qd)@9D7! zsx52fr4cuFTujsXACFAQGaE=@WWg~^@N54-i=TIW_`9j#y_-aa8-%B^iaTBhOQ zw(F7nX*_22o_9%5Ykj}XN`0NDd5{)yLgyR^T)1J6EWe8^j|<-p|8a23=DNh58Sc?I znQ3KjMk`m#hy@|qHreZz1_e`hjCF5oymi(=b?8KC@?-@Qk(22|YI=?y!n4BGDblzbW%5*PKXkmnRiMZg2Is2ER9opEe!)SuuS)S9Gti8K*~Qg zbjgJu>K4T|IZjTk9=@MLmR$LKU6CJEAi-}CZgLRQ*|OhGouGxJ|A0sow=w~9v)0uh zPqy#fZ198PQhBk`T9YD#&kQS3Wm{v1 zPJocm53g`|A#5p5He&z&Y=GWg6*&*nRKK3$dZd5Ai}bUo z$vrr4?wRPBOU3JS650@tPluw~%bvJ!iw<#L;v0LI`M(+!UE(qV+^dT2ZEkF7Wtg(h zzj=mU%{%i!DoMR@BoV_2^h?|=CyD7EAwI(c_U6>} z3QURxzTxD&FBJEZ`woYhG+q$L(kgyuDxX}-q^mvXA07;&r0eS~YHT6&DeM(6*~FJh z``YnKe5gn_&otxVH+<>&WX)c|c*$!)T7hLSQiY=!AFXnVx&3aR8s2Z-Q}ZW+(m>TE zW6@sr8n?ZrcP=Gm%tZC8&t;Fn{;`W-6}9uAG1S`n#xj)g2g{=l=7*ZMTS8v^8B{;r zazr)JlHE)CF7vf_hUD^OS2g(2a#H7py-~z#X=W42OzL*BN+BDKl4r(d|H>~$iS8Xt z14~~;LEy$Q&%YK+aTuJ(rK?ZZYn{|03mK5fGe~;!oafI=J_~8}7H4$yRA3+_Onc=w zbc;$va|%s+FMQliw`AP<=Jb``s z5_2mPyh%?B92Dd^r!=uU`tirg`qtFF!qQ?3e#=qC#=b|OnT0;-d3xEVL-uo})i@;q zEI2UmxoQ>vw*BO|#MdBH<6-bCU9WS0Jg`(&uj?EKT=8;*szzeyC!pmRmC+@~{c zjwdxIhI#))4+MFXE9Kl$+5vsaVR~oWKpOl$#ryu)f{L@U`6y|or3PolzaOkE=YK17CU;LmU)Cn<^oOowc@f(H?b%RPzoiEQ;=QClt5HUt!}0n zK?`^w_t;5kW<)sK^}??1MPoz$Zjqq=iJif2cwG%hnv+7RKn1wyOi{asV)czyrp6|y`;Su!y?XMSvAQEU)bdgv^zteHVtGml-42O-9tzR_uKJWHL!U!xaeiw0wkr+aHMGb(xe+4HPt3=QN z1_no{57%!+21_L0wv_M5%dEDej*j?sO{2N}Xvx{$y`ZCY%C7gZX=coR#VLLWST7La z`ojiikTq*SmQ(BIS~r}D(V~jSFI!M0*dt_e)4bNRIH-9|ddH?%{XtMwtugPO=#ocP z7ee?mLc+(KC75?rllNs_Kg!T@Q_LsY#@gPOkHJi|fyR0B7O&*90sBY}9za8sy8>SjXVlC|oKM>Fj~FH#@n82s!b_!e zy>wT|5ctUriT9>!BL$g!`nRHPH5mutv3^tMmt8Rn`6{K6XcvTag3TWM^-g{B>1^4c z7?#~;bAY?CEA~E<; z=8dfOX>0#)7voII2G*oB5NPB}E#X&iLoikHQ0>J~EL#s;%Vs|uvFcYn2j2dN z99GdDbU-%wrSt`la!XExwXw~lznBA*z+g!fbdtPAqvP49kVW3NRoO{?9S_BgnWp;` z$6{7fOZ3Vgi~Jcq-H_&dCVL=MjWtbfuaIyRpZ3<_nKAQzBkU%l9yj&zh~|P+X29PA z34ugLZV9T)7<*c)kyc=nNa``6bvO zq86unzEQW5;-$c`MvfS>!FKE8c#wZ6_d3bO%6RSD8x^F=;iOW=13LTA*jAN{9)(yK zFD?lhtJn}B1$-5TxpR$4#fO&bAbTMMw}=F?C}!JJ7P;-nDE4TFRJs{LtC>!}{TLNo0HFAuT7u64LHs+eHGefKKv_7w8&6s zNK#VD9%;Umbr^4|)FIy^_bAFfxYcw35^G2`q?GkY=c?WI*LxbmcL~B-*V&?e*?)_8 zV)*NWksA1EQDk|&@Ze`!mK1+cw;OM6r{M48atu)XI!IAXlbj?xZobYL)r6ppqW$xp zgF?sheEGQ(X2*nTV&yx_cPxd}eF@|(N7jYCD5bVmdYT*7G&lc#J@^&4ZF|2rS8XT% z*Z3JZwHrna^bCUGS2r(BvKudra|?&Vfz{dpOvow`wm~rqDW%#pA0isnL+zuH^COF( zm`xp;@Mn>lU(TU*=;nEPDvwyX3DcvyYh@+UzvvJTAKS{s`f@CJXH;tRI?*AVv*MF) z5{|diq;qIVsKKOVqsgJSnlEnZ^6yjmXSMkMF3k#8)~AW;zY$sS5I^(M`gG06I&PHD zpPLDJTSAoMa8U}oS1tWcEtDGYspaRzr+VTy<8Z3DNcAO+${))H;wHxysZo;ZD+Jn4 zD{fBidb;LFMIN&ANq#C!UB~nGk}^bL=4{&=t1i&&tz`SzVH4QGhT`lV0`pJ^y_a&+ z+kjUyxt&w(Fn-HJc#PVHq@(5}kezsRRjjwp1r5JEn|L;IBlB04`ZA~eL&qjESzO#Y z=qJD0euzK(ttX$+$L@3_kR*Nr7kTuKaJ_GctYxiuQ;ChEjZ6Vzz^Q8FyKvWE0nkGn zBL~Rq6=9YM-Pj-fJPUS$e%?C zdlu*&BR@`X8V~8N$5X|DZ_4|T3f%%3&v_TPlt)fCI)Q$C(QLPesHN6L8t&^vryH}` z3_%9C!)viM_BZAX#8>jl#zdtWvWuk~5_ALo-llKpCa2!4Bu_2Tv9WVdE$u1W_0!~D zF_@dCQll30XV@)L*{+l!QRtX)s+7D=AP1=u z*?Iq5G3kx`^gKAvE6AEG_0gPPFCJS~RgE(u%0Z zj5a6r`8^||1->h5${~PVBZ}UwQVyZ|dJbQLJfbC^xFG!=_)rJsrgr~?`h9{5EA*Cs zaWXmv29}<}8C|tj+gWBtL>gYsL5;Svm@>wxAlf45t1N~5=|eNQ56`E^n20iNU_~=K zre6qxbDS|Xdex$NCR=2f3zVaFo@0eM^FIHfh|TGDAyQlc=v|wkge1h_n5k+4_-2>i z&3v`}$(fCRLb8F5eWKX6HdZEVUoL3<1T@Fr4g{Q+%RsU4545KBVmq~d4f(88@-z8k8y>qd9WvENr~NmkG3#hIim ztS_)Lev^+~rMJ1{{y<6H5~$Q;EaN!3N= z%mK3c?sI`5(ZaH_?a#Y=*$i(s+E`rU9b9K#Wb!n_nGA{AsYUj-P9+;dQpl}D_1L?$ zF;?vXq%1z=mqEy`^jd@D>LP~+xG6V2x0uBW5?o}BE7f+PDgW`SsUax`${@eIvI+){ zN7b`1+!t(u4I)?dFs?-cl?axqCIDw0mM#L^A53orx2M>1^*2DK)x zm^IN$6}XL0n}c~YO%Eoj)=gVqvh7sW>CRzmupxF9%M`hBW9*XlD1e%tR_qS z(UVrou~h}$%|YczB@J+icztITDbjjilbUO!#haT~PoqG*cQcfFzW||>zuYaZ)?4sA z`DKRW_d!r*nisc5vcitMfz|N36AX|uj_JMspyOZdnlCrZMbmxmWHp`B{&F<$C9|Vf zW}*7XSLM(mO?Lf}duHOKJa#-5KsF)lHv!+n17F)D^m}cqme!n3pyhFgQt_pjfps0= zC67wk_JC*Cwqn?Zc zhOL%EJ}lrg%`$ps=X-0z>BRB4n~KMaS%Qjl3WpN4EMy#`3p>~M7db~m;s$dWGxZ}t zsiwB6sy`1MFOF&yK;9!-kib_6gWZ9O8WaFimFA**z+=CJmMj1%Nxm4aakYU2nxS)z zI5}#Hr@y(|M0jGw&D46wGFuBhK8P7_P%VSiE4-TvFcC)FQrJpsvqy#v#R4#3I)bID zLw-;wvwG9Jw7+HM3HjksSNO)&31CF=;0Qc_s4!RKMn7#c8NjV)ttUQ%oq4qCqdIIw_q-A5>WS&kRhFC3D8iID3=LSh=!!u%kJ=K@M&T$Y-gt(MR>>a+_$r=_)wEQ zHo7|Jd+TCl%Gliqe$OqulSu5*Sh2paPd6?l=B(#Ht>#By?|xxHzg|RmCBC=7K-U6N zdf?kQCw#zl7O|RQv5phpdVpzk);t*#lHTX3YJzTj?gV(x_Ndxhi-OM97d#Kh_g#%Q zp;-~7YIZmPHg(X#63ok6IUdtgOBv>K4XGI^H*5DJ%c5GH z#tsXg*%UqZ3LXHLw4tK41C8_-XiO*5WFdzfvMQkz#wY1&dASzcn;8S5bfz4RD$cMK zBT{YIdiYty)n$ozOOun6Z&MIgYI=I}p*-3tMgZ+)AakKVux?SiYj*lN0VVCgi6M%f zCg9Mxu~?b06N?Klf8|*UbUEjQnf^RT_1jv^J{xH`^siJj%({aR+sGD|*%6uWX$mk_ z-iGC8WDS`CefJHsiyQ#Of#mYWz_^H+cDKRKIo z*Re)!3$|2}lFnnL(BBoEm(zHCR^?Woa4u9t%CQ%suM(Eacng(n|Mbzx70$_(A8~qo zA7}ZD`BV}C${sJ~;wuF*>Bq@o0J1(=f`QIzziI3`26=) zJ+ZzS){Lr49hKXR6?feriVP%o#SEPmakf;cQ+M-6PJ^C9qL}DJggR-dZoc;yC)XMf zuQg(soSTRtynvl(2FV#UEStBWeNeHY5ak0L1XG%qc4DHlI;t^=CRrxW6U$;jRTp4P z)T@&cV@`h26ZEdDN`+qY=1fX%&5ZPeDd#U86Z3V5!{0F+Ap_AIN#j+}E&+RIp_+U+ zH<|vXK);n-%k1$UIs6HSlHXHKjeGO?ToDU`#)={vnFfqxz4ys;90J~N-P_V#?*$%; zn0C%+5=0)(4A{Ux2pW3Ec&|+Y7JHbPVU<76A4z8?LcO;lAQ6*JFANn}mbjJ)-Co02 zlP^hz)}+GR5t^WU0pts<_wB1KmmV*#WMz8L=-Sd`c{1|_usQWv5nv*!bAkK*=XX%2 z-~)u=w3o9Ij_4;kHD$Kt=gr_NtGzpH=ViNnRFTuUZAZ9t%%oxxweq#Jpn_fS0$MYr zXsAVRt{)vVW=k_!dALsx7sPdfh>4ZZGk0ma!WXVpxOB#AUyYL*@ooH_vbCTnc4(ND zx4Z6I*8E@2Ql=Z}d1*SRri}QTl|}zpz{yo%Fmao$o8fNx zh;&>$qr?h#q>l8EDYrk&bmPol-Ih9$O4dp-z&V+Rn-7#$RRUd2F~`nNu{GG2+*0>Q zZNpw}H)}&)LoIxF;J67dMa8ch`^}ng+{2kK&UL&>J&j5VUk%-J)4L%#jcUrfAKs86L0Dz)6#@0sX5`k8ddTY+5gTw2t!H?@Jk zal1O9fOBfOHyZ*Pd$oeofzs)iN6O+*wmI&jLhDrgBO!=n|hP8r#YHi zy=J38i%#ftYxT z=XPF!O(8)OOIW~F>-QkDreHDmq8NB?zdhihVP(}<_#`83>}0ng4<`AJP`#MnB9T3~ zLG^5Ug^ZcU>fvTW<;OPibGLtn;|035UQsdfR`sISPOY5#iAi_MP3lHAg~->Gu4S+f znZ6HJO>C`QtFhZb%oI-YX;9ox2mfREj2munS(jA^j3{x&NAao*iD61aKc(6z)zL9N zl-+_Zz?u|%Ag&?ngQx@rjj@fdr;))6PF|7D6t~z)zm_5Az5wtgr844vpi{s3weGJT z5zXk3x5nC87@Cfi`i_Gs)TimZ&9?PCm&dB&uWh}bs-mY3o`rY*J_JV`ZB8@?)xDE- z|3vdJgh@w}kTKOikKx?}C+!cRCfvw|-M+xx{ZW zgfxY|-FtV%K+`iYTw1zvaS>ms=MAaBoRhnd_X;J9v({Bh*`PH6>eRMx?ThQ)l-nP%a@nI z`L}OWX-?4ChX>bLL%wNV{lQD-LYg-e|J~14`%l5GCmY)gLHZ4Exr_b}qyBx4O(rsx z2p3!L^F<4n(*HPK;Uxvt7*5|g6?|%Z^Hb*zs&c45&D0KGi7o>_`ES?v?~RxgzQCQ|AW;uwQcv8 zgs{QqM-TXwH@5+i61Df;;k%$pUGFQJJ-`sJaee|du>V`DQ=m#9tgZOuzcc;+R~#f0 zSxEnHWVG9-U+rNG7Tc|b8BE_+jOL_C#Nmos%m1ST{m)rSsIH?D7#@&QGdf-W1&%Bo zh#v0aM?XDn>Gzf=nN#&9}u!TJ4b{+hHyiz~&byQ+!@3XVwLDF2*SL^V1|0MvD zCS(WcCLu*mHKqepd-i?O@!u9V_55aG$T0l#%bL_w$?NkOwc|+=s8>3?ub+Wxupivc z=e=JQ2^9Y?KeSE1Gc^8|FQp~RGH7}n&=qy+^3gjz_?_6lMS`udX6tG-7suS~`{u~< zVS$g{6x#er5Sx?sFYM#AsAop~%EA9-FV{yjX2EklOQqN~dqy#hlYL5n`E1_n|J|Qe zE#=&ci$aEbX<0*%oMd9RExHVcF*bf4^}vm4zmI#Z$a)d4AL zUhs1wM`-UzUgSnjfCB5%gvY;mTe%6%7;laXrHzCovzaeVQnlYsVwMv_RH=%ki@|?w z22-=lS0&P{AeXt>io)fx|D}$sdqdA!)8)Ad(ZijQi5=VOs1(gtuK!qgY!2dO{Pq?c zc_P^)qIY+eq0aELULS_F2U;d8v5=mhLVzMNCayPB&#v`WSVT~T<=mIBY7oC}yzd(F z$NGO?{Qp0;%bf+v+n$mAcHeE;&A>VvDdqF{?_B_h<#yQ8#$8d36D+8ASF*l|);1$( zrpVyoL8AryM-q<+0X;rdSl>bnBHNtRMZs)?3T|>rCdq`N+TGpr4H_l|P~58MSX9 z*6MxnbuCWc&kS60-55S5Vsa8TamVt?i2oeFmoN4ni2p?&q7&6?>q+V_b?i^>B(cuBVTz<6u zFvxP+8M%)|Bs0Zr*P&~-8YlU%(W1Tyo9=&#pgXbr5@`1-9|)Fv{*~m}Tpr-1>ZHeP ztwrLng*#`+)Lm|c@ejKXuJh8|bcm!CzV;IsH=*;yJNOOLziq%%_n8+kdoCHLTfn#i z^^>*APByK-xb=Yhp9&6E2c=q6FMoNqeStYab1$ggoR-!f7w^234Ts>+)~0-Zwk9Vd zrY+`Fo%YRCetc&CD;^4IT))$J?{dstYs|Ml?r&;=ZU$&X$IrWq2=EELLmcPWBq+8V zu>yA0e5KG)bN`&}e=AN29{Qof^IH8Bdnt)_Rjb{qL4NjZ(}vwg@_3ldO1Ah?=$AbR z*jBHI;;u6|nNhqfQ{7uA`B)gH!1(iy(?Q9wnL&oa`8-YQfU8NoqULkH^;@`)fhypc zy~p7x3YHW@-3Q)v(~hpwS3H_2yW#xSW;=iEJ?qbpdKefsBhwTtN#hxB|Hmt@HRW!r zVqb@;IVR{;ZA~^*impXowI*Ms3sH3H!WL|E_Sd+VQwnA$yEFTv{(=8q2&1|!#!s;= z>&lu|FR99q$21GNzQ1@ct3?v+Gd;b{%NMd&cWN+Jp4zHAF2nwL!}ijOW~>t~{=Dv~ zNS@CZw!~fD5i!PjyQADGJXg=i_6LQ=rj$Ci4ZDrtUr%dK@~nybm(6AsQxU0 z8-(~h>xo{eyi^ZJs9?T7=aa~5pSZ?|ZRfw#pZ3A=qNHCPp>RP}JRVbR@ZsjYC5^6s zwuABT-LrBY2(b-Yb&3ChA7u$L4uZ64V`Drb&zp}2=*Or_VJoIplx9S~^)WW)zQFsR zY@#QT4%dunc-n(j&zW4ovG8%h{^bPT^jw@OF4vQ^E+u(YFy=&TKcVLH%d+$y-bI-r z@EB}Hzz$>u0Kk_y_a5=Z^oUsF9-$>hFh>Sl+cJY^+J0gEZF`CdKbhzI3b?y9M)mlsB|UxpS9WUm8|y!$e}|QT^p~yY_9d*Fh|-IB za9XWEUXC+q_frpeMy?pHFT;3sFcrfi(k1vQ-qN(P(3=17MAf7yQ1Q7b2em&yvq{by zy&!0QoG~R0%InR<3|{kuCdQe{-m$qgjKR z6AQq?bwm7~LqXVnke{{^c4ZlL!hVJr9^7n4d~n%H`rV6ZUWQ}Wau~&!)CeD^KNL%# zG@6coV}UJ1gA)R7K!QmsYQc#B2^54@sD9iyq7QIy`xCfOe>cwxJfCegmI=8GHMk_9 z6+ORRsBdbik8hr{LIuX1l$$-X$Bu8G-`-~QKf^ltyI>N5sP`*Lv<4xe>P5m`8 z^2~vi;rkrjIfe@HpP8aWAujg0>-kS2Im|C9R;IBGV5XTX+N#32S3GIFlfmt;Re#ZCv4k}Uh?ib0 zA!ggX0ry+Y5GRLa_mLe3mY9Py_;|B`#h+kLi;dZdjqlAp=ZRii?iTrquw8flV23uSiN+Q0B%R~ zH3O7ZlLSyj1sSh}4bxuEA0wC&IAwRXM;DIAGc9}gZ$WjO*uL0H{npFaEDk)=aNLvz z{B>vP?N^+)Wb3mie=*}VUkgV9c|LZB035mpY)Vh`>bF-JF7rP41#}cL13Vrrr85F- zIDT)-b67Yj?+t}=&F0TuU4{CN*QhB=pF5)-jZG)UPG|Zn)T(x=31&pVcln~U^BQ-X z0%}%1m;5NcSW_TIGg$mVby%TR%y`n&TufSe-MW*wM*ngN0dlGz6}c3q%;i{JlnueQ;!l}Jh*e(uTlj81Fat2RaC zCND5@s^*^I3tH~CM6$d5buHdIvE)~H?`KXN`s;bwmyFHu^8msCVjk~x#2;lb2R&&d z*QzaxM5@gB?gkbMq0Mm{(1J2q=^Z~VZr?8tTMw3)jg7U+o=d45U;%znuP)vH?2z!G zAXtl1OVNdNJr8T6^c5dm%jr45&ORZruH~=>-h4Kjh?w6R*h)Co5y3bN%r1_XT>%!~ zBxH4eTW?nm@7b9%{hS%pHyoar*_DGpoQ7s9lKo6AlnZCzE`Q5vFTK z2cLO;rx3LF2L6B?`AL<<1BN z8aAihDvxWq)c)b|UOOS_Q*U#(stXo*s!<dQ2$UpuXqRs;yLI5mPKMf{Px;1k&{!cD|EL_)< zS=RnWgBRva4jxq>z4}7JSv`+%#g`-WkCobtB9$TAy?@wVQu8LrCq>6ls?$=jQJ2zV zEO?uHgq!?t5EbGJMO-HuCZx@MjWA2nXbMTTEbz25H2I`8^om4R1Q}TZaxVWIkNnmb zS&s&)U)qQfvm5h+MdrD^-nWx$ob8ugd^=LBnH;TWpk!$Zshtn3@?8@kBZ}IUl_8G8 zgiS`d4Fb4ENy_0Oc^3r0+dtnX%TcMXKM?xE9%TvXCCUvlv)(=*slPNv5Nt56*D0gc zfa?2gt3vuD12W6oj3e9wP;;fN@8_ty)LW+R@V6^P$9?w`t-%1L6VBLPmiLt{I{JK4 zjra{u&}_z_T`M~#QgQlnX_7rY!tSY|f7fWQi}lG8{>O2PY}^IBpL<)H5cd7%`freW zmFjj8GEPtG(#!tQGmui{R&_fV(6MI+FJBj-+L<>WYQCOyUH~d?EZtx6fcUy(QNo6WSIxBqhilND`S3^v;E1( z;e3{cen$~ljK)zJ;35r@S4@qQKnh;2C2?HgK1WdrZSB|JfN#xtF84EF91#rL+?PgQ zY4`N3PewdD^AZznE>_rMlH2Z94F(Pu0S2#*@yB1F4Bz7CTRK+w6N*u?M9{yE^cHYl zW5+P^RD4VJVzW9);CrQ(>LjV!v?=#Y*}>t()GsnE6EObtgKzjBw4J;Dk{8ax2GX-S zf4XaB2x;>|!O{-a@wQvHcAa03n(}hb$TxWrVq-+Z`5=Dv+c|ad+DyoM^r1B=J*7oI za-PL6GCxg*>^7^-{2VXwOm_gIPwz7Zm8NtEj87@I-0A| z-@**zaBzEBn=!)SN&=yVz`z9->@Uv5uJKa*tZ~Mxc|wD!oG<9c zX9Q8ZAdU%2jMWbI#t1Np?ZS4^DN3mdvk}Ci!JwL1$fO$9IW}X8;!V%yM8*E&k9*C# zmzTYB#sy`B3?};oYxZ4MC9F9z-U8GtK=du}JdmhMWC|i+dS|D24rgR--em+XjiMNs zw`K+S@_b*}RA zs)38A^(uY^{Y<0IIX(eYu=u0z+eHLPlmFxcEQXX z>6pED1-Jpv1XGaBbu(P3-r#H`M)@+UiK$V#*e?ggN2CGq`SZf%6bHaXFyl=TL66nft zyAUc@8mc}MwXq}+R#nn;CRCtMO_~zXnCxh;luG}z);=K}bMP9Ufp2}wv)Zr;a(9|A z53*NNC}j{JO@`PeUEz=PNe{d05U1^)lVi^CYvz>MTZJ$Fwr94CsV)AoPsK%F zsPh2CE#PmG-ye`Qis(qCOGCfrM?^}$OM1bdNU{dsW?`4 zbD89JrqX$%&#s~Y450vH4(DU!ZhVop&uU0USY$0!9$PocGoGuBI?9ES%f`eczBK=h z=eR0r{kZJs$2cNkXPF{_k$w@4=0DTiiwri*kg0)C ziKo@kxgLK@ZxFs^f_A5E@8r0-GH0KdY2iSVR6plQw~b?oVHW! zG0_Jp4Qa7dow?wJ;1B@rqobpK<}d}EfSq^AV{O7DyPphYS59-Bkdbg6Oo@C@!P&~kW}@h$os%E2KQlb zBc@Byz0m^;xMB!DnPv)lU3xJp&wPz@M1uP9^KA)u=U>NLb)P_sRdd8`)D|@`(R_c_ z)kklel&;qx$G#k+zG^n3x|QZ~OTQAa+VM>T|GZQlk^|aSPSbOZQbDHqD0)t|yImS& z{@TiV9ExI8*)_}Wq980LJv1K@8y2$v9%W!P(|sYo46j7=L@7+4+uOhL-ke%Iu93<> zZykAAPmg1hUD;c*%(+LmVlLEVx>|)H|EznT>CO+eY@R6& zw|B`uY8UWuEC1$Eefk57Hv5xt-YtVa?7&=w*IBLCLH;Jl72IuRrhHh93r|lnMjYi` zeqeK?h|Tmr%k{LJLQ&H3Nw&1?Em5%(J|&LXM%FFGR`c8h<7ho_Un~e^EvpTVBE)eR z$t#(SbTa>kT)FwJ$IRXeVOt90BAs$zjyyl zIpG<{He-J@INJXOsdWJwU)-F(r?;njLP>JpQRoVCI@@uYZJp z)E_#;z>|6g4H{4mI^e)2kZfLZXXx0J z+cpN|%I>|?pGX)YEI?lT7H{j?zP8m&Etsva{Vohuj;W19`R-~$3A;^<8)Iz z{_Vb*9v9F(=Q`rBy&6B{_S^4l#wut?p7#ved1eru`r4WFamNT8lNGzJzxMU-1Z{3@`o3fM5pR0^%gcxU@tx)G-uF*2rrCi-xBTEK zJ2mmtxl!iKSH7sR%MFhOrq4X?sm<=ox4rA^rceLzZyzeh20iVh95ZIihQ{xH??*#c z=QVow;fEh?x{J{I(UVi?|-e!NeQAy_sQZm?eZL%YDXh+kAHf8dCNOK(6qzPJvY~ zv^gdZ2!ywvc=QqF;<$U&yHU0pJ-TU=ERG(%;#zFr67<|E^mnGgg9kQ&sSAGlhtOkR zX~wRthvHEoY40;{ejCTro_ch7+y8rY@X24(S-IJ>=a#qs-3Nm|?`q^C%dYEheWl~x z@S4+`ja2VG>!Z#5-^PeDU-6>yng}H0-D_jP10D6<3$g9&6(ki~!XV$%7$3fBWtaHbMEG){p|&6NTXzqk*(`ud=66Eo`oMg7XY?cHa`Bl~8oBr_dZH@d@^6|QUy zH-r(GfDi`2AN7R8f&peWD`Brcx4;HeQ*

    iRDQsdW-uNF1 zc3e#I_S<{UW{Wy}7)9eD6d3#+Z+%@O9E6kO{DrT4qq!~RF253jTc6b&bHC z{?b#+S+PQQS=@F&!CC2k`&(X9&icoXhv7N6JpI@w6~^wi2oj$ZE8VX- z%P#vn?F_ zKoiigqcr()t1)BBjuGf^>{j3DA&=@anNx1sv}w)liTXP|9%X@twvUzDZDPkO9u^R= zdrp93dhE~jXntN9`nRpD(OFQkda~TtcZ%G*9sdwGo7ZZn`@W!CZ%O_UvEzu*)!zp~m!jAGVeIs8 zi!i3U?lYk=(lg_Bt7$Q*>5BHWKP(m}b_u!<2?IVqR;UGZ1yS|a4qvwxjgKJE?AhIc zJJ_KmK9EMn&KCRub36RT$D>fRq2KD57K>q=XuACl+sQMc7=jOzsn4PuG z*+I8^&z54L2yJ~y>!@7M??T~Ncr)(KWc)dcn4-b_}}j}I`)|Gajv@J$_BF&PC2omzgqz5ZjWWU z^x{h*2>O>sAKIm<>_LYd)X4u;@e)tFvJZR0;pMVR{`knF4Gs)lcX;e@rq9UyCGp}< ziz0aYh?p#I8~T8)IOwoL8XkGz{`(spPcL`HLa%(ru>Zja#IrLOM4%#ekTk*l*nt?6 zNI_Dz?w+UvuRjnIZ}e8iH#yo|lZ_F7y6U>}u}}QRO2N^8w{tXfqJ{LwDg_zKgqYZ( zr(j%==8=St%teNV-)3{c|Igl8z*${wZFox~p@d3^G$>d|hyqF|76uq#D<;;pJFm+1 z8lRnr-3SVZgn=L+ASfUr4N?k7hcw^&ti#6R+!+{fW|&x;-*C?P$BuXBdiPpu|0rvW zf?Mxq@E7HSd6@P6DQ#NYIDpc_@R2`;2mkZ5wQ00QAGqg6jWxUL%!b`fY2^8r-uj=6 zuy#QUuC6wkuf5@38{1Boh8>6BUN70;%1h4;$F^!_eFtsDhyL?SSgAD?K2Fn_Ef1kDZQsNKkeVD8) zR%snEWZ3t%d4(G}OyL^|-`OIP84FQng2-V!pq>vE8Q!PwS6U~mRG&n_U}I=0Emer; z@3ryF*!hRXYuX8J`}oZ|iRa00%0S-*Tk=s{eTL`o7mO^1iTFd0JR_NFad_~)n~Zej zeK3RojQ1Y8?`GXgkfziL1R^rSZ|V~X7a=Qb^Nu*v3Sjr+*a;${78rq;!2GYLsV`)F z$n#i-f8EX4Z=}t5cF4hXLYLRxlM8_HM&6^e^g*{?cKF;;O&b|8N;}}W|2%k`wAM=+ zmT(2{iRflbK?&xLd;e==!L2uTQk_TvPW84_@&kPn{w8JHh@}A&(*9lTZjU{RZygij zeXN8>|2W?IMP_q5v>obpAGw?;yH{yx70=Zs&~oKHzvQ8ErhN_({Ncx+8DGPg`1)Jj zOl$c;wGR{mXcv2ELyJwMd!>DiODV&s?=3VHR-4{Shu_@0}?wO3qdJAU7d{2@I0^vmH!O^}>E zKR~8Yg#OZWYTM>GBQ}4TJk@-TEL*W6OprEdO$iF4G!V{~;EpK;!Wkss9XDNV6B2_V z3x$%9Ktv;-BSD5;t#i&iB|Q1qy|%#lYT!`wL&9!LF$vW)e(JH) zb$4pOUS*Sh2dQ&^GX!&oV3YE%v*v}DUVX=QVAwG}`>c~gi=&UU_?Wa>Y0|(i&je|T zHq&6n;7kXvtV!=`5uD2;5V8nZs@=uG; zxxLHUyL9fNF#SCd!{+HpsjpTdt<<~<) zrP=(L7NMZpHF4u}?xS};G@=c^aZQeH8m3DCt*gcIFPdz+>0X?O!LHTut-=vUHL-Go z$!KZueEQKRMpCqCcXFt?e{Gdh3qzH&`+MEO1Zjn|?ahwRy4c^j+4>!?ReyCF>p)YtdleXqZf_8sDZIz{k5 zyh&rzEPej5XN}0|AV1OgfrShzQn*NX{{NmclA7|+{#bA?*COe)=erouh$i!%(#D|u zllLytkcRMK?noJ^KQN&^Q11{+5SFx@fdjq{B{lvZtONQWso4N{x z!+|0#X!FDkmT$iFhIYEwS$vSiWwhuZ&R3KNG^!z1sXxe-<4-vu%#vow$M1e*gk9VA zr&~Rd$2HOnc>j&}!m%eEXE>9_$?8uCI9;B7#o8M_Xw>9zi<34B(Y{FJ4@B!}XSKEY`t7c7h7Idvfgp>A_Hs4R zzgNF7?AxKCa+S*Ar;%N~KkjL5 zp8j>zF-I#uO^x7XLj{tYzCybNzZmF8m8(?=r>g&y(Ok)5xPXX)CDJZ}q~_V<)Ryo$ zN?%}YFn-+l&{N|9byB8mSz&RC`C=wch}SO9ylicv^+~POcBRp+I%Ev`K(2`xFViY_ z%u`PJq<=FfKwh)CGFyUnLE%OD=(F@iOyZlgXr_8BV`Dx<X+hqij^rpLw56Xq!9LMA)FKFR~NjlMMmpgHzQ0*ubNYS66#GN7@zdvd)?`S(`mN z091X84FWarEYt?-`(aS<`M)9+CFO>v^wY~D_3r^a`0@c0A$3?Y}i+Qg{wly;BIgrChgL~z#>@bfdju^lbViNL=eB)N&J^9@oG zptpQzsKa;flG!xcs1THA%A|RuHb0OLlgl6DX1uH;;`N}q`x_wvVE|bG78gl74pOG` zW6y;un*Sf`e3!|t;8#-X)_33kGz=axLZ;xyhI2cdYGhn3&DAKXK$@Y=d$#1J zANG#$?EgJr@*avs14P(jUXI+ck2VA!f8=hP&wrLnk{4fj$MTI?@5NG3I+XRcG~8%Q z{lEA|a~az2)PYh^8)Oc~N)TBF%{TJE=Ho*7jfT*Kn5F-r0AzkXg*V!9kVkR+r~Ft; z(nntrfyaDGB|`{3{J<^Yg{Kpim?PA#MhFAi_}|+B8p#POn)B6Hki}Q5UKKw0sFxk) zrdt|wHrhCz+#UguHC<}=tZ%8VSx-RN9x1=XYvno!7k}IGwaMHtRdd$6AAAz7z3L*8 z*c!M8iS?RfsdZ~PFf4Uhd+Q7T@QbR)h)~iog(syC=3vFR1F?tO12jLug+9+_2K9BX zTr5DEzAp?J!|6vfU)J#)Ys(Q>?!isH`EGaXqu`vILZXJUS&5j`Mrq0* zG;qO*ft$qu8oHQ+V50J!cAXi-n1JhP7Y~0eLxep$K*WQZHoFmYP9{j+#SG({!Qa`y zU}>v7X$9&HKO?vfV1X2U4KZk-(b4sd4{ZmIPMuc+b%W6RyR@AeHEJMJr}F=ExDs^- zmiub~gwV{hOinuzn9v~^AY0Cnzs^x2w?+*gW!jhI0Wu9DWSS~Cgb z(F#NRjfM7ZdiKk{14O3I28{lG5<8bJg( za*}+*L1p}RNG5}3;CHf^H+-xybxF+rx1e2O8^_tr=Li+ z;in8`K~135phKyR*+QbLrl?f8pg9 zS>0nwkH*h>Jy)Sp1(B%brNug5B;G3lf~!`Y{f&4=1CjQJb}xMu&BzYwk7!DR3uW%u z=@O(DEt1!UHf>HZ!tfg%()NSqQMBpMygamiJtKDpOPCoh;vI~uRHrR_hQg-taSg`q^iyUJeWc`+se1gL=R%!;jL+n=X;knW@S|y?CB>Ar{DxtZHaKu!Nazstr)cOYa zfj^i+$iMnr7hw@X$Ez+i!3~X3G;e9Qb)@b4nfeig%!OB8B!aVY7@;w&LDPnTHiI8b z#+?JyhEG)AfV_kFje+`OENrjCgs6M^6`P8eTy=>E>y1@k9y5bfi+DL)o;`; zPA(gpWNbn}m{4C}iqJht8?D{m`M~Op@#wN^uh7OpeO>#=G}5lQ`C1!~zE=BYLyh){ zkj)rbM4J?in;l^!{@WU#*pxvV`0{^UsZF25ZPRbFo@0D_r|a9M8P5TCS1V35s1YjJ zIB6ylA1%=$yB9HS)B_JW$nx{v>+giA(k^3sKC0ExHqVd-a|L57+R?eK4wLI_N4_)e z#w;a+;sir;hy^+ zH0kYS^x@%yKp^?>39{p|p);UHc))Cz?V<~1zKl7}(! z7V}4b|J3+5MuaRHlpKcBL4+12`lLhOIZ1vg$rBo-tEIsRVR)|m?-2(w2C^fjzy!*I z3^rGr&}e~Tx{9ebeH!xTH_g$QoMP^drXI2mfw=|^Ve)|4cZW0E7$%jg>}zt`(BY$P zeuhkkv?efSG&t;_aG+c>P>-x}^MNJ*lD;%RV&bVtjR z_-Tu*1u&(@oSSxhbhE~0){HqaV+RB%vNL$}{A@sgG`&ZDBH3^zZx=}0_8QIgm^4EQ zQl7K|`Aiwe1G3o@@?Fbhz}V65wBzmI<7v}=wLX#-7eSu-eK9E1R~zAAFxp5=<6RNe z9GHxTYgPm{4k=yAB2qupAG`~J@?vg1anf|*Dk~WE7hGKs=x=C8Gal5?+G&{j#Kg(d zwK2a*ZDh3iX)7DY*nCJ!3l>cJXd|fpVF!oCjp`*~vROoB51Sttb22+nXZ^nzY~#kU zEt*;z`_F^78wojH>y4CSRLb9sH}EL@;m!~|3}9uP!~5pSItjv=@f*{7xSvW|r~cnl zU1SwHH~hMJj%kr{k2#33c>K?k#lZ}>F$rRnjRoci#sk_3b(2uQnB~p~}Fe`9PD}R}FJzEl^6qW@82PsVyxx&Cf<;8)59b)ds!GIkth)sUSXRITt zaYg^6ao}QNMEemf)4l@+nri;W%^GC$$wXKhEb6nNV17(qGYj$^ie5U9jIHU=GMqD^FT0)?}G=EH4UAC^a}~Xn61>RRV`E$@dFwC z^*2NR)=3!L%E?D5iwAZGSS)}$onm(_Me;ydw^PK*f@1Sk_!!lYiib<()|_>)ggBq|LN&!2;8UBfeQO{iK~?4vU#5K0qM^ zG4({yhoI^sVu)R0+6W6ewDI_kcINo8IIqrUZHRJ$Lkv8_A{4DGh!HgDFg@oxq#mY= zkP4V~b4oov2+?$9K>}%pN%dQ=zG>Qe;7B?ICVtvGeSo~Mpfb}|%~l6%5=LwG-PhhR zV&(*C7m7+XjXUDR4E!6BvtN8Z!0M&qzWW*(gGL=?tEb(1@{OPiQH%-fWKE2PCBPsI zgJ-XgKeZiuo}f*iQHf^mjH%O2lM&o-3s82Sy~22HEMeLS5t3HmdCa20 zXu1gQSsF{w3?S{YGQCBM6;07Yl?Eg=8on)#ZE2c|AHMa04z!wL8hMZgm?mSg3}FPO zXpdrI%wit*1T1bbLudR&`wfz9hDdJetgLVaWwGm;0==#(>0RXo}#QF}uJfO6t) z0OEtXAdYe(mgmj>-rNYVFiI=12td1(e17sl4Yva%7nHV+F!U}z?Ud#_K;@fk0PoF)oN6?Yt?F2m*(+7BKwAfujCqm1#pYw zTAH@UOHaONWj(aPVMe&2B}=_RWX;zigF1k;q&=X?`tvwx1quUjMYD~#nGZSK3PFK> zM0=$@lgA$NCp=y40S!~|Bfn@;;}+uwkC-d{_wQJa^ z+mRIIS?UJT4RU+r&=KlKeJyR=1CSruCix|O^2$a4?e5|$I~sBQx%xCGtFyTU$+)M? z$@Z;OF&wGQ27D?GP``|VJ0$KxEr82uPNI%69i~p01NPBeL_Kk>vBo}jz8RnB&)f$X zgc(RO2*xRsrWk?5*kf%*UdmebJ^y3z4?_$%ks&BE6{x+7z0PJPV0TTVgx`3;uFl zP(4ASut=vpCI`mweCi7Xgm05H^a$%C!DO2Nkkz;&VQhv#ifsd|=$mmqut*eNK@sxI zdu-&Ona?}4Df%1pS$v;yo=qp(GIhdu3(3LSX{I#xxKA34xy(V6w5dXX451!JYD043 zgo!pDF<(H2;|}IM%{h!Kc|BPBRy|;?gjw=5Vag^x;|Umpd1eI&J6v4dEG<2R{AZqj zLkbHct*+_k$pM0(XYc;zlOOW!dbzE_6cTe>=ERH&3DUlBxbwDaWTmy2olO8SNeU^k zpiR>^fQT$WV69MFMl&8Qp)_}x!SiQPNnhqK~Lb*to!z0U3Z;aQ;fw>NX3vEIpz3qM? zf0Qd_+2Xs%EA+28Ch!J$Q&y7=mEK&DOfy6h;A0rFn7GI%&&2n@3X@T+=1y;WLOAW@ z*5Qc8hlQt}ea*0il*g=__a;eZMGF)kt_0@imn)JO_S>KYY$7ND4B+S}SFsEUa}PODBtLDk+V0&V|7GlCh_%h!^H2&YD0Ac;>7* zM*flKZ3XJNeEGe?nQc#$0@6!nZvS41p5dYUZ?VH?zLkb7+PDPfW3)m!iT+?|+!8na zbI`ZLtv(rFaYMm@Q277+^Ut-`2EiO62loqT-l92*wj}Eie5^*Fsvr0GTmfZoima!``t~1a#d;3HV(Jl{fKE4e=3EXC#2bWw#f63 zWVOhlPP9?#leWlaIEqEIY1YKl*^AFSY@0CCWGz6tI~u?McYr8?tXF$L^Y>U;iLsfH za{Ne+n>LAzhY9xn+Ax6FCVj@9e&RK7zmOGy)`m+2#<2Y*2Vp5%Q0)!*pR-LWYkkzG z|2J00a@_nnZ z;9$3;&;1{%74bmXe|P+HL6!NHxkt07herAPO7lt z&20fpvZe>^0CH5>hD{pmRiOn{0oIXHyw6~j94JU?gc%Kjzm$PaR!FA>tIvfZ1viHS z%B~ChmRudM%3Z!LUl>1M{@+$>(%I4gQ@)>-zv&=MmITNJNMR-bb^!O=uc93?#e~jI zSXa3p;2!TVIN{fmK{sV!!TrM)pBu-^|0n}1X6o!ZCQpbgLKZGqWN|PNu}i_+%b;w# z4yq$2H%QRrbP--xt25ze2fs8OG|}VhmG>cEqtK8tU;L(SQ5k1)x=g1HQvaM**+VAu zskMdF;>hjSsG~2x92kxjNpHQM_*%pa9Zd!nj`V5D4#~xYdX7%%M2Md*V(*JS{Vi=whTE#%sgp6%-2Pl9&g3br z$&bY?8i{DzG`UK)$FHTg1i?(a+~2QqqK@$^N?g=YwVE};Mzw|0&ygmau)<^= ztwRVq2uH~EwrYV95UfgY2KlY%5U-ji9CL+d~|Bj3&xPym@}=G zmMbQ(5FR6kjj(vBGssAM5JJ9#8>BAe26?7VAnFi8s7HJ`Vy4f6rI2u`QM;Bsb22Un zRBsS5kjt2jJn&5WXbysR0C}pG}`L;FamidoGI-3H-N54f#rOar) z;aULV60K_LW~Sy4?%|gcO=Cz`Hb1CS=4i?XuCxiTqAn4*X*-p*83w^lxyV2HiU$ud zPE?eiT8MEqXmcllIX+_(=~)}sd<3anrCL>KApK!vGG(RAgCzV?=V(^eRvYg7X&(uM z2_M4-XwrX_7hI~U$mJ3sSVDwFFt8UjF0rutwfr}65=D!pK43kWaDCjHo<5o zF>Z*zKH5ORJ;No^bj9t#H<~wcTcDXD6hWBdvIIgHlXLJRKt5p7$-0Gpmp^G?7qLo+ z7my5p7gngBZ3f-n8iz7sL=zd>(sy__wQ-3t2p_m}7&nV*J*Q2AIkV@4VXTknC(1kV z(tc?#xFZ?+!x%dZkxdW$Fw^$(a$wv*%jkCbUu%5$VWz$H;3Lm!qj-kR@zh=X%V?a4 zm$m9Ooh~%X94rhDm!=YaC20djcB=je)`qMdNlwu`!`c{4$xCD+idLp7IzzHYd%^!9 zMCgHPBbYhj#}Dl`{CJWId0~yn;YgUZCl0NWUsR1@xE$-7bVx081nm#gO{~$1?Ox2z z6@aWmGqQ}zFdlkv9rJzp+iwd+9BJMaiHiIX1NbmrV&07+ z#RSa}XyIYD*+yp*oPE}*re)b!8i14u;e6)IIkK2*88E#c{O!n4TJ4|ljj@^yXvV|s z^i)fp^#+6;bvJh0FJZJc@gUqvXuiVAZQR4Z#B5sHn6whW4Xs+_$tR!bYNosR{VQ9x zl=&LPstId1$gN767nW=DI<`z-~fI*Olzbs>x?3!4}VG)Lo?lLNeH zAKd#xYeF^*VjzAj59uq&s;{YzFu~@~nvdkC5t$Gd2W*IN;LHW*%9WJ*z<1I#q^=>L zaZ$i?nD~=7a3)>|rRvfi9xwS4!kFL1WT}L_iFR)c)EB4LqgjkLr)KPcB`Zoki?se? ze%a9g#`qP*KkYQh3&`u7PS3;vQOz1_TY-LwRxGXzZqmjKgzsyT!#Au?xck}GyBT$l zISPfT;nMs)z1@jY(wb$O%n-XKyQ_~495gIl$x&DM(uJ5uOT>XeOH6x7fV$1iUM9e8GILT$P-p0d8EsXmR8 z8d{yK{q&jz-pBv)4`Y5dt@b+l4$-X!XMJ)%$Jl+ z4f?}G$qkGLDaVb7ALAWWH4E? zBi2V>-K-1+fv+if?92yGk=KfIx}4@f@-M@(w)H+zb-7-xz^ z{8U5$0~`yM^aM1YY=N(|AZEtsMBZl73@D(*4+H_E#&Xr~Gq~j2vsMTOEZuyV?!+Rr#4mXWgd29DbRG|SLNWTy}9Bl`4QkuLj+ z2;rUIglNTqp#7Rm`q92^(Yl2e6AO);14jbw zCOM!H0;$IPvz0E36Q1E3c?X}b`hR7I@sL-v38{AoUT{Phsa~s^uoWqx1uf}dPKqB% zNGCM73KT9N!my04&DSAKt85p)hS~#dgtFobvTQjWwj^>GLX3d_%)&(q8HqeaLQ}t9 zebm0@nFb4l!XjEEFyV$2LW7q;x-8N-sEcy*9vX;KrD2K28^U`shO~<^W##u$3oVFC`YLJC zHz91$X5CLjCwP!PWua}*@2FGK<8*m6F6sLVlm?p{T*n07NLmR-5R2nP-a`JCl5o#` z+%J$GX8CNoprMDG0fb@0Vhd4BKP8`-B!d;?JtQRUjD7`HZ@&CSI9!^u`06BGHap_| zWI+VHqed|Om3&b5U`qd{z0rpg#zPaYS8`f9q%J-j13891v>VY&33$-i0 z<1d!67+<+)75}PsM?KT$b4?KD;D&`mjs0txZ{~iz`X<_)3W+8(eE!kYQ7s>pLTtZ;t~qoiXN1Mt03J4cwD}fAD~`4U7FK$VACQu0tg@+saNP5=FO8_f3M@I0 z|6kOWTOWH=c>3}CMd-=}Nr~cS(vD#L@clQNrXlfh(mE#N`8q3JK5H}^5i@)`550fdVpKs)YylUlr!>K19Yd$0Kf0yvr8}1Jty}M>WlPAr@uDI@O%1@@(0`*Xn9*|(&=mP$g-|b}je9hj z=?}=p^f&Ux{jaq4#y{gpBIAoo9sr9My1Z?h8d%fBK%cE8C5W4@zf5aiHr%wauK64S z4wrs$ypGRrt0%{Mv@ObU|6Mnj0uw|n2bQ5#j{66+9k&-)Cvf-{eHg+Pk_;Iys{(C{ za=a|OZ&4q*U4o|RjXUnc6zmvrQbxLB`X_Kqd%^YZ)3IDs7S-^XRSrui;C zj$2j|!(Nb2o5qj92LF@9VnKc}VC4(X5Ov?hckMXMSAqijau;-n_) zJ7E`<-pC8>4D$b|CXFP6m9#_0dwkk=%iO;~ZUPRJFW(1kexdKb|6wm{J8!+y-TJ^Q z&pl#mcl!H#BFw?mLj2SZ<_Zqy>L_PCBK))9b>o+R1njZ?} z%b3MYBCP`9;cv@?Ki6xzQQD=8YznWRCKHehN+TUb-tHp^nCG8!x}DO7nFo^(gXSl_ z2AJwPZ2v1dfu3EXhh@gVB*bp6Ip&rFV89(#jW=FPm4;p-n0PO>_VD-EgHHIZZ)Sh-gzf{S)rN^6r|vEl zSztSSTIhT`aIgsRJ?t=@snRZGuxIgBMGGQGrIsQ9EACs-4l9BrB#$iA(FB8xU@}D0 zjC|FsE&q+0OgJH&9W^v!FfWf*44CRm(h?hbI3rT}6LFl5@2-$`d0}%%4igqBUqVq1&HrkyK zv3qLQ|A=Ns$P9kEX_Rf0MmhBb*$1v@VL%L@B8@RL`S2MF&M|;bd7134QN65Ky28pt znG+NCdXct6^yp^uv$;a$qdsX!oV1J?aU(5;>&b-z!^qKF%V~=hVF39!X~IOyCmDlyBg|7DBHz?A8lm`WsiG54G5Iht=%FKE_6@HCcL_968T zHO*yQTTmX}ttB67q{qep?evVyvf?UqFmeu2@r<{CaU z@vTeTBV<}n{ej20F=H*yV8Mm~{hD!r{6qY45Y-})ieq&65N6=uR=s8o+w?e58x9aw zkb|mvBb!L8jK&Mh%JF?l86e;hAi)w%bxxV5z1FB*BTN;}2-0j!V1`aVrJU3o3&Mr! z!;r%et)z{KI){a!sX6Y4EeDTSO^CC=TAkzL7%f&iU0iV+ zd93=Q4YM&|rtnt2>Nb`gck&6=jwm~0G-Zi_eoG$lRSbcDSflznn5>a$6H^ath%z43 zu=<;9ZW0dHc+cTWXzxP+(_SDOR?D9%8yE|f2iiX465|$RbV4&ZK?=sSbIT`f4$>Sg zU$igTIAGI={z2Pdvkbquj2E;;`Zt=F7hQ3&k^N}hQZLjGVdaVyR?kN?JJRMO`Z~fH z?Z${q%~KLqr2?$B`q(z41 z0p&o8h&Dy}aFY^GwNH*aFMJ2D#2l5F2k`X>Df$qaq9QxcmgF#*{e%^B1%bXr;N6T0 z%o&i8cj<(2)A~^drOukj<;4xxbPVr*)HC!O@Qvm5QdvHs81T6K2~N`Z!G;m@8)KNQ zm;PbCC>O#o7;qXgX2heV{fQoEG-88Xx6T!kgt+(XWJSO*p1Q;#}^@E~9K*Zg+aNF)AG z+PLnf`^|SJ{s^hs-=L7PF>Y{U^Y#Cp?h<;- zeVyVnel{r{dJaPm?W@hXRp2ap{+lXuTviGaiBDPhkL|{ zzsQ?ze@Ir9``J8!raP|j)D3Knm=cGSzln$T*X6bMZ4H|q0y1SB|MWMQLj2t=nICP( zYE>(#4a#~&2Z&L=n5V~|dRe$_RvoYrSjZ0HigLkoFTJU3a4?Y${*>1Ezto58$`XwG zKTnX)P09Z$>m;pwg9&Re`WEdb<@}r0dl_+^^w{+Jcju=~%NfF&c8?}B;|1&fXP$rE z6v@`FlN$xi1@u+=1pR=#a<~$j>&z)An4w%o{{crfbg&GD{D+Wd9AHBL|DlYrb+w+s zuQC`iZqdd#V2N=n;>R`IMxdpROh(+sapF+@pX0B_(G@ z3Of-ekgg~*^&vXiA2Kz#S%YWI8dXf4 zpMjne*e0tZP#z{IPSRsyX2%+ngx|Gbz)?7pY|q|bgh7Lb|4#>?qY(!a9Sb@-5)FRy z=G_8n(%rPf@w*5n%p}wM%hb04X^-w_zR0c5OWU=+I z7HLelEL^$HPV!Ps+UeA+@7|w>K7INbK|x(YsDRlt z`Pn2uj^2Fpbv8Km?5UI7x6`;;pdv(Lo{Q!n1OVDKm=R-+iI9oEPY(XMzS2!LXfx?S z9^yX_(u#wCID}%V+Uk-eOH9aTm${NiPs~191d$K&iG~gSD_gfYUV>m#BSr9KNLwde z1gyPvR2*5iJ`98e2->&>Xdpn);KAJ;f&_Qh5G=U61rP4-9^55pNbo@L;11pBuSjO* zo%!Cm_x|&()vKv$s!r{*_u2OBQ|E|;Ak?5Xht46*dkk%mjTiK(<}__|jpWu>Nyy+} zR-a1^3~582Qc#jr@G7M*WiS#(cTiV3k7QCt6uqLLJf#GA$I#o%ryEid657_OAZoK|Xpzhe@1S(!)w-ZX zhuy-`TXdL%a_0tDL_CE1J?WQI%{31zA7x{};aLF7@&;Rdb3yQgMp~Smpt(Ic%pmnN zTtlD~AcEN+vo#ZD>L^yIBXY}(3=5JVCK+p6=Oscgm6@PdZVHKfTsN7$Gi4(R(R;Vi z7ewtOo;u(Jb6Zg{Pb7-tr3(6j#=9;^^f@e?Myt*~ySZ2}JVvG8VqnN7$V*5&CW@H0 zu|tw|Ra7gWy?YaNKJbisDgS$o;-X8(ZJFl;wZ%2Y2aKJF0gNw@`TSAJXjTusYG8SP z^6z>GwW<}GeHVte|7&mY!fM94(x`B zcS+SNBp{ka1~`7V^s@H80*$xsYdoofyjTlQEXGvzlBrkW=#bb7=6*mv-K!fkq1953 zt=DK}zlD0or@YtiLC--GNNilb4zV%JLiA}sga2aVayxJ{<&S=g(EW5udg)s}3i8)) zEalHMW-#%SOpBIl3H&*Jk`80R;}Ztd$)U}rbO`1p_v67GvN{`!k}*ynC6iA%(_E9; z%nHAXAtCf%H`!OVxZUOIC6Z)bT65!9LH@yRd8U9%x<($r_=xdP76d{~>3_buNoY{K zxenfuY5n|!WsS+;Dnis-|E4>DfPsHx9yDL974o|7o+?BVCaIy2gqr+^`wCr>z9x0` zL26c{%xb<~EQwVwgx4gw+OVO5+C$}S3D0u#*!!3>sNDNxq3FcTuQV1OR4*mX?X<)j zZw8z==E=C+qF;(z=`W_h;%yIHrB*iMGL)>hW-r1@VV`ztrt@M9hwpWwK0?SP3s0Xf zsJ9RjE~}dEicjT^IL;juPBGFQB!XSUvS6xuYu#+^R*P^(I*SS-i0Yq-szxnSJ$j;yiJ{8>Mh8OsGmcEscLv@;{#RuR5hhwk%`=f|hdPHw3|SHuwo5;i@w zn36+oWF%LW2`ak_5HET&kHoD_E3_<7FE8b?KZZj4z!Rn#HmDJ5%Ak8r#+v)WHKiP4 zpAJE1*HzpV=E18~SB%|{twI?6)gjCFa1O*>krFp!JQ1mr@T9WJrC6(ybbHdWuOpo? zh-~-oEEl|+1B~18v;4;~Z4w-qnI%?sf}!DZsfQAgth&Jt{?4Lq$)_4t_7x~r;k~aC zf6DxL)DDrQ(p?IjrLOyln!gI`tT)0AQzsaZGlh&S!>xl3$ZM>4GpBu473LKM% zg{#ey91q`NKvw^%M>w1~i-B8Cqd%Yb$i!5@C}qUy+`Wqyl&^f?Ln3xCliZ7M)FqvF zkH32g?9z>bZ1Yt0LW6YYppB7OX?uL4sGCq`O($i{CBf9PC(Nq5L##hzvfL2jnNMuG zo4$u(K1ffTqZi*qBU!=fJTNI4o*p}tFlKbPt-GiH;&V^0!Z&L4^-veg79QqEQIbvy z<~IXd1dF+Pj2V&J1+8PJ+xtE*PLmhBRm{xNoN}HC`w0?Pf1iAdg$|x3=$KRGJO7H+ z!#<-8()BzqpD5RgF84RpJU%4}Sm!^9_EQx1=&*oAwupTNW~p8aoyImT^$s!r!5@GD z3)hLr$$&kXA)Jbm^LU@z;}VQdj@W} zDGQX_+Q?q?6S34hUf5aaC)Ju_yCGMs98Sc9Z-9{2qqNZgok#EmMa%+PYhUqjFY;xQ zsztPBv3&vp>cBP`5^I_IU5Nt@H z<%M_R*Tb&yvCSN1haAd>SnT)&qG~$lDcpg1!L|4z5II4WXsm@7k0>$V2}KDvJ7ZQb zw&?SYTBOntrM?!Y_?CLWFXh{oysosQI*jo!5C0(X#Xngz73+p9@`!q{_&{Hn3#=Bm zo8b&^fz}YCxtQxE=ogn!{JDF2T6(@qtxn~Ogi)hnc6UK>cr)AP0!D6(&x^HOl4CPu zr2c+b6G5%W8)bRP&Ra^9M0FzVf*V6+xzzCUXbS;KTzHOl)yhv$!YO%KVtPt-1akMp zL2LxW;3fx7pJ_UTtZXGoZb<863VA~W6-idMW!H@BGo~tuDd!cq6mRJwAtF3Eo591! z9rw1EWLrk<_?L4dO+_jaQ-l6T{*azRdLm-pU^NyZ#AIBRyAVDiSd3QlPeOiERJl}~ zZY7j&KgG|Ju9G8#O)@2}76|RXSXF4348PniMT(pZ2&HhyWtLvJmZPeRPpGp{F@IC5 zA<>g6X4rhPA!n3wA$f0BwgbEu!1Hsj9#6OaDim6P`h|)H%ZS+M8*ijtTDvT1zE`o< z7hjZI`c~vOVFfRoI2vH;~_Yf(yV(#UwQ)7Hbg`E zR}8_5YdlG;ny;n;*`tE%K>CjgV>!Hay;qd9c6|-rKeCdEGuRmBcyk+}48?5v4GC?6JU#urc5aXC^x#*aV9HUD&?m{v@cR)`+-=~MHoULg z#pbXKv>QBiev;oT^QY&`psPe8)j32xn4nDaY-a)n$G|>iJ9VlIegmQ8nj(EyTjOFy zSG;RHIb^JkjBAXnHB)%zkAy4^ibYh)#-G@X5x2K@TL<76EeV8+z$pDL`|Y6PP{^w1 z>K5OfYobet|Mkr#HxC|S@sO_>200S%zz@>Xn6!!wDK{CbxBB|w+f)PNPOG_@6dETe z;PRWpH^h4{y$ZBFk}7PE*h zq5>;vcr#}Oz90IQ6gV!hZ&Rq6`yz!UPnL7(UaOf5$FRNOtI7x#6l~pAxf}$nEW?X; zigK(E`H6F4VPo|9bjV58qg7-HBFk8)Q>e4^>9J>)+_&Qr8DXYoDtu}KY(HMEUY8G3 zl4BI(1s?rgad(Lxnq2XWHq;xn%;oV;woW-7{qLr_<1foARB<^{CcFYC`W04xR3Z?B z3KQS-VVq*@`qn|hJDL?j4tuYi8H&?Sv}Ji3p09?$k{9~I7f*55A*Urr*)2$-^fejj zLeg&-9W+uJ*B?hZd{HG1b0T$I+{^;(U4Z$Q^U9dOBG0=sLh{4%;>5osL`y`1#rq zco6H|cTgzzz|R!x*yYP3hd zl0i=gI`GCrc5`Fc+Jd}jdZ}(Udf}c+oxkVhbDo5qgGZK1Svq$Z2vPa(dZg$ zX<1%q4t!?vj~WMmH7nD?)HfT)uFrfI{d^)3<_DwavxYXpj2=s)I(Wu;EO*>L^YxaF z$YD#cVHb}J|D?43^L;s#F6;-d(|tm=$v4&PAjB^<Uua=^08Q^P}b2vM+ebvfm#AM6ps|Ki2j_M zKpdCsRrdRlHpGbn>0u=fO{Xa;1@;e=oQb&EhUgaZ!tp;o_`cm*_enJKryzVHd!*-G zU25^o%=K0;pPM8$o;-z`C`bFv!C3^hAKhl0Jl0gE9<)QbPSU|6 zRGa9cb+<-*ZcL?@QzeUi7L0UPat`g@acY^{TEuzWqi_O#`hwf7`Ub5+&O9DhmV4i8 zH0XQx0G9M@i+q@=Qr~-)H$gseId7ggHAo_6!?C)`#&PX|8=tT}KE`SiEf{XjPBZV6 z`>;%>4X^LlK_{g&k3xwVJg;Anws!@lZltc`?7}@g*^iatYEEnBI*hQZ8-0e_ijaNP z>|s+FEW0=fsXc+FzwlPuWMchd$Q$6A#&F5FKp|#yRkj5lt@XoxE;p@7?COiI;Fq7? zE!=Ml@h&Eh!9$$XIMPv_)=99XZ}jGdi}Im}c?Qy-qLGjqNu$ivqdFkUo8*$2&tOf$ zMe(GBnRBj`W9zx58$&!jV1!>c6P7wjK=q*^fJEbdKV%hY2vYTLMa4}@G zO44rDaZA&6OuLB1m~O>jog}9ppSJ#L?g!#4xE45HVzCHupIKN&GQX+r#B)$Ed$|T3 zLvj75lDKdF2O_~INw^@(!)tG#I}bNR333R*WWVQhhOL#Vx_P<%-u^-SouI$}Axi?s ztg(qV1`51gP@81yQg>4iR<`;pX{2?jXwr9kGjxQ|ui7MN*WYtso2|)#Yse zMiAjK%laGm>0QxJ$|f=!b0_Xy&;EKCnIncER?h1bWoN|6%~9^iul~OY{DaO;HF#s` z4%P9uyJGjN0O4`_rYz9qHzAx9to8$-8 zJP*=(;FcQ#tQ#Ym)l4}uUE)@S|JM_F)b~<<>jEoiFgBRUgo=!$k)nzY!-rU>-qJ~< z7%Php;Pf9I0ftdE;-I%0ep|Ij;#iuj88Ba!9g=NLMSqp3_sG4}W1|B}WZ zvLQnt`w`5v;Uj%Q|7&di66Rlz`1_e)KY3>glNYULzu`{xf5h_d*K$a}L{7rhm#RPg zoS1}mbMZ0GC!OK2)|_1Epbdr_Uh zK5QcS(h0)A)drB*W)D%z>6^!(9-|K9%KKH^@3R=Z-6VwaAlET!8SZ#Xt1wsa!> z3qQ8on%n+JqMn^^r6Rs>ulL$ykXJ%~Nhn4aK9NZWlU9wUva39u=g3;ODK7hD7Fc7MtL?EKV*u1CIYo9P#~s*o{eY4)9+omf~f zmZSD)O^oMBlKwF^|6*kf7DzB^jHLJHm{ymOQ06$2Z`$k)@A$tz`mejHY7w)TKSpCE z^ZtF5{GH0bE{##gcv-G~=lGVb@^y346u`W6_!5V} z1PEmd2kwpI>2OuS@qPXm2JFGW4f+s2T~8h0fti=*f7&k}aX{&M_wg5F-vq+Mk$cNW znBuHvL;=4TKZk4oIWAqt$M9QQd?Um=XMPey77Yx{o3HgpqKN{4a<4fq?EcU{S$M+) z$EbM6MCH}@53Z0|Vb~k8S=nE_{-s{C7Vu=KtIP5dt4zQ9DF?EToV3s`rjf_;4y!ru7S6s|lN;is^qYtA?)85RE+C4#Wa z`Iq9q#430p0kcZRw+>5r9rDKAjElL&=`-U&X?4Z%36}eBmBRv zqwPvBmI8{pwu6`kpf~bHzeFy0AVkJzqEQ}~VCXnw-?7kdQ!w`WuKSKEcb zj^lisqAXaVAxWdPz^+!E?aK}W&$12s!n_xL%7{m~1>Shvp3hvkK~{o;Pc}Yl-KYA0>|fmOKq9`Y-c5>I9^k#5>=Sdf(rBsReendk7>x}_;1F9Xk>5O0&yV7Ufa9rGPLx9aP?G+b#` zNNZJTu%4^Bzq<}@yIfjW4Rx>=u$=APf}TB$Y_~_S{iNt~2(bN77L#H4Iu383i!Uv| z7EJ)aMk?#9&)Oxh8>dJlA$!CK#nxBw8b{^`lE+ru7XE!`T=l)rBebffW^w&Jv!x%= zf;S#pP<*{Kx~6gVO_VPyr=y(9D5dI^4Xv+BUJtES=(IG%<{d*{G4(l%FEV>=a-4M9 z37=@=RnA4`-G@+{WYEwZ=2Tw+{QM|x?f(STx;?Nna=VuW*a%92w*%m;>qdgQb(Hl| zD^!hlkaIjHI+-dnukU(2)zv7CH%TocuI5k=P%JVmj4aXzwe(F3^%*VZV%^QK`fWAQ z;I`jb_nGC`yY&;8C2t}L6VB7My+417MJ4;Pe6)6)e<7eu;Qog7=BNj~pj^4henqid zvtBV@8V9Qhmr0kHO75evA0btA$IVGNl0KkX>_T>sqZO*7oJq$Yz6hEoWLaSNIJ9+o zw>h&+&pm!hoAaG-a)@P$*}@tv&Nlcw&SgmN@?>sWd)oZb`Dd3RO@?{cA58EG72MKH ztzMgijDM#0o!f3QS~Zu$YH#O_Ps)`+@H5l-k4F6wNYgV8h5V`S`Me>Se7>ULXu8bISF-%kYTS0N4?7yolJ$}mCYp>h zz`7X}s9%C#{3m#l#Dbl{m%}3Lc(A}xf)_$CuyzuIkJ!W~Cq!L$ zCbIpJ^hAPCm|2IR&l_Y^)zIJ?Yge7S&cjLg-z%IoM$A zY)qjuKV(M4!gS}4NJ$EO=kXSWC-e>{bDx}c?V%e<2w%Lf_Zvs^?z@qhP?*}zK3FuV zfe3iqPK-Yzbc3l9f&JVS&;i|yxd!=!oW!(Y`1trkdT-KEnK&xR(7|{1{>r6l3=5F= ztD)50As~u|sLK&#YuoSdcgw|J_PZhPi;pZh6n<&;5xP!cWe`Y>4U8db!W8p3im)NR5hF(li|57R#RqUj9Q7U7Q$;1eaG73Rn$n4f2+6a;MCgha5dQ+65KA%+xh1a6K*D6GM+9Qb^YVd~z_eQjL{ zA`(vJu!)H9I%wY7g93JQLQ?4j#0j31{%%#-*6lQ-V+I-EHLFzHXm)^q%LE7Pn$`CF z?8E+3z_Xg5?u=|9wIq~DjjK5P&O~OB;FGbZuJLjuUWq|gqr3PmopL7qaJK;g5>GVv z{%qZ?Xz7M-W!e$GKrBvPq{t)hJoW%~%N?brfurVM!yvvtuk=nq=M1RM776}X6@tO( zwDTIPK+g-hVL!?~qcLyZN!AK}jmhMDLMHn`pkn#ml-$Z7MKl{Y4l+@)^8Wqj{qg*c z$X9An35~FJj~1*RVOW`y9yBg{ad6(8O(}?vWw%M0FE&-j=9`P3Q)cwKO>?r+}uH znlP(3e0j%tf1Us;b)%h&0wD?pbfzGs>O=`Ya>2J0XH_#J%Jd!4jJnMvSjMD*_+&3gdOuXltNC!ucU{A(Ie)P*OFGdRz7rynDa+F6Z z#_HGS_(sMJHS#buil`=JJ)-?`aewH2Z)JLh5pJC(Cg+W)kRikHlGLDPOk-Tzag1v# z0GI(W&-+M7dOpSju+J>Y@saEv=`4lz(QX0FkGk1DWF=2vsawnNirko|0(N_G^V8M& zF449m|0K2;GHy<+%S2G0p&xG?XNcAaBn1J9S-0+uTX55{U6?cdDcE$+JjGB+h)i!C zT?U0sWKzB_kJJj81EYDISN+qwZN+*^Rrg?5<{|3dvptEh<@m^VoiL-S8P9b^MzrzAPrK6jS(D@TcG1nDbBcw2yDPrTA33D%%d zWa5H|A`{`8-VhiupA9ZaMR?jl1$f>iku2jHK}j){;6ubH#CINB(Vf&5`ePwb3Sm-< zWBC!0k+`<14S|fFMN;2bGbn}k@f;-OCd%6daDR(|K9yp%W}Z2dfh3#P66uVWP5s{b>jOb&68@n8XP*TNB zeAyoMUSM!V#6^_S`n9#k{WT#^|E2#k;BsZ?9OTSEwx^j_^m0G!^rP8Z{X>zgehSwN%gOY zogi57J)ZV47e8o%jF{PJy^0cEhE0P^1WX2+e^pM>VGiLCp+GP|U15Ey--~r`Xt8R? zZzQPL<3fC#4I4Jm?@|}~Av1iu(3xRrjkO@wW3=NT9zPJ(cV81apm(}p!f{08=a{20 z;te)8wiP`6Ajc}(1>StQ)t^MQa(8{$2n{&2_(ta-D9?hPoq{A4)=#BboCg~#H4hky z6bn1yi)__l$0o1PQ!EP%$zUsoTt;1gFP6~d;Pr0PwvFuvZqNwGw{jKF~BZ4is;2*iefF=m<{esk6N6SP&In|A#L@Q6(nmzW(;5n;Do1VGlE1Nh2FEWaWPYi&H~SFodzY(7QmVqIKGmbWqP#$z9Iveu&%H z1HQIy3;*+wq=p&}!__*Gxq#J0kVY-`1>Z8@z%2{gMCMm^KSZ)`63OlnoI=xi$4>d8 z4l!KuwC#mlfw+EDojn-uTai)^8?PH$4oL2G$cUYB!7A{ThhC zBjTUiVT83RkR6&k3l|u&cV+v;1QF9X0U?5>N38xv`m4j4rlyOf)-q7qO>3LZM>@yD# z8_lkY`}pUOeVDB2E95lkyyOg~Fcc?6*X||^*lmI%vwaB29ugHUJl|K;8;h9hX=$v> zhXs$jHk*6~x!zo+0RVuYt|*Kgvh2zP?obhoMN)d;+Z*TAXnM(WI;S43%#{!U0# zKRW#LWzamL(kro_!aWGGAX<4x=$pb_vcpyOrxO9!Zj{A9^oC}xdBzbae z`fi}&j|xbQl}QxwI)dJ3E92dDg}PY+oUs#5wrzZfim zz1H!079>@?DT7nG^_qf#y>2TF@&(; z;}Q6S^6)0(#eI1zy4x^oe3DBM!pUHojP}Us$jV~)Dev*&&c)jH;r!h$#EkE5dizE| zg6t87zI>=7$%!5D6f4;dN~E7#tedqu!lncVdWwJxJl&@3GzNeM?GT=wJ)~dX5!Y1> zv9oFTdT9j7%?nUu(TtYh0stc||;m`9!XUj*n4%T_9tm zhbKInPFlxvpYJjshPoyE>Z{mN`Cdh=aj$uJ1n=?^9UfbI z2tWxc2AY&xNY}Oq+6S5gUP0E<@kt#(u0dvN=jnbC)i3|yI^8h2L${R22lp{K?t z*Nfo}y<5$sr|BL7iLAP71WQt5M9{71x(`z;nkViTJ@<})8qVd!R z@0t(w_eRN;c+lH9Y}n!m^1cN^4(j|doBq~vw} z)d6DPbTKlDKG8Li&m4`RAWGB3}>aNlF1t@KFMd61lq>2i|&A56bs= ze!SOtcn=ZsTWUD-;0oO~?sz(NMr=mySr-&XGj{jle<5o&4CX1zpf3PK&A%V*FeZTm za8Z&5lG>eN1x$0zV+>YOLG2)K2XB+g3&|fIye^BFckPp6?Bleq#2mX#hSvZlR zzyB$`zgK$xj_>>K1;VU5^3Mnk>n5xMncBZl_McmQN5neW#FZw`|M}p5ITO?sf-zB= z!5^io-`{xmf3#YT*c3fkt_Z>VEycfTMSrLB;m1K_#N>W+U7Dh#$^WxkAutDGI!0_c zE1Cb4*?*nIm_2~R?Ur@VQ971@Pj_x>7D-G-9MVzeKktN;zTl7=jYn{cYfpv!a%1(C$Y02zcUeH z->;x#pk*2WwtWD13lRHavh%vu>n@kvgW0X7e}TUM(isTgye85gi<7=q{?TP0K`7>5B1jX{SFo2kiNqr<}A|5xz%$Iumw67OUecYJs5w)x9A4Qj%3 zyBrXIWVgZ{Z>I|l26u`AUBB*+Y!b%;Qw-eM6W z{PE91<)8=r(@i>z_hW?Ew$GrildreBF*pu!Ii!rvvXsB|Aj=&f1}Drd4^56#K2i81 zn|&B?EFf5VEMVkd!Cn;orp6NfDK0%e{^Df&NC=F`vpa)9; z^(RseYe-8!#^%MkuOL4eOQ`>rVFpAet5a`k9LORY`8xnhQDym!)*XOVYZAp1XjS*T zfZ7Q?|7w^8#yx;F?eX7NuMP0=BMoiO2j<eh!D2QWDI(b&~4kNvmCV|{L+uN ztZ-15&v=^^n)uva*N67{#g;4IanpNr120i>@#Ij{QTK@%XO@4&=^}}p;INc`aY~&| zP2o#EV*FTO#ZiI$ww?UZ&3ECIn~2Y$ta_Z1Q*3V*>IBOgTLujH${IAI|)H2}&TR18s)U5MsA8B}a_b->b(TMOD-Pa*Y!fXg(h$-h?UEJzMF zJ8lI5^ZNsVdIBMc%WAsp2mqym6X?`~0Gv6X2aSgwC_c>R_!X_A!_^1}K3z#RibC4> zoW#lUwl@TnNaYYo#K}mnSvPnxoh9_ho%%ysu0%8%u*Dd2?foOPS7fitHQ80^Lmn}F z0|u8S?+e8o3v;C`bGz z{rc&^YisPVO(yHS9je&u+bs{gex{U?y5WG$josj zIO)`xh?~snvlyCVJkV>s559eCLrrBhoqE|g-IDbAPop(x_2BboEEhlT0)Doc5cbJ= zw7}h~kqkZ_-lNV(1maN~c1ye-0PwlFh1HP>;Cl8&DurXqBioZ@l;45Vm$Dz(hU^*N z)Z~GR9^mz+i+L-NV6eD{gwC|NWCw&oh_BV@?L;I<8<;B3u$L$jZb6 zqzYsd!Dbn5RP17c47wqR5mxbr3-_8!SK@~WnQO;IS z^P-aFt=%@EQ}LjAa$d90vhS2R_1D!30TdV95W7pSZ*5ub-=o}ki5U!?zV`PQM}uoZv$-VW?=YyXCDEGTp zuFg;!KKTnCpg7=@xcN}R8sj~crJw_If#tb0wl|XWION7J_7{RBNZcriU4Qt(qK?~s z|77!A+9=K3Cns>2+V?OfHU1b7F6VOY4GFJnRqV%y6wUMc0u=!8kQMl$#!Zmb@J9tu z=23iww>Lwkm&~XYvAF#5g>tF56C|EMS*M4ganZ2%=R~$hB&8gqcf^#yZ~KahsGsO1 zx&3ja>xp`x67oQBVx}I!&eBBg;K}rQu}$06bT{}f>?#1lfDZy3VAQq zo7s!DBkxE%q|7l0Im+Gbz{J{2WzT}jbpX279cP5ywGu=~lur5cBO_hZDbcKpbgq|+ zUW3n95ZVS>5@cSZJn|-bW*SnqvGgpM>Og4XKs`qo@^M=b#Wd4WN5t?Bt*mIL`sy33LU{BufhoP@N>TQnn} zu$UQ9#|xmQ!hkOq0dVffvvqFcwE!e6xcS`V91+a}!0#DUwp~0;9#pT;p7RK_wUhVL z=i5qilzoJ~Kf2NrOau+3dJ*uPFwZ>HuwAdtT#14O043ku13>a!rbpp4rXfiPsUPjm*`L^i?TDe?+14u`48}^JD}AA)GX8b;MX$@We^O6f zUGM1NmL!xAX52yBsw{glv#VvH%eHrlv+AZ7rJNP0suxAX8HD#4vO8;S!6I%JsTE20 z%7146zm!E3K4$yrksdbO8tVNYfhYhgiH=SNlf0+VM{8g9x=z`Kj>SL4jCUi4#<`Nc zfEtmkz);q4g5{XA2S(BlV}PYPg-+wQ$QZ#dndK^V+uj!`nb z+`VVWIXPc|Yma$4YDYFt7R5Tn5e6CSYj8o0UT)O%Bxdrb|@m$W;{tZqG2}yoZ-fzKLCn3c`zK z*{MG&0vx&x85vZhOzs8?bnu8BT4ESG9Dw^^cwOC6SyCj@>ReMbfT|M_fH; z$5r~c?ik-ty6^?hxCHamk7d9NA$qS&IX|6`^Cl8QMypA`+4VSQHhSWd$f=x1Y(A93 zZRuU=D%6e;VlNtYwIc({|KxefI6e4y%KOkM?iPC5elYOa`Mb}x4#e7A-P$ee{4MAr z(3TV0aLsZ}IG3Q6VJ+c2t92To_BBr4E7S)u1o(7Xl4tcLsbRU|(7}i2+nR$IO|RcedlHfgtUB@@#mo$!TVyxRbvQ>6F=yStfhtFg z;A*MSZaIX}B>8UmDikBa6IbU7s2JG*HO`LF6jo|nKfkViB0J)CR8oH4Ud@~5J6K8y zfeDiI#9|riJ$QN^AjiB6kCP!KP7hC@lwYpb;iV)F;Ad)@)^}Vs*{uL^UuHlwA`!y({$|`zw<#bCsYwq%>Ssk^2wp$mT)G;I|e*< zB+_Twpo~*IhC0Ib3FTVCNDqU21)B`ybf>3QZUGkA-ys_!7h_H1`)8==(Q83t#5Rxb zdQ_cCEpts3s^XUJYSSmS^`p^jY|D4+Y8o&0vEVGTw>-@j%{Y34hZW9hI+9stZ5Qrt zl3CAoEqeALjf{=R0_~%p*!J*|xo_>3U-BG`e%^15wynOMS;{vyC{!I)ybuG%&aV$G zKkQXwA6BEPhu%i^Z?QbZATx{`90j5?0nx6#ZV@{Df)NoAkDlkbD$il-=^jvuaVMSu zN>CU?APo2O9h_?nL6B1DglHP2a6FeH!N;-IbkD1^Y6E^e%P{hd{`g+?h)u6CFNNzl z@%5iTL7GH(RoC;QxdZ{nM)=V+Alrb zzPdYaOEk`>i8u(TsWv#c9eXlQqW!Hr@wmNPj(jM2`HJ5`Uh~x6pnC1~M~z&<^YVF3 zezWuOo7gH$w(=5SX#M`gfCZNoK)D2DS2PblCHTUS(@ZAQ%nGp;vw!{}E

  • zl!TN1e#C{JLfW(utZ@L$`Ka!k0;aa$kyAr88*QJJ4)*vPePB2Nklc(5V8d$hb-Hev z)4~SxN%ET?vyaeuU*2rtZ))Vr1|72sSOPOpa2P(7$kWc@z=AaP;c@A8^?3jiZI@Tb zTfPQPwCVAFBXq6%sh!zTyQBHod9=aoO(Vy`dmnS(^zY4uI{V#b0(y|5PfSg9HdA94 zUA>j$A5MSdeBWD?i>}quUTnQw*s{LpZl2Cpl4x=MtWs`kVAEpK;^DoA|96ON({*@|+%j$BgYIm$+Fo%%=>AiaV!W)^f)lr#4v|7Bid|T*J~xYe)sEgM^KX zMw5TR#0itbEipWp$jQmUmsV(=&D9>(cjfQdgUZLhm@MCT=BuT~Ps z+r5Wrk7-o(%3X;{eWKGzV63HjxdpPw2z_1gsaZem=@jlr19@h2T^o9)8EI&<{0o=C zvqPife0kLQ7C|lQi))*n)5w~Y+J235zmn-{T`jAPa3XK zFn};%A3ii@aK)AEwu?>p4(dwRrDp=$TIC0#nUU?fn#+c6x7pG7D#cRxI=aT(^6;Yi zPFOK7ucnZ(+JGn(ykpb&-MN%aIo{Eih=Wta_G?HCQ^!qB^(Cwj3%w{w=@GdB) z3^6qvr`)!l@;$>#Igfs@mg}&-v?So+RVfq^vwWzS0R4q}wY}8&8&@RQTG!|AI|{D7 zL$VR$`>t<45kqgiR_@jyu-gc4<}v3;gN=&esU5B>OEF%%7l1R?yVA8 zyt!V5xuy8SG~gt|c%s8`Q${fAQQT@9ycXF`imr{q1Q_M}Q~{>i4yY(12{dz+?Zo3C zy>Oq=afvLF3mU{Skiy=U=h?>=`9i=FeIz*?me9;!U^JUiKYqE_{^g=Jve%(`poT9r z+e7}v4BqevRXZIwn~Z2C;2KUM1*0c$Pxxjy3l$1@9mqFVoAv81-mt~mSCdJ^6 zn@#zi!HL%?u!*-( z7+g>T>kVY z7AF#h0{(e~TAf;~z{8JKL0E&&qS}MhB@V)WM;d?oek}|Ke~vw_ri(;Z_)EwC_P+-m z`RgNS0iTQ}-)(MTTqpN0B>q8e))!30Uh{k#O;y?dS{ND!&iGnEk zGvovb4W6pZe`vvPUHHehuQDPwHns+=LGIs-)?Ys4uY(vSctl(VfU9;JAUbR?5lz+Vj6 zr$qlN()dfj)5HKfX3`oy6ao)%6Zg@p+?g)70&*c%ei{7HS}ehDfM@x8uLpVH&TerT zG>w6D^mEIn%BZI@_&U$Nsuny@L{IHoAeSnQp(C%x{a-SmMTUJmaKpmz!r&}vrA+yO z1pRz~gXWQ~32=q7e|7Rd2S-@&PZhHg{v!5Y4#@NnvqEXHU+8ISon!x#(!W!U2v@cS zHh4|#|3C9hP!|NqNSD2l_E!Y_A1eM5Bya%Z3)C0s3||-e{Vxr9Jv8K1-)Q;2H1q?W zGGd4A?{YM-3An6AfTcHY2`l#KF3!`y(~_rB*j5@K0UwRsJxd zY4At?0AV7Ng-sn4vig6`tTLSwRm%KOp$d%tat(DKQECS zZzpzMR~l|zXerVvvO>u%nb!+mDwoeZ0DsdQm? z#|gIG>uG!67w^w!^Qv!6TW}dsk|k_zD@RW50$d?iS;fvAr2`M%Q-+neUs z!52iVPVKk*eISQ}gBq_#*Onvn*S7~YWrwLoWn#CMlU}Fl%pD2EDClp1N%A#7X=Q-h zX~!6V6izwx@NDZ>GW!^UmJgKacKnJC@7Z&C9t3`ZjPl}0aJ^s>t}SYCA#(B zB_0i2t>^D7YlZF@hv%_+$TA_x?k%7tVL z14tQ%=z6B~jZSQ##Z-Y>sap94H@erbsk49$`JbN2H%!K7s{rSot8H~!BICE-(u058)`t|(9~BK-vym>8UUTR+EBU_zRu
    m9m=-jySV6)F|Z0m~@~Z zo}9+5QYm+0=^5|$F|VI3v*}zTJV{n_K8I#=aij`Wo988OPOnsL;*m|acyG$n-`F4Ghpq(+j-@D#e2QgVq|ld(|55QlHx3zSy`5doI`!MG~Yl| zVug2W74m)3?lp1djr9Lx>^-2O%C=}xL0XCir3#cFv5G7?NTxt2az;^*Bp`xH&KW_3 z0wklLB*}O=$7A@5nQgxI@+cbgG78yroM^TX|{SciqR#sObV%lM`4i&UD7H{Q!$q|mvdCb zRe8_J#Owzo$%T=tQa87Da?AsVN$JAN8*;QQ!{mw7op_@IFRe})sg5vb(PCemP7CI3 zrwL|M-|UX)EQEwxVqrF55KvsH21_R zv#U*TBYjqn#ItB(xY>?P-I}Ji5F5Q}Ogho}EyN3?pUT)jSM&MT-n-V4fe}1Wb1n#h z1W<@xkhOV?{k{U>LdLJ18HZA*usdK7sy!brGD9aR<~FPQqfT@|qO8FE{PbY0YNLkz zX%$BBFm}01Y;KPEL>_aI8_5OaQRg}we4WT-LZJ!IVhNDKF(y9_m)O^VtZdcQ%#L9v zUlOkZTJSZ=0twS*A`gIFtpRp%AxPnJR}|40@6?{3+N>S}Wd9|n_awUs?esbjA&`yY z6Hz>(^EoNJ{j`@6h4RPrVoj(rq%T^B2pgp=LYJ zWPztzid9dn9??k_1$mY%-FTo6n`Ui^C_1zs<&00BDO%8Rrb{kN#+ak*JLAEWYI1tB zlL4SK<@~~?o{FLAR|bEXJ2EfKA+oRUC+tVCTrA-lTzJr|Ojo=K4=%nhNVAF8@oUqu zgg32ergje1Szb++-ud)!pwNv|52dgeg_|{Ey%Y8WTJ&0 z*^gpor%xjtl_9G?>hD@M-Y;c%7Ew)_)m2_kI{$ECpj6_0vGuI1Yy9Ns#L1KQArA?y zR<7+?%1o$No*E22o7eQ2$>QE@?G)J$B8*MT>?mE3jJNQx?q~H>95=3&DSq!<@4Y4+ zktV%S`CZ1E_7QQd*m~*bEZ6j>+ErUZ zD-X5Fe_k8A3F~5Ls!4jr;%IdPk+P!8yf<#`6*1r~ z1V8_LR{YR;lB~&3WRL#+ z?wZY4nGK}nL}5*-%S6zl46B>2_trIRx;C1-f}BUwtrDYln6};Hzs~dtyiO1wG{kzQ zuGJW)K}BF6Bq@;$IvW*+r>^G9elgT3gp^O{+;^Y(kQc(1UAAXNgz|Jvl6SDhQ~YUG zBOI`W72)u=w0lZa_ndG9P|iaBoLH~5T*2KPcXk_=iP;9!ExWyH1`F8jfm)w)=+FF` zqh~Vd(kBQK+h|q6!p}8F?SMN>fxDa;Z~YALfe7m_R9;0_1&8XM4er<8AV0;b;W5Ep zKpfKD`Sb>gY z(}LR;-5-R>G@X7r4TkP)<&}>Yft>A?m-nvi9fHlDA?k*vLkMRXr0_;n3FiWiiU_Uq zP$1zU2}7#32%T`?N5Z{V5-ro@mQXm=?Pu55{8~FEt{gu#Usk0=HIkSqkJ_(m3L+;Z zeN2}&2qqL_x(6eljiP)&+=VmNiLq0sS5|u3!|#%G?X&i<+i?i3G%gsKI=Z_30G-_T59&lWwKz- zE)xYQ@(;)Y9tFAvp~2Qp>5LKlE_0$kiOgG*S(l^|=?kc=D4%$ux|%=OGDPW7dX?8I zU!Huu;?8BNspIUO9x-=R_-KZ=qczpQt^#9t395g!%x)$s`(qRX#%7 z7=K-lAxUpmGf41YoJ8#(#JrM|Ej zeYZn4Qrbma&QNBxzSF5z%wTigTjSDmOh~T1u_>BAK~i7+1m$aTS?_X9@>3V=^-KMQ ziNx>ZXVO)Xwmqd?RB2XG>R)-jXBiK9%*Y|F>UF|rPr3YeVr$}7_fpQT>f`N~=_BqT zv?flQb;Jf&1kKN;Ek^M@-{WQ8&VEpg7494~PdqK=YUVGM@tWw|#dkS|x-WOtG;?)t ztS)St(FS?!d}}&+)N)uH%`Nb@Jx%q2{Is~trc8v}W<9=49XvQ3zW^u=#R4YJK%9Gx z7nTyF&ej;Kt*y zq}PXih47=8{U7Vl3)-n;2W!vFASLJrShNpB!&Ztz<$w^w7qCcrM$!r-e9*!q<%B+r+PhZPgsk$3xj+79Z)H?mTY9U-sj~yS*Hq+|SE|k}e~rLyoBd z=Qff^;uNQ^djlcPQj0R!rYoxjUDt6?^k7xx6l{|jZA4Fay}IhcuH3=b4s~zdW{%U@B?n_5Q5B z)QegDv`#(iN;7m`3EebfF1R@&p&|6k^Z|BjCT$JNi!&M|Vx{cA23RTNZpL*YtrNrx z65iANYu|{W=ooYvWbuU45J(E@1rL>fV&lL4I#_bG1)#$-r0U|ZE?V16anCyDvuT!= z66>F$nOq8z(8(?kozaL9XV1Z~+wFJeX`lE=xFTrmhZxi2mbbJuzuzoy&rO9Lgm z#Bi&FXJrYNqnV?jEh3yY&qku$#+s$dg2>@q($!$zp=fR7nqB+sVss`{+NUA4@sn%u^AnkkOkWf#$`oPy;e zXH3i23YY6H6PLtWe`%u#P<>3>aMeKyv8@k8-utn&CrpSdFb8Nb)ToG!K45cdLz8_Mz3Sjbi#kJ||l(fe>tq}4V{*CC-p;^4HGrh-wz{J72;gmoFSYmpV;I)jQ3)`A=vRCnr|AVxZ% zwiYzb8E6Ob_=V~3^Pih93)E5EA+M)O)~ed>IvcGXHV6nlw5f*MVsAp}(Hh@N zE~A?h%oFe-aTkO;2smvN$WzQ#KWV>&CzGlQql9G-%juo(m)C}}T`rK-?GLmncoKZc z-R;l z668Zt(HSwyU!i=5qbYr|4ak#D;hERy&iTYebI)(gVJ|N)XozmWw%GU!yJ$am{fT?l zisK~F2*jMlF65J30QQgGz!Z9uj3(B0t*uNdwlZi{%ZHjimWtyN^RDQS%YGKIOpN1p zjAVa2tBBASo;T_o%}TUdY0M$7`1O^bV#&BT`AOL>x<2~A!qmKi$9<}P&8xyoX2XJv zuK4&$Xzm;Nlum~`RyN^vC($9+L?6#O(yscfm<_ntIr_%>bkD0Alu*yfl$d)|N)F-B zE>&g_24y=Dbv3(;$Ff8wL)t`& zMhX-iJco{ns&@7?d5MlG$?+*iI(Z4d_R>{7s?0n7ks_-aFJ_~OvZ7sfmOOxHw~IHt z(iAO^@yeFxL9mj1Y}HSM1f<*Au@>H3C)gA1XA50wmh__hd3DXmT}fF~?Bj=5>7WV}w5lbn(l;7E z1&zsA+^K#nDdSb;ymk`-lfF+<9#vI20gI$???~k%5|YO=Rp7=Y30jo(|4wC7&FfEx z5KGXxRb64s_L%iu>{HY_hOJ=MP=mm212E=drND&s@Fx44fHzzCATlv*&p z87DFZFj?3yA;G~7WYgqlb&*}^_nr*kjTRkmUXBbCY~o0OL41Mt@$f5_8q&koLX=JvMbYa^Z&YdG2Mf4rczULpTA+yv>Ej)hgraEJjCqU3R+BQur2SDL9Z5250=ao8_K}+) z^4%AcxS2-^m6j%O#QNv{=-K#GYtJWlw+5zNQt!gH(P4Qt=_&}FHW@#alE@9y^)ANU z!rGuN9HrC*LN8(D-Cq+*^q#NGIbiq_BsyO)y_$NUv}snzAZSO6CAl>t^=%NEn8 zXNTYQ7}P@>pH^AJTfNz`}Ca(SnS`M%lQc}CezT@#NX;v8zDfM!czfC$*p z9tvXO80T$?M*G;=H44N1u?_pX9P%O^BEvb_pLAXaW_Mi><^8{jtyiR>;*Q-=HTs~E>&@3YzWOpKJU!88~+lD{O*zBPJ# zM&gpq-vIVko&cSGoIV)3Ek(%bSXEdgoDh` zHp3Ru%fV8LkJ%cydi-tgtTKFgYaxdSiuURx@b6v!Sv4wowiOOldTNB~2Z$v<-os8d z9mD`40`Vnl>KI!F%t%Hj&i2dE1GCg9h1rT2;VU?A1yveYj~~6P9rou5xw;(zt%0$z zC7Z(bV5WziA^xhV0YOA+sq~{CP1|Ep(%YFB@8x9R6PvDIW(64Pa6yJ$d!)YmQpWFm zj-w$3q)Fg|eQFi6yWU57jKtp19z_8M(U!PWdXIH`YPMnZjV8VG18(oT*BW*OM=eRc zv*_rH7RJu)7o-13uhwy^zBn#Dn0o8Ic#@H*;r9D3DVhAjsLN{l^)Jp^6L*lPlN~6Y zo8&HF@v|f^>|`dbG;hv3NRaHl#;+}<^*QAT6Pax8T0@W46bN}vy%$)GJ6jhvB3kkw z9}e*7hjY(=Kn;EQ&LDyB&N$AGM7?Ldm#Vo$%kTk~hn;filX?ARV&NSs#^lEVjaPn4 zm8Zo{Ijw4|^qr2-He7`jY_}ywZ?B(Bj5Csphxvy;{2js-&N ziGe!OSm=NsR-$)|P@M6y%fX+Zq1#{I6XDYxB8Yqg8PMcH5^u8pSmIKW1W5^_?l#%G zHiYfA1|lSVcm*$d?;sCWK8xGORNkX}60Xo@hs7M;5#T0(m1!pC6n2w3)P(J9x2Wqu zBda+we_#%JYLtI8?wHjE!p{S9R@za6nKqOdaGgJ($^7mnjaxZ>X1iAonjj( zi7oss;>a*o-BikVHYCUWZ^Y4Zo-7$hTVY+OtIT$sRx%KVqwNTpYXtSL-I?q-^}<&d zc-GH(GH_DieUuUSb`cO{+>Fdqw7VJ@+@Xi1*&>{ zB?&3B235{ieffsNUY^kT-|vjyMQHI|RaI}j!-T=xw2qCh7Y~a~wLKvJ$&30Zj*S5NTzE;C(8)lVpIcGv- zP+wmfJbr8j3MNglu0{#x%QoJ04(+=9>$m&|J|wSU#$6Mi6J2T&laDD+LVkw9=RZnN zSl6U~srgzlzVZc1(Dyu<4(4YV_~f>y+1^OKv6s)p_rP|#(S=Xw;Pje2oi{&8H479w z@^$lqPn!ex&*z#V_a{AOJkz^t4$2!z)$5}7E zu&b9RhSmo?ZwkgAiWhaf3bq>BsL{DKA)tQ*v^=XH{!8rK3jDRWf8-RA0 z?z6~WM;wJ2cN0BemX26dKoG)|D9_?Cx0hc`Hu7MB5u9MaWzs3R651XQB4v4h_tnA{ zgkOw>6sq65CRlI-@|?|>wAS8=fsD6y4kQE~q2f(Ez)lo0qhpJ2Op+3mtu^2O__mYf zBzp)y>?fMF`8qC&wajJ$iN`X3fU=bCKF#Z5QcP@<@24fWLtqT8LK}6Q1`P$$2k^8; zJPj~pfSTaLuGPP3Rlx}Ra~Yyoo{)ONTqy;=J6@&^@i{;6IVV3Wq)_JyoF$fNrxfk9 zwFpSLYkmJkBR9!iN@}NmO--Kw3;x^$3)Q$jL&jzK;UQnnorK=;O<4$Pc9z;#zDSwY zUpkX}am_@a8cimPR_#d}YW7)f^;7BC2}-8^CbocwxV^#HuCOmcN3pIhmg#S+Flu*= zv7SUP2sY}xW4we8ur(GNjVq7dH^oZ!(eM~?ltF*l3jNZ3Mdhj#RsEbx?Xf|J-miB( zgRcb-o&)y>G~^-1$W?p~iRi*MJArqdGU)M3Jmb z{wgJLq%D`-nHIU{tW7xlrxC9^k z9209+izjcG_$B;mm~4c1`STSt4^vLmjqbviaj%9%`We`DeG{4@H+{W2egr8z7?oA? z=Q#?tG_6s@@NY*Asg*3<3-@OXi_9z4C$gNxrI%@7;OpJtw|OE_exoPIo5*k0lDr-L z!E!o8MBAw+s+vfIZV8u7Gkrzy^IQnxMl;lBLObg1b(+2UtWvMDdt@I{Ib79U?l-b@ z>|Hy4I558AuMvoC`E{+Ic#1OE^Yh)WN~_6}n(=#H5XtGKS*D%HhTYIRcdhiosmxj9CI?D zcl3k32@WqkY0^*OKsQzAmJnFI{M?^bcC18WtSSNfP)HM*HV^ zJj7J^t?6c>y>ZlX2Xgri?Q;9+3-@WNL5HCzDAQe~| z-|DtxOsIXf%`HMB;VV7trTAv_ll4h4C*j;@#D|44m|LD(FP)!=)o8ekB#5S?C?ORI zm(dQkiVIqzSCUHbM+=GXhBcA_=cVPB>eyE2_HWGlkwT>e$69*ztfdm8r0OFvf(ydS zzH}u*2u56I(b{afQMOn?49j-+d<>yHiJ)-6enuxxsv1u{*@8Ita`5SHIqADoy5+X5 zj<3P0hA}e3{jm&bawnXbJDjCVdkQ{cvndJvvlNi{5PclYvwAo_;i3;&*?cpRLN zCO-;9GW+YOZ^!T9Tw9dzr3ZRKA=-n)L)9Pmj-Lh7EcFC@^@7o&iWueWEd}kOQ_|ku zs1PQzTaQB;1=zY~$op|QrVwl1@<^Z~(M)1B7>|9OeaAAI+?eQG%Ov}@pN^p9aY6kS z+l|4eOVwCXnc?DnapeIU4vm0wx;Cd)5}&BG-6V+tC-H+*pMbV-nmRrKi63y!&6(av z-Q=R=kA%Z82blC|Rb1s)Zr43Jqii(#hrHT4wco9`t+DNJI?G^Pp75uI<=&_*yEFJ< zkPjpx$iU=ExFgYVL(PJ@UQwV|yV_nmCpYi3MEQ5&f#hg}jkQO*=dk@p;=InXG3Tu1 zalalpFw89Hk7Q_s$<9B@Pbas3f^3M3Z@a{JJu;1LXB-e}k6 zTok#z1E}ak$$e#(-es|Gi^|+w8M!~_a#J_TY^{|~SOc+c=#P=YSKo6Dw(Tr$Nv@gd z4bZv`%eDXP6hsw1etAkAk~d4XkgRFmLp z*39%|hvblAi@pB7&ix;pD*R#l}ncJ=Y;_xW#047196^A3U;YnC$( zBgw195{D6GZ?u_P{-9#ly+^(9n0U|idfPP9zvuQ+ZuDnF!~!6$zV*VTCxI87&P^~_ zzLvLRPWe#JT;XREmo=nr;ECBug`MP-`%pN!PP6lCu6syFt0 z6Ez%-WtP(O+UR+6f&B+~Fg|BVR-5DrU$k28iLFFT^@{AN;@!H2gP5VPR*9iu4`T7n zo_1wb|0~h6JsJ$)?Q}N1ixXi1HE0zV6$vg=WEvqlXY2ee3+#AW7x86%0rH+mQ66Fp zDeDa;m7+Gwt_~z~(}^J*?Btbo%&)jT2lf3SbIC3yyFvheW_e3GBlr&%H2`u>Nbqij z@H`anJLSHkV)i?-ldFYG#LY}{-O5TfwKUFPZK3@ghhuulHXfQNk^g+5tf4*ja{@wx z7SDd+83%EE(eEtmKRCpnqCl&)6(5xS2JGI3w!Xu)y6yS_aq;7SeSMfF-HeQ-eVG2o ztp5Gz`(OXMNz;=lc0_;4dH-Mk@&Eh?#f$UHm*V*ENBs4P^vMub6M^K1dQSgE`2H&| z8G;)^&V3(~-TBKO%)9^P3j3ZQKA?L}p4t4k|39DU&j;2KC{X-(`bV$)KW+W}mk};_ zCaeL;Q%)eYjjSES8B{I6J{oCU{ z_`xp5!!7NclU8=-;CWfBBz7?+V<+6mWL)fc?vT0LTxO0%wv{IQvN@aMFmx z$8j*j++Sx&lM5{(AZ6AWEwjqgOp^;xzl?v4DAEzIa7qDcm>;utBmXtu|GrAJ6eZrG z4Y|^F&X-|=7xZeWU+7&UI2`BO*ea@7Q2BZYb?u&BNFg}qH36QM^@Ru(^iy8Ri#8s2LpIp$FGZT! zZ2{wdxAKV-u$q*JKW%?|F(7jhxac(0Lqm|4yq~3(Nb$DQlNAznL7DssQk;UodbbLA zvdGQX%)f#V%uxN>!1`^UylK` zr2(Sb-m^WreOBUmxM-B*%7c9!FS5T`(Y7yEv~A$)aIqk462cU4nVYuW9g4aDE(a72 zQ*8;Sv$-%dPIMa3WuoOJXY2U@%#jO&NLiYpZUJLL!05wY!TJg+i7)mkiFBb%4q#%& z+|h-^10$4B$d7mY<_`gbJ5M!U5Gcz(4aIH`e0spWO+RT;RpQTS8Ac`4DfgNJb_Roe zt4>#aFTl2yR#H8}{0HRnmsM0U_R=Zf&7V84-KxFlyAwY==*_+mlS6Trb$wIKG+^uT z6BvXTAD`@WS+&Qo!Ji?J-hfR9>PwWjh_xUx1uciVuZgYlh=Eti;J#b*jjPzWG2jjA zxuNG)ljf%j?*hS}j&}i*?)~1{s8GPl&O76+p*tsI;8m<$IKkJyVeM<7_2{7WIk6L) zk275b*1xYsjb@M*=2X`CKGOGh>wyj> zSOy;iyx+c}e9KZ?6c62T8C(r_~|eRHSZq z(5nb2E#Nx1t3PJb%pfuc40|t>KVKJXi|s0)_)rNR44H;QdESl27@u&I0bd-k;~$^B zZ@9rE*yvznFaaTW5+Z?*`_`uc(yfsSJ5ws8rz>%HjNW~s-wT#EF@#W z9-pkNarhhlg$sQ|A!cF%=#DZGkC|Kpx-RA_OhO5d8I}NuF=2}xfLGLG{beZ=%HlF) zjDL}!x9Uw-bO!uKKyU*bVdoC*;DWZXj0?p*BmLO}`Kb%cd!eX4=n>B4D?=d5O)4`&nWHAa(qIOb9)^*fj99}WkXh&p z6J5@R-nz?)Uhd$kDd|EU`){_VDh54ezl$t!u~Nmdn80RtcJvRud}8hsFk#Yj$V952{^^%VHgH~G#B z?_7kO&lM@Ni&)7wSo%e4dnAK=Gmk47kBNdr$W6Nxb9koExGMvyneh=qI4Y1;6>|?E z+*i}PyxYOwg=tVD`ozLL&FshK5beG9<3WZQn*&v32AG9L9qjEV=@XtisvVrc3hf#` z_rFN)51EF-&!|8BT_8B8N`KTeXLWD?_t?%`7Z>s#5)b@J9-RCT! zNwAfMydQ>i2;56r)G9MS$hcXsExzM5?m81%7zD?n91(_ESNxuDjDPK$`nH$UzBE$$ z$qInhf_BrW3*-9N7WXik2pt>HOFFDMK*u82pYtc;^OwLPh6U%SH<*G`J++AGVukt? zcZqy`H#J*;e36j5`VpPit|rRY8pwiSJ;Olvg04#d?0h&6iQ;<%4@}(1ZSD;e0azmP z&wu3n&`L7@h6Quggu<)b8i>*zx~`^>h@nE&lEf?T-Em?weaB5S#p1VDk55Nr1oZcd zaYiLzA1M3ARW$^tTsFX@MU4Zm$xqEPmghZAcKH9sb92%!YM$Jw)QN)q7G(HptG!TA zCKEB~?A|q*N(G5MhIweBgh!cGNsn9^VB|K9r2>w>cgJWO@4=XZI#FJWB1%2rb2Rat z8&#GvC5&))lMvQ>*4Ja&kYzjXX598RCMGW2ET9T~CQ3uP_Yp=w^RRkB#s#h@t%krf zo%Q9~(1HX(3cCF7M5G0`Al*LNn8h4=_V|m|YlPuJ31Q6dWG;pg2aM+(mE(NJJGd(X z;k?w#l*&nYGhCzXBn52!kBRR30Nu{(8_QzA;;mr@tUBgkyD7~_CU}A29tOvDD8Ij- zZ|>>|#GY%wcs*RaL;eW#+UP5CLkn41SwSGGk0ZZMho&}5$qJ0q7$=O1`AU;i0sPI;`MJ6kFWxb)AU zk5JWPpdV&jQ?+2XiGhx4D6keAdOl_eHE`Q{hwi>uFU`4sl>7 z+bZPy>faMJKk&byudh9$)Py7F`2xOZ&TlVJqlWvx3CvaWE=!jzB#1a5+M{2EO}30BqWtYWZ+^LUc@v#L_SVR1OQ*`sKeRN1z0t5rUEHfInU-Av_jNZFpI z2ui)Nmm6dBU&H-S?FEwRwEIWmB7WZlqeXVfnXT?w&jgBC=NrGazU&8%jZz@kq~|7> zP2*9LVL-fP4$h2z@eQkP(B9S+8baQJ2zc^K&*Ko6Fhw>GqEVRI-LrevBb}kIW}<7K z`V2f7FdR|y-ku#%MgEQO^MeWO16_G0VHzIvMla0Zeqfb}ajeiq3nP5+ig0Jz2WY7v zvEN8vy<<1bJ=#4JJe{!|DMELSCX~^Cx9?BD0{GjAfI)JD_hB2A?vHAd6>{oIsbxg#HdMq>W%G`)%%+h(jU#bCF1L+WGJbv{?DgvDLii!fPKRw zEdEXVZpH%QzoPPj<=@uj|J&7n?f*>%5RRS6E0o;%=cj$(BL!f>n@T5bp?`caP+u*A z-%9wT>}I6)$oAx98fwT&ARWajzm>ZMJ{8$P6gW zzi^0-{7WwsG{dBJ8G#XMD+OQIK?$dJz}lEl3JF@QNaK~zQv8O3DDTc(Feog|34SQ904D{mwqz1&6hVQEZ^yZa3VKp51oO*9LixzrIx@jxfJ(r+{i<^77u|)QpyRe?2 z-kh7hv9WP(_eZuj?a?`wK~hajbrYV}N`sl6)z{KJnAvYUh&gf~Ryo+}U8j61dG>am zUsDUX$P|a0zAa5QEqbbJmgz-Zix7;RGk+>LEa$<=p5e^F=_6<~QY(IzY1(#vw}qQ{ zFu5ppf8p&bt9{Luv6zYo7Q62f0UN78Mk8Aj6T22<^wh0X6>r+fH~8+%s4QA=x-SJVj<$|bbeH7bH5X>D&v&!J zfV*$5bbsKEDUjt0Ixcok>VqABk>~WDL5UHd{(fhyn-GuWJ^9Yyo$i4*$Z~&f&Rq{U z<5h6w65O6O^lc3}A4VtN*gFOGYT+Jg-`;Xs$$oyxg9&t$;8exvYx)!j0V1W&^>hHe z6x#DSVFc&sO$r~ig5^3F6sGHWqS&DXgeWo#-{Z*-5=Kg&pJ%HUHdecXW)V>hakJZT zI2X1>+*`Hdo;kbIU^KsJnvV>dqi)zJsTHWI6fBJ0E9QvLWtK3(prbr)I4fYg2nDT1 zN(l6TAriLJf%te5)qw1xtbX*OYm+nd^5HNN*f0rq3BMK3_(ALg>O+z*z*=ISgcn8I zU}N?|Pb?d4I&tD`)tGBpRNr4u03e#4{kr_C6S|6sa`(MuS+k*dZ}m(Xczlrc!^IP zV}L>GlZ(^AE9ipKbBO3w?&?jypWer7Q!AkKk-gvg`gdU@FeFguI+5edpPy}`D>t3gTLxK zKBfu)53HLPrWpcNV=*{_abtK-hRk9ORxc_P-61qyF*-krl>l+A-B-D8BoHL8b;}T6 zH74X;15tcAIIM7scLpvWq5cE2zY?Wv!&RSKdI%xPZ#du&VCpU5IxbA_?#b4 z7+>Zs14{lfU>+d%4*jfr-2Hi5a2K$PEtxo7cPRs+$C!59_ynIe<^_7(M@4Pk7!ONk z7+ri;g1r*jdrUc+wM|SVo75S4nqR%$u46F=4xK>`{-;#d6)B0X(?Rg}+ll5x?eZ2G z;z=Q_bYiROLA8{qMW2%yx_!`Gd9Ry7)|LP`%Dr%mQvMNME$(4p*K}h`sBEWG>>SPR zV}3zBScvB}ZAJ~p+tj#W0}Lv}!8WoFPK8b8mb7*lSQ)?`P(MLI6s9J(QDbu&61mSpMC}MT3n%0I0N6aa>uGc#NgR7kif`;jyR^3wNn`v6ihwP+n%J z8rxA8gTB({Or}L!wl!@mRwX&7*W=PImz#Dsur}FqThY$uZ{tm+_LtQbi{j# zkS9LN!p70!Y-XoSMSiElDEUhsjO`!tKU(Wvn|*cnR`kr2#(jCe>Nb|JrmTC;16gKk z%1$b0b{uDstno2>B7xV+k7)m^}%9C z%WXQbi*w_}(1kn0X$!-Pv}kLh?LU8O<8E&@-)8hd$aG3#s_3Wl z==b%SV`~p^a$PO2J#}{stK!&R8c@7A$ zWP-+MuT`M}TawiQI_#KnF9yXlcKC zdr+TL<&cOQZ-!X%q?^`#F~!wdnqncLuBE@ZpJpBX73G3ZnxXSyu~l7=@R2mloOh(ZilQ?wnH`lI!@qfyQ zu*epo!Sl@OYw{+c5#KMC__`>t3Z#xbic%a{u*9XBHf@TF5~C)&gP65Gwhq%HeE@J= zNF&+)K9hbpOJBGb2Tn&2fQ`Wn^zQR=gsbr-a-XE_gae0PHx|(~N1dfQevVx*zCy~< z^YyGswfkS$FB0`cW*VaBsH{pfhm4cKp-{>jI{6SKt%9PK)|he+=V_Ff1Y1Q2L@a;d z^!Olr<(ePi;75Shd_gg)4ANo5*NOFCqNh=prXRLCBhCZ?doC|!%zXJSfrAsY!r;d_sFa^*^L6h&Bmf(r^GY?pZT1kjMp$mo zw!u$|5?A=V?R-9X>kn2YPwMTDQ2%0nHYKV&3^o;$kNjm7h|v1R z%-k24(vu7)n?s^oTl=r**H#W1AA@Rn;dEDFZE8S$TCreRP=BQdc@hT^+TH**#_(KC zWD6pSPyc4&>r+r+Q46aW&&gi@i`*Fhq(6=4OwutBhW$di9$T{W3%NdYfn=W|^&B8W zE!{g~*^Rm1xeUJet1gGOwo6cVqP$F^cOrM9F6h&hpoSllsQT7uxr-n}U`UYmJqi zA_++zXz^y35zfOFF{{Q(b$`w-)dYD+b%G2d-ZMOnPQ5cSXmF51hGC+pQ*iB7%u|2O zvaMU38EgHaZ0O1M324yHB{^)pv!`Dp-PtC-*yM}L)710A%Wa39#jw4Z%7|JjCRi&u z?giNOE049o7vTcp@TWCWUsK6jjUg=XHx6jc3IZ?;zeZ~X!rYlZsXrp@W|d??Py z)A2g&rgKm(J;EPpf`~3XT1r0b8Uc(99p{M5CamdZ zLp1oA_9mn|Vql!-M}xI;5@_flcvmtiP38d~dp?cR3yYr{Brs+V*@?Mq3;`W0+c4|!8+5JI&8Qy z(7~vqG`X~`663Pm!jHdKHxKF_n_NUGGOtwyE6d?Y4NUC)#*&F*)qO~GB7j9*(eAp= zF-^QY4HJ&*^sR_$#IIWNBkvvjom=EP%Ms*bQ{fW+4>0Pe9>-3Ee(x1jHeU?#5ZC7{ zK$tsdcJ|P}mK#srQj>Op@DL_99I&Y(;c7Ug8<=gqZ?^I^cPGSo{?*kJh77AE{YMWk z;dy&M&QRHp7R~}mx&n$XT@zc|Zz(VAFYn>vo~)f=tu+X4W#0M^^dMCOo6Jm#A8NiV z+}I3lUVPkLDFaFGlVJ(4z@zO{6tC!mGnq_=iLFC$3O~sw_Ocl(P|;}ki&`Rb5oNuw zOw!03Dh{VQ11^?5y0X<7Gjf41!tfG_5KQmLL-4(5C)sLUHpbx^ByM+Rp^Xijz9)_r z=wQY#{$clnpG>9DZAGFVh~61u?lDe%saA4bQ^fJbqD7xu{e5umMKrKpbuz6HB1wEI zI^`I#c%8pLyi>gAc7_w{W^x#bW`UzMO!FfP4a-U9-Jpv1RpDwxHFs$fD=n2qC)M<( z_+=Irh5H6#4V-n+X^!4Ul`mBMA&op+FGbqW4e+V>|19hqiIu-rk|B_=wq~brx&ZX- zOba7Q1&`iafWa=5kyz7J-yAAkY0a_FtA(6el0#@#v#l{myR*CeLM9RVXSQF&K!%@^04)39jOy` zbIm|iMF#Hpc}Nn}T8LRTP#V8o_;p>fp`lCT9Q z0=+StWfaSBdanLNbXQD^XX@BXAh@CE^a^u`H>XOX6DAf(cD*8%J4-FYlR=#-Kq+^P zzkN!7R)2ECmyYVA5G)Z=x;d%)(gCtBPB*J2qWD%b)HQM^KAtXGme)E)t46#hQafU!2(x<8YM+b#VcmGX(9y%DJMSC(eSNy zyP4LLs&kP5p5i9({1 zSOwZ;naYAxQsoBPNJSNXjkiC0+j|8;;_x;I)QR%fP~Wx=x^BOI&a^j?tO*>Cst8a?U}|9mUTA!XQ>BbT|h7+XB@ zAlGBZt(#oBt+u*#y{LXC^y{>UjiUpwa$!N7CjcJ&~gcI^}5dnqTN&pZ`G^zY3z4)9^j!O=t9A%t!cPzfW3 zji5-Qck~+wi948ppBKQqYn~HVgX5^`alzkPzQfOus7GIYu+tN-*~zgH&0tw%9><4O zwB8?=kCYBtyly@A)#ByD~*pAK!XtucKSn*WVDu#de))EVl)E z8Hagg55yseRFckGoMs&6W$X88{H?lbgNiQ&LYm>fd-(XeRmu?Q=95|aG0N>qvSoYH zR%2ijzExcv+?ym4_`=>L(Nym}Z}K;bus%<@3a(XYH8nNc)l^2O&%9XamY0^xKQlFhE~{A7(I=kYE5EWh`b>s_r^yafJ>4pyp`K`hNn6e>w+(y$Lfwg zCv3B|oT9&cydu8Q8X?roEgBePd=p|f@sohRSFr-*e%6v`N%eX8%-{bq%e9|3`J*Ml zMi}6i8xH{ zSVA%I`*`2wI9A?AvZ&wpKFbEk3DJgFH91U2PTQ>N5nWh$KpLOL$po>PP_|v|zkswv*S)�dKUuNRlDV7hiT7SpM8|bsrS5DdJOe zqQN@l|8>5CNeK~YhK1z<<28S9Jx{&s_>^7kzBwR2P<;M@{Zu+5tQ1o>=q2>U7OyiF zDC**g$UbS4dhNtg$Z#A`IFRyNV{i1Y;Y1`^Q$zmjewZm@X8F=m#eGF*`TfpK>Jsx*h`d^r3&-jm&wYPyc7(HM z>5s0T+Sm65a%%`5K8wNQ)7aFt(oWKwjtwO(GaZzCj`_8i>*K$Yf3&H{1{>?cg)4Z_HPQi&za z%6Xo(z!;?vvY>aNg2wBpHh9(AM#hu2we_w=UbU79Q@YnH3Z^ho@@x}(QRwb%OG(Jt z{9JFV_8Q>nK6ZEJk7npCS3@cd|c;<|YfVWuMqOfPJY%I}NqIt@g2<@JuXE>@8 z#!%_djV0|W7yX@O3__TTzL~vZ(I%9WaivV2=-QERp$-PLT|>lYu;EWpb*Vm`7K(7w zk$Zy(?>ncsl&`paEX27Ecsie+KJIzir&*>mChShsLBv!`NHX~eOLQmV@=P8IK5cEJ zdo%@@T^e;dL4z4Zm_pSZ&gR)+MuBQL@PY~t#oE&nz4XZ_%9qSf7WG1|8CqisT+JsZ+n2(`U7zodGQRk_>ezoAccQmDl0rr;Mpbw@BD7G zHR&g=R7=twBu$$rIsXioPCIhlcK#RPml=)8keYtMwh}KG$Fhjr-g3yx>-#l^E_9C1 z%A+4$oDasg3$_UM>SZc%`5W~RrpNsh{p>B&>B5zJRnoaXAsuG{edzZv?jGdQOvUh$ zm23O11{O@V*75Tze!CVRaMXF{P>1d;e!71mnD-%X>!Tg$ax1o49KHORQ+$&{IyBDjeh=6#NG*d##Cq6Au3j4`ALobS+uaBYxB)MweAi*yPIbo*|bv^u26n zNI$L`1xg&Sq>+Bbv=~S5fbg879f}=D@GBH7l&0`uc_CHBp)AlhLlsUY^NmFa(JxH6 z$2RzN^;6s)k^mdwHKdbkI^Z)XhZy^auoYa*MAuww2R*b&~y%ly{G zq-=y~N$&MU8qw9~5u{=JTLt=!Ih`$8MtQCITHO2euEk5W2K)vY9!A03Ff%L`dG(kN z0gM=-BuY2|{v4DNGR|aJSj_T7uMh#KEfyw*7#78T21%aQn`uLvZAkd))@;3=(XRdR zVJhFOzW&uoYW{{tf%lQ*NLY6s4kbGIHI?acCcSdnp*Ik`fyarph+Y%leT(wj{rFAl zGeTRgodImO?LT7tP%lj1Pp=+&x6Zy+wr-3efk>^3Ty2+RNS0Yloy2KXmgu0f@-fvq z+Vs5giVOMbq{%dC>92 z3iY*n);`Ud46R^cB0S+xCawH!OM@C_>DqrE^>Y>_Nk@6wvUw zK*nkVgGLjxSmXhchC&j^M<&4z?)VcS!+ibN=9`+s9jkGJug{$_xlb5gBxDF&VNci% zR@3p|YM5qUgMh9uj_`?y=S_=GXlq%mj$B@|L%?d>G7q) zA1@Xf`zL08r2bH&Z;~G{d;M35BJ$gve)Z0OlHy&)BgaY|Pt{c^xp^2eeG@`zTh?1j zvEB_@aSd~Qe%Cp?+`NH-w`G){klONvjivH+Q{K?GXpaG29$L# zO3@$(%0Nsxh0|X7k_#E!XY+`99=-8N1Tdu{KX?7%q>Qln;xkUg-&WaP`D=JyUl*FA zd$L)_S}^hg%=kO*;klEtiE2gPABF@U57Ah?VxnNPn&95tz|F6!LQi&+Rf;yh9ux)k z45fUlX+)3E&6=G5xc;b8Ie639A~lk3Qv@4SP1%aHDcTeljRUDtF^@{blzzp&@^Jur zMSth?Mc6c4w-^KzqSfnR^$t#SYi)T&SH@aK8?wnRUwrA-gq2uK+k+p++UJY&RGM#P z+w){Lp;=o(`XI9Eq}X3sV78dL) zb>q-r{B4Mps?mRSDs=8AP~0})Q7-*lKJ`%f>QXNCFr)U$@6zzkxXa#+9y1RM210`I z`2?}NiEByJs||=Ykh{&eBCDt2bv^vO?fWXr zDPH-*Be_kUeL{owYt(goy+L&7VxJMGhV$87rQ6@ZN9<@9J#}+lqVjO`I7Vt$AV($6p(orY{cFgs zTGIoYhVIRg5DQN`g+5b!;;ZX|@AmnV*xMib2eFTZMx&hj&}vn_-*l%VJ#2W*?%ntI zG%RD>-R=p$=D%3bJ`$Wl3|Q1!Oh;B9CU;8Z45%F!&sNQ;Yc!fpMe!$l_5|C{PKBZe zHLIOLFJaYLoLmaEjXmzM$WGF`I08`}?m+(dXQw6Al(u9X=G!wI4LnF=`a9Mg%Q6Sa z+YpPUQV@SV841O~Bo)6fK|CQ_UwRM0PMU#tQEJFnvffv&%}g2Rm{Swqpq);O*C$ew1XTy}Ya?``6P$yS>ZrZtibbZVq7o8S~ zoZdcLtD-7H3#tBLOG-n}Yv(T6(bgH~=?ND%@r(k<>@}@9y0vh&QK%1UVR)QkF30ln zI0 zcin%5XV;8bFp-mV(A$AlW$%FK&XzYPCAmHX#EZ~FV*|N8;& zjz6<3_MNwy3b!BqdxZb#p_CeUW9QEP%kBUE`v3XuMt5++V^y>1@4VAt`S%C?Plx;G zvmI}-95bl6g~kXBpML)TX3YQiqcJ6$rLhk4k1!>lZT@#|nNs>YbzVg&oE*Ks@AW*# zse>x__i)#m?kmgO zpug(UDAIi#-(UgLfV}qv!l*DPw(l3EO(oL965L0^>LRgWX&Wo0P$L0`==L>7%H=K7 zzhm}A=0hNQ%BDCTsME`Za(MgrG?Hw~y3wvhb7B4A0C|3SP>!Ax0;o+q0W`lCPR!JU z@sQ&c_>)n9fu*(@&MrgP1yr9m$wW85x{uWyr_1iVEgFB0%clN zx$WO?6b}4ga{&O-e{6;=lFSo$*0W+8m(kb#6(U~hy8!Cp1~%JvRCDQVX2z3`Eu2U~2<|Dc5sR+0#RD76IuXPm_i2a0_f zIm%hcLjc-IQ~)PsHKNP%d%Ua<0c5wx)QUzL>kkG;Bw5dl75<3P(vrt^v4s>xd%_xmv%gO+&XC*3a)3g?3P`kHwF>Z&t-` zbOtO};X-L>xsx_RalK_WQZFPef)0IG^_pyUZFnTY!Q4l>`u8S+_4AVfAcpohcEqkH zkd{wWY3Yd9JvmPF#e5d7grfh4od zZlt{F?}Q9|aJL`A3IiJN`RUWP<;ptN+3``Zy{CAMNgCr&@(l1f0 z@dDF;KBE^14uDwMz9o_c&_vf;jJt=>@2stC>RsU*{R_+_^wum}ZmK#!8rUh@C@4$- zfXk8?%d7mke7qC@2wsi9rLV-(yihQFm!I7uOKtbMo8K(HK^(Btjh7EBb#FR|FMjQf zP!a}INCjz{9vKMmQ-B_Cpkp5Yrl1G~L^hu-|MA}C)OGmbcE01$q^qgt^s~r!Ob%je z44BJOym7|g|A!qj;Jf2esSI%;1k#-k0902q%>s~v9sJn!E&c_}@MDkqbkHGyix==L zhbWzG4g;ahYUa1fxgR{hwR*VWut$7`4U!Wdg^*t&0UpHn89>=nDHia1UvM?Gd;`@{ zI0xj%z7yPUC$(uBH8lSCsOLVl?JI|VG%Z{ILLh-q-i%`#{u_$+MM%?mpVu=;w{*>c zaYYkwsCa-hbmHf@y!ixEwLK3V#!)7J-tW<H%KR-fZ*l521C}{%H?P{Aaho1bc0MaYxjy#nwVqJIPD38-)oPpS>1< zr*ZyryV@t{yUTmPTKoy%a_k#VuZ^-~d`?5O=cj1mDiH2^!u@xNe#O*WyIkYtWJP5~ z(A4g~QWHGfKe-(j7lkX`HD4kOE|B(B;R!JmOJbx?9wbclD7Fd{8v+igPaueje%w;~ zi>EhEaOG2`%JW;sk&qy2#$&iJwkXm%kbvd}pqvz`Y}|5#ggi5sx>?ipSoOTOO64M8 zYI24n4^wHFm>8d+dTmtR#&yU2yX@}mfQZJe$CpZ2oxT%XK&joC4%!SVw_`VjE^_pM z`r^SfX{Qw3^jO6`8m-|3fj>%HuO`Sl+ZxYy1TFx_`7T9AP`q3V=Y`Eg&(0 zziDT_xC9(lOaF9{;a?0!!76&10B`1AfPtd7{oZIq+0fJ<3cW6Bx<<>~00Gm#0-iv5 zLZ68MX!kqUr;EB-n@Bl29o%ZbAEg>iwawp^l}HgV7%>W*ydOPer2@cW@H(l3*No8{ zS$ug1A}_rHu+Ox*MW9)x9c?eEkcGEbhmF}2j8|8Nmx~l`l@FDOdu}hu!Z~8f*3okb zxh1P_QGhtcdAo94v+R}YGpTqEcI|*vK6lNk=!clA_E`ey-7@mS3rzIq@{@p+qX!7C zd<6p*F|D-OJB zUnoWs@E*`b6|Z6jq!H#3W*`8(d$&$Kgig&s-0!^CaLmO5keqHDS0-!8JdXy%|hxuN|F{Vcd99S^Vf_gVJXuO{k#AK^K$T zqLE;dLJ}NrkU9oVt0tcCMOkn;?gd7WQWC!0?P(0*XyueNFg z_K`-}@1+_{-trxQur@meQnU+X@@VN=;FiFv*K<;erl469zM?Oe zCKVwEG?uIrPlIB7_`~p_1R(STyO6u$(eShB*6SziF$7;_A?&oahXFy-(TWH6VxPmAD`7Dn#ND)=gea{BkadPTgvY<(z!Ar_W+OQSVmk}!Zb!>} zDFRYNoYSRm%BmO-bAk!&62{HElcrf@8OvnMP@d7ycJjLKYYaxP(Ya*M7)1kjS$|VGdB&Zek^5_UTj?$D1v7BPo#2qsh=oHEE8m zxNfbEt^>}zq_M?7l~9>>J6S5}Gfa=#%%a7>qDRB@zWl^w#DQin7I>`xyVm^yHGiJS z9dt{bm6$K#HIV0qetLwl71j01TP4J|%xB608Hm%i>&kgFvXt1tO#d8qh;-^7WX@M(a9c#iuMKpIRYhc#rA`J1E`)&n&BF{q5 zCSh)3Y+udGgCz(nZFhI=O)Ev?tH$H+4x?R>Kp;w!&~cY?Z%y3Iew3dct!1nVG!ysB zll!sivGS2G)Q8%wfimTLY-sfobQ807s^m1OyIcX8?FyDo_~kUhX&eS8A=Ri8w#TrO zG6}FHxy>CJWjRZz`#5ZPx4Zi9oc5r-n-!bAD6e*h1H0lsUI6XU=7aK7)8%l~;qS+4 z@JP^Zv^{H@t2))B3n`wC`L1+TH#>uwuDY|%8lWEcg&JW`S!SIe$;30u zT=DcSTd?gmA7KucupES)oI^qOOR1{-b1cB^>*OA*TwJbIpGuk3T%*{eY9a3tqK^?< z4Ug1YOtG{lb5fQ_+tHC!O`nG-G{Kt5RmL)AK>RlsOh!0==_h&YZoSauJwn|WRDM{4 zv_0ciw5Pltzn9s7c7C9eX1~Ywv0M(US;$O?Pzo$Xcy0EsaPr1NJWiU1sU;ALY=2{= zn7ZkbqMeN<9E721mL()FB{mcyez{ObHb<8~{Xi zf++O#m_v~4yrsMP=o%<>zC&39Mh-+&L|K!0?R4t9?vXy|GzqBnQFRS}f>0rFXB9;Y zS&+O~Y$ASiQcI#{Qv5=V7CZtT2G{feUT2I7N{+~E_}f?lQflI?p5Yf7e|J#tusaz) z6)~|Wok<2iHcOG0ifdxShg|Hci?dmF8BaK<4S~dqP5feeQHd3X=x9Co3vYJDotf8W zr6GrN!ZYR6cMD_Fc?XYjV=457 z;>RNoJ3O}=y5ex~Sg|fydH#Q6EY+M9z{~kjW4imRokytYAJ?3#lMl?X4^ahOipXc+ zXEbQ5HZziiJp6v{)w!Wk#|^gi=Q2X;By2NEIN}q0{%7W1yPu^BCf!(9&CV1L%=eIZ(%zYPs{4rG<`e(ep9phlv*EFU&*Ztl}3Ih!Q2Y2w{Ha@@!JZ8 zoThRftM%K=XIeci{&;6?eS*8yLP(m-axwlWIhaq3vB=B^$4rSMb{<1twti2-VrLh@ zDswpcJP8NS4eQbm7~Z@n=M%2~T*9(n1c^5anP_ZO%5lS(13H4*P{B(a8y|Uhjd3Gs zXUn5lS^u}?PCi=UT6{BqZ>@-`~@6aTsfOAfUGO2-4 zY5lu?C+99jHj|JnR!r9e-=)2<7|A%<3R%DDe&@e;>85mdv%>PA<2G2y)LQmtlcXar zruzh-WEq5PfvEF72bf0Y22nO0o!L-mdzq4+S$fy2st?~KtU$ga<@dtmrLmGi@Js38 z;1djFNUBuxl=SO%hWbe*$!E3Qvcc3Jx}GCbx0HCTbv?Z<#C}6PAlDNHkfREUlXyKd zx@p^WemtVsE{HBEgZShs;Ne*{^^^W`9{Wcx8fnngR8p9BWZJe61`p3t^|@cenB48p zIT!Hxg!Z_Zv7KA}x5kvT>NcAy-4LI87oWSNL98`R7b*}Qb9*~nsAo#Xvp~8;axj%X zB~!BlaN*sQ2!+z+fIFArN&(v%&9yHBTQf8TzutH zOLew1X7DOjGuIS*V~O1uw{3BmdVXv2bqNGTUolLQ*u6)nWa&=lY*0vp2Fu6`FBf0}?E=^b}2vhQoEC>ws^F z#_<8)d(~*UJN1+Ks%F|cUvHHCGOSJ4Gi|9cgFsEqL+`Il4LOzN`X@2`mCm$R>~(~c zM7Gpkf2U4@L8eCtk~$<`Gbf?nacKvElSxG-J3PUr~p@ z-_lBn^Cc5;^d)v<;9)dj`y6-GL8^ui_$-v}BMZr}!}f6B18OtAMRhE;bOmPu0mJV- zlD1R#8BTth(O-S!6P;mj;zhCj@IndE>?qBE7+m0AoSgexJV}1M(;06X z@hcX}{K>I>_fw6ay#vP}<92r9Kao~eaM8^C9YVW-DiZ#Fs@u0$x2edg(1RPq6VPo$Y2iAD$Ga3cO3L7PiQs~$<9 zJfkysaD)i$GFS!0W}o2Ihf4$sE(+Kib=2@(%qTc4Pa0ffO^4MC2RoI?_+N+RK>56k zGWdxnNEGS{N7Yc* zUNTYM3l>{9r#~3gGW-!4-^h@0{tzy;8j0>u8!0GdnCsJ0%@4`1YFK+rX!9Udnsv3@ z<+sx|<7fmY2Z#RZI0LgZWGU=y+;Wx72f7ffhelu>-vJB2gM;yZRc6A@?BO%ul@b&e ze`k_j=j@hj4db|-xul@wJq1}@Cuw<>n72=_k zU0sj$PH7$K91Ovr8PkUSM4Bfmzhiz`aJhmd+~L1$R2{pNFpkih=LmCTh$U6IFPEIz zCrQy~B*nJDn<2?$NEU#b)g81(dfcYwu$kY-om7z><(d)IjvV(B`Wf_-8RQycIhi7c zkpBw#(beNC+n}3y34&iov^kCz z-sh{n#5Pw*YrQ3!bug)c`Y?raxcxR1Lb*}A`}~Ncm10IwYP7rBrT#Cy69-{n^Qa=)Iw znpK9aJ@SG~Tc0Sv%2oTE&qe>O3g%}ezYJH36piv(8TKwc-sQE`IDA`Fq&1Oae~@B6 zB^q%uUG;rZWdxKiYPU&Mckvp0WYvo&cy*3PmDa=W_V8+2$gObh8+BRywyVg&bo!u0 zxB_oF$GLj$rN!jRX*D}9dU{Ka#-@sNE@e5xu5ShOxoCb?0TGyFoR-v?io} zCSmyU%H7<3!y(tSkALYRZz|GRtb40?#=UlBcjYwa@=UDY(n8SuVne#z)@S!fp+B#G zSLOIXoAEgrv18`E-;!d8iE6p(e|G2p8~ytWq+L?ng*=F%>>CFCJ4pX4U>8h_p%6|` z4;ml3C+ot>%aF~|LZYP>Sz({|2IMj zHPQyXN*wa;{d=YVgO2`>2W)nfG)i^qU|V{tn$Gs0zf7r!^W4#(4<$Pf$SigKY*Gho z?Eo0!b-~na(?2J)4K1v6YZ&E$71*5Ov-*+yeeRT(oKUpXKX@o5Gfp_r6n;Z`GQzGt zF?+J#Mc-xFWmY}c|Dt|}e!S+SX&fd2;gC{A|18wu-%4x%pY-HWb9v69yXa2h=WGW~ zuPgHPSbb@C<7BmRU>|9BnFqL6v1u_dJB8Mn4KI+Z<;5fP`rTWEIhjM>b#)`X-43WQ zDXw1S=*H0BfV}c3+-M0e>qZBb5Y4Y-n{Q0@9Ij~q80+sY{Pn|~loJ4$8`m0ENChmJ zdgC-ybiiq@LmPT!e!K1&(?AFFEfAUFH>0Cj8klmv*u z3o`$F-ut1ie+w9HY)0Pzn(I++N^X<(=|?HY|DFeaoDxHL67YI`!{tG*c?Xpx$FLHw zGE0zNCt#wvZ~)|zjhP;xO-+&CHe#k5cWicn*5=dO*sxmww1=bo7Z1a?ZcC5#Qve=) zBg_jZwohI*-F+d@tXOiJ?f3?;UaFN6zkYx>zo;RO`T_LQ&0`e6Y(B{hOQ@C$Aay$5 z6tj5GEqNmvbAZri9`kr~oD#_<3V@``fN5L7K^MMrWaBMdX{S-kmh&lNgZ4bKQlkq` zRQ#-kki0l=H~|+^y8)1S9yf%!K*cer?HJC)j=mC(iVdy<{Y6W=w^z8}PxG7y3)r1N zpnQ{wQf~D0h{x+XSy4N|;_whBL?fU1d69!-5UcO{3gwNQAx&nYixH4@TXbOJb5=2x zWEv@W-D!yuMrNkp%E{s%o#oMUnRa4lKxiF+cDnPpzQ?f%1mNjuDXqlR+>nv>{ao=Y zYqu=mhI$}KmDqYC^@zr|Cp*f0fF9ez>wxB@eM-VQajowqE!h}m5X42)HzW@ zRkU&jz(tmUj-q**QaHl>{=?7ta{qk!E*VBqu6*__O84jeCD6^)a|fVCuRhtHRQD&e`jzeZhE~(tZAzYP01Q;Vg#`-Vc9;UOo$Ni)KX05! z$CPzU4{xE#Z#9dd@y~Zg2$uqtEQA5Dd+{yw3UIN^MZY@w0klzjieblvUgby_d{dc! zGV2!rRnq!C=0PTah8;{B0B6$E9t;#h08kJ8pKD(N2@24A)oUx4I!6BYdH_cQ9g9!K!I4W86StTq z8S$Q94}9>eK-pyOKWj{|AV#WGBtveL=`TrCIAHP+_))rR;l)?D0%b`0Vcus1S*~!Z zS)}=lu@*RnXM;P(0Ib73cp!YxrKb9MH+A*Jn0DrMPP&MB+aQafZBS4MU- zmq->Ng~7%$lvSJM(YTouRg>UP5-QlRjQY64F=IDV;iQ326i?=1K7Q=8*hj>~07jyr z1Bfv6?L_d4b}n96LA1Rp`ynS zfX+7s*@t2p8AXYIlF&x5dde%JZ|wtR(r#hZH;DjMLHg_46wcc81E0SFJx)S=cAE0{;ubp@O*wKdZSGy@U z7>2E$AJ(!j0RKzFQXK$A>jhxr{f)#u(ep-oJb=R-eK8=IUMVLoR699neVJ?rq@EZ( zVcbif{QYW6=j89kZ=}s+RA#DP0@x;wSV_j-RoMgl4K!#Em%VWWNLf^}pM>4IcnC$& z464EoV%-E8u+ITHM*%S_jl8+Qc!F(hibI(jfXR*J-D{FzanwVac8L)`YIK&C z&AYzVCqg5gK9)9W7vS~+h-$@3z9pk1#8ie0^_|5YY(GUR$S5A;#67l0&S~!a=zYtW z8TOx!cGT;#hyYxBUCpjv1OIkcnJ}D0-DZUWYEgk*3b0KV79dwcd$kk(fWAOW(x_+!R%Ujdv|oV7YL%YH ztXpMzKPHbKz~}iP1C}CDcqbyAQyRBOsk668f4L?nUeFlrQwL`-@0_$eHtzBpgs8Qn zYhi@`RxhGlKGH9Xd|~&Kh~t>CrEXc}1y3y#eg_C0qalL{%ex&>>0PI;FyVn&oZOU~ z)?4b&Qw`76TfUXPFVQOhFKBUVLa}7zO@CtJ5zEh;RX;UC{>a102BU>k#Zb;HcPn^ZJALH4EAYEbw{*I zk@CwyB}RdY9v3gc1|YK1j^(wCymmsih@8&F5e3Mo^?fTY>qz4#6zKkF_0@+pBHxeq z7zcu6(zoPtl!?hA+eT4?ScuHxbZ%p+Sr`02U@~+8Aq>K5Kb4XG1bf>T#YCSUOEt*e zgSKME3UJ%a)~#O9v5PJS>$7-W2ox`I+(R z)_dhKah@1;Ke#>;s2NU1!6oOBOqTi~#D+}XI6tKc1hb}8uNYz@E&=M@D})M!zS2K> zgb>Z3avX0fR5}c2HbZq#JBZ8=GKS1bk(54~(Ix zA2frcEsq-&G@d2(KjN`VnTI6VawXY*WjVG>>VJ5J>ReNua9&#YNx#4D!`rx*5m-j@ z%SY}LwOkgHu0wC-z2b_Nz*UX>S`)^dd0i_g zN$5!;lG@p&ZYRtNbo|=z{hfk!L;g$LYkTPL_(jk^RXviGbqstguh5>mhMASYqR)t- zj8gj0niTZO3io9M6iet?nIy{J_d6=d@l%##j*K;Y=hdIjs$dQp2V%NZ4K9`1c1eD2 zW>N)kYrIDPy6jBShZm%|iAy~?RUE&a`40r=Qw_4d!0!kpeM`m(Z7qeQUMo(m5QQbb znu8LH(J2M31${)|SpErotR#=jKlwbwN=(T}w|!%QLFH?`F`2&GA$#-J~j47(Ux+j9ELejoBYCI z6(k62>#96)V%Qd^q5pT;Es)%DW%11wt*TdzF&odTn@Ri=a${CTwG7_ri3;;ea<@tw z8wTQvjZN&-37)~Eo)S-6^KdndYAcQUeRXWfT;*;`E9`w7`u1;csKq#&RvuE>Kr`Ie zsLB@0Q8klb$>t#vh z3~Hx{4}|J`(7_~v1^S=+K-n1l5W^wO4nNVr@;^Lppvyrc2~0htbnp6#QW%y~Zfe`* zM=qbQF@_lrl29AYA270@WvdQfA5DK+tVV^NgS`WRC)kP_E87!Yl;r zxq4<_nVn^_K6D$fhG>gJxwM0yDYne|Wj$Fqnh=M4H|+|noMF8#*jlB5cPFMFYdzj;&9UAw!i;mSllRpw_Aj^v21>F7Hy zUW{y4{21OgVSvq;o>LB`Z<|4{1@vv7lrqRHEI{^Nnok7HKx>y(Zf4bRRi zhbz@fKcRT*7b(Dm0ezGZi-*bMTe^e)ZA^WMkPrw2^8+3*5n#+zKU8**l}0~Q9val0 zi2GLQ2`WiMAyr1jmMCJw@tP$au7Ugr{%Drule8yDN8rpk^PWjVMoKVC?=niZCyRT*Sp#{sv%6RXx z2Ytd$mNbsnQcjN9(1qcq9nq1EOcF9ezttKk@RmbTRi3hqw>LX1|1b&I@sWIP6Cy%t zj!Z|-D7YU|dXhBQE*Wt^H77TfD@X%gGsgfPYH3HmO#f*g;_+im;PyHo-`n%lsRVPz ztUlhT-b|S*nry6>WhB+7SgNB)pGCuG;`BU_c~0LgwO9@&^~SBUBB@oksMNX5E{=w( zRL@b-3aV8f`nT|DyQR(sr=7T#WzgkvHUabWHK+wNfN#zD-^VXiusw= zQ$*a3Z*KX>>_#&Tmw*A8PGb1xbRJ1P`H6aZ_n~um-#AzV`r_c;*-N-;Pz7}%j`2mJ zuD?l?vRJ_KMw;1%E^E>jg#I4eEFhF)9fpOsAQzQIdtYcO0 zPI^BdhtG4|RD;1h8$yIingLJt^hIOk0KN@GR{)MjGHJsem>Lw`k7GUw+)KPKCU*QT zz2O6pW{bV0?{~LGGK3Iu;qVQ9wa);N+DS5j`t=OkRv5w;z3UB&zHiiC*Eg0I7yXdu zuS%tHmkP?td+n_-Rh)d4gDJ{%zLS$DgrkB6&FpM?3PiE2p-rii*B)L-akZ1B6zC7$ zoUFgLKy@KU{Yn;@Y$Yp3=Tz(9?#o<3wos6F#`YTa0hJ0|0re~$2z5{&7`vmH+bn^V z3l*PuaWOZhKrLSaw~s5Pwf#*IQiNHp%@yKavPjBcn8u1EG=xMQ55Ej(GIe75 zgr}BerfVITnpn)GNlk?b%i^gL$lyw`zg*+bSk1{h3{!1RM|Qar2WT@qLw!9G{rSyr26xPUOGEYZ>)+kfECcb0A zWH3Xjf=Y&IjA~O#r0F50<(p}Fq26tQHh53Y@YFYYH)&XT#7gPZd-18&W}AoS7E#Lm zf~=nmBxht&?2`IUq~wm3#{^E`ue^Pd`QSdNb|zVDAyD{9O1dkgmRkWDFl8Ce>rjt@ zEIA3_MN}#cn6;lxZ2p3|;}{Ws`a(f6)BcNcG2e0-kwJ>NNh!Z0}Q&A#vJzSdg5s}xMnEnk=P(pA&OY~pF%h@da{ll9^Y$A+@v zJeft3ebzv_BCwhASZ@PcCp*?JP2S^-7@OYlTSThvRs<7Pcc_o?7m%Te%lqK4Y?<{? z0|neBHlvvZHcsjo2aqdc*`%kLZ;F?Z(?E99H5cEC@ zmWg9q{)?mU=eOP@Q?cQ9d|%}ZRd~5a%0xAQ-cVJmYWl7j%#)tUka#k^;IX;^h;L83 zdVi2Z-L`lF$?8(JnLF3*FK9ceSoi#Y6s8kHz>`BGF$%5_ras44WTMQ9Y;)KP>IDL? zd!nvGAbyK^4UC#ZA}=Uc>85z%+S>WvC?=S_52u|_bePh5|JAEnUq(Y|X7Iu6vF~GE z_s2W#waFw`Szhi-cx&V)Sw@|MGUYu})HCCI%u*esb=P;ox7u}m=_u@`=vH}dz6Jbj z-AwQoKe6~R@VkKe)+L?ePZ5RpVFSlv)MQtCX06w;f zDGWH`KVs84!fy+!ErQ*8X8cxF-CV_CnR*D^Ov5Ab?u||q*AFt(VbIR6;Q4%_ufwT) zUjpyuFtHv&e>gKOiMjTJbaK`|_;Iqu=$JJ_;rg>IBOSN3*zV_g9KKImv7eRY{KCQJYj}B0 z7?kIGj5|WuBGvaJnC9$>O4ZR^m3IToI4v!*>~Xiq`cPdMzqe{g;dJ6s?e+Pl{>%d4 zk3^^XzQw-V{9s>T|4`v~?F$9ApQI*Z&&NR8!mn1PvZgdy$E3#8ps%->4C#1-g_Rl@ zzhoTqI>3%Wr<_aY8*g6|X#_u{L~|cUZdpVcTMmG>8QWOSgJbTcmvuR1RK7YnnznVL ztuHLJZ|%UX5CW^6_ZCzLseWRhS7O{CnzLjWb2(=oIMg(9a4_#VW^{p?I}i@u#*7r! z>%=Z5E~pG^^fzE7rKmF5N~Uh@l(!^;U28~>FKGJ6#IufdYBzUk=X3i(!fyFZ*f^pH z9PS03?gT686+9rL`>sSt+a0U~2X}RYQc%(g1%e6t3wM+P!(5bE&|U8%+%hSadKk2a z34xa3^if0CvwI!~ZooLNQpd`XehVCNAG&j--M&-LVEshExP<;RMi{1Xt#+&1_g^N^ zqRtfVE4g^4jG17sy9?XX_iiu=RSk#&@}~fG$;1!8fwFq9r$;5!d zn0Tj3rKg5tVT#*zKO;zmu&Zo)+U34@1kDedY}R8$NC{D-i=24uLbODu zJiB(JAUK`d^)-*=P%QlR^7OKP4$X46r?FvdWfO{}jn=ELIDKu<$;_}T*Kb*gWsOK- zJfPD{Vu)|@gqBVx$3Iq$CO|@&vI>Cm7xU5h;aHLNzI3_UVyA!Mp4S|a!@&SeJLJa{ zFcgqi3T1km{Fp%A;E@&05&L<;?%pT9yGOlVX9BU$h#Znx^#soZTt;GLig%T|D2CE1 z(p3k|E)qm)J{ixyg21Yh2L7n3?dB@&wU4&K?DID>kmsunn|22oYm&JH-;ffUO%!9M zN62O;Uuf9gYql}%F?A0UH=Y15Kd)*nSnN-ampGZ5vKOUUaP}WuhmoEm&u43CBZ9$$ zvR$=BgjqG@-Of!LajjLmThJ%HmdB;&@uI6Kln{KoF-pn{kl=x_mO}6uy z-??4fb-(0w){RDVfH`7JY{I`vw+=Ug^KmK=cJ0|!3kkaup6`VVxH{n!t#R;TCR zIJ(DH69g(OwoN-s)eZ${2-n}l-Pn-kX$JojTz-v{KtVhFL+Epo6|v+eC&C=mz9lzo zS>c6Q*QE6&p`wPV5Oj!}el9seM1t17C;XCwuiP&>ktgQM)yvPTr6z4xM&ezIBb}Vc z=%N8zGg;6En~%&FS=AaQBv(RVVAb z($D2QYG>ZH)=Cq9MGk)E-|I~(b7DKb#s`bug_~7UoMjOk!kbE_Jco1j6~!*UoL8Yr z%0oLIL+UdPbza3oqbjs0g*X8ZTIY?=F*dI^h#l*vwqLXvih>_at$QQuWwG--VLc%- ztzJD|EqWVq8WNqwJj~})Mf9kQvu(kT)l2S9Y(Cp4zx6Lp^_K;N2<2+W?V73AEA<}C zivG&nzz)$mgkN|GGJnI=zFyT< z^vR3KMd`^nSFi391Zfryf|x(b3VzpY4U;<_NR^be|Rq{X)q6> zTmWA!H~r6N|MzeFPu~CYA5gx7nYkuL=_l|q&3fU_cmB`U|MyoE04+uc=RDrzzfbqS zU;W?TG_OH-h->D1zW>i<{C_$t`0o=_cyYKhUHtcI3pMbM^ouQD?FIx?-qSoNT01Uq zF@8-)pD3X;g{F@C0J=$M{u*ZYmy7+w`GrIoXD|Egcoj-NNHYp|xTxf>k%M2Egu-k3 zMnlwO>?>1c`WDp%LW=HeclgyfRgPoUY>~(X7dhRb<;~(q$yA@SRe@>C@HUs3X@G+R z{7%-SprYuR`)1tqb&tD$u$0I5u1JxooQ1Gp-uGtBIhuF#G>l$czNpK}pb)+wZK~_- z+U1~b^Q)V3-WYZ0aw*rkww_mb!S0tQeYPMu`13}v$3Duz8sJC#cmU+#!#3fs+Wz<+ zRB?dIABzM;-IsJg)>05is-^N@J=qx9Ce-oSl zCnl3HD@Uj7ST*tcq0!VRATN@d3JiRLpcBbtT4D?DF8buzSJCE!tZ~i9BhRb@3E0-e z2q=d9)O`Nl6~Ogew-2bnTmV7d=xa)~5ilgshqW0w1B`q+%8&)->ZPLNdS=JWa2gh^ zM6r$X-q=k6Wf8SCmgt4qqid1GCqs8>Aiv{4KFM~ z_JZh3mdFKR9&3OoOq2rHJ(_y9l`BH}oZg0NT=}hi40{br)RM3Rrl0Be008R=$raSs zMH)FmwAB9~6%fcP7g^fY)lW-lAPaqQFxMW=IVSeWlOiHCP56=W#<}JVI&bd(efX@D zkDoQFPwO>XLac?y(*VE5EUFy{Ps5xrH z0sU~w!6lGb?_KSlcta8pcsDEv;1J$C_Q;3Ob8S|J6@ICxIC>IWp#%Y*If z)s)Qyh5kD1=f5fe#&zTskk2db7-g5)k3cizj}k;2)`6R3ATnv2hXQ!-UlShB2#c60 z1p;;-wPnCE!hw#-^{U98BV;yftZx~*Z&h}s=xK?6k^+1_e>5^fr^e+T0`|ofhe*oFtYLF3o3m8Qn1(=%5+W$ z3}12`d9FVK37$fy+GI`|2c9o(0`477JX-gsjk~QEUt*L%iD(mod(BjZf--uF!7^I3 zPL7B-0s^wV09Xj2uG;f^lpc6|UU~va*GIq%zx!{lAWp6GD;gk=;@ zPb62FL4<>h$|<(0={1on`3v|EaHnf$Kdh*usR&06usWDSl^W~)rArq=Xx=Q4zBL<= z4Yr9dIR{IfGWY8vKhL3(-DC!Y2BeOpq<}wGu5Wxq->%VC5$>Ab3SZwQuzrJ|T?3|? zqJ+3uMs~EMox1CP(wyuq(hAYI3j9Uhx)*{%XO>6{ui0N^``DZTv2a5hz-#uUS+M6C zXfzdBIdK1pKwhq4+i!n=W`wrBoONsa>sAIM(3#99s14Y`D?rcWLu1>^ArdygdFT$- zwKl-XFjkhlNdFtyt|OTbb`{g45Ubp&XuiYeQnjo`quKv;E*B^N&8axjl;#ESWSgRl zvYT3A2Fh0)>ID#Rk(Iw_o^gg_F`qVdf(T_m*IHiLG2D*Lx@JKrL82$|+eZ;hvi0hf z4Eq#Ho3xKBN)y-qgWB#L=!A5!16q+vmj!ax8!S!$%&mO9=4iA0k~{V92byJSzph{f z)-4}OaaXV*@H7|Sdp%k6yTY+;*xGkEjygEJ37wqfZd%KI%(v0`3Lfq`!urES#|s_p zzl!mG*&0Tn_$~{8cvu6BZXRG9flF=bMktMExt+Qq`F3TFg?g<(eEv0Hv@v!j91PR^ zdUZT?XHau^6>Ux-5R&P7XnJQ7fVSF@_ zDhmJyk^#>^+wAX4;Au2=xdfgOlWpE9YMmC%8H*SxWh7%9G>cyX8Lzl;ua`mgj3E4V z(|UkeU4}+Jiz_*0tlVLi21yhcZ3aAAmLiGZgmRLO#8?2G7n>4}7c8Il8K)?=0p$GS zb8leYa7i#57BORq)PyRiV~1V#tb3!223U6=FsG>_JI>g0$Io(aRJB)wMIb6H01l#6 z$^8oq`R0utO+Q?nB&RdE3?k;C)IxQ~QQUcr7SYprXLj!TxV~3K1_gBmY$p$zV%8ef zq8s9Fp0Go@M?-HOp!Ay2qX}8%MaRv97DI8E43h-<=EFH|{-}m7O=f^*{eZc3jJJ79 z_hO=`^tNs*E0!WL=Bh7gp5hzxYW2Tc$}SBSjY(`_IBsl7L=w_lXaMP$Vraw3RZ^kA z699zYM?a}&ng(wGb|V9|PGIJ8GXRHpkW4Hrz;7r9Y#qf`TwfHQ!8L?_4Nryg>6`jk zdu)iW_i|TjI0s|lowR0$6DQu*`r6$A%-J4FQaj8zVsd^979a8Y_Y3YEqJ;WK;#AIT+33k8n+f93yG&q~CRl^v7iY`%{eMm> zz_IL@k+=@gp*Kt;*(IWeVyY}o(XP${2F!qB`Y*=2WL~t4^L5aWl0n13*5oorMcP+! zchwL10L;dtAZa&jZ7?0_X3daRF$)P+^vrE0Efxlp>M-kIw23kp8bnil8%O>zKmi$n z`QS@0ljr~(6T8}UVE4Q>a*yzj+0bk2HrG}nda2-eEA#>7B`%1zxi?479g%F}9+Xg8 zh%H5I1$ZvsvLdkZ&}PXV<~tGLEQ!<8N^~f4;y%?T)lQsQ2#ysiDyeiO&Y*FzfJ63H zT@RzV67{6uM^AEyHV{L*W`S$=3`-JU_`jif`NpQx0P10*P1Z z4Sq6n26fbdX2g+@kZJ+>{Ff`Ovu`(#QuMn6X?L~M1WSw8IGxnZ<-o5#($$_4;+jJN+-rC*rNtzIkk z8Lrx!udyZeiRMk>J!oR4S(WDKr3h32u>|j`@^>_FveC6$Y+q2W%HTjlNRp##J2Yrr zL0kq@uW~<`O@8PCSPCZWcMp#jpTSBl(K7|mNQDjXVE!P>bDVIscdU-!Xe~kLe6;BI?+BHv}^LUe*8;SrQ_!yHdL52c$G#Lr~
    |M#nWlb*%eW`Tmge2j?f!!6ITWLLM68c5oIfL%x=?-Ol=jl+9^i=n! zCihKA7%>YZB|Q9)s?F&hwU25;$by?h@-qD+!6pEt=8@BtW3@H(dOvc}F zTMGZ4`S!{f+kHeMNIdK;-478e`YIwco{?|fiZ8PfLdE)G(_7R~VxMx!xZA4Cs8*A( z9XS)#Fb9V_*x3X&Tx^u24C+{^l9!w*Qv_2?Bch*<1^>K$Mq{tOvsUW&cJKl=cWE=z zC8Ub@t%eiA>Vy9hhkNEw|9)_|9tlq_orWtY(V$?|j+4&kN{tP3FE9>=OhViyH{)N^ z*_Kj!aN@SST%{epTK@e6ZP!wj>&j2LBk>=$rU2jTRmQ715W*AxkvbHrxp@M5Ri(Y5 zY^eyMse*zT#G(0h{5#IN8IL_l^ zn1c~nRiNqe2%A02B;Xh{Cl8e zoZz3Y;KKbg;4cHRuBP#_5(N9~SV_(bt>+L*BnuX)n$zW(AcW~6b_bYpyS}D_9%!1z%_NGrr~OJJ`gf$hMJMUces0Y&F>}jaSvCHKUHC zq{puJEZDgA5!{>E%A$R)>ZECZ)ZcAd1uvDOxK##qRkM2O9GmLedE0X#Pk9Ed$75q% zGvCN|Sc@HsU8MaR>4?U}5o=;%0X3wBy9kRXW-cMr*f4emqvZJC3mDdbez}U0+-9=Z zz!IN~7CGyAImucDGTC;k)4UWzF)8un9L$(U=*9fY0>FtlphLcfSJdM z3@dwP7%8!SN z7)Jf&bE+~p9jNtn4h^FG zc)_8bK*e!G^84@E4{&2J^Ps^Zy>0KHH&Np4bP~rR4LxT;D+u!E?utOyMIwA8J6RZC zMKt=1KinR*RvN%0sgy#cZ(XueImc!RIm><^)6@PWzmWANT-VB3t=ZLyCd#sIveRd4 zde}KF{u>|Q1?VF6N!hzWd+2U3WfI*+HULQ>j2i)`6I-5MZ4cvjK4shAl`qz&5+v8dt{inMH{vvvcnh+NWb zNw%s$vJ#+87Z=Q$d`XdSUYs(UaW}1%tSQaRP2-&4`%O#GwPOaP;c-(2z#xubX|ImzQ< z&DL-Mc?qTj$F3ma8VA~MT{jH9ifL;R!}h(wsY_X4lt2w)YtFV^KWfmhkBDAPs&{ccJGDRxlzbcOoVSm zhQ*L>!MOvi*%JSkN{TWu!WDn&IhU`?^Y>OPp3MAhc;PZ*Wh(nxN7V6mFSRJ6X4G*o z+0%r$sY0zLwYJ^})dq+j4A+yV+76OPt2b{I+9+7MhJIdla7$7Od{d*8@N%QGD3(JT zwKiHr+ocp0|IJ7FMFQuOPA@Xes?KMN;EWc8k{P#0;#RR0I^-oGi zm8`8NkH_w%AG%n@XIb5WDly?e%}$O$v^=} z43(hr!8pP#nVi61!2<~CDdO><5&xxQlM(i#v%C13+E3~;sdtX4*~fa*3_g((aSf6K zq!11eTfz?_e!5BI2?M!ObtzutV5ZY@eq{e5eYOXrX z?~>U?@{9O~tDtJTWrxb}UqFjhUu~>(|JfM$A2PJdFY=!s3R;jn-UEit z)o8IGU1Y>lGA&}u@v*F-Q4VFh300b_L;LZxPlbCy(y@(&-II9tID4Vw6Ypqh&5Ha+ zwtlX}wux*%w+4)mC`Pc7ojhca zUi_6kV@LLxc57FL9Uo z2a8dBrUN_|*pm>xA*HAafsmod1ZA`0#Gd#wO}^`nRskw zZF!5^bU@_XXy=!h9M?|V^g98)D`(N}UNRHR54txyF{A~ry0pV?Hu+=?*_tk>tuIr{ z)^7KL;&%13v&80Oe`XiMr3i7x42SHRQt$MvazVjCF0FdBICD*oC%Xvv9yW>!!_Hw zUko5ae>mT0U+5K8`wyVR6Yp<_)9G}{RV3ZgX3Z)2tE1d&WP#81L?>c|blOBC=UR}`@(VZum8 zX~3u79A6o3P&J|93Uzegq@9qRSLZ6be0bUm3SYu0c?Qh>6(K5jS6)1g=DRrI;Je!Q8JHtRe!es zK27*h_`A-n-TN(P(B%=o`Vq9XbIxEd>y#DVZ+5kze>CmU&(IG|>X{;XMpre|D4yFj zFaCsRgCp+?9m-gxR#kqmG7i?!;`aKQhGm=jz*dU8z z%OTw|CIducxT|UfmDrd!aVJMD_by+{cpeJXqEknVff(%i&uH*GG+1M;{;0`{W`yjp zypDC`Z*>~_)%b|O-Au;*!d*7o{z`+4!ssSbHq4Fm-yBmZJmrRL{)v1MPKa1l+#_)p z1n+82;xAzQo3acZEc18e?Tx(xXZPC7Xj8W5Y>omh1SYlQ=kCNqyNZ)}uw!_BwbkUm zlr%upZl7(atCn{N(eC!hjjemOOoZs4=`E`a1EGlv(eIn0|6Ha$UvkGSljOhemPd$z+Vc z2l5;!w_8^HC*w<^n$_j$`clOqQ9Z4VJ8cx$!7YyIEdKciYIDQ1{c1Nc1l+UU8<&FX zSJcTavyfJ^_?ENQh+akdrbf$kV;57gw$Qh(T92Kdwdh}Y{CeXTeN%gr2m|lmyxy>m zz8aW*wr6Io_Xji{`s3Z>_i!L^kG2Q^XvT4ICq>Q8igd@-%Ax%?a+K!FFzbvt?7ZVj zr?zBvNt%Yw^f?CJxeK>Dr`;+GcOdDOXn=vvc>=Ae64iK(lyt~3T^)uR>CVq1SU;h-okQS0bhf3D;8 z?CjU^YbXM64nI+5D4rd|D2Y}BcD*He63a+Jn?dD8Km)-~C=CjvEt zf^{V)(`*X+-*jKanXUR3*3sz8f`hLevyu{%HdDyY+@Z>k>uP`Vdjq&k>s{Z|v1RNy zr@5ic>$wjBc^c1lG8QtZx~WACqJKQq?$7%u7kz!hu5|Z^r1$zSw}l1E3gf*~tPMcj zE|lzPIN*Dnhj|$b(F&FPwZWAqwfe;eaB0??WM|sQOz6UI2FhFKlDCT?(*({N!}T4l zZYm?DbG1UE{|Kw*{7k=p#U6UJBwj_f#`L`SpKB8}U|a0?W68VOn1+7sRlqXm*p^X^ z=$G@n9wPB9nP!XMypj@*hblH^D2ZhciP2Gn^Rk2m1%PhvIcBXdztlRS*&MC&R0&ZB z-sGBfKDeciJo%*FeEIZ-*6LugSQ@c*;;6^wzcP;4K~+2V88Z8y{p<|yTab&66?qy| zqd=M$EHQ{jnjq_Z>9Y#`zxeR~1Z2QOIp4+Dz2=A`(}svw~rpw%Ph{}FQFDVl%nuK z!>gvg+s|{ryB`Ud_+Z`s&qP-1_uC57Tq~rkXO%AjTAt&~%?6Mq=WO1pQs*gbDJ()K z6|DiOpg4F_QY|_`likrrHIW^mjN?#E|1SjMzmG^!g3q9&pUgTT=76hK0(MrX>8K7zARl0XRhd2VuMokrK91qO=v3sS`} zN7u-?!?D_oMpezEE6-Fq4KN%0+d=xHWVbUYzuWDJTOMlNANG+ZGMsFfBQkvLxe3S+ z`u%NQ$*6W%4i^CM_P=*OytLqZj&sVuZV>r<7q@oY-T8c*f9p7EOp*KI-s_)IQ-Bs) z5wF)t@NcDuhWY4@S2FV13Lr-D0l9CJtFHi4xMf)_IhO|=mv;q(pj0&1yAMzhpKFP| zAg(BCOtnJWX#ovEWkZjzy9Pohzd?{@I>|hw=f?+#D@`o)1WoN&cai|%xrsCv4GKe# z`u5FiNZ)YvJ9i-@H*rT)ZB_Li2l@k&>!|HBZJ)#7XM#*-lBWMd4EXyOT8a6dLFv|= zB;YSdQzV1PFjA)V@*HQmV``N9=CVzx2bd50vc7YX>)_ihhWt1h)qB?i5?)l7uM0x| zy^QVipm&VYK%O(|(>9Y#VVY&6W!pe?zeKSEfGV{<8qw!t&wQhRrUUn)Aq4RSfZ*%G z$|$ZGt_A&o4)e}}X%*cu zerWvWTNMBv&|gf_xOn$E@xTkvB~zcjF#O~I{Ma%uZJiI$cQw$gf!7_YKoO>Uq?j^j z|MP)tyC#Up}fb_ie(G38D9Haso^5QQ||KOdc59jmv{P&}*SF^mzV$%doqa_6&+BJ<^MkS*W*(vgq zXm-Lfpp$;i=R!STY(fvV$0ii}fQ~Rf)*bQx6g~>1jtjabU`;z7k*6amO8|*}$tYzi zEEb^o{72pYb7$`=<5;d=7W2uNvbFgA!j$$gZQJpGoq~cW`(s>qFT7@WJOqkbIhe3(+1> zV!uH_mgnRwdB9}my8tInztiQQ51T~_vc&v_Jz;!D*q^x*{=JAbfLR~SnD`3j2!sEC zqLcL~0MBufkQClA?gp31&SdjSWR0a_BGW07`Jv$iajvKI05;kU(vR72tzPdf*)N(X zU^p`BrIPO?>yNB$)sKmD_(nSU=xF$eew*04V+GAue8jzfleu_U+Yt?$&HBch7kR8O z6477dP%X|$3w@ThTCz6Dk#$e*NncT?y7koKc|@tRqx6Kt5#-D2kru1t?{Yh{=9rIy zZwg@`zEiF_tsb>2N_y9&2di3o*)6u!dj3fyK*MS5uDG7oA>KzoH$8 z&&mOkcVhZic<6cxSV0_x=fk+OJXYCzHE)dTGz6BBKOgFu;_Gl#v896(W=D*Ex%qj2 zls-Nleas$#sPwwjJ@~r}oe*P!a&5JV2%A;;Z?BwwAIoS(e2H7U4`}TR>fsv7u z!7OmTc4oXwtJ2gku@U;nZ~T?@gy;As3{PazEc2_=2A=kk^%n5x&&qU#(JTXh8{JJ+ z9Wl?!#hh#GxzOSIFB>EX7byMJr)t-V0?~kA<5ohN?Qdm#Xg)x%UJzE)} z1GRR`z&z*Q5@udM;DMyZ%bBBmq`?5YvHQ9oG&rpkC8Sw!+v3=!06%U-!#+)S93 zS5(&3xmdXtm)3p3`5*v@lwUXRjWY0(#H#buKJ%+!ntNwr(?v++s#t_{lGBlQh*+B#z$#?CkO3Qu?FxS5For33jkp@M7IEc z#E2*&6Hm9PvByk4leY@aWDOXWN^$HiTJB1%?N~t3dSxm3>me0-bZ;dxqO$RzUvd+h zZ96@7+_^Wp=}a6#9B#jm_7*<4x%6vRG5nfc_de%_GJ)>1{Lh>0ZF7yAmwm#=jPnr6 zF(bnHaZ&Fgm%ry1->7#4otFm#X6%GFabK%3D!xpfpJIjD*yiJe>MDSqa^KxjzUz&; zdpL2%4N|&wwdJH!S$U@tTj?1D*D`)^#zZk-vpzH=Z1XOIP)GaZ+s4(cYOC!Vaj)aq zo9acNl1Km&<^!`#yMQy{p?5^ggPbVdCb)<=j#VxVh%<^45?2)t*i(uejS13%U$Dcn zUTiqKx4*+&foF+R#SonE^oS#tyP_$r9OYbdzXq}0g*`Zz0;nj_!@(4+V8PYB6Ik2Q<#w1b64o*25-_18)5X$rUYW{B zgtY-!5sZd-$86^!q;rfetur2{oOVqu!f-0v!-As^yQh_WX@=?sinFy%;3A}BP?*$) zZ}adsS1h034y*#sF8z-uQO89p)V7hN6eK+S;YPxOlwrMV%O-U8!l^fVOr%miKHX{Y z^Z^SEwTu-@K)GoJ5K_@njObrjvea zKzSKCR;1T;{@%MIhR{A~XQml8at9<9Ow6*ONF)umMrhy?oiBXi4Hn(RN26q(e@v0sumZgGPLwIBQqh#l}h0{%N%@P_j*3El70i0HvUX{|FSDo7u4qe{X9q zliNgCGcsh_Hx@^EVU{X21W5+&$Rk zS3v!}@^a?A4DFWqr3Atbzga90IN#Q&AFmj|l|=+>gDVVv1V`VZrWb*5A0qZx#7Hx; z93%`J5V&NI={GLeg8YBic>@Kv!+zXdhuLxW-#N}t5YZMvN^RWJ25^^{d)P?sm$atY zB1Do~{LIhRiNv*~kDf7`Bb0M_VXx;(5L&6cCZq5U3Z`3F@6jK}ffDD`sDI9)W)uGq z&*B7_ZID6aU>f{!KWtrsZ}8=MlxQGo!EzZmWC%0e6XlhedrE#!mT1xIbRo>hhn~{! z4AL?EJq+g?u6#%e>w7%47Ad3>t#z8dE}0`Vt;^d79wpU-V9%#nxgs_-kl`m17?8)X z#N1zslbyWN3UFyh&pRR1f@GvIQtYcOek(jHPgVrrlC9}?E{--|u`L>yzN2NE1nSM$ zUvcn|X!9QeJ8le=K9vLlfl@KlqIGA}xCv1K?MVWQFEIjBWPH>nRCu%)$hw0nmOrs& zWEdA}ZH|`4V07_dp2R{*bU$~s^oxHZBe;Z1Y0+vMD=yui_F1^?WULZ&GUeP>yLwB{ zV;Z}X&0JGn0&O}44nv|+4Q(Z__n>Tg2h!%(&+0v(#GexL`KCb`zPFWKpLrg6>4=B9)BLp}P1N8?jKuT7 z6q_ra^Fn48xbCh?DeKq6xvPj=?)H~CZT3=ym$6LC&N!#dG-;VbNAzm&igPQOcZg#UEO5ycjQ*KbhCiX)E*)}$Ogs$bMcM;rdeL513e!rGl_X> z?QhZgE%PNOt5Stn}W)c?dW+gUom43N)#OI0Jw;#oP^<4h99YSjSr3jmEp% zjvdXQ!)V2r;u3+)`J`>w3Stn#f8F9OzlL+?H1L6+LTE1SZLNmY_wb*YbWDk7wCW_r z)Tb2flv|&>qKtNw2C}7NcLD`DaGhiD`B;7;TN}+4>#Yl z*%9d`J-*9ly`BT|K^dsXy;O8k$XKFJzR;LET*qmAJ{TbOiUxpN1(ufEVv8y@99xvY zu_!a3P>Yj*=!Bb+TJKozI=!g_&n4d}rFX9;at1UXfC-{_{Vz(!d}Pi_JF4p(rSy*L z`JGnkT!gId|9h_qF&|oWci_M>60ED5wXzdG4{N5V(fKwbSq~Dsx&^yMq;qyNd)Rwf zthGuLO|HN*VuZl54m{N35c~?A-Mp89wuY9s_J9jYX&Ab~`Z8eajG;RdvP4rABmVs) z=-TTFFap;~q^VoQ5)pU+E}+uK6y@4&#Ky$o4e#EAI#f6_0&!SDl6z};aUwje&rrmc zm^?3#%3L*yVT7)LDLPFfzASoK!vhnW0KXDf2lpF+#S>Y0s127@M}Vm72UY?XC=14V zSmlAHMge0Mm_zlV+^Q?KfFx>#1;io9e5X~2k(U!T z1ZjTwMm&>&Oe_ymO%krX$5LawpGDwl>$m8Y)C#3sB%S+ckXfUvY2H?EJE4$ai8~g{S$qp(H@kg|>Bq-D4%yhCPHx3-+-YoHA zd12#Zbz^NGa-}a+N%jf^F_qn2%3_twtR-^wz|!2$ewL4tDnCN(s3O z;+VEARYiOexGMfVc$Me&B;`7;c-S$$Yu@7sPmXN{vQ=AwI){ltRh=4n#y$SIf_un; zvhw^sb4=y<&%{wQdC%8_sa*9!D-mo<>{Zf8c7G|vyN+PmT<7T5T#G7XC?CHoHf#6} z1r0-O7IJ}RkVrQH)P}HqAoX@MrN+ic@hh8iTZV%c#&UMqf*92)a;)o1<@itAo2|}~ z2%8Bbhe%-h%D-3ipCab(SDLXH1;aoUoRprR2>ED@m);=?N?;#@2WdQEMKMtRPI0fo zG5)P9G66|?-I#ppoV=N|@HeeT9z zXJxMnG&Lp}Q@+9Wb3@Qs0;;o!8*SrT{K|c^jFybl5p)5-;fPADR{+_7r_A!1G@^3< zu6gKy5LCk$+g@YAH_Vmgw1)?x z8ALvpSu4Ab53mTZ5`rUy!Rf1sD&oR-5dFc2-=Agq+)Cg!jIGK}lVupd7siK%g>trX zGp;%{EZ`n^L>x1MY#x35d5KM;QsdoMftUm>RXfczDgP#gtUAQpjw=#FQp+f>$F(xB z?(>}kMrv5P7-}29$%)|RkehT)Lwp1J0^~KR(I~!27?8MiZ<@t( z*eV)AwiWr#vUOBmh`hyZ@LfS>xu(OL{Q;3Ei~(4wJTrVy#5Yd#q&<*gW;$FY;J-D4 z5Wj-NJZKLfDUBCcm47`J6jIFHZpz^m;dJ2OH`}b99>ZSn z%7Ja1zgpnu7zH(DAMHf@ARUZA#LOX5ZOj>LUaFN^AKQ@<=z z`MX?=3*w6rZ16SdK9=&Cz-{cFJ2(CMmXh=KI6hY;wW#*f)N27F74?MHQ=o}R_7E9<_Qm&P$20aJi_Ow0 zzxC{Uup85TO{Eph6*=K2)v&nCwLERoISBj&>66Lc>pK-+9UX(Ak+!4AAf&bOw6n{= zHF1rdlc+1c()O7k`$0^(7Nk6vu?I5HLf8op(Xe${bW0B3Coa$ex!o`p&_nj*f5cyO zKi;91k@sQStM3uF#~?+`my_Ky9%U*~mx?D{IZpc}Nh~oVhHBRI0@v;`*aiZW+&Xqvi00F>-tlz5&n*=&moSEyP03*U=XsEpd z#pi*72MS5Q$ZTA2s?D)Aam;GW@og~|B1P~Df({38qhjc7JaG!!`w}!cVboZ>K%bGP zAS+?U#(gO7f%KoNlg7nReJUB-rWMW_jxjj_ z5ISSTex9)V^bz%85*yg!<(3j4lxbJ!HIB|M;vz&>22bPi{qXf`WCx^AjD4XgnauGd zi-el$D`fa`ePvL*DiT*h*$iTaKD|sm+?+z3_kr)MrfY~IFdOTEz|G`k(vzoy%42e#3W!c~-+za`j$dzcNF()92cZYv=9CQ;KGAG*#B}#}B zr#GI);|gY^NQ@`fG(`R=kyd1`4N^~dgQRdxv?ngq0t@nv684?h63ZTsTiJ)UAE0MM z8s60Wl0X7O2!*-5wXOl6GL?*4i`_sah_}qejQ8uIu92*_Ip<~5Vxlnn^k;SY_(Jm- zHUS^=UqTq8Qc=@)c@?~Dr5pX}0UJ3Wd){p{S-Dds!* zZ@jH?eQTqxLxuw8gL{L{og$SlTTugefR(zGqyK!)kT)s&kGvX~H7EkL0fANoK z5;Do~7ngA)AIZ0A%RZ)m#|`@2QuCwWNF#>050~0!k6jt#c8x*2r0zdEW&4T>M((@X zyTOb&x}F5zZ&yX7I+f%xU=`sZ71>d;<%rcN_4S4^1V@}=LIs`E5WdOdHR<8 zPiA|e8eWF$usUdrGjgfbwV!>kE(Bu$=R}4thYA5d=dZ2AyXNj)dxmz}K6>Ip_iqK~V1Z+RAqcg~ z2ruV55$ViEk%6hVLDy z348sfV&uSrQA`GX2qFHtN$^~Or&#ef4cnYF9@%I`2{B&EC7 zL_Ejwf7}>5A$?$?7g|CljO6}jqerq{J7sF?ZTf%=mk2TINxZ|Wqg z67znSD(%ii)c!Uydi9eqW#JhGW`Jo5P^&>8O7vu2WxwNbw~g{HqX!S;PjkwnNu~< z9j`}iDqFZIzU(V~VGp z?XZ<;GGu)HZ#{}}rpAD+0ov=v6%cntstS2%E3r4nD7>bN(h^CDuSok~{v^&vT4pL7 zLnFYp>u?S6178mkIf&Z|-;;mBfA_LP{zE}s)+6mqynpwKMx}SDULfsNm`@nFo4^h7 z;mButdrnsbT<5b8;S>u8y69;>U0QS!o~#72@$q6 zr&K>hIa-_fpSzXnZ0OAA65n& z`Wjh*$}UXt?x_xz?DHCe#>h6l%(x+P%;defkcS-aQ#rgkNK_2=*s(O+H-^=kymtRT zw%$4_s=nPH7DPg%1*C+b8)@n8lJ1ah5Co(fX@>6Z?oI(=C`oC_p+R8iemBo~?)$uF zt>2%roV8~5H}-XX>ar)y!z|LHIl(TlnmV4Fjk1@<|L5rb&s&d^yyrH7)5-u*yX+GP zcw|vm9yalGc~cH{Zj?|I;QtU~g_fN2h~nTku_BNWY7>i^ww30@$AAmGLT6;v7O|;h zQ|S2T-1`*WLqFjq5l0d zlHtF1@4r1u4J-0>8wYSNt<#4?&b-b(9}TyqCf`+fYi~*plfWCLtmaSE7t5M#{w$*X z|9#e$1i3&m+APZ)OA6M!hoB)Vxo_sbGk4=EngA=9;fgPyGrJb{%99Cq=ilj)F6_do z1cJ2#D~axT=l;R@{_RDH0$&^`%;sR3TA55l@B({FKv@Tz*BZ>a|L=x#k9bjFVl6uc zAO%yZu5%BBtEF>uiOIIyjZue-GD%^Z|Nfr;f=AxSHAP>a_hKbRWlL8n<{HnNs7Zxj z`v#)_vkd?A8vpah8a#N#aNx>lGzyDn^7F&W&t+|U1&(3<&u#dBKQ}*s*%K9USLy1; zXdk@BtT!KI%td5nhoDmXlH$WTLRALMSqoy7R}X=$0M81vc=pue*DFT>?PRa+?V~RO z+98*nk#kpqu>#t&e;z20`CNu*VoXS1e*D(H;s#5HCFFYhHr;#FDO9OOyT*rkK^2Te z1%^FV8`5#?SIqa{#e4Ukwqc!k;)^8BMycxk;YXfdMSDN&^023?rpK{@obhvdi6MJg*53#>)(<6 z&!}Zu$EI!&UE})y&Kdf09+qiT(vPKcbH4%YCNb*+hUdq2wJJUBmhFP~DN32V>P7OY zqyke~&U7?`8k)pg#=f=;eyumFK#5|5Y2-3l`5J ze1-T83SQ~SpAWP8pzq}r<}={tkj6xEDtft}$aM)XWn(*YkxeD6=O?C=ng8#G`sZI- zQGW57K#G1|2S5_BS^OfVh!0hJbMqBQkbU-&lL21MCn(@><*GYh|4zCB9p*tGxd-@L zC;&=xu^j;_q6PY6g6mG8rG^2a)!=4_GpWY0jlkir6 zHpxB$E92=7NNS(}NygbrKps;&y#g>l^nmL&qj58^_!mp}Jvm_b3~EG`d4=^2@Bz#9 zg`h>zdI2--p%E-yAL`;gz`;jL&CM84a`7FY`nGU#LSGN7*c^z82Z&)2zy^=E07UUd zz6fmT1Z?_|U}#q|o$5g70uWyz`M2XtF`h^i22jDkK53J_`uitJFE}WOKUkU~?qgU7 z5T&j5ZI(=}x^18Sps!k_;hDj80%$;j+8coRLN#Ug_6YbI-2XhoVhhOIXT!#06nwgO zrZ~z}qsH92m@{;MqXXd3el38^mAL_UP-p-uGZ=`}=##c_@YH=YKYX?QKwB<*+&bB< z|Cegq0zes(vJ>ukn#d&2cDzwb|6gZ%16f$(;&|22zFjVfrbL@D4KNJM_!4HNs7Q=(TW-LN}B6_IkjDJ~_M3z=TW z8^WXp0icnhkOYQyu<)p&=)mZdo`|QB23KO{@|nFSm>*hZ$qEW-VEX9ecg3sc>|WQ7 z6t~erkKf{B1t-#ikb`SH0b}Q!oH!5jdCcf^kpg?~TeMNQmxw9U#WsI`W$-+Y{N%50 z*?29&cMc5rjs-MP@<4{Y57BY9?;{-&v7;Zc>-=Xf$&;(whW`NF3toV|9T8-#d3Q+MRd3WmFr@l6fMj zcF34<`}Y>7!bCRyDwp%#``@1Re=oWkG_n_;Uuh%AgqB_b6uAlY0H%p0hG_q1WBpDK z7YbEcr46F96TpJJ2x%3#obQ9Mj-CSF&2bubuuxxYm1!*ar&x(}nrs=sf1_&h1%pTy zJuQWe38Q(w0grqONax_%cny19XLozPCmECrLdHVmaRuJ_5I~${3F`z1RY}K2`#(B9 z_oq_+@1BPej=jy?d^TaLc}_ zn*&o-`g{i%s*W@{*G1^0*sDHcZ0Dq*VjN~5{>hS#oh;8t%0hwLA05Q1=g$DJ#te~= zPX{1QLN!l{ai!MDvJ`VtDiI@vNcaMcA)o7^B_;O-hzukI;$_W8GWm;EC!A)oh|W6f zTnBvDbOJ&1M`%95!S$qI5ECUK0&AVHwCM1y^JdX$v_xIiW`KMa8FQ&pdVx-(^}^Y! zy`g%Pg(2raJxK5Tg&#+NI$Kg4d_9*)8Qe zKqh2WSw6Q`(@jB`{w+bfw*a{iS@5%h2*(bYNq$=B28zSZ`Q0`cSv&%_7grR+PII&p zWC|!SbSWsGDZwo;N**rx*w_fjefRt2vq?S*5$BL>AB=_L1Pyu{Y-BrK6y=9A*OSP~ z?xTl0A%tQ}CM=+g7+2+Xyuzh{EV$SwPaN;j@B#FGGJ5or7l>i#CHJj=D1z^zAHwq? zJ>*6BP{0PIG}(R>t}%AP5VTAVz#0T+Vum{J{Nl`e&2|o?$g?tONvr6=O&}qBbOL8A zL*L1hsSllb{URVDgKoh6fKG{75eHtEhID}UEsFzqb}(lE_&4i9 zL|{O|ke`T2r{M!Ot_q3Xk8ipPMrd7_tHH&cwtad$J5t)p9jOASMw>0>-~H!e$mAAs zaolxr;H?fkz|GVmVoCp2VM3rD@{HgHmXrGUKO;4}1Je3mao;LjKqHvzv5163Tm%O=GJ6H#Z+T;3nC_TbU>yJ-s={&t`&wkWBw2YIbD=8_^8Z}^$?A+_hOV)JM*cQC&C(@r zQl^KPL-`qfdRA;I@L>xTgVQh@z=oJ<;G7h3zOWGDbCEpKUpL?s?pTsa8B>SZiqwlU zAVw&a;G-aOYebycxilneWBT&xv+eb8KP8D!K9H90_c*3Qh1t{)X2o5=j&if& z`{Yew5kDpt*>)I-(u=i$VW$lH@yaj@I!Rr$1@^6gd&h9~CTc;WQYUqQWwFT8Ow{0c zC~6U|j5o4GsMuc;ouq423D*E75ne-JUXIO4fY*CI*9xo{1j}AGI#Y_P=rh(bs)!0m zEo+#?E}$x7kJ>c#4mIhnhSqoGvUp|1y<=Y-frKcjLmW9=PVtA<~s}J}`4gKg-Rg z#VIk4J}n~?J3&B2oUaK+>k)_0W%kFDTpFV8UmEb|Uwbg|94HW}`@a%8V0SDc33S0e zhSrp#Qp-_5RIrmiuDr%FLPw68tUMVAlK$_pzafI7*5abJ{Fd{hmpUj)kxdzqosA3m zy3F_tLe9n=_R}g3TA;)gWt(=w9)kG#fgE31os~~i7oO(>h1koW+jItzP%~y-x--0L zI~9qpaJs^XVwrW(eIZ4mv&PZug|_ucR8EGs@f#8|*~C!jzMAw^Gdn(GJP&HJoMfSK zmROM84E_ z)1rx=*MfqlN_1poSkOV4jHh#_j3gs<{nwVIwla1&pxM~nKsMDKrg*EfB*Kv2!+5O3 zaX}P8>*qIeXm^p}zUz(AMMu~dMZff|H%l%s_P1u3`_@x4_$|Ul4I1?5ljs@Mhu>hmUok=+O%t zpfNwgOnK(BW2G@AE$ueivEwx%jM&b&{Y22W=0jkm(ZJDU%eBuTM`7+*u-A4{5Sn{c z?0%FZfo-OM3ryrt_cups$lAC51*XxPfnJzF4Hyf}ps-uatn0O)x6VTGnBoo{rvqs> zgbHHIa7IpDwPBYry!*7ke)qN|t{`JsLRLa%1tdUY6YXFPM=@G6O?wOs2y;OsWRMNDD>3>!Shvqqc){N?w;8Z{GF}Y3{lWdN{k!@;k9H7Vk(4_?7tQBG-WdG!49vUuTHQks6GqEdHHw-jsLa)q_TT zDHHDvINM_in6gd9WOUEVt(bv`bJDF8xpQ^u zpL96sXT2DI|7f(-fpgzJ44EpB93tNO6_@MBf4U{^etm`_`6ycTexV>> zd9o=wfeDVTR(6S=mf>8xyVMgH6}^fX z|GkPn9*g=BEme6pDXV6cw@E={dSic0MYGtK*1H6csXW)))xU#6#{$*}@Bkfr-x>1a z$6FHeNFEFYeh8a1b;IlL=p@#r=0Kl4>(}R%B3m+nmp#)OcY|ge?-lwEnP6C?4l9fV z8#N#?8Qfv|wch!-k59pF?hNFsQq78lWtG`QhM1ZSS|RHt`_&R%L{BPRA4T=^9frRz znMZ2#7a;)6`$QVr0!(6D;BXY^Igr!~;ZzIf_o>MowJ! zN5MVh!9{ed4-9tpD=}g%SjBu16BfI#GxwJdmIf-CINYf>Fal>75YjWmL0^h$h0-dQ z4v{BHIk7M`eHV*t6&)sYQ#ya=tv$#6t=|5#etdtxmw;km8dDh=fmfKtS(;51YXDK@ zIG_lg4)vDS7=?m@P{=XmR8-a`ScIgE&X=?U~6lF#ex0^G`MX;1cjXU=?q@qKjTUEzKL2oq>vo4n7cS`6C};8vqApuwt66@0)N=p3jL2s8%ZWbGjS~} zDiYMal$`6gY!q)ZV*=km+o-7Mc)pkD6$Kfv|0eVnHZ$~QP`DiIN-@$2w`|NSeZ7ua znyPN7;G!{iby?4Rf5EavL;HDfC)(Ae(EP@@NI(YFk}K~*#uuDE%YwFd6KA%MEpqVq z(K-vO--7g$`mg2gv`oW?MaNRz)|Rh=%wp8^+Sg%m{f2MSm;`)NnQ8tS>{b7o`y&3d z*s**y^zr8NjNb3X$_|aaM#m`zxkOA?H1&N@^&cba(owm$Lei^$4VB{Ty{U)2W#yZe zODj4a`_x)D18b*ptYxg~JtasqFVi};A1ciiaRFFP;pD;l9)6GgYjl(Y1S;W*v5Uup z$D~b{nedh=&-;v@X=-PWSD^cGEEcx1)ov}=1;xH1{-QZD;`Xc))gpp>ycA3LTr@T! z-0&9VYhZ|_q-2OT{Ra!y;_HsV<$w^ntq(Ru?@iN?1o94VvCl9TOTd2M&m9P+Sz>&+ zqQBzD6~LcIiv_zyE*tkLZ*?0b!I;&$kwIpDZuIqBmhY3uaOV2H*fWKxJmf)RSU`dW8s}WSy@>t$&v# zrp`KJAd~fb=U@!T`gTy7{ppcY?RLOSZHU=Ixf-SzYo~g>eXjR?w*WmQr!w5jGOy0Q zrxMPT_A0$=*|#j_DBFjEebd=%ckYXfU4%t6M%V>9rNCm#j0D410HQDAj0j*2&BJ z<1l>V@bdtG#u4KUZe7BT_zJ2#~W)aE~`ne1~QG!M0C01)5JIn?)TZCPM=H==_8lwWr?be z%&){L&l6&I-=41&J?N{29Vg1@V-2W-B}w~4LW=RZ@%XZ0R0r0y%3;C$b()$BAO`(Q z7N5D@CRMx<6B1W8XW!5td)8Brw=t?)b6-#!?3I7ZGFDz#3EUynavSfH(`nY#WK49# zwZ5T!QCebWMjs|MR#>KUvmK)fwV`@)M42e@km2!OrB~56BjR(e9r8W}@ySXiZdlhD ziW*$I*4>vPfD((xk*Z7gdyRfuchn_Qa5k4%8+BccyrEE2`oxB7JdeX>V(=6mmnL?; z!l}UxNAp+t3mRg}hi^^CrW97KLhTj_Nvc<+S(Ca=!AH6=5$- zL%+v5Zy``g*2|r9Ti+VHU-+t;K^uOmR5*fo+N@svj%2DHcYyop(bX~Sn-*I@HM7-g zSnAjILW|m0QJ=9nOH22%!cc<+_fy8s@I!VqcU(gd_DQ@sORQ$sTrI7+Wy<@4v`)LP zqvz=tUmt!O6F;+Lc<`1>B3)RPNN3L5EF9dRjFe^_Isznj#Jzqbcr?3ikXQ(E7avMT zKY#x{bQUK=bryxm1I7;n{Yj~x*fq7^csCX0o_G^gH>yAh?Qse)5=w!J9e$RK9!=?0 zoxNL6zZ{}q)y!88V^Lg`Vu(M$w6T1{79FK9)YML&8dhX{wAhHo$AJghpCB*nE|4F3 z)N@^gmuukBHUam9wvvcqS4ss)O`?Cx@VVWSJY-Au)HbNtxQb6Mc?L{h>A{nFg>D$W zE4Q?hng{3zr%k3A0J>wtKwYs9?QXW z6mN_~_*j{FB7NhZ5$Ch?-gK%cP&8 zIdM#ulCVD#)(Y;tq@(nGb!{9ef%jB&b+g8)#rLZft&YR{Gmt46<62kYXy=_Yym;0x zhll)aw)uYLn&^iE$-R3KK)C?4$__1uq;rJv48}jq%WU8a)Q?<-A1?;G3DU*6{B02@ z9LZSep3NnAiAg_cZ@~GMbe}Msxw&vCS3lO3Sj6{H2mNG7BR`kW=8^)Zrp)5-Bq`8t z8(jD28Ory5urXo11JK)Q(C0~?RzP2Cr`m%U3bPHJ0Doo|Ptf6#@lHrF+Z6T{Pcf74 z!eRw+pJXRu`rL}VbiC}4=Tvx7)#0wD{Z7x*YP|58Vmhr%V~>`q=l!j1N2*}6y@v8H zjXWH?UXL=An{6tEQ4BisBOLYVxPr0Lr_n7og)m_bG4+qrw2Z|*ylz!0q64E^w&Lrm zh6)KwYIov3WLQADB>~M~=kF$RJe8Wf9|}dYHzt9WUo`Tl{C8ch+pU z!(et(DYb->r2o{tvJB;;k-d*@^(1U`F1}E`&q+n{AwhH>O%rX&-nuIWkKs`vd*+LN z0d#lVWIOfdQG1`)s8D02)f&ZpXG&jTTdu*|E0tPRvq$+RB~I? znWE=H)C2A6#goR_t=TPOZsOAB9UUw!uAtg*S<6)ocCB($TpibfRNnFCWWY_5NW{~` z#^t6)(~KzFs@K}n`6BC-PE|CyM2AcLeFM+nm>SN_AR?V+hpf)Nw@6ccHUT+{;e>Sb zd||-7u8gK&3(Ci}Xv0~{Dwx-X;@YQ9q2m(QQyE5 zjx=uNNA+s-m_7EC+Q%&pHPw@fENfJRRLE*NDf~1Df(ZL5lt)vE$d*#dCq@JL138Qz z{k{eyeN6zN%0BS}bbh_aTq=gVp1aH-B z9&8*(1E@$)-UUQ&q08GdmCY=?(-9iH^@DI`XsjTW6!e*_Z#P0P)dci&qNQJtI7)3> zarEan?*SvlIBh*^m`6&Q*l;J{F~rjwUh?k=t`QT%I?@1}s`k<3X2U}*h)lK;j(Gs}IOKsVcu zz`waCpi8T-g-76uFiLGehL3=NU{=an5LQQ>%cRusvvX&wX4SXL>O22Hf_#FMXKJm8 zUfeE{dt6wp=<=DD$o_^LUd9(B{{tkYWqgBs7&amN1rUClTz=+uilPEb^k?JU&AwQEMz>-ac1+pw6!YK zVNXfSZQYx+07izY)vp^n_ejPn5G)ef%JS*nA}hp+VcJ^Hs_Jb`R3S&eUmbfxCpMiBOl_vMCRj~Lm#za*yick9Vtf{8t^iPU zb`viSW83=oOlMZFe z9x8UNYdQOpI`rHYIvF;xmL74XIt7arSi#g;;nF8Xu(BwbI|?<5lNF@_xj7u`k(=+c zA5ODX>;EzzN5=tyt%1YrLy$&{D%-NfJSx*@Y}XwjZuv&)IrJ4c)^M4RMa%faYGWMQ z1mg^4lOMlrh`Jjd9IH1sV6|#?^NJeW+lODg8q%bF#l;~E;-MMWwhn?CT*!{-meq!r z`(-6_vZDQVc*?Lzt4=O;EsU1t?S3pyjT+ayAuP#w;>jsnKAEL;e_WyqUuBzC5fE*p zORiq2FpHSmPya42L##>f0`cC3{i1dDbgaWp6^bV8YU40Ng_v~G(1x|jb{)>>4Hw|Y z5;(JMK|Fmq<(XAhvn*c-Io&Ec^=7Gm{obXb=;;N%|LBy3U0M!}d_d+cVn#aea;)a- z6jaHkiZxMt`87DMuM{Rcb*Y(MZ;isz$-Ja)U5a;l=q_h^#Vj=BSBnZQ(XVfiC&))P ztE_$DGTHko!L*8*M(FlC@wei%C2MM@o<=@OCY)-j1cQB5Y3|y0jViwnr&p1O{>hgNV}!W6c;5i z3z2{kZkl_`0F~`5!Z3GRPJjpWS)F z8JBTR&M>av>XytdTwct{K<)s7Xp!|Ot|dudux=86mgW3docb#E0=urYqv1z{fx%i_ z2jk!xd^A6M!%IXGK38bmg&oo@#tlN$#!bF{))b3rju5)9jkw%r|Q)!}@X`L}#l99>>=b!{a@3aCY zl1}Bm2cPAtDNj8c8J5i8_V~PeANR+WoeK3I^Vz{s`?U10;1|e%n*Sljh-;35;a@fd z!71zo5jHvJjLKpWdKwpIS%L}H z8&ZjroeoHq|NFH2R$Zl6z;=JBND)S`&JrKXI zWOf!T`?QLYUEY8Ak>V9ycYGUq%lfsBBwpTn7?)|)zFtJ|3SBW?lt1Nwn=l2mab`2+r!fz4@4zB#dWZ>4YDax|DJTjPs$<9t@)o6{vo>-lrEnKzC8P=}fT$ zfn@A?>qtC&_Yf4Un&xtMkL?Mq%|($pp%`Rd5Zsha4C^AnNfu~lOAs@keSIK1vnAGD z@hVQIe#k>liZA{k+7re*C?g*~S2v;*4btW+_7ovnh>B;W{xV#};y}vSfp${N$Wr*Q za{DkQ!?l?E*jD9fc(a$zdYW!jsp%x5^pnDc3zyEoF{DC^Uwh8CumIBQP;dy1C|nzM zfBKffpos^@2qB^L9TgNFPBct^8=Mj1xWfa@x~)Hn;R}21-{XO~#+@;M0aQi*9z0uK zgn8lXjnuK!Z0ExWCmJA4OjI~-yy)eb_~@QiPQ2DT7>M;ddulxGvE5CpzV!X3ovB-9 z(?r?{+cn2eA>t#Gm6XHpn~{-k4#vHIP_^9*en;rN(HW{sMNJ+$wU+GG8{$k_2P;uU z;3Z_vXl_3erXbl3Z+Q4b-WD7d3W`|JhG{4c$!@)UN_vZaHa^s-ZH;bsK%x&57FPW2 z!KXoM4Gdh{U~%rclqP{^%B(g&Nbwuj%){(eX3)J`4p3PX3d*GkxHwl{2%F8K@|?xJ z4VGr8G(U2*To$;c&pi@3`69oBph=(83~q9x?JLqWb)!;|dpo(?6W-_aCu8PMZpwBd zSNy3vVQp6EekbR*sV>FLw2*q2loz9CR*w`?Mv#RELbV3lh^{l=1oHCtUya@)09(K>3Xz zxum%@dG~@&Awc*Qe&_^hmgW_v2g_xdzT{<|l!HyRlHmUwr(W;$eSq%eHhS(@K)q1ZC8TDJ;qpGzLp#ixw$zU(#x{kApKy08p#o6V_b*({G_s3^Le zkqZ@b>Deb+iH*2-W(?F$x$9mP9= zO~i|jD~mQTt)kRbCltEEbXK%pqIwq<9h@b63mWY=_sOt+FpDjs7emhk>3Y<1pn}E8 zNPmH9A2T}U<$o*L*9KxcTBjB2Bw1>{pD5vP7bYlw6v)2uh>MN5-XzW;48)B1*{BCc zrEnLc97RpVpZQK~v$lCy)9@h)8v$h@wlwroU5QgzNcAbvGFM|FM-V~zR(-5eObz`?YTe&xOIrL^p~-q!KxSL%Y!! zBp^p0rmME3TVYp-&tM9*Ka&0Vb($P@zJP`%R+jgmD}N_$b8bULA#^aW7AAdxRLpqd zu7nZyWgj)^PUHoZ*Wk+2@vW1N9B1QP5R01hlGa1wyhKJre^1_t$dWsn6Bi}{?azxu4`TRt01<4a2R z6?r#kk6)*Fv{bR|Ey9jsADlUto+;x9~?kZR-;-8Hw~G^K3}Fm}1*&c}o{ zhWAO>5k&_W{Db5?2BBnf|B=wXfakw@7IXUjE9PwSMj*q~)`R)mQhxXWxW1{yQ%Uk; zmuYOi8jK#ufK$XXx2C&&eOqs~)5n?#yTs_+fVmEf=2P4*(OE1;dl4q1QS&d15tYc` zyqs&53*OJkFehhw5+#TP;tCl8EO^P#Z6AhEN(Dl1Pxd=;hOM}xRz{+SN>uAmNsjji zHe^%{w3-#Oyg?r%B2G?Ma5!nF9a|4iNXFjY3UUh3Xep{w{Um$h&t=`+flg`Mb-I0E zcjCal(m)&W6e6^t-jT9)EasK{OiB`*GT38P)27uEcf8IUW8M{l}Tc^nhF z<->BGPNtAWb~*7uLaweHk++wW8p`CKgiL?I!ugvfPXIUz;+7%SA(yJo_W-$3M?GL! z;CjMaeupX2USEk_eErc(UW#Lq46#tH-L-L>0ypkk>l^0oY_WF+rP~`>QwhW!I>$ee zIk&p=?esmn95Eb!)r)QM{x%iR@DAJv$T?f0*lLPDNaLc0p2qBJ_?_?dXiFXj2y9;{ zdGSnoCFkATRY~R}5kdw+%1}^QGZTkzi-?o*_zp}m9g;`|s&gus(CBwU6 zJ3mOVyu$wG>*Sen8vVv4gdQxKus6)pw>Hjcm6r5#`sd%4bI}u)H3*2X`W}6!g9Q#p z6TJ$sN>qJnIGC2d=-T9a-mjQO2EA_7&O|y!*K-4=sjUd)(>Q0U_Sk16XLLt6(kFnv zf_*hzTxw7+`-Lc=p{WrL`qSpZ?pxfv>?CL37TM zAWKA^$Q!1X@N1>ukmRQ8pZxY;dHQAe3mtmfdq?8&0gUdP>o-4rY2jjklH9gWGRTb^ zzwLIvoax<*v^;P+LQo4dPL2^7J63g)o~m}}D|v$82Z6j8AOwG`fgcIuz3rsyDTXYG zSB7X>9Ic$-&JfoJ3saHEjE0LzDN>Y2rOACzFH@{GtA%J^h~S^&6wb5}-w(RfoWDc& zt$4Xc2W2o#FVqj}mbCfG9R_1%uhBSxF{NV+G8Sk_CihTlgV^fV29?_$ns*hpEedJDwEDq09f?D=p+$;@DUplP3j=Mzk5Bt=JG_WxcvNEM$Z1fq z7X-%SVXb!M94S-EvLP$ZvI2d3OjO(=+hr6s!wX1ioL-NOnr5v^fqLsN8?B<^w%yLL z(B{trh9h+0yc!J3A08*srm#+7nf9UBUVIpr=Qn}i(*4i&wKvWp6Yl@Q*}VZKkzq1~98xUIq*#Jdq?A z=BOpT5*BTaFGTZn@V_OmE+2e~(eF}K3$!2c_%P$epXARV)Ep2Hu+cXVhT+Ua#1B!1 z2NHUneo>E(IQ}}5CV%NV#OSrcM&l;*{mr1*&;*74>Y2QOaPq9GuFLh37y~Dr%CK;4Kb(tQ665l43Wx4 zWve$GD7I>iLnxj9(6Q_5O^0jYm@^(6j=Cux0$Zf%Z~9#Dw1I)Q@P+QhHbhtDAvi#H zHuJh%(^S21g7a#-nn7D?8RsvYpp{i1Fa#SNbR3(T>fSU-H^AoBCMRhaLs(;UA@&D<>j;bmAF*Ik>`Lki@xY_dKfPQ~^Y{0dSa*axRT^>My? z4DkzHMG*wi4xN=A49ci*E`%f(6MNS|N)0kg{%8}j8?2&e2o)RH$A{A(u*yoY+a%H_~BQT*)4VxJu1=vGJ-1tNBq{jO6|v_WGJ*4vbjFfbXladi{@{p>8!hC|zQtI8#@^{-rDwz` z39{`f@`u5byqn7<2YhKs8eTFAAwYURGU(7mvyD{+1cfTF0V4Hu{Acm&+4A8+y&dzj z;5llhV>6o1bU1;Ii^cfp1>G|=?~KdtxF-A@Ibd65jPvHl>)0E>60jKZ4izcdD*h%O zHX7ej`I)&NpN`04^mySNMIVrIXo7%d?@;nm8yLe)P{qy#{mee57v>@b#01H^KAMZa zMu0KEcWpN$6QZt;)PDw8Z2mwt!o?uu`%J+Z1j?0eSdBYWi0#RBVuXPl580L!|*ogn|L!Vw%vW3Y?Y!q&yffzp#dDa#*~t9!M#1 zJp$$>v1R9W^z@a%p(!<}pyZ z;acFtR_vNZmtSm{`H4#@hzc^L`oISnO&pUKdwZp*UZ%!cPUmw>`?{rwwp-4i4p^rq z1bCq6ruq~k`2TWSAY%F%Rj8LIEd%Bf(Hg-9an^X!eDf1<1}5{PDEh|BD2}||c;Dw# zCsPk2zvcdHE;BMUo{(k!^&p(l(f2A_z(ld6XS0c9#%*LHa6b8?mRb$Vk^^N-phNsBVE*nH9w4p?%Rt4)a|pBTAFyAg3{Fl znK%kdo4n4XtSoy%vkWo84U2>}%#U7YA}^zyQrh|G_PwcPw8uBoJsKq3LkR}fj@)@* zH>L(3kYR4oxk`*3&F%muiud z0VhWAg1?_8BR}CZQqkwgNG{4Wv(q zw%v#dEUR*&huwo-bo)0N`fn-sP0If-UiJ@v4e#I66!Rio7J@DvZ8cpq1Q?vGmDhc5 zw(v)sj}#jiZ*o#y0l}o)YM1wzCeUZfSei^BQlc%INfCbu`g**g-{x{a-5`-eF?yEH z?O?xsn6fx+Kz}pbx|1IpVorF}1rT7=_&PQTGP7sAie7CMK39M#Ptlry1$dtd`-u8k zWLc!HT7}&lZ|i*ZMgl3gzBA2sXAlIZN+`wQ?j4PN&077)!gH-3au=p2MuG+fJ?q&( zDU)jdkKeL{1CN<09{Zf08QB9|s>L%E+N#fHi->zgGAe0snR+=P4?GvKAu#{5h$>ve z5_o@BFuH&g$gCHe>}-JCbPSbSDZ%?#(UM!2{WYRkKt$AgEQsCt1Q=^!MDXB; z`w(_^cC*1zj5D?SsbFg9y)BHP;UOj2?YvDhi7jVSvjx1%c4#v$)H17=B+8Bw{$7D4 z=Lu@-RuhXR)%c&wnClgMAR-!eUdTo=bv1T`-!*%Rrllm`KR2~7S&abs8p7cD-n0S^ zjuSQv^GvU*m6~=whw~C>QHB5ox(&kqv#-azQNQhL?F%W)qGu=D??SWyB9SanHBtGg z_x*H1=%kC=n_)JTGzOM0?LN+Wr5xwgCh4#=GC2gc70et!-3gArcK|mpuyg{L-Dn1s zj9K@oGg;1;)cC&Iwfbh-h4rTDTfQ>6y?Zu3?T_51@u-+2P&)YghfS)PBt`zgvz>8n zH#B}ZgpEElIVXEZf*a3YBOeSPtWu{iX26V``Hva-*)2L2?N_DGaa;Nrub|V)Ho~Hp z_E#>MdHlgs@0PAapJ~ojRTb3P!^u49P=|2y>P9NQs<1&GMjsm^QKA%vTYjLsu5dqo z3tjC0BX#zlCsiTRW5|Z%7^Xl+qy$^GpnV0RlF_r7DTz&O@&$qcw+$0`!P!i@O$``? zwlh2F3fzks8LD$QLPffO4Y1I#>dEA*GE?iPp%nEe-|* z;&DT2=Z0$D#PG^eDIv_F_-)48gDu$tnJAdHLzl}jV=yW%I9N^-0w{?iF)IzKN)qU@ zs7H*1IVb;4;WDTX{HzlnS|S<2jeTACy1KQiD4$T-WuHqrOys6U7>g`1)QAV2IT>tX+Oj2qQT6|n=cuQ&~+6FZNj0_#| z6{cfsJD&Qs>Ns>d%#cZiSKk`i6%nqP3QjQ`X8w=uxrPUeR;MM$i`Owp?{wdhg2tP( zx6U-!+V1jWcddL%r#SEa#j*XoK7EqLSdMLjz#J93PNKv#N6PoA&h`#=S#xGB>S}}e zdAujgY;Ya`izxqn_?BVilZWPEK2qlN=L>;KgCiUP$LCzVn_))+F0)#z1Pvx#wZD&= z`c~TAk&Qeiz?3|PnDr^Qd15BRPs8-J9&YVzPL`Xn^hja_Rh9FrQ`D_+&Bp{*cD6*Y zJ{{)>emvjeY~o9zgg>SaRj4~Hc+XqBM@Zy_!l(OhO*X}ZCb9{2q!J7`anv-}=h+RU zX246|=m7xe#B>`V9ZHmyJ$VA{a&v3xAvbDAS44F3GB(U6BqiEbm^4 zE2I(-5MZEpr|rQ`O8E$sQCM}vWkvyY zELoqrT!Y3>V>Wy9B2aLM=_I+eYV{&oMP@QR!7ec!l;+}4faSniz_9L(^9Vef$)n26 z^;IhD=h^~ng@wJ~!XCF$;L-nsckvTPYwM0>>t%|Llipc4?9q?FsZTfG^w`4;8cMxY zI88)hw%B0?8xD>t__i+UbYVjgN&9f0X0B4E1!}##P-ZioB6nY3mQ+z_lwk3757N8X zN4}8^TaJ@BaW8f%E){;G_~d^g;i@EYt^?8sm-@t;t+V;DQ6f+DS`O{|X;;T~%QvdB zy8!dKNUL_p9rUNf8|^ivlij4`cABMziZ!`81Cq91A6z%IQB^4IahGpZbX;@)=O8kL zy(o|e=jg)F#aEZu;VmOz0r18Rhj|9A0mcjAqHJb9JP&H%QdIikgjb1?nEDNQ9XD?W zNDzNa$tE$<70#ra_>;?-0@mtn>cAJ~kY1z!`s-4?Kj9@ESja&GyOMr*>i=6PkU3!b zRg|kVh0c_G`tj{YK-rg@;J6gAL`$#x$jkzrU}H(dI_XFEQLnv+$&b_5%jNb~R?QY> zGMdJ5KSz717`7I=;O$TH6^l>9 zejXP=l-rY%ZFDT=bM`gp?Srfe&wJTK8^wJmeJ1<)b3n>5nnM?ZzvEQf(c*-t8Nnp7 z__5=NV{v~iIKdR@M@Dm`0^T$?Yt000J({GhZ9Uml{f7ra@`;86%;599VCXk0LtReB z=35WAXK8Y5ExTGg0OqK`j=kyS3eU+UVdz;cpA2qR)i^iD)v&n~7CFjkzcXl~Y6Ifb zBL0)(+bK~_O^}|Fs_LVnLnPQeb)?WKHm^<=>3WZpee1!{V*Y}{jgCcX_alKDtr;yc zu(|)+rvOnTvx*%Fe(&_VEb|hyPdE4RTL4;PYZ#u*PK1C$7$j0G9Pq1}wmvyQQ-yuZ z>uLkX{!>P^)n{0gjseJ)anJ12CWlwiV=-_w>uG&?~IBi0XFD0tcEEGccSRHEbhXqVDv|S!^qu!diMT-)7(3 z@@P%PW;OOB>i^cAb_8%Vl9PB$tWN^^I1gq+8=F~;wEEQJ3@q`QHvV}iyxz(Z-VzlD zZ>R*L?$rX=6%3b?SW3ldfgoVyi;lX- z3Pdo>i!B~o7`gkWvD2l$suFVLwb!bFg-^Tg=1$Q(9wKAI)uT@;Hz4eF%3TTKt>V{Pgu`uxnpV-YNenrMd9OGqW|MyUMO1ZVSrGY5k*i zRsYG*ilg%fr?M*Z`X_c}#T!LJx4bgEYHDo7e3KJ5EmX&=hvYJ5G99s&Y^;zU2Aap} z16SRAt4y2{3YXTYOvPS{r@vl^Eml9!{`k4>;_A3V&;pwiO5&8 zuS8yA?#~wNj2sO#UX1DWP0NYW-=+VVyM8R!j(A97pikp{lgI#fOqdGUtUL6&?DJVu zAlP$Q30@x{S{GSbrIk^2N^W;8 z4Pi!Jz8x4_+w+*$edf)2*SWL_B?bd2AiV^HH=RJ*c=Dj_$LLc`XKcUP;*MY1D~1!t z5$PgZR!;p((hQCe4Rbby_)PcOC&ORK?Rot^CF~sjMRdZKHVZF zAv`_ayin#U@R9NU<#pjWAv-B5!1As1EB${x_8Ar`E7vsy`?LMDGVkL4li6|Gg;r>- z#x0+T=`^IG{t3HC_JIbc%=LUn+sEl&ALFSjW`kQA92{cY;LzHMxfGq}p@*9)?fu|HKQ9nm6GA^air&^Q#k`>mw%vB3b% z@vTTVNrt<=s+q>^BjZRZISsWr8F~7O)z$lx4=wTv-Pk!aK0Fg5$^6`3(vRJS&pzlw zXn7}CG4bfaG&mkog)WdO?f4w-*4^sZj)=r_;ie&`3MEXJsmI+y8^z~qVb#J*~fI}t8`Y`jydg80wg z0%o%!1moXvyjDNGXX+lgJf=$2zV_7isE}miqWoIYYBxwq8HcXZCQcWT%^~V^{ej_K z>EZ!Y86V~~=~k;9UTazbH@}*vBx!!*7^p=gQv0M#w5%dHF8f1Sw~>jcpQvij!^6gb zILe+%wNE?js}0w424lVhY1bVhB^2TB^(nm!kkV)Vq^~u)x|73 zm_+7Qg-Swmt(2>$-<_{ahHS1y?mL|R*qkqb+*8vhJ@5?`xTFHdP{eWHU@H9$Iu8?Q(0k_wS3WDJ7%PjwoBPemJ@!sKV$^BveQ)VjbfxC_`UL)uO?|8BPCbutKCM412gI7*XKjAtVBIr%idrG{y#IbEx;hMRm|L+tU5_V>P0#|*E-moine z2aJ@5+W+Vxb8Og@B3+RbXScOGg#aGIS()h30~RAIG{Hl?s2F(N~9f5L#jGWP`I z6ER<=_};V}D$^MyjHoWQ+s`(ePE-zF zJMO5`lP?JK9#ONG#!*@!YZV-;@rNWn)a+wV)rP8EowC#v_&)iGnaUPE@TygF82^<2 zdW=nP%jvs z@cMMx_DB9RFF+4*pSmWbp|s&=$d|nhQc6ht!+ZdozO37`K}DoJH;3Ns9IhdR2QJ_m z_buGdBP4t`3&$?Q83po~+dtN1x`^a>`!;}vHCCub9eDN&=ZUpwln&E>5y?VPcF#a} zgxX$Yp8Q5;U5vceqhS{@BuU!b`!mL$|G-g&%mewfUY##>OtskQVY@+fn%>yK&Dp8# zdKf8(%mCl#C{}HxTC_9n1?Thki3er@d!NNL4JRBrC+FGF>C>fKm?kG*Ezko|y+ix$ zRrdAW5yW`!6{6NY_xefsy=|C|pTXXsv5*V@_=eEkprX`q403B)8(omdG>!}#G&w1jaN9?{_AumJ8nz|E>G4u4D6dcV73eilt8%_1Qnsp!p_0)>}iD&i5 z*iT+^DQwwgiYX|{rsz_0b>pO*-bo7_IbGIR^Pa&T+uUyo|LiO-;e@%r&Mx;m2L2qb z#Qw1fzXGZis({~NIzhqZ<1CYLrKw@2n6q6W4LXlQIVJ&+>Ayq10X(9M2y(^{@nL|c z)GF#Q3VxnuM8}nx_$|S9b(t0Lc8l2LTfE~F$2?FaP~|`R@HXfiPfbpn(!2`V>(eh} zQu|F%KVH@yp@GgLynl?q-T1(Jt}Vf{Op;$^}*59=yph=ZPEoygSjVE{9eb3(!Hu5FyF>MlKRyj z;>QR^Hh^#x=UQDmZ_b{3O-+6|^v=GlRY|P8lrvL+fs^^$W`nP>wd{Xwv+_!CTXCCp zrz$UjEtBwyoG_|bTQRs!=p7fky8Ll{;QuKkT$a&Nd&92eEJJL0YYv_m}^eJ$q~G0G1yv24$4YSmti&2fQ}?pvK+ zO9z7!$K0mUjh?fou!fEIsNQ}|a#3o`q*weIt8=2AWb`pE978 zNazGbYwI+##Far(CdyKSOFzgtDaJkl6q%#HNPfl4Z}>-q<4~lE%e4W z#~=VdCE~Mfz%grzbYQPEtry7$tWc1ozZDf^9t=?1rM628Rsqtzc%tv$*3`Ri&&C13 zHDA5+bc1KdSQ&?+yS0+rm5#TnOEX3sE;|J=hyUX?ZxjpmEi5J3on}*Hzq*>QJ|;8i?V;|8(jOT<47707kJ{-wOCtNh z=cUWl^3*pqXx8GoVsB!**L}qzxN}aeA#u{}EM3Pfc;$J+-JX9&@v0v#TN#&j4nGb) zsc?P;5M!epr^xoiCBG<5gA!78N*GGa{!QvzE_XlJAwYZI;EN*}tRxqhpNA>Ce7&~>oohtydLRci-nX+i4!j2#6AoOGm$Rtqq+AGd- z6IuQobaABIdtaj6yfaq*L$o}*?G|+{-F(8mqxjEYt0%h zXD)y!C}-=}x0%RmfRkqO^TEr_9;9M65Qc^ljciizoA-=t1w4Y{sq(=XRiF{P(o$7- zo_`*8xwpPZyG%_->To~&-U#QaO#0!+`?t4sej7hh4c314#Jm3y8hF4LX2<4_(;52U z&fTb7D?T=Sn>z`*4t5R^_=*Wl_h{}u7z`I36%iGQQZ=Y$%S%zbb7vWhAI1Ldoiayr zV*Q}$#ZK_f@#eVOw%o>WT6-|`%=A1*-!Rbs%zeLH|FqJ6zfunF3F$MjgAEtDYjU}! zj^BRNK)=@~=BL3kuY>#mW1U47%o$&f{tN^>@zH|ZP<9fWs}$1l3{g#VWE9TGj9Jq}?j) zkH;vaXoE%*TqvhUy&$o>SX_@Eq>CZtB2DJFv)NCM{D+(&)Th6E2uU+Z46m7RusS7` z2B9ipCE%TznHQ+95*-&qzdVVSu?j#rjquWd{*h!Hd9p8QbQFe{f0NQi)8zX5L?mWy zlIW5hZ;Wi6sDU1|!{zSJ{&%yWn~>ns$-Kv<#J#4Q&q02Z$6sJOU-B)I@rdgpS(es- zX)MhSo@m%Up8C@6;{mWA$>IPqUphYOm085tfcwSK8kWx*Q8IwVY=6`iibP3M82hZg zz3gJW5zggVsu)5tyE^ia%WPRu39%ISfBuWcp_sA^xu%<`aH%-~f@ETYuuNT5ICAIC ziGe37>_<#PpDp9cxAFfC^}hq3P7zBO*pWktitjb-X@i;v>m1{>yk&_|)A_^4RHfJo zSW=KQSq-v*20ed#E8>aAkwq^j%L)g>d9fY7oB3q9HV|c9>9az^OEIBGh12nuJ{H-f?ZC)H zed1YSGVAGRbr^hJm7@0l4cC7L@4@|tAbykAM7`MQ{-VTZIK>fRSp#>z4QyCa_Fv`Y zL_w{v%l>lGKwsOpz!`YK?Z65Vp~C4eKF&sQ47Bq{L>(2Nq!|e}>45zs%7fx6ZtRRWt&{ndY zX}`hHhw`Ij@ba{qUYRohSW3LF?_FGMhvI2l9kM$f0C=1?6?5iN=;!zD0&A_+Z<+(f z&sq?djjHtirvGQ*{r57Q&WI;FlbJ=0#BCT9=wBK4^B8=;C3_C8uy0}inG>qW9RkW% zI3&$Gmy4{uT=tucRqzU+v5h`nj#uj&Le#g28S$|9ExG+u{#LX4d(D_TTgJG2I!c^O$*rDUdX>MrIH zBZtoRrOn5-8S27hbzEe9j<@GJDA#uIW64I(_<5HG($J2ARIaw()jCX+(0exmhKIpZCO-@=>?q1R4daKcF z0p#x^UFz0HofgU}TgtXo6#lO>+{6gPhSM07xifZ^45F^V)0-9F=St`ar$|`g?el&V z{%3s~cQlBAx>KZU2AV>Agk9r{b}V@@>IkGGM~gg;FN1}70Bcbo=rP+Jp2q}SOW!M! z?DK!2;VxlMe2^4R>xEdhW#W}`GNeuzf{uG2EQlj4F(?;y@cJi%dEKriPd@BG6OYFodii)C4>anzrN1!) zL{MR&Z5#WQU3RDG>D^s@ZH7_xSz6)eJT8a)2k4K8?Jq#SrgGrgD?M6Wku+`!3rBya zOs$unjx$~JN^4J889oAMW~?|U3ayd^T-9XPl?{a`X+Mg!Va3~A_dl^1XrA1LMq_t0 z;9c7T!7lG>L9ak5(+~fYcl32U0cLrtKj725Gy_aB*0y#jTtpH-$8cy7A z>?>ln)(f()h>&|bGCvL*%sm~eb6AKc=j0J*jva?#$Ypy3mGPW?K*Nx7V81@Stu~tZ z1MEh-sZzX5{Ws#h#gXy!F3Cl3Ep)IUcvjgpSjBP3sK-U%Uq|cFn!oF4uugJZwi5 zy*ck~A-q_7JgZ)l<|A`k{pRni$)!o(|GO>j3y6m7;%K%XXYYTj;p+NzrJCtH_?0M( zakLD-BgKeWY=7#-h9OFy-Tm7oG-@Xzy(Fym>Y&*%U90K3wWMY5d$&?Tik)20i>18a z&2+c+x(`}`(3u)x{4D=!f7SlTWZB`lF3+wTAa^c(lc0yp_HmGQ%W*3eDeLR5Rb|y1 zwA+h7Rreo+(~Q?|wU%p#G*bzTx=!A_+*(0BxZ&+dkcJ+_+)GWvIMy}fAeVIW*^pnm;;0DiWt<%QDDv-Nj7pLJ)19FcE;Ds zf=SzGW_s{lHx+B^BYkDtnO2@nq#`bUd{_GHTM#QgZLi1ZTkOj6ZZ?S+ShF!19_jmd zo>Z>_JIZmqajfv-u655Bd0ahJ)i-6I?+*=Tw6$hIJfF=dM%Z_-G-V%p1&U;98dOU| zhzGgxK2nol#Y~l-9G4lV2>ko#_}B!o)Zg=+a(eEE>YH~* zHNFgqFc`Z9z|=&g9PKGKWE?JY8d4ad^k4vf{=F;b89msQZy#gL2Rg|)Z{;?spPa58 zDnhso)%5clEcpucw8)_}W z5lj^L?p$aqiD09Z$CQcv+ww0QP+!#gEwkY<9eet1MW5sk0dwC-8w|CT*FLbzcgPx7Q5U6Yr% z^|N4v3Ap$DU`5`W`*dGJf2;oS9=Lx>{K8g8+`+A}B(E$&_dUt0%oa)wI+crPI-xkp zYhMoyW}&u|vCWYqBQA^9*1V)&RS|F}zf;JBfYWm3IKekZCmhiTf2_O^LdWo5IhZoTmdfX3?b7(E3}NLXCp!%HCOY)2 zuy};CcdiU7Dq~<$b=Q~kBh?*pCRvfQ(hprbVs6e1ju;HTmtJ4jVh*{a7vkLm4KiVJ zTxgb5zdb(S3@lax4*elk5}acGuS zFL|sGD#nJbx`aPf66_X0%``(1)H|(o+p>85`{2GPL8_}2m?g}0R0-4SnHt~mQc?P% z-%@_;4>B8i{M=gU3HycmhNM|1*~MI{u^Gjoh<4B8Ld`h!YFVs=KDKHYW-wfHcTi+} zK|>}*`vPQ~%cHHLGweaT)NSqzzBfuF9PVh8fcF{RdiQ6mt^D{Dk|3eM;cYAOc+%LC zIhW8MTP@TTo@HNXXyd4Ce0ok4bm8_HHz!~n52u`e84GFpgWdt}V&O2(@2SshZmeF& zMQN55qTz_wCeUORJ3U!E{Iz5B^@#8Bnj^1i;;unNeroTmL)Kfg%?JusyN$YslZg|KmQegqR;WV=z-w>vWY?tKJX1N< zQ=dw0cM67t)y|Zl3A(0`K13BXSMwH{mOtX=V7@nMS+GV#>XN@qEjl#+0*j@7Ri7gIImkDcs=5v^$4i52FtutqC}sQxvm(Qv zo#Yh-{n~8~gn~F>ND+;x?K)6h?IyM?y5~4HTlV{m;I#p^WZ{DBggEPZUpmN$L(6<7ur28Ly7 zbeTJ!d#lw&%MDk2s=N70{c-rD?|ON=dfT;=EGKK}XYH^|X7JIE8xSjHwKlJ17WVJl z9N%OJYu*YV?a6t#NlVNW{RCS~Q|ZjhUo=l`DzyHvu%9W^{NzhYK9F_JMPIQWT7#5Z zOV-D48moII2{PN@qkKq4_=~_z>SLxIJv_O9&_?qe`APGLbXi#C`IT zZrDfT@lQ;fUps!RLwX3>z_$4-C6UX96%;R2p9PK^T_c-v1)%%r{h*^GBCuVDyu_sQ z6C2ap|0!YlQ{Cke#@v5z@hs(EV#;78HW=jJcih)?0p#AZ9z;cQYu7M|Z_`)v9^f2+ zuu)h`e_1h6O+PoabBZ1FT(D~uQ_i1ZNy+&BH+Qf(`mHi_6difAnXVv+-2KM zU;9xK*kCTEcJo&GPgkon5eF0B~wa)n?H1CGh;C-^D6DAA0(2}{p zezg7+Z*qdU@W*#qxllpRSEicpU;Cq;yt63E#s~BH!g*>j+xH2QApat_;JLF`!6H1(j9glg; z!z+Y#WOT(9b#hjee_bpQ=uc%Ia$L43qs+Pylee)A=BA|apFBf@Ht|`>&h4Y+@tkUaB}R!jeR7I4XDjV5Q?PrtN3*$gA*-%8e)vHCEW#Uf!aWEl|%r@ft=| z5Cw(-UQX)bG8CPrhn<1Jx<60+rYZF4HiZ~nk-Fy8$oh7kUZos1z9m;D9F~@`I)USY z4Cl;dptP%dN*7Q!($vl3lTy-pdiQdZPazoX^DeFC`d??~|J>B~i9f9-~U(HC8EzMF*crc$I+^s|J2om~f&te&a6OdRPtO0;aYC ziNGmxA5dr>TZG|71RR&*kSo4F#C8CQ!+9d^^N}op^hqs!WC!|#zS$dN6ZCY_!~aGQ zka+Z(QBeY_mH7b@*Bs2hg(rRZ>G5Ey*2ym-r@0!>!%$fivHzo8MpEpF+Mr`9!QZmK zL3LaH(RSG&QFtFBSKjLN6YgeNfT~fGe$J|c137*ws$Ck49*ntu(D4bY6)ojz%2vDn&zaL7@i0;OJ$+*zP*~>}&>ta-zW1&$`sB6j5*+8g zd$44&XbMO&Jq3s3e8zA>}q3(a*Sz*maCkOUx9{;5#(Fd!aQrQ=rrIQ;UIbN?&mAh9&%GOo6+;!Q( z8LRzKA4A@5{}K83KKkEcM!Gw3qjtG*({ZI?f6l+(zQ?Jz*H5!Miq+H5>klmdMN>N~997Z8--pO^k^7?93UYKax=%)rVWFt&?-OjzsdBLeh6 zK28CO(q}oNPn_+IuN57r7eB$a*5~(h)Y%w@#!Ke7fNIWhC{V}5N+`blBL+0DE3}um z6;#Xkz;a4a3xzK^NdeXk1_KaT7o1mPHUSMhS-#fHJdar)2+1Cd-gqpSGI~(2@EBE23+y19GzKFE|0j+GTK34 z{4gx>gp75z+^flq;C?#_A%m?@h3ojVDmwC|M^=u%4Nf;QDm0PV(souA!LMyt+gjO{ zItRw7K?E1LJ;?*)8(-3>UgO4gn&v88Cc|udJG}AWsSN^i=MzG%hrAZ}OM0yue6T>- z@tyD`zU$T*klN|=n<_Nj)u4BleT5?x>D;u$R(>qghDBEBRI#}5YEJQNd;c2NUO?_H zGAdhCKj#KKZsfcrg7nctFEba_qC76gO*qY6m9-SD;PRUc%YUcxC$@bx5iR! zH(_q@ykpvvlPB0UcpY6vLB0@gi;2rVwn5b8~6+8b##{z|v z-1PUoE-P}~LsNhx1ChFD4)VFWYP1o7u+c?sqp!z2%(YUZVQv_S^cEy?)OP_ceE*|p zH-(Ky98-lCYrvKIuQQK^7SChu<$$ssjzmw zBoV9WQi2f=f%zlu2Ogc{q~9J--+v)Io~x0IRfDB@g=HXnZkmv?Mq2kM{!{^r%p310 z2=}djBImbXJ|#?Z>t?Gdy?kV(lMFc7s&v7Xx^`P|WRB`@oNdLU6NV+uj?p@G;4 zXO@2#Q7-aGkqZj9L>^7!`(|Q;2uEl|we7Kmcq|&6~SFKPDXg=t%j1(hFhPLFGVQw>CN9{;#$6)#sLRE|2tC(GGMupN<^% z#_7nqr#HsC&C^v)53#gaHC!&O=9uP+@!Hsn5Mk%M_7|BS8&`PMs>_Kd`Z zmLl1>U3=X7z{^mcheYt9WsazBdo7f%F69jLDIwP=gy3a87V`SIB_UgqW zt(OfAJ$Q#1S(1>vh>J{b zN;YZ&{v}<)2>+#XoUP*0kS@nL7*GPqGJ;q{>@d6+q>wOiYkU*K$k-Ng^vc~#`TG~v zHy~Rui}$lIHnulewHir>$N1wLrLxS&+yZj`LRV9Dl4m^g?@^7{(; z$yVBI#Zsis>H} z=GjgCOF~e(G{bZ9DM!}Rydo*#P)oLcPmE2#QY;HVN;q8t>XBsbGCE{D^&(%goV}6Q zajhI%L{_0e>kcU_=|C~UtxD};BUUor+9x$l{G0U0^cR zq~WYUs@nVV^w+a!+Ghw`4y&pTtYX>9diFWEjrU4r^$_PhHnufQNPv3TH*Uw9OI{+~;RP^I#v@}jwjr50}{e=(JcfK7XJzdg3E z=WN-&quEBmmEtU*R;tK)%uB6ve(;|0xyw`(_!d|c=`FFQ#X7jFq9Nst_?L3SX&eQ5 z>MIgIps7NF-|83DiKn4L$*l=TElU9@(>l}Zq+@}zNkUs6Z(G;8J*!u`BV~`z)me_t z@<)95EwQDB?WXB_W|!U?r|y~ZFTPZi{|zlH2~Df5(uL{IBsB1ilROtEbny#W_2aCT za50Q?{;>1n_lVczh+LlNu6IzfU{%X+stsu##822`+;c}rz=go@B5}tBZ0@RIv^QEw z$Yx9aCz!<6zA33sg`wlH*xXY{xuBhFc~cv$)AnsdeA2kcae$`B{qrA~W$n-jfobEu zUc@5%UY?MqSdChT$MBz_qdA`aUG)rv$gCiY5q$!y>#nE~rWqwD7o$@)GZOgs?N}Ob z-lmBNGKEE#@NR>;_m?t>KNdcml46&Z$K=r4>KFcOtlWq&n-)V(jN8}wPqrR70wELv zOJpeA1^Tg_^@(LsxaPuqe^Fxwx0z%Qyy8*!Q0VUYU;&kL>=jVVw>(Qjg(EWFv#-ovp(=bKZ=qIeIU(w&Vyk&!HJm31R*l*flTsrVe0Kz5T@ zL1hc@dCoNRJIy%JDDFz6K+T41-d)KO*T1d>cvM+RbH8>l|MS$dvZVGNd4_Q+9lSk| z>UA$uHm2sp5fSMNl{w!fu9xVwwVG?6R~?19M-; zWpzw8b(`r6%i-*8=E_nmUMzJBvLAbrOS9F@ z*+1nKR{&{hpcCkqW`=yvtvY68!hf)q0%R5iZWp_cYlYxwK!*oL5H~xR!rMZKuE%+` zTu3df|L}?0ZJ`-{@F;?*3{Xw<@WA#ia2o6mw=LgP)VhUc}T4)j{Mjp*Ao^r z!L(T}K8If?-2DRuV#4eXS;>$obVQ&qX1Y)fnxXcs@s zDyp1MtLfgaZjD79d?j<3j-Om~FO<*d_@TS>;HGaRxcc%=MeR+cQp0!xrMjYn3{!S$`Sa@PvHmW98LD z#6=!Fi%voUo~{s#|4!q@dP#Nc3jVz3;hnHm%^Joc(y?}>g8 zyoZPbr$#D3Z7os|t|PELHgd)>aYWgq&2B+xtL!(-K&$F#gW2{jmdWA@R`MBd9jlk6 zbBkod_!Nv`&ap-OM-I|3?&!^~ccrUm?!~l_Sx&!C&UQ%`CVkb>`OI&R3wdq9)FTJR zSQ|sWd>d+xN(*rfg3eA=nM}909rcZljNBY956pSGKIdEG<@R9|a!oZs0H==w59yry9L5mkgqLNYWHnM z>(JhA``VP5du-Y#D_*l0J>4AClwpO@GmASsM|*7e9X&>ZokmmH=QkK%AJ3u(Asd(<#f-4@i}vk3yx*5HSRJ}K~V$b;qPrTu}Fs%^Yz zFEtXBIl>Im+OGM`!g{*B`FECbrc3GIqXWQ{9;-jqqgbhc5=6!pM=WfZs9}_oN12h)h!y-`*Cb`61oF8wx4}9qm+8fBi z_6!S5x?lv-|kdO0TBm zTyx@r(E@Vjb@CaOb8aT7UUHviee0wjB7LLB-Ol%zQX^Yu*E{9v9aica>Mw)c2Wqoj zMIfxyLP}>;)7ElJ#(6cwqN z^&q@V|GokBppNr1bqaF^v6qL>JFI1gG{cWvB;LN0%)Ni<-yd#iMP~*#T}W{;qFC6k zqL5Xa?Dj+rz_1FjC%`W~3-S6$o7O}7VIdXL9>i|FK(aGamP%gJmp$)FoToFtZ3RKQ zEtka;oCA*;2;tU#H{YeW+Uaax|H@w6UiKS6tjKa$Y;2X8FLh67ZnJCq;E=49z;bJ; zDB*&rG6jNjCoL#SoK=iNwov#<80;7v7dfmuewFbhqapUX}(_E zlgquo7Ir0PHp48?G3G-nl9j@mquQak!#1l=9icxpR-{eN=a9u2Nxf9Rm-wLes5eSKJS)%?w&3u3@aWzzP3;86tB0CRYze)*~x z;RtoL_&)xuH7f24RFmt*z?HT7s%%|s^3Qd%rfp!uK&BJSxx!5}$H}5(Oz`d(8h>71 zP;;m}8`%r{IrsJ-Jdhl?HNPte-P|{lpUIPwvFRfI}qLdw*Zy9S?h-8Ivt}G6=9Wi7^tJw zup`+w5)v|gtuK*5kYy3k7yikL^IhrQI0<69V&6s79FkS`<;bx_6QvE(YfEtrRe`i^ zYb!xwtvH0tAs^U^=;F3S*NUL6?N^MW{D8=6ZuvT0fTZON10s8rHK+f z>uaoDvAbBMRSQRWw3CYRpymcF+gX9iykoTS^=4IEn3uzn{%vB~8TQLIQmYaxRoTFg zN?@^S%LAIm4d%b$>ffO@H-25WTP1S1(1+TKcc!I^e_Pemf&+7!mn-(m$;X@#8bTCj z^_@~LUhe6GTT*&9(bI0Wp8qZK{kK0DWm*N2>{6$)I`nX3q{Ok+l3GhHWp-Cm@>6_z z;M5A*Jm422D1C<2sl?{$DRGh=DZ8)80>m$s_EHafoPYF7`ci7$%BLvH7Q4a4Mq+m~ zic^fvCH2Lr0G`0w zo=(%l^l|CFhs+1@%Aq|!bhy(lE@h}RNJ9obhQ?wN<416_2X;yd)05(@Idr+P%_d_< zm>utm#+ZW^3hf`aO@!MQY>~zgW08dpetZbZElN@te*j8D?bVWhuf02ncY;##-af__ z%f`BdZuXPFi^$S>vb8VLAEI89fvTEuHb88pPV(9q?8>FG_Acx3gurXXMO^~lI`;4e zTLOo4@9+VYEcl!Y7Tu{r@K<3>Od9k=p;OQ2BrRBF5f{BSv}2?|0HgC6mnJO61xcQ| zB9MmM!3d+}u%&wwmQvuB3!SZAyA9o`9vT{W?U)c3j$%I0lttMYfSlm!Iq%{06tc(qVg4xE_$Ld+ zAZFF>$K><1FPI4lA@|0rnAm!+iczKA>4SYd3brS%HDvstEZQfvI{DqXE_F&$@NDD_ zoCgxyj~yJ!gNjxu!i4M7YT>RWlWAm3Clhc`_Hodb0#d)6wU$2gP#TYlIyZLAVFm^X zM`c{-LTRzz?VdQ^Xf_|fZQR!>`VZ4JtoY?iwGBA}l<%?s6Od;!c#SjIp{2Dy$-D}m^3{hza|GNYOL zJn-))!blceeARjZ3phlG3^Y#KPY{spJs|B*8dM?iXUi7Lf5+Tm{P=q@NxX{?)+#&M zA9wcdlYk+SZSNbt+z?>WT)CIj*8FeIS}UxFpigiacrp8G>osX0zS$dGXQBvYHB{0e zQ2Hf_SIi~#rv~dR#IB2oy}8G<=0kAClhso`xu7VX6MJ@;Lmh8loHxHzpbe%Fb;9|> zOU8z~jvZl@1d2HH#RGNngThL90{zLJ6Xbu+4vssn6%8^4U8ee=h;eaN{Kdlb*dW-_ z(9dM>Y{BGLJ;D}7ua%adPT0k}HVB0p?ThWgVBE|44F6dpd1m{%mscP@kDiuPt|Q&^ zEqq%dI3zU#`k8CLfR5yD3y>;|*Epcujyj)vuvSAFiFH&?qlx%#g_1 zEEm8!I1#tQ5i-0cY}}vAKFjhpU`>hBym85Lg2ONs!DXMd52%IDd8=SK7neu@P5ebH zE#J*!beFtzX;00`*jQw7$DF`m(akdUmWk22CBiu#yMXE%tshy7{NJ8#F3pPy8c>`+ zYgl9i#4Lqb2ip`x2giSd6$vjnWMkmLnTSd{P(kA+THS&BT<(2|+~6eSV-ZsHL_Np} zieNB{;Z|BFS;ey1UAwSnOjv!}Yo=u~cBt_)aKDX1Dz`6dRL9Sjx95psE}cUrrKZj4 zuw?(>z9{yxe^S`{R$-`;^o`3GaQr^J@~DJ*)5)QuNqtC{sHQ*bXMb^4YpD3;>{k-q zwn+rnnWbm<-Ooa85@aa^Tey@S&j?J+a#f;XR?)3o)DF1AYF)IHjH>IuoEY#HvT_l@ z=(p>|TEYsBX9W``ETR*|{Sr3jKk*gLpOrbX%K>f(lC^$sDOY-*B~7OC^_T+iYO9FgOs#%*8qc*(j7y0cMlBwoAbWs zobOxzw-#%$U|7KH=h@G`@2hTI{r?co|L{Nmp`St5L7wDo1bWC9xv>FHE|8o>9cxSI z=qK@_RXZ>zL-z+9Pv_E<+$h>cAtb6i9d0T|pAA8$6G6aFoy7cK2Q~yeg)zsH z-1pZfdFs7qKmZ>j7s?ZIMfR{u@SHGB4z4pB+QeuoSvg$l&%T}5V4;nKCJm({x4WmG)) z2`#il-`B@SGj|i+Zo#`6UsyUi<>{w%?D#eV?}zDL^|R%a%MeyTGUbXczGF(&lTga#tM_X+Ximo} zkeU^`{_4BqWlOaLkMF(Cn1nV47k;}Ine~WtfdCDbwby}1DI4TGCKP7M> z97OA4&BmO;3>x$}za?f(9A&1UEf7-u9Hs?TVMbGK|~x6%+> zb^p=-fz|)KRWileUUT2M#BeMyg}I>T=~?sfWYz)TJjp6_$5KfnWa1UIJU}$Wm9aGA zjrQJMkt9oH1br06L}q|NCKda+-c%C*6t9IYQm?{JcLi?DT$Uq~sWP521*@&rZq%fX zqp+J>9IIf&A)PC7(`3UnCnLG*(6@%>)HzVX7!dzq*4A3M(Fpe5_<^}onxyK6P!tkH zFqPHKS)?7uc;FH~zANB0OD6D4wMRL5cim}Id&b<52-_g3d4((U5G>U~0wwLLW&?9S zzU&OF3*;)7eP8<3a#0<)6H9ZEXV=AAWfBWFyAF!JaeWpjL>0T;+H`omvV6zhvulMt z`FDl-;^4)9X}g$A$fm;!V{pR*fAQ10kO=E>QxZ7(HH-*^-;HJis|m~A-hSCjRYrU6 z^M|MxFOtQr)A&M5^1knJ&z{)1-c*0d9pBuHs6g!$?@fpK?3yC^v5m+nw+cQXxQ6Js zT)WR$za>Ma65GB+XW*{$A7L4d^|B~8u9>WY9E~YUQ1!)Nz%a~YDeBZLse<)*wXnR{ zIQd8?x}{007TLRYQ@|r53HGC+?B4wZmKb{P#aro=s88kj?t29I@{ijFlAiVAG`5wK z&-R4QG@}26ZU`{8S?Xs^^vIaJ_I+{28k1F1nzku0rtN1|k>0x3P;W?cL%+=+CPv6=^vu~~X6FO`wZc7dzP3dRDk zo1wQ}vfd@2%ZAunO`zSIwgcNjlwUf^ZqRYfGY>C5jXMSl;J?LH^LA@0wM4}vTzKhN zn>!mYQQ@(9K@WENsYe$A$0(vopeH-O1ce=SjNtW$b$>s^Vr>cZ(4uR{4}F=>DwHE# zOWJT+FS!@Cw*_mt?|MoumRq;-)rQ1Ow*||NRAf@fl;+hhRm+Y`R-Wx*P+kt}cS7LS zf#uI-;l5HG%FNg{ZcO(?0;Ks>gYfHVO$E)-Jb5^(syACZ(Js_*g(!%|7%a^|f zinoos~!!TssR#3?vQFvPTLF#HOmEXqv??W2(pG)SI?DL!zgM zQgWi+c5x0vy7)Z-v)lt&Ee|z@mlit7D6oc8BEtHXgV=c>bA0aS%18g%yH}S{g;(&} zdnUrK{llO7yARx>h1Q(7DniJ60`7e^2OUWVT>i_mA{Eh^2&w2-#m(NS7 zzLZt@RTp;pT67l!zUzB*bnbvtZ@x-A(Bl);OFhluN3=@O{GUkn{gj>Zz1Q`pKb!cb z@bsuU83G1##Ox{wipie1tX(N-?^Qu{XC!>jJK`)sp!0JU>PeUN9pl`}_=rvjvD{DZ zeqaLMKbQ2sx7caE++=yr_7U&;Kd%tvgHrzF(!Lk&YpA?fIxl9*-ia#ox})`B@dJsd ze}oo6c}?yRB3}>-*nK}J@?_h5^Csf}W&h&*$U>vA+V!NhbYJ#zU)D60m<&P;lqGKN z;Y>fNVy9fk;l>xRXGE&9IA`*FU%)%w5 z>$H+BTU`ftCAcAg6@Fe{>@7@ zwV{a=-?K_zW}{R<0M}=?1jkYSF0F*27V(fRqAWPPToYvX7?k7!< z{J?k=d{0dlq4j@U;w-r@k_o;RQBVE`-~c@Jl^T+WN9Ppq;!%c*&jle9*6Q9Zw(oFw zUz{%E$@r&|yv%b5{W}YQVG;$30Q`UxYo`j+hXrmezZA8Sg^7mmRZcuS0ft{5B2%I2 z?4BFN41vi=+J);2)&*+g$h8DOkIwMs^0PMTrrh$C=saj%e8omwdVBauqF7FpVV7#V z=V9Wumt|xj8=z3rb!D(OPW}6K|L1)y6+#vtNcxUv^8d3GbY&3qY{Pj+!+Uz3QDQFt z7{K*)2D`Fm)r=FtAU_yszG0?d0ThHN8CIfuzE@Tr!6U#XE|s!8(r|Iu_?$cO`o6z^ z%3cr33lnYp=#}GOJ%3CHon6gRye%X&32YR)J76$}R?Ya65w@{;Zosa5X7f;u zE)6|3Vg20yrTn`3cTaPWmPnWL4x;y`))u;&|CWAa>fmFJ!0-FSi_$jZ$spyuL43x` zW#0>KSOzZTj_NC;w3#%xyn)g8z!v6j+qE|~jn6P6ls@xfKDPqf80Kb>!0mK&dy zS6x03HqzbGaE0`t#A*OnJ5lA7$2zRzUL^~^eg(fAKZtMCk_lu~7})Pnvzj@p8Sk2{ z|IgX-j}|31nbbY-L>4hGE33kv`|tjSaq_`NCB;vHHQ`=bSr|H91i~?koLBoBeJ_uF z+q`~Uo`hX8C`_`R6<%Ts8)b0=vMqv$-s@iYFTq{Y7n{?e60#Jf^qr@?4ox!|xWwtx zL{JXu8ExxDlkB;|h7)@5 zC(Za`ne6SlQ!`R$&nc!ml>eVy0gJw|1KTn;KC_%Q3#jr*I1hQTTs^&;BXg+=%(<L~uM8#G}}hZp_e2lQz!`~LuNnADNWceY=$B?5y{`(S``dbS)f=`uoaBFsN| zo_Hlmp3z9g4$iP{ySL5kCtrHWy_%kcO(T{QAADRX=}s8*jw>5C(sd?T5?1GUtN z10Io&E6h_nfur?%?R^U+@-M4k2PJNio*$@GYNvZo5? zYlRnUGgm8kKKwAwiu<3a$eb-d^14q16a`yWFNG# zHCU(Z-|Y%`~uq7jW`~s*`5ExpqFh0R)a*g#tKCOw)$6?7zQJ^60?;xEje6~O-O4|g z&jAb}uo<_bxnO}%YZETKU&xLtm#rg^wb2@^uNkx9 zU$$oY#QBU5^?4&>vY*-;xD06)Z_3QI$zJTPSvw52ZSS8=9oIKroNZ6{*!+SYbzBCp zpU;rZ*$`3h1I{dlDp~Pu)IK5m#m+|}x{t5ha^B~KsitZ1bL7Z8ZOp#Kd~x1$30;zj z5n!D@UlLOsgGoN~88eTexWE=(O7>TYd0d`Nv*Vs8Z8?2$KW*2pFJTI2cc1YK0Agdz z^{}d$_L#<%#H-UH3vx+Y>{F;m>Ke^2rg&k{_M(g1cRXohF+|rh6Hl2pjwk(tISSNS&NfO_ z-K(+rhvQ^ip`?3eVI1s7CzEvNgww#3j)1GbumhO(8eo#lqD&HdfE}m#(HH3R7Q^ay z=AC4e2iUIenrtG^p*!Vak9;nAWCY~v9L+zX3mQ&>8;HFZ0dV?HTh_eHI8+~pdFXxo z=;#W{@S10y4uVc5n5E>3f<>qIla9%++|!Mf^@sV5SC)%IS6O^BTiYGi2o+JrD@<~C zZ|t~Bbe!LaeBY{EFr#`z-o~4_mmq5>n2ph{RC>LG&{wyo!bsP+4G?Ipev&iNU<9{9 zUtezYT-d?b+!iky+0W%8Qw$wyl?s?=Gmv{BZv;R0>IEAM*=HV(Ee-iN%rCeh&gN%t6>P`(w&wKw zU4OwMAsp02$H2DcfHGV?tYm$ZD!S^MHap`)+>B`+m|Z z!3kOpNg*ggUoqS9R47O`F5H#TuyH?9+lH`hl+X@b&^`)aD})X}&D-SKkT1unsyOut zsslI++d$=eUz6$rd+|Q0%AA_H3;3gq#Ig6_0Vf-T=bdCPX+dEhZ#~ONl1p}Ow+WcG z&>)YcTb|tZabxk=_MB!;iiJM6?s%H^Y81TpY27?;b`>}6>>~8;L#zKmCS&;U3f<1N zbMt**vM>%53Os2qnK-C_zcxnPZL^}qmYdrbH4@I6kS?szWAZ5W2wYV}oHvTw2vdYR zjU0_lB?+xnR`E*6P@(L=8Q3^|-ZlN+K36OMbDzk#LxVRUT<)|LOEvSi&?9>~Y**SP znrk8kNTpYgfgATBW|(E8>_H3CC$+oG7q@QAzB62$mFy!4wNm+T8=0GuZ+&AhINHv4 zr;$h@K=!;zmZj+H6i(*aU*1N#8z&h+mE}41SnQ%y$H@Gz3J6_xW5;woFv~kwVzbjH zsfd6}s4KT0NK!#}UU!_|aCptIts~oIw=~q_IePTkjybyiZ(%g*;5sOv{%mraaO2_N ziBs~K0RWUyJr?r9gfEAAE!+Zs1Ih2d_gC~iZ}VkAk_X`}wboQCO!7^?ZDV~vg9jz} zF845{M_L$7D!SMq&ys@cpmQwr?h+Zn4>y?Tx}<0YX29{Z<2|AHM0f-$1_F;{QZlYF zK`%j_O82X8x8nhUA~UZ%oD%#U=T0Zh*ux1|Hh~dx#gmx%TK7F#Dsg;OiZ-z}fS2j~ zNvmcPD@B3Sk-yj=AgpUn=cal^JuGN1x?fPYnwbDGil@DfT>3ylcm#j$iB@rCl>Rkv zLs=Stq#!elU*GILg+pp2Ep((P5Q=-z>6<`VP1A-tz;ys6ZsS!eLnMw5=_)Lc*%+)} znkN4*E4K>>6e!>-0_n27&F3rqc#A1~U0}tE6oEdI?<3S93YND3VXs`n zEO>!Yssh$3@N@xSh)s2B&dFLv!HfjFM{+$6xkB>d(9-*p<$WYsiT`(NZsJ;?+HDSY z!2R*s$2``Lqxl2PLDuf4|2lt-mH@viT%GyuT(G`v_pV^Yvi>;0NgL{|_vgq z8g~7+$Naa9lH)Bx-vDi)p|IWn-1yW{1%o{~zW?i`62eDaoFvcuOapHvv=RtI63DYe zp@`M~3@~`%j}mnrs8tT++w`jl*AAj#_c@tuY?C=E1{pC5)M3eo2yMsi#18bUS*Luf z>;xf7x%zGq+v9hbiTF}{|SO6vSwPOi1g^g$wzHH9a-hH?lTV>CvUQBYaNpr znyU4OIMNYLp`Vq@U?4p^x$T$hMMnNO*x!rFICZykWJ9}AX(5c}@CL}fP2XSN? zaVTMmRiY<;vVt*UX>g}EpPMYguNmM!@8To%iBn|B#_t+!s(r9o?0!v$5aZ|2ucMME z#y7ksNM;cMEJJ`ufGD;B3q&F2!VpQVxI{allI%^wCo^AEa6R^a7 zwx|8G$I+EWy6U8uWziJ@kY>9Piy8H9i^m@l5D( zHs=s`ve!FuZHsCIdzTx@OQs4L(l7q1f#3XJkz9cI_7(lZ0-q-&N5=es^7odG7{8|M4V6U0%DmzQ6{4quLM$y=I z{p$u@^ZC;GGJ7TWKtIbCGDw(gZnc#yy34cK?Pm$}em~}6rpUJxVy0-hylNJ7O{C`- zXjGNtG-RL=Q6xT)eHf2`798Ht@IGg5Kwl&T%HvAeXNG&if zzzcN~?)hxlnuMGLMc1fcYC7Be6W)Hes-yk~LeXx0PBsJQS`xdAQ^y{PscIWU> z_-uhk`ozDfH;cQK!dZdzOkej$pPSCYxHD%lfiD8Wp@sws&5IfKNIo8$sb@`ji_5X+ zW2Psr_rKlFmxS1G+@yNGZ$P@#h`%@bz{n9b#0h5BA$r!)#1fZz6Que9h(dkr-K=gD zy&8M45yd@2DhvtEi4yn6>ZB7l6Fvk#;TY=m;?R!^%w0CfhCLJ*-CawwYZ^g7_K|?U zF{;Z+$5_Xq?r=`kC{v?|3ZF2_n({@7ZrvD9o#?EK4RM3$k4kT3KI}qsfHn3f_&ot^ zNNK9Q%cH1G)L~IMSCxloXIb~Bv5tFi*BV~cIv$oTg={q5Rx2f0awCdJ_PdjEA|8!8DKh);hmIK{5fE>Ad z`s=}%-8<&5BZUO+z}jnR9P#uJQhEzKn-8eCd4?;Akgt8g8+h{zeD}gF#3g}bObvgf zU2meBU8;YKK%vK+VLAig*oIeA?VtyUfRb^q^aGK+gbQ!)hYoPaL;tUEmI_c!;8Oho8tsOW5unB>L6!h88$_f!$6k=k9yhSQh15`SONugTaVgf6BiyckD zI=){i4Yb>yOy1OihL`8>u@bT03vYHE&$Ju`z=|IY`3BVw`{VD+P0@`&)WIgWXi8MT zq2gvITguRN{57kph8o7CLWln5LC8!|wUVmz;UKau@HpX@yf4HN!5B~^QD|rL3Wy#t z;Mq~?s1c-R)K2=VE$Xa*l;6eK@#&rZ*D?0r=V~4=0kW{T8;=$_pA$3Xq4kxBHNT3| zi>ZH$f%Ihsx?isG}M9_Wrcf%sk89ej>1{q_zu#M+yn3W7+q^67360p}P6c?pH{x~KA8 z_6hus1xto{$v?C~c<20}J4t0n#rj4^5|q?@$ueQmM>^y}%jLf{=%|IA6D-qYXU4u~ zf(kg#QBM{J2oX$LlpuiTd>Crl4$c1lAou++HNqQ~ zDZEB0Y(sRI`l(u0-Z}nROfZXI@tSRN&JA+YtdQBW1HvE#w&de+fiwDUZ(d!7HdU}T z>)YmQeXg1BU;(BZBloZ1Ym;4UqL+%g9J8o@;vU3IMM93qqo`xY!>9#YnvyuEnY>4X z%-?{l`VEopYk<9{B+4=ad{#dY?sRi`JC)@2?`!$$y8S@yC>sxm{M`HN=wV1jGV?gC zRprFz&-~DhX&igyWU@T3I34hTx%|{Qpf&S*n01M3wMndXgLbCZL{M+~uZ0`E7Hp0a zL0uN%St#xZ0f!r#nYg8!Wv7+XSsKv?PLn-*ty2=h15T!rE_uSh^6&I(aumvLJ(pK- zY;W>53Ok?LYsQ<{i-kK^If^=oN9?aD>OB^hnY?k?fO#+XQ^OqtNWNl~>mF(M94#i_(Jh<-ZjVS+pn zyxCsVGNHZj-oS&mQL94IW{Od^4er#=Nsm^iC`H)S2o}H~gxLOK>B#s@(04pznaG zy-x13{pv&9ZrNbB*&9>mxc5zNdMKIfO9koBG0@n>j$8#FjdYc!ggD(=&iCzZY}WWy zFT#30>dD+bfAgb=idl>>qh*a+rvfs8LW~1SMn2{gp>Fbq0GhXx^5FW{9)p@tkUcg6NZE*{HQyX@YswNDZ8-t5g%OhUDVR?H+xZqr9z*; z4w8CirmQUul5S~--60Z#L>ug%=nNJ<`UHWVIR=5Diw&&fa-v)7BWAW|iifFx*7SCP zViRUVD!z@rnT+d|wWwuR#i$qMBv0GHvkYUjXr}@ z1;?~;pT(V0cJPIn8&!O4>6iz`Bg@`ZVcX8?*!+a;aK~CqHMMVLl}-jKk8jyFEbp2i zDtFgBc?I=JS8Uf$w8dmf?^rKt{0G!2>b(wn-q~n2b$gmZ8dA}@9GT>b^f#^ElsbtV zpV5Han#LVTCW(2^oe3E{GqS(w-7}A-;4vFdhOf3fV7wsV{!Z=m`8i+N;`6MH_m(Iq zSa`}yk=5mOBwt~fU)SF87^QK$*TSMI%i^ib0Ed9+a+eb(w}7O{OFPLUoen-0n)`94 zstRqo7G?cT>afSeKv#Qwjz=*(tZeU1)^=I(^m6vYF)n+|D8@1w_3)saUCXCIc`*R7 zwEJyp_sJxS8I-LwETe8u!{UfEczp~#YMSpfj20oZGh4v!vZc*KR&&*U5i?b z@YaxtGh!@zq0(Y$8$I2lWFXJdHoE4Ci9H*7^1I^5kj0nrBSrgz%eWT)&f=w5pKuoy zTnWo5PYf%9e}BMX!}jc}2d_|A2J2BJ?(Y6ORETXYyOl(q?;nMg^|7@?CNrGXjOsY3 zso<@y@7ufotFKeL;iy{q(o+Ma#;139_iwT+GYvWY4EgK!etp6%5*_@fZUEE-lJHRm z5RL7&_U~NlL|j)%ppBtYTMWr)f0C_x46v#KXr6dYc7V=a=Gbw$U$}=H2D(aiP_1&ZU40Y=F9fEBL77K$U?HF!WzxldkVnz=QCqK&2uPH z-S7n8%3Sl6i_k^_(aqXsp^wzrkF^iSfV5!k@jFSW7j%;0-B5+SVhmqxTWjl^YoKWd zpnlXbXxwqq(|Zu5Lib3mfET*p1_)Ok%V>p)kS7)B!^<_#`#u6mi)vis3vl)>{9t+= zxDE~jdS!hn;JvE!Kr=w%cNy+Sfp1aM&I!O+ig9E=yceHpz}IL)i}O3)zEZltO&?Hd zNcT1uc^p=_2Y3xkRd`L0!K~_JtZImJ8}>eed4Wre{k=N>aVtf4Hj3k(c6IqKI3} zxUBG#!OUE_8C)N{PNbvj3~!k4<~{7Q>{7CjzlO`BC=*K7i(Z^4A^xBl?&qU7&~e&m zw44CVv+B6-0YFTP05}*HL(;7g9GD$b;kp%16}p^WX7qW*Av1XNO1da6D+Nr(rf(2G zIjU@6<)hI*)S0sDbGRa)7`|QBAJ+*u7t6I?VUTU3Z{CuQ1YbEY*3uIrRmpIdb=%$! zovbTfTSSZFszfjrd>55IF_!%-=*T^$s!Va&cTv`48C6fSvv|c>G?qT!;Cu5RW<$g1 zqI2kg04F*0zt9HTN8sb?2Ir$OO93Z5&Hpforv)JQInHi{89M?hBoGRsP6}e^f$l4V zSW`$?gp#>crBld+K{n*PL{Uh3G=3zAJ+I8#Tt#6={_d$Cj0(CVhh|TKpdY-afBlud zDw1RPMQKXJK{9T`@)ng^w@slOSMMDeG%p*v7@$uZ&0`Gdc3vXTA?IkOS>PQ9tHM60 zAcK0gd^phLI=@_9!(2eu%pkD)sGVOsTuu|k-^f`mqNpH zauuhshc^I{L!!VJnU1ZL@ogla ze?Nr{PEbN5_&mB4Etakun`NRj`?(L$%C!4o{Vz{5vq27rVi+r@TyQ|+oQ)ecR#MKV z(C08WZ3>j^l`m&!1F9JS|2D(R-hi4DIj$KH3^p1&#k|;t;(c zf>X$*k`POAUz1coS^K2!Zj@`a-So?(XmTUS4mJ>l3tXKS9#kx>UWylQd$;wbt&Dwi z&5Pm4@-CTo#FEjw6<^FR2?ZjYj&3OTM5SbrX6hAARz+7l>C$$ZpD*X)lKw%a96G4&FBOq3)x?CeOje$i5QJ7IzuQNLTqJ~0v$Bj79H9oc4OoPoLj z_fhFn0NTFihz|oR16VYk8hFk94TJ&)K{^40m8nDlxd2jVCP$X~PneJZn#y}c;eqze zUVP%cAM>dzQh-99Wdp9T z%bgrmZyU#}u(((V@gxe#1^VHYXXOd#(+JAWW{6}NrhH~FSFy%3s@`(+98qq}h1F$! zAuY;~aJ-{GM6vVbtL6mM#4FgXR)UkO0H~E7%5ai0e0QW2>;RxC$U$X&Pnkc2lxZkV zm4Tw>k4T&$ek+9T5bcyZn`PC^w-r7&ayscloI~}6Nmyie(0I2f!wF%a^@Ha!Dn7ps~2WimrJFm02S{?v&!8iCbqiUmh1)6SpM!a#{!97 zCC0o^!dv}5jpTzLnvXzmx{`4IhEAz3TNlMcGS+@dYR9h;LYi>&7r~O; z(M$p|j#gaqbt{ef)PuEipZN%TT$`fhl@2wz->y6t5XI9H26e7b@>??tl9th|Ktw-R z0-48z;c0gSt+Pdt8HQzVJyLAQ^lXLn!2NqFJX=!4t+%cP;U$kPXh=YL8*S0S_8XA& z5^p58@7@hX&_4RLnw{oyAE_J`4>XoS*>2G1r-Y+GE%>cOh?3;deE*}7xIk9%T*-JG zyOWcZ#Dq1Me0wO1^8h+nVxD-9wU1DtG008{+3!Ia%nN;Dj_>tgyMB3)RE&UeJx1oN zoSR}XYZ~kUy%R-&zpjLhJTHrKeJQn=6WR{eK75Wg*59iqaMGYcESC{ur6~@{id4PS z#t%q0dR4FVWGm}yLxdi?qt0waPh`5UvDIL+_6>}|(T$$V!ut3atAXJQ(e3lCs{L!t z2R9)M1jUEXr^nDTm~|mcAK7)sQ3SYmO$?)s`(D|742;vbi7laL%HhVPFEh4xFtNB& z7CQl=g@EF%n#@GK1Z(Hr7W%gGr;MR}0>&^i>9x|o8;mR9tX$VmWP86xG*`Rgze)G} zIs~9=3ZD@hr<62|??|aZoTxQ&Dneip72pU*2>%SdRpWZd$2$TNPNe>tFh;DwPp&%K~^%1lmy|77i*WcJ5aKKt4izW*B$3fJ+ zcYHyuZ;y%xDx8J?pltDr5-mt~$5e`S3%O}V>~#vCS2 z9hAkwgHQK@=ywj;?`NtrObjjtx|pQE6cOU5zBBq#{%sg)_qn)^VBwC}S@`c^a3DU~ zKMcfN#3P<*&~(~(H=NXYczICY1H(hhK+xFfO;W=S%p1sEXO9!P9EA{;7#nJ^pRMK@ z5&*@t2JT@J+?<pOj23||0l%m)LaCLokINMYn( z%Ex4mM5o-AM$5qel)eH{3h_t<99)zn)mI*t<$Ki}1niCSg!cNpNZZ89OE9k74Dotc z)+QutzE4cZiX~fs~BR`dy zvWv{iwfVATzpi<06uEWn`o|bf#yw2L_+PHVzj<{urT{Il#Wr#jABp?td;E7nIy-a( z-_Rs8H^HPu1V(<}QP9Sp#ohDm;jf$OV_cfF{8W*V+$`ZHGS3x^TSR12pmHJrt|Ad`Uz6w=e=Wr;rk#eAnH*5D2WKr{kX!{-VUhU*50^Q=NmM4c|UfML~z}W zuw)6sx9NYbAM19*j>dfplD2o9=*!SBY6~c68g}x85+QpA=y4wn zvG}Y6uKPxI<3087x8_!QI5Ir?nd}xf`B$1y8sisFRC{~bL^_i-!GB z?$Y{4#_%6ofm`cBsItXmzf5cpR*$38<++-G_w!z(H8U(R_;t+33-eiCwl3`T@c02P z_u`1Ay{JZebL0+?hcA;aUELsK%tCO$xH;fJ1Yd|vDLg#0w>4b)iW{o%i5Z6*Opl+; zsc;o>!>!;QF;64@m{!b}iK>WhucpV@O~FxvK^8dI-l^^uksL!?Tkrp9emU;~v7($6 zHbXi8IY(emN!^KOO@0S-1dxKjH$l2+;xPVj5=WgfEA`G>q~ahij>yykG#NFK_-;ES z5S@(wn6CMB(q3F_yXpojYN5p(%ne}RuHn}i2wqa;YtuO{_%S>tFq0SS?FopKm5cP2 zyTL5ajaKkRGrV0`<|O|jQid%8^f1*@_pUdW_Ny7qG$$j7{aDcNM>tZHXhr>h3VB<$H-!jKMmlX|e%1EylMLC^}~X7gwVZCd?K=z}Jpo|lt_Ned32$81;% z=x1bPS(DqX^I>{q*y44$w%@?+bqsbR2|ST4-(^MihkTI+Grbd4up*zbDrV7q<=u0? z`n}i{PMR)Mf*C;;6ak-Xd&FGoi@ONjWn z?@?p6D>f@tja|Cq=V{Xkzl=R+KFVpRH`#iX)IF0<&sV^jNe@c42Jd*hZFC*MPl;OQ zkw&qY6gn9o;E4-8t|OFAt&oKSO@YP^IuE9;Z5EJ&ll^Pg8X0T$)A%VlPyglBxOO&c zKZoGjV(#$=q}jf;`V``!>vNWvSClxWU7Zl_y26rK-jeA8jL{hh!s7 z2k0&BUNRZMq~l`Sg(9zUVeGAhe$nMJ=pJ@%G??|Akkqc-$qULnn$4#1T*%00o>e2- zHZVs0;PBzY9)zen$@-J@{V9>Zg75)!0=>bfmfPP`pBZHe)IObGA<*3kl&51t{!D7h zBi>$ZIrjbVKe-e<^CAQu3wWHp1O|u{uq=fdcl zkzhVQowtz`GoWY?QP8|R{cmRj59?5grPz}Lbh(*9YuYQ3d`W8WE|#HLHGUe4T;l4n>>6m|CT55=hK9a$+IMiMc|D=mL;dLp&b z1A73tP)Mx7r}RrEHp!$(co_4m#3VTJkf9e}<^ zxc!+N&C~Pq=-uj;)pLy z+MX@_c*a~`GUXYg+&7|9|8@$;kmcA zK=K|@?BKX-AV1&nV#WO2Pg&N{jKr2S4O#Im9f%d&-ngM_1MgRJTCGnS`KDqpe*~_+ z(mc~O4I}ThSgdWhm<-2YI$pj#lut@(9}-B{^ljU4`|cB3tZKBONyG^s^gUY)GEJ7* zs&Zz`G8WZ8d?HySfhRSj>pj{+ciOJOv}`hN6n9@XgWgzrRG`lJAlVMa7escnVbikRayNGey@9tjfavGE&Im_Um`4&ENzHzJizLn74)1GY%?R!N@Ii6sFX%+ z0qFy20ndf}egdp^TWA|^W1*SR;tpHB4$t&d(Q+6C}Bi6}wqmv-S? z^X5#8HBYZn@&hbuW2l^ueksTEXO;U+ZdM#g08Bm8&O2Dgum9~)h z8JZU-STMedDO1HjV>XrGEj{9UUq4m}1H|yvnd*GqQRQvE-aw;Euea6|Rkhf`qfl?$ zjN31vZ}g`HVFjnQY@0{6^uUXE99HZZ)6A9mt+HM`SSzo3D}C z&y`&0S{&t9bRKyYo{V0t6~ZJ>GIzeK3j zh0NF1kJ!M*lh1|Bbg>m^I$yZH#e_+6zojmw*HypA#5!=(H0DF4I}(oz#pid6ItUJ* zOz(Mji09V@e+DnB4&NOY$8ENM6B9q-i}XGW^pOv)l;qEp`Hc0uwUUdZAygQ^4at5~m!*yQ!8DZ4pc+ZVI~BJS?vqLOF? z48zbn_{J1!7PX31Q9AADk+B|Buig;)72uPvlC%9(5+k&ozv* z6Vz*V3D>Tz=%a%jT$*mn%<%KJS5S#{&^&$@i3&0UKf%94^!!@@@m*4XfgkwuS#Lmx zn%D5|3f%lm`WYYmMDQl$rUdb`Z?|)As$Zvm{K?o*WY9yryW7rx(tHcMxgn8N`%B~U z=T<@eS&og1kP=vI8M-?3fjbX7Z)yR$z%A!rldD4%OF~ClhDU9_o7haw@t_F@zCr`h>*y^dgJbu3< zRPV0wP!^%0>_baaDccQeII9dPEWnL(b4{wf{fNoxoIRqVw|vxpJOY2^t7@bBp7@PF zZwm?)r207R%0HqxY7Oa6A8pBeUTo`S-C9{UCOUCJCy+cq2;O{h{kA_1=um_$Hu^D# znMbw>f>gjk>S)w7m#9R1j&@v`Q*1r+Q$VIg!Y|xVp-*|MNY^9{StdrQiTM=hQ1Tx! zHBP*{X4?Lc2Ko$eFdf|O9qaatC+2ogQqrlHuf~TOi9dcJz;J6uuP{OI_-mL~`hB5a zPSYizekH}xJHPcxV^6HCN!sGDdd!;jj~loiVc|GCQCfTw-)5!L-3{08G_WY%0&hDu zjWrXG2JG`D{RED@spuHaz`cSS#N}*q)EtQKdPMP)rom!4?}7&3E1#;quv#=-BM6GM zR`q}QU`(R5g!R2Hl@w~>D^bqkE9g!Uo1n}vKG%D_!ij$FO%pBKZHjgpk=DLZQ+OQh zq2~RU?`Kc6Zsw)Xvb zPU#1%>%Sk__~iBZaUQ@lQmt#i1d@}-H=ax~JhoHjMu?K^C@*L}qb_9=pps7tuqRZ> zUB2<0rPQc|ce5>${_L7CB9MmZaMB1I#>1`Z`(DnUdAAo+hvHI6US`ZOK3jmVS`5^b z83W?>HL_FUPyN(_pE8?O8Y(e1xsnu#vE$I_MR}dF(0mauD%ta$y9d`+gMOkETFj}a zp8hH{^aAnW#PwjYnp z#*1$C(>UMLh8^MCUulpG*)e*_(X2Cfy18s?^n3?{=|2_OC4HBRyltW9`+XE+ls&xH z{1TV1503|$#TZoGy5aUu*I9098C1Z~a~A)*GHZ_>4~bTJK458#2mCW3*Pbx1dIic6 ze-VZhywxzquv!mlO#k;fy2m4#2Updf#TjkBY$NmIeUjpa;Vu4S{D>Gjj(;Hai$^_d z0F0cGCh4=YdJK%YmcJeFEX z3HT{z$*TT~f4k`jaGp_`47h|m8;SNnKVd}4fBLp@$7Ao|ji8X`S8QK0alr15iQtV; z;XZVqgQIrMIq~QhY3H({d0FT6d8Xq&B0hSnR&G?2 zo@G&?>^9HmHhs-R;;<7{dk&)#oQi{ohPU4kVM|9TNkMysQPLrdBw1$$NpX!q7T&7$ zqtv@wDYJk7%blP-{_-x544LvMdhp)ToiC;ZMkK&qCXG|GpX`5W;-R z?_PUx$h~`;u+z`e4aQ81q9sglXr%Pq6cbYsZnq?G+115xp?UwQT$HA+21y zh0XZsjuuh7vTI+pFrsWbiFNt+H(aIZ*|#kOt_@*&LPDUlz)}1NmVPZrP_kbSdPwot z?HYR%f1)|=ktNeD2l@f}{PGHbWg1Q(Uw1`F5IpE36LQb4GI<;EX0ptwBi;e(Gm#Q| zv_e2>Z@;jfIa~v?mr_KinJ?V&hNhQ zVCzYWE<`m?rnsl`40O>r(5#o`1T(`|5!+RM@Amlw9E4o)mNu(~vxPE7DYPG5t-*VA zsS^6Isd`-G1AU5Z(0<{1<13|mLsw4M!y1L_i$g0Pq>|4UxYx1Y6?D0bM@W9;u7|CY z^bLqKx^%jxH!$k45Z+U5OFT+g?mc^W0>|Al3~v&pNcP zIf=!qSmTryegFJXc4cenh*G$_&E6~c;YN??8(+TQiP)!b$7bV}TJKdW<7dfM}Jo)}h-)rwZRI+opK*(Rm)?y(uj>3%R8?UQxpAIX>jqR=8eK+2^T) z1#Bgi(E-}FY0;v|e;rmd#Nsha`3JXBGc?+$-IJ&V(MveN2UGY>n$iL2Sz`0c6XL3% zy-`m78hH$$YpA`NAvbt&{8DtbbppNO z&ggCli9=ZV)A$4#4LpRUUeA}d)!02P!}TxKac`aeA7S4C)zsE)Er<#>nhMf80@9Qw zgx;isG^GRtsUZ}lg(^h>X(Cms^bS%22%(5HL5h@6A}xS)kN}|u{u8}k?|tum-#>wjq`}X zd9T9_cVEsv%JOq0o^+!?- z)%P*4TY}%%V_2Sll$9_u#3EQ^lnI^W+tgq{#wTe4xqA+j^DKSu4GSu{tBW!|giR-k zS}lpSo+kPO_CrUVBUkMEWv@Is(y=%@#P|9qSG3S+kVsEVe8_6}>P7Mad9hInh-tkD zOvWZs*W&i3<|rp&CZu?^{GFeI=2R(~?C^M8sf6t$tVh!#Z(rd7#Iv%( z=;OG^m5v)(EK*|y(IFu`Wpx(5GxzR|%0OqmpdDc%&QJpmW0%3cjtgTIpOR!y6m}%t zNb?1PBF6Wh<@MHc=!r%>SF=?4%WAOZvF2r0M5leW9f8gq#p__o`DXmVoJ366_jp4w z&)s=y$Gqo5iUz}Z%_ZYy(>d!~RL}F-)PIISc4=oGe|BX*+s1W0`9gbKH~&Ed9ibyb zSklz{)t8@!B~ggw_}8CxU)V0mt$%+ZdNF2DPt56!+m`zr`ek=-dvd zu=`FpA^!2#V47wP(s`Ku8JXev-H$=RVi57>6or~3$Ib5>P$zHW#shS3k-G1+kjh7m z8d{#ILPu?SOKi%@()WmbF8-VR%`+-<9j~By8w~`yPFozDUD=V!-%<~0`DPZ%PYFVN zjQrN@Mc-l|M_${GE)z8g$jy%q%ahY7wfnsO8G{qka!&O%y*5raOEqyQoFnXLO3rDb zrgY(Jf9|?X$N&Uo4%>TXx7;pFoB%%16@Q-*>Gtl>_0h^5F5eQMh8MaR*G;PCF3zd0 zIlvbr_(n89^(1KB$x74Vl+Ntb_F!Rqoc*1tH)_bkx5XWui*+Q8_3qb26Z1khou+q{ zM+ryIWaS*wEjAuBq>pp>*Cr`ENuu{6WwaFw10S>dL|~O#-_HgfV#J{ibH&@ z!EOD%8_y;`SVihkISi4(o@4riM!-f?E`c@;UtNMYGr+TLPFqHga7ao4SW4F?jWSHT z@VX0&*^l2|00SbThK}bKhK`=MTuB!n)AG6g4fM97KlWuQ$f$9wmEsIYousm{W*2qm zo6}loEy5$N=UGTdzqV)!8b;wTlbz0Mp5fBWiM8B}_K530X=x~&G%qGS8teYlEuSe_~A}{o#eLse5ta zHI>GxpAVk!_w#|xkVtk_F--#_yIk?Hw4}=U7rDaZFi7!H^^G0Tp;xE8u_O^E3 zHy^)~PJP|G@E1D$kGYtPJ;K&mY1^)7QbXvn;_w%Om@?g74*v&{RcCZPkSWox$*jWP50 zL0v#0(R+)WjwlYzp62oS+BwD3^+_{-5Y9|3`o%y>zNH*>$%$Jh+p*|FoWtt$)Jm3b zFt*|PIO8;S3R()D7{Fp1a{F!Y;S4^)zwpS?H3#msLQ9B09)6UNGqLgNgXF@L@)}^W zXI+NHbArVQ83J14?&%(fMj}bs<0t}6k|v$Wn~7gHtW~OAXD$OOwzvl)x#SX33@k2g zg?5Idh^)q8!=*4Ruj*V_!Q?a~7MMvu^S-*{m!6NN1LU)CldMh=l!NZ53j0-~o-Z0y zj|aj<;vW0n5l!?nezpUsR0>25x>p+ylC`^5GkAG#J!-0Bu+R{-)b9fV29ZS{lMyph{aO(_CXpq z&NSBt(6b`8Hb-HxLiW{4w(%<5YomyhMo0o_wsPyjH(P@ z`m9!`0UKdJdcjRwdh~R0_nGGH&rW?p#ErLJMa3;k(DH7{2<;ADL%<0Frs|(HiSo5s zm?R67Up`W2Ur@Z=h#42m4aD?bHE)39Jf*5+Q(zL?ZE*{p)hGN6K=qW#dS~pQa=zZ= z;r3UvFbbg6kxyDwi7&?jL6Fam;+GO(yRgUv((}lR?%$ecuQ*ZfP>Afm)P}Q5Uk6}-x(?wonZ&8t-sdP+s>m<%f zI4>}A@(tbF9Td5w(!yRs;h55he8$>wF<2fQ?xpF#bQ$x#%Hg@&(rp5nI@Vx%w_%;# zE1%k={DbBE9ln>U`qVrL5FR%&zmPdTVW+?VehHW{XnFubSmg2@Fkv8L=H^+(eVOa- z^IY^>REy<+npHm(-${+cYWxAC@(^wIbsnuqW!;3fTV)RC2% z!mU(T?e%tAzB47uE~OPk@_a94;%FH=dG$z$^zrP3W19t?CmqUhT@3epVB(PeqcJVz zdxUE^lRd5uC<3f`Tu4|_|M)918}1{2X@Y<%kcThQ!;;^Bdc4#`Hksoc{BZx;C?`SH zu5xS2;lyJ9<`hmrNT~qc(x_fP)H+r9 z$hgz)k8$)aGJAX+3$I3t<~hL4#JAEe(9N|$n~hJpsf@k_n4O*K*eAR=UCIB{r!pN|I4KTBIyK6i67Gc!tkzu~{iZ zTU@ysTlQk{XAJTSYDv;0R-jJPq~W&yD-$**BEA8-0-JgprF@O)ou|%=L=JL9s1D(l zzbV#v(Kc3#+c%Id`ZbBB zo)tIB6~J`}jOQwO=FT~vuLf- z!tborMwV(Y?WFhy^Q5OwRG(W|=26gHpGeStZi#gX9}N zwPyZoU6p6ezM+J?Ekw)h)CAtE(H7enH@`l^-&jMdi^vLVY_xhm9d1b600MHlchZzQ z@uga1KjyQ|#`yfVyn;>uUxu37pJamP9~U-`DazQ;N>mq1mC?1rpY9NJUXY#gXl=j| zSz%Q>!;`xll0R6!z10`~$p8C6F~izU*3I=!V;T?N49+`S6!KYY-s5?Uw-_%(q>0ke zmipBEc$$FkVOR{JOF5L@GBq6q>bPIEp1tB`tEMO>y6peZ)_YgG>|}-@I6#eBW&k^56DzV)m zYar$$VzM|(5OhX%jO|-e{f4Mun;+rzt)Q`1U0pBq`B_CN>?OoalD7&x=-BE8DnTu> zXe!I2K26ysgi=^|iceIqsjUu$>Fy1qd~Pv?p7@)i_~ z99_wm#w{B;S=?fdCRUqgRmTio*Ya~{4}I!zT_sX%V(nfuiE1!>=~WD{&>wR8b=5XbC9_~_EwoBaK5A*k6~ z-lc|M0TGP-NC%OJ34-|%ja5-|6N<;^u&-g9f}F_9-Mn8DTR@ekV1s_YkGGKEUBw#? zT!%;>evL+oqqUwuS|yL#Y>LIngU9EX&j=cwv}vXHA>M`gbhDmNy1?{Ajdz`(o0%{C z!e8XF=Zy4+MJqV)>kf6C-0qZlcr9e$b9Q2FWmE9okLith2at^K%i-{lOPHf+%mWb? zi4@|$6ro*LFFM^RCn|hg}a1g1e)~c zR%t8>r_lSl9vO`v{Rk;$3wdc}*zUYYf3CF88b$6I>N=PKm}rbp_U-uc6Mjq;xKH%m zRC$T@ePuiq-)!vr@j&-$^D56-CblrT{BqR%5`=FK;ht><=>@^EgaWd!TH02l3Lw1? zTHgv0xlW}hsJO$JDaq9&ftvZvk=%3YpB#NNT}oc;9_N=~g(W8VmYtd36w>mEp<5d; z1M;M$tvsa4?jl+bmR)8DRMhdFbVZ`f4I^`a4Tia?>T^++uSsN$fI-xV1x%Y_IgW={ zFm|lek*Fz%RI2V`RIic+qn1e^-_%-b)FNxNQV$Q=D9K`=c(Os?)QvG!=LHQ2uYM)JuBa$c&2 zzwSPa5XYid{;}=6zx<2O8q!UOkZ!}|Oe`tf$!FmTym7&X=EHIaV$D;Q!h={PI4Rx` z{9$6aZ9Ee*_o!>t@f5dLt{WF-oOg?oJj@o!un;4fr#{ZH_TvldnJwq}LR2@K6nRvr zj)E@wwoBMp-ejnP97H)Vp>VrRj}UOkWnl~m_hc&-T2ULgJDEYPtXHXpiwyZj z4;FzXAx{A*b{5~rz|_3@ZI0U*qm2wH>1)|jzH5uP`{r|zpR35I&}o<-5IHBHD}j~* zt8-=ig(|ELBf5Hd7I71nhFPnA5}13oBf*N=Q_kpV;21~W`F34{6f(-N**e=#9XF(1 z;yAA=A#`ES(0u;sDIoE%)EdgoT&DojHvQeoc>33WvnHk*X8|iRZh$%50(WPnS-7=v+u4yBTF_z%&7xAUP)C|AtWR8LfP#%nb zq)ce+X69RchGe|qP!&BH#cm<0WpZGr46dyy_NVkQHp3Qz6C|0|Y8N<$bK7J5FZI5} zO8kVUfD{Ces7q2%OG?tvr~JBeK+c-ZNEFJ4nDD$z;c}IaC70_fQ4&Wh86;Fd{#@%7 zg6?Zi38`IlyqqEzVahXid6Pu#D6?{y^|%tBDT&fCp2<@;_J2b>hER;}-Hwq_c}+q51a!Wg^G1&u4GUF_ z=1H&)jKYGpJlT`wB(`t(0L<5>5y+*bzsq`9F>U6=G%=1`RT=Y}YZDcB>+<}P9-^C*Xzy9P=5uVLHTyCEjyZQ5O;L}0`vkVi9P;!|@=p4OWz3^rnI4@+SQZR?Ouo^52zI#>+8`2>6VYg zKtWIvf5g>BvR8(M%d1mfQEHS_VWH?5J}1-&RW?W6Vd*+7pi-X>Crig7N~+3GfK-C} z^9K`bo*m>;)NI!DUke#{t1#}Bys0p3Nc=$0eefKlxz4> zDme0RyP)O^flI99T5PlXHP5#q4LKe@q1n-)(F7alu~9U#?STIuw}X{%i#jceh9~b= z1Qgt|9d?GfqZ%xiT{s5%My%h)+)5c;^WDXEUCl|sDgBuknPoB)Yb2aIOcL)Ek@oV7 z@i3|pWIaK23LNAZwC+#k zJbak_6bRo7(^K;f=HyZxV6$>vZx;9E_(i8RZrY@H&9Tg6^&vb+0`opXIH#)C5~XE_ z50el=c+zO4qK9XYb}h^XVL{@GHu4_1^r|`pZWz{q(WQde8!0^xRX(#@$=jMT5G)5P zN)%z^wx>li7(3Kn3&b*4PDE!EVg`B4Kv}%xvAl1D-<6)KzWDY^=+#3yL<<)uB)vo!`ed;B`y7LCVc6umC0|rqoSFefWTFpW$9haifCsvM=Y#mM6Qzt89KUW)k0Cl#VGhmce*oJArLj zMXioqs9S!3Lkt~}2??QcuFyx#DL)^{sJ>Ee0O_T;0B?r2$+VVZS=1rMgiKmSyKzc5 z0Tv^QtGOeK^W|4|?)hqETsM=N(5Ay7!nQ}2Fc~LWu1^x*rFW0=dnP8|>CXd%iM1Dj zGWh&*sfme4sFhj;o1wK7W$yHe2eh?^5NS8_l)~MIk0ZFSgVi$)hsO0X2ZIIWiBAi? zo8NsKT=;vloHw%W9uX6<3$&M&-*k^2a1gp7Vj%qej-TLEa;5{F*VnQH z@n7^yJW1W`v#P#TE7fyZYMMd1udFd70V=Em(&ly_sx7P5otjZ6A8Sz7&%cjx%#+iR zJUK5pC`wRR8h<~vs*$9uP2EM~5of*Xbc5Lxmh$LwQ);x)RH?%PP3jg4`>pY5S_fM7 z`}Q@Tjo&(~YV?atg=2XP8|Q~IM$JvUdKex2dAxm04u|%8l>#D9hK)@}P=3?C6P#w# zBcC~&);fn6!7J>g(-YaE{#bJFc-b7s+w)c#$3`dJ+s1VMfrz$Pe&Zhys11#@%frJP zwSHWuyN-~Ew$9X2xmAhY4Fgf%{932st_5jy)*%IpG5z`~Z*lwjBvP!lsnll|f(!S> zY^Qh#ete@*8Zo;v?VxS#pHW#JU!Hcp*uU!Dp8$Y0=y^rJ*0_1n4N~pbU=7yEJ1wV!Mt` z(^qyn5)D!_v9*;KC=-oN$lhb@jSKHNT{DazW-uAD- zCO$UyM_sWF_nfC63{wnStdqF=HVTUO6jL^fhmlK>P z`wIC9quNIyJPiwiP5qzYP@eCB`F{$BIt38@U;2>x^&ZsGFv z+J(`hdnU&x$KFGSQr}Ka_HoVe(s5U?SJ>;ZiPCytoYj$J#ny!$R@C2TyWGq;i+M?_ z_wXGVWG<&)@;%E(QmwY-+N$5^>2-F-?O)CR!h!!WQhY%6>(37p3Z^I{WS96B?|`%< z(}r)?sy9f9HWObg@+;%|-#^v&h`i2e$1k5w)IU)u$tU+Dk2nD3Zd-+c1&5;@4rd}m%wO6f>g9U0I<7h={ZCu>k{}IDr zHqL8WmAO|{>sRVfv%6j0pW%x)Msd1vy6gKMW8{0pDw<-P?sr6cyIN`pFcrY;juUoZ zv_<`KTgFnnCpmuH`SH>w40i#^a^1;2y=3J1$WHBp8ZV8)!^`>x*cX4#bW0oy@Q|p+ zs7w8QH+6&0kgpwY_ix@Xvdwf{&P^=K8U%V(?BS&|}`_&y+$W+#|L?j7EyeRNtiT5VCQvHdO3+M-_2vct78%fRV_ zp{bj`RSf`lAnUu10Q}fkgMW%8{PrO4`xe5HjReu7O~BB3;|0IZ<9vr2;jQZF8uo;T zS;#ObRua?23O_kLUX+%wvQOlAH9kF|K7NTG;S9YClinGSpENr?95oU>GBS@9$pFU1 zeMx--&|w=n)f6`GD0Beo=i-Kabogow;J59JK<9!0KLY6R=D@EkACL2OD>t0uuUl2Ec?4Up%mS1F(;DS$Mw-5E)C=y_g>U>C&1B z`$-^rgUYbAhiwjMAp%sJtxCVw94i7y=6!&~bHw(H2zlm9ryHJ=&|`ThuEED1zl)|iHw#SS%Qx_N)%CqG1Q2W>5n+8RUmaL|xWmap zX)9=Y@Fu?cGrCeS`}jJpTEMPXzhY~pxV-F$5iqaY0J^EJe+O)sHvrRWo7#`(XN)^?Y7Dq~gYz?r9Mz@62|q85rVfXw}+58>iIQNx(01vIkhR zMvQVcb6-&g)MlQuFD3ztKcm&c+Y4kacw;~p7Wle?sXOjuuXz(M{OH~Xc7-KPvDsi6 zt)^ZBsMmaqGSWR}4`0S$&-3+J2)+B#6kr59iXjeXJm^xk2du0&+~B6|r+~>Us&VEV ze}OMvS6{N`wVs}|>Ck$*lpS4$3lbPtm^tw=YHmkX?DjhORT%>gbj7yCX-3*Z(A=Ifv~y|LF(8iduXV(ldZywf zvAioYW}mH^%z_vKjPT)gBPl#O=u5=a%0&=5!%@A{Mr}u;sF4)I`8CA+(^>5%-cVFG zMSq5?LL~>`E=pN%M_C30=(aoK<(b3*!lfSnsO!J8IQuxPc1DrPRBt<>`JFmATH!06 z1wjEiyy6*7=|J|F?Z8WXOZe#A70<*p0KT#%7xnOkR1#CA!G>~$^~VSO{$+%Ti1C$J zQBF+|A*uM%JNt4(6YxNJK*~N??}FK-HUJI#Bm}&jya9L@l-H#C9WGDeeX>`C4?gt! zmR+=VI08J6bymFqhgLVdn=wz1#3rKZVjMydZ#-g1kl58ho5%#bw(Wj_(Z?CC`=Q&v zod>J~?27)U9(1H4s1UB%*iq*5_3xwQy;v5y3LIolzB83cWfCm zJhYXV_C;?>@IOvZ#aDVkq;;ZdFryP=d-x>l)sHqi*^F`5A&p|^Ta5lS{?mD=Q3;g zfi@{PUAj!za*dxuv(!wvO96S0KSpZr+q2@@TRLx-c$%uIck*>!;;;t}h%vT(yifOo zn?GjQn|fH8{~WPE)_?lpZW8!*RNCKLOFu1PFcm`ph+9LL6Y$Q$PQd+wlYoo=pt<{< zSykp*C@h$rA(BXb=nIKDk+9rA(w)iFMV8raCyUpGpA^0tHeurDg4tkP85dZzL>Ur5 zr14H(H7yLfz5e^37!5Y>TP$&;I1DzfS@9QxgWK2xO7nCnL$H9mFn7e~M2)q(k!fTT zf%|O_7+&HZoYiX{N1k%r(MzAJ-k5i6$BijOP>#ubtBSm(4buky{LSPn-TjhuI(gWyjXo(v8PY@T2#!&y5b zI|04CxhogYB3~yevK&DUyO(;{$p-!fld=f>D1doYiq-rb#ew*V$xJ;{x02_DmEW-< z$p(mBiEd>@c((DeT;3`#{rXvVP((K?Oh-W&eVKf5%rd%k*|VO!kysDkPD2z3Muvs1 zFu8;!aY<^)TErcPIt4Qh?ZJvDj)|Wr)I|HPSxy3vzk%XyY?Y2UxFj!ya)sD=ZQ7|B zSC1#;QH{hQgpXBTzqC~yh)Y~XA{4_4h-9<}+E*0JOVnjom` zO^s`owYkKhO*Vk5N1febTY0qq@mxH)V9c%i_t{-loi2*$#Cotg-LD}(B900a>!zwE zh&riGf$Ib0jF#b667?6$1gcU5yh5Z+nF08(jKvQd055hAo|5-+rL|gtIaWl(0RRWw zUo^_;67PKfa{LWem>ngykVi_PJ}5lD=nx&zKZbTYOy5J~itf6wG(dkAF8_)k1RBW% zPJqySXV9qPcVe4vLlk-^SQH|IQU7M00=2&qCIp~Ny-8@C$_}#$#p_UE&{;$}P}5*+{4#-FnDFmmF|HM&z#DkJ7*Kz1`;o<&Xqc|`u#11bWfJ_= z4(?`Q_*Z-g>L>Y;JSTX+KqxXvK*_TL$ub)?BNrhwId&b%DD@GO8Q3wQeVsBNqChG^ZJ#W%nDBR=j*miOY(E#rF0ne*s3^1TD1+D( z$V-UJ@*2Hew99`OUb;Ci4GYWv5)|&is-@W6n4}CQlHTR~Mqckc)2l2~6U8puZIqa& zN=c5oW{oXmtcc*`iw0_q-XTa~aEj5fBCvu+E0;^cbLDFty5lQ~Y^)LXv^C@fB&i@h zlH9yF$k|<{5<9h4#=eu1XjOCFe0)?n!lN_3(jOaJr#i#7!$s=PQU&J+N+was3Fd3; zvMby8>>;)58?`-amT1fa2I?PA*$=~pkf&^A7I*VP*MU}q^M}1dab*4OB9}bJLt-|A zRi+Y%`mlp+TXDIQ#P8d>0G(&$MA>EjY>OZ!Mp#v+*`=m%R>rBCi5SziO>1ca-Eq8+ z|L!$mMYCx(>y-2TngR3*#_1Uo^3BulcC18}%dy6!@rxxGqV?NXM0g{m+Itcu1CQxg z$GF2Es);SA*f)TF7GVF%cmX;K$l$!7AI9ka3fYG41%P!z_lF6$a`!|@6$vBYm&3Ax zC3W*jo+7@7-Uscf3v#}vsB>8Scwd2yk7A!#%(5rWo^a%&VuVoXgolL*W!uJ>IcSCg}lHAg9)SyRqJ9J9tii$_G=!m$xgnZgV!~ zjkC2Es6u_Fw^K9y4M+g?=@`Rm@VxZ$%z-uuz6BN+tZbdx4%`z)P{Jxr=1DYn~Hm}Sr z_zr=DvpIjXI&Av~R90%Os+1&JisS>4;`-x>dkpB$YLeB0v!wDCIbN3zuQ)yFVfU;8 zodk+hTt1`ukVoDxuMnjaCmd-uiRfAZlHKww=T$?@!1uM7X0MAY6gci|I*$_Fy8$DdXwClP@4t z8e%1|%=vl(Ia{z?K~ZtQp6smzWz-ZO2nM#

    }J*~RKXOv!FCk|VYf8QPgoe1D8XrWD%lgWa=yRs%q zpVq6OdpytIWjsEiz{E{qyC8dw&G{m_fXCSTTr-DKrM~aE3Is+ z!_UU?`P`XRVX0FO_@&Wv=i9R%c)`du#xtV_ysHZxC9dm%IJxEv9nrT-xqk6XpuW{RGUT%#k5fj=YQlRbok+3dKAnR z#%tBpn5GyHJ{K+UJ&a?5`qSKoa!yobP_LIa-dFQCG$e#VYLg$GT>7&IE=S1F%inws zRLcIHAwSc2E++55f_clL@tVc;Ek=Wky`C&O^jUBnU>(wUQ3NT*#zsyVriy+G{xTGk zv{;I2lh=ilXlt0?{VwR1A)_e3UZ$$nRn?It%$&PLNDsL~v4(I6HGH?c0NNo=?A{Ax zXQ6lb5@+2Sd#9808hKKvwZ^UOG&1!k!t7~FJWi05%Al6z*!*Iyd2|u2&I*tfn_b@^ zjt=xH4Bu5~+)C{Qdnt^)F)($}=Xa-Y9_NJ%$a14R)wDJvCw>W<8KkiPb^4*>P50 zZC|mwO~W##O$<8xkmid$)#~sHYZGOC*z>#tO8KqF;ao?9cG7B`WK1ptNJ4@wpqpAL z;r522t92rFUZ=ZZSiE4R7s%N!K*lB=T5F_f-w@RJhnz@Rp7&)xRa_kR73j_|$6uwUNbD&<7|xNao( zsY+0E{rzk$qmJjJd`Iz_j1MysmckkN7r#rQFw3P7R6_qhDufb9sJ;6h-uNahhF+@v zre48IB=?ToS-$I2=arMVi#X9xUGC|5N`O^Di5Wr-jc=5Xgv<0uye7M^%{qLbIS^MX%u13AHW@|; zk)*a6?6#VX=QUVpbG}alp0dGp-ScE#NG#WuBZDkS zh>+;kS)NwLfEVwU>)5{SSDOha)~!2PB)DR?SAgg7`;Zf1#(rZaE&*)29B&z^VeuN1 zvUDqoAOnYZ7#0}Jf{upj53usf4 zO&d+15QiL_XvF37@#~0{^4hgb2i*kRghHbrc@CA)IOfJgwX0R_fRhtygVM%jmt=ix zngeHN?1QzHr=!hB`e7^#SIv5nQ%^fbHE|1Yp~xWYR(^W#jW0*rkZ;B*uln;ka{Ze{ zAW%LA-^Zg9zAs0Fg^*8DXAa3mo+jr|3*N5mZHSV_U(*0{5jfxa}a;X1oNlFpl7qCpFeZi z{XyCOkGF|413{d)T|v^{l@wtRfd%4-ZklY}tJY61{yD+^?00_^+DZ|(S-KwD z=0E&zA9aodD4q-yh}Hjn?EQWI{ryYJj;#64&SUG6zf%U!CJJg{d%eYSQPA$N?j)ra zNJn&B)N7~Z^#TB=mZGdvT{>Ls+Ps05nBK9Z2c~|5mj>ZafnuQ7l|E7@`*W1>loSJH*s5~8tR&?2`2MYUV!3i*rO56mN^TgS#@Lk=_zb-ZD zJTciOfG+#H0#H`J8050Hb%rn25pW7EK`#O|YGbC(AJ0t!h`~2J4l@a~T5H8~7n}I< zQ%B?@oArc;7GaKk_ZCx`W}~(DTh5ZY;(I;XAHSdi*KO|su!TPJ*G1qj5BJKOPYx#m zis6n5y1G%V!2+ZmM#-SkvU<~Xfzb9En*(dItbVSjk@N`Ce z=NmP?@t=_GL18CrG-wb=GoZVa#qCsPK6GbcD1X3F(-q(ynz_}END9{O|GIy_f5vFG zcuKS`-QPS{=>OMEQdcAlZmsGQFP2y-$S$h;d<{Ks1SuV91Te~SmZ{kg#wk;ut@cSZ zFy@WpcCYBB9{{Gg13h^huHOJKV1IYK2yqWUw9Acw25X%pK|%UqNuIdfQ4h0YG*ts0 zA<}nUkUT`zHo?6CeAxI!7b9*-c``#?7roQs_3)<^0anvT!|K)U{A z{i^|S&wm1`tj~)&Jpk;($&ZDMHK+2NRLF zV3XDjs-_<=Hc0*V<*)1G2^9~3XMxoA@HOaB5|?#XFj^kr{h#rQHVDV}-w4F7XG;kL z5O}Ojmxz8ZS9M9kJdbJ5xyVT#@Ybsh|C2@kqW3DH^Ve5M$~H$$o@vwq*s<%;MuU?F zz?Hb-o2@kf+*3XtYi4+lK+tC`)2FC$?w|;L?oUMJHW#J-V1f zT!T?S|GEaCxn&a)unjVu#5bhdP~`X0*#qXPnKh>j;9(|Jd^pcp`KgrQid>@ZiN=k(# z5~&fge%%I^bYbB4g+#L{d;{MVyx56b8()Pyk`h~ci+M=TCoqR=Ij?-XI*woG88FIq zkxADfZng>RhDURQu}k}Pp0M@W>84oGkGoXO`-&dx@KNMCusUpO0qwRyzox}}ZX(zy zKWAHY(y?K^9`KBAj>>QZ8m4aS3~80uP&^|^LzsrWLx{KAWO(%f${;wn101Xa&IXB5 z0raGJ(!H>dG@g0OFg@6doOneLyxn~5loCSXN7=Hr&$Tt?tu+qby_ zrNDW?7vF?jbQellRkhj3n()e-#Q>5w>%m$>y*P5I#bihsxBCe&1FP-;qp%XDq7FPp z(nj0!`u4nocxlokZf|-TTG4)E5+A0mq}kiwBOmdD;alap)qmJrWBGD8ucJ!M?rzk% zgXfFlY-o-Ev+>1^PmCwdri*c%Jms1U$@o^1^^u}ebr-XdT0oXCZQT9^nB;ai*s@#5 zcZ>ImIj=rpQMI9&uiJG~SPF%%M#JK{BF9lv4^se&+;ejRdixa%e36>Umpj@J4M>_? znR4KKoeoIV^v&a)z^!@}3;z&s5C@QJGBIScBF^R<{yva|NyyHWzEGhSo=h=ht@tYB z40)a$sHs%FD2iStx<9djO7#xcC8N1}pM%iQiQw zsW|`qPt=LOet|&}y~o2E3cuw4Ker*!D3Pa)m+oP{)NUd7A^D}SXsNJhgmhRsVTE?x z{2R5EiBxdwlXZ>scgPhs5wAiD!B|5!Cw0R7A9#G&OQqXb3L#diVn5l7CrI4v8{On! z4`}FwX9rw80`~HK*Vwyj3Nawi=tIj$?pNI5#H!T#FG0i&M4DNJl_V)hSz%uP;?kNT znCd5~tURl;!*f4rUVx7(zt{#+h*uH#PN4b&x05eD*|-jMD$ck-=PYymp~gsOWg|SD z+Tju5R23NM3Y?6?hp(yt=VxRg4*v9?C5QL}`4&O4Es~l(Gcv>euOgS0VGbD?A!#`d_!Stg>20VMgojk!exdJyU1L99ev$3VR*Zs!uE*9Xb#3<-ROHFn*A996 z0PftZwwQ|lp$M6zhFh&W_tr?YKbnt#nhIQrsYE>ARn#cm``j}Uo}<2MBVi3P)Yz*% z1^B;Bpu4o_$imsNHH|%x1CHFv`{2FAKj<#}C9(wQGzJ~S5Hq>`7Pyfmi4%ps0#jE5 z*@(Vi^qKoWVYdpK5InVjQ|R#<KBesr8{c!*te$=TJD_SfpUy8F!8|Fx-FpcI)&scc} zMyTdiO&hPk5-8Lg-A?fAx2e+e+9LCMkVFa4PNTuA<`BgXrL=$rpL`c>E(BMh9I7-T zA*BzTQk`6gD|ri)y$P-n)NMH&ZT~wIWQ}QwxIphZ@DV3^mX%y#g$`KF>y+=Y(;&dx zW8(#@ZmUJBJg}}?hMCQeWpk>c@@qeC-+*r{0*treXkRr$f#q;=c3#K!8#W6g<5(t@ z9U)#Ep6v-_${eCe{zZu7;__Z+03ER>f%*s2X$;>6a8emXr#~BO=|NyKcHImIax7mF5*|KG+26MlcvATsy796yPd={ zV*QU1G7DRP0R*DSRb`3_?D=@HbQ>v-my$w)JU_;9?NEPS#TQPj#wSno>t5ruSef*g zp7h0&-Z0?7Pv3>^;ThW1Otj4hg58>?!rIXk&1s%G%`~J|;hz{E!0_%8%uQpT``aV4 z@11d0NJ?taX?X~Hc}KvHyLGAUo!U1bCM{Ha{`{kSIJICdA!&)HrUqB?&vMN(nX!90 z!qSayX-O()b`1^z_CMQ8#i(|uCjtTbJo94oJ6<)|s2=%PU7m9vZnu}0iP9pAYhGSK zt{|4O!tL+X+>}vS-QV-ZD-5!7+(0lRd`DaT*KFbx*BiA}k_8tcF+lfpW!z2**-Ggy zLWiVb%BMd_H@!{84i-%z8rDFh-MYo3i(C@1A z(omyB(x|pX#)`oqOY}SQGolY)gOh8T<8vKQp4Q#XjU$tL*f^6Z2c4@ZTtZ?sdWG?;J#S#2` z>-)AGHE+;TK1WV#7y$W@5$dJ@schjSA(u2!x+!6s)ML32j!*53j;C$I)^&)N6Vk&{ zBGh_C+xsh$_{6nl+KkeRGp{e~-(_%ftUr9nl`a?@F`DsK{S@8*`r>p}Kv8tQ)9@Hb zB~j8%J{M3@CSdt>M*ED)mz2CA6VfJAcn`4mht|gb3eX~m2!r}LX-R~&=>JQ;sB{}2 z{njk&ZvD^f?|1eIx#INScwz zI~h{{-hKah=kS~H#Q@KUsJH}8$^SAT9pnYAwjia>t**rX>&ySjmdRz_HN{IoBBGur zXkPy>pO!Am1c{J3tL*nbFY_Ol58SA1w4gXe@;$e|^W)#M`ez7B>;gr5%1!@q-hdBm zxz7Zo{%qAxSE&EuZ~is;zhHnLmkA$P?%Wi^u>Nad|7)tu*~oy}o%^;6!-D_$O*1zE z<=g-N(tsr)$CDrRe~jceEHOun#{f)&zq*KF*#GnQ0fS0<{PHGCL{#ug&HuKf(^brO z?)rcKNkpnQ5GnPGS&9xVad}U?Vca|ThwSqob4Q?zvK!pVyqoFL|<0ISDY6NWrP;?1cuX zE(-`ixaKhF6bBmXpdT>6P@n-2*;FQ@J&vT3pjycNvkn(f)6D?B*wX|z?t#3MWOS1L zAAuQuAObN&FB?Wvy4KQnm(K1LMMpMBr%kQ-BMCID2{x)2eRnE~E|{m_-zXMv(>f`W zcCuGszwh(7YRQ`PzBQe&B>>1p#KuBMY-(x4K?17Y|71JnbGOrjHO~^_s(v!Qo&(5mM0WjKrRemf zwP73NBkN^w@KVReb?H+Y6-nG9me6M*5`K5#2AmNH_Vw^2VlP{Q>DD zYxMDIGkS++YhG8&-Pp0|@m@d0=Grs<66jqZ(u`DNm2O>*Xg>kk>Q;E8!#ImV#gEqb zZ;yjUB#(cvx=p`aZLXi#2{%hO9Kx96s2JDt!Lfveg$TZ@&l#>1oGwj4&j4Vg)s{qiOO zlX|WX(}KHtH^Z@eBcHkCB`$-0_}iN_J#=5NR++9fgEg*0Ql@nWqex1FDsj8mPkyK| z>A8pncc)|14>$6sg6O9kYn++Bmgnh7ulITz9ZC&+@AK#fk!oI{g_j={4i3(};#UTX z4yjMFPW zK^jC#xgl#T(TQ@V3>jWGs{Q5(;`&-42||L>psx^~^~_kGTJos&2Wx&2YMSJAHJ zJp3$}H%!7qgPT;PImfUK&N$txT54rYP4WsrBimx771eAh9C40NPVWR&0K{JufFAIHt zd0Drgf9LMd)4E^5CM0{b-4p_~J3dZXV1hFt`;{AO*SB(_>ZIuIi@_BC!-8NPWN!-N zEa?He$dS+e!<5^`xS{!<;KL_O$F=QeLx)#oTR+xam!QB*%MJzc9^B8{pL{nEqQ2mp z>*s@6303)6ff3IRpfd1!q#sxsjk|%=l&T5d2(Q8VF*Kgwamz}; zbTLZo7Ysx8p2gC+Gt@CVTQ&Vt&pNpdA7sK0w`({%ENODANyM z3q~pFL`0lnzGCU%2(b0 z8hluY{6;>{9{o2MPhmC^f5Nh^%O&iu6sPMowIXku_9*ZhE+*H$>1kX^F6oeKcW{O& z{-Z-$&55kEonn$Nn9cLs$UH-!4o!9&ED^;xJqC%uMbEVQuilDJNqJN7=MNW$scuRu zVh{Hxm5I4+HY>SLhy71aZ9V#l?~jQ~vWd9D(3`MTAN1|vv6OJwd2iepII27;$o9j7 z|21#@0Ba0Paj-iMU8SWNl05Z+CEPcBFD=|3Bk_PL0?<=DuIH9_GZ;)jC%K9$Yj^9c zuZ?>+E)L$0|0U{BjQL!$7PIsPbxTvSm@f=Id$yrSjA~r_lu6!}i#3gl(?R0_&(k5}aFfq} z27%?-jB|zFlh4ZCC)T=bnlpiyUkeq*rNnS~x^Mb6FxuP_3S#-V@$1y#9*3@a0kusW zeu@z-wH`$l{pd$j9&?JKyjL*^bKRKKaX!%J%Eh>wx?-5#Sw)B!UeL}cN5^#bO*^Jpg3;kj$69gGA#0TMFGyP4QuRyvkNDoU9Gxv79Vsx;b}1SB3Fz%-;x`VqgHknMLEa z1fpOnS51q_JXwBt=q*^h9e9@q;kXM!tyCsnPW;@Ly3X~ogh`>|*3j$bkN5e&;4u+1 zP>_yzIMncLS4-;l$_7b@D6-7!x?V2NuQvlH%Nz_i;QgA)Dop?G?)#cMbU0w7Jz-hW zdqxchV%xu;@~q3G#P2A`Br?uJRz3CWYtDOq+yhWV?y0>4|-6TUV zj$ERmz-^5~tM@R}7OluiMFbT>0{;^U`D$%5qCIQ|wd03onc2*o@!O?NOF#++>2waO z`V44tmbCebplaXKOR>I-mTbK{(<jtbz*wM1V_ltiji;g?=|7P);i7SP}7GYy>7lf zlvdKfnqQShM=(0b5<$7J>D(2BI5P#`qUWxCH}LI)+AKKX^BJqff~P36%W{!IixW zM6OlU@?zyVgfmZDhK2oqpB7S}=hPh4ofj`Q?v$7VI@dYdDM|I*+HYIVvKEkvkQinOBg*IbY#!VdH}I#)u)-` zHDFRES5Dz4Hho?((24m$v#D)Tc4m<5LMWnYnBYyNaPV@^B*sYiY1%+=l_GT^xq%Ud z#T*O~@+lR`TRWYYG8FW4l|od{+P@S?2EM4f{f0QA@&vIw;^nYfxZ3W`Hm| z>naLg`E=Q54gqXl3fmWxoO%;_gaH$(Z1wN&p?dy|ye)J<5hAR8;%~MN+`DzH-M&j_ z)s10ug@!{$jMeH(ns3^(fXnlBnrx^m>L2j zd;6>~h3qj|t>B?QcN?_Mot=_b({))A$tVBwEzce<`D;S8jiVOoMC+c!KEfBX4l!>c zgA3!*d*Alk`Li|G)<9{4`O86mi=S7CgdG?L2C|_(W)!+Vi#uTIRBi`ca%=ZQmiKq- zFxhZM)znyWIbf)yKf{Rj!L(B7rMOl97tzm+u3HvIvVP4_RB>n5q6s8(14At>7k*6M z#Y7uhl#OlRN4bv z&;~q@ldY7RvzkS&P>Sq)w>w4Ns^&kq3=pc}L=1(I=Sl2kQtV701kJ`oCC4k^M=7$@ zDd?8W4LKRCVdcj5l?ooGRhXXz+;p8XqdaVNzMrx0XrACi*x4GmSY@HZU{?!*ADnz^ z@b@IcST8F;cSi47Ims-EEe-m|e%ElGzT*W%Ns`RQxc3&L|CY&l@%>Q5WyAgM&;-i+ ziAiOxJJG*8Z8Y~3qr4LAo1P&^2mBwa%`x5LuIq7CahGUeA`m$IC%9`;LwY+Au#4#&0}{zw!Q zM!tdjt==yb<+rg|x6yV#twMAhrf=U1P?0>0l=cfYM|Lo@oDfMq9Gy5WUP}X;=|>pu z*(fc`?*CzSqKCtiMH|2HcOHH91jtbNeajG}r<;=M_@zBjxP{g)(hND6e$@eS@3dQg z0`L}>uh!Fi-ATz{mTl(ei)^&a;80WgvS;04-cI`CD>xVo?qJG#a?2Y|y*8mM(Q9CL zPg@saOd|)j*O(T{aJ}} z5GDH64jQf%eoQ30lVie9#mPapnQiLcu461?<yMnk&h!X@b4%_q z6p((Mb*-^b_P+DFDj9Ep5A<)pGmuc!40yi*b30lz^KN!q5met@1IyH}HV-q_!4^$| z5oeLCr!JPYhxUmiEdv;rWFnEo(-}D?NR)@MToeBbbP;u@L7v_&iuzy>N^jCvVTQvm z6b)0Qg%+Fz>!&6L^TC~Z6#H&md!Z}Gj4VG z!%6j}^IdBfG-)AOPZRA~(~p7hW(A1?egtt|zaWTO*|GO4d3I3uv^1aV={Y9zo$vKZ zNUuvx$o?-j$rR_)YIr~9GHoIP#m-mvBCgb`@N&!j%x82j0y3o(W>c%wSKgIRsEuR_X z@2XHnZRA5c7)rMar5DWGfcN%Xe`CU~AOzMG&U-DT3!_@@7s{jhgrBT&oDh-xJT!@< zRLV65HzLzxOZ17+{rL_Wjhy<8u)?mr+l7UPJJ&oa62o_B^jBTZ@)jHPR|)wKlMsu+ z`u-ClqFG_*+Pqp!7C-2T&mxwmR~v)UvW1bE!6n1*X&%#{CWJV5ZMJrq`Uby!jcNj7 zFmCzMQdo`a3j1&8dvx)bZ@p6jNlQIzu;v+77pT^j5MZY-LF*3`tJdkn7=w z{z!Xzwe=JUcB0z>+z!N|MWf^`t}Hh)j?Q0{vSjtNO9hjixl5f0Z3 z?LA5;BJ0`!cgf%o8(~pnW(zQJuQ|!Rh3wq^>vib$S}*Wg)pA~&K=)B)-6Lu`68TWB z{!m}h1>1|dMAQtqutBgNfz=C- zWVP~qY1%5K-BxQ>mGI}#GQfC&dw%Mcfmr><+-KAs61JJJlm&St)_M%=%BlvPYz!kga<~F>HMfI zIZbRIxB;g^v*+|+d3ZQ5fQ?+aS)9`4rE(@jDoz05o#e_23~+HnQ0B|Q)xn@kFvud++T2?A70~`S)0`vjQZ?*j(>W`!|#mQpkA-^vhS--Wc^0zGa`A*=} zqB>bx)4Xr?|=IH zD2Y5m-=2fMLe8TQ@4$QkV@|kd>-&+1HaC?QSEb*4fpeO&jW6=C<(yM5KAY9FvB2(& zQWlBOf1<#axKeyORkfWq6!Shd93fHma|4CiVd!zoY|Q|7=<6Dbsl^JMw;m$ULF7f9 zm(Y)mur=P3CtkMg;(}r!~(H!j{@1#Gc{15j}Lsu$W%E4d|zt zSqrDD+|hdQl;~nm@NBb7dk!su*s=o;N55;!dYP2xgC1!d)zM}%*c9@7jeNvUj>n=% zZo&{pH=GC3D;5y@;u_f7hT`}4!@vY@-G~YvU~QMOKWjuZEDbd~adxFX6$b{%rJo$YKF!b-e8l?+l0ZH@O2{LI#*zP53V-<&C#Q3iulwdgLd5m(!XwQpaLIhh z2ZL3AhW}hE$9t2Vl;3?i^mygAtTIPJcL0niPx5(@5p^jV_}y~wkUn*8xCTC6jG8~*|nu` zNx`2j&aGnS3f#!@l@74QZz(X!dd?cq+47D58!q8&Gr5+gI*v;t;+H=CJPx)hv{8q~ zu=XRPpe*{vR*62pb@4EGP_I^lIBS@2f5>N7usly=z}lh%NtyP=$OnZG^|u|vI&rSO z4RwkdmM8*^XL!D3A5yxDgujL#@w$hZQ@qu%!z}8}b;xFW=E4br&p#6H(maj+vphkk z6t?Cz?i}!o%pvxqE7%)e7BrXdR}F1D`pI8eG_0Ooe}NH&SB_N@`MVvFv7#>ELci6i zD&(f!pyEhUsSHr3-P*q~*zj018m<8_uKW6V$akzINxO<~>=hAQ8Q@Akh5kW&^UA)f zeO^aa(60!z{$tZ@$cOrG;qNJBsYx!q8Gato+^CIrm33{+-F768`Ir2Eph_Ri>YElm zlxtjVWAd6U7vI4R<9rJ>M)oGsx_2T#_{Z?g$zMzE7DGUcIubz2!BmZ5lAhndn&z?w zv3y2@6mLDmiJBgB1PgURf5S1%EB8KO{E<|U^nX2H&ky9E_9}ar}{A1~_q-cAR+>X82Z1^z*qbMLp^X{4tHW(t*nFv zA`|@uMK+k2-&R!!;4Z3uXSTby-ABGJMk8cjzmwVR6l%2|^vV3PYn` z_bQ~GiBi+3`U0x3ySYa0U@56G7Cy4|D-dQ6ys~8j1ISyff!haeNrgg-k+(Ii9Vyfv z@#j5pivQNVvppXRk&7*hvDo3z8;GT)5&CODD}ueexYj6e-D`YVcd2+DSCB3%j&gNW zTw{&2C(y$?a+{}=xVmZfVxxXI4D_}6bRiovu|f`kgB1Sc?`C3+J|8YNxQF$4c7CMr zWB|5i-7h+E9pRkmJZDapd`gn$F$}dZO)(yZ+hsr2ddqeW{-Vpm6Fq7m%}n`;mDFG4B7c(9SL>+L-fHg`!YXNG{buwqjj51@iU>9 zOR$DlCf5wy)yA7dA}Z=_DlXev94aomTf8h$l{?#^#_fit2W++-kG#n3M_7Mxt?Tlv zL`t>cK!2uzQA>QcEEK>qyl@XjT%T!$cXw$rU4J=Awz)I~U)-G>`3$<(K^M6!=761U zkh8BCk!JXXwf$ePl3E zEbG%>hI-y3tilC?1r!75Ke@T9R>q%moT3aCd55df3s8WGeLBXGd}#wPdP9@f$oWT1 zM{MuQPKNR4y!b71Fsf}E5g;c(MDOA%6Nd~fwk8Hi*Pzy%Yfytzp_St2sdd?&o^{fG zT(2uNVj)ph!M3TZbOXPJqW@waQ=va1@eKVpLD1{bn9>_Zm!KUDM#9LOEi9SEbrN5e z8V!IM|IiRz2;X}0zUNGG5DZKVen#JyEd#Q=tm#kT$ z{JCgNyvDL|_)Jo?Y9Qe5ez}bhzz%rnN>p$4e6T%-159C1TaCj=q`6y7{m33eZ*(X! zMUV)$zbwfYZjBX54*SLQz%t}dM`os?{o!7n^D)gccA!AWYrd|pYvy||qO&>B*9CjK zQ2BAEwY<)q&UU|vSsvkBK<#BJ8RC9*|9*0}6D@q4wPoDGYyW5%UHz^qYiI42Mg5H0 zdz-Q!z;(E|Y$o>~Bf4UMU zh-drN5N56Ih7=3gdP&GnXc6I}euIkPpP0Y`$bAN~@H zAMKXIH?J!4^R<|+_IEA^zT7qnP0m`V$0_cu)bE;JrYxB)J&3XMvOgV}>7BVftrdX$ z?E7cQ#+2h{_*p=V=2Q1oW`APB@S)7*sNwl<& z8nAY}TwZxdB+0=Ia`rcAJQG2)Q(i8WxkT;l8F6x={Qaol?4WbpBw=JO!$vNOaYIR6M@_Q^F*wM_}DaX(|~~+p*1<`8()IRRf3DQ z4PGY=ZagoJLWz!?u%8tlnA6(E_cXrHp{=!680o^~CKVm8)`j4cwo2(_GxC3xzookK zJU}A9h{OI)h`L>a!;4w7*BKLktJOQ!IH^rZfzJ+1o0{`{YnP_U$mb$+%td*W4cvx? z%sz|&D)JNWV*`HN&@^H?AhPqaNNb&MpJhP2msIZ0`Bajn8dF_s zcs35jXBPZ=yPkgkUoQ~9fx6_t(?meiGXXMO`FN5vS;VgN>n}}@v=@@6Erf*Z*kG*s zULqKmJQ*t?7nLKiz6FBMOCCs)le+f1jc3HjcleNdLK~Z5!s%dpr#0})G{o#Ep^B_; z6iZ0NH{8K?dMoIZU+4bH^?yuH!%3LoUnW$jAHHkSWv+4u_<=YoiGxb;YC zvwFBB?+G;G+_uy7ii-{}63ZIa4cUxjSbB;nvQeBNP&)Ct^xO=jqWHe49CwXbK#=9K z#h=hXDQdGr`)|AqI6coZtKI*8E|mv48I`#<>sO(GgXa@{D*MkSqM3UJRQfg7sL3HE zbp21y`yP>awmE%+PxjV`Xo@nN?}P6%~)l$I(GByjEb`-t&}q~Y1y?x;hc+u+YY*) zv#aH-j7^i!7RK7N;z{gIP>bjJkkp@i_4&`MQfM4GE^6Anzm+oV&042B#+N()_1(_d|R`ECdlvhyT_&T@L-voQN0<+j``E z&0ez)ZC&eVBFq{Dh)0)uYim?&c<+FK~4odpn}Zfa#>OP8R6(*?ocC=2V=UHEuX8T zj%;{BcdW#W!oVmxn)0yI`EKB&cFxAMR|qTZwxIQA_L`Dya6-^+Lt4wT*g{TL#w;@# zg4al8G=Xl|D=R_;NQ}1Jmf?)wbAkYTR%Y~HSX?M9XG9AUJYua}RomdDhKA=HVF=J! zPL6LHpD%__lYd1x`=uVdy!lZt3IC%N@>d+5)1QaW*WF3rA#mQ^kT}l#>FvD8#|QEM z>R2kR4~Xunoomi3&6*U%pH`46@`Bw)W&5*NQxx$U=ysVN4quk3|CM=*;|P5HNTE6!?+zh;I0_Ae?a^^fntz>OGTFknO-|n}EvOPdaaN$&YP<#aUt(b`HOP(BI%t0lQ4=e`H=KIzZu9?98KmM(-uu3m}>Suk-DAB zqM^A>LQN?EqN~c4=Oj$b6tY!vaPntKbS>ukwtf-|?DNvU=iH-z&PLOOJ95uY!08-dJr8&_gmSQXV(|*%FcJ5D zsU?nZ?f2CmOhFUiLbxkXYLW9_&tS~FLH37N+x3uI80Rr(_QRaQL6sirQsrdz@~yMl zwy$F8{ec+gg4j8dxjvWvaXWHcxU2mIB~)0__31RadY4#ZUWGBREcd0aN@;>~o*+hGyiuo3igsT!SrIt;%?dD8C9g z50}WSqD`aXGvl6M-DLulgdWaDk(9hTzK;LoHm|d+Ldyz2OO8A@vHcK|b~D6~*QcsR zXC~sfE4=AAJ=3#pb2B8*xj`O%F)^s?QT*4#Ta7JXAIz($*>&F=~3`-q=OVW4l#g@yng8!YFmi#d~gS zmZ12Aw;u1#Tj&HAHx}+*rg418x7Vw8r-@qVopYJ-+~P; zfSx8k^k{q-Ro{e#S_n}0CYE=3p5&tVnhw7S{Iv#NGh|K%yQzcRu)?bG(X@2#6$2|Q z_aUE<3T@)l5URJ9ycD(gZFD|ujSY05qc8>`Y$UeIH}RsB{LBlm8!PjR4q5J>_z zRW{aocE~Lq*!gZ~9o@_fZ*%Y5>Ko5;| z*?S;351+rCHDgzqVq&tSKF~*TZ~G|zUQvF}jghtzKw`S`Gr?gvQ@mJYP~Q4alDqhR zg#%^S=@%`iIe=oQz+XqFqm<_HaaY^zQ>Eev!@8?fi1WWaACsa*&4LduPF8+GS@mAO*E(kHMKW#cw|tX17BA@%~JdjZUbStn*%jTWMPV zl-$YD8;ky(PD}r1KM(tMhngZPpNNb4NdJv&@p#N_u6eG+4#5(vytX^RM;k@+1j(U&pa3p~z_EXshq}q*&L! zOIkdV(gl)w!=hWvVqKOYD$=Hlhrh%j*_r?@>|UWTPrpX3)1C8lpHLn$yywm9jYX60 z339Bdc(0!(^ng;n1g1?Vw3Xfl-r5<8!szPtE|0as+fr3kRTBjhTRNr%U?u`@MeOe| z^^Oh{Pb7bJDP&BC3F4B;I69NQPK%-hQA(LjF%vwnzk^YuS4eEAVpC<&DND+$!Bpu6 zv|Mmimf%$C18X?z$cToorl@$Kc0%E5>6#y`_gz?-nm1@p498VMRnUp7BQ9+y0bcgr#{e>IHgJwz{l=9Qv)lEKY=--jDRkVJ)}qW@xP zQ&WlwU)fvB+P^IpWu(v_q5&Syo)DXKuT~#^Yd4GrDNogqy=&ASFXfjIb9zV87=IV8 z3~q>c2gwFFLF>$@spoD900wv`6++aF8GjBMFE=Ca+%ES;OF}1MuWfV$lox`cj8PVs z@2bEDM30%UWI#hus_108Ht1Dks-^Qp@5Bqdxy)F76!E6f;8WM5u+1@x3LMG9b^t{D}xlW zn89ml+*4|Nqi|&y590jZ5!W0|)t#F(5oc{Fb3)-N($x zFVDT{75k_vzqz9UlaqJ(H<9>$ONaCPoh4CF=qGX9eUzu%bi_S$W1S)=*H+3++Ktif zS*4}wh}84(7IYDvLlPLcshBeZ*ds=a(TOJ%(Vye5Hwk~`>`yn9UhCU7*~qj`%7 zi1yExzuaAK4`*~}Ya&dC$Mc3l9=}P+8t{CuwdEW!rbX;gqI3gEdq8{oCEC z)&|CK3MH;Y<);4Jw$}ypp_@1<{d*)qF{SZ<7Gsw;{R}jt&9;XD+3z??=m7}y`cfS9+_XRe2NXYmBd14LsW}O zd0KsMPT54ymAHvl7xmIOP``&X=pJ@*mU4%8hd6&TTpfqL?*z!4kQlBSUA=vGz##wm z#es15ic_{TZksq%$<&n1jOQe-DFaMOw?Aa++Q&|1;gm0yarO6{J4DUs6Fp7d&L?{( zp7$jx%A|w|UwW{|nVoioNHy@DxNR&q2RYoxwF$Ay$%wh(u}o^djIb&tv|#!&e0;&; zpuK{cdCNgn5@U=)7h@1Jnz3AuLV_<);wp40EKEdL-tg=DuMAftIfO+xYUFrv16Yb9 z{N$!m;cCKJu8K#?((^S-#N=h@`W$gqO}&MV9H_Q`c%33y%j(bHW=xDgd3 z{EI;5)%3|0RM8$k`F~Z6^MO%?eRhS3jS#)Y1I^ zA0kEa|G|BgcK>62x6j{~k?8y4QAfCx#H41_5y7$oTH*dzY7l>Wc45?WS*l7@udO5o z_f}0z>*?ynQGB73fF}f+JpnQ|fgIIy)t|$oKbhG0uh(0!^cvvt)`H%d@iNT6SZm@T zEqBEf&LxH_2t5ge2{Z~%Na*J&XE!;i2y82}vM@|c#m|6IXMGpP*j|Bh%mNG?#501w z%Tk~DYT(lJ8}9yH_NhTr>_5{KHsWcmDu9VV zDO>$W@$uVO(w#=6DHLSrZ=`(0QU)b1G>jR9`)$wdKBo;q!hat6dM!5GHmSbL zfp9FozQ8j@q_~9MY{#jGeMa*nmq$5f%f6=?!rJ{Z*wr?25VADOS4h1oN0d&+^jIit zzu-MFHC;lN)qTPY*gpY>Cmi$$r0tnbb;!|dS5MFuTS0Q@A|QSVDFjp20-7(WgMb z>SW;d&bITTx7B4GGa!v|_KZM;-~94Vv3L4g@geOz@6~(uwSLkFr`NyI|+8mGzLS{Lr=Kw8v0S3>462Xcqm8%~M&d*UDLd+X z4svf37iblaKojeC(N`Gsc3mOgZGsCqkJuJtkf>aV|fCCv)>MBj#Oc^33- z3V@e^>@Zq_F?4^9i%rBqa!Tm$guunVG*mnd+uAoHbf} z0Y!Cd5xQ#j29MQE`4XN71qHR~e)TkGLYeM$jX7`jr%5y94JrWzyDbH;cMe1klaqoH z>v@KJy_vIjq&rI351cMDmHhQ8p+ycMVNMMUEUo<$r6ZC3R_9{$FO~G?5=|9 z5B95KD0)D}NMyhtN!t%UdakE>NNRa1ovO!i13liKD?F^C0U<4Cqz!+g+R5{|0zFYA>y2JHxYY-rImM@RM-o0w?{B<-<;kR^yNG|P%W4Sl)qJH_U%i?q=q`Ps& z!KvTnvtO$f$4((jJU?alm0|ICt{*(TZ>WUj7#dtiML0K^gY*$l`1+)agPY3F z!}yJ#n1ztQc>>Ju_4#ASZ=x{h=aSH1Z&F6#fKNYTzfOSAu?gk2UG`g*F=b_eHa6bB z7j#)3;NkMxtS^r^<3CpP(4C951E`Bg*r6eD@K@eWR_gJMwqLYcOtl$~vKR&hOpS$R z{dH+|^QVa|6&@Dr|L&YGX^!Y@zb<~nPo!D`(?^QM&H4GBa-t>tUJ~xyha82LbOo6z zYFJi;m;9(%We{|9!kw*+>c#KMN0R?vy^AX9Kbjvr%#i_QA{_>fCIa$yMH-iQfjU&8 z2RY#!?N!Y7TnVi=M`>yx#gg{9>O#x`BO6xZ(qO!Q@2Aq(9pK^NnU|&Bt$d# zSxdZ>*H__OYf}#cA=A~gvl+2W_t!gnslKUl<9x4()t|Z57*mBfO|FW8c__1^Z!zWQ z{?Ga|ZMQirg>kmoYVRXSwk{hNEz^W-dX+3#BxeLJ)ryYE6G7^`|6$RJ3-dn9^Td;W zw^Gw85#PH_?>Xk1VH)Q2@f(e|j`2VOo!gGGvU}%fkWvxrnqUow_onw0Du&Z8E6L?M zrAz84o(fbR^%eJkGE!JJO_h?nNb!_)UOJKf-4Uy8vryUgUn39Km%cF}9YRHPFYS>J zJ`!I>fFbQ(6g?aNk;7Jt9w$4wg~k->IXh-h-S&!Bi7`BVfA$*khWiv7YMgsN#7aS`)<^)4r-o9!`vJf*Ed%=f z;cbDna%iD{mn(3R~bU)K8-aN~|dN&X1)z}h5)YWUc{(&d1l-;VDP9~jI+$g*ihp4B|e_OPFqL%O}oyB$P z@?w+UovD!G#A_TB4CK=HQPG2r*@fKk7nVR z)*ji6iY1N7SSv-km(g#-C+NElbVcagX_-bXe^8vIzH8P4pXFT%`k?0zV#%^1^+8w~ zQQQKZ;uNE!y0z6WN4~rLCP|TkIk&O96&F%_#%xYgEpupX0fe$y&Pu=?TgqHxwd0DS z7u+o)jh@Q+F)98Cas&=HYJokaCH|)I$+q~e0fVWF5p#6X4925x6_lBm(f(r0{21d7 z=^+aYG_OXG2>5*}u_?zxAx&a5w+^k1SQ~ zo&3ikQ;q|E=ib4eg32K zM3hKdhy@+Q?}fBT@kR8*fo_tTEa>OrpNhwa)(Imh>xq-x;}fOE?^&HKitV_#JqjLj zO^v#i^~OthT|uN+%)Et6;6G$0Fq}bCc|mehkiZf!`?o=4+f)JnDeY!baMoX^>=!)23#!f zgxq3a6AVucaewJVOYjQUkj4_dUwpjf6v>|a41&^sN}jiL(yTPK#k+KK4&D_Yw8jm5 z%jCc^M)06D1LjIIp1X8#D!9@6w*U~eAC!Icq-yn?7lT!&X_P*?$++y==WF|{u?cj% z`3tB8#uaNbLUn+L&feOb-a5Ypr(7tI^g#nP1HX$O*?FX5MInPYBy&D=zV2T&{)i}C zx3k_5=W9UX_-8z47`ZmTlvivbIw`L0&N8}vxhS@W&1j*X5P(kTQ;h954xeVq2QL-C}X zSoISwxh|RqPaF_aS(19+NGsLuG-k0^!Y%SYak=mSWJia)W{RhhLOKC^Ul{tJIO>*p z$BK*Q9D5bb`H22doZ5JsowgkBbMcYc{p`e~jiYpcBw|~!5BY|#mh)&Z)HUDBi~;u` zJTV~b+ou<+bFiQ_(=oA&2M+u2m=NnCQ{4sY4%BZv>&e3G*+>%v~OlTEkm$B?jtvvC&40G zIBP5{zxB4!Xi|<0BD>*#k`HF1ujVMbGYJ}Y{v6N9{oTEvnx>cYfl*`Ck|QxTB)8oc zLHU2KBo(qwpZ=Ft_q(WDnPqYb|W;}!!=-;HphAX3u zo8I8dcte;0y>rN>uX)jDv)YBNqAlr?Oi2^(Z4;u~ADJrZMDn;PlY-0yBX!MEY(Hkj#P?RQg{ni-t2>R)i=k_1=_Q(u&2)po z5pVv)HWKQl#I=Wspf#Wwv1(P;pwPykIItnjI#WUN+(N^&*uY_t`>frm+z+sXfrWJDhx zc+B@(wUdcTi);Dd%6;KJyw({JG||{mg15s=i_%~H%eC|hv{UC4Fl<>P)_qF4p51~+(nHGYmQ@~}+=@KaM9`p?TtO198+z<$)z^G7b^9)(mH zyA_RB-=$t+ufXMkZZ%*WfW8K*CmdTmKls%{vrgTODPoU7a>6p4#hpVQ|F_Yz`-d8 zcg#Wzr?KaoLc*O~J5I#A3iaAx2L+IA0k|=wt*vQvz=a9iWNGAAMeIt$GR9Onkx^^A z_~1rf2p^rA{yQsvd(>al%sKnwfR7qUZ?W`h;0WJNo^3JVH$*PBK-kFV*{r0!Izt0+ zt6N2aBW&vUyw+EvVyHykPorwn^rZ~pKg);pa4Kc+WTrVs(%rP!O7dUHiiYNNE#Pv_ zQbS)*wuk5!4;hDl&xAPE$Q<4o=r>62y3RSryh4~x&}Hf72UnU)Vh0H1Lwx=s^_&Q;q4#(B0}*$`?aH<;%pX;- zbO`L06$O>g6cU_lP`xjf`p{H^Mo7+G)=ryC9)-BMb^A}K_y^V=ClIfw3r$66QWEk5 znmi{h!eHN8of#!z6A+|H){3>L?A*z}wa%<1U|}E+l!f-)Ve{lo@P(xKMl7*E3my%| zZtN;mMs+w+PpF5-_MhGjoQ_SK7fukRteF2lg`Ig^6W12Ujetf$i!ll)1yMwhh_Ztq z!Ag)d#mA$7kg$j$fPid|H36x(AyuTZC6X4DAd3`10~ivEXrD&bppiv_MM&7fk|<<@ zPSmLq8{nxwW`Pt~r^*wv76Q zf5kKEY9rX7Bw};yoQ?0XZr#!U#HS)zjknsZNZ~`1MS0oPLXWmK6OQ0pjXl{^ug*aV zC?nIq1_pNsT(D~;I`lbp>#zP(^$6Fy_nyVhAWV(3PgVOiKOanslF}qR58I zT#GrXbv+C6!1zf3cI=>y@jSf6b}j@(5*Td>~Wqk(q)ZlC?R=E9iWu!kRAU1AEr>+{CHkcJn3H{ZO5` zI>n^MgJUgsgw0MJoq)4Q3FkcZg zzBU&J)WW(JRWoN6mBK@KYTx zwgua&JmbQ?i@jbPt-LO$5Em?m{x{>Q5c&7b`r}JXg|lf25#F!6Y!x9e7F2P)cpx9L z&eRT^Rg;0Z@Plt1Vq00~$ViE@c+86}8XQ7=ErZwyoZO zto*Qh$gXnlu@?slz3hu*d9x4cv-hjLj`CRj)~rWe&bOz%%Q#wYt`|x1$FzJq48(7I zEVfiA{#sw~di$9b>zvMBn%Nt=5p*~wpwl)@=LDoA(;ju);N#=)hboZIS4mncZ~pdN zQUAEXZM$0Yi5(+fY!Cd^6orNBnWxIg$rNj496VA=rEm@g}|345nE5uaAGsLRZ7^D1uGldWJpHz zd>0@%-U$QfSBT;63|ZMo13)z_1Zb<&fXKx_k0Z%OLu&C~nMi?+{B$PNFb@#?z;yg_ zu+@kGW9kbLL~bCU2Z;k@x$f#s>>-!PG? zK%51oDH!yp|9oHVyu>a44fgjzE=_v>Z3hrly-UP2m! z`jsfS->+qBwUPazuNnBBrxPHkEn+vz*p#HG-3Ov$U;Gw;NEQH~)$yxj#2YhZWB8Y+ z@UpGx6#2`=6_vN0j1#5@(GQGo=hA1N=o2>Vu!nA3e25l4@wDLsKoZlisyjc#07_kE zG6dw0s!~9Zb-;ySR>caE2&YG`F6rvh{&QWy+w3-626SzF`4>E?#jGILqWq3jfPs2K z$F;CqFvX_pwUnvv-#Hdnos5bBQV!-1&VIAEpvdr;J*1?mRAjVcndk3{82+whDE{$2 zfaa}rYd~m+zlj=KAp&H65_I&|J}hV{({v{z!*jhc1sH(%iv<+pDaD9JfIVw2i{H!F zKV`oDS0}iwV8JMptZp(TNIY6xa`;k&{ZHyW)*@~R!o6-pYT2T@Sp{@q+YMeLKs|-h zOAeh;3Naf<7{bV|6tHT}Y0-Jyq^Jo!E)g{Gn{G`3Iex168lCf2dc{GKH$~rvM;TVp z11!wvpK+|lqtVmtbELjqyEXXf^!Twyi1;a%sBA72^-R<{$I+l)Km|*mD&mEBtN5qu z;Vi4Z5GlHvu8eX_cah5binbe(Oyk)ve$+68pEru>u z;+Py_uiqaP!(lXdnB*E^row!XWx0x;FJjE~nVxHOk&HA+7s+=?M|mR4>Pa%q6V8_= zj;C&-h#GWXot2Csi;DVYcCk}OUy+fTfWkWfAHEf$gCu%M&hN(+G2BY|yf95uiKag? VUe9{kJ8uQBI3kdCx4!dF{|i7W3=9AO literal 0 HcmV?d00001 diff --git a/v2.7/guide/use_cases/nlb_tls_termination/dns_record.png b/v2.7/guide/use_cases/nlb_tls_termination/dns_record.png new file mode 100644 index 0000000000000000000000000000000000000000..d46452df6ed888ffbe335b90e9f85e7d39339783 GIT binary patch literal 186868 zcmeFZcQ{;KyFac*B0-u6q9usldlwPC_Z|e%dmSy2=$$ChJEQkH1VQvV2BSo07=326 z;X8TW_nh-y=XaiSoxgs6z5BBFUbFUE_gZ_^`~H0HEka#Yj);(g5DN>7NJ0LsCKlG+ zcq}a3&bxOoF&e`Gj96HN3$`*c>IyP4wCZlo*0v5-SXlBA-%<&*wdS9Nj)Qh%QXXP6 z=Lznz2PaR+9I9x)c`VOFM~_EJ$rSQR=$ZCgDe?*FNBDAbQvILxYltF=u7V#B4hiYk zjs!J(dt>nluQa5MAPx_2%gc_=H94@;bCH~N{ z5y{Ysl}r385Y5oKrqKD7OXV|P_|XJ?iOT7=f@-=&!<4qNN1(VLS{i3~3kDc&KS*~+sDSDq)I7;(PueJWK zjK~~|Pi(Z-p{<&SKgqXT{XcKm^U8$S29$xgLSbiT#r7Lt(ec8^6_;R>x?^eP>vQe&D>+CW*B>rI&jL1-VC%gP4;)>a1*kD zgbsI^i@fIY50&OR!p{rF?)gMjgKzQvlURb*w_&sIqOIhI4#zwZTq^Oy@96|%$KOY_ zq?|r)nr#xmQeIx!eRaHbFa!Fsb8cX^>WO8X{i?=$mTUoED&qlG(S$)x0)bnm9rljL z<`BK_w8Ys4E^fHgqlsXVi944+J^*>;eiMo%#NtXn55IHo{iEMF*uQWd*WguPea(HI z{CV`fXel25dy+X4;!m$~Ni(r*e&D;{8xu5l<4zFV>AufJxctfW?q`>W`1x;O@x&kQ zrpq)veBu`7pZA{Wv0`vy9-lnkU@qx|Vd+zr5SBc{QtZn|BE(srIHbiV#7k)?LQQ3I z-al0iwXJ#PfM?XLoQ6-(J$dv-h-mE7>FP_LSH{?oZi3Zk=MVhxJBd);oWHrBN+qa! zBy$Ym^u6^h=uwX-)lSB1B-HuLA_vaJPIW0d=Z2dL>Pp7`#@4v{pIt=#&^x}sLjdEpO|yzWx2#~$v=P1 z@+2n0>E}lak=l5DX@{5DuO;X^=@R7q=xsFd6y#ZGb>fMWI1(=vXa-q6@YV?mN3gwe zraye;9eMg@Rr}=o z^uCs87S_paRt#a0%7RP$v|48xXFxNjGtv|(*2(1W}axNY2!Bh)P9I>lxxY#Z|Q-6JJ*vmopcl4uu-bf zuUqXSfGzVa;qfP<8AGv8wPxaXGT-(A?y(SCd1AKo*Ko51q-kh0=&>IGVNE5 zz@;S3kjmf}fD2SRjykk9=`=O(GkFDimBSbIP3JS9r*LoRif69K7oiIG9gp+1oed^e z2e%hqJT8h}KrfipRNCqY(MZ(Ta~sZW@Yw52$u^<3jkXuA7ro#f{$51z-h}`9#q|YX zo1|s8)pgNs>2i_$VDMn29p$^@=OP9Z%l3f*PQ>=ab83|hb}K?EQcY(~A6HwN9)e6d z^!&WfbN#Oa6#d%*bo?#-Sp#UUb}x!9_%CBFMb9}=hj)MA;o&>n+p)5*ZQZ|v{Ftlt zd+3L|^hR!J?ojUQZtL#E-^hnT^jsh8fAy;Os%w0-e}308%#jH2)aga`lN)zDftOJL66xSflo$nj_7~gBYY= zNvBPugeyg>RH(f$`rZEi>T@@JSm9cs==~Tn4ig{Sg#P>y+1F&O99wJ>-=h^`l_cV? z)1UO0tw$HtXaTj}wJtAGEs}|;EekAjt;Cr12c^JL3{ymsw^Ew;9rb_HF_A^z1%3V2 zqqmE_%fEZb+rxvjQvT3yC1A5!pI9ForTvyX-+g{zUa21Nb8F4Q)ht$N44J8+5MO9Y zs6eI&b+ZjuZ)4$22za$O?mk{VbX7y|H8@!`q$I0U&B1Hb6gXe+-*rusQjqGN>RmNq zqS2Bc#9(g)XZffz1RMijmPhH5JUb`b=cIpT{q&};-%n-!d$axeY!jI+Dd|%p|MgoH z%i1@!g)QD$du`vHCszo&;HJ*af!mkW3>}HXMYBblMLB{lg2p#vTkVmDi~_|@`^y_G zwkYd;>&Y!qBeAA^PA!gMPRcoox<)HXOQXT2W+<6+m$s9cX?;kGOjAMi%a(k{lJ2ol zQAs^Q7H2(Q9ezD~-RkPVuBhg{ey8yz6@EkhBL19CvcRC`*{-IdvC=Ak5-+vo>=J+_ z$_xGDIxo+(ptIp-SYooX6P<81&M(Bz_hLeBnicP)Qw{0%}&unI5Mi2bD)i?-Ka{~#J>H&9|W=q9517!793kV zYxP}yb~XDAn%4|C__^2$&6t6Dr+Rzum~MgeP^SlRl1x6~zWOKfyBZgkqXV8@-)|Nc zx97a;R!VMRNu{qz?zG@?1}5DgeQS1@H*GI?vuucDnq*#wqC=}C&5rz!zMl7;%O4*O zb?J5S`Cd%ZWCs~j#n4dsGx+i!`}I;H1h1ACy5KMF(*UkH_Lk1C5=me*$e<5_`nBDPm%W#8haNaKY;7o)+DEMp}KppGS@H!a2zp-w{sM1)UH708(Tc~jH z^C#t7$u(u{^C?ko?qw0~<05KXqy!e#VX-H=&_Ix`i^4O>ylZ*2osqe<;;{Hb%w-fUWOIk}t zK>>5uvUIbua&rIZ?4d%*5RHkr=OS<5j)nD%;m?V!ph*MI)XwH|ke}EwPz`@1A^-_Y6mX=n`?Sr+5=G%Aw%#Qgb{_>-Thl>a&r?WvzrYkx3I7< zCl?PV4-Y#g1-rYilZUwvyOaB?e+c;xId84pE!}KgJZznvX#dDHw{Z6K5P$jdPeK2A z{G*;$KDPf=l9T&CUkmesoPVBha&vHT{-^BI>q2Rt^SlZ5=UfhABfrm|sZj zuk`<)C;wIAzvR^aube#G!aV<)^t@*3&Bc-%iOh3M`eXFL8xnoAzp96aZb7A_&9TUd(QQdrn{|A)&P-QO>8=;;7(Vb}jl@`qAC9@0v^k@>$$Hx9;92p7asrTITq z=8tH~e~bQ?Zu@tG{I}uo?*{pIgZ#G^_-{Y|JwpEfZIHVZpF$KAG&>#UbA_pi@v!m6 zjDxQ(M&SCqKKLIY-2g`+p8sWM`PGGmop?=Ihfj02!mvxj>k#@{We<`xyy+y7fAxeZ1l52EO;BO=ez*UUD{x*|M`L!f)VzfR?0@8bHN)&!t6iaAFCUz_U`6Rx47n12k#~z%|0FeWA5#-F z!y4AORIpdTosSit|2H|B7&&FEZEo-c=m zc8)Ao-H2&?zwY6IBJHmy^$UzNnJX{wfhOeT8?% zS_3rgRx}dNeg`6n&-%=oev#b51)g=TpL};S3j?aMW^2zUT8SoY>c1;)s3Mj9@l#>o z*7+mkM$jhCCiTZr0_U%YC$aH6M|32L+Vea%kb7=GN+*sR*iv~|6ow=VeQ$1qjT$!M4?vt@w z9tb*2yjR~uv8^0j=wf!+<0pBgC0>m+crGluaVptF88*{o8y(#mF-{m{O5=ScLb=cw z7~JKvOE}+Z-%P(h{~GY*2?IO3$;+3KN<}R~WyWRsmu8unkcQeXVFX(%xCi@Xtk*bk zaXw=r_i*T+;XnDC*OyYi_f$W)aGPM5A<(-{?=|!^5jIsFpu=q15Uw|T<(@|hgRGo3 zGel6U7U-2LVhi_2Wv6e0nY|sJv2uD14nP3z3br*g!w;<3%h z2LI$tg*uBeN2BUjTxMcV2;7zhDqWYQ`{JE zucFp_kS+%fcjK=?7x7}qdAkDU2fMmzZ8a4wGv}?&B@e@2I zA09H1E4mFEu7EF9Q>(&EbwB4lEe>oMMV@{9NI<*2X|f4307!2h4u zW!m@*sUJA>m$^J@naR|L90>teS}~UUp0-4-w`+E-RMjinOXYr6`jvh*6ATZr6VGwW zrrZ}TEN>mPNnTYWK7Lf*MvbTZv~)ws4OeErzce=0I)JP5cV!@UFTZZCF3vxsy?B41 zdhr&aTW}xyamXi0iDyh~sQNfHQOKz86WT#f+>r+@Qsy5aB2P~)TaNQ(p0y>j8N9h% zS(00`V8vS;*CVL09TvE7S=;X4x*LD42u4Baq}BjhP2qntn$HbsbFm)>@HnGuO^V0n z%`^4N`$;!qGTiUb6BmE@HPZ*MT3>!TpX{Q|6Ppun_)Sp(-I6#}q!7(l`aHdtL4#eSIIO)GEB@6lJD<%Okm z-X5*_va%8ET8j&MDC=5HVU{aUb{;@Cz3D@ap`@(9focjHKc32HWKp5Qx2dUSN2`bi zqD@Ojrql>@76+FD;s>N;!B}NtI}7wkyU#q2QwY&*8E~`)+^t# zo+Fp4TpW6vse{qs0_f=WsrPWxPwjd4-)YGjz4CqUWaaB&Rz+F`AJ>-^v`~}90RtaW z?Y7O>=U(kKQwiugtMe)v&al`!DK5;gv9jAG*DmixTsNGOiY8f|d|s-Prm|GDE7mSk z*M#XsCTFv=4j%5241F;$iV5)StVxV+VLYT0jRmgONL)BKPakh0w~)G|MGp72&A-pW z6%ulE87QcYz&6T0wJ$aGg8EAVsI6zNPGO#kI)P7a=B@UDWg<6Gd#PkgmhlIpR_L;E z7I9-e2C(~E0RJH|;zF~dbldFow#~YWZSFfgRFX3f^Ol^X>ADSfu!J7atIbxg&h?N_J7*=8pN%t>KV0|pF}*?~ln|EPCL6%m z&U$%sF4MR<%2L`a8<6^xNK|gDT-R`{TvKsO2g(z6Z9FWOLW|4wzu0Mi)qAS*G&h(Bl?|cUI&tlVPKT6$NZXRt??IQ z?dDA5<=l>G@7h+=T+Ot;lj=Lz#LIT)+cK9;JXyZqB2yBIEus>czHu7mgWG(kpp{vZUj|OFV^Hb2LtoFw< zbzw7p_Es0b#(n{Wi&&+h>3c`XHh*DTXj>6tIa9yG<7>rAjfPj5yHI8_ThU7;#l9AO zO9QGm!ddwMhe_yk(Z$8K!lt6D+m1^jn}+Ar<0s%FDcM4(rwM(&53-9KaqW9Ml4{b9 zlJ8jtxoLg{HY$x$fRi=km>;cPbc$wryiH*@EAoq+++&Os0GiZ?&HxQm?7*cQMT)|= z?Lw@qN^tv64ojUfCUJNQ!YOvfaV+0h6$}LlB8e=*1Oap5_LLHAqtwt9R zZbuX5V1SD7?$j=iW#>&&O16_RinLs}{6gU|wW+d6yT0vWO=p9>d!E?w$o<*6-Y_vH z4XdnMNAuASIDfNyNYTE>!6u2H14w){7FCq!C@6c8?$cjo`80P|(94?ZCh1eFC#MCKBL=F~S*BUej)1k`t^N>%_ss&G*>&rZt+2Oq zwyrtZm5ea@_W^@v1v%_fQ+s}#rSf?HRG}NQcm2{Vx}2Jt_`>5G_u(DVGatSjX%ec~ z-P2XK`5>;*x#B?i+hmHitxN}z=7C4QhTaDW>0#D!UPsiWNX!+lY3DWT@;bwPJ-TAa zu;y?0(8Lc%h2N-Cd2Kv2dMS1VEK)Fw!yy=VRj=Xh%>7QT)Efr&7ul z{f{fkRnuk?bDF>`Kicdf>bc#Azv%fhQ%W9}ea2Dqs7@%>a=cWZfT}DNJX6nTGaHe?VyEBM zKeam14Cv@@H1`4AUc?!=hQX|05`rM*-NT_(v+8<39NyICE{R!Cr-#lb1!u*;P5=Vw znPxSS+^9Qlc7U`M^bnMM=-Itk)pZV|WHr{HYs-8P;Pcz|5d)1l%Q)z|xK=gBPG@tC z7`}1J*_HC-wW>a}^&)hys1JXe{1D+HoFs9p=t28aYqzTBsiR?IjkS%n^yU@*CxhZ*X?$m=lh#ByE=mtEiDS95=CP zn8#LkW;?Mh@17{VCHQ!gdD=V;Q+p5~Ka|4kII~+b2$>FY;c4Kk2%+#^@y+a|8i<0Da>Df2b>f(E%Cj|2SYGJ_ z7fzR%dF~P1sQK6S8x|E`e)D~Wuy;4vDm~=|aF^x#@tv9KXzchkpqMx{pzhvq=U?rvH259>LygHOM zZh51Kqh`vC4X2VJp>PH3#^cNWtZfklmN{m%Ae-6NDc7`B(1C{QZ6Qxi;3|b6m~=PW zrRhNtj>(pr-_k5g;X|Fe(w{W)Nt-bDKDP12DfKD`?QS1{2xQ(^GR-vPIB-^c$Rof# z4`EOV0+u(aYanri`Fo7Zf77wI3jK&{RH&l_Cr@98puhCI$ z3;-(`FcL*{769(=A{TJ%5pFPJPHlL-zWyVFCUp3|CX{O!62h6R2qcT|h(t?BE*%vw zH|>d+bt&xuP5aLRsw7{Zd6zA5Rj(g!U%z*NTwbsET;a~wd*?_`sv>?)A{NF<`YcG| zeGDfb#M4s=zvS!?nKfj4ncp%~u4NQ3MwY-1U1QjlN7}5d$BE_ob%*n$jE;%cyxr+=^h`8<9$)K2)@m-CrN|-k~htgM-c%gjkjH z00$ETdMtHcV9Xo2`*WK+I*OeBr!gi)eHYu`+eZ;#YTDz5TukTY`6;GXyb-sayaNX6 z3M^Ndwo5mBH3BQ<7 zA&~1o`$#)k)Dv@Y37O@*ZIcbu?Y)<_Nr?z9Un?Upz6c1nayp$NyKVf;qIIV+9%d&* z2+5B_^f!|kbr~M66vZx91wL{@!d&UuwGO`5^oWpMg}jG2wszh+&6|?*1{CO2()>y% zSwP^9P;fJBTJxWUmC$jFkn$!&a+&QvfQx0Uzlr&3;g(f~GMAQ(F~1?2f3(k_Pct@; zOD}Tf(n$e)*<5E81mt%}3TzQ`|7dT2eBE@ltvyb#CGJ{A(X=ZJb`J&ZJk+?()3(hG zZLCS{)`A#_zyHe`EH~FORtj8b4HQ~g&+2;@EbH7{<|mH^+67s?j5KVYTup`q&08$V zE#Hx^AZkgM*AzcE^9xFEG;1GpA}!v{!@;#~E%vk`UnooQ^EudwwdwL}sls*2SflD% zm|d-AX1TUPdTdb8PLi|{7#l7z)8+#jT27Z3wm5!1_>@j6S)rUv)@9(_0Y;s+n5tw_ zPeBiF=Li`#+6fGw4`=Us3ZN(-RCjwxLVIaMex1S`RSJt7cZ%8Vex>QzI39?U)-NOY>v1Cn~*uc4RgAPt<&Zn_cx7YYF%lJ_7G9O zytZ5etyV;_Q$O9#mF4l&rltv^B`@RwGQU~U3f8R4$wApADfTZ|p{z3Dlw^jc;1+#~aUe zq*KHew>=7-1U1f7noQpXiJ^ulb!p$Bblv9r;FUp~u-p+!=Pu{3())DJATFxk6iH)D zH7!_@1!I*dsYUkh+NE`8a+U{1zm20HRK?ebBxPmPVbS9Yt-M%GHQ2JVxDz=-xD*uRG`?#3|sr!R@1^<s%iVlyrRKJ!ZG@t5~`KW5HsY6p38Fw28b= z({S)lPa}M^#Ph%AWeMP>3IpjjU6t54B(J0jQJ)iQ_L?jLLqSKyJ{VhEP1LOIl>zm+ zPpc>8)bOu-7b14QnNqwG7giIH)=;Y!!J2m?Xh# zj~Ncky&2GgN3Tmx?>Ve^aVZl_qaA3*DuPlMri}0-jfZ)_u>{$61DI;-fz^4Z!STFp zJK18z<=IXrFx#Q!J4-~|mL!cE0$*a^QiqzIzyasDm|4y)!kuuQlu;*%(dis=A-y?fl>ZeE`ot5agx5*!{7kDfgBBzR|s6 zugWk|-^+PDwjNQZc7yMHKxYujx(73I!gwal??Up!IcFH2%--1dQA6+ zTlS87Ix7PFwyW^SQOg7GzJVb3-O0rpA_cJ%H8?x1zX~p9h24x$p*4{_<8dz-Mfei* zY6;{$s#!^hTjcU}I9aN!CKES#;O)2M;BPGbgT1&{tsF0rRv!B6ZRMim!~T`CMy0b5 z*~9f+^EhCh|Ke?i8s|ENP%AuzvdCcionMMp`X&4U>s+1;znTQHhJS^cc2YcJ=Y1?O zVQWh5VIY0`;}_-)O~BL)Cu+Y|U;m%(vp_s~HbTaKp*H`OrTCQl_(&<3zM9ubx2r?U z-H|GSJ!wh&23qf3n#b^>_m^@0XQJ_P(?^TnoM);FM$PmEOUW6Y9C%#2@pO^Yjs##Z zo?7o#$@5D;H?7l5kf6gHK>0G(`|NFQ&@TFfh-k!Q<5I*Pj-AdUDLs_RQjEjbN8hm{ zoS5J{<#XO_F>GG${S=fyIddcsXR0v`N6sE9B(!VCakP>;2bpI>1ql62xx~|W$HA$8 zMm7Kt_pGh?yEz2>jTkZ1P9%^vP;Caf7mv}|)Ql=Vs{;jbO*phr1NAToS3Q4n+FHp> z$g?CJsh`wu_C#Ha_?1W1`IEJpPc4_I5+B?;g^U;+Jil2*4%_|00uP69V1}VDi#LtpR;Dj%q8u{JwPFRdv-XkT$2bFDZbMJsc}yxeJsfS%gDxqKbLkOS_58`VdI4 zHTw>}oxXBty0kaw3_E>8MrBCu^3=E)n!!xha;)xRdVq- ztO(uQzvGs=*&iNZMWD&hUciAa6V6jzp&OZtB|H6yc5P0^gGi7K?iFs;wZu;zl$C_o z^r1MBxuv8o`Uh*1!|HPN@#V>Rl!%u zp!XDZHF-M13G==T<|VJ!1v*D6r!{Le?Ylgf%!AOl%RR9*65X!0Ms!G}zV~CYX|5rV z_cJk+;Q&6d%E_|yQ|Zz0y&4#O2Lg@42mwYSNnX`5M9m%bZ#8ES{7PR>9!=>GxqCQH z6ROg&yLSdQhCLPgQ^}@j$898?-hl?n-HZfPUyVawC5}>l?jjuOH&zY{ z+{q&Wi}UO@JKoV7u&zDHhwaLdIpfl2k13EuOc|N5ns|^rtfUYMrQ>382-0;>8Jc|6 zn{H|YwZ@eoS4P#NuiltNVQhcTy(FXHpUc_(rP)pkvtwv?sly*M*ooLcGHUlZDnRhh zz_^|9@KEZ7t_$(Zj3}yMr?L-k$*O@16LoDRv16G^gJrmPf%!pqzD5Osn6}|EBWu|^a zXXcNHsa;IJBahr)DhUm{_%Ro{?7g&b5W)vt_YOa3l_gt}2|r+_uU>QfOCi_at_Hl1 zV97Xjf630SvgUoj<5d<$IMqA0V?h(SGX`}|ct^BIz#a1yobv~px#d8J?H9G(b)3tBD^{rHh@nIMm}Px3Q|g8ZB##OOI?yhBltf93b9#s_*16+gIA# zNj?*Q&>sRMi*aL!nlA?t#?Qr#+FFq~@54LBzmV23FF(?z@RA8=JrF~o>Pu?AhMBZf zns%VW#e^nT%gKDIY%E)67%~%pp~#jVfrf#ZFhj*}ZjYRrQ6N~r1}XS{1V>}}w}kNn ziSe{C=irUQ(Xfr$aa~I2335Cxt~sUjajd;JBV-YS;PL1OGmvK7!J?@29ld6wVY)YUXy3RF}#Rl=^Nts|7+#KRxo zfW`s7AO;~b4NxMoNp$D{70QVI0sq`n^r|s7MDguW)U~MO)rzIBhz=QHo|lLKRqe89+(vix~CB@GvsMvncJ!wQKjy zEz0&t;@N1Q*-1d8>1@XPD6}7+)11`h8En;7u%AoL`eU(LwGjqll@sdAz={BElP^sV z?mUX~T_nMN9LG2Ew*%)LX5c)An6gV~$<%eA>etCi4c9Wd$rStQ=6fMKB3ISL1SUp$ zPC6u=OQcIt{U+=6Vb$>sJh31>NFfo#GT zLu-#4mdfl}f}2%|I5k0Tw&`xpylPQ*3MKSuhSL8SEOXGQ^aj9bng`cTD)?&is_5zi zx~Ug~W*Bk+Tl~dqzP^3RY5@jJ<3^z8RGYITxvXNqxN1(@-&U{&t7L55+9`m{GKjH) zVH3UC#CA@gMOKNh>l-vnS8u8BmQlJ#kb4=~-VSy*P>lb$uLsX}TRV=Mtdw>L$`YTi z6o^Yd?9DigrePOsDx!&AS?K)E4d0EU_Q}nmC?1l)>E1Q9QG+6F0=SmPp(KSvj_c2i z9&Dk)bzJRww1VlC_)B98ZkwJ3b*)@XH7GLgfl4Bz?#S<>3`bdtiY$9Ss)gCk=;?~v z`w|Au>z#qU54)2eTsRrzkLYL8Ug@aMn2MB2?JAY{;nYD0+(e#38+XlV5{t~yZBxyt z$}P5PQxH-7^(EBdVx4nf+wQ_m!_6t_U8~byD0zUnyJb3pQgHZ-T8R)ljZRZ^GN+y@ zF||nHn>x7|bLTT08w%R_I(F0L+jA{Tnl^$&Vz{9we0(W`Ba6fPa>TPay6RLwipS}C zpw8X}AyxB;Ch5XYE>cy47}UYbwDX0N1L%s9uHslLNnRwTDqy5hfwFe+xz6<2E~^xb>5O+bVsux~Ckdm-s#;Mx57RDddRK+^jc}t(o}G6O1j> zGj6moaM2#KPPtIo=^?rja7gH+_JiP?T0ob^jd2@fZYuqZ_N1PWLQK#xtG3fV?zx0e zhri>?G|ZTLy)}%%=%659Wh8_Owz?-5bm&0=`_-sNj2X)pw%g9*%XC`S&Vt0{a$&%e zqfLHz*hdv8jh**jELCwVKWBA>CD6M-RGYT<+PHP&TFAFEV_k3NU>1IZw3u&}1g9Ys z4;k%t=uk3(po=SkbOG;@T4O!_voTA%yVNEpl(fPwd@@xu^*`oPI1faftLkg(v2O0o zUKtQXas=&~vHEP-w(wwKM1ACHRyk?dB%L2N+oBpMtqpo`U-JDks1$ZI*sTx{TIaj_*tOred zWn+3PAS9eq14I^+L&a&|^dW3@A9OsIO7zpCrpbQVqCbvz^YHdX4u6}|FBx3=;x`AM z=-f@vFvsAxC|Vu_l)NA4=R+z!64|_&g?eq++oT=N@fx)P)qAOA9d;R8T==V=6J+ji zpo~i|mzcD9p|{M_q|xwE!#8k)%bA38d=mrm`wPQG4cdB+ooA~c#tiTUN-!&bid9hZNwyp$Bv$T0mji>;%k$7O+=hlU~`5i?EASW55{ z0>0Es*Le~)k0NoYlfK+%ny=cv>@jXk-+B#SbvbaupgCl({`ja2@Zjs@(fBW)t0F^= zu0$Xyq6^v*l}j<{jXIrIfYe%56R_yeYj5Gu9ihsYr$2hSZ`8-ctjzAnpFj^rF--X7 zAHF!mj0%2svgOKidAaZM6;q%*#LsOV-&I&3A;;_Hstxz#EHyT4sf{3cm!!!<6t54X zyqpDa`M?Yf3aNp6`C;ELO4YP5o+$FMr(CT2+lxgy48AZ}ra38S>0rGs1e>H(N=c2> zVUnQ>J2A-)3U>tM`U}*w&cwRjTyw`EJWSo&$4cs{%s46cQKu$Jx&|PGak+#{Soydn z#Nu|jj^G)>4QcAt0jGO~*-`(&L9_9yYLGyAO^DW$q3AWc)m>0^Ct%5O#VHf2u75Dg zUfTBF8FJZyIO6wvPFcTW%6_mrJq+(E8?oB|vybkJYwYAHXH(yV@8pIG_EEF#Ork|> z=NDUFH%#A)=PT9IJ7`;3$ zVLfZ~ajJ$+mlIWMyPDe7zHtehj#6#=ZF8Dq@?4z)oXi}@I2HHFN{o{bE`>Dn>Dv1GXh4$Bc;cd-FM&bYSh^eys~BMD$SvjINulijEBayd;!>#qcdja6s z0O27^KHryc(d*Ngbf$OpSEYCKBa+gD9@Yl$txddnUzmFz$14 zQte|YjyB+Fy}i(sm_l>r#(bU0!4UjIr)JfHE0OJ31KvX)qU*Sa8^VkfH<<>|X&8`b zdFx^0Z4lUXXX-5?m`4?V_vGrKWb>ZGJ`?6!$zHVB?uyCDYPAu27L>D`E&yzkM-5X5 zdbUR`x~u{El=eyH4{T~QSgA+p{u+s;;LSfX^^kuf5%lx}3BBKWffGy=8Gac%S+van z-o!>oI!6-g2GoCuyRN^eG0qS5tP2vng0(}ITo+6HD2Uy?E+MP z@Vt@itGEkY3{YPLVHZ^BYk6KiCgIA)uhY}h^Oiswv*hh$GkI{*?UKg|cxq(mx}o{A z_A?Mdjx=wIt~^Z&Rmz{K4r8bSQwg-ica7~Tg2bR3Bc_$x^Kx!8np2D(CtT^=dEqkk zVZLGBHAfHl{58oU1hN+&)k@_3XNq{imtR>91buMK|4R$(-RCOd?;ZVueu3B*b=sp- zq3|VUv$4wJ`Ya>jU!auqj;P3coKnYy>1rk9QlyLfAb|B6!-Dj?VVnY<5AR80Bub=< zsmxZm`{$%!+-9iTy3Ar-!uPmjF_@0^|AOh<{TTdKG8iN+{$og;B-V4cn3{=1oL}rq zpfiogn=VMNoU!(6#mLgz^GX`)3=s2jp=q4ADyI|aJ5?r`aQeNS7iU`?d)d^>4Qg)qBN@k>jrKHX_zUbQWe~0+O zv!|`bgL zpn+Xsi*3cGvN~)sjpsK`1jo0l5O4dhINzC+NjCXDapKbZ0WNG&sK6$}A=zi&bQ|*v zvtgqz4Naz#qo35hZA`is!-MT!y8=fS z7kg?QFoXrDgc9_M%EGq#;1N~YT&9n5ak+W!$T*Jp3KVOw%T7Ov4kp1Lwd@oUnXqM4 zqKE#yF8~gaxAi31F)LW%Hvj5L^0k~g^3v2$2G*C7{KRf6GbU_<0NfsL-~?)Ed(g&r zh274H!2w91p3X|%UKNau`AQV1-PIZ8`MfvpgUZ9UD4)a*d6NiH1OLzz<9#{RUpE71 z^TOr8>ZaDggM3r)o@I_vKM0mW%0loB+g#&zX>0fnHAdOUY1d$g8bsoj<;%n|^hD`n zSJLP*4n?g9QMbXyR}Ly!l^We1xxrgw!!Gg3X(tJ6SGoeLWt7DY`xU^Yk2U%BUkJx1 z(ourB$Cq5>S;`J4G$6vE6Bo{V=Duf1`+x&<;I`5VpO%AeHX6^y>OPg4{Yq?ZBDC6AYp#)zn{T+)YYwHO>w~s3<5Y36@7g z>Z}x%l$G%@6vjfSkrWaRrKoIrfDxOS|{$Uqk$R7=Jop(vK~J`pB4O$#`)9)h#tMDLJ!=hza92mOcfG zHSEdm2)L-1A=HD6cD}|o%Kv(hY?i0dPCM1l)4u#vK1rK2u|)x4m#?&TgUhp3c|7YT zvhT84M8%+rpm+-@9(AX{sim5QXc5ab)?qR>)dm*2S~+Mv9&-nE@&x$Nhc zxyc-xEvX1aObs5RXp$iVpx3WeGr5pOfb3RzqVa+-MMVYS;xX^aeQn5+>D~A_{T%a$Z=wYwBdO(&mU`}&*&_>Pq+DfEb#{LyYigM2ERQ#b~fUk|(s2GK4V!s8?|Vb}Oq0Ju?Qf zvL9gvXI#=EOqR$Ki&>}{qJ~Q()BG9W?#~K$l%H0!{btXzZPC%XYJlrilN&-ORdlqu z%a!POZoBo5*RSeVk-sxRk8lF-#Ye*d*$t%{{qT7hfqsAk2#fD8n!&-2y&P~jK{7dl zarGrHVLX$mTxI#C!I)pV$2Li_oqZXY#Ae`4JJ2x<=Ay#Y@kV3#vv17xR5E55u5rhd zP(lavQ29G(X;*LOa&`5`u>DXG@G7u=hYtJf=+PE(#P6zHV)+Ib_K9MWVIS;Ng2081 z-zdeWvm%G`ddIpb1oS4v%O7a>QhVrvIMP7XX{Tpl+Up+@?m zo{TECMT<(00F2vHSrVFkA|RD$^lP}2#C-w726@U&@oeIg{^kn7-g4X8GlAW-)jL|< zb0@#UBFwHN(sfqdnl?f?zYG^YKVE77&{I*_?}h=B2}s_J&TY&9zBZckKQhYuvN!{* zJJS@W+)d2cb8z@U5=6L%t~dl?%-iSUd<Nt7Hu0OdMui_g>up%?TTXWfY&&WEL5`b&R~zO}8db$IQ0 z7^^K#kiN-D`qOVMiof58iuU>_cK=Ytog6Ll{)EDycJk4JpCZxe?B)!YGt%nJMYS48 zx4DRD$WNUXPdc;JGeBVJj_EsA!?5>ey;CrXllyn1lzYix+@Fmohkad}^A#@`l_IPi zj~4O_-)+_7Fx&H<%bEA zBYNy-J5t|CZX)Z)45d`qj60M&vyPKUFKfo9r`v22SvlMFiOSdRGVHbmZF44)OOB4z zs)qP^ZuUFr4T~PC@%gQ|kkL-=9nNPknJJ@ZcOqoEAhKanEad@2+A`p|C}Ioc8yIED zve^EqCnpme+LWlo+4;*9?&{ZvamqxV;gIS$GltN#K-TO0LcMNxA(9)1w_*gv9zWg@ z2&`FHW;PXtNUe;XYarI@B*MN)m<24h5s(24I^ANF(O#j@J(Eu3WLWKn^?D0@Z)exJ z_?GrQ=D&e3RAWV$TJJ`JdDaKaDoj;8vN+nr5iP4C7l`J0pf{P^AuFEz3xR9dzuO;F zaxt#uoe~;obv0CCjqNSBf>zh#YOTD&8BG$MSCOQH?s|SL8I=UF5eL}P)p}Z$+Y4H9 zrj#1xiWY8dwTCQr;h*w3NRr@tdzMQ@p;>dqp=?5>Z)i8cNBE>OHC&fIN}*x%WC%aQ zoGVlC@Sp_ZKKub9zEV;93v9Woy)q#$Z=ZADGsev z;KyO*E{de=Rn^gwfwr(-w2mD#ZI`#zBLcJAeBwHaK0j;Q;hN=bk_r=Te~U;5nJh)M z{VZJ_5NmuL5XV?z1H58qd!I8P!q%!5VCtZ=V)TcN0{Uopj;!{hqT7F@69X!=#LxMv zv=xcUw{Dbnl)C^3o8gq7+Wa$yZ4@`~mM`VzRcAK(CZ1|Ax?migv3{@0UOK-yilqWs zef>1<1_gZn#c1M}8_hccoqlO1 ze~sWbRvqmDH@{n_scpBT-{$;Jl?u5VqM%e+z?t6i|Hs~2heg$O{o{m)qJScZ(n^DZ zv~+iOgS51?)PPC|(%ndRNcT|EFm%I64h%7L4FkX96YuxA?&rRr_r0#)zt4Z1i*xpz zv-etit@T-JefF-ZIC#s%)|HjsVlql-BRl(dUrPOy4>v3GPQb3Vc>k7}46m2Q%c%o4 zRrs^jRa2k}_)y?HC%Ad8q&$n_z+xp7ps+t$-wUrT* z@l-g+Yw5wT5Z6f*1)oekBl%OlCEJfu{FbzTVL{N)Gw%_mpoJ)pB!u6|YoEJNVPVMP zWw>)q^?@4-IWJn4)+);Ia^3cb-%rjDrIeVHd~+{tc#rRy5AWT-9P-YidwA#=G#yUl zVrL9$6XO>9oszsGU~80@nywqBvMAc8PHL4T1kCKYZj~%9YO=w(h)htS2#?Kt06@3T zCqJ-Xh5E1+25O5(6J?b2MtczeT|M&?ysD9ZQD^eE^k>5ps=wJvFiyiwRqDZ4$6UI0)otD5zKp|!FmF+{GCwW1X{NICc^&e-xYCa>YP4hBRGo(c$A+_qmY1^-H;`ZEy7h8*(opIiX{^MC(G zR9TPz!#Dlwdc9x~@u%q~MJxD^tN8y01BS-^e^>wUum2AHhc3SVPRM^JRzG%NH!aV$u5hW9c_?KMOdm2AEq~1ioebzwX|5w7$RBNg`xalNeDAb{gTm za@?ndq7#r)jCDkZt@YBr7BrNLV~9plB!Bx?Bk_lK_}5F7?-)fzMFgrX4FSZ=oA+YY zAHVGP@LvzWi841gmyweTB@^(G7_p!HE}|S2{x|dXA8p3phhAr?bl&q~q|}spNli^F zAYc$m_|aeDR4Chm@9?>8j=7tz7Ljrs1A=YywmKa-wOi>SSP+4-!8 zuHNwKjfk_(8O=VuNK7jC@gE=g3l~86-dhYBBH&fzfPPW*G{gVH6#c%XgATCWv*q`C zzx>}8>q6HbEhMvJj{JW-h5z{6BRin+|MOnx2Z4WG@ZTQFpTD1fCg8%;$j{lA*Y-?Q}J+5dAX`-cSmS9ty_JpVHT|JR)d&?)`;pMxGirCfZ;jEq#z;X8hT z2yCF-ks%IaW##8O(4m}%Jk^#jOPTs|Lv}Cf&TopA{}8zSwiFC+(a9;EqgJ1NrpA&U zN_Z?n)s5vEwZ6R~{#i&u?00a*^uL(rNAnmJk-o}LSq)hd-R)Rgy_Ok(rV~8-Mm4^j^UfW1L1?la4ON=|AtwH9aBu=ephyZ%FUrgJ z*Q5c`I6sNjs2+=ae{+B9QNJMO-EaGW=Br4vFIS@g$HVEy%CG;$Xffz~GV;ZK#-DU` zDUH=kT^9jpWI$p2a6Qy4?Q%V2?Ta2jTcKi1frt06Wu*T;=%>#_R3d7XZFc0qeE>+1 zg`4))Neloc)<;*ms_31-HI8ms!L&txmCX6)h@U<`1;!cev;%nI#0&uo7yMMjzZ>)6 z)L)pXf102>BEWm1jn2^muO9~>2l$CVbtCq(;{Rp2@A(6~Kxp5qv;9hhQt3+UDR|D*-fPn+>?7PDMfO|3gM_2%{%DrSMzq@NBzE z_&>km&o@aCG~nJlXz7M8{Y7N%KcYJP(0D)Uqkq<4wZQ(vFZqOa?-A8~G`?mDv`&N5ljp!z<)v8+9d!M zPVV=@4J!WsSU6$rf`WoUIG1gn$(OroRpucW3*J&vL1e-i+cl`l%9jL>AFpWik^;-- z@M&^VgV$*_cS1BMm^jw-XDIK~;oZNI*6#tKFV zvA^ODH*$ZSBPB%Z0iEitO*#KdVGUFO#Pmh;J2DoGdxU&{6S%p#XH;`-f=2m}3sG)| zMVe;!y@WFT`u-bC>|Ci+8?_uMw<5L1sv7$RJwD^9A`x%ofyllF3bqT*^~eOMe@;?^ z@8ZT~iBpWIWIM zEahyx@-;$n6qKidc9QPp=Z?`X5~0MeSHEyPSW>)mm2xF6B+r!+_6lZ{My=7zD_xt} zsd6uhFsP)P4UkI{Ky6o7;OUC!F^$JJ(T50MDwoZhy%jqbt@FJJ{kwv1L`==hoJUT? zhsD1H19@>J$d3YfmVK&BKfV{zz98m%QR~`Kr;qQo01DY|j2ZDKZaaevI_j4Oz7LGW>QB%a#PiFdg%fF>d6(-8$_Z^PC=5sup6*0HOlwiQ(XWNfTMhQG z9f1(XrRNH186s~CCMNh-IrOj2YeSA^3z*ZiGPtsH;#hUx2BFi7th#RhUf6pV07GR6 z_IULRk!;9H*$+gYtz+8Un^#2HIU70n(D;PcDc&kf4RBRR8xl+=^T<)`H~*K6k-O5rtM7>Or^z*X^P}tZ zqfUu`FwGxhYiLP!tUG z^zyH~Ys_!sr-tYQB0ZO136X{LMa9-RgoHlDjm?%+7M@K=NZ6Nn43JEO5@vZ&(-ZPI z{;rPH)uk`xH8GLQ)%nr+c&G|5<$mV<3pnUx4n4gm2-v3DnSg}h(9o+!$9Bx4ogt_| zTGsg#BFwuBfxoL=YCx-Pydc;sI&!n7U8G;&9&vT8^@ys!;$25+#R6gpb@#1(3slh8 zV*M+98lW@&fTW1=|4HmL!tyC_0T1YiuZW6^Tl37&*|V{*m`A-nHW(p(Ff{j3)4E54^+Di{q|JIb!j1|ui8WZ_p$>3ZG_-sUH?tS!DJg$y>r<;f- zTWN3~O4;j=9X#;qOK>T!haFUjV#_b_bU8I-eLctd+&?(|DY>hk@b+kVtvb1*GftS# znT2jMD2FQt)XI0X*tat6O(!PbPJC|my&IU0C{|!PJbL}8SX)ktgR2M2Su~l{A}AF5 z%MadgAu6D`mct|zn@<%^_m}P;O+df{i=KY+J6gm8Q-B zt>UeH5L(C+Y{%aLn%y&nm;WAb1sc3txG@_)-ouKC&e)hrzTgmvDFUrPErx`h4^&dz z?2LuSwQP!(Rd#<0(S(*~9(^D!q9nF9rZJwl!HFU~@mzn|0R?C${h8NV(j zCMGOS9+<7K_s1$>vt4wc6R5wKFWOgFzF7Ul1@Lo3dz6a%uMh2w^lM7K&D34=M6+5GR`|jHLcDTN${~Bv#X+N3N8q{%l zv^Qg1TwdNeR9p>@N0a?vG$I}JFt%u-&4~{PlafGPxL}18d5Mg0HaI^kUxB2+%uA%_l&BLgzFLDrp7sndPG+tlR&rY*x zizP-(UOIgA&a#8Lb@K&xl29>j9as8e2&@cq;U2uWGC#i~&2bfC=_18F&3xP-N@21KMZsxnfzuO=;woadz2b@D-zcqf37{+ z8q2A2fw3^E=ZAIo^msjNzhmZ41F*=rvc9rriY6f@HB0*fPQ#~Eicw7E8O#z7&a;VU zDuyM(rDnHW&nlkOc=3mXgj6Y`l+RsrFy()+u}OXGPkl4aH3MZBOsx1YzxTVAw^C_g zZOvk#ZjV5>Dt9bZ(ZHZI&1HmFX#qchr>)`cnM=Q;_xSmE!fSmC$g;0mtqoC8o)^vd z496o{US3_T3M1ws>ms#QFSoJVcN1&(2&nFNPrb|h;}TK%`y;SUB99lsQ}!m2GPMJF z7IL=_bst{d~=?NV+PwZnprW(uox+>|C!b`5h;^^Z< zpN5=qq)@6VV3LNyYfedZE0bY zspo|ln@1T&zK88VYOQ*oKcf~Rk${f%Nx5mJvGHk>^B_?BS-(^9gq-5d;PxFEBl6??p$v{0 zgQ;z|p+Q!e94Xv1xDsqQCU0>4xZk)Kdu7Lbqj-u}tMxF*!FeKlDbH|Wn&9c?7Ov&Z zbs+oIWnx-_@A`_U^QA@NS3Je*iwVdP1bl3fL4xz%`xancS;0{kJw_|jo zk*DI**9K`_ijWG!=7g}1&Ply!F-De4O{YhLL(p~nDbPvdx>l20tJ2A7sZndnglUOZ zMKlq!776Tj4yK;Axy|D>o5$w{e>-*FP}IEW*}JFYb`>skd;f`WG$J4JVW%i@+fyFj z)AYhjt=u3EV;>7#dy zPwU6}i7QOjGDgioi(4w2rHq`TeqsJn3)4Y~zF*8Xx`@;6V3#!udDF8;2k|*_ecuOd zLWSC3pxIwFc8I#ET&Fy>n9`s{-6~Y&t8n3$nW(m(*2&z8W_e*{1u<6Tj#1Q$P8wym zQ=Lmy4$4(_%ds!-Bh_=oGy*gtL*iIqJp)AHrZlS>Uwf7wahrK_$6J4UvJR<5TC9!G z$g1AHW&k)FImn@v^BJ z`Cuuc_2mdImlN~Y4{sHFZhlPZ)tRB*Z)eY|0)-btYBL{i62xO%U#U|xW!D*~2=a@> zXPsSkr0pF+>1vg0!&sbbzUH~(X6Gr{F+M-u)3Z(WGM)Y!q1I;3R?zg$ccKJ=wl2p9$X-~J(-IzUX};}pfNc-3u|}u~CzP%_wefKH{C(#*@q6%eaL24yKmKoR=tqwZ zexj0kS#a#Qfk3b(kW1ufxPD?It3%u+O*3%oz3yAT@klvw_R@^K>UinVFr6 z+JtK5S2_(ccZH9V9>-M9G^e&T_J$u_CGCy|)}zN16{i+U2MO#u#2&S`->~ogkX{-Y zEIFF}q4E6qD)p!%_{ovpWYX<<8Z=KT9Ntrdm-f*6B|oZ=8F{w-8uRKr_U2qTiMr3p zVS?`HIC3J~?UZtf<7c;QW^Vsp!PwSxCJR~ymRSO#}r9x}e6 z4=3fS*)(*QB(6tCw?*f9;-!F4!yrusyFou6c+ypcP&YQjJVra3$T;B!=mbiNj0dB7 zGv4qd@06T*AD?RH9cyYg8M1%@W$rrp;ZyPXt(BUXph!$y0wd(c@ym754Sut&?)ByzDsl*EEuH$Tp_H8rAVO z1pl6Q!25#hn_GkjyNlK4(4zOgbJKZKg{Qz<4(KItuu9`t`uU~LAK`+pZs;fwxS_-= z7*BM_PG795K#^kQa{EB4Iy#jc)imv;V?#9fz83d(B}w6Wzp}Q}O6!D$zG%|vBo`$4 zR0S(#;&LkTh9{StN1ryZ zAuoLis19R88qa=0UnhpBTVCu}!mEk$Oj@;lX1vQ9oYsQYT8%Y~b)XGS>U*$h7vf^H z5D?;E#@MgKuN9qIh~cDEPN?LKpX1A zC}OWus~7(LGwWstHBQtP=sAbbFI}!qfC=iww>g*1lx945wR-T`xTq%Y59PtOTTv1& zYZFHt8zC@GcA@BAc;z=J7Hjd$HGt<{ZV|Xszl|4Lce;*3O%bI*o7>gcC-=Z?&F{iJ!*755JhT z8eL>*>&l`Wsm#i+K2Q1cBFTJ*9w{?m(ky}bsJ`)d-GWA(*ln`(`iHWaCz4|MMNI3O zh4;{7yv*u#HKi9(*9rHdF8aF-ykQQ$>q&d*q8%8Q7WE{>OKCCm%5 z*kZ3X84#bV&Pk%|>4PI|4vRPvR*iT@_=8^JNq%}4CiSMc8ehQ=HE6A%xg*Ug(^EZO zpY^0e$+cWrM8aY*fp2XwWS|{inA^j|r_OfCAcN_&A?I}q7HSnVF-=}2iE>%*Q@un* z3a?+CRu=Q0FL_52de>C8WET$>D5W#K)6NWgM$I>wUEsPsF4xsmyU`gaY`(AkV7*;A zSOT9p2b@$AT*sSOby*k{T*9+_7}7 zCs7rnv`W2#jb`P<@E(5|H>zDI0HT<_-A3d7Pn1(AHKP6D50X9D?0pj(gMHPIIDDR2 zrwzEKZso^hGC?l`r8EI+fte!pyg2O1ErP3zcoyAG)g%#0{b0LLZ$<3Cm zV-BL$+Jv*|hG=RhtSD1@X1n|9B|1T-{v%_6G3?hbF4sQoW1+;}P(ip$?WbYiWzu&K ziC2s!z{ZZ&I^gmtGGYuGdgY85z$e#-5e_MsW75DzP_H0bo^0P^0)(^87DC3yKL_Pp=5olph%U)4tLRw8abrgtASF`6PGx9LAyeSiPza& z+oe9g5D40)Ckm8mg6Kj+&}3WhDo*-QY2SKVno#o5#L&t=C91mU;xNbwuD<**>R*Zb zIqeuHDxkhdP=p}%T!fON2@*@ex7}Dg)y0qcFk`O=mSZov)vZ+qp%ZvhB3n?;4UhIb z#!Dqhk#HGE?qAqgOZITl8MW=E_EQx9TlwQUa95bn+T**n*dV zxJE3gip#29EnC(d<(YXiLxMdmH;LtVhvM}G>mw2#0i;yA6+sV@8#Z$dTD+*gV+53c zjn>k<$5xK$ zx>kwdf6~9YXSH$uV1~SRSG)c@8_l&})6 zCHbkpn{izXX?QiIaoQR{bantoMT-3Gk6^3C=1cPreq&iU$lNcFT);*Q)!=)iitTO7 zY4wx~cBut*sa!C57gem!Or%psOH+lo6 z-m}(aw&#Fo7ty%wOg{XmmF=9)c6j`rzxFMcyni>$y&LF1JEYGz@?mQ;S;C2zc>vnw z6pWLDf-o^%m+hcZ%kY!@DGEU06;tbD9KrgQ>9M|2*phODtaQ&cniOtVoGwNm6McQl z5J|{Du#-fNp_mnRdP^g4E2cR12_1Rze(WXt?pjBW zlN%to>vn}q-*%yX?aPXM;3d)ddVBlY?W{-=Zfh3h1SUq>%#T224P)*ihfE3*q20Aa z6A$$RQ%zWn#E4Sj)z-0DUA4~0lW;YhQqDrGAeyqB51jYr-7eqv(OVMlsAIb`X_vo$ zy_4J-h(pplc`Tp!IwpS3Fj=oiA3b~s|%J)lL^*9j)iq1(i@*Y1!xebe$Zn`iVZ}YEeNyfi6rc~Z~oD7#*6%3c>%g~ zD4c=UWkZFQm$g5FoL_S)t|&ve;6AU&D$9(XlrObe;g#jxKiha_ux?Z>B>4P(C~Fl` z$x5hy3FQrEU8m7n!E@2`xcFQ{3iFA+F+48_tL)!2^DD0Gcv@X@S_J-htl3P^bL20H zZLtr3GR^0$^CG+Q({dlP0^9L0J&j`!;k3|ja&ju9@0TZXSaPjeYWvmr#+-ojOuEU; z`quZSi|8?nx`_A?#cwi4G#+|}ndB`aj}^wm7q3TaYifnEllu&$2aB4`2ZgMXOv_0u zd&t~nnx{zW`q{dbf?WG8RC{9{rw9GGS+kI~fS*g3ww>8a7rqFgYY3tlC%297XEMwj zG_zAz40IhSG_f1%HyWl*^0slXx;-hLTrEG!KKE6wYVN-ANkPs!9c6Q(?5Z2z`#9_x zcffZ5Le(#l_*NRmgz~8hEJZI$znROvPDaSnDbnx7kpujOd&<}!+jb8E1U@LMmDnc( zK6~=24^-5@d-Z<*5OJ|{kl@32cwffry7-RAMfFW?j;a zbF}@&tOtLLw`GGlea-V&76Ks;i3E1o5nY#nchFrx|DFSHnY@una@U3`pu0j4YF!q>l#&j8! zs@AxO@&7_;1ILWxL7IU z7hYBS-9{b_RYR~(l=}cYb@=Q4goi#Ic?m4GDH5BKu7=zEPx7x{vCvNi-y}Ee=Y|=2 z>D=7xWPX5r|FF!--Xvn%#5!*1R^R$ZtAS)%@zc47FPsuS1E6zj!0r;&N;+IwQp{u z2Tt@%pc;RR<2BmFlsgvHdwXm;m~&4Gi}5(rmM|+Szj}MOUI!NwT-SIh?ZxtzMmPYj zn1beuf?&5-4rEE((4-SMBI0^7A23g*l!#IG$}! zFYSiknu%i}FHdr+WL+`e8;OmNT^cFpZ(faqv1Ounv@vMwGp2*DnFD1UF|O3P(J;p0 zqBrz4zhfXhK(~tuqTtJec_UJT*@RA!B~{At zoM%7eG-=1g(dG)KU#IGHjcpzD2RQQI4He<;wsNGH6p_Mdws>#B1aGL2JvencwtpEtqa}d7OHJ? zTgDDsrpXmilF|EQ`f_W&HN>9(Gy-<2|<|o+^)Y{H5=#Pacw1z?e`lRQq^J7 za99l|)Hk>62q|voGSRwz%&`|~HvVGlFM*GoXm<3247a864?b(_aj}RBH|m}0h{Ltj z9%zN**T16!Cmui0upl(V>UK=wv`BG9jP?GQCx67Q4gax$^OVtng(UOLM2d|0rOpA) z`o}<3z?Al;5*v}{ zGO9Uq9J$uUq%kf!N{}8g=3+TMOgoolJdM0bXt&Y)eA3I2xN$B&Lu-2#H~wA2lCcD& znq9ENb3@;(Y)sg?N3d{FEIIkC4U3}XG;t6)$@-EcalrJ1=eG8`y`t)<02+q6aX*{} zxmd}R_rwe{Tyo@dHXr^;Zf{ZRQweY5%h@?3=Hh|}e1s^n@!QkHTX{xq?Otg?BQz#mrkuJdm6 z{isQG@d%*F>syjK0Eex|YE!Tg`wD-#AN5clq(E1K7Qq|HB(lo&N(Gj3nKxpVJS0w< zX{%|GbXGp_=8TCpVx$}kg;CXs9Elo;>XBT(kK*T8KsiIz$=NTr7cH#0EK6#o$xoh@ z1l6+@yxT9D)AqY5Jezqx`BYj&79XE8?=mMw0hf0@!}YuM!lAGQVotv5{Dk&W9oH#N z7Pl*oZeu9|nN$DG1`s=?gZ>N?NZGPBu^YZk^FBH{!D|;}er&;rOo2z5@pp36_Pa(z zn|Jt!PJVb`voCzSsFjcz?o(flXjdL@hEjR+92RShs|AX)6h;N{He%9LZ~Ek6+@i`CKu$T1e;MP6&xF;G+FSG?!kD*nxIkmaEN{#Rjpjed(4jS4% zZalWwPdpx$q`qfDNg=gR_kN;ZuL6^agFdn@p%pj?NWd93P;}Fu)hTe^Pw8hA=WHR@ zza$%@vv4`wP$7Fh7%f<`K9Vf%T;vy1{P^BY!Lo89%V`7Ig>0bvRZyUbD^wM(3pN(q z*<1%n32)6z%w`(h4re3G;bC)@+H2LNP3NyuxuUv5p775P1H{B&hc&H;_VBiz7hjgE z7teS3seG{?a`UhWWqKXmx1M3z75r#kKC$yWVgQn}7O*;t0U!pX1eBOGS8AaGR{>U% z{=Uuia`4F_-*WCsU3}{C?L7|+t%efeZg+q4_IA;uxxydlutq18Tu!HWJ5J`^3Sxwi zVfZE_$nO=aMhS^g;=P$mEE;&*S*XvOgVuZXJp2-;8$OU_lzC@&|E5D25KpZ1$3*ha zpM1WdJdVyuA8G3BkFY1jxSA&|H*BU0#-n5#PfKRE;AGM{*_zX)D_$|%Rad~08M(bG zA$+Yh-ezlNq)pYhHVxe)+j+{O_p(!JG@M{Q6HaM>* zJd^N4%w}%{Z+xg+mNeMXgAbNB{I2zkc#(gN3-a1%&S+o zt%Au(Ag4HcmcAmCB$M+sQ=SXd5wXcH{NYga(sb&+t#50A3&}!?IKg%$M1V_U^q8`= z_R8nGn5eX0D_zcHrNriB?R1w~iH?*Dn;MY}sO=)Lh269|XMO<1^pL$o(aG#9jcvj0 zh=JOa3*X2*^}=Lg{pVz0YrlU+(cs5&!pjz*_{M|I#&=P?r-50C^Zj(sW77kYaq~lu zL5tP6=MhgXc4I~1=Vv3Cq~yh;D>yFB*fMuP7a?}g#sz~iF^W%9!mjZ#`DM#BS6j(_ zcV);(o1eCvRbUeG$(ShZqsi{+P338w!iJ}M3XpnBz?p{z1tV$H&{x;fKcLTJrFc7W z#_mUL6+cILxw-B7ttZJIbro}IrSglgzwi41&;agwAZu;g7`O~)ZhG_)1H78F%W1n^ zV;`|(ER{*E+`~@__;ps?6gQQ?hIL{+$|;sCB%0#OJKH`p0-$l%%Y7t~R_0k*D(T9T zr8g%NV-YyCO)ntHrMeS++=!{5KaJdHJ)}6N5&` zgQo4Sj1f@It5t@Fq@+GRN?_G51*y2CetQhULzy@DaIVMtgIc}Yn1@ritLDx4MaCPf z<#n6v8r_68hkkTnPf{LuqyRTd(TR-L4(gBRyA9quf36yA*z7JJZ^Me^x^p(NFy5s3 z&EFjyRM?hQG4nm7RHt#?vHo$L)nJO`bU9uPw9+JYDE&O%ZmG^Nk3T){o|_wyA!tzW zr-r}z!Wnr_CFed$+R}53hGejuXg^q07Ng~x4k;w zdQzw^qDk%9zBI)C@95iy1uVQ|2$cq-*u0u#&F3wi<4s zM#p|}KX0|1hT~oYPJ&)m`;@lXnJMj4Nhn~;6hG8O6qc$LeWZJSp$0lWXv=hB6mb^S zoGiRpX6kJ`(*VnRjh!~<4)@*=a_pM8XDrqQ2pl<18B`A=CR$r>e05}rgpv=I%H%L< zadH!*PjLn~zDy4wh|5Wvi&Xi(r6G@5b;10*fjb^cna%-%pBoFjtN=)9zHiuh6IKaz z*@0~xyGP1TbAA#Zzs+Ha)Bv(cV^GBW&>0Z%0Uj$s$*5IcBk9`l(md9BUiJtS_L$1) zQJ_zUp;NZr)PUOURASj$#4|2Yt#Vzf*E^vEu{|L8M{6O`K zTL1>e8}U3IEug%VbY;VuJyu_u+}1t09)|hO7YD^%{>m{qqceN^ zOz>40?@xd&g`5FU*kz5CC=M8i8=rErKv01&73j%w9$yLVQ>fsvr6C%K=jL{TstZb} zN0tN4{ViuZzWB&HVRFBOc+Mdz<`^_=r^j1vf=+qiK**Z@wE~?0?6|9($)`Gy(0Gcu z<exhL8G3@g=dDKBs42IWG^g%$mVLKPj2%yq-}a*Lm)Q zwnonQ0A|EhGCHBGQ!dVvoH@HLd4m2MMKue%x(47!d*Yj}dLHp*9)L1#v~Hgya43I5 zV-ma*MS;_omVFi0b}c6e6pQ5mtH{xEEX#l%qZY_6v((Emh*=cdH^c9jz&IG8Bjx3@ zsJS%QXK_kA7cLD-RP4R^;6p7Q>8Zz!DAVw&q6x{LmqmAr8DC(dSfO*?6EaTm!c@-ece&e2n|gDZM! z(qWTAx1PCFS(Hm)c>fFd`Oa`<$KNsW)@klDp{B7LF=JNj-}VG6Mr*=-Fu&Dg<*p&) z#Wi|g*h3!gAC7sb-KpB(FtehNFn z)EbOu<|$?ItXi_w+~o>p^ExlVoE{zFBRqj^fXnQMSWR^KRX92pCrEFvGdVL`CcHpH zd-TNv)Pd~Y+WzNWcuhq%+{!RzD}&=k;R<;!{aV6SW#sXu<_`;-W`d*2VvSv{c*-rZ z)dGh=vhl;@w1{$m9)s+K;e{%0*0?xso@u7*ROF;hA)(87Jk5=&xc@A@$Ga{=-t{(b z#A9S7-DcfmESVD(N*;#*)b7@b=zPm^_u}G3SO{8wJhOJ*Ew(tBIQT8zs@~UawEm(A zt6a0hjEJ0BX2T?AJaQqXC9hK+;&4bke@*=A&rluvdVZ1BHtFe*01mVBZ^LLINM2l6 zT$!f3<9V$%gT9`T<8mK-hpT#P0bwydnH-^c7W!%vhc&TiO}cN%18VOY0+?~%bRc`n z33<%|0+Ps$%!ge6%+R*_mw45V3?8j~M@Qc?!qu)Yik1GBcv4Epc3Z-G^nR>T_$^=> z)N(eNt2_s%{Ra<9R342U0{PK9GA9pqe?9=mggs9$G6ee~Yby-vjo>ZwRPSn=2joSt zwZ#?M(meL~7Jq8PCu2Ikbl&t@wIeA9tf+efn!}+3NjOn%rXRA}GW|?0(cMZNIEG7!<6s1D24R^7|(jKuvv^mWJ zEaO{}-5XXJ6X00nSl&|H)?u0{ba_)q9Weg)%>5TF;&WEhATDo>42_N_bpKwsPZfvJ zl>O7UA8{nuZOn5^?pR3cql0T>`3WcTMC}DZMgK$6v`gv(+O|2cdB+L+ zb?xWP?8D~@vm*Gl6QgH&qfuue+9 zlmeoa0ztGaeryil)DOMDR*e2kVpiGXX>zjOQ<7=(^JUc0a(g5h>LiN8E9t3A6X1m< z*z@!5y5@zg_s66ZJUK{K!-@&Q!|`U_C5me>6rXJ<+1`q6?R}bn^VV}}R2$bR_VClg z9wuMNNh=3^#Y)lJLG93N*%vy4&pkaXuo53Egqjs=xKnD4Z{YlBotS?VedCH%ng5!CAy8Cxms0{!C zMVK7Trl-`&HWAgBXmT}dq<^j&hQSTV6wdVFI(Lzce(BlX^o~?1Lx2{@GU0D6ms(Sg zy@+{N0JuqFtDw;3zf%8O1(&7nd2k)fyro<11RlP@N79de8P_jp1cbU~% z{XcsHpKeW5NamydMRLAB|MGm%MOg%?EKDAU1JStu-UI)baLTI2WNq^Zbwq@YgtnSh z!%zxe(FwxU_ttQ=?hh5-k>M)@%T%cOWpNicHVH5$@8cpV)y|FUme8NL@C*I1{0BH? zJc)3$tI0s?MNGEM$C%H>P2yJ?vNVbV%^O!x9t&i@e3dhlbs8Ztvl92KaIpe;hL-$5ga9M{;*&EZ>k@soH=hBPDBTUeLPR4(db0X5l=-V^`CtNF zqd*#4o=?kep#tjW>)fj=GVMZ~PQKABaTPPI^e9<*M_jO(d#IAXd3Wd<`-(nn^r%Tp z-di(py__ErV z%dmC{IfE_*n$Tk~g(+e(5Uq~n;t)>jimTe1QB8w*N?O z%8FU8%d6sT1ahy6h#fS}DV@4xSkVAz>N4tXe;cN-E^M91=ZBWpP`9Q3`rzd^^UYn) zXOya&T`LH1rq#pXzJ%WbqAHfuu)OsJR zEQN<0oo4|&v7{@{8axVYE17qn{L9zW%~N95@z0{vhdu@i~` z(efSR;5^hS;Mo{HvnNBIK8VurZVL?~I}FLGFxncg4OYlxWB!ghQ1&im7xmh(;aXlO zaU;EZLVCEZ;&~VdD|0tI6w_`4IN5zK+9rz(Czf`bcZsMx+u$zab;CPHcJai5_1*wJ z_?-WWLpJR~33B?FYq{kz(i{@c`aQMWuF8GtJR6gwLqXM-SJ-Cg?e@$qX77vNNq`41 zh+7R-_4h9fd=FPL=oFt(6J@#wnYRS#h5{$5J9S+h8A034w#|0f9p{|yrYNPd8x6$c zK1^tU@DvaJ587b8cp*F9Tv2V1%I$=2Xu*fIAY2S7)NYre^q%egvXMvfNjUM2O!viu z_vXw|Eu22pWWv5fC0L`S^hWJgiRM<#aWC!ppO`rrbRZ`MUdMA( zN11{w7YJem?SCcSoK#XT;9bLK7b&<$nU|C6jT0P%*0yqpTY|Jh80@~+PY^N7ojT!d zXD{qc_;6_)d?}U-&RD*AS=kiWTEXk6r8qWNPb~rjt_?*&iA7vM_|FvPxoni##MhHu zpBWbiUzW7I(%0O0ZCf&6>wx@6QerdPih;o@!P{JEr?*sSQ$gaqW_i}W>b4K7+B+b# zcECKo9I_Gp(;E~GWK;OBcC1(vizS?OP)hrbT!gjWfO@UR%tHq=9pa9`hAs&1MGFj? zl_Lr3jXLt?4OGX-xp^Q(KdbdVeyNTN{KT5KFi8D}vLeZJyj5o7DQM$h%xt_?S{P~L zS$ih0wuS{G768iE8jKHi$nktCn%4)S4Iw1zu9!6Ya`@I0i>#Tx?0t)^2F>n@B;1Zb zjFqf%M`qpwPUrQJ%0(_iAUTZkGGx)yN{1_>zUeIC34CyQGZ!o(?7J%CGIrqu*f29N z&;GAZtuAj~1oTf>4FW-xZfavme^~k(%>))>>oQ0#4yMmZhj+wr-QV@hd~MVIXpBBn z*UAl+?h#skH#_swyL`5_g1#zBE#4+C;KViZo2wmG>Ou?0YVDk{J?(O%c*`=rw?Uyy z29^FT3$&$jif_(G1f&#D0x8IE-!g%UzkN9$fKz$!H$cGYFh71g;L0Et%-q6cwL8}g znH?!v4O*U?R4@L`7lH8wb#-v`IUkz_=+uEFns zor)o^<+AI>3cBdY&DAob$2AlN)yP_PIhyFG49MOG&d9~PbRU~Rw>AL#O4JD!1N%!0 z_ElOAQeYd%#lwTWy;{1>jxL9+BQmW}!k+P(4FfxuD2IL?AXXSRQ&RPnB7SA?3ZR>F z-0!)1bs>YEeExIDA1UikV}l+;_r#-bBokEalUU?PIy>0KvfyXbq%dbu=9u3}U8eCh z;QqgNSl-JM0ji?9QiYjlU6x^JYC!@sdHQvEi ze}Y?-pf(dPLh<2GHHb7ZjPv!=JCi--mr5un1*?_qOE%(r@;Za)5vBW==kVo)f|-)_ z=uKsdTAt^}kC!F@bip+~nxuOyI)HvBnSqVswWkhbjaK6PAKcb|0w^^UCKr~b zgibORMen;Hz{RW{^`M;J*>+29gxFo&EsLSwrK)gl(9#bh*2&Vt&s!=3&oyQJP(g}S zwvopWUJopSiWmB>@5QtmN5w(Aw};as%}xIWvB(??MzZPXjY* z^L;#Bhf)H|_zK%nP(`q(hATWDh_didT$i@}t+3-%izr8XtVS9Zh8=uyO)GgJ2D zEbwafVU$6mv!-6*i;pM1-1LG0!?qQZ>|tu8MDIbdu>~iMncNsc_Ili^5Gm7~=9$_Z zBB1Ujw}ny*QAki?4=MChl07ty)YFtYc_VQ(SEsDWB>WnHKpvyYohD~PoHrLCXH(-p ze3?D7CD=+{CwW`BM*!7%E`CmjzccoRArK&AFY9JxPh~q(cHY8=!e~>=3q6wg6ijPB zUjxTFcsy6@T`_cNnqlR)R2a;C`5~%0EZ$+p@7{VJsxkvNNw4lbQ#i?FEKo~H!g^Am zkj_#q-yMAT#ZE{u9S+Wugf6gxofL!l~7H;#zu^kI>_y9&j_dEDCU2Q1r-{@tPSue|T zA-h6q1`}v7)aUO|&Pk)>x#zg7B6<5^@w?nED}?KQZbryZPv-L`zCNG~2t(!sHN6tS zzu(ZMM?7V9@{dXcFz$Dc(vpo6_?RZeK&mv0apTL>$wnVOA9In9GC<#NNi(PYxC*4F z-@1+I`J9#3?8j0?ri~cxjcR?^yfd6-t_smo+tQ+~+ep7%cAGUGK1SY|kNBLqzEf+W zSt3=(Ku7Bw5MHsv0+|CFiF#_qQ&@=od(J?N@q4g%GI%eIOyEYkA$TmFLNBhL&RUJ; zaPNF451e=8KNWFmp8;W3%y{^KG);ww)aIcPY-=LV5>$lJp_5KEIv{y!rSe7W$o0lG zqOIv=FCo#(=OsZ5KfpsX@jT9!a<9dW7=JzEUZ z{HmGs2_gpX*6o(*?_9wr3AG#)*p1%J=XBHR$nvJH95=OlVm=KMV3|yN8zCDyBuFx_gbH%!LTVCG?!QtYUa~k$8rqcv)Sr;f23DJ7`()% zzIWN{w}(YJrK<-6WMzD`th4i(%mnw-(G}_rij+x*vfvBlvd-0k%4(n9)hiF&lUx+> zYzTcDC3^yiBHj%zYiTmp8~oZbEub&c7wg>aXp`?bjc6 zRWT$1-&-VM9sq9jzs?iXF0E;?y3aQ^^@tjroVS4n0wluF(`tuUBdWGZw& zYw{GV{K6t62VYPY5JrW?Ezd~r=F>Q%HYtGS4hk7aFBzRrbbStp=tKp`)`3Oyo$`>L zyi$|*ELZcuMs|OxH4oL-g{W?UI=>7;my0aof_z=gYLYQZOwlJvLjy6`Q<{EYt3y9n%hB>dc|K+2^& zLPe;1&1u<09Cy$}3}XS|F?Ez)4K#{M7Pn$X_W9xN%c;pxXl|BiIXS^*4c|om`-=L@ zEREQp-Sm_C5-O=+ar20Q?No}Q>5cOb9d^r!2L4%F4T*4N5g%RaG%0eP0c_z`Smj=7 zZ@)WpBOYhNCQ=-V5??I)!gy+<>v{@~!y-&u zq*$h$C32M=73*J^eN%gZBED;K_NWgt&gBz}!3At}qwY==LaVmN1(W&oI)#T;^?aT1 za5V6ecgaEVfXH#pMUX}vsrw@;k{2sI=XP{Yvp=nMh~#S4S)h9)P1iX-PP`s?>OOB|lac zSs90uw0`owRwx?;{9AL~*`;20Oe^DfaAr=v-2`W*>iY;++D`S-?TWA8qU{{@+8PRi z1zb3%F>I+{X7n2z=VBQ=0;#cMEk%zE|ECWqB6U{;zdy>B<28Nv@D_Ueve4I4mL+j5 zMGW%75X{s8%MnJom{ILRv84r9h4l`+5)^TFm<6@ ztvR|A2Kdac61Sv#AxIp8oE!cTzIU#}hxgIUe#cj(k3+4$HIVsRQiOWkPeykiCBWX% zNhkQHBl?|O;H{O{AvT2IzFxW6XlcFGM!ipMUS>wRUGXTsKM9mBZhAx4GB`UE_Y4Fn zIi)csEukRPXnQwkn!_oOdcRosZVwWE^Z?F0oM6 zdH5>kFao#Jwy^l{2(3@gbE50E)T20U{6WcA5?(3lVl*+ziG$9hcPE?41l9DGzx!=c z7AI{OLQ(~2&TMb_BHpgVhbTIiYC6HJRc(aM zj%OA~O%Jp?R@f&%yaF|B&+KywgB_#RVHhjF%;&c2gs0y2+vAKNqv(85cfKF93+vae zJw7I?t9L4OSUvOx2(FwGi*qitRJ(Dm9Q`_i4O=C@X2S#!${j-kIZSGCb+}u=);rNE zH}buNR;9c`5yRSmp9c7xxlY1+GlY^3Zpj~f=FeN^mvtsP_V_e)@ho3Dme@+IpFho= zbga~3#TXw%7E>2rgnbqk#_TAoBaHh~w%3I{sZJ4mIkj8>NLg8*p+3e|qLXFHkzXzK zQT;e{?GOH=zbUiVTjW{r%Oumcuw&EV+*S}tFC=A>=4q#`nV|0LEWDb$cmq9GsBep9 z&x~2iZ#z49gJDj(E_iypB6$-<@oFGmdesnRWb-#AneE{lo#FR$_< zCru0J%MZsKeUUb?eO-0NO#V?*nT^M7KbxvnUhzxYu24$WD9ZZ1x7Rj4`55t7?G!s- zY*#%!(w{2s%J1@EO@iN?;{f=XP6+#d*#N! za)&${;Eudqo?Zs*A++6}3^$9ZWWyB-^*fWipEyJGy0t*W4*p)|M2(0`wsiq2@3iA( zggRq6#0)x4HS9Ni9W~g`aP7YyJ_UC>6oR~7oqP_kaC=Mp9gNKTreoq$M#G{od5=#5 za5Ik4x(iQTS{OoWc+U8TObUM)6P?+^-W};iRG5LO)0wv)+t%5anQNF@t}{-?PwH~{ zbNk*d-t5KZG=QEFOktB9PweuD>Q}lhyhA78m9Bm2%j@v@>qG*k_CT(pJcuSJGUTTT zm-;prP7kJ;LVZX0MaXhtG{x$}jtB5(Rw#=sn20?VfsRw*TPF8_r#u!7^E_ zx$}iq<(2}?SI2p+p6*?GIioX`sMdbO97>`ABxKlfeJ6|>ncX23HRl>-?ysu*bJ91v zOJMR_K}g@P#_ETb?G|t1buR;doq|#mkdu@RARBLQt!0@1lPX!y$V6a^2os!DG1KUVc86<9oBQ>wc;#Im<1wTDj7hZ2U= zKbN*KQqcbC_SVUpX=>%J*rq^coygXvY0v*lZoS{ZuTcr&TXdlrT0q}rWoVU94ii%qSl`4v%#5k`NruBgQs*aZ3QJ? z64~qCO)oa?7l&!^P^TX+*;i@Sx{h8iUT!d%ZSbYGjGqX8ME%CjS1>ISr`+)@jre>a zQ=|O2OixaCZPm(nZ{(}=-`NX(=Mxh$17Zekgg$TM2z{#q9N`U1m=^#93TvM%c6wiI zG&*E6g5om$^$l99uoJw6FODxG0=BZA75M{z)}IX(WFAn~Je27`#1?{hfmduhA>dx_ z-C9z@Bw%0l=F*r133WQ9A{YZtkH}C>pZ$zPZX9rk&2vI*t|McM_kd@+T6jD}4K#Xr zaZ+~?^5}hC*c4!XAf;)r1pG#{!hHX9NB_i~BXk!Kn7)>aaJ%GkqX5r}fBE`0gq7ej zg&4(gf)>T^6n$#D6*y`JDwGTEMn3pwVEL!HmivL>SWt5MJVfw9rn{72DeVA)Z=CKy zd<~n&`9sw*o#ge2iguL}*A`GA`$WTwku?E{WCuf+f66#YRBr*g^h zhPF%$$l7o(>GBfB0a+W0x50ner+ zABn2Kvx^+?-aWV^u&bB^>+#I!XLNbD0q{uTaxQIWHIcLIQvnH6) zSWW^EJe4oG_*9l(pp}UsGu#LiL1_3HBcMg{XHX`j2LgIIP*Rj}V)FPQRatMmFuCVv z4|O3Qv9#`3257b#U|$uF87b|70`$zO^A-j4_Scl)(<*+JxIru#n=2owTyr3xhK)c*l1+K=Yr4vf;N-j9IAe;>%@1aRL1 zvO#3)+ZXNUfwE`O;1 z|LaN*8M;ChFy9>^^yycP0>lD!ebhsUR6IfnR&}5y5q>{|3bb9Az^j>?O_jR9w+Ohd zbiV0v5n?)=*A9a9K$|6xTS!zmo(2CT0R7=^zg{4ejUwI#Ri$r;Xo3CWW=H;tcc`;b zIg%p;&aUe5`v2D6@DI=K_cud!fl+yA*@5%Jk^FNfa08$7SB~sIOxpDtU~zkhY>GBl+l^MM42h*M1-I$sGm2U$dy9bQtMh&ajKP2(v z_stfA>2kZdaP$1qaD@I9|NoTJzvBPjYWlDC|IM8J_2a+B=f_s+ccuE*`20U(e4eX( zYw4Y1JIK0PXmg--bh25e>$tg&>GcT>;I2hb@fjf;Sx^=p8@>0(fSVv3q=?wLeSYBx zeH-tI8L;cRdF3T#udd!2Hrg^oVwzNQ_VL@-2oi6}uG{}YUqS35Br;4A@|ZG;rnN}?Z!06uj@w9jQswgV z#G?E>JQsR`w7t>j`UL+``bDgetBcHyz|$qt2h7)hI_g79w1zT#_{B!mm%*bO4P{HA z2)@&CDZdapLS#@ce`$pq6oOju+dE&M27N>L!-4;=o;?B*E8XQpo99c4@(wAnr{m?3 zsJ53zXQhQ9FXoysDxBbH1xqOsA#EfM6F4uE^FdFIzsvfs_V}#?5cG3Fn!Gr-MzY^! z4(+~eNQmU6;e^(*(60PJU~{Zif=y4H?En6G;Y(4Nq&o%c6D7?yniPtUDZ#A_NUk!| zDeu#@MsvJ3tb08XNiJ`{wv$W*;j!7zmX5sl$erJ@XJm=;Drq>gr9<(4_YaT{e~o+^ zJ^)#=lCdjyYR$&{Cf0^B+77$gu&nC4eD>?MCC)7N?pd#jO~)mJsU&76$q`GNL;zxE zhLX*CKqZRPEloJzwStY!wCSc85!%mI1KaJp=#G^;NN1COdmZvo=*HwlGCC>m!(5FT z!ui`%lYQw@3>d3}LAZ_YoE_fkWdSx-PIJNvT00X{Ea=6~dk+5hqa(SG8CC$Rqz&sA z4^dj7LYHnWg8dakwu_iI@&2GYiK@|0(o&GI?@C_ab{|n znsI24XL^smI?Zq@^B@<11{S;G$y22wtj(NYO9`pk7g%~-`0(s~YP7oWq(^A#?Khlg zcoBo~O$Wj;h`3Z;c|V5;y77*dZF=^KdNw5K{D4~K&uZp%=hj}cqNZ_!H3iV2)^FaNAA1Hat(D1KxkbFuNetHa-k2!r zuP@^uiuDXi8gv|L?2{cnwTF!{ah=zaUqzjd5PN?+2*8ac+d}D(N?D0^OQ+oqYH;L6 zFXjTQm1i5|P79uA_DSH-sig!?I83_%_5*m6U(C+YI!~ebIA*W#mslPbrAyQvsZ)w) zDBW3#Lbl46-f0b$0_zg9>Dqb~*BX6xiEzfK^|2Z;rCc?pblHR;#wd2Fm?5T4nDs*2 ztteKTQbw(voYPN8_nqI8xuKKnf6`o|cDiS3k+qq-5kn>Hy*p$r!oJ33797h{$X9yg ze2xSn-!BE1osj;#Xn*_YW%S)f^;T&)d3k?4DHstb6AK3JFxamH9 z#fPoDuh5o^$ena6vqMn=08a|@F}pw#KKn`seWu|IP5I-!4WF%k`)@9Z? zztXGlrM8sTei5?iSnGuj^0lGUXN+0^8=t9=rGr7IyUz-RXMTRC8uqB{5vR~|So67r zXG886{+}EHi9kPD7KM{PYt2>uwuwb%eR)03xtvZWr>yr@OT^7?4Jl%2!gVgDf|)g= z^P7yit`b3vM>FGG_x8A&dZRfl?gFak0{>G`@U){=BRaIB+xSj0=<6H5g}g-%%DVI8 z7*_31-zWjQ4R?Z&>F+x>^pjcBRaq(w;# zJF>X+jUQA{{bg<6j(;~66GQXs52=4ULV{dzlh{KaOJi#4#@pXR4CXK$lIR@Ei;8Ip zm6%JhPE{9Po~U+`Zwqx1#U$e~$tL6en0MboMH^N=hpBti{T@H{SgIuFUQ5ai-T4Yb z27)#BqlN05jB*oWoBg-iT2Zc?Tq?0&>GwNCP}oKQuYBnn@4UOppxY#KZ_%ztuc=r< zuKdXZUDXRyzysX}^OG4WJkzjC<^y1l-qpRuU=~X)i5TV_Dye7%QaSP<0(NKwW?ZGp zNfftxv4T@>VaX}*z}mOEMcc3M1@PefkX-jKVi1B@d_TXfB;W}i=RrhV7Q8Za#(h;J z?Tp_K65t4k%+!kM-;IeRt!&~qckxUyUmI3*qzI^J`$Sx*yTsgEpBWjF%Ut;EoSy+w z_-y7mAV3Z)sQmo|0i1V7oi87OLIYFXiuQ4mR9&C_rc;-*DP{5xPn%o;Rk{A;>Vp3& z)ez=+oE3_Ut)qyK%!E83K+Jj8T#vOBLKeHe1DOJ%%w;4lyUme5HP3Zdsu@BO4}rBLkcOI@GCT?DwKwrn14UK!*4Vk>|B+s{QI zwF2qL;z=*2DfvPl-}TOAl^rLAu#TS!GGt^@zJlI?5U{0`RRZP*Jc9dHCWvP}PKjWue3YJOWFsm#$k_;@#kA>h7=N_XVJ$uK~mrHXd)HkoJ! z>8&l61mAs{nMnAXmg_ACK9I{c!qFWB&R>dT z384WO!R2;09{8-rX_#4~BE@Mw^_*Gsa1?CIzN)1vYe2f$8qS_D=+T+ENi7T8@))s8 z#naptk=OCDkn_0U|=I~fAK zdeqx5I{^IJlwCog%i?1rg$uI8QASCZfG*ifgOxJ0lqX-rJ}`el2KSqz47V5*IgZn%qaI>j6c5+9m;%h=qc1=6 zY_~-(75V@*aKdRRE|~3+b%hl?4S05)!!?%O4piDx6SZr}g|qfo#hX4PP_(UR|@tBD1z2bS54zus|zjY`hgae03^^4NzV$-LXa_;x7lAmtG8 zHuTed@gtO{gp5yco>W#L-^70Ugi%OD1p5i{`zJVoHv?r>f&*d4-Rw&pov@9mjmZtG zs^-lzS3TP4s3REaW;MJ6UOQ6hSK)Upk@3*Nzj-51qk_T-?Pk&N##n(wUz&t&*9orB zcRdR$%dfdOuNkLy+L_<4wt0zwn|`hTC!RX8k5E2JVD->Gb%q+9-py-nwG|H2h)x&v z64r~;Ma4O|7eA29Bb1P%f%FJQC*a!znM;4*0uWiwy65( zFmKu65LYMbQ8+J7ly1fPosaBacKH+^B8i`F30sr3Eoz}_>c-iNAW~Io<_VrHz>T$| z0c~rvq7tJz1)W^Vy(Nc@F{ZGrHwKtiWY?M}TH499yW<&1_#DcHyW%-C>6Ld*@gpo! z2%csNJXN;eoYIBCPi>g=ch&2u-A@ngN${C9La$-OjC>)>s~(UPMJIcncfjG9;?iBq zcGjNPakjJ6&M@5-M;+x?7Z|I*7hTf#Eh=q4sgr2fd$dVwWv;;iUKgP}Zg;ONSE;11 zBbK$ZSzr|XukOQNC+oxDP zX;yq)qam^go;^@Or#FXHgPhYK3nv+5Rd;x~3W=HP~io=x# zW=ibYUI>v@bxpaUv%sK1h9zyo834Kg5c6;d-ZEGnHZRSojeoIU3tRcJ|v-bwU zATZ>yUCys&x2P6i^fw?=Epx6YV6LgD$wQ>_!6IWVj2kG;JMuzd6R#@G1Gu`1`Snqo zLdRB?CXc$Yy;WpHDrVx2zXff7|A?KB^kw&%AR8hT>bcsImi2K*U1^O0><-jEMIa9^ ze${sLGpqb&tJ==P_8$B-Hw=hx8*37w5N?<*4>RjC+E+k&Z;=C$*JWGF@Zi**BBs$i zrvA3DvHINIVQMHSj(gO3B%dxLRZqjT-T~PcC8e1nIw-wwIW(eG1PJ4uW*U{}N4Dqo z*$#Yt{N9$ofw~*A*kAJ+K@*U6J>EvyQ8>G($hLxw1ETtsfyA12=cSG@I}gdTYl%y% z8cW8}2)MHJj6cc!LAH=zu6(IZ|8`wgctoYGewvUWrVN&EK>gq)^3LEA**KiH*X8rQ zh(wF~Eh&TW&IOoekUoP_YbM8AZ&+={G>^g$+#_tn zqwo99cf@yU?SHlDOnvd?bkSA8UtcpoQwKo?xqnmP=sM)aXR@byGOYwch2N@p4EC{P zPo^tunu&8Cy`nEx$UZDze!-zs0Xl_9J6;GAob7X)K8=*cAYSRKcs1V{(yTw(_&#DD zw4H0o9<^EjKsIzO`Y740iql{S&os)NnYGZv7B(a=lOQ;!VI~v7(RZ`v0H#702-S|X zqZIWI-fnU-@xALQQl?t$=nEjfU%O0_+KY`ALv)0%wV;58RxD{g+=rB&^UVpjCD$Ux z$C?kHuTt4WLx18M34QkXt~iB=R0+~iG*a%Gi!V8j>K&*RGeZ{(LBoc&k2;nW*%wA% z$AhQtP=BR2=d+Cf@rim7o5>+$j>nSOW-0<9c$rifOV3SgNTT?DJQq~6&Y#27<9JTR zULTQDhrm@pfIFTDPYCxJ^y7$NoO+o>>kOrs-gNC1>%|U&)$e2>TbK7i)#Atn0RAzdkh>LGa?6foFQv`g)(2&5qzQk`XrP+f=pMC z#H(G|kMCWqmY9kb_w(@RpvTGOe4W!O)nomMPyT(pI#+>)1Gi0F)GrRQ#${n$v8<}? zO20kZ$R6Q@de3Tfq+Ys8SxsUu^HwLvp9j(Wk3k>@I(q5+!b?46|BwUV(PR_#<2K;a z6Hky4B!)J{d)Rci6k7G)cA1Lsjo0K8uVBN9i8;m$+kFr^ zDMr5z+1}{{=j>JQ#-9lvB%}myAossIYC#T+<$>oFZ%(u~e*5zLk=~O!()~g#!Dx!Q zJQd^aHIe9n42{J}LvI4%3BAtXQH^ye5RL>Sq7>Fru4z)$&0x3g&1Qsmh$GZWfAzXj@F_2ErP^^++w zVRAC@yp%ox#2l-F^t7NTJFm>G^*XkMkwxut#I$~&p|(m@bOJ|~au6=o?GQO?viq+T zlU&eqb{Fh5=K=I&-|Bu(>VulfV8EBGd!#?7fhGl<%}XI;;XcE=bc!mc&sFGD*#sdg zeQ9BO5+RbOhuihH{2XRx8>?n4aK1<)iBljv|5?9ippio5mzq8$k04Qwe=yzFhZPYz zHOY7B(|$EOhtF#3w=J=MWjrW-w&SxYNl%$C(heAr=KZ*uohNKNTF5~<9@9qC)<5wU zI)R{C>E^`7Hh1M#*ig4r4xwVlUavs-@T-QMch8RF=x-rX6`a1B+4_ZT5QKN>5(QyE zdZkG=0P3Fp78(4V^#M$ifOVB*wA#*R*gTdY7Lh7?H_$5&X>1!@n@^UIUl=P{>uTJ$O%m}<0g0Txsq5ke-ub;@ zKm|fr=cc%P$_hA#bY6&}Z?Hstu(1mNL@KCv5sQ zl5H3#p-&|9&tz^uZiH%ME_wZr3#Q)}^;?KgzCh%`O47*Pt{ceXo1qB7+y{8`FMld= zuW}}AGpxnA{jx8EPI%W#r|A%>rfMa^f5B=Yr(C`hOI$>TzUk`A4F^dCi4PZ4+&>?z zrzaGA|4TJAFRt>X7-Ymf9SFPI@;&>be>&-ZpTIq2@JoK}u`@bsvpRVsaai{>o$^nb z!GjSY=X@Wlnvo2@8q$}2K59=YHEk}wUzp{Dsn;`?dmedi+*;4B|0dbbhm$XE|H5t( zL`5EdHG==*Z|>OzH>QGRNl->!i%J`>FKAk#=N^m=v@hbuIDSEI&w*NAO15DO>*eY%K;TXpE*0U-WpCg%A803tW31+RXOi{-$}o$CaZ$sl&Jw-Zw3@%UQZ?)NdmR|E@nx zo8CqL<9_51nQuM4+^i>#s%E#Ffht`pE%6DWHP26%Q%D2g?p(F+X@c*kZWd z)09%bAXy}Z%XgyOrA)t7|GQ+pJ+Kvi0T}R2+iOY7`LV@BIeCa6F)e7>wPU$3;O$9< z%&bv;7dR^Pz|4fN$kQArHbv&WL_KLtKFN9zh&kpjx@5Ubp{FFA|^5Ox(Zqr?M zG~Wx8R2t+{hL59S-WcmlM>~uAmW`|mM2J+Z$WkT0Fiuw5j}NG9mfTokO3f$(sTLzM zcuq(ar^tonNl`d@Attt31Vg3EW!t(kt|_24T)H<7PH ze31zMeg2OH{I7ie_j&iPeEyZspC$0G{rMku7h4_)KW{qtjk;{xYTZScrWi|0YmxH8 z*q}OyK_-nz*tDu0gYT<8Yz<|Oy4e-4M%tO6Wdex?3lEFSsnHLP72-Dk1@J@ATdmzxgM0 z2n@vwTc><;oKp$>fS+Jp&tAOkKM6kBx*3VEY+NPSoqFS z-y2o@PiU~I8ip}^!!W(pVAT-Uvs$7Z9uL}6w zx2j$c?2!W9bcLL!&HVkRM>}n8x9YBbQMGyZC+%u*^J;wW5yU*{(h6AGG?@2ie5BgG zlGU+CY(QTK@!G-2O^44`3jMmw#>zzt^|}~A`a1~Fzev784UibSZ~WD)8R<8ve#PtQ zpv-})tsQ_%AYx)zo7D_4oR)j#cCM5$q860&6+-8y zawU?~fId9Ec>}ieCaP$mfF%I|H|FJyKUNs>?J7WDQRg|VQz(-JopgoBnCK0(0M_B& z+g-FJrh}mh8FIYJ(+B+kBN5DdVfu_0TgZC)f*9d7u>VO3;04=IoGt8H9wHi zFPA0bRum6@)3VP*)WW;`H0;fH;ZGs22B@zb=$M*Bbdx6&;^Vt{lSEmcbZM@z8^$nd zxHRZmdPBmNzz1hn*x);@A?fpLJmg;YWCu^Qv#SvZt}lH% zrD(2&$A55liLDUd)O9{sx44F=S>^l~mqzj~H5om5S827yNR7H7ptmX{fFyZQ20)dx z(%e{uuVFaV=c=(s7+njAWIT?2-q@xXeDA?SNWfmrPAOIFiR;fES-q6WQ~~JB&B-GRmvs)29mhzIR?0< zEPfD0V`t(r?I9Ci>|48+Zlpxh-Go&=?upEmf8kH0^ zUlbuMFHw>GpZ<5xH9re@im-1|O9ukZ81*vC_Ajq|zQ)c)^ryAp$(Bz|yct~o0jN_!xsQ#*%+kpat;rZsL`EuI}J#x>JegG0u{3TF%#T!+mOnl`ibP?SjrTmER%) zp+Gb+(EC*)i_(ep)(Lel$UAyy_5B#Brrr3|acQLQ0J2iEBUIzQbsl&uO*NNNG^ep` zcQ*@m*B7T=u;=J)7TrymSI1J5cUJ}{E5>5u4$ax7`qh}vNK-BWd`&ld<6 zpVug>Rh$mrxj5(8dUWMkaklDF6+i`z$JS0?s8pY&pdUMDY1G=*znR@Tew1P!#?RdT zolyblfsjwG@p%`SyTGkZezvsMSMC`_C%YVlhj~TJcAe`=Gx3=E$&{}@IGt!l*enmH zr`y7IE8E$YE>~wbPdlP-fwXMg3g>DH_gbxXTC33P9M=XqB@u23w6joj@gZfm6*eaXsDKHY?CeA%iM z(#0WX?kv3+5W4dx1aR+ggy6Rx5*HffG_rL?eN*{*wYxjLXjtR$-nc{iIV*zG)TQiD zd0u{ceRzr=jC_Rbcgv3?{h2_huSg7kr8nn&JAqb>v!Yd5-h3;YBi#iPo8I4U_Q@YWy37U7^$O!O=Ns|k!+I_K zUgVah@5LKmcwLbz7N5C;McVrc@To`{xbBrWojyZ_7<23R5kqZ8?bUh8D@CmJuDWO+ z+~{=Hyy(=2z3)6y_AA@syJI;g5Bv)+A-rWBUK;0x2H66=pm1cHU9ELIZ`ZdJ*#;FbB|54Q=*J@qHSBB*T|lfJ^a2RP5P&T%fU z+SYo>s~lis`sj}$l|k=y3&qYQ4ZY^BFB`J4(s-`)+#B!6gFVzNx zEC9QVi_(*7t8QA*rmQs}3v-;7cV$m(A*lL%1zEd%BW3s0?3HGj%+2xKS*FhgG__IisXp3N>`J^v}xDdi=HX|>Z)3BTGoj?1}w+*=vI+H}{jJ!(1y zyk=IrXB$48vQH$nfkDO?`M{u<$*^0@Aqh6lFu&|8WzRv-M;r3IqOWa`s4P`^@}V4+ zsiX_Ze>8{-nF1A3kXxvI@rCWEsJm0uZTpF~5PAyR%qy(U2(rD{=M0`yU>6?6f&E*p z|KxOeP69MDePL4;p{{+diIRU*FzPy*u-^74)arAa)2YGzX zx9-iQ?l5cpc1QlJ+DPL3u$G7Fp5PFtIK2Tr7JEO{oeFYj^5bG~$vnT9?+<`pmoG42 zh+@?ZUmvNs1Z+`oSx$t`HolhxK0|w!xfbTZ7O4}6;|8yLMqS|;SBFG=mz{Bng{l`p0y+o^RdTuqLr?b%Y4 ziy_ofG%;mnVbh>vak5x|L>Dp7{NC``SaYT8Q6a(JX@57GeguwCvhe9LYbK%YLr(LF zCxuJ&&n&B)=F}3Jk?i7|!JvX~(#gF|<2yY&xK(I=Vh@kb)-|q70-a38nhR*U;`nIQ zx`Er%nh03ET7oE(>M^MwM-SX%pyS9?4q1vfXZFRVF0^Nba-4lTn7%NQx!7#wO)^Fu z&OMQLKQ&Htnuu#UhyXZJr}bX3jxyA~bXiM_ERV#q<2AXt#}np@_LbEdQGI>MF8HnC zoi4(P&AF$*tk6sZMcwv3aHCg?p<` zF~j?t%y&UIE!Jji2a7eqvo*`Q_O!<_o%XvAk~Nj9jd1AHON)7$%1f>APPvNxOQ!cp z_#XAkm{z&0g`11UaAt(w-Tv6S&rH)@Vn(BM(mAFD-D8s5xH}|QI4>+WY4m=j@TzFl zi{V^>#a(!JNnlb_K~9q8L+NP#LDyGSn^QFgL11eh%Hm|T-5Qjn98KJ5)*MgsI4e<=OOrG%)z4DSqu)DM9Q z>76kpg;n$j7Tu)7YbSe^b+nN~TJ@afkKpPfvMUC}3bQ*&_3(VEhN;6&q$I)q{3Y4? z{uH|`lsev`Ykd}Vj@!YbdG7PePYJdcja<09)Joz5`$VAyE~-WLaU`F%^9ySI3p5=coh%AW zURe<|Nj!KsmR{Yz423%E$A&VW<%iN~wyh_3MX{gO%5BU|)fncDazUTQ71RZ zMmA{he`*x&EC1keMKQLyD6PtF)4Wv7)_p&F#rkjyXJsfkphE4UX0TRFwh>?_4rru9 z`I_FVlb@NgRPj^#uiEGf;BN>IaE6w)?{7dM$EO-6f@rr}SnN!O@1GF7BA>f~NEPp{ zN*aDdC^Y*aWvFR=n7!^r#$zJixJq06jkgDvoOSg5f(cY(GwWKm(oF#0#unN3!a@XF|F zIyI6{Rz||6-qqHe91X})n@8WD;`H6$0m@Hs-_oZ;-Ks~hc~pR2a)z-w(fHN9-)`xI z5YR+uJR6Q^G%nn0QssU2_rq2?)i-OeJmULY6UNC>7JeDz6scXobKZwpBFnMdDC$z% z8fSqLk&KZ)Ac?LJekJ6M;nA-~vMA5){K3N^8%J7WP(Kb%Bmat3t;|_Vt!`o{6+=+J zPb>-Xj#{j4e3ioP^as+V-4*u5*dmM#V|CLgxVbp!#@(G0bABI5{5ApSS;wGr_G6+U zN9h*NmA|lE$w6QbF`cor!tpD&^j;m6`f$Qh+$EK32vSX7g3ycH>oG zHLZ{P>@o!BxlTIh!#gPO58N2FqT&i5?|rb3dH=_;#H87^k^* z*?13`^c`A1B7m%Ij*k2t!WBE{-XSaKtgV!z#URUNW@0|O*I$E?`(OlQ9Bfy*?WUb( zPc|i!y=ALdFxkn%Y(6QJq`9p_hqD7Cw2TdFM~oCL;xOiB zlV_}hJ~%jhr;vfBZ7VOlb?LpmL?JpkV#>kuJ24E(x#CkujUDa19<&Y?<5U3H82Fr8 za=g9NT+5OM?M0n|;dFd1pOvjgLavuQP3V!JqUVs zuX}-}o@Xja(Th`@UBAr;#R9lXUGV}8`t8cLE2o3bHuEhOqIzWalL~U=X12u^VtCkd zRN?)jLFW&Q~nx+-dqu86+7V+keYv+r=fGN_iG@Dv#Ip~U7MqZ82DtU@C> z`aJ)ex{JKqD>lRUz`A=J-0At-_F2)BtW6tZ`8vr`$!-l>2>15uAmFlxjMn`sLCo;#wOGb@|d*<8QQTupTA3RaqhFv<|ou|+JBv^CZph8x?7Ij z`5`)s=lsNA44bj45rX(|^wC1c0$}~`#2IzpeYwthE)~Wf#Q!|y>beSLU5dnQ+_%Z& zW<1tfQ`*(C_GH|q35y{C3!x}--XipZp_C;9^zp4)2b*CrJB@Aig>#Wl^R~6wlD}x* zGo`1CA`)$YP8oVtIPmx#8r9f38=re&Av+(+Ik;!PmZmjWS13Q3nrrX!KL!%eA(zfGF z?p3mXOtEPmPSKv$VjdJ*5^PRQGU^h!DYVn+ty{P`a0`AnU{Q+p)`!xyqzzjA(cJ#R zx#dSZF5A)bZJ}~%%5Bt&XomO8*l`0|l#+9*x{TUuO_3j|Q@`Kl)XfP_9KAZO+{r)} zOqH+H&cY|tYS}~-$mi$Wt#Li0>?4lQWREztI%ACKR&5R5f4uw`NC0r_%IfC5yL=0G zU~Ovgy#>@<;flCYo+<-Iyf3$B!|2kdC{am%jjnT20I$=prOS$nQ6@s9i}q`vCmPPf z-LS;S6ImbzD3tisQg8s6yJumwH=h#wXH}ep1$+cadn3OMZS6!s@ zY~V>rg+m(O-C`}$H&s{f?v)=RT-rZInr$g-;>LH1JvZBFwpV)Cc{-9Wffli`tLj;M zRBf_H7-8?8pf#Cl8sX18e(XY1jSvjnx0Cc7+D_rsz$K;+?%$Zim|Gk?NFw5zncI5% zBdB%9^yG%G&$~}8tIOPhrUV>*USTNgToxwfH_e*3=lv?b4UGd$C1j`0hfV5fvd1Vr zpTBl!MN`a$%ZC{{thj0_0y)~SucAaXCP64E1_eFtCZ;ZzC1PHY*q@*lsl@lsVQ}TB zo;1J@d+J%2X_H~NvUsJ>xnVe%!c>PHO#-%_q5ohw-%Xa8?~%>oxDz~e(lo9^ZFeEJ zOte-5mJCB#>*ZYpH47>;#NTLW-!B1;v8rB%fnx?zNaS<&4K0M)MV|01#d z2Bg4tLa+pWm>HD2k-h!mv;k!PavpY^f1bc3TTlhj%zbvz< zy*AO^;#>Nsi!C~R$Bj!HZ`0wT1EHd?)m8apNtR$34rgDC)kqm~;`{^bCd7Nw8%>I_ zi20=jk8IynNE79!@*A9K}aLskI7+qlynBI zfu&oH*6#Mbw;vPg?Apo1QP2~(*=rk!R*Qy#+DmTNCZN{Jn-aCr$YT&8XxkG*lVx^f z8b^Sj+j#%tcN0Snew)`?06T3-}468%mnXW-%rZ*iP#E4F)UwG1C~cLn7f6 z-|Zp&udm4wv&N=)Uwr#G$~j1W;ZMTHoZ2R6u$iaI0h+cL8bJkxnuaW58nzs4?XwWO1Y-%eD$idWuQ@W2d>fRDy(F)ZAlXx&OzOhQU`U4^O3 zzHUkiop59r{j`9;xF!cnI2Lh^usmrgnVR>2$Ka~_DP3@N16E(oECN zP#5PVw7k}cwgR_TZT_R82RYoch-vJ%{E}28-hi1Chl!vu3jf-RZ^9^8`DMQwt9874 zG{sE007QT{Ma1yfZ>A7r>fCdpK9$^O^`<6cH+fCqm{#6Wxufdt$|RsN2~#-5G&1dC+U`+{wGQzJx)@z0)d2HnQPJB4_;8$~+`Z zy2RnkwBDpjdt7U|*>?*`JT04h88@Fq>%vB!($Phz=IdgVfPj0+I-f1`M3F1}jgKEB zn6W8etZDON*p01qxoBUBULaOcl#|}#|FHK~L2-TEw`f8jKm-Cof4Y2r5cZt^k&Hmo%*c?jA^g|Q$}LBaK^5_8gHBdzYua518RhW}wrKyLjkt=N zMxhqSbR^ysZtJsKx4V!~oZ~ubJ5g*UV;qzFXENGTtIEh@<5(Y#<>;8PNU<-f@|=7; z{pERP%KRq-f0y;UnsqbCOEc+;7XB+}9lI%AeRI3d%aPFS{bd39QgW)h$p-M20@}J~ z{O^_&WYdYzsiL&k+IaJ}W^^KMA7cb&#hhWbagkP5Xni5XzlHNl*QA|f!(Xha4$ znCsk?my3|tXDI%%+6hi@9GmMhVCB@Jeue$&Gw%fY=>ZFwKDOeCt<7ZVoq=Fq_hnpm zHB>(>0+TXeJ3g)DlimOc*jbA9i)2=JnuirgQe9rkh_p7%<5P4O<{#-g7LtEF8?jR~ zU^7D9kt`6M55v2;pe=9hhM_n4Gs5!SYxsrpzEc81nVbfnMn8Zv8P$H-f*mi~Y)|~; z1iu$gMK>%X*H+jCE1Va!?Q1Bw`HYV`!b2Ul5X6$l2K^O?*JfH)=Sf2pA$u++!8Og0 zajf~h`X_Ti&df6dF^mf*Gv7}_B+e1J)giUY0PF(PT$y7r6r7odhd`bvpIa?dItB@U z&zT(bnxld>-75`X$GJ~=)8E&}j6+_tjMtBr@1D<^0pZ_k0n_qpB4bmeLj)G(j<8wM zb=8%fSoxmZ@rkg-Og*) zct}Hxp<1ElesXmxz;j(MH<7JmqhG3YeKIQRo6M`n9I=Wn3>qKAkGQ?g61{r0(9S{fRQHC@xoD!rP7BF*yJm=Lag6fm+(GLtK@lN5iPH` zW7HZw0uoG=0w`}FtX#;>OjUo!m5?l}BsLepxJ#?6n(;f0^zK)(@mw)9gYmPTh-M1~ z8y|IwT=K0!L*nEe(vo?vpQg&A-^CR7ry z7L%=OaTNxb@{VUFNNY7;B=f`JVKId>eVifUQ2MDaKh9vchjV={VO=5)cBMC_xol+p z9-d}K&NmC9Lux{)BZCwVX;z)hxB7I)M68Wb)RKJy%6FZ@EgvTr2O*M9=>9SY%;k9cm%4+vC`pDNNpDna2zo-Ey zw32QU>$ff2%HH@XqjRgPbpEBG3{DN>SJ7ZiwDS{wlH#VkD%h69 z;4PAj23_?miRN!drkgpi+MK&R7KbSr2J@IuW&8-9m=n!P&wtca#hyK>Ll2j9qJPf3 zJ=y5LT+-xy)3823a_kZh(e4AqReqbbB;D?r>Bcbf*I>LuE9#|v1+@g1Ts^f+@#ebfe zd(ZR<9fwBvb}_cpAh{cZp_Aqo^O*&~B!Uacp(9?QAYY2RpVkj#-z)muxUu#}3Iq%x zVc$J#?83Zw7NEM^*$qn^01ZW;`bH0-&;a?&{GO)lQ$l334Yry3B^#j&~(#4z7G9l3G$~__bkB>d8yG<~X*#tys-#F%$ z!wl{rkHcEAw~xcSCsFK zqU4og@2yY2>`uPlB8~2DZ(I^3yw=X=W2tx@Mr^Lx$r2vmnk9+}BYImY!m$bVs+6;m z*l84*jLeA(pIx{#4&70&vnlE#?m^79SG-WhS@3d%gBJm)GLvj~5M8~pw_?c%HG_+| zvO}+w4B;4T=s^E(it*$=bTk(*!6_VS8P)p{`8cyQo;n;7svE6LKnL>ju z)Qt?05R2_InB?yJlmao$bX_j#Y-Y;Zf~+mR86bF|^wD3vDzFr8V;1;f%M~XDNeUyq zJ|mic5V-*sGR(_uaYvR2nP!Jo_bARPZHYM zT%4Tz@aGJ+?V8l4cQXfk78Ks5wNEzX17^MwOPRt{rTnZ|_HEpCYa9+*C-$?d1uO{2 zer9n(IU0Vwi-aR5Jb6gZl1kOhFitP)Wx;%ajzKamTZnw}OWFv*>T{bNn-#d@EH+R~1}@U3S*$G$vyUNrV+ zP%+nbYpCf6sHNV3k5fC_$2$OfcS+Svt8W|DYwSol?_K@(6?yWeqm6k( zF4%9&d5!-CeNm)$uJ~vWb9*jOj{*t9 zoTaRoJ!gPV092wy&Yj#Q+aV4to0EE`*!LC1L*JTozjJqmVj=AS(t*V0K{z;;tZG)8 z2k1M^Ep0rtSB$uoNMm6bjUKQZr4aO?3tQLwR|`OKx2b$8)fIRjjlU543)%GBx)_JU zZ8XtoT8L+au)p&PtHT28ZMH>%o`H*UX(2yfJ(}?gcUtck7$U5oa*X#cOIW@tYOo+Eez>w zT3fU7^!U%(|Ea#1h}a`de3SXp@qVLod@-Khtv+_@%-!S$`D|$XgV%k-J^i}6m0>cr0E8DhTW zL*2l*Qt8+(Z7A1(m#O0`?bUh2Ide3+n~RC1_Wt&InkY2&?St&_10Hl zDF_Rh*&UapuxvXKT`=L(_97+vaA9c#Hk;HP!z5m*887I6(mRsUm@Rh}9?a6x^n9)w z!j^Cp104&x*J0S!#+q!2H+-xL;~*Q=c{H8U9p}<&+xi44N5b=BJdeY84&&r%AeP|`kn*f3ot~5&A)Vhy$V)q}8d&4- zc^tmf4AIaMLS`n|F9^g#t<*}?K00A24u3Vz37_lt#R*9 z4&A315%B^`%<(Pm5bu?|J4g*YNtKv|47P1stn{%44L^wF^;u%kziAj1**Mo{VG?+j zqrSumh*b)lGw@iP(MPIDv(fvYto z=B7Mo{F|1!*4--{1$`9$!R+L+e@%FI`98XuL;mgX0A!+8 zz1TVNA&4^))r0EZkkbQ5DnMVA1<(j%BqGJs21qe$(E40u$PbTDc)A&tH|_yhEl%~( zDTcIH7OkD&Cc#G($tjKd&ieHZ?~e)SP1&H;Mp4;{Q9a4$In?v~sm=RUJ_jzcsY3O- zX^tJ2qJNs7QM#8qlRz{nt1mt;7$b?#uJ1VsKZ1T3N7c^)cF%JwKGjNth4Y)Hle=~F z+%rm$&tY;^YS}`|o>a_9-|sw~Z$-)A@4J2^QnNMwb>*)AF@V>sFFro#AJ6K|cB&r> zxJYa@z;zai0M7hC;B7|Gb7iD*j z<{v{^igARF8*n7W|EXs5ZNtZ4`yx5IFi$X1Q-V0ik%{PNq4YVOgcd%)^;-P&t+Tqy zdR(n1gv>_YUzGM5u=WWrtY%8g(q^)iX$S67i>Qy*{2w1!z72ldZGKO(dicnHATLUk zb2I~9$TnC;^=No!`*szu>y;^`5?k9Z1X2SzCk>1%2i$(KHJOwXiE$j&-W-o(H||Z6 zOg2BE+<5t9sgz@A|QP+JJZA zC}?~wMKorOZbYslyMPAN)5P(2n)^=Qr4`UU!1F4LCUeSQ`|J)m(o6fO-JVG-*n9!XD)I6 zK%&L%R;-yi{!LWc@)PC5Qj-JQMXjNSuYN(x|+HVh=hr}|s zR-dJVE+#z-ba~f-y=XD*WdjyG@V`RrQ|Su$8%G8JF=%S3sJu0L__JGEf6vD2bT8Sz zkf|+sv(d0SlQe}Zi(28knV_8Ye%u7O`@cg5BsBmE7(Y1s!))9gm$_CD=UdR$&A2km zdc_5{AnS4dj7(f5EW>28h<~Eq3fr-vUG;3}3#Q{{t7vjN2^8w-T+{4acg$Vr9oH4` zQm`;!riyJV9o??Rtd+NdB$kN;H+WyDj+44B&yd)8Q4E99z9wec3BGF*x!t-dmNNTt z-oorb|89&t&^S!U@K^lRrPI!`>zDeaq==HeNpQL+&)HK)LFHC5#~*38KZhUSo>R@~ zm#E4Jh~jwYH@Mt^+&8{)BVt5U8ET)|ybvJ$+WZ%3yG{8&lrlK)i3X81steb#qe1W9 z#$wJalIkJ0?1XU)jRi-4;3_wbI__QAi{HYp2r$p`(Gf970 zSns`Ol=iG)dyXbsm;8C$b2*v;6D|fre$Grr)>W8W_F0_wS!0h8EY))=>mo)#=n9;j zbvcndO@RnBk>C4yqTA>qzhRk?Akj2!IK6Rw?SatQnX7MXrf=e9aHbyqsR9pZsDPZ4 zJ5ner^IjFNvf|ABZ;hV)6j+N3jqAa@My}6gj612#Pj5ljSmO~=;`&0Szw>yQ&x7mY zfWWb*DzBV8jzynJF;Uno)yLYH@}nU4ROUM&rnozTo>3il?7!x*xvAIhnlX-TxvX?* zesv!@ueW@GeyF=fA^zka$Dym~3lNABf7I_bhiN?|Ql7p`yH|2S^jG^dR|@mgoA$)> zI7cd{jBA0>sK+`zveJPdczBg41?;?lehKa%qA3m%LQAQuEluIIZCNtb>SYGv0DhP2 zI{w1hqKDHXN-j2WKG*%mL_F7ujwCj0(xws7U<5xF_<3G+8#=&6E+YV=|>LHk}?6Ju+FNt}*_J18F)L=1y)a#LX z(xOcX5G1Nb-TN~svb(-@54!{A+64yHZn?IM1*KsT)gSgA>>2HR7m0o)V4baSyXWXw zpGWy%>x2KO@S=E6D5gc40MmpAxmVM#<(BDS{KWbW{q8u&F{4YMxOh)>T11zu=e>Vh zRUovp3R0XUob73CLOGt{#HjYf=3Ak~EGwDr)lRWv=un=iTh+p4>Qz&9Nhi=zbp9A0 zZYkV+UBG}~`sCgLm8$$@<#HC!2-x_FyD1Zkx0dx@77Qx1vF^*{aYF@B1H+518`A|O zCO4r`h%4`&v1h{}RK)i|zL>(33&<;yVew2heY&3%SK!Y;4`oD3qe=mch7N)DW`I9Bv`-o*BL*0!L1q)yI2dBPoX3EnY&pTSTackn#hr7LLw-_ zQv_WTI(s!ke9U(Fm!*4yeQMrw-s^^v3OH#(iFl#=zh~Rf;HZGOPP2M5pI~I?pjhVf z@n77Qi?c;3Q}BhB*Y%DYk(FknL?Ng8dwvb-mw+c@0c8I#y+AUZA0|_+sGG}<3Q~?Z zO}$wX6UQ0Lal|rtBLKkF>5{d<70&Fz8PA|9Rqu3^c|>?3dfZD_<{bp=Tc<=;6-}?+TN|KCz$&gu)+pLgqzG{T``CF9j8N%1L5a%J;iC>= zex}%yVo!z*K2rL4%cjs)kJ}1a)r{UJ53ElF{D0lc{Wgv5;ulXa6X!4Qc5l&up+Zt5 zr;&SHDAlz#D^!oJ5V0yba*1GDA)ulJ)VQzg2(f`7;FGF>1gy-p2TMG?l(XgA#rMR{ z9gAzT7$7^%3_30pLUzc{l$eqzaXuCSRC-AH9i~VRrk?E1ga8U>4kw!|{Sl2{Q8xnCgRmpmHQoFG#&gQKL!*=bqDWFM^qBGry#>LC#my zzQWdWm`o&;Om8TD!YAkgj|57b*yBRHt-h<9d{1jh{dSMnWssb;k?Dik&VpTzb=Tg- zm5^|o7A@-+!;F}|NQMamq-lGo&pnCTu`b1WzG46<2w=ZDa}9dzFqC{$Pa_|z;2KcI zhip2#&6kbxi{zFk7+-yVPXq-DP@qMf{MLD_W6${23%9>@qgE{UeHH&sAC!O)wZd z_!sf|CCXx$ZuI8C_3G>|E0T7wQ7|Q+Pjm^z9rKCzb0SkZ!(*pNW(lQ)`Qop5gPX*` zt6@ffnrUf5PUkPH@zJM4EeuxB$vg;&)oiF@B#$DoqpBCxpa+$r{uLuo+cZ^rmp#7U zZ&`9qAok~)mxp6CraJ7yBGA-Njq6Tv`nEw$YHT2stZ^uA*L3uZWc*Mb-L}4LvarmJLM3WM#>XyIk z;9a%Q0Y~dij)Ih0eea`$1k4dF900^!?)ADLFC>Re&O?K(9|X*-k|!HZ7p9HWYNrfx zd(}hZG`qEbIqDu*pKC8dkj&b-(GkL?6#(0U*sWwy3Sb&7mS2v|?Jbu^P zrlz@HAqhExO;O8@R)yJeF&s^bd(Qj5B8VqOpVxn896P`Whu;&j=|ye@e{mgtL9RCr zsV!|uW_%xrhXt-QFAahNI&h$e!n#xFHiNP`Ux|c@KNA7|$ZuC)!xPtmWE1pjEpX7U z`W$d`xY^{#VzLE~c~*vh<{6e2==qRPV%sH2L=|3tL!J(4kdx{`C~S6a?EL0B4y z$7Ug_PsZyKUBwm2U`}*7^U59UY3^dI%L6N98xoUCK@j`}9VM2Dapp^^37MbYP=}}Gn)XVc z6Gh_(5>GI(=mn^9YwnIyQxK;3wS^%cq@4VoI#s|GX0am1H*0}@2ssEn<9mGbGa}2l z$v#yJaK*=M2w3!9OZbJBaawG1uq0j@&xJocZtqfF589!^0#eRLXF|z$S&g%zX8X0K zy^Z+vxDKYTiHk+k^(ovDmouA5B>+IzdfhPfY;O!+s8&LwKY9&lWZy28t+EwpvjHU| z!akaZ#mys$cA?I@-p{N^;7$jkc0Xs6IB&eQxvVU+`SuL3gN)&@(ox?P+qi>UK4T5u z>NO)30aux9XiXMj_KygMMaEI$hosFRVpxUO6>HH>DWq5Fd5fIg+3G)ZW-N&eri52M z*493IorneFG-^ERxj5Q?qqs|RELDk~W4Ri<|DUG4zOV2AjFunBQnK5+iib&01$%_4 z7g^S-BN6+CHCDwT-1J(ic7mKR5bRWy8d+Vb${AcoNapcj1-jVcm4{@kEJn;Efn{2n z-1nRX$Zy2fLIjx7yY-G%x_~mk_m#IGu%8ypIluSodpXTYhd$+mDQa-1m>3k~gA~G~) z?Ny+X^W>x_m%J1d)x+WTK@=$X4LJFLZ~_>-dvcll_5-hIb9=^C_5dnH!l*uj(P(WF zBCcr3vm;fXJ2N+12KU&sjJ3$D$`zXkuE%o4^Cyiu^=;l6Hr(2~CAO7&=$Fk(tp_)gT=ruSc!7*xM6oL?j-^Q{D&!QH}(ohyyC z^{9-})oGu?^040sxaJVKsF0O5?>Jy%xs1WzoJ>6As6?CY`ziALPcElU!w zvqdG$fs8<9vZL`lZ&!dNF+s9&RlNjHKvJ$R@$l{x;Q!qmu8gKJZ4CI;Y$aD)Awr>E zkK^Z?QU=d5Cd)D&y#Y;RyVSJh1IVhs|5VKl07<0ybL5><@EKs;WO1f`U3IR1+~j%N z9mj!4ITu1qTGiNlZO71me7!8xkqH9RDyA}mL%bI^1Q|aS{X9LG95mUMJ2&KBW|}p_ z>GZ>jqEs;byAM`+DXZAiRdhs5_Jhryze!F&H zFArzz%8)!XK(sbORy8-Vu*!?Wv4_j?YOZ{3^ToHB6A$>}g!8Ay4t})|M+}l>e#X%l z?hh_|b>}*I+Z@X4t)f-RcE7*0+?Psh{rQpta1&x%h;8b~L>wdm5n@WSkz{u0pFsmG zP-Y5rHDt#&rNm{#YE3N&%Q=!$8Y_&UVEB2kXlNRrp;QOV+r#KXnZZNBkg#e+CsFSI zs3SV=oqt6;MlNlK?3Yt7+zrGqRhS*DWcnDI(?O`#uDoo*rPXRhXJLGr=vbs&{%;yw z;E9*ZrUUUGkGDn%_s?OYju_t?PAT#`@AP86-RVVqKUyQ{oTlOJ&3g9TagFp}-p3Wn z6#=xR^*qT&`uXoML{YBJjEkk@`(D#o#DplFa-z-lp49FZ&_LW{S#eR#=U@?B^Mm`1 zQ-(O&YimJBF>^BhjJs~VgZf0Syb;#Us}=L!i^6Sf{N7+gE8I6q##;QnZmyz!rgf8s zo>gjY*B>uUM-(Gj52Rylech{kQ~ z#gIg@*r-%eCvwf%{|?%~{d?3ubH&t<7TjVUi#23DZ{J7{pTZVe3*p;+1Z2mDQ#+iI z)Q}oGe}!?LjGFrDW$!LNQ%mYLF(gAZSpCtPOjS=|bp6l_i6SeAzWhh(Z&I5>37+#T zGd1I1&b*N4B%LIBJgu#yJ%@-EEZsHli3N(%&KDMG4w9qjRVm(mWfRu?9${*2+l{mS zAlVSHBxJcxtFttM$akf8L^sN*|E0X|5Cg_>3xyAc4kyaP*Xa`TRk!BFI?WD~rDoA0 zJKXNgE>spO3^aXQnFD5QE39jq*M_H7+k+g-`{gH|yR_8LofS@o1y&vsqH#19% z>1Bly^{>$wXHlEDYsWtnmjJn5(5t~I^KJ&#+KBn`@#vr=YPe=A>VJ1i@a3aCv~0w3 zF>MT^4UIEP^&Wt!yFZ~kYG7yjXZin2P3)Sr%yb2`!{z*K<(rJHo(T0$luk^;##7nu zKlRx%Bj_|niFlirX#zeV7g7-xA8SDx(GuteF5he1(LSL_MHRE5*Z;^CT;3!WytP9E zG+37o{5bzxCieB4GKXnm_uP+tZl#H-j<8(OPOq$p2az&I75}AvDXEga(^XCG?;32( zU0!i{?!_cu@~q!zV~!N>A?m*9!(qt@$P7U%wwdGBjB~yBZT3>yUr?hsE-jLWvj`@J<1=l#SG1+PvugEfQZT)qW&vt6NW53lv%{@|N~5 zFV+qj0ThT2xHNK%n337h-}_bNufNM?+iwVQY!|%t7DZ=#h6Rl0>l)+_^MA`@g`vd! znu%U+Jg+Na0?aCNJg)}VQ(3nk4 z0SbxPruBQrD&0%QWc74^d?7D@qUH0()uI1dc3%uM0jFJB(VM2R5uu4}dkLbs)-Yp$ z#MI%{n#``+lEAyNR00q&C-PS(arQeO|C7M^yGZ<>k+8Gb9bK`2>dvx@Zjt))&Zl3K zg&^uBy3P3Tblm3zvWd(Y#&U5APt25A!ZwxJswswO3Ltl>i<0d|Co^fvA&o?nFTL}voyL4wo^;LvC36Ac1uw4_3B6_yMMY^5ylu+D836;;J^Q@3*>76 z3riO!HS-D7dG*f-fI*>sEhbZVAd4y*<{lIqKQFyIoiBALgZimR>VfZXoH3uGmb(q! zar53hD`6ZVx{-vx?CTOIFhl3TiI4u%`szGH?CqKK7AOIz?O3+SFff*SY0rxk7XynFusk>^@peCYP8`Fj6z`|M-;8d#V;9(0FN zv=W#6r-vVgH}GqHKqI*w%%a)Shr#-7`u=@iJ-qdPD$((`yp8{ZJ0-ri@&8*O=rBpF ztcvs7hR_Y7`vcCuqxD#cpW-@6Eyb?8sFyl4kokV?DOl_66r zhLCyVC`H_kLv+ldUDU&n-$}mO5O}po2=`3icI@5Fx&GzJsHhET-&y#qC6eFVCoU-}8BbFZQ=(D3wqtUyAX3DO4+nR4dlv zR_ZP-tJq{zR#$5WnW^KsZ_1<4d|*WVL#h82A7AD*G`>!#@8{xg6I{xNxH7NH1g60n zr>$E1jd$+`)4^%->r0L!3cr2Zhr>j!G`(-&8Ws)UmyGc=W2@M>l)lq3ZM#!SMI}JH ztrQ9rKp`xua)e($*X!6q<*TEqV$^fqIWcb}oOcJ}?n87n#VKp(x8zexy0B_+d6buC zyi|u-F*qXFKchXX^h6pPS5qBhYT1zPawAS34p&Ixko~2x@;XZ!vOZ3?9yxe5&zG0F zq+UYirY?0vR9A*-N^H^)i(XTkFtu!}O(g2#WXNf}TTb(Wke?H4W2w}HB!Sbc#0y)` zeaC&?YP1LQpiAH9=FLF}8Jo6sd3_8!F6%KmX7mGJUMMM*uJXR2{KV(GoAm_4usE>- zxmJw&0abiw|Bud}-p2%8M&6s1a*VEbEvQc!!zG(=a*iq2(gO+y`|xjZ*a+C7#4umb z$6OV^qR+&Wv28Uf(}CP5*3e6nxz{am0?khGg53YIOtLTYf4ZQ&+!h{fY+G~qfUI%o zuqSI?$#FOyC@dYE92KF^N@lTAi)&c4p@Z;1C5U;U!d#?mU1<-l#B3H^!-+Ue(V#9b%W&4?5m{GR+9$ zNJZKZBw05_EQxGyikrr%FHBp_9Q`rL5_1@B#+JEz_{fG>jq>P2>`*@-p_X$)<-d6R z!8hBOT)rPa`}O*eH6>nSa+oN)8kG35Mq>)H-=I6A4c0wy9h03h-Ww-V4lkGTMct20 zDv4rE3B#82^S;9wgG1oOHIcrvr^*%#R{fDV4y$jxtgWZqZ%Vi2V~KF-qfs!6aMG4f zJTI3uyT3LXjVV?f^^llpHcUKEEf$LT#nuRIfDO283YUP37&3iSFqpu=BJSXt^~-!g zm7x?x4P?PXBvBKW~?rWosM+3A1w7E~(J^ye(N*u-Atyhd3ZpTp=3@ z&M4iI&uGjVIz-eHFB@u{b~xNO0R~unrvNGL(?Y_WPn$b)7SnKGw%ePg`_NPK@zcE$m03k+!AKp8ifTir+C86Urfk; zqCD4gZ^A$8YhiflXu-Ogqp)+V$p>4KYGTa}tOJ4&mTLD1y@&}$fDs&XL5z9Q8El~saWRx z!r#DcTS;U9^|^>@(5rj;Bg z6-JKKRxkg|0~~(};=m`1g!_|KKbl+eK9c&JZ4gRynmVpRk$!zEch@W-=W`MWn+jJR z*=WyX@nJ~Y0#T6@AFuNO^1b@5^CiJIsY)_z{{ zj7I4<3d4>Gy47Z%SeuI4NGvR6mMV|`%g{%2`39QPVF_QqN;qxz$JEgyzAf6TJlDhY z#=nukZg_W8c157=_Wr7${&`)$_Etdq`d#ydb-zsnVjluvAxgT|><3LZ1Uqhf<0XA> zAk5Vq*j~F9JI?KIVm0Qn+y8Xy5AH+uVeB{SYuH6Z?xUT_ZIQC7oJV(;Tl$&@@qKIS7l8|}XeCSziG6(eY$?$qMYl`u~ zYmidm{mP1UGt(7)Z`1ne0`%30*-9h&)f_pJMQfxiTABCkZe@@M`sn<5Y$uj54MT{^ zAw53PXsOuO8a!?L9T&Y5#%z@SgVsA%=Utwvd9vA^_{b{8T#zwDFW()TF&tGCXF0C> z>+@RY&DOhHrXT{ZH$knp0#tvtKZ5&0pOesBY#dYn8X0(F)AQybu4XgF2Q1dTlU%^{ zUHR;UXTW2lACTzcv-Qr~RTS4STnt(8#D^1LR`R}fh=xe@3c zH}80JuvRcB1beO7&uh`qcvazw^(J!OadUu28%$djh^A4L}urBz)c zckD{OqtG*w!mH1t>2niV^>b@KOU+oQ6$Nu3&a$yeoDsO!+z!0XYk%g8{eecG0;e3) zGzVGn&T9&|Kl=-WN1`v&SjsTJGxVe9k;9XeQt(rrNZilp7mSVH9W7{TlmWlBgG0Y+ zTO?T8`9Gn-!48a*{esFt`yu#>WlbEPUR>Y_4cb6r|6g~gH6~tTN}clyt(G3I zj%$dH14uM%x#N;EN2}TrdJrfw{>}E?6PglFuPZ$UY?15yn}m@kDukt)y@Kc~)U(f; z+D!=w(IQotD!svwRIl7qn6_<*q^N|oRD0Gr&lJ#xE%}&TWyZ3_(S|qkeGBX(#Q|$}jdz#Y-@~cL116xDY zP=#}oZ+J2<cVVLexQJRZ&9QVmBq!v;zk_nGNPXFpobmat$yV^}fs zK3^vJv0uv%h&8z%G~09Z7R{sxn}tplfm9LJP5yi3($w?rd1TG~J@jaifIbz*P)-N8 zMTK%lOT|I3yK=6=<(!^iaW6x~egkZw%%~?gW{1Q2XhuvBT1M>aSd zw1Cm#v%(B|E#WW1!f7@fTQDgSf$visp5kIj4~d5e755ep74!78?FkwU(0L)CR>~GL z);SiQaquwF8yalU>-d`ho*q#{U;JZb;z=a+Fv2K}MUx)rY+MMMSCikh(brh0wW2P@ zGN*zSRffukO5Z!A!D8%-nDK))O&Xk|I{V3>$@Pgr*7KUrZF=yz%4W4>awqv5u}npK zqr#+1$6UJQjzD}L!0n1h9A<^tB%wsLpSkAKnQI`xPz9}8+Za4_a<=B{Uqie$3`-Hx zqy%+07z^}MM|LH`H$Vqk>&76=Eq`)%1p`(xtS79)NhQ|uV6 zNgPIyh65l};8}K3<=^RgiFz=%2yUfTRhVC0x%W}i5jJqR;qN=RYY)cyL%YkXBydw5 zaBb>_a(FIQ@sCM7l&3NuY`wB97dl#3h4Q2dz9PVYxyl@j_oh}s-LOaaVb6TRzpq%8 z)aNFDt`PwF+??TFA3b8$^MXH5FgZ>$Sx=+zxfmZ1rr+8(RmpOJYsuPI^@fSw(mQUB zRGJ)^6&cmRV;fSZKs7}lJD)BTtg%a#EKDFnqJUxRrM?nSFnx6idwFv0b9aM1?;e*@ zwC7mI?!WR@esU(^*!9OiUhw9`RIev}IHfRsClw2yb+3qFo0p%}6%=EIIsOn<=I;5eEPXeENT}nYRPAUO2Har_ z7(iE+PMN9LxScqP&oVA7*03GrvKh#36L=7)AwljjH88Z|bJwiF<^uD`Y`WaU*by~I zA0BCC)M+I&ONK5Z&_C#hxStCnp|d;{tVL)R{!M!BXU~C_=efh9G3O7cpSp5rLspYc z1^dn<{DeN!X>Jauv8flTRTH4NEIJeNU;IXx!m5RH0Ct#OmFK|nMW}t6QLo|)%?41F zd4$1YcJ-{@;>@FbZT3r@965Y8pX4@_cBaxM(;F;y6Umex-cy4;U_X#eFwdi#D8J`0 z`K_0sFTZ0tniu*BUHl9t5&a0rg3&G7G#2lDPCderCS`<`*0xlM(m-cL5xuz6kaD}w% zO%%}7=JZWQ9Q95Hi|@SRYyol->>Ps~qpfAfk87&icp`O`_ed9d%ubpYzFwcRkr0h` zvrV~{;>%#Yg~zJaEIY@gY@BKM)7i)d@HnRBvRId^fGqorg)kh*jVEfQ!;YfIGc-{X zX88L&x9RHGDK64Hk7X;y{YV-p5f~;j$bFx&6T!1++luzbFi5LC3g}Ns`}q?ndX;-P ztoqoyhQpxY*iGPsTv_<0$n)fkw`M7ZQ6rX9`M_|YegN})^)7-94fiy!C!W0%kk{6% ze{3_M^qfS-sB%N2*C-5=MVg^c)tmOB7+GQXga$YzaZ@Fg70qPl(8UU`Wq8xNLxEuC zF7x_xBJ>K99!9FI^c771a-&mKsymy89a=qiI}{KM@M|?&bwh+)3<_h9JF!LkI7eH4 zhpfCN%N_^HLeoD`VB@SthTf(e1FXAi#n;$=i&0>U{ClNuSvVvQ5<^SpR(D@gpq!!dFL#LQhBKJNNakuJ{;V-vxh55IqWhe`M9+h8B`^$L$(XT(7 zCOpA?oRaauw;x48&#zvIEG*XQ@u@QLHr)Pd{!;+z(c=|!CH%jkVBy)* zDkRfLld6v_=wV#?2kcvw=vnlT168AG^OHbzf@DPFL4#tb$S%eK#{#T`?)>mEwE5|7 zSB$*-n-o)3Q{lIlt4O1b=zTNI9KyJ|M$tP?huIrxdM_R5feNg6QNyRs^Cp$=mTbO8 zDdqcmx{!y<=!vl71Sa7ywvYBfYv_u{U`je{g}Rv2;pHY@w2&FfoK$FlQzv%?wpto9v`>1)i?kA#6~i5+oEAQshE*% zzi-<8$u00gOwmkNqY0L}DbXUg^k1=>r9{%Q``t{8r|Boy8sbt)3UfCgf8P2z;K8YA#^80kXzqEhurlJ0$-qsGG$B-0n+c^sB*Raydu#CF*`}9F_^OTtf~OE1 zH8TsQfQF?j(u1AGEa|>a+S8{^8Fou{Tf%$bJ}`V}?wIA9?YXfO+ixGb4=+e~syxS2 zT4HzNIscd*hcq^wLc$t0u(Og&Yunz}Dd&09CxKfMf;y-Hxa+~gf%bdi5x5+pTf>9sNKKq5kife7R{x2amA*PX?3E<-#d{$Xx1-|G^he5t~OVM9(-9 zgdj*8RmcjL$`+mzk8H)aAK=^-+dae8jKCu{C~{GDo&FrYN&jh1%&wC$(_&I2=4@!7 z=_ZjoW-aVsTe0aYJczBuxO!`ukyw+5Z)=Y;Qb1*w;Azb-rLA^HTzY(zAHP;I_pw)u zVKq$X%rD3bQ)fA2h078NAx)Nm>z#=%rlU!3pjKE@!&{(&frcAL82akEMAeLhNYqFM&JHRKL$dDNR$@a?WLY@tha#M!SBB1Y@T8M&4Yq>0^p6w1;Y?n6^LkX286X+BR z*7;(e*$*i&i)!vImX4b}h5L0tMr<|7Tu-2+=B{JZ_Z(vfP3(po70PzuRp{^QD09u{ z)mtLN%}9w?RgX0B1E-Z5gso?)0-6qW{_Os-#+Rw8z&d{Bn3v}A>)Ez`N&e3mtwyee z!KZ;SWo0Tq-gN~?QK321JF3zuzo_cB1Nd;8vqvQG6{Q~WS6AX?T|e3{obY5S7%Iu* zC86G1crrZ+(>Bs%kf!Fn1;lX3bfmubjk;8`u)ykNu-gefGMG`^R}zewabVI*Mxyx? z^+M?@?I&kVz?xq#z`(~4x*I=S!sz86ni+zuS>zIe_J_aRTk7} z9P=iT2&TC0|J$9fo2XbUQn_Bc6hlf^yVYBG{&UdqFjB>o8Kii0B~Jgl&FbnY-uvXq zH96pIvL6-xoXi_l_#+6}oI>45Nb|XU55Q{X;v#PTR#W+g#U$;S0WOKP2y6iga8UxO z`;a~KP1ka-CfU0iKb}YM%+}PwYL+vOpv(RWla>DWUdSYyO7GEKr84JX#Ye~_*Bmj;>TGFEua%7Sa8rE|9; zve78AxohwG=*iGz7ig?=5SXet;V&=&E_?L6}Ta&=eina~)I`h@q zv#ej?lB-n;zdKA{KiYMj?4FgT3xgs0MGscvbW2-ypA?oAO=1d;{xA04DlE=r+X79{ zAb|kEf+o0Ya1RcFAi>?;-JRg>?(Xgh?k+()xYKy!+@H1f*?XP)aK3Lp-ItrM9-35l z|J5b4W{o+KAEVf9FQibkj+&h74u5fE5i1(?dbSA6J=`lyqBIhD&Y1I10MsgWX z!OVHqVW&kh6vCZNG0`7lBHp`GXoMjHb!TF=!u?zgSpqIhp$jWFqH5V zEJI1Mg@~lJ54%|-cDF1$mm{58wfPqPM~jBmQ3S?I8`Dk`9oM3`Pv^&xJgo|gSn5_7 zx5jYhmh)9zXNlO?06-TTsvl21{NZ@27YQT2ktr?xJp)G68n)Jl)F-DaC+TJ*X)_8k zOStZl)FzXRcjMYJbGnp8U1FcELn3ldM_~?e!Ce!*)OcS*g2-=rW=0k z*zHJ??7ndNb+Z+B@Ur{iY9X{1z+Wiu_lveOLEFkGryDqBqa4d;uU>JkNeBxnl4W*r zGm)co9QKbkUo?slVBfxNKj~*?S>Fz13biuC)|?&)i()h~%yuT&z4Iaj)Z5G~AOC2I zwf(qzdvfgUKl1vh!xEMvt>fe_vc3$>z1k`nvW*(H5@t)cdp9YU2(@(e++ecd;AJ z&OwGzO%GFThV+_b`5@yRd;|T*^hqnOqUEk^W}$gVlOVm-Z>Ck|`+EXQRIc(-N|@hI zev763ar|C4X9LWa4WmB#@`=r|gVd2|OEz6B{zYq!`mo*Ji%)Fo>#n*#Nk{kjFqdq0 z!#{a1{vwDJ7w-H;=6`~yT@!s+Aq8T86S zTe6i4T;mLL@C>Yw$Ep=E^4gccZQ6b zGMRC&5J=Ip@zV!Mw7ar@S7T^iN#`44jGj4qdQWRt7D8hSBC*HD=Z21O# zx<>$soRu5jseU&r3@XH%_ze_#079Kwl{6|(tNR&E^bP!1#z{X3wKtDy;vx@KSPV{0 z-*>EUH1FOyO}(D>OKsbU9E66(c6)`mK%9R=0E2-&LBPZjdh>MO27s_ndw?0OA^jHa z`;H%n(y7@RSSW^NA`W@;7J> zbrW)%e9KG~&#*!ik9-M3I2_fgBpZ8YxCwMT{90(HN#CC;r#`@k5-4+rYes!GpdSu! zx7Q{9!d-;9vOAiw+iuTQ$la0+PySI^M~@Y+DB;cB^+96emc%u0qFMk-HHSgMS^)p!8G^nYBrf5EVW$kqb| zRW#Yn3UD=M+8y-Vgs2jr5Dp|L31C|IJe8?wR&14P{Wv#F`ZxP!>xcfRwz*$6sj~Ti zwQIIdaE;a@X|lXy8O<~hM1t+w!=gy;n8$Tvg|+=Ryrb{;@-E|d9&8z!_m~+T2MD9I zUL`~|&T0oWKX;xV;4v!^3#NzK^u@B+cQgqlVZ>#*txQ+N1AFMBr0dCA{U`=2Zki;} zVl<~&y9Ju6&J);?OZTf!g&b3^fmCeRn{BA_#Ah@!dlLJKh@`->D##P?YgHX_Q2Du! zj|IE$wwz&Zs6F<6pP0AVW6s7GTLxx4ASeU3Y2EB(i6I_7 z>++4P(rgJHJ7ke(Fzsq|+CHx35!@VMXkHrtGi-G3?uYG4UZdCcF^v38UQ01 zE|7EBl)XHMLHrcLNWdrUD~$SMQ(g2iK5_>7w1qMnrcdOl7+#JLQUu>UmI=vxp46Ry z!NN|xr>9qPD%!M@BNn`Ki$?U{Tx>+!k5AAA!p|EL*(%2YnKqZ|xsy+Guxt5gZfGC zoM1RwQZ$S@kMMVtJh3gvzI1a?E)S!27J~(+d>+M9u|s78fNAze=1U7lkeD+-AF|pC zy9NSa>~3NXQh-p3woyg_4N;_;)jX1Ny?l6N*o6b8c(;Lbeh&7!z!2}?eh4?kz!yRB zBqCI+&|%DQi-3qXmE$F?#{lB93KI55{k$&7d0tOMzbl+yi=Hk{qi36O66G~!3& z0E1{{o^yGuQ3xsvOFBr73|9^Z^NIVyZ1?*KX~MU*@+Uw^RBj5k5+K$I_|@*)I@iaH z|Jn$rsY^81ayj#+|MA_$QMX=X4Vc|>;6j>!E>A!792$(syG)IAhsZ_h=!e_gEQDKl z)kmSHWTL6z?i5P(J@;z}lU+hl?r($Xq_ISAl~v!`f_tri)!@jggq(Wh0K4EJsyp@h z(80ye%~h`E*;rvSdy)>R3z=<-1B>oC?lYknvzMOQaqa52*^FA95p)XoOJdZesAydH^20d@t zCgu7le+^c)fh`{|3BgYthn=@(zU4Lj9}sNE{siF9uD_X>=n`X~A5D8sVO_3Dz=m^I zvFdQNykBOW*OP8@TQKrCkFfw?&NXXizm9^42AKPcQ5HAxXPUcKDZtmIeSsX2{LUvy zqC(Kdj|+f^v2gXXRWwV+7wale-2|6r<(_lO+eV#rA=Byl0_^QD*gC_ChWT@^;0zpv zSUb=o>e7hky~d~AOnW1tZyH~4n&a9sC>ONVy&^$!wrFsbKpx=hAKq>Z&K=fN2TiG; z&E3{lhJe@$ZSn4UB-go3i?PiuU*3t^2ygh)i~L%n_9Ec~-q=ak28wv~_d- z#WyC0!n{>b*ug|lSez}fP(^4HILmlXTV&@3+EZMg3<8)OB0vn_mT!RmNI{mLW*5>r z_+;@f3I^Z}p?Mb3nOpAOe#L)|v`{aKe6)mH?2|rPy!hpef9SdTU&6^?@if2);ElA`;$XLlx`}u%PX^nhc9QEQE9cYoYj&JSBJQQOLfM0p>bTW3 zJg+;|P23IDZcPteh8KR(HP3=KR~KX;Du&CkQ9@FFgh|&upCon>OB{u-{((SxuIlUX zAO0wd7dJXEq3e_hHIn?+7B(~Z&H=yafsA|=Ere<2dT)Ctk9{Yp!cS#In zbf5#$XrbNo;JyGF_pMMHo}?f=+xP$rw^+3Qq{Z{Rc1EN0K-bW?xE3_AquLzK>`5+) ztLkK0pA<$f=;`dtByGip_0?eTOVn>2=sRut7uY2%)`qn#y5QNzcOE<&*EZY$U3Fer zbgy+(Z?6AZienHYs85N6MH`Je*7nxy44u?N%l?q~G5 zjbLlim-5<)<{B-{T_0jTa-}-+84fF&dIP@KuE-5|D;P+X$wIZoi|vv(&a>Y;ZnuRN zEOB+9PAWVkrk)!8hx&YTj$L#(PZn9~(5lsmQwGHp#8pv!i=v3k$wFjE@4(rRj)V(U z8{p)n>Uvi{wBrs^gb#^#l{uQ%3@?DegV$%o2|MG?+oA#TyJ4`%(LX<3R1vWBHSgy| z@qQFtpMndDPaZcsTZc2Wb)x=(`<1zAW*slL>zNW~a0@rgkfTQwO?W$&a z_*c_BJ*jsB8UL8DqF^>7$5&k*1xOAZocKHR3mxG<6<%m%6Y+aJ2&eEmS0+~w8m>An zG}y@;FEte0n;N^-b`KDJji)o8t=^U}CPaAMvn9?O6l${{&UpwXow3&Ff;`>wZOMuO zfq6~?Y=~fRELM+WzC|1Wn z#d4kMs-JV|*VBXV)Gg&|(qi`S-F?g|wisEOxWec0$Ad*1;C(4b-;qECYDr)OY}^4^ zraG0AdEVOVVu?!^{SHHocyP#=_drz(`QfRkNsyzgLHtIc-STA@ z%`viBPNr(9JCsQ!*3R2)E>}(-MH*3^yV)*Z%`j@v?R(mC9R5>ZE#MO#45uILH8Ha3 zZrmd%8E9zmNR^WZ6a-3ZaFr>;kbrH}7aVU0oP;w0yS#M@=XxmT^HsM{qdX{aYJlMD=gMkUX}P4&H->7Pm2y7 zm(4OqBBlI74l3&!73`XcISV~oHCH7(k8q0a`;4JtBx&d?JR--X^}EHJhf))X)T=CF zBXh&LPMPqOFqJY)Bq22lnuaUVgjCy^G zo$wH==+qignA3DiXnc_dZg-^GlXS!9$qaw+*~wdQuw3qW>}bKs4>txKOEvG{6IB?3 zx*7p=axo*8o${`@?DN~lOZG~TyBhJC7F}kvz&POJ?1oQD`Cy65AC8FUd>$JUuph?~ zw?RrNH@Q7&18*N??iRIQ0EEvZlwf>=9#%^)pCZl2okIq)igY`KzzX>x!#O>!)VzL; zbc+VZTSS_8vOy?>hbu(x^6p<|_#72fsTHCPUw=G{6C1%GYIeb{PtxQlRHz}<32ZcR z#G4uBjq{t4>3yV&-fKlG!^2~v)jrD^DVj(-s!RI0q!2$c2NfdaeX`=}_nk*YHDC^R z3AQ40a=}#winQ7cgHn_`N13QV>Ow-lBCnxlDP}mumy~m(Sa<}xr2EjkN83fs%&Mi} zT9Rv_tnpv0G0DZdIN74Gl!x;To~ONcrpx5Ej#VidSS&6EJ@~daId&jkXSel73bi1D zvmF{Jb2uBL=nhIO@k>Oy@=}Y1%8ITZ2wmn2OT(4#7c%#}c>v~~6KuYE!+xdnflK|0 z?K0ho@fK6YT#2}Fm%10yTduflulGtm6>TS6wWk*ohW+8HTBo7Fx>IJ;@|?r8Q;Sk) zXWq8U1ywL2k*Yp~gz zVTXBB9l`uxGHt3Y$cc1DUR)xjN)={t{gR_3QJmu=aLoF14Z~HO6J1|D^o3R*FNf#G zXTR*Xb1(8?XhKY-gtY``C4RH)yV;>mP-~Y$zAi{Dst_~9aUslS(0ANGl_<8VOkJz_|+&NLbN#AxHo6ZX+~CvPv1mV(wj-NVc%5tA5R zh;Wu(atEPKK+g!im$F0ET$G-77IY6@&^RT?jqo#M+pUL1-%UD!9CR0P6_RXX0tabe z>J3*8#C&8~vw57$EYRqJMW+)pWFd^Nghh|9fWRgV#>w(phTZn&p-QeEAG#^Arf=g~ zV&WuDc-@^*O!%dD@y;2_&XE_zzRp|wI-sboXXAD9CXCSEs)fmIt}ZM)5->MY^U!$) zA0F4VSpG=vPdyr_`vEKVz28rT)ugYVv7ySsukcQG3Ye}}<>V*Ym0RWsO4g86g3YH& zD~xqvQu2<2$-1n&9_LlG?lmSCoawW$#A|Ww=Rp#Mpk^U(Qg zP9c^(?*Zp&C2gocD~dvy``$7lIe2|C`QKSurf)~^Fpn=wE7GiR;}!8WA$dn#59d-s zI2}uGYE6>wuNJg1a7;OyRItRWr&k+db|IaV<;AA=Js;jEskE@#vKmd!L}ra2D3W3| z)V|eyDEnOVY1En%S_xi5m1Y8P_F`StDZUSEH7IpP(!TX$L*e&0?*_xpy*jU?53O7@tmGw8CQV6>(D#Q}vgAYIJTJ~c3 zv^tyFJ>YF_O{6S^%J#aHwTR@LEOr&3pKU5~HFLH{Jyx|pj+As64~FU5RaaJ>zRj+f zl+i}5ZN)P3?PUnlr-cBKu_=ipK{h+bP!N=akiZ4W9OM8M?~a9@pButhZT!!d6eaEzj5QD1QBN}{{R5-jf%hVT%%KMcXp zcoc6o%-AUboSoUW{qva#%tx3!fxQHR?LcIdFv65p3%cl=T@oEv+R^nC?n0w7O1$#i z?UL$RE^lD|8~Var`L?m+>sq4FFSL@(x!XQNqmpfvR4})m=T)r_C&(g^{(T_72e~_Y zzYtHhWPI#wPLN}S3bDkS1HXDTyO(S!_`-w$7hW!;%FjV#R|s=V z8;1Y$;0Gmr8q~rFi*AX9EQARMk$*G=Zs+o)6IU7i?kk*x*KMCXGl3}WKa7r*^hEkC z6b6y=9lBGOkz**u)+V=~DVVrujI^7l-u~u9BO@rUY+>c9I`8BL?knSadEYHxc%tiJ zjXj4}VDlo5=s% zs|fy}XGyW^oMP$RgM-&Jcl)`xeuj!=TKqHP{`rl=9dZ;Zhv(xM`$?=bEi7Qqqy%2G zXIQ4U=-P z1`~LScFkZ&1CZIDM`y!!fW~gP^q%VuvZO0jJTLl-eJ+boQLL4|eC?B1QOSh8Cpj0` zILlp-BE#n7WZ_x*5(2jke|hDfPN+W!AVv#48q9fn=Ep~wt^w+Ln%yaKin4tUOSs-4Z&Hs#)nrWQ36 zM0fsZD{5TEgH?xZ#8mMGFdEL6laX1&G66pie5tL+bDAnxqsKYrFpM>5{fNGxne$g0 z#!CZ(-!lp})6L;Rq*t$qfAyMv)Nm<#t2Vb!8?NIMVp&dix>D~X zH15lJqi8+Y=MV-7|B=Q&e}Y|OkCHjV*7higL*-#7AMfB0EPIVqBH)LTUzx|8 zq9fqxbePRO%s8nd9Ye8#2e<9mnp{4MLO?_SS3YB_qMCCkweVVog1+Y^)Tjo7xF{o_ zH0L;0+ys(9K$RRTzR>JQlH6xE6mo4XhF|r2FCIM>)}wts9A@_gt%q~4%IyzwobD55 z7XM>?yEJO#)xLW{m{pWpEUtf-S8#{~ax141PCSI0@}&8&gQ0yE2n&jGrFN_>b2AF1 zX7(GjCN(ilWEhp#);bJ__p*Yr=bGR63x0Ec=J2}R{^a70k~n?pp_vT$Tg=XD9#zPc zNSVIRo@a;|ze3Uk1X6VqaXuQi+z&8`Q~jJ^vWQ;QX7z5DzCHBPNC)^HM+I3D)Q7@e ziFfQu9j(TRX5oSZw!1BS7_%hw*3xXSR7U~`{ei!L4C36`Rf3|Bw(Svb`kA=!r=dUx z5K;#--f;|lF#m*u_aSD>{@~i(;%4VeOq=5}?&WGEKwFK{?WBwL@wY-{yuB%sEwKqS z1?fce@rt#>-`a3}UC8{%pt)c?lbCB!Z5Gl>_&5qsyaCAClSbNPGt;&gOdNb84!>Vu zPRBx-;c-i+d1tA*K)CCoByNM!C2tcL&vN1F9Y|f2>GL*r^8xbe5c8x>Xf+Z7;-q7U z#Q(em1aEoaptlWn9e97-bw6wA(~3o1iK-IY?!$Rjov4-Sb1`dmcHS#)+el*mAt)4p z!j%iQpXjdwxF9a?hKsYf4?vVf10xzKa9Ym#LaeL7HoAA09n2q*y|%u<%{n?H^F+3H z@9;7b?hOCPd)9i#o-iT;K*;@n@cbWg2n=k;&>;t%Bb=PqF959rr~kO4Hk-6B40C8D z_vL+(`D#q*c(+Qe`;OqFLVJ>$)_4&Vg37-28wmdAo%9iQ!s|77UY5I2BV!; z#};R7%N7bLe3o`Pa&@a1V-7ogtfgy&%|xDze5RnapU4TufNl=f9l6JmuQP7NZRG92 z!LUNd?()AFWflwv9nm#e5BC`TF76yv;RGJnfV5PqCj)Xy4|iN(8Q`>Nc6i*uSZ6Gg z5W%)Gd4DW(NeBXfC3DC`&*zS&&(|6Kgwf{ZH9=uJ1PlNf6X)3c{{FOw>&^93K8Y^} z2BqSo5tm7==VJyhtFpGENVnG^f9f5`p&sLUT14lFCiGF_@#LsZCW+=wbH^2L%#%r| z9fC)}JHe-Luuw&jFt)Z0kiaqOs72HWCglMPY%z!hn!xTZh4+~AU}>f`>yzVw1<6g~ z`iqE^Ns|2fVatkQ_-Y|Bs|Wh28D*hqg3RuO(|F1LxvRQk1#R4c$5L~1!-2mb4d3O@ zYx%Z$rP}UUU8AcQ>CA_i)e8dm86x*lIksY^O*$j8QeOBh+$;}L^NNPVM}W;3*C$Qe zOj@8iLvA-6l2ITUap3njN968NoIE56Ze43~+!}1^ldcyJ!x}Su0my-TT_bmR^lXkKM8 zTCi!=w1?HKKCS(B=~+IAVN0aL`cectlL7mhkDrQr<}6m9%P|o+jJO+m9dBdj0|4+f zgj;_Nqb_weYyrUdXw0o^hx+y4N_&x$haV=eejn;w{_2GQQed{TZalKDEk=JNTiO){ z^0tdfqN*3g1oB%0Fhva*S&+$G!D??8xBG z-hL{KIQ|6aE7ePr8?oKLPo(oM^C{oFpj*E9QBH`*whA+%x?r=F<&CONtUMEHm(1}9 z0v7p$Id!TD?&oa%Rzn#87nX7cB+mu&Y%~{rEF5D;>Ye+AX=$K{ zFRC42O1Q{~BCOsC67DZRVgn9uav*YI-ue%}rzCX$40Mq!&zC@3AC4mGFvabk z6tONETXSyxxt6cnNjx8mB`ehC9B6#*3F4!kEB$`aUBI>PvJ#?4o@V*(awd}ZnsTvL z^es~vRl#?fi3oy{aIO%qs|0OF{a%0A&`(L>4mL)A1b`bpDym~D{BToCbMerS$Xghy{$;zGn`<>W0V!yi#(*oSC{j_!w zmXhcie`|Q%-WmhC4KlsahA`FlBn*7~qt`^lY5L*%{49xc#Z#5Fw>xQz*1E$33YLp} z={$W{kHsXYN$zkU`rE{|E9bTzl&h@`BzFlgn$x|>MK^4HqVWRm%J*!I z{th<$8M0h`WTvh;kBg(TY5jINJXe=>dgSBnhb0F*43pjz0~t247LAKW(<{}MI(JSS z?CKvwQXJ|n;g&u$t6R0o0J5gF%-yBLPiS>N1x{M;wbHayo(Dh>x9x&m!zy09WsVb~ zwUX8A-vj3E6M(3s1(154*aZ@RT%Fr_&U+Qk0olrkYEi}~I>E;F{o^-C&uxXrOKNiuWxykX|y;p4vI8KOA-=JXQs3?Jhyq+rXVomX-IF(UbNQJXH6e zt&L`AVO^H+bsY=i^!XG>RS7hB*T?7poa&0r|r*!odKKv_@dWl z$(p-5#}f(Q3#PpIg6|>;*|p4)pHBMmEJ^3)wbbV|?8o8}01uHYbCe-Bt_#w6?~XP|k8GncdCx<@d&!d##IFpCj%;__ zB5PlT{4e!zK44Xn!#}6?W`g`tS4ap@I0x^?FwlRH_zJ!KjWZ%?^ryKam{k1CV(nof ze^oHp%`p!9cY3yhQkfE+wNMYBL#;My$iOMX=Te*Ie9xPG`g)hh!Z+*WH#TsdI%1~* zxUnAHI@H7OwycO8>hKpzJbZqZS7PW-4Iy0v1pfj+=yc6~&*{9W42{-;uCDAn!XxJeCb2&FdaE8$Ol^gIR?tj&rT!PXG`OhCTUM?MWCvqyPk0r4W zmR+qn7CMMCp(+p1#XOMjkq5ndTNZPt~U9|57Zq|o( zb-lT8I`h4lnOM1nCGcO859s06q0MoXJ01J8JcTmMX;jd%`+093Z#!U<%dN|H!y1BO zF()6yclL&U3icgkemZWn=DZf*rfT`1vtb=ET)t>nm9;!q-Sk(`A00WmgkT@sGC&G1 zh-A7XKu|qc){m&Ycv1H^7kjJuk}iWke<$1@b`d980P}t4toJjahD8TR4w@THgvQ<0 z%`c_{+tRI!ZGDqZ3X4IQaYC0cTV^$A%{rYnou5Up1!w!0hOd1wxEl*)n;QB60?gR) zgpYH=T=C~jg5dc4ce{XEUlsN{HviF{GBE;D(WAD>Op!1h@tUEj56PO(cEf-C-cH7`|9HqVtqLtC=H>*?K>}W2l>n zv;(f*hL&#VzARlPndmAaY}EOw<--_ZR3A2?vxY^^tXt`DeZ*gEnbR`iCp~5fM=&nz|ak z{Z%m4>V!CAA&4pON3;X40%}I4HsKg49dEynGnqot2#c+2$L;(NW=-ujXV}8YkB53? zXuH^?>^;)$Y)Ihl4X(4-Ca;O`6{G4VNL}~`ZxMO!C~YehT|ebSNy`NQSMx% zdh_8E$$?fiS7{)Kv+ zkT}wvX$;_;^s@Rf)uXiH=b6x%@aMhuNOo>W@9HH4WfmIxV>Q0Ln_$4k{Z7wux zT0Q-c!)?Dn=r{JflRBWvFfQ91(jCShw^@}UEwgAT=`*2+3AZE#GZCq=9~`vVjyeGX zdt64^o!QyOPlMVD?r0UojH@XzBKSy0y>i^;ZXtU6?RoXz0#7zi96@6s91#_UbnQq7 z_O$(Edp3~EtUGx4McDJRR4n`3xnZY-EmGQ>gmgU3`X+9yRHT)I+m;RliBFe13;|ELk|- zz~0bUno=z}m4&i&Lnf6pYQ^WCw3V|A)VOkCKH+ zkrU%~IP=HjiREW*fSI zibfW~TG>R`O}B@_$T3!9v|(N&^+lcFqfxvF%oWPky~P2WcdBmJ*%L|C1QzZ4_T@n& zM|Dm8ed@impEwA#H5beR_} z2DRqY)W(Ni(P9|cU!3GCtW~!w!9O<-rr1(Ztl_dyncv?;k1;3ccCuQwEpwrPo7dE6 z=kAk7AgR==(gy7oUH6K&*avEWhNTtXq^P=KurSSn7B8(PO|MO8$fvI}%HqQRvw%vH z@G>gyYklkAC|tt{emt1p`!yiQq9fK?(*&P7F%tjtN+BR-_PTFc%{xnnu;g|b{zDT4fKqPf4HM2QW2G}Z zdyui~GMdgS!|vuOC*tcw!KRVwqAdFOCl$Pra)LTV*-C66|$5{7Xu&AJD$?mJ}O5BMkv882J0|@`mCiNf!M! zGQ}7TKui30DG(;6KPP)h3zn+KCw^q!>~f}8BHs{dp_(Ten;Sqw9Z#JtfkK9HeBO~O zQdBX~rCKYTt=YQs!CcL9*#Yv~$<(0LY^slD-qvxUm>$b`N8t=6RJCirO|yQF=C-F? zX?d-D=Yo4yKk2HYTj7U4)JpP{b%DnEwyb{_utb4?-uaj8+@+9*_{@@*3?u(j;;DWA znm)!Qe8!1kFYo(TA&vn?P>MR5l&>jY+txK&0=DR{oIS$tii__ofviluN2c_Q_MqCn zr+$3Lw{4C{(pjCHdilnN2z}mXExOb7rg1;G*Z<0XM(isDe99^J9i*G}@5cQ75Xs<| zENjj2bq<-dQbPafEYj%EzaO6O7P_ORL1@rxdCL6KW>PfZ;bTBEOi`8FrIi7bl0hqsU7 zo7}PR891KvB@fI0l=pG}`f0ph6oscy6=| zYzvC6z%c;4%V+`g*YnmA;(LOBb#?Ze>WpuUE|UN3cXlY-7?w@>@pfJua^ZheeESAe zFq830&Li@$6`um8_1APHer z_y;;*<;0RKHAaf%s7n523V?ib+4vfYE2H86StCkFP_`eUvU%Fo+GE=#{$nvH5q&v^ ze!ZjsBI}pU{G`pGNxeL~Bj`qn7}@U0Lc}ANS@#3RvC=YHAWXkI5Rv7 z)dl?BFCr8IoXvZKDIfo{=*y>JHrNOSU0o8q2wd&|y)BS_V}-Jf^M6@bW)IaKE#WB~ zLuwyG-VBetyyYDYR5jmp?$BE885~}3=?X3FUtcI-`;xp1#dzl*CbJCBw>ezw8==XM4^1P2Hlkgtc5bX_%zo zu~>!cr6-DQ0ICYj16uW~|FpDv_}!097ntq!?>kqU5&yPk(E@>JKhp4}VPg^9zb7;O z=gI$h$3JY}|LZ^F;a*cm$M@UoQ2lGy`S9eAE{UEHSjgu3ic)h-gW^89l`4vr6jw74UhCV8# zY?BzE3i$W9lcC>zv?l3f4R%ACc<|DQt&x5jGU^$R+kHG3nkjmgC!P*QCED9AQ@%W% zB58Gm5Mqv}QM~KOp?c%<>c1%hItUgko&Fnrks?!hB6)AtduA52y^pI$s)&hg2jK&W zUqSsB<&Pr_F>w2VLeOjf|Ed)}#s~re8>*RmZ(#&p{THP@@)ZoJmh&*9&bwEy|BG@; z`}&PI&j?0`?|;|K1vDR@-a{E&IOPAPS6)G7lD&EzV(gmB{(rX7cf#jq4~6XB*5ZZ3 z?vtn6^V6fTjW7qyKR)F9hx{G2B4sEB3weQTMr^M4#aA2f+V-QMzy>oj>;K&cH|Yq~ zE(RBsyze4C#wlhp`nN zm#L8Y|U*oO6g_xN+F zPZN)}kifaNHkH!-GX&(lf4uC>%r2cgc{!)7tvY98eR168d+qH(TJz4X>Us(l3P!PPL$?!r1=EQG)g_Z55*$fb0eY@|SzmTUo8hGdyu!;!kHVN|)B zp7&Fm6tj6C;zif_QQQ*KyjC{n%k>`kgO$3j_JNDfjMcL2X;;zvAAD;tiY7}~j15VQ zKFITFR}ut57Q856sv#%*(L$vra(UlqZBbF^XrF}a)d^(|DIf?T{t%rYV@|MyJt zeJA---Rlo(&J82&KWk{9*3LZ;UWd$u)UDw&ImITkc9PdEH<^hJ#gaBw>ecYttr)a= zT$PR<&gXpY!^Y^YB-IpWdlK?usmpJR7%)l|s{(k97J0i9+BmBsZ-_F_cZWnUhZB+G<4_?T z=3uW@cW~zvdmHrjSVmZ>A}vX}b0^#Rs;VokFw`o4D9i?8Q)Fj%Lyw%EoX7~us$l|@ ztDQm!5u$=@)-Ss@y+wJ&b`wFdF}mTPs1$MKD(#}y&t>x0)^&rmaYYl;`BW^FMwff^ zt28Pwbyk~7OD)C>yjUApGPH@}F|@eb!!ch&*G9RhZMA2NCW?ShybB{qw$0SwEKY4E zT1w^6YCp1GYPW3wNJo?^3+4{l z22Xa-|hLoObu&S0KmR5A;83Zp8myinew`^v~{e6?X&P8&x`;;K1xW zzg4U|VMg^;RD#J7D@}LUNEp(z#*=K=u%w~FmRjSyyN0sGLvn%6)KMQF(pMjvm|eP` z#+I9Ai>duGf1K{yR~4(G?3T!Riia!RE7!nMDmBjuvgG&SIN8J z7fbO~$Wo0JCEi3btC;Qn)?#W6q?;@L%R{l$1#O@2m%o7=ZrI3Zp%Q_+c#iO{6Wx!f zz?r41G?Sswxp-z*=7Zlm#woi;sBHnr1h-)h2-V8$a(*|ndG_k=eOR}io{z}CP`HOE z1%ca8af?;++^`&7L7MKU@dH!YPL9JVkLqD|%4|=`UCE8$C4E+1G<0tEl6XGL4`z?{ zBn_r+L!a`u%jSpgHiPa{?NW4^6c_lO1`VEWoe=H!{XNz}%#Xf?{u(`mLBdvMP?RbAT? zAc)^oJj@A=o?oxJ-{pwEPCB}rGYDElFuNx~Ryi-=j6M~%47Tzl`_cdQ;9DbY3Y3tb zO!d3ppEO)|JRP>zLt0b6(!h+BN8VA*z=3tYD%w;0R+O=4Z3Tj-rkrL@DLUsKE% z4@wV?XN2hzmfh)2|KOn%9T|Q&Co?YZv)Iv%Z!}HdwY;=X@!zOyiP{}*sWbT8BXfl# zh5bF<4#q4hiTIrS$YoQgMp_Z4gylbG{;mTPf5jfAcbkE)U)S%%eFy` zzk}9dVevBDuaf#!u(?xgnsbdOvSxlGbd8vYA_c$Q`x?_%(;Vw?1`3dS`Z%24pghob zmC9~Kj4v|HY5s{1DGOifH`7S?%&#L?q-`c8N`+95N6`__OY{v4Czg=+OrPdTnv|}Hj@b1LG+#Cy>@%Y|Eb<40wX6vJyaNLYc zUiXhD+Ro6;s-LZ=1-N31z0&FCSg>J8$HjB-|Cg65#P-_y)|cNvp?B|}e%Jfg)~=la zKEfGH@FRj=`r$)8k(Q}p>=$uM<-9t3l$@r+fzbC3_7Z<`xEx4{ z8%Z)8lfNi?MJZK?+|NN!VN;xH8&^0uv?llEArM1Ddv(A}u|gPD_zkh~KHwzHHr915 zqX)Z|e6K)%UrN4KHiFvn~_kjd!a-%FGv4@hibLb z+#_3C|0Gl#7%89gP zgpD@bt4hf-CqtL;Du|+V02!~i_L$!FQ|A{*=XvvQ-@vN>hp(>+igVk#O$bSF4er`F zL4sRwZ!|ar4+M8_g1fs0cXto&?jGFT{eIbJpa1Oh*S)ujhi)Fay82sdt}%zq#m}+^ zxjYG1qK;DZpBX+p_J&U=g7Y^hTW2JD*I;LEn-5C6-PuH z(A(F6IO_Rt{(-1pL6O9J);<0rvVqkz_$PYi`g^JHe|MOvJ6aO5#iWbNG4+~iq~Rtg zU*-ZWi+F-K!qYe;^12L;y#2%X#X3iQZ!}crm*eVW7beYFB;@3sxXPd0MWw z4nBra`Eh%;9#Cf$tymb--{s@-ffMul`zVm!dKyS`9{0KQ8#=u@>-re_;kTb)FJLqQ z%ML?8;Fex@7Vrw{YeGTv zl#{^hHc=7yt!RCPt2tl2Dj4}LYVa}s9~8>DHqv`4>N7yCm`NoPfRc85v`4?_Fy60d z+(ka;9z-(2)P#^N9T^fuA!F7|F^Yut(9K`FYJ5Es#l6#^mJT4y5BlXq>Y_EHaaWLB z(3TROb{a1vQuK*g&B*ZO8ZwoyP2ZwgdO-4x<1!Ejb1A~P8Z{F}+ekV+Or6b~_+j#e z4#l#N%d8 z_vum5J=FC0!KUa&f>TUHvou5w;G6!|}4({^le zz%ScrF7boYdBKa_Hz{zlojeyou2u_E)ZJIEpMY0VjJY zQ!SI)?y(SU9^?>gZh4DJCm-J+BQ$7oBdQFff1LTRV0_#F#Qz4;2MR>>`Uko2@n8G1 ztLv)JKjG{5>qu{RIv@EJX+0tjSEez6EvZk3T7IU}J3^JyslaHXRu1L?# zdKAQvbROlI673vPj1QJ~glnRFSGb< zT;TA*#1m0?oZg@bkXn^&L86hYAICHW&cgyN@-wQQ&sC*{@ngvi?|!_FZ~ea4&@nlFmBO6$(8OXz z5t@IQeDuL#?O2s9H#PRuL897?!)w^!%LV&AdbQK1dFeTd?aW|V)oQgIJvIM&%@WIH zoM3*A?B%sA5M7W$o;1nZF9kmNV`}H9HylXphLnk@nx{8&I)l%(x7ypScMVxFD4#t* zU0!bHZz<2*!}#-34tc}p_aTpElY6)Qik0HNJ?n@b4tkE{n9Y?MFinx=(bEKL+2~wK z->5mX8e9lUG^=E5?I|asW4nl8#6Q5&0Sv}};K{EhSf@ec#}yfztUrXyzy5wO`u~e9 z(K}B{xqYzXa#@0$x6eR(@u7CE5j*L5qk~;4$wa-JtbG+lpqNOo!qZ^HLWURlTj+~d z7Iy9%BYrLX02aLg&{R}AJW(DC`c3swbm8hi2!br&2OU0{bQl`FCBMfzU1Dg(<_Al+ zVOU@v7NUYV&{-{)JcGrtB2L-h`JK+=LAppp+`2wjYs?O?UmX!;AwxRSi;hRA=&VfS z$z8DM0}|XL8+E>%7_^$6H1Uk|vv=WW5!g6HDozT8pHuf^NX&8frzXYD!PxwK6sQao zO!~sn(L!_q@)G=FDS7_X>-`%_)CzLd`SQ?ht~QV6KD5x_%5#l-WZz(fbdW3$NpXrQ zsYuXQ4$AU!-v+B7G)`s=M)io5K-d#4*K0g!shEw7a~Y_Z%bH0l!(#2>xZ=}(4fT|P!{ z5+&>hA6gVI59s@?}bS)Re zh+~YUFki0tQqAZa0*sCxZ4He(skpMt8a%c^l&^He8` zO+WZZrG&8zbNd~IG&C10vS+g@vJe|W-PfA*BuIAKySm@~4~6Zo?h&asnb9ruhkRCj zY5O?mW6@ye_h-MP9mna3x^*C7KKX~l>@c=jb>Bu^A%!*fL1^%k_q+&-}{Yw z%0}75RsF0Mz!KF@sNLd1?@Q>SipMafg~p*N3qWfF_vb8lai{ervjQTju!K!{_fu%R zoA2LkB(Yxap(i(XzTz&bMqLxXl`(J)?7SFCsS?0sw~+Ja2nkJd5^PC!5=sIktMV|H zTe1iDo2OMbIo$=BG0#~3L@>-scQjI|RMn*+rfj&3cs=mr2WZU?dH*|pRjXyq$n2~( z$%o%o96;-!GVc(7oC4pJ%1NyX>Y%67-e#n$a7eV8n95Xb(6ri)cy6InEeN9H`8HXQ zw^ZF4r$pc?^`u@!fvf*{+%tpB(AJ^VM5!#dr8H%`?r1`a%cT6H7f8gLte~8|(bN3m zT8kC3hNc%OG|F%!jqEM-GbEW+WJUi{^suMvM(WAqXZ)i2tdJ;czE)~0`Z}q@D^+@Y zcMin8)#%&jTwz+%sB{rrT9p?e06wy;zUO$9Em#+!F16yfqS%8%m<}WOcFUo(E~k#% z<<8##^Er+}@m=guMGk{_H7KmIuIehe7S5RPWi%cK6mmeygVPjV4x<|YW^~rsTQK%) zCQRjAIK@W7=b{lrB4GFHjDCqkFZ6+Xj4u<^AM{M{><5|JVrl4`)=T=5WK6KKO` zgfxFOdmj5ia;c3rmXU1vJARFI4c}^(D>6P!n~GA~BPTtLaNK;Ap|#Xp_C0JN1q2D4 z$|?3@Hb?pv$CTfV|Ld875o+#;^t!Q^Gkm=IrS8mCU|aZIQ*^gaBX&f(?K>m_kvgBg zICOq)Yt`mxL5_|aG}*_H_EG+nsSEE!W2#c**RYBLQ2%qd{CRN#`a`w2@|)nl{>SRa z`JdHK2KKSrT~U#xI~88s&3F?6`>6b#ee7KMyCIl9`BP>{2h_6KdYw(v^))h!0u_W% zZ|yBeOZ@8>fy$d-B&d42X=awZvKv_ZUl~J1(RLsj^aWH@o~TcId{|Sn`Ibezm(+fYlj34;0)}1h zwRc)k)^|_gS{9LB_fInrtAsE^G}19$AK^sH;nZhR_I@%>n*OAlVqix(2Z)$h`A(S8Vf0bk6->H8XU5}IO zVEO-up12B_?PtlW0_%toTgiNKnr{1O-Yt-2D#p1-bwP-N5~%Zjc%K z=$gSwt2>B*Wj&z(f}!PoAI%Sp2)Yltf^23hG!GLX@9Agf0!o%481c(fT4kEJX!JH0 zotc9XXmXA2#d{v=!Gau=2!m?0h|}abKqrd(a)W>E=ld2NlFX2(1}`$zRcPOOm9Wz6 zEJf$D#vb442TPV%r8u-%@Qhy6=$V~2`gO0iqvI!2=c5Sk%+uZ?@WG8)u>KgoQFvV% z84u4ng`q)PW^3Xc*$d~J*F+cmu(-^*QnV|4ql_J9*$7s{1#G1Z!)fqH6jp~_)XB?L zUj;b#cQJ17iHKKjw*xt!i!TpW`nOK8T_Dl9LntHfL54HsuSr>>5>9JnAFrJc!jZ_S zqd{3=<{p$PJtG}-n1q~ChEmT0IZ_|&zYJS&2KTEf8PVfbEfPn(#jn-d?bFGAwGoe+ z-a!zG&z?AhR_sHGW6 z*8p{g-DcD=>GJ)pq&AJ+*dK|ZvTe3+Lstv~X`?+%zOH*G{bsR5i1rgg(;&cmj{Oni zIQ@^DpC21gE%tli3=6(xxQS|D*ie=4Eboq)if~SpzY^u=|1xc6u@6-nvNsv%YVjud ziYK;zC=8$1$nNHR>$}inv=WRXAXiz$JTcl*)^#Z35X`AsZ(W#WHHgftexI3yThr_8 zUmjD(Byh3v7E-EULF6{c?>eT!-=?=bPGOFT9YB_lasa7=@Wt&uW9!U55|};FeYISo zGgS;TM;Aq`P#HFQ2G~!N-edO(U4LJqX3M9C8Fk|8`%siw`ztKB>TeSQenA^y>}D$r zogRr#(uKwhFydxum_-I zdv0DYS+K$6)dtv>+>s<&5FH&{b?7fRanYyqqJ$4^#IBqDqG`X&WlfnoLp+5Yl}ske z8U9dxGs|jbO|-;obuGq2cav5x<-3;~el>DkA)W>grS8>V&(Nr6DyBg@dr)Xwa_xfQ z&n=B}-}N@R(Ia*rLqr|E+}oW{t!B@Fs__G1F4-%TfyTBkI<-KNQbmn{QHvJ~9+MHh z^v$y#%|YtCi_pW?pvn|j+M`n3OHqX>V{{D)D*BSW@4@bXc=>bjgX{Tafz$U@6{Dil zkELNxn|oEH_+y_*zBS4a`4CfhG;_poDN6>Cbjbo$FxLIRvRos)eW(_V34=B!okoR9 zKQ~ar-l;NuwY<<};bw%T*+lCN`uMlU|EKE3OqoH*q3QhBl#xO;8pmR=POkVOVyKvs7Akaj6L=gU6^ihQG+D^#n=G%NNe*a*~b zWjLZhs$z0jKdDS8i+*Qc2%ndT#e9k7pSeC&?_oX=_o)g&st4(9%Fq&#p$OJX{sTTc z9{190&M7(FVG=PkPs);YR3ze?GqD%hDIwptnNt2TT2DOO`_ixts?vRWV{#dSoP~sk zhIFEUEY14V;?Uyz1`XM#Y*9}HPHx=?Ryte?nQ^BWm3#iwHaxNG1{;&7bg_P3@U%k@ z4rw&*n#~Lk2>7BmKHkvak7wEB!Ee8ms)1bh z=sT>t!m(y|BSl_o>ZsL<1>&o z(fk_Y`57xBzwYVo@zkffYExRE(t6NAfyC4)GbFrSn(CL_$x`2H3hjRAEDz&_q~jU$)E!S3!{Zm+c*rLO_<^s(lsX`TAwI-WjYXOu6%rK zv)ofs?KCerzoh+*9O=^ryNg$GCwlyrh&Yr=&+#|2duNN;O6nYm*baGne?wDJ_I!N$ zsS$f!uL0X?rBeE^{W%&%s3^c=An`sejQ3tbHz@HTyyW?k2ZK+v&C-U05NS}cNZoKx zspIO(ikz1_cuWa)eQ#N{xQf^pRKSV2yBs?Q8;H)0eRm(q#%D~R{vu5Wr&*~NOSiKT zOm@taCTlv8{Gd$AQuQ!)vRW$~YV=@Tr)>o<&U59=$2f8jP=UUsTa_htv>&@Hf-sg+YGodz>2leX&V-p^I1nK_TH7!ZMtL})Pnqb9>2$lxM30eo$1pN zTL@z~oYGETR}5^pNvAa`gPA8GenNZ8u{M?1-M%l7!!I4B6f=gB`N_1dY=t^aNv-h7 z2m6WeP-w|c5&zvZX$$?;G~xc#<{ASoSsG8}cHG>B$Ls@3Nc%}T>{#i*zgM_|>|3pM z%)7}?rFy(sGKx3X<1E-CmsT>a7uPzP#I?rcIU^jHMMC&%F1auT^`U zs4eyNCauM8dq^#L1Dr_ub_K%A@(y2)F?lVPWgkEo8hM+=w^RrIz_Zjod99osZ)}xlQ z5&!~7|1RvuJuX)|%Ty|zLdM*vU9l1q$OO;KyJR^=tYTA>R%{ni{wlecPM9J`wzQ=R zzBExRBGsdPVnX+bUIY&Nm*1$O^@y%W45A>t?nF=F9pjmdU*pcRHzj3l=oZ)-J~c1v zhLFJ*RjawMAMTBN%F-oGt_;%l3^co0!WOv6yPM`(#3lg00mQ9t)EJfy}PN(w>j>hV0xBd4j=slLK5kTUSH;}jay86 z&T_JD8^&Y*IfRoM{CWzTW9q&C<8P%3GYJ~)>IhBbQvP;&;yxd5#65rMU=jhpZ*46pi;3#wM>SC*J|dF; zn?d`l+d0+#Ln62Fc059Q0GTZ)-c>Is{-$HD$j|LPv}`Ju%-i6Yh)*1D*FW63srT7e zIliswTwd<6^z&Jya4>MDY%^YZGmW?E&65s9K5^$gRF+zuO;B)AYxne}Gct+WeilA?t)wPtG}Vt=2jd9Oa7aFG#(|Q-sy@L6&bR8j}TMhB#;B|!)!LYZO}cMP299sZCBN!D zU4L}601IS>x2bQzDN()LVCq+_{G~R(=(i4)Dj$ihIYo444m`a_F1Yc`U}jVf+MLR; zX9>2^z~i!gk}=V+FS)S0f!-46EG4QtS*pRA>27Rk+UaN{(pX${IL_gOe;j3LLtV|3 zc%v~L!h>YrnIU@n$SLI(f}iH6W$2`r-pz98k%{InzsqYyRT1I&fPcI=yJla!kf^qg zo-;5nT%)i1u1Pn67s=vAJK)EhGpN)G873@SaGSMQL(!+TkJPch^tGb#NXG7X=D--D zQEz*OcBys~AkVnnBd0MC2Ljv`XX1b+fF#I#v_gj*2!5ua9l51na2IM+70Q=tO4z-} za$s72fXO3ya)qtv&->o_?bceP?L7kCSn}=r*Svc>8e5JBbAD0e%tQ>rH7r#?QU6o| z@ZVob6e@~Q&Nf*lrDt%st%FdR^WBS#e!!U=Sa-se`vd3Y}4EC zuCU7q@(@Dv6S+NIsdPvTp5Iq|5^y|5uf3OdrlVSFx%p`&q5<;JJsCZQ%_#_#Sk|zMU zk183ZjnzUJ>H^!_WGJ1l%4es&p9&*C(wx(uvFy$RfdVOsFgK@^HnTKBJ?sf1&NHH3+UZS{#*ZY^!M2H|Nom>*kCf!3dhX`2r9<(b|qisR6@} zQkE$N4wTo8y_WP4ALLBIhvY7uZWg2?hIqsXay9_ODGkTN+y=-qMI9hxisMY?)u7mt zW7I;9)LA2=eZgsbu^Y<`#%;xxPk!ZS0jfJiPtLc4+hi6-;iu4m&frezZfozC@*h%K{aJm|Pb)hRXz~U{HE>sIvIE-n}C` zY2ADtt?mW^uhQgp&UP*32j8(h?{?s-jQEC@(pB0Sqo=`apAyxsID8$6Bo+N|?Yq8! z6L*8%z%L**kGNxH0C_34RPWWuGaf~TI%yT z8o`@lbP_iuy&tiBx^Aa^*7xQMbZSdALbPkAk>biV4VxRs0GH?1v>ejcV+3L_IN!-I z^gpf?8D$`?4o2y)R%f7;P$|(msqFK{LB{5iT*}J~kl6525U+Hb#^tg(B(EU;zLVxI z_|-=1IO}sNZj7Q^?UDotoSyT?vyn@OsgVA9MDB)oWCK?FIs7c;Eo8hlwQ0-Uw=HMr;I7b(Gn%Nns~76xuC zh#giIR7XdJ=yXtF-=0FCN&PxD6DQ%)2**%B+Xlzk6O&TDoXv79KaG;+*SBIuHw8_S z^Jv~ldtxV@Ar~=4H?S=Fa`v~bVf^9ksoDWMP)PmTfke5N6}AbPB2p>?bSfh9fVeks z^7LXT3Fd!M(z(t!Mr>~1X%cU5KCfyyJgM>1$7p&ke;8#t>zT=3HSRmNS#OmqtluEI z-$eR^rLbmHgo*X-PBSi?? zp4p~JS7&;Nb%^c@GG1OH&0;ln%;)M8O=sA2(ihYDtOGJdf{m7y%gw4HHYThdNaXM}@xY zBm3L zY%>uF!kvGo1#a~8x%gXn{ZyEL%6^S6UcX**z;4plXWavxH$G?D4HUud_fPNc-eMQ+ z%OZlG|Oeyvy1vn_WNFfyA8^aXyTp8YSn-{#y-a0UqjJ@Wzgd_|9xPy-`{*Xb!2P;y1 zaC&DpUyb^wGt2xoKk%vAWmz=Qm_W2YbG;YQoiwp($Va|%I((jInMCivxsxyRw_iD|kb@47M=#|=rd#|KYL8o5u7_EszJ#&0rAD6Te91ns#?IY1Cz?ZAqVU$GmNg7f@KLoluhbtm# z%VYed)W}!?+wRp> zKk;;2{39`o<(k3*&BA^lNb$Q;fq;$K)ZuTImFdR;qvw6nG`d)$bH+jQJV#dD1S@!E5&ZNz{S`Z3`Hl`6vN!v>H&pm4* z9OO|+OA78bI^Dq^vd;wr+5>U&#~2R#epw*?ZKeV&0f1XKmni7NPY9b?MqAtqeUmvY zzR5%`+YJ#4pZ3Zu<{GK)u-`Jn9El%JLlQt1lc(Co1P899rD7zp0@tBW>>Az+p96}~ zCf=P(!xdLs&8i4Yl+)o}mymt(Houz6*>0`Pc{x(aF9uS#;vw2PD=lk^3iJ_vyt*-M z)DABpxV=E3^{L`7iOjG&B#!9to9_^b$dYf4R>qC;iIBFsM;IlQx_6qT1NCwV-rVvO zt3Dx{FEn;;e^jGVEpVfDh9q$AfP*(!$v#xh7kCc=_U_;cv-nR#9)xxzDIR6^<;f^2 z+3DX~%PMSDTAYu0em4dJN~n z7=gIzW4ZATrr7k$MPxBDo;% zbm^?P#YOrIeX?R%npUW}`&%fq)ORyL`?^Fi_S5A1x-$Vd+du++^5bf2+U|e}5wI=y z>~q4%Lpooowd z&`(eA!*|;|{h611;kxydV7lPIE2oRUZn}h=-E`G@J5Z1?(B`_L=VmRJFp&>*`XeaU z%;(@27T;eqIX~1^4{g+i5rpmp%4xsQhOObDGW^o!onB3Cy6L_{03G6G!P(p6*9l5B zV<77f1=FwAuc|U-Dnc=dB3Wkx=02Zo`3#jyX4iwy_6&zdqg*dHdsR6Cej;G9_YZSh zCd;zs7xpefFvJ$Cty0C<(kT3;-H;h2UX}Pmq)tIbOo^^QbSV!%0(Z*kt_-*zUyUGc z+ML?t+zd{xdSb~E9T?k}^R`o^hLf+5=s&x=(e=2{YkDoU#FuxX_}4T#zWlfaJA6Z> z0Tsf$#o+#B9CE_MsM8vCqw4VH+|K3vGCElth)RgS@N+9aWTxJ&v70S z`+V3JL~zw30V63pLctbCBdn5jg$_C=4QitxjBPYvjh@HRVH3t&y0l7q5{nN+eA}2$!$WW4rijk z6%fyBes*bBcx)Nd-=8DZcnVrwwiF~&xni}u_1y1*+6t^E!5Kl@qp2dkaNBkH8-NL0 z#Gi2GHwtCVK5Ik^^JK&w|2Ao-Zb3(t}QVKHx|; zOdCNM*pUKg#zW8c&O26XaRU6ic&zoKieU>=SCU3x^r?|k1O z6EJWZqO^&aYt}7f4MEWoJCkesERuH!TQ0Unm%@ncf1fQKKjL=m8su8rTP#+~{}$OX zF-#odWc`b)#qBQYIe|M}mE3l1o#G5~yAwktPm05pV-QG`FTUpWfk{soCv#^#N6PMc z$$5VzD|{T$KTV!mdhX*?v4s8|p65VS-BjnS-M3Z0Mu%%h8@Ve^I=NiB`Dx0l!|~XK zYEuidMU4XaB0}>IvWO{Wz6lkW5g&;#(+(F}{AE)(L_o4>AC8mysg1)9r%KIfgUqj* z7U|CvHkTUU4PFAfUc`#N6wu99Ryf5}a zsAPWj=ndusJw^{Rh%u7&*GUq<3HTnF5OX$|pNwy$*|`mQ>?x}^++=|jVhshawm(yW z;Ano`2s>5*kK>O-kc$DZ$+kAPeeyV!)QY(wN~)UC(<1fQPa+t{aS(qlyWIeem*lU>>i8p){gG}Wn#5?a@(X$tD7^GP8t|Lk-F;2E{S6gxRZT#)o^*d z1-KUz94!VRJ~c#B1)PV&3B03Z?{(T_5or`F6U6RqW+deJbhsAlXt(~5Bk=Y>$@cR3 z#eL==kSzOL_^hq9AaxT#JTH&p=%Vfugv+v4_cb*HX2f`_U|DPq>D!C9(-sD8`xgUv zGZ~v+Hoc~8x*a~bztKvdx6XVnTj#aD|AZO0KN!*CRB~u2)NDn_L2($i-ss64%Me8M zPibN(Z8~7LkiWMp$eC378YYDmvHN5-*N8t~xv!@BAIIch{1r_5zt{Ms97c%k#{G0m z`v`e8cl{eOVrPH`qL55l*t3}5((hmAr|%*F!l7B`7)2AI$?Qk9H+WnD`_m;Nu|-oq zkG_x$n}6bRaMF1-?pxwQgMbu2oN$d-p(+Bl-FcBXT5yb0JLI$Zx++UeJa#arzS?43 z#zU#>VD%z<#{JE$Mgl;Qy55b|hJ$QekhM&C;0^(go0EBqwRhILr>HdY1N?{0C00U* zW6UP!CsUB$Ut4H{?J*5P2zUiyT;bFDo4)0HIQ8pgEIGsV(`{Ql4_P;iKr|aHLPQyg%d_?pDmF|KV5AHfw?<;4 zjig^fGets8mF^5X$Z zzo^en8%Sg1>o8uB%u73(<>>({Zec!0V;)#>zKEfK@s&ry^W_bb{S42U9D(otw9RwG zLBG3eC1V=4c9li69U-;C$1+gUbzv*VBc{JnAf@0pwW6bzeF4E=UmcHlsh@kO{yhso z0NIxXOn#QW2Ba(J@lpM&7RsHI>7-(rIdd>ynm-K#{x|7uehdbhPgLi<9EG3l>EgRI zz(6&KUETpQls>dUm`Y8RyI41{@c8YO?HM&jf!_~+sIKhIjlOTCQnlRgE-8SqCh?#h zppX0yS?a0)C`Y+05}2lGE82ehWsQ-!z$~@Hi)3A1;Hc zVm-6fLmR7|2frv!AD`bwK1GEu!)5*kvcxd}?#qG;W_41E+=oHo zte9?*{w^t+!|JShE8VJGe)$)VXF=?hnfZ&m5G=;D4=+m%uCpjwR=k+rJ}}J^ z+&&)*qfo>PVibHDM<_JK5bjYes%u;y`{dF34aDmrA8%LjsKi|euJDS2tt7V|nGcM$s^EIdrxHpk(bhU2Ph^dRD zFs%m0tg}%$hDpdpZK+Cy|K5GyuEAn3($^P{r_^q5qVRZA0lAaaVhF~WKuziNv`1hy zgVmzBt=#VfJxtRX7=ZE7&F(#v4#$sQK9#T|W1sd}-vV^}fT(dkbLT|Asej$5l+kV8R`o}5&p0Gd!${)DOOHZuJ)RRBHLAOLw?>)!PU$V@TJ7<;fdv*BGeSYu7; z5{PWv1CXN+=3h^uTkw@vr} z5s*>JV$=Fw(u~eCQ@tfeCgk~fnONCRQZCe=mZ}l5w)xoVi7?uZ!~dxmj9*IOaHuNU zP=WynWE=>v{w8Y%yp%OyErE$LFxd3j7F~JM?oKg!yIOCHMy;$LjA-)PvsDyNOF-|) zB7^2=sm7n?%XNB+qlkcln$PEXhK>xYKZj?bdQRp3gkFJvzOFTVu;%6EY?R@pZ7>^i zu$BVS@oK@pRyXX)QtCm^@y`;t%To^SI?K!t{n2XE#7RsS$omr|c|%0J1L3A$%5Z;% zl^|&SzBtI%$rrqwfx;q57$Ci_QcJ0*UtA~gSqmGOOQ?cM)#LH~1c|LgUw8O$F_{WArz{3#K? zvmmXnxNc7|r`_(DZY+KLp=pI#fBIjOG&UC($KI0j{Ae*ab8}UumW=89KqeaUY6}=` zkr|p?JJuZ>zdLiZ_<{Bdog__%zi1eKqUp2=@qtG0r=E~x0q=LnRl7w4;jspN@jRa|fLd$T7lhNVlsYiB)?i%HIvNv;@w90OEj3d4lzEJyiOQ3jn!ug0`qF zmN+n;u8J7b`P@b6q!mbFoivNOYPx01!hlR#*zQjRpgq)rD)p(nV-%dt z-+%);!Wv{S9SQLnw8-V_{}}rIFMH&4{;xu#g%NRxg%0ctW^#ziLulg0`+gs+9xfup9al@~y3 z-E@uTKAv3*XYFyFqJNXWTdnidUZBU}+!zyPTnoe*DDR(W5zRo07L_AyiD3Pbb_5*y zg8CXdYW2H}B!%A?t5nUpGVCt1xvN#-RWDs;{`}}`Pf0Bn7AuV+YE@gcgoWJ>y-4N- zQhC<~!(*9IsffJLV`QkJ@nu`x5c(R$2gO=IK3KwIw^Vp~CxejDlb0lnh&Po}n#wJA zxjTMkW14O0rjuw|nTJ(AO&2Wx(P&PF-YMu*;IW znmz~c@uk*Cv#BCi`{uyiUNdy8=Vqrr@&|r-IQ_Q6!j5B_+Nk4S3YA^RtolhW_J#Yh z&-QTE^%%0X(3FK~SIiu5$(t=%W)c161|qrJuH@)z7i-K#4w?0b%QfP|KG4{G3vQgj zI6kj^cJ#V zp+wAec}W8{8e|kJ%z^DT1g$J2MyhniX+E9`VCkWM7=QoYC+a_86Yv^9TEtY4-|0`i zn)`FWOn&8Z0T1<$mT^KBbZolguzBZO17nuaz1+os7A@N%dO6yNSeft9vcPH<0D;u* z?>qlMjhM2W^Z8PCC+5(r=dH$)_a_||dQ8OYB5cB95W9E{OH72KD z`2ts6!_DQ(`Z+wjPGp0=h0DaH~bz-tm@K3j?H~!8;7yYJU63vy*UB{ zilZ{-S@y#ox<7R_r63H=YuFRHlZVl}svM{G8Ek(9yw6#p;n5=W8mw7-Estf2$|{VE zT7}Ru$;@gPoSN_IJcSW^hU~NUxit0>ZVs0O-G-AS@Yj8XunI08%Fy$r_o6O=5%fiL zcXwYhnKhu$vVeSy+Z|kJI)_?7;q%AJmjuq(APibPGr)$6jiIHfOCl3*(eiEPkW+LJ zV-Qn5>~IxlapViYY>C2b0R`p<$#1HdVF*s6D1jo-Qx&>9=>c^aJqSocWQv8S4P@E-3%>MkjL>!8FPRy04aM4S929V<+ZjRGgri zzpkx|!r)>k2$ks@wP^a%R2!f0sZGc70XsA>nK+S&HI0=~rM9|an6?x~TuI15uP=f# zc}>&i>j~1{`L8X2;^Tolrzm8PosU=jSHRdO|+34jLatnmW3FH8?o556$t8E*iI$xA?f1~y4A0+>rYV+~yoXD*)W7bK0FW0frYf9?7L2Ws^Y~%L?*i+w zAwa$ED8Dd*VPs7j6D3o}|3Y70H_UszB*S9-15OG9We>$FPj9l*t-N?p>TnQ_?0LXL=z~MbSO0SNG^ckQi zH$c*HH}44re9sLHckw1NN~|9?u#AQ{RO|EcXaEC*J(Ku~rv+g*RcRGa+)+ptEtoS&4ueG;3AFktq` zmuXPyc;(Ozq!y{8K=FD}r|TjO8g-VFK^Tz9d&J}rw!_?t`;(jxz#Krb(QzP)xyA&T z_vYp8)p~TnK*Upg+H@*sSfh5JnbkxAo%>5Rh7_jDP-30uvvy6-F2F+;qh~n$0nBgV zx1*2W0ds9~s8)qDfNpVey)6z6UXP>V+xF>?Wl?PGXLok_2{5Cl(QuMTeOgTB$BfRg zD?Ijmk&E0ech3Jq+*gLhm2A-hAwYtAfZ*=I-GW1a;O_1Y!676N+}(nEaHoL;g1fuB zd*i&r+?mYWxp(e+|K1_Fj9hRnqPSIF_ccAo?bzJ9g2#mOCbnBb#pu45s5|+EKIvp8>k5WFi5G~@L_H2 zO`)u_6DpKBS^b$?WjZv{ukMIokF2`7_8y7sP=}*)Ftw!F104SH%dqGcqgE`N+YaD#&U#LDxQv7oltQvexR_Vp5gKSxQq^Om*WS@hFuo` zi2~(*tK1Qy*QcAAPUebz&RAb7QcwcX6-ZdIzLdWgA%D0-z~y~stJq>46*<7?%YXZsUmIS`uQr-nndUlata6}91)5L1p}Jh zdPZo>bSM`P#8U{#3oCf<$17BUmvD=)yCt0fYm^TOP3F?JJp&{bzXBpMy>zBXuiSY& z_6#XyGl7cHUISNXGT`Uge7DFr3*g;R9nT#epJO&$=#$=fKtyga;{gcxW?8Wx%_VnF z2|R8PD6o3%aQDX)3qrFKciRE3!*1-s^>mm>kVI$1YpYBsm5aY?m;E)gySjS;-GzKN z2?Z^#G?Tj?p+2^aSG*({=i4E#soeQ7#Mx3+;qJqUQv6sh1ChPPwc+P6N+kJevk|ks z+5@Fr4eO?X4^Zi!pQk!OzJQm;eHibz;Zc6$Jx^71YDiu~ouJ(W&e~xy(OfS?gZ{3_0u z?9Eiz1^>SF(PC8s5Mb(Q)m`q|KYYVap>nG<`a!%6vYRcGnG@Znc?y5Fr#^vd=?FAi zjG{2c3b-c?2;+wOMsuZxtEpoy=<@g4#ltCpq;}fm7%c{nNZuSsDm3kJhLeCI5`qDo zPHYh(&U8jTKXfQGbPNvLImt6@`Z%`YM>W5fo41Q1w71HDSE0`l)6(LNm6nfQbih8~ zQ`vo6#xePANu=)cHih-BQY_1D9RqT{au>m<{%7H3JF3@JJ=%~jzyc@W9jEgv>IT}S zmIZ2n+->3-;{IPEzCW;$3{=168^4S+Xl|E78`mGHl-*viSMO_z;)2qWOVQ;pIh#j~Oy%+FpGFQO)0Yptm@ZPijdH)(7OUA~j}1oy zYQiGSI|`UsZCkAU-u7bj6xP{sQ7cz|@U<84x(S6r!Zjc!(GS2G&8NglC6kQi6vW#@ zz+y7$iSI+9?$6)}d5KwlR9kL6hqNQ|;~Vp(!o7PkZo}9= z{M|pW&?xC;C6eQGg?0AG(hFh~YOU&=`AIii%#L1wMpEEPNSNHJ7nN>Z0^S=_)S?Wt z;vV15^y&=7m1QeZWt!#EWCHkT-cL35GTt_r%PilwD!iH|&lTHml(JR4W@|hmK0lMx z`v&atQ+-E^AaOnqF#IxI_HKDwuE~XkK}ji<0+|mgQWK=}!DL8D8LG?a_R&}h30&9L z*$dnr2Eg0{Ta%crVbVBP1Z*=eGvk2+4p3#84s!7#dKIOy-a7A0Dsn#*@U}2mOcaP6 z%+@NX=fxkwNd#jviUEfiI@HMXeDoEGYC{9ORB194t)T=zV|d7*7az-Xf`+LVZhMnY zK4Ge79A>OSB%2X@mC}PIYn926fkh_F2G}hMqWX?`pXjxDs9H-I8!xq+KLlNYw}CQ{_mw%4 z)IuMx*cTW}hJaJhW#Omx=19nHK_1}kBsj3+6C$Ex`66gOnv>N5upu^jFHSM(Oc27f1=NQ1*&9fRR`{1%yrjD#GQNf+Fen-k z|5!$m2>N*!NRJwK@e0auK@GfN2Ji_JoFqe!KHl}WMC)6vc7)3S$<*?`lidkRF}T$8 zol%APdi&Q0Kd21t`+;2D##V~JUO$O(Fa`#T2|{)_C{8?r0JSwSl}aDV?c2cw{5MZP zz&3>S5>Wg?L3;tcb!My=P6%i^oKwi9Nd`uwN7kqVvV3T+F-=g>nyZl2k0_6@fGDVx z;>g?U0?Q1)b0F<5MLyn%ufbDy;pp1`eE|t7dYK~p{(s0EQ~ky?!DWn3C$~GBr0-3p zuNx_RDQ;losZVPS=-j^6*QmKt=WM%bg|NW#ukl^qG6@5A_lzHt90j^lv9EsYKfGsL zM^US@d4|vLF#c*dxK$M=oW|K=DhJiuKaBaebbi~`?^3f&Zsh6Qj^UlM=XG;5T11S> zrAmWFeZCX(n3186&fNIe>`p+Im7>+pi@M~!93XBLgGG0VTsBrA<0zHHYu<+Mu8#yL zK7SZ}WAtx?nSa}w-oZTy(`39jL~(lsgu>ax?PA>($|di^Ddb*blXT&X`;Q8*mG5;w zfOx1hl%{^PYQjsDbTwO_aqo;9q(xXCQ4SZ^MIf9Q?MV<3Rfs-!1J=w8mfxAL>&o5i zAJg2ghNblnI#&$E5Oz&_83t6qz!d%V!lMbRH7?~@`N7!{LSw^^{_|40#rG*C#u{r4*Kr|%X+v+jh5htnR4}7v&DKyxRi3mJF5kZfsFEZ30lzM55a| z;;=u{dQZq!WcuKDKL1&o)nT4&ruJV!7;+v?iFRvHe2E(U9tR+Y;b8JO>7=PjQ;G8B zxsdy6q(m6rcqS05_wMW52Y#tfk0|(EFA7BSRIBxGk@{cWeoXvL8L#72%hll$$U~fv z-!t;{k54ZQPtcYVpt=+h0PedX_Dn+WBtzs-!7}K>i{!@{DP5m?w$DiTvnr^kPZwUU z`h&(~cfEiqwFd0Fm7<+a=7q*p0Swg-N)yVEJpdKY95}M2(w~_;SUxHGC%-er>xIN%Mp_*v@=-Sba{fRvjAtT7Vc|`NRAG?nE|S5=$cgr#3i=CyAXW zjhfq4*aV;gM}eC7tt3sVHg6mOzxz8ruRFt=jln1x-q)Wqt$AGW7Pbb`6u*4pWF2uy z>e`APqW*W@?7x|Y;4#3LCA{*FfV=#wS^>(d-_?jiOx=#Z*gGkIB3N19nhPWm4c#_C z7Wwv40?-a0zQ10Jc~XOC&TQ2z7jdasSiRNn6XtcS13pt>OHkHCCX|JxpRfLE2f zl>aCM2<=sF`wwN>E*)aIP5*WJ{_QoK`)_(`!!d0He;s(<-^Eq!PpoX0Y9avL*!Q(J z6>rsPG^jE{`04?l(+yT<)>pW;Ke;J#Fuhf88mjg;`2{AzXi7li3(($C048f^OAH`; z8`qnV2Z%trg;K#Qsg!EV1)-6_q3D<{eQ&SUy#vy=esIR<5xoi2LVySqc)Dc-^`C)6 zU#{QQ(}rvz`oAntet(FFudc?OYIN-EO@lHpa5{o<{BOX!s|Ls@k(|%+ntbgN6WnWx zxGW7~VZ{V1_0QNffYSHouTgzOL3^(Xg_e2>53G=46$T{pq11W>f3@L1oYjB% zvBasr&G{cp1|Rb-GtT~9rT3jHp#ATtv`9jv-fB)uuhFPL@cz^Bih0Mf_aHJ7+n?R^m!<4q|9s2( zM1>a+5$;(2>$ebopTzdPTABbmmg(XghYl}SHtFMRorOi?GdPLVYzsij%jx0^CJPL} zZTRWtAHjBh{5CfPJGU~|`_01TRAJTj@W@)_LmU4BmDstN?A&6bmpFH%-A~V@tt^cR z8ZK-9mw)Zgzr7|-`K{M0sSTX|`bqG=q~Edz6Y->5N6@!dH)tz209mCcMOm2(D4-YK z0c@R7zzsJR6x?1nZ}%vU|4JgF+wmb}k{j-yhUHep02;Lqy$ zvG6wc30ipqaW)Hx@2LS~xQMDdfv$YI-Z*9FUL+hN$wH;ntg$7ZW-$4d@?gG7*QLu7 zU{?_R#Fr7N|2mv0Jhu>5428BhbPGP(IiEQT&?5)P>*F9p%cfhwzi1Tw+xq;JZrJ)w z$Lq0q2r3-u&q>Ws_^;8GB>L9idbB9t^v%ntAP%5|MguD)yGN7T9und!?oktUfNRfg zyCiys%}~LGrI|#xxXc9O>JFUpd5wT0G?dX=K7G+m%nvN!oFTkkKzJ_+Xn{WYA!681 zWo(1inhIH;PQrNqUTyi;W_qea$CqeR>hjWRR=@cSkLSq<;jJEPU;Sqv9~+~5xZgx9 zRcnoU`}w6PW(YR?2rMF`B$3>ZUwhZ~$!CR-wFyPka??XptNbnma@x* zPxv-`nbst8#Ne>rtyHK*J$AvT9wi_#=X#h4(BdVhqJTPN`G+INS)-E6y&_+uBR^rF zEK}6|`gG%QrU~ATx`^F(tt=LiCfL_kBGAcIA_xv@l$e-&f%@Yo5^@--(FJlUxY1|@ zk_GQ-10t%I+Z;z)rilwpz=FO2O7KW{bR(E9bTrxIsOkeGT)+}QWSW~e($Xr7s(!nU z2?>oN2=O0(-b(BBedBXjIW=~h>{dx7b)@(x@pkXjfgO&>7Xk|SBN+O^ECc*ND!$P_ z;}}h%&P<)mC>MIbL&HPjOGaZc9#jKm8mbqwaumT9aTG_xDAmABZg5cHp!dfGe!I%A zKPWuUy&K$>*{$aEO^Aci#JlB*|8*bW8y)13GBolDL-*gz&u0)YzZ>Ze$bTH7jvQZ@2&?H@|F)<^5mVhit|kZv zZ$>0p_~W^u7s?BuTRqVoEdKcHKZYX;d%DsxLaW|WJzeG^biF%O@=z|8>NM>AvtI+f zoQ{39chqY97?tg?xz8mTMVEvzkU*)D0$5xzBQk8@e_ZtUyP=FhNw;Vinh+MAzQy?{ zZh)I{|7$7{Q+yR7>uc4aO#Zwc_j1GFVg~j9el_@3E#t$=%@9mO_o;p4UkxOJe!kj! zMh-mchckPre|%JV>@T#s$Kv-0g+aesj1mK7zi}N65uMmfJB|HM)+AW++fTdPC6G{l z-L(zl3++$>bfjJTKMoMlGRo5}d61GMf7!L48XbyiI^zqXpr0J5fdRi-@;3`cIRhF7 z|B#rVAMxh{$)o=3mLeOw3b4N#^0zgW$Oz~S>^ou)NKU3d?n=}F{d*6&tl4w_dBMNE z@_W${$9VOON7{n)S93aI1-0B-$b8B24&g5S|FOB0zzwkP?4e@(MSis>vi{Ul65<61 z?LYM^1Qe2A{ps`8waBDDfA!_(??a;IiEeN9w-)~SmWdHXwPiWN4d?R9uSTI@0+$1B zDXH|0!TCQHjX&D;R)y%B=Xb(NY+rQYU;leY^o>^+O%Tn1gCPH(pE6NU>-wWWc~uVk zuSXJm2Xxw&G?awFZn&PnpY8kGEBm+0HlE*oc1|NIO_#t9=U0*qb|+bP-UrF%7u%!} z62a>|c~s+K+=&+TcW?(P?V~EzC~*!jS!S(qW7!w*f_k>3!CvAf=@8M~W)<}RbXUP{ z_>OVxJD|Wea^?)X4=7T>qaOQkvMRZtS}c7+@|;9DA`JESUCOVXPVaey+7?PE5gP4> z4hxpXk3c_Ok8(#8v;c#l%(eS#!T4K$!hOmSeCPSS)!~9${qkp#?_Ci{NuDO27X3Y* zlGq=ky86)s$7DLd%5BUh89nhs~1GU!y^cURF=@>$DzZswwo*5f{;HS<1? z_gOe228|!!uf9m3NWPgn?ILc>V7%vo@u?;D?I0wt75bw){yrn>O`)^S;2)$Dd}8aC z@G)(slih19B!aS@d*Ry7RxZ3g?QD>5zCDcL@NkaHkKx0O zK$LW=)?$^30Z962fVWCd^q{?=vk`5(wyfQp_;uaqOqJr%1<^3scK_Wu`ip6PDiL(@ z{x0Bl^LnPiqbx+bX>x#Eb2F5ouX*4#ucs3KjZ<{rE|i<2^q82lcKpxUq@bAmULXZc z;;fd$ViN1^<>6k!VtJ{h4l*gVny*%8^%a(W@N~-&^t&6am7#UpEi8Z?54~My!8yJ} zsgkjUB*P6o>A4DGcAR{jAiD%q{Y&+r{oDwfqz~&SXG-7_^g&&0vi0Ets3&go^vN7d z5$&nhM`cYof|URx1&71?o3mjtVY+J%;g>P&z(*GoI06W{2pgK3+jF|Gv$nU8T)0?DNIhmT$eNzBHvszoYM zKz*fjZ!Gox2C9tJT#GP20mtI}eoz--3{$rFhte!{*gV+`YQ_A4Y91$NL&P>J?V=o~ zy;=EmfS|5*f4@W+2^I@Qs+*tth;%S}wNHlBA^%J_Zy=F8CjXr)S70hvdcwy}j|PA> zOR&^8Ri>NZg5TI(I#&n6ukAZMWsHsM4BMUSW9`n?j95I4Ks`oF8f`M==!s{OuBWjK z9m--N43ER-X|0*!JMC`If+W)Bu1zrb89d#$KslJvO5}Fxp_4(ciKSj=lIwxlx^;1O zQWd0lH|u>>PHcjbs*8t*C+buN)6S^|wlE57y*4TC*DN2t(wZhV9lXSR0_BB*>to-q|o6s(P|94vl?iT1qg5s&J9ySyl7v?;*$ zQT+z_m67VTUB5)3c5xnG8M-TruhD3%`RH7|O%%Q9(CahKPs5C@cO=Qwo7oi^_0ZmC zw+Vw8;dUIr$#gO9h$&ai0khqm&bmp$LG>J0TNyr5`3!tUJ)=Vlstx_fgzV$wcHfP2 z=laW9?HLsIeZ}akX>V6pSJ35^=;(#cTRoRH6*+ib#rwr?hy@_~v(g3&q zD;6N(!t+(U%x&mUn>+&*!F6p2FS-rxEj*c;{*N5$(Yhsw+YerVNmni!wngQ0Kg<_@ ze}gm$!o^urcifaTU28d4&Xaw3N25%4WEt~H)0Gi6lFC5|N+?T#QVpB6F`d!h*;9oF zI#La-`JeqpJvfmm>^mT4k1^IQsSF##nSpF{wz3`)H!PUDYipo;b63B|o!TA9T+q zUbgax90YfMDuY17AN+b#?7RV#YP-Z~luf?zX=pWF;!iLfro+IS{1$w<@{ZSeyt5Vp z*p;xm%fVXy`Bs8mpU!UfR;x_In~WSr+Wby3WTGRwymt#WxN+nmg4`#H#@dj^hi8)y z-uhz@xSgY3_jJo<&S0`~8jjseWKE5zf77|weyYx0I-E6RoU~?rHmE4aZ;oJk-t?N& zuDf51X%&1CN%5ZwNEz&NZq~nCT$}d z&ah_p0uTs@$~Y_yhBVQE6kz;wcU&B{hxDYheF+OiXY< zTG?{i4{|Xeqk{HB(lMqWv(*(94%^MMs=WMnl)B&Uq=4j^c^$9et_Zd6!*dV*X><;o z`N-2a9i#+F(%R>dS00P9y7!-3A4ZqdQ}I_PPnmP28xi!;&Zo&=@E^r4E`6Vk& z`z+W@TP@0a$9kea_u*!$%fTRePc0sf*%KzWFHFNfq+A{BDoe(`$($m#OPyoXseGr= zI`X}t`*m=qA`IHrt)M?tt&I+2Pc)zL)cw?}_>C}^w0%7cM7x`9fB8#yU36Tci&NT~ z{o6u72f}3G>SQgj80$+mQmI0*tZ>sn(inv#7pZRt4X%hnsXP5GX#O%xWwce-*0N?u z6|vlWsiGJ^HdDx?FM&Q(ft_f}zNkhg0+!%I+k7hwrqN)09}-U-NV5i8oNAEldF)M$z_%;0L5~W`e2Kb1cu0&x$1#WWr@19pt6>kYWDdp|1!hyaAyGZD7-;`wK~K; zVjq@jEjD$Q>qz)Lk;0ekRd6-nd;Z09`HM?~!VEQX@!aRAE}+|1>=LRNVS7v_n(rcq z4X<#jPb~fuq_Ft3b2OQ^(jv}>E$qw7U{2PGvpH>rTnm}oFA)R}ve9HMXCc=N+8(_C zWH)dD5CUSN+LtQoYA7xb7bpRybd||Q_jl0gv|+@|*~7c5mqcz2v&Akhfk7EzF*J+| zFU%@tCn3-gKMiLk(F2YbW#7jdnR1;p{Ek8PH3NvA8p|ni)y0o4u-|U&h~2$aAS4gx z8*+Lq5p$(Bus3EeETegj()2|=pGR`~GggC+z+SX+qN{ubkUZBfv8tZonGB`U07Xrs zd0ARcuM!oEX{WcW+1BZo+qmc?Z)>e{beGaqFmErWPtX;bjntM$tA_HT@HIJR_nKwy zPPzz9Ot5IHq&~mgFd8+@s5kPh*oE2M?w`+8=VIjv^q8r1Zi+I`4F_FyXL_BgMU!1N z*9CDbxzF`0Wbd&FZuc?9C*pi;wm!0KV3EiZuNxe#krwwjdvbXkFm;%>95+AcsFZ2g zlvPo%CT?A8T_4;UFQp%>g#W~uUnY<+tU;fc3QudAQP<%$9t*N+iUO(Ln=d6))ZIii zsMa9*gtEbhn$V17eJ9=v+m{bQBWK@meX+n9w~yV9(FW2A=YX{YjPhK_{RjJ^DO;P4A$T&)&#^7_66oF;b- zZ1&bE5n@PTr^gg^7pj-q?cOur5IaM#<*Gs33_z4pXZ2uGY&BgkDVxp>_!8-Cfic7P zyC}FngE3JD?xI+C(4+WcH|b})Pce0qFPx~p_yNcBn5<1LdB*^Ch%?r^cJQBHVwG>D zp^JtjFa;8h7z+m?utsz>=;X5v8~w;BtUPMEKLw7Mmo_2w?>p;6p^(wBBr8@ajfb>F zW-8{aO5A1~9?NTuDO^1d5+jvFG*6E#BJByXATe?L7IWbX6%il zRYj=E**wN((<$6lokZJW1hYweJq^JeSaCgXyGJCNX|xVxA{%y?sRHwyY3#mXa0?^m z#N{X={FXfjZGTs@8WMLJX3uCQe$%6vA4)8yAPF4PnJassp-?SB+!g;IBb&@D;||`j zwMl()G@EYv>{<_}^qE-OMX(GD(2EN)S|P~}xSgV|;jxmGLC}(FCoNA0= zonFjdY_0+^LNE-A+6;T@+^*Bt@IfRm+q7d`Px%5fYA(l3SVwS%*G+|)3Y@O-`7L2@ z(<5SB&er|Utq{>AJbCIvA?91~p;OO!*3nY0SSJ}hZb7B#luASswc@vEzV(S(`n`>Y zYV!^7QdyF^&R{wZrSPKL5WhI$Y>y?hxVq@k88)qQxygX)KvFoGncedS7K+yLs-M8lUkccGXkrP-%+cvKLrFJCQpT?h*(x zdu(E`+ztbBRK|d!*6CIT2bs@9^Cn-Gkn5ok6GPZFlVX;W8;@|5NzI6UlSzLn>C(ZY z4$^C0D)TU~CZNzD`iMU!*qX?&_)&rvU;G^)WWyu^EXDa}@J2Y0WPaQ7*#F`B|32l2 z)}gcZ;2*xiM9#BANi_cSga|sDT3uvlM!G1sU$Ai7Op0A(e^IC9FCUCSYt6XSV(gzI zb6di9)K8anK*&`;M4-{OxZV1~)a98R{ysc5JyYP7U76{C-pk=y-c+ zy)#^x!nghuKN}tH;}GyP)PVFj`O}z7*^T3!b<1L{)T`907|L+Fb8-Bt0mn{tw%TT; zauJY(xuM%xWZ7qt*FN`3U^0Z+qKHa%F*!1OUltyU%hjLT0yCyQC8f%_v^5zpC`h2~ zvU?@uww)Q+UqUqNEdtE(=6FN-cZ`I093_!`{K zunN_iS{h38+lUcM_J#|Krz~@v^JLP9a7#=v5rZW!ti&uQ_ljFM66lhTqA|O11hc?i z0SGwzg0H{<)ej-jV|KA@lpId z^*8r1{r_q8C+sJ-V!#oeMrei?o>s$;o|TWIHAQlp-TvZ!><8N)N;p@0R9@x*a4n5@ z*UQ6oJu)ML_`Q~*0pufDbG!TvH*aWF$&E!AtIcU+163B%3AwaDf{OKQ%3RBPK({HG z>1XO>D-r=Wov}`V(a@e7fX>LF;R<7Vwm$mex9M3gBM>z>?NqM!D-LUrcOe}mbaW02 zrAv{nskJhPtB1fCsHsD<8j6Q$T=Z`wg_cm_lAXmyxvc}rS7Mie&J1bc+++bJ4aZ7A zh-nFH=X5kF+337OHkj#n_kyTmcEXAL;0bY&?TR2=YM`30t~wj%JN}+=GYE5meY-)c!i2qZVztn`*iR6(J5&A@ z_6g{*is8~^xYZdc!6a-E_(4!4ImO`xs_}XZBe+N(FVmcBuuRzTwnd5^qL5`z*a4M) zSkcN5{t4Yal0+`ClySp*-0GB#5(H%YH2jN2Z4vGsVu=|ve(v~+uCBc&(>nS-DOUiD8T4yfg+i^!((8rN|d9Yc)hXOyfW z5LLwQ6hH7Jkx3eGx$oDft%xO9szkO#W)WFwNS&)a#Ig+Dcq}*#k|W@F?5z?K2`YyflSmrZ!NO*G}ceXr(ic z$COH7E~u@qBaT);y7sl(K@EWD#QgYt2yL+)TsUST6`|ubU`_H;c0?Znh(C>NiiL1f zCd=6Ko#B!JCw4Z?eAb-LW*;`1%-+Be^pK11YkNs(<~q&wOv1_Q=H1Le_^oRoQgoio zkIU@6RM80K2=x#o=}|z3$x$P4b;bk%Pq9GHJ0X+8DVIQZLe(Nk7;?M0Dt%D%=XIa^ z0fJVGQ|5KZc{fbtc$unZqsyTgbOf&<8$EZ9OnaxyfuqyVr`6_8T&p*ZH%5+ENX3w* z`K4ov8b=2cT%ICF=?j3w9S=CFj(gI<=b1z*j#2e9*Oj}OC**Rb`WnwM@daY&@P=sU ziYp*6L;b`#aM5q&W-)!uU*6SyQ>o6n*5>yNcECf7N8v*C`gzz&oCOY!QnT~;UX6FA zr|~U+3cK+~B~~aQo5f~hBa&l$!7SKp@P{+3(u2JmA@t<5Y?T4r%}6TuwCZg(@1uoG z1|0Z)%*XqU*QcV`pbHa1YK8hp-UNoyDWYgSPVQ%4=luy%yS5Nu&M?&S=5{YUYFwT* zCBs;Zb1(p4o0m_^cWt>ZaF_M&iNT}; zC?h6f=vda#*iI+ggz%AKtvi-qbz&I1ja`yE(h##>^;+|a#xr+94DuGLN7wI z5eVpFv$oj9DUI{{BH?T^7ji`2krn%3+$oJfCAaet@e-O9oo67`cDAb}D4(#>8^Ap( zZA8T(WDiIl@xd!urQKd>MBPtdSWDX{hHaTMcDK-zl{EZ-O*<_t(3*lPoTcuE+o}zs zDH|`ahP~x{wts%Jv-QP<+@8<@0NGjXI$xGM5wdsj`HBb#Ts({o0nO3g(-}8jJY=!- z&@BTz2SkOPM-$tGcgn!VCQNBQ9EGJD-*Sn*%?+ef(8&PGhrnO5h<}MLpK?>55(S-} zN0w+*$;N+EGq%iSsg!fto9;}H=QY#Y>Lw-x<=i&6=erE}Jk@M-A=_otil&LeO4}~! z0e&M$dv8ULpxHgE%uBEPY!~<|A;}h@JX61O&mPXObcI5E`ov8=*pCWC`c6BX;}^52 z8YLp?P3RXs`4Lhiq)j1ZSxJ_xRbk2{Na~jSS*n1|tCT%x;I_C>c1x9Iuqj35du^k< z#T7KfM11H;Wur^+Wf%)zWHI$FR|)i(2w#*7g&>zpQcA^fO>L*U#skEPd0g&3VK835 zt-sfRzd1i7#-9r`cCLtTXytxpFhAwYUddc-JEuY5eI+YiZG&ErUAuztarBxYjVH0| z#y4s}BE)6X$5^XOE);?6#(Q#=J~G?hYg6YhQ{P8@;fu@G2!(^KR-V&lly??=H%#Mz=pP4u0& zi<)-P4I@52z><^Nmo|p`?(`(^2v10nJT>HCM{mB^#qd!^WKykIbVH}+5-;kcQzj)> zB`sicGd&=;Vzxpjt*g>yAR(GhQ{@TQCM}@dUpfPjpx#vVv66uURnxrG^o6EGFbFi- z)j>?^sIv3OY-*mDLZ31UBx(3|4rErFT5Ud-*sf-^)G|gMDad1CI+SVw`^sE<>kT$8Lb=ODf=ev~Faua4 z3nuXJ_m^MFeSeeu!gzSjHYsiHu*+(I=UGdM@t`W=_Km?cS^@%vAGgJAva*nW0IPIh z)%L9f3!B<^)j{V$Vm-jDX5Ky7){@QAzAH+PDLRF;04aPF7KmRnY|tHSC9N`db3Fkv z)lC9eNe$g&&cnW+i2Y%|z+kx1pg!j?OG~cV>jR+h{@r9Z5dpkAY9Q8N@oy#Y*=KU= z=w^obi94?E{W)6dD^?^ClhbU6&oExfOiDo+jTww7PfgicLSc95p$BgMdvj*c(j3zdWsmG zWxuw+XNj5gRUN{EZN7V2PPID9Nk&D@tI|K3|{8jG$DCdV14sUuK zmYgXXf)Ed^Fhon$Bw@=B^V5BA0i(mB)1m`FcXrJY59{u)<+5I;0T=_J!wr_mEGfP= z1#{*U`1k>D10Sj0U&+P?_}N~>aMxHiB8cV)@f(IAuygYUDyOO&u)fIx5Hy#_U=P?5 z0Z1}HDkR}0V~bVmkVdVU2@>BK$o}YEBIi#elk&^58AhioY&p>gN}cB0{{2_DoH<*Z zZo5ti?Cwr`blOc$)y1&8W^6fArA?^ARkPd8V3kxzoaCS4RoC^{AQJ!>e{gdEF57*Oj;EYY*?jp z#}XG%z$Mcz=rJsL->fmM==h z|FY75xx5(9a?$ECNYDHcw;9uR&Z6@fK7(jT-8;%ghAarQ1u>o*Kw8x1F8c9Hs({b; z*Nx{Q`+y9*=@5V6xdNM`^uh9c zrFk0fy%Tdn@^=KHLbZluuP_08aAvc@fwBF=#|7gqev|Om^Ry8-Gsw+x1fZK>q@--} zqIQ}qJi$uyGmcY>gK|9xU2r7K`8w_U@k6z`k9z0H0x1k3UNk`3*0rZ!zjWAAt4f9M zx)ZK)l-Z)AY4oeN_8EcsXi4sZUx^S7Zt4o%19T)OPZ3{@{qDIr%UEz+#oM{1nl(Jh zxLusBZ=SMX567>b?DmxnVIG0bU&9Z1Cijt>!t^c9t2XjbA)>#-arPQDC(x*VBg19A z=*dU#r)l}fH9t3gjj3A_Yf@HMt9o!fxxFoy^dlY2T4A)aHCiO&;TYF4)G}8^I*-Dy z0(#1zZZYuns}J10F`N}iSV?A$={;V_wiaKo`*Brq>JZnfg1%`9xE+V!G-rWERL)gW_YGkgXK3ds=9eM>o7^sczr(!PLuU*k1WH^ext)^B z9Bw*@J>V#S1tp+`N2}BG*gh0UTfHOz5c2{z_Xn%BKH^t*zyFWA zw*WyWpYN@1d$LJvw)&iVPUabLZ=avyrseN!^yJ8WxuZReiE4b8`M$lX- z1P(Nk4#w);GFN_|u){bi9ap+M`aL&IJ-OvEKf{~Zo6W0pkT;VjoXXeeVz(@J#nQFX z_bGNFPw_uncJ*$OE>bErXK*+YbhODI8(cw6ZHMLzlp4`jaH_|U`w6V`au+4W$)8t~ zSaC|!xg5+gc;m@}xCA!aE11vI!28bJnQ24F0(X(A{EnSS+#?%L;Nfw|H(DLu65)6G zr4CoesJF9bo1t{-%qhkEx9g;Ct3i|j=9jFXf8_zZR2<^kJ>;y7ZKHMzC_xiw0F25cc-|)v>#BUKP+w@=J;6pPe_;g zvO7_zG(N6udmOn=PL?iB_jiAlHhG2P+MD3BGAJdGmpVn81^CPqG)nI3Epv~c8HcV* zTZxQCeMpjY7v&ZMOb^Y0;jc+iyqKnK5&3PoUq0fo4l@|<@~C^ZXk0g}_a?QEeIo(& zCn-zN0AUzyl!u~-e75VJ*3D=FPrPid(E|2}SA8AW&230`<=d+e0Lo?5o4w&xpPn!cDMyk}qV-lN$WybU(vmqTC}4S31ujx#fykC(t`=4H}yeav2&u=k~s<#~W`k`x3or>c4HQVuI^!8m;43o0SN$6hxr&0rUQ+{8o|A{%T&;5!D6f9P{GAKT5*?u{)r zf)x_M5L`tFHk-|fYUXi@TnNAYgcOw3UZnPOs_Zx|?Qx;WIod{>J82>nhr60Zn`eSA zP7rV%v)?|;W|5c9dxv8T6cKDznYBN{0Mju{4(@SS0Tli6#Z-J2_fO-cXGL5G%}6m6o+OMo>dd@x6>FV+ zZ9>8W${MP3c8l2QyH^?}AOY612$R5()#f_hi3^O5RdXJ>zIi}))OLo*JPd+^{=40I zwH(;^7XWbEsBdQ=E-rw97hk<3vGa+z>aDKw>XI$I zk)p3smpe)UY^plzj5qHct}Ozg@^|ijU!6yAYgKgXd;2CtOU@^!)g?PTsQVR9(RJ#% zbD0L_JrjdkP7YU2;$%f7jQT}d*-^x`#3By+53L+Xq6|iDJ=xal$vNhSs&Zll{u{km z9L~*>Ez4P)`2uTMj>;J|p+JqJDP5nq{uzf984)&Lqb1kd0SIdAjxjGY_QNh+pyOCA zP8&ThCX&sNiGrjAC6oYgd~J$?>BMtq%1@*m6_N}Uq5}7y5+2KoXkQ8$uYlv0i5;=% z*aNDV6v9NZw#(UWq;0@x3qoXoU9~y0kq3ZwD0%!lMFlG)4v$-V7O)(n(0fcy?iS``BYQK!ueF;X@aPWUyI7N zV+#>fyM_RL1P}xEgxHm-k2mdo(=lNUo`DKJR1&U31p2rUow`x#Hc1UO0 z;ISzG+y0@B-vT9CW*|}Lp@B65DssMKngrLhwAPrZ6u3F^nr_%V;BEEGvg(gw?9AEv zsxS3&8x3BaOpQ^G&1$;gZc@F1B%6$6ZY0&s(7yBoib*Ja*AsNTnLd)ACDLng`^-v9 z`!OPsp^!y3`n`60$EOS95UP;?uuYy9M*L$%g8~#25ESM13G`qWPj<^@$BbksywSCB zt1#f=GDpB>@w&XTQ_f=fk|Q%0UTJos;Fyul?Q}7I1Gs0lsT1vuxD@~PrL)6=6Z zWwglH(L;w4@R5_94i@|P*};N12i;?##K`6307xw6Jo0-&PpYZW$>g&{CM{ZZ^JOx~7d$SR>ZZc?fVzmik?{-|Qgp$} z-`z2fR%xt(nAbz5t}|gsO<&s?)i!`+`DI1Jl5l!znh?Qk=jhL~9J|bqDvtcRY|=7C zrtJX℞epz?vYLy!9i1Vl;r&GQxz?p3%Kjm+CQ^FK2u^sy)XW#Jy>fJR|HcG`^tN z;ILuJvb@rtMA$z8kVj*7I-OnO1@Ubco2gsxT_%tm9BNCy+XJU@)gB>h*SWRh_9Qa( zi*7kzks?l>#tVtzFPTlrKUD>Ca131>`++V!MzprCqyv3ulxwp6G5r$XEHJbOM4;WLPOLsOIInlhQ>$;vn!G|}s0#R6iFeGr^4g*Y$H~mP1vn(JP&q%7 zYmfF>5Dd~_I@eEvmj0r$_B*8_t%*VJi=JuZoEuu@(g~o77ADeZXI`lB)l4&M+c1s$ z(32O= zaWf4p9<=Q8?3+rF8qJXmD?txjU$f6>G|I3uAsRU#rHMi$8o3O{q_;u{l$Qs-VU4u( z#uy079qo`Eu2%vdCH;Po?+cG)nsPf^nHsrCG6uzvVcl;uxM-DWw#q+wczm7_+TRn0 z5eP-4V`~CKwr6v*&$lOM8YFY_fGL#a2M#w?)Og+qE>SkQ*i-~|Y>(FDyM^P9D^!XwJyi{&cAw;E zf!rsWk=cAZdl9k^7&V!7Ut%`1#D+4!kJ}%$9Q7}M#_o-e560{baS84Uam_fnc75CO z;GV|k8F|>JsMmh?JS0aukYV!;KQ2}LVMBHF-A?{Sp1o}vx3dP|Eb1@m&WZs7w7Fh$ z?A$vQY7~v5Ty#NQVUL=ehMQKT(&!@%Qya2W7ugZV zrCofXZr`Cm@LE7%p$1d9yGGbY8l#DPEjXXa#;XNE^D8_Y2Dxw7M{N5J6?H)w*)kd+ z%jK%Bc_(I=u6c2qES__ZAb3;r?Jl{T)$men_OaX5&MPs|IhqOD0VSU7gQdOZRPpj+ zQJmKb_O%7ucU_u3A7(6hf{K!6-Z_#ocyhOni#;2Oaq6lwSZhXS6ily|h2oLgaI(q#XCLv; zxTu2ZJB!QB?h&WIr1uuI;sJAPmkE^5zZ{Pg)qQDHJCiDQwSIhOaJ5MxHuxNQLFEaZ zC!?C)vjs_ut5QOb61Z(lOi$QC*F-^0vC&g#XAdEI^njby$DRE4qNh-U|AFAn-fKcy zJ7ku_qzGQK4k|gNL1z`S$d325JsK)^k&e|@LzrmRC=ZR|;XFn^nhYb%M!pYFAPLAi zGJE)`zYYFk$!x&zS$w$}onVJwLFx#ere|eG2mX|$5K7Qna29CMa%j982>vGWuylzU zuNTzY;&|MXOGi;T4*utNh>qKp;LDDWIl^rK&}5;n+P%W^;mPm{n>F(~p9oiz8Gn~r zujYAE`F!CQ%kRDi+Zy@C0CL+6T2J)rSvVl>xm$L~LFAX0IP6?=L9O*Eg39tVGzDSl zV$gfG`(1BNsEi55x_*|P(OWYgg}V>DBh#3EIFW;)z#i=&doy$)JqPVtJs-k-j_<#? zhOdMT$-SSGObL!zEhmR0G}@_e&Sqv{l&EH~hxQih+jcF`M-oyASuow`ScnRF*q@lJ zc~IIxE>7Bm;jUP%b@AIB$gjV4v^#y-e5}&6q7!L0q9`BBMqynkcDCkZgom)(YvC>R z;d{22l4%6*cithXcRnM?tNtZ!8Rx>00KJx;H5!w&C5s%SOQ5W$1Y0*_zs2VnF7(cB zL&ikFk`aHLT9z#CVoKGbf@K1}1BW(kuHgRC;#9*+`NBt1xl&UGr5Ii5D;G>NPfy4S z4S_1;jSPk8@Mlu;@mu2{wQ>)Hx!4w1u1Hc55P9@1x0c2TKzSS*+@)Wh>74t@HhN(w zW#XDNEJ`PmOJ&%W>En6Yo+)!qSexOhreCJ{#G;eK+bfo>G)qso-*Z<&LQz?W z*9;Wl#!hV2e0ke$l<}^gw9D3pnFXJBKYJ0B6r`VNsb0V+QsokZ>dkc0UKPElAtM6o z?7F=jwN4!dU4w61>0TRplX<|=>Du|63k0Rw6=nfL;Xp3XjZv;M)myM7AH%KXWC<1bY?adZESrtdlC6A zlT;i)keLvb35UiXlk&AL$<;0%JWRBQ72ML|$MmMOR=F%0!))x>wk>;+?i$yE-r2oh z9caC}L?R#G+16K^-3%lad5Zm>Nc7UaA`U_9>_}If*O(bM;Cf&_$A~&mK!(MCY&<&3 zg-0CiZ$=V?#K*&NunTB`z70X6`GFv}QY5`x@O5K?3ggILCpQ`k@z=1$)9LEmoKt3* z5YK{K-D=gBb?9V~#|Z=Zf?Laz8UVv+!+vHl$Nhs0?MJ#nA1Rpx&9Sbb@65^o^t;<3 z|6;AQwurMh{%8^z3!|^BBVlAz^DWLSMB;6=8Pm2zZEDZW3#h5a))MNLLZg=1Hxa2& zp{8U+gnlHw^72ldH`h!1?x!RxxB9!@1Mop&|$BAA?076=a=T1*3+ zDX-ts?n*h59#mO39#c?#YH)b}3`#`sK7wG2l83T%-i}`R@GUa$$bu5vb}?(FgIMgf z_Kp5qQX4aK?+Lv4?8*50y9}tRWVs0DYojKwvamS4Q};SWGXGxQZ551s;`MtV4;M}9 zVLr?i-u>cx+g{V{Q0#Cm7u0qQI1Fm&Rjx{Crh71ExSqdI%d}OsWP6X|g#8}SFIX<5 zht>9Hs|6ACNM=e7+z-1WrqBhgxT%$|ciYdqEtx$>`0%~=ffhEZ`5SvIL_bEMSz!J> zrMYSr=gV0+t8+selE%u{-&k$&J6_FmXm;uz0@Ac`4KeAQs|+iOVWFu*EBy<7u)h5| zv@_D8Iliy?-p$x^bUezB&hbPyf9nx{{<=!#xCr*)WKM)Y43>P2ohVWvoYrTiW3Og! zWX{I(2+WBzMNsVQnD^=XvGgsaH?X@_*KZ+7shZ`m`aOnCoa9(udd1h>Nd2nES=hRT z+P8O<1t~)(qk1$PX-tFPfcT^@ekh#(bZ749ok5i=+6qXfshKDX5l~MRg$cej{FG^iEm#7G}nmf@1*XooM!Gn z|Nftj@`K2C7VwT^N-izwGa2E9_vd~dph7=r#MKVo@3sCFw)21mM8&bmV{b#@kA z7C-x|i*Wl-ruNh|--&-EqBdINILzM5nltmiaMEml5Rn7^7mMLg`0Ha|U;ZFlTaT+y zGW^?9i=X?>(>C(=o%nThoVfW1t^D-2yJ}Q_F2YZs_K!=@mVBpar(|@E{QP7J>yHmk zxQBE7Bt-wZr$2u3fA*dFd?ri!^3S#Osiytoqm^g*PF4S6aR0|u{cCZj7-pEYHR9JI z^8cXh|1Wm89tF9C_vfyNQ~uzW9hIuWzq6%&pDF6#fJzo6^9 z5^**b(q5dM96=e!bwQG}kL>ARR2Xi&`AByVMj6dzijWI5Zc8_-6E58EAfyc#i1qXR zcVjU3f#w@T6OB2))|P$bhWx7*!{!O@16d$GF}vOvV6@ftKdCx^1>*Lf=`OrzzxVkv zzT9f_$zRJPPDp6>MHWb3GFUcm7K%QRtOOtppM=o=YMlJTfWGU^{J*Sm^7q&NzXCIV zUyr{z)c>mc{B&)yzdP)bo zLAO13YFqNA$v+-Lh$cvLrmH}3^(!!p!+o41pRLC0s4Bhv^@QlS(vlVqAh6=f=y6tZ zQ;Myw?&!gv5_E+M;#_A-tdMdTN8<-U^MpdBHmpGSFu<(XOjpI!xumD}{VAX-C;0^7 zT5n;WukV#Qg;^(M)ULC(48N{=fG|YIU0&JI z62wcPd>k`<f@KOn$fq!?>LE^fP~a*>53&m_mi2^n>xW*%{*cD(*;# zC1>3DVb}XR9ISCaM2dW#o&W{OO>O@BpCm=cDA5>OX6@7pgjK48$>X(-ZB(4Fpl8WS zY)&nUkh2%7n+UN-Ict>*ndKN3bWa(q_H*af2LL`Jm|WyWZwtjD(8n5QEj$t-TL_Z> zjkMqw>dUlG8xd#M&e3Y~+r(Ug81!e%fqJ^}w{SyF?~ga!K~AE;ppvWyL^fW}gVB;5 z@gfM}OMr}3rK%Q9BWf?%o8_)d?KYn>Y&&l^clE{@+S4Y;kL_Wtfi{SdA&bYw9+6B+ zr0$~O0E{#j5x8a*NfXjRx5{9e$z&qkez+PG_oD&eLrYk3DtvjYc%nn+!t>0uynx}! zxRo_7*OFu8M5c&1#JQ{WL&s&i68G+$xxx&F(1_d1uX4RKb%OlyfG98Jj^CxUPp*Im zELNz)z}NmC2Nkiy7h%P)gR##&|~y2=&RHF zbw@y1go;af>RR!Aw)0(sS4c-0p$ju(fjgDzz zS$HgGb*>S?k9YYQ9ng%lrA*2jUopiEX;b*zztAaB1s=os2O3QWCj+dU$4IeBw1spMsJ1@OaoF1kv0DH0tO<(a@R8$)cVG%ptgiYVqLL#N4iXp#1t~ zN{K~}9x0=u8OP8igrIaqOrn58>sb?pcAP#AdJYl^fFz$WYsCK4mM=FKGCcN*dN;OU zkvAhymrz;-7!IIg6lLSG7BSHb2j$L4;Y$0qplFt>PS9I}N_=5Q*;&c2UJ@vz6AG6UWYIL|W& zN2g{!o}vk-1WHNEBgJwJ`%WF66?|V*@B;Xtrn)%w4ID1Bp}CIu8tU5;q+WiqrZS{( z1P!b6cNcnP!59%GYhGV{48HYgckonCZp)*xC~E-h@OVV}LERXH4_jw090rT7X|^lnP9C6foiVgjgBMsl z0YF#*K)Tsn?L$tMX@%u)I}W3R|O~7*P*9DPslO<<+~m6BWVs z9;#RYOakr19#m1Du$j?Q> z;h^Iy2t;R?nUs^ylq-{&(LQ$;G;51t56aao?oHfA6_94Mk7+*?bg{5Wt}k~>ldiG! z3RtQ$@HWr#;j|(4YVnK~DX1Sj{BjflBMGVPer-#!un~m%gpEWb6bt|xJxI4YP&V)^ ziTcvmb3FAUCk|GVv#`EAR;v%x?hlHP77Ab#!U|to;#QZf{8GKaLT}2{IB)pE{5jf% z`k8RH5szlkn!SlYg}IrqVYK3pI7)nz5a8-0eYJ#~R;{UDiB?kzR6tY_fNMrl*Od!k zva_9DwR*hk{c$VfZ=`a{V6^!h2fGbD)V?R?I`nC&gj~3CG;(yLn!Pt7CK_do#3Jta zB1=)VN{Vp7J1nmtrum_txhggLpFTRm`j(@tj_N;h8;J=7hwk~yhiEOuAEUTnwR2Qw zBjsD+>qHa-(Y>jb*%b~Hi^i%4Q#i{X8<=)sowweVEOkrO0or!$q(BOmrUGzhd!}F| zlmaCx)Cyk(6(1QVay!g$nRD{HOxcaP22=Cx+N5wjozbRyppPX^M=j<3fazVdF2%qL zG!nMAu_m9a9ziHCd zu6mL@k7Z*1X_HcR3yObg0sN(gUZ{Yx&jLSSpZhQ1u-xv{`V9&}<2SW_Ho?#r18-;J z<Q*`eO^{=ERhyngNta<*>i&;S~Fak4Fm9 zIk%7Qa+XJ2mZ%?|tagEy4tpdCxmUGAczJ^4Fn62upP7|dQ%sY20ePugUMbGQ8D6x< z=rtwwrL4iJ&;dy$V4ReBLP~ zYgc2A(RtSi7kx!H&GB}bnsz2;YTr%faN)l*R6N6k$tVCrk71k%d)!m z0VFsP5$M*@7R40XLhY`|f!$40AbBoYY<}w{4CxO{oB%##Gu$Z1-s3sT%eif?U9{|Q z;HrZ-YQL-?OfWwj9TG6=bZu|Bzr0N3+XP1s3i(j~c#b|Qhl?M_i*){0VV$H0C&&JEF{Nh3yb+W}6yUX%`a+FmMc6$COroEMPZ?jLO-Bg!&H+8?z0AzeG=CM+)p(>-a zJ&>!V^RbD=FvZ(_9=c0m*CdMGHZ5XRU!EcrR|WHaaU5aha54Bm4QQXj<-rw1#@G2JD#P=yI$0pVhtzkX<)PW^2j9D%dozeu=PD>GY+YnT@B6G zRIB6ZEwSu@AY{Va5KS_E=c+c)5SVzdbzg?13Rh>T^3pvqIzK-|d@2?3ep6LU51pUf zk(*P;!b9w3pd{91&AOsLhlo)OCHJ{ruYc5T08^r`67ykO)7Fb*@)CdP>8cL%qT*Ey zE1f(l)hXoWeCx*Ru)f|tl+oAWx#4>u{A;$^*cx{$^K8hG+K=p>_R+B&@o?%1L4`*~ zH_xarXuLD+m?F$`5^>v#2BiJ?VxnMF*!^Y)e|I~W$`kKR+ib0@n92ayy}nTN-IM5c z047>hRXQG-Q>WVQmF#XhKZaxEyI(Ukb#^=vKHn`2lrNHnD?7fBxVJPvKd-M^VP@{$ zGs**fc`d&IZfbvom5`f`8~r?-g&N*0mEPvcAt0>>I*LcwAm*s%>fy0dUkva1*)Ria zWTo_RDei}jYNrQzy33rz1UD696ys*(=&Az<_|3{1YXN*2#Do@Wn28kMbn__b?V9sP z=qVYvKg_c*kn1V^J*HZ*EzyD0hUcN=BA-S>kOcr~AgB&Qg{~}Lr`sZj`t_G^j+!+< zullI&1!EPoad<1|!AKx07!Fe4;hh+m%<^Pf*ii=(fMHz$C{|O0tDDI#va$IVpY}2~ z>H%vkhb{*g_+AXtFQVH=W3PCxT}HVpyJR->&)<7H_+CJ;Cd%5#lX{*P<;72J*d1jp z^E-K4e*s()TjER*Zgxv@u7i9f9+#3HepRbaEDj{lWP_HqVxH{)oKu`c*@GqGRiu@7 z9E`nhXybCuF!cEnS*~DWNX#&Wxc$_!TmTs)*)_PUo;zInxJ60LWNyGYa$#|%&aad( z8Lkqu%qu%Z?mGsqh4K$9=EU)3x%JDqo-~ezp@Z(}&mH0q?agKp_{~FfCV~hegyF39 zwZn1A<8a8M+LQCSx1Yf%xUFI3)mH6pt{hf6?vs6u9CX9!8|?#~8WiDaRCrytrzXNs z!&67nS%|dc_%lzmjqzn~jB2ChQ95M?^`a4%yn)lRX zpQGN4(eK<7CZjq=za3hmXy#YD<$WA=D`IdC@Wa@k>lxfO7kE1Y$_=lJK`}4LhjUl9 zmnWsF99JK%d_v`*wTA&r3LzaFjWO^A`gF!8VCVR_AXVkr5<_NX!t8><88E3$^+W^$ z6d1&lo>2kp@>Mkv8lpE(c=fLw^fP+#D&qj{0=P-aZP8ib0(m>wRhx2o(sJ57g;)-S zE@4A$;;k0Kper4PV}WL$T{px|(T9}X!Ec2!tH?%?)_MJN{ z(p*MXtKrbR@w301LP2{43{UuqlCmWTmsHRA1V&*H-^vcy@tKBD)&_Df)SmHoj9?^u zKysF9;mr2k3nU~bFJutjc=qNE?U}c`7nz@3y5nXezgFw}>Uj1J;u_}kNbSU!i1pg` z_U@c(1wB_(+zi*0Yte{{>7p=;@2O3`m*?w5K79;Nfww=sBhev|z-Re582@&+5l>g; zpc4yeQlw<;E;uC@7}Amp970`C>Y}S^`TS7KqTL|r7=YpdtxUcWzedbg^!3#G&Aui9 zWI5MFhvQ)nl*Gb&p*QV7Xs%${aSTpY*hTi`+EBr(gJ8o-|eMH3-wq>QEOMM`X^=4z47SF53WTJ{0PvVT=AE~3mBaDP~MxWwwdXX zu^c5*+Vx6xye+NSonaC*$NA);w-93Jr9;0TZ=P=J)3AdPKmPiT^U`<$#YY9wp4U}| z3QXY%*8KI|JG?A!9O5Zat!!O^j`XiA!uoGVZE9=6^^ddCUJFvDWwk4mN}u)~-Rj4et)tv3_2}NALsumN37w^G=+Hueq6oX) z1@W(m`%-?7*2Wju(dvnG>4%1jN@;52PjsY%DcL;_CgM4o1;$IoAdiwDACkaF-&{fo zxLP3N<_@>AyzZnx)gJ^oU^W)&l`bR=GL^;5p9r7nicp3*=01jhZuUi`&%U4C_L^1Q zX?v@gv2tWkZyjN-KsEtH!s>A$k?G6pblC$_X2@ z{)Tg91!5S2lMl8UrD+~G>E5|eRd0)V%nVa(_-bw^Dh7li9xYyqJx0$S96^w0E{I#f zr#4BSiWK9<)W-PPb0c(wJwpTi{Yi)h#!*T%8nS|Z-8w2z0aagmV&H~q%wIt{WWJru~izi4kbYm zP!C3;8tLTcWh{=(H0RJ)?KENxDm z8z!@Q+$e=7hgBhnqw_MW&eIiv92eV@<$%_)xt_gLtYWhAE+dl5^t?N=^7d>jbheaF zFkX)0Rmw;5sz&;!jjr%>Zd;yF~uJx=V}p?bEaZ4h!-9^CC#=17&>K&s&L1S_OK1ORZ0A%e74{2L3ohLp-XtAp4)EaGB$h2g8B*3(-2)3;5R)uHdRX% ziX8S8V$Tr^0d`m;jAq`vQp~+Tw^q@9#-H+Lnn{w+DRBP07HsmvBdu+5qQC4-w!=4t1lYi^re6MTzRO{f<$Z8~Dh4p=&-{c(J=&V@lAZs10LuVvL z&mES=o$t((aCFy6ggEdZ<8L$z*vqK z5^2}i=FgK+Bws4z|3%ZBKEHQlmS=jz*{}+hddZ$b92Om<&H+Kmb1gU947F zL@Ym1Ri4SP@gN}LbvvQ0_jcSqtSppGwH8L@{``Vc{{=UBv3s9og&5p-R%7X8!s1P~ z!qCO<#NfJzwOWU9pQOiJw(01?-x8kv`C|X<8IjbVNWCV00}M&`_iq!M9&)=N6Gjs@ zT;%EA2v>-qSc6I!Wuu=Q`Lm5|yvAOEIE&aAaiIJuN*71>Rt!7@dZlW2yr4qfAKqM# z*vLCEEmfkgyi^hcCeV*AG(&juW@MMXGPDoR2FH3vY@o?ltWj$d)ezOX=!g0_`5{n0 zowf^EDsZ42BTV<@QjMxqR>)v$h8ZYMBm%dVV*U8AMao?6($qVojTO4mN{!!MMdlsT-KrTtoTAmOIHDu3e@! zbcCN6R9rSGb5V>&I^nW=@ox}*nsM8ZT3GBz#e$8HJ{s`h$Wss%T~df4LFYxAz9j9r zGBHF$t=mrF((VEZdSl>1)Cr@;Gu75dhhNMCRz%;AKJLr+_2dx4a5u?^mXrxQd2S=U zR}NnblB?YrU8&!5Hm#nVe+)WBE%^;st$LPH5ao|8WBU%8bzm6LF=g-SJ|WE_=u$x) zrdd?eYI}L&+5$hyRDn>g^cm}dGbI$(gq@}F%HykpoC+%F}J z1h_LLjD$RzUXqAEs(Ix=OnZM36vZoRDiXL%lNE@sI@FKt5sT2=d&UUmVDBuEjj&_k|AH44VyQ zK<1_&ord8B7(iE!1?k~Sek#y&sa%GoX;#j_YrgDDy;3lA{^4RjTq2aj3lJ3|@8cdt zFeYFyEt6h*1AKIH*kae9q%};9@#XXCcx_C_#Y*2fYP+AMy)FH|7|}WA;OU4jTO$%B z1V0;Meo?=RJyQsC;$)*U&4Zy^o5fRQS)x1Dr>4yWlpKB>?=$CUU8nPu2hF7{sro?Q z347}3+{0kwX_td8JWA6qb;bDjvWXOrf7eZuWB?s4b-_?!6oeiSFU;;6y(2kj%B(w^%DX{`_1ZTeutt~xMO{)A>s?I2V}r)6osJEg%n+1>VYr2}e3 z*s{Sjw@+)#evSyU$rT3a$#WYY>Vj}5z66s}Tp$#z2Y}Gw>fXy3ix+{In_R7qcJHc~ z(Qp&9R(y0aUjC2i6#fzbvlc$T5PDT$)T_&mAc{?=hQ4>8LX3fb{I?QBFhzb$wVpjZ`TK8(6ZXiBPFcq*HoA z;nTR6IJXj~2cJzsyqFaAt$2*oTI0(CLymBSq z53YN>_n8o7dYcC*FE#ed$+#3Irco^1W*K@7)H{wct#nZ-@MDMi+<5JR`D(GN5$F35 zDP0Gh!29Doc%@d!eeZ)YK`nhQe7W@18^0NAM_489cwClrfrR09+>4ecA6a6t2P(m_ zUiQl~%&s$2pKoV#bcN;}H1-u4Hb@uOLcQW|YP^#aT`M+4$X5nxNTLFUX1BDUF*|Nf zeC1nV>r2wNy$ns)>bDmaRMXrvPAgC{>XunwG}<*0D!996&uO)Y0JD8=aCJVB;{cL? zC1@vurEN$_G$(NkFY4)#Yk7!a_=?BGgAyQv1V)Q6X>8fSiepIRX$5K4R^@?c8}-w zGp`Q%ylTA>&W(OG760TQj!6$5#BS3&g`;Q|&2T386GafQGq!}%#9ECxw{|5}8*enO zM{=6Ti!>Twcreh*%mzR&mndn-Yq}~La9T)XH;0E8Fzv8C&%Ha949J-bLo}BLnRxB5`mafE=ZN_9@*@q6jQ@y2NQC(xbEI`hI zI9K81txFCH=;7*Z4aN=IYMPOis{`rj+#K)*hLAsxB!9Ly2-A~ikT#~=7Q2b_==n@aBhtzJotSms>r80QTU$ZstGe&W z{ec6SZg<>ub;Pv8(}yf!A@NwU8l$2)8ZjSpS3z zsjkNfJQp_3$)~GombODZ#{c*uBC8pVRN}hY0~59 zazPd>c<|1wwihBFSY> z*p$qE>>d`hS`xAcax|jhj4HOQc9!K*InJCelkmB&*9FoPb1K8Lo5lD2Vxi?bG}-r+ zbjmHR1E}&TRG0tA+M@zh-jXUF;1TPQ%GfTt6Ul)J)vDd^NI;R*p zmF!LrhUr9tMY@Ry#3S`>(Zvh+tc0-(tQjZ_3fV=~Xxn?QKbotnd)^=Wl2tRm2rXhY zAG9ea795o-6;xroGrw1Nl}@oDy>g8oTHV&TeXL5wEhMctgEQcy=F{f(rsD;msmb&HRUw>X4*wxFb4knzOY96@NtgW z_Gr(0FlFq3BA0YnRMBN>=QbB)&xebw{*C0~kAh)LA;GA|jCRcmny+?9HN1dwg+ zgf_FejyrG8vg!|^=Q>_RGOWhF-UJFSCpD{UCzt4& z9k~bd+jWkwCHatmtKYWk#S4fprP;CYIBXS-byzRC=nts3ceay9`@9A*gHi>xy$u8U z&tinBj4~=uh41c#hmKq)EG zK0WYZ3uSXa`%a2kZ2gj$C2=r2+*%FF|nt;#gGVE$0!JTf1YaUHCW!=l~3jh74@EH{ZNoFCcxIe5YAL zl@YN5^@~{&P{}u_v`&`5jPJDe^RbSg99B1+viB#2-LcBjw1wv}mMzQ+JbN|*E||b* z;{xPcsQRczn^Ewg#5eztPd`cu_X)>AF_Fu5P`fmA22Ad|CS-mzI=fA1<@^^;pm=;Zw^Ts!ku+raf)W6pmDCUzSmKqH&bN{ZZX}k@b8TI-aVmnl<~dR= ztkot@WB>`_$byGu`ZcBDRdZ;-N}e9po^L(ygl$vvoO;5Xg_2l^Md3m z<%|1VTU4kcQMBDd7bK7X5^G{&JD)S^z0ZyA?v9LdpN6 zH8HU9HCpG)6*k(F8>pyD&9`pV#jK3EwB}E^chLIYb<^`Xj4*h!|4!n#J`m?N4?O`+ zoG$*j$;Kf80krpPe(hj^nofEZC?S7)l?|xC!4wag&W+w%^K5>_Ne0miKPZ|oRcV{{ z%FXgzfdi05yk~}5^Cb?w?yJ1xVqBgh?}D--?h2RAGAsEygLH~@s`=Zxc9Ag-kR=&k z)$BU{StF;D`3X0B)knTAH_}hr0cW+0ht_Q?VdHDAt4a)&t4eZTWbe*D$p0P%e#s~8 zX1?UII%=gX_2BKjJ8e-y;_1?9gQ(vb*H z*OJpqygX+x=D%`|=$4?@*XPS4wOZ%NcVL3kEhn`(O?iFYxZgMRr4H4$RFLhgAZ?P} z?;GuR&U+B7|B+s1InWXP6K*R`>xi2;om5wq(^XQr-mZSc0Oz2gpeveBT*YuCgQ~R% z@AX%Gm3>YR9QCC`4)u~fGrjIsu>G-U-$BG*I4*ZDSms`!T7R5#uoll4ZN0OL>=*mZ9rmS?+!!3@ z6iKPQVJVj(Xv<;H#qQ z_H!K5n!2vFy~QWgmOJ7-Oc#a=jBAF9t3hnVFq8k{ z;?IGsBozlI&Ql4psbwj}E^xux^7X5iQKO1+obqx;qwV`!OLBe9M4k6{Rz<1uul~kH z@q8*S0u{Q|T=TXdaY@PNi9+56su_yRZIKLU)xepzClnhTQ1tp$jx`U$&IAhoES&f} zfsjyBb2Q7GknRiG5otR8yU}~}+`ukKb;9gLetEk8+fU-$z>EVJuQvU5|Ndh;#qoTe zGlJ^D-KG2a|2n$)Clvqthy640j?wp=NaO!!eepke(73{5csF=|<;+ArZ~ew&|L!?@ zE`gW&)?C;1Dle(82t5j*Z$}4#P8yEHf8JP z(C_+YzjKz#K*2d&h10X{UaicJh2hf9)@pfW$w&vbXUmdTFCYjLEoZ zm8Sa_RZMtv# zi>&^a9lo@OS$E{HM^NnZ77L&+dn+JB~^weI_T8R~>NlzU=DSBM7!NN7e zJ;w_b)p~_)Pq*C^UcEL35I_T$uw}b;Y)nElyP~PjyFb z7Jo;+=dn4xTKo*`S{8>vM4k-f^Tvd!@noiv{YHO=tW}m`w7RH`nl#HCf`mEj#J?I4 z7WmtB!^`g=yPkSiMt2uo4z zb$w-RucQv}Sq5uhUJDq>sjCBf>%n=P=2Kp=f)twVthGyIPI6~wy0Ro*wt>WQg#|lO zAh z?bm<3XTam6Yf&> zOI1F(J^mPtD^D4SR9BYRtjy2T5eq-)8I1-hkbDCHV)XyA9>Bqp(uk1C;^S&I}VI8pTBsaJ(Bw`Cp@qU z@V#{NA-kq{(!qhuYL%pQv^&E9xvgn5P4E z9a^4uT29Oj=l{imNsu54Snr`r`R+o(|KdVaPTZZ{v;RCw*Xz=o`80cB9)L@<&OY$$ z3Z(XO4^E8gh~#g}i;#8WV`U&}C*Zx;G&0$b%xqUEs4--+8mlqjG;V#kCL}|XZIJiw zklXcHlBtzhcw1wD*k@3|Gnvk;pB){rw8tJbrFZydWJny4(JRIGYu2l4#Kf^6HIq+yc5t5q(AMjOoYnMVY}i}h7u9VUY`V|~NpHLhwF1Fm<=9*@Av zc9dhwGZeDQJFRwlWac{Km>Cqt*X$>_yy5INbraeg2IpMl%ALWKSw>_C&9wdaM=Tw?G&Se&yi4y$PL?vm}lOb@5D#dLY zQJPz&Q!DLqTQ}nHHQ~jnFA}!p#=^WJ`$qy_r-je7MJQ*wMd#vw~R0mskU>#DpZF-uOS+%zBFduz5K8NWy@0;z#c>dzc)WS> z8FzYIuqnprxq(tP7Xre@rWnbfaK#1@eeq{7f`1)n@R!{YvF%{6a@NVORjBR!>)L%8 zgpwK&i~P>psluBZvU16y3G@oF+NzoIEUX8Ef$ALHr$Z9TUV&aSZ_diLGL!jWZs98q zwKi*5=VyjURxM?BDBLq=;4ORg&N5G*=qi}eS7yzO8)~|PND_k}golQyM~uh$pl#D( z0}&UQl;zucXII=bISv#y<~ohmWF#e9!3d5{(}j*WBPQ7v>)?NRTG{vCkG9c=HD88O zav^#(v~eKnN|%e0c72Is-?D*`9f_)?@rE~1?+xmLV^pe1f z{UZ{nz5wJ8ABxXR5{zmW62P9C+>_wGb^TuZzK;_F+j^dOfcSv~dh$uIP;D+ze)`oCiKwv@bVW!f^Rl=^Y#Hz=g< z2aY%`&SF!@wII8o6V8103WkAIE5FP;;%!zY#2+V}R%#(~!^u*N1?M2)c2AyE%s?F7 zMYo#HqU1qeX!-EoFbLaiYhRJ9`h76JckvImw5~;)pA0c#AqhN2AMhzsK7P6BE8A1a z5UATMQQZERBbl}5OK7!4_P7H=gku4Io}3Y|<-q=46O@hTF`tPn5E?6A3&#QX`jXVX zs6TldkL#i;dZ$=fF6?e!`(#GPc*^_luil?W7cDMt-hCRpLUt$^>;xwU3V%@V>1jpD zeeZsmO_Rb>HfZ5z%CDoN#7zPSFyYS)vbgn<=$c7e(QG6=TR@3bpDMtcQ7=4wZYw5P zb(8dutH?gZFFf)fzgcuI@sl)tM0%$NXIJL?`%AS4+j1G7dGvZXnZ<# z%iF)C(9s|EGI$5Nvqv#FFq#jf2B_aWcr(Q5)8W5@Y8OvhQj>^n!!)3dYb1G0)+P4e zjAVYeCBUll-W*DP)>sNuX*Yt!6W zOb}T^hWON&T6fJ>b53stdMpx*Ac!sQwO<-6h#jxAmz%6{)!P8229B{Z8!}JxL>3K} z*qVF8xCJp-9Inh!OiYIcJ|U*Be+9djkDNN-ZO()f$a znv6E%y|}_X5AwGT{ccsbm_ys?=0gqMoH*#DXR7UoMF-7(o8BAbLQXFps15%SaBxhq zk>-p=c_-emaaw*$(sv#67w5GzPB16WknftcIUh@%{lbHe9!Grmg zla&s!iu>!PX_M2-wTx zbFHMnV{X_Jp^@5?X99_9q7{t-&kQ~KnK?6=k(KXu&xPPS^s zD?2C=v8;X_OF$<|0cs_~{qZ97~YNM&=#ii<|>>x5DZvC65YN56_g z%dNpO(hWyi`x?g0kLp6vV1h&K&cUdfmKQj<%=^CyKsDSu>z!BPJK{xT_P1zg0o3zW zdo+vo-8szdhNauaKV#ruG5+_T?w@4XoB{dukL9^QC*mY+??&~I zg01WmHE#;}b-1;^a=oWh?qN^_>-=h8vnt8-6o(?@1e&;D9C*&-@y+sdl~`r@tEi(^ zx`7P2Gy+^FQFhB+VYt$=yyNwHb)5cMTT8~hlxNMc=UZlWw7pv=MGolg9z0qAry|hy zE!A&Y=rf%;2#7KX8ok~UUXl32e;8Nts)h=Y8 zJ$g!?wO72?TAjBcnEqf+ zAU-cwIVsG5to)H?2#HR0%E*3$HP6#Q^;X>m=Y1lWwE{#7OtP3a z_;oR?rr~rMP}%*+X<*hI*2{YdP{ONP#732CM`qgXaf4DLe;_N$T|j&Z!;1vp^6bwH zVN42FoL;RMNQBT8JEB*JqjoXIuvHuBSvqH-j`L6QH^xTqD1C5!79-f(Vxx>yTN@D_ zF1T2cgaPsV2Yc2xcXrR*d|;Q>n%@DSj!aG8%{5vD7JK2I#*0 z{lld2aDj=K)des45<3uC`7k#ps7H(G7FRsmNv96CIE1L!t*GAOjJLEG+R|X$rlR8g z{#tF_Vp}6}dQ7(i6j(2%_73V-0thcCEcZA=KvwJ`J17N!1=`4$*r4>YACA*f+|d&< zV^z5;=6%fzp8jTa0gva*Kc5+oM6t^Xy$+Vux+vgjn9-2lhle*PUHTNQCbno0`qvMc zCvZ>4ekSj5I5*Qtf6BL;W#DF_loGYdgH3DI)LsT--=>d=8cJVY894yaM|-`lyuyHW zVx)`e4bW#=@;-ETACAC8hvJNl-kGximvz`g9FEy!t0_WLW~!=U zWmEsISEr!*a}aX%z#7Uby$Bz}FT**d7B5aTgCl3QT(n)yTR^QmIO%EF)9_p+gW9Y? zT%ZVs1BLLL?2Z)3+N+;(MDMP)v{AIVGSodMkZ3=#ir;Pt&`&kRp&V}eQjK_8GKd#AbnSN=M1An5=8)7`cpPO@G9&_( zb_!mh+a*Rx{4lXJUV1exL7(heOlL&*1HxKwQvrvE(T){;xdn$eGE{G+o;Osho1Bsf zM?P>Ud3LZlz{w{es}mS{)3P}LP8qH_+#_nQ_JQL7WMH?ctR96R{Ej9B-w}-#2dNZO z1gU|<3HPaAtHfsxb$Zek@q9G^lzud8Dgv?SVpLcId$~@K=3krs=j=|XVS(*MZ$ePj{PKU zto`aJSn)A;J{8j5IIFuUWeiGGwaV}Omp*I0_TGg!85eWE|+~f zuQ^l-%LGYrdfIHw63f}IOU?V6-TX|=)8=?k=-9w$(4CP@uDy;h$`#Lz8(((Rqk5lu z;tJd*)iF84X7^^Vvw750F|od`PiKsFVP6b^hdMnfmP-_h19M9O6vToEu> ziWXWt`Uphdo{2#QTMrlZmRV;y*ZR3vC$T$;>c%O}dts7lQc$hS^*fu%{ZbzWoKnp~ z7+h8e9A~=Lz zI_h)tK+|iPVs7JwmmpKl$D5xr-KuKB|1kgTF^UTQ!m#mG2JGGd=F+QLm{YZ<4Ho2S zCsOpfUEh^XIzTfNvMn%4WU9X}ra$=vlh>8<3)gE*$4}c=O>o$l#MLZM7Q+Jg)rwP~ zy4&6j!F-_H;$%Em(bw-N=Rn}79$NYYhNWy7#Kc?G?V!{>zFfB#k+b^h>3zk+7BBA#C`Mj&j|LjTyGN&^EkU8BM zbJW*RqotF?<*$mKfv~McjtqrD4@aI2ONn?^IHYE?br8UuC4 zx9vfegkeO+tWO(*>AuP1R%jKm>1kmlLLTJn(-wB;sO$ltra*I+akFa{LiF^|(LUR7 zxtK$Ewh+XpDu;;L#FY|itf({+-rOrcPs~|A)_?hhhcj^qLn>3q$#DXF3Mig&4uiHqMlYRQb#)fmr zb5)+}b7TdgqOHuKrf7tqUL_S&-J4}BcU)AV$|yvZaW`DI&o;efAYWVtztN8X@<~${ z17vm~ztARsX0cFW4^z-urpQ>o+joCQV(goTzm4r$*RA0~y?Az#F$3!7Jc&Hfae|vE z0Pi829l;6>1~7+~b&w^yZMe|F%;Wsrg3BpC2F3$8E{AL~&9B7cBQ~rxQuS7j##%gZ zjOup8(oWMq3ne7ws)&WY+nCiJ>5GSoUNLu8rW^;6Gq2#(wht=_%`|rSPEy5wraZ(; zR|*qS+PMXaZ={uDkfF`8!^FxWL>g{n=mO%~hN{vzMyE@1ZL-~C6HT}5Ya^=mdwgDmw>o5ZA6}InCt+1fr5XVzBOJBmgTkRf z4w{8F#yO7g+oFLV+nPC6NY(rLCO?1GX55yI^zef}%;J}X-4>qdT=h*i%7XYI=OLNn zkvWR1JWOVO8uSr$CrO`JuXiqY{MR7f=Xq$H!n5vWS>H^L6ngxOEok}|w!Gitd??2$+lcmC!*fGfQC8e8 zI{NUrdQ_vAzo;fl2ODzQ@`S`VeO$>&O)GIT@)6aDG+dq^kyfnzx!Z5owUVS(#GJzY zGNALHr3J>HzsOeCqVwCI;xJenTVZgCowZV0-w4YXk-*neUQri?ongmUzsTtDmyG#REk5&HxD^OPG4MRV^QU_)g2ujEis8$x{n;eG+saz zi+M|&0T{$r9o;YI+TvI*hB6vxQgfE&9vR22(=Lw1MhfE?_lr7PidyaC06-F)1LajwW<~yC)QvXy zLv0=11%YV&OgA8_W97^IM$_5;Q0VCoLj~U#Wd@6R>q#Tg=GT6i zV|$GS>#R)tzV>F4$Ilyf$sI6xY~1qsoad{LF}Bz$Jd*Z+d0_3NspZ{ukKdmUos%Su zX>8aE0DNK(RE<%us2*({V*&Xgn4$Zr0tKE5qJscKOh4%#^O8;gS{vsGfX#fPH}}^! z112HG846&AsChw9<_R*SozcpQbJsqA`#W+i6YSc3dRfRo7#t-uZz~b|Aiuw;+~(qq z+phKR-v0*Nc6)GbjWbL#FEuBhRY;IuLuLMo=k`0GT?V*FHF*PXB<9EQSP2j%fdFZbKHiI{Xx5wO%0~$GLTa`VtJ?=o`&WJSW2a9(yG@wLoH@l^;f)0 z*)VXNOC2)8W22FGoqhY#57I#VBsORK zP$Lp5o4mJzq`+)P$N~ez3J5lE689$)FkG$O-DB!06yxTT=9Y@%rv+hY%2?)=0t4Y1 zJWg#*Y=R-DI|Zg?-xp8+u?)sTc`{2taOn@V_d6-Lsy9*Vz?Q9EC?&Xn3DV~=0%xl7 z?jN2sPZk_>y7AN(K#s+TIUrJ={>LDv-)*`HOjtV0A9DOGWU}|n;HbwaA(2Nu_l3g7 ze5;=G&3FKa0!g~cuvQeTKJ4T{@{%2co}^)BZj;))arZ05*kvNXS!92N8EninvjB@z zp!qa?)2aY$WfKZ4(KBsPUnYbsX43eTR&T+MfQyp-lW9x&pO_EU#86I?iKn1QwRU*-rrBsk7^oltk%||jZdJ@G zN^Qz#1m&Q5$_ya8M%|i);ycE}NivD^G^0-FW~>!Qx19tllj_EmVjgm6k$}Qc3wM}! zN4zb&jVge%HA>s;s<5Wq?<&$IJhyi~;mu_z`evZu&GuhdNfIq?dHBGmNfIoA&dh-L zKjqT+oxnc{VF~*Iu(vuhxz;x_L=N*lZLZ?sX#aqtXK#jc@-slR$HicFfQ=Gs&0cMu zOS{n_!&LNX0;);_)OFoqP+tkMdBddYG{XZXUqc5Xy>bwIu2%M1My1G*9w6o|UR*X% zJ;_IRa97Iv2Fp}1_xKq+hx{*@tOl!mBehuRBLu`;?Q@xUSlR7bqrbEr98zuv5sj2^ zl~#{mjJ^p_-Px&wFsB)0{^XKwl8Czz2#GgI{W*MBSC&gafwiIjrOO>;QOBZk99^+y z<&*dqTAE}uyrkr&P4MsqssaCg`hJHEq`EY?4bQf8hyns_i<5F;w2swMuEeg`Z!B56ob9#T=^8Zp_LBZOPts?+BU$Kga*Z z#(T2iI<1N%)cIA0_|NsJ5F5z^PsB9yZ@}l0Q)Nm|%i5`Mo=8*Mb24rt&(!QtXnVVanXwhQe ztDubx`E=%LShbOFl7&p1QD0jd8e444_aL*Z1EVxLu*8;f?= zUE1P!@xdP>FFyAf5xaryS0I}#1y8d4Q4vvkPQ;K&)=_J`Zj$}lXesc@8@L8L3YLEk?KZc4(ZjgU{&T0s7(S1@&dFoGk(Bm0CzfY= zCOVOq5?uwaw1I>f7Po1`5&Hcbs&eSE2rbIrL@T#SWh&Mvtdd4LAQf>Ea}c(tfc{=ZDAk`y@*Y9(`DB_7@KZJO6vy+ zn4Vp8Y=-|0dG_W($Z_J>5)(y~f3*?Z%CJcy-g5#d!HGY?_%5+vpKB0# z^~>iTV4uVP_qo4nHYeQv-KP0~L>rGM9wF5zKc`ypPyMg33(IMv_Pi^=>6o^xr9;X`5ofSf+O zmjszFWd4U_8b8*^lL@?OKX8C5IGfM5)vGu4EY12CpW8n-bkHfz*EA4>uWZ(HoHt^( zHv`}N7hdj<#+S6gtKN*^aQ?!%^Yfj*U*V|&-0n;CiIx8&&i5f;CNxdt!kd48(SJ0@ zzuXYc1HA04&Bd-?*)@N%z2C0>?fyT{;~&fY@9h8LX#SUYj-{L5_T<0B^DpuIhu!|m z_y2NE{p~pY_t^Rmq5KnH`ImV9|4lq^h=nbr{Nelzz-7!cbh_yOC`*p@SY{gcwN3ddJ;CzW}^lVDC|SqV5}vUXeG!vekb+ff`koF~O)X{0IeacD$c zn?U$EEkD0n$39G5D*iz6P{2j%uyQ~Cvakj84CObvUxp6-)vB$jNEJkkLnHA8L`z)@ z7Bq2awn7P5pad2{orpdx+OqpZNLn~?fN%n}@4_7#MZa!QE1F;|?hcf#@H;???h)dO zC-l%?{2}lE_4R*OT+X<<0u&49{pMi0Am9^|XbEKy5u=a@=S+`^yHf(n!;o-#J`p47 z77ji$9iL-1(b84>D}3|c*xCu)e3qAZUNl@IUBban5JHwF%b0T%-M!xHXJ}N;{zD?S zf8+wf3s~P!g;QhH|50baxeRm$Dqs0uDlLEg%-b9gxAk$#TCzlJ0een@20)ZeaG}h>CPJ}rRVjnr;^1NZbP4l;E4z~Sj^VkA#XVS=H0}# z#aq=Oam__lu=u+$-Oeb9dklB==6Ia<+tiJ6t9Mj7d1vBxJ5=z_T%rRauvCcsv9H6yjS-_F3}7z*M(~C@=Di#n-WeKP zgTSP@wM<^}+n1@GRM zoVOvF{g~l^TU_y<-azO^owPU2m%L86DW2+qihIDVG*bEhk5BJ!+Dq=;Jc^KXv0L(F~o(#ifbCks-o6Qv@id zht=ol@m;bK03FFGr4xPfq4La`K&yx_&Wp!BQBe)XP^zJMm1eEt?3utS(=GL9#}bHJ z2WV#10Wks#r6vr*EV7GejvKV=CnO`4@J7W3jK|HC1&kp(VsPfa_Qjv4VL=KEdfecC z`#a&mE0?GiRgkYZ|9t;%TMFD-crNUk^q7SE%%!0xVEmGJTOh^EagV4ofo6kGM_^~R z_`y|N>74GdqZal8D;K&@cazKQ%B4$G3~nO#o*esuGf7|!HTZaEj2XcDS!gpgj&E+P z3!1f`&)~zwy9cg(>rNd%fQk~ZY=i2QiPXBQ=Tj>_qj7_-jmMKMKa91}Y9ku5=BD4O(=QIAH);J{8OEobMIOObXv zk7ZsA(~}yk_|j_)guU0EU3Iu6+yhk{s5*u!DvCZm4&bMd27zn9O~|3!2`2(!+N{2| zUtJH`b=ww(49AA-T5Zg{$x9}4Af402#IYwNd@R!O#SJH%o@~L8m_+o~_3ld42hW0u zcg^?jXZa&^2ojt>6XZ`VR%#7Tni)nFG2!OsgKg>IhE}OC9*!n7%DDdPDF6(^Jo`yawGmYOobKM+apuv!VGPsUQ!@{JVffMZgO-pM_W>5_EP)mib_p`#6 zjZ^F^`)I4zrAWn#LkFK0&~r`&Zmd-+q%yUyrC!){Z=b>w=Q8#K|Fual9Y;4JxEF=? zo~RvsK_=#>r!T0(z&DK)@WfSW$diew(ua|2#CxCRs2#Qqqndbgo(c%xTdf~WuoxN` zKCh?YBA?~3^HYAj^x#a$ZEPK(2X+J+W|ahqZ@`kdRPDxqK%AwNgCXRZ*0?H9k8# zOS;!YR|+|K-@r~6N{JJE11?Jt=*zPcAtPY=KKyKzL-BsRZA0B?X8@vspb%Ew(vo19 zS^9+LRqzNAMe7oGt4IMxLV06SymzUev>&Q$J*gyD%R9iym4n%x5g2uxPFIVO!WZW< z&nk~F^LV6eZOz#~VCoUaRpnEslKiT2W-@Vbs@KM!^ePp@R*-Y8dLp~o*@$nc2Ox*{ zxj-v#h}LoIez`ZL)7P@bT;g&Ak6tXBmt}QtoN{{BpjXSehwdQh zRXDl|1I>52V!Ak9IeoWznP+pV6FouHtJmfm#W7#MR8djK%6PSegc2q>L2YA)j0us0 zY&3=^@#XK&4e(8s&uct;bZ?VjTKXgnwb*$dTj>do9edPFf*ziDfeuqTx%i%OrIGL9 z);5c~%eLV_alH4)JSBDvnr-H_-USm1??wrI^boPg0Kct>ZTB5Py1lAbxeHJZ#uqeh zp{HsE*#mTO#W8 zR-WX0fVQeIYFl$>^~wk`^WLa&A6TUbS-#d=W+=hzvQeUB*D8WMFA;h%&FdqjAT?vi zd~Y#B=E7A;zsy8~hAE}PdY1g}(n8M=`S;KrTXu;bG4Uh^6GhUY7m358Qcc0MG$u?! z$(Z5~jSiy}A*6hrR&e~I`Li@8_tH`JigKPNNQzXZRH1)wwo^5O!qC z;{pqZAP;X3$L~c8N8#w)ar3!;7i14g=}Yi%{&IJW=Ayu$h}@Mmrm%n$66sl?=2!mv zr2X+rXx67}+kIANOUPkFzrpjVyvKqQ={)e)J&W(Un)WD0bdhJ-XG5=AwD){yvL{jx z@9*zB?<=7y?JGtByPatS%SW>EH4+KhYL70}b=)Z(x3?X0M8ZYTDvD~3hsx|$O<%K? zx*OxYDb+E(Gm&xrwr<4SHde9DOJ3zr2|V$8b;0KXeIIj@*={sr@Qc)TK}n(hQcy^N??~v?E7R(uqp< z=xdr<%xBb*=6Pq7d3lBZIZGF7%`Cg+(s!eecQ8-Sk8CdZN6#&32%4ew)ylb^7cgkG zTaQS+%9J~Ne&#jjWV8!XnSG7?{geKMmFUdi*N;t}30OvCsd4NE0`8kjyXZNg3?21B zgyq(6L5>RV;DwZAMmg$l?586go!2#-FZrzQ+YFfWmvPspQRn(>I6p3^*kOGk2$OEB z{8sCOdy|x-lQTr5_&Z=GlLt(;bW1|i?mDUcM#$95&( zXaF{PLc&H%fQZQPV2haDQ7NZi+QnI`V6*9ezzKdu8Fl5PEk+yr z?A+0wQU3C0)q=fS7z#@Foju1F>Vpl@hzh$!UpRpz7nd-YcIe^%=yS;XG&~QDCEL8mM8B4p$=VslofLRl zoP>mAx_wm2`|Q;c?}zvA%Rr&mLHcn9vd6tceWBKcqkIz-jgC8>Sz|J;+RKsM`QtH@ z#Gr^)z`AFlYz&6hc^A_4*s2t*{i(Flm9H2SEj80N|<5N0wRz|3+?XLJFW@HpR zrx)&d#BsDgu6ho-Z&(*vdu@ereac{0xY^^`M-H6et?yxHQ}=0kY?5aek}B*w8<|}8 zOf8aHO4wfyKDN{{eCp2}wYMEktrvZgX0e+gQ%{I|+eh6Wk!+cuXmK8L1ix_S9O1L0 z0ZgLvVHq22yV?HXIrGKuQgsS9`m9;)BheLWq-v?V$3-M&By?Y@ZDu$_o*L0jt(~7MbPwu_=#yjq&yX`w)xYyBP zId#)TaxbSjPMU2=BkFQyssKq?;zTUj3P--aUJ#(a3HSF6FX+cZT%5a$l-9S#Pi3~u zEF`wf*nQY=cGp7K?l3tDS@>1H{(ON3YG;1l@7F@f2iO@h*giwKmTJ$m7Hj3gn3VKt znBooFGNWcm?#augle?8!o$J$x`r*|0*sxK8z@qWwnZsHE;=#l3dcz!xA`Wd*4r5ZA z^D&b(_YSwW3fmj%IurdLaMGcM&GWvM6RCR>uo>_a+;+M{7;&DWZv!%RRhowbq@9i4 zh7E*`l@c!`r2TGkj5RKST#a8W==A zqdhC}jDPy0+5??KN&3cu_okiE+oR_3#P&_Lg%%F%n7u^J{=$nhOFeZd{>5ouxUR39 zVj@vw_N~}u6J0413tnsNc{4sGw10PRCC}EEf6H6#V*9tqxfZW^!Pr=1xpB3&cB3J& z&S(COJP!aNCsoz~hTf!~k=feMP2><3(Ks+qHyQNeReVZ?0{cO5H8|@F9u*#%O>&Dm z@}JEw+Ux58a*tE)EEFC+FNN|6!k_;FEAFNAQ=Sy6>LIch#0kk;5)ddyPwfAVl zbM=QMzezTm-l32GKD+D;BXX&jKP>x3#I0LOXTrf=W7D$^9s)lcMeyC2w-lqij2c^6 zdB+753i;%slg(W7M}<0Hn-wY&8~QAHFObZVlrk0(1~R)$l|-UjGP~@_y{}hCIp}@#J0U@!z;H@@4as^yf5N; z1c=grO}NXpQXl~pv*VSq&L_6(`mMXj!n^?4oV9@Q(B_U)*HMljKz(<(Lba>&V)dD; zwx!>Fn0<^-2Og8C(;R-cZBOOMR^I9q6Iz`-cWfK}DA7xAOyhw?%C6Uzc;sS)N6C`j}%-sLsV}I--C6GJvdk=t)enb1ya;?bl5i*GBwGkon;YKo zOq`3zViT4XeEr&2=&(dhKV^4#E}kj=2+~%*>Jvl}BF_l4M_FZt>0^vwca+`YX&Vdo z*W)l2(?Uz0(uf%WRe$%UapTlL5AF_Lbb|gfo3q1#o#AH!L2Lr26#s177*c4v*?p=S zWx7ptP+n<7AXITUzdl$i6j;geTDbM{?Q+uG8&bPV>+FUzYmX#clSI-&acL5RsipT! z;X(y-VXzv?-2ENz@UteL6!dUuu68;-;897cNFLOF@0Ehs3%3}}+#8|k>)ALUw;an& zaA;E*inoTY<0qAJ^S)6M zpM9m;H+{IDSQlhI+c7ZoB$A$FVB*pMa~xa(`6B8*VQbvCyuLV=FWT;uBt&#@SfI4u zNLie-)H8@n19h-J?|;lO%y(vgccK;{?Q)noCcn3p?%&GB!{&fqg=eDD)?!pqzN%)R z@)e)J>G>foe}8T>K8BXo)@kfPEL8Jx_KqLRWhx1c!`&Irn1Ng2P7@qF7x=cOhs#DP z%MNlT8zpPYSt_@8N>_+A_UgKo?VX4KLw=Nejp}B>q@q?=oLDiSQk9UmJnC3gL8W^2 z^&{kaES)aRR3@T7un$lB966XUSFFS++e3+T!ot|sv&4e6g>$o%9juz`R6D)HC6x^e(i#z&aW1Vl^OsTFvrCABP8Jy+P1zTN@}-O^aR>fc zV^Q`cXt?9WV$g^{G@Ll>iz*^&A~)vf5s={yvtw))jc|fl ztNBlZ^en&9FS^L_mXOHlw;`Q(cpc~n?Hw7;y7`ihZV;dbHlg_zI$Oxm(&yF#gKXY6 zIrQ{O(GG(Y>xuR?WEVZC~-bLi9 zdu^xY;g>-mW5=HIpa={H6m5n{B;AUR+hIsPApxu`&muR_3kq=>shnze=k+vvN9IHF zMET-@Eh@o$acWr#>;%B{oVKFMjCPFWRth3*4rlZY^_!M>D}bHgK=V7ujXLhUTi4vI zq*8;r+Ub0E*hF*1CB)!M2~IGl_}!(D$=2=swN*1juu$=S>9C`v9AadwvBKGgPD!S4 z@D;n&WUopE#0DK{-ry|54Ksv{^X4GPHbc_l@*p`PuvdWtge@5uL_G(kF;wANnfPPA zt5VfML`&%!oGd9C6=pkXdUM0zq|oe31){4YTe#pJQt9>dVtGZ!Y4K=E3WrbWGKHAb zXdem93Ssj^hJl2%hZNEqkTj!nqBojJ>0e!B(;j8s2+I4p$mn)t8m`64) zkW=EO6}$dr2OX0-C<(TVjEt#I2S-dLBtoo)ii3!@C`-+`tl{#rF--w;hjDO zOVJAgFSWN;g=hpwY1DbO8nsJ<5p|Y8ve|--;%m-4jF_Dm%yWEL6--7ei>VVzNVgG@ zmmFfqC~<(v(~9+T(uxhWVHVfl?VQ}r z-j}Df_K(KGkksSsTD#NSVh3-C5*@pSlpN95n;!(f9-{NTkA8FE95{oLKEi>%mHcvY z4C?T>;;R=bbhwuc@$j=$gco>z{x5hj9Gg z;<6Q!+a_xjGcYY?%UK#;2vl=wm!5Kazrn|q)cCdUJXs(?IHzq*GA<4IN=ncE#DI{r z(02Wh!_?!P9z*c#R0wh7P04Y8S zmj^}!pwzB&kH(_4S+#>pj1HpgXT>yu-gr)dly6|*z}jj&>ZQm?W7k2*ILE}WA==lU z*SXkvgcc?7hL)h<#k5q}ee+2=CR?lg{dHBXiK94`GANIYtS_dAh5SBChM7_cRSI-1 zPR&Vgo@e*h7`OvHju>S7S z-UCS#f8`BvTfN=Y)kR!7W}`ReJc#19d)kf@991}1A2qLD_PNs}{e%RstBcU4qndL= ze>u6x2&oeCM04~EQC5W0JZ3#NHQprGKn4m#Z8t)j}SHq|$%O>WdNw1v}4<@C) zP(!tcDsr(5Nr(qlp_qFE3I3zSjwFT6qL+dli=@r z$HjEj4nL=9JV=FCLJOa|CK=`U$Q(zDT5iLZa}9*GW%+re&7ef$DBM6qMC6-YxK;oU zuo)1H7YyF6&gsWNr!#a*B-a6KT!aUhuu2>zvDL`Bu_WPp2Bz znD>~~>(I>J#ZsZWGsR;>X}!-(>o8ZUbu|psbWRk)6sD1}Gh`aoDD93_cjwvZ7Qh-l zwktI71=84_Lmk%dcDrDXT2N1e+Oo}Or?kbq1H=vz%9Sa>-pF#lz&b*4u{Y03{aNK} z)CHANc_M%Ey?_~|ca=MHCln!AOJj+~5~EVbsMJfeZxQ;|k7IcFC|vrxj% zV?iIB=%@1DRRv$X1)tC_2w&qye>1!IqB&&6X=zT7$kJtZQbwrMl2595aL`DZUU);r z5JvPXIR$vE-MDZKh-nBz+oJe{fEcLx)fGoZj^nPVAK668?1<*b;X5J?|ER+GCzFCs znmt@s`HV+R@l`+E8^5XjxlTmlP7>=)j4LshmA<@!Le8e-BF7@x9F1jeR+i^y_tOnu zKi_9}=xbuW+pCTbf~$Q+d~P&)ep}?r7%}R}Mn2^c?s0h4vbW{46#5W`<4;dEH*4qXb5M@}&h| zUkDu~r@^DixWz*kXby47uv=+9 z3Vs_uCm7?V<;&D&2G@|;Nl9r z0Dy)@)@rX~EK--Ko*QCa|0S9T$OkJtJn^S`*}kF2joOWZ72q$v)SgI@en|iT4aN`E zpvQhd_@yPbnUti{WvVU}(4}Gz0Q>mW!Gs;0)hjTUtW^&@L_gF6FZNSM9K!fxyA($a zx@0*p^6YHY0CuH|%h1QLav*5Dq{e#3uXJePoyk%JYhL|?)dPf`nnd-PPU!ux$2BY34HF)Uy2?5YC#<4M} z$3L(Z4SeoZb2IAV9~wdLwjz_cWR9KKr%=%IKE|N zM(^#Z!Ev$sL*av>h{$=q#TqH=UZceV9V6cDw}@lc5{ye3FMP~Stxo{`Rd*3W4_fQr zNOPRdk=gWOiuNJhl5^E|kK{al7kru{!s64gfHIp~!}~=JG+kP!dd9^JFVr$(L1_#p z0VvJf;8^(036NPW&_n#igsnoKw9~Ud?aiJgKjDBY;_lRc;M+d-ehaz=L;*1;=(F(S z=H>S(d(I4Cc*Y4H|GQ;ZBG_3DeHJmy$4vGgw>~I=MH+f?jPvcs_dbXLGTBO-R*{|K0n$dDweR-7{;}tXXAdhyIq{$0ek5#?c;v zjEo>S1VO7H9wrE40T2_%S#V=oftmLLn0Xmyq$M-4uf#*lAfE3V3<@&AzQG_D(`JZ` zQ4jb}W7_fq&Su*AQ(1XN4bXP*pU`u-wd>ccS+kyT zTeE(p$hv=}0{T;E-6}{9y2HXG0x_>+Vp+#T{{TA4MSsbJ0Ig(WTE0Mo85awn8df%T zj#Zpo+)RH=WP+Gkz9+7Qm{^%um|2SKv^KY~`c0`(e?VG}QDhZ_KT@crfGPl!te$PvJLkqGWOL}tgMXUD! zSyv)D?NWZs%eKMk`vq0)Lo*ikK9^%36jpZ(&#LI59DGCK(u-<3N9NW+%*>#*tjlfU zU}sZWZo+nXK332IcM*Ozg>w<>87+8b`sS;mm~EfO`A97@7{+t=)DCt=131K$p0|KT z+}mKMgH-my_Wx+Y-?u>Gw)0*S3+X-1a ziYsG!?v=IBJSi`uM}r7ibZ965|9O@U4e~9bQFN#dfbT!kp;uDb8o^}|r-D^1bGm)k zF0RJq46NC`x7m2cMV>ws52nuYBP zn~xTzSX>L&qj60hphL(V>cwh>gGYl@-pmHL*W2NESvAYLhD&nkkZF#T&+wBiSq>pc z@5D=Dn=^wheA+|Ka;kWBxT0ozheFexy6zE;$C$UDWH4iw{jUdXt}dA3Rez8RxKd&Y zogP=u`P}H!`@A*Z_|vSS%bpX{_=Fk6c=B}g#K=&R2JUDSulp*EC^wkpSu!L@0sIXu+HmSk5 zR$*~rS!-~)70JgxG%nR|8U>hnLQ$Mek!X%mhuY_Yp_28v_djQ2Cf`{! z`*bYC5UH@tPD2E;)Ly5^c4n*1xO_qE7RR$27js-26SwyG7$rB~DP@f`i)$gd=aq&Z zDcjtEHgD-ME#fHDQgWR=r#iZ3+x69zlf z?%l<3$NLf@jqLL_jwcNp+1~7VQ))H2s1%&O6tJX}85DT#^}U9wACNZS3dOa zq3}P%_c;}JlDG9n#x3PuU5uCL3yT0<+JHc7eTqhnV&1n&W_LJBElOWx7Z@nQ;xlMr z)5R{Y-lOKN@({fhTi#I+sO$jJ>ADPxvH%RLkE9 z@Xt_|uWWvUoFsHL61DJD^r-c8^p}(N(-S=K$K#7;Sv99Hho%U(wz|H*(RMh@Nk(n9 zv&<>)_LhXN-@_uAZuy08jpQ&?Y++hnXk8Lh9majK0Y&l^m z&05jmX^DRxj30SuI~^E!{7Gy*E})(*!1-~>?&pFgN<=9C&WZ+Oihi(zlB9p#U zV7LW7uTA80zK2XY8Gl!x!stL8YKc+)w z)ujm*MMh(q9O=DpE;eO^JDoa(v0lu)C8Qm|Z8fnVG!xMA++bJpCu8hwjdxZT#)Eau zZq3F!C3whsTG#NVb*g-N#2RT}On)nT7Ya5#vf*#gXa~>E{p^Q z%y?=!doaSh%Vo_R&oFWvaP(r7VI;5AiS;;a!AaX2ZV#Xpi>YQK*Ep_ zqzh?5(vTsf0I5Lo;9na;F-m`{_J{`#XK#k}@^&+}J≫JkXKlDsYfJC~gL-@q)Y| zx8)*SZa;E^@N&BkID5H%Yd4Rrx1+O{qw8{&Af0nLx0cb-Ln}Dj!>EH<8r*)v3*S$8 zF?REE#JPHc^bL%hT5evh-@6J>Ve9cDVCvv$^dq3<;i~mpz}4%wfT69k=Z}=b4qiS# z0y-|v+CKsS+rL$P0OREF4H3)TgCJAA16rUpK-LGaov^SS&f9h$u9p#9zVtj?{}gw? z`Oo!MnxjK9+!t*_a(S)DkSAUN;b#yrOa{~AG1kko0 z`57~c%V}%Ay%anUXTQzS)yr{=SuD7mbJOp`Eac@d=kgug zn3ky&C|-<pz>i#|tnfHNt3I4y~O`8ENr!hF*zTc$@ zf)t=qGH%QDY-T_#jG4XCGe!_%sFECK0l)%yh$F-xh;Ne#K)+o-#W8aKP(Xj=_$kAW zxZhX@d zApiF^9C`<~9z$%e4lB1?8}3ybL_`&5aDdv#?d)qkor~^Ayg*f4{S% z!*@*au5@1ido<`dhaJ}5#(SBia{6FBy#6A)#rNpnXXmzc(84+6Jbps%x|RA5=>13l zMWDktR|c**y>M<|0r$lI%(J+h0dxCPERXFnGyGFLHyGkmf6Tr-k9IO%1lC?a&WNwe z@XGvR7>ZU%c$p8eGIBtxa>0#(<2&GA4uHK7#9%kTgh8*}`QMr~SsTDnhW5p%K1kw9=CQf;Ixv9&_x_ZjkFq~;J7@Ujj85=iQ zc^NrbNCR=k%?9Iy^%Azl0-0P>WU`DXBJ60VDS}cmk~4DC!k%)}_xHe>`5!jN_&Z_L z>_iZIg*DEopK)<>!Ft&UpK)<^^;AEjDY9I-I)E9`vLeFES-hMyMV1|0!j?uygtc%U zSYZ_z1!;_&oSd+Vnv9aNGS(KOWV>5RnBm8hl~aM8oY25qb- z#=~*h&?3yJ5f~A?y);EYV^@0N;$~#@qvF3rn2QUeYsxs);eUi)Plj|YYl`*6 zd3#{6IzCueFVXMC?Jz&ex&i%SxdV0>S*$bG1!VIC!z2IWRc_z?pFfKHu5mw-m&f$` z3&05db@uOr&&UWmtgem2cr)Hn_=C* zLC%iC%LJ!xgJIYSK{srCuy!KfA|3zj;aI8E7udG`)a{>pvXadcXYb`}(lgmVc6vGOr)l~fCd71 zBLj9=fu)x7tibyiu$_x5aE&lC+U#cMV#k1A0{DuLH^XJZVhG^NK8{#l0Ji~H%-P$; z5x@+e+jk19i9hB0 zM<8QtSJKHQ%VWkQ(C}N_ZzX?=!=(aW9`J9n-25%hHXeeCET3kj<<)fC(!1x z!qR^v;(xo~PtE$N9a5%Pd#nc*=zqc%fXaYF91ORsog+gt5q5O_op$w84gY4bpK4%$ zD|8J2{xll29xVf{ZC($td~SeP`MDvMBqPka#{e>3b48ejjYf;fI<55{dYI! za1dnnbX;~QLRzNg!WeH4pOq}Ej0YR=it_@K%qB<>5`}hxO(l#iC3~QKkPdVZGKS2d zqmVU(0md5_u!F=G3WUxV+meN3ZFB&G#s7G@si^~~Ft#hGQ9RhjoQA7VCVKEdq3 z?9S}Ze3AJE^DX97=4|Fd=4Z_H%owK{)`zTxtS?zx zS^HSOveMXAvu$OQWK(A|V6$X%VDn|W%ofY`fUSV7imjb(h;5dgon3%kf?b7OpZzHN zY4!m2YwWk#3G7eV->?s`&v0;XY~qmQ(Bv@Yu;K9HxXcmHkBkw)nZ{Yl*~~e_xyZGSOM*+2 z%be>p*Ez0RTsd4-T-{t`ZfWtMdR)1VQzlMK}%o>9=c5Co!64w;2X<74ymy>q~ z?|xouUVq+L-Y2}xyc26V*NU&zT5Gd5cx~d^lC_;{XV&qrlV4}N&Sl-Tb(!mG*L~vS z;1lQ5;j`nr$ajzL1>XQa3%@A87C(mn0)HBR75~tB_Vp6$4c4DtAGZF{`lj_?VSKRN zFbmijSR$+f)+@jwATD4a;4Ba>kSEX~u&`mYa$4?mJU=w(VlyrMk;$*X>=e z;mmL)_$hcIyjhZ2Qd!bb^0wp~DK;rJDOagfsZMDg>HX3^(pl1dG6FJ&GUsKAWWLCX z$sUu9kgbuW$tlS>%caS^m*&SHLJFDzquCR@7C*D;6tG?Uvk)-JQJq ztrEYIky41#bEPF^6=e_Q9OY3JF_n`lNh+PH>s61aUQ>Og#-?^a4X;+NMp0K*_fpSO zpWGw8$7xUIo=+MQ8d!}qjR8#&O&iU-n!S64_nzE)XKycJJHiH$is;`by3cOkgMB0W zckMsDKYRa|19AsE4ip@i(^A(8(t4`RqOGSLs@mp@c*IhHygRJ z;}#hfb0}?8B&yd^)-uSl{^;hTjz^1+aU8Qa_Tbozm5x=6)zERJe#$v)F4r5T+WucY0s)?(^B}ljt+=YvKFk%(^qK zXBzzAepmfQ{B`~B2e1ZU0-gtM4?Gvx7qmamvOl2cnFk3ZsRiL!+l-&@r{K zyJJ)0xZ=FydT$xtDvlS6zZp+WIF-Aeq4AHK{`$;imuni-zOoaLQ0 znteR`^&{;^#W~VBcL@T7u*cA2@5f`gCv!XU4&^<6qWUB!e@A{&0e?YgAyc7W;n$*5 zMZLvGi{F$SEO}nKr?j9Mw?_XHH zXnSe$vZ?A&)vIdV>K8TpYlyEjUzOLY*Ot_&))mz&*B3S@H54=|H5N1}Hx)LkG#9^C zdtLfQ<4t7?qUBkuc58K;L0f(M;r2Hj$d0$2$2)u9+P(es&iUO`mrvK?`?K9_-Ju`W zeu(|J^*b$+Tj86)m%13oaUyoUh z4UM~vFHT(kyzX<-mz`hoC-+S@e6{>KH03cxCtV|NBBxL9o_;=aWai_n%k1J@==`Sn zhZI#x%>rs+WYL$(LA|xKYpIlWh}KPa0lUzCJE+5u1y&B~u(PsquyJs+vvaTETE(?y z9pjwMIstyhCGfADvti=k#ov+}a4iIZ0j-Suz zK&)&m%>oKJ$wp;7GK&07@R7~D;4$l^)e(ehz%%i|Drj47#m31~t*m)sUNcWz+ z*tx59fP67JE&umT*8S;_(a&d$e%I!I(Bway1v(6$K)%h&McL+5od_+1`TPq0Ps0Wt zoFn-)ivQDz7!Qt5{2Imo`J>qKYZU*-FDQ6=>#tG#UoeVozee$Y!6>%>8pZzwquBA+ zqX?tEr9;tLR&=P)WrP|Z1q%+KNWSuKzD*D^BFzvxaxhowY8&~ka8;wDCpQO`@b?YX z!|YS0B~xzUXHL_h^hDg^&Z-l1=s*c2gbrB{7W@k7P~J6U&#x@M@bdpTF_`k!e~=l_ zCwIg>=#fbGcFMBSf}0D<#BpxDTFWi!j$J(1?T-5N_j^|R<>1vj*~5s&yxo*w0zO1A8oc$Kn2P&E_(YX<#d8~-n|(<7xt z)PcC<{6w_^$G6{vyqoZ5#$@z{_WX)ZP{KurX6Eq2@(rc#e+9kBZwQ~ zPxy%j#adftO42TQl6h&5(9>iWI)vSrMf`+9$kCxOP?@oE&#Xyk*{>YG@bTYFA8CT# z)C4jr(z(@y%of+~Vt4ZZVO)F0WAnc9ld*b>^2Dl|8}Nkynp+m_$Rcsk@emyncX3A% z`~NkYFdd?I{)^IGAoxU-Dv}QE3hG&Uf~7-I9mQFn4gXVCpFkGy9U-uiu^TULtwQ7f zlO}Bf^o;}TZKZXY;A<1Jkv-%~Xi~@r@P(^`Xo{j!DEMy6f5v>CjUr=cCaZC@cSR{A zdqX6NKJF-44GV;A(N+2 z@Qw1<_V!ZXF{jpTIkbqXYB=^2hJ)l~)1UE&R~x6RbourZc_%92(ZNP^sOgXu4Kvo9su|w4 zV{LwJ6yo953~Tq+mXI)aSNvF3Kf$@mvSwH>afsw|!JF{HWv2C1=I~ltJp8E1`xH)m zneNQqnu&gb1QmSwH!0^rQ`b^a++eFwTt~^J=x+bB3R(L6A@?@C@2mN|lnr!?Oyn?5 z{usr{sJO$M*`lLEQ7lQvhyyE>-#Ckc`CSGM1hu1sOQ#ol42u?88ol8MF7-2M?O{Fa z(lBLh6j~7l)9SI-!LY{pa$GxdPk-c@xd(<0v4mE-ktV6bhnx~_=S1P|rkH*?(`PnQ z`nrsjBfOnhM{`C_TW4fiIa=iPp!FYH?Ylo1(Fim57V9S@Qb)im(;ZzD-&1T~cBdwA ze%Y8>uqTa6^RNW9=sK~#9C;Od6Sv8kaz#yXbk;DLdu$gSIcRYthl;2}g(<@o z2j1(nN$tolFO9Ihe$QPDn`qMk~fvvKpLw{uktHLWIhSqj~@6aat0af3w3JtWd zCK$dB?MsK8-{A*ma^Q<*f2qu78oLaC793le4hwkisI+Rl=>t{^KDBtfZ}ph0(2TqJ zz;Y?uVz*63=F_4u^k2RH??@C41FZl)ojSB5XvSOO;7kX6A&Zm(bYXtlyFxt4UIQ8P zO{ove>mer{%tlRbdfU1*L5H3IB;#Ys>m7!J6nc)eTHSusW~;4P72KjiIn^D}Nr{6Q zO`%d~UbNHU^_n8mc3nZf?Il)t16Cx%;cv+_rx_XQ7~oe-@%cha%5py{1Fb_z{`u6#3&d4=Cq*rd?iU!**DVa7x^X z2*V2LbF~y97p!o*ILcGqq>RHQYmpgGmdDA z5Ms$<+1FP~2?D;p7&;U|rbF${$Vfj)Qc-=SzF!(?=1#uT+0+AK5fnB8?_~1f-Ge<2 zFzoTpm$q5C7FSt3LrW|LFBfM$LyRcmXoSIe>1Q7UKDC8oZ#dAQt8m*4V``ryQ|f7N zuz~=yj67GbhzrL(pG=}6HAZY z&!q9!Y+t-*UuBkrd~mYDNFKF|!#y( zV#KS9KV;S>Exk3kp|xhyVj8x}klnm4}6bPKToEqzpQ!?8!#jC$wf0c*G%h*WGT_<%qeqYO(fk0FLH>$uNVTfy}D z3E}t=6~sW%1AGH8X4k$5tq7pGOVEz&!Ob@#sD}LnyC3^Mzw*+6iH^DnG2sadTKfGA zKB8U~c3J=>U{Z2vy#HiYD@BU*-pcU4)xqcOG7 zA(`^4gcqJ!Mi09+^T~RO9(p$--1{%xzg zz5FNoJzvX3tE@xrfO#hCBxpe_tbAQwrCzf>H$PXQlw;qsw1ZWWk|cDzD%-$>EN4Gt-Gx$yoZX*B8KB%b|>pfRYx_j zov4(35}JW;I@Hr`>BnnQk{{6*Z$#X1J@j$**9&^aVH5q?S|oB^LdvkvkaeP6LQ)6H zMJjJgX8w%>#%{@pLKYGOH8iQEB;+tL2@$>bB(?aBZgF6Z?-`z2-t@&+w6~b%ln(5o z#@^Xan)S)J zuKCpmtJ-74QL82Ypu@5T1JhzC=10}xsN$r+t@tR|8Q&Nx;StTwujlxiR;#kdha7Y6 zn?4ddABIR12y2haBs!@#Z_e?^%C@mgJgCmPku{c5&vG6D`|2oMm>GMOeC~Ms5JVdeC+c|GW@R z{rKj~m%ylDeTV3E?)N{gIjvz6HFuR(e?bPmBzfNMw!o)$=-K> z`Z1AK4X?tFY@|cm^9kz58ix^b8Oa^HuF1W>49~8EeKa_#S|(AQc_o`z)C>#SATfxD z6x+Y<&F51Zd?B>e#)x@mr05gC4(v!b;RO6pd=U8-G-WH z%tbY{8W@f&vENwE&wue?>?h0nFL$hd_EvZtH6PWx6gS`5S7kXeh>GkbA!3`76R!D3 zA8_2EsH^uNhPzHoBc=E7*7yC3hv&1Dj1?VSPA{DQXqBj~am)tpW=4G^E5p^pN9%xJ ze4{}bTJrI9OdC^<^W`?hT=w$0Gj>K)(H;E01N>v%9}*QiA1sCZM28aM_^c?#M-v3> zVsO{a2g1>U z*s}Z?LG9@bvFP42sFV)dMf8|0L8}chvf2B6*`7VS$(jwg(~**|L?iP&d}1u=(0#&N zi)mV`Enx$-nWT41BaARgvsPdF&^gMqX~s`KNv-x%P`LHsz~IjJ$B`52D%1giiu4|< zkB5d6<4rj+5%=V4^|+qZ2~8I+2A%;-`n+GWQ9E^j@+4r$$;D#C`0@d+JjJ|pZo7mq zu6izNAU+XhL>-~*8o>!WM)`$nla<=v<)M#R-m2YZvRA@YTIr>k8~Xaam@`vDw0rPb z#4F>55~5srfndg&yEvPOM5L0hUqV{HGzk+uU&ULiVk!xgBpoBHU`l}h-61MEmy z`Q;|%DH(PjPkCBG^?Ing-rGB^~eS8&`Ay!@UK4pgz3dH83Mh=Go zf8=fAQhqDV_!@G-2rTfJg^*#6IImis4GZ^U%J00+E?Rewg_Z><_tvQYhsy+^M-RGR zcyC;KXoo`2@2t0dNJSnt5KxjCWHT{6{FG@RG)*xW<9B*fFhTs0Z6qBMJ^peFjUz=0 zsg~C!JvqStt}aU3U&DEm@#2nock`8P|KtmXMR*NL%T6Udc-Mne0o&E9X0S`W2Wc%? z?%}YYnftWkex8S(Z1#STc)IYZd#|mNlp;3W<*Q&uyo?PN(L|DcCoF*W-2m|i8u~+!K>t^F{{3S| z9XkG_erafDgTHsxi)^==AeKG3shQcC4HGpJnS`z?^qmw^QTc5;gsRv>iv(>>m_p&} zK9YQwtfwaz4u;X3s*Xw*yi|Fd_Eo)+wQkckeJs`niM9Efr`}Jv$Pf_mJ9|iT#}_^( z-SLuT{&)LsE(Z-(&)L+^c5j!Dy5ArNb@VyqB6OhdAa8Xz0wI+RzFFsfZ+L zLK=x6G_bxHcCmi@nk0Wquj@STkwBB$Mbn~1@*Mt4j%C(Jc%x7qQHi3y6BpRh*U?ue z>QBoUhV{xT{D;K?Zw^>n4LH0SK_WG2$19cGeyP`9?n1ZQq@%O(rI%cf8XrkL=BSJemxOkin zeK1){xuJ8W{Y?1K2z7v%fS2!8AAc1)`-D%Ys#V_4=+u``mNF{(ORcKM(hbW@A+idI zr2!x7E}knE(QLn!$=$Vq$JO`?C5z2#XmL$aT-;|;UuflJFx`(*`^v}+M5AK$g(Dt22m` z6sQ= zhrD(vZ132bml^Z-qR#b6$(pEzcz8@qAI8|H-}ZBL1oVSK~D8h<-vjgAsfR93Lv% z7StwIB%fk}y5nVk*%~pp5K$yVaz{0y$%!db?^_YWzz{RoS7luR$UO?Mfo(-phZLH) zJ1Xyo3^mUIYNJCmo|IX&&`R1Lg(OoU1io%h1|4dE)ld@yk$pYni}Az99n z$I+2C`?fvjZ+@Ndjt&vc7v*btci{&F;kDEYfMt2(e0@swk|vtsy)3uKJB?=HtELVu zj(Y=nB)VtlD>@7oB(U0dW0ny4OBw#|sUr2{h*Mpc2DcmfyxN$5vGgvayNL#~$6vxb zzyiZ4isQ82-qTr>Y6LQte@_G*QV*QM`=*b^ zS)+>2H=!=?k~wGyTN|U7OxUmno+1Qz(>_~*C?NW5pm*c(vfPu9Z`^fS%G#)w;^`rcaj_eVcl*BTH>FItBM|^Ejk0^klaH3Q76267Mi@s|jUD&* zxUm&`z13G^uNsVhDHc9Uq*M{8aS7NN5TfG5yMqSIfi?vgHreeb%%LGow|2-xiK1q2_plE#ocFOy*)cAtGGiN>rWU4W&kvJ5vgf-qYa3u{f6>I!Kiw-eQj;T;2 zLn{vf=K%MRrw4z)8`HPa!obs9b!ZvaGWMa@)Bq%aP_KICJa0amh=J3%^Peu%}*IV%Y*!i zqYfFzAolxp44>(|rha}$%RG|ktFkD2Oaec9CTnbx0{EFC{z_oX{SWfl5n408Q`r)) z=ZST8+W1+^EQX4utWh;{9ew!CTB`En-4h&S!)`Ww`yu>%Ao5bMQ!wDjA=H$ipyNBl zN{Vh8wtdV~>2!HUhmt*C5y?O`k_UKrGA!G=S2zE9_%5mBLnu0A8>AnyxN%1q%#TPN z9*I9wb)OQ%+vQMt6Q8NMikGTc4NnFPWuqT@Y%jX3Q|y?*L*r+>*W7LhgCFf16-Uo* z%;cbXYSpTsIt2FG z-nlcJF7@tzxv}Zr(b9l1tjX!1NagGMuAwp;Ti-pJvN#mP5Nn2_uO>8A(+r*hE#d0= z98MLL#s$p)u^oCx}wjdd0^0u z3qFA#{Mt_ZG%}+XT7f59k>ctFam7U)f$#RbV2fN2HRNh*38E`}wwBLfLv zTGm=#yigSRrB|h}rFzr$a(=SK-b5r%WL_R=q*k?`fNWDryzW54PEKyD)krw8?QL5w z`U4q5ZGI7Dn}MPZ;AscPdu~rswP1cJ)B*HhM{bNI`_t(4 z*@HDb={n&592S6n41gs@w8|7gd6`1l_nA1LL5HRkLo4E7f%n01=>gfC4#g4MFVIrg zz!!>OfsVrj&7*!>$O&`kww9yPcXnehN~(>Vj*w;z=UaL}3q(fHfK#Rk>-1la%~S6;DgFfBN;Fiqt&B8m6% z5k#c-JRRzs0c(nPf41l!4EpAAG&ej=t&~W02%(A0XLaM{sdJ8lC-_FJE4Ie2)4sNO zlNj#u&X9%X*~D41C|VPI-Wb_g{*F?UBgJD^Q5thKl=WdK(8;z-KHu0nJA|i4=gOizD4t(}{u;9ioOaCZx( zl4YqoDR}3IF$rHD-iJj8P#hX8lI>bu3T|tbSe?)nJK%p7k0sXY&I?hqk$re_bV@SH z+QOVfj2oIJjD+8QSr@DtQTbdOZ|@i^J~Epc9?l!8XzZ*CZA|+Tpe?xA zj2~XomLN?E%xfHW;&hc9E12Ffw$pDDDz@jzlr5nZn2*uaL6wm&_lJ!Rsmg}X6UC8t*WmKee^!12?4)dEe+v}v&jKlk|{HF;FWM#ip8!Uf`p2tta0kfpxr zD!5|TO2DcJwB&qDikY$I3V-|tQL}-Htf7ciS*L)FoYe`fBhyfyk-EZv*0A%nkZqyM%L@fS|X|In^x zbX=E3jCgK_)`O==Z0YUortSTk-s;}Zs4XVp!e9YKOPnh4_@T<0$v9dDV@vE^ak4D6 z=0OSEM@;F<*n5CDtW|EPgRW&f3E%Sv1c8n%ZU*^<^y` zT3dxgjDWEjxS9c^d?3iz=7v^ARH2jbNnKCIK6l&QMy9x%hmmDz9-g%y9Z4VWrampwb;|P9r#xpS zr|&Egbg7vOEzW8tj_@QHPhIQV+uXKeh%_S&-VZzruZh1`6M;{Yuj|0>>jy{9FVLZ* z<|F&-!`WQ7(mDmv8@3{+bKsPFG*7@I{Xtg%64xF_t^gMtNlQh>E;rv*T=oO^IKQibfBl8=yhDl@bA>a!@q zPJTxsP5x!lP}I_SWjMJOKO!A?Inv+BbB`?ficmOJ4oGDetE^Xp%8e)?cl`QC3@b=8 zPfMm#V|L7MLKRVR!01FWRZj$+DdqTF8=cxBeQ>f35<70X}$-l>k$j(5xJ-$M|@JHNxN(6uoMLB>(9iOlwpqIrw1v`uxpRsYhC(YCk2=p)Ai&g>Xs_&4bt^Xhrt!NWly} z*+$FEsUush@wVvCwOYuaO)Dbanvaaqp=Lwm3_ix$;c<&|_LpYKE7EswX!VbUhJ#>=FWj9&8uI>#N0Lw8+{d%eINB%p`T#c(tAqUCUn1^e!Ko0 z*sYN|g^B<)Z-E~q66uh256xI76c~&c4hRz35k1xn1d`z@bNt9I5Me!r--BDYash^; zxjWIJ9m8>CFa{5=PML?%JcVdSz&dj4Exuo&KYN5EOFMFV3+?2OtUB!y`Ov3UCE<44>6(zNZCGGgd+Ps&4m}d-Clmn-Lk~G28M*NBI)+eP z5TJHVMvr6&=LBfQUPaOT`yZky&v6R=UBUP7lzikg9pcEp&=Q$4wj0dOR}IJkd}17* z-y~UltfjlNv*JcI+?9j5Fh*#QYynJjK&Dhf45?0*U(oQWHGXq>Q@_c(BMZEA@Z;}! z_^15@WzbI%GEB()b<)hb54wAimp$pwYFub}4d6Kq4%XzxFH4pVUbQ0O<`S=C#}xjr|Kxr>$Fd=8}1IcA!9D>=diahn~lju zHG^ZxFUwrEmY-$(l# zH=#f%xEmv`6RWUkD|6cB^SlSvz_Whusb_r6$(EQXM7rVx4vqjKj8d>A#NhwwIk`$8 zlqa>o+VUYhSghw`fHB@<+vYj}J{=sN>L=v-b<^iU?*S>~;|a1r$`GOHy6NQ6+tR`q z^@Ye}I5%7!+5EgbZlXUEO}?3MZS%;m%V;xT#V?}j8eO~UcL(1rDv890+?+8aRwTfddfv_K6$h@7PqTQ6sPWPhA)46R zOd*;(n72E;C!6MI+e7bwnY)U(vI?2v!6F273~~Zustqik)HyKqfM+7p{m&{6*nQKq z0bjSp9atMU@q_J^3{9Z1hoV(LTy!`AIBt5CHQ?0$QPt(X4GvZ_^5LbK$g7YTKLC({|yEIuSb9mcCN}q_0NZ3{!8jcB;Z_0qeA3u8>ok1K`$uJC{7&1 zym2EfVyPc^Kfc$;+aiTH7CC5R#-uHjTvQbxj-Fc^QeuJ~hk^;)h>A{l&aw3>0wHg(GvTI-I z&`UJT1dvfr`{0dc{g!Cjm!lH#A?3EJ0}S5jj>Lg^F7q_O{vHAL=w(#ck(xXav4$*K znPCzgYBNMmH^C{u?0~7id2B4fwTQ39>ec;FQ+0mMYt=Q>9K|W%3f} zNodkCaqtt7$WyOTp(gnOJ8IAE(w7M}x0S-;jYWzgpQlrA8MgxtfAK0fYt0)~UcnK! zJ3v$L-I*FEE?thRECU#tnTiCClxsc?3wHiQB*lY0ckhi5gY&?xK)iLV>=W&H+ssa* z9fePl%@IRV&b4%iH(AmwZr6`osoeeQ3qp zD+D=y^WM~}xZzuZ&j(K0U)i)>f>O*oeTCRQphC5)vYxp^2|r9`dtBKfBT`!A8qUuS z`?`BknszAAG84;idsX7e1#yvH0oQ#^GA=_q!)9;4ow^}L_`C=I6zrdzvbZ-as}>wQ z9`@k*p#vLV-DIi$_<`faSRLLm#wt9Udf)Z9$YO9Zyjp`isEH!goH%4;v2*xTy#3X9 zzh~;Z2=DNPDZHGixEZjiDd4tyMVW8>~p(z zaAWShA>)<{Z%p`ew8;mxzmgqz5O`1|f*9=v_#qEtI6qeA32|~_jP7r@t23Wm6767D2;Df@i}Ps)k6Q z)=3O!rF24)U%%LNTuDl=(K3m)Ga9=1ly9pr#NDv!Q-tlnF@tbFA@bW{u%as#6uoWE zP=m__fD%Duj0{A0FR_Nutf!u|xnyWLj$+yLOVa)%z#@WtD+9e7{T<5aIo!MY95brD zTg|7WgG&1{Fvd4L@>sat6<>yO1tK7+d6ckOlLLLqC9nR(N@!h1m{IoD-dj<1ZODYF zlWK)!_NsAy$pr;1PJ44N)r1G~SZZSWK$ZaQ4@FRMnzH~tAY$1nAHQ+ES4W1v1xb}( zB`nplKF^{5R_3kiLz*dlNtMsWy|hjULB-}6i9XaAk4i96yNj(=khG+Fzc3hgwdraf z`<``fdjuq?k~u=X>ziq^-ji(S5ZgF4Baqut}Bt_#)6IB^1zK%IYF;0$xE$9Q{W(lqPjFOWJZnpO%bU$W{I*NTw zRu90tvSa6rObA72Ne&i&n`)ZWR+Z7e!n0Jv#-B3bO;K1#`4p`Yg4de!`M#1U{@0M- zg77cVb@LL7^N(D49H6!#!jo%9#t^9uQl7%%;#6IeC*ShK=s(~2;V9?Q`F+h$%#t4< zC8T`gdK(XSv0)p)R7m0E46QXG8z8qvPhVQDu^cuun=( zzd8JkYoFK*0BsRDvBV+JdkRBkNBF#1>f02}F!`9?m;K_w=y6U7)j6EBvYclR09b8W z)2OuSOT6o9dtQED#GZlNm%JQ}c3x0W)HJ1Q6imc;8`1z*O;~JX5`2J=A}kn*Jhr^f zuf}|G>tN7)>K50HFJ{*r04>wTWgE&xa1EcU)ZJz-q*n8>9kXgGXAf_)(4w;94*8LOwP`B*t)w@$uLj){iX2;>Olx8 zTsTf#McE^KDX@Y>F|45OcvoX3q>}bR@ILBGWGJ%br(pjV?yCR1_|Zsg4Bb2c&UX zR+9Z2+6kO4A9Fu}5<;5KG^{}Br3I`Y?uNk7D@dC>jr-=-2bpee8wtvql zOF#0ev_Ukog6em=!>1y%&OhVB%1NI@Sgp0c?&+{tgLqBKZqU*voHE`amp>!!n?k1;){Mbc^qG@X7ge(3LfkK(*X(~juO;$suY0h?wKiWF z_9-*7*#4uJGVww?q-q`$Ng^C0$|ag8o=1a$NpMKURjibyYuX-d9V~pQpYUWxi2VfJ zPcb-Urd8gPKi1_E*5O#gp7lH5?DOilEvd+at)C8pCMLXtaq|Ml-{aQb? zBo0iDAotOg8^LT%b{X$V(I2#7OozpO5$*IaW;-h1*{2E1Ft`F&U5ih$bXFw^sjN); z_7lzWTQbIPuq|5;#2G}^ZsSMKwREET*NAd@b4FsLVa+rtIQwEn&q4y)aoa;C{) zesw&v!lw4}eBrKia2@w*3Elv0>ygi#Ns8qdxXu7I^9|rQC+fd(?ef8F2C2I~t6DAn z+E$cji0d8!&z&_8!`U1o2ePeLZ(8KJZrNm;-UnaM4deqtn&4*Ns{l%m2S`|)bMuxd z!K_tGTVs>4O|m_1-Qf^H66;|M!j8;*aM1Asd}(rmvXL_NWXVu7f;{Wfhw!O}$=P*r zW81CYzq}-!?E%V&fy{@XLvgYk$=<=}t=LhW)jwI@!Y`h42_wXM%8LL5{?WGJU(>^u zzHyEEC9cFomEBehJStLDX~-{O<18@yj`)ezbc#o#PvyN;CO+tt&bBPCcQ>yrH!Gyh zy=kQF<;450v6OJXK}o>>1;M)7k=7~3E#_M$ggVBxR);Z zwJ!w`$me_fxn6YhVLXv=0(j6DqfaSl6`QVHYL^Z9+$?t<4XZBafp1q4lilAyubvuz zvC>_UrNr&Gh0kd>L~M321EhonR4YW?j$-c7^p#rPkaVq=dDn=529WP4?-#1TGzs=O zfbr2vowBrMMKX0ZjU+|Kg?rjqExQgG(l({)JS(Bt_O-ezH9VW|X zvflI=)oV+N#@LOD+nS~ro%NDy*tJ-zz6=KZ1Tr-OG*_iZ#ORm&EXKFEoDA!{-;pQWoYUfgk4i5ULG8wz z7BAul^4NZqBKeIedR$je&$KT24kncGN_B4nD?4npiaeH>0@?@=i=Glu$ZDWto_7t) zv}U)7+3Fh|M_i?U+T1_fti;O^*P!5J{Lp@0lTbAJM)?hjhoi^qroHzI4meUey1uYU z!Jk0{&=?70jrirl!K0!bU-Lhem+zZ7c09&@B$JCTuF@6cdYTt;ABZ8vteBeW=c?`< z)+dght|)p+lwL=X@(K&;>Kf)F&yaP6S5>n&THadY!zd{i;&-&V2c_wr(|fpUuk%O# zlgZ|nJh02E(j~%fuI$h)vqPlwfB~5}ynNItt@G^3+Md%Wk&0#Vrx=7SjTt78w6Zj+ zNA%?<@*Oulv$e)?>#=pgu7eu(c6R0%VetQGpy0BM0tFYyf3JB!$-;{>4O$yHV}1*(R@ul& z-csM6vl3s3`eeUA{xnR%owX*lq1qrM6i_pe>u{~c+N57I&_xeNd%bxjSB!g6kvK>m z`<_+xhGy88=vxumdxDd*kOdCPV{1|lU_QsNMx=&Zau^LG0PrUIZ(*4l0DFUb~b->Ag-(|L+H0GL(g{UVS4A38FDa~*0vT(BnXU~(=r5$eF5 z|H*!+Zie%|7<7E6%rT2=?D0PfJ^li)|If?(6F*%ht#LCh0kNeW1>B3mB5V&1v`ZNe zuL3Mq0=|diL;1u%LpEjt1IIB)65`l^PGyiasUs1yK7V3ge@|k+)5;b}XQ8Vj=LU=~ zf?_VLRhqg=I_%hY@KBG*PUeHNM<>tI2DH9$9Yisji=~h&C;pNE@@@@vN!hSoGUiu= zcE)Uq_|WJroVzH_Imft~!V2O=_$WPfFZfdnFo%qYXHQ5hqlU@EFIfi(&V5 z5%fAk_UO)TtW`r?-su`TBHeF0|BdUG0z<;JY0+0*&C&!m0Po{)AqQv52{sH})iW@B zaOupW$R_py?3eTsw@=Me)FDfhfSieaEQpY-zEN)nKeG~@qhGl<9_z)oLUzc!Y*Fye zRY2$p1^rkllL2G6xU=h`kxpaT_Yt;E?@qR)ou<)mQgE3YHtkjRC)90bEwYlytm@t? zwIv~M!d0?#Ou90zBwKH`Vt;&Gu>`e|5Bkv%CZtHvG?A6_m47c;Hg#m-z#bQqEAtkC zj|f81@-7SeBrwN8h#ph;I`XJ6CPQOyQZl~(%shqf2GsNsGYvhq#P_I7(=&TLo~9V% z>H04frMWb=atE_5jfpQyNpQSl6cHF}%=*N%(LwU8v~X&_G%IGfM&~DR+F#C|20|kN zMhe0&02#2CcO9YdPbx(OY=#2j2j4@A>vK&|BrfHfA09n(L)mxZ08RScFqpSv0`)}de&fpc=`UtrLk{Rt5Jka= zN)r@MJt~+(nRv0Yo%@XEr%!hFNb%fH+b?uRaAsCp2(!R5KK~MN5c=PIhTN zd*Br-qje}>d$K+~JxyF(nkj{Bay8shkZwFBKiY0sL7061P*f@1WM}yEh=@(NK!nab zB#4L95-ldYosu$NY&`$itbzCK0^hKjvm_z=9dTz5>ZnR4@q)99dxAn-m?)%n?)WL4 z;*DdRc7(1wx9E7C#fGcB^1VLgqWiY5`O>ia zzCPpp5RgNfG1_8CX_S1E4}%%@5t6U9e!S$F7lc_ZM^5jdnp*nvo=fjPW6PU-p?psG za&lsvwc*ISJO@IiH!a$|)_0$zb=%;AkV?3-pw@ShWro@$N)h&IvT5i1{{BP!o!gFl zWY|^&32m4kq3+HWr2v8Uk3Fma`n286TX_!Aw{C6VvW*{9;=8-3p|mUEGsVD>cbl*3 zhSHLdAMgE$5DGb)cDF-+4*`&Ah=j~!JBCrn=)>MaZf(4;b^CfwQylyJ*Ie090L4VFgl-{b7IL^JzhFi%*sIg)lA0dvyXJi2 zEYL$EA9lK%9XhzqKJx>`!8s$G??};8G0($7Tgm&7BoBw}BWM?ogVY~DujWqkiv=U~ zWfNB;C0iIv*EvvE;+SFFAb0J6({K)I#0Rx`^@m@a6g-iChs*!(@KgD$1N{ z44>NPxs-cAWaDeCBbU6Rb`uQ{W~ne%>#b5@n61+lk?i9xTh*u`Ud;I@yz9tEymf9l z$lp@E?%Pr3_f02zpADYguNdmpt2QFf{R(4CpHrX^QcKaI9Wikxtu_ zs;mbScjY@aE;#SnXo=$n-6THD;a;EMr;az-jz(SAXT*khx|0W$1Rjpp(82#U$MB|K zJ?I&@rL0r(a>?D;s?b5X5S^Xt{B|KpQb_P6#t!B2cwQWQ-MgfpQKXnIlw&Kz%5(`R zGFlHXP1`B_9(`-3!_K2l?HQJb=fCHd!vVG11JJxxd_Tgwc{e5FO$&-vtOE+WJMmcb zvN>kl^Poq0($@a>=O3TG7tD8Ummw4pM8P7?5B(0B`4>3W|IWeqXS_aaqERvYCeMpml9Hm(40=g8gZ_;s{wnAaPVO+Ik_~gNYzk9i>w^I=kDz){4w;>(}nMCjfM$% zSCg@wr5oKlzD$3KKD#a0E8@r3?oxt=bV62Tp4O;~=+!~{hi3}j*Lww9s^)DHx2#KG zmww~A{EoOC2frczD8Aya6)TsF4$g2F~6rSL-E$p=x_nM%Zy*_&*Jrg?VYz7!dDQB_aBRVm~i*V%SkT`(a1 z(Pp8SnVh-6l~%%Yh)R<}dwLuwtrn}1o;(oWFLd~ZHCb$^}}D-UcN0;@rt^JuR&Fjc#FZGemL4m5MjevaS#-k-8ZvanzaM@s1qgR6O*A? zV(PH(W0!}_(Z~M7t4vX3+ph1p@{VkJvEv=_5L24o5aZMKO4kux@%*vhhc`-H^*wx7 zfOd^y+=60;aLy2LChoDpUa}DYBsW$>MRIr$_TKUVHmM&ZqoZ691;y^6BHxowN>4*k zgslB*)P;PPR#c3oCDU?c;69Ju#`Vv4T=v?6eMJ1mwV6<~Rtej%>aYu&o|G*myP-Z^ z_~>fnKqm{0CmWyR53=3()G3y--^gWwHceg?rC@yO>4$_`TpxN66{UCiHO9;Np(gk7 z#jrz>(N_Uw!RT$4S%HF1>Ala}0ihqCJEyh(1ZkBI6ZPj){)d8q{~O+DetrW3^|tV{ zC9Gc28J^hSCZWf9c@>FC10O!CsV&DPAbg8JXW6D%VBvNbG$A9f0?e>EMh#C;lS`ob z>%4+mFhJa56@&rUF|!6c8X>?sWfE`+o0qnSdp)tx;0A~$btH6l_gPXiq zBAI?2e~v@)c43R21AVFEKx6ri5ePJvw3Q2ioV+#qYE%)Od!=@QJRir+He7RS`R^O~ z?-Tj;8Oi5imN5Ob${9)XgQmR&JMxl)?wfsl%`nvEQQehZjrs~REm1Zp(t$v;LBP%g0$ae-9}#EF@egD7hI%JXkrU1ja;$e+fo=|4^2No-|vFo9P^ z{`a5!_qqIke;7zSAXNvlR-W}Z%O=bmo{R`iIN>^3>L6jrJ$?hbr(t(<$OQT29EmxU z8}>JE>Sc%-HE7?Z(mtvzsi9UCI@wb?9;n!Q)z>jXzoB2l61N+*4-CfqKx3!*a2hZn zZ|7WSAQb2SF>Sbii9qpN_9bX2;J*DaE|vcdYF_)lem7y7T7m`ZMYnsfb?~XLB`UjO zgpW8#nF>o8D!Y!*co2YNlQJ)22`Ev~Aakp?e&f1Q2^LRi*MRwhq_+zzB!Sc93MNWX zcrwRyo(A(Oup@p7LP#dWDw`lPV;3}Xowle0FvR^eoi?KnfQZKT zY{V$5)k?IUnCOIXTtG*9&L1D;Q(%L=4KVUXq>$EyvMhb4Gdgs9EN-4yVlON|*N` zT2DFlDBC@(ilIv4+qIP{KYHN6s8q7PaLV9~l$2BicV5HX#_fEa%m|l~N$JdnN7txx z&}~BP>ObgV`a4XD|GoA9oB6^%Rx~RY0OB}eYr3z?q-98nxp#65(NcP^xuW-Dhzz^Y z*Jwkx(d_RV*d%Cz%4u60^ge?6mpF;!FEikJ{r3m|KYAq5et17Ms5#$k-wKfLa%$`Z zKCYOblGfo!rlg?ESSclh0v5oNiEd1dq-FDblz!I-DBt{E8UHZ~dxSPpQP0CNBY=8L zl`J6vPWr-ai-T_*q)zDwCu<2mC6-32f86Ew$~8zaTMW!u5x&)b%ed)(bM^d3veRF0 z7y~ulPcjLx)1@>MOts`IiL~ER-hQX&RE>cCAQRDFy=}v~nU<3t;h#M`He8TTZ_I-} zCm^t;-A<&<;tn=XywW!TON^nMM9h#UAT&oOV-gH?_nXmz20xiGj#FM7hjhXPhf{Xo zM%=(m0&&|8*`Pv&1L&ZPZG7x_Yt~ff$Vjfxo!9PT_0um^alMS>G#tm${`VmBPy93-ZfG{LbnX)EkUQOK zf5V{r`;S`RPaU(wl{BSW;(&a%&XkcAMGw}uO6vy=Wt5#Z-D|nB(L-v4$HT!m*whJl%Pv z*F*c+=KK1RN?M0kkBdN`lE`+dXhNMZvtcYOfqcxFLz<%Q-F@6Re_9FX!+E>d^m?F9 z*29emTIahvw_1ELly6)~Uhkdz>l=a{U%Ug$D>dt8gHFl*iSfiOT~!!9KP2iFt|q3*jbGF>K^)9(l_ z`y6&c9=SZlalkYH+yNK=4u?{8V2 z{|84nYmw>&nfatpV{}KxIw41wl|UeW&|nR5k2a)>7JK#lR>M+dtKuJ5njd%rkt6;R%Vvd@t19d9=a%PEa42T@Zpw}4` zoY_y``|l=&KQcW2v1{&T$5`}=B#~a$yZ*BkD^gE_ci-`pQ8clK7V3lpIbK5~XYjd= zS-GW*MSt!%DQlx1xxEXBcZLnyAop;A_X`F~#gKvsZpjk4Wd0M>7;Q@e?Aj-|#V#C- zB9OI;un*Rpnc8$xs3F&{+Fam?3J_gTEt+5#*N1Vd<4Wq`Ic&C{1zZW&pDFEYL19<= zdFHEb4y#|uRy|4uUxp|$77lDN;x{jj!SrOA-PYuZtaj(;^6OIeeF6pzKwSjKv_i~; z-CN?NB_|rK3`#4mYgv8c+JE?HJx8M)894zg$n zoEFEJ<1ir*``oqL{Q+|BamhK+c3%Fw6N})-18&lNr9JiF_RUMro`vqD- z!`R|=~0i!2uKK6DY6Dey;Mpv%%>{0cAjzA6%~Eb?J_Dd9Ngvy6dW(d2WmV2fpcZz z@%W1g3uv@nb+8lVf28g)`wl3+J(6DHMNjV2v6Wa zZv!_9?i@!OYSVz4TY5%2+7cFo5GCd}7uec!UTL2jIs(I%K32Jb8hASPulrK}yJYN7 z_+x7=Yn0*ph+%3z*;~}Ut<*W|48~T)0u5`w%TqYVYGb^qK33MbpsW-8;JuAjWCE0X z2w$;^pqQxtH50BO9}F9x(yqCrn&Qq#WgfUZD}L`&_R<{^EC8e+e1NVtCGRbnAO9d* z#;pJKI=rw7=9(8FlGXCj6(b;xkI`iws_2`){qSo+Fk(SS&hp%}q^n_=A#0Ek9eGnE zgp=#Iy+!hs=HTfA#-3J$REX}47vhlQQy9mr^Lq!~D?{vp{MA3ngunH#RLm><>vy-- z!heBUGq2?a^V{+#IELL67;=HdiK$?5VrLBJ0NhTA4BN~hseNpC1DTt(VU5VVBsQ`%YA6t^iu1>6OLlT5 zM~|=W&RPD(^-hcZ1sYLcT7#+mU%E>-0C^yak!%LN0W6uJ%?Mu_fh>!X1|R|npyBk- zNi62iNsKIqqRaQ9rn7H?o^&OW;6`3Q`&1&w@vhg0o?Y<-*W+q-*&liZC&N(Nn z>q!cGPY`BT@p4?8j{>KvI2Op-N@Y1J6!-1&`#*1(bIh{0I~1g8iU8+83+km@e69c@ zU&b_9k+JMhAX_abp(Mn0IapA_MSmCTptpMiZK8JnzC$ zJ+~+ZDSwsPwc)XLZ(M|IU#~~*DaD-u>u%k$S+ovP<#(nrZ~7<_N1bkSZaNy^6R*Z! z-}Q?7g|o@P!#R(jryx3GBcTF9SsK*lG#TDV&XT3#t=S}E^&8sp$(1Qi1BVxwFVF>K z&W-wt_L-Hbhw?T?8)CD6bOS3Kzfy?#?wI@>^(SITn}d zzQb<&#)_SgMh-m7kXlO zF_b&6FvM!&uI_ZY*jQ^!iZr7Nq~z^>cv$p9Q}XrNj`>-mR&A}V5okpCK1&2@*Ze@d z9DU9e)RztPf*MsDhE$A8?wgW&*X(+}hpU0#$(^IFt-E*ujY*ItS!BB83B81~#e`0+ z>~Ql2)5rUs9*kb|&e{W7cr~@7t)iS^iz32T<3h}?jDoXIw(Am>C^&UIjzOmS8CE$? z?|3Dy6L@Zqibw8QOtZ7uVmRuP>u;k^-MTd^w{KkjV(d_B68Try{#Uc@IyqJri`)UU zpMj&i0>?hEuMHlRqN|NgXsk5qVeSsQ6i*Y1ad0CFSi(u+&8QJ@4Ar$ZgcA8$JIJD^ zXTa)1ufw4$8txufpwVS03R}cE4?iDk<-gDcq6}>Q#64R5LwL}jfPNVBoW zbkqf=hKXIR(6!&(E8SxEK;fali_o*-d%lb=f_`aZg<^UKJvSkEe~6y_$jXGsO~&xs%X&8A|t{lco4gRRe#hz`FU*D!9H>nIe8W4*Odb@=fsj3TgB8Nq__4yzhPg5RfwO_R-qIc*9Ekq1+g5E& z06`p+M*0~{q$Kd$g|iB-^kbtW-U&y?6x_9b)6B%< zAI>UL0NJ+pt_FglzyGhXCOA>QW8MD`@4)_qhMOT)tZ7Q~2Ttl|3Qh+eW0a#>P}C`2 z#XD>vC;JV(p`OdHwTy!}T792f7_~|$P~ne4Yo56+FeIhYFh034y{jT$U06g~y+_cv_kgH^b-&H@* zXKlu00u9Jn8b>b+$(H^J9Qir>T_^m5#w(;TNNBbr*#$nGoWkV#w8eseiR8|j+n8CcXo_2J6-)w8ancIg3 zD}=3t1I`!#cg8251&P(wc`K1(U&#Zm75(;WE;qlro4?eqzh#!d*tL<>C9s*@4s^Z5 z3S6=MzbOU&eBtX(_o!rN!6nS+Ga9|AE0iZ0F?tuG#IF_pkEuc%N&y->;FIn^uV$mq zRXFlej|f*9?QWcWB_~tk99ctlLPUAFE?2HGnX}1Ef~s3}UrjRB;Bn)M&y2J1O>$N) zUlH>rD>+?k;&IL436U# z*=Q;j&a2bsQ?$R!V^iE6W37w6$BHG!Q)~~44UsqZj}dBxIBsa>CgvH2iVn{amj#^O zKIGMlGTs%aS>pIl=62F7a2ykD7*&jcg7#Ra?SrZKt*t_`p*0)soTMClJ-xxgnGo;&J zy4OG!vZm5b2Qa{+f?c|Xhp~#pX4KeT@`;+-5tmNdkaCgZ0*UC2s}6^~A>##9WvHHt zuOV2$GWc~(H!A)4>{RZ7@7Ylm$=RH(2pm}01NJ43aE}?YsNILn0RLX9@mRo>Yy~?M zUmMRChM}4!tRMiq7{+H{3in}i7}q>~+wXyLk{%j&cdz(Pz8^`#(f&A56f$Bs$wY;MOe+?yST|{k1vI7o|OcmyU#{HaCA3rIHrn-6WSV~ z-nz))hZ^4zM+BO2iUXjDTiicQJ)f)4^L1F+NZv)y-4*OT`^M!(p1TgzoC~a1Ol{bJ zy43$U)lu`%TmFEFH+xZ2&5f1BPdF<1sHLABoF{p5R71v6yURki=iZD2V`i4=Qk*j9 zD1}^&RA)spJj1V*U!0JS`0--qXn=@k_N{1)y&c7p7knjZuq4PE{5MiB8V&t0xI8VK;JYDHm}}f7*;63Bb3@Kvt$jAOdwMScQ`$_%1?HTkn&nv~dsc z8VY0WLxKXhO%%p9o5sYnQeQgVD%c`0^_?x&tCw8$DZ=gZ9t}!W8VlWu_Yv4ivgw76 z)MVx#4qehJxyI>yl|y65{}=()59M+KQv0vUADb|B^Y)Bx6beF`5kmbVqrt50%DX(P z|1hNfW0cuHPcL8!+>@o6Fs5rasDIYQ?g=-;*2Mz#S;QQ()IhH*;V+}tp3r}IPqg%Y zyo>s$wDW*9&Wc0;s?A!eY)w+;7#tx_XOS5Y!Y|UA6i6OBPNvJ@;Cq1_5g^jL$#EU# zTs$SjIVP~2FhqI`jfnB3Zu_I*}V^ykBuFcBvab&0r7G? zOauurffhg4knU*YxndbNx#{t}U0MRR8939?Q9Xg;pw&9aW$^&U9!gm8VwJOqG3Psl zttJ`{QXVsmAs7e$J~j z->}g!LJgIvpzY6CV%lqx-*%f)e0pajT<`EKMU-VW=Wz!QD`$aY49Cw z-PGwj9Jj%FUG}T4jV@p$HNP(mM$>iqWkVaZO3)WB9uGLM;yUPnpxX_vURWlMK}WCl z%J_NGOitD4Uau%RMV{h06NfYGN#_#|xx4EHVD%S@2Tn?+`rS8A|Y+t5pP$ONcO(9!cKU2%T2^1h{9H{D9+$YX-I zp_(OR3l@MH;oxc5Di;hAA3L0M8hZb_cqMZ4$hkYJ8xO1Y?OWzZU_P6cRg7}8hUvBW zbC&0BrykJuK8;aQIJ#A{kSL)m#&ad&C~7nsvtS?P^Kx_SJWFp8D zAb$~WkR3TvxaA6j9{DIF550zBOvj?-cnVXqCa`|tHZ{?lM}(9w;Dw&MER#CcJY?{F zYp!D1(X_dH(DGdh?$!{gl^a|QSi6+GdKKK^rf#5TUH(&KnrYP*I61}jb;r+r#XC^* za|VrVnh#AJl!nt0nks$p9`K%I%ueO6IMr4^Ted3?u?|PuaqqM=hobegIC{usx884D zmsro3W@Q;E6W*Av*P40x_Y{td)8-7v$@Z`r!Y|asB6DQdN6K?;!W6@*(Hgi`{28VG z>KXs@Mo2$T+kLFYwqq?i$%-@1EaJ78=XvoOKirAB?DSa6Qs&H}&EqVscf`d+>#*FtQNY^i_g5{UYh9@5w!HoDB&EnXyfqG=S z%=H6f?mD5U<`gXM4AivtkkRBZo|?eSi9vK(H~agM+V1sD68WjIp)P!`n^4bkQfy%0 z5+}oI?R?6rWxel|o|oHKgp;eL@?GA@9w~5e%k%#{EP>-;+1i0f&5YUSO2e0&DNXSj zJ;Qs)VYc+88PL`EZb{`B!ML-A7C_Mwl(yI86vE+%#(I;FvaL-AqN-3}WbMJCbmZHx zMmzJj*VX125zLR>GgawEMV8X0W273sMi z;p3Wv2eDj5Wy&KLkCf}2&VMK~$(JY_;ZE?-Y=0?{sLG8FzJW8cUjWZUifI`+iaLys zZ?I&w-_yN?zLW2&EkZvqJSWzVS?(H&d7C7-QtzAX5>jMj3(!bVo?5~9$sGlkIhj%Q zT7nf1!-c%UU=%kh5aBCM&(`Ri=9hlfJBNVxnu3NUB!4D>NmMiQP121)rD@y(hG3w{ z`td&xTwkCBAtB&5GsVfAC|(Im*H)W!Tkyp#7fY#};s(fc3S3G>WfxqqsoSZ7)8Dw_ zmWfIX9@bEHR1N7y%#vkRw#R`V$i~@O`6!3WXI=vcZx@5Ot%qcFv0Ck1-_SgD7cKp=AhjYxPgFmeuf_q7z!>yAVKFKo@{FD_o7=W7cgWk$-p`23l45tlR!r~ zc)j+y5S^S|W_NGx?_WV!rF>DcGJZ_KVJyc@XE_@!`-IDPIKfE%h8I}OVQNp?q9kIGa-jg>lN zmJ~7xwrT0*zuGm_D~tENeH8X~bG4;Y;^mh`3|;5aeKRSzq))4fWAlrc>lv%1*RdR3Fmnd}S8#=HaS7nZQy)Hkj<<=I3x5@3slpqG zDyt8paLSP@M(r)nZKq!rmsMB9k9_w=IO@Q1Xu$;W=J1?#?r$7G{vmD+Y{qe|1|vk5 zIB0x^lLmU{2B27P1tve;g&FWgNN%g*JM=s3#3c%pR^z*F#9g>^va{5~c6 zpabJp;uq)POST)8nTD9Ye++I_;5<=5!Z364n-hjnkUjTc*%07AGx?UJW{4wTXST;nSvT zNR-^Cwi*cEFm0V%kyMjlGjKpr~z3}BqfFq^Z573DF3n$g>)D6P=M;f z>KY{e6Nk#Tc0?N1C~b%D0kUwU1Az#qQ$79cx};>CwDA1{>Nc()vFRknbA>k{YwL2E z)vdr$1104#Rm-n_y!{}R`}nhn1L0{>sK(?isCVDE3S)_iAR1`_f(_#X=NK9+#84!D zWnti?k>J<@pQdc|jVV5T+Ud5hXY=x!Gn3x2ka?}Ohbn>e8T{{5zobAnCc{LSI#!2#l7D!d?<1M9u& z@>hg#R{Zx9C-X56{9NF}tZDk~>8-o>4PDv3>(nXD_jW;O2C>-t zI<5H~5%ABzxaB4A4w!9uwp2dA7C`xlg+U$>*$g! zbQ&(*)sww-{mrprZzr*L^Bn2m#Ui8I_-hpxwVX!+!cDduI&IZ(9WzIxhb5CxV*(4x z)9YKyPskNeADCDj(#D*B=KVl6`2d2PWQtmVMUi1F8f#i0p*I|lYKr&ho{=C5hY0S# zalijQyfkr7q+5i;A#e`stw|S{V5t8l8+LM_KXi~MW~uEBzxbu|DVwF;uxMdv7#uV0 zZC+%w4hEo63Cr_D_G(S_Xu`I1DEr5|iW@iN`5e!fP*$HiDgA=B4bWzG!HB2V$gy=E zm8{l2$(DT%2G_THmCVfxYF0t`Lp1`>g4l@I*p8&JQ#<;59q(IM_lpp` zj05b%XSbwpUVR;fO}MeTeRjyK-#3iLkfN_c^Lks8+G} z7cjGd;icQiEhxDU?-dtB>Z)Wu9^>68Ic44my#pQlhd-?emGj9NbY#?}r=1s^|bWj#mzO)T*z*l_UPPlT8_BYunWnquEmR=Tz=4@T5ZYx}4sd_+RkN^YN8=Ze>6%Ls32*5@a; zwv50nFCNBo3=p?T*;~s{O$(rl``!&$=KqHw>>q0=!0l_bk;UzB>!7X+GRpnN0TVRF z7PU61U3n(gJzk(Ic6b@9vFcRXVp5;yHLHl zIX7%S*N5N2*ENU@H*^m#7GdxExqw(CLUVjhc~eEd{cxAmKxXuyTNC92{s+Ba!Qw_% zO7QGwLU9<}fNpfMVGJ!!>Gz6OL{1%hc<*!@Mf384r`NDR$*N+W2@I}-;snX>GJN0B z)Ns-Dv}C7XNe$uSlPYDkAE*t(fH(a`AS&6QiV+i??=C(XsuQf)tbAVUtj-D6#va~9 za=5FZMv6~h7Jf`8QoYwkdVR8X^VPY^)!naY#Zy$a(W*4C9E@c3fM4S>>Z@vZQux`m zeLc&_!6#3^pk9RC$NFJ8Ps0iPm<0RZ*dWuNp-)0z8kHfR4gyFN+#5&M1CT|pk{P0T z$yPlxg14hW-k$j`TEFE|f%5Dss<{X%p_nMJM$q&fL^#UU)-j#xvNyW8x}x_$_fBfV z=lS%6AqoZ><3}AWLsNa_zt$T^51L4c?ar;Rzsz+pg@?$8;;Cm<5_^llrru=W%#m!x z9E-ET}(n-<|E0V)P<|Z$~mDRN_H6QWf zF?2>v2@d5!v7FOI%&#Hx0XY%5A_s)^jY8E{cV|MM%;4}O(Cza{&x6_y;>-K3%WuB_ zSdR;+dM>BTqY?HQ_&x~7AiQs}hL>2wg=Hh#ZOaC%hu#y{zY@G(lJYQhq;29L=^Z=S zm^hyJ*Y*4?HwW-?SO-vFZX$fyzr9<(1l}C8)|36q>pb?}+$hJN_8@hUP9UZsk6^ft zjBh?eAc54KOWmri*q9pgg764q@E4#xbw+mecF+9RG%bUd-N#lF5YD~L+s@Ae1FXk> z%}4Z?q>w-FiukLp-@i%~_Nj*f(pPL4MJdB+Gq^5iiS)9nT^mg@qRej)6wMxo4jQiN zvrq!>DL6H}qi&>j=d>*RP{!=c-V4~&BZT_}kUemex_}u5Bj%KFT{v=MZEy7KOQIS7 zx>1Q;L&~uOX%g2B!dGR{cMBHd!!^XDngYm=1U*;em-lFaZea* ziKXDQhe*L!z8k^Ne(eG)n>lJ93ym$uT<+sVFhT4<$O z*`R9y&s?w$WUthCF({UfVRC!Ecir&6;}g zv5{+tyI)g~FIvQo$PBk>tr(@VdH+&q#07NhY`sXx_4cFOV7#%}$Vz1`k~gMlBS zk%bR)QVqG%pB~zTT;nblby#>k+rav1gd{yM{pJMLH$=PosH+D;U+F?rtPBVMR!LvGvGF>)&aL{)tZb zuc8ioAZtW`9-R&cKdn!nkU6(^Za{dXt%XRrWZbw(IIhYq3bIFN0zxt$N~A1|D&2|8 zvMW!RB4g({g>BvQwSGQq4jjdy8=+(~$a?biqE zCiS~kfFk1NFqwf+1mPZzt1yd=H{sk(UWF1iTI7jh_7YE#A+j8G#ObC3Sl$Gui!`1o zJ=a;URhCa)9-Li%9CRdjrab*aP+Z)LamAA63~|@u16AE4L%Kwf3=u@wsPFMv&uJJe z2rMB4Revha$LVSPD_@ULhbwZ0UmtGL+oW?j2kIz`iP-(q@#%?LHVaSR~Oit>Iq-3t8@K7g+6&sGlio@{MrN2r{aQ ze+3od^8xq-Ro&snZ0+auS|_%nOAH_B`n*e73DR(GUk;Uc1-})&DKt9W(Ofoc~IF?MiG{tH?GIEN#He= z`UZHnA3>|W=>{KMWxl~+`&i@-K0@u^x1o04Q91l_pMCh8YX{!)3ZmMOEhVWR$^wECZYCH|3nn-Sie-Tn4JexgV2uVuWx#TDPn zi}*+GA9UpYS{5Py$T{=&ukz+SDIzjmP0&orYtC0X;C$7`^H8=ultRV-bT|Jtj{UyB zexgzCuUTaHX@pG8T~PWM()#RP!P=#1s3I}0cCix$ zV8WC6`g?rQ!H-UiF$-d?;Q6XmmlVaTn5tHpPbuVNc^$Z@LpiFUb${Z))$1_5zR~F` zcX}uQo%!*sviMJ#;_pY;KSeWn<5$nWHzqg?^qvU)8`O5QOj{Z#{);cK%BVhN)MwqC z8~5bYl2{-xZsmpS>!IZEHE{W=z#pkj^2CnxXKK`>W&VdpFd>lLZV+!Xw`B^U&&Zxbk~xJvQO0y4MR0ar zfUpsn4+hE5yufbIF7)W)_yU@G8BmFogiiyYMh0S5>u2pr{tx+INUPGEq6#&L@xE_F z6cUCs5y1j?ApZZsC3ID&&{@a@IgGd^pu1nU2ZD&we(yBajBMen&BzfXyY;4@tmPe1$`obf|^KQ%3 z0LBDgH62V8_&V~x!b$xv?ofab0c32gLEEv|Y|nxS{l;nkX31mXLRFHB*Vt$JMro;S zG$GT#Ttn+$>7>pWuiYH52a@d3V>9m@RQ;wwOr3u_Dwkw1;3@2RVmCl#nv-`h(xxX~ zs}@VTUn<^LUlGH#N9SUy=LP7s$7F++b6l-?hf@H0p_w(sruFgNjP5^^lJGpK{DD1j!rX@~3VsCH;gYjq2|1oG`lHp>ZL!&pzeTA4(4Zu$ zTpP=cC1~R5wzn+>zc@BoRzv35W!V_R>~u$D8Gs3@+~#(&+8Evm@&!;GCi0b8X}Yu? z_N>wK#!5M(709%%E4j|UVp`mY!FpCEo? z=W)2?Z1N>7jV~mJE>Z5ab`YoU!aJNON4Z(dfPVcb@|;_PXqHGxK-$QV{{8E2ge9Gw zg837noidfLxh{(SqY!I}{i8yys_Q>BI|M0ym27dg&d0z^CVTwBGat+&b@G59KpsM=0U%P zbZp#R0o027T`!_AuoJH?V=Nsc9(pkBEWgTV-D`esZ?IqYcnF0t<6}ASv#b35`m2Ax z=e(ZDK<`>j@_BgtN-hI%Q?}cJHR&q|Y*m1#LJo)`HMKMQ=yEkTMqW{^N<50UEE}ww z7g#8_H@kLy8mb@ysE@$8Bdj#|wN9tTGAd(f-?dFsBCQ8yEw&L_V#0zCEn2obU;8TL z-94+_auDbgb0X8z+2oy~%Js0?6b{T-0%W3c~`qd7->*#`UW`r&33N<){9JzKNkrLp`9(?g3+YOYxk zw6?A`J;W`}wOdfNR~!<7k7Hx_0Qvh*C$BsEJ7`T?U~lQ2az^VyF8HF0Kn{SE+&#^1vThA3q5QNS7(=+ z7b|sYakQ5z?9SgD)wz#r(QIYiqw6Shhh&_IlNhUk5;cVh0U_U{T$E4UBURX!`?cMf zB{9fXM<~;wa3*a+HKOOAuYlAx%Hqogm}5+q z6_=MdR@dp#{7vLf8YcVoVB4w}Y>tG5?yp=YGc*x&q%l7j3)e=sm){1OD(Z}WJ4ufd z@?G)X5suO?Z=&6H6A!qZJ!m8mheX9Iz}=cFZ3x`{*vaVTued)g7V;daT81V2p@gUN%4VYxWWpK^q6%KGs0psT}z+$qi;M_zpYinTN?&W#c z!?P4E{|~|SH$%35l}h~CA@v`8)V#pER#<$d!MBn+AdHj`F78Lk)SSo~ntl}^!L(ev z_hixq!wVorA?`mW4YOQ7EYC!)6bEsosrGjangLEOk|NhGmVn@sVRB5@0P6J@^t@fdEc8QkM^Y6!J|3KLH(im zE~HRjcftYfV_7ISp@hfZVuUo@Yq0H(9yLB_h+P|YIhRF`AM+AiDq(#kVRC_j29>)U zhzxV-ZAX;n1>_D3b=vE#v#_bl&A+qYN$&ws1B;1#<_rwPs|h;0A_&GxR^iE*Q)=8lqb$0{bEQlaPx)JzRvfDBU_RXcAL zPFajBvNWjn-4xIb$Tl=b+fsZLt99H#ozSdAVk$2xSU!k+f_PHt*um~PCeAZ#Etkgh z9)3Qt>EUSZ4H+g>6Cvv9#tg7%8nrBAhTRjTSbdiqwS@DsOwkeuCubxcNq^|2{H4F$ zjDjQ9mAJHd z0Rw1i9eBNPKpSDeYbo4oiB+67;)F^i7O1gAQwQLb(HGS1+{!J@7niRIS`c*#Kj*cB z^q4%1n9z>}G@UrWlT~>w?tin4mR{r6x~AjDHurS}5@>~m0)r;O#S?xmfTSx8!@;=> zop?q7v!${>=hls^bt}}?3FS8juRui_f@wlv_P7ie@`#jq9pf(*?Wum4MB?c8K)b19 zC6UBF4xo@v|4eQ9`}-mPo1ilP4wU5o=C64##M}Eyusl8N57InV3);p539Y_(W&-c9R(6g?pQXuf-n z6S^)D9U^nCF))-ekzLufZAdiYTy{oMf|qi?!9FSTyb`sWQpE#e+tpt1hLRnTV7mjN z-n*s)&ibZxtBQq`#nWh~M2UqInPaGMr932T270b&wTeMuSIi5@9P$ln504iO6WD2E zE#-XgjxOn0JU25CsthDQgk-5QlXTjNZ3P`0?Jhc9$J#_x$bRc3LljIGm#xA>3Nlqx zFzFo-E29h~-EL8^vNImwG3{K@Q-Z9$(NY)cdFJEC=WbM5f|)W97FI^mM)yqCUwx$} za#HkL7nkJ=Lr7BYR1r?YV^T&xmfK5+*9O!Tj?+{|VY!U3L6OTBJ5%vNnG%L&u{x`b ztGZ|Hb1k8GNMdrw5*p_2zJln!Cx;h@H*U|2%OZchwKMSnb)^SyxYDAFMxc=eHyv`; zZA?ov_K`HIb+tNNoQ`NF6X#h%#3ODpK+k} z6t97*D=kno6uU}L9=H0%;W%D4gEM#0YdO)ZRPmg$rKKzH_!OKi217yMuGm^YsUx2_ zVd`XeA-d(s!>4)MwwxEDwcx$a!(3HW!(0{}&y6;hvb3E_iIliQUcyB60oFF?3DlJY z7a;;}a;}qVtM>&(2aOHM=!sFPrg31FvRYAr>s`pfKGy|k0M zffxheX#x5el4m=GV2cTYt&upr6M(sS<8FL~=q(;*>kdccuweqZv!Fw>%cLl>wpIn-4qGO= zHHCCDg%pm4{Y(-33y57G)O`NC!y9$}9nj#v`w#g8U+ewj>>r#pyk$yYP3f=VrigaU z<$ELh>JrEdEE}wMHhu|qCnO=b*9(D?@yFBB{NOrd{vBZ5&+ZT~p*jk?1|i25W)wUz zi7z>IWc=y(yWxyPjEk-}Q=~Zx^3q11d;+dRuS0^HL~I@Ee1xW>b&qFoB8CuL9T|?o zgHi8Ik;9s2V$rST?iH7EWG?iM!>qCFv`>T%tFw zY5;wfj)-BzC}_9vwph>`sC5%;AI7Uz$qT4sQelghwk$vR9o=Tz#8KTygPG8_$1}KN zmDWob&{d?W%G0C`#+JE-bBlxaKjAI%KYM<&+@TQ;buHJZ9*}i0u!D(e1GU4B!AaG~ z)Q&~^dLr5*RuLvybV0#$(zA+GG8d2+PhzrvIoeghsRMID4a<}hS2cFXmoB zX}J1&*-Uu&o!46jgdn*WDl`v@rpF`s(cWiydq!68+Iv!}Z5?!$5yhA_omLM+}mI(Gz5><>>%cCo7 z!1sC}hWTqzT73dwEYK#jd<`S`Y1fZ{<~-mUhJ4GefEf zOZr~DmEsRP&(On0Cpg&Gwtm_e;ltV3FJevNsk(xPV#6P?t5fG+0#vk=R77W##nGiqPMR& z)NZ7|*pN}Ux_Mq8$OkQ0gQBhSuGX<^^DLaQ?(CKdY!O%g;p}B_XuBqIWI&s#VeO{5 zRhflLB>hg64+_CtsI1q$r&IROgFs|YAXyTGkP~2NB?NR95}=um2~0Q-$Z_V3rJ|IdM!k9?EkM4?LtMt#V&`um{9u zZ)z5h7t4(>>&f((Ji4LSOr@Rlf@~Uk(tm=z>N#`6rW7g?BzF!#%zX&E!xtR2x-@pm}F>SWb8o2RG9%d1@CDz1Op!Ua8OK)zP zS_H(fRjAcS%}}g|`3N!Y7$+_-SLeJ61}z<*EQf*LxpNWO;Yn)&YPrNJd}=StU?As* zlva5iv4BC>ZOfy^W``V+GwXA$aO`rn3XV-+gvokbaYlV>{UB$H_pL@HnU4D*Dl_J8 zdR|8GpB`mYRKX62s$E5Da;ZlWEje;(^tES<`cf4ax=cx(Vn~KiJ-VS+165$wP;-e* zw`BJJaNRd@{giC_Bkvf9Df(t6U+nfhoo*{n?9KxPk+!jno@3Lj%pAP4v zj#5N9QRSA>qOD6}F+HGDo*3$fTkgFB=QOsbz{NOI-DnMzU%%cEMvW&5n_=^5Fq|}F zM@IiZoOu<^e5iFO&CVpnC_V7WeR*k(*bNFgIx_Sj9wP~6${l56`!}Fi#%3(jbjprz zx*kq_GvzEEcx+(yMigk$P+hgrpi;S-%%!%LjV9Y#vxB-u)Ydp$w85q9-=SdOtKdf~8hZOPekbwEqpYM(H_Ln)u+j81UXbUs| zl0b&dAak%QHMDfZzOX8Dim>-;^wv8^C%>5&2=-;rrojSb`nQ2NFvT|{h9a5|1bRS^3fdz3(!;vHN|0S)Cf1( zp|s&5bNvHuQ|Up;vYQ>Z(Z(8xw>rL~m_@)(`->$IBkEp*HIK2gX z_7NQ>=o4g|d_ + + + + + + + + + + + + + + + TLS Termination with Network Load Balancer - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

    +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    NLB TLS Termination

    + +

    Motivation

    +

    diagram illustrating connection between network load balancer and cluster

    +

    Managing TLS certificates (and related configuration) for production cluster workloads is both time consuming, and high risk. For example, storing multiple copies of a certificate secret key in the cluster may increases the chances of it being compromised. Additionally, TLS can be complicated to configure and implement properly.

    +

    Traditionally, TLS termination at the load balancer step required using more expensive application load balancers (ALBs). AWS introduced TLS termination for network load balancers (NLBs) for enhanced security and cost effectiveness.

    +

    The TLS implementation used by the AWS NLB is formally verified and maintained. Additionally, AWS Certificate Manager (ACM) is used, fully isolating your cluster from access to the private key.

    +

    Solution Overview

    +

    An external client transmits a request to the NLB. The request is encrypted with TLS using the production (e.g., client facing) certificate, and on port 443.

    +

    The NLB decrypts the request, and transmits it on to your cluster on port 80. It follows the standard request routing configured within the cluster. Notably, the request received within the cluster includes the actual origin IP address of the external client. Alternate ports may be configured.

    +
    +

    Note

    +

    The NLB may be configured to maintain the source (i.e., client) IP address. However, there are some limitations. Review Client IP Preservation in the AWS docs.

    +
    +

    Prerequisites

    +

    ✅ Access to DNS records for domain name.

    +

    Review the docs on registering domains with AWS's Route 53. Alternate DNS providers may be used, such as Google Domains or Namecheap.

    +

    Later, a subdomain (e.g., demo-service.gcline.us) will be created, pointing to the NLB. Access to the DNS records is required to generate a TLS certificate for use by the NLB.

    +

    ✅ AWS Load Balancer Controller Installed

    +

    Generally, setting up the Load Balancer Controller has two steps: enabling IAM roles for service accounts, and adding the controller to the cluster. The IAM role allows the controller in the Kubernetes cluster to manage AWS resources. Learn more about IAM roles for service accounts.

    +

    Configure

    +

    Generate TLS Certificate

    +

    Create a public TLS certificate for the domain using AWS Certificate Manager (ACM). This is streamlined when the domain is managed by Route 53. Review the AWS Certificate Manager Docs.

    +

    The domain name on the TLS certificate must correspond to the planned domain name for the kubernetes service. The domain name may be specified explicitly (e.g., tls-demo.gcline.us), or a wildcard certificate can be used (e.g., *.gcline.us).

    +

    If the domain is registered with Route53, the TLS certificate request will automatically be approved. Otherwise, follow ACM console the instructions to create a DNS record to validate the domain.

    +

    After validation, the certificate will be available for use in your AWS account.

    +

    Note the ARN of the certificate, which uniquely identifies it in kubernetes config files.

    +

    screenshot indicating location of ARN value in web console

    +

    Create Service with new NLB

    +

    Add annotations to a load balancer service to enable NLB TLS termination, before the traffic reaches Envoy. The annotations are actioned by the load balancer controller. Review all the NLB annotations on GitHub.

    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    annotation namevaluemeaning
    service.beta.kubernetes.io/aws-load-balancer-typeexternalexplicitly requires an NLB, instead of an ALB
    service.beta.kubernetes.io/aws-load-balancer-nlb-target-typeiproute traffic directly to the pod IP
    service.beta.kubernetes.io/aws-load-balancer-schemeinternet-facingAn internet-facing load balancer has a publicly resolvable DNS name
    service.beta.kubernetes.io/aws-load-balancer-ssl-cert"arn:aws:acm:..."identifies the TLS certificate used by the NLB
    service.beta.kubernetes.io/aws-load-balancer-ssl-ports443determines the port the NLB should listen for TLS traffic on
    +

    Example:

    +
    apiVersion: v1
+kind: Service
+metadata:
+  name: MyAppSvc
+  namespace: dev
+  annotations:
+    service.beta.kubernetes.io/aws-load-balancer-type: external
+    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip
+    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
+    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-2:185309785115:certificate/7610ed7d-5a81-4ea2-a18a-7ba1606cca3e"
+    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
+spec:
+  externalTrafficPolicy: Local
+  ports:
+  - port: 443
+    targetPort: 80
+    name: http
+    protocol: TCP
+  selector:
+    app: MyApp
+  type: LoadBalancer
+
    +

    Configure DNS

    +

    Get domain name using kubectl.

    +

    The service name and namespace were defined above.

    +
    kubectl get svc MyAppSvc --namespace dev
+
    +
    NAME    TYPE           CLUSTER-IP      EXTERNAL-IP                                                                     PORT(S)        AGE
+envoy   LoadBalancer   10.100.24.154   k8s-<namespace>-<service_name>-xxxxxxxxxx-xxxxxxxxxxxxxxxx.elb.<region_code>.amazonaws.com   443:31606/TCP   40d
+
    +

    Note the last 4 digits of the domain name for the NLB. For example, "bb1f".

    +

    Setup DNS alias for NLB

    +

    Create a DNS record pointing from a friendly name (e.g., tls-demo.gcline.us) to the NLB domain (e.g., bb1f.elb.us-east-2.amazonaws.com).

    +

    For AWS's Route 53, follow the instructions below. If you use a different DNS provider, follow their instructions for creating a CNAME record.

    +

    First, create a new record in Route 53.

    +

    Use the "A" record type, and enable the "alias" option. This option attaches the DNS record to the AWS resource, without requiring an extra lookup step for clients.

    +

    Select the NLB resource. Double check the region, and use the last 4 digits (noted earlier) to select the proper resource.

    +

    screenshot of Route 53 New Record Console

    +

    Verify

    +

    Attempt to access the NLB domain at port 443 with HTTPS/TLS. Is the connection successful? What certificate is used? Does it reach the expected endpoint within the cluster?

    + + + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/guide/use_cases/self_managed_lb/index.html b/v2.7/guide/use_cases/self_managed_lb/index.html new file mode 100644 index 000000000..cd6cdd430 --- /dev/null +++ b/v2.7/guide/use_cases/self_managed_lb/index.html @@ -0,0 +1,1245 @@ + + + + + + + + + + + + + + + + + Externally Managed Load Balancers - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Externally Managed Load Balancer

    + +

    Motivation

    +

    The load balancer controller (LBC) generally creates and destroys AWS Load Balancers in response to Kubernetes resources.

    +

    However, some cluster operators may prefer to manually manage AWS Load Balancers. This supports use cases like:

    +
      +
    • Preventing accidental release of key IP addresses.
      • +
    • Supporting load balancers where the Kubernetes cluster is one of multiple targets.
      • +
    • Complying with organizational requirements on provisioning load balancers, for security or cost reasons.
      • +
    +

    Solution Overview

    +

    Use the TargetGroupBinding CRD to sync a Kubernetes service with the targets of a load balancer.

    +

    First, a load balancer is manually created directly with AWS. This guide uses a network load balancer, but an application load balancer may be similarly configured.

    +

    Second, A listener and a target group are then added to the load balancer.

    +

    Third, a TargetGroupBinding CRD is created in a cluster. The CRD includes references to a Kubernetes service and the ARN of the Load Balancer Target Group. The CRD configures the LBC to watch the service and automatically update the target group with the appropriate pod VPC IP addresses.

    +

    Prerequisites

    +

    Install:

    + +

    Have this information available:

    +
      +
    • Cluster VPC Information
      • +
    • ID of EKS Cluster
      • +
    • Subnet IDs
      • +
    • This information is available in the "Networking" section of the EKS Cluster Console.
      • +
    • Port and Protocol of Target Kubernetes Service
      • +
    +

    Configure Load Balancer

    +

    Create Load Balancer: (optional)

    +
      +
    1. +

      Use the create-load-balancer command to create an IPv4 load balancer, specifying a public subnet for each Availability Zone in which you have instances.

      +

      You can specify only one subnet per Availability Zone.

      +
      aws elbv2 create-load-balancer --name my-load-balancer --type network --subnets subnet-0e3f5cac72EXAMPLE
+
      +

      Important: The output includes the ARN of the load balancer. This value is needed to configure the LBC.

      +

      Example:

      +
      arn:aws:elasticloadbalancing:us-east-2:123456789012:loadbalancer/net/my-load-balancer/1234567890123456
+
      +
      2. +
    2. +

      Use the create-target-group command to create an IPv4 target group, specifying the same VPC of your EKS cluster.

      +
      3. +
    +
    aws elbv2 create-target-group --name my-targets --protocol TCP --port 80 --vpc-id vpc-0598c7d356EXAMPLE
+
    +

    The output includes the ARN of the target group, with this format:

    +
    arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456
+
    +
      +
    1. Use the create-listener command to create a listener for your load balancer with a default rule that forwards requests to your target group. The listener port and protocol must match the Kubernetes service. However, TLS termination is permitted. [[double check it works in this configuration?]]
      2. +
    +
    aws elbv2 create-listener --load-balancer-arn loadbalancer-arn --protocol TCP --port 80  \
+--default-actions Type=forward,TargetGroupArn=targetgroup-arn
+
    +

    Create TargetGroupBinding CRD

    +
      +
    1. Create the TargetGroupBinding CRD
      2. +
    +

    Insert the ARN of the Target Group, as created above.

    +

    Insert the name and port of the target Kubernetes service.

    +

    apiVersion: elbv2.k8s.aws/v1beta1
+kind: TargetGroupBinding
+metadata:
+  name: my-tgb
+spec:
+  serviceRef:
+    name: awesome-service # route traffic to the awesome-service
+    port: 80
+  targetGroupARN: arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456
+
    +2. Apply the CRD

    +

    Apply the TargetGroupBinding CRD CRD file to your Cluster.

    +

    kubectl apply -f my-tgb.yaml

    +

    Verify

    +

    Wait approximately 30 seconds for the LBC to update the load balancer.

    +

    View all target groups in the AWS console.

    +

    Find the target group by the ARN noted above, and verify the appropriate instances from the cluster have been added.

    + + + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/how-it-works/index.html b/v2.7/how-it-works/index.html new file mode 100644 index 000000000..252105881 --- /dev/null +++ b/v2.7/how-it-works/index.html @@ -0,0 +1,1213 @@ + + + + + + + + + + + + + + + + + How it works - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    How AWS Load Balancer controller works

    +

    Design

    +

    The following diagram details the AWS components this controller creates. It also demonstrates the route ingress traffic takes from the ALB to the Kubernetes cluster.

    +

    controller-design

    +
    +

    Note

    +

    The controller manages the configurations of the resources it creates, and we do not recommend out-of-band modifications to these resources because the controller may revert the manual changes during reconciliation. We recommend to use configuration options provided as best practice, such as ingress and service annotations, controller command line flags and IngressClassParams.

    +
    +

    Ingress Creation

    +

    This section describes each step (circle) above. This example demonstrates satisfying 1 ingress resource.

    +

    [1]: The controller watches for ingress +events from the API server. When it +finds ingress resources that satisfy its requirements, it begins the creation of AWS resources.

    +

    [2]: An +ALB (ELBv2) is created in AWS for the new ingress resource. This ALB can be internet-facing or internal. You can also specify the subnets it's created in +using annotations.

    +

    [3]: Target Groups are created in AWS for each unique Kubernetes service described in the ingress resource.

    +

    [4]: Listeners are created for every port detailed in your ingress resource annotations. When no port is specified, sensible defaults (80 or 443) are used. Certificates may also be attached via annotations.

    +

    [5]: Rules are created for each path specified in your ingress resource. This ensures traffic to a specific path is routed to the correct Kubernetes Service.

    +

    Along with the above, the controller also...

    +
      +
    • deletes AWS components when ingress resources are removed from k8s.
      • +
    • modifies AWS components when ingress resources change in k8s.
      • +
    • assembles a list of existing ingress-related AWS components on start-up, allowing you to + recover if the controller were to be restarted.
      • +
    +

    Ingress Traffic

    +

    AWS Load Balancer controller supports two traffic modes:

    +
      +
    • Instance mode
      • +
    • IP mode
      • +
    +

    By default, Instance mode is used, users can explicitly select the mode via alb.ingress.kubernetes.io/target-type annotation.

    +

    Instance mode

    +

    Ingress traffic starts at the ALB and reaches the Kubernetes nodes through each service's NodePort. This means that services referenced from ingress resources must be exposed by type:NodePort in order to be reached by the ALB.

    +

    IP mode

    +

    Ingress traffic starts at the ALB and reaches the Kubernetes pods directly. CNIs must support directly accessible POD ip via secondary IP addresses on ENI.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/index.html b/v2.7/index.html new file mode 100644 index 000000000..665854568 --- /dev/null +++ b/v2.7/index.html @@ -0,0 +1,1144 @@ + + + + + + + + + + + + + + + + + Welcome - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    Welcome

    + +

    + Kubernetes logo + AWS Load Balancer logo +

    +

    + + A + Kubernetes + controller for + Elastic Load Balancers + +

    +

    + + contributions welcome + + + github issues + + status is ga + apache license +

    +

    + + go report card + + github watchers + github stars + github forks + + docker pulls + +

    + +

    AWS Load Balancer Controller

    +

    AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster.

    + +

    This project was formerly known as "AWS ALB Ingress Controller", we rebranded it to be "AWS Load Balancer Controller".

    +
      +
    • +

      AWS ALB Ingress Controller was originated by Ticketmaster and CoreOS as part of Ticketmaster's move to AWS and CoreOS Tectonic. Learn more about Ticketmaster's Kubernetes initiative from Justin Dean's video at Tectonic Summit.

      +
      • +
    • +

      AWS ALB Ingress Controller was donated to Kubernetes SIG-AWS to allow AWS, CoreOS, Ticketmaster and other SIG-AWS contributors to officially maintain the project. SIG-AWS reached this consensus on June 1, 2018.

      +
      • +
    +

    Support Policy

    +

    Currently, AWS provides security updates and bug fixes to the latest available minor versions of AWS LBC. For other ad-hoc supports on older versions, please reach out through AWS support ticket.

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/install/iam_policy.json b/v2.7/install/iam_policy.json new file mode 100644 index 000000000..e8a05f8e6 --- /dev/null +++ b/v2.7/install/iam_policy.json @@ -0,0 +1,242 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreateServiceLinkedRole" + ], + "Resource": "*", + "Condition": { + "StringEquals": { + "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeInternetGateways", + "ec2:DescribeVpcs", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeSubnets", + "ec2:DescribeSecurityGroups", + "ec2:DescribeInstances", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribeTags", + "ec2:GetCoipPoolUsage", + "ec2:DescribeCoipPools", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeListenerCertificates", + "elasticloadbalancing:DescribeSSLPolicies", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetGroupAttributes", + "elasticloadbalancing:DescribeTargetHealth", + "elasticloadbalancing:DescribeTags", + "elasticloadbalancing:DescribeTrustStores" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "cognito-idp:DescribeUserPoolClient", + "acm:ListCertificates", + "acm:DescribeCertificate", + "iam:ListServerCertificates", + "iam:GetServerCertificate", + "waf-regional:GetWebACL", + "waf-regional:GetWebACLForResource", + "waf-regional:AssociateWebACL", + "waf-regional:DisassociateWebACL", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:AssociateWebACL", + "wafv2:DisassociateWebACL", + "shield:GetSubscriptionState", + "shield:DescribeProtection", + "shield:CreateProtection", + "shield:DeleteProtection" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateSecurityGroup" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags" + ], + "Resource": "arn:aws:ec2:*:*:security-group/*", + "Condition": { + "StringEquals": { + "ec2:CreateAction": "CreateSecurityGroup" + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress", + "ec2:DeleteSecurityGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateLoadBalancer", + "elasticloadbalancing:CreateTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateListener", + "elasticloadbalancing:DeleteListener", + "elasticloadbalancing:CreateRule", + "elasticloadbalancing:DeleteRule" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws:elasticloadbalancing:*:*:listener/net/*/*/*", + "arn:aws:elasticloadbalancing:*:*:listener/app/*/*/*", + "arn:aws:elasticloadbalancing:*:*:listener-rule/net/*/*/*", + "arn:aws:elasticloadbalancing:*:*:listener-rule/app/*/*/*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:ModifyLoadBalancerAttributes", + "elasticloadbalancing:SetIpAddressType", + "elasticloadbalancing:SetSecurityGroups", + "elasticloadbalancing:SetSubnets", + "elasticloadbalancing:DeleteLoadBalancer", + "elasticloadbalancing:ModifyTargetGroup", + "elasticloadbalancing:ModifyTargetGroupAttributes", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags" + ], + "Resource": [ + "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "StringEquals": { + "elasticloadbalancing:CreateAction": [ + "CreateTargetGroup", + "CreateLoadBalancer" + ] + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:RegisterTargets", + "elasticloadbalancing:DeregisterTargets" + ], + "Resource": "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:SetWebAcl", + "elasticloadbalancing:ModifyListener", + "elasticloadbalancing:AddListenerCertificates", + "elasticloadbalancing:RemoveListenerCertificates", + "elasticloadbalancing:ModifyRule" + ], + "Resource": "*" + } + ] +} diff --git a/v2.7/install/iam_policy_cn.json b/v2.7/install/iam_policy_cn.json new file mode 100644 index 000000000..a0d5edd5c --- /dev/null +++ b/v2.7/install/iam_policy_cn.json @@ -0,0 +1,241 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreateServiceLinkedRole" + ], + "Resource": "*", + "Condition": { + "StringEquals": { + "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeInternetGateways", + "ec2:DescribeVpcs", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeSubnets", + "ec2:DescribeSecurityGroups", + "ec2:DescribeInstances", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribeTags", + "ec2:GetCoipPoolUsage", + "ec2:DescribeCoipPools", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeListenerCertificates", + "elasticloadbalancing:DescribeSSLPolicies", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetGroupAttributes", + "elasticloadbalancing:DescribeTargetHealth", + "elasticloadbalancing:DescribeTags" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "cognito-idp:DescribeUserPoolClient", + "acm:ListCertificates", + "acm:DescribeCertificate", + "iam:ListServerCertificates", + "iam:GetServerCertificate", + "waf-regional:GetWebACL", + "waf-regional:GetWebACLForResource", + "waf-regional:AssociateWebACL", + "waf-regional:DisassociateWebACL", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:AssociateWebACL", + "wafv2:DisassociateWebACL", + "shield:GetSubscriptionState", + "shield:DescribeProtection", + "shield:CreateProtection", + "shield:DeleteProtection" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateSecurityGroup" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags" + ], + "Resource": "arn:aws-cn:ec2:*:*:security-group/*", + "Condition": { + "StringEquals": { + "ec2:CreateAction": "CreateSecurityGroup" + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws-cn:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress", + "ec2:DeleteSecurityGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateLoadBalancer", + "elasticloadbalancing:CreateTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateListener", + "elasticloadbalancing:DeleteListener", + "elasticloadbalancing:CreateRule", + "elasticloadbalancing:DeleteRule" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-cn:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-cn:elasticloadbalancing:*:*:listener/net/*/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:listener/app/*/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:listener-rule/net/*/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:listener-rule/app/*/*/*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags" + ], + "Resource": [ + "arn:aws-cn:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-cn:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "StringEquals": { + "elasticloadbalancing:CreateAction": [ + "CreateTargetGroup", + "CreateLoadBalancer" + ] + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:ModifyLoadBalancerAttributes", + "elasticloadbalancing:SetIpAddressType", + "elasticloadbalancing:SetSecurityGroups", + "elasticloadbalancing:SetSubnets", + "elasticloadbalancing:DeleteLoadBalancer", + "elasticloadbalancing:ModifyTargetGroup", + "elasticloadbalancing:ModifyTargetGroupAttributes", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:RegisterTargets", + "elasticloadbalancing:DeregisterTargets" + ], + "Resource": "arn:aws-cn:elasticloadbalancing:*:*:targetgroup/*/*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:SetWebAcl", + "elasticloadbalancing:ModifyListener", + "elasticloadbalancing:AddListenerCertificates", + "elasticloadbalancing:RemoveListenerCertificates", + "elasticloadbalancing:ModifyRule" + ], + "Resource": "*" + } + ] +} diff --git a/v2.7/install/iam_policy_iso.json b/v2.7/install/iam_policy_iso.json new file mode 100644 index 000000000..1074555c7 --- /dev/null +++ b/v2.7/install/iam_policy_iso.json @@ -0,0 +1,241 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreateServiceLinkedRole" + ], + "Resource": "*", + "Condition": { + "StringEquals": { + "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeInternetGateways", + "ec2:DescribeVpcs", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeSubnets", + "ec2:DescribeSecurityGroups", + "ec2:DescribeInstances", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribeTags", + "ec2:GetCoipPoolUsage", + "ec2:DescribeCoipPools", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeListenerCertificates", + "elasticloadbalancing:DescribeSSLPolicies", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetGroupAttributes", + "elasticloadbalancing:DescribeTargetHealth", + "elasticloadbalancing:DescribeTags" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "cognito-idp:DescribeUserPoolClient", + "acm:ListCertificates", + "acm:DescribeCertificate", + "iam:ListServerCertificates", + "iam:GetServerCertificate", + "waf-regional:GetWebACL", + "waf-regional:GetWebACLForResource", + "waf-regional:AssociateWebACL", + "waf-regional:DisassociateWebACL", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:AssociateWebACL", + "wafv2:DisassociateWebACL", + "shield:GetSubscriptionState", + "shield:DescribeProtection", + "shield:CreateProtection", + "shield:DeleteProtection" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateSecurityGroup" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags" + ], + "Resource": "arn:aws-iso:ec2:*:*:security-group/*", + "Condition": { + "StringEquals": { + "ec2:CreateAction": "CreateSecurityGroup" + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws-iso:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress", + "ec2:DeleteSecurityGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateLoadBalancer", + "elasticloadbalancing:CreateTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateListener", + "elasticloadbalancing:DeleteListener", + "elasticloadbalancing:CreateRule", + "elasticloadbalancing:DeleteRule" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-iso:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-iso:elasticloadbalancing:*:*:listener/net/*/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:listener/app/*/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:listener-rule/net/*/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:listener-rule/app/*/*/*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags" + ], + "Resource": [ + "arn:aws-iso:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-iso:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "StringEquals": { + "elasticloadbalancing:CreateAction": [ + "CreateTargetGroup", + "CreateLoadBalancer" + ] + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:ModifyLoadBalancerAttributes", + "elasticloadbalancing:SetIpAddressType", + "elasticloadbalancing:SetSecurityGroups", + "elasticloadbalancing:SetSubnets", + "elasticloadbalancing:DeleteLoadBalancer", + "elasticloadbalancing:ModifyTargetGroup", + "elasticloadbalancing:ModifyTargetGroupAttributes", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:RegisterTargets", + "elasticloadbalancing:DeregisterTargets" + ], + "Resource": "arn:aws-iso:elasticloadbalancing:*:*:targetgroup/*/*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:SetWebAcl", + "elasticloadbalancing:ModifyListener", + "elasticloadbalancing:AddListenerCertificates", + "elasticloadbalancing:RemoveListenerCertificates", + "elasticloadbalancing:ModifyRule" + ], + "Resource": "*" + } + ] +} diff --git a/v2.7/install/iam_policy_isob.json b/v2.7/install/iam_policy_isob.json new file mode 100644 index 000000000..bc9eeb63f --- /dev/null +++ b/v2.7/install/iam_policy_isob.json @@ -0,0 +1,241 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreateServiceLinkedRole" + ], + "Resource": "*", + "Condition": { + "StringEquals": { + "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeInternetGateways", + "ec2:DescribeVpcs", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeSubnets", + "ec2:DescribeSecurityGroups", + "ec2:DescribeInstances", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribeTags", + "ec2:GetCoipPoolUsage", + "ec2:DescribeCoipPools", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeListenerCertificates", + "elasticloadbalancing:DescribeSSLPolicies", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetGroupAttributes", + "elasticloadbalancing:DescribeTargetHealth", + "elasticloadbalancing:DescribeTags" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "cognito-idp:DescribeUserPoolClient", + "acm:ListCertificates", + "acm:DescribeCertificate", + "iam:ListServerCertificates", + "iam:GetServerCertificate", + "waf-regional:GetWebACL", + "waf-regional:GetWebACLForResource", + "waf-regional:AssociateWebACL", + "waf-regional:DisassociateWebACL", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:AssociateWebACL", + "wafv2:DisassociateWebACL", + "shield:GetSubscriptionState", + "shield:DescribeProtection", + "shield:CreateProtection", + "shield:DeleteProtection" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateSecurityGroup" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags" + ], + "Resource": "arn:aws-iso-b:ec2:*:*:security-group/*", + "Condition": { + "StringEquals": { + "ec2:CreateAction": "CreateSecurityGroup" + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws-iso-b:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress", + "ec2:DeleteSecurityGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateLoadBalancer", + "elasticloadbalancing:CreateTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateListener", + "elasticloadbalancing:DeleteListener", + "elasticloadbalancing:CreateRule", + "elasticloadbalancing:DeleteRule" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-iso-b:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-iso-b:elasticloadbalancing:*:*:listener/net/*/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:listener/app/*/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:listener-rule/net/*/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:listener-rule/app/*/*/*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags" + ], + "Resource": [ + "arn:aws-iso-b:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-iso-b:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "StringEquals": { + "elasticloadbalancing:CreateAction": [ + "CreateTargetGroup", + "CreateLoadBalancer" + ] + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:ModifyLoadBalancerAttributes", + "elasticloadbalancing:SetIpAddressType", + "elasticloadbalancing:SetSecurityGroups", + "elasticloadbalancing:SetSubnets", + "elasticloadbalancing:DeleteLoadBalancer", + "elasticloadbalancing:ModifyTargetGroup", + "elasticloadbalancing:ModifyTargetGroupAttributes", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:RegisterTargets", + "elasticloadbalancing:DeregisterTargets" + ], + "Resource": "arn:aws-iso-b:elasticloadbalancing:*:*:targetgroup/*/*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:SetWebAcl", + "elasticloadbalancing:ModifyListener", + "elasticloadbalancing:AddListenerCertificates", + "elasticloadbalancing:RemoveListenerCertificates", + "elasticloadbalancing:ModifyRule" + ], + "Resource": "*" + } + ] +} diff --git a/v2.7/install/iam_policy_us-gov.json b/v2.7/install/iam_policy_us-gov.json new file mode 100644 index 000000000..97ccf2ebb --- /dev/null +++ b/v2.7/install/iam_policy_us-gov.json @@ -0,0 +1,242 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "iam:CreateServiceLinkedRole" + ], + "Resource": "*", + "Condition": { + "StringEquals": { + "iam:AWSServiceName": "elasticloadbalancing.amazonaws.com" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:DescribeAccountAttributes", + "ec2:DescribeAddresses", + "ec2:DescribeAvailabilityZones", + "ec2:DescribeInternetGateways", + "ec2:DescribeVpcs", + "ec2:DescribeVpcPeeringConnections", + "ec2:DescribeSubnets", + "ec2:DescribeSecurityGroups", + "ec2:DescribeInstances", + "ec2:DescribeNetworkInterfaces", + "ec2:DescribeTags", + "ec2:GetCoipPoolUsage", + "ec2:DescribeCoipPools", + "elasticloadbalancing:DescribeLoadBalancers", + "elasticloadbalancing:DescribeLoadBalancerAttributes", + "elasticloadbalancing:DescribeListeners", + "elasticloadbalancing:DescribeListenerCertificates", + "elasticloadbalancing:DescribeSSLPolicies", + "elasticloadbalancing:DescribeRules", + "elasticloadbalancing:DescribeTargetGroups", + "elasticloadbalancing:DescribeTargetGroupAttributes", + "elasticloadbalancing:DescribeTargetHealth", + "elasticloadbalancing:DescribeTags", + "elasticloadbalancing:DescribeTrustStores" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "cognito-idp:DescribeUserPoolClient", + "acm:ListCertificates", + "acm:DescribeCertificate", + "iam:ListServerCertificates", + "iam:GetServerCertificate", + "waf-regional:GetWebACL", + "waf-regional:GetWebACLForResource", + "waf-regional:AssociateWebACL", + "waf-regional:DisassociateWebACL", + "wafv2:GetWebACL", + "wafv2:GetWebACLForResource", + "wafv2:AssociateWebACL", + "wafv2:DisassociateWebACL", + "shield:GetSubscriptionState", + "shield:DescribeProtection", + "shield:CreateProtection", + "shield:DeleteProtection" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateSecurityGroup" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags" + ], + "Resource": "arn:aws-us-gov:ec2:*:*:security-group/*", + "Condition": { + "StringEquals": { + "ec2:CreateAction": "CreateSecurityGroup" + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws-us-gov:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "ec2:AuthorizeSecurityGroupIngress", + "ec2:RevokeSecurityGroupIngress", + "ec2:DeleteSecurityGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateLoadBalancer", + "elasticloadbalancing:CreateTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:CreateListener", + "elasticloadbalancing:DeleteListener", + "elasticloadbalancing:CreateRule", + "elasticloadbalancing:DeleteRule" + ], + "Resource": "*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-us-gov:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "true", + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags" + ], + "Resource": [ + "arn:aws-us-gov:elasticloadbalancing:*:*:listener/net/*/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:listener/app/*/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:listener-rule/net/*/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:listener-rule/app/*/*/*" + ] + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags" + ], + "Resource": [ + "arn:aws-us-gov:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws-us-gov:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "StringEquals": { + "elasticloadbalancing:CreateAction": [ + "CreateTargetGroup", + "CreateLoadBalancer" + ] + }, + "Null": { + "aws:RequestTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:ModifyLoadBalancerAttributes", + "elasticloadbalancing:SetIpAddressType", + "elasticloadbalancing:SetSecurityGroups", + "elasticloadbalancing:SetSubnets", + "elasticloadbalancing:DeleteLoadBalancer", + "elasticloadbalancing:ModifyTargetGroup", + "elasticloadbalancing:ModifyTargetGroupAttributes", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": "*", + "Condition": { + "Null": { + "aws:ResourceTag/elbv2.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:RegisterTargets", + "elasticloadbalancing:DeregisterTargets" + ], + "Resource": "arn:aws-us-gov:elasticloadbalancing:*:*:targetgroup/*/*" + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:SetWebAcl", + "elasticloadbalancing:ModifyListener", + "elasticloadbalancing:AddListenerCertificates", + "elasticloadbalancing:RemoveListenerCertificates", + "elasticloadbalancing:ModifyRule" + ], + "Resource": "*" + } + ] +} diff --git a/v2.7/install/iam_policy_v1_to_v2_additional.json b/v2.7/install/iam_policy_v1_to_v2_additional.json new file mode 100644 index 000000000..56e51dcfb --- /dev/null +++ b/v2.7/install/iam_policy_v1_to_v2_additional.json @@ -0,0 +1,36 @@ +{ + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "ec2:CreateTags", + "ec2:DeleteTags" + ], + "Resource": "arn:aws:ec2:*:*:security-group/*", + "Condition": { + "Null": { + "aws:ResourceTag/ingress.k8s.aws/cluster": "false" + } + } + }, + { + "Effect": "Allow", + "Action": [ + "elasticloadbalancing:AddTags", + "elasticloadbalancing:RemoveTags", + "elasticloadbalancing:DeleteTargetGroup" + ], + "Resource": [ + "arn:aws:elasticloadbalancing:*:*:targetgroup/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/*/*", + "arn:aws:elasticloadbalancing:*:*:loadbalancer/app/*/*" + ], + "Condition": { + "Null": { + "aws:ResourceTag/ingress.k8s.aws/cluster": "false" + } + } + } + ] +} \ No newline at end of file diff --git a/v2.7/install/v2_0_0_full.yaml b/v2.7/install/v2_0_0_full.yaml new file mode 100644 index 000000000..56dfa491d --- /dev/null +++ b/v2.7/install/v2_0_0_full.yaml @@ -0,0 +1,573 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.4.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + additionalPrinterColumns: + - JSONPath: .spec.serviceRef.name + description: The Kubernetes Service's name + name: SERVICE-NAME + type: string + - JSONPath: .spec.serviceRef.port + description: The Kubernetes Service's port + name: SERVICE-PORT + type: string + - JSONPath: .spec.targetType + description: The AWS TargetGroup's TargetType + name: TARGET-TYPE + type: string + - JSONPath: .spec.targetGroupARN + description: The AWS TargetGroup's Amazon Resource Name + name: ARN + priority: 1 + type: string + - JSONPath: .metadata.creationTimestamp + name: AGE + type: date + group: elbv2.k8s.aws + names: + categories: + - all + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer to + access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup peer. + If specified, none of the other fields can be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, this + must be a numerical port. When Port endpoints(ip TargetType) + is used, this can be either numerical or named port + on pods. if port is unspecified, it defaults to all + ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for the + TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: false + - name: v1beta1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + resources: + - configmaps + resourceNames: + - aws-load-balancer-controller-leader + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: + - apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.0.0 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None diff --git a/v2.7/install/v2_0_1_full.yaml b/v2.7/install/v2_0_1_full.yaml new file mode 100644 index 000000000..853361637 --- /dev/null +++ b/v2.7/install/v2_0_1_full.yaml @@ -0,0 +1,573 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.4.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + additionalPrinterColumns: + - JSONPath: .spec.serviceRef.name + description: The Kubernetes Service's name + name: SERVICE-NAME + type: string + - JSONPath: .spec.serviceRef.port + description: The Kubernetes Service's port + name: SERVICE-PORT + type: string + - JSONPath: .spec.targetType + description: The AWS TargetGroup's TargetType + name: TARGET-TYPE + type: string + - JSONPath: .spec.targetGroupARN + description: The AWS TargetGroup's Amazon Resource Name + name: ARN + priority: 1 + type: string + - JSONPath: .metadata.creationTimestamp + name: AGE + type: date + group: elbv2.k8s.aws + names: + categories: + - all + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer to + access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup peer. + If specified, none of the other fields can be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, this + must be a numerical port. When Port endpoints(ip TargetType) + is used, this can be either numerical or named port + on pods. if port is unspecified, it defaults to all + ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for the + TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: false + - name: v1beta1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + resources: + - configmaps + resourceNames: + - aws-load-balancer-controller-leader + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: + - apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.0.1 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None diff --git a/v2.7/install/v2_1_0_full.yaml b/v2.7/install/v2_1_0_full.yaml new file mode 100644 index 000000000..07a1c61dd --- /dev/null +++ b/v2.7/install/v2_1_0_full.yaml @@ -0,0 +1,581 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.4.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + additionalPrinterColumns: + - JSONPath: .spec.serviceRef.name + description: The Kubernetes Service's name + name: SERVICE-NAME + type: string + - JSONPath: .spec.serviceRef.port + description: The Kubernetes Service's port + name: SERVICE-PORT + type: string + - JSONPath: .spec.targetType + description: The AWS TargetGroup's TargetType + name: TARGET-TYPE + type: string + - JSONPath: .spec.targetGroupARN + description: The AWS TargetGroup's Amazon Resource Name + name: ARN + priority: 1 + type: string + - JSONPath: .metadata.creationTimestamp + name: AGE + type: date + group: elbv2.k8s.aws + names: + categories: + - all + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer to + access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup peer. + If specified, none of the other fields can be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, this + must be a numerical port. When Port endpoints(ip TargetType) + is used, this can be either numerical or named port + on pods. if port is unspecified, it defaults to all + ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for the + TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: false + - name: v1beta1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: + - apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.1.0 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None diff --git a/v2.7/install/v2_1_2_full.yaml b/v2.7/install/v2_1_2_full.yaml new file mode 100644 index 000000000..61fcd4d60 --- /dev/null +++ b/v2.7/install/v2_1_2_full.yaml @@ -0,0 +1,581 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.4.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + additionalPrinterColumns: + - JSONPath: .spec.serviceRef.name + description: The Kubernetes Service's name + name: SERVICE-NAME + type: string + - JSONPath: .spec.serviceRef.port + description: The Kubernetes Service's port + name: SERVICE-PORT + type: string + - JSONPath: .spec.targetType + description: The AWS TargetGroup's TargetType + name: TARGET-TYPE + type: string + - JSONPath: .spec.targetGroupARN + description: The AWS TargetGroup's Amazon Resource Name + name: ARN + priority: 1 + type: string + - JSONPath: .metadata.creationTimestamp + name: AGE + type: date + group: elbv2.k8s.aws + names: + categories: + - all + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer to + access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup peer. + If specified, none of the other fields can be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, this + must be a numerical port. When Port endpoints(ip TargetType) + is used, this can be either numerical or named port + on pods. if port is unspecified, it defaults to all + ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for the + TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: false + - name: v1beta1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: + - apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.1.2 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None diff --git a/v2.7/install/v2_1_3_full.yaml b/v2.7/install/v2_1_3_full.yaml new file mode 100644 index 000000000..4a18ae004 --- /dev/null +++ b/v2.7/install/v2_1_3_full.yaml @@ -0,0 +1,581 @@ +apiVersion: apiextensions.k8s.io/v1beta1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.4.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + additionalPrinterColumns: + - JSONPath: .spec.serviceRef.name + description: The Kubernetes Service's name + name: SERVICE-NAME + type: string + - JSONPath: .spec.serviceRef.port + description: The Kubernetes Service's port + name: SERVICE-PORT + type: string + - JSONPath: .spec.targetType + description: The AWS TargetGroup's TargetType + name: TARGET-TYPE + type: string + - JSONPath: .spec.targetGroupARN + description: The AWS TargetGroup's Amazon Resource Name + name: ARN + priority: 1 + type: string + - JSONPath: .metadata.creationTimestamp + name: AGE + type: date + group: elbv2.k8s.aws + names: + categories: + - all + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + subresources: + status: {} + validation: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer to + access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup peer. + If specified, none of the other fields can be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, this + must be a numerical port. When Port endpoints(ip TargetType) + is used, this can be either numerical or named port + on pods. if port is unspecified, it defaults to all + ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for the + TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + version: v1alpha1 + versions: + - name: v1alpha1 + served: true + storage: false + - name: v1beta1 + served: true + storage: true +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: + - apiGroups: + - "" + resources: + - configmaps + verbs: + - create + - apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: + - apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update + - apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update + - apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update + - apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: + - kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.1.3 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1beta1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: + - clientConfig: + caBundle: Cg== + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None diff --git a/v2.7/install/v2_2_0_full.yaml b/v2.7/install/v2_2_0_full.yaml new file mode 100644 index 000000000..03138be25 --- /dev/null +++ b/v2.7/install/v2_2_0_full.yaml @@ -0,0 +1,975 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: ingressclassparams.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: IngressClassParams + listKind: IngressClassParamsList + plural: ingressclassparams + singular: ingressclassparams + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The Ingress Group name + jsonPath: .spec.group.name + name: GROUP-NAME + type: string + - description: The AWS Load Balancer scheme + jsonPath: .spec.scheme + name: SCHEME + type: string + - description: The AWS Load Balancer ipAddressType + jsonPath: .spec.ipAddressType + name: IP-ADDRESS-TYPE + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: IngressClassParams is the Schema for the IngressClassParams API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: IngressClassParamsSpec defines the desired state of IngressClassParams + properties: + group: + description: Group defines the IngressGroup for all Ingresses that + belong to IngressClass with this IngressClassParams. + properties: + name: + description: Name is the name of IngressGroup. + type: string + required: + - name + type: object + ipAddressType: + description: IPAddressType defines the ip address type for all Ingresses + that belong to IngressClass with this IngressClassParams. + enum: + - ipv4 + - dualstack + type: string + namespaceSelector: + description: NamespaceSelector restrict the namespaces of Ingresses + that are allowed to specify the IngressClass with this IngressClassParams. + * if absent or present but empty, it selects all namespaces. + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + scheme: + description: Scheme defines the scheme for all Ingresses that belong + to IngressClass with this IngressClassParams. + enum: + - internal + - internet-facing + type: string + tags: + description: Tags defines list of Tags on AWS resources provisioned + for Ingresses that belong to IngressClass with this IngressClassParams. + items: + description: Tag defines a AWS Tag on resources. + properties: + key: + description: The key of the tag. + type: string + value: + description: The value of the tag. + type: string + required: + - key + - value + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + versions: + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1alpha1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking defines the networking rules to allow ELBV2 + LoadBalancer to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + description: NetworkingIngressRule defines a particular set + of traffic that is allowed to access TargetGroup's targets. + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + description: NetworkingPort defines the port and protocol + for networking rules. + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + nodeSelector: + description: node selector for instance type target groups to only + register certain nodes + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create +- apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: +- apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update +- apiGroups: + - elbv2.k8s.aws + resources: + - ingressclassparams + verbs: + - get + - list + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update +- apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.2.0 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + priorityClassName: system-cluster-critical + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-networking-v1beta1-ingress + failurePolicy: Fail + matchPolicy: Equivalent + name: vingress.elbv2.k8s.aws + rules: + - apiGroups: + - networking.k8s.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + sideEffects: None diff --git a/v2.7/install/v2_2_1_full.yaml b/v2.7/install/v2_2_1_full.yaml new file mode 100644 index 000000000..5c1775d2d --- /dev/null +++ b/v2.7/install/v2_2_1_full.yaml @@ -0,0 +1,976 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: ingressclassparams.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: IngressClassParams + listKind: IngressClassParamsList + plural: ingressclassparams + singular: ingressclassparams + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The Ingress Group name + jsonPath: .spec.group.name + name: GROUP-NAME + type: string + - description: The AWS Load Balancer scheme + jsonPath: .spec.scheme + name: SCHEME + type: string + - description: The AWS Load Balancer ipAddressType + jsonPath: .spec.ipAddressType + name: IP-ADDRESS-TYPE + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: IngressClassParams is the Schema for the IngressClassParams API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: IngressClassParamsSpec defines the desired state of IngressClassParams + properties: + group: + description: Group defines the IngressGroup for all Ingresses that + belong to IngressClass with this IngressClassParams. + properties: + name: + description: Name is the name of IngressGroup. + type: string + required: + - name + type: object + ipAddressType: + description: IPAddressType defines the ip address type for all Ingresses + that belong to IngressClass with this IngressClassParams. + enum: + - ipv4 + - dualstack + type: string + namespaceSelector: + description: NamespaceSelector restrict the namespaces of Ingresses + that are allowed to specify the IngressClass with this IngressClassParams. + * if absent or present but empty, it selects all namespaces. + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + scheme: + description: Scheme defines the scheme for all Ingresses that belong + to IngressClass with this IngressClassParams. + enum: + - internal + - internet-facing + type: string + tags: + description: Tags defines list of Tags on AWS resources provisioned + for Ingresses that belong to IngressClass with this IngressClassParams. + items: + description: Tag defines a AWS Tag on resources. + properties: + key: + description: The key of the tag. + type: string + value: + description: The value of the tag. + type: string + required: + - key + - value + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + versions: + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1alpha1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking defines the networking rules to allow ELBV2 + LoadBalancer to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + description: NetworkingIngressRule defines a particular set + of traffic that is allowed to access TargetGroup's targets. + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + description: NetworkingPort defines the port and protocol + for networking rules. + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + nodeSelector: + description: node selector for instance type target groups to only + register certain nodes + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + minLength: 1 + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create +- apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: +- apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update +- apiGroups: + - elbv2.k8s.aws + resources: + - ingressclassparams + verbs: + - get + - list + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update +- apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.2.1 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + priorityClassName: system-cluster-critical + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-networking-v1beta1-ingress + failurePolicy: Fail + matchPolicy: Equivalent + name: vingress.elbv2.k8s.aws + rules: + - apiGroups: + - networking.k8s.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + sideEffects: None diff --git a/v2.7/install/v2_2_2_full.yaml b/v2.7/install/v2_2_2_full.yaml new file mode 100644 index 000000000..50458ffa4 --- /dev/null +++ b/v2.7/install/v2_2_2_full.yaml @@ -0,0 +1,976 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: ingressclassparams.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: IngressClassParams + listKind: IngressClassParamsList + plural: ingressclassparams + singular: ingressclassparams + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The Ingress Group name + jsonPath: .spec.group.name + name: GROUP-NAME + type: string + - description: The AWS Load Balancer scheme + jsonPath: .spec.scheme + name: SCHEME + type: string + - description: The AWS Load Balancer ipAddressType + jsonPath: .spec.ipAddressType + name: IP-ADDRESS-TYPE + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: IngressClassParams is the Schema for the IngressClassParams API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: IngressClassParamsSpec defines the desired state of IngressClassParams + properties: + group: + description: Group defines the IngressGroup for all Ingresses that + belong to IngressClass with this IngressClassParams. + properties: + name: + description: Name is the name of IngressGroup. + type: string + required: + - name + type: object + ipAddressType: + description: IPAddressType defines the ip address type for all Ingresses + that belong to IngressClass with this IngressClassParams. + enum: + - ipv4 + - dualstack + type: string + namespaceSelector: + description: NamespaceSelector restrict the namespaces of Ingresses + that are allowed to specify the IngressClass with this IngressClassParams. + * if absent or present but empty, it selects all namespaces. + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + scheme: + description: Scheme defines the scheme for all Ingresses that belong + to IngressClass with this IngressClassParams. + enum: + - internal + - internet-facing + type: string + tags: + description: Tags defines list of Tags on AWS resources provisioned + for Ingresses that belong to IngressClass with this IngressClassParams. + items: + description: Tag defines a AWS Tag on resources. + properties: + key: + description: The key of the tag. + type: string + value: + description: The value of the tag. + type: string + required: + - key + - value + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + versions: + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1alpha1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking defines the networking rules to allow ELBV2 + LoadBalancer to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + description: NetworkingIngressRule defines a particular set + of traffic that is allowed to access TargetGroup's targets. + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + description: NetworkingPort defines the port and protocol + for networking rules. + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + nodeSelector: + description: node selector for instance type target groups to only + register certain nodes + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + minLength: 1 + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create +- apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: +- apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update +- apiGroups: + - elbv2.k8s.aws + resources: + - ingressclassparams + verbs: + - get + - list + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update +- apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.2.2 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + priorityClassName: system-cluster-critical + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-networking-v1beta1-ingress + failurePolicy: Fail + matchPolicy: Equivalent + name: vingress.elbv2.k8s.aws + rules: + - apiGroups: + - networking.k8s.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + sideEffects: None diff --git a/v2.7/install/v2_2_3_full.yaml b/v2.7/install/v2_2_3_full.yaml new file mode 100644 index 000000000..2a1c52a68 --- /dev/null +++ b/v2.7/install/v2_2_3_full.yaml @@ -0,0 +1,976 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: ingressclassparams.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: IngressClassParams + listKind: IngressClassParamsList + plural: ingressclassparams + singular: ingressclassparams + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The Ingress Group name + jsonPath: .spec.group.name + name: GROUP-NAME + type: string + - description: The AWS Load Balancer scheme + jsonPath: .spec.scheme + name: SCHEME + type: string + - description: The AWS Load Balancer ipAddressType + jsonPath: .spec.ipAddressType + name: IP-ADDRESS-TYPE + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: IngressClassParams is the Schema for the IngressClassParams API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: IngressClassParamsSpec defines the desired state of IngressClassParams + properties: + group: + description: Group defines the IngressGroup for all Ingresses that + belong to IngressClass with this IngressClassParams. + properties: + name: + description: Name is the name of IngressGroup. + type: string + required: + - name + type: object + ipAddressType: + description: IPAddressType defines the ip address type for all Ingresses + that belong to IngressClass with this IngressClassParams. + enum: + - ipv4 + - dualstack + type: string + namespaceSelector: + description: NamespaceSelector restrict the namespaces of Ingresses + that are allowed to specify the IngressClass with this IngressClassParams. + * if absent or present but empty, it selects all namespaces. + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + scheme: + description: Scheme defines the scheme for all Ingresses that belong + to IngressClass with this IngressClassParams. + enum: + - internal + - internet-facing + type: string + tags: + description: Tags defines list of Tags on AWS resources provisioned + for Ingresses that belong to IngressClass with this IngressClassParams. + items: + description: Tag defines a AWS Tag on resources. + properties: + key: + description: The key of the tag. + type: string + value: + description: The value of the tag. + type: string + required: + - key + - value + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + versions: + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1alpha1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking defines the networking rules to allow ELBV2 + LoadBalancer to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + description: NetworkingIngressRule defines a particular set + of traffic that is allowed to access TargetGroup's targets. + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + description: NetworkingPort defines the port and protocol + for networking rules. + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + nodeSelector: + description: node selector for instance type target groups to only + register certain nodes + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + minLength: 1 + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create +- apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: +- apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update +- apiGroups: + - elbv2.k8s.aws + resources: + - ingressclassparams + verbs: + - get + - list + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update +- apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.2.3 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + priorityClassName: system-cluster-critical + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-networking-v1beta1-ingress + failurePolicy: Fail + matchPolicy: Equivalent + name: vingress.elbv2.k8s.aws + rules: + - apiGroups: + - networking.k8s.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + sideEffects: None diff --git a/v2.7/install/v2_2_4_full.yaml b/v2.7/install/v2_2_4_full.yaml new file mode 100644 index 000000000..945881d0e --- /dev/null +++ b/v2.7/install/v2_2_4_full.yaml @@ -0,0 +1,976 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: ingressclassparams.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: IngressClassParams + listKind: IngressClassParamsList + plural: ingressclassparams + singular: ingressclassparams + scope: Cluster + versions: + - additionalPrinterColumns: + - description: The Ingress Group name + jsonPath: .spec.group.name + name: GROUP-NAME + type: string + - description: The AWS Load Balancer scheme + jsonPath: .spec.scheme + name: SCHEME + type: string + - description: The AWS Load Balancer ipAddressType + jsonPath: .spec.ipAddressType + name: IP-ADDRESS-TYPE + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: IngressClassParams is the Schema for the IngressClassParams API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: IngressClassParamsSpec defines the desired state of IngressClassParams + properties: + group: + description: Group defines the IngressGroup for all Ingresses that + belong to IngressClass with this IngressClassParams. + properties: + name: + description: Name is the name of IngressGroup. + type: string + required: + - name + type: object + ipAddressType: + description: IPAddressType defines the ip address type for all Ingresses + that belong to IngressClass with this IngressClassParams. + enum: + - ipv4 + - dualstack + type: string + namespaceSelector: + description: NamespaceSelector restrict the namespaces of Ingresses + that are allowed to specify the IngressClass with this IngressClassParams. + * if absent or present but empty, it selects all namespaces. + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + scheme: + description: Scheme defines the scheme for all Ingresses that belong + to IngressClass with this IngressClassParams. + enum: + - internal + - internet-facing + type: string + tags: + description: Tags defines list of Tags on AWS resources provisioned + for Ingresses that belong to IngressClass with this IngressClassParams. + items: + description: Tag defines a AWS Tag on resources. + properties: + key: + description: The key of the tag. + type: string + value: + description: The value of the tag. + type: string + required: + - key + - value + type: object + type: array + type: object + type: object + served: true + storage: true + subresources: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + annotations: + controller-gen.kubebuilder.io/version: v0.5.0 + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: targetgroupbindings.elbv2.k8s.aws +spec: + group: elbv2.k8s.aws + names: + kind: TargetGroupBinding + listKind: TargetGroupBindingList + plural: targetgroupbindings + singular: targetgroupbinding + scope: Namespaced + versions: + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1alpha1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking provides the networking setup for ELBV2 LoadBalancer + to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: false + subresources: + status: {} + - additionalPrinterColumns: + - description: The Kubernetes Service's name + jsonPath: .spec.serviceRef.name + name: SERVICE-NAME + type: string + - description: The Kubernetes Service's port + jsonPath: .spec.serviceRef.port + name: SERVICE-PORT + type: string + - description: The AWS TargetGroup's TargetType + jsonPath: .spec.targetType + name: TARGET-TYPE + type: string + - description: The AWS TargetGroup's Amazon Resource Name + jsonPath: .spec.targetGroupARN + name: ARN + priority: 1 + type: string + - jsonPath: .metadata.creationTimestamp + name: AGE + type: date + name: v1beta1 + schema: + openAPIV3Schema: + description: TargetGroupBinding is the Schema for the TargetGroupBinding API + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + type: object + spec: + description: TargetGroupBindingSpec defines the desired state of TargetGroupBinding + properties: + networking: + description: networking defines the networking rules to allow ELBV2 + LoadBalancer to access targets in TargetGroup. + properties: + ingress: + description: List of ingress rules to allow ELBV2 LoadBalancer + to access targets in TargetGroup. + items: + description: NetworkingIngressRule defines a particular set + of traffic that is allowed to access TargetGroup's targets. + properties: + from: + description: List of peers which should be able to access + the targets in TargetGroup. At least one NetworkingPeer + should be specified. + items: + description: NetworkingPeer defines the source/destination + peer for networking rules. + properties: + ipBlock: + description: IPBlock defines an IPBlock peer. If specified, + none of the other fields can be set. + properties: + cidr: + description: CIDR is the network CIDR. Both IPV4 + or IPV6 CIDR are accepted. + type: string + required: + - cidr + type: object + securityGroup: + description: SecurityGroup defines a SecurityGroup + peer. If specified, none of the other fields can + be set. + properties: + groupID: + description: GroupID is the EC2 SecurityGroupID. + type: string + required: + - groupID + type: object + type: object + type: array + ports: + description: List of ports which should be made accessible + on the targets in TargetGroup. If ports is empty or unspecified, + it defaults to all ports with TCP. + items: + description: NetworkingPort defines the port and protocol + for networking rules. + properties: + port: + anyOf: + - type: integer + - type: string + description: The port which traffic must match. When + NodePort endpoints(instance TargetType) is used, + this must be a numerical port. When Port endpoints(ip + TargetType) is used, this can be either numerical + or named port on pods. if port is unspecified, it + defaults to all ports. + x-kubernetes-int-or-string: true + protocol: + description: The protocol which traffic must match. + If protocol is unspecified, it defaults to TCP. + enum: + - TCP + - UDP + type: string + type: object + type: array + required: + - from + - ports + type: object + type: array + type: object + nodeSelector: + description: node selector for instance type target groups to only + register certain nodes + properties: + matchExpressions: + description: matchExpressions is a list of label selector requirements. + The requirements are ANDed. + items: + description: A label selector requirement is a selector that + contains values, a key, and an operator that relates the key + and values. + properties: + key: + description: key is the label key that the selector applies + to. + type: string + operator: + description: operator represents a key's relationship to + a set of values. Valid operators are In, NotIn, Exists + and DoesNotExist. + type: string + values: + description: values is an array of string values. If the + operator is In or NotIn, the values array must be non-empty. + If the operator is Exists or DoesNotExist, the values + array must be empty. This array is replaced during a strategic + merge patch. + items: + type: string + type: array + required: + - key + - operator + type: object + type: array + matchLabels: + additionalProperties: + type: string + description: matchLabels is a map of {key,value} pairs. A single + {key,value} in the matchLabels map is equivalent to an element + of matchExpressions, whose key field is "key", the operator + is "In", and the values array contains only "value". The requirements + are ANDed. + type: object + type: object + serviceRef: + description: serviceRef is a reference to a Kubernetes Service and + ServicePort. + properties: + name: + description: Name is the name of the Service. + type: string + port: + anyOf: + - type: integer + - type: string + description: Port is the port of the ServicePort. + x-kubernetes-int-or-string: true + required: + - name + - port + type: object + targetGroupARN: + description: targetGroupARN is the Amazon Resource Name (ARN) for + the TargetGroup. + minLength: 1 + type: string + targetType: + description: targetType is the TargetType of TargetGroup. If unspecified, + it will be automatically inferred. + enum: + - instance + - ip + type: string + required: + - serviceRef + - targetGroupARN + type: object + status: + description: TargetGroupBindingStatus defines the observed state of TargetGroupBinding + properties: + observedGeneration: + description: The generation observed by the TargetGroupBinding controller. + format: int64 + type: integer + type: object + type: object + served: true + storage: true + subresources: + status: {} +status: + acceptedNames: + kind: "" + plural: "" + conditions: [] + storedVersions: [] +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-role + namespace: kube-system +rules: +- apiGroups: + - "" + resources: + - configmaps + verbs: + - create +- apiGroups: + - "" + resourceNames: + - aws-load-balancer-controller-leader + resources: + - configmaps + verbs: + - get + - update + - patch +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + creationTimestamp: null + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-role +rules: +- apiGroups: + - "" + resources: + - endpoints + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - events + verbs: + - create + - patch +- apiGroups: + - "" + resources: + - namespaces + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - nodes + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - pods/status + verbs: + - patch + - update +- apiGroups: + - "" + resources: + - secrets + verbs: + - get + - list + - watch +- apiGroups: + - "" + resources: + - services + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - "" + resources: + - services/status + verbs: + - patch + - update +- apiGroups: + - elbv2.k8s.aws + resources: + - ingressclassparams + verbs: + - get + - list + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings + verbs: + - create + - delete + - get + - list + - patch + - update + - watch +- apiGroups: + - elbv2.k8s.aws + resources: + - targetgroupbindings/status + verbs: + - patch + - update +- apiGroups: + - extensions + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - extensions + resources: + - ingresses/status + verbs: + - patch + - update +- apiGroups: + - networking.k8s.io + resources: + - ingressclasses + verbs: + - get + - list + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - get + - list + - patch + - update + - watch +- apiGroups: + - networking.k8s.io + resources: + - ingresses/status + verbs: + - patch + - update +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-leader-election-rolebinding + namespace: kube-system +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: aws-load-balancer-controller-leader-election-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller-rolebinding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: aws-load-balancer-controller-role +subjects: +- kind: ServiceAccount + name: aws-load-balancer-controller + namespace: kube-system +--- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook-service + namespace: kube-system +spec: + ports: + - port: 443 + targetPort: 9443 + selector: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-controller + namespace: kube-system +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + template: + metadata: + labels: + app.kubernetes.io/component: controller + app.kubernetes.io/name: aws-load-balancer-controller + spec: + containers: + - args: + - --cluster-name=your-cluster-name + - --ingress-class=alb + image: amazon/aws-alb-ingress-controller:v2.2.4 + livenessProbe: + failureThreshold: 2 + httpGet: + path: /healthz + port: 61779 + scheme: HTTP + initialDelaySeconds: 30 + timeoutSeconds: 10 + name: controller + ports: + - containerPort: 9443 + name: webhook-server + protocol: TCP + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 200Mi + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsNonRoot: true + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + priorityClassName: system-cluster-critical + securityContext: + fsGroup: 1337 + serviceAccountName: aws-load-balancer-controller + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Certificate +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-serving-cert + namespace: kube-system +spec: + dnsNames: + - aws-load-balancer-webhook-service.kube-system.svc + - aws-load-balancer-webhook-service.kube-system.svc.cluster.local + issuerRef: + kind: Issuer + name: aws-load-balancer-selfsigned-issuer + secretName: aws-load-balancer-webhook-tls +--- +apiVersion: cert-manager.io/v1alpha2 +kind: Issuer +metadata: + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-selfsigned-issuer + namespace: kube-system +spec: + selfSigned: {} +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-v1-pod + failurePolicy: Fail + name: mpod.elbv2.k8s.aws + namespaceSelector: + matchExpressions: + - key: elbv2.k8s.aws/pod-readiness-gate-inject + operator: In + values: + - enabled + objectSelector: + matchExpressions: + - key: app.kubernetes.io/name + operator: NotIn + values: + - aws-load-balancer-controller + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: mtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +--- +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: kube-system/aws-load-balancer-serving-cert + labels: + app.kubernetes.io/name: aws-load-balancer-controller + name: aws-load-balancer-webhook +webhooks: +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-elbv2-k8s-aws-v1beta1-targetgroupbinding + failurePolicy: Fail + name: vtargetgroupbinding.elbv2.k8s.aws + rules: + - apiGroups: + - elbv2.k8s.aws + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - targetgroupbindings + sideEffects: None +- admissionReviewVersions: + - v1beta1 + clientConfig: + service: + name: aws-load-balancer-webhook-service + namespace: kube-system + path: /validate-networking-v1beta1-ingress + failurePolicy: Fail + matchPolicy: Equivalent + name: vingress.elbv2.k8s.aws + rules: + - apiGroups: + - networking.k8s.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - ingresses + sideEffects: None diff --git a/v2.7/release/index.html b/v2.7/release/index.html new file mode 100644 index 000000000..a1a207517 --- /dev/null +++ b/v2.7/release/index.html @@ -0,0 +1,1036 @@ + + + + + + + + + + + + + + + + + AWS Load Balancer Controller Release Process - AWS Load Balancer Controller + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    + +
    + +
    + +
    + +
    + + + + + + + +
    +
    + + + +
    +
    +
    + + + + + + +
    +
    +
    + + + +
    +
    +
    + + +
    +
    +
    + + +
    +
    + + + + + + + +

    AWS Load Balancer Controller Release Process

    +

    Create the Release Commit

    +

    Run hack/set-version to set the new version number and commit the resulting changes. +This is called the "release commit".

    +

    Merge the Release Commit

    +

    Create a pull request with the release commit. Get it reviewed and merged to main.

    +

    Upon merge to main, GitHub Actions will create a release tag for the new release.

    +

    If the release is a ".0-beta.1" release, GitHub Actions will also create a release branch +for the minor version.

    +

    (Remaining steps in process yet to be documented.)

    + + + + + + + +
    +
    +
    + +
    + + + + +
    +
    +
    +
    + + + + + + + + + + + + + \ No newline at end of file diff --git a/v2.7/search/search_index.json b/v2.7/search/search_index.json new file mode 100644 index 000000000..ae5719a35 --- /dev/null +++ b/v2.7/search/search_index.json @@ -0,0 +1 @@ +{"config":{"lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"A Kubernetes controller for Elastic Load Balancers AWS Load Balancer Controller \u00b6 AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster. It satisfies Kubernetes Ingress resources by provisioning Application Load Balancers . It satisfies Kubernetes Service resources by provisioning Network Load Balancers . This project was formerly known as \"AWS ALB Ingress Controller\", we rebranded it to be \"AWS Load Balancer Controller\". AWS ALB Ingress Controller was originated by Ticketmaster and CoreOS as part of Ticketmaster's move to AWS and CoreOS Tectonic. Learn more about Ticketmaster's Kubernetes initiative from Justin Dean's video at Tectonic Summit . AWS ALB Ingress Controller was donated to Kubernetes SIG-AWS to allow AWS, CoreOS, Ticketmaster and other SIG-AWS contributors to officially maintain the project. SIG-AWS reached this consensus on June 1, 2018. Support Policy \u00b6 Currently, AWS provides security updates and bug fixes to the latest available minor versions of AWS LBC. For other ad-hoc supports on older versions, please reach out through AWS support ticket.","title":"Welcome"},{"location":"#aws-load-balancer-controller","text":"AWS Load Balancer Controller is a controller to help manage Elastic Load Balancers for a Kubernetes cluster. It satisfies Kubernetes Ingress resources by provisioning Application Load Balancers . It satisfies Kubernetes Service resources by provisioning Network Load Balancers . This project was formerly known as \"AWS ALB Ingress Controller\", we rebranded it to be \"AWS Load Balancer Controller\". AWS ALB Ingress Controller was originated by Ticketmaster and CoreOS as part of Ticketmaster's move to AWS and CoreOS Tectonic. Learn more about Ticketmaster's Kubernetes initiative from Justin Dean's video at Tectonic Summit . AWS ALB Ingress Controller was donated to Kubernetes SIG-AWS to allow AWS, CoreOS, Ticketmaster and other SIG-AWS contributors to officially maintain the project. SIG-AWS reached this consensus on June 1, 2018.","title":"AWS Load Balancer Controller"},{"location":"#support-policy","text":"Currently, AWS provides security updates and bug fixes to the latest available minor versions of AWS LBC. For other ad-hoc supports on older versions, please reach out through AWS support ticket.","title":"Support Policy"},{"location":"CONTRIBUTING/","text":"Contributing Guidelines \u00b6 Welcome to Kubernetes. We are excited about the prospect of you joining our community ! The Kubernetes community abides by the CNCF code of conduct . Here is an excerpt: As contributors and maintainers of this project, and in the interest of fostering an open and welcoming community, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities. Getting Started \u00b6 Building the project \u00b6 Controller development documentation has instructions on how to build the project and project specific expectations. Contributing to docs \u00b6 The documentation is generated using Material for MkDocs . In order to generate and preview docs locally, use the steps below - Install pipenv run make docs-preview . This will generate and serve docs locally at http://127.0.0.1:8000 Contributing \u00b6 We also have more documentation on how to get started contributing here: Contributor License Agreement Kubernetes projects require that you sign a Contributor License Agreement (CLA) before we can accept your pull requests Kubernetes Contributor Guide - Main contributor documentation, or you can just jump directly to the contributing section Contributor Cheat Sheet - Common resources for existing developers Mentorship \u00b6 Mentoring Initiatives - We have a diverse set of mentorship programs available that are always looking for volunteers! Contact Information \u00b6 Slack channel Mailing list","title":"Contributing Guidelines"},{"location":"CONTRIBUTING/#contributing-guidelines","text":"Welcome to Kubernetes. We are excited about the prospect of you joining our community ! The Kubernetes community abides by the CNCF code of conduct . Here is an excerpt: As contributors and maintainers of this project, and in the interest of fostering an open and welcoming community, we pledge to respect all people who contribute through reporting issues, posting feature requests, updating documentation, submitting pull requests or patches, and other activities.","title":"Contributing Guidelines"},{"location":"CONTRIBUTING/#getting-started","text":"","title":"Getting Started"},{"location":"CONTRIBUTING/#building-the-project","text":"Controller development documentation has instructions on how to build the project and project specific expectations.","title":"Building the project"},{"location":"CONTRIBUTING/#contributing-to-docs","text":"The documentation is generated using Material for MkDocs . In order to generate and preview docs locally, use the steps below - Install pipenv run make docs-preview . This will generate and serve docs locally at http://127.0.0.1:8000","title":"Contributing to docs"},{"location":"CONTRIBUTING/#contributing","text":"We also have more documentation on how to get started contributing here: Contributor License Agreement Kubernetes projects require that you sign a Contributor License Agreement (CLA) before we can accept your pull requests Kubernetes Contributor Guide - Main contributor documentation, or you can just jump directly to the contributing section Contributor Cheat Sheet - Common resources for existing developers","title":"Contributing"},{"location":"CONTRIBUTING/#mentorship","text":"Mentoring Initiatives - We have a diverse set of mentorship programs available that are always looking for volunteers!","title":"Mentorship"},{"location":"CONTRIBUTING/#contact-information","text":"Slack channel Mailing list","title":"Contact Information"},{"location":"code-of-conduct/","text":"Kubernetes Community Code of Conduct \u00b6 Please refer to our Kubernetes Community Code of Conduct","title":"Kubernetes Community Code of Conduct"},{"location":"code-of-conduct/#kubernetes-community-code-of-conduct","text":"Please refer to our Kubernetes Community Code of Conduct","title":"Kubernetes Community Code of Conduct"},{"location":"controller-devel/","text":"AWS Load Balancer Controller Development Guide \u00b6 We'll walk you through the setup to start contributing to the AWS Load Balancer Controller project. No matter if you're contributing code or docs, follow the steps below to set up your development environment. Issue before PR Of course we're happy about code drops via PRs, however, in order to give us time to plan ahead and also to avoid disappointment, consider creating an issue first and submit a PR later. This also helps us to coordinate between different contributors and should in general help keeping everyone happy. Prerequisites \u00b6 Please ensure that you have properly installed Go . Go version We recommend to use a Go version of 1.14 or above for development. Fork upstream repository \u00b6 The first step in setting up your AWS Load Balancer controller development environment is to fork the upstream AWS Load Balancer controller repository to your personal Github account. Ensure source code organization directories exist \u00b6 Make sure in your $GOPATH/src that you have directories for the sigs.k8s.io organization: mkdir -p $GOPATH /src/github.com/sigs.k8s.io git clone forked repository and add upstream remote \u00b6 For the forked repository, you will git clone the repository into the appropriate folder in your $GOPATH . Once git clone 'd, you will want to set up a Git remote called \"upstream\" (remember that \"origin\" will be pointing at your forked repository location in your personal Github space). You can use this script to do this for you: GITHUB_ID = \"your GH username\" cd $GOPATH /src/github.com/sigs.k8s.io git clone git@github.com: $GITHUB_ID /aws-load-balancer-controller cd aws-load-balancer-controller/ git remote add upstream git@github.com:kubernetes-sigs/aws-load-balancer-controller git fetch --all Create your local branch \u00b6 Next, you create a local branch where you work on your feature or bug fix. Let's say you want to enhance the docs, so set BRANCH_NAME=docs-improve and then: git fetch --all && git checkout -b $BRANCH_NAME upstream/main Commit changes \u00b6 Make your changes locally, commit and push using: git commit -a -m \"improves the docs a lot\" git push origin $BRANCH_NAME Create a pull request \u00b6 Finally, submit a pull request against the upstream source repository. We monitor the GitHub repo and try to follow up with comments within a working day. Building the controller \u00b6 To build the controller binary, run the following command. make controller To install CRDs into a Kubernetes cluster, run the following command. make install To uninstall CRD from a Kubernetes cluster, run the following command. make uninstall To build the container image for the controller and push to a container registry, run the following command. make docker-push To deploy the CRDs and the container image to a Kubernetes cluster, run the following command. make deploy","title":"AWS Load Balancer Controller Development Guide"},{"location":"controller-devel/#aws-load-balancer-controller-development-guide","text":"We'll walk you through the setup to start contributing to the AWS Load Balancer Controller project. No matter if you're contributing code or docs, follow the steps below to set up your development environment. Issue before PR Of course we're happy about code drops via PRs, however, in order to give us time to plan ahead and also to avoid disappointment, consider creating an issue first and submit a PR later. This also helps us to coordinate between different contributors and should in general help keeping everyone happy.","title":"AWS Load Balancer Controller Development Guide"},{"location":"controller-devel/#prerequisites","text":"Please ensure that you have properly installed Go . Go version We recommend to use a Go version of 1.14 or above for development.","title":"Prerequisites"},{"location":"controller-devel/#fork-upstream-repository","text":"The first step in setting up your AWS Load Balancer controller development environment is to fork the upstream AWS Load Balancer controller repository to your personal Github account.","title":"Fork upstream repository"},{"location":"controller-devel/#ensure-source-code-organization-directories-exist","text":"Make sure in your $GOPATH/src that you have directories for the sigs.k8s.io organization: mkdir -p $GOPATH /src/github.com/sigs.k8s.io","title":"Ensure source code organization directories exist"},{"location":"controller-devel/#git-clone-forked-repository-and-add-upstream-remote","text":"For the forked repository, you will git clone the repository into the appropriate folder in your $GOPATH . Once git clone 'd, you will want to set up a Git remote called \"upstream\" (remember that \"origin\" will be pointing at your forked repository location in your personal Github space). You can use this script to do this for you: GITHUB_ID = \"your GH username\" cd $GOPATH /src/github.com/sigs.k8s.io git clone git@github.com: $GITHUB_ID /aws-load-balancer-controller cd aws-load-balancer-controller/ git remote add upstream git@github.com:kubernetes-sigs/aws-load-balancer-controller git fetch --all","title":"git clone forked repository and add upstream remote"},{"location":"controller-devel/#create-your-local-branch","text":"Next, you create a local branch where you work on your feature or bug fix. Let's say you want to enhance the docs, so set BRANCH_NAME=docs-improve and then: git fetch --all && git checkout -b $BRANCH_NAME upstream/main","title":"Create your local branch"},{"location":"controller-devel/#commit-changes","text":"Make your changes locally, commit and push using: git commit -a -m \"improves the docs a lot\" git push origin $BRANCH_NAME","title":"Commit changes"},{"location":"controller-devel/#create-a-pull-request","text":"Finally, submit a pull request against the upstream source repository. We monitor the GitHub repo and try to follow up with comments within a working day.","title":"Create a pull request"},{"location":"controller-devel/#building-the-controller","text":"To build the controller binary, run the following command. make controller To install CRDs into a Kubernetes cluster, run the following command. make install To uninstall CRD from a Kubernetes cluster, run the following command. make uninstall To build the container image for the controller and push to a container registry, run the following command. make docker-push To deploy the CRDs and the container image to a Kubernetes cluster, run the following command. make deploy","title":"Building the controller"},{"location":"how-it-works/","text":"How AWS Load Balancer controller works \u00b6 Design \u00b6 The following diagram details the AWS components this controller creates. It also demonstrates the route ingress traffic takes from the ALB to the Kubernetes cluster. Note The controller manages the configurations of the resources it creates, and we do not recommend out-of-band modifications to these resources because the controller may revert the manual changes during reconciliation. We recommend to use configuration options provided as best practice, such as ingress and service annotations, controller command line flags and IngressClassParams. Ingress Creation \u00b6 This section describes each step (circle) above. This example demonstrates satisfying 1 ingress resource. [1] : The controller watches for ingress events from the API server. When it finds ingress resources that satisfy its requirements, it begins the creation of AWS resources. [2] : An ALB (ELBv2) is created in AWS for the new ingress resource. This ALB can be internet-facing or internal. You can also specify the subnets it's created in using annotations. [3] : Target Groups are created in AWS for each unique Kubernetes service described in the ingress resource. [4] : Listeners are created for every port detailed in your ingress resource annotations. When no port is specified, sensible defaults ( 80 or 443 ) are used. Certificates may also be attached via annotations. [5] : Rules are created for each path specified in your ingress resource. This ensures traffic to a specific path is routed to the correct Kubernetes Service. Along with the above, the controller also... deletes AWS components when ingress resources are removed from k8s. modifies AWS components when ingress resources change in k8s. assembles a list of existing ingress-related AWS components on start-up, allowing you to recover if the controller were to be restarted. Ingress Traffic \u00b6 AWS Load Balancer controller supports two traffic modes: Instance mode IP mode By default, Instance mode is used, users can explicitly select the mode via alb.ingress.kubernetes.io/target-type annotation. Instance mode \u00b6 Ingress traffic starts at the ALB and reaches the Kubernetes nodes through each service's NodePort. This means that services referenced from ingress resources must be exposed by type:NodePort in order to be reached by the ALB. IP mode \u00b6 Ingress traffic starts at the ALB and reaches the Kubernetes pods directly. CNIs must support directly accessible POD ip via secondary IP addresses on ENI .","title":"How it works"},{"location":"how-it-works/#how-aws-load-balancer-controller-works","text":"","title":"How AWS Load Balancer controller works"},{"location":"how-it-works/#design","text":"The following diagram details the AWS components this controller creates. It also demonstrates the route ingress traffic takes from the ALB to the Kubernetes cluster. Note The controller manages the configurations of the resources it creates, and we do not recommend out-of-band modifications to these resources because the controller may revert the manual changes during reconciliation. We recommend to use configuration options provided as best practice, such as ingress and service annotations, controller command line flags and IngressClassParams.","title":"Design"},{"location":"how-it-works/#ingress-creation","text":"This section describes each step (circle) above. This example demonstrates satisfying 1 ingress resource. [1] : The controller watches for ingress events from the API server. When it finds ingress resources that satisfy its requirements, it begins the creation of AWS resources. [2] : An ALB (ELBv2) is created in AWS for the new ingress resource. This ALB can be internet-facing or internal. You can also specify the subnets it's created in using annotations. [3] : Target Groups are created in AWS for each unique Kubernetes service described in the ingress resource. [4] : Listeners are created for every port detailed in your ingress resource annotations. When no port is specified, sensible defaults ( 80 or 443 ) are used. Certificates may also be attached via annotations. [5] : Rules are created for each path specified in your ingress resource. This ensures traffic to a specific path is routed to the correct Kubernetes Service. Along with the above, the controller also... deletes AWS components when ingress resources are removed from k8s. modifies AWS components when ingress resources change in k8s. assembles a list of existing ingress-related AWS components on start-up, allowing you to recover if the controller were to be restarted.","title":"Ingress Creation"},{"location":"how-it-works/#ingress-traffic","text":"AWS Load Balancer controller supports two traffic modes: Instance mode IP mode By default, Instance mode is used, users can explicitly select the mode via alb.ingress.kubernetes.io/target-type annotation.","title":"Ingress Traffic"},{"location":"how-it-works/#instance-mode","text":"Ingress traffic starts at the ALB and reaches the Kubernetes nodes through each service's NodePort. This means that services referenced from ingress resources must be exposed by type:NodePort in order to be reached by the ALB.","title":"Instance mode"},{"location":"how-it-works/#ip-mode","text":"Ingress traffic starts at the ALB and reaches the Kubernetes pods directly. CNIs must support directly accessible POD ip via secondary IP addresses on ENI .","title":"IP mode"},{"location":"release/","text":"AWS Load Balancer Controller Release Process \u00b6 Create the Release Commit \u00b6 Run hack/set-version to set the new version number and commit the resulting changes. This is called the \"release commit\". Merge the Release Commit \u00b6 Create a pull request with the release commit. Get it reviewed and merged to main . Upon merge to main , GitHub Actions will create a release tag for the new release. If the release is a \".0-beta.1\" release, GitHub Actions will also create a release branch for the minor version. (Remaining steps in process yet to be documented.)","title":"AWS Load Balancer Controller Release Process"},{"location":"release/#aws-load-balancer-controller-release-process","text":"","title":"AWS Load Balancer Controller Release Process"},{"location":"release/#create-the-release-commit","text":"Run hack/set-version to set the new version number and commit the resulting changes. This is called the \"release commit\".","title":"Create the Release Commit"},{"location":"release/#merge-the-release-commit","text":"Create a pull request with the release commit. Get it reviewed and merged to main . Upon merge to main , GitHub Actions will create a release tag for the new release. If the release is a \".0-beta.1\" release, GitHub Actions will also create a release branch for the minor version. (Remaining steps in process yet to be documented.)","title":"Merge the Release Commit"},{"location":"deploy/configurations/","text":"Controller configuration options \u00b6 This document covers configuration of the AWS Load Balancer controller limitation The v2.0.0+ version of AWSLoadBalancerController currently only support one controller deployment(with one or multiple replicas) per cluster. The AWSLoadBalancerController assumes it's the solo owner of worker node security group rules with elbv2.k8s.aws/targetGroupBinding=shared description, running multiple controller deployment will cause these controllers compete with each other updating worker node security group rules. We will remove this limitation in future versions: tracking issue AWS API Access \u00b6 To perform operations, the controller must have required IAM role capabilities for accessing and provisioning ALB resources. There are many ways to achieve this, such as loading AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY as environment variables or using kube2iam . Refer to the installation guide for installing the controller in your kubernetes cluster and for the minimum required IAM permissions. Setting Ingress Resource Scope \u00b6 You can limit the ingresses ALB ingress controller controls by combining following two approaches: Limiting ingress class \u00b6 Setting the --ingress-class argument constrains the controller's scope to ingresses with matching ingressClassName field. An example of the container spec portion of the controller, only listening for resources with the class \"alb\", would be as follows. spec : containers : - args : - --ingress-class=alb Now, only ingress resources with the appropriate class are picked up, as seen below. apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : echoserver namespace : echoserver spec : ingressClassName : alb ... If the ingress class is not specified, the controller will reconcile Ingress objects without the ingress class specified or ingress class alb . Limiting Namespaces \u00b6 Setting the --watch-namespace argument constrains the controller's scope to a single namespace. Ingress events outside of the namespace specified are not be seen by the controller. An example of the container spec, for a controller watching only the default namespace, is as follows. spec : containers : - args : - --watch-namespace=default Currently, you can set only 1 namespace to watch in this flag. See this Kubernetes issue for more details. Controller command line flags \u00b6 The --cluster-name flag is mandatory and the value must match the name of the kubernetes cluster. If you specify an incorrect name, the subnet auto-discovery will not work. Flag Type Default Description aws-api-endpoints AWS API Endpoints Config AWS API endpoints mapping, format: serviceID1=URL1,serviceID2=URL2 aws-api-throttle AWS Throttle Config default value throttle settings for AWS APIs, format: serviceID1:operationRegex1=rate:burst,serviceID2:operationRegex2=rate:burst aws-max-retries int 10 Maximum retries for AWS APIs aws-region string instance metadata AWS Region for the kubernetes cluster aws-vpc-id string instance metadata AWS VPC ID for the Kubernetes cluster backend-security-group string Backend security group id to use for the ingress rules on the worker node SG cluster-name string Kubernetes cluster name default-ssl-policy string ELBSecurityPolicy-2016-08 Default SSL Policy that will be applied to all Ingresses or Services that do not have the SSL Policy annotation default-tags stringMap AWS Tags that will be applied to all AWS resources managed by this controller. Specified Tags takes highest priority default-target-type string instance Default target type for Ingresses and Services - ip, instance disable-ingress-class-annotation boolean false Disable new usage of the kubernetes.io/ingress.class annotation disable-ingress-group-name-annotation boolean false Disallow new use of the alb.ingress.kubernetes.io/group.name annotation disable-restricted-sg-rules boolean false Disable the usage of restricted security group rules enable-backend-security-group boolean true Enable sharing of security groups for backend traffic enable-endpoint-slices boolean false Use EndpointSlices instead of Endpoints for pod endpoint and TargetGroupBinding resolution for load balancers with IP targets. enable-leader-election boolean true Enable leader election for the load balancer controller manager. Enabling this will ensure there is only one active controller manager enable-pod-readiness-gate-inject boolean true If enabled, targetHealth readiness gate will get injected to the pod spec for the matching endpoint pods enable-shield boolean true Enable Shield addon for ALB enable-waf boolean true Enable WAF addon for ALB enable-wafv2 boolean true Enable WAF V2 addon for ALB external-managed-tags stringList AWS Tag keys that will be managed externally. Specified Tags are ignored during reconciliation feature-gates stringMap A set of key=value pairs to enable or disable features health-probe-bind-addr string :61779 The address the health probes binds to ingress-class string alb Name of the ingress class this controller satisfies ingress-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for ingress kubeconfig string in-cluster config Path to the kubeconfig file containing authorization and API server information leader-election-id string aws-load-balancer-controller-leader Name of the leader election ID to use for this controller leader-election-namespace string Name of the leader election ID to use for this controller load-balancer-class string service.k8s.aws/nlb Name of the load balancer class specified in service spec.loadBalancerClass reconciled by this controller log-level string info Set the controller log level - info, debug metrics-bind-addr string :8080 The address the metric endpoint binds to service-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for service sync-period duration 10h0m0s Period at which the controller forces the repopulation of its local object stores targetgroupbinding-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for targetGroupBinding targetgroupbinding-max-exponential-backoff-delay duration 16m40s Maximum duration of exponential backoff for targetGroupBinding reconcile failures tolerate-non-existent-backend-service boolean true Whether to allow rules which refer to backend services that do not exist (When enabled, it will return 503 error if backend service not exist) tolerate-non-existent-backend-action boolean true Whether to allow rules which refer to backend actions that do not exist (When enabled, it will return 503 error if backend action not exist) watch-namespace string Namespace the controller watches for updates to Kubernetes objects, If empty, all namespaces are watched. webhook-bind-port int 9443 The TCP port the Webhook server binds to webhook-cert-dir string /tmp/k8s-webhook-server/serving-certs The directory that contains the server key and certificate webhook-cert-file string tls.crt The server certificate name webhook-key-file string tls.key The server key name disable-ingress-class-annotation \u00b6 --disable-ingress-class-annotation controls whether to disable new usage of the kubernetes.io/ingress.class annotation. Once disabled: you can no longer create Ingresses with the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller). you can no longer update Ingresses to set the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller). you can still create Ingresses with a kubernetes.io/ingress.class annotation that has other values (for example: \"nginx\") disable-ingress-group-name-annotation \u00b6 --disable-ingress-group-name-annotation controls whether to disable new usage of alb.ingress.kubernetes.io/group.name annotation. Once disabled: you can no longer create Ingresses with the alb.ingress.kubernetes.io/group.name annotation. you can no longer alter the value of an alb.ingress.kubernetes.io/group.name annotation on an existing Ingress. sync-period \u00b6 --sync-period defines a fixed interval for the controller to reconcile all resources even if there is no change, default to 10 hr. Please be mindful that frequent reconciliations may incur unnecessary AWS API usage. As best practice, we do not recommend users to manually modify the resources managed by the controller. And users should not depend on the controller auto-reconciliation to revert the manual modification, or to mitigate any security risks. waf-addons \u00b6 By default, the controller assumes sole ownership of the WAF addons associated to the provisioned ALBs, via the flag --enable-waf and --enable-wafv2 . And the users should disable them accordingly if they want a third party like AWS Firewall Manager to associate or remove the WAF-ACL of the ALBs. Once disabled, the controller shall not take any actions on the waf addons of the provisioned ALBs. throttle config \u00b6 Controller uses the following default throttle config: WAF Regional:^AssociateWebACL|DisassociateWebACL=0.5:1,WAF Regional:^GetWebACLForResource|ListResourcesForWebACL=1:1,WAFV2:^AssociateWebACL|DisassociateWebACL=0.5:1,WAFV2:^GetWebACLForResource|ListResourcesForWebACL=1:1,Elastic Load Balancing v2:^RegisterTargets|^DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40 Client side throttling enables gradual scaling of the api calls. Additional throttle config can be specified via the --aws-api-throttle flag. You can get the ServiceID from the API definition in AWS SDK. For e.g, ELBv2 it is Elastic Load Balancing v2 . Here is an example of throttle config to specify client side throttling of ELBv2 calls. --aws-api-throttle=Elastic Load Balancing v2:RegisterTargets|DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40 Instance metadata \u00b6 If running on EC2, the default values are obtained from the instance metadata service. Feature Gates \u00b6 They are a set of kye=value pairs that describe AWS load balance controller features. You can use it as flags --feature-gates=key1=value1,key2=value2 Features-gate Supported Key Type Default Value Description ListenerRulesTagging string true Enable or disable tagging AWS load balancer listeners and rules WeightedTargetGroups string true Enable or disable weighted target groups ServiceTypeLoadBalancerOnly string false If enabled, controller will be limited to reconciling service of type LoadBalancer EndpointsFailOpen string true Enable or disable allowing endpoints with ready:unknown state in the target groups. EnableServiceController string true Toggles support for Service type resources. EnableIPTargetType string true Used to toggle support for target-type ip across Ingress and Service type resources. EnableRGTAPI string false If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, tag:GetResources is needed in controller IAM policy. SubnetsClusterTagCheck string true Enable or disable the check for kubernetes.io/cluster/${cluster-name} during subnet auto-discovery NLBHealthCheckAdvancedConfiguration string true Enable or disable advanced health check configuration for NLB, for example health check timeout ALBSingleSubnet string false If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance NLBSecurityGroup string true Enable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications","title":"Configurations"},{"location":"deploy/configurations/#controller-configuration-options","text":"This document covers configuration of the AWS Load Balancer controller limitation The v2.0.0+ version of AWSLoadBalancerController currently only support one controller deployment(with one or multiple replicas) per cluster. The AWSLoadBalancerController assumes it's the solo owner of worker node security group rules with elbv2.k8s.aws/targetGroupBinding=shared description, running multiple controller deployment will cause these controllers compete with each other updating worker node security group rules. We will remove this limitation in future versions: tracking issue","title":"Controller configuration options"},{"location":"deploy/configurations/#aws-api-access","text":"To perform operations, the controller must have required IAM role capabilities for accessing and provisioning ALB resources. There are many ways to achieve this, such as loading AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY as environment variables or using kube2iam . Refer to the installation guide for installing the controller in your kubernetes cluster and for the minimum required IAM permissions.","title":"AWS API Access"},{"location":"deploy/configurations/#setting-ingress-resource-scope","text":"You can limit the ingresses ALB ingress controller controls by combining following two approaches:","title":"Setting Ingress Resource Scope"},{"location":"deploy/configurations/#limiting-ingress-class","text":"Setting the --ingress-class argument constrains the controller's scope to ingresses with matching ingressClassName field. An example of the container spec portion of the controller, only listening for resources with the class \"alb\", would be as follows. spec : containers : - args : - --ingress-class=alb Now, only ingress resources with the appropriate class are picked up, as seen below. apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : echoserver namespace : echoserver spec : ingressClassName : alb ... If the ingress class is not specified, the controller will reconcile Ingress objects without the ingress class specified or ingress class alb .","title":"Limiting ingress class"},{"location":"deploy/configurations/#limiting-namespaces","text":"Setting the --watch-namespace argument constrains the controller's scope to a single namespace. Ingress events outside of the namespace specified are not be seen by the controller. An example of the container spec, for a controller watching only the default namespace, is as follows. spec : containers : - args : - --watch-namespace=default Currently, you can set only 1 namespace to watch in this flag. See this Kubernetes issue for more details.","title":"Limiting Namespaces"},{"location":"deploy/configurations/#controller-command-line-flags","text":"The --cluster-name flag is mandatory and the value must match the name of the kubernetes cluster. If you specify an incorrect name, the subnet auto-discovery will not work. Flag Type Default Description aws-api-endpoints AWS API Endpoints Config AWS API endpoints mapping, format: serviceID1=URL1,serviceID2=URL2 aws-api-throttle AWS Throttle Config default value throttle settings for AWS APIs, format: serviceID1:operationRegex1=rate:burst,serviceID2:operationRegex2=rate:burst aws-max-retries int 10 Maximum retries for AWS APIs aws-region string instance metadata AWS Region for the kubernetes cluster aws-vpc-id string instance metadata AWS VPC ID for the Kubernetes cluster backend-security-group string Backend security group id to use for the ingress rules on the worker node SG cluster-name string Kubernetes cluster name default-ssl-policy string ELBSecurityPolicy-2016-08 Default SSL Policy that will be applied to all Ingresses or Services that do not have the SSL Policy annotation default-tags stringMap AWS Tags that will be applied to all AWS resources managed by this controller. Specified Tags takes highest priority default-target-type string instance Default target type for Ingresses and Services - ip, instance disable-ingress-class-annotation boolean false Disable new usage of the kubernetes.io/ingress.class annotation disable-ingress-group-name-annotation boolean false Disallow new use of the alb.ingress.kubernetes.io/group.name annotation disable-restricted-sg-rules boolean false Disable the usage of restricted security group rules enable-backend-security-group boolean true Enable sharing of security groups for backend traffic enable-endpoint-slices boolean false Use EndpointSlices instead of Endpoints for pod endpoint and TargetGroupBinding resolution for load balancers with IP targets. enable-leader-election boolean true Enable leader election for the load balancer controller manager. Enabling this will ensure there is only one active controller manager enable-pod-readiness-gate-inject boolean true If enabled, targetHealth readiness gate will get injected to the pod spec for the matching endpoint pods enable-shield boolean true Enable Shield addon for ALB enable-waf boolean true Enable WAF addon for ALB enable-wafv2 boolean true Enable WAF V2 addon for ALB external-managed-tags stringList AWS Tag keys that will be managed externally. Specified Tags are ignored during reconciliation feature-gates stringMap A set of key=value pairs to enable or disable features health-probe-bind-addr string :61779 The address the health probes binds to ingress-class string alb Name of the ingress class this controller satisfies ingress-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for ingress kubeconfig string in-cluster config Path to the kubeconfig file containing authorization and API server information leader-election-id string aws-load-balancer-controller-leader Name of the leader election ID to use for this controller leader-election-namespace string Name of the leader election ID to use for this controller load-balancer-class string service.k8s.aws/nlb Name of the load balancer class specified in service spec.loadBalancerClass reconciled by this controller log-level string info Set the controller log level - info, debug metrics-bind-addr string :8080 The address the metric endpoint binds to service-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for service sync-period duration 10h0m0s Period at which the controller forces the repopulation of its local object stores targetgroupbinding-max-concurrent-reconciles int 3 Maximum number of concurrently running reconcile loops for targetGroupBinding targetgroupbinding-max-exponential-backoff-delay duration 16m40s Maximum duration of exponential backoff for targetGroupBinding reconcile failures tolerate-non-existent-backend-service boolean true Whether to allow rules which refer to backend services that do not exist (When enabled, it will return 503 error if backend service not exist) tolerate-non-existent-backend-action boolean true Whether to allow rules which refer to backend actions that do not exist (When enabled, it will return 503 error if backend action not exist) watch-namespace string Namespace the controller watches for updates to Kubernetes objects, If empty, all namespaces are watched. webhook-bind-port int 9443 The TCP port the Webhook server binds to webhook-cert-dir string /tmp/k8s-webhook-server/serving-certs The directory that contains the server key and certificate webhook-cert-file string tls.crt The server certificate name webhook-key-file string tls.key The server key name","title":"Controller command line flags"},{"location":"deploy/configurations/#disable-ingress-class-annotation","text":"--disable-ingress-class-annotation controls whether to disable new usage of the kubernetes.io/ingress.class annotation. Once disabled: you can no longer create Ingresses with the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller). you can no longer update Ingresses to set the value of the kubernetes.io/ingress.class annotation equal to alb (can be overridden via --ingress-class flag of this controller). you can still create Ingresses with a kubernetes.io/ingress.class annotation that has other values (for example: \"nginx\")","title":"disable-ingress-class-annotation"},{"location":"deploy/configurations/#disable-ingress-group-name-annotation","text":"--disable-ingress-group-name-annotation controls whether to disable new usage of alb.ingress.kubernetes.io/group.name annotation. Once disabled: you can no longer create Ingresses with the alb.ingress.kubernetes.io/group.name annotation. you can no longer alter the value of an alb.ingress.kubernetes.io/group.name annotation on an existing Ingress.","title":"disable-ingress-group-name-annotation"},{"location":"deploy/configurations/#sync-period","text":"--sync-period defines a fixed interval for the controller to reconcile all resources even if there is no change, default to 10 hr. Please be mindful that frequent reconciliations may incur unnecessary AWS API usage. As best practice, we do not recommend users to manually modify the resources managed by the controller. And users should not depend on the controller auto-reconciliation to revert the manual modification, or to mitigate any security risks.","title":"sync-period"},{"location":"deploy/configurations/#waf-addons","text":"By default, the controller assumes sole ownership of the WAF addons associated to the provisioned ALBs, via the flag --enable-waf and --enable-wafv2 . And the users should disable them accordingly if they want a third party like AWS Firewall Manager to associate or remove the WAF-ACL of the ALBs. Once disabled, the controller shall not take any actions on the waf addons of the provisioned ALBs.","title":"waf-addons"},{"location":"deploy/configurations/#throttle-config","text":"Controller uses the following default throttle config: WAF Regional:^AssociateWebACL|DisassociateWebACL=0.5:1,WAF Regional:^GetWebACLForResource|ListResourcesForWebACL=1:1,WAFV2:^AssociateWebACL|DisassociateWebACL=0.5:1,WAFV2:^GetWebACLForResource|ListResourcesForWebACL=1:1,Elastic Load Balancing v2:^RegisterTargets|^DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40 Client side throttling enables gradual scaling of the api calls. Additional throttle config can be specified via the --aws-api-throttle flag. You can get the ServiceID from the API definition in AWS SDK. For e.g, ELBv2 it is Elastic Load Balancing v2 . Here is an example of throttle config to specify client side throttling of ELBv2 calls. --aws-api-throttle=Elastic Load Balancing v2:RegisterTargets|DeregisterTargets=4:20,Elastic Load Balancing v2:.*=10:40","title":"throttle config"},{"location":"deploy/configurations/#instance-metadata","text":"If running on EC2, the default values are obtained from the instance metadata service.","title":"Instance metadata"},{"location":"deploy/configurations/#feature-gates","text":"They are a set of kye=value pairs that describe AWS load balance controller features. You can use it as flags --feature-gates=key1=value1,key2=value2 Features-gate Supported Key Type Default Value Description ListenerRulesTagging string true Enable or disable tagging AWS load balancer listeners and rules WeightedTargetGroups string true Enable or disable weighted target groups ServiceTypeLoadBalancerOnly string false If enabled, controller will be limited to reconciling service of type LoadBalancer EndpointsFailOpen string true Enable or disable allowing endpoints with ready:unknown state in the target groups. EnableServiceController string true Toggles support for Service type resources. EnableIPTargetType string true Used to toggle support for target-type ip across Ingress and Service type resources. EnableRGTAPI string false If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, tag:GetResources is needed in controller IAM policy. SubnetsClusterTagCheck string true Enable or disable the check for kubernetes.io/cluster/${cluster-name} during subnet auto-discovery NLBHealthCheckAdvancedConfiguration string true Enable or disable advanced health check configuration for NLB, for example health check timeout ALBSingleSubnet string false If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance NLBSecurityGroup string true Enable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications","title":"Feature Gates"},{"location":"deploy/installation/","text":"AWS Load Balancer Controller installation \u00b6 The AWS Load Balancer controller (LBC) provisions AWS Network Load Balancer (NLB) and Application Load Balancer (ALB) resources. The LBC watches for new service or ingress Kubernetes resources and configures AWS resources. The LBC is supported by AWS. Some clusters may be using the legacy \"in-tree\" functionality to provision AWS load balancers. The AWS Load Balancer Controller should be installed instead. Existing AWS ALB Ingress Controller users The AWS ALB Ingress controller must be uninstalled before installing the AWS Load Balancer Controller. Please follow our migration guide to do a migration. When using AWS Load Balancer Controller v2.5+ The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerClass field for service of type LoadBalancer on create. This makes the AWS LBC the default controller for service of type LoadBalancer. You can disable this feature and revert to set Cloud Controller Manager (in-tree controller) as the default by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false . You will no longer be able to provision new Classic Load Balancer (CLB) from your kubernetes service unless you disable this feature. Existing CLB will continue to work fine. Supported Kubernetes versions \u00b6 AWS Load Balancer Controller v2.0.0~v2.1.3 requires Kubernetes 1.15+ AWS Load Balancer Controller v2.2.0~v2.3.1 requires Kubernetes 1.16-1.21 AWS Load Balancer Controller v2.4.0+ requires Kubernetes 1.19+ AWS Load Balancer Controller v2.5.0+ requires Kubernetes 1.22+ Deployment considerations \u00b6 Additional requirements for non-EKS clusters: \u00b6 Ensure subnets are tagged appropriately for auto-discovery to work For IP targets, pods must have IPs from the VPC subnets. You can configure the amazon-vpc-cni-k8s plugin for this purpose. Additional requirements for isolated cluster: \u00b6 Isolated clusters are clusters without internet access, and instead reply on VPC endpoints for all required connects. When installing the AWS LBC in isolated clusters, you need to disable shield, waf and wafv2 via controller flags --enable-shield=false, --enable-waf=false, --enable-wafv2=false Using the Amazon EC2 instance metadata server version 2 (IMDSv2) \u00b6 We recommend blocking the access to instance metadata by requiring the instance to use IMDSv2 only. For more information, please refer to the AWS guidance here . If you are using the IMDSv2, set the hop limit to 2 or higher in order to allow the LBC to perform the metadata introspection. You can set the IMDSv2 as follows: aws ec2 modify-instance-metadata-options --http-put-response-hop-limit 2 --http-tokens required --region --instance-id Instead of depending on IMDSv2, you can specify the AWS Region and the VPC via the controller flags --aws-region and --aws-vpc-id . Configure IAM \u00b6 The controller runs on the worker nodes, so it needs access to the AWS ALB/NLB APIs with IAM permissions. The IAM permissions can either be setup using IAM roles for service accounts (IRSA) or can be attached directly to the worker node IAM roles. The best practice is using IRSA if you're using Amazon EKS. If you're using kOps or self-hosted Kubernetes, you must manually attach polices to node instances. Option A: Recommended, IAM roles for service accounts (IRSA) \u00b6 The reference IAM policies contain the following permissive configuration: { \"Effect\": \"Allow\", \"Action\": [ \"ec2:AuthorizeSecurityGroupIngress\", \"ec2:RevokeSecurityGroupIngress\" ], \"Resource\": \"*\" }, We recommend further scoping down this configuration based on the VPC ID or cluster name resource tag. Example condition for VPC ID: \"Condition\": { \"ArnEquals\": { \"ec2:Vpc\": \"arn:aws:ec2:::vpc/\" } } Example condition for cluster name resource tag: \"Condition\": { \"Null\": { \"aws:ResourceTag/kubernetes.io/cluster/\": \"false\" } } Create an IAM OIDC provider. You can skip this step if you already have one for your cluster. eksctl utils associate-iam-oidc-provider \\ --region \\ --cluster \\ --approve Download an IAM policy for the LBC using one of the following commands: If your cluster is in a US Gov Cloud region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_us-gov.json If your cluster is in a China region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_cn.json If your cluster is in any other region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json Create an IAM policy named AWSLoadBalancerControllerIAMPolicy . If you downloaded a different policy, replace iam-policy with the name of the policy that you downloaded. aws iam create-policy \\ --policy-name AWSLoadBalancerControllerIAMPolicy \\ --policy-document file://iam-policy.json Take note of the policy ARN that's returned. Create an IAM role and Kubernetes ServiceAccount for the LBC. Use the ARN from the previous step. eksctl create iamserviceaccount \\ --cluster= \\ --namespace=kube-system \\ --name=aws-load-balancer-controller \\ --attach-policy-arn=arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy \\ --override-existing-serviceaccounts \\ --region \\ --approve Option B: Attach IAM policies to nodes \u00b6 If you're not setting up IAM roles for service accounts, apply the IAM policies from the following URL at a minimum. Please be aware of the possibility that the controller permissions may be assumed by other users in a pod after retrieving the node role credentials, so the best practice would be using IRSA instead of attaching IAM policy directly. curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json The following IAM permissions subset is for those using TargetGroupBinding only and don't plan to use the LBC to manage security group rules: { \"Statement\": [ { \"Action\": [ \"ec2:DescribeVpcs\", \"ec2:DescribeSecurityGroups\", \"ec2:DescribeInstances\", \"elasticloadbalancing:DescribeTargetGroups\", \"elasticloadbalancing:DescribeTargetHealth\", \"elasticloadbalancing:ModifyTargetGroup\", \"elasticloadbalancing:ModifyTargetGroupAttributes\", \"elasticloadbalancing:RegisterTargets\", \"elasticloadbalancing:DeregisterTargets\" ], \"Effect\": \"Allow\", \"Resource\": \"*\" } ], \"Version\": \"2012-10-17\" } Network configuration \u00b6 Review the worker nodes security group docs. Your node security group must permit incoming traffic on TCP port 9443 from the Kubernetes control plane. This is needed for webhook access. If you use eksctl , this is the default configuration. If you use custom networking, please refer to the EKS Best Practices Guides for network configuration. Add controller to cluster \u00b6 We recommend using the Helm chart to install the controller. The chart supports Fargate and facilitates updating the controller. Helm If you want to run the controller on Fargate, use the Helm chart, since it doesn't depend on the cert-manager . Detailed instructions \u00b6 Follow the instructions in the aws-load-balancer-controller Helm chart. Summary \u00b6 Add the EKS chart repo to Helm helm repo add eks https://aws.github.io/eks-charts If upgrading the chart via helm upgrade , install the TargetGroupBinding CRDs. wget https://raw.githubusercontent.com/aws/eks-charts/master/stable/aws-load-balancer-controller/crds/crds.yaml kubectl apply -f crds.yaml Tip The helm install command automatically applies the CRDs, but helm upgrade doesn't. Helm install command for clusters with IRSA: helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName= --set serviceAccount.create=false --set serviceAccount.name=aws-load-balancer-controller Helm install command for clusters not using IRSA: helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName= YAML manifests Install cert-manager \u00b6 kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.12.3/cert-manager.yaml Apply YAML \u00b6 Download the spec for the LBC. wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_full.yaml Edit the saved yaml file, go to the Deployment spec, and set the controller --cluster-name arg value to your EKS cluster name apiVersion: apps/v1 kind: Deployment . . . name: aws-load-balancer-controller namespace: kube-system spec: . . . template: spec: containers: - args: - --cluster-name= If you use IAM roles for service accounts, we recommend that you delete the ServiceAccount from the yaml spec. If you delete the installation section from the yaml spec, deleting the ServiceAccount preserves the eksctl created iamserviceaccount . apiVersion: v1 kind: ServiceAccount Apply the yaml file kubectl apply -f v2_7_0_full.yaml Optionally download the default ingressclass and ingressclass params wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_ingclass.yaml Apply the ingressclass and params kubectl apply -f v2_7_0_ingclass.yaml Create Update Strategy \u00b6 The controller doesn't receive security updates automatically. You need to manually upgrade to a newer version when it becomes available. You can upgrade using helm upgrade or another strategy to manage the controller deployment.","title":"Installation Guide"},{"location":"deploy/installation/#aws-load-balancer-controller-installation","text":"The AWS Load Balancer controller (LBC) provisions AWS Network Load Balancer (NLB) and Application Load Balancer (ALB) resources. The LBC watches for new service or ingress Kubernetes resources and configures AWS resources. The LBC is supported by AWS. Some clusters may be using the legacy \"in-tree\" functionality to provision AWS load balancers. The AWS Load Balancer Controller should be installed instead. Existing AWS ALB Ingress Controller users The AWS ALB Ingress controller must be uninstalled before installing the AWS Load Balancer Controller. Please follow our migration guide to do a migration. When using AWS Load Balancer Controller v2.5+ The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerClass field for service of type LoadBalancer on create. This makes the AWS LBC the default controller for service of type LoadBalancer. You can disable this feature and revert to set Cloud Controller Manager (in-tree controller) as the default by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false . You will no longer be able to provision new Classic Load Balancer (CLB) from your kubernetes service unless you disable this feature. Existing CLB will continue to work fine.","title":"AWS Load Balancer Controller installation"},{"location":"deploy/installation/#supported-kubernetes-versions","text":"AWS Load Balancer Controller v2.0.0~v2.1.3 requires Kubernetes 1.15+ AWS Load Balancer Controller v2.2.0~v2.3.1 requires Kubernetes 1.16-1.21 AWS Load Balancer Controller v2.4.0+ requires Kubernetes 1.19+ AWS Load Balancer Controller v2.5.0+ requires Kubernetes 1.22+","title":"Supported Kubernetes versions"},{"location":"deploy/installation/#deployment-considerations","text":"","title":"Deployment considerations"},{"location":"deploy/installation/#additional-requirements-for-non-eks-clusters","text":"Ensure subnets are tagged appropriately for auto-discovery to work For IP targets, pods must have IPs from the VPC subnets. You can configure the amazon-vpc-cni-k8s plugin for this purpose.","title":"Additional requirements for non-EKS clusters:"},{"location":"deploy/installation/#additional-requirements-for-isolated-cluster","text":"Isolated clusters are clusters without internet access, and instead reply on VPC endpoints for all required connects. When installing the AWS LBC in isolated clusters, you need to disable shield, waf and wafv2 via controller flags --enable-shield=false, --enable-waf=false, --enable-wafv2=false","title":"Additional requirements for isolated cluster:"},{"location":"deploy/installation/#using-the-amazon-ec2-instance-metadata-server-version-2-imdsv2","text":"We recommend blocking the access to instance metadata by requiring the instance to use IMDSv2 only. For more information, please refer to the AWS guidance here . If you are using the IMDSv2, set the hop limit to 2 or higher in order to allow the LBC to perform the metadata introspection. You can set the IMDSv2 as follows: aws ec2 modify-instance-metadata-options --http-put-response-hop-limit 2 --http-tokens required --region --instance-id Instead of depending on IMDSv2, you can specify the AWS Region and the VPC via the controller flags --aws-region and --aws-vpc-id .","title":"Using the Amazon EC2 instance metadata server version 2 (IMDSv2)"},{"location":"deploy/installation/#configure-iam","text":"The controller runs on the worker nodes, so it needs access to the AWS ALB/NLB APIs with IAM permissions. The IAM permissions can either be setup using IAM roles for service accounts (IRSA) or can be attached directly to the worker node IAM roles. The best practice is using IRSA if you're using Amazon EKS. If you're using kOps or self-hosted Kubernetes, you must manually attach polices to node instances.","title":"Configure IAM"},{"location":"deploy/installation/#option-a-recommended-iam-roles-for-service-accounts-irsa","text":"The reference IAM policies contain the following permissive configuration: { \"Effect\": \"Allow\", \"Action\": [ \"ec2:AuthorizeSecurityGroupIngress\", \"ec2:RevokeSecurityGroupIngress\" ], \"Resource\": \"*\" }, We recommend further scoping down this configuration based on the VPC ID or cluster name resource tag. Example condition for VPC ID: \"Condition\": { \"ArnEquals\": { \"ec2:Vpc\": \"arn:aws:ec2:::vpc/\" } } Example condition for cluster name resource tag: \"Condition\": { \"Null\": { \"aws:ResourceTag/kubernetes.io/cluster/\": \"false\" } } Create an IAM OIDC provider. You can skip this step if you already have one for your cluster. eksctl utils associate-iam-oidc-provider \\ --region \\ --cluster \\ --approve Download an IAM policy for the LBC using one of the following commands: If your cluster is in a US Gov Cloud region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_us-gov.json If your cluster is in a China region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy_cn.json If your cluster is in any other region: curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json Create an IAM policy named AWSLoadBalancerControllerIAMPolicy . If you downloaded a different policy, replace iam-policy with the name of the policy that you downloaded. aws iam create-policy \\ --policy-name AWSLoadBalancerControllerIAMPolicy \\ --policy-document file://iam-policy.json Take note of the policy ARN that's returned. Create an IAM role and Kubernetes ServiceAccount for the LBC. Use the ARN from the previous step. eksctl create iamserviceaccount \\ --cluster= \\ --namespace=kube-system \\ --name=aws-load-balancer-controller \\ --attach-policy-arn=arn:aws:iam:::policy/AWSLoadBalancerControllerIAMPolicy \\ --override-existing-serviceaccounts \\ --region \\ --approve","title":"Option A: Recommended, IAM roles for service accounts (IRSA)"},{"location":"deploy/installation/#option-b-attach-iam-policies-to-nodes","text":"If you're not setting up IAM roles for service accounts, apply the IAM policies from the following URL at a minimum. Please be aware of the possibility that the controller permissions may be assumed by other users in a pod after retrieving the node role credentials, so the best practice would be using IRSA instead of attaching IAM policy directly. curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json The following IAM permissions subset is for those using TargetGroupBinding only and don't plan to use the LBC to manage security group rules: { \"Statement\": [ { \"Action\": [ \"ec2:DescribeVpcs\", \"ec2:DescribeSecurityGroups\", \"ec2:DescribeInstances\", \"elasticloadbalancing:DescribeTargetGroups\", \"elasticloadbalancing:DescribeTargetHealth\", \"elasticloadbalancing:ModifyTargetGroup\", \"elasticloadbalancing:ModifyTargetGroupAttributes\", \"elasticloadbalancing:RegisterTargets\", \"elasticloadbalancing:DeregisterTargets\" ], \"Effect\": \"Allow\", \"Resource\": \"*\" } ], \"Version\": \"2012-10-17\" }","title":"Option B: Attach IAM policies to nodes"},{"location":"deploy/installation/#network-configuration","text":"Review the worker nodes security group docs. Your node security group must permit incoming traffic on TCP port 9443 from the Kubernetes control plane. This is needed for webhook access. If you use eksctl , this is the default configuration. If you use custom networking, please refer to the EKS Best Practices Guides for network configuration.","title":"Network configuration"},{"location":"deploy/installation/#add-controller-to-cluster","text":"We recommend using the Helm chart to install the controller. The chart supports Fargate and facilitates updating the controller. Helm If you want to run the controller on Fargate, use the Helm chart, since it doesn't depend on the cert-manager .","title":"Add controller to cluster"},{"location":"deploy/installation/#detailed-instructions","text":"Follow the instructions in the aws-load-balancer-controller Helm chart.","title":"Detailed instructions"},{"location":"deploy/installation/#summary","text":"Add the EKS chart repo to Helm helm repo add eks https://aws.github.io/eks-charts If upgrading the chart via helm upgrade , install the TargetGroupBinding CRDs. wget https://raw.githubusercontent.com/aws/eks-charts/master/stable/aws-load-balancer-controller/crds/crds.yaml kubectl apply -f crds.yaml Tip The helm install command automatically applies the CRDs, but helm upgrade doesn't. Helm install command for clusters with IRSA: helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName= --set serviceAccount.create=false --set serviceAccount.name=aws-load-balancer-controller Helm install command for clusters not using IRSA: helm install aws-load-balancer-controller eks/aws-load-balancer-controller -n kube-system --set clusterName= YAML manifests","title":"Summary"},{"location":"deploy/installation/#install-cert-manager","text":"kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.12.3/cert-manager.yaml","title":"Install cert-manager"},{"location":"deploy/installation/#apply-yaml","text":"Download the spec for the LBC. wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_full.yaml Edit the saved yaml file, go to the Deployment spec, and set the controller --cluster-name arg value to your EKS cluster name apiVersion: apps/v1 kind: Deployment . . . name: aws-load-balancer-controller namespace: kube-system spec: . . . template: spec: containers: - args: - --cluster-name= If you use IAM roles for service accounts, we recommend that you delete the ServiceAccount from the yaml spec. If you delete the installation section from the yaml spec, deleting the ServiceAccount preserves the eksctl created iamserviceaccount . apiVersion: v1 kind: ServiceAccount Apply the yaml file kubectl apply -f v2_7_0_full.yaml Optionally download the default ingressclass and ingressclass params wget https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/download/v2.7.0/v2_7_0_ingclass.yaml Apply the ingressclass and params kubectl apply -f v2_7_0_ingclass.yaml","title":"Apply YAML"},{"location":"deploy/installation/#create-update-strategy","text":"The controller doesn't receive security updates automatically. You need to manually upgrade to a newer version when it becomes available. You can upgrade using helm upgrade or another strategy to manage the controller deployment.","title":"Create Update Strategy"},{"location":"deploy/pod_readiness_gate/","text":"Pod readiness gate \u00b6 AWS Load Balancer controller supports \u00bbPod readiness gates\u00ab to indicate that pod is registered to the ALB/NLB and healthy to receive traffic. The controller automatically injects the necessary readiness gate configuration to the pod spec via mutating webhook during pod creation. For readiness gate configuration to be injected to the pod spec, you need to apply the label elbv2.k8s.aws/pod-readiness-gate-inject: enabled to the pod namespace. However, note that this only works with target-type: ip , since when using target-type: instance , it's the node used as backend, the ALB itself is not aware of pod/podReadiness in such case. The pod readiness gate is needed under certain circumstances to achieve full zero downtime rolling deployments. Consider the following example: Low number of replicas in a deployment Start a rolling update of the deployment Rollout of new pods takes less time than it takes the AWS Load Balancer controller to register the new pods and for their health state turn \u00bbHealthy\u00ab in the target group At some point during this rolling update, the target group might only have registered targets that are in \u00bbInitial\u00ab or \u00bbDraining\u00ab state; this results in service outage In order to avoid this situation, the AWS Load Balancer controller can set the readiness condition on the pods that constitute your ingress or service backend. The condition status on a pod will be set to True only when the corresponding target in the ALB/NLB target group shows a health state of \u00bbHealthy\u00ab. This prevents the rolling update of a deployment from terminating old pods until the newly created pods are \u00bbHealthy\u00ab in the ALB/NLB target group and ready to take traffic. upgrading from AWS ALB ingress controller If you have a pod spec with legacy readiness gate configuration, ensure you label the namespace and create the Service/Ingress objects before applying the pod/deployment manifest. The load balancer controller will remove all legacy readiness-gate configuration and add new ones during pod creation. Configuration \u00b6 Pod readiness gate support is enabled by default on the AWS load balancer controller. You need to apply the readiness gate inject label to each of the namespace that you would like to use this feature. You can create and label a namespace as follows - $ kubectl create namespace readiness namespace/readiness created $ kubectl label namespace readiness elbv2.k8s.aws/pod-readiness-gate-inject=enabled namespace/readiness labeled $ kubectl describe namespace readiness Name: readiness Labels: elbv2.k8s.aws/pod-readiness-gate-inject=enabled Annotations: Status: Active Once labelled, the controller will add the pod readiness gates config to all the pods created subsequently that meet all the following conditions There exists a service matching the pod labels in the same namespace There exists at least one target group binding that refers to the matching service The target type is IP The readiness gates have the prefix target-health.elbv2.k8s.aws and the controller injects the config to the pod spec only during pod creation. create ingress or service before pod To ensure all of your pods in a namespace get the readiness gate config, you need create your Ingress or Service and label the namespace before creating the pods Object Selector \u00b6 The default webhook configuration matches all pods in the namespaces containing the label elbv2.k8s.aws/pod-readiness-gate-inject=enabled . You can modify the webhook configuration further to select specific pods from the labeled namespace by specifying the objectSelector . For example, in order to select resources with elbv2.k8s.aws/pod-readiness-gate-inject: enabled label, you can add the following objectSelector to the webhook: objectSelector: matchLabels: elbv2.k8s.aws/pod-readiness-gate-inject: enabled To edit, $ kubectl edit mutatingwebhookconfigurations aws-load-balancer-webhook ... name: mpod.elbv2.k8s.aws namespaceSelector: matchExpressions: - key: elbv2.k8s.aws/pod-readiness-gate-inject operator: In values: - enabled objectSelector: matchLabels: elbv2.k8s.aws/pod-readiness-gate-inject: enabled ... When you specify multiple selectors, pods matching all the conditions will get mutated. Upgrading from AWS ALB Ingress controller \u00b6 If you have a pod spec with the AWS ALB ingress controller (aka v1) style readiness-gate configuration, the controller will automatically remove the legacy readiness gates config and add new ones during pod creation if the pod namespace is labelled correctly. Other than the namespace labeling, no further configuration is necessary. The legacy readiness gates have the target-health.alb.ingress.k8s.aws prefix. Disabling the readiness gate inject \u00b6 You can specify the controller flag --enable-pod-readiness-gate-inject=false during controller startup to disable the controller from modifying the pod spec. Checking the pod condition status \u00b6 The status of the readiness gates can be verified with kubectl get pod -o wide : NAME READY STATUS RESTARTS AGE IP NODE READINESS GATES nginx-test-5744b9ff84-7ftl9 1/1 Running 0 81s 10.1.2.3 ip-10-1-2-3.ec2.internal 0/1 When the target is registered and healthy in the ALB/NLB, the output will look like: NAME READY STATUS RESTARTS AGE IP NODE READINESS GATES nginx-test-5744b9ff84-7ftl9 1/1 Running 0 81s 10.1.2.3 ip-10-1-2-3.ec2.internal 1/1 If a readiness gate doesn't get ready, you can check the reason via: $ kubectl get pod nginx-test-545d8f4d89-l7rcl -o yaml | grep -B7 'type: target-health' status: conditions: - lastProbeTime: null lastTransitionTime: null message: Initial health checks in progress reason: Elb.InitialHealthChecking status: \"True\" type: target-health.elbv2.k8s.aws/k8s-readines-perf1000-7848e5026b","title":"Pod Readiness Gate"},{"location":"deploy/pod_readiness_gate/#pod-readiness-gate","text":"AWS Load Balancer controller supports \u00bbPod readiness gates\u00ab to indicate that pod is registered to the ALB/NLB and healthy to receive traffic. The controller automatically injects the necessary readiness gate configuration to the pod spec via mutating webhook during pod creation. For readiness gate configuration to be injected to the pod spec, you need to apply the label elbv2.k8s.aws/pod-readiness-gate-inject: enabled to the pod namespace. However, note that this only works with target-type: ip , since when using target-type: instance , it's the node used as backend, the ALB itself is not aware of pod/podReadiness in such case. The pod readiness gate is needed under certain circumstances to achieve full zero downtime rolling deployments. Consider the following example: Low number of replicas in a deployment Start a rolling update of the deployment Rollout of new pods takes less time than it takes the AWS Load Balancer controller to register the new pods and for their health state turn \u00bbHealthy\u00ab in the target group At some point during this rolling update, the target group might only have registered targets that are in \u00bbInitial\u00ab or \u00bbDraining\u00ab state; this results in service outage In order to avoid this situation, the AWS Load Balancer controller can set the readiness condition on the pods that constitute your ingress or service backend. The condition status on a pod will be set to True only when the corresponding target in the ALB/NLB target group shows a health state of \u00bbHealthy\u00ab. This prevents the rolling update of a deployment from terminating old pods until the newly created pods are \u00bbHealthy\u00ab in the ALB/NLB target group and ready to take traffic. upgrading from AWS ALB ingress controller If you have a pod spec with legacy readiness gate configuration, ensure you label the namespace and create the Service/Ingress objects before applying the pod/deployment manifest. The load balancer controller will remove all legacy readiness-gate configuration and add new ones during pod creation.","title":"Pod readiness gate"},{"location":"deploy/pod_readiness_gate/#configuration","text":"Pod readiness gate support is enabled by default on the AWS load balancer controller. You need to apply the readiness gate inject label to each of the namespace that you would like to use this feature. You can create and label a namespace as follows - $ kubectl create namespace readiness namespace/readiness created $ kubectl label namespace readiness elbv2.k8s.aws/pod-readiness-gate-inject=enabled namespace/readiness labeled $ kubectl describe namespace readiness Name: readiness Labels: elbv2.k8s.aws/pod-readiness-gate-inject=enabled Annotations: Status: Active Once labelled, the controller will add the pod readiness gates config to all the pods created subsequently that meet all the following conditions There exists a service matching the pod labels in the same namespace There exists at least one target group binding that refers to the matching service The target type is IP The readiness gates have the prefix target-health.elbv2.k8s.aws and the controller injects the config to the pod spec only during pod creation. create ingress or service before pod To ensure all of your pods in a namespace get the readiness gate config, you need create your Ingress or Service and label the namespace before creating the pods","title":"Configuration"},{"location":"deploy/pod_readiness_gate/#object-selector","text":"The default webhook configuration matches all pods in the namespaces containing the label elbv2.k8s.aws/pod-readiness-gate-inject=enabled . You can modify the webhook configuration further to select specific pods from the labeled namespace by specifying the objectSelector . For example, in order to select resources with elbv2.k8s.aws/pod-readiness-gate-inject: enabled label, you can add the following objectSelector to the webhook: objectSelector: matchLabels: elbv2.k8s.aws/pod-readiness-gate-inject: enabled To edit, $ kubectl edit mutatingwebhookconfigurations aws-load-balancer-webhook ... name: mpod.elbv2.k8s.aws namespaceSelector: matchExpressions: - key: elbv2.k8s.aws/pod-readiness-gate-inject operator: In values: - enabled objectSelector: matchLabels: elbv2.k8s.aws/pod-readiness-gate-inject: enabled ... When you specify multiple selectors, pods matching all the conditions will get mutated.","title":"Object Selector"},{"location":"deploy/pod_readiness_gate/#upgrading-from-aws-alb-ingress-controller","text":"If you have a pod spec with the AWS ALB ingress controller (aka v1) style readiness-gate configuration, the controller will automatically remove the legacy readiness gates config and add new ones during pod creation if the pod namespace is labelled correctly. Other than the namespace labeling, no further configuration is necessary. The legacy readiness gates have the target-health.alb.ingress.k8s.aws prefix.","title":"Upgrading from AWS ALB Ingress controller"},{"location":"deploy/pod_readiness_gate/#disabling-the-readiness-gate-inject","text":"You can specify the controller flag --enable-pod-readiness-gate-inject=false during controller startup to disable the controller from modifying the pod spec.","title":"Disabling the readiness gate inject"},{"location":"deploy/pod_readiness_gate/#checking-the-pod-condition-status","text":"The status of the readiness gates can be verified with kubectl get pod -o wide : NAME READY STATUS RESTARTS AGE IP NODE READINESS GATES nginx-test-5744b9ff84-7ftl9 1/1 Running 0 81s 10.1.2.3 ip-10-1-2-3.ec2.internal 0/1 When the target is registered and healthy in the ALB/NLB, the output will look like: NAME READY STATUS RESTARTS AGE IP NODE READINESS GATES nginx-test-5744b9ff84-7ftl9 1/1 Running 0 81s 10.1.2.3 ip-10-1-2-3.ec2.internal 1/1 If a readiness gate doesn't get ready, you can check the reason via: $ kubectl get pod nginx-test-545d8f4d89-l7rcl -o yaml | grep -B7 'type: target-health' status: conditions: - lastProbeTime: null lastTransitionTime: null message: Initial health checks in progress reason: Elb.InitialHealthChecking status: \"True\" type: target-health.elbv2.k8s.aws/k8s-readines-perf1000-7848e5026b","title":"Checking the pod condition status"},{"location":"deploy/security_groups/","text":"Security Groups for Load Balancers \u00b6 Use security groups to limit client connections to your load balancers, and restrict connections with nodes. The AWS Load Balancer Controller (LBC) defines two classifications of security groups: frontend and backend . Frontend Security Groups: Determine the clients that can access the load balancers. Backend Security Groups: Permit the load balancer to connect to targets, such as EC2 instances or ENIs. Frontend Security Groups \u00b6 Frontend security groups control access to load balancers by specifying which clients can connect to them. Use cases for Frontent Security Groups include: Placing the load balancer behind another service, such as AWS Web Application Firewall or AWS CloudFront . Blocking the IP address range (CIDR) of a region. Configuring the Load Balancer for private or internal use, by specifying internal CIDRs and Security Groups. In the default configuration, the LBC automatically creates one security group per load balancer, allowing traffic from inbound-cidrs to listen-ports . Configuration \u00b6 Apply custom frontend security groups with an annotation. This disables automatic generation of frontend security groups. For Ingress resources, use the alb.ingress.kubernetes.io/security-groups annotation. For Service resources, use the service.beta.kubernetes.io/aws-load-balancer-security-groups annotation. The annotation must be set to one or more security group IDs or security group names. Backend Security Groups \u00b6 Backend Security Groups control traffic between AWS Load Balancers and their target EC2 instances or ENIs. For example, backend security groups can restrict the ports load balancers may access on nodes. Backend security groups permit traffic from AWS Load Balancers to their targets. LBC uses a single, shared backend security group, attaching it to each load balancer and using as the traffic source in the security group rules it adds to targets. When configuring security group rules at the ENI/Instance level, use the Security Group ID of the backend security group. Avoid using the IP addresses of a specific AWS Load Balancer, these IPs are dynamic and the security group rules aren't updated automatically. Configuration \u00b6 Enable or Disable: Use --enable-backend-security-group (default true ) to enable/disable the shared backend security group. You can turn off the shared backend security group feature by setting it to false . However, if you have a high number of Ingress resources with frontend security groups auto-generated by the controller, you might run into security group rule limits on the instance/ENI security groups. Specification: Use --backend-security-group to pass in a security group ID to use as a custom shared backend security group. If --backend-security-group is left empty, a security group with the following attributes will be created: name : k8s-traffic-- tags : elbv2.k8s.aws/cluster : elbv2.k8s.aws/resource : backend-sg Coordination of Frontend and Backend Security Groups \u00b6 If the LBC auto-creates the frontend security group for a load balancer, it automatically adds the security group rules to allow traffic from the load balancer to the backend instances/ENIs. If the frontend security groups are manually specified, the LBC will not by default add any rules to the backend security group. Enable Autogeneration of Backend Security Group Rules \u00b6 If using custom frontend security groups, the LBC can be configured to automatically manage backend security group rules. To enable managing backend security group rules, apply an additional annotation to Ingress and Service resources. For Ingress resources, set the alb.ingress.kubernetes.io/manage-backend-security-group-rules annotation to true . For Service resources, set the service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules annotation to true . If management of backend security group rules is enabled with an annotation on a Service or Ingress, then --enable-backend-security-group must be set to true. These annotations are ignored when using auto-generated frontend security groups. Port Range Restrictions \u00b6 From version v2.3.0 onwards, the controller restricts port ranges in the backend security group rules by default. This improves the security of the default configuration. The LBC should generate the necessary rules to permit traffic, based on the Service and Ingress resources. If needed, set the controller flag --disable-restricted-sg-rules to true to permit traffic to all ports. This may be appropriate for backwards compatability, or troubleshooting.","title":"Security Group Management"},{"location":"deploy/security_groups/#security-groups-for-load-balancers","text":"Use security groups to limit client connections to your load balancers, and restrict connections with nodes. The AWS Load Balancer Controller (LBC) defines two classifications of security groups: frontend and backend . Frontend Security Groups: Determine the clients that can access the load balancers. Backend Security Groups: Permit the load balancer to connect to targets, such as EC2 instances or ENIs.","title":"Security Groups for Load Balancers"},{"location":"deploy/security_groups/#frontend-security-groups","text":"Frontend security groups control access to load balancers by specifying which clients can connect to them. Use cases for Frontent Security Groups include: Placing the load balancer behind another service, such as AWS Web Application Firewall or AWS CloudFront . Blocking the IP address range (CIDR) of a region. Configuring the Load Balancer for private or internal use, by specifying internal CIDRs and Security Groups. In the default configuration, the LBC automatically creates one security group per load balancer, allowing traffic from inbound-cidrs to listen-ports .","title":"Frontend Security Groups"},{"location":"deploy/security_groups/#configuration","text":"Apply custom frontend security groups with an annotation. This disables automatic generation of frontend security groups. For Ingress resources, use the alb.ingress.kubernetes.io/security-groups annotation. For Service resources, use the service.beta.kubernetes.io/aws-load-balancer-security-groups annotation. The annotation must be set to one or more security group IDs or security group names.","title":"Configuration"},{"location":"deploy/security_groups/#backend-security-groups","text":"Backend Security Groups control traffic between AWS Load Balancers and their target EC2 instances or ENIs. For example, backend security groups can restrict the ports load balancers may access on nodes. Backend security groups permit traffic from AWS Load Balancers to their targets. LBC uses a single, shared backend security group, attaching it to each load balancer and using as the traffic source in the security group rules it adds to targets. When configuring security group rules at the ENI/Instance level, use the Security Group ID of the backend security group. Avoid using the IP addresses of a specific AWS Load Balancer, these IPs are dynamic and the security group rules aren't updated automatically.","title":"Backend Security Groups"},{"location":"deploy/security_groups/#configuration_1","text":"Enable or Disable: Use --enable-backend-security-group (default true ) to enable/disable the shared backend security group. You can turn off the shared backend security group feature by setting it to false . However, if you have a high number of Ingress resources with frontend security groups auto-generated by the controller, you might run into security group rule limits on the instance/ENI security groups. Specification: Use --backend-security-group to pass in a security group ID to use as a custom shared backend security group. If --backend-security-group is left empty, a security group with the following attributes will be created: name : k8s-traffic-- tags : elbv2.k8s.aws/cluster : elbv2.k8s.aws/resource : backend-sg","title":"Configuration"},{"location":"deploy/security_groups/#coordination-of-frontend-and-backend-security-groups","text":"If the LBC auto-creates the frontend security group for a load balancer, it automatically adds the security group rules to allow traffic from the load balancer to the backend instances/ENIs. If the frontend security groups are manually specified, the LBC will not by default add any rules to the backend security group.","title":"Coordination of Frontend and Backend Security Groups"},{"location":"deploy/security_groups/#enable-autogeneration-of-backend-security-group-rules","text":"If using custom frontend security groups, the LBC can be configured to automatically manage backend security group rules. To enable managing backend security group rules, apply an additional annotation to Ingress and Service resources. For Ingress resources, set the alb.ingress.kubernetes.io/manage-backend-security-group-rules annotation to true . For Service resources, set the service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules annotation to true . If management of backend security group rules is enabled with an annotation on a Service or Ingress, then --enable-backend-security-group must be set to true. These annotations are ignored when using auto-generated frontend security groups.","title":"Enable Autogeneration of Backend Security Group Rules"},{"location":"deploy/security_groups/#port-range-restrictions","text":"From version v2.3.0 onwards, the controller restricts port ranges in the backend security group rules by default. This improves the security of the default configuration. The LBC should generate the necessary rules to permit traffic, based on the Service and Ingress resources. If needed, set the controller flag --disable-restricted-sg-rules to true to permit traffic to all ports. This may be appropriate for backwards compatability, or troubleshooting.","title":"Port Range Restrictions"},{"location":"deploy/subnet_discovery/","text":"Subnet auto-discovery \u00b6 By default, the AWS Load Balancer Controller (LBC) auto-discovers network subnets that it can create AWS Network Load Balancers (NLB) and AWS Application Load Balancers (ALB) in. ALBs require at least two subnets across Availability Zones by default, set Feature Gate ALBSingleSubnet to \"true\" allows using only 1 subnet for provisioning ALB. NLBs require one subnet. The subnets must be tagged appropriately for auto-discovery to work. The controller chooses one subnet from each Availability Zone. During auto-discovery, the controller considers subnets with at least eight available IP addresses. In the case of multiple qualified tagged subnets in an Availability Zone, the controller chooses the first one in lexicographical order by the subnet IDs. For more information about the subnets for the LBC, see Application Load Balancers and Network Load Balancers . If you used eksctl or an Amazon EKS AWS CloudFormation template to create your VPC after March 26, 2020, then the subnets are tagged appropriately when they're created. For more information about the Amazon EKS AWS CloudFormation VPC templates, see Creating a VPC for your Amazon EKS cluster . Public subnets \u00b6 Public subnets are used for internet-facing load balancers. These subnets must have the following tags: Key Value kubernetes.io/role/elb 1 or `` Private subnets \u00b6 Private subnets are used for internal load balancers. These subnets must have the following tags: Key Value kubernetes.io/role/internal-elb 1 or `` Common tag \u00b6 In version v2.1.1 and older of the LBC, both the public and private subnets must be tagged with the cluster name as follows: Key Value kubernetes.io/cluster/${cluster-name} owned or shared ${cluster-name} is the name of the Kubernetes cluster. The cluster tag is not required in versions v2.1.2 to v2.4.1, unless a cluster tag for another cluster is present. With versions v2.4.2 and later, you can disable the cluster tag check completely by specifying the feature gate SubnetsClusterTagCheck=false","title":"Subnet Discovery"},{"location":"deploy/subnet_discovery/#subnet-auto-discovery","text":"By default, the AWS Load Balancer Controller (LBC) auto-discovers network subnets that it can create AWS Network Load Balancers (NLB) and AWS Application Load Balancers (ALB) in. ALBs require at least two subnets across Availability Zones by default, set Feature Gate ALBSingleSubnet to \"true\" allows using only 1 subnet for provisioning ALB. NLBs require one subnet. The subnets must be tagged appropriately for auto-discovery to work. The controller chooses one subnet from each Availability Zone. During auto-discovery, the controller considers subnets with at least eight available IP addresses. In the case of multiple qualified tagged subnets in an Availability Zone, the controller chooses the first one in lexicographical order by the subnet IDs. For more information about the subnets for the LBC, see Application Load Balancers and Network Load Balancers . If you used eksctl or an Amazon EKS AWS CloudFormation template to create your VPC after March 26, 2020, then the subnets are tagged appropriately when they're created. For more information about the Amazon EKS AWS CloudFormation VPC templates, see Creating a VPC for your Amazon EKS cluster .","title":"Subnet auto-discovery"},{"location":"deploy/subnet_discovery/#public-subnets","text":"Public subnets are used for internet-facing load balancers. These subnets must have the following tags: Key Value kubernetes.io/role/elb 1 or ``","title":"Public subnets"},{"location":"deploy/subnet_discovery/#private-subnets","text":"Private subnets are used for internal load balancers. These subnets must have the following tags: Key Value kubernetes.io/role/internal-elb 1 or ``","title":"Private subnets"},{"location":"deploy/subnet_discovery/#common-tag","text":"In version v2.1.1 and older of the LBC, both the public and private subnets must be tagged with the cluster name as follows: Key Value kubernetes.io/cluster/${cluster-name} owned or shared ${cluster-name} is the name of the Kubernetes cluster. The cluster tag is not required in versions v2.1.2 to v2.4.1, unless a cluster tag for another cluster is present. With versions v2.4.2 and later, you can disable the cluster tag check completely by specifying the feature gate SubnetsClusterTagCheck=false","title":"Common tag"},{"location":"deploy/upgrade/migrate_v1_v2/","text":"Migrate from v1 to v2 \u00b6 This document contains the information necessary to migrate from an existing installation of AWSALBIngressController(v1) to the new AWSLoadBalancerController(v2). Prerequisites \u00b6 AWSALBIngressController >=v1.1.3 If you have AWSALBIngressController(<1.1.3) installed, you need to upgrade to version>=v1.1.3(e.g. v1.1.9) first. Backwards compatibility \u00b6 The AWSLoadBalancerController(v2.0.1) is backwards-compatible with AWSALBIngressController(>=v1.1.3). It supports existing AWS resources provisioned by AWSALBIngressController(>=v1.1.3) for Ingress resources with below caveats: The AWS LoadBalancer resource created for your Ingress will be preserved. If migrating from =v1.1.3). Existing AWSALBIngressController needs to be uninstalled first before install new AWSLoadBalancerController. Existing Ingress resources do not need to be deleted. Install new AWSLoadBalancerController Install AWSLoadBalancerController(v2.5.0) by following the installation instructions Grant additional IAM policy needed for migration to the controller. Verify all Ingresses works as expected.","title":"Migrate v1 to v2"},{"location":"deploy/upgrade/migrate_v1_v2/#migrate-from-v1-to-v2","text":"This document contains the information necessary to migrate from an existing installation of AWSALBIngressController(v1) to the new AWSLoadBalancerController(v2).","title":"Migrate from v1 to v2"},{"location":"deploy/upgrade/migrate_v1_v2/#prerequisites","text":"AWSALBIngressController >=v1.1.3 If you have AWSALBIngressController(<1.1.3) installed, you need to upgrade to version>=v1.1.3(e.g. v1.1.9) first.","title":"Prerequisites"},{"location":"deploy/upgrade/migrate_v1_v2/#backwards-compatibility","text":"The AWSLoadBalancerController(v2.0.1) is backwards-compatible with AWSALBIngressController(>=v1.1.3). It supports existing AWS resources provisioned by AWSALBIngressController(>=v1.1.3) for Ingress resources with below caveats: The AWS LoadBalancer resource created for your Ingress will be preserved. If migrating from =v1.1.3). Existing AWSALBIngressController needs to be uninstalled first before install new AWSLoadBalancerController. Existing Ingress resources do not need to be deleted. Install new AWSLoadBalancerController Install AWSLoadBalancerController(v2.5.0) by following the installation instructions Grant additional IAM policy needed for migration to the controller. Verify all Ingresses works as expected.","title":"Upgrade steps"},{"location":"examples/echo_server/","text":"walkthrough: echoserver \u00b6 In this walkthrough, you'll Create a cluster with EKS Deploy an aws-load-balancer-controller Create deployments and ingress resources in the cluster Verify access to the service (Optional) Use external-dns to create a DNS record pointing to the load balancer created by the aws-load-balancer-controller. This assumes you have a route53 hosted zone available. Otherwise you can access the service using the load balancer DNS. Create the EKS cluster \u00b6 Install eksctl : https://eksctl.io Create EKS cluster via eksctl eksctl create cluster 2018-08-14T11:19:09-07:00 [\u2139] setting availability zones to [us-west-2c us-west-2a us-west-2b] 2018-08-14T11:19:09-07:00 [\u2139] importing SSH public key \"/Users/kamador/.ssh/id_rsa.pub\" as \"eksctl-exciting-gopher-1534270749-b7:71:da:f6:f3:63:7a:ee:ad:7a:10:37:28:ff:44:d1\" 2018-08-14T11:19:10-07:00 [\u2139] creating EKS cluster \"exciting-gopher-1534270749\" in \"us-west-2\" region 2018-08-14T11:19:10-07:00 [\u2139] creating ServiceRole stack \"EKS-exciting-gopher-1534270749-ServiceRole\" 2018-08-14T11:19:10-07:00 [\u2139] creating VPC stack \"EKS-exciting-gopher-1534270749-VPC\" 2018-08-14T11:19:50-07:00 [\u2714] created ServiceRole stack \"EKS-exciting-gopher-1534270749-ServiceRole\" 2018-08-14T11:20:30-07:00 [\u2714] created VPC stack \"EKS-exciting-gopher-1534270749-VPC\" 2018-08-14T11:20:30-07:00 [\u2139] creating control plane \"exciting-gopher-1534270749\" 2018-08-14T11:31:52-07:00 [\u2714] created control plane \"exciting-gopher-1534270749\" 2018-08-14T11:31:52-07:00 [\u2139] creating DefaultNodeGroup stack \"EKS-exciting-gopher-1534270749-DefaultNodeGroup\" 2018-08-14T11:35:33-07:00 [\u2714] created DefaultNodeGroup stack \"EKS-exciting-gopher-1534270749-DefaultNodeGroup\" 2018-08-14T11:35:33-07:00 [\u2714] all EKS cluster \"exciting-gopher-1534270749\" resources has been created 2018-08-14T11:35:33-07:00 [\u2714] saved kubeconfig as \"/Users/kamador/.kube/config\" 2018-08-14T11:35:34-07:00 [\u2139] the cluster has 0 nodes 2018-08-14T11:35:34-07:00 [\u2139] waiting for at least 2 nodes to become ready 2018-08-14T11:36:05-07:00 [\u2139] the cluster has 2 nodes 2018-08-14T11:36:05-07:00 [\u2139] node \"ip-192-168-139-176.us-west-2.compute.internal\" is ready 2018-08-14T11:36:05-07:00 [\u2139] node \"ip-192-168-214-126.us-west-2.compute.internal\" is ready 2018-08-14T11:36:05-07:00 [\u2714] EKS cluster \"exciting-gopher-1534270749\" in \"us-west-2\" region is ready Setup the AWS Load Balancer controller \u00b6 Refer to the installation instructions to setup the controller Verify the deployment was successful and the controller started. kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller Should display output similar to the following. {\"level\":\"info\",\"ts\":1602778062.2588625,\"logger\":\"setup\",\"msg\":\"version\",\"GitVersion\":\"v2.0.0-rc3-13-gcdc8f715-dirty\",\"GitCommit\":\"cdc8f715919cc65ca8161b6083c4091222632d6b\",\"BuildDate\":\"2020-10-15T15:58:31+0000\"} {\"level\":\"info\",\"ts\":1602778065.4515743,\"logger\":\"controller-runtime.metrics\",\"msg\":\"metrics server is starting to listen\",\"addr\":\":8080\"} {\"level\":\"info\",\"ts\":1602778065.4536595,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/mutate-v1-pod\"} {\"level\":\"info\",\"ts\":1602778065.4537156,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding\"} {\"level\":\"info\",\"ts\":1602778065.4537542,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/validate-elbv2-k8s-aws-v1beta1-targetgroupbinding\"} {\"level\":\"info\",\"ts\":1602778065.4537594,\"logger\":\"setup\",\"msg\":\"starting manager\"} I1015 16:07:45.453851 1 leaderelection.go:242] attempting to acquire leader lease kube-system/aws-load-balancer-controller-leader... {\"level\":\"info\",\"ts\":1602778065.5544264,\"logger\":\"controller-runtime.manager\",\"msg\":\"starting metrics server\",\"path\":\"/metrics\"} {\"level\":\"info\",\"ts\":1602778065.5544496,\"logger\":\"controller-runtime.webhook.webhooks\",\"msg\":\"starting webhook server\"} {\"level\":\"info\",\"ts\":1602778065.5549548,\"logger\":\"controller-runtime.certwatcher\",\"msg\":\"Updated current TLS certificate\"} {\"level\":\"info\",\"ts\":1602778065.5550802,\"logger\":\"controller-runtime.webhook\",\"msg\":\"serving webhook server\",\"host\":\"\",\"port\":9443} {\"level\":\"info\",\"ts\":1602778065.5551715,\"logger\":\"controller-runtime.certwatcher\",\"msg\":\"Starting certificate watcher\"} I1015 16:08:03.662023 1 leaderelection.go:252] successfully acquired lease kube-system/aws-load-balancer-controller-leader {\"level\":\"info\",\"ts\":1602778083.663017,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6631303,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6633205,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"channel source: 0xc0007340f0\"} {\"level\":\"info\",\"ts\":1602778083.6633654,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"channel source: 0xc000734140\"} {\"level\":\"info\",\"ts\":1602778083.6633892,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.663441,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6634624,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6635776,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"service\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6636262,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"service\"} {\"level\":\"info\",\"ts\":1602778083.7634695,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.7637022,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"service\",\"worker count\":3} {\"level\":\"info\",\"ts\":1602778083.7641861,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"ingress\"} {\"level\":\"info\",\"ts\":1602778083.8641882,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"targetGroupBinding\"} {\"level\":\"info\",\"ts\":1602778083.864236,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"targetGroupBinding\",\"worker count\":3} {\"level\":\"info\",\"ts\":1602778083.8643816,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"ingress\",\"worker count\":3} Deploy the echoserver resources \u00b6 Deploy all the echoserver resources (namespace, service, deployment) kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-namespace.yaml && \\ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-service.yaml && \\ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-deployment.yaml List all the resources to ensure they were created. kubectl get -n echoserver deploy,svc Should resolve similar to the following. NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE svc/echoserver 10.3.31.76 80:31027/TCP 4d NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE deploy/echoserver 1 1 1 1 4d Deploy ingress for echoserver \u00b6 Download the echoserver ingress manifest locally. wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-ingress.yaml Configure the subnets, either by add annotation to the ingress or add tags to subnets. This step is optional in lieu of auto-discovery. Tip If you'd like to use external dns, alter the host field to a domain that you own in Route 53. Assuming you managed example.com in Route 53. Edit the alb.ingress.kubernetes.io/subnets annotation to include at least two subnets. Subnets must be from different Availability Zones. eksctl get cluster exciting-gopher-1534270749 NAME VERSION STATUS CREATED VPC SUBNETS SECURITYGROUPS exciting-gopher-1534270749 1.10 ACTIVE 2018-08-14T18:20:32Z vpc-0aa01b07b3c922c9c subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516 sg-05ceb5eee9fd7cac4 apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : echoserver namespace : echoserver annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/target-type : ip alb.ingress.kubernetes.io/subnets : subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516 alb.ingress.kubernetes.io/tags : Environment=dev,Team=test spec : rules : - http : paths : Adding tags to subnets for auto-discovery(instead of alb.ingress.kubernetes.io/subnets annotation) you must include the following tags on desired subnets. kubernetes.io/cluster/$CLUSTER_NAME where $CLUSTER_NAME is the same CLUSTER_NAME specified in the above step. kubernetes.io/role/internal-elb should be set to 1 or an empty tag value for internal load balancers. kubernetes.io/role/elb should be set to 1 or an empty tag value for internet-facing load balancers. An example of a subnet with the correct tags for the cluster joshcalico is as follows. Deploy the ingress resource for echoserver kubectl apply -f echoserver-ingress.yaml Verify the aws-load-balancer-controller creates the resources kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller | grep 'echoserver\\/echoserver' You should see similar to the following. {\"level\":\"info\",\"ts\":1602803965.264764,\"logger\":\"controllers.ingress\",\"msg\":\"successfully built model\",\"model\":\"{\\\"id\\\":\\\"echoserver/echoserver\\\",\\\"resources\\\":{\\\"AWS::EC2::SecurityGroup\\\":{\\\"ManagedLBSecurityGroup\\\":{\\\"spec\\\":{\\\"groupName\\\":\\\"k8s-echoserv-echoserv-4e1e34cae5\\\",\\\"description\\\":\\\"[k8s] Managed SecurityGroup for LoadBalancer\\\",\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"},\\\"ingress\\\":[{\\\"ipProtocol\\\":\\\"tcp\\\",\\\"fromPort\\\":80,\\\"toPort\\\":80,\\\"ipRanges\\\":[{\\\"cidrIP\\\":\\\"0.0.0.0/0\\\"}]}]}}},\\\"AWS::ElasticLoadBalancingV2::Listener\\\":{\\\"80\\\":{\\\"spec\\\":{\\\"loadBalancerARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::LoadBalancer/LoadBalancer/status/loadBalancerARN\\\"},\\\"port\\\":80,\\\"protocol\\\":\\\"HTTP\\\",\\\"defaultActions\\\":[{\\\"type\\\":\\\"fixed-response\\\",\\\"fixedResponseConfig\\\":{\\\"contentType\\\":\\\"text/plain\\\",\\\"statusCode\\\":\\\"404\\\"}}]}}},\\\"AWS::ElasticLoadBalancingV2::ListenerRule\\\":{\\\"80:1\\\":{\\\"spec\\\":{\\\"listenerARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::Listener/80/status/listenerARN\\\"},\\\"priority\\\":1,\\\"actions\\\":[{\\\"type\\\":\\\"forward\\\",\\\"forwardConfig\\\":{\\\"targetGroups\\\":[{\\\"targetGroupARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\\\"}}]}}],\\\"conditions\\\":[{\\\"field\\\":\\\"host-header\\\",\\\"hostHeaderConfig\\\":{\\\"values\\\":[\\\"echoserver.example.com\\\"]}},{\\\"field\\\":\\\"path-pattern\\\",\\\"pathPatternConfig\\\":{\\\"values\\\":[\\\"/\\\"]}}]}}},\\\"AWS::ElasticLoadBalancingV2::LoadBalancer\\\":{\\\"LoadBalancer\\\":{\\\"spec\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d4d6bd65d0\\\",\\\"type\\\":\\\"application\\\",\\\"scheme\\\":\\\"internet-facing\\\",\\\"ipAddressType\\\":\\\"ipv4\\\",\\\"subnetMapping\\\":[{\\\"subnetID\\\":\\\"subnet-01b35707c23b0a43b\\\"},{\\\"subnetID\\\":\\\"subnet-0f7814a7ab4dfcc2c\\\"}],\\\"securityGroups\\\":[{\\\"$ref\\\":\\\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\\\"}],\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"}}}},\\\"AWS::ElasticLoadBalancingV2::TargetGroup\\\":{\\\"echoserver/echoserver-echoserver:80\\\":{\\\"spec\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d989093207\\\",\\\"targetType\\\":\\\"instance\\\",\\\"port\\\":1,\\\"protocol\\\":\\\"HTTP\\\",\\\"healthCheckConfig\\\":{\\\"port\\\":\\\"traffic-port\\\",\\\"protocol\\\":\\\"HTTP\\\",\\\"path\\\":\\\"/\\\",\\\"matcher\\\":{\\\"httpCode\\\":\\\"200\\\"},\\\"intervalSeconds\\\":15,\\\"timeoutSeconds\\\":5,\\\"healthyThresholdCount\\\":2,\\\"unhealthyThresholdCount\\\":2},\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"}}}},\\\"K8S::ElasticLoadBalancingV2::TargetGroupBinding\\\":{\\\"echoserver/echoserver-echoserver:80\\\":{\\\"spec\\\":{\\\"template\\\":{\\\"metadata\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d989093207\\\",\\\"namespace\\\":\\\"echoserver\\\",\\\"creationTimestamp\\\":null},\\\"spec\\\":{\\\"targetGroupARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\\\"},\\\"targetType\\\":\\\"instance\\\",\\\"serviceRef\\\":{\\\"name\\\":\\\"echoserver\\\",\\\"port\\\":80},\\\"networking\\\":{\\\"ingress\\\":[{\\\"from\\\":[{\\\"securityGroup\\\":{\\\"groupID\\\":{\\\"$ref\\\":\\\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\\\"}}}],\\\"ports\\\":[{\\\"protocol\\\":\\\"TCP\\\"}]}]}}}}}}}}\"} {\"level\":\"info\",\"ts\":1602803966.411922,\"logger\":\"controllers.ingress\",\"msg\":\"creating targetGroup\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"echoserver/echoserver-echoserver:80\"} {\"level\":\"info\",\"ts\":1602803966.6606336,\"logger\":\"controllers.ingress\",\"msg\":\"created targetGroup\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"echoserver/echoserver-echoserver:80\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:targetgroup/k8s-echoserv-echoserv-d989093207/63225ae3ead3deb6\"} {\"level\":\"info\",\"ts\":1602803966.798019,\"logger\":\"controllers.ingress\",\"msg\":\"creating loadBalancer\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"LoadBalancer\"} {\"level\":\"info\",\"ts\":1602803967.5472538,\"logger\":\"controllers.ingress\",\"msg\":\"created loadBalancer\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"LoadBalancer\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:loadbalancer/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1\"} {\"level\":\"info\",\"ts\":1602803967.5863476,\"logger\":\"controllers.ingress\",\"msg\":\"creating listener\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80\"} {\"level\":\"info\",\"ts\":1602803967.6436293,\"logger\":\"controllers.ingress\",\"msg\":\"created listener\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0\"} {\"level\":\"info\",\"ts\":1602803967.6528971,\"logger\":\"controllers.ingress\",\"msg\":\"creating listener rule\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80:1\"} {\"level\":\"info\",\"ts\":1602803967.7160048,\"logger\":\"controllers.ingress\",\"msg\":\"created listener rule\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80:1\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener-rule/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0/23ef859380e792e8\"} {\"level\":\"info\",\"ts\":1602803967.8484688,\"logger\":\"controllers.ingress\",\"msg\":\"successfully deployed model\",\"ingressGroup\":\"echoserver/echoserver\"} Check the events of the ingress to see what has occur. kubectl describe ing -n echoserver echoserver You should see similar to the following. Name: echoserver Namespace: echoserver Address: joshcalico-echoserver-echo-2ad7-1490890749.us-east-2.elb.amazonaws.com Default backend: default-http-backend:80 (10.2.1.28:8080) Rules: Host Path Backends ---- ---- -------- * / echoserver:80 () Annotations: Events: FirstSeen LastSeen Count From SubObjectPath Type Reason Message --------- -------- ----- ---- ------------- -------- ------ ------- 3m 3m 1 ingress-controller Normal CREATE Ingress echoserver/echoserver 3m 32s 3 ingress-controller Normal UPDATE Ingress echoserver/echoserver The address seen above is the ALB's DNS name. This will be referenced via records created by external-dns if you choose to set it up. Verify that you can access the service \u00b6 Make a curl request to the echoserver service and verify that it returns a response payload. Use the address from the output of kubectl describe ing command above. curl You should get back a valid response. (Optional) Use external-dns to create a DNS record \u00b6 Deploy external-dns to your cluster using these instructions - Setup external-dns Update your ingress resource and add spec.rules[0].host and set the value to your domain name. The example below uses echoserver.example.org . spec : rules : - host : echoserver.example.org http : paths : 1. external-dns will then create a DNS record for the host you specified. This assumes you have the hosted zone corresponding to the domain you are trying to create a record in. Annotate the ingress with the external-dns specific configuration annotations : kubernetes.io/ingress.class : alb alb.ingress.kubernetes.io/scheme : internet-facing # external-dns specific configuration for creating route53 record-set external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com # give your domain name here Verify the DNS has propagated dig echoserver.example.org ;; QUESTION SECTION: ;echoserver.example.org. IN A ;; ANSWER SECTION: echoserver.example.org. 60 IN A 13.59.147.105 echoserver.example.org. 60 IN A 18.221.65.39 echoserver.example.org. 60 IN A 52.15.186.25 Once it has, you can make a call to echoserver and it should return a response payload. curl echoserver.example.org CLIENT VALUES: client_address=10.0.50.185 command=GET real path=/ query=nil request_version=1.1 request_uri=http://echoserver.example.org:8080/ SERVER VALUES: server_version=nginx: 1.10.0 - lua: 10001 HEADERS RECEIVED: accept=*/* host=echoserver.example.org user-agent=curl/7.54.0 x-amzn-trace-id=Root=1-59c08da5-113347df69640735312371bd x-forwarded-for=67.173.237.250 x-forwarded-port=80 x-forwarded-proto=http BODY: Kube2iam setup \u00b6 follow below steps if you want to use kube2iam to provide the AWS credentials configure the proper policy The policy to be used can be fetched from https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json configure the proper role and create the trust relationship You have to find which role is associated with your K8S nodes. Once you found take note of the full arn: arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node create the role, called k8s-lb-controller, attach the above policy and add a Trust Relationship like: { \"Version\": \"2012-10-17\", \"Statement\": [ { \"Sid\": \"\", \"Effect\": \"Allow\", \"Principal\": { \"Service\": \"ec2.amazonaws.com\" }, \"Action\": \"sts:AssumeRole\" }, { \"Sid\": \"\", \"Effect\": \"Allow\", \"Principal\": { \"AWS\": \"arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node\" }, \"Action\": \"sts:AssumeRole\" } ] } The new role will have a similar arn: arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller update the alb-load-balancer-controller deployment Add the annotations in the template's metadata point spec : replicas : 1 selector : matchLabels : app.kubernetes.io/component : controller app.kubernetes.io/name : aws-load-balancer-controller strategy : rollingUpdate : maxSurge : 1 maxUnavailable : 1 type : RollingUpdate template : metadata : annotations : iam.amazonaws.com/role : arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller","title":"EchoServer"},{"location":"examples/echo_server/#walkthrough-echoserver","text":"In this walkthrough, you'll Create a cluster with EKS Deploy an aws-load-balancer-controller Create deployments and ingress resources in the cluster Verify access to the service (Optional) Use external-dns to create a DNS record pointing to the load balancer created by the aws-load-balancer-controller. This assumes you have a route53 hosted zone available. Otherwise you can access the service using the load balancer DNS.","title":"walkthrough: echoserver"},{"location":"examples/echo_server/#create-the-eks-cluster","text":"Install eksctl : https://eksctl.io Create EKS cluster via eksctl eksctl create cluster 2018-08-14T11:19:09-07:00 [\u2139] setting availability zones to [us-west-2c us-west-2a us-west-2b] 2018-08-14T11:19:09-07:00 [\u2139] importing SSH public key \"/Users/kamador/.ssh/id_rsa.pub\" as \"eksctl-exciting-gopher-1534270749-b7:71:da:f6:f3:63:7a:ee:ad:7a:10:37:28:ff:44:d1\" 2018-08-14T11:19:10-07:00 [\u2139] creating EKS cluster \"exciting-gopher-1534270749\" in \"us-west-2\" region 2018-08-14T11:19:10-07:00 [\u2139] creating ServiceRole stack \"EKS-exciting-gopher-1534270749-ServiceRole\" 2018-08-14T11:19:10-07:00 [\u2139] creating VPC stack \"EKS-exciting-gopher-1534270749-VPC\" 2018-08-14T11:19:50-07:00 [\u2714] created ServiceRole stack \"EKS-exciting-gopher-1534270749-ServiceRole\" 2018-08-14T11:20:30-07:00 [\u2714] created VPC stack \"EKS-exciting-gopher-1534270749-VPC\" 2018-08-14T11:20:30-07:00 [\u2139] creating control plane \"exciting-gopher-1534270749\" 2018-08-14T11:31:52-07:00 [\u2714] created control plane \"exciting-gopher-1534270749\" 2018-08-14T11:31:52-07:00 [\u2139] creating DefaultNodeGroup stack \"EKS-exciting-gopher-1534270749-DefaultNodeGroup\" 2018-08-14T11:35:33-07:00 [\u2714] created DefaultNodeGroup stack \"EKS-exciting-gopher-1534270749-DefaultNodeGroup\" 2018-08-14T11:35:33-07:00 [\u2714] all EKS cluster \"exciting-gopher-1534270749\" resources has been created 2018-08-14T11:35:33-07:00 [\u2714] saved kubeconfig as \"/Users/kamador/.kube/config\" 2018-08-14T11:35:34-07:00 [\u2139] the cluster has 0 nodes 2018-08-14T11:35:34-07:00 [\u2139] waiting for at least 2 nodes to become ready 2018-08-14T11:36:05-07:00 [\u2139] the cluster has 2 nodes 2018-08-14T11:36:05-07:00 [\u2139] node \"ip-192-168-139-176.us-west-2.compute.internal\" is ready 2018-08-14T11:36:05-07:00 [\u2139] node \"ip-192-168-214-126.us-west-2.compute.internal\" is ready 2018-08-14T11:36:05-07:00 [\u2714] EKS cluster \"exciting-gopher-1534270749\" in \"us-west-2\" region is ready","title":"Create the EKS cluster"},{"location":"examples/echo_server/#setup-the-aws-load-balancer-controller","text":"Refer to the installation instructions to setup the controller Verify the deployment was successful and the controller started. kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller Should display output similar to the following. {\"level\":\"info\",\"ts\":1602778062.2588625,\"logger\":\"setup\",\"msg\":\"version\",\"GitVersion\":\"v2.0.0-rc3-13-gcdc8f715-dirty\",\"GitCommit\":\"cdc8f715919cc65ca8161b6083c4091222632d6b\",\"BuildDate\":\"2020-10-15T15:58:31+0000\"} {\"level\":\"info\",\"ts\":1602778065.4515743,\"logger\":\"controller-runtime.metrics\",\"msg\":\"metrics server is starting to listen\",\"addr\":\":8080\"} {\"level\":\"info\",\"ts\":1602778065.4536595,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/mutate-v1-pod\"} {\"level\":\"info\",\"ts\":1602778065.4537156,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding\"} {\"level\":\"info\",\"ts\":1602778065.4537542,\"logger\":\"controller-runtime.webhook\",\"msg\":\"registering webhook\",\"path\":\"/validate-elbv2-k8s-aws-v1beta1-targetgroupbinding\"} {\"level\":\"info\",\"ts\":1602778065.4537594,\"logger\":\"setup\",\"msg\":\"starting manager\"} I1015 16:07:45.453851 1 leaderelection.go:242] attempting to acquire leader lease kube-system/aws-load-balancer-controller-leader... {\"level\":\"info\",\"ts\":1602778065.5544264,\"logger\":\"controller-runtime.manager\",\"msg\":\"starting metrics server\",\"path\":\"/metrics\"} {\"level\":\"info\",\"ts\":1602778065.5544496,\"logger\":\"controller-runtime.webhook.webhooks\",\"msg\":\"starting webhook server\"} {\"level\":\"info\",\"ts\":1602778065.5549548,\"logger\":\"controller-runtime.certwatcher\",\"msg\":\"Updated current TLS certificate\"} {\"level\":\"info\",\"ts\":1602778065.5550802,\"logger\":\"controller-runtime.webhook\",\"msg\":\"serving webhook server\",\"host\":\"\",\"port\":9443} {\"level\":\"info\",\"ts\":1602778065.5551715,\"logger\":\"controller-runtime.certwatcher\",\"msg\":\"Starting certificate watcher\"} I1015 16:08:03.662023 1 leaderelection.go:252] successfully acquired lease kube-system/aws-load-balancer-controller-leader {\"level\":\"info\",\"ts\":1602778083.663017,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6631303,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6633205,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"channel source: 0xc0007340f0\"} {\"level\":\"info\",\"ts\":1602778083.6633654,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"channel source: 0xc000734140\"} {\"level\":\"info\",\"ts\":1602778083.6633892,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.663441,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6634624,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"ingress\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6635776,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"service\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.6636262,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"service\"} {\"level\":\"info\",\"ts\":1602778083.7634695,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting EventSource\",\"controller\":\"targetGroupBinding\",\"source\":\"kind source: /, Kind=\"} {\"level\":\"info\",\"ts\":1602778083.7637022,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"service\",\"worker count\":3} {\"level\":\"info\",\"ts\":1602778083.7641861,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"ingress\"} {\"level\":\"info\",\"ts\":1602778083.8641882,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting Controller\",\"controller\":\"targetGroupBinding\"} {\"level\":\"info\",\"ts\":1602778083.864236,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"targetGroupBinding\",\"worker count\":3} {\"level\":\"info\",\"ts\":1602778083.8643816,\"logger\":\"controller-runtime.controller\",\"msg\":\"Starting workers\",\"controller\":\"ingress\",\"worker count\":3}","title":"Setup the AWS Load Balancer controller"},{"location":"examples/echo_server/#deploy-the-echoserver-resources","text":"Deploy all the echoserver resources (namespace, service, deployment) kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-namespace.yaml && \\ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-service.yaml && \\ kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-deployment.yaml List all the resources to ensure they were created. kubectl get -n echoserver deploy,svc Should resolve similar to the following. NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE svc/echoserver 10.3.31.76 80:31027/TCP 4d NAME DESIRED CURRENT UP-TO-DATE AVAILABLE AGE deploy/echoserver 1 1 1 1 4d","title":"Deploy the echoserver resources"},{"location":"examples/echo_server/#deploy-ingress-for-echoserver","text":"Download the echoserver ingress manifest locally. wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/examples/echoservice/echoserver-ingress.yaml Configure the subnets, either by add annotation to the ingress or add tags to subnets. This step is optional in lieu of auto-discovery. Tip If you'd like to use external dns, alter the host field to a domain that you own in Route 53. Assuming you managed example.com in Route 53. Edit the alb.ingress.kubernetes.io/subnets annotation to include at least two subnets. Subnets must be from different Availability Zones. eksctl get cluster exciting-gopher-1534270749 NAME VERSION STATUS CREATED VPC SUBNETS SECURITYGROUPS exciting-gopher-1534270749 1.10 ACTIVE 2018-08-14T18:20:32Z vpc-0aa01b07b3c922c9c subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516 sg-05ceb5eee9fd7cac4 apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : echoserver namespace : echoserver annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/target-type : ip alb.ingress.kubernetes.io/subnets : subnet-05e1c98ed0f5b109e,subnet-07f5bb81f661df61b,subnet-0a4e6232630820516 alb.ingress.kubernetes.io/tags : Environment=dev,Team=test spec : rules : - http : paths : Adding tags to subnets for auto-discovery(instead of alb.ingress.kubernetes.io/subnets annotation) you must include the following tags on desired subnets. kubernetes.io/cluster/$CLUSTER_NAME where $CLUSTER_NAME is the same CLUSTER_NAME specified in the above step. kubernetes.io/role/internal-elb should be set to 1 or an empty tag value for internal load balancers. kubernetes.io/role/elb should be set to 1 or an empty tag value for internet-facing load balancers. An example of a subnet with the correct tags for the cluster joshcalico is as follows. Deploy the ingress resource for echoserver kubectl apply -f echoserver-ingress.yaml Verify the aws-load-balancer-controller creates the resources kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller | grep 'echoserver\\/echoserver' You should see similar to the following. {\"level\":\"info\",\"ts\":1602803965.264764,\"logger\":\"controllers.ingress\",\"msg\":\"successfully built model\",\"model\":\"{\\\"id\\\":\\\"echoserver/echoserver\\\",\\\"resources\\\":{\\\"AWS::EC2::SecurityGroup\\\":{\\\"ManagedLBSecurityGroup\\\":{\\\"spec\\\":{\\\"groupName\\\":\\\"k8s-echoserv-echoserv-4e1e34cae5\\\",\\\"description\\\":\\\"[k8s] Managed SecurityGroup for LoadBalancer\\\",\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"},\\\"ingress\\\":[{\\\"ipProtocol\\\":\\\"tcp\\\",\\\"fromPort\\\":80,\\\"toPort\\\":80,\\\"ipRanges\\\":[{\\\"cidrIP\\\":\\\"0.0.0.0/0\\\"}]}]}}},\\\"AWS::ElasticLoadBalancingV2::Listener\\\":{\\\"80\\\":{\\\"spec\\\":{\\\"loadBalancerARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::LoadBalancer/LoadBalancer/status/loadBalancerARN\\\"},\\\"port\\\":80,\\\"protocol\\\":\\\"HTTP\\\",\\\"defaultActions\\\":[{\\\"type\\\":\\\"fixed-response\\\",\\\"fixedResponseConfig\\\":{\\\"contentType\\\":\\\"text/plain\\\",\\\"statusCode\\\":\\\"404\\\"}}]}}},\\\"AWS::ElasticLoadBalancingV2::ListenerRule\\\":{\\\"80:1\\\":{\\\"spec\\\":{\\\"listenerARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::Listener/80/status/listenerARN\\\"},\\\"priority\\\":1,\\\"actions\\\":[{\\\"type\\\":\\\"forward\\\",\\\"forwardConfig\\\":{\\\"targetGroups\\\":[{\\\"targetGroupARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\\\"}}]}}],\\\"conditions\\\":[{\\\"field\\\":\\\"host-header\\\",\\\"hostHeaderConfig\\\":{\\\"values\\\":[\\\"echoserver.example.com\\\"]}},{\\\"field\\\":\\\"path-pattern\\\",\\\"pathPatternConfig\\\":{\\\"values\\\":[\\\"/\\\"]}}]}}},\\\"AWS::ElasticLoadBalancingV2::LoadBalancer\\\":{\\\"LoadBalancer\\\":{\\\"spec\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d4d6bd65d0\\\",\\\"type\\\":\\\"application\\\",\\\"scheme\\\":\\\"internet-facing\\\",\\\"ipAddressType\\\":\\\"ipv4\\\",\\\"subnetMapping\\\":[{\\\"subnetID\\\":\\\"subnet-01b35707c23b0a43b\\\"},{\\\"subnetID\\\":\\\"subnet-0f7814a7ab4dfcc2c\\\"}],\\\"securityGroups\\\":[{\\\"$ref\\\":\\\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\\\"}],\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"}}}},\\\"AWS::ElasticLoadBalancingV2::TargetGroup\\\":{\\\"echoserver/echoserver-echoserver:80\\\":{\\\"spec\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d989093207\\\",\\\"targetType\\\":\\\"instance\\\",\\\"port\\\":1,\\\"protocol\\\":\\\"HTTP\\\",\\\"healthCheckConfig\\\":{\\\"port\\\":\\\"traffic-port\\\",\\\"protocol\\\":\\\"HTTP\\\",\\\"path\\\":\\\"/\\\",\\\"matcher\\\":{\\\"httpCode\\\":\\\"200\\\"},\\\"intervalSeconds\\\":15,\\\"timeoutSeconds\\\":5,\\\"healthyThresholdCount\\\":2,\\\"unhealthyThresholdCount\\\":2},\\\"tags\\\":{\\\"Environment\\\":\\\"dev\\\",\\\"Team\\\":\\\"test\\\"}}}},\\\"K8S::ElasticLoadBalancingV2::TargetGroupBinding\\\":{\\\"echoserver/echoserver-echoserver:80\\\":{\\\"spec\\\":{\\\"template\\\":{\\\"metadata\\\":{\\\"name\\\":\\\"k8s-echoserv-echoserv-d989093207\\\",\\\"namespace\\\":\\\"echoserver\\\",\\\"creationTimestamp\\\":null},\\\"spec\\\":{\\\"targetGroupARN\\\":{\\\"$ref\\\":\\\"#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/echoserver/echoserver-echoserver:80/status/targetGroupARN\\\"},\\\"targetType\\\":\\\"instance\\\",\\\"serviceRef\\\":{\\\"name\\\":\\\"echoserver\\\",\\\"port\\\":80},\\\"networking\\\":{\\\"ingress\\\":[{\\\"from\\\":[{\\\"securityGroup\\\":{\\\"groupID\\\":{\\\"$ref\\\":\\\"#/resources/AWS::EC2::SecurityGroup/ManagedLBSecurityGroup/status/groupID\\\"}}}],\\\"ports\\\":[{\\\"protocol\\\":\\\"TCP\\\"}]}]}}}}}}}}\"} {\"level\":\"info\",\"ts\":1602803966.411922,\"logger\":\"controllers.ingress\",\"msg\":\"creating targetGroup\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"echoserver/echoserver-echoserver:80\"} {\"level\":\"info\",\"ts\":1602803966.6606336,\"logger\":\"controllers.ingress\",\"msg\":\"created targetGroup\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"echoserver/echoserver-echoserver:80\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:targetgroup/k8s-echoserv-echoserv-d989093207/63225ae3ead3deb6\"} {\"level\":\"info\",\"ts\":1602803966.798019,\"logger\":\"controllers.ingress\",\"msg\":\"creating loadBalancer\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"LoadBalancer\"} {\"level\":\"info\",\"ts\":1602803967.5472538,\"logger\":\"controllers.ingress\",\"msg\":\"created loadBalancer\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"LoadBalancer\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:loadbalancer/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1\"} {\"level\":\"info\",\"ts\":1602803967.5863476,\"logger\":\"controllers.ingress\",\"msg\":\"creating listener\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80\"} {\"level\":\"info\",\"ts\":1602803967.6436293,\"logger\":\"controllers.ingress\",\"msg\":\"created listener\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0\"} {\"level\":\"info\",\"ts\":1602803967.6528971,\"logger\":\"controllers.ingress\",\"msg\":\"creating listener rule\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80:1\"} {\"level\":\"info\",\"ts\":1602803967.7160048,\"logger\":\"controllers.ingress\",\"msg\":\"created listener rule\",\"stackID\":\"echoserver/echoserver\",\"resourceID\":\"80:1\",\"arn\":\"arn:aws:elasticloadbalancing:us-west-2:019453415603:listener-rule/app/k8s-echoserv-echoserv-d4d6bd65d0/4b4ebe8d6e1ef0c1/6e13477f9d840da0/23ef859380e792e8\"} {\"level\":\"info\",\"ts\":1602803967.8484688,\"logger\":\"controllers.ingress\",\"msg\":\"successfully deployed model\",\"ingressGroup\":\"echoserver/echoserver\"} Check the events of the ingress to see what has occur. kubectl describe ing -n echoserver echoserver You should see similar to the following. Name: echoserver Namespace: echoserver Address: joshcalico-echoserver-echo-2ad7-1490890749.us-east-2.elb.amazonaws.com Default backend: default-http-backend:80 (10.2.1.28:8080) Rules: Host Path Backends ---- ---- -------- * / echoserver:80 () Annotations: Events: FirstSeen LastSeen Count From SubObjectPath Type Reason Message --------- -------- ----- ---- ------------- -------- ------ ------- 3m 3m 1 ingress-controller Normal CREATE Ingress echoserver/echoserver 3m 32s 3 ingress-controller Normal UPDATE Ingress echoserver/echoserver The address seen above is the ALB's DNS name. This will be referenced via records created by external-dns if you choose to set it up.","title":"Deploy ingress for echoserver"},{"location":"examples/echo_server/#verify-that-you-can-access-the-service","text":"Make a curl request to the echoserver service and verify that it returns a response payload. Use the address from the output of kubectl describe ing command above. curl You should get back a valid response.","title":"Verify that you can access the service"},{"location":"examples/echo_server/#optional-use-external-dns-to-create-a-dns-record","text":"Deploy external-dns to your cluster using these instructions - Setup external-dns Update your ingress resource and add spec.rules[0].host and set the value to your domain name. The example below uses echoserver.example.org . spec : rules : - host : echoserver.example.org http : paths : 1. external-dns will then create a DNS record for the host you specified. This assumes you have the hosted zone corresponding to the domain you are trying to create a record in. Annotate the ingress with the external-dns specific configuration annotations : kubernetes.io/ingress.class : alb alb.ingress.kubernetes.io/scheme : internet-facing # external-dns specific configuration for creating route53 record-set external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com # give your domain name here Verify the DNS has propagated dig echoserver.example.org ;; QUESTION SECTION: ;echoserver.example.org. IN A ;; ANSWER SECTION: echoserver.example.org. 60 IN A 13.59.147.105 echoserver.example.org. 60 IN A 18.221.65.39 echoserver.example.org. 60 IN A 52.15.186.25 Once it has, you can make a call to echoserver and it should return a response payload. curl echoserver.example.org CLIENT VALUES: client_address=10.0.50.185 command=GET real path=/ query=nil request_version=1.1 request_uri=http://echoserver.example.org:8080/ SERVER VALUES: server_version=nginx: 1.10.0 - lua: 10001 HEADERS RECEIVED: accept=*/* host=echoserver.example.org user-agent=curl/7.54.0 x-amzn-trace-id=Root=1-59c08da5-113347df69640735312371bd x-forwarded-for=67.173.237.250 x-forwarded-port=80 x-forwarded-proto=http BODY:","title":"(Optional) Use external-dns to create a DNS record"},{"location":"examples/echo_server/#kube2iam-setup","text":"follow below steps if you want to use kube2iam to provide the AWS credentials configure the proper policy The policy to be used can be fetched from https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.7.0/docs/install/iam_policy.json configure the proper role and create the trust relationship You have to find which role is associated with your K8S nodes. Once you found take note of the full arn: arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node create the role, called k8s-lb-controller, attach the above policy and add a Trust Relationship like: { \"Version\": \"2012-10-17\", \"Statement\": [ { \"Sid\": \"\", \"Effect\": \"Allow\", \"Principal\": { \"Service\": \"ec2.amazonaws.com\" }, \"Action\": \"sts:AssumeRole\" }, { \"Sid\": \"\", \"Effect\": \"Allow\", \"Principal\": { \"AWS\": \"arn:aws:iam::XXXXXXXXXXXX:role/k8scluster-node\" }, \"Action\": \"sts:AssumeRole\" } ] } The new role will have a similar arn: arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller update the alb-load-balancer-controller deployment Add the annotations in the template's metadata point spec : replicas : 1 selector : matchLabels : app.kubernetes.io/component : controller app.kubernetes.io/name : aws-load-balancer-controller strategy : rollingUpdate : maxSurge : 1 maxUnavailable : 1 type : RollingUpdate template : metadata : annotations : iam.amazonaws.com/role : arn:aws:iam:::XXXXXXXXXXXX:role/k8s-lb-controller","title":"Kube2iam setup"},{"location":"examples/grpc_server/","text":"walkthrough: grpcserver \u00b6 In this walkthrough, you'll Deploy a grpc service to an existing EKS cluster Send a test message to the hosted service over TLS Prerequsites \u00b6 The following resources are required prior to deployment: EKS cluster aws-load-balancer-controller external-dns See echo_server.md and external_dns.md for setup instructions for those resources. Create an ACM certificate \u00b6 NOTE: An ACM certificate is required for this demo as the application uses the grpc.secure_channel method. If you already have an ACM certificate (including wildcard certificates) for the domain you would like to use in this example, you can skip this step. Request a certificate for a domain you own using the steps described in the official AWS ACM documentation . Once the status for the certificate is \"Issued\" continue to the next step. Deploy the grpcserver manifests \u00b6 Deploy all the manifests from GitHub. kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-namespace.yaml kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-service.yaml kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-deployment.yaml Confirm that all resources were created. kubectl get -n grpcserver all You should see the pod, service, and deployment. NAME READY STATUS RESTARTS AGE pod/grpcserver-5455b7d4d-jshk5 1/1 Running 0 35m NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE service/grpcserver ClusterIP None 50051/TCP 77m NAME READY UP-TO-DATE AVAILABLE AGE deployment.apps/grpcserver 1/1 1 1 77m NAME DESIRED CURRENT READY AGE replicaset.apps/grpcserver-5455b7d4d 1 1 1 35m Customize the ingress for grpcserver \u00b6 Download the grpcserver ingress manifest. wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-ingress.yaml Change the domain name from grpcserver.example.com to your desired domain. The example manifest assumes that you have tagged your subnets for the aws-load-balancer-controller. Otherwise add your subnets using the alb.ingress.kubernetes.io/subnets annotation. Deploy the ingress resource for grpcserver. kubectl apply -f grpcserver-ingress.yaml Wait a few minutes for the ALB to provision and for DNS to update. Check the aws-load-balancer-controller logs to ensure the ALB is created. Also ensure that external-dns creates a DNS record that points your domain to the ALB. kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller | grep 'grpcserver\\/grpcserver' kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = external-dns | grep 'YOUR_DOMAIN_NAME' Next check that your ingress shows the correct ALB address and custom domain name. kubectl get ingress -n grpcserver grpcserver You should see similar to the following. NNAME CLASS HOSTS ADDRESS PORTS AGE grpcserver alb YOUR_DOMAIN_NAME ALB-DNS-NAME 80 90m Finally, test your secure gRPC service by running the greeter client, substituting YOUR_DOMAIN_NAME for the domain you used in the ingress manifest. docker run --rm -it --env BACKEND = YOUR_DOMAIN_NAME placeexchange/grpc-demo:latest python greeter_client.py You should see the following response. Greeter client received: Hello, you!","title":"gRPCServer"},{"location":"examples/grpc_server/#walkthrough-grpcserver","text":"In this walkthrough, you'll Deploy a grpc service to an existing EKS cluster Send a test message to the hosted service over TLS","title":"walkthrough: grpcserver"},{"location":"examples/grpc_server/#prerequsites","text":"The following resources are required prior to deployment: EKS cluster aws-load-balancer-controller external-dns See echo_server.md and external_dns.md for setup instructions for those resources.","title":"Prerequsites"},{"location":"examples/grpc_server/#create-an-acm-certificate","text":"NOTE: An ACM certificate is required for this demo as the application uses the grpc.secure_channel method. If you already have an ACM certificate (including wildcard certificates) for the domain you would like to use in this example, you can skip this step. Request a certificate for a domain you own using the steps described in the official AWS ACM documentation . Once the status for the certificate is \"Issued\" continue to the next step.","title":"Create an ACM certificate"},{"location":"examples/grpc_server/#deploy-the-grpcserver-manifests","text":"Deploy all the manifests from GitHub. kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-namespace.yaml kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-service.yaml kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-deployment.yaml Confirm that all resources were created. kubectl get -n grpcserver all You should see the pod, service, and deployment. NAME READY STATUS RESTARTS AGE pod/grpcserver-5455b7d4d-jshk5 1/1 Running 0 35m NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE service/grpcserver ClusterIP None 50051/TCP 77m NAME READY UP-TO-DATE AVAILABLE AGE deployment.apps/grpcserver 1/1 1 1 77m NAME DESIRED CURRENT READY AGE replicaset.apps/grpcserver-5455b7d4d 1 1 1 35m","title":"Deploy the grpcserver manifests"},{"location":"examples/grpc_server/#customize-the-ingress-for-grpcserver","text":"Download the grpcserver ingress manifest. wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/grpc/grpcserver-ingress.yaml Change the domain name from grpcserver.example.com to your desired domain. The example manifest assumes that you have tagged your subnets for the aws-load-balancer-controller. Otherwise add your subnets using the alb.ingress.kubernetes.io/subnets annotation. Deploy the ingress resource for grpcserver. kubectl apply -f grpcserver-ingress.yaml Wait a few minutes for the ALB to provision and for DNS to update. Check the aws-load-balancer-controller logs to ensure the ALB is created. Also ensure that external-dns creates a DNS record that points your domain to the ALB. kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = aws-load-balancer-controller | grep 'grpcserver\\/grpcserver' kubectl logs -n kube-system --tail -1 -l app.kubernetes.io/name = external-dns | grep 'YOUR_DOMAIN_NAME' Next check that your ingress shows the correct ALB address and custom domain name. kubectl get ingress -n grpcserver grpcserver You should see similar to the following. NNAME CLASS HOSTS ADDRESS PORTS AGE grpcserver alb YOUR_DOMAIN_NAME ALB-DNS-NAME 80 90m Finally, test your secure gRPC service by running the greeter client, substituting YOUR_DOMAIN_NAME for the domain you used in the ingress manifest. docker run --rm -it --env BACKEND = YOUR_DOMAIN_NAME placeexchange/grpc-demo:latest python greeter_client.py You should see the following response. Greeter client received: Hello, you!","title":"Customize the ingress for grpcserver"},{"location":"examples/secrets_access/","text":"RBAC configuration for secrets resources \u00b6 In this walkthrough, you will configure RBAC permissions for the controller to access specific secrets resource in a particular namespace. Create Role \u00b6 Prepare the role manifest with the appropriate name, namespace, and secretName, for example: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: example-role namespace: example-namespace rules: - apiGroups: - \"\" resourceNames: - example-secret resources: - secrets verbs: - get - list - watch Apply the role manifest kubectl apply -f role.yaml Create RoleBinding \u00b6 Prepare the rolebinding manifest with the appropriate name, namespace and role reference. For example: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: example-rolebinding namespace: example-namespace roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: example-role subjects: - kind: ServiceAccount name: aws-load-balancer-controller namespace: kube-system Apply the rolebinding manifest kubectl apply -f rolebinding.yaml","title":"RBAC to access OIDC Secret"},{"location":"examples/secrets_access/#rbac-configuration-for-secrets-resources","text":"In this walkthrough, you will configure RBAC permissions for the controller to access specific secrets resource in a particular namespace.","title":"RBAC configuration for secrets resources"},{"location":"examples/secrets_access/#create-role","text":"Prepare the role manifest with the appropriate name, namespace, and secretName, for example: apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: example-role namespace: example-namespace rules: - apiGroups: - \"\" resourceNames: - example-secret resources: - secrets verbs: - get - list - watch Apply the role manifest kubectl apply -f role.yaml","title":"Create Role"},{"location":"examples/secrets_access/#create-rolebinding","text":"Prepare the rolebinding manifest with the appropriate name, namespace and role reference. For example: apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: example-rolebinding namespace: example-namespace roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: example-role subjects: - kind: ServiceAccount name: aws-load-balancer-controller namespace: kube-system Apply the rolebinding manifest kubectl apply -f rolebinding.yaml","title":"Create RoleBinding"},{"location":"guide/ingress/annotations/","text":"Ingress annotations \u00b6 You can add annotations to kubernetes Ingress and Service objects to customize their behavior. Annotation keys and values can only be strings. Advanced format should be encoded as below: boolean: 'true' integer: '42' stringList: s1,s2,s3 stringMap: k1=v1,k2=v2 json: 'jsonContent' Annotations applied to Service have higher priority over annotations applied to Ingress. Location column below indicates where that annotation can be applied to. Annotations that configures LoadBalancer / Listener behaviors have different merge behavior when IngressGroup feature is been used. MergeBehavior column below indicates how such annotation will be merged. Exclusive: such annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup. Merge: such annotation can be specified on all Ingresses within IngressGroup, and will be merged together. Annotations \u00b6 Name Type Default Location MergeBehavior alb.ingress.kubernetes.io/load-balancer-name string N/A Ingress Exclusive alb.ingress.kubernetes.io/group.name string N/A Ingress N/A alb.ingress.kubernetes.io/group.order integer 0 Ingress N/A alb.ingress.kubernetes.io/tags stringMap N/A Ingress,Service Merge alb.ingress.kubernetes.io/ip-address-type ipv4 | dualstack ipv4 Ingress Exclusive alb.ingress.kubernetes.io/scheme internal | internet-facing internal Ingress Exclusive alb.ingress.kubernetes.io/subnets stringList N/A Ingress Exclusive alb.ingress.kubernetes.io/security-groups stringList N/A Ingress Exclusive alb.ingress.kubernetes.io/manage-backend-security-group-rules boolean N/A Ingress Exclusive alb.ingress.kubernetes.io/customer-owned-ipv4-pool string N/A Ingress Exclusive alb.ingress.kubernetes.io/load-balancer-attributes stringMap N/A Ingress Exclusive alb.ingress.kubernetes.io/wafv2-acl-arn string N/A Ingress Exclusive alb.ingress.kubernetes.io/waf-acl-id string N/A Ingress Exclusive alb.ingress.kubernetes.io/shield-advanced-protection boolean N/A Ingress Exclusive alb.ingress.kubernetes.io/listen-ports json '[{\"HTTP\": 80}]' | '[{\"HTTPS\": 443}]' Ingress Merge alb.ingress.kubernetes.io/ssl-redirect integer N/A Ingress Exclusive alb.ingress.kubernetes.io/inbound-cidrs stringList 0.0.0.0/0, ::/0 Ingress Exclusive alb.ingress.kubernetes.io/certificate-arn stringList N/A Ingress Merge alb.ingress.kubernetes.io/ssl-policy string ELBSecurityPolicy-2016-08 Ingress Exclusive alb.ingress.kubernetes.io/target-type instance | ip instance Ingress,Service N/A alb.ingress.kubernetes.io/backend-protocol HTTP | HTTPS HTTP Ingress,Service N/A alb.ingress.kubernetes.io/backend-protocol-version string HTTP1 Ingress,Service N/A alb.ingress.kubernetes.io/target-group-attributes stringMap N/A Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-port integer | traffic-port traffic-port Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-protocol HTTP | HTTPS HTTP Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-path string / | /AWS.ALB/healthcheck Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-interval-seconds integer '15' Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-timeout-seconds integer '5' Ingress,Service N/A alb.ingress.kubernetes.io/healthy-threshold-count integer '2' Ingress,Service N/A alb.ingress.kubernetes.io/unhealthy-threshold-count integer '2' Ingress,Service N/A alb.ingress.kubernetes.io/success-codes string '200' | '12' Ingress,Service N/A alb.ingress.kubernetes.io/auth-type none|oidc|cognito none Ingress,Service N/A alb.ingress.kubernetes.io/auth-idp-cognito json N/A Ingress,Service N/A alb.ingress.kubernetes.io/auth-idp-oidc json N/A Ingress,Service N/A alb.ingress.kubernetes.io/auth-on-unauthenticated-request authenticate|allow|deny authenticate Ingress,Service N/A alb.ingress.kubernetes.io/auth-scope string openid Ingress,Service N/A alb.ingress.kubernetes.io/auth-session-cookie string AWSELBAuthSessionCookie Ingress,Service N/A alb.ingress.kubernetes.io/auth-session-timeout integer '604800' Ingress,Service N/A alb.ingress.kubernetes.io/actions.${action-name} json N/A Ingress N/A alb.ingress.kubernetes.io/conditions.${conditions-name} json N/A Ingress N/A alb.ingress.kubernetes.io/target-node-labels stringMap N/A Ingress,Service N/A alb.ingress.kubernetes.io/mutual-authentication json '[{\"port\": 443, \"mode\": \"off\"}]' Ingress Exclusive IngressGroup \u00b6 IngressGroup feature enables you to group multiple Ingress resources together. The controller will automatically merge Ingress rules for all Ingresses within IngressGroup and support them with a single ALB. In addition, most annotations defined on an Ingress only apply to the paths defined by that Ingress. By default, Ingresses don't belong to any IngressGroup, and we treat it as a \"implicit IngressGroup\" consisting of the Ingress itself. alb.ingress.kubernetes.io/group.name specifies the group name that this Ingress belongs to. Ingresses with same group.name annotation will form an \"explicit IngressGroup\". groupName must consist of lower case alphanumeric characters, - or . , and must start and end with an alphanumeric character. groupName must be no more than 63 character. Security Risk IngressGroup feature should only be used when all Kubernetes users with RBAC permission to create/modify Ingress resources are within trust boundary. If you turn your Ingress to belong a \"explicit IngressGroup\" by adding group.name annotation, other Kubernetes users may create/modify their Ingresses to belong to the same IngressGroup, and can thus add more rules or overwrite existing rules with higher priority to the ALB for your Ingress. We'll add more fine-grained access-control in future versions. Rename behavior The ALB for an IngressGroup is found by searching for an AWS tag ingress.k8s.aws/stack tag with the name of the IngressGroup as its value. For an implicit IngressGroup, the value is namespace/ingressname . When the groupName of an IngressGroup for an Ingress is changed, the Ingress will be moved to a new IngressGroup and be supported by the ALB for the new IngressGroup. If the ALB for the new IngressGroup doesn't exist, a new ALB will be created. If an IngressGroup no longer contains any Ingresses, the ALB for that IngressGroup will be deleted and any deletion protection of that ALB will be ignored. Example alb.ingress.kubernetes.io/group.name: my-team.awesome-group alb.ingress.kubernetes.io/group.order specifies the order across all Ingresses within IngressGroup. You can explicitly denote the order using a number between -1000 and 1000 The smaller the order, the rule will be evaluated first. All Ingresses without an explicit order setting get order value as 0 Rules with the same order are sorted lexicographically by the Ingress\u2019s namespace/name. Example alb.ingress.kubernetes.io/group.order: '10' Traffic Listening \u00b6 Traffic Listening can be controlled with the following annotations: alb.ingress.kubernetes.io/listen-ports specifies the ports that ALB listens on. Merge Behavior listen-ports is merged across all Ingresses in IngressGroup. You can define different listen-ports per Ingress, Ingress rules will only impact the ports defined for that Ingress. If same listen-port is defined by multiple Ingress within IngressGroup, Ingress rules will be merged with respect to their group order within IngressGroup. Default defaults to '[{\"HTTP\": 80}]' or '[{\"HTTPS\": 443}]' depending on whether certificate-arn is specified. You may not have duplicate load balancer ports defined. Example alb.ingress.kubernetes.io/listen-ports: '[{\"HTTP\": 80}, {\"HTTPS\": 443}, {\"HTTP\": 8080}, {\"HTTPS\": 8443}]' alb.ingress.kubernetes.io/ssl-redirect enables SSLRedirect and specifies the SSL port that redirects to. Merge Behavior ssl-redirect is exclusive across all Ingresses in IngressGroup. Once defined on a single Ingress, it impacts every Ingress within IngressGroup. Once enabled SSLRedirect, every HTTP listener will be configured with a default action which redirects to HTTPS, other rules will be ignored. The SSL port that redirects to must exists on LoadBalancer. See alb.ingress.kubernetes.io/listen-ports for the listen ports configuration. Example alb.ingress.kubernetes.io/ssl-redirect: '443' alb.ingress.kubernetes.io/ip-address-type specifies the IP address type of ALB. Example alb.ingress.kubernetes.io/ip-address-type: ipv4 alb.ingress.kubernetes.io/customer-owned-ipv4-pool specifies the customer-owned IPv4 address pool for ALB on Outpost. This annotation should be treated as immutable. To remove or change coIPv4Pool, you need to recreate Ingress. Example alb.ingress.kubernetes.io/customer-owned-ipv4-pool: ipv4pool-coip-xxxxxxxx Traffic Routing \u00b6 Traffic Routing can be controlled with following annotations: alb.ingress.kubernetes.io/load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error. Merge Behavior name is exclusive across all Ingresses in an IngressGroup. Once defined on a single Ingress, it impacts every Ingress within the IngressGroup. Example alb.ingress.kubernetes.io/load-balancer-name: custom-name alb.ingress.kubernetes.io/target-type specifies how to route traffic to pods. You can choose between instance and ip : instance mode will route traffic to all ec2 instances within cluster on NodePort opened for your service. service must be of type \"NodePort\" or \"LoadBalancer\" to use instance mode ip mode will route traffic directly to the pod IP. network plugin must use secondary IP addresses on ENI for pod IP to use ip mode. e.g. amazon-vpc-cni-k8s ip mode is required for sticky sessions to work with Application Load Balancers. The Service type does not matter, when using ip mode. Example alb.ingress.kubernetes.io/target-type: instance alb.ingress.kubernetes.io/target-node-labels specifies which nodes to include in the target group registration for instance target type. Example alb.ingress.kubernetes.io/target-node-labels: label1=value1, label2=value2 alb.ingress.kubernetes.io/backend-protocol specifies the protocol used when route traffic to pods. Example alb.ingress.kubernetes.io/backend-protocol: HTTPS alb.ingress.kubernetes.io/backend-protocol-version specifies the application protocol used to route traffic to pods. Only valid when HTTP or HTTPS is used as the backend protocol. Example HTTP2 alb.ingress.kubernetes.io/backend-protocol-version: HTTP2 GRPC alb.ingress.kubernetes.io/backend-protocol-version: GRPC alb.ingress.kubernetes.io/subnets specifies the Availability Zone s that the ALB will route traffic to. See Load Balancer subnets for more details. You must specify at least two subnets in different AZs. Either subnetID or subnetName(Name tag on subnets) can be used. Tip You can enable subnet auto discovery to avoid specifying this annotation on every Ingress. See Subnet Discovery for instructions. Example alb.ingress.kubernetes.io/subnets: subnet-xxxx, mySubnet alb.ingress.kubernetes.io/actions.${action-name} Provides a method for configuring custom actions on a listener, such as Redirect Actions. The action-name in the annotation must match the serviceName in the Ingress rules, and servicePort must be use-annotation . use ARN in forward Action ARN can be used in forward action(both simplified schema and advanced schema), it must be an targetGroup created outside of k8s, typically an targetGroup for legacy application. use ServiceName/ServicePort in forward Action ServiceName/ServicePort can be used in forward action(advanced schema only). Auth related annotations on Service object will only be respected if a single TargetGroup in is used. Example response-503: return fixed 503 response redirect-to-eks: redirect to an external url forward-single-tg: forward to a single targetGroup [ simplified schema ] forward-multiple-tg: forward to multiple targetGroups with different weights and stickiness config [ advanced schema ] apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/actions.response-503 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"503\",\"messageBody\":\"503 error text\"}} alb.ingress.kubernetes.io/actions.redirect-to-eks : > {\"type\":\"redirect\",\"redirectConfig\":{\"host\":\"aws.amazon.com\",\"path\":\"/eks/\",\"port\":\"443\",\"protocol\":\"HTTPS\",\"query\":\"k=v\",\"statusCode\":\"HTTP_302\"}} alb.ingress.kubernetes.io/actions.forward-single-tg : > {\"type\":\"forward\",\"targetGroupARN\": \"arn-of-your-target-group\"} alb.ingress.kubernetes.io/actions.forward-multiple-tg : > {\"type\":\"forward\",\"forwardConfig\":{\"targetGroups\":[{\"serviceName\":\"service-1\",\"servicePort\":\"http\",\"weight\":20},{\"serviceName\":\"service-2\",\"servicePort\":80,\"weight\":20},{\"targetGroupARN\":\"arn-of-your-non-k8s-target-group\",\"weight\":60}],\"targetGroupStickinessConfig\":{\"enabled\":true,\"durationSeconds\":200}}} spec : ingressClassName : alb rules : - http : paths : - path : /503 pathType : Exact backend : service : name : response-503 port : name : use-annotation - path : /eks pathType : Exact backend : service : name : redirect-to-eks port : name : use-annotation - path : /path1 pathType : Exact backend : service : name : forward-single-tg port : name : use-annotation - path : /path2 pathType : Exact backend : service : name : forward-multiple-tg port : name : use-annotation alb.ingress.kubernetes.io/conditions.${conditions-name} Provides a method for specifying routing conditions in addition to original host/path condition on Ingress spec . The conditions-name in the annotation must match the serviceName in the Ingress rules. It can be a either real serviceName or an annotation based action name when servicePort is use-annotation . limitations General ALB limitations applies: Each rule can optionally include up to one of each of the following conditions: host-header, http-request-method, path-pattern, and source-ip. Each rule can also optionally include one or more of each of the following conditions: http-header and query-string. You can specify up to three match evaluations per condition. You can specify up to five match evaluations per rule. Refer ALB documentation for more details. Example rule-path1: Host is www.example.com OR anno.example.com Path is /path1 rule-path2: Host is www.example.com Path is /path2 OR /anno/path2 rule-path3: Host is www.example.com Path is /path3 Http header HeaderName is HeaderValue1 OR HeaderValue2 rule-path4: Host is www.example.com Path is /path4 Http request method is GET OR HEAD rule-path5: Host is www.example.com Path is /path5 Query string is paramA:valueA1 OR paramA:valueA2 rule-path6: Host is www.example.com Path is /path6 Source IP is192.168.0.0/16 OR 172.16.0.0/16 rule-path7: Host is www.example.com Path is /path7 Http header HeaderName is HeaderValue Query string is paramA:valueA Query string is paramB:valueB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/actions.rule-path1 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Host is www.example.com OR anno.example.com\"}} alb.ingress.kubernetes.io/conditions.rule-path1 : > [{\"field\":\"host-header\",\"hostHeaderConfig\":{\"values\":[\"anno.example.com\"]}}] alb.ingress.kubernetes.io/actions.rule-path2 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Path is /path2 OR /anno/path2\"}} alb.ingress.kubernetes.io/conditions.rule-path2 : > [{\"field\":\"path-pattern\",\"pathPatternConfig\":{\"values\":[\"/anno/path2\"]}}] alb.ingress.kubernetes.io/actions.rule-path3 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Http header HeaderName is HeaderValue1 OR HeaderValue2\"}} alb.ingress.kubernetes.io/conditions.rule-path3 : > [{\"field\":\"http-header\",\"httpHeaderConfig\":{\"httpHeaderName\": \"HeaderName\", \"values\":[\"HeaderValue1\", \"HeaderValue2\"]}}] alb.ingress.kubernetes.io/actions.rule-path4 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Http request method is GET OR HEAD\"}} alb.ingress.kubernetes.io/conditions.rule-path4 : > [{\"field\":\"http-request-method\",\"httpRequestMethodConfig\":{\"Values\":[\"GET\", \"HEAD\"]}}] alb.ingress.kubernetes.io/actions.rule-path5 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Query string is paramA:valueA1 OR paramA:valueA2\"}} alb.ingress.kubernetes.io/conditions.rule-path5 : > [{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramA\",\"value\":\"valueA1\"},{\"key\":\"paramA\",\"value\":\"valueA2\"}]}}] alb.ingress.kubernetes.io/actions.rule-path6 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Source IP is 192.168.0.0/16 OR 172.16.0.0/16\"}} alb.ingress.kubernetes.io/conditions.rule-path6 : > [{\"field\":\"source-ip\",\"sourceIpConfig\":{\"values\":[\"192.168.0.0/16\", \"172.16.0.0/16\"]}}] alb.ingress.kubernetes.io/actions.rule-path7 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"multiple conditions applies\"}} alb.ingress.kubernetes.io/conditions.rule-path7 : > [{\"field\":\"http-header\",\"httpHeaderConfig\":{\"httpHeaderName\": \"HeaderName\", \"values\":[\"HeaderValue\"]}},{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramA\",\"value\":\"valueA\"}]}},{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramB\",\"value\":\"valueB\"}]}}] spec : ingressClassName : alb rules : - host : www.example.com http : paths : - path : /path1 pathType : Exact backend : service : name : rule-path1 port : name : use-annotation - path : /path2 pathType : Exact backend : service : name : rule-path2 port : name : use-annotation - path : /path3 pathType : Exact backend : service : name : rule-path3 port : name : use-annotation - path : /path4 pathType : Exact backend : service : name : rule-path4 port : name : use-annotation - path : /path5 pathType : Exact backend : service : name : rule-path5 port : name : use-annotation - path : /path6 pathType : Exact backend : service : name : rule-path6 port : name : use-annotation - path : /path7 pathType : Exact backend : service : name : rule-path7 port : name : use-annotation Note If you are using alb.ingress.kubernetes.io/target-group-attributes with stickiness.enabled=true , you should add TargetGroupStickinessConfig under alb.ingress.kubernetes.io/actions.weighted-routing Example apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/target-type : ip alb.ingress.kubernetes.io/target-group-attributes : stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60 alb.ingress.kubernetes.io/actions.weighted-routing : | { \"type\" : \"forward\" , \"forwardConfig\" :{ \"targetGroups\" :[ { \"serviceName\" : \"service-1\" , \"servicePort\" : \"80\" , \"weight\" : 50 }, { \"serviceName\" : \"service-2\" , \"servicePort\" : \"80\" , \"weight\" : 50 } ], \"TargetGroupStickinessConfig\" : { \"Enabled\" : true , \"DurationSeconds\" : 120 } } } spec : ingressClassName : alb rules : - host : www.example.com http : paths : - path : / pathType : Prefix backend : service : name : weighted-routing port : name : use-annotation Access control \u00b6 Access control for LoadBalancer can be controlled with following annotations: alb.ingress.kubernetes.io/scheme specifies whether your LoadBalancer will be internet facing. See Load balancer scheme in the AWS documentation for more details. Example alb.ingress.kubernetes.io/scheme: internal alb.ingress.kubernetes.io/inbound-cidrs specifies the CIDRs that are allowed to access LoadBalancer. Merge Behavior inbound-cidrs is merged across all Ingresses in IngressGroup, but is exclusive per listen-port. the inbound-cidrs will only impact the ports defined for that Ingress. if same listen-port is defined by multiple Ingress within IngressGroup, inbound-cidrs should only be defined on one of the Ingress. Default 0.0.0.0/0 will be used if the IPAddressType is \"ipv4\" 0.0.0.0/0 and ::/0 will be used if the IPAddressType is \"dualstack\" this annotation will be ignored if alb.ingress.kubernetes.io/security-groups is specified. Example alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/24 alb.ingress.kubernetes.io/security-groups specifies the securityGroups you want to attach to LoadBalancer. When this annotation is not present, the controller will automatically create one security group, the security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports . Also, the securityGroups for Node/Pod will be modified to allow inbound traffic from this securityGroup. If you specify this annotation, you need to configure the security groups on your Node/Pod to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the access rules. Both name or ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute. Example alb.ingress.kubernetes.io/security-groups: sg-xxxx, nameOfSg1, nameOfSg2 alb.ingress.kubernetes.io/manage-backend-security-group-rules specifies whether you want the controller to configure security group rules on Node/Pod for traffic access when you specify security-groups . This annotation applies only in case you specify the security groups via security-groups annotation. If set to true, controller attaches an additional shared backend security group to your load balancer. This backend security group is used in the Node/Pod security group rules. Example alb.ingress.kubernetes.io/manage-backend-security-group-rules: \"true\" Authentication \u00b6 ALB supports authentication with Cognito or OIDC. See Authenticate Users Using an Application Load Balancer for more details. HTTPS only Authentication is only supported for HTTPS listeners. See TLS for configuring HTTPS listeners. alb.ingress.kubernetes.io/auth-type specifies the authentication type on targets. Example alb.ingress.kubernetes.io/auth-type: cognito alb.ingress.kubernetes.io/auth-idp-cognito specifies the cognito idp configuration. If you are using Amazon Cognito Domain, the userPoolDomain should be set to the domain prefix(my-domain) instead of full domain(https://my-domain.auth.us-west-2.amazoncognito.com) Example alb.ingress.kubernetes.io/auth-idp-cognito: '{\"userPoolARN\":\"arn:aws:cognito-idp:us-west-2:xxx:userpool/xxx\",\"userPoolClientID\":\"my-clientID\",\"userPoolDomain\":\"my-domain\"}' alb.ingress.kubernetes.io/auth-idp-oidc specifies the oidc idp configuration. You need to create an secret within the same namespace as Ingress to hold your OIDC clientID and clientSecret. The format of secret is as below: apiVersion : v1 kind : Secret metadata : namespace : testcase name : my-k8s-secret data : clientID : base64 of your plain text clientId clientSecret : base64 of your plain text clientSecret Example alb.ingress.kubernetes.io/auth-idp-oidc: '{\"issuer\":\"https://example.com\",\"authorizationEndpoint\":\"https://authorization.example.com\",\"tokenEndpoint\":\"https://token.example.com\",\"userInfoEndpoint\":\"https://userinfo.example.com\",\"secretName\":\"my-k8s-secret\"}' alb.ingress.kubernetes.io/auth-on-unauthenticated-request specifies the behavior if the user is not authenticated. options: authenticate : try authenticate with configured IDP. deny : return an HTTP 401 Unauthorized error. allow : allow the request to be forwarded to the target. Example alb.ingress.kubernetes.io/auth-on-unauthenticated-request: authenticate alb.ingress.kubernetes.io/auth-scope specifies the set of user claims to be requested from the IDP(cognito or oidc), in a space-separated list. options: phone email profile openid aws.cognito.signin.user.admin Example alb.ingress.kubernetes.io/auth-scope: 'email openid' alb.ingress.kubernetes.io/auth-session-cookie specifies the name of the cookie used to maintain session information Example alb.ingress.kubernetes.io/auth-session-cookie: custom-cookie alb.ingress.kubernetes.io/auth-session-timeout specifies the maximum duration of the authentication session, in seconds Example alb.ingress.kubernetes.io/auth-session-timeout: '86400' Health Check \u00b6 Health check on target groups can be controlled with following annotations: alb.ingress.kubernetes.io/healthcheck-protocol specifies the protocol used when performing health check on targets. Example alb.ingress.kubernetes.io/healthcheck-protocol: HTTPS alb.ingress.kubernetes.io/healthcheck-port specifies the port used when performing health check on targets. When using target-type: instance with a service of type \"NodePort\", the healthcheck port can be set to traffic-port to automatically point to the correct port. Example set the healthcheck port to the traffic port alb.ingress.kubernetes.io/healthcheck-port: traffic-port set the healthcheck port to the NodePort(when target-type=instance) or TargetPort(when target-type=ip) of a named port alb.ingress.kubernetes.io/healthcheck-port: my-port set the healthcheck port to 80/tcp alb.ingress.kubernetes.io/healthcheck-port: '80' alb.ingress.kubernetes.io/healthcheck-path specifies the HTTP path when performing health check on targets. Example HTTP alb.ingress.kubernetes.io/healthcheck-path: /ping GRPC alb.ingress.kubernetes.io/healthcheck-path: /package.service/method alb.ingress.kubernetes.io/healthcheck-interval-seconds specifies the interval(in seconds) between health check of an individual target. Example alb.ingress.kubernetes.io/healthcheck-interval-seconds: '10' alb.ingress.kubernetes.io/healthcheck-timeout-seconds specifies the timeout(in seconds) during which no response from a target means a failed health check Example alb.ingress.kubernetes.io/healthcheck-timeout-seconds: '8' alb.ingress.kubernetes.io/success-codes specifies the HTTP or gRPC status code that should be expected when doing health checks against the specified health check path. Example use single value alb.ingress.kubernetes.io/success-codes: '200' use multiple values alb.ingress.kubernetes.io/success-codes: 200,201 use range of value alb.ingress.kubernetes.io/success-codes: 200-300 use gRPC single value alb.ingress.kubernetes.io/success-codes: '0' use gRPC multiple value alb.ingress.kubernetes.io/success-codes: 0,1 use gRPC range of value alb.ingress.kubernetes.io/success-codes: 0-5 alb.ingress.kubernetes.io/healthy-threshold-count specifies the consecutive health checks successes required before considering an unhealthy target healthy. Example alb.ingress.kubernetes.io/healthy-threshold-count: '2' alb.ingress.kubernetes.io/unhealthy-threshold-count specifies the consecutive health check failures required before considering a target unhealthy. Example alb.ingress.kubernetes.io/unhealthy-threshold-count: '2' TLS \u00b6 TLS support can be controlled with the following annotations: alb.ingress.kubernetes.io/certificate-arn specifies the ARN of one or more certificate managed by AWS Certificate Manager The first certificate in the list will be added as default certificate. And remaining certificate will be added to the optional certificate list. See SSL Certificates for more details. Certificate Discovery TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources. See Certificate Discovery for instructions. Example single certificate alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx multiple certificates alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/cert1,arn:aws:acm:us-west-2:xxxxx:certificate/cert2,arn:aws:acm:us-west-2:xxxxx:certificate/cert3 alb.ingress.kubernetes.io/ssl-policy specifies the Security Policy that should be assigned to the ALB, allowing you to control the protocol and ciphers. Example alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS-1-1-2017-01 alb.ingress.kubernetes.io/mutual-authentication specifies the mutual authentication configuration that should be assigned to the Application Load Balancer secure listener ports. See Mutual authentication with TLS in the AWS documentation for more details. Configuration Options port: listen port Must be a HTTPS port specified by listen-ports . mode: \"off\" (default) | \"passthrough\" | \"verify\" verify mode requires an existing trust store resource. See Create a trust store in the AWS documentation for more details. trustStore: ARN (arn:aws:elasticloadbalancing:trustStoreArn) | Name (my-trust-store) Both ARN and Name of trustStore are supported values. trustStore is required when mode is verify . ignoreClientCertificateExpiry : true | false (default) Example listen-ports specifies four HTTPS ports: 80, 443, 8080, 8443 listener HTTPS:80 will be set to passthrough mode listener HTTPS:443 will be set to verify mode, associated with trust store arn arn:aws:elasticloadbalancing:trustStoreArn and have ignoreClientCertificateExpiry set to true listeners HTTPS:8080 and HTTPS:8443 remain in the default mode off . alb.ingress.kubernetes.io/listen-ports: '[{\"HTTPS\": 80}, {\"HTTPS\": 443}, {\"HTTPS\": 8080}, {\"HTTPS\": 8443}]' alb.ingress.kubernetes.io/mutual-authentication: '[{\"port\": 80, \"mode\": \"passthrough\"}, {\"port\": 443, \"mode\": \"verify\", \"trustStore\": \"arn:aws:elasticloadbalancing:trustStoreArn\", \"ignoreClientCertificateExpiry\" : true}]' Note To avoid conflict errors in IngressGroup, this annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup. Trust stores limit per Application Load Balancer A maximum of two different trust stores can be associated among listeners on the same ingress. See Quotas for your Application Load Balancers in the AWS documentation for more details. Custom attributes \u00b6 Custom attributes to LoadBalancers and TargetGroups can be controlled with following annotations: alb.ingress.kubernetes.io/load-balancer-attributes specifies Load Balancer Attributes that should be applied to the ALB. Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values( access_logs.s3.enabled=false ) and omitting them is not sufficient. If deletion_protection.enabled=true is in annotation, the controller will not be able to delete the ALB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource. Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource. Example enable access log to s3 alb.ingress.kubernetes.io/load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app enable deletion protection alb.ingress.kubernetes.io/load-balancer-attributes: deletion_protection.enabled=true enable invalid header fields removal alb.ingress.kubernetes.io/load-balancer-attributes: routing.http.drop_invalid_header_fields.enabled=true enable http2 support alb.ingress.kubernetes.io/load-balancer-attributes: routing.http2.enabled=true set idle_timeout delay to 600 seconds alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=600 enable connection logs alb.ingress.kubernetes.io/load-balancer-attributes: connection_logs.s3.enabled=true,connection_logs.s3.bucket=my-connection-log-bucket,connection_logs.s3.prefix=my-app alb.ingress.kubernetes.io/target-group-attributes specifies Target Group Attributes which should be applied to Target Groups. Example set the slow start duration to 30 seconds (available range is 30-900 seconds) alb.ingress.kubernetes.io/target-group-attributes: slow_start.duration_seconds=30 set the deregistration delay to 30 seconds (available range is 0-3600 seconds) alb.ingress.kubernetes.io/target-group-attributes: deregistration_delay.timeout_seconds=30 enable sticky sessions (requires alb.ingress.kubernetes.io/target-type be set to ip ) alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60 alb.ingress.kubernetes.io/target-type: ip set load balancing algorithm to least outstanding requests alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=least_outstanding_requests enable Automated Target Weights(ATW) on HTTP/HTTPS target groups to increase application availability. Set your load balancing algorithm to weighted random and turn on anomaly mitigation (recommended) alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=weighted_random,load_balancing.algorithm.anomaly_mitigation=on Resource Tags \u00b6 The AWS Load Balancer Controller automatically applies following tags to the AWS resources (ALB/TargetGroups/SecurityGroups/Listener/ListenerRule) it creates: elbv2.k8s.aws/cluster: ${clusterName} ingress.k8s.aws/stack: ${stackID} ingress.k8s.aws/resource: ${resourceID} In addition, you can use annotations to specify additional tags alb.ingress.kubernetes.io/tags specifies additional tags that will be applied to AWS resources created. In case of target group, the controller will merge the tags from the ingress and the backend service giving precedence to the values specified on the service when there is conflict. Example alb.ingress.kubernetes.io/tags: Environment=dev,Team=test Addons \u00b6 Note If waf-acl-arn is specified via the ingress annotations, the controller will make sure the waf-acl is associated to the provisioned ALB with the ingress. If there is not such annotation, the controller will make sure no waf-acl is associated, so it may remove the existing waf-acl on the ALB provisioned. If users do not want the controller to manage the waf-acl on the ALBs, they can disable the feature by setting controller command line flags --enable-waf=false or --enable-wafv2=false alb.ingress.kubernetes.io/waf-acl-id specifies the identifier for the Amazon WAF web ACL. Only Regional WAF is supported. Example alb.ingress.kubernetes.io/waf-acl-id: 499e8b99-6671-4614-a86d-adb1810b7fbe alb.ingress.kubernetes.io/wafv2-acl-arn specifies ARN for the Amazon WAFv2 web ACL. Only Regional WAFv2 is supported. To get the WAFv2 Web ACL ARN from the Console, click the gear icon in the upper right and enable the ARN column. Example alb.ingress.kubernetes.io/wafv2-acl-arn: arn:aws:wafv2:us-west-2:xxxxx:regional/webacl/xxxxxxx/3ab78708-85b0-49d3-b4e1-7a9615a6613b alb.ingress.kubernetes.io/shield-advanced-protection turns on / off the AWS Shield Advanced protection for the load balancer. Example alb.ingress.kubernetes.io/shield-advanced-protection: 'true'","title":"Annotations"},{"location":"guide/ingress/annotations/#ingress-annotations","text":"You can add annotations to kubernetes Ingress and Service objects to customize their behavior. Annotation keys and values can only be strings. Advanced format should be encoded as below: boolean: 'true' integer: '42' stringList: s1,s2,s3 stringMap: k1=v1,k2=v2 json: 'jsonContent' Annotations applied to Service have higher priority over annotations applied to Ingress. Location column below indicates where that annotation can be applied to. Annotations that configures LoadBalancer / Listener behaviors have different merge behavior when IngressGroup feature is been used. MergeBehavior column below indicates how such annotation will be merged. Exclusive: such annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup. Merge: such annotation can be specified on all Ingresses within IngressGroup, and will be merged together.","title":"Ingress annotations"},{"location":"guide/ingress/annotations/#annotations","text":"Name Type Default Location MergeBehavior alb.ingress.kubernetes.io/load-balancer-name string N/A Ingress Exclusive alb.ingress.kubernetes.io/group.name string N/A Ingress N/A alb.ingress.kubernetes.io/group.order integer 0 Ingress N/A alb.ingress.kubernetes.io/tags stringMap N/A Ingress,Service Merge alb.ingress.kubernetes.io/ip-address-type ipv4 | dualstack ipv4 Ingress Exclusive alb.ingress.kubernetes.io/scheme internal | internet-facing internal Ingress Exclusive alb.ingress.kubernetes.io/subnets stringList N/A Ingress Exclusive alb.ingress.kubernetes.io/security-groups stringList N/A Ingress Exclusive alb.ingress.kubernetes.io/manage-backend-security-group-rules boolean N/A Ingress Exclusive alb.ingress.kubernetes.io/customer-owned-ipv4-pool string N/A Ingress Exclusive alb.ingress.kubernetes.io/load-balancer-attributes stringMap N/A Ingress Exclusive alb.ingress.kubernetes.io/wafv2-acl-arn string N/A Ingress Exclusive alb.ingress.kubernetes.io/waf-acl-id string N/A Ingress Exclusive alb.ingress.kubernetes.io/shield-advanced-protection boolean N/A Ingress Exclusive alb.ingress.kubernetes.io/listen-ports json '[{\"HTTP\": 80}]' | '[{\"HTTPS\": 443}]' Ingress Merge alb.ingress.kubernetes.io/ssl-redirect integer N/A Ingress Exclusive alb.ingress.kubernetes.io/inbound-cidrs stringList 0.0.0.0/0, ::/0 Ingress Exclusive alb.ingress.kubernetes.io/certificate-arn stringList N/A Ingress Merge alb.ingress.kubernetes.io/ssl-policy string ELBSecurityPolicy-2016-08 Ingress Exclusive alb.ingress.kubernetes.io/target-type instance | ip instance Ingress,Service N/A alb.ingress.kubernetes.io/backend-protocol HTTP | HTTPS HTTP Ingress,Service N/A alb.ingress.kubernetes.io/backend-protocol-version string HTTP1 Ingress,Service N/A alb.ingress.kubernetes.io/target-group-attributes stringMap N/A Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-port integer | traffic-port traffic-port Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-protocol HTTP | HTTPS HTTP Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-path string / | /AWS.ALB/healthcheck Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-interval-seconds integer '15' Ingress,Service N/A alb.ingress.kubernetes.io/healthcheck-timeout-seconds integer '5' Ingress,Service N/A alb.ingress.kubernetes.io/healthy-threshold-count integer '2' Ingress,Service N/A alb.ingress.kubernetes.io/unhealthy-threshold-count integer '2' Ingress,Service N/A alb.ingress.kubernetes.io/success-codes string '200' | '12' Ingress,Service N/A alb.ingress.kubernetes.io/auth-type none|oidc|cognito none Ingress,Service N/A alb.ingress.kubernetes.io/auth-idp-cognito json N/A Ingress,Service N/A alb.ingress.kubernetes.io/auth-idp-oidc json N/A Ingress,Service N/A alb.ingress.kubernetes.io/auth-on-unauthenticated-request authenticate|allow|deny authenticate Ingress,Service N/A alb.ingress.kubernetes.io/auth-scope string openid Ingress,Service N/A alb.ingress.kubernetes.io/auth-session-cookie string AWSELBAuthSessionCookie Ingress,Service N/A alb.ingress.kubernetes.io/auth-session-timeout integer '604800' Ingress,Service N/A alb.ingress.kubernetes.io/actions.${action-name} json N/A Ingress N/A alb.ingress.kubernetes.io/conditions.${conditions-name} json N/A Ingress N/A alb.ingress.kubernetes.io/target-node-labels stringMap N/A Ingress,Service N/A alb.ingress.kubernetes.io/mutual-authentication json '[{\"port\": 443, \"mode\": \"off\"}]' Ingress Exclusive","title":"Annotations"},{"location":"guide/ingress/annotations/#ingressgroup","text":"IngressGroup feature enables you to group multiple Ingress resources together. The controller will automatically merge Ingress rules for all Ingresses within IngressGroup and support them with a single ALB. In addition, most annotations defined on an Ingress only apply to the paths defined by that Ingress. By default, Ingresses don't belong to any IngressGroup, and we treat it as a \"implicit IngressGroup\" consisting of the Ingress itself. alb.ingress.kubernetes.io/group.name specifies the group name that this Ingress belongs to. Ingresses with same group.name annotation will form an \"explicit IngressGroup\". groupName must consist of lower case alphanumeric characters, - or . , and must start and end with an alphanumeric character. groupName must be no more than 63 character. Security Risk IngressGroup feature should only be used when all Kubernetes users with RBAC permission to create/modify Ingress resources are within trust boundary. If you turn your Ingress to belong a \"explicit IngressGroup\" by adding group.name annotation, other Kubernetes users may create/modify their Ingresses to belong to the same IngressGroup, and can thus add more rules or overwrite existing rules with higher priority to the ALB for your Ingress. We'll add more fine-grained access-control in future versions. Rename behavior The ALB for an IngressGroup is found by searching for an AWS tag ingress.k8s.aws/stack tag with the name of the IngressGroup as its value. For an implicit IngressGroup, the value is namespace/ingressname . When the groupName of an IngressGroup for an Ingress is changed, the Ingress will be moved to a new IngressGroup and be supported by the ALB for the new IngressGroup. If the ALB for the new IngressGroup doesn't exist, a new ALB will be created. If an IngressGroup no longer contains any Ingresses, the ALB for that IngressGroup will be deleted and any deletion protection of that ALB will be ignored. Example alb.ingress.kubernetes.io/group.name: my-team.awesome-group alb.ingress.kubernetes.io/group.order specifies the order across all Ingresses within IngressGroup. You can explicitly denote the order using a number between -1000 and 1000 The smaller the order, the rule will be evaluated first. All Ingresses without an explicit order setting get order value as 0 Rules with the same order are sorted lexicographically by the Ingress\u2019s namespace/name. Example alb.ingress.kubernetes.io/group.order: '10'","title":"IngressGroup"},{"location":"guide/ingress/annotations/#traffic-listening","text":"Traffic Listening can be controlled with the following annotations: alb.ingress.kubernetes.io/listen-ports specifies the ports that ALB listens on. Merge Behavior listen-ports is merged across all Ingresses in IngressGroup. You can define different listen-ports per Ingress, Ingress rules will only impact the ports defined for that Ingress. If same listen-port is defined by multiple Ingress within IngressGroup, Ingress rules will be merged with respect to their group order within IngressGroup. Default defaults to '[{\"HTTP\": 80}]' or '[{\"HTTPS\": 443}]' depending on whether certificate-arn is specified. You may not have duplicate load balancer ports defined. Example alb.ingress.kubernetes.io/listen-ports: '[{\"HTTP\": 80}, {\"HTTPS\": 443}, {\"HTTP\": 8080}, {\"HTTPS\": 8443}]' alb.ingress.kubernetes.io/ssl-redirect enables SSLRedirect and specifies the SSL port that redirects to. Merge Behavior ssl-redirect is exclusive across all Ingresses in IngressGroup. Once defined on a single Ingress, it impacts every Ingress within IngressGroup. Once enabled SSLRedirect, every HTTP listener will be configured with a default action which redirects to HTTPS, other rules will be ignored. The SSL port that redirects to must exists on LoadBalancer. See alb.ingress.kubernetes.io/listen-ports for the listen ports configuration. Example alb.ingress.kubernetes.io/ssl-redirect: '443' alb.ingress.kubernetes.io/ip-address-type specifies the IP address type of ALB. Example alb.ingress.kubernetes.io/ip-address-type: ipv4 alb.ingress.kubernetes.io/customer-owned-ipv4-pool specifies the customer-owned IPv4 address pool for ALB on Outpost. This annotation should be treated as immutable. To remove or change coIPv4Pool, you need to recreate Ingress. Example alb.ingress.kubernetes.io/customer-owned-ipv4-pool: ipv4pool-coip-xxxxxxxx","title":"Traffic Listening"},{"location":"guide/ingress/annotations/#traffic-routing","text":"Traffic Routing can be controlled with following annotations: alb.ingress.kubernetes.io/load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error. Merge Behavior name is exclusive across all Ingresses in an IngressGroup. Once defined on a single Ingress, it impacts every Ingress within the IngressGroup. Example alb.ingress.kubernetes.io/load-balancer-name: custom-name alb.ingress.kubernetes.io/target-type specifies how to route traffic to pods. You can choose between instance and ip : instance mode will route traffic to all ec2 instances within cluster on NodePort opened for your service. service must be of type \"NodePort\" or \"LoadBalancer\" to use instance mode ip mode will route traffic directly to the pod IP. network plugin must use secondary IP addresses on ENI for pod IP to use ip mode. e.g. amazon-vpc-cni-k8s ip mode is required for sticky sessions to work with Application Load Balancers. The Service type does not matter, when using ip mode. Example alb.ingress.kubernetes.io/target-type: instance alb.ingress.kubernetes.io/target-node-labels specifies which nodes to include in the target group registration for instance target type. Example alb.ingress.kubernetes.io/target-node-labels: label1=value1, label2=value2 alb.ingress.kubernetes.io/backend-protocol specifies the protocol used when route traffic to pods. Example alb.ingress.kubernetes.io/backend-protocol: HTTPS alb.ingress.kubernetes.io/backend-protocol-version specifies the application protocol used to route traffic to pods. Only valid when HTTP or HTTPS is used as the backend protocol. Example HTTP2 alb.ingress.kubernetes.io/backend-protocol-version: HTTP2 GRPC alb.ingress.kubernetes.io/backend-protocol-version: GRPC alb.ingress.kubernetes.io/subnets specifies the Availability Zone s that the ALB will route traffic to. See Load Balancer subnets for more details. You must specify at least two subnets in different AZs. Either subnetID or subnetName(Name tag on subnets) can be used. Tip You can enable subnet auto discovery to avoid specifying this annotation on every Ingress. See Subnet Discovery for instructions. Example alb.ingress.kubernetes.io/subnets: subnet-xxxx, mySubnet alb.ingress.kubernetes.io/actions.${action-name} Provides a method for configuring custom actions on a listener, such as Redirect Actions. The action-name in the annotation must match the serviceName in the Ingress rules, and servicePort must be use-annotation . use ARN in forward Action ARN can be used in forward action(both simplified schema and advanced schema), it must be an targetGroup created outside of k8s, typically an targetGroup for legacy application. use ServiceName/ServicePort in forward Action ServiceName/ServicePort can be used in forward action(advanced schema only). Auth related annotations on Service object will only be respected if a single TargetGroup in is used. Example response-503: return fixed 503 response redirect-to-eks: redirect to an external url forward-single-tg: forward to a single targetGroup [ simplified schema ] forward-multiple-tg: forward to multiple targetGroups with different weights and stickiness config [ advanced schema ] apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/actions.response-503 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"503\",\"messageBody\":\"503 error text\"}} alb.ingress.kubernetes.io/actions.redirect-to-eks : > {\"type\":\"redirect\",\"redirectConfig\":{\"host\":\"aws.amazon.com\",\"path\":\"/eks/\",\"port\":\"443\",\"protocol\":\"HTTPS\",\"query\":\"k=v\",\"statusCode\":\"HTTP_302\"}} alb.ingress.kubernetes.io/actions.forward-single-tg : > {\"type\":\"forward\",\"targetGroupARN\": \"arn-of-your-target-group\"} alb.ingress.kubernetes.io/actions.forward-multiple-tg : > {\"type\":\"forward\",\"forwardConfig\":{\"targetGroups\":[{\"serviceName\":\"service-1\",\"servicePort\":\"http\",\"weight\":20},{\"serviceName\":\"service-2\",\"servicePort\":80,\"weight\":20},{\"targetGroupARN\":\"arn-of-your-non-k8s-target-group\",\"weight\":60}],\"targetGroupStickinessConfig\":{\"enabled\":true,\"durationSeconds\":200}}} spec : ingressClassName : alb rules : - http : paths : - path : /503 pathType : Exact backend : service : name : response-503 port : name : use-annotation - path : /eks pathType : Exact backend : service : name : redirect-to-eks port : name : use-annotation - path : /path1 pathType : Exact backend : service : name : forward-single-tg port : name : use-annotation - path : /path2 pathType : Exact backend : service : name : forward-multiple-tg port : name : use-annotation alb.ingress.kubernetes.io/conditions.${conditions-name} Provides a method for specifying routing conditions in addition to original host/path condition on Ingress spec . The conditions-name in the annotation must match the serviceName in the Ingress rules. It can be a either real serviceName or an annotation based action name when servicePort is use-annotation . limitations General ALB limitations applies: Each rule can optionally include up to one of each of the following conditions: host-header, http-request-method, path-pattern, and source-ip. Each rule can also optionally include one or more of each of the following conditions: http-header and query-string. You can specify up to three match evaluations per condition. You can specify up to five match evaluations per rule. Refer ALB documentation for more details. Example rule-path1: Host is www.example.com OR anno.example.com Path is /path1 rule-path2: Host is www.example.com Path is /path2 OR /anno/path2 rule-path3: Host is www.example.com Path is /path3 Http header HeaderName is HeaderValue1 OR HeaderValue2 rule-path4: Host is www.example.com Path is /path4 Http request method is GET OR HEAD rule-path5: Host is www.example.com Path is /path5 Query string is paramA:valueA1 OR paramA:valueA2 rule-path6: Host is www.example.com Path is /path6 Source IP is192.168.0.0/16 OR 172.16.0.0/16 rule-path7: Host is www.example.com Path is /path7 Http header HeaderName is HeaderValue Query string is paramA:valueA Query string is paramB:valueB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/actions.rule-path1 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Host is www.example.com OR anno.example.com\"}} alb.ingress.kubernetes.io/conditions.rule-path1 : > [{\"field\":\"host-header\",\"hostHeaderConfig\":{\"values\":[\"anno.example.com\"]}}] alb.ingress.kubernetes.io/actions.rule-path2 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Path is /path2 OR /anno/path2\"}} alb.ingress.kubernetes.io/conditions.rule-path2 : > [{\"field\":\"path-pattern\",\"pathPatternConfig\":{\"values\":[\"/anno/path2\"]}}] alb.ingress.kubernetes.io/actions.rule-path3 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Http header HeaderName is HeaderValue1 OR HeaderValue2\"}} alb.ingress.kubernetes.io/conditions.rule-path3 : > [{\"field\":\"http-header\",\"httpHeaderConfig\":{\"httpHeaderName\": \"HeaderName\", \"values\":[\"HeaderValue1\", \"HeaderValue2\"]}}] alb.ingress.kubernetes.io/actions.rule-path4 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Http request method is GET OR HEAD\"}} alb.ingress.kubernetes.io/conditions.rule-path4 : > [{\"field\":\"http-request-method\",\"httpRequestMethodConfig\":{\"Values\":[\"GET\", \"HEAD\"]}}] alb.ingress.kubernetes.io/actions.rule-path5 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Query string is paramA:valueA1 OR paramA:valueA2\"}} alb.ingress.kubernetes.io/conditions.rule-path5 : > [{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramA\",\"value\":\"valueA1\"},{\"key\":\"paramA\",\"value\":\"valueA2\"}]}}] alb.ingress.kubernetes.io/actions.rule-path6 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"Source IP is 192.168.0.0/16 OR 172.16.0.0/16\"}} alb.ingress.kubernetes.io/conditions.rule-path6 : > [{\"field\":\"source-ip\",\"sourceIpConfig\":{\"values\":[\"192.168.0.0/16\", \"172.16.0.0/16\"]}}] alb.ingress.kubernetes.io/actions.rule-path7 : > {\"type\":\"fixed-response\",\"fixedResponseConfig\":{\"contentType\":\"text/plain\",\"statusCode\":\"200\",\"messageBody\":\"multiple conditions applies\"}} alb.ingress.kubernetes.io/conditions.rule-path7 : > [{\"field\":\"http-header\",\"httpHeaderConfig\":{\"httpHeaderName\": \"HeaderName\", \"values\":[\"HeaderValue\"]}},{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramA\",\"value\":\"valueA\"}]}},{\"field\":\"query-string\",\"queryStringConfig\":{\"values\":[{\"key\":\"paramB\",\"value\":\"valueB\"}]}}] spec : ingressClassName : alb rules : - host : www.example.com http : paths : - path : /path1 pathType : Exact backend : service : name : rule-path1 port : name : use-annotation - path : /path2 pathType : Exact backend : service : name : rule-path2 port : name : use-annotation - path : /path3 pathType : Exact backend : service : name : rule-path3 port : name : use-annotation - path : /path4 pathType : Exact backend : service : name : rule-path4 port : name : use-annotation - path : /path5 pathType : Exact backend : service : name : rule-path5 port : name : use-annotation - path : /path6 pathType : Exact backend : service : name : rule-path6 port : name : use-annotation - path : /path7 pathType : Exact backend : service : name : rule-path7 port : name : use-annotation Note If you are using alb.ingress.kubernetes.io/target-group-attributes with stickiness.enabled=true , you should add TargetGroupStickinessConfig under alb.ingress.kubernetes.io/actions.weighted-routing Example apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/scheme : internet-facing alb.ingress.kubernetes.io/target-type : ip alb.ingress.kubernetes.io/target-group-attributes : stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60 alb.ingress.kubernetes.io/actions.weighted-routing : | { \"type\" : \"forward\" , \"forwardConfig\" :{ \"targetGroups\" :[ { \"serviceName\" : \"service-1\" , \"servicePort\" : \"80\" , \"weight\" : 50 }, { \"serviceName\" : \"service-2\" , \"servicePort\" : \"80\" , \"weight\" : 50 } ], \"TargetGroupStickinessConfig\" : { \"Enabled\" : true , \"DurationSeconds\" : 120 } } } spec : ingressClassName : alb rules : - host : www.example.com http : paths : - path : / pathType : Prefix backend : service : name : weighted-routing port : name : use-annotation","title":"Traffic Routing"},{"location":"guide/ingress/annotations/#access-control","text":"Access control for LoadBalancer can be controlled with following annotations: alb.ingress.kubernetes.io/scheme specifies whether your LoadBalancer will be internet facing. See Load balancer scheme in the AWS documentation for more details. Example alb.ingress.kubernetes.io/scheme: internal alb.ingress.kubernetes.io/inbound-cidrs specifies the CIDRs that are allowed to access LoadBalancer. Merge Behavior inbound-cidrs is merged across all Ingresses in IngressGroup, but is exclusive per listen-port. the inbound-cidrs will only impact the ports defined for that Ingress. if same listen-port is defined by multiple Ingress within IngressGroup, inbound-cidrs should only be defined on one of the Ingress. Default 0.0.0.0/0 will be used if the IPAddressType is \"ipv4\" 0.0.0.0/0 and ::/0 will be used if the IPAddressType is \"dualstack\" this annotation will be ignored if alb.ingress.kubernetes.io/security-groups is specified. Example alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/24 alb.ingress.kubernetes.io/security-groups specifies the securityGroups you want to attach to LoadBalancer. When this annotation is not present, the controller will automatically create one security group, the security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports . Also, the securityGroups for Node/Pod will be modified to allow inbound traffic from this securityGroup. If you specify this annotation, you need to configure the security groups on your Node/Pod to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the access rules. Both name or ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute. Example alb.ingress.kubernetes.io/security-groups: sg-xxxx, nameOfSg1, nameOfSg2 alb.ingress.kubernetes.io/manage-backend-security-group-rules specifies whether you want the controller to configure security group rules on Node/Pod for traffic access when you specify security-groups . This annotation applies only in case you specify the security groups via security-groups annotation. If set to true, controller attaches an additional shared backend security group to your load balancer. This backend security group is used in the Node/Pod security group rules. Example alb.ingress.kubernetes.io/manage-backend-security-group-rules: \"true\"","title":"Access control"},{"location":"guide/ingress/annotations/#authentication","text":"ALB supports authentication with Cognito or OIDC. See Authenticate Users Using an Application Load Balancer for more details. HTTPS only Authentication is only supported for HTTPS listeners. See TLS for configuring HTTPS listeners. alb.ingress.kubernetes.io/auth-type specifies the authentication type on targets. Example alb.ingress.kubernetes.io/auth-type: cognito alb.ingress.kubernetes.io/auth-idp-cognito specifies the cognito idp configuration. If you are using Amazon Cognito Domain, the userPoolDomain should be set to the domain prefix(my-domain) instead of full domain(https://my-domain.auth.us-west-2.amazoncognito.com) Example alb.ingress.kubernetes.io/auth-idp-cognito: '{\"userPoolARN\":\"arn:aws:cognito-idp:us-west-2:xxx:userpool/xxx\",\"userPoolClientID\":\"my-clientID\",\"userPoolDomain\":\"my-domain\"}' alb.ingress.kubernetes.io/auth-idp-oidc specifies the oidc idp configuration. You need to create an secret within the same namespace as Ingress to hold your OIDC clientID and clientSecret. The format of secret is as below: apiVersion : v1 kind : Secret metadata : namespace : testcase name : my-k8s-secret data : clientID : base64 of your plain text clientId clientSecret : base64 of your plain text clientSecret Example alb.ingress.kubernetes.io/auth-idp-oidc: '{\"issuer\":\"https://example.com\",\"authorizationEndpoint\":\"https://authorization.example.com\",\"tokenEndpoint\":\"https://token.example.com\",\"userInfoEndpoint\":\"https://userinfo.example.com\",\"secretName\":\"my-k8s-secret\"}' alb.ingress.kubernetes.io/auth-on-unauthenticated-request specifies the behavior if the user is not authenticated. options: authenticate : try authenticate with configured IDP. deny : return an HTTP 401 Unauthorized error. allow : allow the request to be forwarded to the target. Example alb.ingress.kubernetes.io/auth-on-unauthenticated-request: authenticate alb.ingress.kubernetes.io/auth-scope specifies the set of user claims to be requested from the IDP(cognito or oidc), in a space-separated list. options: phone email profile openid aws.cognito.signin.user.admin Example alb.ingress.kubernetes.io/auth-scope: 'email openid' alb.ingress.kubernetes.io/auth-session-cookie specifies the name of the cookie used to maintain session information Example alb.ingress.kubernetes.io/auth-session-cookie: custom-cookie alb.ingress.kubernetes.io/auth-session-timeout specifies the maximum duration of the authentication session, in seconds Example alb.ingress.kubernetes.io/auth-session-timeout: '86400'","title":"Authentication"},{"location":"guide/ingress/annotations/#health-check","text":"Health check on target groups can be controlled with following annotations: alb.ingress.kubernetes.io/healthcheck-protocol specifies the protocol used when performing health check on targets. Example alb.ingress.kubernetes.io/healthcheck-protocol: HTTPS alb.ingress.kubernetes.io/healthcheck-port specifies the port used when performing health check on targets. When using target-type: instance with a service of type \"NodePort\", the healthcheck port can be set to traffic-port to automatically point to the correct port. Example set the healthcheck port to the traffic port alb.ingress.kubernetes.io/healthcheck-port: traffic-port set the healthcheck port to the NodePort(when target-type=instance) or TargetPort(when target-type=ip) of a named port alb.ingress.kubernetes.io/healthcheck-port: my-port set the healthcheck port to 80/tcp alb.ingress.kubernetes.io/healthcheck-port: '80' alb.ingress.kubernetes.io/healthcheck-path specifies the HTTP path when performing health check on targets. Example HTTP alb.ingress.kubernetes.io/healthcheck-path: /ping GRPC alb.ingress.kubernetes.io/healthcheck-path: /package.service/method alb.ingress.kubernetes.io/healthcheck-interval-seconds specifies the interval(in seconds) between health check of an individual target. Example alb.ingress.kubernetes.io/healthcheck-interval-seconds: '10' alb.ingress.kubernetes.io/healthcheck-timeout-seconds specifies the timeout(in seconds) during which no response from a target means a failed health check Example alb.ingress.kubernetes.io/healthcheck-timeout-seconds: '8' alb.ingress.kubernetes.io/success-codes specifies the HTTP or gRPC status code that should be expected when doing health checks against the specified health check path. Example use single value alb.ingress.kubernetes.io/success-codes: '200' use multiple values alb.ingress.kubernetes.io/success-codes: 200,201 use range of value alb.ingress.kubernetes.io/success-codes: 200-300 use gRPC single value alb.ingress.kubernetes.io/success-codes: '0' use gRPC multiple value alb.ingress.kubernetes.io/success-codes: 0,1 use gRPC range of value alb.ingress.kubernetes.io/success-codes: 0-5 alb.ingress.kubernetes.io/healthy-threshold-count specifies the consecutive health checks successes required before considering an unhealthy target healthy. Example alb.ingress.kubernetes.io/healthy-threshold-count: '2' alb.ingress.kubernetes.io/unhealthy-threshold-count specifies the consecutive health check failures required before considering a target unhealthy. Example alb.ingress.kubernetes.io/unhealthy-threshold-count: '2'","title":"Health Check"},{"location":"guide/ingress/annotations/#tls","text":"TLS support can be controlled with the following annotations: alb.ingress.kubernetes.io/certificate-arn specifies the ARN of one or more certificate managed by AWS Certificate Manager The first certificate in the list will be added as default certificate. And remaining certificate will be added to the optional certificate list. See SSL Certificates for more details. Certificate Discovery TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources. See Certificate Discovery for instructions. Example single certificate alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx multiple certificates alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:xxxxx:certificate/cert1,arn:aws:acm:us-west-2:xxxxx:certificate/cert2,arn:aws:acm:us-west-2:xxxxx:certificate/cert3 alb.ingress.kubernetes.io/ssl-policy specifies the Security Policy that should be assigned to the ALB, allowing you to control the protocol and ciphers. Example alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS-1-1-2017-01 alb.ingress.kubernetes.io/mutual-authentication specifies the mutual authentication configuration that should be assigned to the Application Load Balancer secure listener ports. See Mutual authentication with TLS in the AWS documentation for more details. Configuration Options port: listen port Must be a HTTPS port specified by listen-ports . mode: \"off\" (default) | \"passthrough\" | \"verify\" verify mode requires an existing trust store resource. See Create a trust store in the AWS documentation for more details. trustStore: ARN (arn:aws:elasticloadbalancing:trustStoreArn) | Name (my-trust-store) Both ARN and Name of trustStore are supported values. trustStore is required when mode is verify . ignoreClientCertificateExpiry : true | false (default) Example listen-ports specifies four HTTPS ports: 80, 443, 8080, 8443 listener HTTPS:80 will be set to passthrough mode listener HTTPS:443 will be set to verify mode, associated with trust store arn arn:aws:elasticloadbalancing:trustStoreArn and have ignoreClientCertificateExpiry set to true listeners HTTPS:8080 and HTTPS:8443 remain in the default mode off . alb.ingress.kubernetes.io/listen-ports: '[{\"HTTPS\": 80}, {\"HTTPS\": 443}, {\"HTTPS\": 8080}, {\"HTTPS\": 8443}]' alb.ingress.kubernetes.io/mutual-authentication: '[{\"port\": 80, \"mode\": \"passthrough\"}, {\"port\": 443, \"mode\": \"verify\", \"trustStore\": \"arn:aws:elasticloadbalancing:trustStoreArn\", \"ignoreClientCertificateExpiry\" : true}]' Note To avoid conflict errors in IngressGroup, this annotation should only be specified on a single Ingress within IngressGroup or specified with same value across all Ingresses within IngressGroup. Trust stores limit per Application Load Balancer A maximum of two different trust stores can be associated among listeners on the same ingress. See Quotas for your Application Load Balancers in the AWS documentation for more details.","title":"TLS"},{"location":"guide/ingress/annotations/#custom-attributes","text":"Custom attributes to LoadBalancers and TargetGroups can be controlled with following annotations: alb.ingress.kubernetes.io/load-balancer-attributes specifies Load Balancer Attributes that should be applied to the ALB. Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values( access_logs.s3.enabled=false ) and omitting them is not sufficient. If deletion_protection.enabled=true is in annotation, the controller will not be able to delete the ALB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource. Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource. Example enable access log to s3 alb.ingress.kubernetes.io/load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app enable deletion protection alb.ingress.kubernetes.io/load-balancer-attributes: deletion_protection.enabled=true enable invalid header fields removal alb.ingress.kubernetes.io/load-balancer-attributes: routing.http.drop_invalid_header_fields.enabled=true enable http2 support alb.ingress.kubernetes.io/load-balancer-attributes: routing.http2.enabled=true set idle_timeout delay to 600 seconds alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=600 enable connection logs alb.ingress.kubernetes.io/load-balancer-attributes: connection_logs.s3.enabled=true,connection_logs.s3.bucket=my-connection-log-bucket,connection_logs.s3.prefix=my-app alb.ingress.kubernetes.io/target-group-attributes specifies Target Group Attributes which should be applied to Target Groups. Example set the slow start duration to 30 seconds (available range is 30-900 seconds) alb.ingress.kubernetes.io/target-group-attributes: slow_start.duration_seconds=30 set the deregistration delay to 30 seconds (available range is 0-3600 seconds) alb.ingress.kubernetes.io/target-group-attributes: deregistration_delay.timeout_seconds=30 enable sticky sessions (requires alb.ingress.kubernetes.io/target-type be set to ip ) alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=60 alb.ingress.kubernetes.io/target-type: ip set load balancing algorithm to least outstanding requests alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=least_outstanding_requests enable Automated Target Weights(ATW) on HTTP/HTTPS target groups to increase application availability. Set your load balancing algorithm to weighted random and turn on anomaly mitigation (recommended) alb.ingress.kubernetes.io/target-group-attributes: load_balancing.algorithm.type=weighted_random,load_balancing.algorithm.anomaly_mitigation=on","title":"Custom attributes"},{"location":"guide/ingress/annotations/#resource-tags","text":"The AWS Load Balancer Controller automatically applies following tags to the AWS resources (ALB/TargetGroups/SecurityGroups/Listener/ListenerRule) it creates: elbv2.k8s.aws/cluster: ${clusterName} ingress.k8s.aws/stack: ${stackID} ingress.k8s.aws/resource: ${resourceID} In addition, you can use annotations to specify additional tags alb.ingress.kubernetes.io/tags specifies additional tags that will be applied to AWS resources created. In case of target group, the controller will merge the tags from the ingress and the backend service giving precedence to the values specified on the service when there is conflict. Example alb.ingress.kubernetes.io/tags: Environment=dev,Team=test","title":"Resource Tags"},{"location":"guide/ingress/annotations/#addons","text":"Note If waf-acl-arn is specified via the ingress annotations, the controller will make sure the waf-acl is associated to the provisioned ALB with the ingress. If there is not such annotation, the controller will make sure no waf-acl is associated, so it may remove the existing waf-acl on the ALB provisioned. If users do not want the controller to manage the waf-acl on the ALBs, they can disable the feature by setting controller command line flags --enable-waf=false or --enable-wafv2=false alb.ingress.kubernetes.io/waf-acl-id specifies the identifier for the Amazon WAF web ACL. Only Regional WAF is supported. Example alb.ingress.kubernetes.io/waf-acl-id: 499e8b99-6671-4614-a86d-adb1810b7fbe alb.ingress.kubernetes.io/wafv2-acl-arn specifies ARN for the Amazon WAFv2 web ACL. Only Regional WAFv2 is supported. To get the WAFv2 Web ACL ARN from the Console, click the gear icon in the upper right and enable the ARN column. Example alb.ingress.kubernetes.io/wafv2-acl-arn: arn:aws:wafv2:us-west-2:xxxxx:regional/webacl/xxxxxxx/3ab78708-85b0-49d3-b4e1-7a9615a6613b alb.ingress.kubernetes.io/shield-advanced-protection turns on / off the AWS Shield Advanced protection for the load balancer. Example alb.ingress.kubernetes.io/shield-advanced-protection: 'true'","title":"Addons"},{"location":"guide/ingress/cert_discovery/","text":"Certificate Discovery \u00b6 TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources if the alb.ingress.kubernetes.io/certificate-arn annotation is not specified. The controller will attempt to discover TLS certificates from the tls field in Ingress and host field in Ingress rules. You need to explicitly specify to use HTTPS listener with listen-ports annotation. Discover via Ingress tls \u00b6 Example attaches certs for www.example.com to the ALB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/listen-ports : '[{\"HTTPS\":443}]' spec : ingressClassName : alb tls : - hosts : - www.example.com rules : - http : paths : - path : /users pathType : Prefix backend : service : name : user-service port : number : 80 Discover via Ingress rule host. \u00b6 Example attaches a cert for dev.example.com or *.example.com to the ALB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/listen-ports : '[{\"HTTPS\":443}]' spec : ingressClassName : alb rules : - host : dev.example.com http : paths : - path : /users pathType : Prefix backend : service : name : user-service port : number : 80","title":"Certificate Discovery"},{"location":"guide/ingress/cert_discovery/#certificate-discovery","text":"TLS certificates for ALB Listeners can be automatically discovered with hostnames from Ingress resources if the alb.ingress.kubernetes.io/certificate-arn annotation is not specified. The controller will attempt to discover TLS certificates from the tls field in Ingress and host field in Ingress rules. You need to explicitly specify to use HTTPS listener with listen-ports annotation.","title":"Certificate Discovery"},{"location":"guide/ingress/cert_discovery/#discover-via-ingress-tls","text":"Example attaches certs for www.example.com to the ALB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/listen-ports : '[{\"HTTPS\":443}]' spec : ingressClassName : alb tls : - hosts : - www.example.com rules : - http : paths : - path : /users pathType : Prefix backend : service : name : user-service port : number : 80","title":"Discover via Ingress tls"},{"location":"guide/ingress/cert_discovery/#discover-via-ingress-rule-host","text":"Example attaches a cert for dev.example.com or *.example.com to the ALB apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/listen-ports : '[{\"HTTPS\":443}]' spec : ingressClassName : alb rules : - host : dev.example.com http : paths : - path : /users pathType : Prefix backend : service : name : user-service port : number : 80","title":"Discover via Ingress rule host."},{"location":"guide/ingress/ingress_class/","text":"IngressClass \u00b6 Ingresses can be implemented by different controllers, often with different configuration. Each Ingress should specify a class, a reference to an IngressClass resource that contains additional configuration including the name of the controller that should implement the class. IngressClass resources contain an optional parameters field. This can be used to reference additional implementation-specific configuration for this class. For the AWS Load Balancer controller, the implementation-specific configuration is IngressClassParams in the elbv2.k8s.aws API group. Example specify controller as ingress.k8s.aws/alb to denote Ingresses should be managed by AWS Load Balancer Controller. apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: name: awesome-class spec: controller: ingress.k8s.aws/alb specify additional configurations by referencing an IngressClassParams resource. apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: name: awesome-class spec: controller: ingress.k8s.aws/alb parameters: apiGroup: elbv2.k8s.aws kind: IngressClassParams name: awesome-class-cfg default IngressClass You can mark a particular IngressClass as the default for your cluster. Setting the ingressclass.kubernetes.io/is-default-class annotation to true on an IngressClass resource will ensure that new Ingresses without an ingressClassName field specified will be assigned this default IngressClass. Deprecated kubernetes.io/ingress.class annotation \u00b6 Before the IngressClass resource and ingressClassName field were added in Kubernetes 1.18, Ingress classes were specified with a kubernetes.io/ingress.class annotation on the Ingress. This annotation was never formally defined, but was widely supported by Ingress controllers. The newer ingressClassName field on Ingresses is a replacement for that annotation, but is not a direct equivalent. While the annotation was generally used to reference the name of the Ingress controller that should implement the Ingress, the field is a reference to an IngressClass resource that contains additional Ingress configuration, including the name of the Ingress controller. disable kubernetes.io/ingress.class annotation In order to maintain backwards-compatibility, kubernetes.io/ingress.class annotation is still supported currently. You can enforce IngressClass resource adoption by disabling the kubernetes.io/ingress.class annotation via --disable-ingress-class-annotation controller flag. IngressClassParams \u00b6 IngressClassParams is a CRD specific to the AWS Load Balancer Controller, which can be used along with IngressClass\u2019s parameter field. You can use IngressClassParams to enforce settings for a set of Ingresses. Example with scheme & ipAddressType & tags apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: scheme: internal ipAddressType: dualstack tags: - key: org value: my-org with namespaceSelector apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: namespaceSelector: matchLabels: team: team-a with IngressGroup apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: group: name: my-group with loadBalancerAttributes apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: loadBalancerAttributes: - key: deletion_protection.enabled value: \"true\" - key: idle_timeout.timeout_seconds value: \"120\" with subnets.ids apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: subnets: ids: - subnet-xxx - subnet-123 with subnets.tags apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: class2048-config spec: subnets: tags: kubernetes.io/role/internal-elb: - \"1\" myKey: - myVal0 - myVal1 IngressClassParams specification \u00b6 spec.namespaceSelector \u00b6 namespaceSelector is an optional setting that follows general Kubernetes label selector semantics. Cluster administrators can use the namespaceSelector field to restrict the namespaces of Ingresses that are allowed to specify the IngressClass. If namespaceSelector specified, only Ingresses in selected namespaces can use IngressClasses with this parameter. The controller will refuse to reconcile for Ingresses that violates namespaceSelector . If namespaceSelector un-specified, all Ingresses in any namespace can use IngressClasses with this parameter. spec.group \u00b6 group is an optional setting. The only available sub-field is group.name . Cluster administrators can use group.name field to denote the groupName for all Ingresses belong to this IngressClass. If group.name specified, all Ingresses with this IngressClass will belong to the same IngressGroup specified and result in a single ALB. If group.name is not specified, Ingresses with this IngressClass can use the older / legacy alb.ingress.kubernetes.io/group.name annotation to specify their IngressGroup. Ingresses that belong to the same IngressClass can form different IngressGroups via that annotation. spec.scheme \u00b6 scheme is an optional setting. The available options are internet-facing or internal . Cluster administrators can use the scheme field to restrict the scheme for all Ingresses that belong to this IngressClass. If scheme specified, all Ingresses with this IngressClass will have the specified scheme. If scheme un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/scheme annotation to specify scheme. spec.inboundCIDRs \u00b6 Cluster administrators can use the optional inboundCIDRs field to specify the CIDRs that are allowed to access the load balancers that belong to this IngressClass. If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/inbound-cidrs annotation. spec.sslPolicy \u00b6 Cluster administrators can use the optional sslPolicy field to specify the SSL policy for the load balancers that belong to this IngressClass. If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/ssl-policy annotation. spec.subnets \u00b6 Cluster administrators can use the optional subnets field to specify the subnets for the load balancers that belong to this IngressClass. They may specify either ids or tags . If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/subnets annotation annotation. spec.subnets.ids \u00b6 If ids is specified, it must be a set of at least one resource ID of a subnet in the VPC. No two subnets may be in the same availability zone. spec.subnets.tags \u00b6 If tags is specified, it is a map of tag filters. The filters will match subnets in the VPC for which each listed tag key is present and has one of the corresponding tag values. Unless the SubnetsClusterTagCheck feature gate is disabled, subnets without a cluster tag and with the cluster tag for another cluster will be excluded. Within any given availability zone, subnets with a cluster tag will be chosen over subnets without, then the subnet with the lowest-sorting resource ID will be chosen. spec.ipAddressType \u00b6 ipAddressType is an optional setting. The available options are ipv4 or dualstack . Cluster administrators can use ipAddressType field to restrict the ipAddressType for all Ingresses that belong to this IngressClass. If ipAddressType specified, all Ingresses with this IngressClass will have the specified ipAddressType. If ipAddressType un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/ip-address-type annotation to specify ipAddressType. spec.tags \u00b6 tags is an optional setting. Cluster administrators can use tags field to specify the custom tags for AWS resources provisioned for all Ingresses belong to this IngressClass. If tags is set, AWS resources provisioned for all Ingresses with this IngressClass will have the specified tags. You can also use controller-level flag --default-tags or alb.ingress.kubernetes.io/tags annotation to specify custom tags. These tags will be merged together based on tag-key. If same tag-key appears in multiple sources, the priority is as follows: controller-level flag --default-tags will have the highest priority. spec.tags in IngressClassParams will have the middle priority. alb.ingress.kubernetes.io/tags annotation will have the lowest priority. spec.loadBalancerAttributes \u00b6 loadBalancerAttributes is an optional setting. Cluster administrators can use loadBalancerAttributes field to specify the Load Balancer Attributes that should be applied to the load balancers that belong to this IngressClass. You can specify the list of load balancer attribute name and the desired value in the spec.loadBalancerAttributes field. If loadBalancerAttributes is set, the attributes defined will be applied to the load balancer that belong to this IngressClass. If you specify invalid keys or values for the load balancer attributes, the controller will fail to reconcile ingresses belonging to the particular ingress class. If loadBalancerAttributes un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/load-balancer-attributes annotation to specify the load balancer attributes.","title":"IngressClass"},{"location":"guide/ingress/ingress_class/#ingressclass","text":"Ingresses can be implemented by different controllers, often with different configuration. Each Ingress should specify a class, a reference to an IngressClass resource that contains additional configuration including the name of the controller that should implement the class. IngressClass resources contain an optional parameters field. This can be used to reference additional implementation-specific configuration for this class. For the AWS Load Balancer controller, the implementation-specific configuration is IngressClassParams in the elbv2.k8s.aws API group. Example specify controller as ingress.k8s.aws/alb to denote Ingresses should be managed by AWS Load Balancer Controller. apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: name: awesome-class spec: controller: ingress.k8s.aws/alb specify additional configurations by referencing an IngressClassParams resource. apiVersion: networking.k8s.io/v1 kind: IngressClass metadata: name: awesome-class spec: controller: ingress.k8s.aws/alb parameters: apiGroup: elbv2.k8s.aws kind: IngressClassParams name: awesome-class-cfg default IngressClass You can mark a particular IngressClass as the default for your cluster. Setting the ingressclass.kubernetes.io/is-default-class annotation to true on an IngressClass resource will ensure that new Ingresses without an ingressClassName field specified will be assigned this default IngressClass.","title":"IngressClass"},{"location":"guide/ingress/ingress_class/#deprecated-kubernetesioingressclass-annotation","text":"Before the IngressClass resource and ingressClassName field were added in Kubernetes 1.18, Ingress classes were specified with a kubernetes.io/ingress.class annotation on the Ingress. This annotation was never formally defined, but was widely supported by Ingress controllers. The newer ingressClassName field on Ingresses is a replacement for that annotation, but is not a direct equivalent. While the annotation was generally used to reference the name of the Ingress controller that should implement the Ingress, the field is a reference to an IngressClass resource that contains additional Ingress configuration, including the name of the Ingress controller. disable kubernetes.io/ingress.class annotation In order to maintain backwards-compatibility, kubernetes.io/ingress.class annotation is still supported currently. You can enforce IngressClass resource adoption by disabling the kubernetes.io/ingress.class annotation via --disable-ingress-class-annotation controller flag.","title":"Deprecated kubernetes.io/ingress.class annotation"},{"location":"guide/ingress/ingress_class/#ingressclassparams","text":"IngressClassParams is a CRD specific to the AWS Load Balancer Controller, which can be used along with IngressClass\u2019s parameter field. You can use IngressClassParams to enforce settings for a set of Ingresses. Example with scheme & ipAddressType & tags apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: scheme: internal ipAddressType: dualstack tags: - key: org value: my-org with namespaceSelector apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: namespaceSelector: matchLabels: team: team-a with IngressGroup apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: group: name: my-group with loadBalancerAttributes apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: loadBalancerAttributes: - key: deletion_protection.enabled value: \"true\" - key: idle_timeout.timeout_seconds value: \"120\" with subnets.ids apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: awesome-class spec: subnets: ids: - subnet-xxx - subnet-123 with subnets.tags apiVersion: elbv2.k8s.aws/v1beta1 kind: IngressClassParams metadata: name: class2048-config spec: subnets: tags: kubernetes.io/role/internal-elb: - \"1\" myKey: - myVal0 - myVal1","title":"IngressClassParams"},{"location":"guide/ingress/ingress_class/#ingressclassparams-specification","text":"","title":"IngressClassParams specification"},{"location":"guide/ingress/ingress_class/#specnamespaceselector","text":"namespaceSelector is an optional setting that follows general Kubernetes label selector semantics. Cluster administrators can use the namespaceSelector field to restrict the namespaces of Ingresses that are allowed to specify the IngressClass. If namespaceSelector specified, only Ingresses in selected namespaces can use IngressClasses with this parameter. The controller will refuse to reconcile for Ingresses that violates namespaceSelector . If namespaceSelector un-specified, all Ingresses in any namespace can use IngressClasses with this parameter.","title":"spec.namespaceSelector"},{"location":"guide/ingress/ingress_class/#specgroup","text":"group is an optional setting. The only available sub-field is group.name . Cluster administrators can use group.name field to denote the groupName for all Ingresses belong to this IngressClass. If group.name specified, all Ingresses with this IngressClass will belong to the same IngressGroup specified and result in a single ALB. If group.name is not specified, Ingresses with this IngressClass can use the older / legacy alb.ingress.kubernetes.io/group.name annotation to specify their IngressGroup. Ingresses that belong to the same IngressClass can form different IngressGroups via that annotation.","title":"spec.group"},{"location":"guide/ingress/ingress_class/#specscheme","text":"scheme is an optional setting. The available options are internet-facing or internal . Cluster administrators can use the scheme field to restrict the scheme for all Ingresses that belong to this IngressClass. If scheme specified, all Ingresses with this IngressClass will have the specified scheme. If scheme un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/scheme annotation to specify scheme.","title":"spec.scheme"},{"location":"guide/ingress/ingress_class/#specinboundcidrs","text":"Cluster administrators can use the optional inboundCIDRs field to specify the CIDRs that are allowed to access the load balancers that belong to this IngressClass. If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/inbound-cidrs annotation.","title":"spec.inboundCIDRs"},{"location":"guide/ingress/ingress_class/#specsslpolicy","text":"Cluster administrators can use the optional sslPolicy field to specify the SSL policy for the load balancers that belong to this IngressClass. If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/ssl-policy annotation.","title":"spec.sslPolicy"},{"location":"guide/ingress/ingress_class/#specsubnets","text":"Cluster administrators can use the optional subnets field to specify the subnets for the load balancers that belong to this IngressClass. They may specify either ids or tags . If the field is specified, LBC will ignore the alb.ingress.kubernetes.io/subnets annotation annotation.","title":"spec.subnets"},{"location":"guide/ingress/ingress_class/#specsubnetsids","text":"If ids is specified, it must be a set of at least one resource ID of a subnet in the VPC. No two subnets may be in the same availability zone.","title":"spec.subnets.ids"},{"location":"guide/ingress/ingress_class/#specsubnetstags","text":"If tags is specified, it is a map of tag filters. The filters will match subnets in the VPC for which each listed tag key is present and has one of the corresponding tag values. Unless the SubnetsClusterTagCheck feature gate is disabled, subnets without a cluster tag and with the cluster tag for another cluster will be excluded. Within any given availability zone, subnets with a cluster tag will be chosen over subnets without, then the subnet with the lowest-sorting resource ID will be chosen.","title":"spec.subnets.tags"},{"location":"guide/ingress/ingress_class/#specipaddresstype","text":"ipAddressType is an optional setting. The available options are ipv4 or dualstack . Cluster administrators can use ipAddressType field to restrict the ipAddressType for all Ingresses that belong to this IngressClass. If ipAddressType specified, all Ingresses with this IngressClass will have the specified ipAddressType. If ipAddressType un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/ip-address-type annotation to specify ipAddressType.","title":"spec.ipAddressType"},{"location":"guide/ingress/ingress_class/#spectags","text":"tags is an optional setting. Cluster administrators can use tags field to specify the custom tags for AWS resources provisioned for all Ingresses belong to this IngressClass. If tags is set, AWS resources provisioned for all Ingresses with this IngressClass will have the specified tags. You can also use controller-level flag --default-tags or alb.ingress.kubernetes.io/tags annotation to specify custom tags. These tags will be merged together based on tag-key. If same tag-key appears in multiple sources, the priority is as follows: controller-level flag --default-tags will have the highest priority. spec.tags in IngressClassParams will have the middle priority. alb.ingress.kubernetes.io/tags annotation will have the lowest priority.","title":"spec.tags"},{"location":"guide/ingress/ingress_class/#specloadbalancerattributes","text":"loadBalancerAttributes is an optional setting. Cluster administrators can use loadBalancerAttributes field to specify the Load Balancer Attributes that should be applied to the load balancers that belong to this IngressClass. You can specify the list of load balancer attribute name and the desired value in the spec.loadBalancerAttributes field. If loadBalancerAttributes is set, the attributes defined will be applied to the load balancer that belong to this IngressClass. If you specify invalid keys or values for the load balancer attributes, the controller will fail to reconcile ingresses belonging to the particular ingress class. If loadBalancerAttributes un-specified, Ingresses with this IngressClass can continue to use alb.ingress.kubernetes.io/load-balancer-attributes annotation to specify the load balancer attributes.","title":"spec.loadBalancerAttributes"},{"location":"guide/ingress/spec/","text":"Ingress specification \u00b6 This document covers how ingress resources work in relation to The AWS Load Balancer Controller. Beginning from v2.4.3 of the AWS LBC, rules are ordered as follows: pathType: Exact paths are always ordered first followed by pathType: Prefix paths, with the longest prefix first followed by pathType: ImplementationSpecific paths, in the order they are listed in the manifest An example ingress, from example is as follows. apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : \"2048-ingress\" namespace : \"2048-game\" labels : app : 2048-nginx-ingress spec : ingressClassName : alb rules : - host : 2048.example.com http : paths : - path : /* pathType : ImplementationSpecific backend : service : name : \"service-2048\" port : number : 80 The host field specifies the eventual Route 53-managed domain that will route to this service. The service, service-2048, must be of type NodePort in order for the provisioned ALB to route to it.(see echoserver-service.yaml ) The AWS Load Balancer Controller does not support the resource field of backend .","title":"Specification"},{"location":"guide/ingress/spec/#ingress-specification","text":"This document covers how ingress resources work in relation to The AWS Load Balancer Controller. Beginning from v2.4.3 of the AWS LBC, rules are ordered as follows: pathType: Exact paths are always ordered first followed by pathType: Prefix paths, with the longest prefix first followed by pathType: ImplementationSpecific paths, in the order they are listed in the manifest An example ingress, from example is as follows. apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : \"2048-ingress\" namespace : \"2048-game\" labels : app : 2048-nginx-ingress spec : ingressClassName : alb rules : - host : 2048.example.com http : paths : - path : /* pathType : ImplementationSpecific backend : service : name : \"service-2048\" port : number : 80 The host field specifies the eventual Route 53-managed domain that will route to this service. The service, service-2048, must be of type NodePort in order for the provisioned ALB to route to it.(see echoserver-service.yaml ) The AWS Load Balancer Controller does not support the resource field of backend .","title":"Ingress specification"},{"location":"guide/integrations/external_dns/","text":"Setup External DNS \u00b6 external-dns provisions DNS records based on the host information. This project will setup and manage records in Route 53 that point to controller deployed ALBs. Prerequisites \u00b6 Role Permissions \u00b6 Adequate roles and policies must be configured in AWS and available to the node(s) running the external-dns. See https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/aws.md#iam-permissions. Installation \u00b6 Download sample external-dns manifest wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/external-dns.yaml Edit the --domain-filter flag to include your hosted zone(s) The following example is for a hosted zone test-dns.com : args : - --source=service - --source=ingress - --domain-filter=test-dns.com # will make ExternalDNS see only the hosted zones matching provided domain, omit to process all available hosted zones - --provider=aws - --policy=upsert-only # would prevent ExternalDNS from deleting any records, omit to enable full synchronization - --aws-zone-type=public # only look at public hosted zones (valid values are public, private or no value for both) - --registry=txt - --txt-owner-id=my-identifier Deploy external-dns kubectl apply -f external-dns.yaml Verify it deployed successfully. kubectl logs -f $( kubectl get po | egrep -o 'external-dns[A-Za-z0-9-]+' ) Should display output similar to the following: time=\"2019-12-11T10:26:05Z\" level=info msg=\"config: {Master: KubeConfig: RequestTimeout:30s IstioIngressGateway:istio-system/istio-ingressgateway Sources:[service ingress] Namespace: AnnotationFilter: FQDNTemplate: CombineFQDNAndAnnotation:false Compatibility: PublishInternal:false PublishHostIP:false ConnectorSourceServer:localhost:8080 Provider:aws GoogleProject: DomainFilter:[test-dns.com] ZoneIDFilter:[] AlibabaCloudConfigFile:/etc/kubernetes/alibaba-cloud.json AlibabaCloudZoneType: AWSZoneType:public AWSAssumeRole: AWSBatchChangeSize:4000 AWSBatchChangeInterval:1s AWSEvaluateTargetHealth:true AzureConfigFile:/etc/kubernetes/azure.json AzureResourceGroup: CloudflareProxied:false InfobloxGridHost: InfobloxWapiPort:443 InfobloxWapiUsername:admin InfobloxWapiPassword: InfobloxWapiVersion:2.3.1 InfobloxSSLVerify:true DynCustomerName: DynUsername: DynPassword: DynMinTTLSeconds:0 OCIConfigFile:/etc/kubernetes/oci.yaml InMemoryZones:[] PDNSServer:http://localhost:8081 PDNSAPIKey: PDNSTLSEnabled:false TLSCA: TLSClientCert: TLSClientCertKey: Policy:upsert-only Registry:txt TXTOwnerID:my-identifier TXTPrefix: Interval:1m0s Once:false DryRun:false LogFormat:text MetricsAddress::7979 LogLevel:info TXTCacheInterval:0s ExoscaleEndpoint:https://api.exoscale.ch/dns ExoscaleAPIKey: ExoscaleAPISecret: CRDSourceAPIVersion:externaldns.k8s.io/v1alpha CRDSourceKind:DNSEndpoint ServiceTypeFilter:[] RFC2136Host: RFC2136Port:0 RFC2136Zone: RFC2136Insecure:false RFC2136TSIGKeyName: RFC2136TSIGSecret: RFC2136TSIGSecretAlg: RFC2136TAXFR:false}\" time=\"2019-12-11T10:26:05Z\" level=info msg=\"Created Kubernetes client https://10.100.0.1:443\" Usage \u00b6 To create a record set in the subdomain, from your ingress which has been created by the ingress-controller, add the following annotation in the ingress objectresource: annotations : kubernetes.io/ingress.class : alb alb.ingress.kubernetes.io/scheme : internet-facing # external-dns specific configuration for creating route53 record-set external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com # give your domain name here A snippet of the external-dns pod log indicating route53 update: time=\"2019-12-11T10:26:08Z\" level=info msg=\"Desired change: CREATE my-app.test-dns.com A\" time=\"2019-12-11T10:26:08Z\" level=info msg=\"Desired change: CREATE my-app.test-dns.com TXT\" time=\"2019-12-11T10:26:08Z\" level=info msg=\"2 record(s) in zone my-app.test-dns.com. were successfully updated\" External DNS configures Simple routing policy for the route53 records. You can configure Weighted policy by specifying the weight and the identifier via annotation. Weighted policy allows you to split the traffic between multiple load balancers. Here is an example to specify weight and identifier: annotations : # For creating weighted route53 records external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com external-dns.alpha.kubernetes.io/aws-weight : \"100\" external-dns.alpha.kubernetes.io/set-identifier : \"3\" You can refer to the External DNS documentation for further details [ link ].","title":"Setup External DNS"},{"location":"guide/integrations/external_dns/#setup-external-dns","text":"external-dns provisions DNS records based on the host information. This project will setup and manage records in Route 53 that point to controller deployed ALBs.","title":"Setup External DNS"},{"location":"guide/integrations/external_dns/#prerequisites","text":"","title":"Prerequisites"},{"location":"guide/integrations/external_dns/#role-permissions","text":"Adequate roles and policies must be configured in AWS and available to the node(s) running the external-dns. See https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/aws.md#iam-permissions.","title":"Role Permissions"},{"location":"guide/integrations/external_dns/#installation","text":"Download sample external-dns manifest wget https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/main/docs/examples/external-dns.yaml Edit the --domain-filter flag to include your hosted zone(s) The following example is for a hosted zone test-dns.com : args : - --source=service - --source=ingress - --domain-filter=test-dns.com # will make ExternalDNS see only the hosted zones matching provided domain, omit to process all available hosted zones - --provider=aws - --policy=upsert-only # would prevent ExternalDNS from deleting any records, omit to enable full synchronization - --aws-zone-type=public # only look at public hosted zones (valid values are public, private or no value for both) - --registry=txt - --txt-owner-id=my-identifier Deploy external-dns kubectl apply -f external-dns.yaml Verify it deployed successfully. kubectl logs -f $( kubectl get po | egrep -o 'external-dns[A-Za-z0-9-]+' ) Should display output similar to the following: time=\"2019-12-11T10:26:05Z\" level=info msg=\"config: {Master: KubeConfig: RequestTimeout:30s IstioIngressGateway:istio-system/istio-ingressgateway Sources:[service ingress] Namespace: AnnotationFilter: FQDNTemplate: CombineFQDNAndAnnotation:false Compatibility: PublishInternal:false PublishHostIP:false ConnectorSourceServer:localhost:8080 Provider:aws GoogleProject: DomainFilter:[test-dns.com] ZoneIDFilter:[] AlibabaCloudConfigFile:/etc/kubernetes/alibaba-cloud.json AlibabaCloudZoneType: AWSZoneType:public AWSAssumeRole: AWSBatchChangeSize:4000 AWSBatchChangeInterval:1s AWSEvaluateTargetHealth:true AzureConfigFile:/etc/kubernetes/azure.json AzureResourceGroup: CloudflareProxied:false InfobloxGridHost: InfobloxWapiPort:443 InfobloxWapiUsername:admin InfobloxWapiPassword: InfobloxWapiVersion:2.3.1 InfobloxSSLVerify:true DynCustomerName: DynUsername: DynPassword: DynMinTTLSeconds:0 OCIConfigFile:/etc/kubernetes/oci.yaml InMemoryZones:[] PDNSServer:http://localhost:8081 PDNSAPIKey: PDNSTLSEnabled:false TLSCA: TLSClientCert: TLSClientCertKey: Policy:upsert-only Registry:txt TXTOwnerID:my-identifier TXTPrefix: Interval:1m0s Once:false DryRun:false LogFormat:text MetricsAddress::7979 LogLevel:info TXTCacheInterval:0s ExoscaleEndpoint:https://api.exoscale.ch/dns ExoscaleAPIKey: ExoscaleAPISecret: CRDSourceAPIVersion:externaldns.k8s.io/v1alpha CRDSourceKind:DNSEndpoint ServiceTypeFilter:[] RFC2136Host: RFC2136Port:0 RFC2136Zone: RFC2136Insecure:false RFC2136TSIGKeyName: RFC2136TSIGSecret: RFC2136TSIGSecretAlg: RFC2136TAXFR:false}\" time=\"2019-12-11T10:26:05Z\" level=info msg=\"Created Kubernetes client https://10.100.0.1:443\"","title":"Installation"},{"location":"guide/integrations/external_dns/#usage","text":"To create a record set in the subdomain, from your ingress which has been created by the ingress-controller, add the following annotation in the ingress objectresource: annotations : kubernetes.io/ingress.class : alb alb.ingress.kubernetes.io/scheme : internet-facing # external-dns specific configuration for creating route53 record-set external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com # give your domain name here A snippet of the external-dns pod log indicating route53 update: time=\"2019-12-11T10:26:08Z\" level=info msg=\"Desired change: CREATE my-app.test-dns.com A\" time=\"2019-12-11T10:26:08Z\" level=info msg=\"Desired change: CREATE my-app.test-dns.com TXT\" time=\"2019-12-11T10:26:08Z\" level=info msg=\"2 record(s) in zone my-app.test-dns.com. were successfully updated\" External DNS configures Simple routing policy for the route53 records. You can configure Weighted policy by specifying the weight and the identifier via annotation. Weighted policy allows you to split the traffic between multiple load balancers. Here is an example to specify weight and identifier: annotations : # For creating weighted route53 records external-dns.alpha.kubernetes.io/hostname : my-app.test-dns.com external-dns.alpha.kubernetes.io/aws-weight : \"100\" external-dns.alpha.kubernetes.io/set-identifier : \"3\" You can refer to the External DNS documentation for further details [ link ].","title":"Usage"},{"location":"guide/service/annotations/","text":"Service annotations \u00b6 Annotation keys and values can only be strings. All other types below must be string-encoded, for example: boolean: \"true\" integer: \"42\" stringList: \"s1,s2,s3\" stringMap: \"k1=v1,k2=v2\" json: \"{ \\\"key\\\": \\\"value\\\" }\" Annotations \u00b6 Warning These annotations are specific to the kubernetes service resources reconciled by the AWS Load Balancer Controller. Although the list was initially derived from the k8s in-tree kube-controller-manager , this documentation is not an accurate reference for the services reconciled by the in-tree controller. Name Type Default Notes service.beta.kubernetes.io/load-balancer-source-ranges stringList service.beta.kubernetes.io/aws-load-balancer-type string service.beta.kubernetes.io/aws-load-balancer-nlb-target-type string default instance in case of LoadBalancerClass service.beta.kubernetes.io/aws-load-balancer-name string service.beta.kubernetes.io/aws-load-balancer-internal boolean false deprecated, in favor of aws-load-balancer-scheme service.beta.kubernetes.io/aws-load-balancer-scheme string internal service.beta.kubernetes.io/aws-load-balancer-proxy-protocol string Set to \"*\" to enable service.beta.kubernetes.io/aws-load-balancer-ip-address-type string ipv4 ipv4 | dualstack service.beta.kubernetes.io/aws-load-balancer-access-log-enabled boolean false deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name string deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix string deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled boolean false deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-ssl-cert stringList service.beta.kubernetes.io/aws-load-balancer-ssl-ports stringList service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy string ELBSecurityPolicy-2016-08 service.beta.kubernetes.io/aws-load-balancer-backend-protocol string service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags stringMap service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol string TCP service.beta.kubernetes.io/aws-load-balancer-healthcheck-port integer | traffic-port traffic-port service.beta.kubernetes.io/aws-load-balancer-healthcheck-path string \"/\" for HTTP(S) protocols service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold integer 3 service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold integer 3 service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout integer 10 service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval integer 10 service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes string 200-399 service.beta.kubernetes.io/aws-load-balancer-eip-allocations stringList internet-facing lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses stringList internal lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses stringList dualstack lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-target-group-attributes stringMap service.beta.kubernetes.io/aws-load-balancer-subnets stringList service.beta.kubernetes.io/aws-load-balancer-alpn-policy string service.beta.kubernetes.io/aws-load-balancer-target-node-labels stringMap service.beta.kubernetes.io/aws-load-balancer-attributes stringMap service.beta.kubernetes.io/aws-load-balancer-security-groups stringList service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules boolean true Traffic Routing \u00b6 Traffic Routing can be controlled with following annotations: service.beta.kubernetes.io/aws-load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error. limitations If you modify this annotation after service creation, there is no effect. Example service.beta.kubernetes.io/aws-load-balancer-name: custom-name service.beta.kubernetes.io/aws-load-balancer-type specifies the load balancer type. This controller reconciles those service resources with this annotation set to either nlb-ip or external . Tip This annotation specifies the controller used to provision LoadBalancers (as specified in legacy-cloud-provider ). Refer to lb-scheme to specify whether the LoadBalancer is internet-facing or internal. [Deprecated] For type nlb-ip , the controller will provision an NLB with targets registered by IP address. This value is supported for backwards compatibility. For type external , the NLB target type depends on the nlb-target-type annotation. limitations This annotation should not be modified after service creation. Example service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type specifies the target type to configure for NLB. You can choose between instance and ip . instance mode will route traffic to all EC2 instances within cluster on the NodePort opened for your service. The kube-proxy on the individual worker nodes sets up the forwarding of the traffic from the NodePort to the pods behind the service. service must be of type NodePort or LoadBalancer for instance targets for k8s 1.22 and later if spec.allocateLoadBalancerNodePorts is set to false , NodePort must be allocated manually default value If you configure spec.loadBalancerClass , the controller defaults to instance target type NodePort allocation k8s version 1.22 and later support disabling NodePort allocation by setting the service field spec.allocateLoadBalancerNodePorts to false . If the NodePort is not allocated for a service port, the controller will fail to reconcile instance mode NLB. ip mode will route traffic directly to the pod IP. In this mode, AWS NLB sends traffic directly to the Kubernetes pods behind the service, eliminating the need for an extra network hop through the worker nodes in the Kubernetes cluster. ip target mode supports pods running on AWS EC2 instances and AWS Fargate network plugin must use native AWS VPC networking configuration for pod IP, for example Amazon VPC CNI plugin . Example service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance service.beta.kubernetes.io/aws-load-balancer-subnets specifies the Availability Zone the NLB will route traffic to. See Network Load Balancers for more details. Tip Subnets are auto-discovered if this annotation is not specified, see Subnet Discovery for further details. You must specify at least one subnet in any of the AZs, both subnetID or subnetName(Name tag on subnets) can be used. limitations Each subnets must be from a different Availability Zone AWS has restrictions on disabling existing subnets for NLB. As a result, you might not be able to edit this annotation once the NLB gets provisioned. Example service.beta.kubernetes.io/aws-load-balancer-subnets: subnet-xxxx, mySubnet service.beta.kubernetes.io/aws-load-balancer-alpn-policy allows you to configure the ALPN policies on the load balancer. supported policies HTTP1Only Negotiate only HTTP/1.*. The ALPN preference list is http/1.1, http/1.0. HTTP2Only Negotiate only HTTP/2. The ALPN preference list is h2. HTTP2Optional Prefer HTTP/1.* over HTTP/2 (which can be useful for HTTP/2 testing). The ALPN preference list is http/1.1, http/1.0, h2. HTTP2Preferred Prefer HTTP/2 over HTTP/1.*. The ALPN preference list is h2, http/1.1, http/1.0. None Do not negotiate ALPN. This is the default. Example service.beta.kubernetes.io/aws-load-balancer-alpn-policy: HTTP2Preferred service.beta.kubernetes.io/aws-load-balancer-target-node-labels specifies which nodes to include in the target group registration for instance target type. Example service.beta.kubernetes.io/aws-load-balancer-target-node-labels: label1=value1, label2=value2 service.beta.kubernetes.io/aws-load-balancer-eip-allocations specifies a list of elastic IP address configuration for an internet-facing NLB. Note This configuration is optional, and you can use it to assign static IP addresses to your NLB You must specify the same number of eip allocations as load balancer subnets annotation NLB must be internet-facing Example service.beta.kubernetes.io/aws-load-balancer-eip-allocations: eipalloc-xyz, eipalloc-zzz service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses specifies a list of private IPv4 addresses for an internal NLB. Note NLB must be internal This configuration is optional, and you can use it to assign static IPv4 addresses to your NLB You must specify the same number of private IPv4 addresses as load balancer subnets annotation You must specify the IPv4 addresses from the load balancer subnet IPv4 ranges Example service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses: 192.168.10.15, 192.168.32.16 service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses specifies a list of IPv6 addresses for an dualstack NLB. Note NLB must be dualstack This configuration is optional, and you can use it to assign static IPv6 addresses to your NLB You must specify the same number of private IPv6 addresses as load balancer subnets annotation You must specify the IPv6 addresses from the load balancer subnet IPv6 ranges Example service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses: 2600:1f13:837:8501::1, 2600:1f13:837:8504::1 Traffic Listening \u00b6 Traffic Listening can be controlled with following annotations: service.beta.kubernetes.io/aws-load-balancer-ip-address-type specifies the IP address type of NLB. Example service.beta.kubernetes.io/aws-load-balancer-ip-address-type: ipv4 Resource attributes \u00b6 NLB resource attributes can be controlled via the following annotations: service.beta.kubernetes.io/aws-load-balancer-proxy-protocol specifies whether to enable proxy protocol v2 on the target group. Set to '*' to enable proxy protocol v2. This annotation takes precedence over the annotation service.beta.kubernetes.io/aws-load-balancer-target-group-attributes for proxy protocol v2 configuration. The only valid value for this annotation is * . service.beta.kubernetes.io/aws-load-balancer-target-group-attributes specifies the Target Group Attributes to be configured. Example set the deregistration delay to 120 seconds (available range is 0-3600 seconds) service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.timeout_seconds=120 enable source IP affinity service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: stickiness.enabled=true,stickiness.type=source_ip enable proxy protocol version 2 service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: proxy_protocol_v2.enabled=true enable connection termination on deregistration service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.connection_termination.enabled=true enable client IP preservation service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: preserve_client_ip.enabled=true service.beta.kubernetes.io/aws-load-balancer-attributes specifies Load Balancer Attributes that should be applied to the NLB. Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values( access_logs.s3.enabled=false ) and omitting them is not sufficient. Custom attributes set in this annotation's config map will be overriden by annotation-specific attributes. For backwards compatibility, existing annotations for the individual load balancer attributes get precedence in case of ties. If deletion_protection.enabled=true is in the annotation, the controller will not be able to delete the NLB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource. Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource. Example enable access log to s3 service.beta.kubernetes.io/aws-load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app enable NLB deletion protection service.beta.kubernetes.io/aws-load-balancer-attributes: deletion_protection.enabled=true enable cross zone load balancing service.beta.kubernetes.io/aws-load-balancer-attributes: load_balancing.cross_zone.enabled=true the following annotations are deprecated in v2.3.0 release in favor of service.beta.kubernetes.io/aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-enabled service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled AWS Resource Tags \u00b6 The AWS Load Balancer Controller automatically applies following tags to the AWS resources it creates (NLB/TargetGroups/Listener/ListenerRule): elbv2.k8s.aws/cluster: ${clusterName} service.k8s.aws/stack: ${stackID} service.k8s.aws/resource: ${resourceID} In addition, you can use annotations to specify additional tags service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags specifies additional tags to apply to the AWS resources. you cannot override the default controller tags mentioned above or the tags specified in the --default-tags controller flag if any of the tag conflicts with the ones configured via --external-managed-tags controller flag, the controller fails to reconcile the service Example service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: Environment=dev,Team=test Health Check \u00b6 Health check on target groups can be configured with following annotations: service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol specifies the target group health check protocol. you can specify tcp , or http or https , tcp is the default tcp is the default health check protocol if the service spec.externalTrafficPolicy is Cluster , http if Local if the service spec.externalTrafficPolicy is Local , do not use tcp for health check Supports only single protocol per service Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol: http service.beta.kubernetes.io/aws-load-balancer-healthcheck-port specifies the TCP port to use for target group health check. default value if you do not specify the health check port, the default value will be spec.healthCheckNodePort when externalTrafficPolicy=local or traffic-port otherwise. Example set the health check port to traffic-port service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: traffic-port set the health check port to port 80 service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: \"80\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-path specifies the http path for the health check in case of http/https protocol. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-path: /healthz service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold specifies the consecutive health check successes required before a target is considered healthy. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: \"3\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold specifies the consecutive health check failures before a target gets marked unhealthy. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: \"3\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval specifies the interval between consecutive health checks. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: \"10\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes specifies the http success codes for the health check in case of http/https protocol. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes: \"200-399\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout specifies the target group health check timeout. The target has to respond within the timeout for a successful health check. Note The controller currently ignores the timeout configuration due to the limitations on the AWS NLB. The default timeout for TCP is 10s and HTTP is 6s. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: \"10\" TLS \u00b6 You can configure TLS support via the following annotations: service.beta.kubernetes.io/aws-load-balancer-ssl-cert specifies the ARN of one or more certificates managed by the AWS Certificate Manager . The first certificate in the list is the default certificate and remaining certificates are for the optional certificate list. See Server Certificates for further details. Example service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx service.beta.kubernetes.io/aws-load-balancer-ssl-ports specifies the frontend ports with TLS listeners. You must configure at least one certificate for TLS listeners You can specify a list of port names or port values, * does not match any ports If you don't specify this annotation, controller creates TLS listener for all the service ports Specify this annotation if you need both TLS and non-TLS listeners on the same load balancer Example service.beta.kubernetes.io/aws-load-balancer-ssl-ports: 443, custom-port service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy specifies the Security Policy for NLB frontend connections, allowing you to control the protocol and ciphers. Example service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06 service.beta.kubernetes.io/aws-load-balancer-backend-protocol specifies whether to use TLS for the backend traffic between the load balancer and the kubernetes pods. If you specify ssl as the backend protocol, NLB uses TLS connections for the traffic to your kubernetes pods in case of TLS listeners You can specify ssl or tcp (default) Example service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ssl Access control \u00b6 Load balancer access can be controlled via following annotations: service.beta.kubernetes.io/load-balancer-source-ranges specifies the CIDRs that are allowed to access the NLB. Tip we recommend specifying CIDRs in the service spec.loadBalancerSourceRanges instead Default 0.0.0.0/0 will be used if the IPAddressType is \"ipv4\" 0.0.0.0/0 and ::/0 will be used if the IPAddressType is \"dualstack\" The VPC CIDR will be used if service.beta.kubernetes.io/aws-load-balancer-scheme is internal This annotation will be ignored in case preserve client IP is not enabled. - preserve client IP is disabled by default for IP targets - preserve client IP is enabled by default for instance targets Preserve client IP has no effect on traffic converted from IPv4 to IPv6 and on traffic converted from IPv6 to IPv4. The source IP of this type of traffic is always the private IP address of the Network Load Balancer. - This could cause the clients that have their traffic converted to bypass the specified CIDRs that are allowed to access the NLB. this annotation will be ignored if service.beta.kubernetes.io/aws-load-balancer-security-groups is specified. Example service.beta.kubernetes.io/load-balancer-source-ranges: 10.0.0.0/24 service.beta.kubernetes.io/aws-load-balancer-scheme specifies whether the NLB will be internet-facing or internal. Valid values are internal , internet-facing . If not specified, default is internal . Example service.beta.kubernetes.io/aws-load-balancer-scheme: \"internet-facing\" service.beta.kubernetes.io/aws-load-balancer-internal specifies whether the NLB will be internet-facing or internal. deprecation note This annotation is deprecated starting v2.2.0 release in favor of the new aws-load-balancer-scheme annotation. It will be supported, but in case of ties, the aws-load-balancer-scheme gets precedence. Example service.beta.kubernetes.io/aws-load-balancer-internal: \"true\" service.beta.kubernetes.io/aws-load-balancer-security-groups specifies the frontend securityGroups you want to attach to an NLB. When this annotation is not present, the controller will automatically create one security group. The security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports . Also, the securityGroups for target instances/ENIs will be modified to allow inbound traffic from this securityGroup. If you specify this annotation, you need to configure the security groups on your target instances/ENIs to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the security group rules. Both name and ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute. Example service.beta.kubernetes.io/aws-load-balancer-security-groups: sg-xxxx, nameOfSg1, nameOfSg2 service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules specifies whether the controller should automatically add the ingress rules to the instance/ENI security group. If you disable the automatic management of security group rules for an NLB, you will need to manually add appropriate ingress rules to your EC2 instance or ENI security groups to allow access to the traffic and health check ports. Example service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules: \"false\" Legacy Cloud Provider \u00b6 The AWS Load Balancer Controller manages Kubernetes Services in a compatible way with the AWS cloud provider's legacy service controller. For users on v2.5.0+, The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerCLass field for Serive of type LoadBalancer, effectively making the AWS LBC the default controller for Service of type LoadBalancer. Users can disable this feature and revert to using the AWS Cloud Controller Manager as the default service controller by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false . For users on older versions, the annotation service.beta.kubernetes.io/aws-load-balancer-type is used to determine which controller reconciles the service. If the annotation value is nlb-ip or external , recent versions of the legacy cloud provider ignore the Service resource so that the AWS LBC can take over. For all other values of the annotation, the legacy cloud provider will handle the service. Note that this annotation should be specified during service creation and not edited later. Support for the annotation was added to the legacy cloud provider in Kubernetes v1.20, and is backported to v1.18.18+ and v1.19.10+.","title":"Annotations"},{"location":"guide/service/annotations/#service-annotations","text":"Annotation keys and values can only be strings. All other types below must be string-encoded, for example: boolean: \"true\" integer: \"42\" stringList: \"s1,s2,s3\" stringMap: \"k1=v1,k2=v2\" json: \"{ \\\"key\\\": \\\"value\\\" }\"","title":"Service annotations"},{"location":"guide/service/annotations/#annotations","text":"Warning These annotations are specific to the kubernetes service resources reconciled by the AWS Load Balancer Controller. Although the list was initially derived from the k8s in-tree kube-controller-manager , this documentation is not an accurate reference for the services reconciled by the in-tree controller. Name Type Default Notes service.beta.kubernetes.io/load-balancer-source-ranges stringList service.beta.kubernetes.io/aws-load-balancer-type string service.beta.kubernetes.io/aws-load-balancer-nlb-target-type string default instance in case of LoadBalancerClass service.beta.kubernetes.io/aws-load-balancer-name string service.beta.kubernetes.io/aws-load-balancer-internal boolean false deprecated, in favor of aws-load-balancer-scheme service.beta.kubernetes.io/aws-load-balancer-scheme string internal service.beta.kubernetes.io/aws-load-balancer-proxy-protocol string Set to \"*\" to enable service.beta.kubernetes.io/aws-load-balancer-ip-address-type string ipv4 ipv4 | dualstack service.beta.kubernetes.io/aws-load-balancer-access-log-enabled boolean false deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name string deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix string deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled boolean false deprecated, in favor of aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-ssl-cert stringList service.beta.kubernetes.io/aws-load-balancer-ssl-ports stringList service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy string ELBSecurityPolicy-2016-08 service.beta.kubernetes.io/aws-load-balancer-backend-protocol string service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags stringMap service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol string TCP service.beta.kubernetes.io/aws-load-balancer-healthcheck-port integer | traffic-port traffic-port service.beta.kubernetes.io/aws-load-balancer-healthcheck-path string \"/\" for HTTP(S) protocols service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold integer 3 service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold integer 3 service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout integer 10 service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval integer 10 service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes string 200-399 service.beta.kubernetes.io/aws-load-balancer-eip-allocations stringList internet-facing lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses stringList internal lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses stringList dualstack lb only. Length must match the number of subnets service.beta.kubernetes.io/aws-load-balancer-target-group-attributes stringMap service.beta.kubernetes.io/aws-load-balancer-subnets stringList service.beta.kubernetes.io/aws-load-balancer-alpn-policy string service.beta.kubernetes.io/aws-load-balancer-target-node-labels stringMap service.beta.kubernetes.io/aws-load-balancer-attributes stringMap service.beta.kubernetes.io/aws-load-balancer-security-groups stringList service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules boolean true","title":"Annotations"},{"location":"guide/service/annotations/#traffic-routing","text":"Traffic Routing can be controlled with following annotations: service.beta.kubernetes.io/aws-load-balancer-name specifies the custom name to use for the load balancer. Name longer than 32 characters will be treated as an error. limitations If you modify this annotation after service creation, there is no effect. Example service.beta.kubernetes.io/aws-load-balancer-name: custom-name service.beta.kubernetes.io/aws-load-balancer-type specifies the load balancer type. This controller reconciles those service resources with this annotation set to either nlb-ip or external . Tip This annotation specifies the controller used to provision LoadBalancers (as specified in legacy-cloud-provider ). Refer to lb-scheme to specify whether the LoadBalancer is internet-facing or internal. [Deprecated] For type nlb-ip , the controller will provision an NLB with targets registered by IP address. This value is supported for backwards compatibility. For type external , the NLB target type depends on the nlb-target-type annotation. limitations This annotation should not be modified after service creation. Example service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type specifies the target type to configure for NLB. You can choose between instance and ip . instance mode will route traffic to all EC2 instances within cluster on the NodePort opened for your service. The kube-proxy on the individual worker nodes sets up the forwarding of the traffic from the NodePort to the pods behind the service. service must be of type NodePort or LoadBalancer for instance targets for k8s 1.22 and later if spec.allocateLoadBalancerNodePorts is set to false , NodePort must be allocated manually default value If you configure spec.loadBalancerClass , the controller defaults to instance target type NodePort allocation k8s version 1.22 and later support disabling NodePort allocation by setting the service field spec.allocateLoadBalancerNodePorts to false . If the NodePort is not allocated for a service port, the controller will fail to reconcile instance mode NLB. ip mode will route traffic directly to the pod IP. In this mode, AWS NLB sends traffic directly to the Kubernetes pods behind the service, eliminating the need for an extra network hop through the worker nodes in the Kubernetes cluster. ip target mode supports pods running on AWS EC2 instances and AWS Fargate network plugin must use native AWS VPC networking configuration for pod IP, for example Amazon VPC CNI plugin . Example service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance service.beta.kubernetes.io/aws-load-balancer-subnets specifies the Availability Zone the NLB will route traffic to. See Network Load Balancers for more details. Tip Subnets are auto-discovered if this annotation is not specified, see Subnet Discovery for further details. You must specify at least one subnet in any of the AZs, both subnetID or subnetName(Name tag on subnets) can be used. limitations Each subnets must be from a different Availability Zone AWS has restrictions on disabling existing subnets for NLB. As a result, you might not be able to edit this annotation once the NLB gets provisioned. Example service.beta.kubernetes.io/aws-load-balancer-subnets: subnet-xxxx, mySubnet service.beta.kubernetes.io/aws-load-balancer-alpn-policy allows you to configure the ALPN policies on the load balancer. supported policies HTTP1Only Negotiate only HTTP/1.*. The ALPN preference list is http/1.1, http/1.0. HTTP2Only Negotiate only HTTP/2. The ALPN preference list is h2. HTTP2Optional Prefer HTTP/1.* over HTTP/2 (which can be useful for HTTP/2 testing). The ALPN preference list is http/1.1, http/1.0, h2. HTTP2Preferred Prefer HTTP/2 over HTTP/1.*. The ALPN preference list is h2, http/1.1, http/1.0. None Do not negotiate ALPN. This is the default. Example service.beta.kubernetes.io/aws-load-balancer-alpn-policy: HTTP2Preferred service.beta.kubernetes.io/aws-load-balancer-target-node-labels specifies which nodes to include in the target group registration for instance target type. Example service.beta.kubernetes.io/aws-load-balancer-target-node-labels: label1=value1, label2=value2 service.beta.kubernetes.io/aws-load-balancer-eip-allocations specifies a list of elastic IP address configuration for an internet-facing NLB. Note This configuration is optional, and you can use it to assign static IP addresses to your NLB You must specify the same number of eip allocations as load balancer subnets annotation NLB must be internet-facing Example service.beta.kubernetes.io/aws-load-balancer-eip-allocations: eipalloc-xyz, eipalloc-zzz service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses specifies a list of private IPv4 addresses for an internal NLB. Note NLB must be internal This configuration is optional, and you can use it to assign static IPv4 addresses to your NLB You must specify the same number of private IPv4 addresses as load balancer subnets annotation You must specify the IPv4 addresses from the load balancer subnet IPv4 ranges Example service.beta.kubernetes.io/aws-load-balancer-private-ipv4-addresses: 192.168.10.15, 192.168.32.16 service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses specifies a list of IPv6 addresses for an dualstack NLB. Note NLB must be dualstack This configuration is optional, and you can use it to assign static IPv6 addresses to your NLB You must specify the same number of private IPv6 addresses as load balancer subnets annotation You must specify the IPv6 addresses from the load balancer subnet IPv6 ranges Example service.beta.kubernetes.io/aws-load-balancer-ipv6-addresses: 2600:1f13:837:8501::1, 2600:1f13:837:8504::1","title":"Traffic Routing"},{"location":"guide/service/annotations/#traffic-listening","text":"Traffic Listening can be controlled with following annotations: service.beta.kubernetes.io/aws-load-balancer-ip-address-type specifies the IP address type of NLB. Example service.beta.kubernetes.io/aws-load-balancer-ip-address-type: ipv4","title":"Traffic Listening"},{"location":"guide/service/annotations/#resource-attributes","text":"NLB resource attributes can be controlled via the following annotations: service.beta.kubernetes.io/aws-load-balancer-proxy-protocol specifies whether to enable proxy protocol v2 on the target group. Set to '*' to enable proxy protocol v2. This annotation takes precedence over the annotation service.beta.kubernetes.io/aws-load-balancer-target-group-attributes for proxy protocol v2 configuration. The only valid value for this annotation is * . service.beta.kubernetes.io/aws-load-balancer-target-group-attributes specifies the Target Group Attributes to be configured. Example set the deregistration delay to 120 seconds (available range is 0-3600 seconds) service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.timeout_seconds=120 enable source IP affinity service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: stickiness.enabled=true,stickiness.type=source_ip enable proxy protocol version 2 service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: proxy_protocol_v2.enabled=true enable connection termination on deregistration service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: deregistration_delay.connection_termination.enabled=true enable client IP preservation service.beta.kubernetes.io/aws-load-balancer-target-group-attributes: preserve_client_ip.enabled=true service.beta.kubernetes.io/aws-load-balancer-attributes specifies Load Balancer Attributes that should be applied to the NLB. Only attributes defined in the annotation will be updated. To unset any AWS defaults(e.g. Disabling access logs after having them enabled once), the values need to be explicitly set to the original values( access_logs.s3.enabled=false ) and omitting them is not sufficient. Custom attributes set in this annotation's config map will be overriden by annotation-specific attributes. For backwards compatibility, existing annotations for the individual load balancer attributes get precedence in case of ties. If deletion_protection.enabled=true is in the annotation, the controller will not be able to delete the NLB during reconciliation. Once the attribute gets edited to deletion_protection.enabled=false during reconciliation, the deployer will force delete the resource. Please note, if the deletion protection is not enabled via annotation (e.g. via AWS console), the controller still deletes the underlying resource. Example enable access log to s3 service.beta.kubernetes.io/aws-load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=my-access-log-bucket,access_logs.s3.prefix=my-app enable NLB deletion protection service.beta.kubernetes.io/aws-load-balancer-attributes: deletion_protection.enabled=true enable cross zone load balancing service.beta.kubernetes.io/aws-load-balancer-attributes: load_balancing.cross_zone.enabled=true the following annotations are deprecated in v2.3.0 release in favor of service.beta.kubernetes.io/aws-load-balancer-attributes service.beta.kubernetes.io/aws-load-balancer-access-log-enabled service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled","title":"Resource attributes"},{"location":"guide/service/annotations/#aws-resource-tags","text":"The AWS Load Balancer Controller automatically applies following tags to the AWS resources it creates (NLB/TargetGroups/Listener/ListenerRule): elbv2.k8s.aws/cluster: ${clusterName} service.k8s.aws/stack: ${stackID} service.k8s.aws/resource: ${resourceID} In addition, you can use annotations to specify additional tags service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags specifies additional tags to apply to the AWS resources. you cannot override the default controller tags mentioned above or the tags specified in the --default-tags controller flag if any of the tag conflicts with the ones configured via --external-managed-tags controller flag, the controller fails to reconcile the service Example service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: Environment=dev,Team=test","title":"AWS Resource Tags"},{"location":"guide/service/annotations/#health-check","text":"Health check on target groups can be configured with following annotations: service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol specifies the target group health check protocol. you can specify tcp , or http or https , tcp is the default tcp is the default health check protocol if the service spec.externalTrafficPolicy is Cluster , http if Local if the service spec.externalTrafficPolicy is Local , do not use tcp for health check Supports only single protocol per service Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol: http service.beta.kubernetes.io/aws-load-balancer-healthcheck-port specifies the TCP port to use for target group health check. default value if you do not specify the health check port, the default value will be spec.healthCheckNodePort when externalTrafficPolicy=local or traffic-port otherwise. Example set the health check port to traffic-port service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: traffic-port set the health check port to port 80 service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: \"80\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-path specifies the http path for the health check in case of http/https protocol. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-path: /healthz service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold specifies the consecutive health check successes required before a target is considered healthy. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold: \"3\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold specifies the consecutive health check failures before a target gets marked unhealthy. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold: \"3\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval specifies the interval between consecutive health checks. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: \"10\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes specifies the http success codes for the health check in case of http/https protocol. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-success-codes: \"200-399\" service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout specifies the target group health check timeout. The target has to respond within the timeout for a successful health check. Note The controller currently ignores the timeout configuration due to the limitations on the AWS NLB. The default timeout for TCP is 10s and HTTP is 6s. Example service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: \"10\"","title":"Health Check"},{"location":"guide/service/annotations/#tls","text":"You can configure TLS support via the following annotations: service.beta.kubernetes.io/aws-load-balancer-ssl-cert specifies the ARN of one or more certificates managed by the AWS Certificate Manager . The first certificate in the list is the default certificate and remaining certificates are for the optional certificate list. See Server Certificates for further details. Example service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:us-west-2:xxxxx:certificate/xxxxxxx service.beta.kubernetes.io/aws-load-balancer-ssl-ports specifies the frontend ports with TLS listeners. You must configure at least one certificate for TLS listeners You can specify a list of port names or port values, * does not match any ports If you don't specify this annotation, controller creates TLS listener for all the service ports Specify this annotation if you need both TLS and non-TLS listeners on the same load balancer Example service.beta.kubernetes.io/aws-load-balancer-ssl-ports: 443, custom-port service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy specifies the Security Policy for NLB frontend connections, allowing you to control the protocol and ciphers. Example service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06 service.beta.kubernetes.io/aws-load-balancer-backend-protocol specifies whether to use TLS for the backend traffic between the load balancer and the kubernetes pods. If you specify ssl as the backend protocol, NLB uses TLS connections for the traffic to your kubernetes pods in case of TLS listeners You can specify ssl or tcp (default) Example service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ssl","title":"TLS"},{"location":"guide/service/annotations/#access-control","text":"Load balancer access can be controlled via following annotations: service.beta.kubernetes.io/load-balancer-source-ranges specifies the CIDRs that are allowed to access the NLB. Tip we recommend specifying CIDRs in the service spec.loadBalancerSourceRanges instead Default 0.0.0.0/0 will be used if the IPAddressType is \"ipv4\" 0.0.0.0/0 and ::/0 will be used if the IPAddressType is \"dualstack\" The VPC CIDR will be used if service.beta.kubernetes.io/aws-load-balancer-scheme is internal This annotation will be ignored in case preserve client IP is not enabled. - preserve client IP is disabled by default for IP targets - preserve client IP is enabled by default for instance targets Preserve client IP has no effect on traffic converted from IPv4 to IPv6 and on traffic converted from IPv6 to IPv4. The source IP of this type of traffic is always the private IP address of the Network Load Balancer. - This could cause the clients that have their traffic converted to bypass the specified CIDRs that are allowed to access the NLB. this annotation will be ignored if service.beta.kubernetes.io/aws-load-balancer-security-groups is specified. Example service.beta.kubernetes.io/load-balancer-source-ranges: 10.0.0.0/24 service.beta.kubernetes.io/aws-load-balancer-scheme specifies whether the NLB will be internet-facing or internal. Valid values are internal , internet-facing . If not specified, default is internal . Example service.beta.kubernetes.io/aws-load-balancer-scheme: \"internet-facing\" service.beta.kubernetes.io/aws-load-balancer-internal specifies whether the NLB will be internet-facing or internal. deprecation note This annotation is deprecated starting v2.2.0 release in favor of the new aws-load-balancer-scheme annotation. It will be supported, but in case of ties, the aws-load-balancer-scheme gets precedence. Example service.beta.kubernetes.io/aws-load-balancer-internal: \"true\" service.beta.kubernetes.io/aws-load-balancer-security-groups specifies the frontend securityGroups you want to attach to an NLB. When this annotation is not present, the controller will automatically create one security group. The security group will be attached to the LoadBalancer and allow access from inbound-cidrs to the listen-ports . Also, the securityGroups for target instances/ENIs will be modified to allow inbound traffic from this securityGroup. If you specify this annotation, you need to configure the security groups on your target instances/ENIs to allow inbound traffic from the load balancer. You could also set the manage-backend-security-group-rules if you want the controller to manage the security group rules. Both name and ID of securityGroups are supported. Name matches a Name tag, not the groupName attribute. Example service.beta.kubernetes.io/aws-load-balancer-security-groups: sg-xxxx, nameOfSg1, nameOfSg2 service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules specifies whether the controller should automatically add the ingress rules to the instance/ENI security group. If you disable the automatic management of security group rules for an NLB, you will need to manually add appropriate ingress rules to your EC2 instance or ENI security groups to allow access to the traffic and health check ports. Example service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules: \"false\"","title":"Access control"},{"location":"guide/service/annotations/#legacy-cloud-provider","text":"The AWS Load Balancer Controller manages Kubernetes Services in a compatible way with the AWS cloud provider's legacy service controller. For users on v2.5.0+, The AWS LBC provides a mutating webhook for service resources to set the spec.loadBalancerCLass field for Serive of type LoadBalancer, effectively making the AWS LBC the default controller for Service of type LoadBalancer. Users can disable this feature and revert to using the AWS Cloud Controller Manager as the default service controller by setting the helm chart value enableServiceMutatorWebhook to false with --set enableServiceMutatorWebhook=false . For users on older versions, the annotation service.beta.kubernetes.io/aws-load-balancer-type is used to determine which controller reconciles the service. If the annotation value is nlb-ip or external , recent versions of the legacy cloud provider ignore the Service resource so that the AWS LBC can take over. For all other values of the annotation, the legacy cloud provider will handle the service. Note that this annotation should be specified during service creation and not edited later. Support for the annotation was added to the legacy cloud provider in Kubernetes v1.20, and is backported to v1.18.18+ and v1.19.10+.","title":"Legacy Cloud Provider"},{"location":"guide/service/nlb/","text":"Network Load Balancer \u00b6 The AWS Load Balancer Controller (LBC) supports reconciliation for Kubernetes Service resources of type LoadBalancer by provisioning an AWS Network Load Balancer (NLB) with an instance or ip target type . Secure by default Since the v2.2.0 release, the LBC provisions an internal NLB by default. To create an internet-facing NLB, the following annotation is required on your service: service.beta.kubernetes.io/aws-load-balancer-scheme : internet-facing For backwards compatibility, if the service.beta.kubernetes.io/aws-load-balancer-scheme annotation is absent, an existing NLB's scheme remains unchanged. Prerequisites \u00b6 LBC >= v2.2.0 For Kubernetes Service resources of type LoadBalancer : Kubernetes >= v1.20 or Kubernetes >= v1.19.10 for 1.19 or Kubernetes >= v1.18.18 for 1.18 or EKS >= v1.16 For Kubernetes Service resources of type NodePort : Kubernetes >= v1.16 For ip target type: Pods have native AWS VPC networking configured. For more information, see the Amazon VPC CNI plugin documentation. Configuration \u00b6 By default, Kubernetes Service resources of type LoadBalancer get reconciled by the Kubernetes controller built into the CloudProvider component of the kube-controller-manager or the cloud-controller-manager (also known as the in-tree controller). In order for the LBC to manage the reconciliation of Kubernetes Service resources of type LoadBalancer , you need to offload the reconciliation from the in-tree controller to the LBC, explicitly. With LoadBalancerClass The LBC supports the LoadBalancerClass feature since the v2.4.0 release for Kubernetes v1.22+ clusters. The LoadBalancerClass feature provides a CloudProvider agnostic way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller. When you specify the spec.loadBalancerClass to be service.k8s.aws/nlb on a Kubernetes Service resource of type LoadBalancer , the LBC takes charge of reconciliation by provisioning an NLB. Warning If you modify a Service resource with matching spec.loadBalancerClass by changing its type from LoadBalancer to anything else, the controller will cleanup the provisioned NLB for that Service. If the spec.loadBalancerClass is set to a loadBalancerClass that isn't recognized by the LBC, it ignores the Service resource, regardless of the service.beta.kubernetes.io/aws-load-balancer-type annotation. Tip By default, the NLB uses the instance target type. You can customize it using the service.beta.kubernetes.io/aws-load-balancer-nlb-target-type annotation . The LBC uses service.k8s.aws/nlb as the default LoadBalancerClass . You can customize it to a different value using the controller flag --load-balancer-class . Example: instance mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : instance spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb Example: ip mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : ip spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb With service.beta.kubernetes.io/aws-load-balancer-type annotation The AWS in-tree controller supports an AWS specific way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller. When you specify the service.beta.kubernetes.io/aws-load-balancer-type annotation to be external on a Kubernetes Service resource of type LoadBalancer , the in-tree controller ignores the Service resource. In addition, if you specify the service.beta.kubernetes.io/aws-load-balancer-nlb-target-type annotation on the Service resource, the LBC takes charge of reconciliation by provisioning an NLB. Warning It's not recommended to modify or add the service.beta.kubernetes.io/aws-load-balancer-type annotation on an existing Service resource. If a change is desired, delete the existing Service resource and create a new one instead of modifying an existing Service. If you modify this annotation on an existing Service resource, you might end up with leaked LBC resources. backwards compatibility for nlb-ip type For backwards compatibility, both the in-tree and LBC controller supports nlb-ip as a value for the service.beta.kubernetes.io/aws-load-balancer-type annotation. The controllers treats it as if you specified both of the following annotations: service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip Example: instance mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-type : external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : instance spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer Example: ip mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-type : external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : ip spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer Protocols \u00b6 The LBC supports both TCP and UDP protocols. The controller also configures TLS termination on your NLB if you configure the Service with a certificate annotation. In the case of TCP, an NLB with IP targets doesn't pass the client source IP address, unless you specifically configure it to using target group attributes. Your application pods might not see the actual client IP address, even if the NLB passes it along. For example, if you're using instance mode with externalTrafficPolicy set to Cluster . In such cases, you can configure NLB proxy protocol v2 using an annotation if you need visibility into the client source IP address on your application pods. To enable proxy protocol v2, apply the following annotation to your Service: service.beta.kubernetes.io/aws-load-balancer-proxy-protocol : \"*\" If you enable proxy protocol v2, NLB health checks with HTTP/HTTPS only work if the health check port supports proxy protocol v2. Due to this behavior, you shouldn't configure proxy protocol v2 with NLB instance mode and externalTrafficPolicy set to Local . Subnet tagging requirements \u00b6 See Subnet Discovery for details on configuring Elastic Load Balancing for public or private placement. Security group \u00b6 From v2.6.0, the AWS LBC creates and attaches frontend and backend security groups to NLB by default. For more information please see the security groups documentation In older versions, the controller by default adds inbound rules to the worker node security groups, to allow inbound traffic from an NLB. disable worker node security group rule management You can disable the worker node security group rule management using an annotation . Worker node security groups selection \u00b6 The controller automatically selects the worker node security groups that it modifies to allow inbound traffic using the following rules: For instance mode, the security group of each backend worker node's primary elastic network interface (ENI) is selected. For ip mode, the security group of each backend pod's ENI is selected. Multiple security groups on an ENI If there are multiple security groups attached to an ENI, the controller expects only one security group tagged with following tags: Key Value kubernetes.io/cluster/${cluster-name} owned or shared ${cluster-name} is the name of the Kubernetes cluster. If it is possible for multiple security groups with the tag kubernetes.io/cluster/${cluster-name} to be on a target ENI, you may use the --service-target-eni-security-group-tags flag to specify additional tags that must also match in order for a security group to be used. Worker node security groups rules \u00b6 When client IP preservation is enabled Rule Protocol Port(s) IpRanges(s) Client Traffic spec.ports[*].protocol spec.ports[*].port Traffic Source CIDRs Health Check Traffic TCP Health Check Ports NLB Subnet CIDRs When client IP preservation is disabled Rule Protocol Port(s) IpRange(s) Client Traffic spec.ports[*].protocol spec.ports[*].port NLB Subnet CIDRs Health Check Traffic TCP Health Check Ports NLB Subnet CIDRs","title":"Network Load Balancer"},{"location":"guide/service/nlb/#network-load-balancer","text":"The AWS Load Balancer Controller (LBC) supports reconciliation for Kubernetes Service resources of type LoadBalancer by provisioning an AWS Network Load Balancer (NLB) with an instance or ip target type . Secure by default Since the v2.2.0 release, the LBC provisions an internal NLB by default. To create an internet-facing NLB, the following annotation is required on your service: service.beta.kubernetes.io/aws-load-balancer-scheme : internet-facing For backwards compatibility, if the service.beta.kubernetes.io/aws-load-balancer-scheme annotation is absent, an existing NLB's scheme remains unchanged.","title":"Network Load Balancer"},{"location":"guide/service/nlb/#prerequisites","text":"LBC >= v2.2.0 For Kubernetes Service resources of type LoadBalancer : Kubernetes >= v1.20 or Kubernetes >= v1.19.10 for 1.19 or Kubernetes >= v1.18.18 for 1.18 or EKS >= v1.16 For Kubernetes Service resources of type NodePort : Kubernetes >= v1.16 For ip target type: Pods have native AWS VPC networking configured. For more information, see the Amazon VPC CNI plugin documentation.","title":"Prerequisites"},{"location":"guide/service/nlb/#configuration","text":"By default, Kubernetes Service resources of type LoadBalancer get reconciled by the Kubernetes controller built into the CloudProvider component of the kube-controller-manager or the cloud-controller-manager (also known as the in-tree controller). In order for the LBC to manage the reconciliation of Kubernetes Service resources of type LoadBalancer , you need to offload the reconciliation from the in-tree controller to the LBC, explicitly. With LoadBalancerClass The LBC supports the LoadBalancerClass feature since the v2.4.0 release for Kubernetes v1.22+ clusters. The LoadBalancerClass feature provides a CloudProvider agnostic way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller. When you specify the spec.loadBalancerClass to be service.k8s.aws/nlb on a Kubernetes Service resource of type LoadBalancer , the LBC takes charge of reconciliation by provisioning an NLB. Warning If you modify a Service resource with matching spec.loadBalancerClass by changing its type from LoadBalancer to anything else, the controller will cleanup the provisioned NLB for that Service. If the spec.loadBalancerClass is set to a loadBalancerClass that isn't recognized by the LBC, it ignores the Service resource, regardless of the service.beta.kubernetes.io/aws-load-balancer-type annotation. Tip By default, the NLB uses the instance target type. You can customize it using the service.beta.kubernetes.io/aws-load-balancer-nlb-target-type annotation . The LBC uses service.k8s.aws/nlb as the default LoadBalancerClass . You can customize it to a different value using the controller flag --load-balancer-class . Example: instance mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : instance spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb Example: ip mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : ip spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb With service.beta.kubernetes.io/aws-load-balancer-type annotation The AWS in-tree controller supports an AWS specific way of offloading the reconciliation for Kubernetes Service resources of type LoadBalancer to an external controller. When you specify the service.beta.kubernetes.io/aws-load-balancer-type annotation to be external on a Kubernetes Service resource of type LoadBalancer , the in-tree controller ignores the Service resource. In addition, if you specify the service.beta.kubernetes.io/aws-load-balancer-nlb-target-type annotation on the Service resource, the LBC takes charge of reconciliation by provisioning an NLB. Warning It's not recommended to modify or add the service.beta.kubernetes.io/aws-load-balancer-type annotation on an existing Service resource. If a change is desired, delete the existing Service resource and create a new one instead of modifying an existing Service. If you modify this annotation on an existing Service resource, you might end up with leaked LBC resources. backwards compatibility for nlb-ip type For backwards compatibility, both the in-tree and LBC controller supports nlb-ip as a value for the service.beta.kubernetes.io/aws-load-balancer-type annotation. The controllers treats it as if you specified both of the following annotations: service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip Example: instance mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-type : external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : instance spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer Example: ip mode apiVersion : v1 kind : Service metadata : name : echoserver annotations : service.beta.kubernetes.io/aws-load-balancer-type : external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type : ip spec : selector : app : echoserver ports : - port : 80 targetPort : 8080 protocol : TCP type : LoadBalancer","title":"Configuration"},{"location":"guide/service/nlb/#protocols","text":"The LBC supports both TCP and UDP protocols. The controller also configures TLS termination on your NLB if you configure the Service with a certificate annotation. In the case of TCP, an NLB with IP targets doesn't pass the client source IP address, unless you specifically configure it to using target group attributes. Your application pods might not see the actual client IP address, even if the NLB passes it along. For example, if you're using instance mode with externalTrafficPolicy set to Cluster . In such cases, you can configure NLB proxy protocol v2 using an annotation if you need visibility into the client source IP address on your application pods. To enable proxy protocol v2, apply the following annotation to your Service: service.beta.kubernetes.io/aws-load-balancer-proxy-protocol : \"*\" If you enable proxy protocol v2, NLB health checks with HTTP/HTTPS only work if the health check port supports proxy protocol v2. Due to this behavior, you shouldn't configure proxy protocol v2 with NLB instance mode and externalTrafficPolicy set to Local .","title":"Protocols"},{"location":"guide/service/nlb/#subnet-tagging-requirements","text":"See Subnet Discovery for details on configuring Elastic Load Balancing for public or private placement.","title":"Subnet tagging requirements"},{"location":"guide/service/nlb/#security-group","text":"From v2.6.0, the AWS LBC creates and attaches frontend and backend security groups to NLB by default. For more information please see the security groups documentation In older versions, the controller by default adds inbound rules to the worker node security groups, to allow inbound traffic from an NLB. disable worker node security group rule management You can disable the worker node security group rule management using an annotation .","title":"Security group"},{"location":"guide/service/nlb/#worker-node-security-groups-selection","text":"The controller automatically selects the worker node security groups that it modifies to allow inbound traffic using the following rules: For instance mode, the security group of each backend worker node's primary elastic network interface (ENI) is selected. For ip mode, the security group of each backend pod's ENI is selected. Multiple security groups on an ENI If there are multiple security groups attached to an ENI, the controller expects only one security group tagged with following tags: Key Value kubernetes.io/cluster/${cluster-name} owned or shared ${cluster-name} is the name of the Kubernetes cluster. If it is possible for multiple security groups with the tag kubernetes.io/cluster/${cluster-name} to be on a target ENI, you may use the --service-target-eni-security-group-tags flag to specify additional tags that must also match in order for a security group to be used.","title":"Worker node security groups selection"},{"location":"guide/service/nlb/#worker-node-security-groups-rules","text":"When client IP preservation is enabled Rule Protocol Port(s) IpRanges(s) Client Traffic spec.ports[*].protocol spec.ports[*].port Traffic Source CIDRs Health Check Traffic TCP Health Check Ports NLB Subnet CIDRs When client IP preservation is disabled Rule Protocol Port(s) IpRange(s) Client Traffic spec.ports[*].protocol spec.ports[*].port NLB Subnet CIDRs Health Check Traffic TCP Health Check Ports NLB Subnet CIDRs","title":"Worker node security groups rules"},{"location":"guide/targetgroupbinding/spec/","text":"Packages: elbv2.k8s.aws/v1beta1 elbv2.k8s.aws/v1beta1 Package v1beta1 contains API Schema definitions for the elbv2 v1beta1 API group Resource Types: TargetGroupBinding TargetGroupBinding TargetGroupBinding is the Schema for the TargetGroupBinding API Field Description apiVersion string elbv2.k8s.aws/v1beta1 kind string TargetGroupBinding metadata Kubernetes meta/v1.ObjectMeta Refer to the Kubernetes API documentation for the fields of the metadata field. spec TargetGroupBindingSpec targetGroupARN string targetGroupARN is the Amazon Resource Name (ARN) for the TargetGroup. targetType TargetType (Optional) targetType is the TargetType of TargetGroup. If unspecified, it will be automatically inferred. serviceRef ServiceReference serviceRef is a reference to a Kubernetes Service and ServicePort. networking TargetGroupBindingNetworking (Optional) networking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup. status TargetGroupBindingStatus IPBlock ( Appears on: NetworkingPeer ) IPBlock defines source/destination IPBlock in networking rules. Field Description cidr string CIDR is the network CIDR. Both IPV4 or IPV6 CIDR are accepted. NetworkingIngressRule ( Appears on: TargetGroupBindingNetworking ) NetworkingIngressRule defines a particular set of traffic that is allowed to access TargetGroup\u2019s targets. Field Description from []NetworkingPeer List of peers which should be able to access the targets in TargetGroup. At least one NetworkingPeer should be specified. ports []NetworkingPort List of ports which should be made accessible on the targets in TargetGroup. If ports is empty or unspecified, it defaults to all ports with TCP. NetworkingPeer ( Appears on: NetworkingIngressRule ) NetworkingPeer defines the source/destination peer for networking rules. Field Description ipBlock IPBlock (Optional) IPBlock defines an IPBlock peer. If specified, none of the other fields can be set. securityGroup SecurityGroup (Optional) SecurityGroup defines a SecurityGroup peer. If specified, none of the other fields can be set. NetworkingPort ( Appears on: NetworkingIngressRule ) NetworkingPort defines the port and protocol for networking rules. Field Description protocol NetworkingProtocol The protocol which traffic must match. If protocol is unspecified, it defaults to TCP. port k8s.io/apimachinery/pkg/util/intstr.IntOrString (Optional) The port which traffic must match. When NodePort endpoints(instance TargetType) is used, this must be a numerical port. When Port endpoints(ip TargetType) is used, this can be either numerical or named port on pods. if port is unspecified, it defaults to all ports. NetworkingProtocol ( string alias) ( Appears on: NetworkingPort ) NetworkingProtocol defines the protocol for networking rules. SecurityGroup ( Appears on: NetworkingPeer ) SecurityGroup defines reference to an AWS EC2 SecurityGroup. Field Description groupID string GroupID is the EC2 SecurityGroupID. ServiceReference ( Appears on: TargetGroupBindingSpec ) ServiceReference defines reference to a Kubernetes Service and its ServicePort. Field Description name string Name is the name of the Service. port k8s.io/apimachinery/pkg/util/intstr.IntOrString Port is the port of the ServicePort. TargetGroupBindingNetworking ( Appears on: TargetGroupBindingSpec ) TargetGroupBindingNetworking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup. Field Description ingress []NetworkingIngressRule (Optional) List of ingress rules to allow ELBV2 LoadBalancer to access targets in TargetGroup. TargetGroupBindingSpec ( Appears on: TargetGroupBinding ) TargetGroupBindingSpec defines the desired state of TargetGroupBinding Field Description targetGroupARN string targetGroupARN is the Amazon Resource Name (ARN) for the TargetGroup. targetType TargetType (Optional) targetType is the TargetType of TargetGroup. If unspecified, it will be automatically inferred. serviceRef ServiceReference serviceRef is a reference to a Kubernetes Service and ServicePort. networking TargetGroupBindingNetworking (Optional) networking defines the networking rules to allow ELBV2 LoadBalancer to access targets in TargetGroup. TargetGroupBindingStatus ( Appears on: TargetGroupBinding ) TargetGroupBindingStatus defines the observed state of TargetGroupBinding Field Description observedGeneration int64 (Optional) The generation observed by the TargetGroupBinding controller. TargetType ( string alias) ( Appears on: TargetGroupBindingSpec ) TargetType is the targetType of your ELBV2 TargetGroup. with instance TargetType, nodes with nodePort for your service will be registered as targets with ip TargetType, Pods with containerPort for your service will be registered as targets Generated with gen-crd-api-reference-docs on git commit 21418f44 .","title":"Specification"},{"location":"guide/targetgroupbinding/targetgroupbinding/","text":"TargetGroupBinding \u00b6 TargetGroupBinding is a custom resource (CR) that can expose your pods using an existing ALB TargetGroup or NLB TargetGroup . This will allow you to provision the load balancer infrastructure completely outside of Kubernetes but still manage the targets with Kubernetes Service. usage to support Ingress and Service The AWS LoadBalancer controller internally used TargetGroupBinding to support the functionality for Ingress and Service resource as well. It automatically creates TargetGroupBinding in the same namespace of the Service used. You can view all TargetGroupBindings in a namespace by kubectl get targetgroupbindings -n -o wide TargetType \u00b6 TargetGroupBinding CR supports TargetGroups of either instance or ip TargetType. If TargetType is not explicitly specified, a mutating webhook will automatically call AWS API to find the TargetType for your TargetGroup and set it to correct value. Sample YAML \u00b6 apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : serviceRef : name : awesome-service # route traffic to the awesome-service port : 80 targetGroupARN : NodeSelector \u00b6 Default Node Selector \u00b6 For TargetType: instance , all nodes of a cluster that match the following selector are added to the target group by default: matchExpressions : - key : node-role.kubernetes.io/master operator : DoesNotExist - key : node.kubernetes.io/exclude-from-external-load-balancers operator : DoesNotExist - key : alpha.service-controller.kubernetes.io/exclude-balancer operator : DoesNotExist - key : eks.amazonaws.com/compute-type operator : NotIn values : [ \"fargate\" ] Custom Node Selector \u00b6 TargetGroupBinding CR supports NodeSelector which is a LabelSelector . This will select nodes to attach to the instance TargetType target group and is merged with the default node selector above . apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : nodeSelector : matchLabels : foo : bar ... Reference \u00b6 See the reference for TargetGroupBinding CR","title":"TargetGroupBinding"},{"location":"guide/targetgroupbinding/targetgroupbinding/#targetgroupbinding","text":"TargetGroupBinding is a custom resource (CR) that can expose your pods using an existing ALB TargetGroup or NLB TargetGroup . This will allow you to provision the load balancer infrastructure completely outside of Kubernetes but still manage the targets with Kubernetes Service. usage to support Ingress and Service The AWS LoadBalancer controller internally used TargetGroupBinding to support the functionality for Ingress and Service resource as well. It automatically creates TargetGroupBinding in the same namespace of the Service used. You can view all TargetGroupBindings in a namespace by kubectl get targetgroupbindings -n -o wide","title":"TargetGroupBinding"},{"location":"guide/targetgroupbinding/targetgroupbinding/#targettype","text":"TargetGroupBinding CR supports TargetGroups of either instance or ip TargetType. If TargetType is not explicitly specified, a mutating webhook will automatically call AWS API to find the TargetType for your TargetGroup and set it to correct value.","title":"TargetType"},{"location":"guide/targetgroupbinding/targetgroupbinding/#sample-yaml","text":"apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : serviceRef : name : awesome-service # route traffic to the awesome-service port : 80 targetGroupARN : ","title":"Sample YAML"},{"location":"guide/targetgroupbinding/targetgroupbinding/#nodeselector","text":"","title":"NodeSelector"},{"location":"guide/targetgroupbinding/targetgroupbinding/#default-node-selector","text":"For TargetType: instance , all nodes of a cluster that match the following selector are added to the target group by default: matchExpressions : - key : node-role.kubernetes.io/master operator : DoesNotExist - key : node.kubernetes.io/exclude-from-external-load-balancers operator : DoesNotExist - key : alpha.service-controller.kubernetes.io/exclude-balancer operator : DoesNotExist - key : eks.amazonaws.com/compute-type operator : NotIn values : [ \"fargate\" ]","title":"Default Node Selector"},{"location":"guide/targetgroupbinding/targetgroupbinding/#custom-node-selector","text":"TargetGroupBinding CR supports NodeSelector which is a LabelSelector . This will select nodes to attach to the instance TargetType target group and is merged with the default node selector above . apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : nodeSelector : matchLabels : foo : bar ...","title":"Custom Node Selector"},{"location":"guide/targetgroupbinding/targetgroupbinding/#reference","text":"See the reference for TargetGroupBinding CR","title":"Reference"},{"location":"guide/tasks/cognito_authentication/","text":"Setup Cognito/AWS Load Balancer Controller \u00b6 This document describes how to install AWS Load Balancer Controller with AWS Cognito integration to minimal capacity, other options and or configurations may be required for production, and on an app to app basis. Assumptions \u00b6 The following assumptions are observed regarding this procedure. ExternalDNS is installed to the cluster and will provide a custom URL for your ALB. To setup ExternalDNS refer to the install instructions . Cognito Configuration \u00b6 Configure Cognito for use with AWS Load Balancer Controller using the following links with specified caveats. Create Cognito user pool Configure application integration On step 11.c for the Callback URL enter https:///oauth2/idpresponse . On step 11.d for Allowed OAuth Flows select authorization code grant and for Allowed OAuth Scopes select openid . AWS Load Balancer Controller Setup \u00b6 Install the AWS Load Balancer Controller using the install instructions with the following caveats. When setting up IAM Role Permissions, add the cognito-idp:DescribeUserPoolClient permission to the example policy. Deploying an Ingress \u00b6 Using the cognito-ingress-template you can fill in the variables to create an ALB ingress connected to your Cognito user pool for authentication.","title":"Cognito Authentication"},{"location":"guide/tasks/cognito_authentication/#setup-cognitoaws-load-balancer-controller","text":"This document describes how to install AWS Load Balancer Controller with AWS Cognito integration to minimal capacity, other options and or configurations may be required for production, and on an app to app basis.","title":"Setup Cognito/AWS Load Balancer Controller"},{"location":"guide/tasks/cognito_authentication/#assumptions","text":"The following assumptions are observed regarding this procedure. ExternalDNS is installed to the cluster and will provide a custom URL for your ALB. To setup ExternalDNS refer to the install instructions .","title":"Assumptions"},{"location":"guide/tasks/cognito_authentication/#cognito-configuration","text":"Configure Cognito for use with AWS Load Balancer Controller using the following links with specified caveats. Create Cognito user pool Configure application integration On step 11.c for the Callback URL enter https:///oauth2/idpresponse . On step 11.d for Allowed OAuth Flows select authorization code grant and for Allowed OAuth Scopes select openid .","title":"Cognito Configuration"},{"location":"guide/tasks/cognito_authentication/#aws-load-balancer-controller-setup","text":"Install the AWS Load Balancer Controller using the install instructions with the following caveats. When setting up IAM Role Permissions, add the cognito-idp:DescribeUserPoolClient permission to the example policy.","title":"AWS Load Balancer Controller Setup"},{"location":"guide/tasks/cognito_authentication/#deploying-an-ingress","text":"Using the cognito-ingress-template you can fill in the variables to create an ALB ingress connected to your Cognito user pool for authentication.","title":"Deploying an Ingress"},{"location":"guide/tasks/migrate_legacy_apps/","text":"Migrating From Legacy Apps with Manually Configured Target Groups \u00b6 Many organizations are decomposing old legacy apps into smaller services and components. During the transition they may be running a hybrid ecosystem with some parts of the app running in ec2 instances, some in Kubernetes microservices, and possibly even some in serverless environments like Lambda. The existing clients of the application expect all endpoints under one DNS entry and it's desirable to be able to route traffic at the ALB to services running outside the Kubernetes cluster. The actions annotation allows the definition of a forward rule to a previously configured target group. Learn more about the actions annotation at alb.ingress.kubernetes.io/actions.${action-name} Example Ingress Manifest \u00b6 apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : testcase name : echoserver annotations : alb.ingress.kubernetes.io/actions.legacy-app : '{\"Type\": \"forward\", \"TargetGroupArn\": \"legacy-tg-arn\"}' spec : ingressClassName : alb rules : - http : paths : - path : /v1/endpoints pathType : Exact backend : service : name : legacy-app port : name : use-annotation - path : /normal-path pathType : Exact backend : service : name : echoserver port : number : 80 Note The TargetGroupArn must be set and the user is responsible for configuring the Target group in AWS before applying the forward rule.","title":"Migrating From Legacy Apps with Manually Configured Target Groups"},{"location":"guide/tasks/migrate_legacy_apps/#migrating-from-legacy-apps-with-manually-configured-target-groups","text":"Many organizations are decomposing old legacy apps into smaller services and components. During the transition they may be running a hybrid ecosystem with some parts of the app running in ec2 instances, some in Kubernetes microservices, and possibly even some in serverless environments like Lambda. The existing clients of the application expect all endpoints under one DNS entry and it's desirable to be able to route traffic at the ALB to services running outside the Kubernetes cluster. The actions annotation allows the definition of a forward rule to a previously configured target group. Learn more about the actions annotation at alb.ingress.kubernetes.io/actions.${action-name}","title":"Migrating From Legacy Apps with Manually Configured Target Groups"},{"location":"guide/tasks/migrate_legacy_apps/#example-ingress-manifest","text":"apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : testcase name : echoserver annotations : alb.ingress.kubernetes.io/actions.legacy-app : '{\"Type\": \"forward\", \"TargetGroupArn\": \"legacy-tg-arn\"}' spec : ingressClassName : alb rules : - http : paths : - path : /v1/endpoints pathType : Exact backend : service : name : legacy-app port : name : use-annotation - path : /normal-path pathType : Exact backend : service : name : echoserver port : number : 80 Note The TargetGroupArn must be set and the user is responsible for configuring the Target group in AWS before applying the forward rule.","title":"Example Ingress Manifest"},{"location":"guide/tasks/ssl_redirect/","text":"Redirect Traffic from HTTP to HTTPS \u00b6 You can use the alb.ingress.kubernetes.io/ssl-redirect annotation to setup an ingress to redirect http traffic to https Example Ingress Manifest \u00b6 apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/certificate-arn : arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx alb.ingress.kubernetes.io/listen-ports : '[{\"HTTP\": 80}, {\"HTTPS\":443}]' alb.ingress.kubernetes.io/ssl-redirect : '443' spec : ingressClassName : alb rules : - http : paths : - path : /users/* pathType : ImplementationSpecific backend : service : name : user-service port : number : 80 - path : /* pathType : ImplementationSpecific backend : service : name : default-service port : number : 80 Note alb.ingress.kubernetes.io/listen-ports annotation must at least include [{\"HTTP\": 80}, {\"HTTPS\":443}] to listen on 80 and 443. alb.ingress.kubernetes.io/certificate-arn annotation must be set to allow listen for HTTPS traffic the ssl-redirect port must appear in the listen-port annotation, and must be an HTTPS port How it works \u00b6 If you enable SSL redirection, the controller configures each HTTP listener with a default action to redirect to HTTPS. The controller does not add any other rules to the HTTP listener. For the above example, the HTTP listener on port 80 will have a single default rule to redirect traffic to HTTPS on port 443.","title":"SSL Redirect"},{"location":"guide/tasks/ssl_redirect/#redirect-traffic-from-http-to-https","text":"You can use the alb.ingress.kubernetes.io/ssl-redirect annotation to setup an ingress to redirect http traffic to https","title":"Redirect Traffic from HTTP to HTTPS"},{"location":"guide/tasks/ssl_redirect/#example-ingress-manifest","text":"apiVersion : networking.k8s.io/v1 kind : Ingress metadata : namespace : default name : ingress annotations : alb.ingress.kubernetes.io/certificate-arn : arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx alb.ingress.kubernetes.io/listen-ports : '[{\"HTTP\": 80}, {\"HTTPS\":443}]' alb.ingress.kubernetes.io/ssl-redirect : '443' spec : ingressClassName : alb rules : - http : paths : - path : /users/* pathType : ImplementationSpecific backend : service : name : user-service port : number : 80 - path : /* pathType : ImplementationSpecific backend : service : name : default-service port : number : 80 Note alb.ingress.kubernetes.io/listen-ports annotation must at least include [{\"HTTP\": 80}, {\"HTTPS\":443}] to listen on 80 and 443. alb.ingress.kubernetes.io/certificate-arn annotation must be set to allow listen for HTTPS traffic the ssl-redirect port must appear in the listen-port annotation, and must be an HTTPS port","title":"Example Ingress Manifest"},{"location":"guide/tasks/ssl_redirect/#how-it-works","text":"If you enable SSL redirection, the controller configures each HTTP listener with a default action to redirect to HTTPS. The controller does not add any other rules to the HTTP listener. For the above example, the HTTP listener on port 80 will have a single default rule to redirect traffic to HTTPS on port 443.","title":"How it works"},{"location":"guide/use_cases/blue_green/","text":"Split Traffic \u00b6 You can configure an Application Load Balancer (ALB) to split traffic from the same listener across multiple target groups using rules. This facilitates A/B testing, blue/green deployment, and traffic management without additional tools. The Load Balancer Controller (LBC) supports defining this behavior alongside the standard configuration of an Ingress resource. More specifically, the ALB supports weighted target groups and advanced request routing. Weighted target group Multiple target groups can be attached to the same forward action of a listener rule and specify a weight for each group. It allows developers to control how to distribute traffic to multiple versions of their application. For example, when you define a rule having two target groups with weights of 8 and 2, the load balancer will route 80 percent of the traffic to the first target group and 20 percent to the other. Advanced request routing In addition to the weighted target group, AWS announced the advanced request routing feature in 2019. Advanced request routing gives developers the ability to write rules (and route traffic) based on standard and custom HTTP headers and methods, the request path, the query string, and the source IP address. This new feature simplifies the application architecture by eliminating the need for a proxy fleet for routing, blocks unwanted traffic at the load balancer, and enables the implementation of A/B testing. Overview \u00b6 The ALB is configured to split traffic using annotations on the ingress resrouces. More specifically, the ingress annotation alb.ingress.kubernetes.io/actions.${service-name} configures custom actions on the listener. The body of the annotation is a JSON document that identifies an action type, and configures it. The supported actions are redirect , forward , and fixed-response . With forward action, multiple target groups with different weights can be defined in the annotation. The LBC provisions the target groups and configures the listener rules as per the annotation to direct the traffic. Importantly: * The action-name in the annotation must match the service name in the Ingress rules. For example, the annotation alb.ingress.kubernetes.io/actions.blue-green matches the service name blue-green referenced in the Ingress rules. * The servicePort of the service in the Ingress rules must be use-annotation . Example \u00b6 The following ingress resource configures the ALB to forward all traffic to hello-kubernetes-v1 service (weight: 100 vs. 0). Note that the annotation name includes blue-green , which matches the service name referenced in the ingress rules. The annotation reference includes further examples of the JSON configuration for different actions. apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: \"hello-kubernetes\" namespace: \"hello-kubernetes\" annotations: kubernetes.io/ingress.class: alb alb.ingress.kubernetes.io/scheme: internet-facing alb.ingress.kubernetes.io/target-type: ip alb.ingress.kubernetes.io/actions.blue-green: | { \"type\":\"forward\", \"forwardConfig\":{ \"targetGroups\":[ { \"serviceName\":\"hello-kubernetes-v1\", \"servicePort\":\"80\", \"weight\":100 }, { \"serviceName\":\"hello-kubernetes-v2\", \"servicePort\":\"80\", \"weight\":0 } ] } } labels: app: hello-kubernetes spec: rules: - http: paths: - path: / pathType: Prefix backend: service: name: blue-green port: name: use-annotation","title":"Blue/Green"},{"location":"guide/use_cases/blue_green/#split-traffic","text":"You can configure an Application Load Balancer (ALB) to split traffic from the same listener across multiple target groups using rules. This facilitates A/B testing, blue/green deployment, and traffic management without additional tools. The Load Balancer Controller (LBC) supports defining this behavior alongside the standard configuration of an Ingress resource. More specifically, the ALB supports weighted target groups and advanced request routing. Weighted target group Multiple target groups can be attached to the same forward action of a listener rule and specify a weight for each group. It allows developers to control how to distribute traffic to multiple versions of their application. For example, when you define a rule having two target groups with weights of 8 and 2, the load balancer will route 80 percent of the traffic to the first target group and 20 percent to the other. Advanced request routing In addition to the weighted target group, AWS announced the advanced request routing feature in 2019. Advanced request routing gives developers the ability to write rules (and route traffic) based on standard and custom HTTP headers and methods, the request path, the query string, and the source IP address. This new feature simplifies the application architecture by eliminating the need for a proxy fleet for routing, blocks unwanted traffic at the load balancer, and enables the implementation of A/B testing.","title":"Split Traffic"},{"location":"guide/use_cases/blue_green/#overview","text":"The ALB is configured to split traffic using annotations on the ingress resrouces. More specifically, the ingress annotation alb.ingress.kubernetes.io/actions.${service-name} configures custom actions on the listener. The body of the annotation is a JSON document that identifies an action type, and configures it. The supported actions are redirect , forward , and fixed-response . With forward action, multiple target groups with different weights can be defined in the annotation. The LBC provisions the target groups and configures the listener rules as per the annotation to direct the traffic. Importantly: * The action-name in the annotation must match the service name in the Ingress rules. For example, the annotation alb.ingress.kubernetes.io/actions.blue-green matches the service name blue-green referenced in the Ingress rules. * The servicePort of the service in the Ingress rules must be use-annotation .","title":"Overview"},{"location":"guide/use_cases/blue_green/#example","text":"The following ingress resource configures the ALB to forward all traffic to hello-kubernetes-v1 service (weight: 100 vs. 0). Note that the annotation name includes blue-green , which matches the service name referenced in the ingress rules. The annotation reference includes further examples of the JSON configuration for different actions. apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: \"hello-kubernetes\" namespace: \"hello-kubernetes\" annotations: kubernetes.io/ingress.class: alb alb.ingress.kubernetes.io/scheme: internet-facing alb.ingress.kubernetes.io/target-type: ip alb.ingress.kubernetes.io/actions.blue-green: | { \"type\":\"forward\", \"forwardConfig\":{ \"targetGroups\":[ { \"serviceName\":\"hello-kubernetes-v1\", \"servicePort\":\"80\", \"weight\":100 }, { \"serviceName\":\"hello-kubernetes-v2\", \"servicePort\":\"80\", \"weight\":0 } ] } } labels: app: hello-kubernetes spec: rules: - http: paths: - path: / pathType: Prefix backend: service: name: blue-green port: name: use-annotation","title":"Example"},{"location":"guide/use_cases/frontend_sg/","text":"Frontend security groups limit client/internet traffic with a load balancer. This improves security by preventing unauthorized access to cluster services, and blocking unexpected outbound connections. Both AWS Network Load Balancers (NLBs) and Application Load Balancers (ALBs) support frontend security groups. Learn more about how the Load Balancer Controller uses Frontend and Backend Security Groups . Solution Overview \u00b6 Load balancers expose cluster workloads to a wider network. Creating a frontend security group limits access to these workloads (service or ingress resources). More specifically, a security group acts as a virtual firewall to control incoming and outgoing traffic. Inbound rules control the incoming traffic to your load balancer, and outbound rules control the outgoing traffic from your load balancer. Security groups are particularly suited for defining what access other AWS resources (services, EC2 instances) have to your cluster. For example, if you have an existing security group including EC2 instances, you can permit only that security group to access a service. In this example, you will restrict access to a cluster service. You will create a new security group for the frontend of a load balancer, and add an inbound rule permitting traffic. The rule may limit traffic to a specific port, CIDR, or existing security group. Prerequisites \u00b6 Kubernetes Cluster Version 1.22+ AWS Load Balancer Controller v2.6.0+ AWS CLI v2 Configure \u00b6 1. Find the VPC ID of your cluster \u00b6 $ aws eks describe-cluster --name --query \"cluster.resourcesVpcConfig.vpcId\" --output text vpc-0101XXXXa356 Ensure you have the right cluster name, AWS region, and the AWS CLI is configured. 2. Create a security group using the VPC ID \u00b6 $ aws ec2 create-security-group --group-name --description --vpc-id { \"GroupId\" : \"sg-0406XXXX645c\" } Note the security group ID. This will be the frontend security group for the load balancer. 3. Create your ingress rules \u00b6 Load balancers generally serve as an entrypoint for clients to access your cluster. This makes ingress rules especially important. For example, this rule permits all traffic on port 443: aws ec2 authorize-security-group-ingress --group-id --protocol all --port 443 --cidr 0 .0.0.0/0 Learn more about how to create an ingress rule with the AWS CLI. 4. Determine your egress rules (optional) \u00b6 By default, all outbound traffic is allowed. Further, security groups are stateful, and responses to an allowed connection will also be permitted. Learn how to create an egress rule with the AWS CLI. 5. Add the security group annotation to your Ingress or Service \u00b6 For Ingress resources , add the following annotation: apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : frontend annotations : alb.ingress.kubernetes.io/security-groups : For Service resources , add the following annotation: apiVersion : v1 kind : Service metadata : name : frontend annotations : service.beta.kubernetes.io/aws-load-balancer-security-groups : spec : type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb For Ingress resources, the associated Application Load Balancer will be updated. For Service resources, the associated Network Load Balancer will be updated. 6. List your load balancers and verify the security groups are attached \u00b6 $ aws elbv2 describe-load-balancers { \"LoadBalancers\" : [ { \"LoadBalancerArn\" : \"arn:aws:elasticloadbalancing:us-east-1:1853XXXX5115:loadbalancer/net/k8s-default-frontend-ae3743b818/3ad6d16fb75ff688\" , <...> \"SecurityGroups\" : [ \"sg-0406XXXX645c\" , \"sg-0873XXXX2bef\" ] , \"IpAddressType\" : \"ipv4\" } ] } If you don't see the security groups, verify: The Load Balancer Controller is properly installed. The controller has proper IAM permissions to modify load balancers. Look at the logs of the controller pods for IAM errors. 7. Clean up (Optional) \u00b6 Removing the annotations from Service/Ingress resources will revert to the default frontend ecurity groups. Load balancers may be costly. Delete Ingress and Service resources to deprovision the load balancers. If the load balancers are deleted from the console, they may be recreated by the controller.","title":"Frontend Security Groups"},{"location":"guide/use_cases/frontend_sg/#solution-overview","text":"Load balancers expose cluster workloads to a wider network. Creating a frontend security group limits access to these workloads (service or ingress resources). More specifically, a security group acts as a virtual firewall to control incoming and outgoing traffic. Inbound rules control the incoming traffic to your load balancer, and outbound rules control the outgoing traffic from your load balancer. Security groups are particularly suited for defining what access other AWS resources (services, EC2 instances) have to your cluster. For example, if you have an existing security group including EC2 instances, you can permit only that security group to access a service. In this example, you will restrict access to a cluster service. You will create a new security group for the frontend of a load balancer, and add an inbound rule permitting traffic. The rule may limit traffic to a specific port, CIDR, or existing security group.","title":"Solution Overview"},{"location":"guide/use_cases/frontend_sg/#prerequisites","text":"Kubernetes Cluster Version 1.22+ AWS Load Balancer Controller v2.6.0+ AWS CLI v2","title":"Prerequisites"},{"location":"guide/use_cases/frontend_sg/#configure","text":"","title":"Configure"},{"location":"guide/use_cases/frontend_sg/#1-find-the-vpc-id-of-your-cluster","text":"$ aws eks describe-cluster --name --query \"cluster.resourcesVpcConfig.vpcId\" --output text vpc-0101XXXXa356 Ensure you have the right cluster name, AWS region, and the AWS CLI is configured.","title":"1. Find the VPC ID of your cluster"},{"location":"guide/use_cases/frontend_sg/#2-create-a-security-group-using-the-vpc-id","text":"$ aws ec2 create-security-group --group-name --description --vpc-id { \"GroupId\" : \"sg-0406XXXX645c\" } Note the security group ID. This will be the frontend security group for the load balancer.","title":"2. Create a security group using the VPC ID"},{"location":"guide/use_cases/frontend_sg/#3-create-your-ingress-rules","text":"Load balancers generally serve as an entrypoint for clients to access your cluster. This makes ingress rules especially important. For example, this rule permits all traffic on port 443: aws ec2 authorize-security-group-ingress --group-id --protocol all --port 443 --cidr 0 .0.0.0/0 Learn more about how to create an ingress rule with the AWS CLI.","title":"3. Create your ingress rules"},{"location":"guide/use_cases/frontend_sg/#4-determine-your-egress-rules-optional","text":"By default, all outbound traffic is allowed. Further, security groups are stateful, and responses to an allowed connection will also be permitted. Learn how to create an egress rule with the AWS CLI.","title":"4. Determine your egress rules (optional)"},{"location":"guide/use_cases/frontend_sg/#5-add-the-security-group-annotation-to-your-ingress-or-service","text":"For Ingress resources , add the following annotation: apiVersion : networking.k8s.io/v1 kind : Ingress metadata : name : frontend annotations : alb.ingress.kubernetes.io/security-groups : For Service resources , add the following annotation: apiVersion : v1 kind : Service metadata : name : frontend annotations : service.beta.kubernetes.io/aws-load-balancer-security-groups : spec : type : LoadBalancer loadBalancerClass : service.k8s.aws/nlb For Ingress resources, the associated Application Load Balancer will be updated. For Service resources, the associated Network Load Balancer will be updated.","title":"5. Add the security group annotation to your Ingress or Service"},{"location":"guide/use_cases/frontend_sg/#6-list-your-load-balancers-and-verify-the-security-groups-are-attached","text":"$ aws elbv2 describe-load-balancers { \"LoadBalancers\" : [ { \"LoadBalancerArn\" : \"arn:aws:elasticloadbalancing:us-east-1:1853XXXX5115:loadbalancer/net/k8s-default-frontend-ae3743b818/3ad6d16fb75ff688\" , <...> \"SecurityGroups\" : [ \"sg-0406XXXX645c\" , \"sg-0873XXXX2bef\" ] , \"IpAddressType\" : \"ipv4\" } ] } If you don't see the security groups, verify: The Load Balancer Controller is properly installed. The controller has proper IAM permissions to modify load balancers. Look at the logs of the controller pods for IAM errors.","title":"6. List your load balancers and verify the security groups are attached"},{"location":"guide/use_cases/frontend_sg/#7-clean-up-optional","text":"Removing the annotations from Service/Ingress resources will revert to the default frontend ecurity groups. Load balancers may be costly. Delete Ingress and Service resources to deprovision the load balancers. If the load balancers are deleted from the console, they may be recreated by the controller.","title":"7. Clean up (Optional)"},{"location":"guide/use_cases/nlb_tls_termination/","text":"Motivation \u00b6 Managing TLS certificates (and related configuration) for production cluster workloads is both time consuming, and high risk. For example, storing multiple copies of a certificate secret key in the cluster may increases the chances of it being compromised. Additionally, TLS can be complicated to configure and implement properly. Traditionally, TLS termination at the load balancer step required using more expensive application load balancers (ALBs). AWS introduced TLS termination for network load balancers (NLBs) for enhanced security and cost effectiveness. The TLS implementation used by the AWS NLB is formally verified and maintained. Additionally, AWS Certificate Manager (ACM) is used, fully isolating your cluster from access to the private key. Solution Overview \u00b6 An external client transmits a request to the NLB. The request is encrypted with TLS using the production (e.g., client facing) certificate, and on port 443. The NLB decrypts the request, and transmits it on to your cluster on port 80. It follows the standard request routing configured within the cluster. Notably, the request received within the cluster includes the actual origin IP address of the external client. Alternate ports may be configured. Note The NLB may be configured to maintain the source (i.e., client) IP address. However, there are some limitations. Review Client IP Preservation in the AWS docs. Prerequisites \u00b6 \u2705 Access to DNS records for domain name. Review the docs on registering domains with AWS's Route 53. Alternate DNS providers may be used, such as Google Domains or Namecheap. Later, a subdomain (e.g., demo-service.gcline.us) will be created, pointing to the NLB. Access to the DNS records is required to generate a TLS certificate for use by the NLB. \u2705 AWS Load Balancer Controller Installed Generally, setting up the Load Balancer Controller has two steps: enabling IAM roles for service accounts, and adding the controller to the cluster. The IAM role allows the controller in the Kubernetes cluster to manage AWS resources. Learn more about IAM roles for service accounts. Configure \u00b6 Generate TLS Certificate \u00b6 Create a public TLS certificate for the domain using AWS Certificate Manager (ACM). This is streamlined when the domain is managed by Route 53. Review the AWS Certificate Manager Docs. The domain name on the TLS certificate must correspond to the planned domain name for the kubernetes service. The domain name may be specified explicitly (e.g., tls-demo.gcline.us), or a wildcard certificate can be used (e.g., *.gcline.us). If the domain is registered with Route53, the TLS certificate request will automatically be approved. Otherwise, follow ACM console the instructions to create a DNS record to validate the domain. After validation, the certificate will be available for use in your AWS account. Note the ARN of the certificate, which uniquely identifies it in kubernetes config files. Create Service with new NLB \u00b6 Add annotations to a load balancer service to enable NLB TLS termination, before the traffic reaches Envoy. The annotations are actioned by the load balancer controller. Review all the NLB annotations on GitHub. annotation name value meaning service.beta.kubernetes.io/aws-load-balancer-type external explicitly requires an NLB, instead of an ALB service.beta.kubernetes.io/aws-load-balancer-nlb-target-type ip route traffic directly to the pod IP service.beta.kubernetes.io/aws-load-balancer-scheme internet-facing An internet-facing load balancer has a publicly resolvable DNS name service.beta.kubernetes.io/aws-load-balancer-ssl-cert \"arn:aws:acm:...\" identifies the TLS certificate used by the NLB service.beta.kubernetes.io/aws-load-balancer-ssl-ports 443 determines the port the NLB should listen for TLS traffic on Example: apiVersion: v1 kind: Service metadata: name: MyAppSvc namespace: dev annotations: service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing service.beta.kubernetes.io/aws-load-balancer-ssl-cert: \"arn:aws:acm:us-east-2:185309785115:certificate/7610ed7d-5a81-4ea2-a18a-7ba1606cca3e\" service.beta.kubernetes.io/aws-load-balancer-ssl-ports: \"443\" spec: externalTrafficPolicy: Local ports: - port: 443 targetPort: 80 name: http protocol: TCP selector: app: MyApp type: LoadBalancer Configure DNS \u00b6 Get domain name using kubectl. The service name and namespace were defined above. kubectl get svc MyAppSvc --namespace dev NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE envoy LoadBalancer 10.100.24.154 k8s---xxxxxxxxxx-xxxxxxxxxxxxxxxx.elb..amazonaws.com 443:31606/TCP 40d Note the last 4 digits of the domain name for the NLB. For example, \"bb1f\". Setup DNS alias for NLB Create a DNS record pointing from a friendly name (e.g., tls-demo.gcline.us) to the NLB domain (e.g., bb1f.elb.us-east-2.amazonaws.com). For AWS's Route 53, follow the instructions below. If you use a different DNS provider, follow their instructions for creating a CNAME record . First, create a new record in Route 53. Use the \"A\" record type, and enable the \"alias\" option. This option attaches the DNS record to the AWS resource, without requiring an extra lookup step for clients. Select the NLB resource. Double check the region, and use the last 4 digits (noted earlier) to select the proper resource. Verify \u00b6 Attempt to access the NLB domain at port 443 with HTTPS/TLS. Is the connection successful? What certificate is used? Does it reach the expected endpoint within the cluster?","title":"NLB TLS Termination"},{"location":"guide/use_cases/nlb_tls_termination/#motivation","text":"Managing TLS certificates (and related configuration) for production cluster workloads is both time consuming, and high risk. For example, storing multiple copies of a certificate secret key in the cluster may increases the chances of it being compromised. Additionally, TLS can be complicated to configure and implement properly. Traditionally, TLS termination at the load balancer step required using more expensive application load balancers (ALBs). AWS introduced TLS termination for network load balancers (NLBs) for enhanced security and cost effectiveness. The TLS implementation used by the AWS NLB is formally verified and maintained. Additionally, AWS Certificate Manager (ACM) is used, fully isolating your cluster from access to the private key.","title":"Motivation"},{"location":"guide/use_cases/nlb_tls_termination/#solution-overview","text":"An external client transmits a request to the NLB. The request is encrypted with TLS using the production (e.g., client facing) certificate, and on port 443. The NLB decrypts the request, and transmits it on to your cluster on port 80. It follows the standard request routing configured within the cluster. Notably, the request received within the cluster includes the actual origin IP address of the external client. Alternate ports may be configured. Note The NLB may be configured to maintain the source (i.e., client) IP address. However, there are some limitations. Review Client IP Preservation in the AWS docs.","title":"Solution Overview"},{"location":"guide/use_cases/nlb_tls_termination/#prerequisites","text":"\u2705 Access to DNS records for domain name. Review the docs on registering domains with AWS's Route 53. Alternate DNS providers may be used, such as Google Domains or Namecheap. Later, a subdomain (e.g., demo-service.gcline.us) will be created, pointing to the NLB. Access to the DNS records is required to generate a TLS certificate for use by the NLB. \u2705 AWS Load Balancer Controller Installed Generally, setting up the Load Balancer Controller has two steps: enabling IAM roles for service accounts, and adding the controller to the cluster. The IAM role allows the controller in the Kubernetes cluster to manage AWS resources. Learn more about IAM roles for service accounts.","title":"Prerequisites"},{"location":"guide/use_cases/nlb_tls_termination/#configure","text":"","title":"Configure"},{"location":"guide/use_cases/nlb_tls_termination/#generate-tls-certificate","text":"Create a public TLS certificate for the domain using AWS Certificate Manager (ACM). This is streamlined when the domain is managed by Route 53. Review the AWS Certificate Manager Docs. The domain name on the TLS certificate must correspond to the planned domain name for the kubernetes service. The domain name may be specified explicitly (e.g., tls-demo.gcline.us), or a wildcard certificate can be used (e.g., *.gcline.us). If the domain is registered with Route53, the TLS certificate request will automatically be approved. Otherwise, follow ACM console the instructions to create a DNS record to validate the domain. After validation, the certificate will be available for use in your AWS account. Note the ARN of the certificate, which uniquely identifies it in kubernetes config files.","title":"Generate TLS Certificate"},{"location":"guide/use_cases/nlb_tls_termination/#create-service-with-new-nlb","text":"Add annotations to a load balancer service to enable NLB TLS termination, before the traffic reaches Envoy. The annotations are actioned by the load balancer controller. Review all the NLB annotations on GitHub. annotation name value meaning service.beta.kubernetes.io/aws-load-balancer-type external explicitly requires an NLB, instead of an ALB service.beta.kubernetes.io/aws-load-balancer-nlb-target-type ip route traffic directly to the pod IP service.beta.kubernetes.io/aws-load-balancer-scheme internet-facing An internet-facing load balancer has a publicly resolvable DNS name service.beta.kubernetes.io/aws-load-balancer-ssl-cert \"arn:aws:acm:...\" identifies the TLS certificate used by the NLB service.beta.kubernetes.io/aws-load-balancer-ssl-ports 443 determines the port the NLB should listen for TLS traffic on Example: apiVersion: v1 kind: Service metadata: name: MyAppSvc namespace: dev annotations: service.beta.kubernetes.io/aws-load-balancer-type: external service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing service.beta.kubernetes.io/aws-load-balancer-ssl-cert: \"arn:aws:acm:us-east-2:185309785115:certificate/7610ed7d-5a81-4ea2-a18a-7ba1606cca3e\" service.beta.kubernetes.io/aws-load-balancer-ssl-ports: \"443\" spec: externalTrafficPolicy: Local ports: - port: 443 targetPort: 80 name: http protocol: TCP selector: app: MyApp type: LoadBalancer","title":"Create Service with new NLB"},{"location":"guide/use_cases/nlb_tls_termination/#configure-dns","text":"Get domain name using kubectl. The service name and namespace were defined above. kubectl get svc MyAppSvc --namespace dev NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE envoy LoadBalancer 10.100.24.154 k8s---xxxxxxxxxx-xxxxxxxxxxxxxxxx.elb..amazonaws.com 443:31606/TCP 40d Note the last 4 digits of the domain name for the NLB. For example, \"bb1f\". Setup DNS alias for NLB Create a DNS record pointing from a friendly name (e.g., tls-demo.gcline.us) to the NLB domain (e.g., bb1f.elb.us-east-2.amazonaws.com). For AWS's Route 53, follow the instructions below. If you use a different DNS provider, follow their instructions for creating a CNAME record . First, create a new record in Route 53. Use the \"A\" record type, and enable the \"alias\" option. This option attaches the DNS record to the AWS resource, without requiring an extra lookup step for clients. Select the NLB resource. Double check the region, and use the last 4 digits (noted earlier) to select the proper resource.","title":"Configure DNS"},{"location":"guide/use_cases/nlb_tls_termination/#verify","text":"Attempt to access the NLB domain at port 443 with HTTPS/TLS. Is the connection successful? What certificate is used? Does it reach the expected endpoint within the cluster?","title":"Verify"},{"location":"guide/use_cases/self_managed_lb/","text":"Motivation \u00b6 The load balancer controller (LBC) generally creates and destroys AWS Load Balancers in response to Kubernetes resources. However, some cluster operators may prefer to manually manage AWS Load Balancers. This supports use cases like: Preventing accidental release of key IP addresses. Supporting load balancers where the Kubernetes cluster is one of multiple targets. Complying with organizational requirements on provisioning load balancers, for security or cost reasons. Solution Overview \u00b6 Use the TargetGroupBinding CRD to sync a Kubernetes service with the targets of a load balancer. First, a load balancer is manually created directly with AWS. This guide uses a network load balancer, but an application load balancer may be similarly configured. Second, A listener and a target group are then added to the load balancer. Third, a TargetGroupBinding CRD is created in a cluster. The CRD includes references to a Kubernetes service and the ARN of the Load Balancer Target Group. The CRD configures the LBC to watch the service and automatically update the target group with the appropriate pod VPC IP addresses. Prerequisites \u00b6 Install: Load Balancer Controller Installed on Cluster AWS CLI Kubectl Have this information available: Cluster VPC Information ID of EKS Cluster Subnet IDs This information is available in the \"Networking\" section of the EKS Cluster Console. Port and Protocol of Target Kubernetes Service Configure Load Balancer \u00b6 Create Load Balancer: (optional) Use the create-load-balancer command to create an IPv4 load balancer, specifying a public subnet for each Availability Zone in which you have instances. You can specify only one subnet per Availability Zone. aws elbv2 create-load-balancer --name my-load-balancer --type network --subnets subnet-0e3f5cac72EXAMPLE Important: The output includes the ARN of the load balancer. This value is needed to configure the LBC. Example: arn:aws:elasticloadbalancing:us-east-2:123456789012:loadbalancer/net/my-load-balancer/1234567890123456 Use the create-target-group command to create an IPv4 target group, specifying the same VPC of your EKS cluster. aws elbv2 create-target-group --name my-targets --protocol TCP --port 80 --vpc-id vpc-0598c7d356EXAMPLE The output includes the ARN of the target group, with this format: arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456 Use the create-listener command to create a listener for your load balancer with a default rule that forwards requests to your target group. The listener port and protocol must match the Kubernetes service. However, TLS termination is permitted. [[double check it works in this configuration?]] aws elbv2 create-listener --load-balancer-arn loadbalancer-arn --protocol TCP --port 80 \\ --default-actions Type=forward,TargetGroupArn=targetgroup-arn Create TargetGroupBinding CRD \u00b6 Create the TargetGroupBinding CRD Insert the ARN of the Target Group, as created above. Insert the name and port of the target Kubernetes service. apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : serviceRef : name : awesome-service # route traffic to the awesome-service port : 80 targetGroupARN : arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456 2. Apply the CRD Apply the TargetGroupBinding CRD CRD file to your Cluster. kubectl apply -f my-tgb.yaml Verify \u00b6 Wait approximately 30 seconds for the LBC to update the load balancer. View all target groups in the AWS console. Find the target group by the ARN noted above, and verify the appropriate instances from the cluster have been added.","title":"Externally Managed Load Balancer"},{"location":"guide/use_cases/self_managed_lb/#motivation","text":"The load balancer controller (LBC) generally creates and destroys AWS Load Balancers in response to Kubernetes resources. However, some cluster operators may prefer to manually manage AWS Load Balancers. This supports use cases like: Preventing accidental release of key IP addresses. Supporting load balancers where the Kubernetes cluster is one of multiple targets. Complying with organizational requirements on provisioning load balancers, for security or cost reasons.","title":"Motivation"},{"location":"guide/use_cases/self_managed_lb/#solution-overview","text":"Use the TargetGroupBinding CRD to sync a Kubernetes service with the targets of a load balancer. First, a load balancer is manually created directly with AWS. This guide uses a network load balancer, but an application load balancer may be similarly configured. Second, A listener and a target group are then added to the load balancer. Third, a TargetGroupBinding CRD is created in a cluster. The CRD includes references to a Kubernetes service and the ARN of the Load Balancer Target Group. The CRD configures the LBC to watch the service and automatically update the target group with the appropriate pod VPC IP addresses.","title":"Solution Overview"},{"location":"guide/use_cases/self_managed_lb/#prerequisites","text":"Install: Load Balancer Controller Installed on Cluster AWS CLI Kubectl Have this information available: Cluster VPC Information ID of EKS Cluster Subnet IDs This information is available in the \"Networking\" section of the EKS Cluster Console. Port and Protocol of Target Kubernetes Service","title":"Prerequisites"},{"location":"guide/use_cases/self_managed_lb/#configure-load-balancer","text":"Create Load Balancer: (optional) Use the create-load-balancer command to create an IPv4 load balancer, specifying a public subnet for each Availability Zone in which you have instances. You can specify only one subnet per Availability Zone. aws elbv2 create-load-balancer --name my-load-balancer --type network --subnets subnet-0e3f5cac72EXAMPLE Important: The output includes the ARN of the load balancer. This value is needed to configure the LBC. Example: arn:aws:elasticloadbalancing:us-east-2:123456789012:loadbalancer/net/my-load-balancer/1234567890123456 Use the create-target-group command to create an IPv4 target group, specifying the same VPC of your EKS cluster. aws elbv2 create-target-group --name my-targets --protocol TCP --port 80 --vpc-id vpc-0598c7d356EXAMPLE The output includes the ARN of the target group, with this format: arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456 Use the create-listener command to create a listener for your load balancer with a default rule that forwards requests to your target group. The listener port and protocol must match the Kubernetes service. However, TLS termination is permitted. [[double check it works in this configuration?]] aws elbv2 create-listener --load-balancer-arn loadbalancer-arn --protocol TCP --port 80 \\ --default-actions Type=forward,TargetGroupArn=targetgroup-arn","title":"Configure Load Balancer"},{"location":"guide/use_cases/self_managed_lb/#create-targetgroupbinding-crd","text":"Create the TargetGroupBinding CRD Insert the ARN of the Target Group, as created above. Insert the name and port of the target Kubernetes service. apiVersion : elbv2.k8s.aws/v1beta1 kind : TargetGroupBinding metadata : name : my-tgb spec : serviceRef : name : awesome-service # route traffic to the awesome-service port : 80 targetGroupARN : arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/1234567890123456 2. Apply the CRD Apply the TargetGroupBinding CRD CRD file to your Cluster. kubectl apply -f my-tgb.yaml","title":"Create TargetGroupBinding CRD"},{"location":"guide/use_cases/self_managed_lb/#verify","text":"Wait approximately 30 seconds for the LBC to update the load balancer. View all target groups in the AWS console. Find the target group by the ARN noted above, and verify the appropriate instances from the cluster have been added.","title":"Verify"}]} \ No newline at end of file diff --git a/v2.7/sitemap.xml b/v2.7/sitemap.xml new file mode 100644 index 000000000..1d2f5a3f4 --- /dev/null +++ b/v2.7/sitemap.xml @@ -0,0 +1,107 @@ + + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + None + 2024-02-02 + daily + + \ No newline at end of file diff --git a/v2.7/sitemap.xml.gz b/v2.7/sitemap.xml.gz new file mode 100644 index 0000000000000000000000000000000000000000..e0db97da72386a40cf6a61e31b9e95834866a6a5 GIT binary patch literal 208 zcmV;>05AU^iwFoQI=p29|8r?{Wo=<_E_iKh0PWT>4#FT91>n7>AnXNf9Mn*{IXdY9 z2*s9!LIt#Xd%@Ji8@T+01b961t?=$SS@h5$8t+=XAq*q!l<$ojT6{Sl>mBYy#qYsJ zolq{j*y1sz`9SHiEF_wwCpkyr!$6}N^C8kTq>SvbC~rlD%HY;3aq>=cT6W)1#x(g} zG_2XytjRN9ui08rqjZD527ME~H1@^mPx9$-S{Sgv0t+m#zyb>_u)zA4RehHHYZh { + const verSelDom = document.querySelector('#version-select') + const verSelListDom = verSelDom.querySelector('.mdc-list') + + const baseURL = verSelDom.dataset.baseUrl + const absBaseURL = new URL(baseURL, window.location.href) + var curDocVer = absBaseURL.pathname.match(/([^\/]*)\/?$/)[1] + curDocVer = curDocVer || "latest" + + function updateVersionSelectDOM(verItems) { + verItems.forEach((verItem) => { + var rippleSpan = document.createElement('span') + rippleSpan.classList.add("mdc-list-item__ripple") + var textSpan = document.createElement('span') + textSpan.classList.add("mdc-list-item__text") + textSpan.innerHTML = verItem.title + + var verSelListItem = document.createElement('li'); + verSelListItem.setAttribute("role", "option") + verSelListItem.setAttribute("data-value", verItem.version) + verSelListItem.classList.add("mdc-list-item") + if (verItem.version == curDocVer || verItem.aliases.includes(curDocVer)) { + verSelListItem.classList.add("mdc-list-item--selected") + } + verSelListItem.appendChild(rippleSpan) + verSelListItem.appendChild(textSpan) + verSelListDom.appendChild(verSelListItem) + }) + } + + function setupVersionSelectEventHandlers() { + const verSelMDC = new mdc.select.MDCSelect(verSelDom); + verSelMDC.listen('MDCSelect:change', () => { + const chosenDocVer = verSelMDC.value + const chosenDocURL = new URL("../" + chosenDocVer, absBaseURL) + window.location.href = chosenDocURL + }); + } + + const verJSONURL = new URL(baseURL + "/../versions.json", window.location.href) + fetch(verJSONURL) + .then(response => response.json()) + .then(updateVersionSelectDOM) + .then(setupVersionSelectEventHandlers) +}); \ No newline at end of file diff --git a/v2.7/theme_overrides/assets/stylesheets/version-select.css b/v2.7/theme_overrides/assets/stylesheets/version-select.css new file mode 100644 index 000000000..500c9e94b --- /dev/null +++ b/v2.7/theme_overrides/assets/stylesheets/version-select.css @@ -0,0 +1,12 @@ +#version-select .mdc-select__anchor { + display: flex; + align-items: center; +} + +#version-select { + width: 120px; +} + +#version-select .mdc-select__selected-text { + color: var(--md-primary-bg-color) +} \ No newline at end of file diff --git a/v2.7/theme_overrides/main.html b/v2.7/theme_overrides/main.html new file mode 100644 index 000000000..95e809cd8 --- /dev/null +++ b/v2.7/theme_overrides/main.html @@ -0,0 +1,11 @@ +{% extends "base.html" %} + +{% block styles %} + {{ super() }} + +{% endblock %} + +{% block scripts %} + {{ super() }} + +{% endblock %} \ No newline at end of file diff --git a/v2.7/theme_overrides/partials/header.html b/v2.7/theme_overrides/partials/header.html new file mode 100644 index 000000000..768e918f8 --- /dev/null +++ b/v2.7/theme_overrides/partials/header.html @@ -0,0 +1,118 @@ +
    + +
    \ No newline at end of file diff --git a/v2.7/theme_overrides/partials/version-select.html b/v2.7/theme_overrides/partials/version-select.html new file mode 100644 index 000000000..ba3122101 --- /dev/null +++ b/v2.7/theme_overrides/partials/version-select.html @@ -0,0 +1,23 @@ +
    +
    + + + + + + + + + + + + +
    + +
    +
      +
    +
    +
    \ No newline at end of file diff --git a/versions.json b/versions.json index 53612f959..556c4e0ad 100644 --- a/versions.json +++ b/versions.json @@ -1 +1 @@ -[{"version": "v2.6", "title": "v2.6", "aliases": ["latest"]}, {"version": "v2.5", "title": "v2.5", "aliases": []}, {"version": "v2.4", "title": "v2.4", "aliases": []}, {"version": "v2.3", "title": "v2.3", "aliases": []}, {"version": "v2.2", "title": "v2.2", "aliases": []}, {"version": "v2.1", "title": "v2.1", "aliases": []}, {"version": "v2.0", "title": "v2.0", "aliases": []}, {"version": "v1.1", "title": "v1.1", "aliases": []}] \ No newline at end of file +[{"version": "v2.7", "title": "v2.7", "aliases": ["latest"]}, {"version": "v2.6", "title": "v2.6", "aliases": []}, {"version": "v2.5", "title": "v2.5", "aliases": []}, {"version": "v2.4", "title": "v2.4", "aliases": []}, {"version": "v2.3", "title": "v2.3", "aliases": []}, {"version": "v2.2", "title": "v2.2", "aliases": []}, {"version": "v2.1", "title": "v2.1", "aliases": []}, {"version": "v2.0", "title": "v2.0", "aliases": []}, {"version": "v1.1", "title": "v1.1", "aliases": []}] \ No newline at end of file