From bad67fa5a8b6719e4fcdb913f1b4ad41c8759d47 Mon Sep 17 00:00:00 2001 From: QiuSW <105186638@qq.com> Date: Tue, 4 Aug 2026 23:28:10 +0800 Subject: [PATCH] feat: add domain core and verification harness --- .gitattributes | 14 + .github/workflows/verify.yml | 29 ++ .gitignore | 14 + AGENTS.md | 48 ++++ app/build.gradle.kts | 27 ++ .../brainwave/core/model/HexagramContent.kt | 36 +++ .../data/content/HexagramContentRepository.kt | 14 + .../brainwave/domain/casting/CastEngine.kt | 80 ++++++ .../brainwave/domain/casting/CastRecordDto.kt | 75 ++++++ .../brainwave/domain/casting/CastingModels.kt | 104 ++++++++ .../domain/casting/HexagramCatalog.kt | 104 ++++++++ .../content/FakeHexagramContentRepository.kt | 31 +++ .../content/HexagramContentRepositoryTest.kt | 59 +++++ .../domain/casting/CastEngineTest.kt | 200 ++++++++++++++ build.gradle.kts | 70 +++++ content/schema/hexagram-content.schema.json | 117 +++++++++ docs/README.md | 2 +- docs/architecture.md | 2 +- docs/data-content.md | 6 + docs/decisions.md | 11 +- docs/domain-rules.md | 4 +- docs/environment.md | 15 +- docs/implementation-plan.md | 46 ++-- docs/quality-gates.md | 27 +- gradle/libs.versions.toml | 9 + gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 63375 bytes gradle/wrapper/gradle-wrapper.properties | 8 + gradlew | 248 ++++++++++++++++++ gradlew.bat | 92 +++++++ scripts/content-contract.mjs | 203 ++++++++++++++ scripts/repository-files.mjs | 41 +++ scripts/scan-secrets.mjs | 47 ++++ scripts/verify-content-contract.mjs | 104 ++++++++ scripts/verify-docs.mjs | 67 +++++ scripts/verify-domain-boundaries.mjs | 47 ++++ scripts/verify-format.mjs | 54 ++++ scripts/verify-prototype.mjs | 23 ++ settings.gradle.kts | 19 ++ 38 files changed, 2054 insertions(+), 43 deletions(-) create mode 100644 .gitattributes create mode 100644 .github/workflows/verify.yml create mode 100644 .gitignore create mode 100644 AGENTS.md create mode 100644 app/build.gradle.kts create mode 100644 app/src/main/java/brainwave/core/model/HexagramContent.kt create mode 100644 app/src/main/java/brainwave/data/content/HexagramContentRepository.kt create mode 100644 app/src/main/java/brainwave/domain/casting/CastEngine.kt create mode 100644 app/src/main/java/brainwave/domain/casting/CastRecordDto.kt create mode 100644 app/src/main/java/brainwave/domain/casting/CastingModels.kt create mode 100644 app/src/main/java/brainwave/domain/casting/HexagramCatalog.kt create mode 100644 app/src/test/java/brainwave/data/content/FakeHexagramContentRepository.kt create mode 100644 app/src/test/java/brainwave/data/content/HexagramContentRepositoryTest.kt create mode 100644 app/src/test/java/brainwave/domain/casting/CastEngineTest.kt create mode 100644 build.gradle.kts create mode 100644 content/schema/hexagram-content.schema.json create mode 100644 gradle/libs.versions.toml create mode 100644 gradle/wrapper/gradle-wrapper.jar create mode 100644 gradle/wrapper/gradle-wrapper.properties create mode 100755 gradlew create mode 100644 gradlew.bat create mode 100644 scripts/content-contract.mjs create mode 100644 scripts/repository-files.mjs create mode 100644 scripts/scan-secrets.mjs create mode 100644 scripts/verify-content-contract.mjs create mode 100644 scripts/verify-docs.mjs create mode 100644 scripts/verify-domain-boundaries.mjs create mode 100644 scripts/verify-format.mjs create mode 100644 scripts/verify-prototype.mjs create mode 100644 settings.gradle.kts diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..fbe7b34 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,14 @@ +* text=auto +/.gitattributes text eol=lf +/.gitignore text eol=lf +/gradlew text eol=lf +*.bat text eol=crlf +*.json text eol=lf +*.sh text eol=lf +*.kt text eol=lf +*.kts text eol=lf +*.mjs text eol=lf +*.md text eol=lf +*.properties text eol=lf +*.toml text eol=lf +*.yml text eol=lf diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml new file mode 100644 index 0000000..d6376e1 --- /dev/null +++ b/.github/workflows/verify.yml @@ -0,0 +1,29 @@ +name: verify + +on: + push: + pull_request: + +permissions: + contents: read + +jobs: + harness: + runs-on: ubuntu-latest + steps: + - name: Check out source + uses: actions/checkout@v7 + - name: Set up JDK 17 + uses: actions/setup-java@v6 + with: + distribution: temurin + java-version: "17" + - name: Set up Node.js 22 + uses: actions/setup-node@v7 + with: + node-version: "22" + package-manager-cache: false + - name: Set up Gradle + uses: gradle/actions/setup-gradle@v6 + - name: Run local quality gates + run: ./gradlew verifyLocal --no-daemon diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3d4de11 --- /dev/null +++ b/.gitignore @@ -0,0 +1,14 @@ +.gradle/ +**/build/ +.idea/ +*.iml +local.properties +captures/ + +# Signing material and local credentials must never enter the repository. +*.jks +*.keystore +keystore.properties +secrets.properties +.env +.env.* diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..0f18a9b --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,48 @@ +# Brainwave agent guide + +This file is the short repository entry point. The detailed, authoritative map is +[`docs/README.md`](docs/README.md). + +## Start here + +1. Read `docs/agent-playbook.md` before changing files. +2. Read `docs/environment.md` before build, SDK, device, or dependency work. +3. Read the relevant product/domain/architecture document from `docs/README.md`. +4. Follow `docs/implementation-plan.md`; never silently turn an item in + `docs/decisions.md#未决问题` into a product fact. + +## Discovery + +Prefer the configured codebase knowledge-graph tools in this order: +`search_graph`, `trace_path`, `get_code_snippet`, `query_graph`, then +`get_architecture`. Fall back to `rg` for literals, non-code files, or when those +tools are unavailable or insufficient. State the fallback in the handoff. + +## Non-negotiable domain rules + +- The three physical coins are entered manually; do not add random casting. +- `字 = 2`, `背 = 3`; record six lines from bottom to top. +- Sums `6` and `9` move; sums `7` and `8` remain static. +- King Wen numbering is a lookup table, never `binary + 1`. +- Casting code remains pure Kotlin with no Android, Compose, database, or network + dependency. +- AI is opt-in explanation only. Do not place provider secrets in the app or repo. + +## Current build boundary + +The repository uses `brainwave` only as a code name. Formal product name, +organization-owned application ID, and final `minSdk` remain product decisions. +Until they are accepted, the `app` project is a Kotlin/JVM domain harness, not a +publishable Android application. Do not invent placeholder release identity. + +## Verification + +Run from the repository root: + +```powershell +.\gradlew.bat verifyLocal --offline +``` + +After the Android application plugin is configured, also run the Android gates +listed in `docs/quality-gates.md`. Report skipped device or Android checks +explicitly; do not imply they passed. diff --git a/app/build.gradle.kts b/app/build.gradle.kts new file mode 100644 index 0000000..c0ff6b2 --- /dev/null +++ b/app/build.gradle.kts @@ -0,0 +1,27 @@ +plugins { + alias(libs.plugins.kotlin.jvm) +} + +kotlin { + jvmToolchain(17) + + sourceSets { + main { + kotlin.srcDir("src/main/java") + } + test { + kotlin.srcDir("src/test/java") + } + } +} +dependencies { + testImplementation(libs.junit) +} + +tasks.test { + useJUnit() + testLogging { + events("failed", "skipped") + exceptionFormat = org.gradle.api.tasks.testing.logging.TestExceptionFormat.FULL + } +} diff --git a/app/src/main/java/brainwave/core/model/HexagramContent.kt b/app/src/main/java/brainwave/core/model/HexagramContent.kt new file mode 100644 index 0000000..089c5d5 --- /dev/null +++ b/app/src/main/java/brainwave/core/model/HexagramContent.kt @@ -0,0 +1,36 @@ +package brainwave.core.model + +data class HexagramContent( + val kingWenNumber: Int, + val name: String, + val symbol: String, + val judgmentOriginal: String, + val judgmentPlain: String, + val lineTextsBottomUp: List, + val linePlainBottomUp: List, + val specialUsageText: String?, + val sourceRefs: List, +) { + init { + require(kingWenNumber in 1..64) { "King Wen number must be between 1 and 64" } + require(name.isNotBlank()) { "Hexagram name must not be blank" } + require(symbol.isNotBlank()) { "Hexagram symbol must not be blank" } + require(judgmentOriginal.isNotBlank()) { "Original judgment must not be blank" } + require(judgmentPlain.isNotBlank()) { "Plain judgment must not be blank" } + require(lineTextsBottomUp.size == 6 && lineTextsBottomUp.all(String::isNotBlank)) { + "Original line texts must contain six non-blank bottom-up entries" + } + require(linePlainBottomUp.size == 6 && linePlainBottomUp.all(String::isNotBlank)) { + "Plain line texts must contain six non-blank bottom-up entries" + } + require(specialUsageText == null || specialUsageText.isNotBlank()) { + "Special usage text must be non-blank or null" + } + require(sourceRefs.isNotEmpty() && sourceRefs.all(String::isNotBlank)) { + "Source references must contain at least one non-blank id" + } + require(sourceRefs.distinct().size == sourceRefs.size) { + "Source references must be unique" + } + } +} diff --git a/app/src/main/java/brainwave/data/content/HexagramContentRepository.kt b/app/src/main/java/brainwave/data/content/HexagramContentRepository.kt new file mode 100644 index 0000000..7ce2adb --- /dev/null +++ b/app/src/main/java/brainwave/data/content/HexagramContentRepository.kt @@ -0,0 +1,14 @@ +package brainwave.data.content + +import brainwave.core.model.HexagramContent + +interface HexagramContentRepository { + val contentVersion: String + + fun contentFor( + kingWenNumber: Int, + requestedContentVersion: String = contentVersion, + ): HexagramContent +} + +class ContentIntegrityException(message: String) : IllegalStateException(message) diff --git a/app/src/main/java/brainwave/domain/casting/CastEngine.kt b/app/src/main/java/brainwave/domain/casting/CastEngine.kt new file mode 100644 index 0000000..26ebe5d --- /dev/null +++ b/app/src/main/java/brainwave/domain/casting/CastEngine.kt @@ -0,0 +1,80 @@ +package brainwave.domain.casting + +data class CastComputation internal constructor( + val roundsBottomUp: List, + val lineValuesBottomUp: List, + val primaryPatternBottomUp: HexagramPattern, + val movingLinePositions: List, + val transformedPatternBottomUp: HexagramPattern, + val primaryHexagramId: HexagramId, + val transformedHexagramId: HexagramId, +) + +object CastEngine { + const val METHOD_VERSION = "coin-v1" + const val COIN_CONVENTION = "character=2;reverse=3;bottom-up" + + fun cast(roundsBottomUp: List): CastComputation { + require(roundsBottomUp.size == HexagramPattern.LINE_COUNT) { + "A complete cast must contain exactly six rounds, but contained ${roundsBottomUp.size}" + } + + val rounds = roundsBottomUp.toList() + val lineValues = rounds.map(CastRound::lineValue) + val primaryPattern = HexagramPattern.of(lineValues.map(LineValue::polarity)) + val movingPositions = lineValues.mapIndexedNotNull { index, lineValue -> + if (lineValue.isMoving) index + 1 else null + } + val transformedPattern = HexagramPattern.of(lineValues.map(LineValue::transformedPolarity)) + + return CastComputation( + roundsBottomUp = rounds, + lineValuesBottomUp = lineValues, + primaryPatternBottomUp = primaryPattern, + movingLinePositions = movingPositions, + transformedPatternBottomUp = transformedPattern, + primaryHexagramId = HexagramCatalog.idFor(primaryPattern), + transformedHexagramId = HexagramCatalog.idFor(transformedPattern), + ) + } +} +data class CastMetadata( + val contentVersion: String, + val createdAt: String, +) { + init { + require(contentVersion.isNotBlank()) { "Content version must not be blank" } + require(createdAt.isNotBlank()) { "Created-at metadata must not be blank" } + } +} + +data class CastResult private constructor( + val methodVersion: String, + val coinConvention: String, + val roundsBottomUp: List, + val lineValuesBottomUp: List, + val primaryPatternBottomUp: HexagramPattern, + val movingLinePositions: List, + val transformedPatternBottomUp: HexagramPattern, + val primaryHexagramId: HexagramId, + val transformedHexagramId: HexagramId, + val contentVersion: String, + val createdAt: String, +) { + companion object { + fun record(computation: CastComputation, metadata: CastMetadata): CastResult = + CastResult( + methodVersion = CastEngine.METHOD_VERSION, + coinConvention = CastEngine.COIN_CONVENTION, + roundsBottomUp = computation.roundsBottomUp.toList(), + lineValuesBottomUp = computation.lineValuesBottomUp.toList(), + primaryPatternBottomUp = computation.primaryPatternBottomUp, + movingLinePositions = computation.movingLinePositions.toList(), + transformedPatternBottomUp = computation.transformedPatternBottomUp, + primaryHexagramId = computation.primaryHexagramId, + transformedHexagramId = computation.transformedHexagramId, + contentVersion = metadata.contentVersion, + createdAt = metadata.createdAt, + ) + } +} diff --git a/app/src/main/java/brainwave/domain/casting/CastRecordDto.kt b/app/src/main/java/brainwave/domain/casting/CastRecordDto.kt new file mode 100644 index 0000000..b035d77 --- /dev/null +++ b/app/src/main/java/brainwave/domain/casting/CastRecordDto.kt @@ -0,0 +1,75 @@ +package brainwave.domain.casting + +data class CastRecordDto( + val schemaVersion: Int, + val methodVersion: String, + val coinConvention: String, + val roundsBottomUp: List>, + val lineValuesBottomUp: List, + val primaryPatternBottomUp: String, + val movingLinePositions: List, + val transformedPatternBottomUp: String, + val primaryHexagramId: Int, + val transformedHexagramId: Int, + val contentVersion: String, + val createdAt: String, +) { + fun toDomain(): CastResult { + require(schemaVersion == CURRENT_SCHEMA_VERSION) { + "Unsupported cast record schema version: $schemaVersion" + } + require(methodVersion == CastEngine.METHOD_VERSION) { + "Unsupported casting method version: $methodVersion" + } + require(coinConvention == CastEngine.COIN_CONVENTION) { + "Unsupported coin convention: $coinConvention" + } + + val rounds = roundsBottomUp.map(CastRound::fromScores) + val result = CastResult.record( + computation = CastEngine.cast(rounds), + metadata = CastMetadata(contentVersion = contentVersion, createdAt = createdAt), + ) + + require(lineValuesBottomUp == result.lineValuesBottomUp.map(LineValue::score)) { + "Stored line values do not match the preserved coin rounds" + } + require(primaryPatternBottomUp == result.primaryPatternBottomUp.encoded()) { + "Stored primary pattern does not match the preserved coin rounds" + } + require(movingLinePositions == result.movingLinePositions) { + "Stored moving-line positions do not match the preserved coin rounds" + } + require(transformedPatternBottomUp == result.transformedPatternBottomUp.encoded()) { + "Stored transformed pattern does not match the preserved coin rounds" + } + require(primaryHexagramId == result.primaryHexagramId.value) { + "Stored primary hexagram id does not match the King Wen lookup" + } + require(transformedHexagramId == result.transformedHexagramId.value) { + "Stored transformed hexagram id does not match the King Wen lookup" + } + + return result + } + + companion object { + const val CURRENT_SCHEMA_VERSION = 1 + + fun fromDomain(result: CastResult): CastRecordDto = + CastRecordDto( + schemaVersion = CURRENT_SCHEMA_VERSION, + methodVersion = result.methodVersion, + coinConvention = result.coinConvention, + roundsBottomUp = result.roundsBottomUp.map { round -> round.coins.map(CoinSide::score) }, + lineValuesBottomUp = result.lineValuesBottomUp.map(LineValue::score), + primaryPatternBottomUp = result.primaryPatternBottomUp.encoded(), + movingLinePositions = result.movingLinePositions.toList(), + transformedPatternBottomUp = result.transformedPatternBottomUp.encoded(), + primaryHexagramId = result.primaryHexagramId.value, + transformedHexagramId = result.transformedHexagramId.value, + contentVersion = result.contentVersion, + createdAt = result.createdAt, + ) + } +} diff --git a/app/src/main/java/brainwave/domain/casting/CastingModels.kt b/app/src/main/java/brainwave/domain/casting/CastingModels.kt new file mode 100644 index 0000000..fc9d0b5 --- /dev/null +++ b/app/src/main/java/brainwave/domain/casting/CastingModels.kt @@ -0,0 +1,104 @@ +package brainwave.domain.casting + +enum class CoinSide(val score: Int) { + CHARACTER(2), + REVERSE(3), + ; + + companion object { + fun fromScore(score: Int): CoinSide = + entries.singleOrNull { it.score == score } + ?: throw IllegalArgumentException("Coin score must be 2 or 3, but was $score") + } +} +enum class Polarity { + YIN, + YANG, + ; + + fun opposite(): Polarity = if (this == YIN) YANG else YIN +} + +enum class LineValue( + val score: Int, + val polarity: Polarity, + val isMoving: Boolean, +) { + OLD_YIN(6, Polarity.YIN, true), + YOUNG_YANG(7, Polarity.YANG, false), + YOUNG_YIN(8, Polarity.YIN, false), + OLD_YANG(9, Polarity.YANG, true), + ; + + val transformedPolarity: Polarity + get() = if (isMoving) polarity.opposite() else polarity + + companion object { + fun fromScore(score: Int): LineValue = + entries.singleOrNull { it.score == score } + ?: throw IllegalArgumentException("Line score must be between 6 and 9, but was $score") + } +} + +data class CastRound private constructor(val coins: List) { + init { + require(coins.size == COINS_PER_ROUND) { + "Each cast round must contain exactly $COINS_PER_ROUND coins, but contained ${coins.size}" + } + } + + val lineValue: LineValue + get() = LineValue.fromScore(coins.sumOf(CoinSide::score)) + + companion object { + const val COINS_PER_ROUND = 3 + + fun of(coins: List): CastRound = CastRound(coins.toList()) + + fun of(first: CoinSide, second: CoinSide, third: CoinSide): CastRound = + of(listOf(first, second, third)) + + fun fromScores(scores: List): CastRound = of(scores.map(CoinSide::fromScore)) + + fun fromLineValue(lineValue: LineValue): CastRound = + when (lineValue) { + LineValue.OLD_YIN -> of(CoinSide.CHARACTER, CoinSide.CHARACTER, CoinSide.CHARACTER) + LineValue.YOUNG_YANG -> of(CoinSide.CHARACTER, CoinSide.CHARACTER, CoinSide.REVERSE) + LineValue.YOUNG_YIN -> of(CoinSide.CHARACTER, CoinSide.REVERSE, CoinSide.REVERSE) + LineValue.OLD_YANG -> of(CoinSide.REVERSE, CoinSide.REVERSE, CoinSide.REVERSE) + } + } +} + +data class HexagramPattern private constructor(val linesBottomUp: List) { + init { + require(linesBottomUp.size == LINE_COUNT) { + "A hexagram must contain exactly $LINE_COUNT lines, but contained ${linesBottomUp.size}" + } + } + + fun encoded(): String = linesBottomUp.joinToString(separator = "") { + if (it == Polarity.YANG) "1" else "0" + } + + companion object { + const val LINE_COUNT = 6 + + fun of(linesBottomUp: List): HexagramPattern = + HexagramPattern(linesBottomUp.toList()) + + fun decode(encoded: String): HexagramPattern { + require(encoded.length == LINE_COUNT && encoded.all { it == '0' || it == '1' }) { + "Encoded hexagram must contain exactly six 0/1 characters" + } + return of(encoded.map { if (it == '1') Polarity.YANG else Polarity.YIN }) + } + } +} + +@JvmInline +value class HexagramId(val value: Int) { + init { + require(value in 1..64) { "King Wen hexagram id must be between 1 and 64" } + } +} diff --git a/app/src/main/java/brainwave/domain/casting/HexagramCatalog.kt b/app/src/main/java/brainwave/domain/casting/HexagramCatalog.kt new file mode 100644 index 0000000..bf2e8f1 --- /dev/null +++ b/app/src/main/java/brainwave/domain/casting/HexagramCatalog.kt @@ -0,0 +1,104 @@ +package brainwave.domain.casting + +object HexagramCatalog { + private enum class Trigram(val patternBottomUp: String) { + QIAN("111"), + DUI("110"), + LI("101"), + ZHEN("100"), + XUN("011"), + KAN("010"), + GEN("001"), + KUN("000"), + ; + + companion object { + fun fromPattern(patternBottomUp: String): Trigram = + entries.singleOrNull { it.patternBottomUp == patternBottomUp } + ?: error("Unknown trigram pattern: $patternBottomUp") + } + } + + private data class TrigramPair(val upper: Trigram, val lower: Trigram) + + private val kingWenIds = mapOf( + TrigramPair(Trigram.QIAN, Trigram.QIAN) to 1, + TrigramPair(Trigram.KUN, Trigram.KUN) to 2, + TrigramPair(Trigram.KAN, Trigram.ZHEN) to 3, + TrigramPair(Trigram.GEN, Trigram.KAN) to 4, + TrigramPair(Trigram.KAN, Trigram.QIAN) to 5, + TrigramPair(Trigram.QIAN, Trigram.KAN) to 6, + TrigramPair(Trigram.KUN, Trigram.KAN) to 7, + TrigramPair(Trigram.KAN, Trigram.KUN) to 8, + TrigramPair(Trigram.XUN, Trigram.QIAN) to 9, + TrigramPair(Trigram.QIAN, Trigram.DUI) to 10, + TrigramPair(Trigram.KUN, Trigram.QIAN) to 11, + TrigramPair(Trigram.QIAN, Trigram.KUN) to 12, + TrigramPair(Trigram.QIAN, Trigram.LI) to 13, + TrigramPair(Trigram.LI, Trigram.QIAN) to 14, + TrigramPair(Trigram.KUN, Trigram.GEN) to 15, + TrigramPair(Trigram.ZHEN, Trigram.KUN) to 16, + TrigramPair(Trigram.DUI, Trigram.ZHEN) to 17, + TrigramPair(Trigram.GEN, Trigram.XUN) to 18, + TrigramPair(Trigram.KUN, Trigram.DUI) to 19, + TrigramPair(Trigram.XUN, Trigram.KUN) to 20, + TrigramPair(Trigram.LI, Trigram.ZHEN) to 21, + TrigramPair(Trigram.GEN, Trigram.LI) to 22, + TrigramPair(Trigram.GEN, Trigram.KUN) to 23, + TrigramPair(Trigram.KUN, Trigram.ZHEN) to 24, + TrigramPair(Trigram.QIAN, Trigram.ZHEN) to 25, + TrigramPair(Trigram.GEN, Trigram.QIAN) to 26, + TrigramPair(Trigram.GEN, Trigram.ZHEN) to 27, + TrigramPair(Trigram.DUI, Trigram.XUN) to 28, + TrigramPair(Trigram.KAN, Trigram.KAN) to 29, + TrigramPair(Trigram.LI, Trigram.LI) to 30, + TrigramPair(Trigram.DUI, Trigram.GEN) to 31, + TrigramPair(Trigram.ZHEN, Trigram.XUN) to 32, + TrigramPair(Trigram.QIAN, Trigram.GEN) to 33, + TrigramPair(Trigram.ZHEN, Trigram.QIAN) to 34, + TrigramPair(Trigram.LI, Trigram.KUN) to 35, + TrigramPair(Trigram.KUN, Trigram.LI) to 36, + TrigramPair(Trigram.XUN, Trigram.LI) to 37, + TrigramPair(Trigram.LI, Trigram.DUI) to 38, + TrigramPair(Trigram.KAN, Trigram.GEN) to 39, + TrigramPair(Trigram.ZHEN, Trigram.KAN) to 40, + TrigramPair(Trigram.GEN, Trigram.DUI) to 41, + TrigramPair(Trigram.XUN, Trigram.ZHEN) to 42, + TrigramPair(Trigram.DUI, Trigram.QIAN) to 43, + TrigramPair(Trigram.QIAN, Trigram.XUN) to 44, + TrigramPair(Trigram.DUI, Trigram.KUN) to 45, + TrigramPair(Trigram.KUN, Trigram.XUN) to 46, + TrigramPair(Trigram.DUI, Trigram.KAN) to 47, + TrigramPair(Trigram.KAN, Trigram.XUN) to 48, + TrigramPair(Trigram.DUI, Trigram.LI) to 49, + TrigramPair(Trigram.LI, Trigram.XUN) to 50, + TrigramPair(Trigram.ZHEN, Trigram.ZHEN) to 51, + TrigramPair(Trigram.GEN, Trigram.GEN) to 52, + TrigramPair(Trigram.XUN, Trigram.GEN) to 53, + TrigramPair(Trigram.ZHEN, Trigram.DUI) to 54, + TrigramPair(Trigram.ZHEN, Trigram.LI) to 55, + TrigramPair(Trigram.LI, Trigram.GEN) to 56, + TrigramPair(Trigram.XUN, Trigram.XUN) to 57, + TrigramPair(Trigram.DUI, Trigram.DUI) to 58, + TrigramPair(Trigram.XUN, Trigram.KAN) to 59, + TrigramPair(Trigram.KAN, Trigram.DUI) to 60, + TrigramPair(Trigram.XUN, Trigram.DUI) to 61, + TrigramPair(Trigram.ZHEN, Trigram.GEN) to 62, + TrigramPair(Trigram.KAN, Trigram.LI) to 63, + TrigramPair(Trigram.LI, Trigram.KAN) to 64, + ) + + init { + check(kingWenIds.size == 64) { "King Wen table must contain all 64 trigram pairs" } + check(kingWenIds.values.toSet() == (1..64).toSet()) { + "King Wen table must contain every id from 1 through 64 exactly once" + } + } + + fun idFor(pattern: HexagramPattern): HexagramId { + val encoded = pattern.encoded() + val lower = Trigram.fromPattern(encoded.substring(0, 3)) + val upper = Trigram.fromPattern(encoded.substring(3, 6)) + return HexagramId(kingWenIds.getValue(TrigramPair(upper, lower))) + } +} diff --git a/app/src/test/java/brainwave/data/content/FakeHexagramContentRepository.kt b/app/src/test/java/brainwave/data/content/FakeHexagramContentRepository.kt new file mode 100644 index 0000000..95b35a4 --- /dev/null +++ b/app/src/test/java/brainwave/data/content/FakeHexagramContentRepository.kt @@ -0,0 +1,31 @@ +package brainwave.data.content + +import brainwave.core.model.HexagramContent + +class FakeHexagramContentRepository( + override val contentVersion: String = "fixture-only-v1", + entries: List, +) : HexagramContentRepository { + private val entriesById: Map + + init { + require(contentVersion.isNotBlank()) { "Content version must not be blank" } + require(entries.map(HexagramContent::kingWenNumber).distinct().size == entries.size) { + "Fake content entries must have unique King Wen numbers" + } + entriesById = entries.associateBy(HexagramContent::kingWenNumber) + } + + override fun contentFor( + kingWenNumber: Int, + requestedContentVersion: String, + ): HexagramContent { + if (requestedContentVersion != contentVersion) { + throw ContentIntegrityException( + "Requested content version '$requestedContentVersion' is unavailable; loaded '$contentVersion'", + ) + } + return entriesById[kingWenNumber] + ?: throw ContentIntegrityException("No validated content for King Wen number $kingWenNumber") + } +} diff --git a/app/src/test/java/brainwave/data/content/HexagramContentRepositoryTest.kt b/app/src/test/java/brainwave/data/content/HexagramContentRepositoryTest.kt new file mode 100644 index 0000000..4a074d0 --- /dev/null +++ b/app/src/test/java/brainwave/data/content/HexagramContentRepositoryTest.kt @@ -0,0 +1,59 @@ +package brainwave.data.content + +import brainwave.core.model.HexagramContent +import org.junit.Assert.assertEquals +import org.junit.Assert.assertTrue +import org.junit.Assert.fail +import org.junit.Test + +class HexagramContentRepositoryTest { + @Test + fun `fake returns content only for its exact version and id`() { + val qian = fixture(1) + val repository = FakeHexagramContentRepository(entries = listOf(qian)) + + assertEquals(qian, repository.contentFor(1)) + assertFails("unavailable") { repository.contentFor(1, "another-version") } + assertFails("No validated content") { repository.contentFor(2) } + } + + @Test + fun `fake rejects duplicate ids instead of silently overwriting`() { + assertFails("unique King Wen numbers") { + FakeHexagramContentRepository(entries = listOf(fixture(1), fixture(1))) + } + } + + @Test + fun `content model enforces six bottom-up texts and sources`() { + assertFails("six non-blank") { + fixture(1).copy(lineTextsBottomUp = List(5) { "fixture" }) + } + assertFails("at least one") { + fixture(1).copy(sourceRefs = emptyList()) + } + } + + private fun fixture(id: Int) = HexagramContent( + kingWenNumber = id, + name = "fixture-$id", + symbol = "fixture-symbol-$id", + judgmentOriginal = "fixture original", + judgmentPlain = "fixture plain", + lineTextsBottomUp = List(6) { index -> "fixture original line ${index + 1}" }, + linePlainBottomUp = List(6) { index -> "fixture plain line ${index + 1}" }, + specialUsageText = null, + sourceRefs = listOf("fixture-source"), + ) + + private fun assertFails(messageFragment: String, block: () -> Unit) { + try { + block() + fail("Expected failure containing '$messageFragment'") + } catch (error: IllegalArgumentException) { + assertTrue(error.message.orEmpty().contains(messageFragment)) + } catch (error: ContentIntegrityException) { + assertTrue(error.message.orEmpty().contains(messageFragment)) + } + } +} diff --git a/app/src/test/java/brainwave/domain/casting/CastEngineTest.kt b/app/src/test/java/brainwave/domain/casting/CastEngineTest.kt new file mode 100644 index 0000000..35c2ea4 --- /dev/null +++ b/app/src/test/java/brainwave/domain/casting/CastEngineTest.kt @@ -0,0 +1,200 @@ +package brainwave.domain.casting + +import org.junit.Assert.assertEquals +import org.junit.Assert.assertFalse +import org.junit.Assert.assertNotEquals +import org.junit.Assert.assertTrue +import org.junit.Assert.fail +import org.junit.Test + +class CastEngineTest { + @Test + fun `all eight coin combinations map to the correct line values`() { + val counts = mutableMapOf() + + for (encoded in 0 until 8) { + val coins = List(3) { index -> + if (encoded and (1 shl index) == 0) CoinSide.CHARACTER else CoinSide.REVERSE + } + val expected = LineValue.fromScore(coins.sumOf(CoinSide::score)) + val actual = CastRound.of(coins).lineValue + assertEquals(expected, actual) + counts[actual] = counts.getOrDefault(actual, 0) + 1 + } + + assertEquals( + mapOf( + LineValue.OLD_YIN to 1, + LineValue.YOUNG_YANG to 3, + LineValue.YOUNG_YIN to 3, + LineValue.OLD_YANG to 1, + ), + counts, + ) + } + + @Test + fun `line values expose correct polarity movement and transformation`() { + assertLine(LineValue.OLD_YIN, Polarity.YIN, moving = true, Polarity.YANG) + assertLine(LineValue.YOUNG_YANG, Polarity.YANG, moving = false, Polarity.YANG) + assertLine(LineValue.YOUNG_YIN, Polarity.YIN, moving = false, Polarity.YIN) + assertLine(LineValue.OLD_YANG, Polarity.YANG, moving = true, Polarity.YIN) + } + + @Test + fun `a round must preserve exactly three coins`() { + assertFails("exactly 3 coins") { CastRound.of(emptyList()) } + assertFails("exactly 3 coins") { + CastRound.of(List(4) { CoinSide.CHARACTER }) + } + assertEquals( + listOf(2, 3, 2), + CastRound.of(CoinSide.CHARACTER, CoinSide.REVERSE, CoinSide.CHARACTER) + .coins + .map(CoinSide::score), + ) + } + + @Test + fun `a cast requires exactly six rounds`() { + assertFails("exactly six rounds") { + CastEngine.cast(List(5) { roundFor(LineValue.YOUNG_YANG) }) + } + assertFails("exactly six rounds") { + CastEngine.cast(List(7) { roundFor(LineValue.YOUNG_YANG) }) + } + } + + @Test + fun `documented fixtures preserve bottom-up order and King Wen ids`() { + assertFixture(listOf(7, 7, 7, 7, 7, 7), primary = 1, transformed = 1, moving = emptyList()) + assertFixture(listOf(8, 8, 8, 8, 8, 8), primary = 2, transformed = 2, moving = emptyList()) + assertFixture(listOf(9, 9, 9, 9, 9, 9), primary = 1, transformed = 2, moving = (1..6).toList()) + assertFixture(listOf(6, 6, 6, 6, 6, 6), primary = 2, transformed = 1, moving = (1..6).toList()) + assertFixture(listOf(7, 8, 8, 8, 8, 8), primary = 24, transformed = 24, moving = emptyList()) + assertFixture(listOf(9, 8, 8, 8, 8, 8), primary = 24, transformed = 2, moving = listOf(1)) + } + + @Test + fun `all 4096 line sequences compute consistently`() { + val primaryIds = mutableSetOf() + + for (encoded in 0 until 4096) { + val lineValues = List(6) { position -> + LineValue.entries[(encoded shr (position * 2)) and 0b11] + } + val result = CastEngine.cast(lineValues.map(::roundFor)) + + assertEquals(lineValues, result.lineValuesBottomUp) + assertEquals(lineValues.map(LineValue::polarity), result.primaryPatternBottomUp.linesBottomUp) + assertEquals( + lineValues.map(LineValue::transformedPolarity), + result.transformedPatternBottomUp.linesBottomUp, + ) + assertEquals( + lineValues.mapIndexedNotNull { index, line -> if (line.isMoving) index + 1 else null }, + result.movingLinePositions, + ) + assertTrue(result.primaryHexagramId.value in 1..64) + assertTrue(result.transformedHexagramId.value in 1..64) + primaryIds += result.primaryHexagramId.value + } + + assertEquals((1..64).toSet(), primaryIds) + } + + @Test + fun `all 64 polarity patterns map one-to-one to King Wen ids`() { + val ids = (0 until 64).map { encoded -> + val pattern = HexagramPattern.of( + List(6) { position -> + if (encoded and (1 shl position) == 0) Polarity.YIN else Polarity.YANG + }, + ) + HexagramCatalog.idFor(pattern).value + } + + assertEquals(64, ids.toSet().size) + assertEquals((1..64).toSet(), ids.toSet()) + } + + @Test + fun `record metadata is separate from deterministic computation`() { + val rounds = listOf(9, 8, 8, 8, 8, 8).map(::roundFor) + val computation = CastEngine.cast(rounds) + val first = CastResult.record(computation, CastMetadata("content-test", "2026-01-01T00:00:00Z")) + val second = CastResult.record(computation, CastMetadata("content-test", "2026-02-01T00:00:00Z")) + + assertNotEquals(first.createdAt, second.createdAt) + assertEquals(first.roundsBottomUp, second.roundsBottomUp) + assertEquals(first.lineValuesBottomUp, second.lineValuesBottomUp) + assertEquals(first.primaryHexagramId, second.primaryHexagramId) + assertEquals(first.transformedHexagramId, second.transformedHexagramId) + } + + @Test + fun `versioned dto round-trips all preserved coins and derived values`() { + val computation = CastEngine.cast(listOf(6, 7, 8, 9, 7, 8).map(::roundFor)) + val original = CastResult.record( + computation, + CastMetadata(contentVersion = "fixture-v1", createdAt = "2026-08-04T12:00:00+08:00"), + ) + + val restored = CastRecordDto.fromDomain(original).toDomain() + + assertEquals(original, restored) + assertEquals(18, restored.roundsBottomUp.sumOf { it.coins.size }) + } + + @Test + fun `versioned dto rejects corrupted derived values`() { + val original = CastResult.record( + CastEngine.cast(List(6) { roundFor(LineValue.YOUNG_YANG) }), + CastMetadata(contentVersion = "fixture-v1", createdAt = "2026-08-04T12:00:00+08:00"), + ) + val corrupted = CastRecordDto.fromDomain(original).copy(primaryHexagramId = 2) + + assertFails("does not match") { corrupted.toDomain() } + } + + private fun assertFixture( + scoresBottomUp: List, + primary: Int, + transformed: Int, + moving: List, + ) { + val result = CastEngine.cast(scoresBottomUp.map(::roundFor)) + assertEquals(primary, result.primaryHexagramId.value) + assertEquals(transformed, result.transformedHexagramId.value) + assertEquals(moving, result.movingLinePositions) + assertEquals(scoresBottomUp, result.lineValuesBottomUp.map(LineValue::score)) + } + + private fun assertLine( + lineValue: LineValue, + polarity: Polarity, + moving: Boolean, + transformed: Polarity, + ) { + assertEquals(polarity, lineValue.polarity) + assertEquals(moving, lineValue.isMoving) + assertEquals(transformed, lineValue.transformedPolarity) + if (moving) assertNotEquals(polarity, transformed) else assertEquals(polarity, transformed) + } + + private fun roundFor(score: Int): CastRound = roundFor(LineValue.fromScore(score)) + + private fun roundFor(lineValue: LineValue): CastRound = CastRound.fromLineValue(lineValue) + + private fun assertFails(messageFragment: String, block: () -> Unit) { + try { + block() + fail("Expected IllegalArgumentException containing '$messageFragment'") + } catch (error: IllegalArgumentException) { + assertTrue( + "Expected '${error.message}' to contain '$messageFragment'", + error.message.orEmpty().contains(messageFragment), + ) + } + } +} diff --git a/build.gradle.kts b/build.gradle.kts new file mode 100644 index 0000000..3f4454e --- /dev/null +++ b/build.gradle.kts @@ -0,0 +1,70 @@ +import org.gradle.api.tasks.Exec + +plugins { + base +} + +fun registerNodeVerificationTask( + name: String, + description: String, + script: String, +) = tasks.register(name) { + group = LifecycleBasePlugin.VERIFICATION_GROUP + this.description = description + workingDir(rootDir) + commandLine("node", script) +} + +val verifyDocs = registerNodeVerificationTask( + name = "verifyDocs", + description = "Checks local Markdown links and required harness documents.", + script = "scripts/verify-docs.mjs", +) + +val scanSecrets = registerNodeVerificationTask( + name = "scanSecrets", + description = "Scans repository text files for high-confidence secret patterns.", + script = "scripts/scan-secrets.mjs", +) + +val verifyDomainBoundaries = registerNodeVerificationTask( + name = "verifyDomainBoundaries", + description = "Prevents Android, persistence, and network imports in the domain core.", + script = "scripts/verify-domain-boundaries.mjs", +) + +val verifyPrototype = registerNodeVerificationTask( + name = "verifyPrototype", + description = "Runs dependency-free syntax checks for the HTML prototype harness.", + script = "scripts/verify-prototype.mjs", +) + +val verifyContentContract = registerNodeVerificationTask( + name = "verifyContentContract", + description = "Validates the versioned local-content contract and its negative fixtures.", + script = "scripts/verify-content-contract.mjs", +) + +val spotlessCheck = registerNodeVerificationTask( + name = "spotlessCheck", + description = "Runs the dependency-free repository formatting gate.", + script = "scripts/verify-format.mjs", +) + +tasks.register("verifyLocal") { + group = LifecycleBasePlugin.VERIFICATION_GROUP + description = "Runs every environment-independent local quality gate." + dependsOn( + ":app:test", + verifyDocs, + scanSecrets, + verifyDomainBoundaries, + verifyPrototype, + verifyContentContract, + spotlessCheck, + ) +} + +tasks.named("check") { + dependsOn("verifyLocal") +} diff --git a/content/schema/hexagram-content.schema.json b/content/schema/hexagram-content.schema.json new file mode 100644 index 0000000..c55a460 --- /dev/null +++ b/content/schema/hexagram-content.schema.json @@ -0,0 +1,117 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "https://brainwave.invalid/schema/hexagram-content-v1.json", + "title": "Brainwave local hexagram content package", + "type": "object", + "additionalProperties": false, + "required": [ + "schemaVersion", + "contentVersion", + "specialUsageTexts", + "sources", + "hexagrams" + ], + "properties": { + "schemaVersion": { "const": 1 }, + "contentVersion": { "type": "string", "minLength": 1 }, + "specialUsageTexts": { + "type": "object", + "additionalProperties": false, + "required": ["qian", "kun"], + "properties": { + "qian": { "type": "boolean" }, + "kun": { "type": "boolean" } + } + }, + "sources": { + "type": "array", + "minItems": 1, + "items": { "$ref": "#/$defs/source" } + }, + "hexagrams": { + "type": "array", + "minItems": 64, + "maxItems": 64, + "items": { "$ref": "#/$defs/hexagram" } + } + }, + "$defs": { + "nonBlankText": { + "type": "string", + "minLength": 1, + "pattern": "\\S" + }, + "trigram": { + "enum": ["QIAN", "DUI", "LI", "ZHEN", "XUN", "KAN", "GEN", "KUN"] + }, + "polarity": { + "enum": ["YIN", "YANG"] + }, + "source": { + "type": "object", + "additionalProperties": false, + "required": ["id", "title", "edition", "license", "url"], + "properties": { + "id": { "$ref": "#/$defs/nonBlankText" }, + "title": { "$ref": "#/$defs/nonBlankText" }, + "edition": { "$ref": "#/$defs/nonBlankText" }, + "license": { "$ref": "#/$defs/nonBlankText" }, + "url": { "type": "string", "format": "uri" } + } + }, + "sixPolarities": { + "type": "array", + "minItems": 6, + "maxItems": 6, + "items": { "$ref": "#/$defs/polarity" } + }, + "sixTexts": { + "type": "array", + "minItems": 6, + "maxItems": 6, + "items": { "$ref": "#/$defs/nonBlankText" } + }, + "hexagram": { + "type": "object", + "additionalProperties": false, + "required": [ + "kingWenNumber", + "name", + "symbol", + "lowerTrigram", + "upperTrigram", + "patternBottomUp", + "judgmentOriginal", + "judgmentPlain", + "lineTextsBottomUp", + "linePlainBottomUp", + "specialUsageText", + "sourceRefs" + ], + "properties": { + "kingWenNumber": { "type": "integer", "minimum": 1, "maximum": 64 }, + "name": { "$ref": "#/$defs/nonBlankText" }, + "symbol": { "$ref": "#/$defs/nonBlankText" }, + "lowerTrigram": { "$ref": "#/$defs/trigram" }, + "upperTrigram": { "$ref": "#/$defs/trigram" }, + "patternBottomUp": { "$ref": "#/$defs/sixPolarities" }, + "judgmentOriginal": { "$ref": "#/$defs/nonBlankText" }, + "judgmentPlain": { "$ref": "#/$defs/nonBlankText" }, + "lineTextsBottomUp": { "$ref": "#/$defs/sixTexts" }, + "linePlainBottomUp": { "$ref": "#/$defs/sixTexts" }, + "specialUsageText": { + "oneOf": [ + { "$ref": "#/$defs/nonBlankText" }, + { "type": "null" } + ] + }, + "sourceRefs": { + "type": "array", + "minItems": 1, + "uniqueItems": true, + "items": { "$ref": "#/$defs/nonBlankText" } + } + } + } + } +} diff --git a/docs/README.md b/docs/README.md index 8185a9e..0445bfc 100644 --- a/docs/README.md +++ b/docs/README.md @@ -2,7 +2,7 @@ > 文档状态：方案基线 > 最后核验：2026-08-04 -> 当前阶段：P-1 核心原型已确认；首页、问卦簿与默认本机保存 v0.3 已实现并待视觉复核；Android 工程尚未初始化 +> 当前阶段：P-1 v0.3 待视觉复核；P1 纯 Kotlin 领域核心已完成；P0 仓库门禁与 P2 内容契约已部分完成；可发布 Android 壳仍等待正式身份与 `minSdk` 决策 本目录是 Brainwave 的项目知识事实源。产品决策、领域算法、架构边界、验收标准和已知失败模式必须写入仓库；聊天记录、口头约定和临时提示不构成项目规范。 diff --git a/docs/architecture.md b/docs/architecture.md index 8330aac..17d4b66 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -96,7 +96,7 @@ core/designsystem → Compose/Material + core model（仅绘制需要） ### `CastEngine` -纯 Kotlin、无副作用。输入六轮铜币和方法版本，输出不可变 `CastResult`。所有规则来自[领域规则](domain-rules.md)。 +纯 Kotlin、无副作用。输入六轮铜币，使用 API 固定的 `coin-v1` 约定输出不可变 `CastComputation`；随后由记录工厂附加 `contentVersion` 与 `createdAt`，组成不可变 `CastResult`。方法版本不是调用方可随意传入的自由字符串，记录元数据也不能进入计算。所有规则来自[领域规则](domain-rules.md)。 ### `HexagramContentRepository` diff --git a/docs/data-content.md b/docs/data-content.md index 9882e45..6ce4c17 100644 --- a/docs/data-content.md +++ b/docs/data-content.md @@ -24,6 +24,10 @@ { "schemaVersion": 1, "contentVersion": "zh-Hans-2026.1", + "specialUsageTexts": { + "qian": true, + "kun": true + }, "sources": [ { "id": "source-id", @@ -54,6 +58,8 @@ 示例中的省略号不是可发布内容。禁止由 AI 在构建时临时补齐缺失卦辞或爻辞。 +机器契约位于 `content/schema/hexagram-content.schema.json`。`specialUsageTexts` 显式声明当前内容版本是否提供乾“用九”和坤“用六”；声明为 `false` 时对应条目的 `specialUsageText` 必须为 `null`，不能用空字符串暗示内容存在。Android parser 尚未建立前，`scripts/verify-content-contract.mjs` 已提供独立构建期校验、稳定 SHA-256 摘要和不含可发布卦辞的自动化夹具；`HexagramContentRepository` 接口与测试 fake 已建立，缺少 ID 或内容版本不匹配时抛出数据完整性错误，不回退到相邻条目。 + ## 3. 内容完整性门禁 内容包进入应用前必须自动验证： diff --git a/docs/decisions.md b/docs/decisions.md index 5893d4d..ba4fe0d 100644 --- a/docs/decisions.md +++ b/docs/decisions.md @@ -121,6 +121,16 @@ - 后果：P4 必须实现保存策略、事务关联、设置、单次退出、删除、迁移和备份排除测试；ADR-012 是生产事实源，决策时尚未同步的 v0.2 原型只能作为旧流程评审材料，现行 v0.3 已完成同步。 - 复审触发：引入账号、导出、云同步、系统备份、跨设备迁移或新的隐私/合规要求。 +## ADR-013：仓库门禁采用无外部依赖脚本并由 Gradle 聚合 + +- 状态：`Accepted` +- 日期：2026-08-04 +- 关联：解决 TBD-012、P0/P1/P2/P6 +- 决定：在 Android application 壳建立前，使用仓库内 Node 脚本执行格式、文档链接、高置信 secret scan、domain 依赖边界、原型语法和内容完整性检查；Gradle 8.2 的 `verifyLocal` 聚合这些检查与 JVM 测试，CI 调用同一入口。 +- 原因：当前系统已实测 Node 22、JDK 17 和 Gradle 8.2，且无需新增全局工具或把个人路径写进工程；门禁错误能够给出可修复的文件位置。 +- 后果：`spotlessCheck` 当前是仓库内的无依赖格式兼容入口，不表示已引入 Spotless 插件。Android 壳建立后必须把 lint/debug build 加入 `verifyLocal`；将来若采用维护良好的专用插件，应保留命令兼容或同步更新 CI 与文档。 +- 复审触发：Android 工具链启用、现有脚本无法表达新边界，或专用工具能以可接受成本提供明显更强的检查。 + ## 未决问题 | ID | 问题 | 推荐默认 | 阻塞阶段 | @@ -134,7 +144,6 @@ | TBD-009 | AI 模型供应商与自有后端 | 供应商无关接口；先交付本地版 | P5 | | TBD-010 | 服务端问题/回复保留期 | 最小化且明确披露，优先不持久化正文 | P5，发布阻塞 | | TBD-011 | 高风险本地资源表覆盖地区 | 首发市场确认后维护，不让模型编号码 | P5 | -| TBD-012 | 架构检查工具 | 选择维护活跃工具或小型自定义测试 | P0/P1 | ## 新增决策模板 diff --git a/docs/domain-rules.md b/docs/domain-rules.md index c544786..3bedb2f 100644 --- a/docs/domain-rules.md +++ b/docs/domain-rules.md @@ -5,6 +5,8 @@ 本文件定义本项目唯一允许的计算规则。UI 文案、AI 输出和数据源都不能覆盖这些规则。 +实现状态：`coin-v1` 纯 Kotlin 核心位于 `app/src/main/java/brainwave/domain/casting/`；`.\gradlew.bat :app:test --offline` 覆盖 8 种币面、4,096 种六爻、64 模式、已知夹具和 DTO 往返。记录时间与内容版本在确定性计算完成后附加。 + ## 1. 术语和类型 建议使用有语义的封闭类型，避免裸 `Int` 在层间传播： @@ -102,7 +104,7 @@ createdAt // 只用于记录，不参与计算 3. 从各爻阴阳形成本卦模式并查得本卦编号。 4. 收集值为 6 或 9 的位置作为动爻。 5. 仅翻转动爻阴阳，形成之卦模式并查得之卦编号。 -6. 将全部原始输入、版本和确定结果构造成不可变 `CastResult`。 +6. 先将全部原始输入和确定结果构造成不可变 `CastComputation`，再附加 `methodVersion`、`coinConvention`、`contentVersion` 与 `createdAt` 记录元数据，组成不可变 `CastResult`；元数据不得反向影响步骤 1～5。 ## 6. 读取内容的产品规则 diff --git a/docs/environment.md b/docs/environment.md index 579418d..889e2c0 100644 --- a/docs/environment.md +++ b/docs/environment.md @@ -39,7 +39,7 @@ | Node.js / npm | `22.22.1` / `11.12.1` | | Google Chrome | `150.0.7871.188`，`C:\Program Files\Google\Chrome\Application\chrome.exe` | -环境文件写入前，仓库没有 Gradle Wrapper、`build.gradle*`、`settings.gradle*` 或根 `AGENTS.md`。这些属于 Android 工程初始化阶段的交付物，不应被误认为已存在。 +首次环境审计时仓库没有 Gradle Wrapper、`build.gradle*`、`settings.gradle*` 或根 `AGENTS.md`。当前这些仓库级入口已经建立；`app` 暂时是纯 Kotlin/JVM 领域 harness，不是可安装 Android application。 Windows 路径可能较长；如果后续依赖缓存或生成代码触发路径长度错误，应优先缩短包/生成目录或评估仓库级长路径配置，并把实际决定写入[决策记录](decisions.md)。 @@ -101,15 +101,17 @@ Android Studio 不是当前环境的可用前提。项目必须先支持 PowerSh | 已验证 Gradle | `8.2` | | Gradle 使用的 JVM | Temurin `17.0.13` | | 缓存的 Android Gradle Plugin | `8.2.0` | +| 缓存的 Kotlin Gradle Plugin | `1.9.20` | +| 缓存的 JUnit | `4.13.2` | | 用户级 `~/.gradle/gradle.properties` | 不存在 | -项目初始化应提交 `gradlew`、`gradlew.bat`、`gradle/wrapper/gradle-wrapper.jar` 和版本明确的 `gradle-wrapper.properties`。所有项目命令使用： +仓库已提交 `gradlew`、`gradlew.bat`、`gradle/wrapper/gradle-wrapper.jar` 和固定 Gradle 8.2 及 SHA-256 的 `gradle-wrapper.properties`。所有项目命令使用： ```powershell .\gradlew.bat ``` -不要要求用户安装全局 Gradle。当前缓存能证明 Gradle 8.2 本体可运行，但不能证明 Compose、Kotlin、Hilt、Room 等全部 Maven 依赖已离线缓存；第一次构建仍需实际验证。 +不要要求用户安装全局 Gradle。当前缓存已实际证明 Gradle 8.2、Kotlin 1.9.20 与 JUnit 4.13.2 可离线完成领域构建和测试；Compose、Hilt、Room 等 Android 依赖仍未配置或验证，不能据此推断可离线解析。 ## 7. 已连接 Android 真机 @@ -151,13 +153,14 @@ Android Studio 不是当前环境的可用前提。项目必须先支持 PowerSh ## 10. 已知缺口 -- Android 工程和 Gradle Wrapper 尚未创建。 +- 可安装的 Android application 壳尚未创建；正式名称、组织所有的 application ID 与最终 `minSdk` 仍待确认。 - Android Studio 未安装。 - Android Emulator、system image 和 AVD 不可用。 - 本机只确认安装了 Android Platform 34 / Build Tools 34.0.0。 -- Maven 依赖能否完整离线解析尚未验证。 +- Compose、Hilt、Room、DataStore 与 Navigation 的 Maven 依赖尚未完整离线验证。 - 代理已配置，但外部仓库和 Android CLI 网络连通性尚未验证。 -- 没有根 `AGENTS.md` 和可执行的 `verifyLocal` 聚合任务。 + +已解除的缺口：Gradle Wrapper、Version Catalog、根 `AGENTS.md`、CI 与可执行的 `verifyLocal` 已建立；`verifyLocal --offline` 已在 JDK 17 上通过。它当前不包含 Android lint、APK 构建或设备测试。 这些缺口分别由[实施计划](implementation-plan.md)的 P0 和[质量门禁](quality-gates.md)处理。环境缺口不是跳过验证的理由；无法运行的门禁必须在交付报告中准确说明。 diff --git a/docs/implementation-plan.md b/docs/implementation-plan.md index df2eb0a..df77c2e 100644 --- a/docs/implementation-plan.md +++ b/docs/implementation-plan.md @@ -1,6 +1,6 @@ # 分阶段实施计划 -> 状态：P-1 核心原型已确认，首页/问卦簿与默认本机保存 v0.3 已完成待视觉复核；P0 尚未开始 +> 状态：P-1 v0.3 待视觉复核；P0 仓库门禁已建立但 Android 壳受 TBD-001～003 阻塞；P1 已完成并通过穷举测试；P2 内容契约已建立但授权内容未开始 > 计划原则：先用原型确认高返工成本体验，再锁定确定性领域核心，随后接内容和 UI，最后接网络 AI ## 1. 依赖图 @@ -46,14 +46,14 @@ P1 与 P2 可并行，但 P3 不能在领域与内容契约未稳定时复制原 任务： -- 读取并遵守[本地开发环境](environment.md)：JDK 17、SDK 34、命令行优先、Gradle Wrapper、真机验证。 -- 基于 Google `android/architecture-templates` 的 `base` 分支初始化。 -- 确认正式应用名称、package/application ID、minSdk。 -- 配置 Kotlin、Compose、Material 3、Hilt、Room、DataStore、Navigation 和 Version Catalog。 -- 配置 Gradle Wrapper、格式化、lint、单元测试和 CI。 -- 建立 [系统架构](architecture.md)中的包结构和空 feature 边界。 -- 将根 `AGENTS.md` 设计为短地图，指向本目录和验证命令。 -- 增加 `verifyLocal` 聚合任务及基础 secret scan。 +- [x] 读取并遵守[本地开发环境](environment.md)：JDK 17、SDK 34、命令行优先、Gradle Wrapper、真机验证。 +- [ ] 基于 Google `android/architecture-templates` 的 `base` 分支初始化 Android 壳；模板定制需要 TBD-002 的正式 application ID，不能用临时发布身份替代。 +- [ ] 确认正式应用名称、package/application ID、minSdk（TBD-001～003）。 +- [ ] 配置 Compose、Material 3、Hilt、Room、DataStore 和 Navigation；Version Catalog 已先用于 JVM harness。 +- [ ] 配置 Gradle Wrapper、格式化、lint、单元测试和 CI：Wrapper、无依赖格式门禁、JVM 单测与 CI 已完成；Android lint 要等 application 插件启用。 +- [ ] 建立 [系统架构](architecture.md)中的包结构和空 feature 边界：`domain/casting` 已落地，其余随 Android 壳建立。 +- [x] 将根 `AGENTS.md` 设计为短地图，指向本目录和验证命令。 +- [x] 增加 `verifyLocal` 聚合任务、文档链接、领域边界、内容契约与基础 secret scan。 退出条件： @@ -68,13 +68,13 @@ P1 与 P2 可并行，但 P3 不能在领域与内容契约未稳定时复制原 任务： -- 建立 `CoinSide`、`LineValue`、`Polarity`、`CastRound`、`CastResult`。 -- 实现六轮输入校验和 `CastEngine`。 -- 建立经过双重校验的 64 卦模式映射表。 -- 实现之卦变换和动爻位置。 -- 实现版本化序列化 DTO。 -- 完成 8 种币面、4,096 种六爻、64 模式和已知夹具测试。 -- 增加 domain 无 Android/网络依赖的架构门禁。 +- [x] 建立 `CoinSide`、`LineValue`、`Polarity`、`CastRound`、`CastResult`。 +- [x] 实现六轮输入校验和纯 `CastEngine`；记录时间与内容版本在计算后附加。 +- [x] 建立带完整性自检的 64 卦文王序号映射表。 +- [x] 实现之卦变换和 1～6 的 bottom-up 动爻位置。 +- [x] 实现 `schemaVersion=1` 的序列化 DTO，并在读取时用保存的十八枚币重新计算校验派生值。 +- [x] 完成 8 种币面、4,096 种六爻、64 模式和已知夹具测试。 +- [x] 增加 domain 无 Android、数据库和网络依赖的机械架构门禁。 退出条件： @@ -82,18 +82,20 @@ P1 与 P2 可并行，但 P3 不能在领域与内容契约未稳定时复制原 - 测试无随机、无网络、无系统时间依赖。 - `CastEngine` API 经评审后冻结为 `coin-v1`。 +当前证据：`.\gradlew.bat :app:test --offline` 中 `CastEngineTest` 执行 10 个测试、0 失败；实现位于 `app/src/main/java/brainwave/domain/casting/`。`brainwave` 是内部代码命名空间，不是 TBD-002 的 application ID。 + ## 5. P2：内容数据管线 目标：建立可追踪、可校验、可发布的本地内容包。 任务： -- 决定原文版本、现代白话来源和授权。 -- 实现 JSON schema、解析器和内容版本。 -- 录入/导入 64 卦、卦辞、384 条爻辞及所需特殊文本。 -- 建立来源清单、许可证清单和内容审核记录。 -- 实现构建期完整性校验与映射交叉校验。 -- 实现 `HexagramContentRepository` fake 与 assets 版本。 +- [ ] 决定原文版本、现代白话来源和授权（TBD-005，发布阻塞）。 +- [ ] 实现 JSON schema、解析器和内容版本：`schemaVersion=1` 的机器 schema 已完成；Android/Kotlin assets 解析器待 Android 壳建立。 +- [ ] 录入/导入 64 卦、卦辞、384 条爻辞及所需特殊文本。 +- [ ] 建立来源清单、许可证清单和内容审核记录；schema 已强制每个来源包含版本、许可证与 URL。 +- [x] 实现构建期完整性校验、文王序号/上下卦/bottom-up 交叉校验、稳定 SHA-256 摘要及 8 个负向夹具。 +- [ ] 实现 `HexagramContentRepository` fake 与 assets 版本：接口、强校验只读模型和测试 fake 已完成，assets 实现待 Android parser。 退出条件： diff --git a/docs/quality-gates.md b/docs/quality-gates.md index c1a7516..c3dc0fd 100644 --- a/docs/quality-gates.md +++ b/docs/quality-gates.md @@ -1,6 +1,6 @@ # 质量门禁与验证策略 -> 状态：测试策略已定义；命令在 Android 骨架初始化后启用 +> 状态：JVM/harness 门禁已启用；Android lint、构建、UI 与设备门禁等待 Android application 壳 > 原则：完成必须有可重复证据，不能以“代码看起来正确”代替验证 ## 1. 反馈循环 @@ -17,7 +17,18 @@ ## 2. 预期本地命令 -工程创建后，Windows 环境至少提供以下稳定入口： +当前可重复的 Windows 快速门禁： + +```powershell +.\gradlew.bat spotlessCheck --offline +.\gradlew.bat :app:test --offline +.\gradlew.bat verifyContentContract --offline +.\gradlew.bat verifyLocal --offline +``` + +`verifyLocal` 当前聚合无依赖格式检查、10 个领域测试、3 个内容 repository 测试、domain 依赖边界、内容契约与负向夹具、文档链接、高置信 secret scan 和原型 JavaScript 语法检查。CI 执行同一个聚合任务。 + +Android application 插件配置后，Windows 环境还必须提供： ```powershell .\gradlew.bat spotlessCheck @@ -29,15 +40,7 @@ 若采用不同格式化插件，命令可以调整，但必须在本文件和 CI 同步更新。`connectedDebugAndroidTest` 需要模拟器或设备，应与纯 JVM 快速门禁分开。 -建议再提供聚合任务： - -```powershell -.\gradlew.bat verifyLocal -``` - -它至少依赖格式、lint、JVM 单元测试和 debug 构建，使代理不必猜测正确验证组合。 - -当前仓库没有 Gradle Wrapper，所以上述命令尚未运行，也不能报告为通过。 +到那时必须把 Android lint 和 debug build 加入现有 `verifyLocal`，使代理仍不必猜测验证组合。在完成这一步之前，`verifyLocal` 通过只证明 JVM 与仓库门禁，不代表 APK 已构建或真机测试已通过。 ## 3. 测试层次 @@ -148,6 +151,8 @@ 可以使用现有静态工具、架构测试库或小型自定义 Gradle 任务；具体选型写入[决策记录](decisions.md)。规则的错误消息应告诉代理如何修复，而不只报告失败。 +当前由无外部依赖的 Node 脚本与 Gradle 任务执行上述已落地规则，见 ADR-013。引入 Android 源码后应扩展同一入口，不应建立一套互不相干的新命令。 + ## 6. 发布门禁 发布候选必须满足： diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml new file mode 100644 index 0000000..c0c6051 --- /dev/null +++ b/gradle/libs.versions.toml @@ -0,0 +1,9 @@ +[versions] +kotlin = "1.9.20" +junit = "4.13.2" + +[libraries] +junit = { module = "junit:junit", version.ref = "junit" } + +[plugins] +kotlin-jvm = { id = "org.jetbrains.kotlin.jvm", version.ref = "kotlin" } diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..033e24c4cdf41af1ab109bc7f253b2b887023340 GIT binary patch literal 63375 zcmb5VV{~QRw)Y#`wrv{~+qP{x72B%VwzFc}c2cp;N~)5ZbDrJayPv(!dGEd-##*zr z)#n-$y^sH|_dchh3@8{H5D*j;5D<{i*8l5IFJ|DjL!e)upfGNX(kojugZ3I`oH1PvW`wFW_ske0j@lB9bX zO;2)`y+|!@X(fZ1<2n!Qx*)_^Ai@Cv-dF&(vnudG?0CsddG_&Wtae(n|K59ew)6St z#dj7_(Cfwzh$H$5M!$UDd8=4>IQsD3xV=lXUq($;(h*$0^yd+b{qq63f0r_de#!o_ zXDngc>zy`uor)4A^2M#U*DC~i+dc<)Tb1Tv&~Ev@oM)5iJ4Sn#8iRw16XXuV50BS7 zdBL5Mefch(&^{luE{*5qtCZk$oFr3RH=H!c3wGR=HJ(yKc_re_X9pD` zJ;uxPzUfVpgU>DSq?J;I@a+10l0ONXPcDkiYcihREt5~T5Gb}sT0+6Q;AWHl`S5dV>lv%-p9l#xNNy7ZCr%cyqHY%TZ8Q4 zbp&#ov1*$#grNG#1vgfFOLJCaNG@K|2!W&HSh@3@Y%T?3YI75bJp!VP*$*!< z;(ffNS_;@RJ`=c7yX04!u3JP*<8jeqLHVJu#WV&v6wA!OYJS4h<_}^QI&97-;=ojW zQ-1t)7wnxG*5I%U4)9$wlv5Fr;cIizft@&N+32O%B{R1POm$oap@&f| zh+5J{>U6ftv|vAeKGc|zC=kO(+l7_cLpV}-D#oUltScw})N>~JOZLU_0{Ka2e1evz z{^a*ZrLr+JUj;)K&u2CoCAXLC2=fVScI(m_p~0FmF>>&3DHziouln?;sxW`NB}cSX z8?IsJB)Z=aYRz!X=yJn$kyOWK%rCYf-YarNqKzmWu$ZvkP12b4qH zhS9Q>j<}(*frr?z<%9hl*i^#@*O2q(Z^CN)c2c z>1B~D;@YpG?G!Yk+*yn4vM4sO-_!&m6+`k|3zd;8DJnxsBYtI;W3We+FN@|tQ5EW= z!VU>jtim0Mw#iaT8t_<+qKIEB-WwE04lBd%Letbml9N!?SLrEG$nmn7&W(W`VB@5S zaY=sEw2}i@F_1P4OtEw?xj4@D6>_e=m=797#hg}f*l^`AB|Y0# z9=)o|%TZFCY$SzgSjS|8AI-%J4x}J)!IMxY3_KYze`_I=c1nmrk@E8c9?MVRu)7+Ue79|)rBX7tVB7U|w4*h(;Gi3D9le49B38`wuv zp7{4X^p+K4*$@gU(Tq3K1a#3SmYhvI42)GzG4f|u zwQFT1n_=n|jpi=70-yE9LA+d*T8u z`=VmmXJ_f6WmZveZPct$Cgu^~gFiyL>Lnpj*6ee>*0pz=t$IJ}+rE zsf@>jlcG%Wx;Cp5x)YSVvB1$yyY1l&o zvwX=D7k)Dn;ciX?Z)Pn8$flC8#m`nB&(8?RSdBvr?>T9?E$U3uIX7T?$v4dWCa46 z+&`ot8ZTEgp7G+c52oHJ8nw5}a^dwb_l%MOh(ebVj9>_koQP^$2B~eUfSbw9RY$_< z&DDWf2LW;b0ZDOaZ&2^i^g+5uTd;GwO(-bbo|P^;CNL-%?9mRmxEw~5&z=X^Rvbo^WJW=n_%*7974RY}JhFv46> zd}`2|qkd;89l}R;i~9T)V-Q%K)O=yfVKNM4Gbacc7AOd>#^&W&)Xx!Uy5!BHnp9kh z`a(7MO6+Ren#>R^D0K)1sE{Bv>}s6Rb9MT14u!(NpZOe-?4V=>qZ>}uS)!y~;jEUK z&!U7Fj&{WdgU#L0%bM}SYXRtM5z!6M+kgaMKt%3FkjWYh=#QUpt$XX1!*XkpSq-pl zhMe{muh#knk{9_V3%qdDcWDv}v)m4t9 zQhv{;} zc{}#V^N3H>9mFM8`i`0p+fN@GqX+kl|M94$BK3J-X`Hyj8r!#x6Vt(PXjn?N)qedP z=o1T^#?1^a{;bZ&x`U{f?}TMo8ToN zkHj5v|}r}wDEi7I@)Gj+S1aE-GdnLN+$hw!=DzglMaj#{qjXi_dwpr|HL(gcCXwGLEmi|{4&4#OZ4ChceA zKVd4K!D>_N=_X;{poT~4Q+!Le+ZV>=H7v1*l%w`|`Dx8{)McN@NDlQyln&N3@bFpV z_1w~O4EH3fF@IzJ9kDk@7@QctFq8FbkbaH7K$iX=bV~o#gfh?2JD6lZf(XP>~DACF)fGFt)X%-h1yY~MJU{nA5 ze2zxWMs{YdX3q5XU*9hOH0!_S24DOBA5usB+Ws$6{|AMe*joJ?RxfV}*7AKN9V*~J zK+OMcE@bTD>TG1*yc?*qGqjBN8mgg@h1cJLDv)0!WRPIkC` zZrWXrceVw;fB%3`6kq=a!pq|hFIsQ%ZSlo~)D z|64!aCnw-?>}AG|*iOl44KVf8@|joXi&|)1rB;EQWgm+iHfVbgllP$f!$Wf42%NO5b(j9Bw6L z;0dpUUK$5GX4QbMlTmLM_jJt!ur`_0~$b#BB7FL*%XFf<b__1o)Ao3rlobbN8-(T!1d-bR8D3S0@d zLI!*GMb5s~Q<&sjd}lBb8Nr0>PqE6_!3!2d(KAWFxa{hm`@u|a(%#i(#f8{BP2wbs zt+N_slWF4IF_O|{w`c~)Xvh&R{Au~CFmW#0+}MBd2~X}t9lz6*E7uAD`@EBDe$>7W zzPUkJx<`f$0VA$=>R57^(K^h86>09?>_@M(R4q($!Ck6GG@pnu-x*exAx1jOv|>KH zjNfG5pwm`E-=ydcb+3BJwuU;V&OS=6yM^4Jq{%AVqnTTLwV`AorIDD}T&jWr8pB&j28fVtk_y*JRP^t@l*($UZ z6(B^-PBNZ+z!p?+e8@$&jCv^EWLb$WO=}Scr$6SM*&~B95El~;W_0(Bvoha|uQ1T< zO$%_oLAwf1bW*rKWmlD+@CP&$ObiDy=nh1b2ejz%LO9937N{LDe7gle4i!{}I$;&Y zkexJ9Ybr+lrCmKWg&}p=`2&Gf10orS?4$VrzWidT=*6{KzOGMo?KI0>GL0{iFWc;C z+LPq%VH5g}6V@-tg2m{C!-$fapJ9y}c$U}aUmS{9#0CM*8pC|sfer!)nG7Ji>mfRh z+~6CxNb>6eWKMHBz-w2{mLLwdA7dA-qfTu^A2yG1+9s5k zcF=le_UPYG&q!t5Zd_*E_P3Cf5T6821bO`daa`;DODm8Ih8k89=RN;-asHIigj`n=ux>*f!OC5#;X5i;Q z+V!GUy0|&Y_*8k_QRUA8$lHP;GJ3UUD08P|ALknng|YY13)}!!HW@0z$q+kCH%xet zlWf@BXQ=b=4}QO5eNnN~CzWBbHGUivG=`&eWK}beuV*;?zt=P#pM*eTuy3 zP}c#}AXJ0OIaqXji78l;YrP4sQe#^pOqwZUiiN6^0RCd#D271XCbEKpk`HI0IsN^s zES7YtU#7=8gTn#lkrc~6)R9u&SX6*Jk4GFX7){E)WE?pT8a-%6P+zS6o&A#ml{$WX zABFz#i7`DDlo{34)oo?bOa4Z_lNH>n;f0nbt$JfAl~;4QY@}NH!X|A$KgMmEsd^&Y zt;pi=>AID7ROQfr;MsMtClr5b0)xo|fwhc=qk33wQ|}$@?{}qXcmECh>#kUQ-If0$ zseb{Wf4VFGLNc*Rax#P8ko*=`MwaR-DQ8L8V8r=2N{Gaips2_^cS|oC$+yScRo*uF zUO|5=?Q?{p$inDpx*t#Xyo6=s?bbN}y>NNVxj9NZCdtwRI70jxvm3!5R7yiWjREEd zDUjrsZhS|P&|Ng5r+f^kA6BNN#|Se}_GF>P6sy^e8kBrgMv3#vk%m}9PCwUWJg-AD zFnZ=}lbi*mN-AOm zCs)r=*YQAA!`e#1N>aHF=bb*z*hXH#Wl$z^o}x##ZrUc=kh%OHWhp=7;?8%Xj||@V?1c ziWoaC$^&04;A|T)!Zd9sUzE&$ODyJaBpvqsw19Uiuq{i#VK1!htkdRWBnb z`{rat=nHArT%^R>u#CjjCkw-7%g53|&7z-;X+ewb?OLWiV|#nuc8mp*LuGSi3IP<<*Wyo9GKV7l0Noa4Jr0g3p_$ z*R9{qn=?IXC#WU>48-k5V2Oc_>P;4_)J@bo1|pf=%Rcbgk=5m)CJZ`caHBTm3%!Z9 z_?7LHr_BXbKKr=JD!%?KhwdYSdu8XxPoA{n8^%_lh5cjRHuCY9Zlpz8g+$f@bw@0V z+6DRMT9c|>1^3D|$Vzc(C?M~iZurGH2pXPT%F!JSaAMdO%!5o0uc&iqHx?ImcX6fI zCApkzc~OOnfzAd_+-DcMp&AOQxE_EsMqKM{%dRMI5`5CT&%mQO?-@F6tE*xL?aEGZ z8^wH@wRl`Izx4sDmU>}Ym{ybUm@F83qqZPD6nFm?t?(7>h*?`fw)L3t*l%*iw0Qu#?$5eq!Qc zpQvqgSxrd83NsdO@lL6#{%lsYXWen~d3p4fGBb7&5xqNYJ)yn84!e1PmPo7ChVd%4 zHUsV0Mh?VpzZD=A6%)Qrd~i7 z96*RPbid;BN{Wh?adeD_p8YU``kOrGkNox3D9~!K?w>#kFz!4lzOWR}puS(DmfjJD z`x0z|qB33*^0mZdM&6$|+T>fq>M%yoy(BEjuh9L0>{P&XJ3enGpoQRx`v6$txXt#c z0#N?b5%srj(4xmPvJxrlF3H%OMB!jvfy z;wx8RzU~lb?h_}@V=bh6p8PSb-dG|-T#A?`c&H2`_!u+uenIZe`6f~A7r)`9m8atC zt(b|6Eg#!Q*DfRU=Ix`#B_dK)nnJ_+>Q<1d7W)eynaVn`FNuN~%B;uO2}vXr5^zi2 z!ifIF5@Zlo0^h~8+ixFBGqtweFc`C~JkSq}&*a3C}L?b5Mh-bW=e)({F_g4O3 zb@SFTK3VD9QuFgFnK4Ve_pXc3{S$=+Z;;4+;*{H}Rc;845rP?DLK6G5Y-xdUKkA6E3Dz&5f{F^FjJQ(NSpZ8q-_!L3LL@H* zxbDF{gd^U3uD;)a)sJwAVi}7@%pRM&?5IaUH%+m{E)DlA_$IA1=&jr{KrhD5q&lTC zAa3c)A(K!{#nOvenH6XrR-y>*4M#DpTTOGQEO5Jr6kni9pDW`rvY*fs|ItV;CVITh z=`rxcH2nEJpkQ^(;1c^hfb8vGN;{{oR=qNyKtR1;J>CByul*+=`NydWnSWJR#I2lN zTvgnR|MBx*XFsfdA&;tr^dYaqRZp*2NwkAZE6kV@1f{76e56eUmGrZ>MDId)oqSWw z7d&r3qfazg+W2?bT}F)4jD6sWaw`_fXZGY&wnGm$FRPFL$HzVTH^MYBHWGCOk-89y zA+n+Q6EVSSCpgC~%uHfvyg@ufE^#u?JH?<73A}jj5iILz4Qqk5$+^U(SX(-qv5agK znUkfpke(KDn~dU0>gdKqjTkVk`0`9^0n_wzXO7R!0Thd@S;U`y)VVP&mOd-2 z(hT(|$=>4FY;CBY9#_lB$;|Wd$aOMT5O_3}DYXEHn&Jrc3`2JiB`b6X@EUOD zVl0S{ijm65@n^19T3l%>*;F(?3r3s?zY{thc4%AD30CeL_4{8x6&cN}zN3fE+x<9; zt2j1RRVy5j22-8U8a6$pyT+<`f+x2l$fd_{qEp_bfxfzu>ORJsXaJn4>U6oNJ#|~p z`*ZC&NPXl&=vq2{Ne79AkQncuxvbOG+28*2wU$R=GOmns3W@HE%^r)Fu%Utj=r9t` zd;SVOnA(=MXgnOzI2@3SGKHz8HN~Vpx&!Ea+Df~`*n@8O=0!b4m?7cE^K*~@fqv9q zF*uk#1@6Re_<^9eElgJD!nTA@K9C732tV~;B`hzZ321Ph=^BH?zXddiu{Du5*IPg} zqDM=QxjT!Rp|#Bkp$(mL)aar)f(dOAXUiw81pX0DC|Y4;>Vz>>DMshoips^8Frdv} zlTD=cKa48M>dR<>(YlLPOW%rokJZNF2gp8fwc8b2sN+i6&-pHr?$rj|uFgktK@jg~ zIFS(%=r|QJ=$kvm_~@n=ai1lA{7Z}i+zj&yzY+!t$iGUy|9jH#&oTNJ;JW-3n>DF+ z3aCOzqn|$X-Olu_p7brzn`uk1F*N4@=b=m;S_C?#hy{&NE#3HkATrg?enaVGT^$qIjvgc61y!T$9<1B@?_ibtDZ{G zeXInVr5?OD_nS_O|CK3|RzzMmu+8!#Zb8Ik;rkIAR%6?$pN@d<0dKD2c@k2quB%s( zQL^<_EM6ow8F6^wJN1QcPOm|ehA+dP(!>IX=Euz5qqIq}Y3;ibQtJnkDmZ8c8=Cf3 zu`mJ!Q6wI7EblC5RvP*@)j?}W=WxwCvF3*5Up_`3*a~z$`wHwCy)2risye=1mSp%p zu+tD6NAK3o@)4VBsM!@);qgsjgB$kkCZhaimHg&+k69~drbvRTacWKH;YCK(!rC?8 zP#cK5JPHSw;V;{Yji=55X~S+)%(8fuz}O>*F3)hR;STU`z6T1aM#Wd+FP(M5*@T1P z^06O;I20Sk!bxW<-O;E081KRdHZrtsGJflFRRFS zdi5w9OVDGSL3 zNrC7GVsGN=b;YH9jp8Z2$^!K@h=r-xV(aEH@#JicPy;A0k1>g1g^XeR`YV2HfmqXY zYbRwaxHvf}OlCAwHoVI&QBLr5R|THf?nAevV-=~V8;gCsX>jndvNOcFA+DI+zbh~# zZ7`qNk&w+_+Yp!}j;OYxIfx_{f0-ONc?mHCiCUak=>j>~>YR4#w# zuKz~UhT!L~GfW^CPqG8Lg)&Rc6y^{%3H7iLa%^l}cw_8UuG;8nn9)kbPGXS}p3!L_ zd#9~5CrH8xtUd?{d2y^PJg+z(xIfRU;`}^=OlehGN2=?}9yH$4Rag}*+AWotyxfCJ zHx=r7ZH>j2kV?%7WTtp+-HMa0)_*DBBmC{sd$)np&GEJ__kEd`xB5a2A z*J+yx>4o#ZxwA{;NjhU*1KT~=ZK~GAA;KZHDyBNTaWQ1+;tOFFthnD)DrCn`DjBZ% zk$N5B4^$`n^jNSOr=t(zi8TN4fpaccsb`zOPD~iY=UEK$0Y70bG{idLx@IL)7^(pL z{??Bnu=lDeguDrd%qW1)H)H`9otsOL-f4bSu};o9OXybo6J!Lek`a4ff>*O)BDT_g z<6@SrI|C9klY(>_PfA^qai7A_)VNE4c^ZjFcE$Isp>`e5fLc)rg@8Q_d^Uk24$2bn z9#}6kZ2ZxS9sI(RqT7?El2@B+($>eBQrNi_k#CDJ8D9}8$mmm z4oSKO^F$i+NG)-HE$O6s1--6EzJa?C{x=QgK&c=)b(Q9OVoAXYEEH20G|q$}Hue%~ zO3B^bF=t7t48sN zWh_zA`w~|){-!^g?6Mqf6ieV zFx~aPUOJGR=4{KsW7I?<=J2|lY`NTU=lt=%JE9H1vBpkcn=uq(q~=?iBt_-r(PLBM zP-0dxljJO>4Wq-;stY)CLB4q`-r*T$!K2o}?E-w_i>3_aEbA^MB7P5piwt1dI-6o!qWCy0 ztYy!x9arGTS?kabkkyv*yxvsPQ7Vx)twkS6z2T@kZ|kb8yjm+^$|sEBmvACeqbz)RmxkkDQX-A*K!YFziuhwb|ym>C$}U|J)4y z$(z#)GH%uV6{ec%Zy~AhK|+GtG8u@c884Nq%w`O^wv2#A(&xH@c5M`Vjk*SR_tJnq z0trB#aY)!EKW_}{#L3lph5ow=@|D5LzJYUFD6 z7XnUeo_V0DVSIKMFD_T0AqAO|#VFDc7c?c-Q%#u00F%!_TW1@JVnsfvm@_9HKWflBOUD~)RL``-!P;(bCON_4eVdduMO>?IrQ__*zE@7(OX zUtfH@AX*53&xJW*Pu9zcqxGiM>xol0I~QL5B%Toog3Jlenc^WbVgeBvV8C8AX^Vj& z^I}H})B=VboO%q1;aU5ACMh{yK4J;xlMc`jCnZR^!~LDs_MP&8;dd@4LDWw~*>#OT zeZHwdQWS!tt5MJQI~cw|Ka^b4c|qyd_ly(+Ql2m&AAw^ zQeSXDOOH!!mAgzAp0z)DD>6Xo``b6QwzUV@w%h}Yo>)a|xRi$jGuHQhJVA%>)PUvK zBQ!l0hq<3VZ*RnrDODP)>&iS^wf64C;MGqDvx>|p;35%6(u+IHoNbK z;Gb;TneFo*`zUKS6kwF*&b!U8e5m4YAo03a_e^!5BP42+r)LFhEy?_7U1IR<; z^0v|DhCYMSj<-;MtY%R@Fg;9Kky^pz_t2nJfKWfh5Eu@_l{^ph%1z{jkg5jQrkvD< z#vdK!nku*RrH~TdN~`wDs;d>XY1PH?O<4^U4lmA|wUW{Crrv#r%N>7k#{Gc44Fr|t z@UZP}Y-TrAmnEZ39A*@6;ccsR>)$A)S>$-Cj!=x$rz7IvjHIPM(TB+JFf{ehuIvY$ zsDAwREg*%|=>Hw$`us~RP&3{QJg%}RjJKS^mC_!U;E5u>`X`jW$}P`Mf}?7G7FX#{ zE(9u1SO;3q@ZhDL9O({-RD+SqqPX)`0l5IQu4q)49TUTkxR(czeT}4`WV~pV*KY&i zAl3~X%D2cPVD^B43*~&f%+Op)wl<&|D{;=SZwImydWL6@_RJjxP2g)s=dH)u9Npki zs~z9A+3fj0l?yu4N0^4aC5x)Osnm0qrhz@?nwG_`h(71P znbIewljU%T*cC=~NJy|)#hT+lx#^5MuDDnkaMb*Efw9eThXo|*WOQzJ*#3dmRWm@! zfuSc@#kY{Um^gBc^_Xdxnl!n&y&}R4yAbK&RMc+P^Ti;YIUh|C+K1|=Z^{nZ}}rxH*v{xR!i%qO~o zTr`WDE@k$M9o0r4YUFFeQO7xCu_Zgy)==;fCJ94M_rLAv&~NhfvcLWCoaGg2ao~3e zBG?Ms9B+efMkp}7BhmISGWmJsKI@a8b}4lLI48oWKY|8?zuuNc$lt5Npr+p7a#sWu zh!@2nnLBVJK!$S~>r2-pN||^w|fY`CT{TFnJy`B|e5;=+_v4l8O-fkN&UQbA4NKTyntd zqK{xEKh}U{NHoQUf!M=2(&w+eef77VtYr;xs%^cPfKLObyOV_9q<(%76-J%vR>w9!us-0c-~Y?_EVS%v!* z15s2s3eTs$Osz$JayyH|5nPAIPEX=U;r&p;K14G<1)bvn@?bM5kC{am|C5%hyxv}a z(DeSKI5ZfZ1*%dl8frIX2?);R^^~LuDOpNpk-2R8U1w92HmG1m&|j&J{EK=|p$;f9 z7Rs5|jr4r8k5El&qcuM+YRlKny%t+1CgqEWO>3;BSRZi(LA3U%Jm{@{y+A+w(gzA< z7dBq6a1sEWa4cD0W7=Ld9z0H7RI^Z7vl(bfA;72j?SWCo`#5mVC$l1Q2--%V)-uN* z9ha*s-AdfbDZ8R8*fpwjzx=WvOtmSzGFjC#X)hD%Caeo^OWjS(3h|d9_*U)l%{Ab8 zfv$yoP{OuUl@$(-sEVNt{*=qi5P=lpxWVuz2?I7Dc%BRc+NGNw+323^ z5BXGfS71oP^%apUo(Y#xkxE)y?>BFzEBZ}UBbr~R4$%b7h3iZu3S(|A;&HqBR{nK& z$;GApNnz=kNO^FL&nYcfpB7Qg;hGJPsCW44CbkG1@l9pn0`~oKy5S777uH)l{irK!ru|X+;4&0D;VE*Ii|<3P zUx#xUqvZT5kVQxsF#~MwKnv7;1pR^0;PW@$@T7I?s`_rD1EGUdSA5Q(C<>5SzE!vw z;{L&kKFM-MO>hy#-8z`sdVx})^(Dc-dw;k-h*9O2_YZw}|9^y-|8RQ`BWJUJL(Cer zP5Z@fNc>pTXABbTRY-B5*MphpZv6#i802giwV&SkFCR zGMETyUm(KJbh+&$8X*RB#+{surjr;8^REEt`2&Dubw3$mx>|~B5IKZJ`s_6fw zKAZx9&PwBqW1Oz0r0A4GtnZd7XTKViX2%kPfv+^X3|_}RrQ2e3l=KG_VyY`H?I5&CS+lAX5HbA%TD9u6&s#v!G> zzW9n4J%d5ye7x0y`*{KZvqyXUfMEE^ZIffzI=Hh|3J}^yx7eL=s+TPH(Q2GT-sJ~3 zI463C{(ag7-hS1ETtU;_&+49ABt5!A7CwLwe z=SoA8mYZIQeU;9txI=zcQVbuO%q@E)JI+6Q!3lMc=Gbj(ASg-{V27u>z2e8n;Nc*pf}AqKz1D>p9G#QA+7mqqrEjGfw+85Uyh!=tTFTv3|O z+)-kFe_8FF_EkTw!YzwK^Hi^_dV5x-Ob*UWmD-})qKj9@aE8g240nUh=g|j28^?v7 zHRTBo{0KGaWBbyX2+lx$wgXW{3aUab6Bhm1G1{jTC7ota*JM6t+qy)c5<@ zpc&(jVdTJf(q3xB=JotgF$X>cxh7k*(T`-V~AR+`%e?YOeALQ2Qud( zz35YizXt(aW3qndR}fTw1p()Ol4t!D1pitGNL95{SX4ywzh0SF;=!wf=?Q?_h6!f* zh7<+GFi)q|XBsvXZ^qVCY$LUa{5?!CgwY?EG;*)0ceFe&=A;!~o`ae}Z+6me#^sv- z1F6=WNd6>M(~ z+092z>?Clrcp)lYNQl9jN-JF6n&Y0mp7|I0dpPx+4*RRK+VQI~>en0Dc;Zfl+x z_e_b7s`t1_A`RP3$H}y7F9_na%D7EM+**G_Z0l_nwE+&d_kc35n$Fxkd4r=ltRZhh zr9zER8>j(EdV&Jgh(+i}ltESBK62m0nGH6tCBr90!4)-`HeBmz54p~QP#dsu%nb~W z7sS|(Iydi>C@6ZM(Us!jyIiszMkd)^u<1D+R@~O>HqZIW&kearPWmT>63%_t2B{_G zX{&a(gOYJx!Hq=!T$RZ&<8LDnxsmx9+TBL0gTk$|vz9O5GkK_Yx+55^R=2g!K}NJ3 zW?C;XQCHZl7H`K5^BF!Q5X2^Mj93&0l_O3Ea3!Ave|ixx+~bS@Iv18v2ctpSt4zO{ zp#7pj!AtDmti$T`e9{s^jf(ku&E|83JIJO5Qo9weT6g?@vX!{7)cNwymo1+u(YQ94 zopuz-L@|5=h8A!(g-MXgLJC0MA|CgQF8qlonnu#j z;uCeq9ny9QSD|p)9sp3ebgY3rk#y0DA(SHdh$DUm^?GI<>%e1?&}w(b zdip1;P2Z=1wM+$q=TgLP$}svd!vk+BZ@h<^4R=GS2+sri7Z*2f`9 z5_?i)xj?m#pSVchk-SR!2&uNhzEi+#5t1Z$o0PoLGz*pT64%+|Wa+rd5Z}60(j?X= z{NLjtgRb|W?CUADqOS@(*MA-l|E342NxRaxLTDqsOyfWWe%N(jjBh}G zm7WPel6jXijaTiNita+z(5GCO0NM=Melxud57PP^d_U## zbA;9iVi<@wr0DGB8=T9Ab#2K_#zi=$igyK48@;V|W`fg~7;+!q8)aCOo{HA@vpSy-4`^!ze6-~8|QE||hC{ICKllG9fbg_Y7v z$jn{00!ob3!@~-Z%!rSZ0JO#@>|3k10mLK0JRKP-Cc8UYFu>z93=Ab-r^oL2 zl`-&VBh#=-?{l1TatC;VweM^=M7-DUE>m+xO7Xi6vTEsReyLs8KJ+2GZ&rxw$d4IT zPXy6pu^4#e;;ZTsgmG+ZPx>piodegkx2n0}SM77+Y*j^~ICvp#2wj^BuqRY*&cjmL zcKp78aZt>e{3YBb4!J_2|K~A`lN=u&5j!byw`1itV(+Q_?RvV7&Z5XS1HF)L2v6ji z&kOEPmv+k_lSXb{$)of~(BkO^py&7oOzpjdG>vI1kcm_oPFHy38%D4&A4h_CSo#lX z2#oqMCTEP7UvUR3mwkPxbl8AMW(e{ARi@HCYLPSHE^L<1I}OgZD{I#YH#GKnpRmW3 z2jkz~Sa(D)f?V?$gNi?6)Y;Sm{&?~2p=0&BUl_(@hYeX8YjaRO=IqO7neK0RsSNdYjD zaw$g2sG(>JR=8Iz1SK4`*kqd_3-?;_BIcaaMd^}<@MYbYisWZm2C2|Np_l|8r9yM|JkUngSo@?wci(7&O9a z%|V(4C1c9pps0xxzPbXH=}QTxc2rr7fXk$9`a6TbWKPCz&p=VsB8^W96W=BsB|7bc zf(QR8&Ktj*iz)wK&mW`#V%4XTM&jWNnDF56O+2bo<3|NyUhQ%#OZE8$Uv2a@J>D%t zMVMiHh?es!Ex19q&6eC&L=XDU_BA&uR^^w>fpz2_`U87q_?N2y;!Z!bjoeKrzfC)} z?m^PM=(z{%n9K`p|7Bz$LuC7!>tFOuN74MFELm}OD9?%jpT>38J;=1Y-VWtZAscaI z_8jUZ#GwWz{JqvGEUmL?G#l5E=*m>`cY?m*XOc*yOCNtpuIGD+Z|kn4Xww=BLrNYS zGO=wQh}Gtr|7DGXLF%|`G>J~l{k^*{;S-Zhq|&HO7rC_r;o`gTB7)uMZ|WWIn@e0( zX$MccUMv3ABg^$%_lNrgU{EVi8O^UyGHPNRt%R!1#MQJn41aD|_93NsBQhP80yP<9 zG4(&0u7AtJJXLPcqzjv`S~5;Q|5TVGccN=Uzm}K{v)?f7W!230C<``9(64}D2raRU zAW5bp%}VEo{4Rko`bD%Ehf=0voW?-4Mk#d3_pXTF!-TyIt6U+({6OXWVAa;s-`Ta5 zTqx&8msH3+DLrVmQOTBOAj=uoxKYT3DS1^zBXM?1W+7gI!aQNPYfUl{3;PzS9*F7g zWJN8x?KjBDx^V&6iCY8o_gslO16=kh(|Gp)kz8qlQ`dzxQv;)V&t+B}wwdi~uBs4? zu~G|}y!`3;8#vIMUdyC7YEx6bb^1o}G!Jky4cN?BV9ejBfN<&!4M)L&lRKiuMS#3} z_B}Nkv+zzxhy{dYCW$oGC&J(Ty&7%=5B$sD0bkuPmj7g>|962`(Q{ZZMDv%YMuT^KweiRDvYTEop3IgFv#)(w>1 zSzH>J`q!LK)c(AK>&Ib)A{g`Fdykxqd`Yq@yB}E{gnQV$K!}RsgMGWqC3DKE(=!{}ekB3+(1?g}xF>^icEJbc z5bdxAPkW90atZT+&*7qoLqL#p=>t-(-lsnl2XMpZcYeW|o|a322&)yO_8p(&Sw{|b zn(tY$xn5yS$DD)UYS%sP?c|z>1dp!QUD)l;aW#`%qMtQJjE!s2z`+bTSZmLK7SvCR z=@I4|U^sCwZLQSfd*ACw9B@`1c1|&i^W_OD(570SDLK`MD0wTiR8|$7+%{cF&){$G zU~|$^Ed?TIxyw{1$e|D$050n8AjJvvOWhLtLHbSB|HIfhMpqVf>AF&}ZQHhOJ14Bz zww+XL+qP}nww+W`F>b!by|=&a(cM4JIDhsTXY8@|ntQG}-}jm0&Bcj|LV(#sc=BNS zRjh;k9l>EdAFdd)=H!U`~$WP*}~^3HZ_?H>gKw>NBa;tA8M1{>St|)yDF_=~{KEPAGkg3VB`QCHol!AQ0|?e^W?81f{@()Wy!vQ$bY; z0ctx)l7VK83d6;dp!s{Nu=SwXZ8lHQHC*J2g@P0a={B8qHdv(+O3wV=4-t4HK1+smO#=S; z3cSI#Nh+N@AqM#6wPqjDmQM|x95JG|l1#sAU|>I6NdF*G@bD?1t|ytHlkKD+z9}#j zbU+x_cR-j9yX4s{_y>@zk*ElG1yS({BInGJcIT>l4N-DUs6fufF#GlF2lVUNOAhJT zGZThq54GhwCG(h4?yWR&Ax8hU<*U)?g+HY5-@{#ls5CVV(Wc>Bavs|l<}U|hZn z_%m+5i_gaakS*Pk7!v&w3&?R5Xb|AkCdytTY;r+Z7f#Id=q+W8cn)*9tEet=OG+Y} z58U&!%t9gYMx2N=8F?gZhIjtkH!`E*XrVJ?$2rRxLhV1z82QX~PZi8^N5z6~f-MUE zLKxnNoPc-SGl7{|Oh?ZM$jq67sSa)Wr&3)0YxlJt(vKf!-^L)a|HaPv*IYXb;QmWx zsqM>qY;tpK3RH-omtta+Xf2Qeu^$VKRq7`e$N-UCe1_2|1F{L3&}M0XbJ@^xRe&>P zRdKTgD6601x#fkDWkoYzRkxbn#*>${dX+UQ;FbGnTE-+kBJ9KPn)501#_L4O_k`P3 zm+$jI{|EC?8BXJY{P~^f-{**E53k%kVO$%p+=H5DiIdwMmUo>2euq0UzU90FWL!>; z{5@sd0ecqo5j!6AH@g6Mf3keTP$PFztq}@)^ZjK;H6Go$#SV2|2bAFI0%?aXgVH$t zb4Kl`$Xh8qLrMbZUS<2*7^F0^?lrOE=$DHW+O zvLdczsu0^TlA6RhDy3=@s!k^1D~Awulk!Iyo#}W$xq8{yTAK!CLl={H0@YGhg-g~+ z(u>pss4k#%8{J%~%8=H5!T`rqK6w^es-cNVE}=*lP^`i&K4R=peg1tdmT~UAbDKc& zg%Y*1E{hBf<)xO>HDWV7BaMWX6FW4ou1T2m^6{Jb!Su1UaCCYY8RR8hAV$7ho|FyEyP~ zEgK`@%a$-C2`p zV*~G>GOAs*3KN;~IY_UR$ISJxB(N~K>=2C2V6>xTmuX4klRXdrJd&UPAw7&|KEwF8Zcy2j-*({gSNR1^p02Oj88GN9a_Hq;Skdp}kO0;FLbje%2ZvPiltDZgv^ z#pb4&m^!79;O8F+Wr9X71laPY!CdNXG?J6C9KvdAE2xWW1>U~3;0v≫L+crb^Bz zc+Nw%zgpZ6>!A3%lau!Pw6`Y#WPVBtAfKSsqwYDWQK-~ zz(mx=nJ6-8t`YXB{6gaZ%G}Dmn&o500Y}2Rd?e&@=hBEmB1C=$OMBfxX__2c2O4K2#(0ksclP$SHp*8jq-1&(<6(#=6&H`Nlc2RVC4->r6U}sTY<1? zn@tv7XwUs-c>Lcmrm5AE0jHI5={WgHIow6cX=UK)>602(=arbuAPZ37;{HTJSIO%9EL`Et5%J7$u_NaC(55x zH^qX^H}*RPDx)^c46x>js=%&?y?=iFs^#_rUl@*MgLD92E5y4B7#EDe9yyn*f-|pQ zi>(!bIg6zY5fLSn@;$*sN|D2A{}we*7+2(4&EhUV%Qqo5=uuN^xt_hll7=`*mJq6s zCWUB|s$)AuS&=)T&_$w>QXHqCWB&ndQ$y4-9fezybZb0bYD^zeuZ>WZF{rc>c4s`` zgKdppTB|o>L1I1hAbnW%H%EkFt%yWC|0~+o7mIyFCTyb?@*Ho)eu(x`PuO8pLikN> z6YeI`V?AUWD(~3=8>}a6nZTu~#QCK(H0+4!ql3yS`>JX;j4+YkeG$ZTm33~PLa3L} zksw7@%e-mBM*cGfz$tS4LC^SYVdBLsR}nAprwg8h2~+Cv*W0%izK+WPVK}^SsL5R_ zpA}~G?VNhJhqx2he2;2$>7>DUB$wN9_-adL@TqVLe=*F8Vsw-yho@#mTD6*2WAr6B zjtLUh`E(;#p0-&$FVw(r$hn+5^Z~9J0}k;j$jL1;?2GN9s?}LASm?*Rvo@?E+(}F& z+=&M-n`5EIz%%F^e)nnWjkQUdG|W^~O|YeY4Fz}>qH2juEere}vN$oJN~9_Th^&b{ z%IBbET*E8%C@jLTxV~h#mxoRrJCF{!CJOghjuKOyl_!Jr?@4Upo7u>fTGtfm|CH2v z&9F+>;6aFbYXLj3{yZ~Yn1J2%!)A3~j2$`jOy{XavW@t)g}}KUVjCWG0OUc7aBc=2 zR3^u=dT47=5SmT{K1aGaVZkOx|24T-J0O$b9dfB25J|7yb6frwS6wZ1^y%EWOm}S< zc1SdYhfsdLG*FB-;!QLV3D!d~hnXTGVQVck9x%=B(Kk8c3y%f0nR95_TbY;l=obSl zEE@fp0|8Q$b3(+DXh?d0FEloGhO0#11CLQT5qtEckBLe-VN-I>9ys}PVK0r;0!jIG zH_q$;a`3Xv9P_V2ekV1SMzd#SKo<1~Dq2?M{(V;AwhH_2x@mN$=|=cG0<3o^j_0OF z7|WJ-f2G=7sA4NVGU2X5`o*D2T7(MbmZ2(oipooE{R?9!{WxX!%ofhsrPAxoIk!Kr z>I$a{Zq=%KaLrDCIL^gmA3z{2z%Wkr)b$QHcNUA^QwydWMJmxymO0QS22?mo%4(Md zgME(zE}ub--3*wGjV`3eBMCQG-@Gel1NKZDGuqobN|mAt0{@ZC9goI|BSmGBTUZ(`Xt z^e2LiMg?6E?G*yw(~K8lO(c4)RY7UWxrXzW^iCg-P41dUiE(i+gDmmAoB?XOB}+Ln z_}rApiR$sqNaT4frw69Wh4W?v(27IlK$Toy<1o)GeF+sGzYVeJ`F)3`&2WDi^_v67 zg;@ehwl3=t+}(DJtOYO!s`jHyo-}t@X|U*9^sIfaZfh;YLqEFmZ^E;$_XK}%eq;>0 zl?+}*kh)5jGA}3daJ*v1knbW0GusR1+_xD`MFPZc3qqYMXd>6*5?%O5pC7UVs!E-` zuMHc6igdeFQ`plm+3HhP)+3I&?5bt|V8;#1epCsKnz0%7m9AyBmz06r90n~9o;K30 z=fo|*`Qq%dG#23bVV9Jar*zRcV~6fat9_w;x-quAwv@BkX0{9e@y0NB(>l3#>82H6 z^US2<`=M@6zX=Pz>kb8Yt4wmeEo%TZ=?h+KP2e3U9?^Nm+OTx5+mVGDvgFee%}~~M zK+uHmj44TVs}!A}0W-A92LWE%2=wIma(>jYx;eVB*%a>^WqC7IVN9{o?iw{e4c=CG zC#i=cRJZ#v3 zF^9V+7u?W=xCY%2dvV_0dCP%5)SH*Xm|c#rXhwEl*^{Ar{NVoK*H6f5qCSy`+|85e zjGaKqB)p7zKNKI)iWe6A9qkl=rTjs@W1Crh(3G57qdT0w2ig^{*xerzm&U>YY{+fZbkQ#;^<$JniUifmAuEd^_M(&?sTrd(a*cD! zF*;`m80MrZ^> zaF{}rDhEFLeH#`~rM`o903FLO?qw#_Wyb5}13|0agjSTVkSI6Uls)xAFZifu@N~PM zQ%o?$k)jbY0u|45WTLAirUg3Zi1E&=G#LnSa89F3t3>R?RPcmkF}EL-R!OF_r1ZN` z?x-uHH+4FEy>KrOD-$KHg3$-Xl{Cf0;UD4*@eb~G{CK-DXe3xpEEls?SCj^p z$Uix(-j|9f^{z0iUKXcZQen}*`Vhqq$T?^)Ab2i|joV;V-qw5reCqbh(8N)c%!aB< zVs+l#_)*qH_iSZ_32E~}>=wUO$G_~k0h@ch`a6Wa zsk;<)^y=)cPpHt@%~bwLBy;>TNrTf50BAHUOtt#9JRq1ro{w80^sm-~fT>a$QC;<| zZIN%&Uq>8`Js_E((_1sewXz3VlX|-n8XCfScO`eL|H&2|BPZhDn}UAf_6s}|!XpmUr90v|nCutzMjb9|&}#Y7fj_)$alC zM~~D6!dYxhQof{R;-Vp>XCh1AL@d-+)KOI&5uKupy8PryjMhTpCZnSIQ9^Aq+7=Mb zCYCRvm4;H=Q8nZWkiWdGspC_Wvggg|7N`iED~Eap)Th$~wsxc(>(KI>{i#-~Dd8iQ zzonqc9DW1w4a*}k`;rxykUk+~N)|*I?@0901R`xy zN{20p@Ls<%`1G1Bx87Vm6Z#CA`QR(x@t8Wc?tpaunyV^A*-9K9@P>hAWW9Ev)E$gb z<(t?Te6GcJX2&0% z403pe>e)>m-^qlJU^kYIH)AutgOnq!J>FoMXhA-aEx-((7|(*snUyxa+5$wx8FNxS zKuVAVWArlK#kDzEM zqR?&aXIdyvxq~wF?iYPho*(h?k zD(SBpRDZ}z$A})*Qh!9&pZZRyNixD!8)B5{SK$PkVET(yd<8kImQ3ILe%jhx8Ga-1 zE}^k+Eo^?c4Y-t2_qXiVwW6i9o2qosBDj%DRPNT*UXI0=D9q{jB*22t4HHcd$T&Xi zT=Vte*Gz2E^qg%b7ev04Z&(;=I4IUtVJkg<`N6i7tjUn-lPE(Y4HPyJKcSjFnEzCH zPO(w%LmJ_=D~}PyfA91H4gCaf-qur3_KK}}>#9A}c5w@N;-#cHph=x}^mQ3`oo`Y$ope#)H9(kQK zGyt<7eNPuSAs$S%O>2ElZ{qtDIHJ!_THqTwcc-xfv<@1>IJ;YTv@!g-zDKBKAH<

Zet1e^8c}8fE97XH}+lF{qbF<`Y%dU|I!~Y`ZrVfKX82i z)(%!Tcf~eE^%2_`{WBPGPU@1NB5SCXe1sAI<4&n1IwO{&S$ThWn37heGOSW%nW7*L zxh0WK!E7zh%6yF-7%~l@I~b`2=*$;RYbi(I#zp$gL_d39U4A)KuB( zcS0bt48&%G_I~( zL(}w&2NA6#$=|g)J+-?ehHflD^lr77ngdz=dszFI;?~ZxeJv=gsm?4$$6#V==H{fa zqO!EkT>1-OQSJoX)cN}XsB;shvrHRwTH(I2^Ah4|rizn!V7T7fLh~Z<`Q+?zEMVxh z$=-x^RR*PlhkV_8mshTvs+zmZWY&Jk{9LX0Nx|+NAEq-^+Rh|ZlinVZ=e8=`WQt;e@= zPU}^1cG*O;G7l{Y#nl znp`y%CO_SC7gk0i0gY&phM04Y)~vU0!3$V$2T+h(1ZS+cCgc zaC?3M;B48^faGo>h~--#FNFauH?0BJJ6_nG5qOlr>k~%DCSJaOfl%KWHusw>tGrTxAhlEVDxc8R2C-)LCt&$Rt9IKor=ml7jirX@?WW+M z^I{b}MD5r$s>^^sN@&g`cXD~S_u09xo;{;noKZatIuzqd zW1e7oTl9>g8opPBT(p+&fo0F#!c{NFYYpIZ6u8hOB{F#{nP)@})X20$3iJtG$cO zJ$Oxl_qH{sL5d?=D$2M4C3Ajc;GN0(B-HVT;@pJ-LvIrN%|SY?t}g!J>ufQrR%hoY z!nr$tq~N%)9}^tEip93XW=MQ1@XovSvn`PTqXeT9@_7hGv4%LK1M**Q%UKi|(v@1_ zKGe*@+1%Y4v&`;5vUL`C&{tc+_7HFs7*OtjY8@Gg`C4O&#An{0xOvgNSehTHS~_1V z=daxCMzI5b_ydM5$z zZl`a{mM}i@x;=QyaqJY&{Q^R*^1Yzq!dHH~UwCCga+Us~2wk59ArIYtSw9}tEmjbo z5!JA=`=HP*Ae~Z4Pf7sC^A3@Wfa0Ax!8@H_&?WVe*)9B2y!8#nBrP!t1fqhI9jNMd zM_5I)M5z6Ss5t*f$Eh{aH&HBeh310Q~tRl3wCEcZ>WCEq%3tnoHE)eD=)XFQ7NVG5kM zaUtbnq2LQomJSWK)>Zz1GBCIHL#2E>T8INWuN4O$fFOKe$L|msB3yTUlXES68nXRX zP6n*zB+kXqqkpQ3OaMc9GqepmV?Ny!T)R@DLd`|p5ToEvBn(~aZ%+0q&vK1)w4v0* zgW44F2ixZj0!oB~^3k|vni)wBh$F|xQN>~jNf-wFstgiAgB!=lWzM&7&&OYS=C{ce zRJw|)PDQ@3koZfm`RQ$^_hEN$GuTIwoTQIDb?W&wEo@c75$dW(ER6q)qhF`{#7UTuPH&)w`F!w z0EKs}=33m}_(cIkA2rBWvApydi0HSOgc>6tu&+hmRSB%)s`v_NujJNhKLS3r6hv~- z)Hm@?PU{zd0Tga)cJWb2_!!9p3sP%Z zAFT|jy;k>4X)E>4fh^6=SxV5w6oo`mus&nWo*gJL zZH{SR!x)V)y=Qc7WEv-xLR zhD4OcBwjW5r+}pays`o)i$rcJb2MHLGPmeOmt5XJDg@(O3PCbxdDn{6qqb09X44T zh6I|s=lM6Nr#cGaA5-eq*T=LQ6SlRq*`~`b+dVi5^>el1p;#si6}kK}>w;1 z6B1dz{q_;PY{>DBQ+v@1pfXTd5a*^H9U*;qdj@XBF}MoSSQxVXeUpEM5Z0909&8$pRfR|B(t0ox&xl8{8mUNd#(zWONW{oycv$VjP1>q;jU@ z@+8E~fjz*I54OFFaQ{A5jn1w>r;l!NRlI(8q3*%&+tM?lov_G3wB`<}bQ>1=&xUht zmti5VZzV1Cx006Yzt|%Vwid>QPX8Nfa8|sue7^un@C+!3h!?-YK>lSfNIHh|0kL8v zbv_BklQ4HOqje|@Fyxn%IvL$N&?m(KN;%`I$N|muStjSsgG;gP4Smgz$2u(mG;DXP zf~uQ z212x^l6!MW>V@ORUGSFLAAjz3i5zO$=UmD_zhIk2OXUz^LkDLWjla*PW?l;`LLos> z7FBvCr)#)XBByDm(=n%{D>BcUq>0GOV9`i-(ZSI;RH1rdrAJ--f0uuAQ4odl z_^$^U_)0BBJwl@6R#&ZtJN+@a(4~@oYF)yG+G#3=)ll8O#Zv3SjV#zSXTW3h9kqn* z@AHL=vf~KMas}6{+u=}QFumr-!c=(BFP_dwvrdehzTyqco)m@xRc=6b#Dy+KD*-Bq zK=y*1VAPJ;d(b?$2cz{CUeG(0`k9_BIuUki@iRS5lp3=1#g)A5??1@|p=LOE|FNd; z-?5MLKd-5>yQ7n__5W^3C!_`hP(o%_E3BKEmo1h=H(7;{6$XRRW6{u+=oQX<((xAJ zNRY`Egtn#B1EBGHLy^eM5y}Jy0h!GAGhb7gZJoZI-9WuSRw)GVQAAcKd4Qm)pH`^3 zq6EIM}Q zxZGx%aLnNP1an=;o8p9+U^>_Bi`e23E^X|}MB&IkS+R``plrRzTE%ncmfvEW#AHJ~ znmJ`x&ez6eT21aLnoI`%pYYj zzQ?f^ob&Il;>6Fe>HPhAtTZa*B*!;;foxS%NGYmg!#X%)RBFe-acahHs3nkV61(E= zhekiPp1d@ACtA=cntbjuv+r-Zd`+lwKFdqZuYba_ey`&H<Psu;Tzwt;-LQxvv<_D5;ik7 zwETZe`+voUhk%$s2-7Rqfl`Ti_{(fydI(DAHKr<66;rYa6p8AD+NEc@Fd@%m`tiK% z=Mebzrtp=*Q%a}2UdK4J&5#tCN5PX>W=(9rUEXZ8yjRu+7)mFpKh{6;n%!bI(qA9kfyOtstGtOl zX!@*O0fly*L4k##fsm&V0j9Lj<_vu1)i?!#xTB7@2H&)$Kzt@r(GH=xRZlIimTDd_o(%9xO388LwC#;vQ?7OvRU_s< zDS@6@g}VnvQ+tn(C#sx0`J^T4WvFxYI17;uPs-Ub{R`J-NTdtBGl+Q>e81Z3#tDUr ztnVc*p{o|RNnMYts4pdw=P!uJkF@8~h)oV4dXu5F7-j0AW|=mt!QhP&ZV!!82*c7t zuOm>B*2gFtq;A8ynZ~Ms?!gEi5<{R_8tRN%aGM!saR4LJQ|?9w>Ff_61(+|ol_vL4 z-+N>fushRbkB4(e{{SQ}>6@m}s1L!-#20N&h%srA=L50?W9skMF9NGfQ5wU*+0<@> zLww8%f+E0Rc81H3e_5^DB@Dn~TWYk}3tqhO{7GDY;K7b*WIJ-tXnYM@z4rn(LGi?z z8%$wivs)fC#FiJh?(SbH-1bgdmHw&--rn7zBWe1xAhDdv#IRB@DGy}}zS%M0(F_3_ zLb-pWsdJ@xXE;=tpRAw?yj(Gz=i$;bsh&o2XN%24b6+?_gJDBeY zws3PE2u!#Cec>aFMk#ECxDlAs;|M7@LT8)Y4(`M}N6IQ{0YtcA*8e42!n^>`0$LFU zUCq2IR2(L`f++=85M;}~*E($nE&j;p{l%xchiTau*tB9bI= zn~Ygd@<+9DrXxoGPq}@vI1Q3iEfKRleuy*)_$+hg?+GOgf1r?d@Or42|s|D>XMa;ebr1uiTNUq@heusd6%WwJqyCCv!L*qou9l!B22H$bQ z)<)IA>Yo77S;|`fqBk!_PhLJEQb0wd1Z|`pCF;hol!34iQYtqu3K=$QxLW7(HFx~v>`vVRr zyqk^B4~!3F8t8Q_D|GLRrAbbQDf??D&Jd|mgw*t1YCd)CM2$76#Cqj1bD*vADwavp zS<`n@gLU4pwCqNPsIfHKl{5}gu9t-o+O< z??!fMqMrt$s}02pdBbOScUrc1T*{*-ideR6(1q4@oC6mxg8v8Y^h^^hfx6| z|Mld6Ax1CuSlmSJmHwdOix?$8emihK#&8&}u8m!#T1+c5u!H)>QW<7&R$eih)xkov zHvvEIJHbkt+2KQ<-bMR;2SYX?8SI=_<-J!GD5@P2FJ}K z5u82YFotCJF(dUeJFRX_3u8%iIYbRS??A?;iVO?84c}4Du9&jG<#urlZ_Unrcg8dR z!5I3%9F*`qwk#joKG_Q%5_xpU7|jm4h0+l$p;g%Tr>i74#3QnMXdz|1l2MQN$yw|5 zThMw15BxjWf2{KM)XtZ+e#N)ihlkxPe=5ymT9>@Ym%_LF}o z1XhCP`3E1A{iVoHA#|O|&5=w;=j*Qf`;{mBAK3={y-YS$`!0UmtrvzHBfR*s{z<0m zW>4C=%N98hZlUhwAl1X`rR)oL0&A`gv5X79??p_==g*n4$$8o5g9V<)F^u7v0Vv^n z1sp8{W@g6eWv2;A31Rhf5j?KJhITYfXWZsl^`7z`CFtnFrHUWiD?$pwU6|PQjs|7RA0o9ARk^9$f`u3&C|#Z3iYdh<0R`l2`)6+ z6tiDj@xO;Q5PDTYSxsx6n>bj+$JK8IPJ=U5#dIOS-zwyK?+t^V`zChdW|jpZuReE_ z)e~ywgFe!0q|jzsBn&(H*N`%AKpR@qM^|@qFai0};6mG_TvXjJ`;qZ{lGDZHScZk( z>pO+%icp)SaPJUwtIPo1BvGyP8E@~w2y}=^PnFJ$iHod^JH%j1>nXl<3f!nY9K$e` zq-?XYl)K`u*cVXM=`ym{N?z=dHQNR23M8uA-(vsA$6(xn+#B-yY!CB2@`Uz({}}w+ z0sni*39>rMC!Ay|1B@;al%T&xE(wCf+`3w>N)*LxZZZYi{5sqiVWgbNd>W*X?V}C- zjQ4F7e_uCUOHbtewQkq?m$*#@ZvWbu{4i$`aeKM8tc^ zL5!GL8gX}c+qNUtUIcps1S)%Gsx*MQLlQeoZz2y2OQb(A73Jc3`LmlQf0N{RTt;wa`6h|ljX1V7UugML=W5-STDbeWTiEMjPQ$({hn_s&NDXzs6?PLySp$?L`0ilH3vCUO{JS0Dp`z;Ry$6}R@1NdY7rxccbm$+;ApSe=2q!0 z()3$vYN0S$Cs)#-OBs{_2uFf}L4h$;7^2w20=l%5r9ui&pTEgg4U!FoCqyA6r2 zC5s72l}i*9y|KTjDE5gVlYe4I2gGZD)e`Py2gq7cK4at{bT~DSbQQ4Z4sl)kqXbbr zqvXtSqMrDdT2qt-%-HMoqeFEMsv~u)-NJ%Z*ipSJUm$)EJ+we|4*-Mi900K{K|e0; z1_j{X5)a%$+vM7;3j>skgrji92K1*Ip{SfM)=ob^E374JaF!C(cZ$R_E>Wv+?Iy9M z?@`#XDy#=z%3d9&)M=F8Xq5Zif%ldIT#wrlw(D_qOKo4wD(fyDHM5(wm1%7hy6euJ z%Edg!>Egs;ZC6%ktLFtyN0VvxN?*4C=*tOEw`{KQvS7;c514!FP98Nf#d#)+Y-wsl zP3N^-Pnk*{o(3~m=3DX$b76Clu=jMf9E?c^cbUk_h;zMF&EiVz*4I(rFoaHK7#5h0 zW7CQx+xhp}Ev+jw;SQ6P$QHINCxeF8_VX=F3&BWUd(|PVViKJl@-sYiUp@xLS2NuF z8W3JgUSQ&lUp@2E(7MG`sh4X!LQFa6;lInWqx}f#Q z4xhgK1%}b(Z*rZn=W{wBOe7YQ@1l|jQ|9ELiXx+}aZ(>{c7Ltv4d>PJf7f+qjRU8i%XZZFJkj&6D^s;!>`u%OwLa*V5Js9Y$b-mc!t@{C415$K38iVu zP7!{3Ff%i_e!^LzJWhBgQo=j5k<<($$b&%%Xm_f8RFC_(97&nk83KOy@I4k?(k<(6 zthO$3yl&0x!Pz#!79bv^?^85K5e7uS$ zJ33yka2VzOGUhQXeD{;?%?NTYmN3{b0|AMtr(@bCx+c=F)&_>PXgAG}4gwi>g82n> zL3DlhdL|*^WTmn;XPo62HhH-e*XIPSTF_h{#u=NY8$BUW=5@PD{P5n~g5XDg?Fzvb_u ziK&CJqod4srfY2T?+4x@)g9%3%*(Q2%YdCA3yM{s=+QD0&IM`8k8N&-6%iIL3kon> z0>p3BUe!lrz&_ZX2FiP%MeuQY-xVV%K?=bGPOM&XM0XRd7or< zy}jn_eEzuQ>t2fM9ict#ZNxD7HUycsq76IavfoNl$G1|t*qpUSX;YgpmJrr_8yOJ2 z(AwL;Ugi{gJ29@!G-mD82Z)46T`E+s86Qw|YSPO*OoooraA!8x_jQXYq5vUw!5f_x zubF$}lHjIWxFar8)tTg8z-FEz)a=xa`xL~^)jIdezZsg4%ePL$^`VN#c!c6`NHQ9QU zkC^<0f|Ksp45+YoX!Sv>+57q}Rwk*2)f{j8`d8Ctz^S~me>RSakEvxUa^Pd~qe#fb zN7rnAQc4u$*Y9p~li!Itp#iU=*D4>dvJ{Z~}kqAOBcL8ln3YjR{Sp!O`s=5yM zWRNP#;2K#+?I&?ZSLu)^z-|*$C}=0yi7&~vZE$s``IE^PY|dj^HcWI$9ZRm>3w(u` z-1%;;MJbzHFNd^!Ob!^PLO-xhhj@XrI81Y)x4@FdsI( za`o4Gy(`T$P?PB?s>o+eIOtuirMykbuAi65Y_UN1(?jTCy@J8Px`%;bcNmPm#Fr!= z5V!YViFJ!FBfEq>nJFk0^RAV1(7w+X`HRgP;nJHJdMa!}&vvduCMoslwHTes_I76|h>;(-9lbfGnt zoZomakOt759AuTX4b$)G8TzJ&m*BV8!vMs9#=e0tWa z%)84R=3?tfh72~=Rc;fXwj+x z+25xapYK@2@;}6)@8IL+F6iuJ_B{&A-0=U=U6WMbY>~ykVFp$XkH)f**b>TE5)shN z39E2L@JPCSl!?pkvFeh@6dCv9oE}|{GbbVM!XIgByN#md&tXy@>QscU0#z!I&X4;d z&B&ZA4lbrHJ!x4lCN4KC-)u#gT^cE{Xnhu`0RXVKn|j$vz8m}v^%*cQ{(h%FW8_8a zFM{$PirSI8@#*xg2T){A+EKX(eTC66Fb})w{vg%Vw)hvV-$tttI^V5wvU?a{(G}{G z@ob7Urk1@hDN&C$N!Nio9YrkiUC{5qA`KH*7CriaB;2~2Od>2l=WytBRl#~j`EYsj}jqK2xD*3 ztEUiPZzEJC??#Tj^?f)=sRXOJ_>5aO(|V#Yqro05p6)F$j5*wYr1zz|T4qz$0K(5! zr`6Pqd+)%a9Xq3aNKrY9843)O56F%=j_Yy_;|w8l&RU1+B4;pP*O_}X8!qD?IMiyT zLXBOOPg<*BZtT4LJ7DfyghK|_*mMP7a1>zS{8>?}#_XXaLoUBAz(Wi>$Q!L;oQ&cL z6O|T6%Dxq3E35$0g5areq9$2+R(911!Z9=wRPq-pju7DnN9LAfOu3%&onnfx^Px5( zT2^sU>Y)88F5#ATiVoS$jzC-M`vY8!{8#9O#3c&{7J1lo-rcNK7rlF0Zt*AKE(WN* z*o?Tv?Sdz<1v6gfCok8MG6Pzecx9?C zrQG5j^2{V556Hj=xTiU-seOCr2ni@b<&!j>GyHbv!&uBbHjH-U5Ai-UuXx0lcz$D7%=! z&zXD#Jqzro@R=hy8bv>D_CaOdqo6)vFjZldma5D+R;-)y1NGOFYqEr?h zd_mTwQ@K2veZTxh1aaV4F;YnaWA~|<8$p}-eFHashbWW6Dzj=3L=j-C5Ta`w-=QTw zA*k9!Ua~-?eC{Jc)xa;PzkUJ#$NfGJOfbiV^1au;`_Y8|{eJ(~W9pP9q?gLl5E6|e{xkT@s|Ac;yk01+twk_3nuk|lRu{7-zOjLAGe!)j?g+@-;wC_=NPIhk(W zfEpQrdRy z^Q$YBs%>$=So>PAMkrm%yc28YPi%&%=c!<}a=)sVCM51j+x#<2wz?2l&UGHhOv-iu z64x*^E1$55$wZou`E=qjP1MYz0xErcpMiNYM4+Qnb+V4MbM;*7vM_Yp^uXUuf`}-* z_2CnbQ);j5;Rz?7q)@cGmwE^P>4_u9;K|BFlOz_|c^1n~%>!uO#nA?5o4A>XLO{X2 z=8M%*n=IdnXQ}^+`DXRKM;3juVrXdgv79;E=ovQa^?d7wuw~nbu%%lsjUugE8HJ9zvZIM^nWvjLc-HKc2 zbj{paA}ub~4N4Vw5oY{wyop9SqPbWRq=i@Tbce`r?6e`?`iOoOF;~pRyJlKcIJf~G z)=BF$B>YF9>qV#dK^Ie#{0X(QPnOuu((_-u?(mxB7c9;LSS-DYJ8Wm4gz1&DPQ8;0 z=Wao(zb1RHXjwbu_Zv<=9njK28sS}WssjOL!3-E5>d17Lfnq0V$+IU84N z-4i$~!$V-%Ik;`Z3MOqYZdiZ^3nqqzIjLE+zpfQC+LlomQu-uNCStj%MsH(hsimN# z%l4vpJBs_2t7C)x@6*-k_2v0FOk<1nIRO3F{E?2DnS}w> z#%9Oa{`RB5FL5pKLkg59#x~)&I7GzfhiVC@LVFSmxZuiRUPVW*&2ToCGST0K`kRK) z02#c8W{o)w1|*YmjGSUO?`}ukX*rHIqGtFH#!5d1Jd}&%4Kc~Vz`S7_M;wtM|6PgI zNb-Dy-GI%dr3G3J?_yBX#NevuYzZgzZ!vN>$-aWOGXqX!3qzCIOzvA5PLC6GLIo|8 zQP^c)?NS29hPmk5WEP>cHV!6>u-2rR!tit#F6`_;%4{q^6){_CHGhvAs=1X8Fok+l zt&mk>{4ARXVvE-{^tCO?inl{)o}8(48az1o=+Y^r*AIe%0|{D_5_e>nUu`S%zR6|1 zu0$ov7c`pQEKr0sIIdm7hm{4K_s0V%M-_Mh;^A0*=$V9G1&lzvN9(98PEo=Zh$`Vj zXh?fZ;9$d!6sJRSjTkOhb7@jgSV^2MOgU^s2Z|w*e*@;4h?A8?;v8JaLPCoKP_1l- z=Jp0PYDf(d2Z`;O7mb6(_X_~z0O2yq?H`^c=h|8%gfywg#}wIyv&_uW{-e8e)YmGR zI0NNSDoJWa%0ztGzkwl>IYW*DesPRY?oH+ow^(>(47XUm^F`fAa0B~ja-ae$e>4-A z64lb_;|W0ppKI+ zxu2VLZzv4?Mr~mi?WlS-1L4a^5k+qb5#C)ktAYGUE1H?Vbg9qsRDHAvwJUN=w~AuT zUXYioFg2Dx-W)}w9VdFK#vpjoSc!WcvRZ_;TgHu;LSY*i7K_>Px{%C4-IL?6q?Qa_ zL7l=EEo|@X&$gX;fYP02qJF~LN9?E-OL2G(Fo4hW)G{`qnW zTIuc+-1VJvKgph0jAc(LzM);Pg$MPln?U|ek{_5nNJHfm-Y#ec+n#Yf_e>XfbLbN)eqHEDr0#?<;TskL5-0JGv|Ut{=$Xk8hlwbaMXdcI3GL zY-hykR{zX9liy$Z2F3!z346uu%9@-y6Gda`X2*ixlD_P@<}K?AoV?(%lM%* z(xNk=|A()443aGj)-~IDf3J+UA2p2lh6ei^pG*HL#SiThnIr5WZDXebI)F7X zGmP-3bH$i$+(IwqgbM7h%G5oJ@4{Z~qZ#Zs*k7eXJIqg;@0kAGV|b=F#hZs)2BYu1 zr8sj#Zd+Iu^G}|@-dR5S*U-;DqzkX3V0@q-k8&VHW?h0b0?tJ-Atqmg^J8iF7DP6k z)W{g?5~F*$5x?6W)3YKcrNu8%%(DglnzMx5rsU{#AD+WPpRBf``*<8F-x75D$$13U zcaNXYC0|;r&(F@!+E=%+;bFKwKAB$?6R%E_QG5Yn5xX#h+zeI-=mdXD5+D+lEuM`M ze+*G!zX^xbnA?~LnPI=D2`825Ax8rM()i*{G0gcV5MATV?<7mh+HDA7-f6nc@95st zzC_si${|&=$MUj@nLxl_HwEXb2PDH+V?vg zA^DJ%dn069O9TNK-jV}cQKh|$L4&Uh`?(z$}#d+{X zm&=KTJ$+KvLZv-1GaHJm{>v=zXW%NSDr8$0kSQx(DQ)6S?%sWSHUazXSEg_g3agt2@0nyD?A?B%9NYr(~CYX^&U#B4XwCg{%YMYo%e68HVJ7`9KR`mE*Wl7&5t71*R3F>*&hVIaZXaI;2a$?;{Ew{e3Hr1* zbf$&Fyhnrq7^hNC+0#%}n^U2{ma&eS)7cWH$bA@)m59rXlh96piJu@lcKl<>+!1#s zW#6L5Ov%lS(?d66-(n`A%UuiIqs|J|Ulq0RYq-m&RR0>wfA1?<34tI?MBI#a8lY{m z{F2m|A@=`DpZpwdIH#4)9$#H3zr4kn2OX!UE=r8FEUFAwq6VB?DJ8h59z$GXud$#+ zjneIq8uSi&rnG0IR8}UEn5OcZC?@-;$&Ry9hG{-1ta`8aAcOe1|82R7EH`$Qd3sf* zbrOk@G%H7R`j;hOosRVIP_2_-TuyB@rdj?(+k-qQwnhV3niH+CMl>ELX(;X3VzZVJ ztRais0C^L*lmaE(nmhvep+peCqr!#|F?iVagZcL>NKvMS_=*Yl%*OASDl3(mMOY9! z=_J$@nWpA-@><43m4olSQV8(PwhsO@+7#qs@0*1fDj70^UfQ(ORV0N?H{ceLX4<43 zEn)3CGoF&b{t2hbIz;Og+$+WiGf+x5mdWASEWIA*HQ9K9a?-Pf9f1gO6LanVTls)t z^f6_SD|>2Kx8mdQuiJwc_SmZOZP|wD7(_ti#0u=io|w~gq*Odv>@8JBblRCzMKK_4 zM-uO0Ud9>VD>J;zZzueo#+jbS7k#?W%`AF1@ZPI&q%}beZ|ThISf-ly)}HsCS~b^g zktgqOZ@~}1h&x50UQD~!xsW-$K~whDQNntLW=$oZDClUJeSr2$r3}94Wk1>co3beS zoY-7t{rGv|6T?5PNkY zj*XjF()ybvnVz5=BFnLO=+1*jG>E7F%&vm6up*QgyNcJJPD|pHoZ!H6?o3Eig0>-! zt^i-H@bJ;^!$6ZSH}@quF#RO)j>7A5kq4e+7gK=@g;POXcGV28Zv$jybL1J`g@wC# z_DW1ck}3+n@h2LFQhwVfaV@D+-kff4celZC0;0ef?pA#*PPd8Kk8sO1wza&BHQFblVU8P1=-qScHff^^fR zycH!hlHQs7iejITpc4UaBxzqTJ}Z#^lk{W(cr`qtW~Ap;HvuUf#MxgEG?tEU+B?G% znub0I(s@XvI(lva}$Z7<}Qg=rWd5n)}rX{nb+Aw;}?l9LZI-`N-*hts=c6XgjfJs ztp>-686v6ug{glEZ}K=jVG|N1WSWrU*&ue|4Q|O@;s0#L5P*U%Vx;)w7S0ZmLuvwA z@zs2Kut)n1K7qaywO#TbBR`Q~%mdr`V)D`|gN0!07C1!r3{+!PYf9*;h?;dE@#z(k z;o`g~<>P|Sy$ldHTUR3v=_X0Iw6F>3GllrFXVW?gU0q6|ocjd!glA)#f0G7i20ly>qxRljgfO2)RVpvmg#BSrN)GbGsrIb}9 z1t+r;Q>?MGLk#LI5*vR*C8?McB|=AoAjuDk&Pn`KQo z`!|mi{Cz@BGJ!TwMUUTkKXKNtS#OVNxfFI_Gfq3Kpw0`2AsJv9PZPq9x?~kNNR9BR zw#2jp%;FJNoOzW>tE#zskPICp>XSs?|B0E%DaJH)rtLA}$Y>?P+vEOvr#8=pylh zch;H3J`RE1{97O+1(1msdshZx$it^VfM$`-Gw>%NN`K|Tr$0}U`J?EBgR%bg=;et0 z_en)!x`~3so^V9-jffh3G*8Iy6sUq=uFq%=OkYvHaL~#3jHtr4sGM?&uY&U8N1G}QTMdqBM)#oLTLdKYOdOY%{5#Tgy$7QA! zWQmP!Wny$3YEm#Lt8TA^CUlTa{Cpp=x<{9W$A9fyKD0ApHfl__Dz4!HVVt(kseNzV z5Fb`|7Mo>YDTJ>g;7_MOpRi?kl>n(ydAf7~`Y6wBVEaxqK;l;}6x8(SD7}Tdhe2SR zncsdn&`eI}u}@^~_9(0^r!^wuKTKbs-MYjXy#-_#?F=@T*vUG@p4X+l^SgwF>TM}d zr2Ree{TP5x@ZtVcWd3++o|1`BCFK(ja-QP?zj6=ZOq)xf$CfSv{v;jCcNt4{r8f+m zz#dP|-~weHla%rsyYhB_&LHkwuj83RuCO0p;wyXsxW5o6{)zFAC~2%&NL? z=mA}szjHKsVSSnH#hM|C%;r0D$7)T`HQ1K5vZGOyUbgXjxD%4xbs$DAEz)-;iO?3& zXcyU*Z8zm?pP}w&9ot_5I;x#jIn^Joi5jBDOBP1)+p@G1U)pL6;SIO>Nhw?9St2UN zMedM(m(T6bNcPPD`%|9dvXAB&IS=W4?*7-tqldqALH=*UapL!4`2TM_{`W&pm*{?| z0DcsaTdGA%RN={Ikvaa&6p=Ux5ycM){F1OgOh(^Yk-T}a5zHH|=%Jk)S^vv9dY~`x zG+!=lsDjp!D}7o94RSQ-o_g#^CnBJlJ@?saH&+j0P+o=eKqrIApyR7ttQu*0 z1f;xPyH2--)F9uP2#Mw}OQhOFqXF#)W#BAxGP8?an<=JBiokg;21gKG_G8X!&Hv;7 zP9Vpzm#@;^-lf=6POs>UrGm-F>-! zm;3qp!Uw?VuXW~*Fw@LC)M%cvbe9!F(Oa^Y6~mb=8%$lg=?a0KcGtC$5y?`L5}*-j z7KcU8WT>2PpKx<58`m((l9^aYa3uP{PMb)nvu zgt;ia9=ZofxkrW7TfSrQf4(2juZRBgcE1m;WF{v1Fbm}zqsK^>sj=yN(x}v9#_{+C zR4r7abT2cS%Wz$RVt!wp;9U7FEW&>T>YAjpIm6ZSM4Q<{Gy+aN`Vb2_#Q5g@62uR_>II@eiHaay+JU$J=#>DY9jX*2A=&y8G%b zIY6gcJ@q)uWU^mSK$Q}?#Arq;HfChnkAOZ6^002J>fjPyPGz^D5p}o;h2VLNTI{HGg!obo3K!*I~a7)p-2Z3hCV_hnY?|6i`29b zoszLpkmch$mJeupLbt4_u-<3k;VivU+ww)a^ekoIRj4IW4S z{z%4_dfc&HAtm(o`d{CZ^AAIE5XCMvwQSlkzx3cLi?`4q8;iFTzuBAddTSWjfcZp* zn{@Am!pl&fv#k|kj86e$2%NK1G4kU=E~z9L^`@%2<%Dx%1TKk_hb-K>tq8A9bCDfW z@;Dc3KqLafkhN6414^46Hl8Tcv1+$q_sYjj%oHz)bsoGLEY1)ia5p=#eii(5AM|TW zA8=;pt?+U~>`|J(B85BKE0cB4n> zWrgZ)Rbu}^A=_oz65LfebZ(1xMjcj_g~eeoj74-Ex@v-q9`Q{J;M!mITVEfk6cn!u zn;Mj8C&3^8Kn%<`Di^~Y%Z$0pb`Q3TA}$TiOnRd`P1XM=>5)JN9tyf4O_z}-cN|i> zwpp9g`n%~CEa!;)nW@WUkF&<|wcWqfL35A}<`YRxV~$IpHnPQs2?+Fg3)wOHqqAA* zPv<6F6s)c^o%@YqS%P{tB%(Lxm`hsKv-Hb}MM3=U|HFgh8R-|-K(3m(eU$L@sg=uW zB$vAK`@>E`iM_rSo;Cr*?&wss@UXi19B9*0m3t3q^<)>L%4j(F85Ql$i^;{3UIP0c z*BFId*_mb>SC)d#(WM1%I}YiKoleKqQswkdhRt9%_dAnDaKM4IEJ|QK&BnQ@D;i-ame%MR5XbAfE0K1pcxt z{B5_&OhL2cx9@Sso@u2T56tE0KC`f4IXd_R3ymMZ%-!e^d}v`J?XC{nv1mAbaNJX| zXau+s`-`vAuf+&yi2bsd5%xdqyi&9o;h&fcO+W|XsKRFOD+pQw-p^pnwwYGu=hF7& z{cZj$O5I)4B1-dEuG*tU7wgYxNEhqAxH?p4Y1Naiu8Lt>FD%AxJ811`W5bveUp%*e z9H+S}!nLI;j$<*Dn~I*_H`zM^j;!rYf!Xf#X;UJW<0gic?y>NoFw}lBB6f#rl%t?k zm~}eCw{NR_%aosL*t$bmlf$u|U2hJ*_rTcTwgoi_N=wDhpimYnf5j!bj0lQ*Go`F& z6Wg+xRv55a(|?sCjOIshTEgM}2`dN-yV>)Wf$J58>lNVhjRagGZw?U9#2p!B5C3~Nc%S>p`H4PK z7vX@|Uo^*F4GXiFnMf4gwHB;Uk8X4TaLX4A>B&L?mw4&`XBnLCBrK2FYJLrA{*))0 z$*~X?2^Q0KS?Yp##T#ohH1B)y4P+rR7Ut^7(kCwS8QqgjP!aJ89dbv^XBbLhTO|=A z|3FNkH1{2Nh*j{p-58N=KA#6ZS}Ir&QWV0CU)a~{P%yhd-!ehF&~gkMh&Slo9gAT+ zM_&3ms;1Um8Uy0S|0r{{8xCB&Tg{@xotF!nU=YOpug~QlZRKR{DHGDuk(l{)d$1VD zj)3zgPeP%wb@6%$zYbD;Uhvy4(D|u{Q_R=fC+9z#sJ|I<$&j$|kkJiY?AY$ik9_|% z?Z;gOQG5I%{2{-*)Bk|Tia8n>TbrmjnK+8u*_cS%*;%>R|K|?urtIdgTM{&}Yn1;| zk`xq*Bn5HP5a`ANv`B$IKaqA4e-XC`sRn3Z{h!hN0=?x(kTP+fE1}-<3eL+QDFXN- z1JmcDt0|7lZN8sh^=$e;P*8;^33pN>?S7C0BqS)ow4{6ODm~%3018M6P^b~(Gos!k z2AYScAdQf36C)D`w&p}V89Lh1s88Dw@zd27Rv0iE7k#|U4jWDqoUP;-He5cd4V7Ql)4S+t>u9W;R-8#aee-Ct1{fPD+jv&zV(L&k z)!65@R->DB?K6Aml57?psj5r;%w9Vc3?zzGs&kTA>J9CmtMp^Wm#1a@cCG!L46h-j z8ZUL4#HSfW;2DHyGD|cXHNARk*{ql-J2W`9DMxzI0V*($9{tr|O3c;^)V4jwp^RvW z2wzIi`B8cYISb;V5lK}@xtm3NB;88)Kn}2fCH(WRH1l@3XaO7{R*Lc7{ZN1m+#&diI7_qzE z?BS+v<)xVMwt{IJ4yS2Q4(77II<>kqm$Jc3yWL42^gG6^Idg+y3)q$-(m2>E49-fV zyvsCzJ5EM4hyz1r#cOh5vgrzNGCBS}(Bupe`v6z{e z)cP*a8VCbRuhPp%BUwIRvj-$`3vrbp;V3wmAUt{?F z0OO?Mw`AS?y@>w%(pBO=0lohnxFWx`>Hs}V$j{XI2?}BtlvIl7!ZMZukDF7 z^6Rq2H*36KHxJ1xWm5uTy@%7;N0+|<>Up>MmxKhb;WbH1+=S94nOS-qN(IKDIw-yr zi`Ll^h%+%k`Yw?o3Z|ObJWtfO|AvPOc96m5AIw;4;USG|6jQKr#QP}+BLy*5%pnG2 zyN@VMHkD`(66oJ!GvsiA`UP;0kTmUST4|P>jTRfbf&Wii8~a`wMwVZoJ@waA{(t(V zwoc9l*4F>YUM8!aE1{?%{P4IM=;NUF|8YkmG0^Y_jTJtKClDV3D3~P7NSm7BO^r7& zWn!YrNc-ryEvhN$$!P%l$Y_P$s8E>cdAe3=@!Igo^0diL6`y}enr`+mQD;RC?w zb8}gXT!aC`%rdxx2_!`Qps&&w4i0F95>;6;NQ-ys;?j#Gt~HXzG^6j=Pv{3l1x{0( z4~&GNUEbH=9_^f@%o&BADqxb54EAq=8rKA~4~A!iDp9%eFHeA1L!Bb8Lz#kF(p#)X zn`CglEJ(+tr=h4bIIHlLkxP>exGw~{Oe3@L^zA)|Vx~2yNuPKtF^cV6X^5lw8hU*b zK-w6x4l&YWVB%0SmN{O|!`Sh6H45!7}oYPOc+a#a|n3f%G@eO)N>W!C|!FNXV3taFdpEK*A1TFGcRK zV$>xN%??ii7jx5D69O>W6O`$M)iQU7o!TPG*+>v6{TWI@p)Yg$;8+WyE9DVBMB=vnONSQ6k1v z;u&C4wZ_C`J-M0MV&MpOHuVWbq)2LZGR0&@A!4fZwTM^i;GaN?xA%0)q*g(F0PIB( zwGrCC#}vtILC_irDXI5{vuVO-(`&lf2Q4MvmXuU8G0+oVvzZp0Y)zf}Co0D+mUEZz zgwR+5y!d(V>s1} zji+mrd_6KG;$@Le2Ic&am6O+Rk1+QS?urB4$FQNyg2%9t%!*S5Ts{8j*&(H1+W;0~ z$frd%jJjlV;>bXD7!a-&!n52H^6Yp}2h3&v=}xyi>EXXZDtOIq@@&ljEJG{D`7Bjr zaibxip6B6Mf3t#-*Tn7p z96yx1Qv-&r3)4vg`)V~f8>>1_?E4&$bR~uR;$Nz=@U(-vyap|Jx zZ;6Ed+b#GXN+gN@ICTHx{=c@J|97TIPWs(_kjEIwZFHfc!rl8Ep-ZALBEZEr3^R-( z7ER1YXOgZ)&_=`WeHfWsWyzzF&a;AwTqzg~m1lOEJ0Su=C2<{pjK;{d#;E zr2~LgXN?ol2ua5Y*1)`(be0tpiFpKbRG+IK(`N?mIgdd9&e6vxzqxzaa`e7zKa3D_ zHi+c1`|720|dn(z4Qos^e7sn(PU%NYLv$&!|4kEse%DK;YAD06@XO3!EpKpz!^*?(?-Ip zC_Zlb(-_as+-D?0Ag9`|4?)bN)5o(J=&udAY|YgV(YuK9k=E>0z`$dSaL(wmxd!1f zME&3wwv@#{dgeMlZ4}GL!I`VZxtdQY$lmauCN_|mGXqEEj@i~du$|>5UvLjsbq!{; z@jEf;21iC1jFEmIPE^4gykHQzCMLj=2Ek4&FvlpqTlS(0YT%*W<>XgH$4ww`D`aihBGkPM(&EG};Cl&wzg8!jL z`rkqPzvH(0Kd{2n=?Bt8aAU&0IyiA+V-qnXVId^qG!SWZ7%_f&i!D{R#7Jo$%tICxY%j)ebORE>3H_c|to}c#HX;HAC?~B;2mmQrMp2;8T zmzde!k7BYg^Z1r|DUvSD3@{6S<1kndb%Qt%GA# z+sB2&F5L`R&fLRdAlpU_pVsJsYDEz{^ zKGaAz#%W+MPGT+D$+xowMY0=ipM)0p?zym&Aoi)qL(pO_weO(k?s|ELHl^W zviJiFUXRL&?`;3_;mvc02A@sbsW9}#{anvGafZ#ST;}za?XS3}ZG3B4m(SW{>w}Fh z)T5Yi*``Tstmi9SHXmuWSND@cj}qtY!`tuD29Dpu+-D3$h<5FY>jE>YJvqBmhw?oll`x7Ono(}R~P zle_eBwYy0Rr7kmf_SEt_gn4)AO-r`}^Z5Y%Rm8)K-?X>rvDL+QT?#)QwDsQ2c$tc* z&#hbgkL6}GnBDH;+lREM6MGIskRa@r>5Iq(ll2IepuhW86w@14=E{6$cz*cBDQ)CT>}v-DLM-v8)xaPBnmGBKM63RgDGqh!<*j90tSE4|G^+r@#-7g2 zs8KE8eZPZhQuN>wBU%8CmkE9LH1%O;-*ty0&K~01>F3XB>6sAm*m3535)9T&Fz}A4 zwGjZYVea@Fesd=Rv?ROE#q=}yfvQEP8*4zoEw4@^Qvw54utUfaR1T6gLmq?c9sON> z>Np6|0hdP_VURy81;`8{ZYS)EpU9-3;huFq)N3r{yP1ZBCHH7=b?Ig6OFK~%!GwtQ z3`RLKe8O&%^V`x=J4%^Oqg4ZN9rW`UQN^rslcr_Utzd-@u-Sm{rphS-y}{k41)Y4E zfzu}IC=J0JmRCV6a3E38nWl1G495grsDDc^H0Fn%^E0FZ=CSHB4iG<6jW1dY`2gUr zF>nB!y@2%rouAUe9m0VQIg$KtA~k^(f{C*Af_tOl=>vz>$>7qh+fPrSD0YVUnTt)? z;@1E0a*#AT{?oUs#bol@SPm0U5g<`AEF^=b-~&4Er)MsNnPsLb^;fL2kwp|$dwiE3 zNc5VDOQ%Q8j*d5vY##)PGXx51s8`0}2_X9u&r(k?s7|AgtW0LYbtlh!KJ;C9QZuz< zq>??uxAI1YP|JpN$+{X=97Cdu^mkwlB={`aUp+Uyu1P139=t%pSVKo7ZGi_v(0z>l zHLGxV%0w&#xvev)KCQ{7GC$nc3H?1VOsYGgjTK;Px(;o0`lerxB<+EJX9G9f8b+)VJdm(Ia)xjD&5ZL45Np?9 zB%oU;z05XN7zt{Q!#R~gcV^5~Y^gn+Lbad7C{UDX2Nznj8e{)TLH|zEc|{a#idm@z z6(zon+{a>FopmQsCXIs*4-dLGgTc)iOhO3r=l?imNUR-pWl!ktO0r_a0Nqo@bu8MzyjSq9zkqPe*`Sxz75rZ zr9X%(=PVqCRB=zfX+_u&*k4#s1k4OV11YgkCrlr6V;vz<{99HKC@qQ+H8xv5)sc63 z69;U4O&{fb5(fN``jJH#3=GHsV56@{d@7`VhA$K^;GU+R-V%%cnmjYs?>c5^6Ugv} zn<}L&i;2`zzW@(kxf$$gVH@7nh}2%G%ciQ_B?r{13?Q@=Q+6msQGtnyY%Gkjeor?g z7F*tMqLdhcq+LCCo^D;CtOACCBhXgK-M&w{*dcUdmtv@XFTofmmpcWKtCn^`#?oZC zUOm52 z7sK$hR|Vh6y&pfIUK&!`8HH*>12$nWA)Ynp+XwOj=jNLD z{QA4gezbe>wiP?`jJO;c&EId;=2u80s_r97;TX!6@*(<%WL+^bmxheMB3pKx0OpH^ zPs}knV+jpJ4TaD@r^V`mTsjf`7!z^H}eHQ#Rp z72(>Dm#QO!ZYR*O@yHic`3*T^t7jc=d`Jz6Lk@Y-bL%cOp_~=#xzIJl?`{Qu;$uC~NkePE+7wSW_FM`&V{gFN zl;lq@;FtAsl!h;tnOvj z#gYx!q$5MdZ0Jxjy=t*q)HFeeyI-vgaGdh1QNhqGRy8qS)|6S0QK7Gj9R?Co{Knh> za>xkQZ0}bBx!9@EUxRBYGm25^G}&j-`0VWX04E|J!kJ8^WoZ(jbhU_twFwWIH32fv zi=pg~(b#ajW=`)Vikwwe39lpML?|sY$?*6*kYBxku_<=#$gfTqQ_F!9F0=OkHnzBo zEwR!H_h|MNjuG$Tj6zaaouO}HYWCF8vN4C%EX-%Iu%ho;q$G#ErnafhXR*4J2Rp5* zhsi0;wlSwE*inVFO>{(8?N~82zijpt+9Y_-^>xnE%T*zk9gi|j7b@s<5{|qEquUD( zS;-%RySZOCOEh*>!kvbsQ265* z>X8*_Wy&~FB@aDHz%glyiAujXq-|2kDUjFTn9Rafsl+XNyFP%PG|l&ZGWBcEXxy=9 zeDn2PIoVuL$gX0RgVK1O$x3%pOzS7x^U5Pi;mtT)%cY;&e&M7GLM}zP+IPbqLt=^5 z7qLfri8myf;~2psc@^cA6mG&{C%e_(M$$!wC^5p^T1QzrS%I?(U{qcd+oJJkQxe10 zON{Q*?iz%F4MbEsoEc+x3E?&2wVR^v3|Q0lDaMvgS7mNjI{2w! z9|~=!83T%GW*iaChSS!`Xd^beFp9N4%K+k*j#jFumk}U?=WKL_kJAltxnxp~+lZzT zp@&&kSPTg3oSGos`rVBhK0|4NdHM_hnKuw1#0JV{gi_dKDJLB+ix~~HpU9%jD)@YY zOK)L7kgbLyN2%Dx#fuY}8swh4ACk7%BpP-n5(RhDq{gEHP*Fo4IviX{C49|B5h~SC zFr`=0)=h2^F5UpCAgt?R5u{6VvpUf#*nC zCQ`$!|C;L2lpjlG?(>T$(_$O3_YNNbPT~(?!j3aD8k=yu^ogw4bkjvgF|3BOq(hB& zG;^cPXmcUP$ox8zElCJ-zMbK9q^8{rri#8Cek5Ydr0YT-KTh@J z6^AcB9ejew8BY5kzZUZX(7Po==eW<(;uV~E7(BY5c0^xr`cuRwn)47bN?zOb!0?cw z#v}R$z66&m#+AHfo@(^V2#S~bhoUkkTArg+6w>JzZ52r96^({1W!?>4$h0l|-jDfj z>7(<+%67#(A|4hZ3>Y;hd&S?}F;`Vtqz|pK&B>NJ=Faci;gkf-+GmfQR8^zo_vul2 zB!)kfu4Dq_g)8TBBo52*sB6F`qa&JCR=_A$QWgX_K}fZm{Cb2#1q`^S3+WaS>sS#@ z-4k*G=#?z6d_e7JJ+Z8^(t0tNdL{K5F;2nfQbXgld}a(X)Gr;WojOy`^?es~AClT$ z5^lD{WJek0!p-QEH5E7n6DKQ0%_ZBZ=|jfV_MM{VmL8y-Wd|>OmeemP=C@xI@@M~1 zW2S*im@Rc=O>V886_UJ@oh1!2H$Ku&U*Hh_oxd{32)vf1$cRiepv28ricM;}#p!+k zaK{z1I=9Y%3m4|Pj*BD*Fn5Vh?O@oD^1UcjyeNh0fbhh~V6xb#4njlGW8OehUe!MnoR(wn#nsoyL1m!Rov)Nv4~&JEVl7L z#^qYdTpNI#u`N0UbVMiDmD>g2VQcG3>4D6gErgddZnSQTs){BExxRJRB?bIxTdZa z;!S8FHJPPiIDQ*FAUiWSYnjILFjDvxvSC zk z=j4Kx@Pg~&2Z?cmMDa;)#xVeorJrxDBqy{+`kG+ZPQqC@#ku-c3ucU+69$#q_*se` z-H#PFW^>-C0>++|6r=<$Z8)ZFaK=ZjwsNYXqRpl9G|yme@Eld5B-*I69Nx_TResHi z!5nm+>6zaJYQO#%D{~o-oOJ;q`fa5}l!8G*U-E$OM&7@dqciBCWtd}|SrDXz$TB($&m*=Epuolu2k`KUwO7maP3P0ok zmF57lSh0Ba@&sO1iZ5^+3s8{B8t|M;Pg&O+{tZJCiLWd6H@{b~9{CLF9s3Kn zt5)Rs9ejne?o{%f>B$Dl%X7fd~KY)I|(pxUeHj;gNsK6;ZR>`ciu;GxvhDUt!+31Knss2U(%ts8K z18)8;<2ax9RG?!|Lwdt^i5L^&O788roKmVAB)=EdK~HqR2Q=)H_VW}xY=95MP_Ov< zPEz3%DRK}+(aUBwsr83H8>`H^v~|A_t}0vPmRwKPt1{|qOY|PZu}j9+{ZhF&-H_TB zU9xWLpNTc`enI|)h9jQeqf5RfGLFk_vfX`40iMpd%KZF!lKbZTdBw$<^G6nuS+$fT zrbK)xo&;buPJcpOZ=x>n+bRXVFDs(23Xr=rDE&!)pVXZ;;A07NXGl_0m`{Z)DQIu$ zFDvY4xu-ifTe_$|n2B83eI;KUg6pVbw+N!nyLj~wnRi{4mNy{WDV)G1!6$y=+x6U{ z%4_9=Q^L!x_gAYp?J3+u5hA5cO8aHeI=6AC8^S{mzhqCBvBLYEutUC(X0>hKg|AvN zvkmJCQNA45_KjW{aEcyrBppcO6G0zTy%v1&@~+2!n?kA9?>0>AjFN|JdCnHQ8$hEU zw#mwGifHppLP?89LMb(Y3Li9iCPx7W%ek}2FgD2YSzjsR4Xj<=zN{Yo@7s7(k%mP4 znT2p&4EQ@q_chd-E z78uvD*C@oba`U3W2Iw`M#`5C8jOHv8^Li<|j^SI>>>`77Dp71Vtz=J?4Zck4SdRbd zfF}C_>Y(#)r@y!Q0`tMlG#b9>5`fAI$B&tWJfbGlYW$J4V+-s=HH!`+;1XeL@USdx zR0$G&&XBf9lQtkH5)p=U!8J!1{oc4E!N-~Abxl6E;;=3-hMYZ+44?u}zabmCE)yB?*_w91m$n1Yskp&@ z;kxeJX-#ioX^{elyLu~gzx|_KxLpX62MF%Axq3$!Z_P`pBWR?zP8OI`PV~6Aa0Oi0 zv_Ot1m&plf-ZF{e(z(Ms3*S5q$e|j;gOwGrmWsCHfLi(h8y?gc$(2H{884C1FvHQQ12tX=qFUsK~zM!W=K>;zaRsu4Xmcc@8nSs!vK+{ z?}bq}-m&p5jRSam67n>yG9ez=I^|J1O;Np8s=P~9MXYLxD+cFQK7PhG=bkjo{Naae zjp3NWWrlFWDb3Z5D07Q|WjZ=wOQ=aKA%en=O@hL$QCKpIXNZE=InFk|Fhq-&H!6&X z*MVy8=hL7Aw&pQjHrFf27C%3B<>FX{@fOLNhUoxL4*@nY}&M3G*T-p67a zo}~_&yGOB)#vbU|Q3FA8S^X)c-yBlmN(_%}`7Ha3uWFe?>9f=3hlO{^gv~$p`v?vk z_P*r43|(S{%ihs;)YH|jAMpP=-Ms7Ne75_YZZiL3CHVjSU`X1|?Ehh&gA=Xn7W7d@ zf8bM9Y>lG!`PWFDDA9G;x*{1Eh^55u66*9D+-4^dYZ{xXP@?sQLVrY%(azM;C^4FuN7CQ%$!3sr1JL=!Be& zuOZL^bLp$Qo2rL=WDzQIls%s!Go z{s}Q0b#+#8bKga|01t%^9Z=wEsevvXM_{$dCR97ed3@1kX)mtSS!JN^rtqKOj}p~> zfpCI@DX*DqcB6ZnBcl~}sGO~1s$AtfkX6fy3N8*ebvZc*KBW;dA=)?#BE&}-or74i zZUt5;{FBPnkZD8YUXDsx&2LvSziAlec3oc>&Lf1Doc3g?H9{OO_$M4B0qTat0UsWP zTlxUeQ3B;oJ%en4n?zQB6*Fb#wH7`$SQN5GI|=DnJKiYm{?-?#-H;#sIjz7kQ4&VW zN9d1(1$_W~S=<%qDD!mwRytas=eqX^iW}YSx3;wJ#)Xp_`Qk1DFiXac$-3;jQbCif zLA-T_s~5yP@Q@W>pXKl^gipQ>gp@HlBB>WDVpW199;V%?N1`U$ovLE;NI2?|_q2~5 zlg>xT9NADWkv5-*FjS~nP^7$k!N2z?dr!)&l0+4xDK7=-6Rkd$+_^`{bVx!5LgC#N z-dv-k@OlYCEvBfcr1*RsNwcV?QT0bm(q-IyJJ$hm2~mq{6zIn!D20k5)fe(+iM6DJ ze-w_*F|c%@)HREgpRrl@W5;_J5vB4c?UW8~%o0)(A4`%-yNk1(H z5CGuzH(uHQ`&j+IRmTOKoJ?#Ct$+1grR|IitpDGt!~ZdqSJ?cOtw-R=EQ+q4UvclH zdX=xlK-fhQKoKCPBoFAZ*(~11O6-tXo>i0w!T$u{lg!#itEUX3V{$S*naW!C@%rll zS{L(1t%xz(*B`{1NL!*aMc<~fE=g;gXi&Gb$HpD!P)8?JzfN;4F&wv(5HH<=c>>)n z({271)xREH89=C(5YKL{mmJJ_d>qHz;;gTvTlgM*vz9@YTTYZ#%_2A zS0G-t9oMQEpvfv(UjfQ8T$vAHi)zOj3>D*{xSRiu3acc=7cvLyD?_ZObdu$5@b*!y zaZ#u?7uF}SrHVQa=sTOhGW{6WUlq#RhPPm^GsRH#qlX8{Kq-i~98l;eq>KdCnWyKl zUu&UWBqu#Tt9jQ97U4}3)&(p2-eCLznXMEm!>i^EMpeVzPg%p;?@O;dJBQQY(vV;d z3v+-3oTPC!2LTUAx^S2t{v;S_h(EZ^0_dS5g^F*m{TEIy^Qal~%mu3h7*o`jWOH}i ztv8M)3X3a*+ry_KkYXYE4dB0?M|t}#Tp+(}6CQ zBbq;xhoHj}b@j-@koDB#XcCY~>_x&Y;i%MH|3tF^X2h{36UCVfQ-;oEA+4ZkJ`^Qi zQf^8}6eFO$Z+Dj-F1wkG##tTx>FjR2oOXFmbKFj6K3+=kePQ<4d7%z5R5cOB;zO6| zm9^m#U4lcA;7t&*=q|a-!`!)}SgYXT#i8hnxtx@kaoBF$QAS-hT7N5kH^l zB^i+})V>L;9_0Qqf-dyF%ky8Mp-dp#%!Nls3vCt}q3QLM3M-(Zs1k}1bqQ9PVU)U` ztE=?;^6=x}_VD%N@${>qhpkU*)AuUBu_cqYiY&@;O$HV*z@~#Tzh?#=CK`=KwBv+o zh%zu%0xPKYtyC)DaQ zpDW}*86g%>BH3IcWMq`g$j()0kWE(qkIL8A&A0mf&+BzxpKF}=`#jG% z&*wa!&pGFLs5_b#QTZE4Bp+})qzyPQ7B4Z7Y*&?0PSX&|FIR;WBP1|coF9ZeP*$9w z!6aJ_3%Sh=HY3FAt8V144|yfu}IAyYHr1OYKIZ51F>_uY^%N#!k~eU53at-_E-Gh?ahmM5y* z+BTIbeH;%v1}Cjo{8d%UeSMWg(nphxEU`sL< zQR~LrTq>Da(FqSP2%&^1ZL#DTo5Sbl9;&57tQ-@U&I#lj)aNSkcfEJwQD!33?anVU z?pw2q7WtMvfji493`rSFnyp7{w87cW`ak=UEYlk5PCB1K6UDVKXyozOChH4yHh~Q< zv>yvKw6WLfi!PZUx60JZcTNM7jo{ww9b8Q+S7C3WA5&llSwdwh$=Q(*(f3ofqcz=nwOmOy z(J!K=*wNoRU*${{Mbwapi9pTB(&VVKefqd-qrUb9*Eyr2E@oZ9Cgf}Mc;QP<0D)R4 zz=!*^VIG4T*7Xl=sJxrWv9hW^eJ%qYp5(d0?E6LZzJ}=7E+1{?GQA;z+!^VBD81}O z0kJ^dKy&WMw+1+aGVYY-v@i28@Gm+sX5=@U%F=Z?W)oar}2~Rc&F|+3A)n-U2GF10+QdxDb^iA@7eL$c7yhBtL z>lABrh^qy9XZ${E1}Ss5!N4;ig0-pUh6@|RPCHOWvgG{|l}2enRgJftsN%D|ck0YO zuAQd2aMPSyGuJ~jm)aY=+p~mGudw4erwE%P^)5f<*$$2C-4^I=e8-}7##ZQ!8!Tep z+Z_!}CAI~sry$|XK$ktXaxP*x<_ijCPp`2=6sNLZU<@9Sz-rz7^BCE9yh0jV4(I!Z zxmA4d;>B-!vD}Xp*&*N%`b^e&R;D97WS}{~{O-EtXeZNfdf51tw!WR6Noo4hjHPv5 z?heYYRSBPjMc}tFEU^|U8a1CxxK%)WTcn9P%`wR^I$QSeMn6=w>Z9OoVvcrl`zYlZ z2y`mAu0bV(Scc>G_EmIo_4 zm*~h`mxYZC&+U>C5G1FZH5L^U>Cq-9UDRQa35jz&NBj*0{uJKfZs5=Fn@&)Xh6aX(H3w9m9BGLePqVotxTeSPh5-mc7$# z-80t6yB0$Nx<54ohdO*QL7m_(&+#*=eoNiYDB4rE4Cag@qfyZS};Fx;Vf1;oync2k z9v#-w?d6R& zOI`CCS_d=tf3|?g3Z}b6-_Rdg3y~enQhmgkni0Cvf9m6%Ft8r;NC5|b%t&?lkl*4{ z8Ui^;Ds^gq6ti(1xB7y_$zA!i-M~#!!tl$ErTR>P~>T=Yky)8(uvPbvLmB=UfoD zrfl}8<1OQrm?8#j1!?s*T>AoectQl&m!o&*^JcIW`_&bk3tN}k^0rjl=HL$z*uIYt z?7l?^Dqr?q1210Sp$xoAy!&{2^{^Anl460 zI&7urrc&|Y{rjv04VOl{y7c82N6xzg5ueYmQ(q(zC3w_C#x*~%yf5j7MI{W`tsoxzA*PrmK)cTskU| zf2C}Bq$>S$-1JgIh0aW@LxI|-8(OGuD#^M01ghh}&#ObO>tZgSw_LW`zdf&IN$YO# z)|X_9m#JwLW5pErZB3ScggKcNzxA9(hyKkK9I#pR&79&*+SV_eu={00{HF=Bb+AEe znaSof+r1jZ!EL5XgqXWkckaFSSyEk}o!%p8XsD}O>borZ6x%X2b&q!s&1-O(>`kZ$ zB2l^5Cx9xQx9)PXN1xPM)@+LxACH_iZ8zGc(>wnFS_O|@hKsxpMjXOzLEa7OvSlM&&G9ioQw9~RsD4F zK7Q+_&|Q6{eZ^8Rx@pKL`le6kH+(fLc{=V&{b%I5=n}VHV4)X_2Y!pYxgC8wU)yP! zPF3t$?(jsC>Ge=&{kmPGUEETpaw(QTAl)m#{qR3_aq9!wK%6XHfV4C>Y^>Z|%ns7j z{Ja?^IA{+@;kR#IjHxkar%3$eJT4?xNBKUVmoO z`A8Zo-{~_;vcikZ(p}EZzU4kO6WPqkMyE{VvS?;44Z@lj zz^fKX9UL!8Wc(9VgI?P4*zpis8dzl};I>yr1>dtXU=FTAlx}Eht4-*7RACL^AflGh zyZb1hTf(~CkMo%#Q%NMgM9tE2D+)joqbtHYA89Ql1nqVTt+MxZ^*FRd&n5YlIi!8m z>$Ysd!l{+C)y;Wa(ZV-=<+NZKV;v4mt}v2m>`v$-$3b;GsLxf= zd~f(rmfpl``{0aVwN7y!>eGyJFP`L+TxHjHTOS{K^$L2`@6(Rli`{EFwpH@R%eZ6g zwf7rc43Yk!=k;{ z-Rn%~B3amGr}}SxfE$vS8FIPL=Qt57$|R#sSoFgdNUT?fYOYjPl%ZBFpi=jq=DWby7Zxm@y;B<89!9= zbgEH*Uy)~iq5kJLX$+ps$kV`#6jW#|9BGz^`ivNeid(wVbk4jl)VBpW&~;eXNi{#` zwx?{DXR~*sqQcFhY0XCfQ4-*2aN1BGX>$_swtKEqnd>j6vcZ!#0)pXRi?<{!P?tGw z2x_`RD$W)qD{?z}VDPt?+)8*rqLWFIPQ(9-VbBdf{7ff?w9CZ{sIi_gnuC$I0(+P8 zms9XB%}VQ>>pve##}jog6+cD?v~n4Pa9Vmc zg#K$|+`adO=B7`uj35Y}6EZ z{dY`x@w8;R-7zrsr1O_~Jvl*|o-x%jF=Rr1C}GXP^|IYN`1sqmG-oI@R#%X66c#5W z$$tQB)sqwiVm;Y^`Dw3mo|firP{*HsOQJre5%Dm^H@we0FN88VWJ0dja?_U38z73f zrCV!b3qNP0kM#%9T!W5`ynGcg%BL28FW1J-J1_S`BJGCaReQ!am(2%qZ3lLgzq|ns z!!fF@`0=*z)J2BwZ*hO|Yu^cI_nF$9l-Pb3jE7=P8gZ#!xiuZ7-cSa`gb`6mxGTgg z-DLdID?M!Z%+hHB#{?&0$GFRpf+_}q<_wbzX6K?w;%6szz1RbySDSr2r^h_qi$khs zXdZ9A0!_Bf)TR2-^-K~q`FQ!#1x(U4VbV%AA@Ei{%cA(EwC{XfjRi?`&9rav5;Q5% zO1`Rn@OA_ZB@N*mC#)?d3P!}Eh;=NgpIKsy{(yr`hv=aouwt@r&P&}Z3DNWo9ro30 zX52~(aTV$*HHlgB66-4GQru!_AZ|)V*I5X=WG)`N@U&D>e@@C#V@JwEL*L`7#$yes z62C^5%Qniaow2$3HrAc7U{qzpb&FA*xLI1JSWR@`RF=JCcvTI)%dH7;sWInt9JLu# z|Ao|Q?K)cDg_JKsym=joo5gR80wtv01N`um1nQ@Ms0Y*bVzxL34} zo?gizp?`=Y{*W>^Hy2%Jl)y?A+&7s1UVHFixuIy~sawXjcDCL`129cK7|ZQS0u;A} zTJC#WNmqkIrnHpAhHVcM(U^vJA~dl@jf_bs*3?i+=&vuC?Aiy_pcB~=1syDni4 zw+FLuz>F773u#$;NUQ9WDtUPY@+rA3WBhQdKFKOyzkA(URa7;4tW>3jQIfi8v0h3g zJC_HVDXS#>DWb|&se7FHnr=q&l#xg9o02}}u=b-R>@sw={Z zHF*?t2FmhqZ=|qa>x=A!*$S+0T zhO*D*M?NTf-eX`eO)9TIQu{7Dm77Acnj4b1jI9@c*ZL8wL%8kLEhd$KM8=Y!fbN@9 zC7B5#y>JM1n5M)!&im==EgHs2j+xCZG~+~QWCi?s!QyFo2kqx{%jE2n3^N*Ayz6Lp zhg5g^3# z+5FoJ@$u@9WJgPKpUWEd4}4AK9TJKU8W%ms!d0p%OIOX+bY+55zl!vIaz$XFI9Ep+ z;bL_}7PDI2Y`Ng*XY(65 zh0%`@Lve%fc;)N4_g12bNrt6gH=N#OHtxO`$lpWlw=Z6MF+E@;>GkZ#lAZTn`aHwf z&I1|aV#b_VHMIgBN*RzU9i@Z@m}0i>o?({&%fpEfaOpFeaJ7V37;m0?kzd}}Lk@9$ zL}8TEo7WZAcRi%zFZxkr6<0k#X-;lTD`Oc~cDb@olwgWCewvk{GJ}hCXbF!AdiLpd z|Cck$ZTKI?Ack{34Lva7+k=H8K2HTZiurox6F+>dy+@R9T^awxj590D$|kXUg+Ygc z(f)jlRwN(4z$#%PnOVc;#Fv{nAi{#UcXPNcmP#5O{zh_*`=q^JCeia{sN4zHjk2*y zqUVh{Ya{j>SPmP^i#Qfcq_MTqo8g52Fi^F zKBc$$HVI!xFx*4Y9l+nt)$AoZORD}%5I10oI3kx`-N30QueiwIw#0VV2E*Fb-nKW% z=+r^hos`Y-7~{cA1FVbK$_=~*z53+Q8KGjg;>ztg((H12%QTf4OYU8y)C}h5yo#$% z&Q$`vMM*g?ZcatAn2j!hFv8KuN(dw)T*}sF#THDHxo8xC^?vJ zc`U6bVo~hOr6I!8*GTZ<^D~;unKjK=!IR|GB4E>Mcvt*2GK);93jIDd<(nNjHO z4Hi@2^%Uyx=^Z~5eZ!5rO5%4H|eFoNjD#+Kcu%_57zZb4Z@Ak#X6txD^{U3wBl^r+W- zLorkK;uc;NgTj7dGxHQS+@T*T>Q*j4^Ll$ejQqWrwcHyG9y%Mk%m8nBVG5hvSaYm5 zJN^#-Q46kZG)@T8n2^QCjxIwxUVi%s>EY`E?#@_(A~njFrTiDq;8v|W-1jT|ROlNI zU$h|YoD4PVTE^&NC6_m{EAFBVqsM`P*`-AcDGWQygURzM32Xeq2xng~XQsYeTZ5v$ zQLaa2M_Iplw}4eL6fLPu`6`PYcVMysO>`{8CB~glD=TX7?JZcHfHNmykBM?QD)#D) zGp>R*<^D?WhFQKRc^}22l6F=D2RPrxaX2ZF!b1X0XF*d4%=!sbNcS1q2WOUE(7e4$ z^L8f;F)__d3>&KQFE8%$I4h^y5FYBfB&fWzn71_OSrPe-DHV{O#Q;GP z+Tw!J?eVjX19RKH?*hKQWQt8r7B#lYX8xoSHFGCW-*DSQ4EM4M3Mw%gkSYNK18@(e zfzMF}WWaCyS@1y%-~Xg0ry~tkQkUmKuI5lGAua{{vn22V!2T()AU5FpKh@Nv)s^Js zv~@VuUG;=CnLmQR{PeUBQf2;lAV!vG>^Z0N zL88rrjL-*J!43;7C=w9xhcw`yjRKq7o4L9=0SmR9PA-nX12@#h(iIu-0N_xm2OV)( zU_raT0y>$wm^oMi2|U3N;OhF9uy}`<-xVka#DV*l{O0yHzi9vUxa1Qtpi$buR*8cU zd4~lS1pT$L^!0=6qUKOpM+XPsy{f7W#1bjrEwaeN!Ik9(zySIT^pEHvHgJUneFN4) zk=k|$55(g8slmS|@+*4fr2urd3LwjIIZA**g+%l(SZNn4HwQ}y6o`vw>2&mR1X+&q zDa1Af0B;4rAMZMOlHbAqK|R_xuwJ7ANARtFE({-P2o{tJJR<>2KVp)ZK-M;)ejx zd*E~Mka<{OL7%CAhk4n|1qg?97-I!l0rOinjVi#arbgg4bi5;nY5oFL`UWtPk5&L#grSxv zE3!}=1px!ZTLT90aYc^s`~{VojjJml&<`@e41dFP+XU6D0AOkbn2rlI3>^LcqauG& zc$m3Z{!u8LvUrm^fT{qX5yD9{?r(CCiUdck%!T`KIZd2oQJz1joB&M(Teg_>;yS<2-5>BWfSPpG`Rt{!j6>kqMAvl^zk0JUEfy$HVJMkxP-GkwZuxL62me2#pj_5*ZIU zP~#C^OZLfl$HO)v;~~c&JHivn|1I9H5y_CDkt0JLLGKm(4*KLVhJ2jh2#vJuM6`b& zE==-lvME^Oj022xF&IV*? '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +# This is normally unused +# shellcheck disable=SC2034 +APP_BASE_NAME=${0##*/} +APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + if ! command -v java >/dev/null 2>&1 + then + die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC3045 + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC3045 + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Collect all arguments for the java command; +# * $DEFAULT_JVM_OPTS, $JAVA_OPTS, and $GRADLE_OPTS can contain fragments of +# shell script including quotes and variable substitutions, so put them in +# double quotes to make sure that they get re-expanded; and +# * put everything else in single quotes, so that it's not re-expanded. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/gradlew.bat b/gradlew.bat new file mode 100644 index 0000000..93e3f59 --- /dev/null +++ b/gradlew.bat @@ -0,0 +1,92 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +@rem This is normally unused +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/scripts/content-contract.mjs b/scripts/content-contract.mjs new file mode 100644 index 0000000..55206e8 --- /dev/null +++ b/scripts/content-contract.mjs @@ -0,0 +1,203 @@ +import { createHash } from "node:crypto"; + +const trigramPatterns = Object.freeze({ + QIAN: ["YANG", "YANG", "YANG"], + DUI: ["YANG", "YANG", "YIN"], + LI: ["YANG", "YIN", "YANG"], + ZHEN: ["YANG", "YIN", "YIN"], + XUN: ["YIN", "YANG", "YANG"], + KAN: ["YIN", "YANG", "YIN"], + GEN: ["YIN", "YIN", "YANG"], + KUN: ["YIN", "YIN", "YIN"], +}); + +const kingWenPairs = Object.freeze([ + ["QIAN", "QIAN"], ["KUN", "KUN"], ["KAN", "ZHEN"], ["GEN", "KAN"], + ["KAN", "QIAN"], ["QIAN", "KAN"], ["KUN", "KAN"], ["KAN", "KUN"], + ["XUN", "QIAN"], ["QIAN", "DUI"], ["KUN", "QIAN"], ["QIAN", "KUN"], + ["QIAN", "LI"], ["LI", "QIAN"], ["KUN", "GEN"], ["ZHEN", "KUN"], + ["DUI", "ZHEN"], ["GEN", "XUN"], ["KUN", "DUI"], ["XUN", "KUN"], + ["LI", "ZHEN"], ["GEN", "LI"], ["GEN", "KUN"], ["KUN", "ZHEN"], + ["QIAN", "ZHEN"], ["GEN", "QIAN"], ["GEN", "ZHEN"], ["DUI", "XUN"], + ["KAN", "KAN"], ["LI", "LI"], ["DUI", "GEN"], ["ZHEN", "XUN"], + ["QIAN", "GEN"], ["ZHEN", "QIAN"], ["LI", "KUN"], ["KUN", "LI"], + ["XUN", "LI"], ["LI", "DUI"], ["KAN", "GEN"], ["ZHEN", "KAN"], + ["GEN", "DUI"], ["XUN", "ZHEN"], ["DUI", "QIAN"], ["QIAN", "XUN"], + ["DUI", "KUN"], ["KUN", "XUN"], ["DUI", "KAN"], ["KAN", "XUN"], + ["DUI", "LI"], ["LI", "XUN"], ["ZHEN", "ZHEN"], ["GEN", "GEN"], + ["XUN", "GEN"], ["ZHEN", "DUI"], ["ZHEN", "LI"], ["LI", "GEN"], + ["XUN", "XUN"], ["DUI", "DUI"], ["XUN", "KAN"], ["KAN", "DUI"], + ["XUN", "DUI"], ["ZHEN", "GEN"], ["KAN", "LI"], ["LI", "KAN"], +]); + +const kingWenByPair = new Map( + kingWenPairs.map(([upper, lower], index) => [`${upper}/${lower}`, index + 1]), +); + +const unsafeText = /(?:<\s*script\b|javascript\s*:|\bon\w+\s*=|[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f])/iu; + +function isObject(value) { + return typeof value === "object" && value !== null && !Array.isArray(value); +} + +function nonBlank(value) { + return typeof value === "string" && value.trim().length > 0; +} + +function validateText(value, path, errors) { + if (!nonBlank(value)) { + errors.push(`${path} must be non-blank text`); + } else if (unsafeText.test(value)) { + errors.push(`${path} contains script-like markup or an invisible control character`); + } +} + +function validateSixTexts(value, path, errors) { + if (!Array.isArray(value) || value.length !== 6) { + errors.push(`${path} must contain exactly six bottom-up entries`); + return; + } + value.forEach((text, index) => validateText(text, `${path}[${index}]`, errors)); +} + +function canonicalize(value) { + if (Array.isArray(value)) return `[${value.map(canonicalize).join(",")}]`; + if (isObject(value)) { + return `{${Object.keys(value).sort().map((key) => + `${JSON.stringify(key)}:${canonicalize(value[key])}`).join(",")}}`; + } + return JSON.stringify(value); +} + +export function contentDigest(contentPackage) { + return createHash("sha256").update(canonicalize(contentPackage), "utf8").digest("hex"); +} + +export function kingWenEntries() { + return kingWenPairs.map(([upperTrigram, lowerTrigram], index) => ({ + kingWenNumber: index + 1, + upperTrigram, + lowerTrigram, + patternBottomUp: [...trigramPatterns[lowerTrigram], ...trigramPatterns[upperTrigram]], + })); +} + +export function validateContentPackage(contentPackage) { + const errors = []; + if (!isObject(contentPackage)) return ["content package must be an object"]; + if (contentPackage.schemaVersion !== 1) errors.push("schemaVersion must be 1"); + validateText(contentPackage.contentVersion, "contentVersion", errors); + + const usage = contentPackage.specialUsageTexts; + if (!isObject(usage) || typeof usage.qian !== "boolean" || typeof usage.kun !== "boolean") { + errors.push("specialUsageTexts must declare boolean qian and kun flags"); + } + + const sourceIds = new Set(); + if (!Array.isArray(contentPackage.sources) || contentPackage.sources.length === 0) { + errors.push("sources must contain at least one licensed source"); + } else { + contentPackage.sources.forEach((source, index) => { + const prefix = `sources[${index}]`; + if (!isObject(source)) { + errors.push(`${prefix} must be an object`); + return; + } + for (const field of ["id", "title", "edition", "license"]) { + validateText(source[field], `${prefix}.${field}`, errors); + } + if (sourceIds.has(source.id)) errors.push(`${prefix}.id must be unique`); + if (nonBlank(source.id)) sourceIds.add(source.id); + try { + const url = new URL(source.url); + if (!["http:", "https:"].includes(url.protocol)) throw new Error("unsupported protocol"); + } catch { + errors.push(`${prefix}.url must be an absolute HTTP(S) URL`); + } + }); + } + + if (!Array.isArray(contentPackage.hexagrams) || contentPackage.hexagrams.length !== 64) { + errors.push("hexagrams must contain exactly 64 entries"); + return errors; + } + + const seenIds = new Set(); + const seenPatterns = new Set(); + contentPackage.hexagrams.forEach((hexagram, index) => { + const prefix = `hexagrams[${index}]`; + if (!isObject(hexagram)) { + errors.push(`${prefix} must be an object`); + return; + } + + if (!Number.isInteger(hexagram.kingWenNumber) || hexagram.kingWenNumber < 1 || hexagram.kingWenNumber > 64) { + errors.push(`${prefix}.kingWenNumber must be an integer from 1 through 64`); + } else if (seenIds.has(hexagram.kingWenNumber)) { + errors.push(`${prefix}.kingWenNumber must be unique`); + } else { + seenIds.add(hexagram.kingWenNumber); + } + + for (const field of ["name", "symbol", "judgmentOriginal", "judgmentPlain"]) { + validateText(hexagram[field], `${prefix}.${field}`, errors); + } + validateSixTexts(hexagram.lineTextsBottomUp, `${prefix}.lineTextsBottomUp`, errors); + validateSixTexts(hexagram.linePlainBottomUp, `${prefix}.linePlainBottomUp`, errors); + + const lowerPattern = trigramPatterns[hexagram.lowerTrigram]; + const upperPattern = trigramPatterns[hexagram.upperTrigram]; + if (!lowerPattern) errors.push(`${prefix}.lowerTrigram is unknown`); + if (!upperPattern) errors.push(`${prefix}.upperTrigram is unknown`); + + if (!Array.isArray(hexagram.patternBottomUp) || hexagram.patternBottomUp.length !== 6 || + hexagram.patternBottomUp.some((line) => line !== "YIN" && line !== "YANG")) { + errors.push(`${prefix}.patternBottomUp must contain exactly six YIN/YANG values`); + } else { + const encoded = hexagram.patternBottomUp.join("/"); + if (seenPatterns.has(encoded)) errors.push(`${prefix}.patternBottomUp must be unique`); + seenPatterns.add(encoded); + if (lowerPattern && upperPattern) { + const expected = [...lowerPattern, ...upperPattern]; + if (encoded !== expected.join("/")) { + errors.push(`${prefix}.patternBottomUp does not match lower/upper trigrams in bottom-up order`); + } + } + } + + if (lowerPattern && upperPattern) { + const expectedId = kingWenByPair.get(`${hexagram.upperTrigram}/${hexagram.lowerTrigram}`); + if (hexagram.kingWenNumber !== expectedId) { + errors.push(`${prefix}.kingWenNumber does not match its King Wen trigram pair`); + } + } + + if (!Array.isArray(hexagram.sourceRefs) || hexagram.sourceRefs.length === 0) { + errors.push(`${prefix}.sourceRefs must not be empty`); + } else { + for (const sourceRef of hexagram.sourceRefs) { + if (!sourceIds.has(sourceRef)) errors.push(`${prefix}.sourceRefs contains unknown source '${sourceRef}'`); + } + if (new Set(hexagram.sourceRefs).size !== hexagram.sourceRefs.length) { + errors.push(`${prefix}.sourceRefs must be unique`); + } + } + + const hasSpecialText = nonBlank(hexagram.specialUsageText); + if (hexagram.specialUsageText !== null && !hasSpecialText) { + errors.push(`${prefix}.specialUsageText must be non-blank text or null`); + } + if (hasSpecialText) validateText(hexagram.specialUsageText, `${prefix}.specialUsageText`, errors); + if (hexagram.kingWenNumber === 1 && isObject(usage) && hasSpecialText !== usage.qian) { + errors.push(`${prefix}.specialUsageText must match specialUsageTexts.qian`); + } else if (hexagram.kingWenNumber === 2 && isObject(usage) && hasSpecialText !== usage.kun) { + errors.push(`${prefix}.specialUsageText must match specialUsageTexts.kun`); + } else if (![1, 2].includes(hexagram.kingWenNumber) && hexagram.specialUsageText !== null) { + errors.push(`${prefix}.specialUsageText is only valid for Qian or Kun`); + } + }); + + if (seenIds.size !== 64) errors.push("King Wen numbers 1 through 64 must each occur exactly once"); + if (seenPatterns.size !== 64) errors.push("all 64 polarity patterns must each occur exactly once"); + return errors; +} diff --git a/scripts/repository-files.mjs b/scripts/repository-files.mjs new file mode 100644 index 0000000..3473a76 --- /dev/null +++ b/scripts/repository-files.mjs @@ -0,0 +1,41 @@ +import { readdir, readFile, stat } from "node:fs/promises"; +import path from "node:path"; + +export const repositoryRoot = path.resolve(import.meta.dirname, ".."); + +const excludedDirectories = new Set([ + ".git", + ".gradle", + ".idea", + "build", + "node_modules", +]); + +export async function walkFiles(directory = repositoryRoot) { + const result = []; + const entries = await readdir(directory, { withFileTypes: true }); + + for (const entry of entries) { + if (entry.isDirectory() && excludedDirectories.has(entry.name)) continue; + const absolutePath = path.join(directory, entry.name); + if (entry.isDirectory()) { + result.push(...(await walkFiles(absolutePath))); + } else if (entry.isFile()) { + result.push(absolutePath); + } + } + + return result; +} + +export async function readTextFileIfSmall(file, maximumBytes = 2_000_000) { + const metadata = await stat(file); + if (metadata.size > maximumBytes) return null; + const buffer = await readFile(file); + if (buffer.includes(0)) return null; + return buffer.toString("utf8"); +} + +export function relative(file) { + return path.relative(repositoryRoot, file).replaceAll(path.sep, "/"); +} diff --git a/scripts/scan-secrets.mjs b/scripts/scan-secrets.mjs new file mode 100644 index 0000000..918e4c5 --- /dev/null +++ b/scripts/scan-secrets.mjs @@ -0,0 +1,47 @@ +import path from "node:path"; +import { + readTextFileIfSmall, + relative, + walkFiles, +} from "./repository-files.mjs"; + +const patterns = [ + ["private key block", /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u], + ["GitHub token", /\bgh[pousr]_[A-Za-z0-9]{30,}\b/u], + ["OpenAI-style key", /\bsk-[A-Za-z0-9_-]{20,}\b/u], + ["Google API key", /\bAIza[0-9A-Za-z_-]{35}\b/u], + ["AWS access key", /\bAKIA[0-9A-Z]{16}\b/u], +]; + +const excludedExtensions = new Set([ + ".gif", + ".ico", + ".jpeg", + ".jpg", + ".pdf", + ".png", + ".webp", + ".zip", +]); + +const findings = []; +for (const file of await walkFiles()) { + if (excludedExtensions.has(path.extname(file).toLowerCase())) continue; + const content = await readTextFileIfSmall(file); + if (content === null) continue; + + for (const [label, pattern] of patterns) { + const match = pattern.exec(content); + if (!match) continue; + const line = content.slice(0, match.index).split(/\r?\n/u).length; + findings.push(`${relative(file)}:${line} (${label})`); + } +} + +if (findings.length > 0) { + console.error("Potential secrets found; values are intentionally redacted:"); + for (const finding of findings) console.error(`- ${finding}`); + process.exitCode = 1; +} else { + console.log("High-confidence secret scan passed."); +} diff --git a/scripts/verify-content-contract.mjs b/scripts/verify-content-contract.mjs new file mode 100644 index 0000000..0c4a185 --- /dev/null +++ b/scripts/verify-content-contract.mjs @@ -0,0 +1,104 @@ +import { readFile } from "node:fs/promises"; +import path from "node:path"; +import { + contentDigest, + kingWenEntries, + validateContentPackage, +} from "./content-contract.mjs"; +import { repositoryRoot } from "./repository-files.mjs"; + +const schemaPath = path.join(repositoryRoot, "content", "schema", "hexagram-content.schema.json"); +const schema = JSON.parse(await readFile(schemaPath, "utf8")); +if (schema.$schema !== "https://json-schema.org/draft/2020-12/schema") { + throw new Error("Content JSON Schema must use draft 2020-12"); +} + +const kotlinCatalogPath = path.join( + repositoryRoot, + "app", + "src", + "main", + "java", + "brainwave", + "domain", + "casting", + "HexagramCatalog.kt", +); +const kotlinCatalog = await readFile(kotlinCatalogPath, "utf8"); +const kotlinPairPattern = /TrigramPair\(Trigram\.(\w+), Trigram\.(\w+)\) to (\d+)/gu; +const kotlinPairs = new Map( + [...kotlinCatalog.matchAll(kotlinPairPattern)].map((match) => [ + `${match[1]}/${match[2]}`, + Number(match[3]), + ]), +); +const contractEntries = kingWenEntries(); +if (kotlinPairs.size !== 64 || contractEntries.some((entry) => + kotlinPairs.get(`${entry.upperTrigram}/${entry.lowerTrigram}`) !== entry.kingWenNumber)) { + throw new Error("Kotlin King Wen catalog and content-contract lookup must match exactly"); +} + +function validFixture() { + return { + schemaVersion: 1, + contentVersion: "fixture-only-v1", + specialUsageTexts: { qian: false, kun: false }, + sources: [{ + id: "fixture-source", + title: "Automated test fixture", + edition: "not publishable", + license: "test data only", + url: "https://example.invalid/fixture", + }], + hexagrams: contractEntries.map((entry) => ({ + ...entry, + name: `fixture-${entry.kingWenNumber}`, + symbol: `fixture-symbol-${entry.kingWenNumber}`, + judgmentOriginal: "fixture original text", + judgmentPlain: "fixture plain text", + lineTextsBottomUp: Array.from({ length: 6 }, (_, index) => `fixture original line ${index + 1}`), + linePlainBottomUp: Array.from({ length: 6 }, (_, index) => `fixture plain line ${index + 1}`), + specialUsageText: null, + sourceRefs: ["fixture-source"], + })), + }; +} + +function clone(value) { + return structuredClone(value); +} + +const fixture = validFixture(); +const validErrors = validateContentPackage(fixture); +if (validErrors.length > 0) { + throw new Error(`Valid content fixture was rejected:\n${validErrors.join("\n")}`); +} + +const digest = contentDigest(fixture); +if (!/^[a-f0-9]{64}$/u.test(digest) || digest !== contentDigest(clone(fixture))) { + throw new Error("Content digest must be a stable SHA-256 value"); +} + +const negativeCases = [ + ["unsupported schema", (value) => { value.schemaVersion = 2; }, "schemaVersion"], + ["duplicate id", (value) => { value.hexagrams[1].kingWenNumber = 1; }, "unique"], + ["wrong bottom-up pattern", (value) => { value.hexagrams[0].patternBottomUp[0] = "YIN"; }, "bottom-up"], + ["five line texts", (value) => { value.hexagrams[0].lineTextsBottomUp.pop(); }, "exactly six"], + ["unknown source", (value) => { value.hexagrams[0].sourceRefs = ["missing"]; }, "unknown source"], + ["blank license", (value) => { value.sources[0].license = " "; }, "non-blank"], + ["script content", (value) => { value.hexagrams[0].judgmentPlain = ""; }, "script-like"], + ["special declaration mismatch", (value) => { value.specialUsageTexts.qian = true; }, "specialUsageTexts.qian"], +]; + +for (const [name, mutate, expected] of negativeCases) { + const candidate = clone(fixture); + mutate(candidate); + const errors = validateContentPackage(candidate); + if (!errors.some((error) => error.includes(expected))) { + throw new Error(`${name} fixture did not fail with '${expected}':\n${errors.join("\n")}`); + } +} + +console.log( + `Content contract verification passed (64 entries cross-checked with Kotlin, ${negativeCases.length} negative fixtures, digest ${digest.slice(0, 12)}…).`, +); diff --git a/scripts/verify-docs.mjs b/scripts/verify-docs.mjs new file mode 100644 index 0000000..bc067fa --- /dev/null +++ b/scripts/verify-docs.mjs @@ -0,0 +1,67 @@ +import { access } from "node:fs/promises"; +import path from "node:path"; +import { + readTextFileIfSmall, + relative, + repositoryRoot, + walkFiles, +} from "./repository-files.mjs"; + +const requiredDocuments = [ + "AGENTS.md", + "docs/README.md", + "docs/agent-playbook.md", + "docs/implementation-plan.md", + "docs/quality-gates.md", + "docs/decisions.md", +]; + +const failures = []; + +for (const required of requiredDocuments) { + try { + await access(path.join(repositoryRoot, required)); + } catch { + failures.push(`missing required document: ${required}`); + } +} + +const markdownFiles = (await walkFiles()).filter((file) => file.endsWith(".md")); +const markdownLink = /!?\[[^\]]*\]\(([^)]+)\)/g; + +for (const markdownFile of markdownFiles) { + const content = await readTextFileIfSmall(markdownFile); + if (content === null) continue; + + for (const match of content.matchAll(markdownLink)) { + let target = match[1].trim(); + if (target.startsWith("<") && target.endsWith(">")) { + target = target.slice(1, -1); + } + target = target.split(/\s+["']/u, 1)[0]; + if ( + target === "" || + target.startsWith("#") || + /^[a-z][a-z\d+.-]*:/iu.test(target) + ) { + continue; + } + + const pathPart = target.split("#", 1)[0].split("?", 1)[0]; + const decodedPath = decodeURIComponent(pathPart); + const resolved = path.resolve(path.dirname(markdownFile), decodedPath); + try { + await access(resolved); + } catch { + failures.push(`${relative(markdownFile)} -> ${target}`); + } + } +} + +if (failures.length > 0) { + console.error("Documentation verification failed:"); + for (const failure of failures) console.error(`- ${failure}`); + process.exitCode = 1; +} else { + console.log(`Documentation verification passed (${markdownFiles.length} Markdown files).`); +} diff --git a/scripts/verify-domain-boundaries.mjs b/scripts/verify-domain-boundaries.mjs new file mode 100644 index 0000000..2a9eb1f --- /dev/null +++ b/scripts/verify-domain-boundaries.mjs @@ -0,0 +1,47 @@ +import path from "node:path"; +import { + readTextFileIfSmall, + relative, + repositoryRoot, + walkFiles, +} from "./repository-files.mjs"; + +const domainRoot = path.join(repositoryRoot, "app", "src", "main", "java", "brainwave", "domain"); +const forbiddenImports = [ + /^android\./u, + /^androidx\./u, + /^com\.google\.dagger\./u, + /^dagger\./u, + /^okhttp3\./u, + /^retrofit2\./u, + /^io\.ktor\./u, + /^androidx\.room\./u, +]; + +const failures = []; +let kotlinFiles = []; +try { + kotlinFiles = (await walkFiles(domainRoot)).filter((file) => file.endsWith(".kt")); +} catch { + failures.push(`domain source directory is missing: ${relative(domainRoot)}`); +} + +for (const file of kotlinFiles) { + const content = await readTextFileIfSmall(file); + if (content === null) continue; + for (const [index, line] of content.split(/\r?\n/u).entries()) { + const match = /^\s*import\s+([^\s]+)/u.exec(line); + if (!match) continue; + if (forbiddenImports.some((pattern) => pattern.test(match[1]))) { + failures.push(`${relative(file)}:${index + 1} forbidden import ${match[1]}`); + } + } +} + +if (failures.length > 0) { + console.error("Domain boundary verification failed:"); + for (const failure of failures) console.error(`- ${failure}`); + process.exitCode = 1; +} else { + console.log(`Domain boundary verification passed (${kotlinFiles.length} Kotlin files).`); +} diff --git a/scripts/verify-format.mjs b/scripts/verify-format.mjs new file mode 100644 index 0000000..531b0a7 --- /dev/null +++ b/scripts/verify-format.mjs @@ -0,0 +1,54 @@ +import path from "node:path"; +import { + readTextFileIfSmall, + relative, + walkFiles, +} from "./repository-files.mjs"; + +const checkedExtensions = new Set([ + ".css", + ".html", + ".js", + ".json", + ".kt", + ".kts", + ".md", + ".mjs", + ".properties", + ".toml", + ".xml", + ".yaml", + ".yml", +]); + +const failures = []; +let checked = 0; +for (const file of await walkFiles()) { + if (!checkedExtensions.has(path.extname(file).toLowerCase())) continue; + const content = await readTextFileIfSmall(file); + if (content === null) continue; + checked += 1; + + if (content.length > 0 && !content.endsWith("\n")) { + failures.push(`${relative(file)} must end with a newline`); + } + content.split(/\r?\n/u).forEach((line, index) => { + if (/[ \t]+$/u.test(line)) failures.push(`${relative(file)}:${index + 1} has trailing whitespace`); + }); + + if (file.endsWith(".json")) { + try { + JSON.parse(content); + } catch (error) { + failures.push(`${relative(file)} is invalid JSON: ${error.message}`); + } + } +} + +if (failures.length > 0) { + console.error("Formatting verification failed:"); + for (const failure of failures) console.error(`- ${failure}`); + process.exitCode = 1; +} else { + console.log(`Formatting verification passed (${checked} text files).`); +} diff --git a/scripts/verify-prototype.mjs b/scripts/verify-prototype.mjs new file mode 100644 index 0000000..c38142a --- /dev/null +++ b/scripts/verify-prototype.mjs @@ -0,0 +1,23 @@ +import { spawnSync } from "node:child_process"; +import path from "node:path"; +import { repositoryRoot } from "./repository-files.mjs"; + +const scripts = ["prototype/app.js", "prototype/capture.mjs"]; +const failures = []; + +for (const script of scripts) { + const result = spawnSync(process.execPath, ["--check", path.join(repositoryRoot, script)], { + encoding: "utf8", + }); + if (result.status !== 0) { + failures.push(`${script}: ${(result.stderr || result.stdout).trim()}`); + } +} + +if (failures.length > 0) { + console.error("Prototype syntax verification failed:"); + for (const failure of failures) console.error(`- ${failure}`); + process.exitCode = 1; +} else { + console.log(`Prototype syntax verification passed (${scripts.length} files).`); +} diff --git a/settings.gradle.kts b/settings.gradle.kts new file mode 100644 index 0000000..5523ac9 --- /dev/null +++ b/settings.gradle.kts @@ -0,0 +1,19 @@ +pluginManagement { + repositories { + gradlePluginPortal() + google() + mavenCentral() + } +} + +dependencyResolutionManagement { + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} + +// Repository code name only. This is not the formal product name (TBD-001). +rootProject.name = "brainwave" +include(":app")