From caf7f1ccdac8a8d463e71fd112facf6a7fdd2a01 Mon Sep 17 00:00:00 2001 From: Kesku <62210496+kesku@users.noreply.github.com> Date: Sat, 21 Feb 2026 04:03:52 +0000 Subject: [PATCH] feat(perplexity): update Responses API integration to match Agent API (#21530) --- .circleci/config.yml | 625 +- .circleci/requirements.txt | 3 +- .dockerignore | 2 +- .../helm-oci-chart-releaser/action.yml | 19 +- .github/pull_request_template.md | 1 + .github/workflows/test-linting.yml | 2 +- .github/workflows/test-litellm-matrix.yml | 118 + .github/workflows/test-litellm-ui-build.yml | 32 + .github/workflows/test-litellm.yml | 14 +- .github/workflows/test-mcp.yml | 4 +- .github/workflows/test-model-map.yaml | 15 + .github/workflows/test_server_root_path.yml | 96 + .gitignore | 11 +- .semgrep/rules/README.md | 22 + .../python/reliability/unbounded-memory.yml | 17 + .semgrep/rules/python/unbounded-memory.yml | 14 + .trivyignore | 12 + AGENTS.md | 8 +- CLAUDE.md | 1 + CONTRIBUTING.md | 48 +- Dockerfile | 43 +- Makefile | 109 +- README.md | 15 +- ci_cd/.grype.yaml | 33 + ci_cd/security_scans.sh | 24 +- cookbook/anthropic_agent_sdk/README.md | 144 + .../anthropic_agent_sdk/agent_with_mcp.py | 140 + cookbook/anthropic_agent_sdk/common.py | 160 + .../anthropic_agent_sdk/config.example.yaml | 25 + cookbook/anthropic_agent_sdk/main.py | 95 + cookbook/anthropic_agent_sdk/requirements.txt | 2 + cookbook/livekit_agent_sdk/README.md | 114 + .../livekit_agent_sdk/config.example.yaml | 21 + cookbook/livekit_agent_sdk/main.py | 112 + cookbook/livekit_agent_sdk/requirements.txt | 2 + .../mock_prompt_management_server/README.md | 293 + .../mock_prompt_management_server.py | 390 + cookbook/nova_sonic_realtime.py | 288 + deploy/charts/litellm-helm/Chart.yaml | 4 + .../litellm-helm/templates/deployment.yaml | 4 + .../templates/migrations-job.yaml | 4 + deploy/charts/litellm-helm/values.yaml | 9 + docker/Dockerfile.custom_ui | 14 +- docker/Dockerfile.database | 28 +- docker/Dockerfile.dev | 28 +- docker/Dockerfile.non_root | 38 +- docker/README.md | 5 +- .../index.md | 1 + .../blog/claude_code_beta_headers/index.md | 177 + docs/my-website/blog/claude_opus_4_6/index.md | 730 + .../blog/claude_sonnet_4_6/index.md | 283 + .../fastapi_middleware_performance/index.mdx | 220 + docs/my-website/blog/gemini_3/index.md | 1 + docs/my-website/blog/gemini_3_flash/index.md | 1 + .../blog/litellm_observatory/index.md | 136 + docs/my-website/blog/minimax_m2_5/index.md | 394 + .../blog/model_cost_map_incident/index.md | 95 + .../sub_millisecond_proxy_overhead/index.md | 92 + .../blog/vllm_embeddings_incident/index.md | 117 + docs/my-website/docs/a2a.md | 227 +- docs/my-website/docs/a2a_invoking_agents.md | 280 + .../adding_provider/generic_guardrail_api.md | 7 + .../generic_prompt_management_api.md | 576 + .../simple_guardrail_tutorial.md | 7 +- docs/my-website/docs/benchmarks.md | 31 +- .../docs/completion/message_sanitization.md | 465 + docs/my-website/docs/completion/web_search.md | 134 +- docs/my-website/docs/enterprise.md | 12 + docs/my-website/docs/evals_api.md | 441 + .../docs/extras/contributing_code.md | 150 +- .../integrations/websearch_interception.md | 411 + docs/my-website/docs/load_test.md | 5 +- docs/my-website/docs/load_test_advanced.md | 6 +- docs/my-website/docs/mcp.md | 13 +- docs/my-website/docs/mcp_oauth.md | 337 + docs/my-website/docs/mcp_public_internet.md | 251 + docs/my-website/docs/mcp_semantic_filter.md | 158 + docs/my-website/docs/mcp_troubleshoot.md | 47 +- docs/my-website/docs/observability/datadog.md | 9 + .../observability/langfuse_integration.md | 60 + docs/my-website/docs/pass_through/bedrock.md | 144 + .../docs/pass_through/openai_passthrough.md | 25 +- .../my-website/docs/projects/openai-agents.md | 113 +- docs/my-website/docs/providers/anthropic.md | 71 + .../docs/providers/anthropic_tool_search.md | 450 +- .../providers/azure_ai/azure_model_router.md | 163 +- docs/my-website/docs/providers/bedrock.md | 2 +- .../providers/bedrock_realtime_with_audio.md | 362 + docs/my-website/docs/providers/dashscope.md | 28 +- docs/my-website/docs/providers/elevenlabs.md | 27 + docs/my-website/docs/providers/gemini.md | 53 + .../docs/providers/github_copilot.md | 35 +- .../docs/providers/litellm_proxy.md | 22 + docs/my-website/docs/providers/openai.md | 65 +- .../docs/providers/openai/responses_api.md | 18 + docs/my-website/docs/providers/perplexity.md | 364 + docs/my-website/docs/providers/sarvam.md | 92 + docs/my-website/docs/providers/scaleway.md | 62 + .../docs/providers/vertex_speech.md | 5 +- .../docs/providers/watsonx/rerank.md | 52 + .../my-website/docs/providers/xai_realtime.md | 308 + docs/my-website/docs/proxy/access_groups.md | 122 + docs/my-website/docs/proxy/admin_ui_sso.md | 108 +- docs/my-website/docs/proxy/call_hooks.md | 41 + docs/my-website/docs/proxy/cli.md | 391 +- docs/my-website/docs/proxy/cli_sso.md | 31 + docs/my-website/docs/proxy/config_settings.md | 68 +- docs/my-website/docs/proxy/configs.md | 1 + docs/my-website/docs/proxy/custom_pricing.md | 46 + docs/my-website/docs/proxy/custom_sso.md | 12 + docs/my-website/docs/proxy/deploy.md | 1 + docs/my-website/docs/proxy/embedding.md | 10 + .../docs/proxy/forward_client_headers.md | 46 + .../proxy/guardrails/custom_code_guardrail.md | 332 + .../docs/proxy/guardrails/grayswan.md | 197 +- .../proxy/guardrails/guardrail_policies.md | 396 + .../docs/proxy/guardrails/onyx_security.md | 3 + .../docs/proxy/guardrails/policy_tags.md | 139 + .../docs/proxy/guardrails/policy_templates.md | 296 + .../docs/proxy/guardrails/quick_start.md | 12 +- .../docs/proxy/guardrails/zscaler_ai_guard.md | 28 +- .../docs/proxy/keys_teams_router_settings.md | 150 + .../docs/proxy/litellm_managed_files.md | 2 +- docs/my-website/docs/proxy/load_balancing.md | 61 + docs/my-website/docs/proxy/logging.md | 1 + docs/my-website/docs/proxy/prod.md | 128 +- docs/my-website/docs/proxy/prometheus.md | 15 +- .../docs/proxy/prompt_management.md | 55 +- .../docs/proxy/pyroscope_profiling.md | 43 + docs/my-website/docs/proxy/release_cycle.md | 8 +- docs/my-website/docs/proxy/request_tags.md | 58 + .../docs/proxy/sync_anthropic_beta_headers.md | 128 + docs/my-website/docs/proxy/team_budgets.md | 1 - .../docs/proxy/ui/page_visibility.md | 121 + docs/my-website/docs/proxy/ui_logs.md | 44 +- .../docs/proxy/ui_spend_log_settings.md | 92 + .../docs/proxy/ui_team_soft_budget_alerts.md | 130 + docs/my-website/docs/proxy/users.md | 11 +- docs/my-website/docs/proxy/virtual_keys.md | 7 +- docs/my-website/docs/proxy_auth.md | 333 + docs/my-website/docs/rag_ingest.md | 78 +- docs/my-website/docs/realtime.md | 19 +- docs/my-website/docs/rerank.md | 47 +- docs/my-website/docs/response_api.md | 157 +- docs/my-website/docs/routing.md | 41 +- docs/my-website/docs/search/index.md | 1 + docs/my-website/docs/traffic_mirroring.md | 83 + docs/my-website/docs/troubleshoot.md | 27 +- .../docs/troubleshoot/max_callbacks.md | 68 + .../docs/troubleshoot/prisma_migrations.md | 113 + .../docs/troubleshoot/spend_queue_warnings.md | 46 + .../my-website/docs/troubleshoot/ui_issues.md | 49 + .../docs/tutorials/claude_agent_sdk.md | 115 + .../tutorials/claude_code_beta_headers.md | 279 + .../claude_code_plugin_marketplace.md | 4 +- .../claude_code_prompt_cache_routing.md | 43 + docs/my-website/docs/tutorials/claude_mcp.md | 72 +- .../docs/tutorials/copilotkit_sdk.md | 99 + .../docs/tutorials/livekit_xai_realtime.md | 190 + .../docs/tutorials/opencode_integration.md | 3 - docs/my-website/img/a2a_agent_spend.png | Bin 0 -> 188367 bytes docs/my-website/img/a2a_trace_grouping.png | Bin 0 -> 396967 bytes docs/my-website/img/okta_access_policies.png | Bin 0 -> 84047 bytes .../img/okta_authorization_server.png | Bin 0 -> 53146 bytes .../img/okta_client_credentials.png | Bin 0 -> 65238 bytes docs/my-website/img/okta_redirect_uri.png | Bin 0 -> 61377 bytes docs/my-website/img/okta_security_api.png | Bin 0 -> 38685 bytes docs/my-website/img/policy_team_attach.png | Bin 0 -> 230432 bytes docs/my-website/img/policy_test_matching.png | Bin 0 -> 205179 bytes .../img/release_notes/guard_actions.png | Bin 0 -> 518671 bytes .../img/release_notes/mcp_internet.png | Bin 0 -> 741206 bytes docs/my-website/img/ui_access_groups.png | Bin 0 -> 346391 bytes .../img/ui_granular_router_settings.png | Bin 0 -> 359348 bytes .../my-website/img/ui_spend_logs_settings.png | Bin 0 -> 351095 bytes .../img/ui_team_soft_budget_alerts.png | Bin 0 -> 335582 bytes .../img/ui_team_soft_budget_email_example.png | Bin 0 -> 51534 bytes docs/my-website/img/ui_tools.png | Bin 0 -> 430362 bytes docs/my-website/package-lock.json | 7 + docs/my-website/package.json | 2 + .../my-website/release_notes/v1.81.0/index.md | 6 +- docs/my-website/release_notes/v1.81.12.md | 433 + .../release_notes/v1.81.3-stable/index.md | 423 + docs/my-website/release_notes/v1.81.6.md | 392 + docs/my-website/release_notes/v1.81.9.md | 382 + docs/my-website/sidebars.js | 237 +- .../BaseHTTPMiddlewareAnimation.tsx | 133 + .../BenchmarkVisualization.tsx | 337 + .../MiddlewareDiagrams/PureASGIAnimation.tsx | 67 + .../components/MiddlewareDiagrams/index.tsx | 3 + .../MiddlewareDiagrams/styles.module.css | 494 + docs/my-website/src/pages/troubleshoot.md | 11 - .../src/theme/BlogListPage/index.js | 123 + .../src/theme/BlogListPage/styles.module.css | 163 + ...litellm_enterprise-0.1.29-py3-none-any.whl | Bin 0 -> 111358 bytes .../dist/litellm_enterprise-0.1.29.tar.gz | Bin 0 -> 48839 bytes ...litellm_enterprise-0.1.30-py3-none-any.whl | Bin 0 -> 112487 bytes .../dist/litellm_enterprise-0.1.30.tar.gz | Bin 0 -> 49964 bytes ...litellm_enterprise-0.1.31-py3-none-any.whl | Bin 0 -> 112741 bytes .../dist/litellm_enterprise-0.1.31.tar.gz | Bin 0 -> 50205 bytes ...litellm_enterprise-0.1.32-py3-none-any.whl | Bin 0 -> 117096 bytes .../dist/litellm_enterprise-0.1.32.tar.gz | Bin 0 -> 53648 bytes enterprise/enterprise_hooks/__init__.py | 5 + .../send_emails/base_email.py | 119 +- .../proxy/auth/route_checks.py | 7 +- .../proxy/common_utils/check_batch_cost.py | 53 +- .../proxy/hooks/managed_files.py | 469 +- .../proxy/hooks/managed_vector_stores.py | 464 + .../proxy/vector_stores/endpoints.py | 2 + enterprise/pyproject.toml | 4 +- litellm-js/spend-logs/package.json | 4 +- litellm-proxy-extras/build_and_publish.md | 127 + ...tellm_proxy_extras-0.4.26-py3-none-any.whl | Bin 0 -> 49777 bytes .../dist/litellm_proxy_extras-0.4.26.tar.gz | Bin 0 -> 22962 bytes ...tellm_proxy_extras-0.4.27-py3-none-any.whl | Bin 0 -> 50073 bytes .../dist/litellm_proxy_extras-0.4.27.tar.gz | Bin 0 -> 23269 bytes ...tellm_proxy_extras-0.4.28-py3-none-any.whl | Bin 0 -> 50208 bytes .../dist/litellm_proxy_extras-0.4.28.tar.gz | Bin 0 -> 23405 bytes ...tellm_proxy_extras-0.4.29-py3-none-any.whl | Bin 0 -> 50734 bytes .../dist/litellm_proxy_extras-0.4.29.tar.gz | Bin 0 -> 23561 bytes ...tellm_proxy_extras-0.4.30-py3-none-any.whl | Bin 0 -> 51217 bytes .../dist/litellm_proxy_extras-0.4.30.tar.gz | Bin 0 -> 23752 bytes ...tellm_proxy_extras-0.4.31-py3-none-any.whl | Bin 0 -> 51624 bytes .../dist/litellm_proxy_extras-0.4.31.tar.gz | Bin 0 -> 23846 bytes ...tellm_proxy_extras-0.4.32-py3-none-any.whl | Bin 0 -> 52112 bytes .../dist/litellm_proxy_extras-0.4.32.tar.gz | Bin 0 -> 23921 bytes ...tellm_proxy_extras-0.4.33-py3-none-any.whl | Bin 0 -> 52533 bytes .../dist/litellm_proxy_extras-0.4.33.tar.gz | Bin 0 -> 23973 bytes ...tellm_proxy_extras-0.4.34-py3-none-any.whl | Bin 0 -> 53171 bytes .../dist/litellm_proxy_extras-0.4.34.tar.gz | Bin 0 -> 24232 bytes ...tellm_proxy_extras-0.4.35-py3-none-any.whl | Bin 0 -> 53616 bytes .../dist/litellm_proxy_extras-0.4.35.tar.gz | Bin 0 -> 24378 bytes ...tellm_proxy_extras-0.4.36-py3-none-any.whl | Bin 0 -> 54409 bytes .../dist/litellm_proxy_extras-0.4.36.tar.gz | Bin 0 -> 24664 bytes ...tellm_proxy_extras-0.4.37-py3-none-any.whl | Bin 0 -> 55573 bytes .../dist/litellm_proxy_extras-0.4.37.tar.gz | Bin 0 -> 25050 bytes ...tellm_proxy_extras-0.4.40-py3-none-any.whl | Bin 0 -> 57362 bytes .../dist/litellm_proxy_extras-0.4.40.tar.gz | Bin 0 -> 25525 bytes .../litellm_proxy_extras/_logging.py | 40 +- .../migration.sql | 10 +- .../migration.sql | 51 + .../migration.sql | 13 + .../migration.sql | 19 + .../migration.sql | 6 + .../migration.sql | 3 + .../migration.sql | 3 + .../migration.sql | 3 + .../migration.sql | 8 + .../migration.sql | 3 + .../migration.sql | 33 + .../migration.sql | 22 + .../migration.sql | 3 + .../20260214094754_schema_sync/migration.sql | 3 + .../migration.sql | 2 + .../migration.sql | 3 + .../litellm_proxy_extras/schema.prisma | 115 +- .../litellm_proxy_extras/utils.py | 109 +- litellm-proxy-extras/migration_runbook.md | 37 +- litellm-proxy-extras/pyproject.toml | 4 +- litellm/__init__.py | 75 +- litellm/_lazy_imports_registry.py | 1058 +- litellm/_logging.py | 148 +- litellm/_service_logger.py | 4 +- litellm/a2a_protocol/__init__.py | 14 + litellm/a2a_protocol/card_resolver.py | 144 + .../a2a_protocol/exception_mapping_utils.py | 203 + litellm/a2a_protocol/exceptions.py | 150 + litellm/a2a_protocol/main.py | 204 +- litellm/anthropic_beta_headers_config.json | 182 + litellm/anthropic_beta_headers_manager.py | 377 + litellm/batch_completion/main.py | 32 +- litellm/batches/batch_utils.py | 114 +- litellm/batches/main.py | 9 +- litellm/caching/dual_cache.py | 66 +- litellm/caching/redis_cache.py | 2 +- litellm/caching/redis_cluster_cache.py | 2 +- .../transformation.py | 382 +- litellm/constants.py | 158 +- litellm/cost_calculator.py | 267 +- litellm/evals/__init__.py | 33 + litellm/evals/main.py | 1944 ++ litellm/experimental_mcp_client/client.py | 174 +- litellm/files/main.py | 19 +- .../SlackAlerting/slack_alerting.py | 5 + litellm/integrations/arize/_utils.py | 457 +- litellm/integrations/arize/arize.py | 35 + litellm/integrations/arize/arize_phoenix.py | 186 +- litellm/integrations/braintrust_logging.py | 12 + .../integrations/braintrust_mock_client.py | 131 + litellm/integrations/cloudzero/transform.py | 30 +- litellm/integrations/custom_guardrail.py | 112 +- litellm/integrations/custom_logger.py | 151 +- litellm/integrations/datadog/datadog.py | 131 +- .../datadog/datadog_cost_management.py | 20 +- .../integrations/datadog/datadog_handler.py | 11 + .../integrations/datadog/datadog_llm_obs.py | 33 +- .../datadog/datadog_mock_client.py | 28 + .../integrations/email_templates/templates.py | 24 + litellm/integrations/gcs_bucket/gcs_bucket.py | 14 +- .../gcs_bucket/gcs_bucket_base.py | 13 + .../gcs_bucket/gcs_bucket_mock_client.py | 192 + litellm/integrations/helicone.py | 15 +- litellm/integrations/helicone_mock_client.py | 32 + litellm/integrations/langfuse/langfuse.py | 28 +- .../langfuse/langfuse_mock_client.py | 35 + .../integrations/langfuse/langfuse_otel.py | 96 +- .../langfuse/langfuse_prompt_management.py | 92 +- litellm/integrations/langsmith.py | 23 +- litellm/integrations/langsmith_mock_client.py | 29 + litellm/integrations/mock_client_factory.py | 216 + litellm/integrations/opentelemetry.py | 261 +- litellm/integrations/posthog.py | 45 +- litellm/integrations/posthog_mock_client.py | 30 + litellm/integrations/prometheus.py | 556 +- litellm/integrations/prometheus_services.py | 5 + litellm/integrations/s3_v2.py | 83 +- .../websearch_interception/handler.py | 269 +- .../websearch_interception/tools.py | 56 +- .../websearch_interception/transformation.py | 190 +- .../api_route_to_call_types.py | 33 +- litellm/litellm_core_utils/core_helpers.py | 8 +- litellm/litellm_core_utils/env_utils.py | 21 + .../exception_mapping_utils.py | 24 +- .../litellm_core_utils/get_litellm_params.py | 87 +- .../get_llm_provider_logic.py | 10 +- .../litellm_core_utils/get_model_cost_map.py | 201 +- .../initialize_dynamic_callback_params.py | 54 +- litellm/litellm_core_utils/litellm_logging.py | 176 +- .../litellm_core_utils/llm_cost_calc/utils.py | 53 +- .../convert_dict_to_response.py | 6 +- .../logging_callback_manager.py | 29 +- litellm/litellm_core_utils/logging_utils.py | 3 +- litellm/litellm_core_utils/logging_worker.py | 22 + .../litellm_core_utils/model_param_helper.py | 12 +- .../prompt_templates/common_utils.py | 167 +- .../prompt_templates/factory.py | 462 +- .../prompt_templates/image_handling.py | 14 +- litellm/litellm_core_utils/redact_messages.py | 63 +- litellm/litellm_core_utils/safe_json_dumps.py | 9 +- .../streaming_chunk_builder_utils.py | 58 +- .../litellm_core_utils/streaming_handler.py | 130 +- litellm/litellm_core_utils/token_counter.py | 4 +- litellm/llms/a2a/__init__.py | 6 + litellm/llms/a2a/chat/__init__.py | 6 + .../a2a/chat/guardrail_translation/README.md | 155 + .../chat/guardrail_translation/__init__.py | 11 + .../a2a/chat/guardrail_translation/handler.py | 428 + litellm/llms/a2a/chat/streaming_iterator.py | 103 + litellm/llms/a2a/chat/transformation.py | 370 + litellm/llms/a2a/common_utils.py | 152 + .../chat/guardrail_translation/handler.py | 88 +- litellm/llms/anthropic/chat/handler.py | 42 +- litellm/llms/anthropic/chat/transformation.py | 208 +- litellm/llms/anthropic/common_utils.py | 146 +- litellm/llms/anthropic/cost_calculation.py | 16 +- .../adapters/handler.py | 93 +- .../adapters/streaming_iterator.py | 46 +- .../adapters/transformation.py | 457 +- .../messages/transformation.py | 92 +- litellm/llms/azure/azure.py | 50 +- litellm/llms/azure/batches/handler.py | 23 +- .../llms/azure/chat/gpt_5_transformation.py | 8 +- litellm/llms/azure/chat/gpt_transformation.py | 1 + litellm/llms/azure/cost_calculation.py | 37 +- .../llms/azure/responses/transformation.py | 39 +- .../anthropic/count_tokens/transformation.py | 14 +- .../anthropic/messages_transformation.py | 1 - .../llms/azure_ai/anthropic/transformation.py | 2 +- .../azure_ai/azure_model_router/__init__.py | 4 + .../azure_model_router/transformation.py | 125 + litellm/llms/azure_ai/chat/transformation.py | 19 +- litellm/llms/azure_ai/common_utils.py | 85 +- litellm/llms/azure_ai/cost_calculator.py | 121 + .../llms/azure_ai/rerank/transformation.py | 32 +- litellm/llms/base_llm/chat/transformation.py | 20 + litellm/llms/base_llm/evals/__init__.py | 7 + litellm/llms/base_llm/evals/transformation.py | 542 + .../base_llm/managed_resources/__init__.py | 41 + .../base_managed_resource.py | 605 + .../llms/base_llm/managed_resources/utils.py | 364 + .../base_llm/vector_store/transformation.py | 26 +- litellm/llms/bedrock/base_aws_llm.py | 163 +- litellm/llms/bedrock/chat/converse_handler.py | 23 +- .../bedrock/chat/converse_transformation.py | 428 +- litellm/llms/bedrock/chat/invoke_handler.py | 8 +- .../anthropic_claude3_transformation.py | 23 +- litellm/llms/bedrock/common_utils.py | 76 +- litellm/llms/bedrock/cost_calculation.py | 13 +- .../bedrock/embed/cohere_transformation.py | 4 +- .../anthropic_claude3_transformation.py | 219 +- litellm/llms/bedrock/realtime/handler.py | 307 + .../llms/bedrock/realtime/transformation.py | 1156 + litellm/llms/cerebras/chat.py | 11 +- .../llms/chatgpt/responses/transformation.py | 21 +- .../rerank/guardrail_translation/handler.py | 8 +- .../llms/custom_httpx/aiohttp_transport.py | 58 +- litellm/llms/custom_httpx/http_handler.py | 68 +- litellm/llms/custom_httpx/httpx_handler.py | 16 +- litellm/llms/custom_httpx/llm_http_handler.py | 1387 +- .../llms/databricks/chat/transformation.py | 36 +- .../llms/databricks/responses/__init__.py | 0 .../databricks/responses/transformation.py | 100 + litellm/llms/deprecated_providers/palm.py | 2 +- litellm/llms/duckduckgo/search/__init__.py | 6 + .../llms/duckduckgo/search/transformation.py | 252 + .../llms/fireworks_ai/chat/transformation.py | 4 + litellm/llms/gemini/chat/transformation.py | 2 +- litellm/llms/gemini/files/transformation.py | 153 +- .../llms/gemini/image_edit/transformation.py | 5 +- .../gemini/image_generation/transformation.py | 2 + litellm/llms/gigachat/chat/transformation.py | 137 +- .../github_copilot/chat/transformation.py | 51 +- litellm/llms/groq/chat/transformation.py | 8 + .../llms/hosted_vllm/chat/transformation.py | 23 +- .../hosted_vllm/embedding/transformation.py | 180 + litellm/llms/minimax/chat/transformation.py | 29 +- litellm/llms/oci/chat/transformation.py | 50 +- litellm/llms/ollama/chat/transformation.py | 11 +- .../llms/openai/chat/gpt_5_transformation.py | 4 +- .../llms/openai/chat/gpt_transformation.py | 42 +- .../chat/guardrail_translation/handler.py | 35 +- litellm/llms/openai/common_utils.py | 75 +- .../guardrail_translation/handler.py | 21 +- .../guardrail_translation/__init__.py | 13 + .../guardrail_translation/handler.py | 179 + litellm/llms/openai/evals/__init__.py | 7 + litellm/llms/openai/evals/transformation.py | 426 + .../guardrail_translation/handler.py | 8 +- litellm/llms/openai/openai.py | 108 +- litellm/llms/openai/realtime/handler.py | 80 +- .../guardrail_translation/handler.py | 84 +- .../llms/openai/responses/transformation.py | 27 +- .../speech/guardrail_translation/handler.py | 8 +- .../guardrail_translation/handler.py | 7 +- litellm/llms/openai/videos/transformation.py | 45 +- litellm/llms/openai_like/dynamic_config.py | 24 +- litellm/llms/openai_like/embedding/handler.py | 3 +- litellm/llms/openai_like/providers.json | 4 + .../llms/openrouter/chat/transformation.py | 4 + .../guardrail_translation/handler.py | 15 +- litellm/llms/perplexity/responses/__init__.py | 7 + .../perplexity/responses/transformation.py | 492 + litellm/llms/s3_vectors/__init__.py | 1 + .../llms/s3_vectors/vector_stores/__init__.py | 1 + .../vector_stores/transformation.py | 254 + .../sagemaker/embedding/transformation.py | 13 +- litellm/llms/vertex_ai/common_utils.py | 39 +- .../vertex_ai_context_caching.py | 172 +- .../llms/vertex_ai/files/transformation.py | 2 +- .../llms/vertex_ai/gemini/transformation.py | 34 + .../vertex_and_google_ai_studio_gemini.py | 96 +- .../vertex_gemini_transformation.py | 2 + .../vector_stores/rag_api/transformation.py | 9 +- .../transformation.py | 25 +- .../anthropic/transformation.py | 69 +- .../count_tokens/handler.py | 7 +- .../llama3/transformation.py | 104 +- litellm/llms/vertex_ai/vertex_llm_base.py | 19 +- litellm/llms/watsonx/__init__.py | 0 litellm/llms/watsonx/chat/__init__.py | 0 litellm/llms/watsonx/common_utils.py | 2 + litellm/llms/watsonx/completion/__init__.py | 0 litellm/llms/watsonx/embed/__init__.py | 0 litellm/llms/watsonx/rerank/__init__.py | 0 litellm/llms/watsonx/rerank/transformation.py | 204 + litellm/llms/xai/chat/transformation.py | 3 +- litellm/llms/xai/realtime/__init__.py | 5 + litellm/llms/xai/realtime/handler.py | 38 + litellm/llms/xai/responses/transformation.py | 132 +- litellm/llms/zai/chat/transformation.py | 16 +- litellm/main.py | 267 +- ...odel_prices_and_context_window_backup.json | 4212 +++- litellm/policy_templates_backup.json | 1883 ++ .../mcp_server/auth/litellm_auth_handler.py | 2 + .../mcp_server/auth/user_api_key_auth_mcp.py | 148 +- .../mcp_server/discoverable_endpoints.py | 268 +- .../guardrail_translation/handler.py | 102 +- .../_experimental/mcp_server/mcp_debug.py | 329 + .../mcp_server/mcp_server_manager.py | 319 +- .../mcp_server/oauth2_token_cache.py | 163 + .../mcp_server/openapi_to_mcp_generator.py | 34 +- .../mcp_server/rest_endpoints.py | 297 +- .../mcp_server/semantic_tool_filter.py | 250 + .../proxy/_experimental/mcp_server/server.py | 256 +- .../proxy/_experimental/mcp_server/utils.py | 30 +- .../proxy/_experimental/out/404/index.html | 1 + .../_experimental/out/__next.__PAGE__.txt | 31 + .../proxy/_experimental/out/__next._full.txt | 62 + .../proxy/_experimental/out/__next._head.txt | 6 + .../proxy/_experimental/out/__next._index.txt | 7 + .../proxy/_experimental/out/__next._tree.txt | 5 + .../C_XKHLw43nx5HaPfGD7XZ/_buildManifest.js | 16 + .../_clientMiddlewareManifest.json | 1 + .../_ssgManifest.js | 0 .../_next/static/chunks/00bcc8d30dd19793.js | 9 + .../_next/static/chunks/00ff280cdb7d7ee5.js | 1 + .../_next/static/chunks/04b9c7b5c33ea26c.js | 14 + .../_next/static/chunks/06aaedbe7d27898c.js | 1 + .../_next/static/chunks/088a4006aa78f150.js | 1 + .../_next/static/chunks/0a65da2cd24e2ab6.js | 3 + .../_next/static/chunks/0a671fedee641c02.js | 1 + .../_next/static/chunks/0a6c418370a8c183.js | 41 + .../_next/static/chunks/0d1694151d7fdaec.js | 38 + .../_next/static/chunks/1067d2c077cd73d6.js | 4 + .../static/chunks/1098-c3e95c9684ff5e95.js | 1 - .../static/chunks/1108-c2d0c742b6e72436.js | 1 - .../static/chunks/1128-64fa4a41ccaf67ea.js | 1 - .../_next/static/chunks/11383a8b78399079.js | 8 + .../_next/static/chunks/120d96e5e05ab994.js | 2 + .../_next/static/chunks/121a51d3bbb6f362.js | 7 + .../_next/static/chunks/1300460219810c10.js | 4 + .../_next/static/chunks/134f728fa7099e3e.js | 55 + .../static/chunks/137-c6f74fedf576a11b.js | 1 - .../static/chunks/1414-2770d1155b664522.js | 1 - .../static/chunks/1442-024f7e51804e0d7e.js | 1 - .../static/chunks/1623-54c56cbe1afc3953.js | 1 - .../static/chunks/1713-b3fdb241d0f3ae7a.js | 1 - .../_next/static/chunks/179f4b987bc9083f.js | 9 + .../static/chunks/1901-4d02d1f2a71cdbf7.js | 1 - .../_next/static/chunks/193ac6435f936582.js | 1 + .../static/chunks/1994-6637a121c9ee1602.js | 1 - .../_next/static/chunks/1a01cb4063a7b21e.js | 1 + .../_next/static/chunks/1ab4ccc7c0ba9eff.js | 14 + .../_next/static/chunks/1b8186fdb9bf9067.js | 1 + .../_next/static/chunks/1d3826d625e92c33.js | 2 + .../_next/static/chunks/1e0e6eb47fe60159.js | 1 + .../_next/static/chunks/1fe0596a309ad6cf.js | 12 + .../static/chunks/2068-2c78bfc32dc0de5f.js | 4 - .../static/chunks/2117-26a589a1115bdd0a.js | 2 - .../static/chunks/2136-2c0d6e8c18d2c5c4.js | 1 - .../static/chunks/2202-a83ad035a17401aa.js | 1 - .../static/chunks/2227-5ae3f36b0a81c5b4.js | 1 - .../_next/static/chunks/22e715061d511345.js | 8 + .../static/chunks/2378-252212b7a5e313ce.js | 1 - .../static/chunks/2409-e94c05c6f11bb939.js | 1 - .../_next/static/chunks/249ef9d7a08bbfa1.js | 1 + .../static/chunks/2500-811f2612ec5f6830.js | 1 - .../_next/static/chunks/25d1ef14bd591cf9.js | 8 + .../static/chunks/2618-062177b80fc4a38e.js | 1 - .../static/chunks/2699-38ff37315d78ae04.js | 1 - .../_next/static/chunks/26adfa4e8ffc85c7.js | 1 + .../_next/static/chunks/2703702968738794.js | 1 + .../_next/static/chunks/27c7596aa0326b71.js | 4 + .../static/chunks/2820-592c2b4ff874a913.js | 1 - .../static/chunks/2901-0cdd0656eb7463d6.js | 1 - .../static/chunks/292-aaba6c4e7c8d416d.js | 1 - .../static/chunks/2926-a9cb83e61fc8ad20.js | 1 - .../_next/static/chunks/2971c4658f1bcd7d.js | 1 + .../_next/static/chunks/2f04fe05bcb1c150.js | 1 + .../_next/static/chunks/2fdd60613421a228.js | 8 + .../chunks/3014691f-ba91873bc8fe3fad.js | 1 - .../_next/static/chunks/315cda92f466b9ec.js | 8 + .../static/chunks/3242-6e6ec7e18f5d698d.js | 1 - .../static/chunks/3367-58830187e9e5b9fa.js | 1 - .../static/chunks/337-bb33d149e9f461b3.js | 1 - .../_next/static/chunks/3454255bdea68dda.js | 1 + .../static/chunks/3507-14fb4e6cd377d7da.js | 1 - .../static/chunks/353-e55516ea4730f9d4.js | 1 - .../static/chunks/3567-9a29feedd7b63950.js | 5 - .../_next/static/chunks/36ccc2b555a26ad4.js | 4 + .../static/chunks/3709-34dbb332d3a3ac26.js | 1 - .../static/chunks/3862-064a3fb795c75b62.js | 1 - .../_next/static/chunks/3afadb9a550fc886.js | 1 + .../_next/static/chunks/3b30ab8eaa03bc21.js | 4 + .../_next/static/chunks/3b4510be1f4cea1f.js | 1 + .../_next/static/chunks/3d2a01213eb1cc87.js | 1 + .../_next/static/chunks/3dad14bcec641ba8.js | 1 + .../_next/static/chunks/3f369c603677cd7a.js | 1 + .../_next/static/chunks/3f3fa56b5786d58c.css | 1 + .../_next/static/chunks/3f49d66311c27fe1.js | 105 + .../_next/static/chunks/403c4d96324c23a6.js | 3 + .../static/chunks/4077-50cf2a28a79fdcd4.js | 1 - .../_next/static/chunks/40e89c053e10e01c.js | 1 + .../static/chunks/4105-9c3c0ee7c494102f.js | 1 - .../_next/static/chunks/4188d520ca4e5f2b.js | 1 + .../_next/static/chunks/4262f254ec63c549.js | 1 + .../static/chunks/4306-f891b96cf0ee333b.js | 1 - .../static/chunks/4388-2f4ca3419d20af67.js | 1 - .../static/chunks/4470-3ef8ade20eaf2875.js | 1 - .../_next/static/chunks/44edba5625a9a9b4.js | 68 + .../_next/static/chunks/450ebd094f4fa24d.js | 1 + .../_next/static/chunks/4537761df9dff7f0.js | 1 + .../static/chunks/4559-52ca85b2d8893149.js | 1 - .../_next/static/chunks/457923c551f21385.js | 598 + .../_next/static/chunks/4587f4ad9ebcbb4e.js | 12 + .../_next/static/chunks/464560f129260d42.js | 420 + .../_next/static/chunks/46901752d0b0dde9.js | 1 + .../_next/static/chunks/4758898ae55ecd92.js | 1 + .../_next/static/chunks/47656bcac78a726c.js | 1 + .../_next/static/chunks/47ed25bb99ff8a39.js | 1 + .../static/chunks/4817-59d642defb0e86f2.js | 1 - .../static/chunks/4865-c1c0885a93c327fa.js | 1 - .../_next/static/chunks/496b84010c33cf69.js | 1 + .../_next/static/chunks/4980372eaa37b78b.js | 8 + .../_next/static/chunks/4995cc30215f504d.js | 1 + .../_next/static/chunks/4af6a1c366381700.js | 8 + .../_next/static/chunks/4b385187755a737f.js | 1 + .../_next/static/chunks/4bacf5b9194c12f5.js | 8 + .../_next/static/chunks/4e20891f2fd03463.css | 1 + .../_next/static/chunks/4ed86d695abe3c87.js | 1 + .../_next/static/chunks/50779d2c65692de7.js | 1 + .../static/chunks/5105-2998cbe1c9fc8ee4.js | 1 - .../_next/static/chunks/511809a345b510d8.js | 1 + .../static/chunks/5144-bbc18c43eade9aef.js | 1 - .../static/chunks/5202-60292daf4bc5c8fb.js | 1 - .../static/chunks/5319-5b2d4bf2dc450f99.js | 1 - .../_next/static/chunks/53218dce8acb3bff.js | 1 + .../static/chunks/5333-1540faf81c7d7006.js | 1 - .../_next/static/chunks/5365cf27e8d07577.js | 1 + .../_next/static/chunks/536cb86ca75d1f30.js | 1 + .../_next/static/chunks/542a1a209eb732c6.js | 7 + .../_next/static/chunks/54731bb470e07604.js | 1 + .../_next/static/chunks/557a369a3f213cfe.js | 1 + .../_next/static/chunks/5583bc893837fdf8.js | 4 + .../_next/static/chunks/55c4117d5fcd0aae.js | 8 + .../_next/static/chunks/565cdfe156dcb380.js | 1 + .../static/chunks/5695-dbbcbf2da21d2bab.js | 1 - .../static/chunks/5706-1e314cef9ea5c5d6.js | 1 - .../_next/static/chunks/570b2e10aa856e54.js | 1 + .../static/chunks/5733-aa80f52062105ad2.js | 1 - .../static/chunks/5752-f504fb38ff5e13e8.js | 1 - .../static/chunks/5869-426268ba6ad0ce0c.js | 1 - .../_next/static/chunks/58b9eb1766fba8e0.js | 7 + .../static/chunks/5945-8b3b7713d7f416a2.js | 1 - .../static/chunks/5975-758334d6641b9c63.js | 1 - .../static/chunks/5992-287cec06808c74ae.js | 1 - .../_next/static/chunks/5b2b7fd4dd9a44f3.js | 4 + .../_next/static/chunks/5b9c0b6d6c814e58.js | 1 + .../_next/static/chunks/5d1f33f9fa668633.js | 179 + .../_next/static/chunks/5d3e07ae5afa6fa6.js | 105 + .../_next/static/chunks/5d547ead001142ce.js | 7 + .../_next/static/chunks/5db1c5d0d0e548b4.js | 1 + .../_next/static/chunks/5eb6648cefff2d8a.js | 1 + .../_next/static/chunks/5f9c3b92a016f382.js | 14 + .../_next/static/chunks/6008d176e68995d6.js | 1 + .../static/chunks/605-102c0e6d8bb7517c.js | 1 - .../_next/static/chunks/617bc18095fe8025.js | 7 + .../static/chunks/6285-68f82c874b184eba.js | 1 - .../_next/static/chunks/6367dd1d1cf7eeef.js | 1 + .../static/chunks/6399-ccf9cdbdcd5f7abb.js | 1 - .../_next/static/chunks/63f40e445646cfa6.js | 1 + .../_next/static/chunks/64f1a2ef9113d86f.js | 13 + .../static/chunks/6537-f70f2c4278e93458.js | 1 - .../static/chunks/6600-0ec5e2dc66d8b41a.js | 1 - .../static/chunks/6609-3e081758ffbe3786.js | 1 - .../static/chunks/665-d94073042ee5b874.js | 1 - .../static/chunks/6653-e61fdc06093fc0a8.js | 1 - .../_next/static/chunks/66a190706fc6c35a.js | 167 + .../_next/static/chunks/67570d9401e62846.js | 3 + .../_next/static/chunks/6774f9c1f201e744.js | 1 + .../_next/static/chunks/69aeba649b0dc90f.js | 139 + .../_next/static/chunks/6c4c97f1ea6e7d77.js | 4 + .../_next/static/chunks/6d587e6e43260fc9.js | 19 + .../_next/static/chunks/6e033c78c15ab9a6.js | 4 + .../static/chunks/7138-5b134dc8ad670770.js | 1 - .../_next/static/chunks/72250192fd3153b7.js | 1 + .../static/chunks/7271-46e4c11ee6b0a4d6.js | 8 - .../_next/static/chunks/730305e005d7bd1d.js | 105 + .../_next/static/chunks/738c339383c3b4b6.js | 1 + .../_next/static/chunks/74982774ef38dcdb.js | 2 + .../static/chunks/7526-da6b2857a3ca248d.js | 1 - .../static/chunks/766-baf0336e8ba5c686.js | 1 - .../static/chunks/7688-ca173ea41812cf94.js | 1 - .../_next/static/chunks/76a83e13dfaf23db.js | 2 + .../_next/static/chunks/77d897b03fb96fa0.js | 8 + .../static/chunks/7851-c10cbe6fcac2f9d6.js | 1 - .../static/chunks/7906-59ba450db59c8efa.js | 1 - .../static/chunks/7926-108623e14caeb770.js | 1 - .../_next/static/chunks/7ad0165018dc89ce.js | 1 + .../_next/static/chunks/7b788dd93ad868b3.js | 1 + .../_next/static/chunks/7e2badb3d178f837.js | 13 + .../_next/static/chunks/7e3f5ce4b2a613d4.js | 1 + .../_next/static/chunks/7e417dd24c8becd0.js | 1 + .../_next/static/chunks/7f9e9c54ac262de2.js | 1 + .../static/chunks/8014-d6138fce46bba1e2.js | 1 - .../_next/static/chunks/8015668aa5f04beb.js | 1 + .../static/chunks/8049-cb52b16664f13e28.js | 1 - .../static/chunks/8135-881fe2cea0032570.js | 1 - .../_next/static/chunks/814136f5b55e06b6.js | 7 + .../static/chunks/8143-9e4312f059e9ed27.js | 1 - .../static/chunks/816-37c57b39f4e7ece1.js | 1 - .../_next/static/chunks/81bf20526995284e.js | 1 + .../_next/static/chunks/81e224efc874dea6.js | 8 + .../static/chunks/8211-8dd5691abf54d0ca.js | 1 - .../_next/static/chunks/82a6c2af12705c46.js | 1 + .../_next/static/chunks/82ef36abe5e2e833.js | 1 + .../_next/static/chunks/831fda51c425b4a8.js | 1 + .../_next/static/chunks/8354d717e34ebd6f.js | 86 + .../_next/static/chunks/841e807b7dbb7e4f.js | 8 + .../static/chunks/8473-7749355a9a4b1818.js | 1 - .../_next/static/chunks/84884fbf517f5d74.js | 1 + .../static/chunks/8529-6b66d5dba2148164.js | 1 - .../static/chunks/8565-5c05f6bbb9d0662f.js | 1 - .../static/chunks/8582-3a775364dbf07fa8.js | 1 - .../_next/static/chunks/88c74f8b4b20d25a.js | 1 + .../_next/static/chunks/8992001a9a91bc67.js | 1 + .../_next/static/chunks/89b9f8dbb6f0d490.js | 1 + .../_next/static/chunks/8a607e531e36f204.js | 8 + .../_next/static/chunks/8e12212d7a0aeaee.js | 4 + .../_next/static/chunks/9022b46fabff1181.js | 1 + .../static/chunks/9028-2bfc9f09930a0d61.js | 1 - .../static/chunks/9039-e44ff08ca4f37a12.js | 1 - .../static/chunks/9140-09af618948244b82.js | 1 - .../static/chunks/9145-9507437d5b599cea.js | 1 - .../static/chunks/9264-fd8ab51d702e9535.js | 1 - .../_next/static/chunks/92cf5d832080641f.js | 13 + .../_next/static/chunks/93032856602932c1.js | 420 + .../_next/static/chunks/936738f40fc24cc1.js | 8 + .../_next/static/chunks/937c3b6cb00f6b79.js | 13 + .../static/chunks/9409-6eefc92a7f8433ff.js | 1 - .../static/chunks/9584-9d4fd7b3d6a7c9e7.js | 1 - .../_next/static/chunks/97efd6e1c67bedcb.js | 421 + .../static/chunks/9818-6f03d7efd4fb8533.js | 1 - .../_next/static/chunks/983036f73d37142a.js | 7 + .../static/chunks/9841-721a173be76941d1.js | 1 - .../_next/static/chunks/99be180c22b927f8.js | 167 + .../_next/static/chunks/99cf9cf99df5ccfc.js | 1 + .../_next/static/chunks/9cf03e6d4b5b806e.js | 420 + .../_next/static/chunks/9d9fbd3add7d0f88.js | 1 + .../_next/static/chunks/9f5ccd929375c1d6.js | 1 + .../_next/static/chunks/a0f302271a793712.js | 4 + .../_next/static/chunks/a1c3d7b907b7b731.js | 8 + .../_next/static/chunks/a1ef280b7ad5ae6a.js | 3 + .../_next/static/chunks/a21582fe1f52b973.js | 2 + .../_next/static/chunks/a382857dbbcea5d1.js | 50 + .../_next/static/chunks/a44b0c08814c45ae.js | 1 + .../_next/static/chunks/a6bf78649679c265.js | 1 + .../_next/static/chunks/a6dad97d9634a72d.js | 1 + .../static/chunks/a6dad97d9634a72d.js.map | 1 + .../_next/static/chunks/a7aecb91c09b0e9a.js | 216 + .../_next/static/chunks/a7b79d0fe43dcbd0.js | 1 + .../_next/static/chunks/a7c0a41b6156d9b2.js | 1 + .../_next/static/chunks/a966296c3a6b28f6.js | 2 + .../_next/static/chunks/a9ebedc318fa36dc.js | 1 + .../_next/static/chunks/ab7a826839e7e423.js | 1 + .../api-reference/page-a6a3e9e67b671303.js | 1 - .../api-playground/page-67c4f150eba92e64.js | 1 - .../budgets/page-e471b9b73cfc894b.js | 1 - .../caching/page-d31cc105402ab7e0.js | 1 - .../old-usage/page-5e097dbb8ce40bb4.js | 1 - .../prompts/page-8236f1efda3366f0.js | 1 - .../tag-management/page-5627fd94813402eb.js | 1 - .../guardrails/page-060e61cb783d32ef.js | 1 - .../(dashboard)/layout-f7f722423efd1c5b.js | 1 - .../(dashboard)/logs/page-5a10d46ca991b83e.js | 1 - .../model-hub/page-1479dcb217587498.js | 1 - .../page-b69988590beaa5c8.js | 1 - .../organizations/page-56a03e123f452d60.js | 1 - .../playground/page-fc3dff494dc4db08.js | 1 - .../admin-settings/page-746658933a633902.js | 1 - .../page-e3df74ef5ac0dcd5.js | 1 - .../router-settings/page-ffa3245ebcbbc02a.js | 1 - .../ui-theme/page-d833946961b065a5.js | 1 - .../teams/page-8d1a71afa9e9ff16.js | 1 - .../test-key/page-63cd64b722408984.js | 1 - .../mcp-servers/page-7dd2ea6f1433d41f.js | 1 - .../vector-stores/page-0f618cc2d6cae794.js | 1 - .../usage/page-d7532f354d44803b.js | 1 - .../users/page-6d3643cef6c068ee.js | 1 - .../virtual-keys/page-73444bcb0cfe86b7.js | 1 - .../app/_not-found/page-e8d298ce4e35f231.js | 1 - .../chunks/app/layout-bed96765a7fb7bdd.js | 1 - .../chunks/app/login/page-61bfa80619b62f6b.js | 1 - .../oauth/callback/page-01be1cae3559363d.js | 1 - .../app/model_hub/page-92347d2021ca8580.js | 1 - .../model_hub_table/page-2ad344049541235f.js | 1 - .../app/onboarding/page-17ecf5bf068f8157.js | 1 - .../chunks/app/page-587b0acf34f8c747.js | 1 - .../_next/static/chunks/b5bcd87b218a6bcd.js | 14 + .../_next/static/chunks/b64beb414bc36659.js | 1 + .../_next/static/chunks/b85f190e8626c49c.js | 1 + .../_next/static/chunks/ba5a05afc286361c.js | 8 + .../_next/static/chunks/bdf355b41816a002.js | 82 + .../_next/static/chunks/be340f56c7da1645.js | 1 + .../_next/static/chunks/bf880fd979d4a2e6.js | 84 + .../_next/static/chunks/c058ac3e89dc33df.js | 1 + .../_next/static/chunks/c19d75622900fb62.js | 1 + .../_next/static/chunks/c3d0c3b532b01699.js | 8 + .../_next/static/chunks/c4111e97b0095227.js | 1 + .../_next/static/chunks/c43ea300e1f2db88.js | 1 + .../_next/static/chunks/c4452a79c69324a6.js | 17 + .../_next/static/chunks/c6a3593fb6892e17.js | 1 + .../_next/static/chunks/c7b74067c01ee971.js | 2 + .../_next/static/chunks/c91982ee39ef0f77.js | 1 + .../_next/static/chunks/c93c5c533dba84d1.js | 1 + .../_next/static/chunks/c9af2deb434988d6.js | 8 + .../_next/static/chunks/ca22b37c24b4d34a.js | 35 + .../_next/static/chunks/cb8e6ba28461af15.js | 4 + .../_next/static/chunks/ce8464047a8ce464.js | 1 + .../_next/static/chunks/cf68fd1f1761ba48.js | 10 + .../_next/static/chunks/cfc22f1e9e2830a5.js | 1 + .../_next/static/chunks/d24f23929997cfa1.js | 1 + .../_next/static/chunks/d2aa91699d95f4b3.js | 1 + .../_next/static/chunks/d4240d7bae1e2b30.js | 1 + .../_next/static/chunks/d4710ffa8fe96c6a.js | 2 + .../_next/static/chunks/d64d74932cb225a3.js | 1 + .../_next/static/chunks/d682c064a60ae3d6.css | 1 + .../_next/static/chunks/d96012bcfc98706a.js | 1 + .../_next/static/chunks/d991de8f2cd90aca.js | 1 + .../_next/static/chunks/db89710f0ce96e05.js | 1 + .../_next/static/chunks/dbca964212122d58.js | 1 + .../_next/static/chunks/de9cdee2e8c8fa36.js | 1 + .../_next/static/chunks/e007904603a33bc5.js | 10 + .../_next/static/chunks/e0d42088ec18edc9.js | 420 + .../_next/static/chunks/e1c5d2e47c042b8a.js | 50 + .../_next/static/chunks/e1f23fd814ac3500.js | 4 + .../_next/static/chunks/e1fe71b9ff3d3857.js | 8 + .../chunks/e228588e-635e9029d9d88215.js | 1 - .../_next/static/chunks/e3bc795c751bb99a.js | 41 + .../_next/static/chunks/e71fe358fd0c350f.js | 7 + .../_next/static/chunks/e8ed72789c2b42ff.js | 39 + .../_next/static/chunks/e96398764f77c728.js | 2 + .../_next/static/chunks/eaf91f44e099fe65.js | 1 + .../_next/static/chunks/eea976cf4a05fc92.js | 55 + .../_next/static/chunks/ef41b5b82a37e553.js | 8 + .../_next/static/chunks/f628c4bfd7854ec0.js | 21 + .../_next/static/chunks/f98b25d79cd05714.js | 7 + .../_next/static/chunks/fa8a1b9b6454c116.js | 1 + .../_next/static/chunks/fb981bf7548d9de3.js | 2 + .../chunks/fd9d1056-a07bacd8fcc2728b.js | 1 - .../_next/static/chunks/fe750aa0bf04912c.js | 21 + .../_next/static/chunks/fea300adfdeaf3b9.js | 1 + .../_next/static/chunks/ffd416b6dab7092c.js | 12 + .../_next/static/chunks/ffe482191cf04a55.js | 1 + .../chunks/main-app-c6945ec5b2d5e671.js | 1 - .../static/chunks/main-e4e168e4dfadea03.js | 1 - .../chunks/turbopack-901b35f89c1f6751.js | 4 + .../out/_next/static/css/83c095d0528a2e35.css | 3 - .../media/1bffadaabf893a1e-s.7cd81963.woff2 | Bin 0 -> 85272 bytes .../media/2bbe8d2671613f1f-s.76dcb0b2.woff2 | Bin 0 -> 10280 bytes .../media/2c55a0e60120577a-s.2a48534a.woff2 | Bin 0 -> 25844 bytes .../media/5476f68d60460930-s.c995e352.woff2 | Bin 0 -> 19044 bytes .../media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 | Bin 0 -> 48432 bytes .../media/9c72aa0f40e4eef8-s.18a48cbc.woff2 | Bin 0 -> 18744 bytes .../media/ad66f9afd8947f86-s.7a40eb73.woff2 | Bin 0 -> 11272 bytes .../_next/static/media/favicon.1d32c690.ico | Bin 0 -> 6387 bytes .../zHD7JXLXiWgn1NPp82VmF/_buildManifest.js | 1 - .../proxy/_experimental/out/_not-found.txt | 16 + .../out/_not-found/__next._full.txt | 16 + .../out/_not-found/__next._head.txt | 6 + .../out/_not-found/__next._index.txt | 7 + .../_not-found/__next._not-found.__PAGE__.txt | 5 + .../out/_not-found/__next._not-found.txt | 4 + .../out/_not-found/__next._tree.txt | 3 + .../_experimental/out/_not-found/index.html | 1 + .../proxy/_experimental/out/api-reference.txt | 40 +- ...KGRhc2hib2FyZCk.api-reference.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.api-reference.txt | 4 + .../api-reference/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/api-reference/__next._full.txt | 27 + .../out/api-reference/__next._head.txt | 6 + .../out/api-reference/__next._index.txt | 7 + .../out/api-reference/__next._tree.txt | 4 + .../out/api-reference/index.html | 2 +- .../out/assets/logos/s3_vector.png | Bin 0 -> 191076 bytes .../out/assets/logos/zscaler.svg | 5 + .../out/experimental/api-playground.txt | 42 +- ...k.experimental.api-playground.__PAGE__.txt | 9 + ...2hib2FyZCk.experimental.api-playground.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../api-playground/__next._full.txt | 29 + .../api-playground/__next._head.txt | 6 + .../api-playground/__next._index.txt | 7 + .../api-playground/__next._tree.txt | 4 + .../experimental/api-playground/index.html | 2 +- .../out/experimental/budgets.txt | 42 +- ...ib2FyZCk.experimental.budgets.__PAGE__.txt | 9 + ....!KGRhc2hib2FyZCk.experimental.budgets.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../budgets/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/experimental/budgets/__next._full.txt | 29 + .../out/experimental/budgets/__next._head.txt | 6 + .../experimental/budgets/__next._index.txt | 7 + .../out/experimental/budgets/__next._tree.txt | 4 + .../out/experimental/budgets/index.html | 2 +- .../out/experimental/caching.txt | 42 +- ...ib2FyZCk.experimental.caching.__PAGE__.txt | 9 + ....!KGRhc2hib2FyZCk.experimental.caching.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../caching/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/experimental/caching/__next._full.txt | 29 + .../out/experimental/caching/__next._head.txt | 6 + .../experimental/caching/__next._index.txt | 7 + .../out/experimental/caching/__next._tree.txt | 4 + .../out/experimental/caching/index.html | 2 +- .../out/experimental/claude-code-plugins.txt | 29 + ...erimental.claude-code-plugins.__PAGE__.txt | 9 + ...FyZCk.experimental.claude-code-plugins.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../claude-code-plugins/__next._full.txt | 29 + .../claude-code-plugins/__next._head.txt | 6 + .../claude-code-plugins/__next._index.txt | 7 + .../claude-code-plugins/__next._tree.txt | 4 + .../claude-code-plugins/index.html | 1 + .../out/experimental/old-usage.txt | 42 +- ...2FyZCk.experimental.old-usage.__PAGE__.txt | 9 + ...KGRhc2hib2FyZCk.experimental.old-usage.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../old-usage/__next.!KGRhc2hib2FyZCk.txt | 7 + .../experimental/old-usage/__next._full.txt | 29 + .../experimental/old-usage/__next._head.txt | 6 + .../experimental/old-usage/__next._index.txt | 7 + .../experimental/old-usage/__next._tree.txt | 4 + .../out/experimental/old-usage/index.html | 2 +- .../out/experimental/prompts.txt | 42 +- ...ib2FyZCk.experimental.prompts.__PAGE__.txt | 9 + ....!KGRhc2hib2FyZCk.experimental.prompts.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../prompts/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/experimental/prompts/__next._full.txt | 29 + .../out/experimental/prompts/__next._head.txt | 6 + .../experimental/prompts/__next._index.txt | 7 + .../out/experimental/prompts/__next._tree.txt | 4 + .../out/experimental/prompts/index.html | 2 +- .../out/experimental/tag-management.txt | 42 +- ...k.experimental.tag-management.__PAGE__.txt | 9 + ...2hib2FyZCk.experimental.tag-management.txt | 4 + .../__next.!KGRhc2hib2FyZCk.experimental.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../tag-management/__next._full.txt | 29 + .../tag-management/__next._head.txt | 6 + .../tag-management/__next._index.txt | 7 + .../tag-management/__next._tree.txt | 4 + .../experimental/tag-management/index.html | 2 +- .../proxy/_experimental/out/guardrails.txt | 40 +- ...t.!KGRhc2hib2FyZCk.guardrails.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.guardrails.txt | 4 + .../guardrails/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/guardrails/__next._full.txt | 27 + .../out/guardrails/__next._head.txt | 6 + .../out/guardrails/__next._index.txt | 7 + .../out/guardrails/__next._tree.txt | 4 + .../_experimental/out/guardrails/index.html | 1 + litellm/proxy/_experimental/out/index.html | 2 +- litellm/proxy/_experimental/out/index.txt | 69 +- litellm/proxy/_experimental/out/login.txt | 28 +- .../_experimental/out/login/__next._full.txt | 21 + .../_experimental/out/login/__next._head.txt | 6 + .../_experimental/out/login/__next._index.txt | 7 + .../_experimental/out/login/__next._tree.txt | 4 + .../out/login/__next.login.__PAGE__.txt | 9 + .../_experimental/out/login/__next.login.txt | 4 + .../proxy/_experimental/out/login/index.html | 2 +- litellm/proxy/_experimental/out/logs.txt | 41 +- .../__next.!KGRhc2hib2FyZCk.logs.__PAGE__.txt | 10 + .../out/logs/__next.!KGRhc2hib2FyZCk.logs.txt | 4 + .../out/logs/__next.!KGRhc2hib2FyZCk.txt | 7 + .../_experimental/out/logs/__next._full.txt | 28 + .../_experimental/out/logs/__next._head.txt | 6 + .../_experimental/out/logs/__next._index.txt | 7 + .../_experimental/out/logs/__next._tree.txt | 5 + .../proxy/_experimental/out/logs/index.html | 2 +- .../_experimental/out/mcp/oauth/callback.txt | 28 +- .../out/mcp/oauth/callback/__next._full.txt | 21 + .../out/mcp/oauth/callback/__next._head.txt | 6 + .../out/mcp/oauth/callback/__next._index.txt | 7 + .../out/mcp/oauth/callback/__next._tree.txt | 4 + .../__next.mcp.oauth.callback.__PAGE__.txt | 9 + .../callback/__next.mcp.oauth.callback.txt | 4 + .../mcp/oauth/callback/__next.mcp.oauth.txt | 4 + .../out/mcp/oauth/callback/__next.mcp.txt | 4 + .../out/mcp/oauth/callback/index.html | 2 +- litellm/proxy/_experimental/out/model-hub.txt | 40 +- ...xt.!KGRhc2hib2FyZCk.model-hub.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.model-hub.txt | 4 + .../out/model-hub/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/model-hub/__next._full.txt | 27 + .../out/model-hub/__next._head.txt | 6 + .../out/model-hub/__next._index.txt | 7 + .../out/model-hub/__next._tree.txt | 4 + .../_experimental/out/model-hub/index.html | 2 +- litellm/proxy/_experimental/out/model_hub.txt | 30 +- .../out/model_hub/__next._full.txt | 23 + .../out/model_hub/__next._head.txt | 6 + .../out/model_hub/__next._index.txt | 7 + .../out/model_hub/__next._tree.txt | 4 + .../model_hub/__next.model_hub.__PAGE__.txt | 9 + .../out/model_hub/__next.model_hub.txt | 4 + .../_experimental/out/model_hub/index.html | 1 + .../_experimental/out/model_hub_table.txt | 35 +- .../out/model_hub_table/__next._full.txt | 28 + .../out/model_hub_table/__next._head.txt | 6 + .../out/model_hub_table/__next._index.txt | 7 + .../out/model_hub_table/__next._tree.txt | 4 + .../__next.model_hub_table.__PAGE__.txt | 9 + .../__next.model_hub_table.txt | 4 + .../out/model_hub_table/index.html | 2 +- .../out/models-and-endpoints.txt | 40 +- ...ib2FyZCk.models-and-endpoints.__PAGE__.txt | 9 + ....!KGRhc2hib2FyZCk.models-and-endpoints.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/models-and-endpoints/__next._full.txt | 27 + .../out/models-and-endpoints/__next._head.txt | 6 + .../models-and-endpoints/__next._index.txt | 7 + .../out/models-and-endpoints/__next._tree.txt | 4 + .../out/models-and-endpoints/index.html | 2 +- .../proxy/_experimental/out/onboarding.txt | 28 +- .../out/onboarding/__next._full.txt | 21 + .../out/onboarding/__next._head.txt | 6 + .../out/onboarding/__next._index.txt | 7 + .../out/onboarding/__next._tree.txt | 4 + .../onboarding/__next.onboarding.__PAGE__.txt | 9 + .../out/onboarding/__next.onboarding.txt | 4 + .../_experimental/out/onboarding/index.html | 1 + .../proxy/_experimental/out/organizations.txt | 40 +- ...KGRhc2hib2FyZCk.organizations.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.organizations.txt | 4 + .../organizations/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/organizations/__next._full.txt | 27 + .../out/organizations/__next._head.txt | 6 + .../out/organizations/__next._index.txt | 7 + .../out/organizations/__next._tree.txt | 4 + .../out/organizations/index.html | 2 +- .../proxy/_experimental/out/playground.txt | 40 +- ...t.!KGRhc2hib2FyZCk.playground.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.playground.txt | 4 + .../playground/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/playground/__next._full.txt | 27 + .../out/playground/__next._head.txt | 6 + .../out/playground/__next._index.txt | 7 + .../out/playground/__next._tree.txt | 4 + .../_experimental/out/playground/index.html | 2 +- litellm/proxy/_experimental/out/policies.txt | 27 + ...ext.!KGRhc2hib2FyZCk.policies.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.policies.txt | 4 + .../out/policies/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/policies/__next._full.txt | 27 + .../out/policies/__next._head.txt | 6 + .../out/policies/__next._index.txt | 7 + .../out/policies/__next._tree.txt | 4 + .../_experimental/out/policies/index.html | 1 + .../out/settings/admin-settings.txt | 42 +- ...FyZCk.settings.admin-settings.__PAGE__.txt | 9 + ...GRhc2hib2FyZCk.settings.admin-settings.txt | 4 + .../__next.!KGRhc2hib2FyZCk.settings.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../settings/admin-settings/__next._full.txt | 29 + .../settings/admin-settings/__next._head.txt | 6 + .../settings/admin-settings/__next._index.txt | 7 + .../settings/admin-settings/__next._tree.txt | 4 + .../out/settings/admin-settings/index.html | 2 +- .../out/settings/logging-and-alerts.txt | 42 +- ...k.settings.logging-and-alerts.__PAGE__.txt | 9 + ...2hib2FyZCk.settings.logging-and-alerts.txt | 4 + .../__next.!KGRhc2hib2FyZCk.settings.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../logging-and-alerts/__next._full.txt | 29 + .../logging-and-alerts/__next._head.txt | 6 + .../logging-and-alerts/__next._index.txt | 7 + .../logging-and-alerts/__next._tree.txt | 4 + .../settings/logging-and-alerts/index.html | 2 +- .../out/settings/router-settings.txt | 42 +- ...yZCk.settings.router-settings.__PAGE__.txt | 9 + ...Rhc2hib2FyZCk.settings.router-settings.txt | 4 + .../__next.!KGRhc2hib2FyZCk.settings.txt | 4 + .../__next.!KGRhc2hib2FyZCk.txt | 7 + .../settings/router-settings/__next._full.txt | 29 + .../settings/router-settings/__next._head.txt | 6 + .../router-settings/__next._index.txt | 7 + .../settings/router-settings/__next._tree.txt | 4 + .../out/settings/router-settings/index.html | 2 +- .../_experimental/out/settings/ui-theme.txt | 41 +- .../__next.!KGRhc2hib2FyZCk.settings.txt | 4 + ...c2hib2FyZCk.settings.ui-theme.__PAGE__.txt | 9 + ...ext.!KGRhc2hib2FyZCk.settings.ui-theme.txt | 4 + .../ui-theme/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/settings/ui-theme/__next._full.txt | 28 + .../out/settings/ui-theme/__next._head.txt | 6 + .../out/settings/ui-theme/__next._index.txt | 7 + .../out/settings/ui-theme/__next._tree.txt | 4 + .../out/settings/ui-theme/index.html | 2 +- litellm/proxy/_experimental/out/teams.txt | 40 +- ...__next.!KGRhc2hib2FyZCk.teams.__PAGE__.txt | 9 + .../teams/__next.!KGRhc2hib2FyZCk.teams.txt | 4 + .../out/teams/__next.!KGRhc2hib2FyZCk.txt | 7 + .../_experimental/out/teams/__next._full.txt | 27 + .../_experimental/out/teams/__next._head.txt | 6 + .../_experimental/out/teams/__next._index.txt | 7 + .../_experimental/out/teams/__next._tree.txt | 4 + .../proxy/_experimental/out/teams/index.html | 2 +- litellm/proxy/_experimental/out/test-key.txt | 40 +- ...ext.!KGRhc2hib2FyZCk.test-key.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.test-key.txt | 4 + .../out/test-key/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/test-key/__next._full.txt | 27 + .../out/test-key/__next._head.txt | 6 + .../out/test-key/__next._index.txt | 7 + .../out/test-key/__next._tree.txt | 4 + .../_experimental/out/test-key/index.html | 2 +- .../_experimental/out/tools/mcp-servers.txt | 41 +- ...c2hib2FyZCk.tools.mcp-servers.__PAGE__.txt | 9 + ...ext.!KGRhc2hib2FyZCk.tools.mcp-servers.txt | 4 + .../__next.!KGRhc2hib2FyZCk.tools.txt | 4 + .../mcp-servers/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/tools/mcp-servers/__next._full.txt | 28 + .../out/tools/mcp-servers/__next._head.txt | 6 + .../out/tools/mcp-servers/__next._index.txt | 7 + .../out/tools/mcp-servers/__next._tree.txt | 4 + .../out/tools/mcp-servers/index.html | 2 +- .../_experimental/out/tools/vector-stores.txt | 42 +- .../__next.!KGRhc2hib2FyZCk.tools.txt | 4 + ...hib2FyZCk.tools.vector-stores.__PAGE__.txt | 9 + ...t.!KGRhc2hib2FyZCk.tools.vector-stores.txt | 4 + .../vector-stores/__next.!KGRhc2hib2FyZCk.txt | 7 + .../out/tools/vector-stores/__next._full.txt | 29 + .../out/tools/vector-stores/__next._head.txt | 6 + .../out/tools/vector-stores/__next._index.txt | 7 + .../out/tools/vector-stores/__next._tree.txt | 4 + .../out/tools/vector-stores/index.html | 2 +- litellm/proxy/_experimental/out/usage.txt | 40 +- .../out/usage/__next.!KGRhc2hib2FyZCk.txt | 7 + ...__next.!KGRhc2hib2FyZCk.usage.__PAGE__.txt | 9 + .../usage/__next.!KGRhc2hib2FyZCk.usage.txt | 4 + .../_experimental/out/usage/__next._full.txt | 27 + .../_experimental/out/usage/__next._head.txt | 6 + .../_experimental/out/usage/__next._index.txt | 7 + .../_experimental/out/usage/__next._tree.txt | 4 + .../proxy/_experimental/out/usage/index.html | 2 +- litellm/proxy/_experimental/out/users.txt | 40 +- .../out/users/__next.!KGRhc2hib2FyZCk.txt | 7 + ...__next.!KGRhc2hib2FyZCk.users.__PAGE__.txt | 9 + .../users/__next.!KGRhc2hib2FyZCk.users.txt | 4 + .../_experimental/out/users/__next._full.txt | 27 + .../_experimental/out/users/__next._head.txt | 6 + .../_experimental/out/users/__next._index.txt | 7 + .../_experimental/out/users/__next._tree.txt | 4 + .../proxy/_experimental/out/users/index.html | 2 +- .../proxy/_experimental/out/virtual-keys.txt | 40 +- .../virtual-keys/__next.!KGRhc2hib2FyZCk.txt | 7 + ...!KGRhc2hib2FyZCk.virtual-keys.__PAGE__.txt | 9 + .../__next.!KGRhc2hib2FyZCk.virtual-keys.txt | 4 + .../out/virtual-keys/__next._full.txt | 27 + .../out/virtual-keys/__next._head.txt | 6 + .../out/virtual-keys/__next._index.txt | 7 + .../out/virtual-keys/__next._tree.txt | 4 + .../_experimental/out/virtual-keys/index.html | 2 +- litellm/proxy/_new_secret_config.yaml | 22 + litellm/proxy/_types.py | 142 +- .../proxy/agent_endpoints/a2a_endpoints.py | 139 +- litellm/proxy/agent_endpoints/a2a_routing.py | 53 + .../auth/agent_permission_handler.py | 235 +- .../agent_endpoints/model_list_helpers.py | 96 + .../proxy/anthropic_endpoints/endpoints.py | 17 + litellm/proxy/auth/auth_checks.py | 645 +- litellm/proxy/auth/auth_utils.py | 24 +- litellm/proxy/auth/handle_jwt.py | 16 +- litellm/proxy/auth/ip_address_utils.py | 155 + litellm/proxy/auth/login_utils.py | 74 +- litellm/proxy/auth/model_checks.py | 31 +- litellm/proxy/auth/route_checks.py | 13 +- litellm/proxy/auth/user_api_key_auth.py | 249 +- litellm/proxy/batches_endpoints/endpoints.py | 187 +- litellm/proxy/cached_logo.jpg | Bin 50535 -> 24694 bytes litellm/proxy/client/cli/commands/auth.py | 239 +- litellm/proxy/common_request_processing.py | 303 +- .../proxy/common_utils/cache_coordinator.py | 192 + litellm/proxy/common_utils/callback_utils.py | 55 + .../proxy/common_utils/http_parsing_utils.py | 97 + .../common_utils/key_rotation_manager.py | 29 +- .../proxy/common_utils/performance_utils.py | 4 +- litellm/proxy/compliance_checks.py | 221 + litellm/proxy/custom_sso.py | 9 +- litellm/proxy/db/db_spend_update_writer.py | 210 +- .../db_transaction_queue/base_update_queue.py | 8 +- .../daily_spend_update_queue.py | 3 +- .../spend_update_queue.py | 8 +- .../ui_discovery_endpoints.py | 6 +- .../example_config_yaml/otel_test_config.yaml | 4 +- .../pipeline_test_guardrails.py | 69 + .../spend_tracking_config.yaml | 2 +- .../test_pipeline_config.yaml | 64 + litellm/proxy/google_endpoints/endpoints.py | 2 +- .../proxy/guardrails/guardrail_endpoints.py | 408 +- .../guardrail_hooks/bedrock_guardrails.py | 81 +- .../guardrail_hooks/custom_code/__init__.py | 65 + .../custom_code/custom_code_guardrail.py | 404 + .../guardrail_hooks/custom_code/primitives.py | 832 + .../guardrail_hooks/enkryptai/enkryptai.py | 6 +- .../generic_guardrail_api/__init__.py | 3 + .../generic_guardrail_api/example_config.yaml | 1 + .../generic_guardrail_api.py | 245 +- .../guardrail_hooks/grayswan/grayswan.py | 81 +- .../hiddenlayer/hiddenlayer.py | 6 +- .../guardrails/guardrail_hooks/lakera_ai.py | 2 +- .../guardrail_hooks/lakera_ai_v2.py | 2 +- .../litellm_content_filter/__init__.py | 2 + .../categories/bias_racial.yaml | 507 +- .../categories/harm_toxic_abuse.json | 4724 ++++ .../categories/harm_toxic_abuse_au.json | 345 + .../categories/harm_toxic_abuse_de.json | 587 + .../categories/harm_toxic_abuse_es.json | 614 + .../categories/harm_toxic_abuse_fr.json | 821 + .../categories/harmful_child_safety.yaml | 156 + .../prompt_injection_data_exfiltration.yaml | 123 + .../prompt_injection_jailbreak.yaml | 140 + .../prompt_injection_malicious_code.yaml | 147 + .../categories/prompt_injection_sql.yaml | 120 + .../prompt_injection_system_prompt.yaml | 145 + .../litellm_content_filter/content_filter.py | 945 +- .../litellm_content_filter/patterns.json | 138 +- .../litellm_content_filter/patterns.py | 32 +- .../airline_brand_protection.yaml | 89 + .../aviation_safety_topics.yaml | 120 + .../eu_ai_act_art5_biometric_profiling.yaml | 148 + ...eu_ai_act_art5_biometric_profiling_fr.yaml | 157 + .../eu_ai_act_art5_emotion_recognition.yaml | 143 + ...eu_ai_act_art5_emotion_recognition_fr.yaml | 132 + .../eu_ai_act_art5_manipulation.yaml | 95 + .../eu_ai_act_art5_manipulation_fr.yaml | 99 + .../eu_ai_act_art5_social_scoring.yaml | 118 + .../eu_ai_act_art5_social_scoring_fr.yaml | 126 + .../eu_ai_act_art5_vulnerability.yaml | 112 + .../eu_ai_act_art5_vulnerability_fr.yaml | 109 + .../policy_templates/eu_ai_act_article5.yaml | 157 + .../eu_ai_act_article5_fr.yaml | 242 + .../uae_anti_discrimination.yaml | 71 + .../uae_cultural_sensitivity.yaml | 72 + .../guardrail_hooks/mcp_security/__init__.py | 45 + .../mcp_security/mcp_security_guardrail.py | 114 + .../model_armor/model_armor.py | 45 +- .../guardrails/guardrail_hooks/onyx/onyx.py | 17 +- .../guardrail_hooks/openai/moderations.py | 360 +- .../guardrail_hooks/pangea/pangea.py | 11 +- .../guardrails/guardrail_hooks/presidio.py | 241 +- .../prompt_security/prompt_security.py | 6 +- .../guardrail_hooks/qualifire/qualifire.py | 12 +- .../unified_guardrail/unified_guardrail.py | 128 +- .../zscaler_ai_guard/__init__.py | 4 + .../zscaler_ai_guard/zscaler_ai_guard.py | 163 +- .../proxy/guardrails/guardrail_registry.py | 21 +- .../shared_health_check_manager.py | 3 +- .../health_endpoints/_health_endpoints.py | 47 +- litellm/proxy/hooks/batch_rate_limiter.py | 88 +- .../proxy/hooks/dynamic_rate_limiter_v3.py | 35 +- .../proxy/hooks/key_management_event_hooks.py | 34 +- .../hooks/mcp_semantic_filter/ARCHITECTURE.md | 96 + .../hooks/mcp_semantic_filter/__init__.py | 9 + .../proxy/hooks/mcp_semantic_filter/hook.py | 353 + .../proxy/hooks/model_max_budget_limiter.py | 43 +- .../proxy/hooks/proxy_track_cost_callback.py | 12 +- litellm/proxy/image_endpoints/endpoints.py | 6 + litellm/proxy/litellm_pre_call_utils.py | 391 +- .../access_group_endpoints.py | 380 + .../budget_management_endpoints.py | 39 +- .../common_daily_activity.py | 95 +- .../management_endpoints/common_utils.py | 171 +- .../compliance_endpoints.py | 79 + .../internal_user_endpoints.py | 71 +- .../key_management_endpoints.py | 983 +- .../mcp_management_endpoints.py | 259 +- .../management_endpoints/policy_endpoints.py | 642 + .../management_endpoints/scim/scim_v2.py | 302 + .../management_endpoints/team_endpoints.py | 202 +- litellm/proxy/management_endpoints/types.py | 16 +- litellm/proxy/management_endpoints/ui_sso.py | 414 +- litellm/proxy/mcp_registry.json | 426 + .../middleware/prometheus_auth_middleware.py | 33 +- .../proxy/openai_evals_endpoints/__init__.py | 7 + .../proxy/openai_evals_endpoints/endpoints.py | 1067 + .../openai_files_endpoints/common_utils.py | 149 + .../openai_files_endpoints/files_endpoints.py | 69 +- .../pass_through_endpoints/architecture.md | 71 + .../llm_passthrough_endpoints.py | 203 +- .../pass_through_endpoints.py | 281 +- litellm/proxy/policy_engine/__init__.py | 60 + litellm/proxy/policy_engine/architecture.md | 54 + .../policy_engine/attachment_registry.py | 498 + .../policy_engine/condition_evaluator.py | 111 + litellm/proxy/policy_engine/init_policies.py | 276 + .../proxy/policy_engine/pipeline_executor.py | 216 + .../proxy/policy_engine/policy_endpoints.py | 640 + litellm/proxy/policy_engine/policy_matcher.py | 181 + .../proxy/policy_engine/policy_registry.py | 600 + .../policy_engine/policy_resolve_endpoints.py | 405 + .../proxy/policy_engine/policy_resolver.py | 289 + .../proxy/policy_engine/policy_validator.py | 401 + litellm/proxy/proxy_cli.py | 14 +- litellm/proxy/proxy_config.yaml | 85 +- litellm/proxy/proxy_server.py | 2362 +- litellm/proxy/rag_endpoints/endpoints.py | 225 +- .../proxy/response_api_endpoints/endpoints.py | 2 + .../proxy/response_polling/polling_handler.py | 12 +- litellm/proxy/route_llm_request.py | 137 +- litellm/proxy/schema.prisma | 128 +- litellm/proxy/search_endpoints/endpoints.py | 82 +- .../search_tool_management.py | 77 +- .../spend_management_endpoints.py | 291 +- .../spend_tracking/spend_tracking_utils.py | 94 +- .../proxy_setting_endpoints.py | 124 +- litellm/proxy/utils.py | 399 +- .../proxy/vector_store_endpoints/endpoints.py | 111 +- .../management_endpoints.py | 418 +- .../vector_store_files_endpoints/endpoints.py | 323 +- litellm/proxy_auth/__init__.py | 30 + litellm/proxy_auth/credentials.py | 240 + litellm/rag/ingestion/__init__.py | 6 + litellm/rag/ingestion/base_ingestion.py | 17 +- .../rag/ingestion/file_parsers/__init__.py | 9 + .../rag/ingestion/file_parsers/pdf_parser.py | 70 + litellm/rag/ingestion/s3_vectors_ingestion.py | 573 + litellm/rag/ingestion/vertex_ai_ingestion.py | 478 + litellm/rag/main.py | 29 +- litellm/realtime_api/main.py | 71 +- litellm/rerank_api/main.py | 29 +- .../handler.py | 2 + .../streaming_iterator.py | 37 +- .../transformation.py | 140 +- litellm/responses/main.py | 47 +- .../responses/mcp/chat_completions_handler.py | 380 +- .../mcp/litellm_proxy_mcp_handler.py | 46 +- litellm/responses/streaming_iterator.py | 6 + litellm/responses/utils.py | 17 +- litellm/router.py | 671 +- litellm/router_strategy/budget_limiter.py | 97 +- litellm/router_strategy/lowest_tpm_rpm_v2.py | 9 +- litellm/router_utils/common_utils.py | 5 +- litellm/router_utils/get_retry_from_policy.py | 10 +- .../deployment_affinity_check.py | 396 + .../pre_call_checks/model_rate_limit_check.py | 373 + .../prompt_caching_deployment_check.py | 3 +- .../responses_api_deployment_check.py | 12 + litellm/router_utils/search_api_router.py | 3 +- litellm/scheduler.py | 11 + .../secret_managers/aws_secret_manager_v2.py | 161 +- .../hashicorp_secret_manager.py | 126 +- litellm/secret_managers/main.py | 20 +- litellm/types/access_group.py | 39 + litellm/types/guardrails.py | 85 +- litellm/types/integrations/cloudzero.py | 16 +- litellm/types/integrations/prometheus.py | 134 +- litellm/types/llms/anthropic.py | 15 +- litellm/types/llms/bedrock.py | 31 + litellm/types/llms/custom_http.py | 1 + litellm/types/llms/oci.py | 67 +- litellm/types/llms/openai.py | 59 +- litellm/types/llms/openai_evals.py | 417 + litellm/types/llms/watsonx.py | 1 + litellm/types/llms/xai.py | 23 + .../types/mcp_server/mcp_server_manager.py | 12 + litellm/types/policy_engine.py | 36 + litellm/types/proxy/compliance_endpoints.py | 33 + .../ui_discovery_endpoints.py | 1 + .../guardrail_hooks/generic_guardrail_api.py | 37 +- .../proxy/guardrails/guardrail_hooks/onyx.py | 5 + .../guardrail_hooks/zscaler_ai_guard.py | 133 + .../key_management_endpoints.py | 42 + .../proxy/management_endpoints/scim_v2.py | 66 +- .../proxy/management_endpoints/ui_sso.py | 20 + litellm/types/proxy/policy_engine/__init__.py | 101 + .../proxy/policy_engine/pipeline_types.py | 98 + .../types/proxy/policy_engine/policy_types.py | 324 + .../proxy/policy_engine/resolver_types.py | 386 + .../proxy/policy_engine/validation_types.py | 80 + litellm/types/rag.py | 46 +- litellm/types/router.py | 43 +- litellm/types/search.py | 1 + litellm/types/utils.py | 101 +- litellm/types/vector_stores.py | 4 + litellm/utils.py | 268 +- model_prices_and_context_window.json | 4054 +++- package.json | 4 +- poetry.lock | 1450 +- policy_templates.json | 1883 ++ provider_endpoints_support.json | 105 +- proxy_config.yaml | 7 - proxy_server_config.yaml | 2 +- pyproject.toml | 23 +- requirements.txt | 18 +- schema.prisma | 113 +- .../local_vertex_agent.py | 0 .../{ => local_only_agent_tests}/test_a2a.py | 0 .../test_a2a_completion_bridge.py | 0 tests/agent_tests/test_a2a_agent.py | 83 + .../test_batch_custom_pricing.py | 131 + tests/batches_tests/test_batch_rate_limits.py | 669 + .../test_batches_logging_unit_tests.py | 339 + .../check_guardrail_apply_decorator.py | 132 + tests/code_coverage_tests/check_licenses.py | 11 +- .../enforce_llms_folder_style.py | 5 +- tests/code_coverage_tests/liccheck.ini | 3 + tests/code_coverage_tests/license_cache.json | 2 +- .../code_coverage_tests/recursive_detector.py | 5 + .../router_code_coverage.py | 7 +- .../test_prometheus_logging_callbacks.py | 198 +- .../integrations/test_prometheus.py | 139 +- .../proxy/auth/test_route_checks.py | 135 + .../test_bedrock_apply_guardrail.py | 77 +- .../proxy/hooks/test_managed_files.py | 1230 +- .../test_eu_ai_act_article5.py | 257 + .../test_eu_ai_act_french_3_scenarios.py | 292 + tests/guardrails_tests/test_lakera_v2.py | 74 +- .../guardrails_tests/test_zscaler_ai_guard.py | 226 +- .../image_gen_tests/test_image_generation.py | 84 +- .../test_litellm_proxy_extras_utils.py | 17 +- .../test_anthropic_reasoning_effort.py | 64 + .../anthropic/test_anthropic_schema_filter.py | 155 + .../llms/bedrock/test_nova_imported_models.py | 92 + .../oci/chat/test_oci_chat_transformation.py | 37 +- .../mcp_server/test_discoverable_endpoints.py | 1108 + .../management_endpoints/test_common_utils.py | 159 + .../proxy/test_init_litellm_callbacks.py | 175 + ...t_batch_completion_models_all_responses.py | 118 + .../test_bedrock_extended_beta_models.py | 170 + tests/litellm/test_proxy_auth.py | 204 + .../test_router_retry_backoff_headers.py | 88 + .../test_stream_chunk_builder_images.py | 242 + .../test_bedrock_converse_dedup_factory.py | 447 + tests/litellm_utils_tests/test_hashicorp.py | 380 + tests/litellm_utils_tests/test_utils.py | 1 + .../base_responses_api.py | 144 +- .../test_azure_responses_api.py | 4 + ...t_base_responses_api_streaming_iterator.py | 120 + .../test_openai_responses_api.py | 3 + tests/llm_translation/realtime/__init__.py | 0 .../realtime/base_realtime_tests.py | 426 + .../{ => realtime}/test_openai_realtime.py | 0 .../realtime/test_openai_realtime_simple.py | 29 + .../realtime/test_xai_realtime.py | 34 + tests/llm_translation/test_a2a.py | 132 + .../test_anthropic_completion.py | 4 +- tests/llm_translation/test_azure_ai.py | 28 +- tests/llm_translation/test_azure_openai.py | 15 + .../test_bedrock_anthropic_regression.py | 526 + .../test_bedrock_completion.py | 14 +- .../test_bedrock_invoke_tests.py | 4 +- tests/llm_translation/test_evals_api.py | 237 + tests/llm_translation/test_gemini.py | 17 + tests/llm_translation/test_gigachat.py | 288 +- tests/llm_translation/test_groq.py | 126 +- .../test_hosted_vllm_embedding_e2e.py | 152 + .../test_convert_dict_to_chat_completion.py | 187 + .../test_model_cost_map_resilience.py | 291 + tests/llm_translation/test_openai.py | 4 +- tests/llm_translation/test_optional_params.py | 90 +- tests/llm_translation/test_xai.py | 26 + tests/local_testing/test_add_update_models.py | 2 + .../test_amazing_vertex_completion.py | 184 +- tests/local_testing/test_auth_utils.py | 19 + ...test_batch_completion_return_exceptions.py | 12 +- tests/local_testing/test_completion.py | 21 +- .../test_completion_with_retries.py | 1 + tests/local_testing/test_embedding.py | 4 +- tests/local_testing/test_get_model_info.py | 10 +- tests/local_testing/test_literalai.py | 72 - .../test_openai_moderations_hook.py | 70 +- .../test_router_max_parallel_requests.py | 4 +- tests/local_testing/test_router_utils.py | 4 +- tests/local_testing/test_scheduler.py | 38 + tests/local_testing/test_streaming.py | 6 +- tests/local_testing/test_timeout.py | 91 - .../test_dynamic_otel_keys.py | 52 + .../test_logging_redaction_e2e_test.py | 9 +- .../test_otel_logging.py | 72 +- tests/logging_callback_tests/test_posthog.py | 143 + .../test_standard_logging_payload.py | 16 + ...tandard_logging_payload_excluded_fields.py | 415 + .../test_unit_tests_init_callbacks.py | 26 + .../mcp_tests/test_aresponses_api_with_mcp.py | 6 + tests/mcp_tests/test_mcp_auth_priority.py | 7 +- tests/mcp_tests/test_mcp_chat_completions.py | 725 +- tests/mcp_tests/test_mcp_client_unit.py | 25 +- tests/mcp_tests/test_mcp_logging.py | 3 +- tests/mcp_tests/test_mcp_server.py | 219 +- tests/mcp_tests/test_oauth2_mcp_config.yaml | 14 + tests/mcp_tests/test_openapi_spec_path_url.py | 92 + .../test_semantic_tool_filter_e2e.py | 93 + .../test_openai_batches_endpoint.py | 316 +- tests/otel_tests/test_prometheus.py | 134 +- .../base_anthropic_unified_messages_test.py | 61 + .../test_anthropic_messages_passthrough.py | 141 +- .../test_anthropic_messages_tool_search.py | 20 +- .../test_bedrock_tool_use_beta_header.py | 44 +- .../test_passthrough_registry_updates.py | 145 + tests/proxy_admin_ui_tests/package.json | 4 +- .../test_key_management.py | 56 +- .../ui_unit_tests/log_filter_logic.test.tsx | 87 - .../ui_unit_tests/package.json | 4 +- .../test_all_beta_headers.py | 169 + .../test_claude_agent_sdk.py | 124 + .../test_config.yaml | 53 + tests/proxy_unit_tests/test_auth_checks.py | 308 +- tests/proxy_unit_tests/test_get_image.py | 89 + tests/proxy_unit_tests/test_jwt.py | 11 +- .../test_prisma_client_backoff_retry.py | 14 + .../test_proxy_custom_logger.py | 119 +- .../test_proxy_pass_user_config.py | 4 + tests/proxy_unit_tests/test_proxy_routes.py | 5 + tests/proxy_unit_tests/test_proxy_server.py | 18 +- .../test_proxy_setting_guardrails.py | 3 +- tests/proxy_unit_tests/test_proxy_utils.py | 231 +- .../test_response_polling_handler.py | 142 +- .../proxy_unit_tests/test_server_root_path.py | 64 + .../test_ui_path_detection.py | 157 + ...test_unit_test_max_model_budget_limiter.py | 63 +- .../test_user_api_key_auth.py | 7 +- .../test_zero_cost_model_budget_bypass.py | 590 + .../test_get_model_list_alias_optimization.py | 50 + .../test_router_acancel_batch.py | 53 + .../test_router_helper_utils.py | 29 + tests/search_tests/test_duckduckgo_search.py | 356 + .../a2a_protocol/test_card_resolver.py | 90 + tests/test_litellm/caching/test_dual_cache.py | 58 + ...responses_transformation_transformation.py | 256 +- ...responses_transformation_transformation.py | 102 + tests/test_litellm/conftest.py | 210 +- .../containers/test_container_api.py | 131 +- .../containers/test_container_integration.py | 27 +- .../send_emails/test_resend_email.py | 128 +- .../send_emails/test_sendgrid_email.py | 88 +- .../test_afile_retrieve_returns_unified_id.py | 67 + .../test_batch_retrieve_input_file_id.py | 75 + ..._retrieve_returns_unified_input_file_id.py | 124 + .../test_deleted_file_returns_403_not_404.py | 119 + .../proxy/test_file_deletion_blocking.py | 525 + .../proxy/test_managed_files_access_check.py | 200 + .../proxy/test_managed_files_hook.py | 167 + .../context_management_and_shell.json | 20 + .../test_mcp_client.py | 72 +- .../google_genai/test_google_genai_adapter.py | 4 +- .../google_genai/test_google_genai_handler.py | 19 +- .../arize/test_arize_otel_coexistence.py | 169 + .../integrations/arize/test_arize_phoenix.py | 61 +- .../integrations/arize/test_arize_utils.py | 21 +- .../datadog/test_datadog_tags_regression.py | 91 + .../test_langfuse_prompt_management.py | 16 +- .../integrations/test_custom_guardrail.py | 97 + .../integrations/test_langfuse.py | 66 +- .../integrations/test_langfuse_otel.py | 461 +- .../integrations/test_opentelemetry.py | 20 + .../test_prometheus_client_ip_user_agent.py | 235 + .../integrations/test_prometheus_labels.py | 249 +- .../test_prometheus_missing_metrics.py | 77 + .../test_prometheus_none_metadata.py | 176 + .../integrations/test_prometheus_services.py | 58 + .../test_responses_background_cost.py | 15 + tests/test_litellm/integrations/test_s3_v2.py | 180 + .../test_websearch_chat_completion.py | 398 + .../llm_cost_calc/test_llm_cost_calc_utils.py | 6 +- .../test_tool_call_cost_tracking.py | 53 + ...ore_utils_prompt_templates_common_utils.py | 56 + ...llm_core_utils_prompt_templates_factory.py | 151 + .../test_exception_mapping_utils.py | 9 + .../test_get_litellm_params.py | 127 + .../litellm_core_utils/test_image_handling.py | 79 + .../test_litellm_logging.py | 295 + .../test_redact_messages.py | 145 + .../test_safe_json_dumps.py | 32 + .../test_streaming_chunk_builder_utils.py | 72 +- .../litellm_core_utils/test_token_counter.py | 35 +- .../test_anthropic_guardrail_handler.py | 236 + .../test_anthropic_chat_transformation.py | 788 +- ...al_pass_through_adapters_transformation.py | 871 +- ...erimental_pass_through_messages_handler.py | 83 +- ...t_anthropic_messages_structured_outputs.py | 2 +- .../anthropic/test_anthropic_common_utils.py | 452 +- .../test_anthropic_structured_output.py | 43 +- .../anthropic/test_azure_ai_cache_pricing.py | 42 + .../anthropic/test_message_sanitization.py | 380 + .../test_azure_chat_gpt_transformation.py | 13 + .../chat/test_azure_gpt5_transformation.py | 11 + .../test_azure_image_generation_init.py | 197 + .../response/test_azure_transformation.py | 183 +- .../llms/azure/test_azure_common_utils.py | 3 +- .../azure/test_azure_exception_mapping.py | 147 +- .../test_azure_tts_transformation.py | 12 +- .../chat/test_azure_ai_transformation.py | 52 + ...e_anthropic_count_tokens_transformation.py | 111 + .../test_azure_anthropic_transformation.py | 94 + .../test_azure_ai_rerank_transformation.py | 100 + .../azure_ai/test_azure_ai_cost_calculator.py | 346 + ...ations_anthropic_claude3_transformation.py | 143 + .../chat/test_converse_transformation.py | 536 +- .../test_converse_transformation_nova_2.py | 613 +- .../chat/test_streaming_choice_index.py | 114 + .../expected_bedrock_batch_completions.jsonl | 4 +- .../test_bedrock_realtime_transformation.py | 646 + .../bedrock/test_anthropic_beta_support.py | 2 +- .../llms/bedrock/test_base_aws_llm.py | 342 +- .../test_chatgpt_responses_transformation.py | 39 + .../custom_httpx/test_aiohttp_transport.py | 32 + .../llms/custom_httpx/test_http_handler.py | 277 +- .../test_databricks_chat_transformation.py | 43 + .../llms/databricks/responses/__init__.py | 0 ...est_databricks_responses_transformation.py | 149 + .../test_fireworks_ai_chat_transformation.py | 29 + .../llms/gemini/files/__init__.py | 1 + .../files/test_gemini_files_transformation.py | 298 + .../test_gemini_image_edit_transformation.py | 2 +- .../test_hosted_vllm_chat_transformation.py | 96 +- .../chat/test_hosted_vllm_ssl_verify.py | 152 + .../test_hosted_vllm_embedding_ssl_verify.py | 140 + ...st_hosted_vllm_embedding_transformation.py | 293 + .../test_huggingface_embedding_handler.py | 20 +- .../test_meta_llama_chat_transformation.py | 82 +- .../oci/chat/test_oci_chat_transformation.py | 108 + .../oci/chat/test_oci_cohere_tool_calls.py | 211 + .../ollama/test_ollama_chat_transformation.py | 130 +- .../test_openai_guardrail_handler.py | 148 + .../chat/test_openai_gpt_transformation.py | 176 +- .../test_embeddings_guardrail_handler.py | 83 + .../llms/openai/evals/__init__.py | 1 + .../evals/test_openai_evals_transformation.py | 257 + .../llms/openai/realtime/README.md | 82 + .../realtime/test_openai_realtime_handler.py | 8 +- ...test_openai_responses_guardrail_handler.py | 178 + .../test_openai_responses_transformation.py | 123 + .../llms/openai/test_gpt5_transformation.py | 17 + .../llms/openai_like/embedding/__init__.py | 1 + .../embedding/test_openai_like_embedding.py | 378 + .../llms/openai_like/test_json_providers.py | 41 + ...est_perplexity_responses_transformation.py | 381 + .../test_publicai_chat_transformation.py | 16 +- .../test_litellm/llms/s3_vectors/__init__.py | 1 + .../llms/s3_vectors/vector_stores/__init__.py | 1 + .../test_s3_vectors_transformation.py | 115 + .../test_sagemaker_embedding_voyage.py | 102 +- .../llms/test_cache_control_and_reasoning.py | 281 + tests/test_litellm/llms/test_lifecycle_fix.py | 46 + .../test_vertex_ai_context_caching.py | 353 + .../test_vertex_ai_gemini_transformation.py | 266 +- ...test_vertex_and_google_ai_studio_gemini.py | 396 + ...rtex_ai_image_generation_transformation.py | 41 + .../test_vertex_ai_rerank_integration.py | 106 +- .../test_vertex_ai_rerank_transformation.py | 128 +- .../vertex_ai/test_vertex_ai_common_utils.py | 30 + ..._vertex_ai_anthropic_image_url_handling.py | 192 + ...artner_models_anthropic_messages_config.py | 117 + ...partner_models_anthropic_transformation.py | 378 +- .../test_vertex_ai_gpt_oss_transformation.py | 128 +- ...ai_partner_models_llama3_transformation.py | 92 +- .../vertex_ai_partner_models/qwen/__init__.py | 0 .../test_vertex_ai_qwen_global_endpoint.py | 287 + ...est_volcengine_responses_transformation.py | 5 +- .../llms/watsonx/rerank/__init__.py | 0 .../watsonx/rerank/test_watsonx_rerank.py | 224 + .../test_litellm/llms/watsonx/test_watsonx.py | 42 +- .../llms/watsonx/test_watsonx_common_utils.py | 242 + .../test_xai_responses_transformation.py | 213 +- .../auth/test_user_api_key_auth_mcp.py | 357 +- .../test_mcp_guardrail_handler.py | 54 +- .../mcp_server/test_discoverable_endpoints.py | 543 +- .../mcp_server/test_jwt_mcp_enforcement.py | 480 + .../mcp_server/test_jwt_mcp_simple.py | 277 + .../mcp_server/test_mcp_debug.py | 252 + .../mcp_server/test_mcp_discovery.py | 182 + .../mcp_server/test_mcp_server.py | 85 +- .../mcp_server/test_mcp_server_manager.py | 151 +- .../mcp_server/test_mcp_stale_session.py | 440 + .../mcp_server/test_oauth2_token_cache.py | 157 + .../mcp_server/test_rest_endpoints.py | 511 +- .../mcp_server/test_semantic_tool_filter.py | 394 + .../auth/test_agent_permission_handler.py | 56 +- .../agent_endpoints/test_a2a_endpoints.py | 4 +- .../test_model_list_helpers.py | 110 + .../anthropic_endpoints/test_endpoints.py | 20 + .../proxy/auth/test_auth_checks.py | 139 +- .../proxy/auth/test_auth_utils.py | 23 + .../test_litellm/proxy/auth/test_cli_auth.py | 203 + .../proxy/auth/test_login_utils.py | 477 +- .../proxy/auth/test_mcp_ip_filtering.py | 93 + .../proxy/auth/test_model_checks.py | 24 + .../auth/test_object_permission_loading.py | 175 + .../proxy/auth/test_route_checks.py | 255 +- .../proxy/auth/test_user_api_key_auth.py | 151 +- .../common_utils/test_http_parsing_utils.py | 64 + .../common_utils/test_key_rotation_manager.py | 193 +- .../test_base_update_queue.py | 5 +- .../test_spend_update_queue.py | 33 + .../proxy/db/test_db_spend_update_writer.py | 167 +- .../test_ui_discovery_endpoints.py | 31 + .../test_interactions_agent_param.py | 75 + .../content_filter/test_content_filter.py | 1218 +- .../content_filter/test_eu_patterns.py | 90 + .../content_filter/test_gdpr_policy_e2e.py | 293 + .../content_filter/test_patterns.py | 25 +- .../openai/test_moderations.py | 351 +- .../test_openai_moderation_streaming.py | 172 + .../test_generic_guardrail_api.py | 214 +- .../guardrail_hooks/test_grayswan.py | 131 +- .../guardrail_hooks/test_mcp_security.py | 184 + .../guardrail_hooks/test_model_armor.py | 385 +- .../guardrails/guardrail_hooks/test_onyx.py | 302 +- .../guardrail_hooks/test_presidio.py | 312 +- .../test_unified_guardrail.py | 100 +- .../guardrails/test_guardrail_endpoints.py | 105 + .../guardrails/test_pillar_guardrails.py | 90 +- .../health_endpoints/test_health_endpoints.py | 170 + .../hooks/test_image_generation_guardrails.py | 293 + .../hooks/test_key_management_event_hooks.py | 249 + .../test_post_call_response_headers_hook.py | 197 + ...st_post_call_streaming_hook_integration.py | 273 + ...test_post_call_success_hook_integration.py | 260 + .../hooks/test_proxy_track_cost_callback.py | 74 + .../proxy/image_endpoints/test_endpoints.py | 4 + .../scim/test_scim_v2_discovery.py | 300 + .../test_search_tool_management.py | 546 + .../test_access_group_endpoints.py | 884 + .../test_budget_endpoints.py | 55 +- .../test_common_daily_activity.py | 254 + .../management_endpoints/test_common_utils.py | 488 + .../test_compliance_endpoints.py | 387 + .../test_internal_user_endpoints.py | 234 +- .../test_key_management_endpoints.py | 1571 +- .../test_mcp_management_endpoints.py | 513 +- .../test_policy_endpoints.py | 589 + .../test_team_endpoints.py | 534 + .../proxy/management_endpoints/test_ui_sso.py | 1414 +- .../test_prometheus_auth_middleware_asgi.py | 24 + .../test_files_endpoint.py | 178 + .../test_llm_pass_through_endpoints.py | 176 + .../test_pass_through_endpoints.py | 316 +- .../test_vertex_passthrough_load_balancing.py | 72 + .../proxy/policy_engine/__init__.py | 0 .../policy_engine/test_attachment_registry.py | 335 + .../policy_engine/test_condition_evaluator.py | 113 + .../policy_engine/test_pipeline_executor.py | 484 + .../policy_engine/test_policy_matcher.py | 160 + .../policy_engine/test_policy_resolver.py | 193 + .../policy_engine/test_policy_validator.py | 85 + .../proxy/rag_endpoints/__init__.py | 0 .../proxy/rag_endpoints/test_rag_endpoints.py | 130 + .../test_spend_management_endpoints.py | 1004 +- .../test_spend_tracking_utils.py | 120 + .../proxy/test_api_key_masking_in_errors.py | 136 + .../proxy/test_chat_completion_metadata.py | 154 + .../proxy/test_common_request_processing.py | 262 +- .../proxy/test_litellm_pre_call_utils.py | 311 +- tests/test_litellm/proxy/test_proxy_cli.py | 82 +- tests/test_litellm/proxy/test_proxy_server.py | 1511 +- tests/test_litellm/proxy/test_proxy_utils.py | 46 + tests/test_litellm/proxy/test_pyroscope.py | 147 + .../proxy/test_response_model_sanitization.py | 217 + .../proxy/test_route_a2a_models.py | 105 + .../proxy/test_route_llm_request.py | 123 +- .../test_proxy_setting_endpoints.py | 110 + .../test_vector_store_access_control.py | 87 + .../test_vector_store_endpoints.py | 469 + .../test_litellm_completion_responses.py | 209 +- ...test_tool_call_streaming_transformation.py | 161 + .../mcp/test_chat_completions_handler.py | 661 +- .../responses/test_metadata_codex_callback.py | 176 + .../test_responses_api_request_body.py | 103 + .../responses/test_responses_utils.py | 75 + .../test_budget_limiter_hotpath.py | 232 + .../test_deployment_affinity_check.py | 659 + .../test_aws_secret_manager_rotation.py | 109 + .../test_secret_managers_main.py | 107 +- .../test_litellm/test_a2a_registry_lookup.py | 73 + .../test_anthropic_beta_headers_filtering.py | 430 + .../test_claude_opus_4_6_config.py | 210 + tests/test_litellm/test_constants.py | 10 +- .../test_cost_calculation_log_level.py | 109 +- tests/test_litellm/test_cost_calculator.py | 468 +- .../test_deepseek_model_metadata.py | 180 + .../test_litellm/test_eager_tiktoken_load.py | 29 + tests/test_litellm/test_exception_exports.py | 31 + tests/test_litellm/test_logging.py | 162 +- tests/test_litellm/test_main.py | 172 +- tests/test_litellm/test_model_param_helper.py | 33 + .../test_responses_api_bridge_non_stream.py | 380 +- tests/test_litellm/test_router.py | 212 + .../test_enforce_model_rate_limits.py | 315 + .../test_router_model_cost_isolation.py | 264 + tests/test_litellm/test_router_redis_init.py | 56 + .../test_router_silent_experiment.py | 214 + tests/test_litellm/test_service_logger.py | 97 + tests/test_litellm/test_ssl_verify_unit.py | 51 +- tests/test_litellm/test_utils.py | 276 +- tests/test_litellm/test_video_generation.py | 315 +- .../test_xai_responses_auto_routing.py | 264 + tests/test_litellm/types/__init__.py | 0 tests/test_litellm/types/proxy/__init__.py | 0 .../types/proxy/policy_engine/__init__.py | 0 .../policy_engine/test_pipeline_types.py | 152 + .../policy_engine/test_resolver_types.py | 102 + ...test_vector_store_create_provider_logic.py | 19 +- .../test_vector_store_registry.py | 34 +- tests/test_otel_thread_leak.py | 90 + tests/test_presidio_latency.py | 73 + tests/test_proxy_server_non_root.py | 7 +- tests/test_service_logger_otel.py | 28 + tests/test_team.py | 2 + .../rag/test_rag_s3_vectors.py | 107 + .../rag/test_rag_vertex_ai.py | 229 +- .../test_s3_vectors_vector_store.py | 42 + ui/litellm-dashboard/e2e_tests/constants.ts | 5 + ui/litellm-dashboard/e2e_tests/globalSetup.ts | 4 +- .../e2e_tests/tests/keys/deleteKey.spec.ts | 25 + .../tests/keys/regenerateKey.spec.ts | 21 + .../tests/keys/updateKeyLimits.spec.ts | 27 + .../e2e_tests/tests/login/login.spec.ts | 4 +- .../tests/navigation/sidebar.spec.ts | 12 + ui/litellm-dashboard/knip.json | 18 + ui/litellm-dashboard/next.config.mjs | 16 +- ui/litellm-dashboard/package-lock.json | 17931 ++-------------- ui/litellm-dashboard/package.json | 28 +- .../public/assets/logos/s3_vector.png | Bin 0 -> 191076 bytes .../public/assets/logos/zscaler.svg | 5 + .../scripts/e2e_tests/neonHelperScripts.ts | 17 +- .../app/(dashboard)/components/Sidebar2.tsx | 330 +- .../components/SidebarProvider.tsx | 44 +- .../accessGroups/useAccessGroupDetails.ts | 63 + .../accessGroups/useAccessGroups.test.ts | 242 + .../hooks/accessGroups/useAccessGroups.ts | 70 + .../accessGroups/useCreateAccessGroup.ts | 68 + .../accessGroups/useDeleteAccessGroup.ts | 55 + .../hooks/accessGroups/useEditAccessGroup.ts | 77 + .../cloudzero/useCloudZeroCreate.test.ts | 325 + .../cloudzero/useCloudZeroDryRun.test.ts | 239 + .../cloudzero/useCloudZeroExport.test.ts | 239 + .../cloudzero/useCloudZeroSettings.test.ts | 675 + .../hooks/cloudzero/useCloudZeroSettings.ts | 2 +- .../hooks/logDetails/useLogDetails.ts | 30 + .../useMCPSemanticFilterSettings.ts | 19 + .../useUpdateMCPSemanticFilterSettings.ts | 25 + .../mcpServers/useMCPAccessGroups.test.ts | 124 + .../hooks/mcpServers/useMCPServers.test.ts | 134 + .../hooks/models/useModels.test.ts | 252 +- .../app/(dashboard)/hooks/models/useModels.ts | 47 +- .../hooks/proxyConfig/useProxyConfig.test.ts | 554 + .../hooks/proxyConfig/useProxyConfig.ts | 180 + .../hooks/sso/useEditSSOSettings.test.ts | 312 + .../hooks/sso/useSSOSettings.test.ts | 310 + .../(dashboard)/hooks/sso/useSSOSettings.ts | 5 + .../useStoreRequestInSpendLogs.ts | 63 + .../(dashboard)/hooks/teams/useTeams.test.ts | 530 +- .../app/(dashboard)/hooks/teams/useTeams.ts | 2 +- .../hooks/uiConfig/useUIConfig.test.ts | 2 + .../hooks/uiSettings/useUISettings.test.ts | 72 +- .../hooks/uiSettings/useUISettings.ts | 5 +- .../uiSettings/useUpdateUISettings.test.ts | 240 + .../(dashboard)/hooks/useAuthorized.test.ts | 97 +- .../app/(dashboard)/hooks/useAuthorized.ts | 40 +- .../hooks/useDisableShowNewBadge.test.ts | 180 + .../hooks/useDisableShowPrompts.test.ts | 180 + .../hooks/useDisableShowPrompts.ts | 35 + .../hooks/useDisableUsageIndicator.test.ts | 190 + .../hooks/useDisableUsageIndicator.ts | 33 + .../(dashboard)/hooks/users/useUsers.test.ts | 339 + .../app/(dashboard)/hooks/users/useUsers.ts | 41 + .../src/app/(dashboard)/layout.tsx | 16 +- .../ModelsAndEndpointsView.tsx | 4 +- .../components/AllModelsTab.test.tsx | 22 +- .../components/AllModelsTab.tsx | 308 +- .../ModelAnalyticsTab/FilterByContent.tsx | 134 - .../ModelAnalyticsTab/ModelAnalyticsTab.tsx | 474 - .../utils/modelDataTransformer.test.ts | 69 + .../utils/modelDataTransformer.ts | 8 +- .../src/app/(dashboard)/playground/page.tsx | 5 + .../src/app/(dashboard)/policies/page.tsx | 17 + .../settings/admin-settings/page.tsx | 17 +- .../src/app/(dashboard)/teams/TeamsView.tsx | 2 +- .../components/modals/CreateTeamModal.tsx | 48 +- ui/litellm-dashboard/src/app/globals.css | 28 - ui/litellm-dashboard/src/app/layout.tsx | 6 +- .../src/app/login/LoginPage.test.tsx | 98 +- .../src/app/login/LoginPage.tsx | 33 +- .../src/app/mcp/oauth/callback/page.tsx | 12 +- .../src/app/model_hub/page.tsx | 17 +- .../src/app/model_hub_table/page.tsx | 17 +- .../src/app/onboarding/page.tsx | 12 +- ui/litellm-dashboard/src/app/page.tsx | 443 +- .../components/AIHub/ModelHubTable.test.tsx | 153 +- .../src/components/AIHub/ModelHubTable.tsx | 35 +- .../AccessGroupsDetailsPage.test.tsx | 384 + .../AccessGroups/AccessGroupsDetailsPage.tsx | 345 + .../AccessGroupsModal/AccessGroupBaseForm.tsx | 159 + .../AccessGroupCreateModal.tsx | 67 + .../AccessGroupEditModal.tsx | 85 + .../AccessGroups/AccessGroupsPage.test.tsx | 321 + .../AccessGroups/AccessGroupsPage.tsx | 404 + .../src/components/AccessGroups/types.ts | 46 + .../src/components/AdminPanel.test.tsx | 325 + .../src/components/AdminPanel.tsx | 373 + .../src/components/BulkEditUsers.test.tsx | 343 + .../{bulk_edit_user.tsx => BulkEditUsers.tsx} | 10 +- .../src/components/CreateUserButton.test.tsx | 264 + ...e_user_button.tsx => CreateUserButton.tsx} | 151 +- .../EntityUsageExport/ExportTypeSelector.tsx | 10 +- .../src/components/EntityUsageExport/types.ts | 2 +- .../EntityUsageExport/utils.test.ts | 560 + .../src/components/EntityUsageExport/utils.ts | 91 + .../ModelSelect/ModelSelect.test.tsx | 682 +- .../components/ModelSelect/ModelSelect.tsx | 23 +- .../PaginatedModelSelect.test.tsx | 301 + .../PaginatedModelSelect.tsx | 143 + .../CommunityEngagementButtons.test.tsx | 50 + .../CommunityEngagementButtons.tsx | 36 + .../Navbar/UserDropdown/UserDropdown.test.tsx | 289 + .../Navbar/UserDropdown/UserDropdown.tsx | 180 + .../src/components/OldTeams.test.tsx | 109 +- .../src/components/OldTeams.tsx | 105 +- .../src/components/SSOModals.tsx | 6 +- .../CreateSearchTools.tsx} | 26 +- .../SearchConnectionTest.tsx} | 6 +- .../SearchTools/SearchToolColumn.tsx | 114 + .../SearchTools/SearchToolTester.test.tsx | 425 + .../SearchToolTester.tsx} | 0 .../SearchTools/SearchToolView.test.tsx | 278 + .../SearchToolView.tsx} | 30 +- .../SearchTools/SearchTools.test.tsx | 242 + .../SearchTools.tsx} | 100 +- .../src/components/SearchTools/index.tsx | 6 + .../{search_tools => SearchTools}/types.tsx | 1 + .../MCPSemanticFilterSettings.tsx | 309 + .../MCPSemanticFilterTestPanel.tsx | 164 + .../semanticFilterTestUtils.ts | 95 + .../Modals/BaseSSOSettingsForm.test.tsx | 111 + .../Modals/BaseSSOSettingsForm.tsx | 37 + .../Modals/DeleteSSOSettingsModal.tsx | 1 + .../Modals/EditSSOSettingsModal.test.tsx | 106 + .../Modals/EditSSOSettingsModal.tsx | 11 + .../AdminSettings/SSOSettings/SSOSettings.tsx | 22 +- .../AdminSettings/SSOSettings/utils.test.ts | 144 + .../AdminSettings/SSOSettings/utils.ts | 14 +- .../UISettings/PageVisibilitySettings.tsx | 146 + .../UISettings/UISettings.test.tsx | 75 + .../AdminSettings/UISettings/UISettings.tsx | 56 +- .../Fallbacks/AddFallbacks.test.tsx | 309 + .../RouterSettings/Fallbacks/AddFallbacks.tsx | 169 + .../Fallbacks/AddFallbacksModal.test.tsx | 56 + .../Fallbacks/AddFallbacksModal.tsx | 52 + .../Fallbacks/FallbackGroupConfig.tsx | 208 + .../Fallbacks/FallbackSelectionForm.test.tsx | 233 + .../Fallbacks/FallbackSelectionForm.tsx | 132 + .../Fallbacks/Fallbacks.test.tsx | 382 + .../RouterSettings/Fallbacks/Fallbacks.tsx | 334 + .../src/components/TeamSSOSettings.test.tsx | 669 +- .../src/components/TeamSSOSettings.tsx | 22 +- .../src/components/UsageIndicator.test.tsx | 187 + ...usage_indicator.tsx => UsageIndicator.tsx} | 171 +- .../EntityUsage/SpendByProvider.test.tsx | 238 + .../EntityUsage/SpendByProvider.tsx | 131 + .../components/KeyModelUsageView.test.tsx | 298 + .../components/KeyModelUsageView.tsx | 108 + .../components/UsagePageView.test.tsx | 675 +- .../UsagePage/components/UsagePageView.tsx | 252 +- .../src/components/UsagePage/types.ts | 10 + .../VirtualKeysPage/VirtualKeysTable.test.tsx | 172 +- .../VirtualKeysPage/VirtualKeysTable.tsx | 77 +- .../src/components/activity_metrics.test.tsx | 155 + .../src/components/activity_metrics.tsx | 83 +- .../src/components/add_fallbacks.test.tsx | 47 - .../src/components/add_fallbacks.tsx | 250 - .../add_model/RouterConfigBuilder.test.tsx | 296 + .../add_model/RouterConfigBuilder.tsx | 277 + .../add_model/add_auto_router_tab.tsx | 2 +- .../add_model/router_config_builder.tsx | 281 - .../src/components/admins.tsx | 673 - .../src/components/budgets/budget_modal.tsx | 2 +- .../components/budgets/edit_budget_modal.tsx | 2 +- .../components/bulk_create_users_button.tsx | 32 +- .../src/components/cloudzero_export_modal.tsx | 2 +- .../common_components/AccessGroupSelector.tsx | 112 + .../DefaultProxyAdminTag.tsx | 24 + .../DeleteResourceModal.test.tsx | 187 +- .../common_components/DeleteResourceModal.tsx | 34 +- .../KeyLifecycleSettings.test.tsx | 383 + .../KeyLifecycleSettings.tsx | 12 +- .../common_components/NewBadge.test.tsx | 35 + .../components/common_components/NewBadge.tsx | 12 +- .../RouterSettingsAccordion.tsx | 372 + .../TableHeaderSortDropdown.test.tsx | 148 + .../TableHeaderSortDropdown.tsx | 85 + .../components/common_components/all_view.tsx | 153 - .../common_components/chartUtils.test.tsx | 382 + .../common_components/default_org.tsx | 6 - .../common_components/user_form.tsx | 59 - .../components/create_user_button.test.tsx | 35 - .../src/components/dashboard_default_team.tsx | 103 - .../src/components/delete_model_button.tsx | 55 - .../edit_auto_router_modal.tsx | 4 +- .../edit_model/edit_model_modal.tsx | 214 - .../src/components/edit_user.tsx | 2 +- .../src/components/enter_proxy_url.tsx | 69 - .../src/components/fallbacks.test.tsx | 95 - .../src/components/fallbacks.tsx | 212 - .../src/components/general_settings.tsx | 2 +- .../src/components/guardrails.tsx | 49 +- .../guardrails/add_guardrail_form.tsx | 176 +- .../content_filter/CategoryTable.tsx | 147 + .../ContentCategoryConfiguration.tsx | 121 +- .../ContentFilterConfiguration.tsx | 17 +- .../content_filter/ContentFilterDisplay.tsx | 35 +- .../ContentFilterManager.test.tsx | 505 +- .../content_filter/ContentFilterManager.tsx | 120 +- .../content_filter/CustomPatternModal.tsx | 15 +- .../content_filter/KeywordModal.tsx | 15 +- .../content_filter/KeywordTable.tsx | 14 +- .../content_filter/PatternModal.tsx | 7 +- .../content_filter/PatternTable.tsx | 12 +- .../custom_code/CustomCodeEditor.tsx | 188 + .../custom_code/CustomCodeModal.tsx | 832 + .../custom_code/CustomCodePlayground.tsx | 588 + .../custom_code/custom_code_constants.ts | 194 + .../guardrails/custom_code/index.ts | 1 + .../guardrails/guardrail_info.test.tsx | 126 +- .../components/guardrails/guardrail_info.tsx | 163 +- .../guardrails/guardrail_info_helpers.tsx | 1 + .../guardrails/guardrail_optional_params.tsx | 18 +- .../guardrails/guardrail_provider_fields.tsx | 7 +- .../components/key_team_helpers/key_list.tsx | 1 + .../organization_search_fn.tsx | 23 - .../key_team_helpers/team_search_fn.tsx | 19 - .../src/components/leftnav.tsx | 592 +- .../src/components/mcp_connection_test.tsx | 279 - .../mcp_tools/MCPNetworkSettings.tsx | 152 + .../MCPPermissionManagement.test.tsx | 10 +- .../mcp_tools/MCPPermissionManagement.tsx | 24 + .../mcp_tools/MCPToolArgumentsForm.tsx | 345 + .../components/mcp_tools/OAuthFormFields.tsx | 166 + .../mcp_tools/StdioConfiguration.tsx | 9 +- .../mcp_tools/create_mcp_server.tsx | 216 +- .../src/components/mcp_tools/mcp_connect.tsx | 28 +- .../components/mcp_tools/mcp_discovery.tsx | 320 + .../mcp_tools/mcp_server_columns.tsx | 18 +- .../mcp_tools/mcp_server_edit.test.tsx | 154 + .../components/mcp_tools/mcp_server_edit.tsx | 308 +- .../components/mcp_tools/mcp_server_view.tsx | 25 +- .../components/mcp_tools/mcp_servers.test.tsx | 4 + .../src/components/mcp_tools/mcp_servers.tsx | 38 +- .../src/components/mcp_tools/types.tsx | 39 +- .../src/components/mcp_tools/utils.tsx | 4 +- .../model_add/CredentialDeleteModal.tsx | 90 - .../model_add/reuse_credentials.tsx | 2 +- .../model_dashboard/HealthCheckComponent.tsx | 4 + .../model_dashboard/all_models_table.tsx | 211 + .../model_dashboard/health_check_columns.tsx | 27 + .../src/components/model_dashboard/table.tsx | 11 +- .../src/components/model_info_view.test.tsx | 741 +- .../src/components/model_info_view.tsx | 129 +- .../src/components/molecules/filter.test.tsx | 527 + .../src/components/molecules/filter.tsx | 25 +- .../molecules/models/columns.test.tsx | 935 + .../components/molecules/models/columns.tsx | 654 +- .../molecules/notifications_manager.tsx | 38 +- .../src/components/navbar.test.tsx | 83 +- .../src/components/navbar.tsx | 204 +- .../src/components/networking.tsx | 1392 +- .../src/components/onboarding_link.tsx | 2 +- .../organisms/create_key_button.test.tsx | 111 +- .../organisms/create_key_button.tsx | 135 +- .../organisms/regenerate_key_modal.tsx | 18 + .../components/organization/add_org_admin.tsx | 113 - .../organization/organization_view.tsx | 36 +- .../organization/view_members_of_org.tsx | 74 - .../src/components/page_metadata.ts | 45 + .../src/components/page_utils.test.ts | 241 + .../src/components/page_utils.ts | 75 + .../chat_ui/AdditionalModelSettings.test.tsx | 53 +- .../chat_ui/AdditionalModelSettings.tsx | 45 +- .../playground/chat_ui/ChatUI.test.tsx | 64 + .../components/playground/chat_ui/ChatUI.tsx | 391 +- .../playground/chat_ui/CodeSnippets.test.tsx | 3 +- .../playground/chat_ui/CodeSnippets.tsx | 4 + .../playground/chat_ui/chatConstants.ts | 1 + .../chat_ui/mode_endpoint_mapping.tsx | 1 + .../components/playground/chat_ui/types.ts | 58 - .../playground/compareUI/CompareUI.tsx | 1 + .../playground/complianceUI/ComplianceUI.tsx | 1376 ++ .../playground/llm_calls/a2a_send_message.tsx | 6 + .../llm_calls/anthropic_messages.tsx | 2 + .../llm_calls/chat_completion.test.tsx | 70 +- .../playground/llm_calls/chat_completion.tsx | 86 +- .../llm_calls/responses_api.test.tsx | 29 +- .../playground/llm_calls/responses_api.tsx | 2 + .../components/policies/PolicySelector.tsx | 77 + .../policies/add_attachment_form.tsx | 318 + .../components/policies/add_policy_form.tsx | 569 + .../components/policies/attachment_table.tsx | 310 + .../policies/build_attachment_data.ts | 25 + .../policies/guardrail_selection_modal.tsx | 249 + .../components/policies/impact_popover.tsx | 84 + .../policies/impact_preview_alert.tsx | 61 + .../src/components/policies/index.tsx | 593 + .../policies/pipeline_flow_builder.tsx | 999 + .../src/components/policies/policy_info.tsx | 224 + .../src/components/policies/policy_table.tsx | 309 + .../components/policies/policy_templates.tsx | 302 + .../components/policies/policy_test_panel.tsx | 254 + .../policies/template_parameter_modal.tsx | 127 + .../src/components/policies/types.ts | 101 + .../prompts/prompt_editor_view/utils.ts | 211 +- .../src/components/public_model_hub.test.tsx | 22 +- .../src/components/public_model_hub.tsx | 52 +- .../src/components/request_model_access.tsx | 2 +- .../ReliabilityRetriesSection.tsx | 8 +- .../router_settings/RouterSettingsForm.tsx | 84 + .../src/components/router_settings/index.tsx | 88 +- .../src/components/search_tools/index.tsx | 6 - .../search_tools/search_tool_columns.tsx | 78 - .../components/survey/NudgePrompt.test.tsx | 101 + .../src/components/survey/NudgePrompt.tsx | 73 +- .../components/CreateTagModal.tsx | 2 +- .../src/components/team/TeamInfo.test.tsx | 729 + .../src/components/team/TeamInfo.tsx | 1316 ++ .../components/team/TeamMemberTab.test.tsx | 386 + .../src/components/team/TeamMemberTab.tsx | 233 + .../components/team/available_teams.test.tsx | 3 +- .../src/components/team/available_teams.tsx | 11 +- .../team/tabVisibilityUtils.test.ts | 74 + .../src/components/team/tabVisibilityUtils.ts | 59 + .../src/components/team/team_info.test.tsx | 572 - .../src/components/team/team_info.tsx | 1124 - .../components/team/team_member_view.test.tsx | 193 - .../src/components/team/team_member_view.tsx | 193 - .../templates/key_edit_view.test.tsx | 464 +- .../components/templates/key_edit_view.tsx | 115 +- .../templates/key_info_view.test.tsx | 174 +- .../components/templates/key_info_view.tsx | 152 +- .../components/templates/model_dashboard.tsx | 1755 -- .../src/components/usage_indicator.test.tsx | 86 - .../src/components/user_edit_view.test.tsx | 513 + .../src/components/user_edit_view.tsx | 64 +- .../CreateVectorStore.test.tsx | 276 + .../CreateVectorStore.tsx | 434 + .../DocumentsTable.test.tsx | 102 + .../DocumentsTable.tsx | 98 + .../S3VectorsConfig.test.tsx | 203 + .../S3VectorsConfig.tsx | 192 + .../TestVectorStoreTab.test.tsx | 90 + .../TestVectorStoreTab.tsx | 75 + .../VectorStoreForm.tsx | 11 +- .../VectorStoreTable.test.tsx | 12 +- .../VectorStoreTable.tsx | 26 + .../vector_store_management/index.tsx | 56 +- .../vector_store_management/types.tsx | 45 +- .../src/components/vector_store_providers.tsx | 37 + .../view_logs/ConfigInfoMessage.tsx | 16 +- .../view_logs/CostBreakdownViewer.tsx | 50 +- .../GuardrailViewer/CompliancePanel.tsx | 195 + .../GuardrailViewer/GuardrailViewer.test.tsx | 24 +- .../GuardrailViewer/GuardrailViewer.tsx | 779 +- .../LogDetailsDrawer/CollapsibleMessage.tsx | 88 + .../LogDetailsDrawer/DrawerHeader.tsx | 205 + .../LogDetailsDrawer/HistorySection.tsx | 62 + .../LogDetailsDrawer/HistoryTree.tsx | 83 + .../LogDetailsDrawer/InputCard.test.tsx | 219 + .../view_logs/LogDetailsDrawer/InputCard.tsx | 92 + .../view_logs/LogDetailsDrawer/JsonViewer.tsx | 35 + .../LogDetailsDrawer/LogDetailContent.tsx | 509 + .../LogDetailsDrawer/LogDetailsDrawer.tsx | 394 + .../LogDetailsDrawer/MessageBlock.tsx | 104 + .../LogDetailsDrawer/MessageCard.tsx | 199 + .../LogDetailsDrawer/OutputCard.test.tsx | 173 + .../view_logs/LogDetailsDrawer/OutputCard.tsx | 104 + .../LogDetailsDrawer/PrettyMessagesView.tsx | 41 + .../LogDetailsDrawer/SectionHeader.tsx | 100 + .../LogDetailsDrawer/SimpleMessageBlock.tsx | 74 + .../LogDetailsDrawer/SimpleToolCallBlock.tsx | 65 + .../view_logs/LogDetailsDrawer/TokenFlow.tsx | 22 + .../LogDetailsDrawer/ToolCallBlock.tsx | 78 + .../LogDetailsDrawer/ToolCallCard.tsx | 79 + .../LogDetailsDrawer/TruncatedValue.tsx | 35 + .../view_logs/LogDetailsDrawer/constants.ts | 39 + .../view_logs/LogDetailsDrawer/index.ts | 4 + .../LogDetailsDrawer/prettyMessagesTypes.ts | 28 + .../LogDetailsDrawer/prettyMessagesUtils.ts | 126 + .../LogDetailsDrawer/useKeyboardNavigation.ts | 87 + .../view_logs/LogDetailsDrawer/utils.ts | 93 + .../view_logs/RequestResponsePanel.test.tsx | 74 + .../view_logs/RequestResponsePanel.tsx | 4 +- .../src/components/view_logs/SessionView.tsx | 193 - .../SpendLogsSettingsModal.test.tsx | 484 + .../SpendLogsSettingsModal.tsx | 156 + .../ToolsSection/FormattedToolView.tsx | 124 + .../view_logs/ToolsSection/JsonToolView.tsx | 39 + .../ToolsSection/ToolExpandedContent.tsx | 52 + .../view_logs/ToolsSection/ToolItem.tsx | 74 + .../ToolsSection/ToolsSection.test.tsx | 117 + .../view_logs/ToolsSection/ToolsSection.tsx | 65 + .../view_logs/ToolsSection/index.ts | 7 + .../view_logs/ToolsSection/types.ts | 42 + .../view_logs/ToolsSection/utils.test.ts | 293 + .../view_logs/ToolsSection/utils.ts | 130 + .../src/components/view_logs/TypeBadges.tsx | 30 + .../view_logs/VectorStoreViewer.tsx | 38 +- .../src/components/view_logs/columns.tsx | 190 +- .../src/components/view_logs/constants.ts | 24 + .../src/components/view_logs/country_cell.tsx | 29 - .../src/components/view_logs/index.test.tsx | 103 +- .../src/components/view_logs/index.tsx | 433 +- .../view_logs/log_filter_logic.test.tsx | 682 + .../components/view_logs/log_filter_logic.tsx | 59 +- .../src/components/view_logs/table.tsx | 31 +- .../src/components/view_logs/utils.ts | 20 + .../src/components/view_users.tsx | 10 +- .../src/contexts/AntdGlobalProvider.tsx | 24 + .../src/data/compliancePrompts.ts | 310 + .../src/hooks/useTestMCPConnection.tsx | 6 +- .../src/utils/jwtUtils.test.ts | 79 +- ui/litellm-dashboard/src/utils/jwtUtils.ts | 15 + ui/litellm-dashboard/tsconfig.json | 27 +- ui/litellm-dashboard/tsconfig.tsbuildinfo | 2 +- ui/litellm-dashboard/vitest.config.ts | 1 + 2196 files changed, 221591 insertions(+), 43440 deletions(-) create mode 100644 .github/workflows/test-litellm-matrix.yml create mode 100644 .github/workflows/test-litellm-ui-build.yml create mode 100644 .github/workflows/test-model-map.yaml create mode 100644 .github/workflows/test_server_root_path.yml create mode 100644 .semgrep/rules/README.md create mode 100644 .semgrep/rules/python/reliability/unbounded-memory.yml create mode 100644 .semgrep/rules/python/unbounded-memory.yml create mode 100644 .trivyignore create mode 100644 cookbook/anthropic_agent_sdk/README.md create mode 100644 cookbook/anthropic_agent_sdk/agent_with_mcp.py create mode 100644 cookbook/anthropic_agent_sdk/common.py create mode 100644 cookbook/anthropic_agent_sdk/config.example.yaml create mode 100644 cookbook/anthropic_agent_sdk/main.py create mode 100644 cookbook/anthropic_agent_sdk/requirements.txt create mode 100644 cookbook/livekit_agent_sdk/README.md create mode 100644 cookbook/livekit_agent_sdk/config.example.yaml create mode 100644 cookbook/livekit_agent_sdk/main.py create mode 100644 cookbook/livekit_agent_sdk/requirements.txt create mode 100644 cookbook/mock_prompt_management_server/README.md create mode 100644 cookbook/mock_prompt_management_server/mock_prompt_management_server.py create mode 100644 cookbook/nova_sonic_realtime.py create mode 100644 docs/my-website/blog/claude_code_beta_headers/index.md create mode 100644 docs/my-website/blog/claude_opus_4_6/index.md create mode 100644 docs/my-website/blog/claude_sonnet_4_6/index.md create mode 100644 docs/my-website/blog/fastapi_middleware_performance/index.mdx create mode 100644 docs/my-website/blog/litellm_observatory/index.md create mode 100644 docs/my-website/blog/minimax_m2_5/index.md create mode 100644 docs/my-website/blog/model_cost_map_incident/index.md create mode 100644 docs/my-website/blog/sub_millisecond_proxy_overhead/index.md create mode 100644 docs/my-website/blog/vllm_embeddings_incident/index.md create mode 100644 docs/my-website/docs/a2a_invoking_agents.md create mode 100644 docs/my-website/docs/adding_provider/generic_prompt_management_api.md create mode 100644 docs/my-website/docs/completion/message_sanitization.md create mode 100644 docs/my-website/docs/evals_api.md create mode 100644 docs/my-website/docs/integrations/websearch_interception.md create mode 100644 docs/my-website/docs/mcp_oauth.md create mode 100644 docs/my-website/docs/mcp_public_internet.md create mode 100644 docs/my-website/docs/mcp_semantic_filter.md create mode 100644 docs/my-website/docs/providers/bedrock_realtime_with_audio.md create mode 100644 docs/my-website/docs/providers/sarvam.md create mode 100644 docs/my-website/docs/providers/scaleway.md create mode 100644 docs/my-website/docs/providers/watsonx/rerank.md create mode 100644 docs/my-website/docs/providers/xai_realtime.md create mode 100644 docs/my-website/docs/proxy/access_groups.md create mode 100644 docs/my-website/docs/proxy/guardrails/custom_code_guardrail.md create mode 100644 docs/my-website/docs/proxy/guardrails/guardrail_policies.md create mode 100644 docs/my-website/docs/proxy/guardrails/policy_tags.md create mode 100644 docs/my-website/docs/proxy/guardrails/policy_templates.md create mode 100644 docs/my-website/docs/proxy/keys_teams_router_settings.md create mode 100644 docs/my-website/docs/proxy/pyroscope_profiling.md create mode 100644 docs/my-website/docs/proxy/request_tags.md create mode 100644 docs/my-website/docs/proxy/sync_anthropic_beta_headers.md create mode 100644 docs/my-website/docs/proxy/ui/page_visibility.md create mode 100644 docs/my-website/docs/proxy/ui_spend_log_settings.md create mode 100644 docs/my-website/docs/proxy/ui_team_soft_budget_alerts.md create mode 100644 docs/my-website/docs/proxy_auth.md create mode 100644 docs/my-website/docs/traffic_mirroring.md create mode 100644 docs/my-website/docs/troubleshoot/max_callbacks.md create mode 100644 docs/my-website/docs/troubleshoot/prisma_migrations.md create mode 100644 docs/my-website/docs/troubleshoot/spend_queue_warnings.md create mode 100644 docs/my-website/docs/troubleshoot/ui_issues.md create mode 100644 docs/my-website/docs/tutorials/claude_agent_sdk.md create mode 100644 docs/my-website/docs/tutorials/claude_code_beta_headers.md create mode 100644 docs/my-website/docs/tutorials/claude_code_prompt_cache_routing.md create mode 100644 docs/my-website/docs/tutorials/copilotkit_sdk.md create mode 100644 docs/my-website/docs/tutorials/livekit_xai_realtime.md create mode 100644 docs/my-website/img/a2a_agent_spend.png create mode 100644 docs/my-website/img/a2a_trace_grouping.png create mode 100644 docs/my-website/img/okta_access_policies.png create mode 100644 docs/my-website/img/okta_authorization_server.png create mode 100644 docs/my-website/img/okta_client_credentials.png create mode 100644 docs/my-website/img/okta_redirect_uri.png create mode 100644 docs/my-website/img/okta_security_api.png create mode 100644 docs/my-website/img/policy_team_attach.png create mode 100644 docs/my-website/img/policy_test_matching.png create mode 100644 docs/my-website/img/release_notes/guard_actions.png create mode 100644 docs/my-website/img/release_notes/mcp_internet.png create mode 100644 docs/my-website/img/ui_access_groups.png create mode 100644 docs/my-website/img/ui_granular_router_settings.png create mode 100644 docs/my-website/img/ui_spend_logs_settings.png create mode 100644 docs/my-website/img/ui_team_soft_budget_alerts.png create mode 100644 docs/my-website/img/ui_team_soft_budget_email_example.png create mode 100644 docs/my-website/img/ui_tools.png create mode 100644 docs/my-website/release_notes/v1.81.12.md create mode 100644 docs/my-website/release_notes/v1.81.3-stable/index.md create mode 100644 docs/my-website/release_notes/v1.81.6.md create mode 100644 docs/my-website/release_notes/v1.81.9.md create mode 100644 docs/my-website/src/components/MiddlewareDiagrams/BaseHTTPMiddlewareAnimation.tsx create mode 100644 docs/my-website/src/components/MiddlewareDiagrams/BenchmarkVisualization.tsx create mode 100644 docs/my-website/src/components/MiddlewareDiagrams/PureASGIAnimation.tsx create mode 100644 docs/my-website/src/components/MiddlewareDiagrams/index.tsx create mode 100644 docs/my-website/src/components/MiddlewareDiagrams/styles.module.css delete mode 100644 docs/my-website/src/pages/troubleshoot.md create mode 100644 docs/my-website/src/theme/BlogListPage/index.js create mode 100644 docs/my-website/src/theme/BlogListPage/styles.module.css create mode 100644 enterprise/dist/litellm_enterprise-0.1.29-py3-none-any.whl create mode 100644 enterprise/dist/litellm_enterprise-0.1.29.tar.gz create mode 100644 enterprise/dist/litellm_enterprise-0.1.30-py3-none-any.whl create mode 100644 enterprise/dist/litellm_enterprise-0.1.30.tar.gz create mode 100644 enterprise/dist/litellm_enterprise-0.1.31-py3-none-any.whl create mode 100644 enterprise/dist/litellm_enterprise-0.1.31.tar.gz create mode 100644 enterprise/dist/litellm_enterprise-0.1.32-py3-none-any.whl create mode 100644 enterprise/dist/litellm_enterprise-0.1.32.tar.gz create mode 100644 enterprise/litellm_enterprise/proxy/hooks/managed_vector_stores.py create mode 100644 litellm-proxy-extras/build_and_publish.md create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.26-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.26.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.27-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.27.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.28-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.28.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.29-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.29.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.30-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.30.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.31-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.31.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.32-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.32.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.33-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.33.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.34-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.34.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.35-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.35.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.36-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.36.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.37-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.37.tar.gz create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.40-py3-none-any.whl create mode 100644 litellm-proxy-extras/dist/litellm_proxy_extras-0.4.40.tar.gz create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260123131407_add_policy_tables_and_policies_field/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260131150814_add_team_user_to_vector_stores/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260203120000_add_deprecated_verification_token_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260205091235_allow_team_guardrail_config/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260205144610_add_soft_budget_to_team_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260207093506_add_available_on_public_internet_to_mcp_servers/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260207110613_add_soft_budget_to_deleted_teams_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260209085821_add_verificationtoken_indexes/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260212103349_adjust_tags_policy_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260212143306_add_access_group_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260213105436_add_managed_vector_store_table/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260213170952_access_group_change_to_model_name/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260214094754_schema_sync/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260214124140_baseline_diff/migration.sql create mode 100644 litellm-proxy-extras/litellm_proxy_extras/migrations/20260214163027_add_pipeline_to_policy_table/migration.sql create mode 100644 litellm/a2a_protocol/card_resolver.py create mode 100644 litellm/a2a_protocol/exception_mapping_utils.py create mode 100644 litellm/a2a_protocol/exceptions.py create mode 100644 litellm/anthropic_beta_headers_config.json create mode 100644 litellm/anthropic_beta_headers_manager.py create mode 100644 litellm/evals/__init__.py create mode 100644 litellm/evals/main.py create mode 100644 litellm/integrations/braintrust_mock_client.py create mode 100644 litellm/integrations/datadog/datadog_mock_client.py create mode 100644 litellm/integrations/gcs_bucket/gcs_bucket_mock_client.py create mode 100644 litellm/integrations/helicone_mock_client.py create mode 100644 litellm/integrations/langfuse/langfuse_mock_client.py create mode 100644 litellm/integrations/langsmith_mock_client.py create mode 100644 litellm/integrations/mock_client_factory.py create mode 100644 litellm/integrations/posthog_mock_client.py create mode 100644 litellm/litellm_core_utils/env_utils.py create mode 100644 litellm/llms/a2a/__init__.py create mode 100644 litellm/llms/a2a/chat/__init__.py create mode 100644 litellm/llms/a2a/chat/guardrail_translation/README.md create mode 100644 litellm/llms/a2a/chat/guardrail_translation/__init__.py create mode 100644 litellm/llms/a2a/chat/guardrail_translation/handler.py create mode 100644 litellm/llms/a2a/chat/streaming_iterator.py create mode 100644 litellm/llms/a2a/chat/transformation.py create mode 100644 litellm/llms/a2a/common_utils.py create mode 100644 litellm/llms/azure_ai/azure_model_router/__init__.py create mode 100644 litellm/llms/azure_ai/azure_model_router/transformation.py create mode 100644 litellm/llms/azure_ai/cost_calculator.py create mode 100644 litellm/llms/base_llm/evals/__init__.py create mode 100644 litellm/llms/base_llm/evals/transformation.py create mode 100644 litellm/llms/base_llm/managed_resources/__init__.py create mode 100644 litellm/llms/base_llm/managed_resources/base_managed_resource.py create mode 100644 litellm/llms/base_llm/managed_resources/utils.py create mode 100644 litellm/llms/bedrock/realtime/handler.py create mode 100644 litellm/llms/bedrock/realtime/transformation.py rename ui/litellm-dashboard/src/components/teams.tsx => litellm/llms/databricks/responses/__init__.py (100%) create mode 100644 litellm/llms/databricks/responses/transformation.py create mode 100644 litellm/llms/duckduckgo/search/__init__.py create mode 100644 litellm/llms/duckduckgo/search/transformation.py create mode 100644 litellm/llms/hosted_vllm/embedding/transformation.py create mode 100644 litellm/llms/openai/embeddings/guardrail_translation/__init__.py create mode 100644 litellm/llms/openai/embeddings/guardrail_translation/handler.py create mode 100644 litellm/llms/openai/evals/__init__.py create mode 100644 litellm/llms/openai/evals/transformation.py create mode 100644 litellm/llms/perplexity/responses/__init__.py create mode 100644 litellm/llms/perplexity/responses/transformation.py create mode 100644 litellm/llms/s3_vectors/__init__.py create mode 100644 litellm/llms/s3_vectors/vector_stores/__init__.py create mode 100644 litellm/llms/s3_vectors/vector_stores/transformation.py create mode 100644 litellm/llms/watsonx/__init__.py create mode 100644 litellm/llms/watsonx/chat/__init__.py create mode 100644 litellm/llms/watsonx/completion/__init__.py create mode 100644 litellm/llms/watsonx/embed/__init__.py create mode 100644 litellm/llms/watsonx/rerank/__init__.py create mode 100644 litellm/llms/watsonx/rerank/transformation.py create mode 100644 litellm/llms/xai/realtime/__init__.py create mode 100644 litellm/llms/xai/realtime/handler.py create mode 100644 litellm/policy_templates_backup.json create mode 100644 litellm/proxy/_experimental/mcp_server/mcp_debug.py create mode 100644 litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py create mode 100644 litellm/proxy/_experimental/mcp_server/semantic_tool_filter.py create mode 100644 litellm/proxy/_experimental/out/404/index.html create mode 100644 litellm/proxy/_experimental/out/__next.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/_next/static/C_XKHLw43nx5HaPfGD7XZ/_buildManifest.js create mode 100644 litellm/proxy/_experimental/out/_next/static/C_XKHLw43nx5HaPfGD7XZ/_clientMiddlewareManifest.json rename litellm/proxy/_experimental/out/_next/static/{zHD7JXLXiWgn1NPp82VmF => C_XKHLw43nx5HaPfGD7XZ}/_ssgManifest.js (100%) create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/00bcc8d30dd19793.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/00ff280cdb7d7ee5.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/04b9c7b5c33ea26c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/06aaedbe7d27898c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/088a4006aa78f150.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/0a65da2cd24e2ab6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/0a671fedee641c02.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/0a6c418370a8c183.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/0d1694151d7fdaec.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1067d2c077cd73d6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1098-c3e95c9684ff5e95.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1108-c2d0c742b6e72436.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1128-64fa4a41ccaf67ea.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/11383a8b78399079.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/120d96e5e05ab994.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/121a51d3bbb6f362.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1300460219810c10.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/134f728fa7099e3e.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/137-c6f74fedf576a11b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1414-2770d1155b664522.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1442-024f7e51804e0d7e.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1623-54c56cbe1afc3953.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1713-b3fdb241d0f3ae7a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/179f4b987bc9083f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1901-4d02d1f2a71cdbf7.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/193ac6435f936582.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1994-6637a121c9ee1602.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1a01cb4063a7b21e.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1ab4ccc7c0ba9eff.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1b8186fdb9bf9067.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1d3826d625e92c33.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1e0e6eb47fe60159.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/1fe0596a309ad6cf.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2068-2c78bfc32dc0de5f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2117-26a589a1115bdd0a.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2136-2c0d6e8c18d2c5c4.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2202-a83ad035a17401aa.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2227-5ae3f36b0a81c5b4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/22e715061d511345.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2378-252212b7a5e313ce.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2409-e94c05c6f11bb939.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/249ef9d7a08bbfa1.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2500-811f2612ec5f6830.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/25d1ef14bd591cf9.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2618-062177b80fc4a38e.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2699-38ff37315d78ae04.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/26adfa4e8ffc85c7.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2703702968738794.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/27c7596aa0326b71.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2820-592c2b4ff874a913.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2901-0cdd0656eb7463d6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/292-aaba6c4e7c8d416d.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2926-a9cb83e61fc8ad20.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2971c4658f1bcd7d.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2f04fe05bcb1c150.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/2fdd60613421a228.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3014691f-ba91873bc8fe3fad.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/315cda92f466b9ec.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3242-6e6ec7e18f5d698d.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3367-58830187e9e5b9fa.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/337-bb33d149e9f461b3.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3454255bdea68dda.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3507-14fb4e6cd377d7da.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/353-e55516ea4730f9d4.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3567-9a29feedd7b63950.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/36ccc2b555a26ad4.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3709-34dbb332d3a3ac26.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3862-064a3fb795c75b62.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3afadb9a550fc886.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3b30ab8eaa03bc21.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3b4510be1f4cea1f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3d2a01213eb1cc87.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3dad14bcec641ba8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3f369c603677cd7a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3f3fa56b5786d58c.css create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/3f49d66311c27fe1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/403c4d96324c23a6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4077-50cf2a28a79fdcd4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/40e89c053e10e01c.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4105-9c3c0ee7c494102f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4188d520ca4e5f2b.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4262f254ec63c549.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4306-f891b96cf0ee333b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4388-2f4ca3419d20af67.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4470-3ef8ade20eaf2875.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/44edba5625a9a9b4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/450ebd094f4fa24d.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4537761df9dff7f0.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4559-52ca85b2d8893149.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/457923c551f21385.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4587f4ad9ebcbb4e.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/464560f129260d42.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/46901752d0b0dde9.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4758898ae55ecd92.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/47656bcac78a726c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/47ed25bb99ff8a39.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4817-59d642defb0e86f2.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4865-c1c0885a93c327fa.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/496b84010c33cf69.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4980372eaa37b78b.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4995cc30215f504d.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4af6a1c366381700.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4b385187755a737f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4bacf5b9194c12f5.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4e20891f2fd03463.css create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/4ed86d695abe3c87.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/50779d2c65692de7.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5105-2998cbe1c9fc8ee4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/511809a345b510d8.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5144-bbc18c43eade9aef.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5202-60292daf4bc5c8fb.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5319-5b2d4bf2dc450f99.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/53218dce8acb3bff.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5333-1540faf81c7d7006.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5365cf27e8d07577.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/536cb86ca75d1f30.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/542a1a209eb732c6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/54731bb470e07604.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/557a369a3f213cfe.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5583bc893837fdf8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/55c4117d5fcd0aae.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/565cdfe156dcb380.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5695-dbbcbf2da21d2bab.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5706-1e314cef9ea5c5d6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/570b2e10aa856e54.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5733-aa80f52062105ad2.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5752-f504fb38ff5e13e8.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5869-426268ba6ad0ce0c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/58b9eb1766fba8e0.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5945-8b3b7713d7f416a2.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5975-758334d6641b9c63.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5992-287cec06808c74ae.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5b2b7fd4dd9a44f3.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5b9c0b6d6c814e58.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5d1f33f9fa668633.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5d3e07ae5afa6fa6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5d547ead001142ce.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5db1c5d0d0e548b4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5eb6648cefff2d8a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/5f9c3b92a016f382.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6008d176e68995d6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/605-102c0e6d8bb7517c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/617bc18095fe8025.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6285-68f82c874b184eba.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6367dd1d1cf7eeef.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6399-ccf9cdbdcd5f7abb.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/63f40e445646cfa6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/64f1a2ef9113d86f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6537-f70f2c4278e93458.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6600-0ec5e2dc66d8b41a.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6609-3e081758ffbe3786.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/665-d94073042ee5b874.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6653-e61fdc06093fc0a8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/66a190706fc6c35a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/67570d9401e62846.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6774f9c1f201e744.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/69aeba649b0dc90f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6c4c97f1ea6e7d77.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6d587e6e43260fc9.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/6e033c78c15ab9a6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7138-5b134dc8ad670770.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/72250192fd3153b7.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7271-46e4c11ee6b0a4d6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/730305e005d7bd1d.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/738c339383c3b4b6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/74982774ef38dcdb.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7526-da6b2857a3ca248d.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/766-baf0336e8ba5c686.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7688-ca173ea41812cf94.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/76a83e13dfaf23db.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/77d897b03fb96fa0.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7851-c10cbe6fcac2f9d6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7906-59ba450db59c8efa.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7926-108623e14caeb770.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7ad0165018dc89ce.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7b788dd93ad868b3.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7e2badb3d178f837.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7e3f5ce4b2a613d4.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7e417dd24c8becd0.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/7f9e9c54ac262de2.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8014-d6138fce46bba1e2.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8015668aa5f04beb.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8049-cb52b16664f13e28.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8135-881fe2cea0032570.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/814136f5b55e06b6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8143-9e4312f059e9ed27.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/816-37c57b39f4e7ece1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/81bf20526995284e.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/81e224efc874dea6.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8211-8dd5691abf54d0ca.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/82a6c2af12705c46.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/82ef36abe5e2e833.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/831fda51c425b4a8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8354d717e34ebd6f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/841e807b7dbb7e4f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8473-7749355a9a4b1818.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/84884fbf517f5d74.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8529-6b66d5dba2148164.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8565-5c05f6bbb9d0662f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8582-3a775364dbf07fa8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/88c74f8b4b20d25a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8992001a9a91bc67.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/89b9f8dbb6f0d490.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8a607e531e36f204.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/8e12212d7a0aeaee.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9022b46fabff1181.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9028-2bfc9f09930a0d61.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9039-e44ff08ca4f37a12.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9140-09af618948244b82.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9145-9507437d5b599cea.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9264-fd8ab51d702e9535.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/92cf5d832080641f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/93032856602932c1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/936738f40fc24cc1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/937c3b6cb00f6b79.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9409-6eefc92a7f8433ff.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9584-9d4fd7b3d6a7c9e7.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/97efd6e1c67bedcb.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9818-6f03d7efd4fb8533.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/983036f73d37142a.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9841-721a173be76941d1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/99be180c22b927f8.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/99cf9cf99df5ccfc.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9cf03e6d4b5b806e.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9d9fbd3add7d0f88.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/9f5ccd929375c1d6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a0f302271a793712.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a1c3d7b907b7b731.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a1ef280b7ad5ae6a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a21582fe1f52b973.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a382857dbbcea5d1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a44b0c08814c45ae.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a6bf78649679c265.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a6dad97d9634a72d.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a6dad97d9634a72d.js.map create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a7aecb91c09b0e9a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a7b79d0fe43dcbd0.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a7c0a41b6156d9b2.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a966296c3a6b28f6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/a9ebedc318fa36dc.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ab7a826839e7e423.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/api-reference/page-a6a3e9e67b671303.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/api-playground/page-67c4f150eba92e64.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/budgets/page-e471b9b73cfc894b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/caching/page-d31cc105402ab7e0.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/old-usage/page-5e097dbb8ce40bb4.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/prompts/page-8236f1efda3366f0.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/experimental/tag-management/page-5627fd94813402eb.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/guardrails/page-060e61cb783d32ef.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/layout-f7f722423efd1c5b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/logs/page-5a10d46ca991b83e.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/model-hub/page-1479dcb217587498.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/models-and-endpoints/page-b69988590beaa5c8.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/organizations/page-56a03e123f452d60.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/playground/page-fc3dff494dc4db08.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/settings/admin-settings/page-746658933a633902.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/settings/logging-and-alerts/page-e3df74ef5ac0dcd5.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/settings/router-settings/page-ffa3245ebcbbc02a.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/settings/ui-theme/page-d833946961b065a5.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/teams/page-8d1a71afa9e9ff16.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/test-key/page-63cd64b722408984.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/tools/mcp-servers/page-7dd2ea6f1433d41f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/tools/vector-stores/page-0f618cc2d6cae794.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/usage/page-d7532f354d44803b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/users/page-6d3643cef6c068ee.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/(dashboard)/virtual-keys/page-73444bcb0cfe86b7.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/_not-found/page-e8d298ce4e35f231.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/layout-bed96765a7fb7bdd.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/login/page-61bfa80619b62f6b.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/mcp/oauth/callback/page-01be1cae3559363d.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/model_hub/page-92347d2021ca8580.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/model_hub_table/page-2ad344049541235f.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/onboarding/page-17ecf5bf068f8157.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/app/page-587b0acf34f8c747.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/b5bcd87b218a6bcd.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/b64beb414bc36659.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/b85f190e8626c49c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ba5a05afc286361c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/bdf355b41816a002.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/be340f56c7da1645.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/bf880fd979d4a2e6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c058ac3e89dc33df.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c19d75622900fb62.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c3d0c3b532b01699.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c4111e97b0095227.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c43ea300e1f2db88.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c4452a79c69324a6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c6a3593fb6892e17.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c7b74067c01ee971.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c91982ee39ef0f77.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c93c5c533dba84d1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/c9af2deb434988d6.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ca22b37c24b4d34a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/cb8e6ba28461af15.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ce8464047a8ce464.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/cf68fd1f1761ba48.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/cfc22f1e9e2830a5.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d24f23929997cfa1.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d2aa91699d95f4b3.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d4240d7bae1e2b30.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d4710ffa8fe96c6a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d64d74932cb225a3.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d682c064a60ae3d6.css create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d96012bcfc98706a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/d991de8f2cd90aca.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/db89710f0ce96e05.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/dbca964212122d58.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/de9cdee2e8c8fa36.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e007904603a33bc5.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e0d42088ec18edc9.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e1c5d2e47c042b8a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e1f23fd814ac3500.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e1fe71b9ff3d3857.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e228588e-635e9029d9d88215.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e3bc795c751bb99a.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e71fe358fd0c350f.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e8ed72789c2b42ff.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/e96398764f77c728.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/eaf91f44e099fe65.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/eea976cf4a05fc92.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ef41b5b82a37e553.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/f628c4bfd7854ec0.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/f98b25d79cd05714.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/fa8a1b9b6454c116.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/fb981bf7548d9de3.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/fd9d1056-a07bacd8fcc2728b.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/fe750aa0bf04912c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/fea300adfdeaf3b9.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ffd416b6dab7092c.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/ffe482191cf04a55.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/main-app-c6945ec5b2d5e671.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/main-e4e168e4dfadea03.js create mode 100644 litellm/proxy/_experimental/out/_next/static/chunks/turbopack-901b35f89c1f6751.js delete mode 100644 litellm/proxy/_experimental/out/_next/static/css/83c095d0528a2e35.css create mode 100644 litellm/proxy/_experimental/out/_next/static/media/1bffadaabf893a1e-s.7cd81963.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/2bbe8d2671613f1f-s.76dcb0b2.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/2c55a0e60120577a-s.2a48534a.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/5476f68d60460930-s.c995e352.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/9c72aa0f40e4eef8-s.18a48cbc.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/ad66f9afd8947f86-s.7a40eb73.woff2 create mode 100644 litellm/proxy/_experimental/out/_next/static/media/favicon.1d32c690.ico delete mode 100644 litellm/proxy/_experimental/out/_next/static/zHD7JXLXiWgn1NPp82VmF/_buildManifest.js create mode 100644 litellm/proxy/_experimental/out/_not-found.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._not-found.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._not-found.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/_not-found/index.html create mode 100644 litellm/proxy/_experimental/out/api-reference/__next.!KGRhc2hib2FyZCk.api-reference.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next.!KGRhc2hib2FyZCk.api-reference.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/api-reference/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/assets/logos/s3_vector.png create mode 100644 litellm/proxy/_experimental/out/assets/logos/zscaler.svg create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next.!KGRhc2hib2FyZCk.experimental.api-playground.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next.!KGRhc2hib2FyZCk.experimental.api-playground.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/api-playground/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next.!KGRhc2hib2FyZCk.experimental.budgets.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next.!KGRhc2hib2FyZCk.experimental.budgets.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/budgets/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next.!KGRhc2hib2FyZCk.experimental.caching.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next.!KGRhc2hib2FyZCk.experimental.caching.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/caching/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next.!KGRhc2hib2FyZCk.experimental.claude-code-plugins.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next.!KGRhc2hib2FyZCk.experimental.claude-code-plugins.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/claude-code-plugins/index.html create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next.!KGRhc2hib2FyZCk.experimental.old-usage.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next.!KGRhc2hib2FyZCk.experimental.old-usage.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/old-usage/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next.!KGRhc2hib2FyZCk.experimental.prompts.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next.!KGRhc2hib2FyZCk.experimental.prompts.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/prompts/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next.!KGRhc2hib2FyZCk.experimental.tag-management.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next.!KGRhc2hib2FyZCk.experimental.tag-management.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next.!KGRhc2hib2FyZCk.experimental.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/experimental/tag-management/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next.!KGRhc2hib2FyZCk.guardrails.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next.!KGRhc2hib2FyZCk.guardrails.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/guardrails/index.html create mode 100644 litellm/proxy/_experimental/out/login/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/login/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/login/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/login/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/login/__next.login.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/login/__next.login.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next.!KGRhc2hib2FyZCk.logs.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next.!KGRhc2hib2FyZCk.logs.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/logs/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next.mcp.oauth.callback.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next.mcp.oauth.callback.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next.mcp.oauth.txt create mode 100644 litellm/proxy/_experimental/out/mcp/oauth/callback/__next.mcp.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next.!KGRhc2hib2FyZCk.model-hub.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next.!KGRhc2hib2FyZCk.model-hub.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/model-hub/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next.model_hub.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/__next.model_hub.txt create mode 100644 litellm/proxy/_experimental/out/model_hub/index.html create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next.model_hub_table.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/model_hub_table/__next.model_hub_table.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next.!KGRhc2hib2FyZCk.models-and-endpoints.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next.!KGRhc2hib2FyZCk.models-and-endpoints.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/models-and-endpoints/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next.onboarding.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/__next.onboarding.txt create mode 100644 litellm/proxy/_experimental/out/onboarding/index.html create mode 100644 litellm/proxy/_experimental/out/organizations/__next.!KGRhc2hib2FyZCk.organizations.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next.!KGRhc2hib2FyZCk.organizations.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/organizations/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next.!KGRhc2hib2FyZCk.playground.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next.!KGRhc2hib2FyZCk.playground.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/playground/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/policies.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next.!KGRhc2hib2FyZCk.policies.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next.!KGRhc2hib2FyZCk.policies.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/policies/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/policies/index.html create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next.!KGRhc2hib2FyZCk.settings.admin-settings.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next.!KGRhc2hib2FyZCk.settings.admin-settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next.!KGRhc2hib2FyZCk.settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/settings/admin-settings/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next.!KGRhc2hib2FyZCk.settings.logging-and-alerts.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next.!KGRhc2hib2FyZCk.settings.logging-and-alerts.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next.!KGRhc2hib2FyZCk.settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/settings/logging-and-alerts/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next.!KGRhc2hib2FyZCk.settings.router-settings.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next.!KGRhc2hib2FyZCk.settings.router-settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next.!KGRhc2hib2FyZCk.settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/settings/router-settings/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next.!KGRhc2hib2FyZCk.settings.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next.!KGRhc2hib2FyZCk.settings.ui-theme.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next.!KGRhc2hib2FyZCk.settings.ui-theme.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/settings/ui-theme/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next.!KGRhc2hib2FyZCk.teams.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next.!KGRhc2hib2FyZCk.teams.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/teams/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next.!KGRhc2hib2FyZCk.test-key.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next.!KGRhc2hib2FyZCk.test-key.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/test-key/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next.!KGRhc2hib2FyZCk.tools.mcp-servers.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next.!KGRhc2hib2FyZCk.tools.mcp-servers.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next.!KGRhc2hib2FyZCk.tools.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/tools/mcp-servers/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next.!KGRhc2hib2FyZCk.tools.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next.!KGRhc2hib2FyZCk.tools.vector-stores.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next.!KGRhc2hib2FyZCk.tools.vector-stores.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/tools/vector-stores/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next.!KGRhc2hib2FyZCk.usage.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next.!KGRhc2hib2FyZCk.usage.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/usage/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/users/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/users/__next.!KGRhc2hib2FyZCk.users.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/users/__next.!KGRhc2hib2FyZCk.users.txt create mode 100644 litellm/proxy/_experimental/out/users/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/users/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/users/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/users/__next._tree.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next.!KGRhc2hib2FyZCk.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next.!KGRhc2hib2FyZCk.virtual-keys.__PAGE__.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next.!KGRhc2hib2FyZCk.virtual-keys.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next._full.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next._head.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next._index.txt create mode 100644 litellm/proxy/_experimental/out/virtual-keys/__next._tree.txt create mode 100644 litellm/proxy/agent_endpoints/a2a_routing.py create mode 100644 litellm/proxy/agent_endpoints/model_list_helpers.py create mode 100644 litellm/proxy/auth/ip_address_utils.py create mode 100644 litellm/proxy/common_utils/cache_coordinator.py create mode 100644 litellm/proxy/compliance_checks.py create mode 100644 litellm/proxy/example_config_yaml/pipeline_test_guardrails.py create mode 100644 litellm/proxy/example_config_yaml/test_pipeline_config.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/custom_code/__init__.py create mode 100644 litellm/proxy/guardrails/guardrail_hooks/custom_code/custom_code_guardrail.py create mode 100644 litellm/proxy/guardrails/guardrail_hooks/custom_code/primitives.py create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harm_toxic_abuse.json create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harm_toxic_abuse_au.json create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harm_toxic_abuse_de.json create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harm_toxic_abuse_es.json create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harm_toxic_abuse_fr.json create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/harmful_child_safety.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/prompt_injection_data_exfiltration.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/prompt_injection_jailbreak.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/prompt_injection_malicious_code.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/prompt_injection_sql.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/categories/prompt_injection_system_prompt.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/airline_brand_protection.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/aviation_safety_topics.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_biometric_profiling.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_biometric_profiling_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_emotion_recognition.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_emotion_recognition_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_manipulation.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_manipulation_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_social_scoring.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_social_scoring_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_vulnerability.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_art5_vulnerability_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_article5.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/eu_ai_act_article5_fr.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/uae_anti_discrimination.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/uae_cultural_sensitivity.yaml create mode 100644 litellm/proxy/guardrails/guardrail_hooks/mcp_security/__init__.py create mode 100644 litellm/proxy/guardrails/guardrail_hooks/mcp_security/mcp_security_guardrail.py create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/ARCHITECTURE.md create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/__init__.py create mode 100644 litellm/proxy/hooks/mcp_semantic_filter/hook.py create mode 100644 litellm/proxy/management_endpoints/access_group_endpoints.py create mode 100644 litellm/proxy/management_endpoints/compliance_endpoints.py create mode 100644 litellm/proxy/management_endpoints/policy_endpoints.py create mode 100644 litellm/proxy/mcp_registry.json create mode 100644 litellm/proxy/openai_evals_endpoints/__init__.py create mode 100644 litellm/proxy/openai_evals_endpoints/endpoints.py create mode 100644 litellm/proxy/pass_through_endpoints/architecture.md create mode 100644 litellm/proxy/policy_engine/__init__.py create mode 100644 litellm/proxy/policy_engine/architecture.md create mode 100644 litellm/proxy/policy_engine/attachment_registry.py create mode 100644 litellm/proxy/policy_engine/condition_evaluator.py create mode 100644 litellm/proxy/policy_engine/init_policies.py create mode 100644 litellm/proxy/policy_engine/pipeline_executor.py create mode 100644 litellm/proxy/policy_engine/policy_endpoints.py create mode 100644 litellm/proxy/policy_engine/policy_matcher.py create mode 100644 litellm/proxy/policy_engine/policy_registry.py create mode 100644 litellm/proxy/policy_engine/policy_resolve_endpoints.py create mode 100644 litellm/proxy/policy_engine/policy_resolver.py create mode 100644 litellm/proxy/policy_engine/policy_validator.py create mode 100644 litellm/proxy_auth/__init__.py create mode 100644 litellm/proxy_auth/credentials.py create mode 100644 litellm/rag/ingestion/file_parsers/__init__.py create mode 100644 litellm/rag/ingestion/file_parsers/pdf_parser.py create mode 100644 litellm/rag/ingestion/s3_vectors_ingestion.py create mode 100644 litellm/rag/ingestion/vertex_ai_ingestion.py create mode 100644 litellm/router_utils/pre_call_checks/deployment_affinity_check.py create mode 100644 litellm/router_utils/pre_call_checks/model_rate_limit_check.py create mode 100644 litellm/types/access_group.py create mode 100644 litellm/types/llms/openai_evals.py create mode 100644 litellm/types/llms/xai.py create mode 100644 litellm/types/policy_engine.py create mode 100644 litellm/types/proxy/compliance_endpoints.py create mode 100644 litellm/types/proxy/guardrails/guardrail_hooks/zscaler_ai_guard.py create mode 100644 litellm/types/proxy/management_endpoints/key_management_endpoints.py create mode 100644 litellm/types/proxy/policy_engine/__init__.py create mode 100644 litellm/types/proxy/policy_engine/pipeline_types.py create mode 100644 litellm/types/proxy/policy_engine/policy_types.py create mode 100644 litellm/types/proxy/policy_engine/resolver_types.py create mode 100644 litellm/types/proxy/policy_engine/validation_types.py create mode 100644 policy_templates.json delete mode 100644 proxy_config.yaml rename tests/agent_tests/{ => local_only_agent_tests}/local_vertex_agent.py (100%) rename tests/agent_tests/{ => local_only_agent_tests}/test_a2a.py (100%) rename tests/agent_tests/{ => local_only_agent_tests}/test_a2a_completion_bridge.py (100%) create mode 100644 tests/agent_tests/test_a2a_agent.py create mode 100644 tests/batches_tests/test_batch_custom_pricing.py create mode 100644 tests/code_coverage_tests/check_guardrail_apply_decorator.py create mode 100644 tests/guardrails_tests/test_eu_ai_act_article5.py create mode 100644 tests/guardrails_tests/test_eu_ai_act_french_3_scenarios.py create mode 100644 tests/litellm/llms/anthropic/test_anthropic_reasoning_effort.py create mode 100644 tests/litellm/llms/anthropic/test_anthropic_schema_filter.py create mode 100644 tests/litellm/llms/bedrock/test_nova_imported_models.py create mode 100644 tests/litellm/proxy/_experimental/mcp_server/test_discoverable_endpoints.py create mode 100644 tests/litellm/proxy/management_endpoints/test_common_utils.py create mode 100644 tests/litellm/proxy/test_init_litellm_callbacks.py create mode 100644 tests/litellm/test_batch_completion_models_all_responses.py create mode 100644 tests/litellm/test_bedrock_extended_beta_models.py create mode 100644 tests/litellm/test_proxy_auth.py create mode 100644 tests/litellm/test_router_retry_backoff_headers.py create mode 100644 tests/litellm/test_stream_chunk_builder_images.py create mode 100644 tests/litellm_core_utils/test_bedrock_converse_dedup_factory.py create mode 100644 tests/llm_translation/realtime/__init__.py create mode 100644 tests/llm_translation/realtime/base_realtime_tests.py rename tests/llm_translation/{ => realtime}/test_openai_realtime.py (100%) create mode 100644 tests/llm_translation/realtime/test_openai_realtime_simple.py create mode 100644 tests/llm_translation/realtime/test_xai_realtime.py create mode 100644 tests/llm_translation/test_a2a.py create mode 100644 tests/llm_translation/test_bedrock_anthropic_regression.py create mode 100644 tests/llm_translation/test_evals_api.py create mode 100644 tests/llm_translation/test_hosted_vllm_embedding_e2e.py create mode 100644 tests/llm_translation/test_model_cost_map_resilience.py delete mode 100644 tests/local_testing/test_literalai.py create mode 100644 tests/logging_callback_tests/test_dynamic_otel_keys.py create mode 100644 tests/logging_callback_tests/test_standard_logging_payload_excluded_fields.py create mode 100644 tests/mcp_tests/test_oauth2_mcp_config.yaml create mode 100644 tests/mcp_tests/test_openapi_spec_path_url.py create mode 100644 tests/mcp_tests/test_semantic_tool_filter_e2e.py create mode 100644 tests/pass_through_unit_tests/test_passthrough_registry_updates.py delete mode 100644 tests/proxy_admin_ui_tests/ui_unit_tests/log_filter_logic.test.tsx create mode 100644 tests/proxy_e2e_anthropic_messages_tests/test_all_beta_headers.py create mode 100644 tests/proxy_e2e_anthropic_messages_tests/test_claude_agent_sdk.py create mode 100644 tests/proxy_e2e_anthropic_messages_tests/test_config.yaml create mode 100644 tests/proxy_unit_tests/test_get_image.py create mode 100644 tests/proxy_unit_tests/test_server_root_path.py create mode 100644 tests/proxy_unit_tests/test_ui_path_detection.py create mode 100644 tests/proxy_unit_tests/test_zero_cost_model_budget_bypass.py create mode 100644 tests/router_unit_tests/test_get_model_list_alias_optimization.py create mode 100644 tests/router_unit_tests/test_router_acancel_batch.py create mode 100644 tests/search_tests/test_duckduckgo_search.py create mode 100644 tests/test_litellm/a2a_protocol/test_card_resolver.py create mode 100644 tests/test_litellm/caching/test_dual_cache.py create mode 100644 tests/test_litellm/enterprise/proxy/test_afile_retrieve_returns_unified_id.py create mode 100644 tests/test_litellm/enterprise/proxy/test_batch_retrieve_input_file_id.py create mode 100644 tests/test_litellm/enterprise/proxy/test_batch_retrieve_returns_unified_input_file_id.py create mode 100644 tests/test_litellm/enterprise/proxy/test_deleted_file_returns_403_not_404.py create mode 100644 tests/test_litellm/enterprise/proxy/test_file_deletion_blocking.py create mode 100644 tests/test_litellm/enterprise/proxy/test_managed_files_access_check.py create mode 100644 tests/test_litellm/enterprise/proxy/test_managed_files_hook.py create mode 100644 tests/test_litellm/expected_responses_api_request/context_management_and_shell.json create mode 100644 tests/test_litellm/integrations/arize/test_arize_otel_coexistence.py create mode 100644 tests/test_litellm/integrations/datadog/test_datadog_tags_regression.py create mode 100644 tests/test_litellm/integrations/test_prometheus_client_ip_user_agent.py create mode 100644 tests/test_litellm/integrations/test_prometheus_missing_metrics.py create mode 100644 tests/test_litellm/integrations/test_prometheus_none_metadata.py create mode 100644 tests/test_litellm/integrations/websearch_interception/test_websearch_chat_completion.py create mode 100644 tests/test_litellm/litellm_core_utils/test_get_litellm_params.py create mode 100644 tests/test_litellm/litellm_core_utils/test_redact_messages.py create mode 100644 tests/test_litellm/llms/anthropic/chat/guardrail_translation/test_anthropic_guardrail_handler.py rename test_anthropic_messages_structured_outputs_minimal.py => tests/test_litellm/llms/anthropic/experimental_pass_through/messages/test_anthropic_messages_structured_outputs.py (98%) create mode 100644 tests/test_litellm/llms/anthropic/test_azure_ai_cache_pricing.py create mode 100644 tests/test_litellm/llms/anthropic/test_message_sanitization.py create mode 100644 tests/test_litellm/llms/azure_ai/claude/test_azure_anthropic_count_tokens_transformation.py create mode 100644 tests/test_litellm/llms/azure_ai/rerank/test_azure_ai_rerank_transformation.py create mode 100644 tests/test_litellm/llms/azure_ai/test_azure_ai_cost_calculator.py create mode 100644 tests/test_litellm/llms/bedrock/chat/test_streaming_choice_index.py create mode 100644 tests/test_litellm/llms/bedrock/realtime/test_bedrock_realtime_transformation.py create mode 100644 tests/test_litellm/llms/databricks/responses/__init__.py create mode 100644 tests/test_litellm/llms/databricks/responses/test_databricks_responses_transformation.py create mode 100644 tests/test_litellm/llms/gemini/files/__init__.py create mode 100644 tests/test_litellm/llms/gemini/files/test_gemini_files_transformation.py create mode 100644 tests/test_litellm/llms/hosted_vllm/chat/test_hosted_vllm_ssl_verify.py create mode 100644 tests/test_litellm/llms/hosted_vllm/embedding/test_hosted_vllm_embedding_ssl_verify.py create mode 100644 tests/test_litellm/llms/hosted_vllm/embedding/test_hosted_vllm_embedding_transformation.py create mode 100644 tests/test_litellm/llms/openai/embeddings/guardrail_translation/test_embeddings_guardrail_handler.py create mode 100644 tests/test_litellm/llms/openai/evals/__init__.py create mode 100644 tests/test_litellm/llms/openai/evals/test_openai_evals_transformation.py create mode 100644 tests/test_litellm/llms/openai/realtime/README.md create mode 100644 tests/test_litellm/llms/openai_like/embedding/__init__.py create mode 100644 tests/test_litellm/llms/openai_like/embedding/test_openai_like_embedding.py create mode 100644 tests/test_litellm/llms/perplexity/responses/test_perplexity_responses_transformation.py create mode 100644 tests/test_litellm/llms/s3_vectors/__init__.py create mode 100644 tests/test_litellm/llms/s3_vectors/vector_stores/__init__.py create mode 100644 tests/test_litellm/llms/s3_vectors/vector_stores/test_s3_vectors_transformation.py create mode 100644 tests/test_litellm/llms/test_cache_control_and_reasoning.py create mode 100644 tests/test_litellm/llms/test_lifecycle_fix.py create mode 100644 tests/test_litellm/llms/vertex_ai/vertex_ai_partner_models/qwen/__init__.py create mode 100644 tests/test_litellm/llms/vertex_ai/vertex_ai_partner_models/qwen/test_vertex_ai_qwen_global_endpoint.py create mode 100644 tests/test_litellm/llms/watsonx/rerank/__init__.py create mode 100644 tests/test_litellm/llms/watsonx/rerank/test_watsonx_rerank.py create mode 100644 tests/test_litellm/llms/watsonx/test_watsonx_common_utils.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_jwt_mcp_enforcement.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_jwt_mcp_simple.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_mcp_debug.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_mcp_discovery.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_mcp_stale_session.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_oauth2_token_cache.py create mode 100644 tests/test_litellm/proxy/_experimental/mcp_server/test_semantic_tool_filter.py create mode 100644 tests/test_litellm/proxy/agent_endpoints/test_model_list_helpers.py create mode 100644 tests/test_litellm/proxy/auth/test_cli_auth.py create mode 100644 tests/test_litellm/proxy/auth/test_mcp_ip_filtering.py create mode 100644 tests/test_litellm/proxy/auth/test_object_permission_loading.py create mode 100644 tests/test_litellm/proxy/google_endpoints/test_interactions_agent_param.py create mode 100644 tests/test_litellm/proxy/guardrails/guardrail_hooks/content_filter/test_eu_patterns.py create mode 100644 tests/test_litellm/proxy/guardrails/guardrail_hooks/content_filter/test_gdpr_policy_e2e.py create mode 100644 tests/test_litellm/proxy/guardrails/guardrail_hooks/openai/test_openai_moderation_streaming.py create mode 100644 tests/test_litellm/proxy/guardrails/guardrail_hooks/test_mcp_security.py create mode 100644 tests/test_litellm/proxy/hooks/test_image_generation_guardrails.py create mode 100644 tests/test_litellm/proxy/hooks/test_post_call_response_headers_hook.py create mode 100644 tests/test_litellm/proxy/hooks/test_post_call_streaming_hook_integration.py create mode 100644 tests/test_litellm/proxy/hooks/test_post_call_success_hook_integration.py create mode 100644 tests/test_litellm/proxy/management_endpoints/scim/test_scim_v2_discovery.py create mode 100644 tests/test_litellm/proxy/management_endpoints/search_endpoints/test_search_tool_management.py create mode 100644 tests/test_litellm/proxy/management_endpoints/test_access_group_endpoints.py create mode 100644 tests/test_litellm/proxy/management_endpoints/test_common_utils.py create mode 100644 tests/test_litellm/proxy/management_endpoints/test_compliance_endpoints.py create mode 100644 tests/test_litellm/proxy/management_endpoints/test_policy_endpoints.py create mode 100644 tests/test_litellm/proxy/middleware/test_prometheus_auth_middleware_asgi.py create mode 100644 tests/test_litellm/proxy/policy_engine/__init__.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_attachment_registry.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_condition_evaluator.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_pipeline_executor.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_policy_matcher.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_policy_resolver.py create mode 100644 tests/test_litellm/proxy/policy_engine/test_policy_validator.py create mode 100644 tests/test_litellm/proxy/rag_endpoints/__init__.py create mode 100644 tests/test_litellm/proxy/rag_endpoints/test_rag_endpoints.py create mode 100644 tests/test_litellm/proxy/test_api_key_masking_in_errors.py create mode 100644 tests/test_litellm/proxy/test_chat_completion_metadata.py create mode 100644 tests/test_litellm/proxy/test_pyroscope.py create mode 100644 tests/test_litellm/proxy/test_response_model_sanitization.py create mode 100644 tests/test_litellm/proxy/test_route_a2a_models.py create mode 100644 tests/test_litellm/proxy/vector_store_endpoints/test_vector_store_access_control.py create mode 100644 tests/test_litellm/responses/test_metadata_codex_callback.py create mode 100644 tests/test_litellm/responses/test_responses_api_request_body.py create mode 100644 tests/test_litellm/router_strategy/test_budget_limiter_hotpath.py create mode 100644 tests/test_litellm/router_utils/pre_call_checks/test_deployment_affinity_check.py create mode 100644 tests/test_litellm/secret_managers/test_aws_secret_manager_rotation.py create mode 100644 tests/test_litellm/test_a2a_registry_lookup.py create mode 100644 tests/test_litellm/test_anthropic_beta_headers_filtering.py create mode 100644 tests/test_litellm/test_claude_opus_4_6_config.py create mode 100644 tests/test_litellm/test_deepseek_model_metadata.py create mode 100644 tests/test_litellm/test_exception_exports.py create mode 100644 tests/test_litellm/test_model_param_helper.py create mode 100644 tests/test_litellm/test_router/test_enforce_model_rate_limits.py create mode 100644 tests/test_litellm/test_router_model_cost_isolation.py create mode 100644 tests/test_litellm/test_router_redis_init.py create mode 100644 tests/test_litellm/test_router_silent_experiment.py create mode 100644 tests/test_litellm/test_service_logger.py create mode 100644 tests/test_litellm/test_xai_responses_auto_routing.py create mode 100644 tests/test_litellm/types/__init__.py create mode 100644 tests/test_litellm/types/proxy/__init__.py create mode 100644 tests/test_litellm/types/proxy/policy_engine/__init__.py create mode 100644 tests/test_litellm/types/proxy/policy_engine/test_pipeline_types.py create mode 100644 tests/test_litellm/types/proxy/policy_engine/test_resolver_types.py create mode 100644 tests/test_otel_thread_leak.py create mode 100644 tests/test_presidio_latency.py create mode 100644 tests/vector_store_tests/rag/test_rag_s3_vectors.py create mode 100644 tests/vector_store_tests/test_s3_vectors_vector_store.py create mode 100644 ui/litellm-dashboard/e2e_tests/tests/keys/deleteKey.spec.ts create mode 100644 ui/litellm-dashboard/e2e_tests/tests/keys/regenerateKey.spec.ts create mode 100644 ui/litellm-dashboard/e2e_tests/tests/keys/updateKeyLimits.spec.ts create mode 100644 ui/litellm-dashboard/knip.json create mode 100644 ui/litellm-dashboard/public/assets/logos/s3_vector.png create mode 100644 ui/litellm-dashboard/public/assets/logos/zscaler.svg create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroupDetails.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroups.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useAccessGroups.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useCreateAccessGroup.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useDeleteAccessGroup.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/accessGroups/useEditAccessGroup.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/cloudzero/useCloudZeroCreate.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/cloudzero/useCloudZeroDryRun.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/cloudzero/useCloudZeroExport.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/cloudzero/useCloudZeroSettings.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/logDetails/useLogDetails.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/mcpSemanticFilterSettings/useMCPSemanticFilterSettings.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/mcpSemanticFilterSettings/useUpdateMCPSemanticFilterSettings.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/mcpServers/useMCPAccessGroups.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/mcpServers/useMCPServers.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/proxyConfig/useProxyConfig.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/proxyConfig/useProxyConfig.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useEditSSOSettings.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/sso/useSSOSettings.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/storeRequestInSpendLogs/useStoreRequestInSpendLogs.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/uiSettings/useUpdateUISettings.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/useDisableShowNewBadge.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/useDisableShowPrompts.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/useDisableShowPrompts.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/useDisableUsageIndicator.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/useDisableUsageIndicator.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/users/useUsers.test.ts create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/hooks/users/useUsers.ts delete mode 100644 ui/litellm-dashboard/src/app/(dashboard)/models-and-endpoints/components/ModelAnalyticsTab/FilterByContent.tsx delete mode 100644 ui/litellm-dashboard/src/app/(dashboard)/models-and-endpoints/components/ModelAnalyticsTab/ModelAnalyticsTab.tsx create mode 100644 ui/litellm-dashboard/src/app/(dashboard)/policies/page.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsDetailsPage.test.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsDetailsPage.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupBaseForm.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupCreateModal.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsModal/AccessGroupEditModal.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsPage.test.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/AccessGroupsPage.tsx create mode 100644 ui/litellm-dashboard/src/components/AccessGroups/types.ts create mode 100644 ui/litellm-dashboard/src/components/AdminPanel.test.tsx create mode 100644 ui/litellm-dashboard/src/components/AdminPanel.tsx create mode 100644 ui/litellm-dashboard/src/components/BulkEditUsers.test.tsx rename ui/litellm-dashboard/src/components/{bulk_edit_user.tsx => BulkEditUsers.tsx} (98%) create mode 100644 ui/litellm-dashboard/src/components/CreateUserButton.test.tsx rename ui/litellm-dashboard/src/components/{create_user_button.tsx => CreateUserButton.tsx} (80%) create mode 100644 ui/litellm-dashboard/src/components/ModelSelect/PaginatedModelSelect/PaginatedModelSelect.test.tsx create mode 100644 ui/litellm-dashboard/src/components/ModelSelect/PaginatedModelSelect/PaginatedModelSelect.tsx create mode 100644 ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Navbar/CommunityEngagementButtons/CommunityEngagementButtons.tsx create mode 100644 ui/litellm-dashboard/src/components/Navbar/UserDropdown/UserDropdown.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Navbar/UserDropdown/UserDropdown.tsx rename ui/litellm-dashboard/src/components/{search_tools/create_search_tool.tsx => SearchTools/CreateSearchTools.tsx} (97%) rename ui/litellm-dashboard/src/components/{search_tools/search_connection_test.tsx => SearchTools/SearchConnectionTest.tsx} (98%) create mode 100644 ui/litellm-dashboard/src/components/SearchTools/SearchToolColumn.tsx create mode 100644 ui/litellm-dashboard/src/components/SearchTools/SearchToolTester.test.tsx rename ui/litellm-dashboard/src/components/{search_tools/search_tool_tester.tsx => SearchTools/SearchToolTester.tsx} (100%) create mode 100644 ui/litellm-dashboard/src/components/SearchTools/SearchToolView.test.tsx rename ui/litellm-dashboard/src/components/{search_tools/search_tool_view.tsx => SearchTools/SearchToolView.tsx} (86%) create mode 100644 ui/litellm-dashboard/src/components/SearchTools/SearchTools.test.tsx rename ui/litellm-dashboard/src/components/{search_tools/search_tools.tsx => SearchTools/SearchTools.tsx} (78%) create mode 100644 ui/litellm-dashboard/src/components/SearchTools/index.tsx rename ui/litellm-dashboard/src/components/{search_tools => SearchTools}/types.tsx (96%) create mode 100644 ui/litellm-dashboard/src/components/Settings/AdminSettings/MCPSemanticFilterSettings/MCPSemanticFilterSettings.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/AdminSettings/MCPSemanticFilterSettings/MCPSemanticFilterTestPanel.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/AdminSettings/MCPSemanticFilterSettings/semanticFilterTestUtils.ts create mode 100644 ui/litellm-dashboard/src/components/Settings/AdminSettings/UISettings/PageVisibilitySettings.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/AddFallbacks.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/AddFallbacks.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/AddFallbacksModal.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/AddFallbacksModal.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/FallbackGroupConfig.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/FallbackSelectionForm.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/FallbackSelectionForm.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/Fallbacks.test.tsx create mode 100644 ui/litellm-dashboard/src/components/Settings/RouterSettings/Fallbacks/Fallbacks.tsx create mode 100644 ui/litellm-dashboard/src/components/UsageIndicator.test.tsx rename ui/litellm-dashboard/src/components/{usage_indicator.tsx => UsageIndicator.tsx} (73%) create mode 100644 ui/litellm-dashboard/src/components/UsagePage/components/EntityUsage/SpendByProvider.test.tsx create mode 100644 ui/litellm-dashboard/src/components/UsagePage/components/EntityUsage/SpendByProvider.tsx create mode 100644 ui/litellm-dashboard/src/components/UsagePage/components/KeyModelUsageView.test.tsx create mode 100644 ui/litellm-dashboard/src/components/UsagePage/components/KeyModelUsageView.tsx delete mode 100644 ui/litellm-dashboard/src/components/add_fallbacks.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/add_fallbacks.tsx create mode 100644 ui/litellm-dashboard/src/components/add_model/RouterConfigBuilder.test.tsx create mode 100644 ui/litellm-dashboard/src/components/add_model/RouterConfigBuilder.tsx delete mode 100644 ui/litellm-dashboard/src/components/add_model/router_config_builder.tsx delete mode 100644 ui/litellm-dashboard/src/components/admins.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/AccessGroupSelector.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/DefaultProxyAdminTag.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/KeyLifecycleSettings.test.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/RouterSettingsAccordion.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/TableHeaderSortDropdown/TableHeaderSortDropdown.test.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/TableHeaderSortDropdown/TableHeaderSortDropdown.tsx delete mode 100644 ui/litellm-dashboard/src/components/common_components/all_view.tsx create mode 100644 ui/litellm-dashboard/src/components/common_components/chartUtils.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/common_components/default_org.tsx delete mode 100644 ui/litellm-dashboard/src/components/common_components/user_form.tsx delete mode 100644 ui/litellm-dashboard/src/components/create_user_button.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/dashboard_default_team.tsx delete mode 100644 ui/litellm-dashboard/src/components/delete_model_button.tsx delete mode 100644 ui/litellm-dashboard/src/components/edit_model/edit_model_modal.tsx delete mode 100644 ui/litellm-dashboard/src/components/enter_proxy_url.tsx delete mode 100644 ui/litellm-dashboard/src/components/fallbacks.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/fallbacks.tsx create mode 100644 ui/litellm-dashboard/src/components/guardrails/content_filter/CategoryTable.tsx create mode 100644 ui/litellm-dashboard/src/components/guardrails/custom_code/CustomCodeEditor.tsx create mode 100644 ui/litellm-dashboard/src/components/guardrails/custom_code/CustomCodeModal.tsx create mode 100644 ui/litellm-dashboard/src/components/guardrails/custom_code/CustomCodePlayground.tsx create mode 100644 ui/litellm-dashboard/src/components/guardrails/custom_code/custom_code_constants.ts create mode 100644 ui/litellm-dashboard/src/components/guardrails/custom_code/index.ts delete mode 100644 ui/litellm-dashboard/src/components/key_team_helpers/organization_search_fn.tsx delete mode 100644 ui/litellm-dashboard/src/components/key_team_helpers/team_search_fn.tsx delete mode 100644 ui/litellm-dashboard/src/components/mcp_connection_test.tsx create mode 100644 ui/litellm-dashboard/src/components/mcp_tools/MCPNetworkSettings.tsx create mode 100644 ui/litellm-dashboard/src/components/mcp_tools/MCPToolArgumentsForm.tsx create mode 100644 ui/litellm-dashboard/src/components/mcp_tools/OAuthFormFields.tsx create mode 100644 ui/litellm-dashboard/src/components/mcp_tools/mcp_discovery.tsx create mode 100644 ui/litellm-dashboard/src/components/mcp_tools/mcp_server_edit.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/model_add/CredentialDeleteModal.tsx create mode 100644 ui/litellm-dashboard/src/components/model_dashboard/all_models_table.tsx create mode 100644 ui/litellm-dashboard/src/components/molecules/filter.test.tsx create mode 100644 ui/litellm-dashboard/src/components/molecules/models/columns.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/organization/add_org_admin.tsx delete mode 100644 ui/litellm-dashboard/src/components/organization/view_members_of_org.tsx create mode 100644 ui/litellm-dashboard/src/components/page_metadata.ts create mode 100644 ui/litellm-dashboard/src/components/page_utils.test.ts create mode 100644 ui/litellm-dashboard/src/components/page_utils.ts create mode 100644 ui/litellm-dashboard/src/components/playground/complianceUI/ComplianceUI.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/PolicySelector.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/add_attachment_form.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/add_policy_form.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/attachment_table.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/build_attachment_data.ts create mode 100644 ui/litellm-dashboard/src/components/policies/guardrail_selection_modal.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/impact_popover.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/impact_preview_alert.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/index.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/pipeline_flow_builder.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/policy_info.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/policy_table.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/policy_templates.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/policy_test_panel.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/template_parameter_modal.tsx create mode 100644 ui/litellm-dashboard/src/components/policies/types.ts create mode 100644 ui/litellm-dashboard/src/components/router_settings/RouterSettingsForm.tsx delete mode 100644 ui/litellm-dashboard/src/components/search_tools/index.tsx delete mode 100644 ui/litellm-dashboard/src/components/search_tools/search_tool_columns.tsx create mode 100644 ui/litellm-dashboard/src/components/survey/NudgePrompt.test.tsx create mode 100644 ui/litellm-dashboard/src/components/team/TeamInfo.test.tsx create mode 100644 ui/litellm-dashboard/src/components/team/TeamInfo.tsx create mode 100644 ui/litellm-dashboard/src/components/team/TeamMemberTab.test.tsx create mode 100644 ui/litellm-dashboard/src/components/team/TeamMemberTab.tsx create mode 100644 ui/litellm-dashboard/src/components/team/tabVisibilityUtils.test.ts create mode 100644 ui/litellm-dashboard/src/components/team/tabVisibilityUtils.ts delete mode 100644 ui/litellm-dashboard/src/components/team/team_info.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/team/team_info.tsx delete mode 100644 ui/litellm-dashboard/src/components/team/team_member_view.test.tsx delete mode 100644 ui/litellm-dashboard/src/components/team/team_member_view.tsx delete mode 100644 ui/litellm-dashboard/src/components/templates/model_dashboard.tsx delete mode 100644 ui/litellm-dashboard/src/components/usage_indicator.test.tsx create mode 100644 ui/litellm-dashboard/src/components/user_edit_view.test.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/CreateVectorStore.test.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/CreateVectorStore.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/DocumentsTable.test.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/DocumentsTable.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/S3VectorsConfig.test.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/S3VectorsConfig.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/TestVectorStoreTab.test.tsx create mode 100644 ui/litellm-dashboard/src/components/vector_store_management/TestVectorStoreTab.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/GuardrailViewer/CompliancePanel.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/CollapsibleMessage.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/DrawerHeader.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/HistorySection.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/HistoryTree.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/InputCard.test.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/InputCard.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/JsonViewer.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/LogDetailContent.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/LogDetailsDrawer.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/MessageBlock.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/MessageCard.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/OutputCard.test.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/OutputCard.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/PrettyMessagesView.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/SectionHeader.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/SimpleMessageBlock.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/SimpleToolCallBlock.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/TokenFlow.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/ToolCallBlock.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/ToolCallCard.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/TruncatedValue.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/constants.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/index.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/prettyMessagesTypes.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/prettyMessagesUtils.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/useKeyboardNavigation.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/LogDetailsDrawer/utils.ts delete mode 100644 ui/litellm-dashboard/src/components/view_logs/SessionView.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/SpendLogsSettingsModal/SpendLogsSettingsModal.test.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/SpendLogsSettingsModal/SpendLogsSettingsModal.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/FormattedToolView.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/JsonToolView.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/ToolExpandedContent.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/ToolItem.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/ToolsSection.test.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/ToolsSection.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/index.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/types.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/utils.test.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/ToolsSection/utils.ts create mode 100644 ui/litellm-dashboard/src/components/view_logs/TypeBadges.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/constants.ts delete mode 100644 ui/litellm-dashboard/src/components/view_logs/country_cell.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/log_filter_logic.test.tsx create mode 100644 ui/litellm-dashboard/src/components/view_logs/utils.ts create mode 100644 ui/litellm-dashboard/src/contexts/AntdGlobalProvider.tsx create mode 100644 ui/litellm-dashboard/src/data/compliancePrompts.ts diff --git a/.circleci/config.yml b/.circleci/config.yml index 02a9e3b0714..188b02c9f1c 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -21,9 +21,7 @@ commands: - run: name: "Install local version of litellm-enterprise" command: | - cd enterprise - python -m pip install -e . - cd .. + pip install --force-reinstall --no-deps -e enterprise/ setup_litellm_test_deps: steps: - checkout @@ -112,14 +110,32 @@ jobs: python -m mypy . cd .. no_output_timeout: 10m - local_testing: + + semgrep: docker: - image: cimg/python:3.12 auth: username: ${DOCKERHUB_USERNAME} password: ${DOCKERHUB_PASSWORD} working_directory: ~/project + steps: + - checkout + - setup_google_dns + - run: + name: Install Semgrep + command: pip install semgrep + - run: + name: Run Semgrep (custom rules only) + command: semgrep scan --config .semgrep/rules . --error + local_testing_part1: + docker: + - image: cimg/python:3.12 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + parallelism: 4 steps: - checkout - setup_google_dns @@ -205,20 +221,32 @@ jobs: # Run pytest and generate JUnit XML report - run: - name: Run tests + name: Run tests (Part 1 - A-M) command: | - pwd - ls - # Add --timeout to kill hanging tests after 300s (5 min) - # Add -v to show test names as they run for debugging - # Add --tb=short for shorter tracebacks - python -m pytest -vv tests/local_testing --cov=litellm --cov-report=xml --junitxml=test-results/junit.xml --durations=20 -k "not test_python_38.py and not test_basic_python_version.py and not router and not assistants and not langfuse and not caching and not cache" -n 4 --timeout=300 --timeout_method=thread + mkdir test-results + + # Discover test files (A-M) + TEST_FILES=$(circleci tests glob "tests/local_testing/**/test_[a-mA-M]*.py") + + echo "$TEST_FILES" | circleci tests run \ + --split-by=timings \ + --verbose \ + --command="xargs python -m pytest \ + -vv \ + --cov=litellm \ + --cov-report=xml \ + --junitxml=test-results/junit.xml \ + --durations=20 \ + -k \"not test_python_38.py and not test_basic_python_version.py and not router and not assistants and not langfuse and not caching and not cache\" \ + -n 4 \ + --timeout=300 \ + --timeout_method=thread" no_output_timeout: 120m - run: name: Rename the coverage files command: | - mv coverage.xml local_testing_coverage.xml - mv .coverage local_testing_coverage + mv coverage.xml local_testing_part1_coverage.xml + mv .coverage local_testing_part1_coverage # Store test results - store_test_results: @@ -226,8 +254,136 @@ jobs: - persist_to_workspace: root: . paths: - - local_testing_coverage.xml - - local_testing_coverage + - local_testing_part1_coverage.xml + - local_testing_part1_coverage + local_testing_part2: + docker: + - image: cimg/python:3.12 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + parallelism: 4 + steps: + - checkout + - setup_google_dns + - run: + name: Show git commit hash + command: | + echo "Git commit hash: $CIRCLE_SHA1" + + - restore_cache: + keys: + - v1-dependencies-{{ checksum ".circleci/requirements.txt" }} + - run: + name: Install Dependencies + command: | + python -m pip install --upgrade pip + python -m pip install -r .circleci/requirements.txt + pip install "pytest==7.3.1" + pip install "pytest-retry==1.6.3" + pip install "pytest-asyncio==0.21.1" + pip install "pytest-cov==5.0.0" + pip install "mypy==1.18.2" + pip install "google-generativeai==0.3.2" + pip install "google-cloud-aiplatform==1.43.0" + pip install pyarrow + pip install "boto3==1.36.0" + pip install "aioboto3==13.4.0" + pip install langchain + pip install lunary==0.2.5 + pip install "azure-identity==1.16.1" + pip install "langfuse==2.59.7" + pip install "logfire==0.29.0" + pip install numpydoc + pip install traceloop-sdk==0.21.1 + pip install opentelemetry-api==1.25.0 + pip install opentelemetry-sdk==1.25.0 + pip install opentelemetry-exporter-otlp==1.25.0 + pip install openai==1.100.1 + pip install prisma==0.11.0 + pip install "detect_secrets==1.5.0" + pip install "httpx==0.24.1" + pip install "respx==0.22.0" + pip install fastapi + pip install "gunicorn==21.2.0" + pip install "anyio==4.2.0" + pip install "aiodynamo==23.10.1" + pip install "asyncio==3.4.3" + pip install "apscheduler==3.10.4" + pip install "PyGithub==1.59.1" + pip install argon2-cffi + pip install "pytest-mock==3.12.0" + pip install python-multipart + pip install google-cloud-aiplatform + pip install prometheus-client==0.20.0 + pip install "pydantic==2.10.2" + pip install "diskcache==5.6.1" + pip install "Pillow==10.3.0" + pip install "jsonschema==4.22.0" + pip install "pytest-xdist==3.6.1" + pip install "pytest-timeout==2.2.0" + pip install "websockets==13.1.0" + pip install semantic_router --no-deps + pip install aurelio_sdk --no-deps + pip uninstall posthog -y + - setup_litellm_enterprise_pip + - save_cache: + paths: + - ./venv + key: v1-dependencies-{{ checksum ".circleci/requirements.txt" }} + - run: + name: Run prisma ./docker/entrypoint.sh + command: | + set +e + chmod +x docker/entrypoint.sh + ./docker/entrypoint.sh + set -e + - run: + name: Black Formatting + command: | + cd litellm + python -m pip install black + python -m black . + cd .. + + # Run pytest and generate JUnit XML report + - run: + name: Run tests (Part 2 - N-Z) + command: | + mkdir test-results + + # Discover test files (N-Z) + TEST_FILES=$(circleci tests glob "tests/local_testing/**/test_[n-zN-Z]*.py") + + echo "$TEST_FILES" | circleci tests run \ + --split-by=timings \ + --verbose \ + --command="xargs python -m pytest \ + -vv \ + --cov=litellm \ + --cov-report=xml \ + --junitxml=test-results/junit.xml \ + --durations=20 \ + -k \"not test_python_38.py and not test_basic_python_version.py and not router and not assistants and not langfuse and not caching and not cache\" \ + -n 4 \ + --timeout=300 \ + --timeout_method=thread" + no_output_timeout: 120m + - run: + name: Rename the coverage files + command: | + mv coverage.xml local_testing_part2_coverage.xml + mv .coverage local_testing_part2_coverage + + # Store test results + - store_test_results: + path: test-results + - persist_to_workspace: + root: . + paths: + - local_testing_part2_coverage.xml + - local_testing_part2_coverage langfuse_logging_unit_tests: docker: - image: cimg/python:3.11 @@ -499,7 +655,6 @@ jobs: username: ${DOCKERHUB_USERNAME} password: ${DOCKERHUB_PASSWORD} working_directory: ~/project - steps: - checkout - setup_google_dns @@ -513,6 +668,7 @@ jobs: pip install "pytest-cov==5.0.0" pip install "pytest-retry==1.6.3" pip install "pytest-asyncio==0.21.1" + pip install "pytest-xdist==3.6.1" pip install semantic_router --no-deps pip install aurelio_sdk --no-deps # Run pytest and generate JUnit XML report @@ -575,8 +731,8 @@ jobs: - run: name: Rename the coverage files command: | - mv coverage.xml litellm_router_coverage.xml - mv .coverage litellm_router_coverage + mv coverage.xml litellm_router_unit_coverage.xml + mv .coverage litellm_router_unit_coverage # Store test results - store_test_results: path: test-results @@ -584,8 +740,8 @@ jobs: - persist_to_workspace: root: . paths: - - litellm_router_coverage.xml - - litellm_router_coverage + - litellm_router_unit_coverage.xml + - litellm_router_unit_coverage litellm_security_tests: machine: image: ubuntu-2204:2023.10.1 @@ -1115,7 +1271,15 @@ jobs: ls # Add --timeout to kill hanging tests after 120s (2 min) # Add --durations=20 to show 20 slowest tests for debugging - python -m pytest -vv tests/llm_translation --cov=litellm --cov-report=xml -v --junitxml=test-results/junit.xml --durations=20 -n 4 --timeout=120 --timeout_method=thread + # Subdirectories with dedicated jobs (maintain this list as new jobs are added) + IGNORE_DIRS=( + "tests/llm_translation/realtime" + ) + IGNORE_ARGS="" + for dir in "${IGNORE_DIRS[@]}"; do + IGNORE_ARGS="$IGNORE_ARGS --ignore=$dir" + done + python -m pytest -vv tests/llm_translation $IGNORE_ARGS --cov=litellm --cov-report=xml -v --junitxml=test-results/junit.xml --durations=20 -n 4 --timeout=120 --timeout_method=thread no_output_timeout: 120m - run: name: Rename the coverage files @@ -1131,6 +1295,54 @@ jobs: paths: - llm_translation_coverage.xml - llm_translation_coverage + realtime_translation_testing: + docker: + - image: cimg/python:3.11 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + + steps: + - checkout + - setup_google_dns + - run: + name: Install Dependencies + command: | + python -m pip install --upgrade pip + python -m pip install -r requirements.txt + pip install "pytest==7.3.1" + pip install "pytest-retry==1.6.3" + pip install "pytest-cov==5.0.0" + pip install "pytest-asyncio==0.21.1" + pip install "respx==0.22.0" + pip install "pytest-xdist==3.6.1" + pip install "pytest-timeout==2.2.0" + pip install "websockets" + # Run pytest and generate JUnit XML report + - run: + name: Run realtime tests + command: | + pwd + ls + # Add --timeout to kill hanging tests after 120s (2 min) + # Add --durations=20 to show 20 slowest tests for debugging + python -m pytest -vv tests/llm_translation/realtime --cov=litellm --cov-report=xml -v --junitxml=test-results/junit.xml --durations=20 -n 4 --timeout=120 --timeout_method=thread + no_output_timeout: 120m + - run: + name: Rename the coverage files + command: | + mv coverage.xml realtime_translation_coverage.xml + mv .coverage realtime_translation_coverage + + # Store test results + - store_test_results: + path: test-results + - persist_to_workspace: + root: . + paths: + - realtime_translation_coverage.xml + - realtime_translation_coverage mcp_testing: docker: - image: cimg/python:3.11 @@ -1176,6 +1388,51 @@ jobs: paths: - mcp_coverage.xml - mcp_coverage + agent_testing: + docker: + - image: cimg/python:3.11 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + + steps: + - checkout + - setup_google_dns + - run: + name: Install Dependencies + command: | + python -m pip install --upgrade pip + python -m pip install -r requirements.txt + pip install "pytest==7.3.1" + pip install "pytest-retry==1.6.3" + pip install "pytest-cov==5.0.0" + pip install "pytest-asyncio==0.21.1" + pip install "respx==0.22.0" + pip install "pydantic==2.11.0" + pip install "a2a-sdk" + # Run pytest and generate JUnit XML report + - run: + name: Run tests + command: | + pwd + ls + python -m pytest -vv tests/agent_tests --ignore=tests/agent_tests/local_only_agent_tests --cov=litellm --cov-report=xml -x -s -v --junitxml=test-results/junit.xml --durations=5 + no_output_timeout: 120m + - run: + name: Rename the coverage files + command: | + mv coverage.xml agent_coverage.xml + mv .coverage agent_coverage + + # Store test results + - store_test_results: + path: test-results + - persist_to_workspace: + root: . + paths: + - agent_coverage.xml + - agent_coverage guardrails_testing: docker: - image: cimg/python:3.11 @@ -1397,7 +1654,7 @@ jobs: - search_coverage.xml - search_coverage # Split litellm_mapped_tests into 3 parallel jobs for 3x faster execution - litellm_mapped_tests_proxy: + litellm_mapped_tests_proxy_part1: docker: - image: cimg/python:3.11 auth: @@ -1408,23 +1665,53 @@ jobs: steps: - setup_litellm_test_deps - run: - name: Run proxy tests + name: Run proxy tests part 1 (high-volume directories) command: | prisma generate - python -m pytest tests/test_litellm/proxy --cov=litellm --cov-report=xml --junitxml=test-results/junit-proxy.xml --durations=10 -n 16 --maxfail=5 --timeout=300 -vv --log-cli-level=WARNING - no_output_timeout: 120m + export PYTHONUNBUFFERED=1 + python -m pytest tests/test_litellm/proxy/guardrails tests/test_litellm/proxy/management_endpoints tests/test_litellm/proxy/_experimental tests/test_litellm/proxy/client tests/test_litellm/proxy/auth --cov=litellm --cov-report=xml --junitxml=test-results/junit-proxy-part1.xml --durations=10 -n 8 --maxfail=5 --timeout=60 -vv --log-cli-level=WARNING -r A + no_output_timeout: 60m - run: name: Rename the coverage files command: | - mv coverage.xml litellm_proxy_tests_coverage.xml - mv .coverage litellm_proxy_tests_coverage + mv coverage.xml litellm_proxy_tests_part1_coverage.xml + mv .coverage litellm_proxy_tests_part1_coverage - store_test_results: path: test-results - persist_to_workspace: root: . paths: - - litellm_proxy_tests_coverage.xml - - litellm_proxy_tests_coverage + - litellm_proxy_tests_part1_coverage.xml + - litellm_proxy_tests_part1_coverage + litellm_mapped_tests_proxy_part2: + docker: + - image: cimg/python:3.11 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + resource_class: xlarge + steps: + - setup_litellm_test_deps + - run: + name: Run proxy tests part 2 (all other tests) + command: | + prisma generate + export PYTHONUNBUFFERED=1 + python -m pytest tests/test_litellm/proxy --ignore=tests/test_litellm/proxy/guardrails --ignore=tests/test_litellm/proxy/management_endpoints --ignore=tests/test_litellm/proxy/_experimental --ignore=tests/test_litellm/proxy/client --ignore=tests/test_litellm/proxy/auth --cov=litellm --cov-report=xml --junitxml=test-results/junit-proxy-part2.xml --durations=10 -n 8 --maxfail=5 --timeout=60 -vv --log-cli-level=WARNING -r A + no_output_timeout: 60m + - run: + name: Rename the coverage files + command: | + mv coverage.xml litellm_proxy_tests_part2_coverage.xml + mv .coverage litellm_proxy_tests_part2_coverage + - store_test_results: + path: test-results + - persist_to_workspace: + root: . + paths: + - litellm_proxy_tests_part2_coverage.xml + - litellm_proxy_tests_part2_coverage litellm_mapped_tests_llms: docker: - image: cimg/python:3.11 @@ -1465,7 +1752,7 @@ jobs: - run: name: Run core tests command: | - python -m pytest tests/test_litellm --ignore=tests/test_litellm/proxy --ignore=tests/test_litellm/llms --ignore=tests/test_litellm/integrations --ignore=tests/test_litellm/litellm_core_utils --cov=litellm --cov-report=xml --junitxml=test-results/junit-core.xml --durations=10 -n 16 --maxfail=5 --timeout=300 -vv --log-cli-level=WARNING + python -m pytest tests/test_litellm --ignore=tests/test_litellm/proxy --ignore=tests/test_litellm/llms --ignore=tests/test_litellm/integrations --ignore=tests/test_litellm/litellm_core_utils --ignore=tests/test_litellm/experimental_mcp_client --cov=litellm --cov-report=xml --junitxml=test-results/junit-core.xml --durations=10 -n 16 --maxfail=5 --timeout=300 -vv --log-cli-level=WARNING no_output_timeout: 120m - run: name: Rename the coverage files @@ -1506,6 +1793,33 @@ jobs: paths: - litellm_core_utils_tests_coverage.xml - litellm_core_utils_tests_coverage + litellm_mapped_tests_mcps: + docker: + - image: cimg/python:3.11 + auth: + username: ${DOCKERHUB_USERNAME} + password: ${DOCKERHUB_PASSWORD} + working_directory: ~/project + resource_class: xlarge + steps: + - setup_litellm_test_deps + - run: + name: Run MCP client tests + command: | + python -m pytest tests/test_litellm/experimental_mcp_client --cov=litellm --cov-report=xml --junitxml=test-results/junit-mcps.xml --durations=10 -n 4 --maxfail=5 --timeout=300 -vv --log-cli-level=WARNING + no_output_timeout: 120m + - run: + name: Rename the coverage files + command: | + mv coverage.xml litellm_mcps_tests_coverage.xml + mv .coverage litellm_mcps_tests_coverage + - store_test_results: + path: test-results + - persist_to_workspace: + root: . + paths: + - litellm_mcps_tests_coverage.xml + - litellm_mcps_tests_coverage litellm_mapped_tests_integrations: docker: - image: cimg/python:3.11 @@ -1743,13 +2057,14 @@ jobs: pip install "pytest-cov==5.0.0" pip install "pytest-asyncio==0.21.1" pip install "respx==0.22.0" + pip install "pytest-xdist==3.6.1" # Run pytest and generate JUnit XML report - run: name: Run tests command: | pwd ls - python -m pytest -vv tests/image_gen_tests --cov=litellm --cov-report=xml -x -v --junitxml=test-results/junit.xml --durations=5 + python -m pytest -vv tests/image_gen_tests -n 4 --cov=litellm --cov-report=xml -x -v --junitxml=test-results/junit.xml --durations=5 no_output_timeout: 120m - run: name: Rename the coverage files @@ -1792,6 +2107,7 @@ jobs: pip install "mlflow==2.17.2" pip install "anthropic==0.52.0" pip install "blockbuster==1.5.24" + pip install "pytest-xdist==3.6.1" # Run pytest and generate JUnit XML report - setup_litellm_enterprise_pip - run: @@ -1799,7 +2115,7 @@ jobs: command: | pwd ls - python -m pytest -vv tests/logging_callback_tests --cov=litellm --cov-report=xml -s -v --junitxml=test-results/junit.xml --durations=5 + python -m pytest -vv tests/logging_callback_tests --cov=litellm -n 4 --cov-report=xml -s -v --junitxml=test-results/junit.xml --durations=5 no_output_timeout: 120m - run: name: Rename the coverage files @@ -2034,6 +2350,7 @@ jobs: - run: python ./tests/code_coverage_tests/router_code_coverage.py - run: python ./tests/code_coverage_tests/test_chat_completion_imports.py - run: python ./tests/code_coverage_tests/info_log_check.py + - run: python ./tests/code_coverage_tests/check_guardrail_apply_decorator.py - run: python ./tests/code_coverage_tests/test_ban_set_verbose.py - run: python ./tests/code_coverage_tests/code_qa_check_tests.py - run: python ./tests/code_coverage_tests/check_get_model_cost_key_performance.py @@ -2192,6 +2509,8 @@ jobs: pip install "asyncio==3.4.3" pip install "PyGithub==1.59.1" pip install "openai==1.100.1" + pip install "litellm[proxy]" + pip install "pytest-xdist==3.6.1" - run: name: Install dockerize command: | @@ -2268,7 +2587,7 @@ jobs: command: | pwd ls - python -m pytest -s -vv tests/*.py -x --junitxml=test-results/junit.xml --durations=5 --ignore=tests/otel_tests --ignore=tests/spend_tracking_tests --ignore=tests/pass_through_tests --ignore=tests/proxy_admin_ui_tests --ignore=tests/load_tests --ignore=tests/llm_translation --ignore=tests/llm_responses_api_testing --ignore=tests/mcp_tests --ignore=tests/guardrails_tests --ignore=tests/image_gen_tests --ignore=tests/pass_through_unit_tests + python -m pytest -s -vv tests/*.py -x --junitxml=test-results/junit.xml -n 4 --durations=5 --ignore=tests/otel_tests --ignore=tests/spend_tracking_tests --ignore=tests/pass_through_tests --ignore=tests/proxy_admin_ui_tests --ignore=tests/load_tests --ignore=tests/llm_translation --ignore=tests/llm_responses_api_testing --ignore=tests/mcp_tests --ignore=tests/guardrails_tests --ignore=tests/image_gen_tests --ignore=tests/pass_through_unit_tests no_output_timeout: 120m # Store test results @@ -3263,6 +3582,112 @@ jobs: - store_test_results: path: test-results + proxy_e2e_anthropic_messages_tests: + machine: + image: ubuntu-2204:2023.10.1 + resource_class: xlarge + working_directory: ~/project + steps: + - checkout + - setup_google_dns + - run: + name: Install Docker CLI (In case it's not already installed) + command: | + curl -fsSL https://get.docker.com | sh + sudo usermod -aG docker $USER + docker version + - run: + name: Install Python 3.10 + command: | + curl https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh --output miniconda.sh + bash miniconda.sh -b -p $HOME/miniconda + export PATH="$HOME/miniconda/bin:$PATH" + conda init bash + source ~/.bashrc + conda create -n myenv python=3.10 -y + conda activate myenv + python --version + - run: + name: Install Dependencies + command: | + export PATH="$HOME/miniconda/bin:$PATH" + source $HOME/miniconda/etc/profile.d/conda.sh + conda activate myenv + pip install "pytest==7.3.1" + pip install "pytest-asyncio==0.21.1" + pip install "boto3==1.36.0" + pip install "httpx==0.27.0" + pip install "claude-agent-sdk" + pip install -r requirements.txt + - run: + name: Install dockerize + command: | + wget https://github.com/jwilder/dockerize/releases/download/v0.6.1/dockerize-linux-amd64-v0.6.1.tar.gz + sudo tar -C /usr/local/bin -xzvf dockerize-linux-amd64-v0.6.1.tar.gz + rm dockerize-linux-amd64-v0.6.1.tar.gz + - run: + name: Start PostgreSQL Database + command: | + docker run -d \ + --name postgres-db \ + -e POSTGRES_USER=postgres \ + -e POSTGRES_PASSWORD=postgres \ + -e POSTGRES_DB=circle_test \ + -p 5432:5432 \ + postgres:14 + - run: + name: Wait for PostgreSQL to be ready + command: dockerize -wait tcp://localhost:5432 -timeout 1m + - attach_workspace: + at: ~/project + - run: + name: Load Docker Database Image + command: | + gunzip -c litellm-docker-database.tar.gz | docker load + docker images | grep litellm-docker-database + - run: + name: Run Docker container with test config + command: | + docker run -d \ + -p 4000:4000 \ + -e DATABASE_URL=postgresql://postgres:postgres@host.docker.internal:5432/circle_test \ + -e LITELLM_MASTER_KEY="sk-1234" \ + -e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY \ + -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \ + -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \ + -e AWS_REGION_NAME="us-east-1" \ + -e LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS="True" \ + --add-host host.docker.internal:host-gateway \ + --name my-app \ + -v $(pwd)/tests/proxy_e2e_anthropic_messages_tests/test_config.yaml:/app/config.yaml \ + litellm-docker-database:ci \ + --config /app/config.yaml \ + --port 4000 \ + --detailed_debug + - run: + name: Start outputting logs + command: docker logs -f my-app + background: true + - run: + name: Wait for app to be ready + command: dockerize -wait http://localhost:4000 -timeout 5m + - run: + name: Run Claude Agent SDK E2E Tests + command: | + export PATH="$HOME/miniconda/bin:$PATH" + source $HOME/miniconda/etc/profile.d/conda.sh + conda activate myenv + export LITELLM_PROXY_URL="http://localhost:4000" + export LITELLM_API_KEY="sk-1234" + pwd + ls + python -m pytest -vv tests/proxy_e2e_anthropic_messages_tests/ -x -s --junitxml=test-results/junit.xml --durations=5 + no_output_timeout: 120m + + # Store test results + - store_test_results: + path: test-results + upload-coverage: docker: - image: cimg/python:3.9 @@ -3284,7 +3709,7 @@ jobs: python -m venv venv . venv/bin/activate pip install coverage - coverage combine llm_translation_coverage llm_responses_api_coverage ocr_coverage search_coverage mcp_coverage logging_coverage audio_coverage litellm_router_coverage local_testing_coverage litellm_assistants_api_coverage auth_ui_unit_tests_coverage langfuse_coverage caching_coverage litellm_proxy_unit_tests_part1_coverage litellm_proxy_unit_tests_part2_coverage image_gen_coverage pass_through_unit_tests_coverage batches_coverage litellm_security_tests_coverage guardrails_coverage litellm_mapped_tests_coverage + coverage combine llm_translation_coverage realtime_translation_coverage llm_responses_api_coverage ocr_coverage search_coverage mcp_coverage litellm_mcps_tests_coverage logging_coverage audio_coverage litellm_router_coverage litellm_router_unit_coverage local_testing_part1_coverage local_testing_part2_coverage litellm_assistants_api_coverage auth_ui_unit_tests_coverage langfuse_coverage caching_coverage litellm_proxy_unit_tests_part1_coverage litellm_proxy_unit_tests_part2_coverage image_gen_coverage pass_through_unit_tests_coverage batches_coverage litellm_security_tests_coverage guardrails_coverage litellm_mapped_tests_coverage coverage xml - codecov/upload: file: ./coverage.xml @@ -3334,8 +3759,22 @@ jobs: ls dist/ twine upload --verbose dist/* else - echo "Version ${VERSION} of package is already published on PyPI. Skipping PyPI publish." - circleci step halt + echo "Version ${VERSION} of package is already published on PyPI." + + # Check if corresponding Docker nightly image exists + NIGHTLY_TAG="v${VERSION}-nightly" + echo "Checking for Docker nightly image: litellm/litellm:${NIGHTLY_TAG}" + + # Check Docker Hub for the nightly image + if curl -s "https://hub.docker.com/v2/repositories/litellm/litellm/tags/${NIGHTLY_TAG}" | grep -q "name"; then + echo "Docker nightly image ${NIGHTLY_TAG} exists. This release was already completed successfully." + echo "Skipping PyPI publish and continuing to ensure Docker images are up to date." + circleci step halt + else + echo "ERROR: PyPI package ${VERSION} exists but Docker nightly image ${NIGHTLY_TAG} does not exist!" + echo "This indicates an incomplete release. Please investigate." + exit 1 + fi fi - run: name: Trigger Github Action for new Docker Container + Trigger Load Testing @@ -3344,11 +3783,21 @@ jobs: python3 -m pip install toml VERSION=$(python3 -c "import toml; print(toml.load('pyproject.toml')['tool']['poetry']['version'])") echo "LiteLLM Version ${VERSION}" + + # Determine which branch to use for Docker build + if [[ "$CIRCLE_BRANCH" =~ ^litellm_release_day_.* ]]; then + BUILD_BRANCH="$CIRCLE_BRANCH" + echo "Using release branch: $BUILD_BRANCH" + else + BUILD_BRANCH="main" + echo "Using default branch: $BUILD_BRANCH" + fi + curl -X POST \ -H "Accept: application/vnd.github.v3+json" \ -H "Authorization: Bearer $GITHUB_TOKEN" \ "https://api.github.com/repos/BerriAI/litellm/actions/workflows/ghcr_deploy.yml/dispatches" \ - -d "{\"ref\":\"main\", \"inputs\":{\"tag\":\"v${VERSION}-nightly\", \"commit_hash\":\"$CIRCLE_SHA1\"}}" + -d "{\"ref\":\"${BUILD_BRANCH}\", \"inputs\":{\"tag\":\"v${VERSION}-nightly\", \"commit_hash\":\"$CIRCLE_SHA1\"}}" echo "triggering load testing server for version ${VERSION} and commit ${CIRCLE_SHA1}" curl -X POST "https://proxyloadtester-production.up.railway.app/start/load/test?version=${VERSION}&commit_hash=${CIRCLE_SHA1}&release_type=nightly" @@ -3428,7 +3877,6 @@ jobs: - run: name: Get new version command: | - cd litellm-proxy-extras NEW_VERSION=$(python -c "import toml; print(toml.load('pyproject.toml')['tool']['poetry']['version'])") echo "export NEW_VERSION=$NEW_VERSION" >> $BASH_ENV @@ -3453,7 +3901,6 @@ jobs: - run: name: Publish to PyPI command: | - cd litellm-proxy-extras echo -e "[pypi]\nusername = $PYPI_PUBLISH_USERNAME\npassword = $PYPI_PUBLISH_PASSWORD" > ~/.pypirc python -m pip install --upgrade pip build twine setuptools wheel rm -rf build dist @@ -3482,6 +3929,9 @@ jobs: cd ui/litellm-dashboard + # Remove node_modules and package-lock to ensure clean install (fixes dependency resolution issues) + rm -rf node_modules package-lock.json + # Install dependencies first npm install @@ -3557,6 +4007,9 @@ jobs: image: ubuntu-2204:2023.10.1 resource_class: xlarge working_directory: ~/project + parameters: + browser: + type: string steps: - checkout - setup_google_dns @@ -3586,7 +4039,7 @@ jobs: echo "Expires at: $EXPIRES_AT" neon branches create \ --project-id $NEON_PROJECT_ID \ - --name preview/commit-${CIRCLE_SHA1:0:7} \ + --name preview/commit-${CIRCLE_SHA1:0:7}-<< parameters.browser >> \ --expires-at $EXPIRES_AT \ --parent br-fancy-paper-ad1olsb3 \ --api-key $NEON_API_KEY || true @@ -3596,7 +4049,7 @@ jobs: E2E_UI_TEST_DATABASE_URL=$(neon connection-string \ --project-id $NEON_PROJECT_ID \ --api-key $NEON_API_KEY \ - --branch preview/commit-${CIRCLE_SHA1:0:7} \ + --branch preview/commit-${CIRCLE_SHA1:0:7}-<< parameters.browser >> \ --database-name yuneng-trial-db \ --role neondb_owner) echo $E2E_UI_TEST_DATABASE_URL @@ -3608,7 +4061,7 @@ jobs: -e UI_USERNAME="admin" \ -e UI_PASSWORD="gm" \ -e LITELLM_LICENSE=$LITELLM_LICENSE \ - --name litellm-docker-database \ + --name litellm-docker-database-<< parameters.browser >> \ -v $(pwd)/litellm/proxy/example_config_yaml/simple_config.yaml:/app/config.yaml \ litellm-docker-database:ci \ --config /app/config.yaml \ @@ -3624,7 +4077,7 @@ jobs: sudo rm dockerize-linux-amd64-v0.6.1.tar.gz - run: name: Start outputting logs - command: docker logs -f litellm-docker-database + command: docker logs -f litellm-docker-database-<< parameters.browser >> background: true - run: name: Wait for app to be ready @@ -3633,6 +4086,7 @@ jobs: name: Run Playwright Tests command: | npx playwright test \ + --project << parameters.browser >> \ --config ui/litellm-dashboard/e2e_tests/playwright.config.ts \ --reporter=html \ --output=test-results @@ -3739,7 +4193,19 @@ workflows: only: - main - /litellm_.*/ - - local_testing: + - semgrep: + filters: + branches: + only: + - main + - /litellm_.*/ + - local_testing_part1: + filters: + branches: + only: + - main + - /litellm_.*/ + - local_testing_part2: filters: branches: only: @@ -3832,6 +4298,20 @@ workflows: - main - /litellm_.*/ - e2e_ui_testing: + name: e2e_ui_testing_chromium + browser: chromium + context: e2e_ui_tests + requires: + - ui_build + - build_docker_database_image + filters: + branches: + only: + - main + - /litellm_.*/ + - e2e_ui_testing: + name: e2e_ui_testing_firefox + browser: firefox context: e2e_ui_tests requires: - ui_build @@ -3901,18 +4381,38 @@ workflows: only: - main - /litellm_.*/ + - proxy_e2e_anthropic_messages_tests: + requires: + - build_docker_database_image + filters: + branches: + only: + - main + - /litellm_.*/ - llm_translation_testing: filters: branches: only: - main - /litellm_.*/ + - realtime_translation_testing: + filters: + branches: + only: + - main + - /litellm_.*/ - mcp_testing: filters: branches: only: - main - /litellm_.*/ + - agent_testing: + filters: + branches: + only: + - main + - /litellm_.*/ - guardrails_testing: filters: branches: @@ -3949,7 +4449,13 @@ workflows: only: - main - /litellm_.*/ - - litellm_mapped_tests_proxy: + - litellm_mapped_tests_proxy_part1: + filters: + branches: + only: + - main + - /litellm_.*/ + - litellm_mapped_tests_proxy_part2: filters: branches: only: @@ -3967,6 +4473,12 @@ workflows: only: - main - /litellm_.*/ + - litellm_mapped_tests_mcps: + filters: + branches: + only: + - main + - /litellm_.*/ - litellm_mapped_tests_integrations: filters: branches: @@ -4018,15 +4530,19 @@ workflows: - upload-coverage: requires: - llm_translation_testing + - realtime_translation_testing - mcp_testing + - agent_testing - google_generate_content_endpoint_testing - guardrails_testing - llm_responses_api_testing - ocr_testing - search_testing - - litellm_mapped_tests_proxy + - litellm_mapped_tests_proxy_part1 + - litellm_mapped_tests_proxy_part2 - litellm_mapped_tests_llms - litellm_mapped_tests_core + - litellm_mapped_tests_mcps - litellm_mapped_tests_integrations - litellm_mapped_tests_litellm_core_utils - litellm_mapped_enterprise_tests @@ -4044,7 +4560,8 @@ workflows: - litellm_proxy_unit_testing_part2 - litellm_security_tests - langfuse_logging_unit_tests - - local_testing + - local_testing_part1 + - local_testing_part2 - litellm_assistants_api_testing - auth_ui_unit_tests - db_migration_disable_update_check: @@ -4084,22 +4601,29 @@ workflows: branches: only: - main + - /litellm_release_day_.*/ - publish_to_pypi: requires: - mypy_linting - - local_testing + - semgrep + - local_testing_part1 + - local_testing_part2 - build_and_test - e2e_openai_endpoints - test_bad_database_url - llm_translation_testing + - realtime_translation_testing - mcp_testing + - agent_testing - google_generate_content_endpoint_testing - llm_responses_api_testing - ocr_testing - search_testing - - litellm_mapped_tests_proxy + - litellm_mapped_tests_proxy_part1 + - litellm_mapped_tests_proxy_part2 - litellm_mapped_tests_llms - litellm_mapped_tests_core + - litellm_mapped_tests_mcps - litellm_mapped_tests_integrations - litellm_mapped_tests_litellm_core_utils - litellm_mapped_enterprise_tests @@ -4116,7 +4640,8 @@ workflows: - litellm_assistants_api_testing - auth_ui_unit_tests - db_migration_disable_update_check - - e2e_ui_testing + - e2e_ui_testing_chromium + - e2e_ui_testing_firefox - litellm_proxy_unit_testing_key_generation - litellm_proxy_unit_testing_part1 - litellm_proxy_unit_testing_part2 diff --git a/.circleci/requirements.txt b/.circleci/requirements.txt index 8c44dc18305..a5ec74424fe 100644 --- a/.circleci/requirements.txt +++ b/.circleci/requirements.txt @@ -16,4 +16,5 @@ uvloop==0.21.0 mcp==1.25.0 # for MCP server semantic_router==0.1.10 # for auto-routing with litellm fastuuid==0.12.0 -responses==0.25.7 # for proxy client tests \ No newline at end of file +responses==0.25.7 # for proxy client tests +pytest-retry==1.6.3 # for automatic test retries \ No newline at end of file diff --git a/.dockerignore b/.dockerignore index 76e31546c2f..a487d2a859a 100644 --- a/.dockerignore +++ b/.dockerignore @@ -48,7 +48,7 @@ dist/ build/ *.egg-info/ .DS_Store -node_modules/ +**/node_modules *.log .env .env.local diff --git a/.github/actions/helm-oci-chart-releaser/action.yml b/.github/actions/helm-oci-chart-releaser/action.yml index 059277ed882..1823e262832 100644 --- a/.github/actions/helm-oci-chart-releaser/action.yml +++ b/.github/actions/helm-oci-chart-releaser/action.yml @@ -40,38 +40,33 @@ outputs: runs: using: composite steps: + - name: Helm | Setup + uses: azure/setup-helm@v4 + with: + version: v3.20.0 + - name: Helm | Login shell: bash run: echo ${{ inputs.registry_password }} | helm registry login -u ${{ inputs.registry_username }} --password-stdin ${{ inputs.registry }} - env: - HELM_EXPERIMENTAL_OCI: '1' - + - name: Helm | Dependency if: inputs.update_dependencies == 'true' shell: bash run: helm dependency update ${{ inputs.path == null && format('{0}/{1}', 'charts', inputs.name) || inputs.path }} - env: - HELM_EXPERIMENTAL_OCI: '1' - name: Helm | Package shell: bash run: helm package ${{ inputs.path == null && format('{0}/{1}', 'charts', inputs.name) || inputs.path }} --version ${{ inputs.tag }} --app-version ${{ inputs.app_version }} - env: - HELM_EXPERIMENTAL_OCI: '1' - name: Helm | Push shell: bash run: helm push ${{ inputs.name }}-${{ inputs.tag }}.tgz oci://${{ inputs.registry }}/${{ inputs.repository }} - env: - HELM_EXPERIMENTAL_OCI: '1' - name: Helm | Logout shell: bash run: helm registry logout ${{ inputs.registry }} - env: - HELM_EXPERIMENTAL_OCI: '1' - name: Helm | Output id: output shell: bash - run: echo "image=${{ inputs.registry }}/${{ inputs.repository }}/${{ inputs.name }}:${{ inputs.tag }}" >> $GITHUB_OUTPUT \ No newline at end of file + run: echo "image=${{ inputs.registry }}/${{ inputs.repository }}/${{ inputs.name }}:${{ inputs.tag }}" >> $GITHUB_OUTPUT diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md index b91b16c955c..f13039f4516 100644 --- a/.github/pull_request_template.md +++ b/.github/pull_request_template.md @@ -9,6 +9,7 @@ - [ ] I have Added testing in the [`tests/litellm/`](https://github.com/BerriAI/litellm/tree/main/tests/litellm) directory, **Adding at least 1 test is a hard requirement** - [see details](https://docs.litellm.ai/docs/extras/contributing_code) - [ ] My PR passes all unit tests on [`make test-unit`](https://docs.litellm.ai/docs/extras/contributing_code) - [ ] My PR's scope is as isolated as possible, it only solves 1 specific problem +- [ ] I have requested a Greptile review by commenting `@greptileai` and received a **Confidence Score of at least 4/5** before requesting a maintainer review ## CI (LiteLLM team) diff --git a/.github/workflows/test-linting.yml b/.github/workflows/test-linting.yml index 35ebffeada3..7c5c269f899 100644 --- a/.github/workflows/test-linting.yml +++ b/.github/workflows/test-linting.yml @@ -73,4 +73,4 @@ jobs: - name: Check import safety run: | - poetry run python -c "from litellm import *" || (echo '🚨 import failed, this means you introduced unprotected imports! 🚨'; exit 1) \ No newline at end of file + poetry run python -c "from litellm import *" || (echo '🚨 import failed, this means you introduced unprotected imports! 🚨'; exit 1) diff --git a/.github/workflows/test-litellm-matrix.yml b/.github/workflows/test-litellm-matrix.yml new file mode 100644 index 00000000000..e57168dd551 --- /dev/null +++ b/.github/workflows/test-litellm-matrix.yml @@ -0,0 +1,118 @@ +name: LiteLLM Unit Tests (Matrix) + +on: + pull_request: + branches: [main] + +# Cancel in-progress runs for the same PR +concurrency: + group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} + cancel-in-progress: true + +jobs: + test: + runs-on: ubuntu-latest + timeout-minutes: 20 # Increased from 15 to 20 + strategy: + fail-fast: false + matrix: + test-group: + # tests/test_litellm split by subdirectory (~560 files total) + # Vertex AI tests separated for better isolation (prevent auth/env pollution) + - name: "llms-vertex" + path: "tests/test_litellm/llms/vertex_ai" + workers: 1 + reruns: 2 + - name: "llms-other" + path: "tests/test_litellm/llms --ignore=tests/test_litellm/llms/vertex_ai" + workers: 2 + reruns: 2 + # tests/test_litellm/proxy split by subdirectory (~180 files total) + - name: "proxy-guardrails" + path: "tests/test_litellm/proxy/guardrails tests/test_litellm/proxy/management_endpoints tests/test_litellm/proxy/management_helpers" + workers: 2 + reruns: 2 + - name: "proxy-core" + path: "tests/test_litellm/proxy/auth tests/test_litellm/proxy/client tests/test_litellm/proxy/db tests/test_litellm/proxy/hooks tests/test_litellm/proxy/policy_engine" + workers: 2 + reruns: 2 + - name: "proxy-misc" + path: "tests/test_litellm/proxy/_experimental tests/test_litellm/proxy/agent_endpoints tests/test_litellm/proxy/anthropic_endpoints tests/test_litellm/proxy/common_utils tests/test_litellm/proxy/discovery_endpoints tests/test_litellm/proxy/experimental tests/test_litellm/proxy/google_endpoints tests/test_litellm/proxy/health_endpoints tests/test_litellm/proxy/image_endpoints tests/test_litellm/proxy/middleware tests/test_litellm/proxy/openai_files_endpoint tests/test_litellm/proxy/pass_through_endpoints tests/test_litellm/proxy/prompts tests/test_litellm/proxy/public_endpoints tests/test_litellm/proxy/response_api_endpoints tests/test_litellm/proxy/spend_tracking tests/test_litellm/proxy/ui_crud_endpoints tests/test_litellm/proxy/vector_store_endpoints tests/test_litellm/proxy/test_*.py" + workers: 2 + reruns: 2 + - name: "integrations" + path: "tests/test_litellm/integrations" + workers: 2 + reruns: 3 # Integration tests tend to be flakier + - name: "core-utils" + path: "tests/test_litellm/litellm_core_utils" + workers: 2 + reruns: 1 + - name: "other" + path: "tests/test_litellm/caching tests/test_litellm/responses tests/test_litellm/secret_managers tests/test_litellm/vector_stores tests/test_litellm/a2a_protocol tests/test_litellm/anthropic_interface tests/test_litellm/completion_extras tests/test_litellm/containers tests/test_litellm/enterprise tests/test_litellm/experimental_mcp_client tests/test_litellm/google_genai tests/test_litellm/images tests/test_litellm/interactions tests/test_litellm/passthrough tests/test_litellm/router_strategy tests/test_litellm/router_utils tests/test_litellm/types" + workers: 2 + reruns: 2 + - name: "root" + path: "tests/test_litellm/test_*.py" + workers: 2 + reruns: 2 + # tests/proxy_unit_tests split alphabetically (~48 files total) + - name: "proxy-unit-a" + path: "tests/proxy_unit_tests/test_[a-o]*.py" + workers: 2 + reruns: 1 + - name: "proxy-unit-b" + path: "tests/proxy_unit_tests/test_[p-z]*.py" + workers: 2 + reruns: 1 + + name: test (${{ matrix.test-group.name }}) + + steps: + - uses: actions/checkout@v4 + + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: "3.12" + + - name: Install Poetry + uses: snok/install-poetry@v1 + + - name: Cache Poetry dependencies + uses: actions/cache@v4 + with: + path: | + ~/.cache/pypoetry + ~/.cache/pip + .venv + key: ${{ runner.os }}-poetry-${{ hashFiles('poetry.lock') }} + restore-keys: | + ${{ runner.os }}-poetry- + + - name: Install dependencies + run: | + poetry config virtualenvs.in-project true + poetry install --with dev,proxy-dev --extras "proxy semantic-router" + # pytest-rerunfailures and pytest-xdist are in pyproject.toml dev dependencies + poetry run pip install google-genai==1.22.0 \ + google-cloud-aiplatform>=1.38 fastapi-offline==1.7.3 python-multipart==0.0.22 openapi-core + + - name: Setup litellm-enterprise + run: | + poetry run pip install --force-reinstall --no-deps -e enterprise/ + + - name: Generate Prisma client + run: | + poetry run prisma generate --schema litellm/proxy/schema.prisma + + - name: Run tests - ${{ matrix.test-group.name }} + run: | + poetry run pytest ${{ matrix.test-group.path }} \ + --tb=short -vv \ + --maxfail=10 \ + -n ${{ matrix.test-group.workers }} \ + --reruns ${{ matrix.test-group.reruns }} \ + --reruns-delay 1 \ + --dist=loadscope \ + --durations=20 diff --git a/.github/workflows/test-litellm-ui-build.yml b/.github/workflows/test-litellm-ui-build.yml new file mode 100644 index 00000000000..b0a8b648a44 --- /dev/null +++ b/.github/workflows/test-litellm-ui-build.yml @@ -0,0 +1,32 @@ +name: UI Build Check +permissions: + contents: read + +on: + pull_request: + branches: [main] + +jobs: + build-ui: + runs-on: ubuntu-latest + timeout-minutes: 10 + defaults: + run: + working-directory: ui/litellm-dashboard + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Setup Node.js + uses: actions/setup-node@v4 + with: + node-version: "20" + cache: "npm" + cache-dependency-path: ui/litellm-dashboard/package-lock.json + + - name: Install dependencies + run: npm install + + - name: Build + run: npm run build diff --git a/.github/workflows/test-litellm.yml b/.github/workflows/test-litellm.yml index ba32dc1bf54..cf6928897be 100644 --- a/.github/workflows/test-litellm.yml +++ b/.github/workflows/test-litellm.yml @@ -1,8 +1,12 @@ name: LiteLLM Mock Tests (folder - tests/test_litellm) +# DEPRECATED: This workflow is replaced by test-litellm-matrix.yml which runs +# the same tests in parallel across 10 jobs for faster CI times. +# Kept for manual debugging only. on: - pull_request: - branches: [ main ] + workflow_dispatch: # Manual trigger only + # pull_request: + # branches: [ main ] jobs: test: @@ -34,13 +38,11 @@ jobs: poetry run pip install "google-genai==1.22.0" poetry run pip install "google-cloud-aiplatform>=1.38" poetry run pip install "fastapi-offline==1.7.3" - poetry run pip install "python-multipart==0.0.18" + poetry run pip install "python-multipart==0.0.22" poetry run pip install "openapi-core" - name: Setup litellm-enterprise as local package run: | - cd enterprise - poetry run pip install -e . - cd .. + poetry run pip install --force-reinstall --no-deps -e enterprise/ - name: Run tests run: | poetry run pytest tests/test_litellm --tb=short -vv --maxfail=10 -n 4 --durations=50 diff --git a/.github/workflows/test-mcp.yml b/.github/workflows/test-mcp.yml index e19e67c9c4f..2e32aae7680 100644 --- a/.github/workflows/test-mcp.yml +++ b/.github/workflows/test-mcp.yml @@ -40,9 +40,7 @@ jobs: - name: Setup litellm-enterprise as local package run: | - cd enterprise - python -m pip install -e . - cd .. + poetry run pip install --force-reinstall --no-deps -e enterprise/ - name: Run MCP tests run: | diff --git a/.github/workflows/test-model-map.yaml b/.github/workflows/test-model-map.yaml new file mode 100644 index 00000000000..ae5ac402e23 --- /dev/null +++ b/.github/workflows/test-model-map.yaml @@ -0,0 +1,15 @@ +name: Validate model_prices_and_context_window.json + +on: + pull_request: + branches: [ main ] + +jobs: + validate-model-prices-json: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - name: Validate model_prices_and_context_window.json + run: | + jq empty model_prices_and_context_window.json diff --git a/.github/workflows/test_server_root_path.yml b/.github/workflows/test_server_root_path.yml new file mode 100644 index 00000000000..c359e38bff9 --- /dev/null +++ b/.github/workflows/test_server_root_path.yml @@ -0,0 +1,96 @@ +name: Test Proxy SERVER_ROOT_PATH Routing +permissions: + contents: read + +on: + pull_request: + branches: [main] + +jobs: + test-server-root-path: + runs-on: ubuntu-latest + timeout-minutes: 15 + + strategy: + matrix: + root_path: ["/api/v1", "/llmproxy"] + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + + - name: Build Docker image + uses: docker/build-push-action@v5 + with: + context: . + file: ./docker/Dockerfile.non_root + tags: litellm-test:${{ github.sha }} + load: true + cache-from: type=gha + cache-to: type=gha,mode=max + + - name: Start LiteLLM container with SERVER_ROOT_PATH + run: | + docker run -d \ + --name litellm-test \ + -p 4000:4000 \ + -e SERVER_ROOT_PATH="${{ matrix.root_path }}" \ + -e LITELLM_MASTER_KEY="sk-1234" \ + litellm-test:${{ github.sha }} \ + --detailed_debug + + - name: Wait for container to be healthy + run: | + echo "Waiting for LiteLLM to start..." + max_attempts=30 + attempt=0 + + while [ $attempt -lt $max_attempts ]; do + if docker logs litellm-test 2>&1 | grep -q "Uvicorn running"; then + echo "LiteLLM started successfully" + break + fi + attempt=$((attempt + 1)) + echo "Attempt $attempt/$max_attempts - waiting for server to start..." + sleep 2 + done + + if [ $attempt -eq $max_attempts ]; then + echo "Server failed to start within timeout" + docker logs litellm-test + exit 1 + fi + + sleep 5 + + - name: Show container logs + if: always() + run: docker logs litellm-test + + - name: Test UI endpoint with root path + run: | + ROOT_PATH="${{ matrix.root_path }}" + echo "Testing UI at: http://localhost:4000${ROOT_PATH}/ui/" + + for i in 1 2 3; do + content=$(curl -sL --max-time 5 -H "Authorization: Bearer sk-1234" "http://localhost:4000${ROOT_PATH}/ui/") + if echo "$content" | grep -q -E "(html|` only creates a + # SEPARATE global package, it does NOT replace npm's internal copies. + # We must find and replace EVERY copy inside npm's directory. + GLOBAL="$(npm root -g)" && \ + find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "glob" -path "*/node_modules/glob" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "brace-expansion" -path "*/node_modules/@isaacs/brace-expansion" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done && \ + npm cache clean --force WORKDIR /app # Copy the current directory contents into the container at /app @@ -61,16 +78,34 @@ COPY --from=builder /wheels/ /wheels/ # Install the built wheel using pip; again using a wildcard if it's the only file RUN pip install *.whl /wheels/* --no-index --find-links=/wheels/ && rm -f *.whl && rm -rf /wheels +# Replace the nodejs-wheel-binaries bundled node with the system node (fixes CVE-2025-55130) +RUN NODEJS_WHEEL_NODE=$(find /usr/lib -path "*/nodejs_wheel/bin/node" 2>/dev/null) && \ + if [ -n "$NODEJS_WHEEL_NODE" ]; then cp /usr/bin/node "$NODEJS_WHEEL_NODE"; fi + # Remove test files and keys from dependencies RUN find /usr/lib -type f -path "*/tornado/test/*" -delete && \ find /usr/lib -type d -path "*/tornado/test" -delete +# SECURITY FIX: nodejs-wheel-binaries (pip package used by Prisma) bundles a complete +# npm with old vulnerable deps at /usr/lib/python3.*/site-packages/nodejs_wheel/. +# Patch every copy of tar, glob, and brace-expansion inside that tree. +RUN GLOBAL="$(npm root -g)" && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/tar" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/glob" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/@isaacs/brace-expansion" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done + # Install semantic_router and aurelio-sdk using script # Convert Windows line endings to Unix and make executable RUN sed -i 's/\r$//' docker/install_auto_router.sh && chmod +x docker/install_auto_router.sh && ./docker/install_auto_router.sh -# Generate prisma client -RUN prisma generate +# Generate prisma client using the correct schema +RUN prisma generate --schema=./litellm/proxy/schema.prisma # Convert Windows line endings to Unix for entrypoint scripts RUN sed -i 's/\r$//' docker/entrypoint.sh && chmod +x docker/entrypoint.sh RUN sed -i 's/\r$//' docker/prod_entrypoint.sh && chmod +x docker/prod_entrypoint.sh diff --git a/Makefile b/Makefile index 0da83c363cd..74031f418d6 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,12 @@ # LiteLLM Makefile # Simple Makefile for running tests and basic development tasks -.PHONY: help test test-unit test-integration test-unit-helm lint format install-dev install-proxy-dev install-test-deps install-helm-unittest check-circular-imports check-import-safety +.PHONY: help test test-unit test-unit-llms test-unit-proxy-guardrails test-unit-proxy-core test-unit-proxy-misc \ + test-unit-integrations test-unit-core-utils test-unit-other test-unit-root \ + test-proxy-unit-a test-proxy-unit-b test-integration test-unit-helm \ + info lint lint-dev format \ + install-dev install-proxy-dev install-test-deps \ + install-helm-unittest check-circular-imports check-import-safety # Default target help: @@ -22,9 +27,26 @@ help: @echo " make check-import-safety - Check import safety" @echo " make test - Run all tests" @echo " make test-unit - Run unit tests (tests/test_litellm)" + @echo " make test-unit-llms - Run LLM provider tests (~225 files)" + @echo " make test-unit-proxy-guardrails - Run proxy guardrails+mgmt tests (~51 files)" + @echo " make test-unit-proxy-core - Run proxy auth+client+db+hooks tests (~52 files)" + @echo " make test-unit-proxy-misc - Run proxy misc tests (~77 files)" + @echo " make test-unit-integrations - Run integration tests (~60 files)" + @echo " make test-unit-core-utils - Run core utils tests (~32 files)" + @echo " make test-unit-other - Run other tests (caching, responses, etc., ~69 files)" + @echo " make test-unit-root - Run root-level tests (~34 files)" + @echo " make test-proxy-unit-a - Run proxy_unit_tests (a-o, ~20 files)" + @echo " make test-proxy-unit-b - Run proxy_unit_tests (p-z, ~28 files)" @echo " make test-integration - Run integration tests" @echo " make test-unit-helm - Run helm unit tests" +# Keep PIP simple for edge cases: +PIP := $(shell command -v pip > /dev/null 2>&1 && echo "pip" || echo "python3 -m pip") + +# Show info +info: + @echo "PIP: $(PIP)" + # Installation targets install-dev: poetry install --with dev @@ -34,19 +56,19 @@ install-proxy-dev: # CI-compatible installations (matches GitHub workflows exactly) install-dev-ci: - pip install openai==2.8.0 + $(PIP) install openai==2.8.0 poetry install --with dev - pip install openai==2.8.0 + $(PIP) install openai==2.8.0 install-proxy-dev-ci: poetry install --with dev,proxy-dev --extras proxy - pip install openai==2.8.0 + $(PIP) install openai==2.8.0 install-test-deps: install-proxy-dev - poetry run pip install "pytest-retry==1.6.3" - poetry run pip install pytest-xdist - poetry run pip install openapi-core - cd enterprise && poetry run pip install -e . && cd .. + poetry run $(PIP) install "pytest-retry==1.6.3" + poetry run $(PIP) install pytest-xdist + poetry run $(PIP) install openapi-core + cd enterprise && poetry run $(PIP) install -e . && cd .. install-helm-unittest: helm plugin install https://github.com/helm-unittest/helm-unittest --version v0.4.4 || echo "ignore error if plugin exists" @@ -62,8 +84,40 @@ format-check: install-dev lint-ruff: install-dev cd litellm && poetry run ruff check . && cd .. +# faster linter for developing ... +# inspiration from: +# https://github.com/astral-sh/ruff/discussions/10977 +# https://github.com/astral-sh/ruff/discussions/4049 +lint-format-changed: install-dev + @git diff origin/main --unified=0 --no-color -- '*.py' | \ + perl -ne '\ + if (/^diff --git a\/(.*) b\//) { $$file = $$1; } \ + if (/^@@ .* \+(\d+)(?:,(\d+))? @@/) { \ + $$start = $$1; $$count = $$2 || 1; $$end = $$start + $$count - 1; \ + print "$$file:$$start:1-$$end:999\n"; \ + }' | \ + while read range; do \ + file="$${range%%:*}"; \ + lines="$${range#*:}"; \ + echo "Formatting $$file (lines $$lines)"; \ + poetry run ruff format --range "$$lines" "$$file"; \ + done + +lint-ruff-dev: install-dev + @tmpfile=$$(mktemp /tmp/ruff-dev.XXXXXX) && \ + cd litellm && \ + (poetry run ruff check . --output-format=pylint || true) > "$$tmpfile" && \ + poetry run diff-quality --violations=pylint "$$tmpfile" --compare-branch=origin/main && \ + cd .. ; \ + rm -f "$$tmpfile" + +lint-ruff-FULL-dev: install-dev + @files=$$(git diff --name-only origin/main -- '*.py'); \ + if [ -n "$$files" ]; then echo "$$files" | xargs poetry run ruff check; \ + else echo "No changed .py files to check."; fi + lint-mypy: install-dev - poetry run pip install types-requests types-setuptools types-redis types-PyYAML + poetry run $(PIP) install types-requests types-setuptools types-redis types-PyYAML cd litellm && poetry run mypy . --ignore-missing-imports && cd .. lint-black: format-check @@ -72,11 +126,14 @@ check-circular-imports: install-dev cd litellm && poetry run python ../tests/documentation_tests/test_circular_imports.py && cd .. check-import-safety: install-dev - poetry run python -c "from litellm import *" || (echo '🚨 import failed, this means you introduced unprotected imports! 🚨'; exit 1) + @poetry run python -c "from litellm import *; print('[from litellm import *] OK! no issues!');" || (echo '🚨 import failed, this means you introduced unprotected imports! 🚨'; exit 1) # Combined linting (matches test-linting.yml workflow) lint: format-check lint-ruff lint-mypy check-circular-imports check-import-safety +# Faster linting for local development (only checks changed code) +lint-dev: lint-format-changed lint-mypy check-circular-imports check-import-safety + # Testing targets test: poetry run pytest tests/ @@ -84,6 +141,38 @@ test: test-unit: install-test-deps poetry run pytest tests/test_litellm -x -vv -n 4 +# Matrix test targets (matching CI workflow groups) +test-unit-llms: install-test-deps + poetry run pytest tests/test_litellm/llms --tb=short -vv -n 4 --durations=20 + +test-unit-proxy-guardrails: install-test-deps + poetry run pytest tests/test_litellm/proxy/guardrails tests/test_litellm/proxy/management_endpoints tests/test_litellm/proxy/management_helpers --tb=short -vv -n 4 --durations=20 + +test-unit-proxy-core: install-test-deps + poetry run pytest tests/test_litellm/proxy/auth tests/test_litellm/proxy/client tests/test_litellm/proxy/db tests/test_litellm/proxy/hooks tests/test_litellm/proxy/policy_engine --tb=short -vv -n 4 --durations=20 + +test-unit-proxy-misc: install-test-deps + poetry run pytest tests/test_litellm/proxy/_experimental tests/test_litellm/proxy/agent_endpoints tests/test_litellm/proxy/anthropic_endpoints tests/test_litellm/proxy/common_utils tests/test_litellm/proxy/discovery_endpoints tests/test_litellm/proxy/experimental tests/test_litellm/proxy/google_endpoints tests/test_litellm/proxy/health_endpoints tests/test_litellm/proxy/image_endpoints tests/test_litellm/proxy/middleware tests/test_litellm/proxy/openai_files_endpoint tests/test_litellm/proxy/pass_through_endpoints tests/test_litellm/proxy/prompts tests/test_litellm/proxy/public_endpoints tests/test_litellm/proxy/response_api_endpoints tests/test_litellm/proxy/spend_tracking tests/test_litellm/proxy/ui_crud_endpoints tests/test_litellm/proxy/vector_store_endpoints tests/test_litellm/proxy/test_*.py --tb=short -vv -n 4 --durations=20 + +test-unit-integrations: install-test-deps + poetry run pytest tests/test_litellm/integrations --tb=short -vv -n 4 --durations=20 + +test-unit-core-utils: install-test-deps + poetry run pytest tests/test_litellm/litellm_core_utils --tb=short -vv -n 2 --durations=20 + +test-unit-other: install-test-deps + poetry run pytest tests/test_litellm/caching tests/test_litellm/responses tests/test_litellm/secret_managers tests/test_litellm/vector_stores tests/test_litellm/a2a_protocol tests/test_litellm/anthropic_interface tests/test_litellm/completion_extras tests/test_litellm/containers tests/test_litellm/enterprise tests/test_litellm/experimental_mcp_client tests/test_litellm/google_genai tests/test_litellm/images tests/test_litellm/interactions tests/test_litellm/passthrough tests/test_litellm/router_strategy tests/test_litellm/router_utils tests/test_litellm/types --tb=short -vv -n 4 --durations=20 + +test-unit-root: install-test-deps + poetry run pytest tests/test_litellm/test_*.py --tb=short -vv -n 4 --durations=20 + +# Proxy unit tests (tests/proxy_unit_tests split alphabetically) +test-proxy-unit-a: install-test-deps + poetry run pytest tests/proxy_unit_tests/test_[a-o]*.py --tb=short -vv -n 2 --durations=20 + +test-proxy-unit-b: install-test-deps + poetry run pytest tests/proxy_unit_tests/test_[p-z]*.py --tb=short -vv -n 2 --durations=20 + test-integration: poetry run pytest tests/ -k "not test_litellm" diff --git a/README.md b/README.md index 58ffa12c5e1..7790c67afd5 100644 --- a/README.md +++ b/README.md @@ -258,6 +258,19 @@ LiteLLM Performance: **8ms P95 latency** at 1k RPS (See benchmarks [here](https: Support for more providers. Missing a provider or LLM Platform, raise a [feature request](https://github.com/BerriAI/litellm/issues/new?assignees=&labels=enhancement&projects=&template=feature_request.yml&title=%5BFeature%5D%3A+). +## OSS Adopters + + + + + + + + + + +
StripeGoogle ADKGreptileOpenHands

Netflix

OpenAI Agents SDK
+ ## Supported Providers ([Website Supported Models](https://models.litellm.ai/) | [Docs](https://docs.litellm.ai/docs/providers)) | Provider | `/chat/completions` | `/messages` | `/responses` | `/embeddings` | `/image/generations` | `/audio/transcriptions` | `/audio/speech` | `/moderations` | `/batches` | `/rerank` | @@ -296,7 +309,7 @@ Support for more providers. Missing a provider or LLM Platform, raise a [feature | [Deepgram (`deepgram`)](https://docs.litellm.ai/docs/providers/deepgram) | ✅ | ✅ | ✅ | | | ✅ | | | | | | [DeepInfra (`deepinfra`)](https://docs.litellm.ai/docs/providers/deepinfra) | ✅ | ✅ | ✅ | | | | | | | | | [Deepseek (`deepseek`)](https://docs.litellm.ai/docs/providers/deepseek) | ✅ | ✅ | ✅ | | | | | | | | -| [ElevenLabs (`elevenlabs`)](https://docs.litellm.ai/docs/providers/elevenlabs) | ✅ | ✅ | ✅ | | | | ✅ | | | | +| [ElevenLabs (`elevenlabs`)](https://docs.litellm.ai/docs/providers/elevenlabs) | ✅ | ✅ | ✅ | | | ✅ | ✅ | | | | | [Empower (`empower`)](https://docs.litellm.ai/docs/providers/empower) | ✅ | ✅ | ✅ | | | | | | | | | [Fal AI (`fal_ai`)](https://docs.litellm.ai/docs/providers/fal_ai) | ✅ | ✅ | ✅ | | ✅ | | | | | | | [Featherless AI (`featherless_ai`)](https://docs.litellm.ai/docs/providers/featherless_ai) | ✅ | ✅ | ✅ | | | | | | | | diff --git a/ci_cd/.grype.yaml b/ci_cd/.grype.yaml index 642e2dd9d03..b9bc9db58f5 100644 --- a/ci_cd/.grype.yaml +++ b/ci_cd/.grype.yaml @@ -1,3 +1,36 @@ ignore: - vulnerability: CVE-2026-22184 reason: no fixed zlib package is available yet in the Wolfi repositories, so this is ignored temporarily until an upstream release exists + # Wolfi base image: Python 3.13 and Node from apk have no fixed builds in Wolfi yet / not applicable + - vulnerability: CVE-2025-55130 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: CVE-2025-59465 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: CVE-2025-55131 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: CVE-2025-59466 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: CVE-2026-21637 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: CVE-2025-55132 + reason: Node in Wolfi apk; only used for Admin UI build/prisma + - vulnerability: GHSA-hx9q-6w63-j58v + reason: orjson dumps recursion; allowlisted + - vulnerability: GHSA-73rr-hh4g-fpgx + reason: diff npm transitive dep; override in package.json, allowlisted + - vulnerability: CVE-2026-0865 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2025-15282 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2026-0672 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2025-15366 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2025-15367 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2025-11468 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2025-12781 + reason: Python 3.13 in Wolfi base; no fixed apk build yet + - vulnerability: CVE-2026-1299 + reason: Python 3.13 in Wolfi base; no fixed apk build yet diff --git a/ci_cd/security_scans.sh b/ci_cd/security_scans.sh index 04f3e27a944..2db72ae5c69 100755 --- a/ci_cd/security_scans.sh +++ b/ci_cd/security_scans.sh @@ -81,10 +81,10 @@ run_trivy_scans() { echo "Running Trivy scans..." echo "Scanning LiteLLM Docs..." - trivy fs --scanners vuln --dependency-tree --exit-code 1 --severity HIGH,CRITICAL,MEDIUM ./docs/ + trivy fs --ignorefile .trivyignore --scanners vuln --dependency-tree --exit-code 1 --severity HIGH,CRITICAL,MEDIUM ./docs/ echo "Scanning LiteLLM UI..." - trivy fs --scanners vuln --dependency-tree --exit-code 1 --severity HIGH,CRITICAL,MEDIUM ./ui/ + trivy fs --ignorefile .trivyignore --scanners vuln --dependency-tree --exit-code 1 --severity HIGH,CRITICAL,MEDIUM ./ui/ echo "Trivy scans completed successfully" } @@ -137,7 +137,27 @@ run_grype_scans() { "CVE-2019-1010025" # glibc pthread heap address leak - awaiting patched Wolfi glibc build "CVE-2026-22184" # zlib untgz buffer overflow - untgz unused + no fixed Wolfi build yet "GHSA-58pv-8j8x-9vj2" # jaraco.context path traversal - setuptools vendored only (v5.3.0), not used in application code (using v6.1.0+) + "GHSA-34x7-hfp2-rc4v" # node-tar hardlink path traversal - not applicable, tar CLI not exposed in application code "GHSA-r6q2-hw4h-h46w" # node-tar not used by application runtime, Linux-only container, not affect by macOS APFS-specific exploit + "GHSA-8rrh-rw8j-w5fx" # wheel is from chainguard and will be handled by then TODO: Remove this after Chainguard updates the wheel + "CVE-2025-59465" # Node only used for Admin UI build/prisma + "CVE-2025-55131" # Node only used for Admin UI build/prisma + "CVE-2025-59466" # Node only used for Admin UI build/prisma + "CVE-2025-55130" # Node only used for Admin UI build/prisma + "CVE-2025-59467" # Node only used for Admin UI build/prisma + "CVE-2026-21637" # Node only used for Admin UI build/prisma + "CVE-2025-55132" # Node only used for Admin UI build/prisma + "GHSA-hx9q-6w63-j58v" # orjson dumps recursion; allowlisted + "CVE-2025-15281" # No fix available yet + "CVE-2026-0865" # No fix available yet + "CVE-2025-15282" # No fix available yet + "CVE-2026-0672" # No fix available yet + "CVE-2025-15366" # No fix available yet + "CVE-2025-15367" # No fix available yet + "CVE-2025-12781" # No fix available yet + "CVE-2025-11468" # No fix available yet + "CVE-2026-1299" # Python 3.13 email module header injection - not applicable, LiteLLM doesn't use BytesGenerator for email serialization + "CVE-2026-0775" # npm cli incorrect permission assignment - no fix available yet, npm is only used at build/prisma-generate time ) # Build JSON array of allowlisted CVE IDs for jq diff --git a/cookbook/anthropic_agent_sdk/README.md b/cookbook/anthropic_agent_sdk/README.md new file mode 100644 index 00000000000..294d949e24e --- /dev/null +++ b/cookbook/anthropic_agent_sdk/README.md @@ -0,0 +1,144 @@ +# Claude Agent SDK with LiteLLM Gateway + +A simple example showing how to use Claude's Agent SDK with LiteLLM as a proxy. This lets you use any LLM provider (OpenAI, Bedrock, Azure, etc.) through the Agent SDK. + +## Quick Start + +### 1. Install dependencies + +```bash +pip install anthropic claude-agent-sdk litellm +``` + +### 2. Start LiteLLM proxy + +```bash +# Simple start with Claude +litellm --model claude-sonnet-4-20250514 + +# Or with a config file +litellm --config config.yaml +``` + +### 3. Run the chat + +**Basic Agent (no MCP):** + +```bash +python main.py +``` + +**Agent with MCP (DeepWiki2 for research):** + +```bash +python agent_with_mcp.py +``` + +If MCP connection fails, you can disable it: + +```bash +USE_MCP=false python agent_with_mcp.py +``` + +That's it! You can now chat with the agent in your terminal. + +### Chat Commands + +While chatting, you can use these commands: +- `models` - List all available models (fetched from your LiteLLM proxy) +- `model` - Switch to a different model +- `clear` - Start a new conversation +- `quit` or `exit` - End the chat + +The chat automatically fetches available models from your LiteLLM proxy's `/models` endpoint, so you'll always see what's currently configured. + +## Configuration + +Set these environment variables if needed: + +```bash +export LITELLM_PROXY_URL="http://localhost:4000" +export LITELLM_API_KEY="sk-1234" +export LITELLM_MODEL="bedrock-claude-sonnet-4.5" +``` + +Or just use the defaults - it'll connect to `http://localhost:4000` by default. + +## Files + +- `main.py` - Basic interactive agent without MCP +- `agent_with_mcp.py` - Agent with MCP server integration (DeepWiki2) +- `common.py` - Shared utilities and functions +- `config.example.yaml` - Example LiteLLM configuration +- `requirements.txt` - Python dependencies + +## Example Config File + +If you want to use multiple models, create a `config.yaml` (see `config.example.yaml`): + +```yaml +model_list: + - model_name: bedrock-claude-sonnet-4 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-20250514-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-sonnet-4.5 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0" + aws_region_name: "us-east-1" +``` + +Then start LiteLLM with: `litellm --config config.yaml` + +## How It Works + +The key is pointing the Agent SDK to LiteLLM instead of directly to Anthropic: + +```python +# Point to LiteLLM gateway (not Anthropic) +os.environ["ANTHROPIC_BASE_URL"] = "http://localhost:4000" +os.environ["ANTHROPIC_API_KEY"] = "sk-1234" # Your LiteLLM key + +# Use any model configured in LiteLLM +options = ClaudeAgentOptions( + model="bedrock-claude-sonnet-4", # or gpt-4, or anything else + system_prompt="You are a helpful assistant.", + max_turns=50, +) +``` + +Note: Don't add `/anthropic` to the base URL - LiteLLM handles the routing automatically. + +## Why Use This? + +- **Switch providers easily**: Use the same code with OpenAI, Bedrock, Azure, etc. +- **Cost tracking**: LiteLLM tracks spending across all your agent conversations +- **Rate limiting**: Set budgets and limits on your agent usage +- **Load balancing**: Distribute requests across multiple API keys or regions +- **Fallbacks**: Automatically retry with a different model if one fails + +## Troubleshooting + +**Connection errors?** +- Make sure LiteLLM is running: `litellm --model your-model` +- Check the URL is correct (default: `http://localhost:4000`) + +**Authentication errors?** +- Verify your LiteLLM API key is correct +- Make sure the model is configured in your LiteLLM setup + +**Model not found?** +- Check the model name matches what's in your LiteLLM config +- Run `litellm --model your-model` to test it works + +**Agent with MCP stuck or failing?** +- The MCP server might not be available at `http://localhost:4000/mcp/deepwiki2` +- Try disabling MCP: `USE_MCP=false python agent_with_mcp.py` +- Or use the basic agent: `python main.py` + +## Learn More + +- [LiteLLM Docs](https://docs.litellm.ai/) +- [Claude Agent SDK](https://github.com/anthropics/anthropic-agent-sdk) +- [LiteLLM Proxy Guide](https://docs.litellm.ai/docs/proxy/quick_start) diff --git a/cookbook/anthropic_agent_sdk/agent_with_mcp.py b/cookbook/anthropic_agent_sdk/agent_with_mcp.py new file mode 100644 index 00000000000..ff25feb777f --- /dev/null +++ b/cookbook/anthropic_agent_sdk/agent_with_mcp.py @@ -0,0 +1,140 @@ +""" +Interactive Claude Agent SDK CLI with MCP Support + +This example demonstrates an interactive CLI chat with the Anthropic Agent SDK using LiteLLM as a proxy, +with MCP (Model Context Protocol) server integration for enhanced capabilities. +""" + +import asyncio +import os +from claude_agent_sdk import ClaudeSDKClient, ClaudeAgentOptions +from common import ( + Config, + fetch_available_models, + setup_litellm_env, + print_header, + handle_model_list, + handle_model_switch, + stream_response, +) + + +async def interactive_chat_with_mcp(): + """ + Interactive CLI chat with the agent and MCP server + """ + config = Config() + + # Configure Anthropic SDK to point to LiteLLM gateway + litellm_base_url = setup_litellm_env(config) + + # Fetch available models from proxy + available_models = await fetch_available_models(litellm_base_url, config.LITELLM_API_KEY) + + current_model = config.LITELLM_MODEL + + # MCP server configuration + mcp_server_url = f"{litellm_base_url}/mcp/deepwiki2" + use_mcp = os.getenv("USE_MCP", "true").lower() == "true" + + if not use_mcp: + print("⚠️ MCP disabled via USE_MCP=false") + + print_header(litellm_base_url, current_model, has_mcp=use_mcp) + + while True: + # Configure agent options + if use_mcp: + try: + # Try with MCP server (HTTP transport) + # Using McpHttpServerConfig format from Agent SDK + options = ClaudeAgentOptions( + system_prompt="You are a helpful AI assistant with access to DeepWiki for research. Be concise, accurate, and friendly.", + model=current_model, + max_turns=50, + mcp_servers={ + "deepwiki2": { + "type": "http", + "url": mcp_server_url, + "headers": { + "Authorization": f"Bearer {config.LITELLM_API_KEY}" + } + } + }, + ) + except Exception as e: + print(f"⚠️ Warning: Could not configure MCP server: {e}") + print("Continuing without MCP...\n") + use_mcp = False + options = ClaudeAgentOptions( + system_prompt="You are a helpful AI assistant. Be concise, accurate, and friendly.", + model=current_model, + max_turns=50, + ) + else: + # Without MCP + options = ClaudeAgentOptions( + system_prompt="You are a helpful AI assistant. Be concise, accurate, and friendly.", + model=current_model, + max_turns=50, + ) + + # Create agent client + try: + async with ClaudeSDKClient(options=options) as client: + conversation_active = True + + while conversation_active: + # Get user input + try: + user_input = input("\n👤 You: ").strip() + except (EOFError, KeyboardInterrupt): + print("\n\n👋 Goodbye!") + return + + # Handle commands + if user_input.lower() in ['quit', 'exit']: + print("\n👋 Goodbye!") + return + + if user_input.lower() == 'clear': + print("\n🔄 Starting new conversation...\n") + conversation_active = False + continue + + if user_input.lower() == 'models': + handle_model_list(available_models, current_model) + continue + + if user_input.lower() == 'model': + new_model, should_restart = handle_model_switch(available_models, current_model) + if should_restart: + current_model = new_model + conversation_active = False + continue + + if not user_input: + continue + + # Stream response from agent + await stream_response(client, user_input) + + except Exception as e: + print(f"\n❌ Error creating agent client: {e}") + print("This might be an MCP configuration issue. Try running without MCP:") + print(" USE_MCP=false python agent_with_mcp.py") + print("\nOr use the basic agent:") + print(" python main.py") + return + + +def main(): + """Run interactive chat with MCP""" + try: + asyncio.run(interactive_chat_with_mcp()) + except KeyboardInterrupt: + print("\n\n👋 Goodbye!") + + +if __name__ == "__main__": + main() diff --git a/cookbook/anthropic_agent_sdk/common.py b/cookbook/anthropic_agent_sdk/common.py new file mode 100644 index 00000000000..d9ee65cb58d --- /dev/null +++ b/cookbook/anthropic_agent_sdk/common.py @@ -0,0 +1,160 @@ +""" +Common utilities for Claude Agent SDK examples +""" + +import os +import httpx + + +class Config: + """Configuration for LiteLLM Gateway connection""" + + # LiteLLM proxy URL (default to local instance) + LITELLM_PROXY_URL = os.getenv("LITELLM_PROXY_URL", "http://localhost:4000") + + # LiteLLM API key (master key or virtual key) + LITELLM_API_KEY = os.getenv("LITELLM_API_KEY", "sk-1234") + + # Model name as configured in LiteLLM (e.g., "bedrock-claude-sonnet-4", "gpt-4", etc.) + LITELLM_MODEL = os.getenv("LITELLM_MODEL", "bedrock-claude-sonnet-4.5") + + +async def fetch_available_models(base_url: str, api_key: str) -> list[str]: + """ + Fetch available models from LiteLLM proxy /models endpoint + """ + try: + async with httpx.AsyncClient() as client: + response = await client.get( + f"{base_url}/models", + headers={"Authorization": f"Bearer {api_key}"}, + timeout=10.0 + ) + response.raise_for_status() + data = response.json() + return [model["id"] for model in data.get("data", [])] + except Exception as e: + print(f"⚠️ Warning: Could not fetch models from proxy: {e}") + print("Using default model list...") + # Fallback to default models + return [ + "bedrock-claude-sonnet-3.5", + "bedrock-claude-sonnet-4", + "bedrock-claude-sonnet-4.5", + "bedrock-claude-opus-4.5", + "bedrock-nova-premier", + ] + + +def setup_litellm_env(config: Config): + """ + Configure environment variables to point Agent SDK to LiteLLM + """ + litellm_base_url = config.LITELLM_PROXY_URL.rstrip('/') + os.environ["ANTHROPIC_BASE_URL"] = litellm_base_url + os.environ["ANTHROPIC_API_KEY"] = config.LITELLM_API_KEY + return litellm_base_url + + +def print_header(base_url: str, current_model: str, has_mcp: bool = False): + """ + Print the chat header + """ + mcp_indicator = " + MCP" if has_mcp else "" + print("=" * 70) + print(f"🤖 Claude Agent SDK with LiteLLM Gateway{mcp_indicator} - Interactive Chat") + print("=" * 70) + print(f"🚀 Connected to: {base_url}") + print(f"📦 Current model: {current_model}") + if has_mcp: + print("🔌 MCP: deepwiki2 enabled") + print("\nType your messages below. Commands:") + print(" - 'quit' or 'exit' to end the conversation") + print(" - 'clear' to start a new conversation") + print(" - 'model' to switch models") + print(" - 'models' to list available models") + print("=" * 70) + print() + + +def handle_model_list(available_models: list[str], current_model: str): + """ + Display available models + """ + print("\n📋 Available models:") + for i, model in enumerate(available_models, 1): + marker = "✓" if model == current_model else " " + print(f" {marker} {i}. {model}") + + +def handle_model_switch(available_models: list[str], current_model: str) -> tuple[str, bool]: + """ + Handle model switching + + Returns: + tuple: (new_model, should_restart_conversation) + """ + print("\n📋 Select a model:") + for i, model in enumerate(available_models, 1): + marker = "✓" if model == current_model else " " + print(f" {marker} {i}. {model}") + + try: + choice = input("\nEnter number (or press Enter to cancel): ").strip() + if choice: + idx = int(choice) - 1 + if 0 <= idx < len(available_models): + new_model = available_models[idx] + print(f"\n✅ Switched to: {new_model}") + print("🔄 Starting new conversation with new model...\n") + return new_model, True + else: + print("❌ Invalid choice") + except (ValueError, IndexError): + print("❌ Invalid input") + + return current_model, False + + +async def stream_response(client, user_input: str): + """ + Stream response from the agent + """ + print("\n🤖 Assistant: ", end='', flush=True) + + try: + await client.query(user_input) + + # Show loading indicator + print("⏳ thinking...", end='', flush=True) + + # Stream the response + first_chunk = True + async for msg in client.receive_response(): + # Clear loading indicator on first message + if first_chunk: + print("\r🤖 Assistant: ", end='', flush=True) + first_chunk = False + + # Handle different message types + if hasattr(msg, 'type'): + if msg.type == 'content_block_delta': + # Streaming text delta + if hasattr(msg, 'delta') and hasattr(msg.delta, 'text'): + print(msg.delta.text, end='', flush=True) + elif msg.type == 'content_block_start': + # Start of content block + if hasattr(msg, 'content_block') and hasattr(msg.content_block, 'text'): + print(msg.content_block.text, end='', flush=True) + + # Fallback to original content handling + if hasattr(msg, 'content'): + for content_block in msg.content: + if hasattr(content_block, 'text'): + print(content_block.text, end='', flush=True) + + print() # New line after response + + except Exception as e: + print(f"\r\n❌ Error: {e}") + print("Please check your LiteLLM gateway is running and configured correctly.") diff --git a/cookbook/anthropic_agent_sdk/config.example.yaml b/cookbook/anthropic_agent_sdk/config.example.yaml new file mode 100644 index 00000000000..eb1984fc4ea --- /dev/null +++ b/cookbook/anthropic_agent_sdk/config.example.yaml @@ -0,0 +1,25 @@ +model_list: + - model_name: bedrock-claude-sonnet-3.5 + litellm_params: + model: "bedrock/us.anthropic.claude-3-5-sonnet-20240620-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-sonnet-4 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-20250514-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-sonnet-4.5 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-opus-4.5 + litellm_params: + model: "bedrock/us.anthropic.claude-opus-4-5-20251101-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-nova-premier + litellm_params: + model: "bedrock/amazon.nova-premier-v1:0" + aws_region_name: "us-east-1" diff --git a/cookbook/anthropic_agent_sdk/main.py b/cookbook/anthropic_agent_sdk/main.py new file mode 100644 index 00000000000..231b57ca97b --- /dev/null +++ b/cookbook/anthropic_agent_sdk/main.py @@ -0,0 +1,95 @@ +""" +Simple Interactive Claude Agent SDK CLI using LiteLLM Gateway + +This example demonstrates an interactive CLI chat with the Anthropic Agent SDK using LiteLLM as a proxy. +LiteLLM acts as a unified interface, allowing you to use any LLM provider (OpenAI, Azure, Bedrock, etc.) +through the Claude Agent SDK by pointing it to the LiteLLM gateway. +""" + +import asyncio +from claude_agent_sdk import ClaudeSDKClient, ClaudeAgentOptions +from common import ( + Config, + fetch_available_models, + setup_litellm_env, + print_header, + handle_model_list, + handle_model_switch, + stream_response, +) + + +async def interactive_chat(): + """ + Interactive CLI chat with the agent + """ + config = Config() + + # Configure Anthropic SDK to point to LiteLLM gateway + litellm_base_url = setup_litellm_env(config) + + # Fetch available models from proxy + available_models = await fetch_available_models(litellm_base_url, config.LITELLM_API_KEY) + + current_model = config.LITELLM_MODEL + + print_header(litellm_base_url, current_model) + + while True: + # Configure agent options for each conversation + options = ClaudeAgentOptions( + system_prompt="You are a helpful AI assistant. Be concise, accurate, and friendly.", + model=current_model, + max_turns=50, + ) + + # Create agent client + async with ClaudeSDKClient(options=options) as client: + conversation_active = True + + while conversation_active: + # Get user input + try: + user_input = input("\n👤 You: ").strip() + except (EOFError, KeyboardInterrupt): + print("\n\n👋 Goodbye!") + return + + # Handle commands + if user_input.lower() in ['quit', 'exit']: + print("\n👋 Goodbye!") + return + + if user_input.lower() == 'clear': + print("\n🔄 Starting new conversation...\n") + conversation_active = False + continue + + if user_input.lower() == 'models': + handle_model_list(available_models, current_model) + continue + + if user_input.lower() == 'model': + new_model, should_restart = handle_model_switch(available_models, current_model) + if should_restart: + current_model = new_model + conversation_active = False + continue + + if not user_input: + continue + + # Stream response from agent + await stream_response(client, user_input) + + +def main(): + """Run interactive chat""" + try: + asyncio.run(interactive_chat()) + except KeyboardInterrupt: + print("\n\n👋 Goodbye!") + + +if __name__ == "__main__": + main() diff --git a/cookbook/anthropic_agent_sdk/requirements.txt b/cookbook/anthropic_agent_sdk/requirements.txt new file mode 100644 index 00000000000..1e810bb7d99 --- /dev/null +++ b/cookbook/anthropic_agent_sdk/requirements.txt @@ -0,0 +1,2 @@ +claude-agent-sdk +httpx>=0.27.0 diff --git a/cookbook/livekit_agent_sdk/README.md b/cookbook/livekit_agent_sdk/README.md new file mode 100644 index 00000000000..1c3f0bf9564 --- /dev/null +++ b/cookbook/livekit_agent_sdk/README.md @@ -0,0 +1,114 @@ +# LiveKit Voice Agent with LiteLLM Gateway + +Simple example showing how to use LiveKit's xAI realtime plugin with LiteLLM as a proxy. This lets you switch between xAI, OpenAI, and Azure realtime APIs without changing your code. + +## Quick Start + +### 1. Install dependencies + +```bash +pip install livekit-agents[xai] websockets +``` + +### 2. Start LiteLLM proxy + +```bash +# With xAI +export XAI_API_KEY="your-xai-key" +litellm --config config.yaml --port 4000 +``` + +### 3. Run the voice agent + +```bash +python main.py +``` + +Type your message and get a voice response from Grok! + +## Configuration + +Set these environment variables if needed: + +```bash +export LITELLM_PROXY_URL="http://localhost:4000" +export LITELLM_API_KEY="sk-1234" +export LITELLM_MODEL="grok-voice-agent" +``` + +Or use the defaults - connects to `http://localhost:4000` by default. + +## Example Config File + +Create a `config.yaml` with your realtime models: + +```yaml +model_list: + - model_name: grok-voice-agent + litellm_params: + model: xai/grok-2-vision-1212 + api_key: os.environ/XAI_API_KEY + model_info: + mode: realtime + + - model_name: openai-voice-agent + litellm_params: + model: gpt-4o-realtime-preview + api_key: os.environ/OPENAI_API_KEY + model_info: + mode: realtime + +general_settings: + master_key: sk-1234 +``` + +Then start: `litellm --config config.yaml --port 4000` + +## How It Works + +LiveKit's xAI plugin connects through LiteLLM proxy by setting `base_url`: + +```python +from livekit.plugins import xai + +model = xai.realtime.RealtimeModel( + voice="ara", + api_key="sk-1234", # LiteLLM proxy key + base_url="http://localhost:4000", # Point to LiteLLM +) +``` + +## Switching Providers + +Just change the model in your config - no code changes needed: + +**xAI Grok:** +```yaml +model: xai/grok-2-vision-1212 +``` + +**OpenAI:** +```yaml +model: gpt-4o-realtime-preview +``` + +**Azure OpenAI:** +```yaml +model: azure/gpt-4o-realtime-preview +api_base: https://your-endpoint.openai.azure.com/ +``` + +## Why Use LiteLLM? + +- ✅ **Switch providers** without changing agent code +- ✅ **Cost tracking** across all voice sessions +- ✅ **Rate limiting** and budgets +- ✅ **Load balancing** across multiple API keys +- ✅ **Fallbacks** to backup models + +## Learn More + +- [LiveKit xAI Realtime Tutorial](/docs/tutorials/livekit_xai_realtime) +- [xAI Realtime Docs](/docs/providers/xai_realtime) +- [LiveKit Agents Documentation](https://docs.livekit.io/agents/) +- [LiteLLM Realtime API](/docs/realtime) diff --git a/cookbook/livekit_agent_sdk/config.example.yaml b/cookbook/livekit_agent_sdk/config.example.yaml new file mode 100644 index 00000000000..1361f36af34 --- /dev/null +++ b/cookbook/livekit_agent_sdk/config.example.yaml @@ -0,0 +1,21 @@ +model_list: + - model_name: grok-voice-agent + litellm_params: + model: xai/grok-2-vision-1212 + api_key: os.environ/XAI_API_KEY + model_info: + mode: realtime + + - model_name: openai-voice-agent + litellm_params: + model: gpt-4o-realtime-preview + api_key: os.environ/OPENAI_API_KEY + model_info: + mode: realtime + +litellm_settings: + drop_params: True + telemetry: False + +general_settings: + master_key: sk-1234 # Change this to a secure key diff --git a/cookbook/livekit_agent_sdk/main.py b/cookbook/livekit_agent_sdk/main.py new file mode 100644 index 00000000000..0e2d7ebdfaf --- /dev/null +++ b/cookbook/livekit_agent_sdk/main.py @@ -0,0 +1,112 @@ +""" +Simple xAI Voice Agent using LiveKit SDK with LiteLLM Gateway + +This example shows how to use LiveKit's xAI realtime plugin through LiteLLM proxy. +LiteLLM acts as a unified interface, allowing you to switch between xAI, OpenAI, +and Azure realtime APIs without changing your agent code. +""" +import asyncio +import json +import os +import websockets + +# Configuration +PROXY_URL = os.getenv("LITELLM_PROXY_URL", "http://localhost:4000") +API_KEY = os.getenv("LITELLM_API_KEY", "sk-1234") +MODEL = os.getenv("LITELLM_MODEL", "grok-voice-agent") + + +async def run_voice_agent(): + """ + Simple voice agent that: + 1. Connects to xAI realtime API through LiteLLM proxy + 2. Sends a user message + 3. Streams back the response + """ + + url = f"ws://{PROXY_URL.replace('http://', '').replace('https://', '')}/v1/realtime?model={MODEL}" + headers = {"Authorization": f"Bearer {API_KEY}"} + + print(f"🎙️ Connecting to voice agent...") + print(f" Model: {MODEL}") + print(f" Proxy: {PROXY_URL}") + print() + + async with websockets.connect(url, additional_headers=headers) as ws: + # Receive initial connection event + initial = json.loads(await ws.recv()) + print(f"✅ Connected! Event: {initial['type']}\n") + + # Get user input + user_message = input("💬 Your message: ").strip() + if not user_message: + user_message = "Tell me a fun fact about AI!" + + print(f"\n🤖 Sending to {MODEL}...\n") + + # Send user message + await ws.send(json.dumps({ + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{"type": "input_text", "text": user_message}] + } + })) + + # Request response + await ws.send(json.dumps({ + "type": "response.create", + "response": {"modalities": ["text", "audio"]} + })) + + # Stream response + print("🎤 Response: ", end='', flush=True) + transcript = [] + + try: + while True: + msg = await asyncio.wait_for(ws.recv(), timeout=15.0) + event = json.loads(msg) + + # Capture transcript deltas + if event['type'] == 'response.output_audio_transcript.delta': + delta = event.get('delta', '') + if delta: + print(delta, end='', flush=True) + transcript.append(delta) + + # Done when response completes + elif event['type'] == 'response.done': + break + + except asyncio.TimeoutError: + pass + + print("\n") + + if transcript: + print(f"✅ Complete response: {''.join(transcript)}") + + await ws.close() + + +def main(): + """Run the voice agent""" + print("=" * 70) + print("LiveKit xAI Voice Agent via LiteLLM Proxy") + print("=" * 70) + print() + + try: + asyncio.run(run_voice_agent()) + except KeyboardInterrupt: + print("\n\n👋 Goodbye!") + except Exception as e: + print(f"\n❌ Error: {e}") + print("\nMake sure LiteLLM proxy is running:") + print(f" litellm --config config.yaml --port 4000") + + +if __name__ == "__main__": + main() diff --git a/cookbook/livekit_agent_sdk/requirements.txt b/cookbook/livekit_agent_sdk/requirements.txt new file mode 100644 index 00000000000..9e3542fac27 --- /dev/null +++ b/cookbook/livekit_agent_sdk/requirements.txt @@ -0,0 +1,2 @@ +livekit-agents[xai]>=1.3.12 +websockets>=15.0.1 diff --git a/cookbook/mock_prompt_management_server/README.md b/cookbook/mock_prompt_management_server/README.md new file mode 100644 index 00000000000..9ec76baacf7 --- /dev/null +++ b/cookbook/mock_prompt_management_server/README.md @@ -0,0 +1,293 @@ +# Mock Prompt Management Server + +A reference implementation of the [LiteLLM Generic Prompt Management API](https://docs.litellm.ai/docs/adding_provider/generic_prompt_management_api). + +This FastAPI server demonstrates how to build a prompt management API that integrates with LiteLLM without requiring a PR to the LiteLLM repository. + +## Quick Start + +### 1. Install Dependencies + +```bash +pip install fastapi uvicorn pydantic +``` + +### 2. Start the Server + +```bash +python mock_prompt_management_server.py +``` + +The server will start on `http://localhost:8080` + +### 3. Test the Endpoint + +```bash +# Get a prompt +curl "http://localhost:8080/beta/litellm_prompt_management?prompt_id=hello-world-prompt" + +# Get a prompt with authentication +curl "http://localhost:8080/beta/litellm_prompt_management?prompt_id=hello-world-prompt" \ + -H "Authorization: Bearer test-token-12345" + +# List all prompts +curl "http://localhost:8080/prompts" + +# Get prompt variables +curl "http://localhost:8080/prompts/hello-world-prompt/variables" +``` + +## Using with LiteLLM + +### Configuration + +Create a `config.yaml` file: + +```yaml +model_list: + - model_name: gpt-3.5-turbo + litellm_params: + model: openai/gpt-3.5-turbo + api_key: os.environ/OPENAI_API_KEY + +prompts: + - prompt_id: "hello-world-prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + api_base: http://localhost:8080 + api_key: test-token-12345 +``` + +### Start LiteLLM Proxy + +```bash +litellm --config config.yaml +``` + +### Make a Request + +```bash +curl http://0.0.0.0:4000/v1/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer sk-1234" \ + -d '{ + "model": "gpt-3.5-turbo", + "prompt_id": "hello-world-prompt", + "prompt_variables": { + "domain": "data science", + "task": "analyzing customer behavior" + }, + "messages": [ + {"role": "user", "content": "Please help me get started"} + ] + }' +``` + +## Available Prompts + +The server includes several example prompts: + +| Prompt ID | Description | Variables | +|-----------|-------------|-----------| +| `hello-world-prompt` | Basic helpful assistant | `domain`, `task` | +| `code-review-prompt` | Code review assistant | `years_experience`, `language`, `code` | +| `customer-support-prompt` | Customer support agent | `company_name`, `customer_message` | +| `data-analysis-prompt` | Data analysis expert | `analysis_type`, `dataset_name`, `data` | +| `creative-writing-prompt` | Creative writing assistant | `genre`, `length`, `topic` | + +## Authentication + +The server supports optional Bearer token authentication. Valid tokens for testing: + +- `test-token-12345` +- `dev-token-67890` +- `prod-token-abcdef` + +If no `Authorization` header is provided, requests are allowed (for testing purposes). + +## API Endpoints + +### LiteLLM Spec Endpoints + +#### `GET /beta/litellm_prompt_management` + +Get a prompt by ID (required by LiteLLM). + +**Query Parameters:** +- `prompt_id` (required): The prompt ID +- `project_name` (optional): Project filter +- `slug` (optional): Slug filter +- `version` (optional): Version filter + +**Response:** +```json +{ + "prompt_id": "hello-world-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant specialized in {domain}." + }, + { + "role": "user", + "content": "Help me with: {task}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.7, + "max_tokens": 500 + } +} +``` + +### Convenience Endpoints (Not in LiteLLM Spec) + +#### `GET /health` + +Health check endpoint. + +#### `GET /prompts` + +List all available prompts. + +#### `GET /prompts/{prompt_id}/variables` + +Get all variables used in a prompt template. + +#### `POST /prompts` + +Create a new prompt (in-memory only, for testing). + +## Example: Full Integration Test + +### 1. Start the Mock Server + +```bash +python mock_prompt_management_server.py +``` + +### 2. Test with Python + +```python +from litellm import completion + +# The completion will: +# 1. Fetch the prompt from your API +# 2. Replace {domain} with "machine learning" +# 3. Replace {task} with "building a recommendation system" +# 4. Merge with your messages +# 5. Use the model and params from the prompt + +response = completion( + model="gpt-4", + prompt_id="hello-world-prompt", + prompt_variables={ + "domain": "machine learning", + "task": "building a recommendation system" + }, + messages=[ + {"role": "user", "content": "I have user behavior data from the past year."} + ], + # Configure the generic prompt manager + generic_prompt_config={ + "api_base": "http://localhost:8080", + "api_key": "test-token-12345", + } +) + +print(response.choices[0].message.content) +``` + +## Customization + +### Adding New Prompts + +Edit the `PROMPTS_DB` dictionary in `mock_prompt_management_server.py`: + +```python +PROMPTS_DB = { + "my-custom-prompt": { + "prompt_id": "my-custom-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a {role}." + }, + { + "role": "user", + "content": "{user_input}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.8, + "max_tokens": 1000 + } + } +} +``` + +### Using a Database + +Replace the `PROMPTS_DB` dictionary with database queries: + +```python +@app.get("/beta/litellm_prompt_management") +async def get_prompt(prompt_id: str): + # Fetch from database + prompt = await db.prompts.find_one({"prompt_id": prompt_id}) + + if not prompt: + raise HTTPException(status_code=404, detail="Prompt not found") + + return PromptResponse(**prompt) +``` + +### Adding Access Control + +Use the custom query parameters for access control: + +```python +@app.get("/beta/litellm_prompt_management") +async def get_prompt( + prompt_id: str, + project_name: Optional[str] = None, + user_id: Optional[str] = None, + authorization: Optional[str] = Header(None) +): + token = verify_api_key(authorization) + + # Check if user has access to this project + if not has_project_access(token, project_name): + raise HTTPException(status_code=403, detail="Access denied") + + # Fetch and return prompt + ... +``` + +## Production Considerations + +Before deploying to production: + +1. **Use a real database** instead of in-memory storage +2. **Implement proper authentication** with JWT tokens or API keys +3. **Add rate limiting** to prevent abuse +4. **Use HTTPS** for encrypted communication +5. **Add logging and monitoring** for observability +6. **Implement caching** for frequently accessed prompts +7. **Add versioning** for prompt management +8. **Implement access control** based on teams/users +9. **Add input validation** for all parameters +10. **Use environment variables** for configuration + +## Related Documentation + +- [Generic Prompt Management API Documentation](https://docs.litellm.ai/docs/adding_provider/generic_prompt_management_api) +- [LiteLLM Prompt Management](https://docs.litellm.ai/docs/proxy/prompt_management) +- [Generic Guardrail API](https://docs.litellm.ai/docs/adding_provider/generic_guardrail_api) + +## Questions? + +This is a reference implementation for the LiteLLM Generic Prompt Management API. For questions or issues, please open an issue on the [LiteLLM GitHub repository](https://github.com/BerriAI/litellm). + diff --git a/cookbook/mock_prompt_management_server/mock_prompt_management_server.py b/cookbook/mock_prompt_management_server/mock_prompt_management_server.py new file mode 100644 index 00000000000..295a96e12a9 --- /dev/null +++ b/cookbook/mock_prompt_management_server/mock_prompt_management_server.py @@ -0,0 +1,390 @@ +#!/usr/bin/env python3 +""" +Mock Prompt Management API Server + +This is a FastAPI server that implements the LiteLLM Generic Prompt Management API +for testing and demonstration purposes. + +Usage: + python mock_prompt_management_server.py + +The server will start on http://localhost:8080 + +Test the endpoint: + curl "http://localhost:8080/beta/litellm_prompt_management?prompt_id=hello-world-prompt" +""" + +import os +import json +from typing import Any, Dict, List, Optional + +from fastapi import FastAPI, HTTPException, Header, Query, status +from fastapi.responses import JSONResponse +from pydantic import BaseModel, Field + +# ============================================================================ +# Response Models +# ============================================================================ + + +class MessageContent(BaseModel): + """A single message in the prompt template""" + + role: str = Field(..., description="Message role (system, user, assistant)") + content: str = Field( + ..., description="Message content with optional {variable} placeholders" + ) + + +class PromptResponse(BaseModel): + """Response format for the prompt management API""" + + prompt_id: str = Field(..., description="The ID of the prompt") + prompt_template: List[MessageContent] = Field( + ..., description="Array of messages in OpenAI format" + ) + prompt_template_model: Optional[str] = Field( + None, description="Optional model to use for this prompt" + ) + prompt_template_optional_params: Optional[Dict[str, Any]] = Field( + None, description="Optional parameters like temperature, max_tokens, etc." + ) + + +# ============================================================================ +# Mock Prompt Database +# ============================================================================ + +PROMPTS_DB = { + "hello-world-prompt": { + "prompt_id": "hello-world-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant specialized in {domain}.", + }, + {"role": "user", "content": "Help me with: {task}"}, + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": {"temperature": 0.7, "max_tokens": 500}, + }, + "code-review-prompt": { + "prompt_id": "code-review-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are an expert code reviewer with {years_experience} years of experience in {language}.", + }, + { + "role": "user", + "content": "Please review the following code for bugs, security issues, and best practices:\n\n{code}", + }, + ], + "prompt_template_model": "gpt-4-turbo", + "prompt_template_optional_params": { + "temperature": 0.3, + "max_tokens": 1500, + }, + }, + "customer-support-prompt": { + "prompt_id": "customer-support-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a friendly customer support agent for {company_name}. Always be professional, empathetic, and solution-oriented.", + }, + { + "role": "user", + "content": "Customer inquiry: {customer_message}", + }, + ], + "prompt_template_model": "gpt-3.5-turbo", + "prompt_template_optional_params": { + "temperature": 0.8, + "max_tokens": 800, + "top_p": 0.9, + }, + }, + "data-analysis-prompt": { + "prompt_id": "data-analysis-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a data scientist expert in {analysis_type} analysis.", + }, + { + "role": "user", + "content": "Analyze the following data and provide insights:\n\nDataset: {dataset_name}\nData: {data}", + }, + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.5, + "max_tokens": 2000, + }, + }, + "creative-writing-prompt": { + "prompt_id": "creative-writing-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a creative writer specializing in {genre} fiction.", + }, + { + "role": "user", + "content": "Write a {length} story about: {topic}", + }, + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.9, + "max_tokens": 3000, + "top_p": 0.95, + }, + }, +} + +# Valid API tokens for authentication (in production, use a secure token store) +VALID_API_TOKENS = { + "test-token-12345", + "dev-token-67890", + "prod-token-abcdef", +} + +# ============================================================================ +# FastAPI App +# ============================================================================ + +app = FastAPI( + title="Mock Prompt Management API", + description="A mock server implementing the LiteLLM Generic Prompt Management API", + version="1.0.0", +) + + +def verify_api_key(authorization: Optional[str] = Header(None)) -> bool: + """ + Verify the API key from the Authorization header. + + Args: + authorization: Authorization header (Bearer token) + + Returns: + True if valid, raises HTTPException if invalid + """ + if authorization is None: + # Allow requests without authentication for testing + return True + + # Extract token from "Bearer " + if not authorization.startswith("Bearer "): + raise HTTPException( + status_code=status.HTTP_401_UNAUTHORIZED, + detail="Invalid authorization header format. Expected 'Bearer '", + ) + + token = authorization.replace("Bearer ", "").strip() + + if token not in VALID_API_TOKENS: + raise HTTPException( + status_code=status.HTTP_401_UNAUTHORIZED, + detail="Invalid API key", + ) + + return True + + +@app.get("/beta/litellm_prompt_management", response_model=PromptResponse) +async def get_prompt( + prompt_id: str = Query(..., description="The ID of the prompt to fetch"), + project_name: Optional[str] = Query( + None, description="Optional project name filter" + ), + slug: Optional[str] = Query(None, description="Optional slug filter"), + version: Optional[str] = Query(None, description="Optional version filter"), + authorization: Optional[str] = Header(None), +) -> PromptResponse: + """ + Get a prompt by ID with optional filtering. + + This endpoint implements the LiteLLM Generic Prompt Management API specification. + + Args: + prompt_id: The ID of the prompt to fetch + project_name: Optional project name for filtering + slug: Optional slug for filtering + version: Optional version for filtering + authorization: Optional Bearer token for authentication + + Returns: + PromptResponse with the prompt template and configuration + + Raises: + HTTPException: 401 if authentication fails, 404 if prompt not found + """ + # Verify authentication + verify_api_key(authorization) + + # Log the request parameters (useful for debugging) + print(f"Fetching prompt: {prompt_id}") + if project_name: + print(f" Project: {project_name}") + if slug: + print(f" Slug: {slug}") + if version: + print(f" Version: {version}") + + # Check if prompt exists + if prompt_id not in PROMPTS_DB: + raise HTTPException( + status_code=status.HTTP_404_NOT_FOUND, + detail=f"Prompt '{prompt_id}' not found. Available prompts: {list(PROMPTS_DB.keys())}", + ) + + # Get the prompt from the database + prompt_data = PROMPTS_DB[prompt_id] + + # Optional: Apply filtering based on project_name, slug, or version + # In a real implementation, you might use these to filter prompts by access control + # or to fetch specific versions from your database + + return PromptResponse(**prompt_data) + + +@app.get("/health") +async def health_check(): + """Health check endpoint""" + return { + "status": "healthy", + "service": "mock-prompt-management-api", + "version": "1.0.0", + } + + +@app.get("/prompts") +async def list_prompts(authorization: Optional[str] = Header(None)): + """ + List all available prompts. + + This is a convenience endpoint (not part of the LiteLLM spec) for + discovering available prompts. + """ + # Verify authentication + verify_api_key(authorization) + + prompts_list = [ + { + "prompt_id": pid, + "model": p.get("prompt_template_model"), + "has_variables": any( + "{" in msg.get("content", "") for msg in p.get("prompt_template", []) + ), + } + for pid, p in PROMPTS_DB.items() + ] + + return {"prompts": prompts_list, "total": len(prompts_list)} + + +@app.get("/prompts/{prompt_id}/variables") +async def get_prompt_variables( + prompt_id: str, authorization: Optional[str] = Header(None) +): + """ + Get all variables in a prompt template. + + This is a convenience endpoint (not part of the LiteLLM spec) for + discovering what variables a prompt expects. + """ + # Verify authentication + verify_api_key(authorization) + + if prompt_id not in PROMPTS_DB: + raise HTTPException( + status_code=status.HTTP_404_NOT_FOUND, + detail=f"Prompt '{prompt_id}' not found", + ) + + prompt_data = PROMPTS_DB[prompt_id] + variables = set() + + # Extract variables from the prompt template + import re + + for message in prompt_data["prompt_template"]: + content = message.get("content", "") + # Find all {variable} patterns + found_vars = re.findall(r"\{(\w+)\}", content) + variables.update(found_vars) + + return { + "prompt_id": prompt_id, + "variables": sorted(list(variables)), + "example_usage": { + "prompt_id": prompt_id, + "prompt_variables": {var: f"<{var}_value>" for var in variables}, + }, + } + + +@app.post("/prompts") +async def create_prompt( + prompt: PromptResponse, authorization: Optional[str] = Header(None) +): + """ + Create a new prompt (convenience endpoint for testing). + + This is NOT part of the LiteLLM spec - it's just for testing purposes. + """ + # Verify authentication + verify_api_key(authorization) + + if prompt.prompt_id in PROMPTS_DB: + raise HTTPException( + status_code=status.HTTP_409_CONFLICT, + detail=f"Prompt '{prompt.prompt_id}' already exists", + ) + + PROMPTS_DB[prompt.prompt_id] = prompt.dict() + + return { + "status": "created", + "prompt_id": prompt.prompt_id, + "message": "Prompt created successfully (in-memory only)", + } + + +# ============================================================================ +# Main +# ============================================================================ + +if __name__ == "__main__": + import uvicorn + + print("=" * 70) + print("Mock Prompt Management API Server") + print("=" * 70) + print(f"\nStarting server on http://localhost:8080") + print(f"\nAvailable prompts: {len(PROMPTS_DB)}") + for prompt_id in PROMPTS_DB.keys(): + print(f" - {prompt_id}") + print(f"\nValid API tokens: {len(VALID_API_TOKENS)}") + print(" - test-token-12345") + print(" - dev-token-67890") + print(" - prod-token-abcdef") + print("\nEndpoints:") + print(" GET /beta/litellm_prompt_management?prompt_id= (LiteLLM spec)") + print(" GET /health (health check)") + print(" GET /prompts (list all prompts)") + print( + " GET /prompts/{id}/variables (get prompt variables)" + ) + print(" POST /prompts (create prompt)") + print("\nExample usage:") + print( + ' curl "http://localhost:8080/beta/litellm_prompt_management?prompt_id=hello-world-prompt"' + ) + print("\nPress CTRL+C to stop the server") + print("=" * 70) + + uvicorn.run(app, host="0.0.0.0", port=8080, log_level="info") diff --git a/cookbook/nova_sonic_realtime.py b/cookbook/nova_sonic_realtime.py new file mode 100644 index 00000000000..c7a73c1d00f --- /dev/null +++ b/cookbook/nova_sonic_realtime.py @@ -0,0 +1,288 @@ +""" +Client script to test Nova Sonic realtime API through LiteLLM proxy. + +This script connects to LiteLLM proxy's realtime endpoint and enables +speech-to-speech conversation with Bedrock Nova Sonic. + +Prerequisites: +- LiteLLM proxy running with Bedrock configured +- pyaudio installed: pip install pyaudio +- websockets installed: pip install websockets + +Usage: + python nova_sonic_realtime.py +""" + +import asyncio +import base64 +import json +import os +import pyaudio +import websockets +from typing import Optional + +# Bounded queue size for audio chunks (configurable via env to avoid unbounded memory) +AUDIO_QUEUE_MAXSIZE = int(os.getenv("LITELLM_ASYNCIO_QUEUE_MAXSIZE", 10_000)) + +# Audio configuration (matching Nova Sonic requirements) +INPUT_SAMPLE_RATE = 16000 # Nova Sonic expects 16kHz input +OUTPUT_SAMPLE_RATE = 24000 # Nova Sonic outputs 24kHz +CHANNELS = 1 +FORMAT = pyaudio.paInt16 +CHUNK_SIZE = 1024 + +# LiteLLM proxy configuration +LITELLM_PROXY_URL = "ws://localhost:4000/v1/realtime?model=bedrock-sonic" +LITELLM_API_KEY = "sk-12345" # Your LiteLLM API key + + +class RealtimeClient: + """Client for LiteLLM realtime API with audio support.""" + + def __init__(self, url: str, api_key: str): + self.url = url + self.api_key = api_key + self.ws: Optional[websockets.WebSocketClientProtocol] = None + self.is_active = False + self.audio_queue = asyncio.Queue(maxsize=AUDIO_QUEUE_MAXSIZE) + self.pyaudio = pyaudio.PyAudio() + self.input_stream = None + self.output_stream = None + + async def connect(self): + """Connect to LiteLLM proxy realtime endpoint.""" + print(f"Connecting to {self.url}...") + + headers = {} + if self.api_key: + headers["Authorization"] = f"Bearer {self.api_key}" + + self.ws = await websockets.connect( + self.url, + additional_headers=headers, + max_size=10 * 1024 * 1024, # 10MB max message size + ) + self.is_active = True + print("✓ Connected to LiteLLM proxy") + + async def send_session_update(self): + """Send session configuration.""" + session_update = { + "type": "session.update", + "session": { + "instructions": "You are a friendly assistant. Keep your responses short and conversational.", + "voice": "matthew", + "temperature": 0.8, + "max_response_output_tokens": 1024, + "modalities": ["text", "audio"], + "input_audio_format": "pcm16", + "output_audio_format": "pcm16", + "turn_detection": { + "type": "server_vad", + "threshold": 0.5, + "prefix_padding_ms": 300, + "silence_duration_ms": 500, + }, + }, + } + await self.ws.send(json.dumps(session_update)) + print("✓ Session configuration sent") + + async def receive_messages(self): + """Receive and process messages from the server.""" + try: + async for message in self.ws: + if not self.is_active: + break + + try: + data = json.loads(message) + event_type = data.get("type") + + if event_type == "session.created": + print(f"✓ Session created: {data.get('session', {}).get('id')}") + + elif event_type == "response.created": + print("🤖 Assistant is responding...") + + elif event_type == "response.text.delta": + # Print text transcription + delta = data.get("delta", "") + print(delta, end="", flush=True) + + elif event_type == "response.audio.delta": + # Queue audio for playback + audio_b64 = data.get("delta", "") + if audio_b64: + audio_bytes = base64.b64decode(audio_b64) + await self.audio_queue.put(audio_bytes) + + elif event_type == "response.text.done": + print() # New line after text + + elif event_type == "response.done": + print("✓ Response complete") + + elif event_type == "error": + print(f"❌ Error: {data.get('error', {})}") + + else: + # Debug: print other event types + print(f"[{event_type}]", end=" ") + + except json.JSONDecodeError: + print(f"Failed to parse message: {message[:100]}") + + except websockets.exceptions.ConnectionClosed: + print("\n✗ Connection closed") + except Exception as e: + print(f"\n✗ Error receiving messages: {e}") + finally: + self.is_active = False + + async def send_audio_chunk(self, audio_bytes: bytes): + """Send audio chunk to server.""" + if not self.is_active or not self.ws: + return + + audio_b64 = base64.b64encode(audio_bytes).decode("utf-8") + message = { + "type": "input_audio_buffer.append", + "audio": audio_b64, + } + await self.ws.send(json.dumps(message)) + + async def commit_audio_buffer(self): + """Commit the audio buffer to trigger processing.""" + if not self.is_active or not self.ws: + return + + message = {"type": "input_audio_buffer.commit"} + await self.ws.send(json.dumps(message)) + + async def capture_audio(self): + """Capture audio from microphone and send to server.""" + print("\n🎤 Starting audio capture...") + print("Speak into your microphone. Press Ctrl+C to stop.\n") + + self.input_stream = self.pyaudio.open( + format=FORMAT, + channels=CHANNELS, + rate=INPUT_SAMPLE_RATE, + input=True, + frames_per_buffer=CHUNK_SIZE, + ) + + try: + while self.is_active: + audio_data = self.input_stream.read(CHUNK_SIZE, exception_on_overflow=False) + await self.send_audio_chunk(audio_data) + await asyncio.sleep(0.01) # Small delay to prevent overwhelming + except Exception as e: + print(f"Error capturing audio: {e}") + finally: + if self.input_stream: + self.input_stream.stop_stream() + self.input_stream.close() + + async def play_audio(self): + """Play audio responses from the server.""" + print("🔊 Starting audio playback...") + + self.output_stream = self.pyaudio.open( + format=FORMAT, + channels=CHANNELS, + rate=OUTPUT_SAMPLE_RATE, + output=True, + frames_per_buffer=CHUNK_SIZE, + ) + + try: + while self.is_active: + try: + audio_data = await asyncio.wait_for( + self.audio_queue.get(), timeout=0.1 + ) + if audio_data: + self.output_stream.write(audio_data) + except asyncio.TimeoutError: + continue + except Exception as e: + print(f"Error playing audio: {e}") + finally: + if self.output_stream: + self.output_stream.stop_stream() + self.output_stream.close() + + async def close(self): + """Close the connection and cleanup.""" + self.is_active = False + + if self.ws: + await self.ws.close() + + if self.input_stream: + self.input_stream.stop_stream() + self.input_stream.close() + + if self.output_stream: + self.output_stream.stop_stream() + self.output_stream.close() + + self.pyaudio.terminate() + print("\n✓ Connection closed") + + +async def main(): + """Main function to run the realtime client.""" + print("=" * 80) + print("Bedrock Nova Sonic Realtime Client") + print("=" * 80) + print() + + client = RealtimeClient(LITELLM_PROXY_URL, LITELLM_API_KEY) + + try: + # Connect to server + await client.connect() + + # Send session configuration + await client.send_session_update() + + # Wait a moment for session to be established + await asyncio.sleep(0.5) + + # Start tasks + receive_task = asyncio.create_task(client.receive_messages()) + capture_task = asyncio.create_task(client.capture_audio()) + playback_task = asyncio.create_task(client.play_audio()) + + # Wait for user to interrupt + await asyncio.gather( + receive_task, + capture_task, + playback_task, + return_exceptions=True, + ) + + except KeyboardInterrupt: + print("\n\n⚠ Interrupted by user") + except Exception as e: + print(f"\n❌ Error: {e}") + import traceback + traceback.print_exc() + finally: + await client.close() + + +if __name__ == "__main__": + print("\nMake sure:") + print("1. LiteLLM proxy is running on port 4000") + print("2. Bedrock is configured in proxy_server_config.yaml") + print("3. AWS credentials are set") + print() + + try: + asyncio.run(main()) + except KeyboardInterrupt: + print("\n\nGoodbye!") diff --git a/deploy/charts/litellm-helm/Chart.yaml b/deploy/charts/litellm-helm/Chart.yaml index 8a08f0b4e29..0f6db331e50 100644 --- a/deploy/charts/litellm-helm/Chart.yaml +++ b/deploy/charts/litellm-helm/Chart.yaml @@ -26,6 +26,10 @@ version: 1.1.0 # It is recommended to use it with quotes. appVersion: v1.80.12 +annotations: + org.opencontainers.image.source: "https://github.com/BerriAI/litellm" + org.opencontainers.image.url: "https://docs.litellm.ai/" + dependencies: - name: "postgresql" version: ">=13.3.0" diff --git a/deploy/charts/litellm-helm/templates/deployment.yaml b/deploy/charts/litellm-helm/templates/deployment.yaml index c3e0055e380..4ac5582d060 100644 --- a/deploy/charts/litellm-helm/templates/deployment.yaml +++ b/deploy/charts/litellm-helm/templates/deployment.yaml @@ -38,6 +38,10 @@ spec: serviceAccountName: {{ include "litellm.serviceAccountName" . }} securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- with .Values.extraInitContainers }} + initContainers: + {{- toYaml . | nindent 8 }} + {{- end }} containers: - name: {{ include "litellm.name" . }} securityContext: diff --git a/deploy/charts/litellm-helm/templates/migrations-job.yaml b/deploy/charts/litellm-helm/templates/migrations-job.yaml index f8893a47afe..3459fa12d1c 100644 --- a/deploy/charts/litellm-helm/templates/migrations-job.yaml +++ b/deploy/charts/litellm-helm/templates/migrations-job.yaml @@ -35,6 +35,10 @@ spec: {{- toYaml . | nindent 8 }} {{- end }} serviceAccountName: {{ include "litellm.serviceAccountName" . }} + {{- with .Values.migrationJob.extraInitContainers }} + initContainers: + {{- toYaml . | nindent 8 }} + {{- end }} containers: - name: prisma-migrations image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default (printf "main-%s" .Chart.AppVersion) }}" diff --git a/deploy/charts/litellm-helm/values.yaml b/deploy/charts/litellm-helm/values.yaml index 54271756998..cea25974bb0 100644 --- a/deploy/charts/litellm-helm/values.yaml +++ b/deploy/charts/litellm-helm/values.yaml @@ -234,6 +234,14 @@ db: # instance. See the "postgresql" top level key for additional configuration. deployStandalone: true +# Lifecycle hooks for the LiteLLM container +# Example: +# lifecycle: +# preStop: +# exec: +# command: ["/bin/sh", "-c", "sleep 10"] +lifecycle: {} + # Settings for Bitnami postgresql chart (if db.deployStandalone is true, ignored # otherwise) postgresql: @@ -273,6 +281,7 @@ migrationJob: # cpu: 100m # memory: 100Mi extraContainers: [] + extraInitContainers: [] # Hook configuration hooks: diff --git a/docker/Dockerfile.custom_ui b/docker/Dockerfile.custom_ui index c437929a27e..177d7b7b12a 100644 --- a/docker/Dockerfile.custom_ui +++ b/docker/Dockerfile.custom_ui @@ -5,7 +5,19 @@ FROM ghcr.io/berriai/litellm:litellm_fwd_server_root_path-dev WORKDIR /app # Install Node.js and npm (adjust version as needed) -RUN apt-get update && apt-get install -y nodejs npm +RUN apt-get update && apt-get install -y nodejs npm && \ + npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \ + GLOBAL="$(npm root -g)" && \ + find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "glob" -path "*/node_modules/glob" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "brace-expansion" -path "*/node_modules/@isaacs/brace-expansion" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done && \ + npm cache clean --force # Copy the UI source into the container COPY ./ui/litellm-dashboard /app/ui/litellm-dashboard diff --git a/docker/Dockerfile.database b/docker/Dockerfile.database index 49655129506..a6fcd98ab6d 100644 --- a/docker/Dockerfile.database +++ b/docker/Dockerfile.database @@ -49,7 +49,19 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime USER root # Install runtime dependencies -RUN apk add --no-cache bash openssl tzdata nodejs npm python3 py3-pip libsndfile +RUN apk add --no-cache bash openssl tzdata nodejs npm python3 py3-pip libsndfile && \ + npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \ + GLOBAL="$(npm root -g)" && \ + find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "glob" -path "*/node_modules/glob" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find "$GLOBAL/npm" -type d -name "brace-expansion" -path "*/node_modules/@isaacs/brace-expansion" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done && \ + npm cache clean --force WORKDIR /app # Copy the current directory contents into the container at /app @@ -63,6 +75,20 @@ COPY --from=builder /wheels/ /wheels/ # Install the built wheel using pip; again using a wildcard if it's the only file RUN pip install *.whl /wheels/* --no-index --find-links=/wheels/ && rm -f *.whl && rm -rf /wheels +# SECURITY FIX: nodejs-wheel-binaries (pip package used by Prisma) bundles a complete +# npm with old vulnerable deps at /usr/lib/python3.*/site-packages/nodejs_wheel/. +# Patch every copy of tar, glob, and brace-expansion inside that tree. +RUN GLOBAL="$(npm root -g)" && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/tar" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/glob" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/@isaacs/brace-expansion" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done + # Install semantic_router and aurelio-sdk using script # Convert Windows line endings to Unix and make executable RUN sed -i 's/\r$//' docker/install_auto_router.sh && chmod +x docker/install_auto_router.sh && ./docker/install_auto_router.sh diff --git a/docker/Dockerfile.dev b/docker/Dockerfile.dev index 67966f9c739..bc1d22d5e05 100644 --- a/docker/Dockerfile.dev +++ b/docker/Dockerfile.dev @@ -61,7 +61,19 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ libatomic1 \ nodejs \ npm \ - && rm -rf /var/lib/apt/lists/* + && rm -rf /var/lib/apt/lists/* \ + && npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 \ + && GLOBAL="$(npm root -g)" \ + && find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done \ + && find "$GLOBAL/npm" -type d -name "glob" -path "*/node_modules/glob" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done \ + && find "$GLOBAL/npm" -type d -name "brace-expansion" -path "*/node_modules/@isaacs/brace-expansion" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done \ + && npm cache clean --force WORKDIR /app @@ -79,6 +91,20 @@ RUN pip install --no-cache-dir *.whl /wheels/* --no-index --find-links=/wheels/ rm -f *.whl && \ rm -rf /wheels +# SECURITY FIX: nodejs-wheel-binaries (pip package used by Prisma) bundles a complete +# npm with old vulnerable deps at /usr/lib/python3.*/site-packages/nodejs_wheel/. +# Patch every copy of tar, glob, and brace-expansion inside that tree. +RUN GLOBAL="$(npm root -g)" && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/tar" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/glob" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/@isaacs/brace-expansion" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done + # Generate prisma client and set permissions # Convert Windows line endings to Unix for entrypoint scripts RUN prisma generate && \ diff --git a/docker/Dockerfile.non_root b/docker/Dockerfile.non_root index 8c795f3b17f..004377e19b3 100644 --- a/docker/Dockerfile.non_root +++ b/docker/Dockerfile.non_root @@ -47,7 +47,6 @@ RUN mkdir -p /var/lib/litellm/ui && \ if [ -f "/app/enterprise/enterprise_ui/enterprise_colors.json" ]; then \ cp /app/enterprise/enterprise_ui/enterprise_colors.json ./ui_colors.json; \ fi && \ - rm -f package-lock.json && \ npm install --legacy-peer-deps && \ npm run build && \ cp -r /app/ui/litellm-dashboard/out/* /var/lib/litellm/ui/ && \ @@ -60,7 +59,8 @@ RUN mkdir -p /var/lib/litellm/ui && \ mkdir -p "$folder_name" && \ mv "$html_file" "$folder_name/index.html"; \ fi; \ - done ) && \ + done && \ + touch .litellm_ui_ready ) && \ cd /app/ui/litellm-dashboard && rm -rf ./out # Build litellm wheel and place it in wheels dir (replace any PyPI wheels) @@ -104,7 +104,19 @@ RUN for i in 1 2 3; do \ done \ && for i in 1 2 3; do \ apk add --no-cache python3 py3-pip bash openssl tzdata nodejs npm supervisor && break || sleep 5; \ - done + done \ + && npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 \ + && GLOBAL="$(npm root -g)" \ + && find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done \ + && find "$GLOBAL/npm" -type d -name "glob" -path "*/node_modules/glob" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done \ + && find "$GLOBAL/npm" -type d -name "brace-expansion" -path "*/node_modules/@isaacs/brace-expansion" | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done \ + && npm cache clean --force # Copy artifacts from builder COPY --from=builder /app/requirements.txt /app/requirements.txt @@ -146,6 +158,20 @@ RUN pip install --no-index --find-links=/wheels/ -r requirements.txt && \ fi; \ fi +# SECURITY FIX: nodejs-wheel-binaries (pip package used by Prisma) bundles a complete +# npm with old vulnerable deps at /usr/lib/python3.*/site-packages/nodejs_wheel/. +# Patch every copy of tar, glob, and brace-expansion inside that tree. +RUN GLOBAL="$(npm root -g)" && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/tar" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/tar" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/glob" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/glob" "$d"; \ + done && \ + find /usr/lib -path "*/nodejs_wheel/*/node_modules/@isaacs/brace-expansion" -type d | while read d; do \ + rm -rf "$d" && cp -rL "$GLOBAL/@isaacs/brace-expansion" "$d"; \ + done + # Permissions, cleanup, and Prisma prep # Convert Windows line endings to Unix for entrypoint scripts RUN sed -i 's/\r$//' docker/entrypoint.sh && \ @@ -170,12 +196,14 @@ RUN sed -i 's/\r$//' docker/entrypoint.sh && \ [ -n "$LITELLM_PROXY_EXTRAS_PATH" ] && chmod -R g+w $LITELLM_PROXY_EXTRAS_PATH || true && \ chmod -R g+rX $PRISMA_PATH && \ chmod -R g+rX /app/.cache && \ - mkdir -p /tmp/.npm /nonexistent /.npm && \ - prisma generate + mkdir -p /tmp/.npm /nonexistent /.npm # Switch to non-root user for runtime USER nobody +# Generate Prisma client as nobody user to ensure correct file ownership +RUN prisma generate + # Prisma runtime knobs for offline containers ENV PRISMA_SKIP_POSTINSTALL_GENERATE=1 \ PRISMA_HIDE_UPDATE_MESSAGE=1 \ diff --git a/docker/README.md b/docker/README.md index 6d81276bb4b..7027a30fdd7 100644 --- a/docker/README.md +++ b/docker/README.md @@ -70,9 +70,12 @@ docker compose -f docker-compose.yml -f docker-compose.hardened.yml up -d This setup: - Builds from `docker/Dockerfile.non_root` with Prisma engines and Node toolchain baked into the image. -- Runs the proxy as a non-root user with a read-only rootfs and only two writable tmpfs mounts: +- Runs the proxy as a non-root user with a read-only rootfs and only writable tmpfs mounts: - `/app/cache` (Prisma/NPM cache; backing `PRISMA_BINARY_CACHE_DIR`, `NPM_CONFIG_CACHE`, `XDG_CACHE_HOME`) - `/app/migrations` (Prisma migration workspace; backing `LITELLM_MIGRATION_DIR`) +- Pre-builds and serves the admin UI from read-only paths: + - `/var/lib/litellm/ui` (pre-restructured Next.js UI with `.litellm_ui_ready` marker) + - `/var/lib/litellm/assets` (UI logos and assets) - Routes all outbound traffic through a local Squid proxy that denies egress, so Prisma migrations must use the cached CLI and engines. You should also verify offline Prisma behaviour with: diff --git a/docs/my-website/blog/anthropic_opus_4_5_and_advanced_features/index.md b/docs/my-website/blog/anthropic_opus_4_5_and_advanced_features/index.md index 7015918e924..8a54426dfb0 100644 --- a/docs/my-website/blog/anthropic_opus_4_5_and_advanced_features/index.md +++ b/docs/my-website/blog/anthropic_opus_4_5_and_advanced_features/index.md @@ -15,6 +15,7 @@ authors: title: "CTO, LiteLLM" url: https://www.linkedin.com/in/reffajnaahsi/ image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Guide to Claude Opus 4.5 and advanced features in LiteLLM: Tool Search, Programmatic Tool Calling, and Effort Parameter." tags: [anthropic, claude, tool search, programmatic tool calling, effort, advanced features] hide_table_of_contents: false --- diff --git a/docs/my-website/blog/claude_code_beta_headers/index.md b/docs/my-website/blog/claude_code_beta_headers/index.md new file mode 100644 index 00000000000..44567f616aa --- /dev/null +++ b/docs/my-website/blog/claude_code_beta_headers/index.md @@ -0,0 +1,177 @@ +--- +slug: claude-code-beta-headers-incident +title: "Incident Report: Invalid beta headers with Claude Code" +date: 2026-02-16T10:00:00 +authors: + - name: Sameer Kankute + title: SWE @ LiteLLM (LLM Translation) + url: https://www.linkedin.com/in/sameer-kankute/ + image_url: https://pbs.twimg.com/profile_images/2001352686994907136/ONgNuSk5_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg +tags: [incident-report, anthropic, stability] +hide_table_of_contents: false +--- + +**Date:** February 13, 2026 +**Duration:** ~3 hours +**Severity:** High +**Status:** Resolved + +> **Note:** This fix will be available starting from `v1.81.13-nightly` or higher of LiteLLM. + +## Summary + +Claude Code began sending unsupported Anthropic beta headers to non-Anthropic providers (Bedrock, Azure AI, Vertex AI), causing `invalid beta flag` errors. LiteLLM was forwarding all beta headers without provider-specific validation. Users experienced request failures when routing Claude Code requests through LiteLLM to these providers. + +- **LLM calls to Anthropic:** No impact. +- **LLM calls to Bedrock/Azure/Vertex:** Failed with `invalid beta flag` errors when unsupported headers were present. +- **Cost tracking and routing:** No impact. + +{/* truncate */} + +--- + +## Background + +Anthropic uses beta headers to enable experimental features in Claude. When Claude Code makes API requests, it includes headers like `anthropic-beta: prompt-caching-scope-2026-01-05,advanced-tool-use-2025-11-20`. However, not all providers support all Anthropic beta features. + +Before this incident, LiteLLM forwarded all beta headers to all providers without validation: + +```mermaid +sequenceDiagram + participant CC as Claude Code + participant LP as LiteLLM (old behavior) + participant Provider as Provider (Bedrock/Azure/Vertex) + + CC->>LP: Request with beta headers + Note over CC,LP: anthropic-beta: header1,header2,header3 + + LP->>Provider: Forward ALL headers (no validation) + Note over LP,Provider: anthropic-beta: header1,header2,header3 + + Provider-->>LP: ❌ Error: invalid beta flag + LP-->>CC: Request fails +``` + +Requests succeeded for Anthropic (native support) but failed for other providers when Claude Code sent headers those providers didn't support. + +--- + +## Root cause + +LiteLLM lacked provider-specific beta header validation. When Claude Code introduced new beta features or sent headers that specific providers didn't support, those headers were blindly forwarded, causing provider API errors. + +--- + +## Remediation + +| # | Action | Status | Code | +|---|---|---|---| +| 1 | Create `anthropic_beta_headers_config.json` with provider-specific mappings | ✅ Done | [`anthropic_beta_headers_config.json`](https://github.com/BerriAI/litellm/blob/main/litellm/anthropic_beta_headers_config.json) | +| 2 | Implement strict validation: headers must be explicitly mapped to be forwarded | ✅ Done | [`litellm_logging.py`](https://github.com/BerriAI/litellm/blob/main/litellm/litellm_core_utils/litellm_logging.py) | +| 3 | Add `/reload/anthropic_beta_headers` endpoint for dynamic config updates | ✅ Done | Proxy management endpoints | +| 4 | Add `/schedule/anthropic_beta_headers_reload` for automatic periodic updates | ✅ Done | Proxy management endpoints | +| 5 | Support `LITELLM_ANTHROPIC_BETA_HEADERS_URL` for custom config sources | ✅ Done | Environment configuration | +| 6 | Support `LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS` for air-gapped deployments | ✅ Done | Environment configuration | + +Now LiteLLM validates and transforms headers per-provider: + +```mermaid +sequenceDiagram + participant CC as Claude Code + participant LP as LiteLLM (new behavior) + participant Config as Beta Headers Config + participant Provider as Provider (Bedrock/Azure/Vertex) + + CC->>LP: Request with beta headers + Note over CC,LP: anthropic-beta: header1,header2,header3 + + LP->>Config: Load header mapping for provider + Config-->>LP: Returns mapping (header→value or null) + + Note over LP: Validate & Transform:
1. Check if header exists in mapping
2. Filter out null values
3. Map to provider-specific names + + LP->>Provider: Request with filtered & mapped headers + Note over LP,Provider: anthropic-beta: mapped-header2
(header1, header3 filtered out) + + Provider-->>LP: ✅ Success response + LP-->>CC: Response +``` + +--- + +## Dynamic configuration updates + +A key improvement is zero-downtime configuration updates. When Anthropic releases new beta features, users can update their configuration without restarting: + +```bash +# Manually trigger reload (no restart needed) +curl -X POST "https://your-proxy-url/reload/anthropic_beta_headers" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" + +# Or schedule automatic reloads every 24 hours +curl -X POST "https://your-proxy-url/schedule/anthropic_beta_headers_reload?hours=24" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +This prevents future incidents where Claude Code introduces new headers before LiteLLM configuration is updated. + +--- + +## Configuration format + +The `anthropic_beta_headers_config.json` file maps input headers to provider-specific output headers: + +```json +{ + "description": "Mapping of Anthropic beta headers for each provider.", + "anthropic": { + "advanced-tool-use-2025-11-20": "advanced-tool-use-2025-11-20", + "computer-use-2025-01-24": "computer-use-2025-01-24" + }, + "bedrock_converse": { + "advanced-tool-use-2025-11-20": null, + "computer-use-2025-01-24": "computer-use-2025-01-24" + }, + "azure_ai": { + "advanced-tool-use-2025-11-20": "advanced-tool-use-2025-11-20", + "computer-use-2025-01-24": "computer-use-2025-01-24" + } +} +``` + +**Validation rules:** +1. Headers must exist in the mapping for the target provider +2. Headers with `null` values are filtered out (unsupported) +3. Header names can be transformed per-provider (e.g., Bedrock uses different names for some features) + +--- + +## Resolution steps for users + +For users still experiencing issues, update to the latest LiteLLM version if < v1.81.11-nightly: + +```bash +pip install --upgrade litellm +``` + +Or manually reload the configuration without restarting: + +```bash +curl -X POST "https://your-proxy-url/reload/anthropic_beta_headers" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +--- + +## Related documentation + +- [Managing Anthropic Beta Headers](../proxy/sync_anthropic_beta_headers.md) - Complete configuration guide +- [`anthropic_beta_headers_config.json`](https://github.com/BerriAI/litellm/blob/main/litellm/anthropic_beta_headers_config.json) - Current configuration file diff --git a/docs/my-website/blog/claude_opus_4_6/index.md b/docs/my-website/blog/claude_opus_4_6/index.md new file mode 100644 index 00000000000..e44420bd570 --- /dev/null +++ b/docs/my-website/blog/claude_opus_4_6/index.md @@ -0,0 +1,730 @@ +--- +slug: claude_opus_4_6 +title: "Day 0 Support: Claude Opus 4.6" +date: 2026-02-05T10:00:00 +authors: + - name: Sameer Kankute + title: SWE @ LiteLLM (LLM Translation) + url: https://www.linkedin.com/in/sameer-kankute/ + image_url: https://pbs.twimg.com/profile_images/2001352686994907136/ONgNuSk5_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg +description: "Day 0 support for Claude Opus 4.6 on LiteLLM AI Gateway - use across Anthropic, Azure, Vertex AI, and Bedrock." +tags: [anthropic, claude, opus 4.6] +hide_table_of_contents: false +--- + +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +LiteLLM now supports Claude Opus 4.6 on Day 0. Use it across Anthropic, Azure, Vertex AI, and Bedrock through the LiteLLM AI Gateway. + +## Docker Image + +```bash +docker pull ghcr.io/berriai/litellm:litellm_stable_release_branch-v1.80.0-stable.opus-4-6 +``` + +## Usage - Anthropic + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-opus-4-6 + litellm_params: + model: anthropic/claude-opus-4-6 + api_key: os.environ/ANTHROPIC_API_KEY +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:litellm_stable_release_branch-v1.80.0-stable.opus-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +## Usage - Azure + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-opus-4-6 + litellm_params: + model: azure_ai/claude-opus-4-6 + api_key: os.environ/AZURE_AI_API_KEY + api_base: os.environ/AZURE_AI_API_BASE # https://.services.ai.azure.com +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e AZURE_AI_API_KEY=$AZURE_AI_API_KEY \ + -e AZURE_AI_API_BASE=$AZURE_AI_API_BASE \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:litellm_stable_release_branch-v1.80.0-stable.opus-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +## Usage - Vertex AI + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-opus-4-6 + litellm_params: + model: vertex_ai/claude-opus-4-6 + vertex_project: os.environ/VERTEX_PROJECT + vertex_location: us-east5 +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e VERTEX_PROJECT=$VERTEX_PROJECT \ + -e GOOGLE_APPLICATION_CREDENTIALS=/app/credentials.json \ + -v $(pwd)/config.yaml:/app/config.yaml \ + -v $(pwd)/credentials.json:/app/credentials.json \ + ghcr.io/berriai/litellm:litellm_stable_release_branch-v1.80.0-stable.opus-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +## Usage - Bedrock + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-opus-4-6 + litellm_params: + model: bedrock/anthropic.claude-opus-4-6-v1 + aws_access_key_id: os.environ/AWS_ACCESS_KEY_ID + aws_secret_access_key: os.environ/AWS_SECRET_ACCESS_KEY + aws_region_name: us-east-1 +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \ + -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:litellm_stable_release_branch-v1.80.0-stable.opus-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +## Advanced Features + +### Compaction + + + + +Litellm supports enabling compaction for the new claude-opus-4-6. + +**Enabling Compaction** + +To enable compaction, add the `context_management` parameter with the `compact_20260112` edit type: + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "What is the weather in San Francisco?" + } + ], + "context_management": { + "edits": [ + { + "type": "compact_20260112" + } + ] + }, + "max_tokens": 100 +}' +``` +All the parameters supported for context_management by anthropic are supported and can be directly added. Litellm automatically adds the `compact-2026-01-12` beta header in the request. + + + + +Enable compaction to reduce context size while preserving key information. LiteLLM automatically adds the `compact-2026-01-12` beta header when compaction is enabled. + +:::info +**Provider Support:** Compaction is supported on Anthropic, Azure AI, and Vertex AI. It is **not supported** on Bedrock (Invoke or Converse APIs). +::: + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 4096, + "messages": [ + { + "role": "user", + "content": "Hi" + } + ], + "context_management": { + "edits": [ + { + "type": "compact_20260112" + } + ] + } +}' +``` + + + + + +**Response with Compaction Block** + +The response will include the compaction summary in `provider_specific_fields.compaction_blocks`: + +```json +{ + "id": "chatcmpl-a6c105a3-4b25-419e-9551-c800633b6cb2", + "created": 1770357619, + "model": "claude-opus-4-6", + "object": "chat.completion", + "choices": [ + { + "finish_reason": "length", + "index": 0, + "message": { + "content": "I don't have access to real-time data, so I can't provide the current weather in San Francisco. To get up-to-date weather information, I'd recommend checking:\n\n- **Weather websites** like weather.com, accuweather.com, or wunderground.com\n- **Search engines** – just Google \"San Francisco weather\"\n- **Weather apps** on your phone (e.g., Apple Weather, Google Weather)\n- **National", + "role": "assistant", + "provider_specific_fields": { + "compaction_blocks": [ + { + "type": "compaction", + "content": "Summary of the conversation: The user requested help building a web scraper..." + } + ] + } + } + } + ], + "usage": { + "completion_tokens": 100, + "prompt_tokens": 86, + "total_tokens": 186 + } +} +``` + +**Using Compaction Blocks in Follow-up Requests** + +To continue the conversation with compaction, include the compaction block in the assistant message's `provider_specific_fields`: + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "How can I build a web scraper?" + }, + { + "role": "assistant", + "content": [ + { + "type": "text", + "text": "Certainly! To build a basic web scraper, you'll typically use a programming language like Python along with libraries such as `requests` (for fetching web pages) and `BeautifulSoup` (for parsing HTML). Here's a basic example:\n\n```python\nimport requests\nfrom bs4 import BeautifulSoup\n\nurl = 'https://example.com'\nresponse = requests.get(url)\nsoup = BeautifulSoup(response.text, 'html.parser')\n\n# Extract and print all text\ntext = soup.get_text()\nprint(text)\n```\n\nLet me know what you're interested in scraping or if you need help with a specific website!" + } + ], + "provider_specific_fields": { + "compaction_blocks": [ + { + "type": "compaction", + "content": "Summary of the conversation: The user asked how to build a web scraper, and the assistant gave an overview using Python with requests and BeautifulSoup." + } + ] + } + }, + { + "role": "user", + "content": "How do I use it to scrape product prices?" + } + ], + "context_management": { + "edits": [ + { + "type": "compact_20260112" + } + ] + }, + "max_tokens": 100 +}' +``` + +**Streaming Support** + +Compaction blocks are also supported in streaming mode. You'll receive: +- `compaction_start` event when a compaction block begins +- `compaction_delta` events with the compaction content +- The accumulated `compaction_blocks` in `provider_specific_fields` + +### Adaptive Thinking + +:::note +When using `reasoning_effort` with Claude Opus 4.6, all values (`low`, `medium`, `high`) are mapped to `thinking: {type: "adaptive"}`. To use explicit thinking budgets with `type: "enabled"`, pass the native `thinking` parameter directly (see "Native thinking param" tab below). +::: + + + + +LiteLLM supports adaptive thinking through the `reasoning_effort` parameter: + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "Solve this complex problem: What is the optimal strategy for..." + } + ], + "reasoning_effort": "high" +}' +``` + + + + +Use the `thinking` parameter with `type: "adaptive"` to enable adaptive thinking mode: + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 16000, + "thinking": { + "type": "adaptive" + }, + "messages": [ + { + "role": "user", + "content": "Explain why the sum of two even numbers is always even." + } + ] +}' +``` + + + + +Use the `thinking` parameter directly for adaptive thinking via the SDK: + +```python +import litellm + +response = litellm.completion( + model="anthropic/claude-opus-4-6", + messages=[{"role": "user", "content": "Solve this complex problem: What is the optimal strategy for..."}], + thinking={"type": "adaptive"}, +) +``` + + + + +### Effort Levels + + + + +Four effort levels available: `low`, `medium`, `high` (default), and `max`. Pass directly via the `output_config` parameter: + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "Explain quantum computing" + } + ], + "output_config": { + "effort": "medium" + } +}' +``` + +You can use reasoning effort plus output_config to have more control on the model. + + + + +Four effort levels available: `low`, `medium`, `high` (default), and `max`. Pass directly via the `output_config` parameter: + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 4096, + "messages": [ + { + "role": "user", + "content": "Explain quantum computing" + } + ], + "output_config": { + "effort": "medium" + } +}' +``` + + + + +### 1M Token Context (Beta) + +Opus 4.6 supports 1M token context. Premium pricing applies for prompts exceeding 200k tokens ($10/$37.50 per million input/output tokens). LiteLLM supports cost calculations for 1M token contexts. + + + + +To use the 1M token context window, you need to forward the `anthropic-beta` header from your client to the LLM provider. + +**Step 1: Enable header forwarding in your config** + +```yaml +general_settings: + forward_client_headers_to_llm_api: true +``` + +**Step 2: Send requests with the beta header** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--header 'anthropic-beta: context-1m-2025-08-07' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "Analyze this large document..." + } + ] +}' +``` + + + + +To use the 1M token context window, you need to forward the `anthropic-beta` header from your client to the LLM provider. + +**Step 1: Enable header forwarding in your config** + +```yaml +general_settings: + forward_client_headers_to_llm_api: true +``` + +**Step 2: Send requests with the beta header** + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'anthropic-beta: context-1m-2025-08-07' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 16000, + "messages": [ + { + "role": "user", + "content": "Analyze this large document..." + } + ] +}' +``` + +:::tip +You can combine multiple beta headers by separating them with commas: +```bash +--header 'anthropic-beta: context-1m-2025-08-07,compact-2026-01-12' +``` +::: + + + + +### US-Only Inference + +Available at 1.1× token pricing. LiteLLM automatically tracks costs for US-only inference. + + + + +Use the `inference_geo` parameter to specify US-only inference: + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "What is the capital of France?" + } + ], + "inference_geo": "us" +}' +``` + +LiteLLM will automatically apply the 1.1× pricing multiplier for US-only inference in cost tracking. + + + + +Use the `inference_geo` parameter to specify US-only inference: + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 4096, + "messages": [ + { + "role": "user", + "content": "What is the capital of France?" + } + ], + "inference_geo": "us" +}' +``` + +LiteLLM will automatically apply the 1.1× pricing multiplier for US-only inference in cost tracking. + + + + +### Fast Mode + +:::info +Fast mode is **only supported on the Anthropic provider** (`anthropic/claude-opus-4-6`). It is not available on Azure AI, Vertex AI, or Bedrock. +::: + +**Pricing:** +- Standard: $5 input / $25 output per MTok +- Fast: $30 input / $150 output per MTok (6× premium) + + + + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-opus-4-6", + "messages": [ + { + "role": "user", + "content": "Refactor this module..." + } + ], + "max_tokens": 4096, + "speed": "fast" +}' +``` + +**Using OpenAI SDK:** + +```python +import openai + +client = openai.OpenAI( + api_key="your-litellm-key", + base_url="http://0.0.0.0:4000" +) + +response = client.chat.completions.create( + model="claude-opus-4-6", + messages=[{"role": "user", "content": "Refactor this module..."}], + max_tokens=4096, + extra_body={"speed": "fast"} +) +``` + +**Using LiteLLM SDK:** + +```python +from litellm import completion + +response = completion( + model="anthropic/claude-opus-4-6", + messages=[{"role": "user", "content": "Refactor this module..."}], + max_tokens=4096, + speed="fast" +) +``` + +LiteLLM automatically tracks the higher costs for fast mode in usage and cost calculations. + + + + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'x-api-key: sk-12345' \ +--header 'content-type: application/json' \ +--data '{ + "model": "claude-opus-4-6", + "max_tokens": 4096, + "speed": "fast", + "messages": [ + { + "role": "user", + "content": "Refactor this module..." + } + ] +}' +``` + +LiteLLM automatically: +- Adds the `fast-mode-2026-02-01` beta header +- Tracks the 6× premium pricing in cost calculations + + + diff --git a/docs/my-website/blog/claude_sonnet_4_6/index.md b/docs/my-website/blog/claude_sonnet_4_6/index.md new file mode 100644 index 00000000000..df54fa09792 --- /dev/null +++ b/docs/my-website/blog/claude_sonnet_4_6/index.md @@ -0,0 +1,283 @@ +--- +slug: claude_sonnet_4_6 +title: "Day 0 Support: Claude Sonnet 4.6" +date: 2026-02-17T10:00:00 +authors: + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg +description: "Day 0 support for Claude Sonnet 4.6 on LiteLLM AI Gateway - use across Anthropic, Azure, Vertex AI, and Bedrock." +tags: [anthropic, claude, sonnet 4.6] +hide_table_of_contents: false +--- + +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +LiteLLM now supports Claude Sonnet 4.6 on Day 0. Use it across Anthropic, Azure, Vertex AI, and Bedrock through the LiteLLM AI Gateway. + +## Docker Image + +```bash +docker pull ghcr.io/berriai/litellm:v1.81.3-stable.sonnet-4-6 +``` + +## Usage - Anthropic + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-sonnet-4-6 + litellm_params: + model: anthropic/claude-sonnet-4-6 + api_key: os.environ/ANTHROPIC_API_KEY +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:v1.81.3-stable.sonnet-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-sonnet-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + + +```python +from litellm import completion + +response = completion( + model="anthropic/claude-sonnet-4-6", + messages=[{"role": "user", "content": "what llm are you"}] +) +print(response.choices[0].message.content) +``` + + + + +## Usage - Azure + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-sonnet-4-6 + litellm_params: + model: azure_ai/claude-sonnet-4-6 + api_key: os.environ/AZURE_AI_API_KEY + api_base: os.environ/AZURE_AI_API_BASE # https://.services.ai.azure.com +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e AZURE_AI_API_KEY=$AZURE_AI_API_KEY \ + -e AZURE_AI_API_BASE=$AZURE_AI_API_BASE \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:v1.81.3-stable.sonnet-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-sonnet-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + + +```python +from litellm import completion + +response = completion( + model="azure_ai/claude-sonnet-4-6", + api_key="your-azure-api-key", + api_base="https://.services.ai.azure.com", + messages=[{"role": "user", "content": "what llm are you"}] +) +print(response.choices[0].message.content) +``` + + + + +## Usage - Vertex AI + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-sonnet-4-6 + litellm_params: + model: vertex_ai/claude-sonnet-4-6 + vertex_project: os.environ/VERTEX_PROJECT + vertex_location: us-east5 +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e VERTEX_PROJECT=$VERTEX_PROJECT \ + -e GOOGLE_APPLICATION_CREDENTIALS=/app/credentials.json \ + -v $(pwd)/config.yaml:/app/config.yaml \ + -v $(pwd)/credentials.json:/app/credentials.json \ + ghcr.io/berriai/litellm:v1.81.3-stable.sonnet-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-sonnet-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + + +```python +from litellm import completion + +response = completion( + model="vertex_ai/claude-sonnet-4-6", + vertex_project="your-project-id", + vertex_location="us-east5", + messages=[{"role": "user", "content": "what llm are you"}] +) +print(response.choices[0].message.content) +``` + + + + +## Usage - Bedrock + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: claude-sonnet-4-6 + litellm_params: + model: bedrock/anthropic.claude-sonnet-4-6-v1 + aws_access_key_id: os.environ/AWS_ACCESS_KEY_ID + aws_secret_access_key: os.environ/AWS_SECRET_ACCESS_KEY + aws_region_name: us-east-1 +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \ + -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:v1.81.3-stable.sonnet-4-6 \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "claude-sonnet-4-6", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + + +```python +from litellm import completion + +response = completion( + model="bedrock/anthropic.claude-sonnet-4-6-v1", + aws_access_key_id="your-access-key", + aws_secret_access_key="your-secret-key", + aws_region_name="us-east-1", + messages=[{"role": "user", "content": "what llm are you"}] +) +print(response.choices[0].message.content) +``` + + + diff --git a/docs/my-website/blog/fastapi_middleware_performance/index.mdx b/docs/my-website/blog/fastapi_middleware_performance/index.mdx new file mode 100644 index 00000000000..b0c5ba13634 --- /dev/null +++ b/docs/my-website/blog/fastapi_middleware_performance/index.mdx @@ -0,0 +1,220 @@ +--- +slug: fastapi-middleware-performance +title: "Your Middleware Could Be a Bottleneck" +date: 2026-02-07T10:00:00 +authors: + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg + - name: Ryan Crabbe + title: "Performance Engineer, LiteLLM" + url: https://www.linkedin.com/in/ryan-crabbe-0b9687214 + image_url: https://media.licdn.com/dms/image/v2/D5603AQHt1t9Z4BJ6Gw/profile-displayphoto-shrink_400_400/profile-displayphoto-shrink_400_400/0/1724453682340?e=1772064000&v=beta&t=VXdmr13rsNB05wyA2F1TENOB5UuDHUZ0FCHTolNyR5M +description: "How we improved LiteLLM proxy latency and throughput by replacing a single middleware base class" +tags: [performance, fastapi, middleware] +hide_table_of_contents: false +--- + +import { BaseHTTPMiddlewareAnimation, PureASGIAnimation, BenchmarkVisualization } from '@site/src/components/MiddlewareDiagrams'; + +> How we improved LiteLLM proxy latency and throughput by replacing a single, simple middleware base class + +--- + +## Our Setup + +The LiteLLM proxy server has two middleware layers. The first is Starlette's `CORSMiddleware` (re-exported by FastAPI), which is a pure ASGI middleware. Then we have a simple BaseHTTPMiddleware called PrometheusAuthMiddleware. + +The job of `PrometheusAuthMiddleware` is to authenticate requests to the `/metrics` endpoint. It's not on by default, you enable it with a flag in your proxy config: + +
+Proxy config flag + +```yaml +litellm_settings: + require_auth_for_metrics_endpoint: true +``` + +
+ +The middleware checks two things: is the request hitting `/metrics`, and is auth even enabled? If both checks fail, which they do for the vast majority of requests, it just passes the request through unchanged. + +
+PrometheusAuthMiddleware source + +```python +class PrometheusAuthMiddleware(BaseHTTPMiddleware): + async def dispatch(self, request: Request, call_next): + if self._is_prometheus_metrics_endpoint(request): + if self._should_run_auth_on_metrics_endpoint() is True: + try: + await user_api_key_auth(request=request, api_key=...) + except Exception as e: + return JSONResponse(status_code=401, content=...) + response = await call_next(request) + return response + + @staticmethod + def _is_prometheus_metrics_endpoint(request: Request): + if "/metrics" in request.url.path: + return True + return False +``` + +
+ +Looks harmless. Subclass `BaseHTTPMiddleware`, implement `dispatch()`, done. This is what you will see in Starlette's documentation[1](#footnote-1). + +{/* truncate */} + +--- + +## What BaseHTTPMiddleware Actually Does + +When you write a `dispatch()` method, you'd expect the request to flow straight through your function and out the other side. What actually happens is much more involved. + +On every request, even a pure passthrough (meaning nothing happens), `BaseHTTPMiddleware` creates **7 intermediate objects and tasks**: + + + +It wraps the request in a new object to track body state, creates a synchronization event, allocates an in-memory channel to pass messages between your middleware and the inner app, sets up a task group to manage the lifecycle, and then runs your actual route handler in a *separate background task* when you call `call_next()`. The response body then flows back through that in-memory channel, gets re-wrapped in a streaming response object, and finally reaches the caller. That's a lot. + +For a middleware that for us, does nothing on 99.9% of requests, paying this cost doesn't make sense. + +Compare that to a pure ASGI middleware, which we can have just check the request path and continue along. + + + +Our middleware is doing something really simple. For the vast majority of requests it doesn't need to do anything at all but just let the request pass through. It doesn't need task groups, memory streams, or cancel scopes. It needs a function call. + +--- + +## Comparing Both + +We replaced the `BaseHTTPMiddleware` subclass with a pure ASGI middleware. To benchmark the difference, we used Apache Bench[2](#footnote-2) to compare both configurations of LiteLLM's middleware stack: the old setup (1 pure ASGI + 1 `BaseHTTPMiddleware`) against the new setup (2 pure ASGI). + +A minimal FastAPI app serves `GET /health` → `PlainTextResponse("ok")`. The endpoint does zero work to isolate the middleware overhead: any difference between configs is purely the cost of the middleware plumbing itself. Both middlewares are just calling the next layer. Same work, different base class. + +Apache Bench (`ab`) fires requests at the server with 1,000 concurrent connections and a single uvicorn worker. One worker means one event loop, so the benchmark directly measures how each middleware design handles concurrent load on a single thread. + + + +
+Try it yourself + +Save the script below as `benchmark_middleware.py`, then run: + +```bash +# Terminal 1 — start the "before" server (1 ASGI + 1 BaseHTTPMiddleware) +python benchmark_middleware.py --middleware mixed + +# Terminal 2 — benchmark it +ab -n 50000 -c 1000 http://localhost:8000/health + +# Stop the server, then start the "after" server (2x pure ASGI) +python benchmark_middleware.py --middleware asgi + +# Terminal 2 — benchmark again +ab -n 50000 -c 1000 http://localhost:8000/health +``` + +```python +import argparse +import uvicorn +from fastapi import FastAPI +from fastapi.responses import PlainTextResponse +from starlette.middleware.base import BaseHTTPMiddleware +from starlette.requests import Request +from starlette.types import ASGIApp, Receive, Scope, Send + + +class NoOpBaseHTTPMiddleware(BaseHTTPMiddleware): + async def dispatch(self, request: Request, call_next): + return await call_next(request) + + +class NoOpPureASGIMiddleware: + def __init__(self, app: ASGIApp) -> None: + self.app = app + + async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None: + await self.app(scope, receive, send) + + +def create_app(middleware_type: str | None = None, layers: int = 2) -> FastAPI: + app = FastAPI() + + @app.get("/health") + async def health(): + return PlainTextResponse("ok") + + if middleware_type == "mixed": + app.add_middleware(NoOpBaseHTTPMiddleware) + app.add_middleware(NoOpPureASGIMiddleware) + elif middleware_type == "asgi": + for _ in range(layers): + app.add_middleware(NoOpPureASGIMiddleware) + + return app + + +if __name__ == "__main__": + parser = argparse.ArgumentParser() + parser.add_argument("--middleware", choices=["asgi", "mixed"], default=None) + parser.add_argument("--layers", type=int, default=2) + parser.add_argument("--port", type=int, default=8000) + args = parser.parse_args() + + app = create_app(middleware_type=args.middleware, layers=args.layers) + uvicorn.run(app, host="0.0.0.0", port=args.port, workers=1, log_level="warning") +``` + +
+ +--- + +## Our Change + +Here's what we replaced it with: + +```python +class PrometheusAuthMiddleware: + def __init__(self, app: ASGIApp) -> None: + self.app = app + + async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None: + if scope["type"] != "http" or "/metrics" not in scope.get("path", ""): + await self.app(scope, receive, send) + return + + if litellm.require_auth_for_metrics_endpoint is True: + request = Request(scope, receive) + api_key = request.headers.get("Authorization") or "" + try: + await user_api_key_auth(request=request, api_key=api_key) + except Exception as e: + # send 401 directly via ASGI protocol + ... + return + + await self.app(scope, receive, send) +``` + +For the 99.9% of requests that aren't hitting `/metrics`, the middleware is now one dict lookup, one string check, and one function call. No objects allocated, no tasks spawned. + +It's important to evaluate if the tools you're using are the right fit for the job as your software grows and handles more responsiblity. We're now putting in a static analysis check to prevent this from happening again with any newly introduced middlewares. If we find the use case is necessary then that's okay and we'll reevalute but for everything LiteLLM needs to do at the moment it's not. + +This middleware change was one part of a broader optimization effort on the LiteLLM proxy. Across all optimizations combined, we've measured about a **30% reduction in proxy overhead** over the past two weeks. + +--- + + +1 [Starlette Middleware — BaseHTTPMiddleware](https://starlette.dev/middleware/#basehttpmiddleware) + + +2 [Apache HTTP server benchmarking tool (`ab`)](https://httpd.apache.org/docs/2.4/programs/ab.html) diff --git a/docs/my-website/blog/gemini_3/index.md b/docs/my-website/blog/gemini_3/index.md index 26dbc2d02b5..7263acc12c9 100644 --- a/docs/my-website/blog/gemini_3/index.md +++ b/docs/my-website/blog/gemini_3/index.md @@ -15,6 +15,7 @@ authors: title: "CTO, LiteLLM" url: https://www.linkedin.com/in/reffajnaahsi/ image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Common questions and best practices for using gemini-3-pro-preview with LiteLLM Proxy and SDK." tags: [gemini, day 0 support, llms] hide_table_of_contents: false --- diff --git a/docs/my-website/blog/gemini_3_flash/index.md b/docs/my-website/blog/gemini_3_flash/index.md index 6cb8ddad992..830c21e5f66 100644 --- a/docs/my-website/blog/gemini_3_flash/index.md +++ b/docs/my-website/blog/gemini_3_flash/index.md @@ -15,6 +15,7 @@ authors: title: "CTO, LiteLLM" url: https://www.linkedin.com/in/reffajnaahsi/ image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Guide to using Gemini 3 Flash on LiteLLM Proxy and SDK with day 0 support." tags: [gemini, day 0 support, llms] hide_table_of_contents: false --- diff --git a/docs/my-website/blog/litellm_observatory/index.md b/docs/my-website/blog/litellm_observatory/index.md new file mode 100644 index 00000000000..4554f77fb85 --- /dev/null +++ b/docs/my-website/blog/litellm_observatory/index.md @@ -0,0 +1,136 @@ +--- +slug: litellm-observatory +title: "Improve release stability with 24 hour load tests" +date: 2026-02-06T10:00:00 +authors: + - name: Alexsander Hamir + title: "Performance Engineer, LiteLLM" + url: https://www.linkedin.com/in/alexsander-baptista/ + image_url: https://github.com/AlexsanderHamir.png + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "How we built a long-running, release-validation system to catch regressions before they reach users." +tags: [testing, observability, reliability, releases] +hide_table_of_contents: false +--- + +![LiteLLM Observatory](https://raw.githubusercontent.com/AlexsanderHamir/assets/main/Screenshot%202026-01-31%20175355.png) + +# Improve release stability with 24 hour load tests + +As LiteLLM adoption has grown, so have expectations around reliability, performance, and operational safety. Meeting those expectations requires more than correctness-focused tests, it requires validating how the system behaves over time, under real-world conditions. + +This post introduces **LiteLLM Observatory**, a long-running release-validation system we built to catch regressions before they reach users. + +--- + +## Why We Built the Observatory + +LiteLLM operates at the intersection of external providers, long-lived network connections, and high-throughput workloads. While our unit and integration tests do an excellent job validating correctness, they are not designed to surface issues that only appear after extended operation. + +A subtle lifecycle edge case discovered in v1.81.3 reinforced the need for stronger release validation in this area. + +--- + +## A Real-World Lifecycle Edge Case + +In v1.81.3, we shipped a fix for an HTTP client memory leak. The change passed unit and integration tests and behaved correctly in short-lived runs. + +The issue that surfaced was not caused by a single incorrect line of logic, but by how multiple components interacted over time: + +- A cached `httpx` client was configured with a 1-hour TTL +- When the cache expired, the underlying HTTP connection was closed as expected +- A higher-level client continued to hold a reference to that connection +- Subsequent requests failed with: + +``` +Cannot send a request, as the client has been closed +``` + +**Before (with bug):** + +| Provider | Requests | Success | Failures | Fail % | +|----------|----------|---------|----------|--------| +| OpenAI | 720,000 | 432,000 | 288,000 | 40% | +| Azure | 692,000 | 415,200 | 276,800 | 40% | + +**After (fixed):** + +| Provider | Requests | Success | Failures | Fail % | +|----------|------------|-----------|----------|---------| +| OpenAI | 1,200,000 | 1,199,988 | 12 | 0.001% | +| Azure | 1,150,000 | 1,149,982 | 18 | 0.002% | + +Our focus moving forward is on being the first to detect issues, even when they aren’t covered by unit tests. LiteLLM Observatory is designed to surface latency regressions, OOMs, and failure modes that only appear under real traffic patterns in **our own production deployments** during release validation. + + +--- + +### How the Observatory Works + +[LiteLLM Observatory](https://github.com/BerriAI/litellm-observatory) is a testing service that runs long-running tests against our LiteLLM deployments. We trigger tests by sending API requests, and results are automatically sent to Slack when tests complete. + +#### How Tests Run + +1. **Start a Test**: We send a request to the Observatory API with: + - Which LiteLLM deployment to test (URL and API key) + - Which test to run (e.g., `TestOAIAzureRelease`) + - Test settings (which models to test, how long to run, failure thresholds) + +2. **Smart Queueing**: + - The system checks whether we are attempting to run the exact same test more than once + - If a duplicate test is already running or queued, we receive an error to avoid wasting resources + - Otherwise, the test is added to a queue and runs when capacity is available (up to 5 tests can run concurrently by default) + +3. **Instant Response**: The API responds immediately—we do not wait for the test to finish. Tests may run for hours, but the request itself completes in milliseconds. + +4. **Background Execution**: + - The test runs in the background, issuing requests against our LiteLLM deployment + - It tracks request success and failure rates over time + - When the test completes, results are automatically posted to our Slack channel + +#### Example: The OpenAI / Azure Reliability Test + +The `TestOAIAzureRelease` test is designed to catch a class of bugs that only surface after sustained runtime: + +- **Duration**: Runs continuously for 3 hours +- **Behavior**: Cycles through specified models (such as `gpt-4` and `gpt-3.5-turbo`), issuing requests continuously +- **Why 3 Hours**: This helps catch issues where HTTP clients degrade or fail after extended use (for example, a bug observed in LiteLLM v1.81.3) +- **Pass / Fail Criteria**: The test passes if fewer than 1% of requests fail. If the failure rate exceeds 1%, the test fails and we are notified in Slack +- **Key Detail**: The same HTTP client is reused for the entire run, allowing us to detect lifecycle-related bugs that only appear under prolonged reuse + +#### When We Use It + +- **Before Deployments**: Run tests before promoting a new LiteLLM version to production +- **Routine Validation**: Schedule regular runs (daily or weekly) to catch regressions early +- **Issue Investigation**: Run tests on demand when we suspect a deployment issue +- **Long-Running Failure Detection**: Identify bugs that only appear under sustained load, beyond what short smoke tests can reveal + + +### Complementing Unit Tests + +Unit tests remain a foundational part of our development process. They are fast and precise, but they don’t cover: + +- Real provider behavior +- Long-lived network interactions +- Resource lifecycle edge cases +- Time-dependent regressions + +LiteLLM Observatory complements unit tests by validating the system as it actually runs in production-like environments. + +--- + +### Looking Ahead + +Reliability is an ongoing investment. + +LiteLLM Observatory is one of several systems we’re building to continuously raise the bar on release quality and operational safety. As LiteLLM evolves, so will our validation tooling, informed by real-world usage and lessons learned. + +We’ll continue to share those improvements openly as we go. + diff --git a/docs/my-website/blog/minimax_m2_5/index.md b/docs/my-website/blog/minimax_m2_5/index.md new file mode 100644 index 00000000000..50084fcc1e5 --- /dev/null +++ b/docs/my-website/blog/minimax_m2_5/index.md @@ -0,0 +1,394 @@ +--- +slug: minimax_m2_5 +title: "Day 0 Support: MiniMax-M2.5" +date: 2026-02-12T10:00:00 +authors: + - name: Sameer Kankute + title: SWE @ LiteLLM (LLM Translation) + url: https://www.linkedin.com/in/sameer-kankute/ + image_url: https://pbs.twimg.com/profile_images/2001352686994907136/ONgNuSk5_400x400.jpg + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Day 0 support for MiniMax-M2.5 on LiteLLM" +tags: [minimax, M2.5, llm] +hide_table_of_contents: false +--- + +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +LiteLLM now supports MiniMax-M2.5 on Day 0. Use it across OpenAI-compatible and Anthropic-compatible APIs through the LiteLLM AI Gateway. + +## Supported Models + +LiteLLM supports the following MiniMax models: + +| Model | Description | Input Cost | Output Cost | Context Window | +|-------|-------------|------------|-------------|----------------| +| **MiniMax-M2.5** | Advanced reasoning, Agentic capabilities | $0.3/M tokens | $1.2/M tokens | 1M tokens | +| **MiniMax-M2.5-lightning** | Faster and More Agile (~100 tps) | $0.3/M tokens | $2.4/M tokens | 1M tokens | + +## Features Supported + +- **Prompt Caching**: Reduce costs with cached prompts ($0.03/M tokens for cache read, $0.375/M tokens for cache write) +- **Function Calling**: Built-in tool calling support +- **Reasoning**: Advanced reasoning capabilities with thinking support +- **System Messages**: Full system message support +- **Cost Tracking**: Automatic cost calculation for all requests + +## Docker Image + +```bash +docker pull litellm/litellm:v1.81.3-stable +``` + +## Usage - OpenAI Compatible API (/v1/chat/completions) + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: minimax-m2-5 + litellm_params: + model: minimax/MiniMax-M2.5 + api_key: os.environ/MINIMAX_API_KEY + api_base: https://api.minimax.io/v1 +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e MINIMAX_API_KEY=$MINIMAX_API_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:v1.81.3-stable \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "minimax-m2-5", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +### With Reasoning Split + +```bash +curl --location 'http://0.0.0.0:4000/chat/completions' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "minimax-m2-5", + "messages": [ + { + "role": "user", + "content": "Solve: 2+2=?" + } + ], + "extra_body": { + "reasoning_split": true + } +}' +``` + +## Usage - Anthropic Compatible API (/v1/messages) + + + + +**1. Setup config.yaml** + +```yaml +model_list: + - model_name: minimax-m2-5 + litellm_params: + model: minimax/MiniMax-M2.5 + api_key: os.environ/MINIMAX_API_KEY + api_base: https://api.minimax.io/anthropic/v1/messages +``` + +**2. Start the proxy** + +```bash +docker run -d \ + -p 4000:4000 \ + -e MINIMAX_API_KEY=$MINIMAX_API_KEY \ + -v $(pwd)/config.yaml:/app/config.yaml \ + ghcr.io/berriai/litellm:v1.81.3-stable \ + --config /app/config.yaml +``` + +**3. Test it!** + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "minimax-m2-5", + "max_tokens": 1000, + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] +}' +``` + + + + +### With Thinking + +```bash +curl --location 'http://0.0.0.0:4000/v1/messages' \ +--header 'Content-Type: application/json' \ +--header 'Authorization: Bearer $LITELLM_KEY' \ +--data '{ + "model": "minimax-m2-5", + "max_tokens": 1000, + "thinking": { + "type": "enabled", + "budget_tokens": 1000 + }, + "messages": [ + { + "role": "user", + "content": "Solve: 2+2=?" + } + ] +}' +``` + +## Usage - LiteLLM SDK + +### OpenAI-compatible API + +```python +import litellm + +response = litellm.completion( + model="minimax/MiniMax-M2.5", + messages=[ + {"role": "user", "content": "Hello, how are you?"} + ], + api_key="your-minimax-api-key", + api_base="https://api.minimax.io/v1" +) + +print(response.choices[0].message.content) +``` + +### Anthropic-compatible API + +```python +import litellm + +response = litellm.anthropic.messages.acreate( + model="minimax/MiniMax-M2.5", + messages=[{"role": "user", "content": "Hello, how are you?"}], + api_key="your-minimax-api-key", + api_base="https://api.minimax.io/anthropic/v1/messages", + max_tokens=1000 +) + +print(response.choices[0].message.content) +``` + +### With Thinking + +```python +response = litellm.anthropic.messages.acreate( + model="minimax/MiniMax-M2.5", + messages=[{"role": "user", "content": "Solve: 2+2=?"}], + thinking={"type": "enabled", "budget_tokens": 1000}, + api_key="your-minimax-api-key" +) + +# Access thinking content +for block in response.choices[0].message.content: + if hasattr(block, 'type') and block.type == 'thinking': + print(f"Thinking: {block.thinking}") +``` + +### With Reasoning Split (OpenAI API) + +```python +response = litellm.completion( + model="minimax/MiniMax-M2.5", + messages=[ + {"role": "user", "content": "Solve: 2+2=?"} + ], + extra_body={"reasoning_split": True}, + api_key="your-minimax-api-key", + api_base="https://api.minimax.io/v1" +) + +# Access thinking and response +if hasattr(response.choices[0].message, 'reasoning_details'): + print(f"Thinking: {response.choices[0].message.reasoning_details}") +print(f"Response: {response.choices[0].message.content}") +``` + +## Cost Tracking + +LiteLLM automatically tracks costs for MiniMax-M2.5 requests. The pricing is: + +- **Input**: $0.3 per 1M tokens +- **Output**: $1.2 per 1M tokens +- **Cache Read**: $0.03 per 1M tokens +- **Cache Write**: $0.375 per 1M tokens + +### Accessing Cost Information + +```python +response = litellm.completion( + model="minimax/MiniMax-M2.5", + messages=[{"role": "user", "content": "Hello!"}], + api_key="your-minimax-api-key" +) + +# Access cost information +print(f"Cost: ${response._hidden_params.get('response_cost', 0)}") +``` + +## Streaming Support + +### OpenAI API + +```python +response = litellm.completion( + model="minimax/MiniMax-M2.5", + messages=[{"role": "user", "content": "Tell me a story"}], + stream=True, + api_key="your-minimax-api-key", + api_base="https://api.minimax.io/v1" +) + +for chunk in response: + if chunk.choices[0].delta.content: + print(chunk.choices[0].delta.content, end="") +``` + +### Streaming with Reasoning Split + +```python +stream = litellm.completion( + model="minimax/MiniMax-M2.5", + messages=[ + {"role": "user", "content": "Tell me a story"}, + ], + extra_body={"reasoning_split": True}, + stream=True, + api_key="your-minimax-api-key", + api_base="https://api.minimax.io/v1" +) + +reasoning_buffer = "" +text_buffer = "" + +for chunk in stream: + if hasattr(chunk.choices[0].delta, "reasoning_details") and chunk.choices[0].delta.reasoning_details: + for detail in chunk.choices[0].delta.reasoning_details: + if "text" in detail: + reasoning_text = detail["text"] + new_reasoning = reasoning_text[len(reasoning_buffer):] + if new_reasoning: + print(new_reasoning, end="", flush=True) + reasoning_buffer = reasoning_text + + if chunk.choices[0].delta.content: + content_text = chunk.choices[0].delta.content + new_text = content_text[len(text_buffer):] if text_buffer else content_text + if new_text: + print(new_text, end="", flush=True) + text_buffer = content_text +``` + +## Using with Native SDKs + +### Anthropic SDK via LiteLLM Proxy + +```python +import os +os.environ["ANTHROPIC_BASE_URL"] = "http://localhost:4000" +os.environ["ANTHROPIC_API_KEY"] = "sk-1234" # Your LiteLLM proxy key + +import anthropic + +client = anthropic.Anthropic() + +message = client.messages.create( + model="minimax-m2-5", + max_tokens=1000, + system="You are a helpful assistant.", + messages=[ + { + "role": "user", + "content": [ + { + "type": "text", + "text": "Hi, how are you?" + } + ] + } + ] +) + +for block in message.content: + if block.type == "thinking": + print(f"Thinking:\n{block.thinking}\n") + elif block.type == "text": + print(f"Text:\n{block.text}\n") +``` + +### OpenAI SDK via LiteLLM Proxy + +```python +import os +os.environ["OPENAI_BASE_URL"] = "http://localhost:4000" +os.environ["OPENAI_API_KEY"] = "sk-1234" # Your LiteLLM proxy key + +from openai import OpenAI + +client = OpenAI() + +response = client.chat.completions.create( + model="minimax-m2-5", + messages=[ + {"role": "system", "content": "You are a helpful assistant."}, + {"role": "user", "content": "Hi, how are you?"}, + ], + extra_body={"reasoning_split": True}, +) + +# Access thinking and response +if hasattr(response.choices[0].message, 'reasoning_details'): + print(f"Thinking:\n{response.choices[0].message.reasoning_details[0]['text']}\n") +print(f"Text:\n{response.choices[0].message.content}\n") +``` diff --git a/docs/my-website/blog/model_cost_map_incident/index.md b/docs/my-website/blog/model_cost_map_incident/index.md new file mode 100644 index 00000000000..b9ff20e4128 --- /dev/null +++ b/docs/my-website/blog/model_cost_map_incident/index.md @@ -0,0 +1,95 @@ +--- +slug: model-cost-map-incident +title: "Incident Report: Invalid model cost map on main" +date: 2026-02-10T10:00:00 +authors: + - name: Ishaan Jaffer + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/ishaanjaffer/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +tags: [incident-report, stability] +hide_table_of_contents: false +--- + +**Date:** January 27, 2026 +**Duration:** ~20 minutes +**Severity:** Low +**Status:** Resolved + +## Summary + +A malformed JSON entry in `model_prices_and_context_window.json` was merged to `main` ([`562f0a0`](https://github.com/BerriAI/litellm/commit/562f0a028251750e3d75386bee0e630d9796d0df)). This caused LiteLLM to silently fall back to a stale local copy of the model cost map. Users on older package versions lost cost tracking for newer models only (e.g. `azure/gpt-5.2`). No LLM calls were blocked. + +- **LLM calls and proxy routing:** No impact. +- **Cost tracking:** Impacted for newer models not present in the local backup. Older models were unaffected. The incident lasted ~20 minutes until the commit was reverted. + +{/* truncate */} + +--- + +## Background + +The model cost map is not in the request path. It is used after the LLM response comes back, inside a try/catch, to calculate spend. A missing entry never blocks a call. + +```mermaid +flowchart TD + A["1. litellm.completion() receives request + litellm/main.py"] --> B["2. Route to provider + litellm/litellm_core_utils/get_llm_provider_logic.py"] + B --> C["3. LLM returns response + litellm/main.py"] + C --> D["4. Post-call: look up model in cost map + litellm/cost_calculator.py"] + D -->|"found"| E["5a. Attach cost to response"] + D -->|"not found (try/catch)"| F["5b. Log warning, set cost=0"] + E --> G["6. Return response to caller"] + F --> G + + style D fill:#fff3cd,stroke:#ffc107 + style F fill:#fff3cd,stroke:#ffc107 + style E fill:#d4edda,stroke:#28a745 + style G fill:#d4edda,stroke:#28a745 +``` + +Both paths return a response to the caller. When the cost map lookup fails, the only difference is `cost=0` on that request. + +--- + +## Root cause + +LiteLLM fetches the model cost map from GitHub `main` at import time. If the fetch fails, it falls back to a local backup bundled with the package. Before this incident, the fallback was completely silent -- no warning was logged. + +A contributor PR introduced an extra `{` bracket, producing invalid JSON. The remote fetch failed with `JSONDecodeError`, triggering the silent fallback. Users on older package versions had backup files missing newer models. + +**Timeline:** + +1. Malformed JSON merged to `main` +2. LiteLLM installations fall back to local backup on next import +3. Users report `"This model isn't mapped yet"` for newer models +4. Bad commit identified and reverted (~20 minutes) + +--- + +## Remediation + +| # | Action | Status | Code | +|---|---|---|---| +| 1 | CI validation on `model_prices_and_context_window.json` | ✅ Done | [`test-model-map.yaml`](https://github.com/BerriAI/litellm/blob/main/.github/workflows/test-model-map.yaml) | +| 2 | Warning log on fallback to local backup | ✅ Done | [`get_model_cost_map.py#L57-L68`](https://github.com/BerriAI/litellm/blob/main/litellm/litellm_core_utils/get_model_cost_map.py#L57-L68) | +| 3 | `GetModelCostMap` class with integrity validation helpers | ✅ Done | [`get_model_cost_map.py#L24-L149`](https://github.com/BerriAI/litellm/blob/main/litellm/litellm_core_utils/get_model_cost_map.py#L24-L149) | +| 4 | Resilience test suite (bad hosted map, fallback, completion) | ✅ Done | [`test_model_cost_map_resilience.py#L150-L291`](https://github.com/BerriAI/litellm/blob/main/tests/llm_translation/test_model_cost_map_resilience.py#L150-L291) | +| 5 | Test that backup model cost map always exists and contains common models | ✅ Done | [`test_model_cost_map_resilience.py#L213-L228`](https://github.com/BerriAI/litellm/blob/main/tests/llm_translation/test_model_cost_map_resilience.py#L213-L228) | + +Enterprises that require zero external dependencies at import time can set `LITELLM_LOCAL_MODEL_COST_MAP=True` to skip the GitHub fetch entirely. + +--- + +## Other dependencies on external resources + +| Dependency | Impact if unavailable | Fallback | +|---|---|---| +| Model cost map (GitHub) | Cost tracking for newer models | Local backup (now with warning) | +| JWT public keys (IDP/SSO) | Auth fails | None | +| OIDC UserInfo (IDP/SSO) | Auth fails | None | +| HuggingFace model API | HF provider calls fail | None | +| Ollama tags (localhost) | Ollama model list stale | Static list | diff --git a/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md b/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md new file mode 100644 index 00000000000..1857383363c --- /dev/null +++ b/docs/my-website/blog/sub_millisecond_proxy_overhead/index.md @@ -0,0 +1,92 @@ +--- +slug: sub-millisecond-proxy-overhead +title: "Achieving Sub-Millisecond Proxy Overhead" +date: 2026-02-02T10:00:00 +authors: + - name: Alexsander Hamir + title: "Performance Engineer, LiteLLM" + url: https://www.linkedin.com/in/alexsander-baptista/ + image_url: https://github.com/AlexsanderHamir.png + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +description: "Our Q1 performance target and architectural direction for achieving sub-millisecond proxy overhead on modest hardware." +tags: [performance, architecture] +hide_table_of_contents: false +--- + +![Sidecar architecture: Python control plane vs. sidecar hot path](https://raw.githubusercontent.com/AlexsanderHamir/assets/main/Screenshot%202026-02-02%20172554.png) + +# Achieving Sub-Millisecond Proxy Overhead + +## Introduction + +Our Q1 performance target is to aggressively move toward sub-millisecond proxy overhead on a single instance with 4 CPUs and 8 GB of RAM, and to continue pushing that boundary over time. Our broader goal is to make LiteLLM inexpensive to deploy, lightweight, and fast. This post outlines the architectural direction behind that effort. + +Proxy overhead refers to the latency introduced by LiteLLM itself, independent of the upstream provider. + +To measure it, we run the same workload directly against the provider and through LiteLLM at identical QPS (for example, 1,000 QPS) and compare the latency delta. To reduce noise, the load generator, LiteLLM, and a mock LLM endpoint all run on the same machine, ensuring the difference reflects proxy overhead rather than network latency. + +--- + +## Where We're Coming From + +Under the same benchmark originally conducted by [TensorZero](https://www.tensorzero.com/docs/gateway/benchmarks), LiteLLM previously failed at around 1,000 QPS. + +That is no longer the case. Today, LiteLLM can be stress-tested at 1,000 QPS with no failures and can scale up to 5,000 QPS without failures on a 4-CPU, 8-GB RAM single instance setup. + +This establishes a more up to date baseline and provides useful context as we continue working on proxy overhead and overall performance. + +--- + +## Design Choice + +Achieving sub-millisecond proxy overhead with a Python-based system requires being deliberate about where work happens. + +Python is a strong fit for flexibility and extensibility: provider abstraction, configuration-driven routing, and a rich callback ecosystem. These are areas where development velocity and correctness matter more than raw throughput. + +At higher request rates, however, certain classes of work become expensive when executed inside the Python process on every request. Rather than rewriting LiteLLM or introducing complex deployment requirements, we adopt an optional **sidecar architecture**. + +This architectural change is how we intend to make LiteLLM **permanently fast**. While it supports our near-term performance targets, it is a long-term investment. + +Python continues to own: + +- Request validation and normalization +- Model and provider selection +- Callbacks and integrations + +The sidecar owns **performance-critical execution**, such as: + +- Efficient request forwarding +- Connection reuse and pooling +- Enforcing timeouts and limits +- Aggregating high-frequency metrics + +This separation allows each component to focus on what it does best: Python acts as the control plane, while the sidecar handles the hot path. + +--- + +### Why the Sidecar Is Optional + +The sidecar is intentionally **optional**. + +This allows us to ship it incrementally, validate it under real-world workloads, and avoid making it a hard dependency before it is fully battle-tested across all LiteLLM features. + +Just as importantly, this ensures that self-hosting LiteLLM remains simple. The sidecar is bundled and started automatically, requires no additional infrastructure, and can be disabled entirely. From a user's perspective, LiteLLM continues to behave like a single service. + +As of today, the sidecar is an optimization, not a requirement. + +--- + +## Conclusion + +Sub-millisecond proxy overhead is not achieved through a single optimization, but through architectural changes. + +By keeping Python focused on orchestration and extensibility, and offloading performance-critical execution to a sidecar, we establish a foundation for making LiteLLM **permanently fast over time**—even on modest hardware such as a 1-CPU, 2-GB RAM instance, while keeping deployment and self-hosting simple. + +This work extends beyond Q1, and we will continue sharing benchmarks and updates as the architecture evolves. diff --git a/docs/my-website/blog/vllm_embeddings_incident/index.md b/docs/my-website/blog/vllm_embeddings_incident/index.md new file mode 100644 index 00000000000..a1ce8152857 --- /dev/null +++ b/docs/my-website/blog/vllm_embeddings_incident/index.md @@ -0,0 +1,117 @@ +--- +slug: vllm-embeddings-incident +title: "Incident Report: vLLM Embeddings Broken by encoding_format Parameter" +date: 2026-02-18T10:00:00 +authors: + - name: Sameer Kankute + title: SWE @ LiteLLM (LLM Translation) + url: https://www.linkedin.com/in/sameer-kankute/ + image_url: https://pbs.twimg.com/profile_images/2001352686994907136/ONgNuSk5_400x400.jpg + - name: Krrish Dholakia + title: "CEO, LiteLLM" + url: https://www.linkedin.com/in/krish-d/ + image_url: https://pbs.twimg.com/profile_images/1298587542745358340/DZv3Oj-h_400x400.jpg + - name: Ishaan Jaff + title: "CTO, LiteLLM" + url: https://www.linkedin.com/in/reffajnaahsi/ + image_url: https://pbs.twimg.com/profile_images/1613813310264340481/lz54oEiB_400x400.jpg +tags: [incident-report, embeddings, vllm] +hide_table_of_contents: false +--- + +**Date:** Feb 16, 2026 +**Duration:** ~3 hours +**Severity:** High (for vLLM embedding users) +**Status:** Resolved + +## Summary + +A commit ([`dbcae4a`](https://github.com/BerriAI/litellm/commit/dbcae4aca5836770d0e9cd43abab0333c3d61ab2)) intended to fix OpenAI SDK behavior broke vLLM embeddings by explicitly passing `encoding_format=None` in API requests. vLLM rejects this with error: `"unknown variant \`\`, expected float or base64"`. + +- **vLLM embedding calls:** Complete failure - all requests rejected +- **Other providers:** No impact - OpenAI and other providers functioned normally +- **Other vLLM functionality:** No impact - only embeddings were affected + +{/* truncate */} + +--- + +## Background + +The `encoding_format` parameter for embeddings specifies whether vectors should be returned as `float` arrays or `base64` encoded strings. Different providers have different expectations: + +- **OpenAI SDK:** If `encoding_format` is omitted, the SDK adds a default value of `"float"` +- **vLLM:** Strictly validates `encoding_format` - only accepts `"float"`, `"base64"`, or complete omission. Rejects `None` or empty string values. + +```mermaid +flowchart TD + A["1. User calls litellm.embedding() + litellm/main.py"] --> B["2. Transform request for provider + litellm/llms/openai_like/embedding/handler.py"] + B --> C["3. Send request to vLLM endpoint"] + C -->|"encoding_format omitted"| D["4a. ✅ vLLM processes request"] + C -->|"encoding_format='float' or 'base64'"| D + C -->|"encoding_format=None or ''"| E["4b. ❌ vLLM rejects with error: + 'unknown variant, expected float or base64'"] + + style D fill:#d4edda,stroke:#28a745 + style E fill:#f8d7da,stroke:#dc3545 + style B fill:#fff3cd,stroke:#ffc107 +``` + +--- + +## Root cause + +A well-intentioned fix for OpenAI SDK behavior inadvertently broke vLLM embeddings: + +**The Breaking Change ([`dbcae4a`](https://github.com/BerriAI/litellm/commit/dbcae4aca5836770d0e9cd43abab0333c3d61ab2)):** + +In `litellm/main.py`, the code was changed to explicitly set `encoding_format=None` instead of omitting it: + +```python +# Added in dbcae4a +if encoding_format is not None: + optional_params["encoding_format"] = encoding_format +else: + # Omitting causes openai sdk to add default value of "float" + optional_params["encoding_format"] = None +``` + +This fix worked correctly for OpenAI - explicitly passing `None` prevented the SDK from adding its default value. However, vLLM's strict parameter validation rejected `None` values, causing all embedding requests to fail. + +--- + +## The Fix + +Fix deployed ([`55348dd`](https://github.com/BerriAI/litellm/commit/55348dd9c51b5b028f676d25ad023b8f052fc071)). The solution filters out `None` and empty string values from `optional_params` before sending requests to OpenAI-like providers (including vLLM). + +**In `litellm/llms/openai_like/embedding/handler.py`:** + +```python +# Before (broken) +data = {"model": model, "input": input, **optional_params} + +# After (fixed) +filtered_optional_params = {k: v for k, v in optional_params.items() if v not in (None, '')} +data = {"model": model, "input": input, **filtered_optional_params} +``` + +This ensures: +- Valid values (`"float"`, `"base64"`) are preserved and sent +- `None` and empty string values are filtered out (parameter omitted entirely) +- OpenAI SDK no longer adds defaults because liteLLM handles the parameter upstream + +--- + +## Remediation + +| # | Action | Status | Code | +|---|---|---|---| +| 1 | Filter `None` and empty string values in OpenAI-like embedding handler | ✅ Done | [`handler.py#L108`](https://github.com/BerriAI/litellm/blob/main/litellm/llms/openai_like/embedding/handler.py#L108) | +| 2 | Unit tests for parameter filtering (None, empty string, valid values) | ✅ Done | [`test_openai_like_embedding.py`](https://github.com/BerriAI/litellm/blob/main/tests/test_litellm/llms/openai_like/embedding/test_openai_like_embedding.py) | +| 3 | Transformation tests for hosted_vllm embedding config | ✅ Done | [`test_hosted_vllm_embedding_transformation.py`](https://github.com/BerriAI/litellm/blob/main/tests/test_litellm/llms/hosted_vllm/embedding/test_hosted_vllm_embedding_transformation.py) | +| 4 | E2E tests with actual vLLM endpoint | ✅ Done | [`test_hosted_vllm_embedding_e2e.py`](https://github.com/BerriAI/litellm/blob/main/tests/test_litellm/llms/hosted_vllm/embedding/test_hosted_vllm_embedding_e2e.py) | +| 5 | Validate JSON payload structure matches vLLM expectations | ✅ Done | Tests verify exact JSON sent to endpoint | + +--- diff --git a/docs/my-website/docs/a2a.md b/docs/my-website/docs/a2a.md index d7145e4b83c..b1166a7809c 100644 --- a/docs/my-website/docs/a2a.md +++ b/docs/my-website/docs/a2a.md @@ -68,116 +68,9 @@ Follow [this guide, to add your pydantic ai agent to LiteLLM Agent Gateway](./pr ## Invoking your Agents -Use the [A2A Python SDK](https://pypi.org/project/a2a/) to invoke agents through LiteLLM. - -This example shows how to: -1. **List available agents** - Query `/v1/agents` to see which agents your key can access -2. **Select an agent** - Pick an agent from the list -3. **Invoke via A2A** - Use the A2A protocol to send messages to the agent - -```python showLineNumbers title="invoke_a2a_agent.py" -from uuid import uuid4 -import httpx -import asyncio -from a2a.client import A2ACardResolver, A2AClient -from a2a.types import MessageSendParams, SendMessageRequest - -# === CONFIGURE THESE === -LITELLM_BASE_URL = "http://localhost:4000" # Your LiteLLM proxy URL -LITELLM_VIRTUAL_KEY = "sk-1234" # Your LiteLLM Virtual Key -# ======================= - -async def main(): - headers = {"Authorization": f"Bearer {LITELLM_VIRTUAL_KEY}"} - - async with httpx.AsyncClient(headers=headers) as client: - # Step 1: List available agents - response = await client.get(f"{LITELLM_BASE_URL}/v1/agents") - agents = response.json() - - print("Available agents:") - for agent in agents: - print(f" - {agent['agent_name']} (ID: {agent['agent_id']})") - - if not agents: - print("No agents available for this key") - return - - # Step 2: Select an agent and invoke it - selected_agent = agents[0] - agent_id = selected_agent["agent_id"] - agent_name = selected_agent["agent_name"] - print(f"\nInvoking: {agent_name}") - - # Step 3: Use A2A protocol to invoke the agent - base_url = f"{LITELLM_BASE_URL}/a2a/{agent_id}" - resolver = A2ACardResolver(httpx_client=client, base_url=base_url) - agent_card = await resolver.get_agent_card() - a2a_client = A2AClient(httpx_client=client, agent_card=agent_card) - - request = SendMessageRequest( - id=str(uuid4()), - params=MessageSendParams( - message={ - "role": "user", - "parts": [{"kind": "text", "text": "Hello, what can you do?"}], - "messageId": uuid4().hex, - } - ), - ) - response = await a2a_client.send_message(request) - print(f"Response: {response.model_dump(mode='json', exclude_none=True, indent=4)}") - -if __name__ == "__main__": - asyncio.run(main()) -``` - -### Streaming Responses - -For streaming responses, use `send_message_streaming`: - -```python showLineNumbers title="invoke_a2a_agent_streaming.py" -from uuid import uuid4 -import httpx -import asyncio -from a2a.client import A2ACardResolver, A2AClient -from a2a.types import MessageSendParams, SendStreamingMessageRequest - -# === CONFIGURE THESE === -LITELLM_BASE_URL = "http://localhost:4000" # Your LiteLLM proxy URL -LITELLM_VIRTUAL_KEY = "sk-1234" # Your LiteLLM Virtual Key -LITELLM_AGENT_NAME = "ij-local" # Agent name registered in LiteLLM -# ======================= - -async def main(): - base_url = f"{LITELLM_BASE_URL}/a2a/{LITELLM_AGENT_NAME}" - headers = {"Authorization": f"Bearer {LITELLM_VIRTUAL_KEY}"} - - async with httpx.AsyncClient(headers=headers) as httpx_client: - # Resolve agent card and create client - resolver = A2ACardResolver(httpx_client=httpx_client, base_url=base_url) - agent_card = await resolver.get_agent_card() - client = A2AClient(httpx_client=httpx_client, agent_card=agent_card) - - # Send a streaming message - request = SendStreamingMessageRequest( - id=str(uuid4()), - params=MessageSendParams( - message={ - "role": "user", - "parts": [{"kind": "text", "text": "Hello, what can you do?"}], - "messageId": uuid4().hex, - } - ), - ) - - # Stream the response - async for chunk in client.send_message_streaming(request): - print(chunk.model_dump(mode="json", exclude_none=True)) - -if __name__ == "__main__": - asyncio.run(main()) -``` +See the [Invoking A2A Agents](./a2a_invoking_agents) guide to learn how to call your agents using: +- **A2A SDK** - Native A2A protocol with full support for tasks and artifacts +- **OpenAI SDK** - Familiar `/chat/completions` interface with `a2a/` model prefix ## Tracking Agent Logs @@ -193,6 +86,120 @@ The logs show: style={{width: '100%', display: 'block', margin: '2rem auto'}} /> + +## Forwarding LiteLLM Context Headers + +When LiteLLM invokes your A2A agent, it sends special headers that enable: +- **Trace Grouping**: All LLM calls from the same agent execution appear under one trace +- **Agent Spend Tracking**: Costs are attributed to the specific agent + +| Header | Purpose | +|--------|---------| +| `X-LiteLLM-Trace-Id` | Links all LLM calls to the same execution flow | +| `X-LiteLLM-Agent-Id` | Attributes spend to the correct agent | + + +To enable these features, your A2A server must **forward these headers** to any LLM calls it makes back to LiteLLM. + +### Implementation Steps + +**Step 1: Extract headers from incoming A2A request** +```python def get_litellm_headers(request) -> dict: + """Extract X-LiteLLM-* headers from incoming A2A request.""" + all_headers = request.call_context.state.get('headers', {}) + return { + k: v for k, v in all_headers.items() + if k.lower().startswith('x-litellm-') + } +``` + +**Step 2: Forward headers to your LLM calls** +Pass the extracted headers when making calls back to LiteLLM: + + + +```python from openai import OpenAI + +headers = get_litellm_headers(request) + +client = OpenAI( + api_key="sk-your-litellm-key", + base_url="http://localhost:4000", + default_headers=headers, # Forward headers +) + +response = client.chat.completions.create( + model="gpt-4o", + messages=[{"role": "user", "content": "Hello"}] +) +``` + + + + +```python +from langchain_openai import ChatOpenAI + +headers = get_litellm_headers(request) + +llm = ChatOpenAI( + model="gpt-4o", + openai_api_key="sk-your-litellm-key", + base_url="http://localhost:4000", + default_headers=headers, # Forward headers +) +``` + + + +```python +import litellm + +headers = get_litellm_headers(request) + +response = litellm.completion( + model="gpt-4o", + messages=[{"role": "user", "content": "Hello"}], + api_base="http://localhost:4000", + extra_headers=headers, # Forward headers +) +``` + + + +```python +import httpx + +headers = get_litellm_headers(request) +headers["Authorization"] = "Bearer sk-your-litellm-key" + +response = httpx.post( + "http://localhost:4000/v1/chat/completions", + headers=headers, + json={"model": "gpt-4o", "messages": [{"role": "user", "content": "Hello"}]} +) +``` + + + +### Result + +With header forwarding enabled, you'll see: + +**Trace Grouping in Langfuse:** + + + +**Agent Spend Attribution:** + + + ## API Reference ### Endpoint diff --git a/docs/my-website/docs/a2a_invoking_agents.md b/docs/my-website/docs/a2a_invoking_agents.md new file mode 100644 index 00000000000..3bb248e4561 --- /dev/null +++ b/docs/my-website/docs/a2a_invoking_agents.md @@ -0,0 +1,280 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Invoking A2A Agents + +Learn how to invoke A2A agents through LiteLLM using different methods. + +:::tip Deploy Your Own A2A Agent + +Want to test with your own agent? Deploy this template A2A agent powered by Google Gemini: + +[**shin-bot-litellm/a2a-gemini-agent**](https://github.com/shin-bot-litellm/a2a-gemini-agent) - Simple deployable A2A agent with streaming support + +::: + +## A2A SDK + +Use the [A2A Python SDK](https://pypi.org/project/a2a-sdk) to invoke agents through LiteLLM using the A2A protocol. + +### Non-Streaming + +This example shows how to: +1. **List available agents** - Query `/v1/agents` to see which agents your key can access +2. **Select an agent** - Pick an agent from the list +3. **Invoke via A2A** - Use the A2A protocol to send messages to the agent + +```python showLineNumbers title="invoke_a2a_agent.py" +from uuid import uuid4 +import httpx +import asyncio +from a2a.client import A2ACardResolver, A2AClient +from a2a.types import MessageSendParams, SendMessageRequest + +# === CONFIGURE THESE === +LITELLM_BASE_URL = "http://localhost:4000" # Your LiteLLM proxy URL +LITELLM_VIRTUAL_KEY = "sk-1234" # Your LiteLLM Virtual Key +# ======================= + +async def main(): + headers = {"Authorization": f"Bearer {LITELLM_VIRTUAL_KEY}"} + + async with httpx.AsyncClient(headers=headers) as client: + # Step 1: List available agents + response = await client.get(f"{LITELLM_BASE_URL}/v1/agents") + agents = response.json() + + print("Available agents:") + for agent in agents: + print(f" - {agent['agent_name']} (ID: {agent['agent_id']})") + + if not agents: + print("No agents available for this key") + return + + # Step 2: Select an agent and invoke it + selected_agent = agents[0] + agent_id = selected_agent["agent_id"] + agent_name = selected_agent["agent_name"] + print(f"\nInvoking: {agent_name}") + + # Step 3: Use A2A protocol to invoke the agent + base_url = f"{LITELLM_BASE_URL}/a2a/{agent_id}" + resolver = A2ACardResolver(httpx_client=client, base_url=base_url) + agent_card = await resolver.get_agent_card() + a2a_client = A2AClient(httpx_client=client, agent_card=agent_card) + + request = SendMessageRequest( + id=str(uuid4()), + params=MessageSendParams( + message={ + "role": "user", + "parts": [{"kind": "text", "text": "Hello, what can you do?"}], + "messageId": uuid4().hex, + } + ), + ) + response = await a2a_client.send_message(request) + print(f"Response: {response.model_dump(mode='json', exclude_none=True, indent=4)}") + +if __name__ == "__main__": + asyncio.run(main()) +``` + +### Streaming + +For streaming responses, use `send_message_streaming`: + +```python showLineNumbers title="invoke_a2a_agent_streaming.py" +from uuid import uuid4 +import httpx +import asyncio +from a2a.client import A2ACardResolver, A2AClient +from a2a.types import MessageSendParams, SendStreamingMessageRequest + +# === CONFIGURE THESE === +LITELLM_BASE_URL = "http://localhost:4000" # Your LiteLLM proxy URL +LITELLM_VIRTUAL_KEY = "sk-1234" # Your LiteLLM Virtual Key +LITELLM_AGENT_NAME = "ij-local" # Agent name registered in LiteLLM +# ======================= + +async def main(): + base_url = f"{LITELLM_BASE_URL}/a2a/{LITELLM_AGENT_NAME}" + headers = {"Authorization": f"Bearer {LITELLM_VIRTUAL_KEY}"} + + async with httpx.AsyncClient(headers=headers) as httpx_client: + # Resolve agent card and create client + resolver = A2ACardResolver(httpx_client=httpx_client, base_url=base_url) + agent_card = await resolver.get_agent_card() + client = A2AClient(httpx_client=httpx_client, agent_card=agent_card) + + # Send a streaming message + request = SendStreamingMessageRequest( + id=str(uuid4()), + params=MessageSendParams( + message={ + "role": "user", + "parts": [{"kind": "text", "text": "Tell me a long story"}], + "messageId": uuid4().hex, + } + ), + ) + + # Stream the response + async for chunk in client.send_message_streaming(request): + print(chunk.model_dump(mode="json", exclude_none=True)) + +if __name__ == "__main__": + asyncio.run(main()) +``` + +## /chat/completions API (OpenAI SDK) + +You can also invoke A2A agents using the familiar OpenAI SDK by using the `a2a/` model prefix. + +### Non-Streaming + + + + +```python showLineNumbers title="openai_non_streaming.py" +import openai + +client = openai.OpenAI( + api_key="sk-1234", # Your LiteLLM Virtual Key + base_url="http://localhost:4000" # Your LiteLLM proxy URL +) + +response = client.chat.completions.create( + model="a2a/my-agent", # Use a2a/ prefix with your agent name + messages=[ + {"role": "user", "content": "Hello, what can you do?"} + ] +) + +print(response.choices[0].message.content) +``` + + + + +```typescript showLineNumbers title="openai_non_streaming.ts" +import OpenAI from 'openai'; + +const client = new OpenAI({ + apiKey: 'sk-1234', // Your LiteLLM Virtual Key + baseURL: 'http://localhost:4000' // Your LiteLLM proxy URL +}); + +const response = await client.chat.completions.create({ + model: 'a2a/my-agent', // Use a2a/ prefix with your agent name + messages: [ + { role: 'user', content: 'Hello, what can you do?' } + ] +}); + +console.log(response.choices[0].message.content); +``` + + + + +```bash showLineNumbers title="curl_non_streaming.sh" +curl -X POST http://localhost:4000/v1/chat/completions \ + -H "Authorization: Bearer sk-1234" \ + -H "Content-Type: application/json" \ + -d '{ + "model": "a2a/my-agent", + "messages": [ + {"role": "user", "content": "Hello, what can you do?"} + ] + }' +``` + + + + +### Streaming + + + + +```python showLineNumbers title="openai_streaming.py" +import openai + +client = openai.OpenAI( + api_key="sk-1234", # Your LiteLLM Virtual Key + base_url="http://localhost:4000" # Your LiteLLM proxy URL +) + +stream = client.chat.completions.create( + model="a2a/my-agent", # Use a2a/ prefix with your agent name + messages=[ + {"role": "user", "content": "Tell me a long story"} + ], + stream=True +) + +for chunk in stream: + if chunk.choices[0].delta.content: + print(chunk.choices[0].delta.content, end="", flush=True) +``` + + + + +```typescript showLineNumbers title="openai_streaming.ts" +import OpenAI from 'openai'; + +const client = new OpenAI({ + apiKey: 'sk-1234', // Your LiteLLM Virtual Key + baseURL: 'http://localhost:4000' // Your LiteLLM proxy URL +}); + +const stream = await client.chat.completions.create({ + model: 'a2a/my-agent', // Use a2a/ prefix with your agent name + messages: [ + { role: 'user', content: 'Tell me a long story' } + ], + stream: true +}); + +for await (const chunk of stream) { + const content = chunk.choices[0]?.delta?.content; + if (content) { + process.stdout.write(content); + } +} +``` + + + + +```bash showLineNumbers title="curl_streaming.sh" +curl -X POST http://localhost:4000/v1/chat/completions \ + -H "Authorization: Bearer sk-1234" \ + -H "Content-Type: application/json" \ + -d '{ + "model": "a2a/my-agent", + "messages": [ + {"role": "user", "content": "Tell me a long story"} + ], + "stream": true + }' +``` + + + + +## Key Differences + +| Method | Use Case | Advantages | +|--------|----------|------------| +| **A2A SDK** | Native A2A protocol integration | • Full A2A protocol support
• Access to task states and artifacts
• Context management | +| **OpenAI SDK** | Familiar OpenAI-style interface | • Drop-in replacement for OpenAI calls
• Easier migration from LLM to agent workflows
• Works with existing OpenAI tooling | + +:::tip Model Prefix + +When using the OpenAI SDK, always prefix your agent name with `a2a/` (e.g., `a2a/my-agent`) to route requests to the A2A agent instead of an LLM provider. + +::: diff --git a/docs/my-website/docs/adding_provider/generic_guardrail_api.md b/docs/my-website/docs/adding_provider/generic_guardrail_api.md index 482dedaa8a9..eb567a69fcb 100644 --- a/docs/my-website/docs/adding_provider/generic_guardrail_api.md +++ b/docs/my-website/docs/adding_provider/generic_guardrail_api.md @@ -93,6 +93,12 @@ Implement `POST /beta/litellm_basic_guardrail_api` "user_api_key_end_user_id": "end user id associated with the litellm virtual key used", "user_api_key_org_id": "org id associated with the litellm virtual key used" }, + "request_headers": { // optional: inbound request headers (allowlist). Allowed headers show their value; all others show "[present]" to indicate the header existed. + "User-Agent": "OpenAI/Python 2.17.0", + "Content-Type": "application/json", + "X-Request-Id": "[present]" + }, + "litellm_version": "1.x.y", // optional: LiteLLM library version running this proxy "input_type": "request", // "request" or "response" "litellm_call_id": "unique_call_id", // the call id of the individual LLM call "litellm_trace_id": "trace_id", // the trace id of the LLM call - useful if there are multiple LLM calls for the same conversation @@ -231,6 +237,7 @@ litellm_settings: mode: pre_call # or post_call, during_call api_base: https://your-guardrail-api.com api_key: os.environ/YOUR_GUARDRAIL_API_KEY # optional + unreachable_fallback: fail_closed # default: fail_closed. Set to fail_open to proceed if the guardrail endpoint is unreachable (network errors, or HTTP 502/503/504 from an upstream proxy/LB). additional_provider_specific_params: # your custom parameters threshold: 0.8 diff --git a/docs/my-website/docs/adding_provider/generic_prompt_management_api.md b/docs/my-website/docs/adding_provider/generic_prompt_management_api.md new file mode 100644 index 00000000000..d1b119d94c5 --- /dev/null +++ b/docs/my-website/docs/adding_provider/generic_prompt_management_api.md @@ -0,0 +1,576 @@ +# [BETA] Generic Prompt Management API - Integrate Without a PR + +## The Problem + +As a prompt management provider, integrating with LiteLLM traditionally requires: +- Making a PR to the LiteLLM repository +- Waiting for review and merge +- Maintaining provider-specific code in LiteLLM's codebase +- Updating the integration for changes to your API + +## The Solution + +The **Generic Prompt Management API** lets you integrate with LiteLLM **instantly** by implementing a simple API endpoint. No PR required. + +### Key Benefits + +1. **No PR Needed** - Deploy and integrate immediately +3. **Simple Contract** - One GET endpoint, standard JSON response +4. **Variable Substitution** - Support for prompt variables with `{variable}` syntax +5. **Custom Parameters** - Pass provider-specific query params via config +6. **Full Control** - You own and maintain your prompt management API +7. **Model & Parameters Override** - Optionally override model and parameters from your prompts + +## Get Started in 3 Steps + +### Step 1: Configure LiteLLM + +Add to your `config.yaml`: + +```yaml +prompts: + - prompt_id: "simple_prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + api_base: http://localhost:8080 + api_key: os.environ/YOUR_API_KEY +``` + +### Step 2: Implement Your API Endpoint + +```python +from fastapi import FastAPI +from pydantic import BaseModel + +app = FastAPI() + +@app.get("/beta/litellm_prompt_management") +async def get_prompt(prompt_id: str): + return { + "prompt_id": prompt_id, + "prompt_template": [ + {"role": "system", "content": "You are a helpful assistant."}, + {"role": "user", "content": "Help me with {task}"} + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": {"temperature": 0.7} + } +``` + +### Step 3: Use in Your App + +```python +from litellm import completion + +response = completion( + model="gpt-4", + prompt_id="simple_prompt", + prompt_variables={"task": "data analysis"}, + messages=[{"role": "user", "content": "I have sales data"}] +) +``` + +That's it! LiteLLM fetches your prompt, applies variables, and makes the request + +## API Contract + +### Endpoint + +Implement `GET /beta/litellm_prompt_management` + +### Request Format + +Your endpoint will receive a GET request with query parameters: + +``` +GET /beta/litellm_prompt_management?prompt_id={prompt_id}&{custom_params} +``` + +**Query Parameters:** +- `prompt_id` (required): The ID of the prompt to fetch +- Custom parameters: Any additional parameters you configured in `provider_specific_query_params` + +**Example:** +``` +GET /beta/litellm_prompt_management?prompt_id=hello-world-prompt-2bac&project_name=litellm&slug=hello-world-prompt-2bac +``` + +### Response Format + +```json +{ + "prompt_id": "hello-world-prompt-2bac", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant specialized in {domain}." + }, + { + "role": "user", + "content": "Help me with {task}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.7, + "max_tokens": 500, + "top_p": 0.9 + } +} +``` + +**Response Fields:** +- `prompt_id` (string, required): The ID of the prompt +- `prompt_template` (array, required): Array of OpenAI-format messages with optional `{variable}` placeholders +- `prompt_template_model` (string, optional): Model to use for this prompt (overrides client model unless `ignore_prompt_manager_model: true`) +- `prompt_template_optional_params` (object, optional): Additional parameters like temperature, max_tokens, etc. (merged with client params unless `ignore_prompt_manager_optional_params: true`) + +## LiteLLM Configuration + +Add to `config.yaml`: + +```yaml +model_list: + - model_name: gpt-3.5-turbo + litellm_params: + model: openai/gpt-3.5-turbo + api_key: os.environ/OPENAI_API_KEY + +prompts: + - prompt_id: "simple_prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + provider_specific_query_params: + project_name: litellm + slug: hello-world-prompt-2bac + api_base: http://localhost:8080 + api_key: os.environ/YOUR_PROMPT_API_KEY # optional + ignore_prompt_manager_model: true # optional, keep client's model + ignore_prompt_manager_optional_params: true # optional, don't merge prompt manager's params (e.g. temperature, max_tokens, etc.) +``` + +### Configuration Parameters + +- `prompt_integration`: Must be `"generic_prompt_management"` +- `provider_specific_query_params`: Custom query parameters sent to your API (optional) +- `api_base`: Base URL of your prompt management API +- `api_key`: Optional API key for authentication (sent as `Bearer` token) +- `ignore_prompt_manager_model`: If `true`, use the model specified by client instead of prompt's model (default: `false`) +- `ignore_prompt_manager_optional_params`: If `true`, don't merge prompt's optional params with client params (default: `false`) + +## Usage + +### Using with LiteLLM SDK + +**Basic usage with prompt ID:** + +```python +from litellm import completion + +response = completion( + model="gpt-4", + prompt_id="simple_prompt", + messages=[{"role": "user", "content": "Additional message"}] +) +``` + +**With prompt variables:** + +```python +response = completion( + model="gpt-4", + prompt_id="simple_prompt", + prompt_variables={ + "domain": "data science", + "task": "analyzing customer churn" + }, + messages=[{"role": "user", "content": "Please provide a detailed analysis"}] +) +``` + +The prompt template will have `{domain}` replaced with "data science" and `{task}` replaced with "analyzing customer churn". + +### Using with LiteLLM Proxy + +**1. Start the proxy with your config:** + +```bash +litellm --config /path/to/config.yaml +``` + +**2. Make requests with prompt_id:** + +```bash +curl http://0.0.0.0:4000/v1/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer sk-1234" \ + -d '{ + "model": "gpt-4", + "prompt_id": "simple_prompt", + "prompt_variables": { + "domain": "healthcare", + "task": "patient risk assessment" + }, + "messages": [ + {"role": "user", "content": "Analyze the following data..."} + ] + }' +``` + +**3. Using with OpenAI SDK:** + +```python +from openai import OpenAI + +client = OpenAI( + base_url="http://0.0.0.0:4000", + api_key="sk-1234" +) + +response = client.chat.completions.create( + model="gpt-4", + messages=[ + {"role": "user", "content": "Analyze the data"} + ], + extra_body={ + "prompt_id": "simple_prompt", + "prompt_variables": { + "domain": "finance", + "task": "fraud detection" + } + } +) +``` + +## Implementation Example + +See [mock_prompt_management_server.py](https://github.com/BerriAI/litellm/blob/main/cookbook/mock_prompt_management_server/mock_prompt_management_server.py) for a complete reference implementation with multiple example prompts, authentication, and convenience endpoints. + +**Minimal FastAPI example:** + +```python +from fastapi import FastAPI, HTTPException, Header +from typing import Optional, Dict, Any, List +from pydantic import BaseModel + +app = FastAPI() + +# In-memory prompt storage (replace with your database) +PROMPTS = { + "hello-world-prompt": { + "prompt_id": "hello-world-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant specialized in {domain}." + }, + { + "role": "user", + "content": "Help me with: {task}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.7, + "max_tokens": 500 + } + }, + "code-review-prompt": { + "prompt_id": "code-review-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are an expert code reviewer. Review code for {language}." + }, + { + "role": "user", + "content": "Review the following code:\n\n{code}" + } + ], + "prompt_template_model": "gpt-4-turbo", + "prompt_template_optional_params": { + "temperature": 0.3, + "max_tokens": 1000 + } + } +} + +class PromptResponse(BaseModel): + prompt_id: str + prompt_template: List[Dict[str, str]] + prompt_template_model: Optional[str] = None + prompt_template_optional_params: Optional[Dict[str, Any]] = None + +@app.get("/beta/litellm_prompt_management", response_model=PromptResponse) +async def get_prompt( + prompt_id: str, + authorization: Optional[str] = Header(None), + project_name: Optional[str] = None, + slug: Optional[str] = None, +): + """ + Get a prompt by ID with optional filtering by project_name and slug. + + Args: + prompt_id: The ID of the prompt to fetch + authorization: Optional Bearer token for authentication + project_name: Optional project name filter + slug: Optional slug filter + """ + + # Optional: Validate authorization + if authorization: + token = authorization.replace("Bearer ", "") + # Validate your token here + if not is_valid_token(token): + raise HTTPException(status_code=401, detail="Invalid API key") + + # Optional: Apply additional filtering based on custom params + if project_name or slug: + # You can use these parameters to filter or validate access + # For example, check if the user has access to this project + pass + + # Fetch the prompt from your storage + if prompt_id not in PROMPTS: + raise HTTPException( + status_code=404, + detail=f"Prompt '{prompt_id}' not found" + ) + + prompt_data = PROMPTS[prompt_id] + + return PromptResponse(**prompt_data) + +def is_valid_token(token: str) -> bool: + """Validate API token - implement your logic here""" + # Example: Check against your database or secret store + valid_tokens = ["your-secret-token", "another-valid-token"] + return token in valid_tokens + +# Optional: Health check endpoint +@app.get("/health") +async def health_check(): + return {"status": "healthy"} + +# Optional: List all prompts endpoint +@app.get("/prompts") +async def list_prompts(authorization: Optional[str] = Header(None)): + """List all available prompts""" + if authorization: + token = authorization.replace("Bearer ", "") + if not is_valid_token(token): + raise HTTPException(status_code=401, detail="Invalid API key") + + return { + "prompts": [ + {"prompt_id": pid, "model": p.get("prompt_template_model")} + for pid, p in PROMPTS.items() + ] + } + +if __name__ == "__main__": + import uvicorn + uvicorn.run(app, host="0.0.0.0", port=8080) +``` + +### Running the Example Server + +1. Install dependencies: +```bash +pip install fastapi uvicorn +``` + +2. Save the code above to `prompt_server.py` + +3. Run the server: +```bash +python prompt_server.py +``` + +4. Test the endpoint: +```bash +curl "http://localhost:8080/beta/litellm_prompt_management?prompt_id=hello-world-prompt&project_name=litellm&slug=hello-world-prompt-2bac" +``` + +Expected response: +```json +{ + "prompt_id": "hello-world-prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant specialized in {domain}." + }, + { + "role": "user", + "content": "Help me with: {task}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.7, + "max_tokens": 500 + } +} +``` + +## Advanced Features + +### Variable Substitution + +LiteLLM automatically substitutes variables in your prompt templates using the `{variable}` syntax. Both `{variable}` and `{{variable}}` formats are supported. + +**Example prompt template:** +```json +{ + "prompt_template": [ + { + "role": "system", + "content": "You are an expert in {domain} with {years} years of experience." + } + ] +} +``` + +**Client request:** +```python +completion( + model="gpt-4", + prompt_id="expert_prompt", + prompt_variables={ + "domain": "machine learning", + "years": "10" + } +) +``` + +**Result:** +``` +"You are an expert in machine learning with 10 years of experience." +``` + +### Caching + +LiteLLM automatically caches fetched prompts in memory. The cache key includes: +- `prompt_id` +- `prompt_label` (if provided) +- `prompt_version` (if provided) + +This means your API endpoint is only called once per unique prompt configuration. + +### Model Override Behavior + +**Default behavior (without `ignore_prompt_manager_model`):** +```yaml +prompts: + - prompt_id: "my_prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + api_base: http://localhost:8080 +``` + +If your API returns `"prompt_template_model": "gpt-4"`, LiteLLM will use `gpt-4` regardless of what the client specified. + +**With `ignore_prompt_manager_model: true`:** +```yaml +prompts: + - prompt_id: "my_prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + api_base: http://localhost:8080 + ignore_prompt_manager_model: true +``` + +LiteLLM will use the model specified by the client, ignoring the prompt's model. + +### Parameter Merging Behavior + +**Default behavior (without `ignore_prompt_manager_optional_params`):** + +Client params are merged with prompt params, with prompt params taking precedence: +```python +# Prompt returns: {"temperature": 0.7, "max_tokens": 500} +# Client sends: {"temperature": 0.9, "top_p": 0.95} +# Final params: {"temperature": 0.7, "max_tokens": 500, "top_p": 0.95} +``` + +**With `ignore_prompt_manager_optional_params: true`:** + +Only client params are used: +```python +# Prompt returns: {"temperature": 0.7, "max_tokens": 500} +# Client sends: {"temperature": 0.9, "top_p": 0.95} +# Final params: {"temperature": 0.9, "top_p": 0.95} +``` + +## Security Considerations + +1. **Authentication**: Use the `api_key` parameter to secure your prompt management API +2. **Authorization**: Implement team/user-based access control using the custom query parameters +3. **Rate Limiting**: Add rate limiting to prevent abuse of your API +4. **Input Validation**: Validate all query parameters before processing +5. **HTTPS**: Always use HTTPS in production for encrypted communication +6. **Secrets**: Store API keys in environment variables, not in config files + +## Use Cases + +✅ **Use Generic Prompt Management API when:** +- You want instant integration without waiting for PRs +- You maintain your own prompt management service +- You need full control over prompt versioning and updates +- You want to build custom prompt management features +- You need to integrate with your internal systems + +✅ **Common scenarios:** +- Internal prompt management system for your organization +- Multi-tenant prompt management with team-based access control +- A/B testing different prompt versions +- Prompt experimentation and analytics +- Integration with existing prompt engineering workflows + +## When to Use This + +✅ **Use Generic Prompt Management API when:** +- You want instant integration without waiting for PRs +- You maintain your own prompt management service +- You need full control over updates and features +- You want custom prompt storage and versioning logic + +❌ **Make a PR when:** +- You want deeper integration with LiteLLM internals +- Your integration requires complex LiteLLM-specific logic +- You want to be featured as a built-in provider +- You're building a reusable integration for the community + +## Troubleshooting + +### Prompt not found +- Verify the `prompt_id` matches exactly (case-sensitive) +- Check that your API endpoint is accessible from LiteLLM +- Verify authentication if using `api_key` + +### Variables not substituted +- Ensure variables use `{variable}` or `{{variable}}` syntax +- Check that variable names in `prompt_variables` match template exactly +- Variables are case-sensitive + +### Model not being overridden +- Check if `ignore_prompt_manager_model: true` is set in config +- Verify your API is returning `prompt_template_model` in the response + +### Parameters not being applied +- Check if `ignore_prompt_manager_optional_params: true` is set +- Verify your API is returning `prompt_template_optional_params` +- Ensure parameter names match OpenAI's parameter names + +## Questions? + +This is a **beta API**. We're actively improving it based on feedback. Open an issue or PR if you need additional capabilities. + +## Related Documentation + +- [Prompt Management Overview](../proxy/prompt_management.md) +- [Generic Guardrail API](./generic_guardrail_api.md) +- [LiteLLM Proxy Setup](../proxy/quick_start.md) + diff --git a/docs/my-website/docs/adding_provider/simple_guardrail_tutorial.md b/docs/my-website/docs/adding_provider/simple_guardrail_tutorial.md index 9c654cd1560..884a7397bde 100644 --- a/docs/my-website/docs/adding_provider/simple_guardrail_tutorial.md +++ b/docs/my-website/docs/adding_provider/simple_guardrail_tutorial.md @@ -101,12 +101,11 @@ model_list: - model_name: gpt-4 litellm_params: model: gpt-4 - api_key: os.environ/OPENAI_API_KEY + api_key: os.environ/OPENAI_API_KEY -litellm_settings: - guardrails: +guardrails: - guardrail_name: my_guardrail - litellm_params: + litellm_params: guardrail: my_guardrail mode: during_call api_key: os.environ/MY_GUARDRAIL_API_KEY diff --git a/docs/my-website/docs/benchmarks.md b/docs/my-website/docs/benchmarks.md index 640212808bd..1f818cef498 100644 --- a/docs/my-website/docs/benchmarks.md +++ b/docs/my-website/docs/benchmarks.md @@ -5,6 +5,13 @@ import Image from '@theme/IdealImage'; Benchmarks for LiteLLM Gateway (Proxy Server) tested against a fake OpenAI endpoint. +## Setting Up a Fake OpenAI Endpoint + +For load testing and benchmarking, you can use a fake OpenAI proxy server. LiteLLM provides: + +1. **Hosted endpoint**: Use our free hosted fake endpoint at `https://exampleopenaiendpoint-production.up.railway.app/` +2. **Self-hosted**: Set up your own fake OpenAI proxy server using [github.com/BerriAI/example_openai_endpoint](https://github.com/BerriAI/example_openai_endpoint) + Use this config for testing: ```yaml @@ -12,7 +19,7 @@ model_list: - model_name: "fake-openai-endpoint" litellm_params: model: openai/any - api_base: https://your-fake-openai-endpoint.com/chat/completions + api_base: https://exampleopenaiendpoint-production.up.railway.app/ # or your self-hosted endpoint api_key: "test" ``` @@ -48,6 +55,28 @@ In these tests the baseline latency characteristics are measured against a fake- - High-percentile latencies drop significantly: P95 630 ms → 150 ms, P99 1,200 ms → 240 ms. - Setting workers equal to CPU count gives optimal performance. +## `/realtime` API Benchmarks + +End-to-end latency benchmarks for the `/realtime` endpoint tested against a fake realtime endpoint. + +### Performance Metrics + +| Metric | Value | +| --------------- | ---------- | +| Median latency | 59 ms | +| p95 latency | 67 ms | +| p99 latency | 99 ms | +| Average latency | 63 ms | +| RPS | 1,207 | + +### Test Setup + +| Category | Specification | +|----------|---------------| +| **Load Testing** | Locust: 1,000 concurrent users, 500 ramp-up | +| **System** | 4 vCPUs, 8 GB RAM, 4 workers, 4 instances | +| **Database** | PostgreSQL (Redis unused) | + ## Machine Spec used for testing Each machine deploying LiteLLM had the following specs: diff --git a/docs/my-website/docs/completion/message_sanitization.md b/docs/my-website/docs/completion/message_sanitization.md new file mode 100644 index 00000000000..17482c59339 --- /dev/null +++ b/docs/my-website/docs/completion/message_sanitization.md @@ -0,0 +1,465 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Message Sanitization for Tool Calling for anthropic models + +**Automatically fix common message formatting issues when using tool calling with `modify_params=True`** + +LiteLLM can automatically sanitize messages to handle common issues that occur during tool calling workflows, especially when using OpenAI-compatible clients with providers that have strict message format requirements (like Anthropic Claude). + +## Overview + +When `litellm.modify_params = True` is enabled, LiteLLM automatically sanitizes messages to fix three common issues: + +1. **Orphaned Tool Calls** - Assistant messages with tool_calls but missing tool results +2. **Orphaned Tool Results** - Tool messages that reference non-existent tool_call_ids +3. **Empty Message Content** - Messages with empty or whitespace-only text content + +This ensures your tool calling workflows work seamlessly across different LLM providers without manual message validation. + +## Why Message Sanitization? + +Different LLM providers have varying requirements for message formats, especially during tool calling: + +- **Anthropic Claude** requires every tool_call to have a corresponding tool result +- Some providers reject messages with empty content +- OpenAI-compatible clients may not always maintain perfect message consistency + +Without sanitization, these issues cause API errors that interrupt your workflows. With `modify_params=True`, LiteLLM handles these edge cases automatically. + +## Quick Start + + + + +```python +import litellm + +# Enable automatic message sanitization +litellm.modify_params = True + +# This will work even if messages have formatting issues +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=[ + {"role": "user", "content": "What's the weather in Boston?"}, + { + "role": "assistant", + "tool_calls": [ + { + "id": "call_123", + "type": "function", + "function": {"name": "get_weather", "arguments": '{"city": "Boston"}'} + } + ] + # Missing tool result - LiteLLM will add a dummy result automatically + }, + {"role": "user", "content": "Thanks!"} + ], + tools=[{ + "type": "function", + "function": { + "name": "get_weather", + "description": "Get weather for a city", + "parameters": { + "type": "object", + "properties": {"city": {"type": "string"}}, + "required": ["city"] + } + } + }] +) +``` + + + + +```yaml +litellm_settings: + modify_params: true # Enable automatic message sanitization + +model_list: + - model_name: claude-3-5-sonnet + litellm_params: + model: anthropic/claude-3-5-sonnet-20241022 +``` + + + + +## Sanitization Cases + +### Case A: Orphaned Tool Calls (Missing Tool Results) + +**Problem:** An assistant message contains `tool_calls`, but no corresponding tool result messages follow. + +**Solution:** LiteLLM automatically adds dummy tool result messages for any missing tool results. + +**Example:** + +```python +import litellm +litellm.modify_params = True + +# Messages with orphaned tool calls +messages = [ + {"role": "user", "content": "Search for Python tutorials"}, + { + "role": "assistant", + "tool_calls": [ + { + "id": "call_abc123", + "type": "function", + "function": {"name": "web_search", "arguments": '{"query": "Python tutorials"}'} + } + ] + }, + # Missing tool result here! + {"role": "user", "content": "What about JavaScript?"} +] + +# LiteLLM automatically adds: +# { +# "role": "tool", +# "tool_call_id": "call_abc123", +# "content": "[System: Tool execution skipped/interrupted by user. No result provided for tool 'web_search'.]" +# } + +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages, + tools=[...] +) +``` + +**When this happens:** +- User interrupts tool execution +- Client loses tool results due to network issues +- Conversation flow changes before tool completes +- Multi-turn conversations where tools are optional + +### Case B: Orphaned Tool Results (Invalid tool_call_id) + +**Problem:** A tool message references a `tool_call_id` that doesn't exist in any previous assistant message. + +**Solution:** LiteLLM automatically removes these orphaned tool result messages. + +**Example:** + +```python +import litellm +litellm.modify_params = True + +# Messages with orphaned tool result +messages = [ + {"role": "user", "content": "Hello"}, + {"role": "assistant", "content": "Hi! How can I help?"}, + { + "role": "tool", + "tool_call_id": "call_nonexistent", # This tool_call_id doesn't exist! + "content": "Some result" + } +] + +# LiteLLM automatically removes the orphaned tool message + +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages +) +``` + +**When this happens:** +- Message history is manually edited +- Tool results are duplicated or mismatched +- Conversation state is restored incorrectly +- Messages are merged from different conversations + +### Case C: Empty Message Content + +**Problem:** User or assistant messages have empty or whitespace-only content. + +**Solution:** LiteLLM replaces empty content with a system placeholder message. + +**Example:** + +```python +import litellm +litellm.modify_params = True + +# Messages with empty content +messages = [ + {"role": "user", "content": ""}, # Empty content + {"role": "assistant", "content": " "}, # Whitespace only +] + +# LiteLLM automatically replaces with: +# {"role": "user", "content": "[System: Empty message content sanitised to satisfy protocol]"} +# {"role": "assistant", "content": "[System: Empty message content sanitised to satisfy protocol]"} + +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages +) +``` + +**When this happens:** +- UI sends empty messages +- Content is stripped during preprocessing +- Placeholder messages in conversation history +- Edge cases in message construction + +## Configuration + +### Enable Globally + + + + +```python +import litellm + +# Enable for all completion calls +litellm.modify_params = True +``` + + + + +```yaml +litellm_settings: + modify_params: true +``` + + + + +```bash +export LITELLM_MODIFY_PARAMS=True +``` + + + + +### Enable Per-Request + +```python +import litellm + +# Enable only for specific requests +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages, + modify_params=True # Override global setting +) +``` + +## Supported Providers + +Message sanitization currently works with: + +- ✅ Anthropic (Claude) + +**Note:** While the sanitization logic is provider-agnostic, it is currently only applied in the Anthropic message transformation pipeline. Support for additional providers may be added in future releases. + +## Implementation Details + +### How It Works + +The message sanitization process runs **before** messages are converted to provider-specific formats: + +1. **Input:** OpenAI-format messages with potential issues +2. **Sanitization:** Three helper functions process the messages: + - `_sanitize_empty_text_content()` - Fixes empty content + - `_add_missing_tool_results()` - Adds dummy tool results + - `_is_orphaned_tool_result()` - Identifies orphaned results +3. **Output:** Clean, provider-compatible messages + +### Code Reference + +The sanitization logic is implemented in: +- `litellm/litellm_core_utils/prompt_templates/factory.py` +- Function: `sanitize_messages_for_tool_calling()` + +### Logging + +When sanitization occurs, LiteLLM logs debug messages: + +```python +import litellm +litellm.set_verbose = True # Enable debug logging + +# You'll see logs like: +# "_add_missing_tool_results: Found 1 orphaned tool calls. Adding dummy tool results." +# "_is_orphaned_tool_result: Found orphaned tool result with tool_call_id=call_123" +# "_sanitize_empty_text_content: Replaced empty text content in user message" +``` + +## Best Practices + +### 1. Enable for Production Workflows + +```python +# Recommended for production +litellm.modify_params = True + +# Ensures robust handling of edge cases +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages, + tools=tools +) +``` + +### 2. Preserve Tool Results When Possible + +While sanitization handles missing tool results, it's better to provide actual results: + +```python +# Good: Provide actual tool results +messages = [ + {"role": "user", "content": "Search for Python"}, + {"role": "assistant", "tool_calls": [...]}, + {"role": "tool", "tool_call_id": "call_123", "content": "Actual search results"} +] + +# Fallback: Sanitization adds dummy result if missing +messages = [ + {"role": "user", "content": "Search for Python"}, + {"role": "assistant", "tool_calls": [...]}, + # Missing tool result - sanitization adds dummy +] +``` + +### 3. Monitor Sanitization Events + +Use logging to track when sanitization occurs: + +```python +import litellm +import logging + +# Enable debug logging +litellm.set_verbose = True +logging.basicConfig(level=logging.DEBUG) + +# Track sanitization events in your application +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=messages +) +``` + +### 4. Test Edge Cases + +Ensure your application handles sanitized messages correctly: + +```python +import litellm +litellm.modify_params = True + +# Test orphaned tool calls +test_messages = [ + {"role": "user", "content": "Test"}, + {"role": "assistant", "tool_calls": [{"id": "call_1", "type": "function", "function": {"name": "test", "arguments": "{}"}}]}, + {"role": "user", "content": "Continue"} # No tool result +] + +response = litellm.completion( + model="anthropic/claude-3-5-sonnet-20241022", + messages=test_messages, + tools=[...] +) + +# Verify the response handles the dummy tool result appropriately +``` + +## Related Features + +- **[Drop Params](./drop_params.md)** - Drop unsupported parameters for specific providers +- **[Message Trimming](./message_trimming.md)** - Trim messages to fit token limits +- **[Function Calling](./function_call.md)** - Complete guide to tool/function calling +- **[Reasoning Content](../reasoning_content.md)** - Extended thinking with tool calling + +## Troubleshooting + +### Sanitization Not Working + +**Issue:** Messages still cause errors despite `modify_params=True` + +**Solution:** +1. Verify `modify_params` is enabled: + ```python + import litellm + print(litellm.modify_params) # Should be True + ``` + +2. Check if the issue is provider-specific: + ```python + litellm.set_verbose = True # Enable debug logging + ``` + +3. Ensure you're using a recent version of LiteLLM: + ```bash + pip install --upgrade litellm + ``` + +### Unexpected Dummy Tool Results + +**Issue:** Dummy tool results appear when you expect actual results + +**Cause:** Tool result messages are missing or have incorrect `tool_call_id` + +**Solution:** +1. Verify tool result messages have correct `tool_call_id`: + ```python + # Correct + {"role": "tool", "tool_call_id": "call_123", "content": "result"} + + # Incorrect - will be treated as orphaned + {"role": "tool", "tool_call_id": "wrong_id", "content": "result"} + ``` + +2. Ensure tool results immediately follow assistant messages with tool_calls + +### Performance Impact + +**Issue:** Concerned about performance overhead + +**Details:** Message sanitization has minimal performance impact: +- Runs in O(n) time where n = number of messages +- Only processes messages when `modify_params=True` +- Typically adds < 1ms to request processing time + +## FAQ + +**Q: Does sanitization modify my original messages?** + +A: No, sanitization creates a new list of messages. Your original messages remain unchanged. + +**Q: Can I disable specific sanitization cases?** + +A: Currently, all three cases are handled together when `modify_params=True`. To disable sanitization entirely, set `modify_params=False`. + +**Q: What happens to the dummy tool results?** + +A: Dummy tool results are sent to the LLM provider along with other messages. The model sees them as regular tool results with informative error messages. + +**Q: Does this work with streaming?** + +A: Yes, message sanitization works with both streaming and non-streaming requests. + +**Q: Is this related to `drop_params`?** + +A: No, they're separate features: +- `modify_params` - Modifies/fixes message content and structure +- `drop_params` - Removes unsupported API parameters + +Both can be enabled simultaneously. + +## See Also + +- [Reasoning Content with Tool Calling](../reasoning_content.md) +- [Function Calling Guide](./function_call.md) +- [Bedrock Provider Documentation](../providers/bedrock.md) +- [Anthropic Provider Documentation](../providers/anthropic.md) diff --git a/docs/my-website/docs/completion/web_search.md b/docs/my-website/docs/completion/web_search.md index db50c7b5bc5..1f5ba2dee4e 100644 --- a/docs/my-website/docs/completion/web_search.md +++ b/docs/my-website/docs/completion/web_search.md @@ -18,16 +18,46 @@ Each provider uses their own search backend: | Provider | Search Engine | Notes | |----------|---------------|-------| -| **OpenAI** (`gpt-4o-search-preview`) | OpenAI's internal search | Real-time web data | +| **OpenAI** (`gpt-5-search-api`, `gpt-4o-search-preview`, `gpt-4o-mini-search-preview`) | OpenAI's internal search | Real-time web data | | **xAI** (`grok-3`) | xAI's search + X/Twitter | Real-time social media data | | **Google AI/Vertex** (`gemini-2.0-flash`) | **Google Search** | Uses actual Google search results | | **Anthropic** (`claude-3-5-sonnet`) | Anthropic's web search | Real-time web data | | **Perplexity** | Perplexity's search engine | AI-powered search and reasoning | +:::warning Important: Only Search Models Support `web_search_options` +For OpenAI, only dedicated search models support the `web_search_options` parameter: +- `gpt-4o-search-preview` +- `gpt-4o-mini-search-preview` +- `gpt-5-search-api` + +**Regular models like `gpt-5`, `gpt-4.1`, `gpt-4o` do not support `web_search_options`** +::: + +:::tip The `web_search_options` parameter is optional +Search models (like `gpt-4o-search-preview`) **automatically search the web** even without the `web_search_options` parameter. + +Use `web_search_options` when you need to: +- Adjust `search_context_size` (`"low"`, `"medium"`, `"high"`) +- Specify `user_location` for localized results +::: + :::info **Anthropic Web Search Models**: Claude models that support web search: `claude-3-5-sonnet-latest`, `claude-3-5-sonnet-20241022`, `claude-3-5-haiku-latest`, `claude-3-5-haiku-20241022`, `claude-3-7-sonnet-20250219` ::: +## OpenAI Web Search: Two Approaches + +OpenAI offers two distinct ways to use web search depending on the endpoint and model: + +| Approach | Endpoint | Models | How to enable | +|----------|----------|--------|---------------| +| **Search Models** | `/chat/completions` | `gpt-5-search-api`, `gpt-4o-search-preview`, `gpt-4o-mini-search-preview` | Pass `web_search_options` parameter | +| **Web Search Tool** | `/responses` | `gpt-5`, `gpt-4.1`, `gpt-4o`, and other regular models | Pass `web_search_preview` tool | + +:::tip Search models search automatically +Search models like `gpt-5-search-api` **automatically search the web** even without the `web_search_options` parameter. Use `web_search_options` to set `search_context_size` (`"low"`, `"medium"`, `"high"`) or specify `user_location` for localized results. +::: + ## `/chat/completions` (litellm.completion) ### Quick Start @@ -39,7 +69,7 @@ Each provider uses their own search backend: from litellm import completion response = completion( - model="openai/gpt-4o-search-preview", + model="openai/gpt-5-search-api", messages=[ { "role": "user", @@ -59,31 +89,36 @@ response = completion( ```yaml model_list: - # OpenAI + # OpenAI search models + - model_name: gpt-5-search-api + litellm_params: + model: openai/gpt-5-search-api + api_key: os.environ/OPENAI_API_KEY + - model_name: gpt-4o-search-preview litellm_params: model: openai/gpt-4o-search-preview api_key: os.environ/OPENAI_API_KEY - + # xAI - model_name: grok-3 litellm_params: model: xai/grok-3 api_key: os.environ/XAI_API_KEY - + # Anthropic - model_name: claude-3-5-sonnet-latest litellm_params: model: anthropic/claude-3-5-sonnet-latest api_key: os.environ/ANTHROPIC_API_KEY - + # VertexAI - model_name: gemini-2-flash litellm_params: model: gemini-2.0-flash vertex_project: your-project-id vertex_location: us-central1 - + # Google AI Studio - model_name: gemini-2-flash-studio litellm_params: @@ -91,13 +126,13 @@ model_list: api_key: os.environ/GOOGLE_API_KEY ``` -2. Start the proxy +2. Start the proxy ```bash litellm --config /path/to/config.yaml ``` -3. Test it! +3. Test it! ```python showLineNumbers from openai import OpenAI @@ -109,13 +144,18 @@ client = OpenAI( ) response = client.chat.completions.create( - model="grok-3", # or any other web search enabled model + model="gpt-5-search-api", # or any other web search enabled model messages=[ { "role": "user", "content": "What was a positive news story from today?" } - ] + ], + extra_body={ + "web_search_options": { + "search_context_size": "medium" + } + } ) ``` @@ -132,7 +172,7 @@ from litellm import completion # Customize search context size response = completion( - model="openai/gpt-4o-search-preview", + model="openai/gpt-5-search-api", messages=[ { "role": "user", @@ -240,6 +280,12 @@ response = client.chat.completions.create( ## `/responses` (litellm.responses) +Use the `web_search_preview` tool with models like `gpt-5`, `gpt-4.1`, `gpt-4o`, etc. + +:::info +Search-dedicated models like `gpt-5-search-api` and `gpt-4o-search-preview` do **not** support the `/responses` endpoint. Use them with `/chat/completions` + `web_search_options` instead (see above). +::: + ### Quick Start @@ -249,18 +295,14 @@ response = client.chat.completions.create( from litellm import responses response = responses( - model="openai/gpt-4o", - input=[ - { - "role": "user", - "content": "What was a positive news story from today?" - } - ], + model="openai/gpt-5", + input="What is the capital of France?", tools=[{ "type": "web_search_preview" # enables web search with default medium context size }] ) ``` + @@ -268,19 +310,24 @@ response = responses( ```yaml model_list: - - model_name: gpt-4o + - model_name: gpt-5 litellm_params: - model: openai/gpt-4o + model: openai/gpt-5 + api_key: os.environ/OPENAI_API_KEY + + - model_name: gpt-4.1 + litellm_params: + model: openai/gpt-4.1 api_key: os.environ/OPENAI_API_KEY ``` -2. Start the proxy +2. Start the proxy ```bash litellm --config /path/to/config.yaml ``` -3. Test it! +3. Test it! ```python showLineNumbers from openai import OpenAI @@ -292,11 +339,11 @@ client = OpenAI( ) response = client.responses.create( - model="gpt-4o", + model="gpt-5", tools=[{ "type": "web_search_preview" }], - input="What was a positive news story from today?", + input="What is the capital of France?", ) print(response.output_text) @@ -314,13 +361,8 @@ from litellm import responses # Customize search context size response = responses( - model="openai/gpt-4o", - input=[ - { - "role": "user", - "content": "What was a positive news story from today?" - } - ], + model="openai/gpt-5", + input="What is the capital of France?", tools=[{ "type": "web_search_preview", "search_context_size": "low" # Options: "low", "medium" (default), "high" @@ -341,12 +383,12 @@ client = OpenAI( # Customize search context size response = client.responses.create( - model="gpt-4o", + model="gpt-5", tools=[{ "type": "web_search_preview", "search_context_size": "low" # Options: "low", "medium" (default), "high" }], - input="What was a positive news story from today?", + input="What is the capital of France?", ) print(response.output_text) @@ -400,14 +442,14 @@ model_list: web_search_options: search_context_size: "high" # Options: "low", "medium", "high" - # Different context size for different models - - model_name: gpt-4o-search-preview + # OpenAI search model with custom context size + - model_name: gpt-5-search-api litellm_params: - model: openai/gpt-4o-search-preview + model: openai/gpt-5-search-api api_key: os.environ/OPENAI_API_KEY web_search_options: search_context_size: "low" - + # Gemini with medium context (default) - model_name: gemini-2-flash litellm_params: @@ -432,6 +474,7 @@ Use `litellm.supports_web_search(model="model_name")` -> returns `True` if model ```python showLineNumbers # Check OpenAI models +assert litellm.supports_web_search(model="openai/gpt-5-search-api") == True assert litellm.supports_web_search(model="openai/gpt-4o-search-preview") == True # Check xAI models @@ -455,13 +498,20 @@ assert litellm.supports_web_search(model="gemini/gemini-2.0-flash") == True ```yaml model_list: # OpenAI + - model_name: gpt-5-search-api + litellm_params: + model: openai/gpt-5-search-api + api_key: os.environ/OPENAI_API_KEY + model_info: + supports_web_search: True + - model_name: gpt-4o-search-preview litellm_params: model: openai/gpt-4o-search-preview api_key: os.environ/OPENAI_API_KEY model_info: supports_web_search: True - + # xAI - model_name: grok-3 litellm_params: @@ -516,6 +566,12 @@ Expected Response ```json showLineNumbers { "data": [ + { + "model_group": "gpt-5-search-api", + "providers": ["openai"], + "max_tokens": 128000, + "supports_web_search": true + }, { "model_group": "gpt-4o-search-preview", "providers": ["openai"], diff --git a/docs/my-website/docs/enterprise.md b/docs/my-website/docs/enterprise.md index 2eed0f53e59..0a1b47f0621 100644 --- a/docs/my-website/docs/enterprise.md +++ b/docs/my-website/docs/enterprise.md @@ -74,6 +74,18 @@ You can find [supported data regions litellm here](../docs/data_security#support ## Frequently Asked Questions +### How to set up and verify your Enterprise License + +1. Add your license key to the environment: + +```env +LITELLM_LICENSE="eyJ..." +``` + +2. Restart LiteLLM Proxy. + +3. Open `http://:/` — the Swagger page should show **"Enterprise Edition"** in the description. If it doesn't, check that the key is correct, unexpired, and that the proxy was fully restarted. + ### SLA's + Professional Support Professional Support can assist with LLM/Provider integrations, deployment, upgrade management, and LLM Provider troubleshooting. We can’t solve your own infrastructure-related issues but we will guide you to fix them. diff --git a/docs/my-website/docs/evals_api.md b/docs/my-website/docs/evals_api.md new file mode 100644 index 00000000000..bb66e9fdc0a --- /dev/null +++ b/docs/my-website/docs/evals_api.md @@ -0,0 +1,441 @@ +# /evals + +LiteLLM Proxy supports OpenAI's Evaluations (Evals) API, allowing you to create, manage, and run evaluations to measure model performance against defined testing criteria. + +## What are Evals? + +OpenAI Evals API provides a structured way to: +- **Create Evaluations**: Define testing criteria and data sources for evaluating model outputs +- **Run Evaluations**: Execute evaluations against specific models and datasets +- **Track Results**: Monitor evaluation progress and review detailed results + +## Quick Start + +### Setup LiteLLM Proxy + +First, start your LiteLLM Proxy server: + +```bash +litellm --config config.yaml + +# Proxy will run on http://localhost:4000 +``` + +### Initialize OpenAI Client + +```python +from openai import OpenAI + +# Point to your LiteLLM Proxy +client = OpenAI( + api_key="sk-1234", # Your LiteLLM proxy API key + base_url="http://localhost:4000" # Your proxy URL +) +``` + + +For async operations: + +```python +from openai import AsyncOpenAI + +client = AsyncOpenAI( + api_key="sk-1234", + base_url="http://localhost:4000" +) +``` + +--- + +## Evaluation Management + +### Create an Evaluation + +Create an evaluation with testing criteria and data source configuration. + +#### Example: Sentiment Classification Eval + +```python +from openai import OpenAI + +client = OpenAI( + api_key="sk-1234", + base_url="http://localhost:4000" +) + +# Create evaluation with label model grader +eval_obj = client.evals.create( + name="Sentiment Classification", + data_source_config={ + "type": "stored_completions", + "metadata": {"usecase": "chatbot"} + }, + testing_criteria=[ + { + "type": "label_model", + "model": "gpt-4o-mini", + "input": [ + { + "role": "developer", + "content": "Classify the sentiment of the following statement as one of 'positive', 'neutral', or 'negative'" + }, + { + "role": "user", + "content": "Statement: {{item.input}}" + } + ], + "passing_labels": ["positive"], + "labels": ["positive", "neutral", "negative"], + "name": "Sentiment Grader" + } + ] +) + +# Note: If you want to use model-specific credentials for this evaluation, you can specify the model name in the extra body parameters. + +print(f"Created eval: {eval_obj.id}") +print(f"Eval name: {eval_obj.name}") +``` + +#### Example: Push Notifications Summarizer Monitoring + +This example shows how to monitor prompt changes for regressions in a push notifications summarizer: + +```python +from openai import AsyncOpenAI + +client = AsyncOpenAI( + api_key="sk-1234", + base_url="http://localhost:4000" +) + +# Define data source for stored completions +data_source_config = { + "type": "stored_completions", + "metadata": { + "usecase": "push_notifications_summarizer" + } +} + +# Define grader criteria +GRADER_DEVELOPER_PROMPT = """ +Label the following push notification summary as either correct or incorrect. +The push notification and the summary will be provided below. +A good push notification summary is concise and snappy. +If it is good, then label it as correct, if not, then incorrect. +""" + +GRADER_TEMPLATE_PROMPT = """ +Push notifications: {{item.input}} +Summary: {{sample.output_text}} +""" + +push_notification_grader = { + "name": "Push Notification Summary Grader", + "type": "label_model", + "model": "gpt-4o-mini", + "input": [ + { + "role": "developer", + "content": GRADER_DEVELOPER_PROMPT, + }, + { + "role": "user", + "content": GRADER_TEMPLATE_PROMPT, + }, + ], + "passing_labels": ["correct"], + "labels": ["correct", "incorrect"], +} + +# Create the evaluation +eval_result = await client.evals.create( + name="Push Notification Completion Monitoring", + metadata={"description": "This eval monitors completions"}, + data_source_config=data_source_config, + testing_criteria=[push_notification_grader], +) + +eval_id = eval_result.id +print(f"Created eval: {eval_id}") +``` + +### List Evaluations + +Retrieve a list of all your evaluations with pagination support. + +```python +# List all evaluations +evals_response = client.evals.list( + limit=20, + order="desc" +) + +for eval in evals_response.data: + print(f"Eval ID: {eval.id}, Name: {eval.name}") + +# Check if there are more evals +if evals_response.has_more: + # Fetch next page + next_evals = client.evals.list( + after=evals_response.last_id, + limit=20 + ) +``` + +### Get a Specific Evaluation + +Retrieve details of a specific evaluation by ID. + +```python +eval = client.evals.retrieve( + eval_id="eval_abc123" +) + +print(f"Eval ID: {eval.id}") +print(f"Name: {eval.name}") +print(f"Data Source: {eval.data_source_config}") +print(f"Testing Criteria: {eval.testing_criteria}") +``` + +### Update an Evaluation + +Update evaluation metadata or name. + +```python +updated_eval = client.evals.update( + eval_id="eval_abc123", + name="Updated Evaluation Name", + metadata={ + "version": "2.0", + "updated_by": "user@example.com" + } +) + +print(f"Updated eval: {updated_eval.name}") +``` + +### Delete an Evaluation + +Permanently delete an evaluation. + +```python +delete_response = client.evals.delete( + eval_id="eval_abc123" +) + +print(f"Deleted: {delete_response.deleted}") # True +``` + +--- + +## Evaluation Runs + +### Create a Run + +Execute an evaluation by creating a run. The run processes your data through the model and applies testing criteria. + +#### Using Stored Completions + +First, generate some test data by making chat completions with metadata: + +```python +from openai import AsyncOpenAI +import asyncio + +client = AsyncOpenAI( + api_key="sk-1234", + base_url="http://localhost:4000" +) + +# Generate test data with different prompt versions +push_notification_data = [ + """ +- New message from Sarah: "Can you call me later?" +- Your package has been delivered! +- Flash sale: 20% off electronics for the next 2 hours! +""", + """ +- Weather alert: Thunderstorm expected in your area. +- Reminder: Doctor's appointment at 3 PM. +- John liked your photo on Instagram. +""" +] + +PROMPTS = [ + ( + """ + You are a helpful assistant that summarizes push notifications. + You are given a list of push notifications and you need to collapse them into a single one. + Output only the final summary, nothing else. + """, + "v1" + ), + ( + """ + You are a helpful assistant that summarizes push notifications. + You are given a list of push notifications and you need to collapse them into a single one. + The summary should be longer than it needs to be and include more information than is necessary. + Output only the final summary, nothing else. + """, + "v2" + ) +] + +# Create completions with metadata for tracking +tasks = [] +for notifications in push_notification_data: + for (prompt, version) in PROMPTS: + tasks.append(client.chat.completions.create( + model="gpt-4o-mini", + messages=[ + {"role": "developer", "content": prompt}, + {"role": "user", "content": notifications}, + ], + metadata={ + "prompt_version": version, + "usecase": "push_notifications_summarizer" + } + )) + +await asyncio.gather(*tasks) +``` + +Now create runs to evaluate different prompt versions: + +```python +# Grade prompt_version=v1 +eval_run_result = await client.evals.runs.create( + eval_id=eval_id, + name="v1-run", + data_source={ + "type": "completions", + "source": { + "type": "stored_completions", + "metadata": { + "prompt_version": "v1", + } + } + } +) + +print(f"Run ID: {eval_run_result.id}") +print(f"Status: {eval_run_result.status}") +print(f"Report URL: {eval_run_result.report_url}") + +# Grade prompt_version=v2 +eval_run_result_v2 = await client.evals.runs.create( + eval_id=eval_id, + name="v2-run", + data_source={ + "type": "completions", + "source": { + "type": "stored_completions", + "metadata": { + "prompt_version": "v2", + } + } + } +) + +print(f"Run ID: {eval_run_result_v2.id}") +print(f"Report URL: {eval_run_result_v2.report_url}") +``` + +#### Using Completions with Different Models + +Test how different models perform on the same inputs: + +```python +# Test with GPT-4o using stored completions as input +tasks = [] +for prompt_version in ["v1", "v2"]: + tasks.append(client.evals.runs.create( + eval_id=eval_id, + name=f"gpt-4o-run-{prompt_version}", + data_source={ + "type": "completions", + "input_messages": { + "type": "item_reference", + "item_reference": "item.input", + }, + "model": "gpt-4o", + "source": { + "type": "stored_completions", + "metadata": { + "prompt_version": prompt_version, + } + } + } + )) + +results = await asyncio.gather(*tasks) +for run in results: + print(f"Report URL: {run.report_url}") +``` + +### List Runs + +Get all runs for a specific evaluation. + +```python +# List all runs for an evaluation +runs_response = client.evals.runs.list( + eval_id="eval_abc123", + limit=20, + order="desc" +) + +for run in runs_response.data: + print(f"Run ID: {run.id}") + print(f"Status: {run.status}") + print(f"Name: {run.name}") + if run.result_counts: + print(f"Results: {run.result_counts.passed}/{run.result_counts.total} passed") +``` + +### Get Run Details + +Retrieve detailed information about a specific run, including results. + +```python +run = client.evals.runs.retrieve( + eval_id="eval_abc123", + run_id="run_def456" +) + +print(f"Run ID: {run.id}") +print(f"Status: {run.status}") +print(f"Started: {run.started_at}") +print(f"Completed: {run.completed_at}") + +# Check results +if run.result_counts: + print(f"\nOverall Results:") + print(f"Total: {run.result_counts.total}") + print(f"Passed: {run.result_counts.passed}") + print(f"Failed: {run.result_counts.failed}") + print(f"Error: {run.result_counts.errored}") + +# Per-criteria results +if run.per_testing_criteria_results: + for criteria_result in run.per_testing_criteria_results: + print(f"\nCriteria {criteria_result.testing_criteria_index}:") + print(f" Passed: {criteria_result.result_counts.passed}") + print(f" Average Score: {criteria_result.average_score}") +``` + +### Delete a Run + +Permanently delete a run and its results. + +```python +delete_response = await client.evals.runs.delete( + eval_id="eval_abc123", + run_id="run_def456" +) + +print(f"Deleted: {delete_response.deleted}") # True +print(f"Run ID: {delete_response.run_id}") +``` + diff --git a/docs/my-website/docs/extras/contributing_code.md b/docs/my-website/docs/extras/contributing_code.md index 930a47eec7e..673a83aca05 100644 --- a/docs/my-website/docs/extras/contributing_code.md +++ b/docs/my-website/docs/extras/contributing_code.md @@ -1,27 +1,36 @@ # Contributing Code -## **Checklist before submitting a PR** +## Checklist before submitting a PR -Here are the core requirements for any PR submitted to LiteLLM +Here are the core requirements for any PR submitted to LiteLLM: -- [ ] Sign the Contributor License Agreement (CLA) - [see details](#contributor-license-agreement-cla) -- [ ] Add testing, **Adding at least 1 test is a hard requirement** - [see details](#2-adding-testing-to-your-pr) -- [ ] Ensure your PR passes the following tests: - - [ ] [Unit Tests](#3-running-unit-tests) - - [ ] [Formatting / Linting Tests](#35-running-linting-tests) -- [ ] Keep scope as isolated as possible. As a general rule, your changes should address 1 specific problem at a time +- [ ] Sign the [Contributor License Agreement (CLA)](#contributor-license-agreement-cla) +- [ ] Keep scope as isolated as possible — your changes should address **one specific problem** at a time -## **Contributor License Agreement (CLA)** +### Proxy (Backend) PRs + +- [ ] Add testing — **at least 1 test is a hard requirement** ([details](#2-adding-tests)) +- [ ] Ensure your PR passes: + - [ ] [Unit Tests](#3-running-unit-tests) — `make test-unit` + - [ ] [Formatting / Linting Tests](#4-running-linting-tests) — `make lint` + +### UI PRs + +- [ ] Ensure the UI builds successfully — `npm run build` +- [ ] Ensure all UI unit tests pass — `npm run test` +- [ ] If you are adding a **new component** or **new logic**, add corresponding tests + +## Contributor License Agreement (CLA) Before contributing code to LiteLLM, you must sign our [Contributor License Agreement (CLA)](https://cla-assistant.io/BerriAI/litellm). This is a legal requirement for all contributions to be merged into the main repository. The CLA helps protect both you and the project by clearly defining the terms under which your contributions are made. -**Important:** We strongly recommend reviewing and signing the CLA before starting work on your contribution to avoid any delays in the PR process. You can find the CLA [here](https://cla-assistant.io/BerriAI/litellm) and sign it through our CLA management system when you submit your first PR. +**Important:** We strongly recommend signing the CLA **before** starting work on your contribution to avoid delays in the review process. You can find and sign the CLA [here](https://cla-assistant.io/BerriAI/litellm). -## Quick start +--- -## 1. Setup your local dev environment +## Proxy (Backend) -Here's how to modify the repo locally: +### 1. Setting up your local dev environment Step 1: Clone the repo @@ -29,56 +38,53 @@ Step 1: Clone the repo git clone https://github.com/BerriAI/litellm.git ``` -Step 2: Install dev dependencies: +Step 2: Install dev dependencies ```shell poetry install --with dev --extras proxy ``` -That's it, your local dev environment is ready! +### 2. Adding tests -## 2. Adding Testing to your PR +- Add your tests to the [`tests/test_litellm/` directory](https://github.com/BerriAI/litellm/tree/main/tests/litellm). +- This directory mirrors the `litellm/` directory 1:1 and should **only** contain mocked tests. +- **Do not** add real LLM API calls to this directory. -- Add your test to the [`tests/test_litellm/` directory](https://github.com/BerriAI/litellm/tree/main/tests/litellm) +#### File naming convention for `tests/test_litellm/` -- This directory 1:1 maps the the `litellm/` directory, and can only contain mocked tests. -- Do not add real llm api calls to this directory. +The test directory follows the same structure as `litellm/`: -### 2.1 File Naming Convention for `tests/test_litellm/` - -The `tests/test_litellm/` directory follows the same directory structure as `litellm/`. - -- `litellm/proxy/test_caching_routes.py` maps to `litellm/proxy/caching_routes.py` - `test_{filename}.py` maps to `litellm/{filename}.py` +- `litellm/proxy/test_caching_routes.py` maps to `litellm/proxy/caching_routes.py` -## 3. Running Unit Tests +### 3. Running unit tests -run the following command on the root of the litellm directory +Run the following command from the root of the `litellm` directory: ```shell make test-unit ``` -## 3.5 Running Linting Tests +### 4. Running linting tests -run the following command on the root of the litellm directory +Run the following command from the root of the `litellm` directory: ```shell make lint ``` -LiteLLM uses mypy for linting. On ci/cd we also run `black` for formatting. +LiteLLM uses `mypy` for type checking. CI/CD also runs `black` for formatting. -## 4. Submit a PR with your changes! +### 5. Submit a PR -- push your fork to your GitHub repo -- submit a PR from there +- Push your changes to your fork on GitHub +- Open a Pull Request from your fork -## Advanced +--- -### Building LiteLLM Docker Image +## UI -Some people might want to build the LiteLLM docker image themselves. Follow these instructions if you want to build / run the LiteLLM Docker Image yourself. +### 1. Setting up your local dev environment Step 1: Clone the repo @@ -86,17 +92,72 @@ Step 1: Clone the repo git clone https://github.com/BerriAI/litellm.git ``` -Step 2: Build the Docker Image +Step 2: Navigate to the UI dashboard directory -Build using Dockerfile.non_root +```shell +cd ui/litellm-dashboard +``` + +Step 3: Install dependencies + +```shell +npm install +``` + +Step 4: Start the development server + +```shell +npm run dev +``` + +### 2. Adding tests + +If you are adding a **new component** or **new logic**, you must add corresponding tests. + +### 3. Running UI unit tests + +```shell +npm run test +``` + +### 4. Building the UI + +Ensure the UI builds successfully before submitting your PR: + +```shell +npm run build +``` + +### 5. Submit a PR + +- Push your changes to your fork on GitHub +- Open a Pull Request from your fork + +--- + +## Advanced + +### Building the LiteLLM Docker Image + +Follow these instructions if you want to build and run the LiteLLM Docker image yourself. + +Step 1: Clone the repo + +```shell +git clone https://github.com/BerriAI/litellm.git +``` + +Step 2: Build the Docker image + +Build using `Dockerfile.non_root`: ```shell docker build -f docker/Dockerfile.non_root -t litellm_test_image . ``` -Step 3: Run the Docker Image +Step 3: Run the Docker image -Make sure config.yaml is present in the root directory. This is your litellm proxy config file. +Make sure `config.yaml` is present in the root directory. This is your LiteLLM proxy config file. ```shell docker run \ @@ -107,18 +168,19 @@ docker run \ litellm_test_image \ --config /app/config.yaml --detailed_debug ``` -### Running LiteLLM Proxy Locally -1. cd into the `proxy/` directory +### Running the LiteLLM Proxy Locally -``` +1. Navigate to the `proxy/` directory: + +```shell cd litellm/litellm/proxy ``` -2. Run the proxy +2. Run the proxy: ```shell python3 proxy_cli.py --config /path/to/config.yaml # RUNNING on http://0.0.0.0:4000 -``` \ No newline at end of file +``` diff --git a/docs/my-website/docs/integrations/websearch_interception.md b/docs/my-website/docs/integrations/websearch_interception.md new file mode 100644 index 00000000000..0c5d8927013 --- /dev/null +++ b/docs/my-website/docs/integrations/websearch_interception.md @@ -0,0 +1,411 @@ +# Web Search Integration + +Enable transparent server-side web search execution for any LLM provider. LiteLLM automatically intercepts web search tool calls and executes them using your configured search provider (Perplexity, Tavily, etc.). + +## Quick Start + +### 1. Configure Web Search Interception + +Add to your `config.yaml`: + +```yaml +model_list: + - model_name: gpt-4o + litellm_params: + model: openai/gpt-4o + api_key: os.environ/OPENAI_API_KEY + +litellm_settings: + callbacks: + - websearch_interception: + enabled_providers: + - openai + - minimax + - anthropic + search_tool_name: perplexity-search # Optional + +search_tools: + - search_tool_name: perplexity-search + litellm_params: + search_provider: perplexity + api_key: os.environ/PERPLEXITY_API_KEY +``` + +### 2. Use with Any Provider + +```python +import litellm + +response = await litellm.acompletion( + model="gpt-4o", + messages=[ + {"role": "user", "content": "What's the weather in San Francisco today?"} + ], + tools=[ + { + "type": "function", + "function": { + "name": "litellm_web_search", + "description": "Search the web for information", + "parameters": { + "type": "object", + "properties": { + "query": {"type": "string", "description": "Search query"} + }, + "required": ["query"] + } + } + } + ] +) + +# Response includes search results automatically! +print(response.choices[0].message.content) +``` + +## How It Works + +When a model makes a web search tool call, LiteLLM: + +1. **Detects** the `litellm_web_search` tool call in the response +2. **Executes** the search using your configured search provider +3. **Makes a follow-up request** with the search results +4. **Returns** the final answer to the user + +```mermaid +sequenceDiagram + participant User + participant LiteLLM + participant LLM as LLM Provider + participant Search as Search Provider + + User->>LiteLLM: Request with web_search tool + LiteLLM->>LLM: Forward request + LLM-->>LiteLLM: Response with tool_call + Note over LiteLLM: Detect web search
tool call + LiteLLM->>Search: Execute search + Search-->>LiteLLM: Search results + LiteLLM->>LLM: Follow-up with results + LLM-->>LiteLLM: Final answer + LiteLLM-->>User: Final answer with search results +``` + +**Result**: One API call from user → Complete answer with search results + +## Supported Providers + +Web search integration works with **all providers** that use: +- ✅ **Base HTTP Handler** (`BaseLLMHTTPHandler`) +- ✅ **OpenAI Completion Handler** (`OpenAIChatCompletion`) + +### Providers Using Base HTTP Handler + +| Provider | Status | Notes | +|----------|--------|-------| +| **OpenAI** | ✅ Supported | GPT-4, GPT-3.5, etc. | +| **Anthropic** | ✅ Supported | Claude models via HTTP handler | +| **MiniMax** | ✅ Supported | All MiniMax models | +| **Mistral** | ✅ Supported | Mistral AI models | +| **Cohere** | ✅ Supported | Command models | +| **Fireworks AI** | ✅ Supported | All Fireworks models | +| **Together AI** | ✅ Supported | All Together AI models | +| **Groq** | ✅ Supported | All Groq models | +| **Perplexity** | ✅ Supported | Perplexity models | +| **DeepSeek** | ✅ Supported | DeepSeek models | +| **xAI** | ✅ Supported | Grok models | +| **Hugging Face** | ✅ Supported | Inference API models | +| **OCI** | ✅ Supported | Oracle Cloud models | +| **Vertex AI** | ✅ Supported | Google Vertex AI models | +| **Bedrock** | ✅ Supported | AWS Bedrock models (converse_like route) | +| **Azure OpenAI** | ✅ Supported | Azure-hosted OpenAI models | +| **Sagemaker** | ✅ Supported | AWS Sagemaker models | +| **Databricks** | ✅ Supported | Databricks models | +| **DataRobot** | ✅ Supported | DataRobot models | +| **Hosted VLLM** | ✅ Supported | Self-hosted VLLM | +| **Heroku** | ✅ Supported | Heroku-hosted models | +| **RAGFlow** | ✅ Supported | RAGFlow models | +| **Compactif** | ✅ Supported | Compactif models | +| **Cometapi** | ✅ Supported | Comet API models | +| **A2A** | ✅ Supported | Agent-to-Agent models | +| **Bytez** | ✅ Supported | Bytez models | + +### Providers Using OpenAI Handler + +| Provider | Status | Notes | +|----------|--------|-------| +| **OpenAI** | ✅ Supported | Native OpenAI API | +| **Azure OpenAI** | ✅ Supported | Azure-hosted OpenAI | +| **OpenAI-Compatible** | ✅ Supported | Any OpenAI-compatible API | + +## Configuration + +### WebSearch Interception Parameters + +| Parameter | Type | Required | Description | Example | +|-----------|------|----------|-------------|---------| +| `enabled_providers` | List[String] | Yes | List of providers to enable web search for | `[openai, minimax, anthropic]` | +| `search_tool_name` | String | No | Specific search tool from `search_tools` config. If not set, uses first available. | `perplexity-search` | + +### Provider Values + +Use these values in `enabled_providers`: + +| Provider | Value | Provider | Value | +|----------|-------|----------|-------| +| OpenAI | `openai` | Anthropic | `anthropic` | +| MiniMax | `minimax` | Mistral | `mistral` | +| Cohere | `cohere` | Fireworks AI | `fireworks_ai` | +| Together AI | `together_ai` | Groq | `groq` | +| Perplexity | `perplexity` | DeepSeek | `deepseek` | +| xAI | `xai` | Hugging Face | `huggingface` | +| OCI | `oci` | Vertex AI | `vertex_ai` | +| Bedrock | `bedrock` | Azure | `azure` | +| Sagemaker | `sagemaker_chat` | Databricks | `databricks` | +| DataRobot | `datarobot` | VLLM | `hosted_vllm` | +| Heroku | `heroku` | RAGFlow | `ragflow` | +| Compactif | `compactif` | Cometapi | `cometapi` | +| A2A | `a2a` | Bytez | `bytez` | + +## Search Providers + +Configure which search provider to use. LiteLLM supports multiple search providers: + +| Provider | `search_provider` Value | Environment Variable | +|----------|------------------------|----------------------| +| **Perplexity AI** | `perplexity` | `PERPLEXITYAI_API_KEY` | +| **Tavily** | `tavily` | `TAVILY_API_KEY` | +| **Exa AI** | `exa_ai` | `EXA_API_KEY` | +| **Parallel AI** | `parallel_ai` | `PARALLEL_AI_API_KEY` | +| **Google PSE** | `google_pse` | `GOOGLE_PSE_API_KEY`, `GOOGLE_PSE_ENGINE_ID` | +| **DataForSEO** | `dataforseo` | `DATAFORSEO_LOGIN`, `DATAFORSEO_PASSWORD` | +| **Firecrawl** | `firecrawl` | `FIRECRAWL_API_KEY` | +| **SearXNG** | `searxng` | `SEARXNG_API_BASE` (required) | +| **Linkup** | `linkup` | `LINKUP_API_KEY` | + +See [Search Providers Documentation](../search/index.md) for detailed setup instructions. + +## Complete Configuration Example + +```yaml +model_list: + # OpenAI + - model_name: gpt-4o + litellm_params: + model: openai/gpt-4o + api_key: os.environ/OPENAI_API_KEY + + # MiniMax + - model_name: minimax + litellm_params: + model: minimax/MiniMax-M2.1 + api_key: os.environ/MINIMAX_API_KEY + + # Anthropic + - model_name: claude + litellm_params: + model: anthropic/claude-sonnet-4-5 + api_key: os.environ/ANTHROPIC_API_KEY + + # Azure OpenAI + - model_name: azure-gpt4 + litellm_params: + model: azure/gpt-4 + api_base: https://my-azure.openai.azure.com + api_key: os.environ/AZURE_API_KEY + +litellm_settings: + callbacks: + - websearch_interception: + enabled_providers: + - openai + - minimax + - anthropic + - azure + search_tool_name: perplexity-search + +search_tools: + - search_tool_name: perplexity-search + litellm_params: + search_provider: perplexity + api_key: os.environ/PERPLEXITY_API_KEY + + - search_tool_name: tavily-search + litellm_params: + search_provider: tavily + api_key: os.environ/TAVILY_API_KEY +``` + +## Usage Examples + +### Python SDK + +```python +import litellm + +# Configure callbacks +litellm.callbacks = ["websearch_interception"] + +# Make completion with web search tool +response = await litellm.acompletion( + model="gpt-4o", + messages=[ + {"role": "user", "content": "What are the latest AI news?"} + ], + tools=[ + { + "type": "function", + "function": { + "name": "litellm_web_search", + "description": "Search the web for current information", + "parameters": { + "type": "object", + "properties": { + "query": { + "type": "string", + "description": "Search query" + } + }, + "required": ["query"] + } + } + } + ] +) + +print(response.choices[0].message.content) +``` + +### Proxy Server + +```bash +# Start proxy with config +litellm --config config.yaml + +# Make request +curl http://localhost:4000/v1/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer sk-1234" \ + -d '{ + "model": "gpt-4o", + "messages": [ + {"role": "user", "content": "What is the weather in San Francisco?"} + ], + "tools": [ + { + "type": "function", + "function": { + "name": "litellm_web_search", + "description": "Search the web", + "parameters": { + "type": "object", + "properties": { + "query": {"type": "string"} + }, + "required": ["query"] + } + } + } + ] + }' +``` + +## How Search Tool Selection Works + +1. **If `search_tool_name` is specified** → Uses that specific search tool +2. **If `search_tool_name` is not specified** → Uses first search tool in `search_tools` list + +```yaml +search_tools: + - search_tool_name: perplexity-search # ← This will be used if no search_tool_name specified + litellm_params: + search_provider: perplexity + api_key: os.environ/PERPLEXITY_API_KEY + + - search_tool_name: tavily-search + litellm_params: + search_provider: tavily + api_key: os.environ/TAVILY_API_KEY +``` + +## Troubleshooting + +### Web Search Not Working + +1. **Check provider is enabled**: + ```yaml + enabled_providers: + - openai # Make sure your provider is in this list + ``` + +2. **Verify search tool is configured**: + ```yaml + search_tools: + - search_tool_name: perplexity-search + litellm_params: + search_provider: perplexity + api_key: os.environ/PERPLEXITY_API_KEY + ``` + +3. **Check API keys are set**: + ```bash + export PERPLEXITY_API_KEY=your-key + ``` + +4. **Enable debug logging**: + ```python + litellm.set_verbose = True + ``` + +### Common Issues + +**Issue**: Model returns tool_calls instead of final answer +- **Cause**: Provider not in `enabled_providers` list +- **Solution**: Add provider to `enabled_providers` + +**Issue**: "No search tool configured" error +- **Cause**: No search tools in `search_tools` config +- **Solution**: Add at least one search tool configuration + +**Issue**: "Invalid function arguments json string" error (MiniMax) +- **Cause**: Fixed in latest version - arguments weren't properly JSON serialized +- **Solution**: Update to latest LiteLLM version + +## Related Documentation + +- [Search Providers](../search/index.md) - Detailed search provider setup +- [Claude Code WebSearch](../tutorials/claude_code_websearch.md) - Using with Claude Code +- [Tool Calling](../completion/function_call.md) - General tool calling documentation +- [Callbacks](./custom_callback.md) - Custom callback documentation + +## Technical Details + +### Architecture + +Web search integration is implemented as a custom callback (`WebSearchInterceptionLogger`) that: + +1. **Pre-request Hook**: Converts native web search tools to LiteLLM standard format +2. **Post-response Hook**: Detects web search tool calls in responses +3. **Agentic Loop**: Executes searches and makes follow-up requests automatically + +### Supported APIs + +- ✅ **Chat Completions API** (OpenAI format) +- ✅ **Anthropic Messages API** (Anthropic format) +- ✅ **Streaming** (automatically converted) +- ✅ **Non-streaming** + +### Response Format Detection + +The handler automatically detects response format: +- **OpenAI format**: `tool_calls` in assistant message +- **Anthropic format**: `tool_use` blocks in content + +### Performance + +- **Latency**: Adds one additional LLM call (follow-up request with search results) +- **Caching**: Search results can be cached (depends on search provider) +- **Parallel Searches**: Multiple search queries executed in parallel + +## Contributing + +Found a bug or want to add support for a new provider? See our [Contributing Guide](https://github.com/BerriAI/litellm/blob/main/CONTRIBUTING.md). diff --git a/docs/my-website/docs/load_test.md b/docs/my-website/docs/load_test.md index 4641a70366c..071b097904b 100644 --- a/docs/my-website/docs/load_test.md +++ b/docs/my-website/docs/load_test.md @@ -4,8 +4,9 @@ import Image from '@theme/IdealImage'; ## Locust Load Test LiteLLM Proxy -1. Add `fake-openai-endpoint` to your proxy config.yaml and start your litellm proxy -litellm provides a free hosted `fake-openai-endpoint` you can load test against +1. Add `fake-openai-endpoint` to your proxy config.yaml and start your litellm proxy. + +LiteLLM provides a free hosted `fake-openai-endpoint` you can load test against. You can also self-host your own fake OpenAI proxy server using [github.com/BerriAI/example_openai_endpoint](https://github.com/BerriAI/example_openai_endpoint). ```yaml model_list: diff --git a/docs/my-website/docs/load_test_advanced.md b/docs/my-website/docs/load_test_advanced.md index 3171bc33594..d35b5f74784 100644 --- a/docs/my-website/docs/load_test_advanced.md +++ b/docs/my-website/docs/load_test_advanced.md @@ -29,12 +29,16 @@ Tutorial on how to get to 1K+ RPS with LiteLLM Proxy on locust **Note:** we're currently migrating to aiohttp which has 10x higher throughput. We recommend using the `openai/` provider for load testing. +:::tip Setting Up a Fake OpenAI Endpoint +You can use our hosted fake endpoint or self-host your own using [github.com/BerriAI/example_openai_endpoint](https://github.com/BerriAI/example_openai_endpoint). +::: + ```yaml model_list: - model_name: "fake-openai-endpoint" litellm_params: model: openai/any - api_base: https://your-fake-openai-endpoint.com/chat/completions + api_base: https://exampleopenaiendpoint-production.up.railway.app/ # or your self-hosted endpoint api_key: "test" ``` diff --git a/docs/my-website/docs/mcp.md b/docs/my-website/docs/mcp.md index d63b55ee29e..84d10c25931 100644 --- a/docs/my-website/docs/mcp.md +++ b/docs/my-website/docs/mcp.md @@ -506,7 +506,14 @@ Your OpenAPI specification should follow standard OpenAPI/Swagger conventions: - **Operation IDs**: Each operation should have a unique `operationId` (this becomes the tool name) - **Parameters**: Request parameters should be properly documented with types and descriptions -## MCP Oauth +## MCP OAuth + +LiteLLM supports OAuth 2.0 for MCP servers -- both interactive (PKCE) flows for user-facing clients and machine-to-machine (M2M) `client_credentials` for backend services. + +See the **[MCP OAuth guide](./mcp_oauth.md)** for setup instructions, sequence diagrams, and a test server. + +
+Detailed OAuth reference (click to expand) LiteLLM v 1.77.6 added support for OAuth 2.0 Client Credentials for MCP servers. @@ -588,6 +595,8 @@ sequenceDiagram See the official [MCP Authorization Flow](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization#authorization-flow-steps) for additional reference. +
+ ## Forwarding Custom Headers to MCP Servers @@ -1486,7 +1495,7 @@ async with stdio_client(server_params) as (read, write): **Q: How do I use OAuth2 client_credentials (machine-to-machine) with MCP servers behind LiteLLM?** -At the moment LiteLLM only forwards whatever `Authorization` header/value you configure for the MCP server; it does not issue OAuth2 tokens by itself. If your MCP requires the Client Credentials grant, obtain the access token directly from the authorization server and set that bearer token as the MCP server’s Authorization header value. LiteLLM does not yet fetch or refresh those machine-to-machine tokens on your behalf, but we plan to add first-class client_credentials support in a future release so the proxy can manage those tokens automatically. +LiteLLM supports automatic token management for the `client_credentials` grant. Configure `client_id`, `client_secret`, and `token_url` on your MCP server and LiteLLM will fetch, cache, and refresh tokens automatically. See the [MCP OAuth M2M guide](./mcp_oauth.md#machine-to-machine-m2m-auth) for setup instructions. **Q: When I fetch an OAuth token from the LiteLLM UI, where is it stored?** diff --git a/docs/my-website/docs/mcp_oauth.md b/docs/my-website/docs/mcp_oauth.md new file mode 100644 index 00000000000..5c4b70cc5b3 --- /dev/null +++ b/docs/my-website/docs/mcp_oauth.md @@ -0,0 +1,337 @@ +# MCP OAuth + +LiteLLM supports two OAuth 2.0 flows for MCP servers: + +| Flow | Use Case | How It Works | +|------|----------|--------------| +| **Interactive (PKCE)** | User-facing apps (Claude Code, Cursor) | Browser-based consent, per-user tokens | +| **Machine-to-Machine (M2M)** | Backend services, CI/CD, automated agents | `client_credentials` grant, proxy-managed tokens | + +## Interactive OAuth (PKCE) + +For user-facing MCP clients (Claude Code, Cursor), LiteLLM supports the full OAuth 2.0 authorization code flow with PKCE. + +### Setup + +```yaml title="config.yaml" showLineNumbers +mcp_servers: + github_mcp: + url: "https://api.githubcopilot.com/mcp" + auth_type: oauth2 + client_id: os.environ/GITHUB_OAUTH_CLIENT_ID + client_secret: os.environ/GITHUB_OAUTH_CLIENT_SECRET +``` + +[**See Claude Code Tutorial**](./tutorials/claude_responses_api#connecting-mcp-servers) + +### How It Works + +```mermaid +sequenceDiagram + participant Browser as User-Agent (Browser) + participant Client as Client + participant LiteLLM as LiteLLM Proxy + participant MCP as MCP Server (Resource Server) + participant Auth as Authorization Server + + Note over Client,LiteLLM: Step 1 – Resource discovery + Client->>LiteLLM: GET /.well-known/oauth-protected-resource/{mcp_server_name}/mcp + LiteLLM->>Client: Return resource metadata + + Note over Client,LiteLLM: Step 2 – Authorization server discovery + Client->>LiteLLM: GET /.well-known/oauth-authorization-server/{mcp_server_name} + LiteLLM->>Client: Return authorization server metadata + + Note over Client,Auth: Step 3 – Dynamic client registration + Client->>LiteLLM: POST /{mcp_server_name}/register + LiteLLM->>Auth: Forward registration request + Auth->>LiteLLM: Issue client credentials + LiteLLM->>Client: Return client credentials + + Note over Client,Browser: Step 4 – User authorization (PKCE) + Client->>Browser: Open authorization URL + code_challenge + resource + Browser->>Auth: Authorization request + Note over Auth: User authorizes + Auth->>Browser: Redirect with authorization code + Browser->>LiteLLM: Callback to LiteLLM with code + LiteLLM->>Browser: Redirect back with authorization code + Browser->>Client: Callback with authorization code + + Note over Client,Auth: Step 5 – Token exchange + Client->>LiteLLM: Token request + code_verifier + resource + LiteLLM->>Auth: Forward token request + Auth->>LiteLLM: Access (and refresh) token + LiteLLM->>Client: Return tokens + + Note over Client,MCP: Step 6 – Authenticated MCP call + Client->>LiteLLM: MCP request with access token + LiteLLM API key + LiteLLM->>MCP: MCP request with Bearer token + MCP-->>LiteLLM: MCP response + LiteLLM-->>Client: Return MCP response +``` + +**Participants** + +- **Client** -- The MCP-capable AI agent (e.g., Claude Code, Cursor, or another IDE/agent) that initiates OAuth discovery, authorization, and tool invocations on behalf of the user. +- **LiteLLM Proxy** -- Mediates all OAuth discovery, registration, token exchange, and MCP traffic while protecting stored credentials. +- **Authorization Server** -- Issues OAuth 2.0 tokens via dynamic client registration, PKCE authorization, and token endpoints. +- **MCP Server (Resource Server)** -- The protected MCP endpoint that receives LiteLLM's authenticated JSON-RPC requests. +- **User-Agent (Browser)** -- Temporarily involved so the end user can grant consent during the authorization step. + +**Flow Steps** + +1. **Resource Discovery**: The client fetches MCP resource metadata from LiteLLM's `.well-known/oauth-protected-resource` endpoint to understand scopes and capabilities. +2. **Authorization Server Discovery**: The client retrieves the OAuth server metadata (token endpoint, authorization endpoint, supported PKCE methods) through LiteLLM's `.well-known/oauth-authorization-server` endpoint. +3. **Dynamic Client Registration**: The client registers through LiteLLM, which forwards the request to the authorization server (RFC 7591). If the provider doesn't support dynamic registration, you can pre-store `client_id`/`client_secret` in LiteLLM (e.g., GitHub MCP) and the flow proceeds the same way. +4. **User Authorization**: The client launches a browser session (with code challenge and resource hints). The user approves access, the authorization server sends the code through LiteLLM back to the client. +5. **Token Exchange**: The client calls LiteLLM with the authorization code, code verifier, and resource. LiteLLM exchanges them with the authorization server and returns the issued access/refresh tokens. +6. **MCP Invocation**: With a valid token, the client sends the MCP JSON-RPC request (plus LiteLLM API key) to LiteLLM, which forwards it to the MCP server and relays the tool response. + +See the official [MCP Authorization Flow](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization#authorization-flow-steps) for additional reference. + +## Machine-to-Machine (M2M) Auth + +LiteLLM automatically fetches, caches, and refreshes OAuth2 tokens using the `client_credentials` grant. No manual token management required. + +### Setup + +You can configure M2M OAuth via the LiteLLM UI or `config.yaml`. + +### UI Setup + +Navigate to the **MCP Servers** page and click **+ Add New MCP Server**. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/d1f1e89c-a789-4975-8846-b15d9821984a/ascreenshot_630800e00a2e4b598baabfc25efbabd3_text_export.jpeg) + +Enter a name for your server and select **HTTP** as the transport type. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/2008c9d6-6093-4121-beab-1e52c71376aa/ascreenshot_516ffd6c7b524465a253a56048c3d228_text_export.jpeg) + +Paste the MCP server URL. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/b0ee8b7d-6de8-492b-8962-287987feec29/ascreenshot_b3efca82078a4c6bb1453c58161909f9_text_export.jpeg) + +Under **Authentication**, select **OAuth**. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/e1597814-ff8e-40b9-9d7b-864dcdbe0910/ascreenshot_2097612712264d8f9e553f7ca9175fb0_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/f6ea5694-f28a-4bc3-9c9a-bb79f199bd65/ascreenshot_9be839f55b1b4f96bfe24030ba2c7f8d_text_export.jpeg) + +Choose **Machine-to-Machine (M2M)** as the OAuth flow type. This is for server-to-server authentication using the `client_credentials` grant — no browser interaction required. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/9853310c-1d86-4628-bad1-7a391eca0e4d/ascreenshot_f302a286fa264fdd8d56db53b8f9395c_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/df64dc65-ef86-475d-adaf-12e227d5e873/ascreenshot_9e2f41d43a76435f918a00b52ffcc639_text_export.jpeg) + +Fill in the **Client ID** and **Client Secret** provided by your OAuth provider. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/0de5a7bd-9898-4fc7-8843-b23dd5aac47f/ascreenshot_b9087aaa81a14b5b9c199929efc4a563_text_export.jpeg) + +Enter the **Token URL** — this is the endpoint LiteLLM will call to fetch access tokens using `client_credentials`. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/0aea70f1-558c-4dca-91bc-1175fe1ddc89/ascreenshot_b3fcf8a1287e4e2d9a3d67c4a29f7bff_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/e842ef09-1fd7-47a6-909b-252d389f0abc/ascreenshot_2a87dad3624847e7ac370591d1d1aedd_text_export.jpeg) + +Scroll down and review the server URL and all fields, then click **Create MCP Server**. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/0857712b-4b53-40f8-8c1f-a4c72edaa644/ascreenshot_47be3fcd5de64ed391f70c1fb74a8bfc_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/9d961765-955f-4905-a3dc-1a446aa3b2cc/ascreenshot_43fd39d014224564bc6b35aced1fb6d3_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/3825d5fa-8fd1-4e71-b090-77ff0259c3f6/ascreenshot_2509a7ebd9bf421eb0e82f2553566745_text_export.jpeg) + +Once created, open the server and navigate to the **MCP Tools** tab to verify that LiteLLM can connect and list available tools. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/8107e27b-5072-4675-8fd6-89b47692b1bd/ascreenshot_f774bc76138f430d808fb4482ebfcdca_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/ce94bb7b-c81b-4396-9939-178efb2cdfce/ascreenshot_28b838ab6ae34c76858454555c4c1d79_text_export.jpeg) + +Select a tool (e.g. **echo**) to test it. Fill in the required parameters and click **Call Tool**. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/c459c1d3-ec29-4211-9c28-37fbe7783bbc/ascreenshot_e9b138b3c2cc4440bb1a6f42ac7ae861_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/5438ac60-e0ac-4a79-bf6f-5594f160d3b5/ascreenshot_9133a17d26204c46bce497e74685c483_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/a8f6821b-3982-4b4d-9b25-70c8aff5ac31/ascreenshot_28d474d0e62545a482cff6128527883a_text_export.jpeg) + +LiteLLM automatically fetches an OAuth token behind the scenes and calls the tool. The result confirms the M2M OAuth flow is working end-to-end. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-10/c3924549-a949-48d1-ac67-ab4c30475859/ascreenshot_8f6eca9d717f45478d50a881bd244bb3_text_export.jpeg) + +### Config.yaml Setup + +```yaml title="config.yaml" showLineNumbers +mcp_servers: + my_mcp_server: + url: "https://my-mcp-server.com/mcp" + auth_type: oauth2 + client_id: os.environ/MCP_CLIENT_ID + client_secret: os.environ/MCP_CLIENT_SECRET + token_url: "https://auth.example.com/oauth/token" + scopes: ["mcp:read", "mcp:write"] # optional +``` + +### How It Works + +1. On first MCP request, LiteLLM POSTs to `token_url` with `grant_type=client_credentials` +2. The access token is cached in-memory with TTL = `expires_in - 60s` +3. Subsequent requests reuse the cached token +4. When the token expires, LiteLLM fetches a new one automatically + +```mermaid +sequenceDiagram + participant Client as Client + participant LiteLLM as LiteLLM Proxy + participant Auth as Authorization Server + participant MCP as MCP Server + + Client->>LiteLLM: MCP request + LiteLLM API key + LiteLLM->>Auth: POST /oauth/token (client_credentials) + Auth->>LiteLLM: access_token (expires_in: 3600) + LiteLLM->>MCP: MCP request + Bearer token + MCP-->>LiteLLM: MCP response + LiteLLM-->>Client: MCP response + + Note over LiteLLM: Token cached for subsequent requests + Client->>LiteLLM: Next MCP request + LiteLLM->>MCP: MCP request + cached Bearer token + MCP-->>LiteLLM: MCP response + LiteLLM-->>Client: MCP response +``` + +### Test with Mock Server + +Use [BerriAI/mock-oauth2-mcp-server](https://github.com/BerriAI/mock-oauth2-mcp-server) to test locally: + +```bash title="Terminal 1 - Start mock server" showLineNumbers +pip install fastapi uvicorn +python mock_oauth2_mcp_server.py # starts on :8765 +``` + +```yaml title="config.yaml" showLineNumbers +mcp_servers: + test_oauth2: + url: "http://localhost:8765/mcp" + auth_type: oauth2 + client_id: "test-client" + client_secret: "test-secret" + token_url: "http://localhost:8765/oauth/token" +``` + +```bash title="Terminal 2 - Start proxy and test" showLineNumbers +litellm --config config.yaml --port 4000 + +# List tools +curl http://localhost:4000/mcp-rest/tools/list \ + -H "Authorization: Bearer sk-1234" + +# Call a tool +curl http://localhost:4000/mcp-rest/tools/call \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer sk-1234" \ + -d '{"name": "echo", "arguments": {"message": "hello"}}' +``` + +### Config Reference + +| Field | Required | Description | +|-------|----------|-------------| +| `auth_type` | Yes | Must be `oauth2` | +| `client_id` | Yes | OAuth2 client ID. Supports `os.environ/VAR_NAME` | +| `client_secret` | Yes | OAuth2 client secret. Supports `os.environ/VAR_NAME` | +| `token_url` | Yes | Token endpoint URL | +| `scopes` | No | List of scopes to request | + +## Debugging OAuth + +When the LiteLLM proxy is hosted remotely and you cannot access server logs, enable **debug headers** to get masked authentication diagnostics in the HTTP response. + +### Enable Debug Mode + +Add the `x-litellm-mcp-debug: true` header to your MCP client request. + +**Claude Code:** + +```bash +claude mcp add --transport http litellm_proxy http://proxy.example.com/atlassian_mcp/mcp \ + --header "x-litellm-api-key: Bearer sk-..." \ + --header "x-litellm-mcp-debug: true" +``` + +**curl:** + +```bash +curl -X POST http://localhost:4000/atlassian_mcp/mcp \ + -H "Content-Type: application/json" \ + -H "x-litellm-api-key: Bearer sk-..." \ + -H "x-litellm-mcp-debug: true" \ + -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' +``` + +### Reading the Debug Response Headers + +The response includes these headers (all sensitive values are masked): + +| Header | Description | +|--------|-------------| +| `x-mcp-debug-inbound-auth` | Which inbound auth headers were present. | +| `x-mcp-debug-oauth2-token` | The OAuth2 token (masked). Shows `SAME_AS_LITELLM_KEY` if the LiteLLM key is leaking. | +| `x-mcp-debug-auth-resolution` | Which auth method was used: `oauth2-passthrough`, `m2m-client-credentials`, `per-request-header`, `static-token`, or `no-auth`. | +| `x-mcp-debug-outbound-url` | The upstream MCP server URL. | +| `x-mcp-debug-server-auth-type` | The `auth_type` configured on the server. | + +**Example — healthy OAuth2 passthrough:** + +``` +x-mcp-debug-inbound-auth: x-litellm-api-key=Bearer****1234; authorization=Bearer****ef01 +x-mcp-debug-oauth2-token: Bearer****ef01 +x-mcp-debug-auth-resolution: oauth2-passthrough +x-mcp-debug-outbound-url: https://mcp.atlassian.com/v1/mcp +x-mcp-debug-server-auth-type: oauth2 +``` + +**Example — LiteLLM key leaking (misconfigured):** + +``` +x-mcp-debug-inbound-auth: authorization=Bearer****1234 +x-mcp-debug-oauth2-token: Bearer****1234 (SAME_AS_LITELLM_KEY - likely misconfigured) +x-mcp-debug-auth-resolution: oauth2-passthrough +x-mcp-debug-outbound-url: https://mcp.atlassian.com/v1/mcp +x-mcp-debug-server-auth-type: oauth2 +``` + +### Common Issues + +#### LiteLLM API key leaking to the MCP server + +**Symptom:** `x-mcp-debug-oauth2-token` shows `SAME_AS_LITELLM_KEY`. + +The `Authorization` header carries the LiteLLM API key instead of an OAuth2 token. The OAuth2 flow never ran because the client already had an `Authorization` header set. + +**Fix:** Move the LiteLLM key to `x-litellm-api-key`: + +```bash +# WRONG — blocks OAuth2 discovery +claude mcp add --transport http my_server http://proxy/mcp/server \ + --header "Authorization: Bearer sk-..." + +# CORRECT — LiteLLM key in dedicated header, Authorization free for OAuth2 +claude mcp add --transport http my_server http://proxy/mcp/server \ + --header "x-litellm-api-key: Bearer sk-..." +``` + +#### No OAuth2 token present + +**Symptom:** `x-mcp-debug-oauth2-token` shows `(none)` and `x-mcp-debug-auth-resolution` shows `no-auth`. + +Check that: +1. The `Authorization` header is NOT set as a static header in the client config. +2. The MCP server in LiteLLM config has `auth_type: oauth2`. +3. The `.well-known/oauth-protected-resource` endpoint returns valid metadata. + +#### M2M token used instead of user token + +**Symptom:** `x-mcp-debug-auth-resolution` shows `m2m-client-credentials`. + +The server has `client_id`/`client_secret`/`token_url` configured so LiteLLM is fetching a machine-to-machine token instead of using the per-user OAuth2 token. To use per-user tokens, remove the client credentials from the server config. diff --git a/docs/my-website/docs/mcp_public_internet.md b/docs/my-website/docs/mcp_public_internet.md new file mode 100644 index 00000000000..69dd7464657 --- /dev/null +++ b/docs/my-website/docs/mcp_public_internet.md @@ -0,0 +1,251 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Exposing MCPs on the Public Internet + +Control which MCP servers are visible to external callers (e.g., ChatGPT, Claude Desktop) vs. internal-only callers. This is useful when you want a subset of your MCP servers available publicly while keeping sensitive servers restricted to your private network. + +## Overview + +| Property | Details | +|-------|-------| +| Description | IP-based access control for MCP servers — external callers only see servers marked as public | +| Setting | `available_on_public_internet` on each MCP server | +| Network Config | `mcp_internal_ip_ranges` in `general_settings` | +| Supported Clients | ChatGPT, Claude Desktop, Cursor, OpenAI API, or any MCP client | + +## How It Works + +When a request arrives at LiteLLM's MCP endpoints, LiteLLM checks the caller's IP address to determine whether they are an **internal** or **external** caller: + +1. **Extract the client IP** from the incoming request (supports `X-Forwarded-For` when configured behind a reverse proxy). +2. **Classify the IP** as internal or external by checking it against the configured private IP ranges (defaults to RFC 1918: `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `127.0.0.0/8`). +3. **Filter the server list**: + - **Internal callers** see all MCP servers (public and private). + - **External callers** only see servers with `available_on_public_internet: true`. + +This filtering is applied at every MCP access point: the MCP registry, tool listing, tool calling, dynamic server routes, and OAuth discovery endpoints. + +```mermaid +flowchart TD + A[Incoming MCP Request] --> B[Extract Client IP Address] + B --> C{Is IP in private ranges?} + C -->|Yes - Internal caller| D[Return ALL MCP servers] + C -->|No - External caller| E[Return ONLY servers with
available_on_public_internet = true] +``` + +## Walkthrough + +This walkthrough covers two flows: +1. **Adding a public MCP server** (DeepWiki) and connecting to it from ChatGPT +2. **Making an existing server private** (Exa) and verifying ChatGPT no longer sees it + +### Flow 1: Add a Public MCP Server (DeepWiki) + +DeepWiki is a free MCP server — a good candidate to expose publicly so AI gateway users can access it from ChatGPT. + +#### Step 1: Create the MCP Server + +Navigate to the MCP Servers page and click **"+ Add New MCP Server"**. + +![Click Add New MCP Server](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/28cc27c2-d980-4255-b552-ebf542ef95be/ascreenshot_30a7e3c043834f1c87b69e6ffc5bba4f_text_export.jpeg) + +The create dialog opens. Enter **"DeepWiki"** as the server name. + +![Enter server name](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/8c733c38-310a-40ef-8a5b-7af91cc7f74f/ascreenshot_16df83fed5bd4683a22a042e07063cec_text_export.jpeg) + +For the transport type dropdown, select **HTTP** since DeepWiki uses the Streamable HTTP transport. + +![Select transport type](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/e473f603-d692-40c7-a218-866c2e1cb554/ascreenshot_e93997971f2f44beac6152786889addf_text_export.jpeg) + +Now scroll down to the MCP Server URL field. + +![Configure server](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/b08d3c1f-9279-45b6-8efb-f73008901da6/ascreenshot_ce0de66f230a41b0a454e76653429021_text_export.jpeg) + +Enter the DeepWiki MCP URL: `https://mcp.deepwiki.com/mcp`. + +![Enter MCP server URL](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/e59f8285-cfde-4c57-aa79-24244acc9160/ascreenshot_8d575c66dc614a4183212ba282d22b41_text_export.jpeg) + +With the name, transport, and URL filled in, the basic server configuration is complete. + +![Server URL configured](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/0f1af7ed-760d-4445-bdec-3da706d4eef4/ascreenshot_d7d6db69bc254ded871d14a71188a212_text_export.jpeg) + +#### Step 2: Enable "Available on Public Internet" + +Before creating, scroll down and expand the **Permission Management / Access Control** section. This is where you control who can see this server. + +![Expand Permission Management](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/cc10dea2-6028-4a27-a33b-1b1b7212efb5/ascreenshot_0fdd152b862a4bf39973bc805ce64c57_text_export.jpeg) + +Toggle **"Available on Public Internet"** on. This is the key setting — it tells LiteLLM that external callers (like ChatGPT connecting from the public internet) should be able to discover and use this server. + +![Toggle Available on Public Internet](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/39c14543-c5ae-4189-8f85-9efc87135820/ascreenshot_9991f54910c24e21bba5c05ea4fa8e28_text_export.jpeg) + +With the toggle enabled, click **"Create"** to save the server. + +![Click Create](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/843be209-aade-44f4-98da-e55d1644854c/ascreenshot_8cfc90345a5f4d069b397e80d0a6e449_text_export.jpeg) + +#### Step 3: Connect from ChatGPT + +Now let's verify it works. Open ChatGPT and look for the MCP server icon to add a new connection. The endpoint to use is `/mcp`. + +![ChatGPT add MCP server](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/58b5f674-edf4-4156-a5fa-5fdc8ed5d7b9/ascreenshot_36735f7c37394e919793968794614126_text_export.jpeg) + +In the dropdown, select **"Add an MCP server"** to configure a new connection. + +![ChatGPT MCP server option](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/f89da8af-bc61-44a7-a765-f52733f4970d/ascreenshot_6410a917b782437eb558de3bfcd35ffd_text_export.jpeg) + +ChatGPT asks for a server label. Give it a recognizable name like "LiteLLM". + +![Enter server label](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/88505afe-07c1-4674-a89c-8035a5d05eb6/ascreenshot_143aefc38ddd4d3f9f5823ca2cc09bc2_text_export.jpeg) + +Next, enter the Server URL. This should be your LiteLLM proxy's MCP endpoint — `/mcp`. + +![Enter LiteLLM MCP URL](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/9048be4a-7e40-43e7-9789-059fed2741a6/ascreenshot_e81232c17fd148f48f0ae552e9dc2a10_text_export.jpeg) + +Paste your LiteLLM URL and confirm it looks correct. + +![URL pasted](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/7707e796-e146-47c8-bce0-58e6f4076272/ascreenshot_0710dc58b8ed4d6887856b1388d59329_text_export.jpeg) + +ChatGPT also needs authentication. Enter your LiteLLM API key in the authentication field so it can connect to the proxy. + +![Enter API key](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/f6cfcb81-021d-4a41-94d7-d4eaf449d025/ascreenshot_d635865abfb64732a7278922f08dbcaa_text_export.jpeg) + +Click **"Connect"** to establish the connection. + +![Click Connect](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/1146b326-6f0c-4050-9729-af5c88e1bc81/ascreenshot_e19fb857e5394b9a9bf77b075b4fb620_text_export.jpeg) + +ChatGPT connects and shows the available tools. Since both DeepWiki and Exa are currently marked as public, ChatGPT can see tools from both servers. + +![ChatGPT shows available MCP tools](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/43ac56b7-9933-4762-903a-370fc52c79b5/ascreenshot_39073d6dc3bc4bb6a79d93365a26a4f8_text_export.jpeg) + +--- + +### Flow 2: Make an Existing Server Private (Exa) + +Now let's do the reverse — take an existing MCP server (Exa) that's currently public and restrict it to internal access only. After this change, ChatGPT should no longer see Exa's tools. + +#### Step 1: Edit the Server + +Go to the MCP Servers table and click on the Exa server to open its detail view. + +![Exa server overview](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/65844f13-b1ec-4092-b3fd-b1cae3c0c833/ascreenshot_cc8ea435c5e14761a1394ca80fe817c0_text_export.jpeg) + +Switch to the **"Settings"** tab to access the edit form. + +![Click Settings](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/d5b65271-561e-4d2a-b832-96d32611f6e4/ascreenshot_a200942b17264c1eb7a3ffdb2c2141f5_text_export.jpeg) + +The edit form loads with Exa's current configuration. + +![Edit server](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/119184f6-f3cd-45b7-9cfa-0ea08de27020/ascreenshot_c39a793da03a4f0fb84b5ee829af9034_text_export.jpeg) + +#### Step 2: Toggle Off "Available on Public Internet" + +Scroll down and expand the **Permission Management / Access Control** section to find the public internet toggle. + +![Expand permissions](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/bf7114cc-8741-4fa0-a39a-fe625482e88a/ascreenshot_8a987649c03e46558a2ec9a6f2f539a4_text_export.jpeg) + +Toggle **"Available on Public Internet"** off. This will hide Exa from any caller outside your private network. + +![Toggle off public internet](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/f36af5ad-028f-4bb1-aed1-43e38ff9b733/ascreenshot_9128364a049f489bb8483e18e5c88015_text_export.jpeg) + +Click **"Save Changes"** to apply. The change takes effect immediately — no proxy restart needed. + +![Save changes](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/126a71b3-02e1-4d61-a208-942b92e9ef25/ascreenshot_f349ef69e08044dd8e4903f4286b7b97_text_export.jpeg) + +#### Step 3: Verify in ChatGPT + +Go back to ChatGPT to confirm Exa is no longer visible. You'll need to reconnect for ChatGPT to re-fetch the tool list. + +![ChatGPT verify](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/15518882-8b19-44d3-9bba-245aeb62b4b1/ascreenshot_f98f59c51e6543e1be4f3960ba375fc9_text_export.jpeg) + +Open the MCP server settings and select to add or reconnect a server. + +![Reconnect to server](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/784d3174-77c0-42e6-a059-4c906db8f72a/ascreenshot_d77db951b83e4b15a00373222712f6b5_text_export.jpeg) + +Enter the same LiteLLM MCP URL as before. + +![Reconnect URL](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/17ef5fb0-b240-4556-8d20-753d359b7fcf/ascreenshot_583466ce9e8f40d1ba0af8b1e7d04413_text_export.jpeg) + +Set the server label. + +![Reconnect name](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/d7907637-c957-4a3c-ab4f-1600ca9a70a0/ascreenshot_e429eea43f3f4b3ca4d3ac5a77fbde2d_text_export.jpeg) + +Enter your API key for authentication. + +![Reconnect key](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/9cfff77a-37aa-4ca6-8032-0b46c50f37e3/ascreenshot_250664183399496b8f5c9f86f576fc0b_text_export.jpeg) + +Click **"Connect"** to re-establish the connection. + +![Click Connect](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/686f6307-b4ae-448b-ac6c-2c9d7b4f6b57/ascreenshot_3f499d0812af42ab89fed103cc21c249_text_export.jpeg) + +This time, only DeepWiki's tools appear — Exa is gone. LiteLLM detected that ChatGPT is calling from a public IP and filtered out Exa since it's no longer marked as public. Internal users on your private network would still see both servers. + +![Only DeepWiki tools visible](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/667d79b6-75f9-4799-9315-0c176e7a5e34/ascreenshot_efa43050ac0b4445a09e542fa8f270ff_text_export.jpeg) + +## Configuration Reference + +### Per-Server Setting + + + + +Toggle **"Available on Public Internet"** in the Permission Management section when creating or editing an MCP server. + + + + +```yaml title="config.yaml" showLineNumbers +mcp_servers: + deepwiki: + url: https://mcp.deepwiki.com/mcp + available_on_public_internet: true # visible to external callers + + exa: + url: https://exa.ai/mcp + auth_type: api_key + auth_value: os.environ/EXA_API_KEY + available_on_public_internet: false # internal only (default) +``` + + + + +```bash title="Create a public MCP server" showLineNumbers +curl -X POST /v1/mcp/server \ + -H "Authorization: Bearer sk-..." \ + -H "Content-Type: application/json" \ + -d '{ + "server_name": "DeepWiki", + "url": "https://mcp.deepwiki.com/mcp", + "transport": "http", + "available_on_public_internet": true + }' +``` + +```bash title="Update an existing server" showLineNumbers +curl -X PUT /v1/mcp/server \ + -H "Authorization: Bearer sk-..." \ + -H "Content-Type: application/json" \ + -d '{ + "server_id": "", + "available_on_public_internet": false + }' +``` + + + + +### Custom Private IP Ranges + +By default, LiteLLM treats RFC 1918 private ranges as internal. You can customize this in the **Network Settings** tab under MCP Servers, or via config: + +```yaml title="config.yaml" showLineNumbers +general_settings: + mcp_internal_ip_ranges: + - "10.0.0.0/8" + - "172.16.0.0/12" + - "192.168.0.0/16" + - "100.64.0.0/10" # Add your VPN/Tailscale range +``` + +When empty, the standard private ranges are used (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `127.0.0.0/8`). diff --git a/docs/my-website/docs/mcp_semantic_filter.md b/docs/my-website/docs/mcp_semantic_filter.md new file mode 100644 index 00000000000..c58be80a680 --- /dev/null +++ b/docs/my-website/docs/mcp_semantic_filter.md @@ -0,0 +1,158 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# MCP Semantic Tool Filter + +Automatically filter MCP tools by semantic relevance. When you have many MCP tools registered, LiteLLM semantically matches the user's query against tool descriptions and sends only the most relevant tools to the LLM. + +## How It Works + +Tool search shifts tool selection from a prompt-engineering problem to a retrieval problem. Instead of injecting a large static list of tools into every prompt, the semantic filter: + +1. Builds a semantic index of all available MCP tools on startup +2. On each request, semantically matches the user's query against tool descriptions +3. Returns only the top-K most relevant tools to the LLM + +This approach improves context efficiency, increases reliability by reducing tool confusion, and enables scalability to ecosystems with hundreds or thousands of MCP tools. + +```mermaid +sequenceDiagram + participant Client + participant LiteLLM as LiteLLM Proxy + participant SemanticFilter as Semantic Filter + participant MCP as MCP Registry + participant LLM as LLM Provider + + Note over LiteLLM,MCP: Startup: Build Semantic Index + LiteLLM->>MCP: Fetch all registered MCP tools + MCP->>LiteLLM: Return all tools (e.g., 50 tools) + LiteLLM->>SemanticFilter: Build semantic router with embeddings + SemanticFilter->>LLM: Generate embeddings for tool descriptions + LLM->>SemanticFilter: Return embeddings + Note over SemanticFilter: Index ready for fast lookup + + Note over Client,LLM: Request: Semantic Tool Filtering + Client->>LiteLLM: POST /v1/responses with MCP tools + LiteLLM->>SemanticFilter: Expand MCP references (50 tools available) + SemanticFilter->>SemanticFilter: Extract user query from request + SemanticFilter->>LLM: Generate query embedding + LLM->>SemanticFilter: Return query embedding + SemanticFilter->>SemanticFilter: Match query against tool embeddings + SemanticFilter->>LiteLLM: Return top-K tools (e.g., 3 most relevant) + LiteLLM->>LLM: Forward request with filtered tools (3 tools) + LLM->>LiteLLM: Return response + LiteLLM->>Client: Response with headers
x-litellm-semantic-filter: 50->3
x-litellm-semantic-filter-tools: tool1,tool2,tool3 +``` + +## Configuration + +Enable semantic filtering in your LiteLLM config: + +```yaml title="config.yaml" showLineNumbers +litellm_settings: + mcp_semantic_tool_filter: + enabled: true + embedding_model: "text-embedding-3-small" # Model for semantic matching + top_k: 5 # Max tools to return + similarity_threshold: 0.3 # Min similarity score +``` + +**Configuration Options:** +- `enabled` - Enable/disable semantic filtering (default: `false`) +- `embedding_model` - Model for generating embeddings (default: `"text-embedding-3-small"`) +- `top_k` - Maximum number of tools to return (default: `10`) +- `similarity_threshold` - Minimum similarity score for matches (default: `0.3`) + +## Usage + +Use MCP tools normally with the Responses API or Chat Completions. The semantic filter runs automatically: + + + + +```bash title="Responses API with Semantic Filtering" showLineNumbers +curl --location 'http://localhost:4000/v1/responses' \ +--header 'Content-Type: application/json' \ +--header "Authorization: Bearer sk-1234" \ +--data '{ + "model": "gpt-4o", + "input": [ + { + "role": "user", + "content": "give me TLDR of what BerriAI/litellm repo is about", + "type": "message" + } + ], + "tools": [ + { + "type": "mcp", + "server_url": "litellm_proxy", + "require_approval": "never" + } + ], + "tool_choice": "required" +}' +``` + + + + +```bash title="Chat Completions with Semantic Filtering" showLineNumbers +curl --location 'http://localhost:4000/v1/chat/completions' \ +--header 'Content-Type: application/json' \ +--header "Authorization: Bearer sk-1234" \ +--data '{ + "model": "gpt-4o", + "messages": [ + {"role": "user", "content": "Search Wikipedia for LiteLLM"} + ], + "tools": [ + { + "type": "mcp", + "server_url": "litellm_proxy" + } + ] +}' +``` + + + + +## Response Headers + +The semantic filter adds diagnostic headers to every response: + +``` +x-litellm-semantic-filter: 10->3 +x-litellm-semantic-filter-tools: wikipedia-fetch,github-search,slack-post +``` + +- **`x-litellm-semantic-filter`** - Shows before→after tool count (e.g., `10->3` means 10 tools were filtered down to 3) +- **`x-litellm-semantic-filter-tools`** - CSV list of the filtered tool names (max 150 chars, clipped with `...` if longer) + +These headers help you understand which tools were selected for each request and verify the filter is working correctly. + +## Example + +If you have 50 MCP tools registered and make a request asking about Wikipedia, the semantic filter will: + +1. Semantically match your query `"Search Wikipedia for LiteLLM"` against all 50 tool descriptions +2. Select the top 5 most relevant tools (e.g., `wikipedia-fetch`, `wikipedia-search`, etc.) +3. Pass only those 5 tools to the LLM +4. Add headers showing `x-litellm-semantic-filter: 50->5` + +This dramatically reduces prompt size while ensuring the LLM has access to the right tools for the task. + +## Performance + +The semantic filter is optimized for production: +- Router builds once on startup (no per-request overhead) +- Semantic matching typically takes under 50ms +- Fails gracefully - returns all tools if filtering fails +- No impact on latency for requests without MCP tools + +## Related + +- [MCP Overview](./mcp.md) - Learn about MCP in LiteLLM +- [MCP Permission Management](./mcp_control.md) - Control tool access by key/team +- [Using MCP](./mcp_usage.md) - Complete MCP usage guide diff --git a/docs/my-website/docs/mcp_troubleshoot.md b/docs/my-website/docs/mcp_troubleshoot.md index 27ba0e4d787..57e7bfa674d 100644 --- a/docs/my-website/docs/mcp_troubleshoot.md +++ b/docs/my-website/docs/mcp_troubleshoot.md @@ -6,6 +6,39 @@ When LiteLLM acts as an MCP proxy, traffic normally flows `Client → LiteLLM Pr For provisioning steps, transport options, and configuration fields, refer to [mcp.md](./mcp.md). +## Quick Start: Debug with One Command + +The fastest way to debug MCP issues is to enable **debug headers**. Run this curl against your LiteLLM proxy and check the response headers: + +```bash +curl -si -X POST http://localhost:4000/{your_mcp_server}/mcp \ + -H "Content-Type: application/json" \ + -H "x-litellm-api-key: Bearer sk-YOUR_KEY" \ + -H "x-litellm-mcp-debug: true" \ + -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' \ + 2>&1 | grep -i "x-mcp-debug" +``` + +This returns masked diagnostic headers that tell you exactly what's happening with authentication: + +``` +x-mcp-debug-inbound-auth: x-litellm-api-key=Bearer****1234 +x-mcp-debug-oauth2-token: Bearer****ef01 +x-mcp-debug-auth-resolution: oauth2-passthrough +x-mcp-debug-outbound-url: https://mcp.atlassian.com/v1/mcp +x-mcp-debug-server-auth-type: oauth2 +``` + +If you see `SAME_AS_LITELLM_KEY` in `x-mcp-debug-oauth2-token`, your LiteLLM API key is leaking to the MCP server instead of an OAuth2 token. See [Debugging OAuth](./mcp_oauth#debugging-oauth) for the fix and other common issues. + +For Claude Code, add the debug header to your MCP config: + +```bash +claude mcp add --transport http my_server http://localhost:4000/my_mcp/mcp \ + --header "x-litellm-api-key: Bearer sk-..." \ + --header "x-litellm-mcp-debug: true" +``` + ## Locate the Error Source Pin down where the failure occurs before adjusting settings so you do not mix symptoms from separate hops. @@ -13,7 +46,7 @@ Pin down where the failure occurs before adjusting settings so you do not mix sy ### LiteLLM UI / Playground Errors (LiteLLM → MCP) Failures shown on the MCP creation form or within the MCP Tool Testing Playground mean the LiteLLM proxy cannot reach the MCP server. Typical causes are misconfiguration (transport, headers, credentials), MCP/server outages, network/firewall blocks, or inaccessible OAuth metadata. - @@ -22,7 +55,7 @@ Failures shown on the MCP creation form or within the MCP Tool Testing Playgroun **Actions** - Capture LiteLLM proxy logs alongside MCP-server logs (see [Error Log Example](./mcp_troubleshoot#error-log-example-failed-mcp-call)) to inspect the request/response pair and stack traces. -- From the LiteLLM server, run Method 2 ([`curl` smoke test](./mcp_troubleshoot#curl-smoke-test)) against the MCP endpoint to confirm basic connectivity. +- From the LiteLLM server, run a [`curl` smoke test](./mcp_troubleshoot#curl-smoke-test) against the MCP endpoint to confirm basic connectivity. ### Client Traffic Issues (Client → LiteLLM) If only real client requests fail, determine whether LiteLLM ever reaches the MCP hop. @@ -43,7 +76,7 @@ During `/responses` or `/chat/completions`, LiteLLM may trigger MCP tool calls m - Validate MCP connectivity with the [MCP Inspector](./mcp_troubleshoot#mcp-inspector) to ensure the server responds. - Reproduce the same MCP call via the LiteLLM Playground to confirm LiteLLM can complete the MCP hop independently. - @@ -55,6 +88,10 @@ LiteLLM performs metadata discovery per the MCP spec ([section 2.3](https://mode - Use `curl ` (or similar) from the LiteLLM host to ensure the discovery document is reachable and contains the expected authorization/token endpoints. - Record the exact metadata URL, requested scopes, and any static client credentials so support can replay the discovery step if needed. +## Debugging OAuth + +For detailed OAuth2 debugging — including debug header reference, common misconfigurations, and example output — see [Debugging OAuth](./mcp_oauth#debugging-oauth). + ## Verify Connectivity Run lightweight validations before impacting production traffic. @@ -66,7 +103,7 @@ Use the MCP Inspector when you need to test both `Client → LiteLLM` and `Clien 2. Configure and connect: - **Transport Type:** choose the transport the client uses (Streamable HTTP for LiteLLM). - **URL:** the endpoint under test (LiteLLM MCP URL for `Client → LiteLLM`, or the MCP server URL for `Client → MCP`). - - **Custom Headers:** e.g., `Authorization: Bearer `. + - **Custom Headers:** e.g., `x-litellm-api-key: Bearer `. 3. Open the **Tools** tab and click **List Tools** to verify the MCP alias responds. ### `curl` Smoke Test @@ -79,7 +116,7 @@ curl -X POST https://your-target-domain.example.com/mcp \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' ``` -Add `-H "Authorization: Bearer "` when the target is a LiteLLM endpoint that requires authentication. Adjust the headers, or payload to target other MCP methods. Matching failures between `curl` and LiteLLM confirm that the MCP server or network/OAuth layer is the culprit. +Add `-H "x-litellm-api-key: Bearer "` when the target is a LiteLLM endpoint that requires authentication. Adjust the headers or payload to target other MCP methods. Matching failures between `curl` and LiteLLM confirm that the MCP server or network/OAuth layer is the culprit. ## Review Logs diff --git a/docs/my-website/docs/observability/datadog.md b/docs/my-website/docs/observability/datadog.md index 6f785be1013..9385b0020cf 100644 --- a/docs/my-website/docs/observability/datadog.md +++ b/docs/my-website/docs/observability/datadog.md @@ -253,3 +253,12 @@ LiteLLM supports customizing the following Datadog environment variables \* **Required when using Direct API** (default): `DD_API_KEY` and `DD_SITE` are required \* **Optional when using DataDog Agent**: Set `LITELLM_DD_AGENT_HOST` to use agent mode; `DD_API_KEY` and `DD_SITE` are not required for **Datadog Logs**. (**Note: `DD_API_KEY` IS REQUIRED for Datadog LLM Observability**) +## Automatic Tags + +LiteLLM automatically adds the following tags to your Datadog logs and metrics if the information is available in the request: + +| Tag | Description | Source | +|-----|-------------|--------| +| `team` | The team alias or ID associated with the API Key | `user_api_key_team_alias`, `team_alias`, `user_api_key_team_id`, or `team_id` in metadata | +| `request_tag` | Custom tags passed in the request | `request_tags` in logging payload | + diff --git a/docs/my-website/docs/observability/langfuse_integration.md b/docs/my-website/docs/observability/langfuse_integration.md index a81336c5bc6..d3c5a44d481 100644 --- a/docs/my-website/docs/observability/langfuse_integration.md +++ b/docs/my-website/docs/observability/langfuse_integration.md @@ -215,6 +215,66 @@ The following parameters can be updated on a continuation of a trace by passing Any other key value pairs passed into the metadata not listed in the above spec for a `litellm` completion will be added as a metadata key value pair for the generation. +#### Multiple Langfuse Projects (Per-Request Credentials) + +You can send traces to different Langfuse projects per request by passing credentials directly to `completion()` or `acompletion()`. This works alongside (or instead of) the global env vars and is useful when different teams or business processes use different Langfuse projects. + +Pass **`langfuse_public_key`**, **`langfuse_secret_key`** (or **`langfuse_secret`**), and optionally **`langfuse_host`** as keyword arguments: + +```python +import litellm +from litellm import completion + +# Optional: set a default via env for requests that don't pass credentials +# os.environ["LANGFUSE_PUBLIC_KEY"] = "pk-default..." +# os.environ["LANGFUSE_SECRET_KEY"] = "sk-default..." + +litellm.success_callback = ["langfuse"] +litellm.failure_callback = ["langfuse"] + +# Request 1 → Langfuse Project A +response_a = completion( + model="gpt-3.5-turbo", + messages=[{"role": "user", "content": "Hello from team A"}], + langfuse_public_key="pk-lf-project-a...", + langfuse_secret_key="sk-lf-project-a...", + langfuse_host="https://us.cloud.langfuse.com", # optional +) + +# Request 2 → Langfuse Project B (different project) +response_b = completion( + model="gpt-3.5-turbo", + messages=[{"role": "user", "content": "Hello from team B"}], + langfuse_public_key="pk-lf-project-b...", + langfuse_secret_key="sk-lf-project-b...", + langfuse_host="https://eu.cloud.langfuse.com", # optional, can differ per project +) +``` + +Async usage with per-request credentials: + +```python +import litellm +from litellm import acompletion + +litellm.success_callback = ["langfuse"] +litellm.failure_callback = ["langfuse"] + +response = await acompletion( + model="gpt-3.5-turbo", + messages=[{"role": "user", "content": "Hi"}], + langfuse_public_key="pk-lf-...", + langfuse_secret_key="sk-lf-...", + langfuse_host="https://us.cloud.langfuse.com", # optional +) +``` + +- **`langfuse_public_key`** – Langfuse project public key (required for per-request override). +- **`langfuse_secret_key`** or **`langfuse_secret`** – Langfuse secret key (either name is accepted). +- **`langfuse_host`** – Langfuse host URL (e.g. `https://us.cloud.langfuse.com`); optional, defaults to env or Langfuse cloud. + +When these are passed, that request uses this project (and host) for the Langfuse callback; when omitted, the callback uses the global Langfuse client (from env vars if set). LiteLLM caches a Langfuse client per credential set to avoid creating a new client on every request. + #### Disable Logging - Specific Calls To disable logging for specific calls use the `no-log` flag. diff --git a/docs/my-website/docs/pass_through/bedrock.md b/docs/my-website/docs/pass_through/bedrock.md index b8d20d77da0..65c5d8caadc 100644 --- a/docs/my-website/docs/pass_through/bedrock.md +++ b/docs/my-website/docs/pass_through/bedrock.md @@ -556,3 +556,147 @@ for event in response.get("completion"): print(completion) ``` + +## Using LangChain AWS SDK with LiteLLM + +You can use the [LangChain AWS SDK](https://python.langchain.com/docs/integrations/chat/bedrock/) with LiteLLM Proxy to get cost tracking, load balancing, and other LiteLLM features. + +### Quick Start + +**1. Install LangChain AWS**: + +```bash showLineNumbers +pip install langchain-aws +``` + +**2. Setup LiteLLM Proxy**: + +Create a `config.yaml`: + +```yaml showLineNumbers +model_list: + - model_name: claude-sonnet + litellm_params: + model: bedrock/us.anthropic.claude-3-7-sonnet-20250219-v1:0 + aws_region_name: us-east-1 + custom_llm_provider: bedrock +``` + +Start the proxy: + +```bash showLineNumbers +export AWS_ACCESS_KEY_ID="your-access-key" +export AWS_SECRET_ACCESS_KEY="your-secret-key" + +litellm --config config.yaml + +# RUNNING on http://0.0.0.0:4000 +``` + +**3. Use LangChain with LiteLLM**: + +```python showLineNumbers +from langchain_aws import ChatBedrockConverse +from langchain_core.messages import HumanMessage + +# Your LiteLLM API key +API_KEY = "Bearer sk-1234" + +# Initialize ChatBedrockConverse pointing to LiteLLM proxy +llm = ChatBedrockConverse( + model_id="us.anthropic.claude-3-7-sonnet-20250219-v1:0", + endpoint_url="http://localhost:4000/bedrock", + region_name="us-east-1", + aws_access_key_id=API_KEY, + aws_secret_access_key="bedrock" # Any non-empty value works +) + +# Invoke the model +messages = [HumanMessage(content="Hello, how are you?")] +response = llm.invoke(messages) + +print(response.content) +``` + +### Advanced Example: PDF Document Processing with Citations + +LangChain AWS SDK supports Bedrock's document processing features. Here's how to use it with LiteLLM: + +```python showLineNumbers +import os +import json +from langchain_aws import ChatBedrockConverse +from langchain_core.messages import HumanMessage + +# Your LiteLLM API key +API_KEY = "Bearer sk-1234" + +def get_llm() -> ChatBedrockConverse: + """Initialize LLM pointing to LiteLLM proxy""" + llm = ChatBedrockConverse( + model_id="us.anthropic.claude-3-7-sonnet-20250219-v1:0", + base_model_id="anthropic.claude-3-7-sonnet-20250219-v1:0", + endpoint_url="http://localhost:4000/bedrock", + region_name="us-east-1", + aws_access_key_id=API_KEY, + aws_secret_access_key="bedrock" + ) + return llm + +if __name__ == "__main__": + # Initialize the LLM + llm = get_llm() + + # Read PDF file as bytes (Converse API requires raw bytes) + with open("your-document.pdf", "rb") as file: + file_bytes = file.read() + + # Prepare messages with document attachment + messages = [ + HumanMessage(content=[ + {"text": "What is the policy number in this document?"}, + { + "document": { + "format": "pdf", + "name": "PolicyDocument", + "source": {"bytes": file_bytes}, + "citations": {"enabled": True} + } + } + ]) + ] + + # Invoke the LLM + response = llm.invoke(messages) + + # Print response with citations + print(json.dumps(response.content, indent=4)) +``` + +### Supported LangChain Features + +All LangChain AWS features work with LiteLLM: + +| Feature | Supported | Notes | +|---------|-----------|-------| +| Text Generation | ✅ | Full support | +| Streaming | ✅ | Use `stream()` method | +| Document Processing | ✅ | PDF, images, etc. | +| Citations | ✅ | Enable in document config | +| Tool Use | ✅ | Function calling support | +| Multi-modal | ✅ | Text + images + documents | + +### Troubleshooting + +**Issue**: `UnknownOperationException` error + +**Solution**: Make sure you're using the correct endpoint URL format: +- ✅ Correct: `http://localhost:4000/bedrock` +- ❌ Wrong: `http://localhost:4000/bedrock/v2` + +**Issue**: Authentication errors + +**Solution**: Ensure your API key is in the correct format: +```python +aws_access_key_id="Bearer sk-1234" # Include "Bearer " prefix +``` diff --git a/docs/my-website/docs/pass_through/openai_passthrough.md b/docs/my-website/docs/pass_through/openai_passthrough.md index d7c98eba7b3..49026f8aa2d 100644 --- a/docs/my-website/docs/pass_through/openai_passthrough.md +++ b/docs/my-website/docs/pass_through/openai_passthrough.md @@ -1,6 +1,6 @@ # OpenAI Passthrough -Pass-through endpoints for `/openai` +Pass-through endpoints for direct OpenAI API access ## Overview @@ -10,12 +10,27 @@ Pass-through endpoints for `/openai` | Logging | ✅ | Works across all integrations | | Streaming | ✅ | Fully supported | -### When to use this? +## Available Endpoints + +### `/openai_passthrough` - Recommended +Dedicated passthrough endpoint that guarantees direct routing to OpenAI without conflicts. + +**Use this for:** +- OpenAI Responses API (`/v1/responses`) +- Any endpoint where you need guaranteed passthrough +- When `/openai` routes are conflicting with LiteLLM's native implementations + +### `/openai` - Legacy +Standard passthrough endpoint that may conflict with LiteLLM's native implementations. + +**Note:** Some endpoints like `/openai/v1/responses` will be routed to LiteLLM's native implementation instead of OpenAI. + +## When to use this? - For 90% of your use cases, you should use the [native LiteLLM OpenAI Integration](https://docs.litellm.ai/docs/providers/openai) (`/chat/completions`, `/embeddings`, `/completions`, `/images`, `/batches`, etc.) -- Use this passthrough to call less popular or newer OpenAI endpoints that LiteLLM doesn't fully support yet, such as `/assistants`, `/threads`, `/vector_stores` +- Use `/openai_passthrough` to call less popular or newer OpenAI endpoints that LiteLLM doesn't fully support yet, such as `/assistants`, `/threads`, `/vector_stores`, `/responses` -Simply replace `https://api.openai.com` with `LITELLM_PROXY_BASE_URL/openai` +Simply replace `https://api.openai.com` with `LITELLM_PROXY_BASE_URL/openai_passthrough` ## Usage Examples @@ -34,7 +49,7 @@ Make sure you do the following: import openai client = openai.OpenAI( - base_url="http://0.0.0.0:4000/openai", # /openai + base_url="http://0.0.0.0:4000/openai_passthrough", # /openai_passthrough api_key="sk-anything" # ) ``` diff --git a/docs/my-website/docs/projects/openai-agents.md b/docs/my-website/docs/projects/openai-agents.md index 95a2191b883..86983e7e510 100644 --- a/docs/my-website/docs/projects/openai-agents.md +++ b/docs/my-website/docs/projects/openai-agents.md @@ -1,22 +1,121 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; # OpenAI Agents SDK -The [OpenAI Agents SDK](https://github.com/openai/openai-agents-python) is a lightweight framework for building multi-agent workflows. -It includes an official LiteLLM extension that lets you use any of the 100+ supported providers (Anthropic, Gemini, Mistral, Bedrock, etc.) +Use OpenAI Agents SDK with any LLM provider through LiteLLM Proxy. + +The [OpenAI Agents SDK](https://github.com/openai/openai-agents-python) is a lightweight framework for building multi-agent workflows. It includes an official LiteLLM extension that lets you use any of the 100+ supported providers. + +## Quick Start + +### 1. Install Dependencies + +```bash +pip install "openai-agents[litellm]" +``` + +### 2. Add Model to Config + +```yaml title="config.yaml" +model_list: + - model_name: gpt-4o + litellm_params: + model: "openai/gpt-4o" + api_key: "os.environ/OPENAI_API_KEY" + + - model_name: claude-sonnet + litellm_params: + model: "anthropic/claude-3-5-sonnet-20241022" + api_key: "os.environ/ANTHROPIC_API_KEY" + + - model_name: gemini-pro + litellm_params: + model: "gemini/gemini-2.0-flash-exp" + api_key: "os.environ/GEMINI_API_KEY" +``` + +### 3. Start LiteLLM Proxy + +```bash +litellm --config config.yaml +``` + +### 4. Use with Proxy + + + ```python from agents import Agent, Runner from agents.extensions.models.litellm_model import LitellmModel +# Point to LiteLLM proxy agent = Agent( name="Assistant", instructions="You are a helpful assistant.", - model=LitellmModel(model="provider/model-name") + model=LitellmModel( + model="claude-sonnet", # Model from config.yaml + api_key="sk-1234", # LiteLLM API key + base_url="http://localhost:4000" + ) ) -result = Runner.run_sync(agent, "your_prompt_here") -print("Result:", result.final_output) +result = await Runner.run(agent, "What is LiteLLM?") +print(result.final_output) ``` -- [GitHub](https://github.com/openai/openai-agents-python) -- [LiteLLM Extension Docs](https://openai.github.io/openai-agents-python/ref/extensions/litellm/) + + + +```python +from agents import Agent, Runner +from agents.extensions.models.litellm_model import LitellmModel + +# Use any provider directly +agent = Agent( + name="Assistant", + instructions="You are a helpful assistant.", + model=LitellmModel( + model="anthropic/claude-3-5-sonnet-20241022", + api_key="your-anthropic-key" + ) +) + +result = await Runner.run(agent, "What is LiteLLM?") +print(result.final_output) +``` + + + + +## Track Usage + +Enable usage tracking to monitor token consumption: + +```python +from agents import Agent, ModelSettings +from agents.extensions.models.litellm_model import LitellmModel + +agent = Agent( + name="Assistant", + model=LitellmModel(model="claude-sonnet", api_key="sk-1234"), + model_settings=ModelSettings(include_usage=True) +) + +result = await Runner.run(agent, "Hello") +print(result.context_wrapper.usage) # Token counts +``` + +## Environment Variables + +| Variable | Value | Description | +|----------|-------|-------------| +| `LITELLM_BASE_URL` | `http://localhost:4000` | LiteLLM proxy URL | +| `LITELLM_API_KEY` | `sk-1234` | Your LiteLLM API key | + +## Related Resources + +- [OpenAI Agents SDK Documentation](https://openai.github.io/openai-agents-python/) +- [LiteLLM Extension Docs](https://openai.github.io/openai-agents-python/models/litellm/) +- [LiteLLM Proxy Quick Start](../proxy/quick_start) diff --git a/docs/my-website/docs/providers/anthropic.md b/docs/my-website/docs/providers/anthropic.md index 446d663c5ac..de5a4dc610c 100644 --- a/docs/my-website/docs/providers/anthropic.md +++ b/docs/my-website/docs/providers/anthropic.md @@ -1473,6 +1473,20 @@ LiteLLM translates OpenAI's `reasoning_effort` to Anthropic's `thinking` paramet | "medium" | "budget_tokens": 2048 | | "high" | "budget_tokens": 4096 | +:::note +For Claude Opus 4.6, all `reasoning_effort` values (`low`, `medium`, `high`) are mapped to `thinking: {type: "adaptive"}`. To use explicit thinking budgets, pass the native `thinking` parameter directly: + +```python +from litellm import completion + +resp = completion( + model="anthropic/claude-opus-4-6", + messages=[{"role": "user", "content": "What is the capital of France?"}], + thinking={"type": "enabled", "budget_tokens": 1024}, +) +``` +::: + @@ -1614,8 +1628,65 @@ curl http://0.0.0.0:4000/v1/chat/completions \ +#### Adaptive Thinking (Claude Opus 4.6) + + +```python +response = litellm.completion( + model="anthropic/claude-opus-4-6", + messages=[{"role": "user", "content": "What is the optimal strategy for solving this problem?"}], + thinking={"type": "adaptive"}, +) +``` + + + + +```bash +curl http://0.0.0.0:4000/v1/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer $LITELLM_KEY" \ + -d '{ + "model": "anthropic/claude-opus-4-6", + "messages": [{"role": "user", "content": "What is the optimal strategy for solving this problem?"}], + "thinking": {"type": "adaptive"} + }' +``` + + + + +#### Enabled Thinking with Budget + + + + +```python +response = litellm.completion( + model="anthropic/claude-opus-4-6", + messages=[{"role": "user", "content": "What is the capital of France?"}], + thinking={"type": "enabled", "budget_tokens": 5000}, +) +``` + + + + +```bash +curl http://0.0.0.0:4000/v1/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer $LITELLM_KEY" \ + -d '{ + "model": "anthropic/claude-opus-4-6", + "messages": [{"role": "user", "content": "What is the capital of France?"}], + "thinking": {"type": "enabled", "budget_tokens": 5000} + }' +``` + + + ## **Passing Extra Headers to Anthropic API** diff --git a/docs/my-website/docs/providers/anthropic_tool_search.md b/docs/my-website/docs/providers/anthropic_tool_search.md index 28ce5688eeb..203a2947ebc 100644 --- a/docs/my-website/docs/providers/anthropic_tool_search.md +++ b/docs/my-website/docs/providers/anthropic_tool_search.md @@ -1,43 +1,46 @@ -# Anthropic Tool Search +# Tool Search Tool search enables Claude to dynamically discover and load tools on-demand from large tool catalogs (10,000+ tools). Instead of loading all tool definitions into the context window upfront, Claude searches your tool catalog and loads only the tools it needs. +## Supported Providers + +| Provider | Chat Completions API | Messages API | +|----------|---------------------|--------------| +| **Anthropic API** | ✅ | ✅ | +| **Azure Anthropic** (Microsoft Foundry) | ✅ | ✅ | +| **Google Cloud Vertex AI** | ✅ | ✅ | +| **Amazon Bedrock** | ✅ (Invoke API only, Opus 4.5 only) | ✅ (Invoke API only, Opus 4.5 only) | + + ## Benefits - **Context efficiency**: Avoid consuming massive portions of your context window with tool definitions - **Better tool selection**: Claude's tool selection accuracy degrades with more than 30-50 tools. Tool search maintains accuracy even with thousands of tools - **On-demand loading**: Tools are only loaded when Claude needs them -## Supported Models - -Tool search is available on: -- Claude Opus 4.5 -- Claude Sonnet 4.5 - -## Supported Platforms - -- Anthropic API (direct) -- Azure Anthropic (Microsoft Foundry) -- Google Cloud Vertex AI -- Amazon Bedrock (invoke API only, not converse API) - ## Tool Search Variants LiteLLM supports both tool search variants: ### 1. Regex Tool Search (`tool_search_tool_regex_20251119`) -Claude constructs regex patterns to search for tools. +Claude constructs regex patterns to search for tools. Best for exact pattern matching (faster). ### 2. BM25 Tool Search (`tool_search_tool_bm25_20251119`) -Claude uses natural language queries to search for tools using the BM25 algorithm. +Claude uses natural language queries to search for tools using the BM25 algorithm. Best for natural language semantic search. -## Quick Start +**Note**: BM25 variant is not supported on Bedrock. -### Basic Example with Regex Tool Search +--- -```python +## Chat Completions API + +### SDK Usage + +#### Basic Example with Regex Tool Search + +```python showLineNumbers title="Basic Tool Search Example" import litellm response = litellm.completion( @@ -70,26 +73,6 @@ response = litellm.completion( } }, "defer_loading": True # Mark for deferred loading - }, - # Another deferred tool - { - "type": "function", - "function": { - "name": "search_files", - "description": "Search through files in the workspace", - "parameters": { - "type": "object", - "properties": { - "query": {"type": "string"}, - "file_types": { - "type": "array", - "items": {"type": "string"} - } - }, - "required": ["query"] - } - }, - "defer_loading": True } ] ) @@ -97,9 +80,9 @@ response = litellm.completion( print(response.choices[0].message.content) ``` -### BM25 Tool Search Example +#### BM25 Tool Search Example -```python +```python showLineNumbers title="BM25 Tool Search" import litellm response = litellm.completion( @@ -134,9 +117,9 @@ response = litellm.completion( ) ``` -## Using with Azure Anthropic +#### Azure Anthropic Example -```python +```python showLineNumbers title="Azure Anthropic Tool Search" import litellm response = litellm.completion( @@ -170,9 +153,9 @@ response = litellm.completion( ) ``` -## Using with Vertex AI +#### Vertex AI Example -```python +```python showLineNumbers title="Vertex AI Tool Search" import litellm response = litellm.completion( @@ -192,11 +175,9 @@ response = litellm.completion( ) ``` -## Streaming Support +#### Streaming Support -Tool search works with streaming: - -```python +```python showLineNumbers title="Streaming with Tool Search" import litellm response = litellm.completion( @@ -233,13 +214,13 @@ for chunk in response: print(chunk.choices[0].delta.content, end="") ``` -## LiteLLM Proxy +### AI Gateway Usage -Tool search works automatically through the LiteLLM proxy: +Tool search works automatically through the LiteLLM proxy. -### Proxy Config +#### Proxy Configuration -```yaml +```yaml showLineNumbers title="config.yaml" model_list: - model_name: claude-sonnet litellm_params: @@ -247,18 +228,19 @@ model_list: api_key: os.environ/ANTHROPIC_API_KEY ``` -### Client Request +#### Client Request -```python -import openai +```python showLineNumbers title="Client Request via Proxy" +from anthropic import Anthropic -client = openai.OpenAI( +client = Anthropic( api_key="your-litellm-proxy-key", base_url="http://0.0.0.0:4000" ) -response = client.chat.completions.create( +response = client.messages.create( model="claude-sonnet", + max_tokens=1024, messages=[ {"role": "user", "content": "What's the weather?"} ], @@ -268,17 +250,14 @@ response = client.chat.completions.create( "name": "tool_search_tool_regex" }, { - "type": "function", - "function": { - "name": "get_weather", - "description": "Get weather information", - "parameters": { - "type": "object", - "properties": { - "location": {"type": "string"} - }, - "required": ["location"] - } + "name": "get_weather", + "description": "Get weather information", + "input_schema": { + "type": "object", + "properties": { + "location": {"type": "string"} + }, + "required": ["location"] }, "defer_loading": True } @@ -286,127 +265,278 @@ response = client.chat.completions.create( ) ``` -## Important Notes +--- -### Beta Header +## Messages API -LiteLLM automatically detects tool search tools and adds the appropriate beta header based on your provider: +The Messages API provides native Anthropic-style tool search support via the `litellm.anthropic.messages` interface. -- **Anthropic API & Microsoft Foundry**: `advanced-tool-use-2025-11-20` -- **Google Cloud Vertex AI**: `tool-search-tool-2025-10-19` -- **Amazon Bedrock** (Invoke API, Opus 4.5 only): `tool-search-tool-2025-10-19` +### SDK Usage -You don't need to manually specify beta headers—LiteLLM handles this automatically. +#### Basic Example -### Deferred Loading +```python showLineNumbers title="Messages API - Basic Tool Search" +import litellm -- Tools with `defer_loading: true` are only loaded when Claude discovers them via search -- At least one tool must be non-deferred (the tool search tool itself) -- Keep your 3-5 most frequently used tools as non-deferred for optimal performance - -### Tool Descriptions - -Write clear, descriptive tool names and descriptions that match how users describe tasks. The search algorithm uses: -- Tool names -- Tool descriptions -- Argument names -- Argument descriptions - -### Usage Tracking - -Tool search requests are tracked in the usage object: - -```python -response = litellm.completion( - model="anthropic/claude-sonnet-4-5-20250929", - messages=[{"role": "user", "content": "Search for tools"}], - tools=[...] +response = await litellm.anthropic.messages.acreate( + model="anthropic/claude-sonnet-4-20250514", + messages=[ + { + "role": "user", + "content": "What's the weather in San Francisco?" + } + ], + tools=[ + { + "type": "tool_search_tool_regex_20251119", + "name": "tool_search_tool_regex" + }, + { + "name": "get_weather", + "description": "Get the current weather for a location", + "input_schema": { + "type": "object", + "properties": { + "location": { + "type": "string", + "description": "The city and state, e.g. San Francisco, CA" + } + }, + "required": ["location"] + }, + "defer_loading": True + } + ], + max_tokens=1024, + extra_headers={"anthropic-beta": "advanced-tool-use-2025-11-20"} ) -# Check tool search usage -if response.usage.server_tool_use: - print(f"Tool search requests: {response.usage.server_tool_use.tool_search_requests}") +print(response) ``` -## Error Handling +#### Azure Anthropic Messages Example -### All Tools Deferred +```python showLineNumbers title="Azure Anthropic Messages API" +import litellm -```python -# ❌ This will fail - at least one tool must be non-deferred -tools = [ - { - "type": "function", - "function": {...}, - "defer_loading": True - } -] - -# ✅ Correct - tool search tool is non-deferred -tools = [ - { - "type": "tool_search_tool_regex_20251119", - "name": "tool_search_tool_regex" - }, - { - "type": "function", - "function": {...}, - "defer_loading": True - } -] +response = await litellm.anthropic.messages.acreate( + model="azure_anthropic/claude-sonnet-4-20250514", + messages=[ + { + "role": "user", + "content": "What's the stock price of Apple?" + } + ], + tools=[ + { + "type": "tool_search_tool_regex_20251119", + "name": "tool_search_tool_regex" + }, + { + "name": "get_stock_price", + "description": "Get the current stock price for a ticker symbol", + "input_schema": { + "type": "object", + "properties": { + "ticker": { + "type": "string", + "description": "The stock ticker symbol, e.g. AAPL" + } + }, + "required": ["ticker"] + }, + "defer_loading": True + } + ], + max_tokens=1024, + extra_headers={"anthropic-beta": "advanced-tool-use-2025-11-20"} +) ``` -### Missing Tool Definition +#### Vertex AI Messages Example -If Claude references a tool that isn't in your deferred tools list, you'll get an error. Make sure all tools that might be discovered are included in the tools parameter with `defer_loading: true`. +```python showLineNumbers title="Vertex AI Messages API" +import litellm -## Best Practices +response = await litellm.anthropic.messages.acreate( + model="vertex_ai/claude-sonnet-4@20250514", + messages=[ + { + "role": "user", + "content": "Search the web for information about AI" + } + ], + tools=[ + { + "type": "tool_search_tool_bm25_20251119", + "name": "tool_search_tool_bm25" + }, + { + "name": "search_web", + "description": "Search the web for information", + "input_schema": { + "type": "object", + "properties": { + "query": { + "type": "string", + "description": "The search query" + } + }, + "required": ["query"] + }, + "defer_loading": True + } + ], + max_tokens=1024, + extra_headers={"anthropic-beta": "tool-search-tool-2025-10-19"} +) +``` -1. **Keep frequently used tools non-deferred**: Your 3-5 most common tools should not have `defer_loading: true` +#### Bedrock Messages Example -2. **Use semantic descriptions**: Tool descriptions should use natural language that matches user queries +```python showLineNumbers title="Bedrock Messages API (Invoke)" +import litellm -3. **Choose the right variant**: - - Use **regex** for exact pattern matching (faster) - - Use **BM25** for natural language semantic search +response = await litellm.anthropic.messages.acreate( + model="bedrock/invoke/anthropic.claude-opus-4-20250514-v1:0", + messages=[ + { + "role": "user", + "content": "What's the weather?" + } + ], + tools=[ + { + "type": "tool_search_tool_regex_20251119", + "name": "tool_search_tool_regex" + }, + { + "name": "get_weather", + "description": "Get weather information", + "input_schema": { + "type": "object", + "properties": { + "location": {"type": "string"} + }, + "required": ["location"] + }, + "defer_loading": True + } + ], + max_tokens=1024, + extra_headers={"anthropic-beta": "tool-search-tool-2025-10-19"} +) +``` -4. **Monitor usage**: Track `tool_search_requests` in the usage object to understand search patterns +#### Streaming Support -5. **Optimize tool catalog**: Remove unused tools and consolidate similar functionality +```python showLineNumbers title="Messages API - Streaming" +import litellm +import json -## When to Use Tool Search +response = await litellm.anthropic.messages.acreate( + model="anthropic/claude-sonnet-4-20250514", + messages=[ + { + "role": "user", + "content": "What's the weather in Tokyo?" + } + ], + tools=[ + { + "type": "tool_search_tool_regex_20251119", + "name": "tool_search_tool_regex" + }, + { + "name": "get_weather", + "description": "Get weather information", + "input_schema": { + "type": "object", + "properties": { + "location": {"type": "string"} + }, + "required": ["location"] + }, + "defer_loading": True + } + ], + max_tokens=1024, + stream=True, + extra_headers={"anthropic-beta": "advanced-tool-use-2025-11-20"} +) -**Good use cases:** -- 10+ tools available in your system -- Tool definitions consuming >10K tokens -- Experiencing tool selection accuracy issues -- Building systems with multiple tool categories -- Tool library growing over time +async for chunk in response: + if isinstance(chunk, bytes): + chunk_str = chunk.decode("utf-8") + for line in chunk_str.split("\n"): + if line.startswith("data: "): + try: + json_data = json.loads(line[6:]) + print(json_data) + except json.JSONDecodeError: + pass +``` -**When traditional tool calling is better:** -- Less than 10 tools total -- All tools are frequently used -- Very small tool definitions (\<100 tokens total) +### AI Gateway Usage -## Limitations +Configure the proxy to use Messages API endpoints. -- Not compatible with tool use examples -- Requires Claude Opus 4.5 or Sonnet 4.5 -- On Bedrock, only available via invoke API (not converse API) -- On Bedrock, only supported for Claude Opus 4.5 (not Sonnet 4.5) -- BM25 variant (`tool_search_tool_bm25_20251119`) is not supported on Bedrock -- Maximum 10,000 tools in catalog -- Returns 3-5 most relevant tools per search +#### Proxy Configuration -### Bedrock-Specific Notes +```yaml showLineNumbers title="config.yaml" +model_list: + - model_name: claude-sonnet-messages + litellm_params: + model: anthropic/claude-sonnet-4-20250514 + api_key: os.environ/ANTHROPIC_API_KEY +``` -When using Bedrock's Invoke API: -- The regex variant (`tool_search_tool_regex_20251119`) is automatically normalized to `tool_search_tool_regex` -- The BM25 variant (`tool_search_tool_bm25_20251119`) is automatically filtered out as it's not supported -- Tool search is only available for Claude Opus 4.5 models +#### Client Request + +```python showLineNumbers title="Client Request via Proxy (Messages API)" +from anthropic import Anthropic + +client = Anthropic( + api_key="your-litellm-proxy-key", + base_url="http://0.0.0.0:4000" +) + +response = client.messages.create( + model="claude-sonnet-messages", + max_tokens=1024, + messages=[ + { + "role": "user", + "content": "What's the weather?" + } + ], + tools=[ + { + "type": "tool_search_tool_regex_20251119", + "name": "tool_search_tool_regex" + }, + { + "name": "get_weather", + "description": "Get weather information", + "input_schema": { + "type": "object", + "properties": { + "location": {"type": "string"} + }, + "required": ["location"] + }, + "defer_loading": True + } + ], + extra_headers={"anthropic-beta": "advanced-tool-use-2025-11-20"} +) + +print(response) +``` + +--- ## Additional Resources - [Anthropic Tool Search Documentation](https://docs.anthropic.com/en/docs/build-with-claude/tool-use/tool-search) - [LiteLLM Tool Calling Guide](https://docs.litellm.ai/docs/completion/function_call) - diff --git a/docs/my-website/docs/providers/azure_ai/azure_model_router.md b/docs/my-website/docs/providers/azure_ai/azure_model_router.md index 5e14c7283f6..16bc1afb70e 100644 --- a/docs/my-website/docs/providers/azure_ai/azure_model_router.md +++ b/docs/my-website/docs/providers/azure_ai/azure_model_router.md @@ -5,19 +5,38 @@ Azure Model Router is a feature in Azure AI Foundry that automatically routes yo ## Key Features - **Automatic Model Selection**: Azure Model Router dynamically selects the best model for your request -- **Cost Tracking**: LiteLLM automatically tracks costs based on the actual model used (e.g., `gpt-4.1-nano`), not the router endpoint +- **Cost Tracking**: LiteLLM automatically tracks costs based on the actual model used (e.g., `gpt-4.1-nano`), plus the Model Router infrastructure fee - **Streaming Support**: Full support for streaming responses with accurate cost calculation +- **Simple Configuration**: Easy to set up via UI or config file + +## Model Naming Pattern + +Use the pattern: `azure_ai/model_router/` + +**Components:** +- `azure_ai` - The provider identifier +- `model_router` - Indicates this is a Model Router deployment +- `` - Your actual deployment name from Azure AI Foundry (e.g., `azure-model-router`) + +**Example:** `azure_ai/model_router/azure-model-router` + +**How it works:** +- LiteLLM automatically strips the `model_router/` prefix when sending requests to Azure +- Only your deployment name (e.g., `azure-model-router`) is sent to the Azure API +- The full path is preserved in responses and logs for proper cost tracking ## LiteLLM Python SDK ### Basic Usage +Use the pattern `azure_ai/model_router/` where `` is your Azure deployment name: + ```python import litellm import os response = litellm.completion( - model="azure_ai/azure-model-router", + model="azure_ai/model_router/azure-model-router", # Use your deployment name messages=[{"role": "user", "content": "Hello!"}], api_base="https://your-endpoint.cognitiveservices.azure.com/openai/v1/", api_key=os.getenv("AZURE_MODEL_ROUTER_API_KEY"), @@ -26,6 +45,13 @@ response = litellm.completion( print(response) ``` +**Pattern Explanation:** +- `azure_ai` - The provider +- `model_router` - Indicates this is a model router deployment +- `azure-model-router` - Your actual deployment name from Azure AI Foundry + +LiteLLM will automatically strip the `model_router/` prefix when sending the request to Azure, so only `azure-model-router` is sent to the API. + ### Streaming with Usage Tracking ```python @@ -33,7 +59,7 @@ import litellm import os response = await litellm.acompletion( - model="azure_ai/azure-model-router", + model="azure_ai/model_router/azure-model-router", # Use your deployment name messages=[{"role": "user", "content": "hi"}], api_base="https://your-endpoint.cognitiveservices.azure.com/openai/v1/", api_key=os.getenv("AZURE_MODEL_ROUTER_API_KEY"), @@ -51,13 +77,15 @@ async for chunk in response: ```yaml model_list: - - model_name: azure-model-router + - model_name: azure-model-router # Public name for your users litellm_params: - model: azure_ai/azure-model-router + model: azure_ai/model_router/azure-model-router # Use your deployment name api_base: https://your-endpoint.cognitiveservices.azure.com/openai/v1/ api_key: os.environ/AZURE_MODEL_ROUTER_API_KEY ``` +**Note:** Replace `azure-model-router` in the model path with your actual deployment name from Azure AI Foundry. + ### Start Proxy ```bash @@ -80,49 +108,42 @@ curl -X POST http://localhost:4000/chat/completions \ This walkthrough shows how to add an Azure Model Router endpoint to LiteLLM using the Admin Dashboard. -### Select Provider +### Quick Start + +1. Navigate to the **Models** page in the LiteLLM UI +2. Select **"Azure AI Foundry (Studio)"** as the provider +3. Enter your deployment name (e.g., `azure-model-router`) +4. LiteLLM will automatically format it as `azure_ai/model_router/azure-model-router` +5. Add your API base URL and API key +6. Test and save + +### Detailed Walkthrough + +#### Step 1: Select Provider Navigate to the Models page and select "Azure AI Foundry (Studio)" as the provider. -#### Navigate to Models Page +##### Navigate to Models Page ![Navigate to Models](./img/azure_model_router_01.jpeg) -#### Click Provider Dropdown +##### Click Provider Dropdown ![Click Provider](./img/azure_model_router_02.jpeg) -#### Choose Azure AI Foundry +##### Choose Azure AI Foundry ![Select Azure AI Foundry](./img/azure_model_router_03.jpeg) -### Configure Model Name +#### Step 2: Enter Deployment Name -Set up the model name by entering `azure_ai/` followed by your model router deployment name from Azure. +**New Simplified Method:** Just enter your deployment name directly in the text field. If your deployment name contains "model-router" or "model_router", LiteLLM will automatically format it as `azure_ai/model_router/`. -#### Click Model Name Field +**Example:** +- Enter: `azure-model-router` +- LiteLLM creates: `azure_ai/model_router/azure-model-router` -![Click Model Field](./img/azure_model_router_04.jpeg) - -#### Select Custom Model Name - -![Select Custom Model](./img/azure_model_router_05.jpeg) - -#### Enter LiteLLM Model Name - -![LiteLLM Model Name](./img/azure_model_router_06.jpeg) - -#### Click Custom Model Name Field - -![Enter Custom Name Field](./img/azure_model_router_07.jpeg) - -#### Type Model Prefix - -Type `azure_ai/` as the prefix. - -![Type azure_ai prefix](./img/azure_model_router_08.jpeg) - -#### Copy Model Name from Azure Portal +##### Copy Deployment Name from Azure Portal Switch to Azure AI Foundry and copy your model router deployment name. @@ -130,73 +151,79 @@ Switch to Azure AI Foundry and copy your model router deployment name. ![Copy Model Name](./img/azure_model_router_10.jpeg) -#### Paste Model Name +##### Enter Deployment Name in LiteLLM -Paste to get `azure_ai/azure-model-router`. +Paste your deployment name (e.g., `azure-model-router`) directly into the text field. -![Paste Model Name](./img/azure_model_router_11.jpeg) +![Enter Deployment Name](./img/azure_model_router_04.jpeg) -### Configure API Base and Key +**What happens behind the scenes:** +- You enter: `azure-model-router` +- LiteLLM automatically detects this is a model router deployment +- The full model path becomes: `azure_ai/model_router/azure-model-router` +- When making API calls, only `azure-model-router` is sent to Azure + +#### Step 3: Configure API Base and Key Copy the endpoint URL and API key from Azure portal. -#### Copy API Base URL from Azure +##### Copy API Base URL from Azure ![Copy API Base](./img/azure_model_router_12.jpeg) -#### Enter API Base in LiteLLM +##### Enter API Base in LiteLLM ![Click API Base Field](./img/azure_model_router_13.jpeg) ![Paste API Base](./img/azure_model_router_14.jpeg) -#### Copy API Key from Azure +##### Copy API Key from Azure ![Copy API Key](./img/azure_model_router_15.jpeg) -#### Enter API Key in LiteLLM +##### Enter API Key in LiteLLM ![Enter API Key](./img/azure_model_router_16.jpeg) -### Test and Add Model +#### Step 4: Test and Add Model Verify your configuration works and save the model. -#### Test Connection +##### Test Connection ![Test Connection](./img/azure_model_router_17.jpeg) -#### Close Test Dialog +##### Close Test Dialog ![Close Dialog](./img/azure_model_router_18.jpeg) -#### Add Model +##### Add Model ![Add Model](./img/azure_model_router_19.jpeg) -### Verify in Playground +#### Step 5: Verify in Playground Test your model and verify cost tracking is working. -#### Open Playground +##### Open Playground ![Go to Playground](./img/azure_model_router_20.jpeg) -#### Select Model +##### Select Model ![Select Model](./img/azure_model_router_21.jpeg) -#### Send Test Message +##### Send Test Message ![Send Message](./img/azure_model_router_22.jpeg) -#### View Logs +##### View Logs ![View Logs](./img/azure_model_router_23.jpeg) -#### Verify Cost Tracking +##### Verify Cost Tracking -Cost is tracked based on the actual model used (e.g., `gpt-4.1-nano`). +Cost is tracked based on the actual model used (e.g., `gpt-4.1-nano`), plus a flat infrastructure cost of $0.14 per million input tokens for using the Model Router. ![Verify Cost](./img/azure_model_router_24.jpeg) @@ -205,28 +232,50 @@ Cost is tracked based on the actual model used (e.g., `gpt-4.1-nano`). LiteLLM automatically handles cost tracking for Azure Model Router by: 1. **Detecting the actual model**: When Azure Model Router routes your request to a specific model (e.g., `gpt-4.1-nano-2025-04-14`), LiteLLM extracts this from the response -2. **Calculating accurate costs**: Costs are calculated based on the actual model used, not the router endpoint name +2. **Calculating accurate costs**: Costs are calculated based on: + - The actual model used (e.g., `gpt-4.1-nano` token costs) + - Plus a flat infrastructure cost of **$0.14 per million input tokens** for using the Model Router 3. **Streaming support**: Cost tracking works correctly for both streaming and non-streaming requests +### Cost Breakdown + +When you use Azure Model Router, the total cost includes: + +- **Model Cost**: Based on the actual model that handled your request (e.g., `gpt-4.1-nano`) +- **Router Flat Cost**: $0.14 per million input tokens (Azure AI Foundry infrastructure fee) + ### Example Response with Cost ```python import litellm response = litellm.completion( - model="azure_ai/azure-model-router", + model="azure_ai/model_router/azure-model-router", messages=[{"role": "user", "content": "Hello!"}], api_base="https://your-endpoint.cognitiveservices.azure.com/openai/v1/", api_key="your-api-key", ) # The response will show the actual model used -print(f"Model used: {response.model}") # e.g., "gpt-4.1-nano-2025-04-14" +print(f"Model used: {response.model}") # e.g., "azure_ai/gpt-4.1-nano-2025-04-14" -# Get cost +# Get cost (includes both model cost and router flat cost) from litellm import completion_cost cost = completion_cost(completion_response=response) -print(f"Cost: ${cost}") +print(f"Total cost: ${cost}") + +# Access detailed cost breakdown +if hasattr(response, '_hidden_params') and 'response_cost' in response._hidden_params: + print(f"Response cost: ${response._hidden_params['response_cost']}") ``` +### Viewing Cost Breakdown in UI + +When viewing logs in the LiteLLM UI, you'll see: +- **Model Cost**: The cost for the actual model used +- **Azure Model Router Flat Cost**: The $0.14/M input tokens infrastructure fee +- **Total Cost**: Sum of both costs + +This breakdown helps you understand exactly what you're paying for when using the Model Router. + diff --git a/docs/my-website/docs/providers/bedrock.md b/docs/my-website/docs/providers/bedrock.md index 487212ad655..e546ed97656 100644 --- a/docs/my-website/docs/providers/bedrock.md +++ b/docs/my-website/docs/providers/bedrock.md @@ -9,7 +9,7 @@ ALL Bedrock models (Anthropic, Meta, Deepseek, Mistral, Amazon, etc.) are Suppor | Description | Amazon Bedrock is a fully managed service that offers a choice of high-performing foundation models (FMs). | | Provider Route on LiteLLM | `bedrock/`, [`bedrock/converse/`](#set-converse--invoke-route), [`bedrock/invoke/`](#set-invoke-route), [`bedrock/converse_like/`](#calling-via-internal-proxy), [`bedrock/llama/`](#deepseek-not-r1), [`bedrock/deepseek_r1/`](#deepseek-r1), [`bedrock/qwen3/`](#qwen3-imported-models), [`bedrock/qwen2/`](./bedrock_imported.md#qwen2-imported-models), [`bedrock/openai/`](./bedrock_imported.md#openai-compatible-imported-models-qwen-25-vl-etc), [`bedrock/moonshot`](./bedrock_imported.md#moonshot-kimi-k2-thinking) | | Provider Doc | [Amazon Bedrock ↗](https://docs.aws.amazon.com/bedrock/latest/userguide/what-is-bedrock.html) | -| Supported OpenAI Endpoints | `/chat/completions`, `/completions`, `/embeddings`, `/images/generations` | +| Supported OpenAI Endpoints | `/chat/completions`, `/completions`, `/embeddings`, `/images/generations`, `/v1/realtime`| | Rerank Endpoint | `/rerank` | | Pass-through Endpoint | [Supported](../pass_through/bedrock.md) | diff --git a/docs/my-website/docs/providers/bedrock_realtime_with_audio.md b/docs/my-website/docs/providers/bedrock_realtime_with_audio.md new file mode 100644 index 00000000000..a2d9813ffd9 --- /dev/null +++ b/docs/my-website/docs/providers/bedrock_realtime_with_audio.md @@ -0,0 +1,362 @@ +# Bedrock Realtime API + +## Overview + +Amazon Bedrock's Nova Sonic model supports real-time bidirectional audio streaming for voice conversations. This tutorial shows how to use it through LiteLLM Proxy. + +## Setup + +### 1. Configure LiteLLM Proxy + +Create a `config.yaml` file: + +```yaml +model_list: + - model_name: "bedrock-sonic" + litellm_params: + model: bedrock/amazon.nova-sonic-v1:0 + aws_region_name: us-east-1 # or your preferred region + model_info: + mode: realtime +``` + +### 2. Start LiteLLM Proxy + +```bash +litellm --config config.yaml +``` + +## Basic Text Interaction + +```python +import asyncio +import websockets +import json + +LITELLM_API_KEY = "sk-1234" # Your LiteLLM API key +LITELLM_URL = 'ws://localhost:4000/v1/realtime?model=bedrock-sonic' + +async def test_text_conversation(): + async with websockets.connect( + LITELLM_URL, + additional_headers={ + "Authorization": f"Bearer {LITELLM_API_KEY}" + } + ) as ws: + # Wait for session.created + response = await ws.recv() + print(f"Connected: {json.loads(response)['type']}") + + # Configure session + session_update = { + "type": "session.update", + "session": { + "instructions": "You are a helpful assistant.", + "modalities": ["text"], + "temperature": 0.8 + } + } + await ws.send(json.dumps(session_update)) + + # Send a message + message = { + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{"type": "input_text", "text": "Hello!"}] + } + } + await ws.send(json.dumps(message)) + + # Trigger response + await ws.send(json.dumps({"type": "response.create"})) + + # Listen for response + while True: + response = await ws.recv() + event = json.loads(response) + + if event['type'] == 'response.text.delta': + print(event['delta'], end='', flush=True) + elif event['type'] == 'response.done': + print("\n✓ Complete") + break + +if __name__ == "__main__": + asyncio.run(test_text_conversation()) +``` + +## Audio Streaming with Voice Conversation + +```python +import asyncio +import websockets +import json +import base64 +import pyaudio + +LITELLM_API_KEY = "sk-1234" +LITELLM_URL = 'ws://localhost:4000/v1/realtime?model=bedrock-sonic' + +# Audio configuration +INPUT_RATE = 16000 # Nova Sonic expects 16kHz input +OUTPUT_RATE = 24000 # Nova Sonic outputs 24kHz +CHUNK = 1024 + +async def audio_conversation(): + # Initialize PyAudio + p = pyaudio.PyAudio() + + # Input stream (microphone) + input_stream = p.open( + format=pyaudio.paInt16, + channels=1, + rate=INPUT_RATE, + input=True, + frames_per_buffer=CHUNK + ) + + # Output stream (speakers) + output_stream = p.open( + format=pyaudio.paInt16, + channels=1, + rate=OUTPUT_RATE, + output=True, + frames_per_buffer=CHUNK + ) + + async with websockets.connect( + LITELLM_URL, + additional_headers={"Authorization": f"Bearer {LITELLM_API_KEY}"} + ) as ws: + # Wait for session.created + await ws.recv() + print("✓ Connected") + + # Configure session with audio + session_update = { + "type": "session.update", + "session": { + "instructions": "You are a friendly voice assistant.", + "modalities": ["text", "audio"], + "voice": "matthew", + "input_audio_format": "pcm16", + "output_audio_format": "pcm16" + } + } + await ws.send(json.dumps(session_update)) + print("🎤 Speak into your microphone...") + + async def send_audio(): + """Capture and send audio from microphone""" + while True: + audio_data = input_stream.read(CHUNK, exception_on_overflow=False) + audio_b64 = base64.b64encode(audio_data).decode('utf-8') + await ws.send(json.dumps({ + "type": "input_audio_buffer.append", + "audio": audio_b64 + })) + await asyncio.sleep(0.01) + + async def receive_audio(): + """Receive and play audio responses""" + while True: + response = await ws.recv() + event = json.loads(response) + + if event['type'] == 'response.audio.delta': + audio_b64 = event.get('delta', '') + if audio_b64: + audio_bytes = base64.b64decode(audio_b64) + output_stream.write(audio_bytes) + + elif event['type'] == 'response.text.delta': + print(event['delta'], end='', flush=True) + + elif event['type'] == 'response.done': + print("\n✓ Response complete") + + # Run both tasks concurrently + await asyncio.gather(send_audio(), receive_audio()) + +if __name__ == "__main__": + try: + asyncio.run(audio_conversation()) + except KeyboardInterrupt: + print("\n\nGoodbye!") +``` + +## Using Tools/Function Calling + +```python +import asyncio +import websockets +import json +from datetime import datetime + +LITELLM_API_KEY = "sk-1234" +LITELLM_URL = 'ws://localhost:4000/v1/realtime?model=bedrock-sonic' + +# Define tools +TOOLS = [ + { + "type": "function", + "function": { + "name": "get_weather", + "description": "Get current weather for a location", + "parameters": { + "type": "object", + "properties": { + "location": { + "type": "string", + "description": "City name" + } + }, + "required": ["location"] + } + } + } +] + +def get_weather(location: str) -> dict: + """Simulated weather function""" + return { + "location": location, + "temperature": 72, + "conditions": "sunny" + } + +async def conversation_with_tools(): + async with websockets.connect( + LITELLM_URL, + additional_headers={"Authorization": f"Bearer {LITELLM_API_KEY}"} + ) as ws: + # Wait for session.created + await ws.recv() + + # Configure session with tools + session_update = { + "type": "session.update", + "session": { + "instructions": "You are a helpful assistant with access to tools.", + "modalities": ["text"], + "tools": TOOLS + } + } + await ws.send(json.dumps(session_update)) + + # Send a message that requires a tool + message = { + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{"type": "input_text", "text": "What's the weather in San Francisco?"}] + } + } + await ws.send(json.dumps(message)) + await ws.send(json.dumps({"type": "response.create"})) + + # Handle responses and tool calls + while True: + response = await ws.recv() + event = json.loads(response) + + if event['type'] == 'response.text.delta': + print(event['delta'], end='', flush=True) + + elif event['type'] == 'response.function_call_arguments.done': + # Execute the tool + function_name = event['name'] + arguments = json.loads(event['arguments']) + + print(f"\n🔧 Calling {function_name}({arguments})") + result = get_weather(**arguments) + + # Send tool result back + tool_result = { + "type": "conversation.item.create", + "item": { + "type": "function_call_output", + "call_id": event['call_id'], + "output": json.dumps(result) + } + } + await ws.send(json.dumps(tool_result)) + await ws.send(json.dumps({"type": "response.create"})) + + elif event['type'] == 'response.done': + print("\n✓ Complete") + break + +if __name__ == "__main__": + asyncio.run(conversation_with_tools()) +``` + +## Configuration Options + +### Voice Options +Available voices: `matthew`, `joanna`, `ruth`, `stephen`, `gregory`, `amy` + +### Audio Formats +- **Input**: 16kHz PCM16 (mono) +- **Output**: 24kHz PCM16 (mono) + +### Modalities +- `["text"]` - Text only +- `["audio"]` - Audio only +- `["text", "audio"]` - Both text and audio + +## Example Test Scripts + +Complete working examples are available in the LiteLLM repository: + +- **Basic audio streaming**: `test_bedrock_realtime_client.py` +- **Simple text test**: `test_bedrock_realtime_simple.py` +- **Tool calling**: `test_bedrock_realtime_tools.py` + +## Requirements + +```bash +pip install litellm websockets pyaudio +``` + +## AWS Configuration + +Ensure your AWS credentials are configured: + +```bash +export AWS_ACCESS_KEY_ID=your_access_key +export AWS_SECRET_ACCESS_KEY=your_secret_key +export AWS_REGION_NAME=us-east-1 +``` + +Or use AWS CLI configuration: + +```bash +aws configure +``` + +## Troubleshooting + +### Connection Issues +- Ensure LiteLLM proxy is running on the correct port +- Verify AWS credentials are properly configured +- Check that the Bedrock model is available in your region + +### Audio Issues +- Verify PyAudio is properly installed +- Check microphone/speaker permissions +- Ensure correct sample rates (16kHz input, 24kHz output) + +### Tool Calling Issues +- Ensure tools are properly defined in session.update +- Verify tool results are sent back with correct call_id +- Check that response.create is sent after tool result + +## Related Resources + +- [OpenAI Realtime API Documentation](https://platform.openai.com/docs/guides/realtime) +- [Amazon Bedrock Nova Sonic Documentation](https://docs.aws.amazon.com/bedrock/latest/userguide/nova-sonic.html) +- [LiteLLM Realtime API Documentation](/docs/realtime) diff --git a/docs/my-website/docs/providers/dashscope.md b/docs/my-website/docs/providers/dashscope.md index 565776d6c4c..3df0fbab1ba 100644 --- a/docs/my-website/docs/providers/dashscope.md +++ b/docs/my-website/docs/providers/dashscope.md @@ -1,7 +1,7 @@ -# Dashscope (Qwen API) +# Dashscope API (Qwen models) https://dashscope.console.aliyun.com/ -**We support ALL Qwen models, just set `dashscope/` as a prefix when sending completion requests** +**We support ALL Qwen models (from Alibaba Cloud), just set `dashscope/` as a prefix when sending completion requests** ## API Key ```python @@ -9,6 +9,26 @@ https://dashscope.console.aliyun.com/ os.environ['DASHSCOPE_API_KEY'] ``` +## API Base +You can optionally specify the API base URL depending on your region: + +| Region | API Base | +|--------|----------| +| **International** | `https://dashscope-intl.aliyuncs.com/compatible-mode/v1` | +| **China/Beijing** | `https://dashscope.aliyuncs.com/compatible-mode/v1` | + +```python +# Set via environment variable +os.environ['DASHSCOPE_API_BASE'] = "https://dashscope-intl.aliyuncs.com/compatible-mode/v1" + +# Or pass directly in the completion call +response = completion( + model="dashscope/qwen-turbo", + messages=[{"role": "user", "content": "hello"}], + api_base="https://dashscope-intl.aliyuncs.com/compatible-mode/v1" +) +``` + ## Sample Usage ```python from litellm import completion @@ -43,9 +63,7 @@ for chunk in response: ``` -## Supported Models - ALL Qwen Models Supported! -We support ALL Qwen models, just set `dashscope/` as a prefix when sending completion requests - +## All supported Models [DashScope Model List](https://help.aliyun.com/zh/model-studio/compatibility-of-openai-with-dashscope?spm=a2c4g.11186623.help-menu-2400256.d_2_8_0.1efd516e2tTXBn&scm=20140722.H_2833609._.OR_help-T_cn~zh-V_1#7f9c78ae99pwz) diff --git a/docs/my-website/docs/providers/elevenlabs.md b/docs/my-website/docs/providers/elevenlabs.md index 5cf62f51203..b4ed3d3346b 100644 --- a/docs/my-website/docs/providers/elevenlabs.md +++ b/docs/my-website/docs/providers/elevenlabs.md @@ -243,6 +243,13 @@ ElevenLabs provides high-quality text-to-speech capabilities through their TTS A | Supported Operations | `/audio/speech` | | Link to Provider Doc | [ElevenLabs TTS API ↗](https://elevenlabs.io/docs/api-reference/text-to-speech) | +### Supported Models + +| Model | Route | Description | +|-------|-------|-------------| +| Eleven v3 | `elevenlabs/eleven_v3` | Most expressive model. 70+ languages, audio tags support for sound effects and pauses. | +| Eleven Multilingual v2 | `elevenlabs/eleven_multilingual_v2` | Default TTS model. 29 languages, stable and production-ready. | + ### Quick Start #### LiteLLM Python SDK @@ -265,6 +272,26 @@ with open("test_output.mp3", "wb") as f: f.write(audio.read()) ``` +#### Using Eleven v3 with Audio Tags + +Eleven v3 supports [audio tags](https://elevenlabs.io/docs/overview/capabilities/text-to-speech#audio-tags) for adding sound effects and pauses directly in the text: + +```python showLineNumbers title="Eleven v3 with audio tags" +import litellm +import os + +os.environ["ELEVENLABS_API_KEY"] = "your-elevenlabs-api-key" + +audio = litellm.speech( + model="elevenlabs/eleven_v3", + input='Welcome back. applause Today we have a special guest. Let me introduce them.', + voice="alloy", +) + +with open("eleven_v3_output.mp3", "wb") as f: + f.write(audio.read()) +``` + #### Advanced Usage: Overriding Parameters and ElevenLabs-Specific Features ```python showLineNumbers title="Advanced TTS with custom parameters" diff --git a/docs/my-website/docs/providers/gemini.md b/docs/my-website/docs/providers/gemini.md index 23a02f7365c..6de2263916c 100644 --- a/docs/my-website/docs/providers/gemini.md +++ b/docs/my-website/docs/providers/gemini.md @@ -1196,6 +1196,8 @@ When responding to Computer Use tool calls, include the URL and screenshot: + + ## Thought Signatures Thought signatures are encrypted representations of the model's internal reasoning process for a given turn in a conversation. By passing thought signatures back to the model in subsequent requests, you provide it with the context of its previous thoughts, allowing it to build upon its reasoning and maintain a coherent line of inquiry. @@ -1840,6 +1842,57 @@ content = response.get('choices', [{}])[0].get('message', {}).get('content') print(content) ``` +## gemini-robotics-er-1.5-preview Usage + +```python +from litellm import api_base +from openai import OpenAI +import os +import base64 + +client = OpenAI(base_url="http://0.0.0.0:4000", api_key="sk-12345") +base64_image = base64.b64encode(open("closeup-object-on-table-many-260nw-1216144471.webp", "rb").read()).decode() + +import json +import re +tools = [{"codeExecution": {}}] +response = client.chat.completions.create( + model="gemini/gemini-robotics-er-1.5-preview", + messages=[ + { + "role": "user", + "content": [ + { + "type": "text", + "text": "Point to no more than 10 items in the image. The label returned should be an identifying name for the object detected. The answer should follow the json format: [{\"point\": [y, x], \"label\": }, ...]. The points are in [y, x] format normalized to 0-1000." + }, + { + "type": "image_url", + "image_url": {"url": f"data:image/jpeg;base64,{base64_image}"} + } + ] + } + ], + tools=tools +) + +# Extract JSON from markdown code block if present +content = response.choices[0].message.content +# Look for triple-backtick JSON block +match = re.search(r'```json\s*(.*?)\s*```', content, re.DOTALL) +if match: + json_str = match.group(1) +else: + json_str = content + +try: + data = json.loads(json_str) + print(json.dumps(data, indent=2)) +except Exception as e: + print("Error parsing response as JSON:", e) + print("Response content:", content) +``` + ## Usage - PDF / Videos / etc. Files ### Inline Data (e.g. audio stream) diff --git a/docs/my-website/docs/providers/github_copilot.md b/docs/my-website/docs/providers/github_copilot.md index 306c9f949ec..e9fd3444f5f 100644 --- a/docs/my-website/docs/providers/github_copilot.md +++ b/docs/my-website/docs/providers/github_copilot.md @@ -35,11 +35,10 @@ from litellm import completion response = completion( model="github_copilot/gpt-4", - messages=[{"role": "user", "content": "Write a Python function to calculate fibonacci numbers"}], - extra_headers={ - "editor-version": "vscode/1.85.1", - "Copilot-Integration-Id": "vscode-chat" - } + messages=[ + {"role": "system", "content": "You are a helpful coding assistant"}, + {"role": "user", "content": "Write a Python function to calculate fibonacci numbers"} + ] ) print(response) ``` @@ -50,11 +49,7 @@ from litellm import completion stream = completion( model="github_copilot/gpt-4", messages=[{"role": "user", "content": "Explain async/await in Python"}], - stream=True, - extra_headers={ - "editor-version": "vscode/1.85.1", - "Copilot-Integration-Id": "vscode-chat" - } + stream=True ) for chunk in stream: @@ -134,11 +129,7 @@ client = OpenAI( # Non-streaming response response = client.chat.completions.create( model="github_copilot/gpt-4", - messages=[{"role": "user", "content": "How do I optimize this SQL query?"}], - extra_headers={ - "editor-version": "vscode/1.85.1", - "Copilot-Integration-Id": "vscode-chat" - } + messages=[{"role": "user", "content": "How do I optimize this SQL query?"}] ) print(response.choices[0].message.content) @@ -156,11 +147,7 @@ response = litellm.completion( model="litellm_proxy/github_copilot/gpt-4", messages=[{"role": "user", "content": "Review this code for bugs"}], api_base="http://localhost:4000", - api_key="your-proxy-api-key", - extra_headers={ - "editor-version": "vscode/1.85.1", - "Copilot-Integration-Id": "vscode-chat" - } + api_key="your-proxy-api-key" ) print(response.choices[0].message.content) @@ -174,8 +161,6 @@ print(response.choices[0].message.content) curl http://localhost:4000/v1/chat/completions \ -H "Content-Type: application/json" \ -H "Authorization: Bearer your-proxy-api-key" \ - -H "editor-version: vscode/1.85.1" \ - -H "Copilot-Integration-Id: vscode-chat" \ -d '{ "model": "github_copilot/gpt-4", "messages": [{"role": "user", "content": "Explain this error message"}] @@ -211,9 +196,11 @@ export GITHUB_COPILOT_API_KEY_FILE="api-key.json" ### Headers -GitHub Copilot supports various editor-specific headers: +LiteLLM automatically injects the required GitHub Copilot headers (simulating VSCode). You don't need to specify them manually. -```python showLineNumbers title="Common Headers" +If you want to override the defaults (e.g., to simulate a different editor), you can use `extra_headers`: + +```python showLineNumbers title="Custom Headers (Optional)" extra_headers = { "editor-version": "vscode/1.85.1", # Editor version "editor-plugin-version": "copilot/1.155.0", # Plugin version diff --git a/docs/my-website/docs/providers/litellm_proxy.md b/docs/my-website/docs/providers/litellm_proxy.md index bfefc8a787c..918ac6755a5 100644 --- a/docs/my-website/docs/providers/litellm_proxy.md +++ b/docs/my-website/docs/providers/litellm_proxy.md @@ -227,6 +227,28 @@ response = litellm.completion( ) ``` +## OAuth2/JWT Authentication + +If your LiteLLM Proxy requires OAuth2/JWT authentication (e.g., Azure AD, Keycloak, Okta), the SDK can automatically obtain and refresh tokens for you. + +```python +import litellm +from litellm.proxy_auth import AzureADCredential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=AzureADCredential(), + scope="api://my-litellm-proxy/.default" +) +litellm.api_base = "https://my-proxy.example.com" + +response = litellm.completion( + model="gpt-4", + messages=[{"role": "user", "content": "Hello!"}] +) +``` + +[Learn more about SDK Proxy Authentication (OAuth2/JWT Auto-Refresh) →](../proxy_auth) + ## Sending `tags` to LiteLLM Proxy Tags allow you to categorize and track your API requests for monitoring, debugging, and analytics purposes. You can send tags as a list of strings to the LiteLLM Proxy using the `extra_body` parameter. diff --git a/docs/my-website/docs/providers/openai.md b/docs/my-website/docs/providers/openai.md index 80645a51ac5..23940e1c54e 100644 --- a/docs/my-website/docs/providers/openai.md +++ b/docs/my-website/docs/providers/openai.md @@ -230,7 +230,70 @@ os.environ["OPENAI_BASE_URL"] = "https://your_host/v1" # OPTIONAL These also support the `OPENAI_BASE_URL` environment variable, which can be used to specify a custom API endpoint. -## OpenAI Vision Models +### OpenAI Web Search Models + +OpenAI has two ways to use web search, depending on the endpoint: + +| Approach | Endpoint | Models | How to enable | +|----------|----------|--------|---------------| +| **Search Models** | `/chat/completions` | `gpt-5-search-api`, `gpt-4o-search-preview`, `gpt-4o-mini-search-preview` | Pass `web_search_options` parameter | +| **Web Search Tool** | `/responses` | `gpt-5`, `gpt-4.1`, `gpt-4o`, and other regular models | Pass `web_search_preview` tool | + + + + +```python showLineNumbers +from litellm import completion + +response = completion( + model="openai/gpt-5-search-api", + messages=[{"role": "user", "content": "What is the capital of France?"}], + web_search_options={ + "search_context_size": "medium" # Options: "low", "medium", "high" + } +) +``` + + + + +```python showLineNumbers +from litellm import responses + +response = responses( + model="openai/gpt-5", + input="What is the capital of France?", + tools=[{ + "type": "web_search_preview", + "search_context_size": "low" + }] +) +``` + + + + +```yaml +model_list: + # Search model for /chat/completions + - model_name: gpt-5-search-api + litellm_params: + model: openai/gpt-5-search-api + api_key: os.environ/OPENAI_API_KEY + + # Regular model for /responses with web_search_preview tool + - model_name: gpt-5 + litellm_params: + model: openai/gpt-5 + api_key: os.environ/OPENAI_API_KEY +``` + + + + +For full details, see the [Web Search guide](../completion/web_search.md). + +## OpenAI Vision Models | Model Name | Function Call | |-----------------------|-----------------------------------------------------------------| | gpt-4o | `response = completion(model="gpt-4o", messages=messages)` | diff --git a/docs/my-website/docs/providers/openai/responses_api.md b/docs/my-website/docs/providers/openai/responses_api.md index 75eab1afac5..7799c93ccf2 100644 --- a/docs/my-website/docs/providers/openai/responses_api.md +++ b/docs/my-website/docs/providers/openai/responses_api.md @@ -37,6 +37,24 @@ for event in response: print(event) ``` +#### Web Search +```python showLineNumbers title="OpenAI Responses with Web Search" +import litellm + +response = litellm.responses( + model="openai/gpt-5", + input="What is the capital of France?", + tools=[{ + "type": "web_search_preview", + "search_context_size": "medium" # Options: "low", "medium", "high" + }] +) + +print(response) +``` + +For full details, see the [Web Search guide](../../completion/web_search.md). + #### Image Generation with Streaming ```python showLineNumbers title="OpenAI Streaming Image Generation" import litellm diff --git a/docs/my-website/docs/providers/perplexity.md b/docs/my-website/docs/providers/perplexity.md index 2fcb49c60fa..e3991c63bff 100644 --- a/docs/my-website/docs/providers/perplexity.md +++ b/docs/my-website/docs/providers/perplexity.md @@ -120,6 +120,370 @@ All models listed here https://docs.perplexity.ai/docs/model-cards are supported +## Agent API (Responses API) + +Requires v1.72.6+ + + +### Using Presets + +Presets provide optimized defaults for specific use cases. Start with a preset for quick setup: + + + + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +# Using the pro-search preset +response = responses( + model="perplexity/preset/pro-search", + input="What are the latest developments in AI?", + custom_llm_provider="perplexity", +) + +print(response.output) +``` + + + + +1. Setup config.yaml + +```yaml +model_list: + - model_name: perplexity-pro-search + litellm_params: + model: perplexity/preset/pro-search + api_key: os.environ/PERPLEXITY_API_KEY +``` + +2. Start proxy + +```bash +litellm --config /path/to/config.yaml +``` + +3. Test it! + +```bash +curl http://0.0.0.0:4000/v1/responses \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer anything" \ + -d '{ + "model": "perplexity-pro-search", + "input": "What are the latest developments in AI?" + }' +``` + + + + +### Using Third-Party Models + +Access models from OpenAI, Anthropic, Google, xAI, and other providers through Perplexity's unified API: + + + + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/openai/gpt-5.2", + input="Explain quantum computing in simple terms", + custom_llm_provider="perplexity", + max_output_tokens=500, +) + +print(response.output) +``` + + + + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/anthropic/claude-sonnet-4-5", + input="Write a short story about a robot learning to paint", + custom_llm_provider="perplexity", + max_output_tokens=500, +) + +print(response.output) +``` + + + + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/google/gemini-2.5-flash", + input="Explain the concept of neural networks", + custom_llm_provider="perplexity", + max_output_tokens=500, +) + +print(response.output) +``` + + + + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/xai/grok-4-1-fast-non-reasoning", + input="What makes a good AI assistant?", + custom_llm_provider="perplexity", + max_output_tokens=500, +) + +print(response.output) +``` + + + + +### Web Search Tool + +Enable web search capabilities to access real-time information: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/openai/gpt-5.2", + input="What's the weather in San Francisco today?", + custom_llm_provider="perplexity", + tools=[{"type": "web_search"}], + instructions="You have access to a web_search tool. Use it for questions about current events.", +) + +print(response.output) +``` + +### Function Calling + +The Agent API supports custom function tools. Pass function tools through unchanged: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/openai/gpt-5.2", + input="What's the weather in San Francisco?", + custom_llm_provider="perplexity", + tools=[ + {"type": "web_search"}, + { + "type": "function", + "function": { + "name": "get_weather", + "description": "Get the current weather for a location", + "parameters": { + "type": "object", + "properties": { + "location": {"type": "string"}, + "unit": {"type": "string", "enum": ["celsius", "fahrenheit"]}, + }, + }, + }, + }, + ], + instructions="Use tools when appropriate.", +) + +print(response.output) +``` + +### Structured Outputs + +Request JSON schema structured outputs via the `text` parameter: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/preset/pro-search", + input="Extract key facts about the Eiffel Tower", + custom_llm_provider="perplexity", + text={ + "format": { + "type": "json_schema", + "name": "facts", + "schema": { + "type": "object", + "properties": { + "name": {"type": "string"}, + "height_meters": {"type": "number"}, + "year_built": {"type": "integer"}, + }, + "required": ["name", "height_meters", "year_built"], + }, + "strict": True, + } + }, +) + +print(response.output) +``` + + +### Reasoning Effort (Responses API) + +Control the reasoning effort level for reasoning-capable models: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/openai/gpt-5.2", + input="Solve this complex problem step by step", + custom_llm_provider="perplexity", + reasoning={"effort": "high"}, # Options: low, medium, high + max_output_tokens=1000, +) + +print(response.output) +``` + +### Multi-Turn Conversations + +Use message arrays for multi-turn conversations with context: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/anthropic/claude-sonnet-4-5", + input=[ + {"type": "message", "role": "system", "content": "You are a helpful assistant."}, + {"type": "message", "role": "user", "content": "What are the latest AI developments?"}, + ], + custom_llm_provider="perplexity", + instructions="Provide detailed, well-researched answers.", + max_output_tokens=800, +) + +print(response.output) +``` + +### Streaming Responses + +Stream responses for real-time output: + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +response = responses( + model="perplexity/openai/gpt-5.2", + input="Tell me a story about space exploration", + custom_llm_provider="perplexity", + stream=True, + max_output_tokens=500, +) + +for chunk in response: + if hasattr(chunk, 'type'): + if chunk.type == "response.output_text.delta": + print(chunk.delta, end="", flush=True) +``` + +### Supported Third-Party Models + +| Provider | Model Name | Function Call | +|----------|------------|---------------| +| OpenAI | gpt-5.2 | `responses(model="perplexity/openai/gpt-5.2", ...)` | +| OpenAI | gpt-5.1 | `responses(model="perplexity/openai/gpt-5.1", ...)` | +| OpenAI | gpt-5-mini | `responses(model="perplexity/openai/gpt-5-mini", ...)` | +| Anthropic | claude-opus-4-6 | `responses(model="perplexity/anthropic/claude-opus-4-6", ...)` | +| Anthropic | claude-opus-4-5 | `responses(model="perplexity/anthropic/claude-opus-4-5", ...)` | +| Anthropic | claude-sonnet-4-5 | `responses(model="perplexity/anthropic/claude-sonnet-4-5", ...)` | +| Anthropic | claude-haiku-4-5 | `responses(model="perplexity/anthropic/claude-haiku-4-5", ...)` | +| Google | gemini-3-pro-preview | `responses(model="perplexity/google/gemini-3-pro-preview", ...)` | +| Google | gemini-3-flash-preview | `responses(model="perplexity/google/gemini-3-flash-preview", ...)` | +| Google | gemini-2.5-pro | `responses(model="perplexity/google/gemini-2.5-pro", ...)` | +| Google | gemini-2.5-flash | `responses(model="perplexity/google/gemini-2.5-flash", ...)` | +| xAI | grok-4-1-fast-non-reasoning | `responses(model="perplexity/xai/grok-4-1-fast-non-reasoning", ...)` | +| Perplexity | sonar | `responses(model="perplexity/perplexity/sonar", ...)` | + +### Available Presets + +| Preset Name | Function Call | +|-------------|---------------| +| fast-search | `responses(model="perplexity/preset/fast-search", ...)` | +| pro-search | `responses(model="perplexity/preset/pro-search", ...)` | +| deep-research | `responses(model="perplexity/preset/deep-research", ...)` | +| advanced-deep-research | `responses(model="perplexity/preset/advanced-deep-research", ...)` | + +### Complete Example + +```python +from litellm import responses +import os + +os.environ['PERPLEXITY_API_KEY'] = "" + +# Comprehensive example with multiple features +response = responses( + model="perplexity/openai/gpt-5.2", + input="Research the latest developments in quantum computing and provide sources", + custom_llm_provider="perplexity", + tools=[ + {"type": "web_search"}, + {"type": "fetch_url"} + ], + instructions="Use web_search to find relevant information and fetch_url to retrieve detailed content from sources. Provide citations for all claims.", + max_output_tokens=1000, + temperature=0.7, +) + +print(f"Response ID: {response.id}") +print(f"Model: {response.model}") +print(f"Status: {response.status}") +print(f"Output: {response.output}") +print(f"Usage: {response.usage}") +``` + :::info For more information about passing provider-specific parameters, [go here](../completion/provider_specific_params.md) diff --git a/docs/my-website/docs/providers/sarvam.md b/docs/my-website/docs/providers/sarvam.md new file mode 100644 index 00000000000..6a292456781 --- /dev/null +++ b/docs/my-website/docs/providers/sarvam.md @@ -0,0 +1,92 @@ +# Sarvam.ai + +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +LiteLLM supports all the text models from [Sarvam ai](https://docs.sarvam.ai/api-reference-docs/chat/chat-completions) + +## Usage + +```python +import os +from litellm import completion + +# Set your Sarvam API key +os.environ["SARVAM_API_KEY"] = "" + +messages = [{"role": "user", "content": "Hello"}] + +response = completion( + model="sarvam/sarvam-m", + messages=messages, +) +print(response) +``` + +## Usage with LiteLLM Proxy Server + +Here's how to call a Sarvam.ai model with the LiteLLM Proxy Server + +1. **Modify the `config.yaml`:** + + ```yaml + model_list: + - model_name: my-model + litellm_params: + model: sarvam/ # add sarvam/ prefix to route as Sarvam provider + api_key: api-key # api key to send your model + ``` + +2. **Start the proxy:** + + ```bash + $ litellm --config /path/to/config.yaml + ``` + +3. **Send a request to LiteLLM Proxy Server:** + + + + + + ```python + import openai + + client = openai.OpenAI( + api_key="sk-1234", # pass litellm proxy key, if you're using virtual keys + base_url="http://0.0.0.0:4000" # litellm-proxy-base url + ) + + response = client.chat.completions.create( + model="my-model", + messages=[ + { + "role": "user", + "content": "what llm are you" + } + ], + ) + + print(response) + ``` + + + + + ```shell + curl --location 'http://0.0.0.0:4000/chat/completions' \ + --header 'Authorization: Bearer sk-1234' \ + --header 'Content-Type: application/json' \ + --data '{ + "model": "my-model", + "messages": [ + { + "role": "user", + "content": "what llm are you" + } + ] + }' + ``` + + + diff --git a/docs/my-website/docs/providers/scaleway.md b/docs/my-website/docs/providers/scaleway.md new file mode 100644 index 00000000000..ea57c24db30 --- /dev/null +++ b/docs/my-website/docs/providers/scaleway.md @@ -0,0 +1,62 @@ + +# Scaleway +LiteLLM supports all [models available on Scaleway Generative APIs ↗](https://www.scaleway.com/en/docs/generative-apis/reference-content/supported-models/). + +## Usage with LiteLLM Python SDK + +```python +import os +from litellm import completion + +os.environ["SCW_SECRET_KEY"] = "your-scaleway-secret-key" + +messages = [{"role": "user", "content": "Write a short poem"}] +response = completion(model="scaleway/qwen3-235b-a22b-instruct-2507", messages=messages) +print(response) +``` + +## Usage with LiteLLM Proxy + +### 1. Set Scaleway models in config.yaml + +```yaml +model_list: + - model_name: scaleway-model + litellm_params: + model: scaleway/qwen3-235b-a22b-instruct-2507 + api_key: "os.environ/SCW_SECRET_KEY" # ensure you have `SCW_SECRET_KEY` in your .env +``` + +### 2. Start proxy + +```bash +litellm --config config.yaml +``` + +### 3. Query proxy + +Assuming the proxy is running on [http://localhost:4000](http://localhost:4000): +```bash +curl http://localhost:4000/chat/completions \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer YOUR_LITELLM_MASTER_KEY" \ + -d '{ + "model": "scaleway-model", + "messages": [ + { + "role": "system", + "content": "You are a helpful assistant." + }, + { + "role": "user", + "content": "Write a short poem" + } + ] + }' +``` +`-H "Authorization: Bearer YOUR_LITELLM_MASTER_KEY" ` is only required if you have set a LiteLLM master key + + +## Supported features + +Scaleway provider supports all features in [Generative APIs reference documentation ↗](https://www.scaleway.com/en/developers/api/generative-apis/), such as streaming, structured outputs and tool calling. diff --git a/docs/my-website/docs/providers/vertex_speech.md b/docs/my-website/docs/providers/vertex_speech.md index d0acacb5aec..751782a323c 100644 --- a/docs/my-website/docs/providers/vertex_speech.md +++ b/docs/my-website/docs/providers/vertex_speech.md @@ -312,6 +312,7 @@ Gemini models with audio output capabilities using the chat completions API. - Only supports `pcm16` audio format - Streaming not yet supported - Must set `modalities: ["audio"]` +- When using via LiteLLM Proxy, must include `"allowed_openai_params": ["audio", "modalities"]` in the request body to enable audio parameters ::: ### Quick Start @@ -372,7 +373,8 @@ curl http://0.0.0.0:4000/v1/chat/completions \ "model": "gemini-tts", "messages": [{"role": "user", "content": "Say hello in a friendly voice"}], "modalities": ["audio"], - "audio": {"voice": "Kore", "format": "pcm16"} + "audio": {"voice": "Kore", "format": "pcm16"}, + "allowed_openai_params": ["audio", "modalities"] }' ``` @@ -389,6 +391,7 @@ response = client.chat.completions.create( messages=[{"role": "user", "content": "Say hello in a friendly voice"}], modalities=["audio"], audio={"voice": "Kore", "format": "pcm16"}, + extra_body={"allowed_openai_params": ["audio", "modalities"]} ) print(response) ``` diff --git a/docs/my-website/docs/providers/watsonx/rerank.md b/docs/my-website/docs/providers/watsonx/rerank.md new file mode 100644 index 00000000000..0900ce96781 --- /dev/null +++ b/docs/my-website/docs/providers/watsonx/rerank.md @@ -0,0 +1,52 @@ +# watsonx.ai Rerank + +## Overview + +| Property | Details | +|----------|--------------------------------------------------------------------------| +| Description | watsonx.ai rerank integration | +| Provider Route on LiteLLM | `watsonx/` | +| Supported Operations | `/ml/v1/text/rerank` | +| Link to Provider Doc | [IBM WatsonX.ai ↗](https://cloud.ibm.com/apidocs/watsonx-ai#text-rerank) | + +## Quick Start + +### **LiteLLM SDK** + +```python +import os +from litellm import rerank + +os.environ["WATSONX_APIKEY"] = "YOUR_WATSONX_APIKEY" +os.environ["WATSONX_API_BASE"] = "YOUR_WATSONX_API_BASE" +os.environ["WATSONX_PROJECT_ID"] = "YOUR_WATSONX_PROJECT_ID" + +query="Best programming language for beginners?" +documents=[ + "Python is great for beginners due to simple syntax.", + "JavaScript runs in browsers and is versatile.", + "Rust has a steep learning curve but is very safe.", +] + +response = rerank( + model="watsonx/cross-encoder/ms-marco-minilm-l-12-v2", + query=query, + documents=documents, + top_n=2, + return_documents=True, +) + +print(response) +``` + +### **LiteLLM Proxy** + +```yaml +model_list: + - model_name: cross-encoder/ms-marco-minilm-l-12-v2 + litellm_params: + model: watsonx/cross-encoder/ms-marco-minilm-l-12-v2 + api_key: os.environ/WATSONX_APIKEY + api_base: os.environ/WATSONX_API_BASE + project_id: os.environ/WATSONX_PROJECT_ID +``` diff --git a/docs/my-website/docs/providers/xai_realtime.md b/docs/my-website/docs/providers/xai_realtime.md new file mode 100644 index 00000000000..b36908c4686 --- /dev/null +++ b/docs/my-website/docs/providers/xai_realtime.md @@ -0,0 +1,308 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# xAI Voice Agent (Realtime API) + +xAI's Grok Voice Agent provides real-time voice conversation capabilities through WebSocket connections, enabling natural bidirectional audio interactions. + +| Feature | Description | Comments | +| --- | --- | --- | +| LiteLLM AI Gateway | ✅ | | +| LiteLLM Python SDK | ✅ | Full support via `litellm.realtime()` | + +## Quick Start + +### Supported Model + +| Model | Context | Features | +|-------|---------|----------| +| `xai/grok-4-1-fast-non-reasoning` | 2M tokens | Voice conversation, Function calling, Vision, Audio, Web search, Caching | + +**Note:** xAI Realtime API uses the non-reasoning variant for optimal real-time performance. + +## Python SDK Usage + +### Basic Realtime Connection + +```python +import asyncio +from litellm import realtime + +async def test_xai_realtime(): + """ + Test xAI Grok Voice Agent via LiteLLM SDK + """ + # Initialize realtime connection + ws = await realtime( + model="xai/grok-4-1-fast-non-reasoning", + api_key="your-xai-api-key", # or set XAI_API_KEY env var + ) + + # Connection established, xAI sends "conversation.created" event + print("Connected to xAI Grok Voice Agent") + + # Send a message + await ws.send_text(json.dumps({ + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{ + "type": "input_text", + "text": "Hello! How are you?" + }] + } + })) + + # Request a response + await ws.send_text(json.dumps({ + "type": "response.create" + })) + + # Listen for responses + async for message in ws: + data = json.loads(message) + print(f"Received: {data['type']}") + + if data['type'] == 'response.done': + break + + await ws.close() + +# Run the async function +asyncio.run(test_xai_realtime()) +``` + +### With Audio Input/Output + +```python +import asyncio +import json +from litellm import realtime + +async def xai_voice_conversation(): + """ + Voice conversation with xAI Grok Voice Agent + """ + ws = await realtime( + model="xai/grok-4-1-fast-non-reasoning", + api_key="your-xai-api-key", + ) + + # Send audio data (base64 encoded PCM16 24kHz) + await ws.send_text(json.dumps({ + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{ + "type": "input_audio", + "audio": "base64_encoded_audio_data_here" + }] + } + })) + + # Request response with audio + await ws.send_text(json.dumps({ + "type": "response.create", + "response": { + "modalities": ["text", "audio"], + "instructions": "Please respond in a friendly tone." + } + })) + + # Process streaming audio response + async for message in ws: + data = json.loads(message) + + if data['type'] == 'response.audio.delta': + # Handle audio chunks + audio_chunk = data['delta'] + # Process audio_chunk (play it, save it, etc.) + + elif data['type'] == 'response.done': + break + + await ws.close() + +asyncio.run(xai_voice_conversation()) +``` + +## LiteLLM Proxy (AI Gateway) Usage + +Load balance across multiple xAI deployments or combine with other providers. + +### 1. Add Model to Config + +```yaml +model_list: + - model_name: grok-voice-agent + litellm_params: + model: xai/grok-4-1-fast-non-reasoning + api_key: os.environ/XAI_API_KEY + model_info: + mode: realtime + + # Optional: Add fallback to OpenAI + - model_name: grok-voice-agent + litellm_params: + model: openai/gpt-4o-realtime-preview-2024-10-01 + api_key: os.environ/OPENAI_API_KEY + model_info: + mode: realtime +``` + +### 2. Start Proxy + +```bash +litellm --config /path/to/config.yaml + +# RUNNING on http://0.0.0.0:4000 +``` + +### 3. Test Connection + +#### Python Client + +```python +import asyncio +import websockets +import json + +async def test_proxy(): + url = "ws://0.0.0.0:4000/v1/realtime?model=grok-voice-agent" + + async with websockets.connect( + url, + extra_headers={ + "Authorization": "Bearer sk-1234", # Your LiteLLM proxy key + "OpenAI-Beta": "realtime=v1" + } + ) as ws: + # Wait for conversation.created event from xAI + message = await ws.recv() + print(f"Connected: {message}") + + # Send a message + await ws.send(json.dumps({ + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{ + "type": "input_text", + "text": "Hello from LiteLLM proxy!" + }] + } + })) + + # Request response + await ws.send(json.dumps({ + "type": "response.create" + })) + + # Listen for response + async for message in ws: + data = json.loads(message) + print(f"Event: {data['type']}") + + if data['type'] == 'response.done': + break + +asyncio.run(test_proxy()) +``` + +#### Node.js Client + +```javascript +// test.js - Run with: node test.js +const WebSocket = require("ws"); + +const url = "ws://0.0.0.0:4000/v1/realtime?model=grok-voice-agent"; + +const ws = new WebSocket(url, { + headers: { + "Authorization": "Bearer sk-1234", + "OpenAI-Beta": "realtime=v1", + }, +}); + +ws.on("open", function open() { + console.log("Connected to xAI via LiteLLM proxy"); + + // Send a message + ws.send(JSON.stringify({ + type: "conversation.item.create", + item: { + type: "message", + role: "user", + content: [{ + type: "input_text", + text: "What's the weather like?" + }] + } + })); + + // Request response + ws.send(JSON.stringify({ + type: "response.create", + response: { + modalities: ["text"], + instructions: "Please assist the user." + } + })); +}); + +ws.on("message", function incoming(message) { + const data = JSON.parse(message.toString()); + console.log(`Event: ${data.type}`); + + if (data.type === 'response.done') { + ws.close(); + } +}); + +ws.on("error", function handleError(error) { + console.error("Error: ", error); +}); +``` + +## Key Differences from OpenAI + +xAI's Grok Voice Agent has some differences from OpenAI's Realtime API: + +| Feature | xAI | OpenAI | LiteLLM Handling | +|---------|-----|--------|------------------| +| Initial Event | `conversation.created` | `session.created` | ⚠️ Passed through as-is | +| WebSocket URL | `wss://api.x.ai/v1/realtime` | `wss://api.openai.com/v1/realtime` | ✅ Auto-configured | +| Model | `grok-4-1-fast-non-reasoning` | `gpt-4o-realtime-preview` | ✅ Via model prefix | +| Audio Format | PCM16 24kHz mono | PCM16 24kHz mono | ✅ Compatible | +| Context Window | 2M tokens | 128K tokens | N/A | + +**What LiteLLM Handles:** +- ✅ Automatic URL routing to correct provider +- ✅ Authentication headers (no `OpenAI-Beta` header for xAI) +- ✅ WebSocket connection management +- ✅ All other event types are compatible + +**What You Need to Handle:** +- ⚠️ Initial event type difference (`conversation.created` vs `session.created`) + +**Tip:** Make your client compatible with both event types: +```python +# Handle both providers +if event['type'] in ['session.created', 'conversation.created']: + print("Connection established") +``` + +## Related Documentation + +- [xAI Chat/Text Models](/docs/providers/xai) +- [LiteLLM Realtime API Overview](/docs/realtime) +- [xAI Official Documentation](https://docs.x.ai/docs) + +## Support + +For issues or questions: +- [LiteLLM GitHub Issues](https://github.com/BerriAI/litellm/issues) +- [xAI Documentation](https://docs.x.ai/docs) diff --git a/docs/my-website/docs/proxy/access_groups.md b/docs/my-website/docs/proxy/access_groups.md new file mode 100644 index 00000000000..59904575da8 --- /dev/null +++ b/docs/my-website/docs/proxy/access_groups.md @@ -0,0 +1,122 @@ +import Image from '@theme/IdealImage'; +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Access Groups + +Access Groups simplify how you define and manage resource access across your organization. Instead of configuring models, MCP servers, and agents separately on each key or team, you create one group that bundles the resources you want to grant, then attach that group to your keys or teams. + +## Overview + +**Access Groups** let you define a reusable set of allowed resources—models, MCP servers, and agents—in a single place. One group can grant access to all three resource types. Simply attach the group to a key or team, and they get access to everything defined in that group. + +- **Unified resource control** – One group controls access to models, MCP servers, and agents together +- **Reusable** – Define once, attach to many keys or teams +- **Easy to maintain** – Update the group (add or remove resources) and all attached keys and teams automatically reflect the change +- **Clear visibility** – See exactly which resources each group grants and which keys/teams use it + + + +### How It Works + +**Key concept:** Define resources in a group → Attach group to key or team → Key/team gets access to all resources in the group + +| Resource Type | What the group controls | +| --------------- | -------------------------------------------------------------------- | +| **Models** | Which LLM models keys/teams can use (e.g., `gpt-4`, `claude-3-opus`) | +| **MCP Servers** | Which MCP servers are available for tool calling | +| **Agents** | Which agents can be invoked | + +## How to Create and Use Access Groups in the UI + +### 1. Navigate to Access Groups + +Go to the Admin UI (e.g. `http://localhost:4000/ui` or your `PROXY_BASE_URL/ui`) and click **Access Groups** in the sidebar. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/d117fdb2-18c8-49e0-91e6-1f830d2d4b85/ascreenshot_f5822a0ddac64e3383124419d0c66298_text_export.jpeg) + +### 2. Create an Access Group + +Click **Create Access Group** and give your group a name. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/aefb900d-d106-4436-806c-3608ad19659f/ascreenshot_3f6fed1256604fe3b7038a0778ce3342_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/0951bb93-61bd-477e-beaf-f58810f8980b/ascreenshot_f0fb5d552fd74ff8a1080e82758fcdc2_text_export.jpeg) + +### 3. Define Resources in the Group + +Use the tabs to select which models, MCP servers, and agents this group grants access to: + +- **Models tab** – Select the LLM models +- **MCP Servers tab** – Select MCP servers (for tool calling) +- **Agents tab** – Select agents + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/37398e8f-cd50-48c9-85e2-c77b2eeb994b/ascreenshot_440ec7906c8f4199b30ef91c903960b9_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/99d36543-8582-4bb7-a34d-3d5fe0fcf12f/ascreenshot_d9983240955c496892e1f7c38c074045_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/06fc5919-5c71-4fc3-999b-da7a4800af3f/ascreenshot_db93fdf742b249dc90a4b9d5991d6097_text_export.jpeg) + +### 4. Attach the Access Group to a Key + +When creating or editing a virtual key, expand **Optional Settings** and select your Access Group. The key will inherit access to all models, MCP servers, and agents defined in that group. + +1. Go to **Virtual Keys** and click **+ Create New Key** +2. Expand **Optional Settings** +3. In the Access Group field, select the group you created +4. Save the key + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/cdfa76ab-bf38-4ca4-a97d-2cb50fafe50b/ascreenshot_046daecb57554c28ba553cf6c01f5450_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/84f08e9c-e9d0-42aa-8317-f385190b6d7d/ascreenshot_2d239716d30f431d9ad494baf7933d6a_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/41d7b7f9-ac58-4602-b887-c35c9b419dce/ascreenshot_8abd4fef48014dd1b88848411e6d7912_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/e37b01c0-f2d7-4133-8b2f-ccc51f6769e1/ascreenshot_f495df428ad54cac9ec43b46c3dfc1b1_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-15/3fe33cad-6b64-46c3-a66e-6e6e073c3d7a/ascreenshot_f2dcc79ae8af47dd86ade2f85165d3c1_text_export.jpeg) + +### 5. Attach the Access Group to a Team + +You can also attach an Access Group to a team when creating or editing the team. All keys associated with that team will then have access to the resources defined in the group. + +## Use Cases + +### Team-based Access + +Create groups like "Engineering", "Data Science", or "Product" with the models, MCP servers, and agents each team needs. Attach the group to the team—no need to configure each resource on every key. + +### Environment Separation + +- **Production group** – Production models, approved MCP servers, and production agents +- **Development group** – Cost-efficient models, experimental MCP tools, and dev agents + +Attach the appropriate group to keys or teams based on environment. + +### Simplified Onboarding + +New developers get a key with an Access Group instead of manually configuring models, MCP servers, and agents. Add them to the right team or give them a key with the correct group. + +### Centralized Updates + +When you add a new model or MCP server to a group, every key and team attached to that group automatically gains access. Remove a resource from the group and it’s revoked everywhere at once. + +## Access Group vs. Model Access Groups + +LiteLLM has two related concepts: + +| Feature | **Access Groups** (this page) | **Model Access Groups** | +| ---------- | ----------------------------------------------------------------------- | ------------------------------------------------------- | +| Definition | Define in the UI; one group can include models, MCP servers, and agents | Defined in config or via API; groups are model-centric | +| Scope | Models + MCP servers + agents | Models only | +| Attach to | Keys, teams | Keys, teams | +| Use when | You want unified control over models, MCP, and agents from the UI | You need config-based or API-based model access control | + +For config-based model access with `access_groups` in `model_info`, see [Model Access Groups](./model_access_groups.md). + +## Related Documentation + +- [Virtual Keys](./virtual_keys.md) – Creating and managing API keys +- [Role-based Access Controls](./access_control.md) – Organizations, teams, and user roles +- [Model Access Groups](./model_access_groups.md) – Config-based model access groups +- [MCP Control](../mcp_control.md) – MCP server setup and access control diff --git a/docs/my-website/docs/proxy/admin_ui_sso.md b/docs/my-website/docs/proxy/admin_ui_sso.md index 7b299429db7..f88d3480446 100644 --- a/docs/my-website/docs/proxy/admin_ui_sso.md +++ b/docs/my-website/docs/proxy/admin_ui_sso.md @@ -23,26 +23,75 @@ From v1.76.0, SSO is now Free for up to 5 users. -1. Add Okta credentials to your .env +#### Step 1: Create an OIDC Application in Okta + +In your Okta Admin Console, create a new **OIDC Web Application**. See [Okta's guide on creating OIDC app integrations](https://help.okta.com/en-us/content/topics/apps/apps_app_integration_wizard_oidc.htm) for detailed instructions. + +When configuring the application: +- **Sign-in redirect URI**: `https:///sso/callback` +- **Sign-out redirect URI** (optional): `https://` + + + +After creating the app, copy your **Client ID** and **Client Secret** from the application's General tab: + + + +#### Step 2: Assign Users to the Application + +Ensure users are assigned to the app in the **Assignments** tab. If Federation Broker Mode is enabled, you may need to disable it to assign users manually. + +#### Step 3: Configure Authorization Server Access Policy + +:::warning Important +This step is required. Without an Access Policy for your app, users will get a `no_matching_policy` error when attempting to log in. +::: + +1. Go to **Security** → **API** + + + +2. Select the **default** authorization server (or your custom one) + + + +3. Click on **Access Policies** tab, create a new policy assigned to your LiteLLM app +4. Add a rule that allows the **Authorization Code** grant type + + + +See [Okta's Access Policy documentation](https://help.okta.com/en-us/content/topics/security/api-access-management/access-policies.htm) for more details. + +#### Step 4: Configure LiteLLM Environment Variables ```bash -GENERIC_CLIENT_ID = "" -GENERIC_CLIENT_SECRET = "" -GENERIC_AUTHORIZATION_ENDPOINT = "/authorize" # https://dev-2kqkcd6lx6kdkuzt.us.auth0.com/authorize -GENERIC_TOKEN_ENDPOINT = "/token" # https://dev-2kqkcd6lx6kdkuzt.us.auth0.com/oauth/token -GENERIC_USERINFO_ENDPOINT = "/userinfo" # https://dev-2kqkcd6lx6kdkuzt.us.auth0.com/userinfo -GENERIC_CLIENT_STATE = "random-string" # [OPTIONAL] REQUIRED BY OKTA, if not set random state value is generated -GENERIC_SSO_HEADERS = "Content-Type=application/json, X-Custom-Header=custom-value" # [OPTIONAL] Comma-separated list of additional headers to add to the request - e.g. Content-Type=application/json, etc. +GENERIC_CLIENT_ID="" +GENERIC_CLIENT_SECRET="" +GENERIC_AUTHORIZATION_ENDPOINT="https:///oauth2/default/v1/authorize" +GENERIC_TOKEN_ENDPOINT="https:///oauth2/default/v1/token" +GENERIC_USERINFO_ENDPOINT="https:///oauth2/default/v1/userinfo" +GENERIC_CLIENT_STATE="random-string" +PROXY_BASE_URL="https://" ``` -You can get your domain specific auth/token/userinfo endpoints at `/.well-known/openid-configuration` +:::tip +You can find all OAuth endpoints at `https:///.well-known/openid-configuration` +::: -2. Add proxy url as callback_url on Okta +#### Step 5: Test the SSO Flow -On Okta, add the 'callback_url' as `/sso/callback` +1. Start your LiteLLM proxy +2. Navigate to `https:///ui` +3. Click the SSO login button +4. Authenticate with Okta and verify you're redirected back to LiteLLM +#### Troubleshooting - +| Error | Cause | Solution | +|-------|-------|----------| +| `redirect_uri` error | Redirect URI not configured | Add `/sso/callback` to Sign-in redirect URIs in Okta | +| `access_denied` | User not assigned to app | Assign the user in the Assignments tab | +| `no_matching_policy` | Missing Access Policy | Create an Access Policy in the Authorization Server (see Step 3) | @@ -174,6 +223,7 @@ GENERIC_USER_FIRST_NAME_ATTRIBUTE = "first_name" GENERIC_USER_LAST_NAME_ATTRIBUTE = "last_name" GENERIC_USER_ROLE_ATTRIBUTE = "given_role" GENERIC_USER_PROVIDER_ATTRIBUTE = "provider" +GENERIC_USER_EXTRA_ATTRIBUTES = "department,employee_id,manager" # comma-separated list of additional fields to extract from SSO response GENERIC_CLIENT_STATE = "some-state" # if the provider needs a state parameter GENERIC_INCLUDE_CLIENT_ID = "false" # some providers enforce that the client_id is not in the body GENERIC_SCOPE = "openid profile email" # default scope openid is sometimes not enough to retrieve basic user info like first_name and last_name located in profile scope @@ -190,6 +240,40 @@ Use `GENERIC_USER_ROLE_ATTRIBUTE` to specify which attribute in the SSO token co Nested attribute paths are supported (e.g., `claims.role` or `attributes.litellm_role`). +**Capturing Additional SSO Fields** + +Use `GENERIC_USER_EXTRA_ATTRIBUTES` to extract additional fields from the SSO provider response beyond the standard user attributes (id, email, name, etc.). This is useful when you need to access custom organization-specific data (e.g., department, employee ID, groups) in your [custom SSO handler](./custom_sso.md). + +```shell +# Comma-separated list of field names to extract +GENERIC_USER_EXTRA_ATTRIBUTES="department,employee_id,manager,groups" +``` + +**Accessing Extra Fields in Custom SSO Handler:** + +```python +from litellm.proxy.management_endpoints.types import CustomOpenID + +async def custom_sso_handler(userIDPInfo: CustomOpenID): + # Access the extra fields + extra_fields = getattr(userIDPInfo, 'extra_fields', None) or {} + + user_department = extra_fields.get("department") + employee_id = extra_fields.get("employee_id") + user_groups = extra_fields.get("groups", []) + + # Use these fields for custom logic (e.g., team assignment, access control) + # ... +``` + +**Nested Field Paths:** + +Dot notation is supported for nested fields: + +```shell +GENERIC_USER_EXTRA_ATTRIBUTES="org_info.department,org_info.cost_center,metadata.employee_type" +``` + - Set Redirect URI, if your provider requires it - Set a redirect url = `/sso/callback` ```shell diff --git a/docs/my-website/docs/proxy/call_hooks.md b/docs/my-website/docs/proxy/call_hooks.md index fe865f67e09..17354725fd5 100644 --- a/docs/my-website/docs/proxy/call_hooks.md +++ b/docs/my-website/docs/proxy/call_hooks.md @@ -19,6 +19,7 @@ import Image from '@theme/IdealImage'; | `async_post_call_success_hook` | Modify outgoing response (non-streaming) | After successful LLM API call, for non-streaming responses | | `async_post_call_failure_hook` | Transform error responses sent to clients | After failed LLM API call | | `async_post_call_streaming_hook` | Modify outgoing response (streaming) | After successful LLM API call, for streaming responses | +| `async_post_call_response_headers_hook` | Inject custom HTTP response headers | After LLM API call (both success and failure) | See a complete example with our [parallel request rate limiter](https://github.com/BerriAI/litellm/blob/main/litellm/proxy/hooks/parallel_request_limiter.py) @@ -115,6 +116,18 @@ class MyCustomHandler(CustomLogger): # https://docs.litellm.ai/docs/observabilit async for item in response: yield item + async def async_post_call_response_headers_hook( + self, + data: dict, + user_api_key_dict: UserAPIKeyAuth, + response: Any, + request_headers: Optional[Dict[str, str]] = None, + ) -> Optional[Dict[str, str]]: + """ + Inject custom headers into HTTP response (runs for both success and failure). + """ + return {"x-custom-header": "custom-value"} + proxy_handler_instance = MyCustomHandler() ``` @@ -389,3 +402,31 @@ proxy_handler_instance = MyErrorTransformer() ``` **Result:** Clients receive `"Your prompt is too long..."` instead of `"ContextWindowExceededError: Prompt exceeds context window"`. + +## Advanced - Inject Custom HTTP Response Headers + +Use `async_post_call_response_headers_hook` to inject custom HTTP headers into responses. This hook runs for **both successful and failed** LLM API calls. + +```python +from litellm.integrations.custom_logger import CustomLogger +from litellm.proxy.proxy_server import UserAPIKeyAuth +from typing import Any, Dict, Optional + +class CustomHeaderLogger(CustomLogger): + def __init__(self): + super().__init__() + + async def async_post_call_response_headers_hook( + self, + data: dict, + user_api_key_dict: UserAPIKeyAuth, + response: Any, + request_headers: Optional[Dict[str, str]] = None, + ) -> Optional[Dict[str, str]]: + """ + Inject custom headers into all responses (success and failure). + """ + return {"x-custom-header": "custom-value"} + +proxy_handler_instance = CustomHeaderLogger() +``` diff --git a/docs/my-website/docs/proxy/cli.md b/docs/my-website/docs/proxy/cli.md index 9244f75b756..d3624000a32 100644 --- a/docs/my-website/docs/proxy/cli.md +++ b/docs/my-website/docs/proxy/cli.md @@ -1,7 +1,10 @@ # CLI Arguments -Cli arguments, --host, --port, --num_workers -## --host +This page documents all command-line interface (CLI) arguments available for the LiteLLM proxy server. + +## Server Configuration + +### --host - **Default:** `'0.0.0.0'` - The host for the server to listen on. - **Usage:** @@ -14,7 +17,7 @@ Cli arguments, --host, --port, --num_workers litellm ``` -## --port +### --port - **Default:** `4000` - The port to bind the server to. - **Usage:** @@ -27,9 +30,9 @@ Cli arguments, --host, --port, --num_workers litellm ``` -## --num_workers - - **Default:** `1` - - The number of uvicorn workers to spin up. +### --num_workers + - **Default:** Number of logical CPUs in the system, or `4` if that cannot be determined + - The number of uvicorn / gunicorn workers to spin up. - **Usage:** ```shell litellm --num_workers 4 @@ -40,55 +43,273 @@ Cli arguments, --host, --port, --num_workers litellm ``` -## --api_base +### --config + - **Short form:** `-c` - **Default:** `None` - - The API base for the model litellm should call. + - Path to the proxy configuration file (e.g., config.yaml). + - **Usage:** + ```shell + litellm --config path/to/config.yaml + ``` + +### --log_config + - **Default:** `None` + - **Type:** `str` + - Path to the logging configuration file for uvicorn. + - **Usage:** + ```shell + litellm --log_config path/to/log_config.conf + ``` + +### --keepalive_timeout + - **Default:** `None` + - **Type:** `int` + - Set the uvicorn keepalive timeout in seconds (uvicorn timeout_keep_alive parameter). + - **Usage:** + ```shell + litellm --keepalive_timeout 30 + ``` + - **Usage - set Environment Variable:** `KEEPALIVE_TIMEOUT` + ```shell + export KEEPALIVE_TIMEOUT=30 + litellm + ``` + +### --max_requests_before_restart + - **Default:** `None` + - **Type:** `int` + - Restart worker after this many requests. This is useful for mitigating memory growth over time. + - For uvicorn: maps to `limit_max_requests` + - For gunicorn: maps to `max_requests` + - **Usage:** + ```shell + litellm --max_requests_before_restart 10000 + ``` + - **Usage - set Environment Variable:** `MAX_REQUESTS_BEFORE_RESTART` + ```shell + export MAX_REQUESTS_BEFORE_RESTART=10000 + litellm + ``` + +## Server Backend Options + +### --run_gunicorn + - **Default:** `False` + - **Type:** `bool` (Flag) + - Starts proxy via gunicorn instead of uvicorn. Better for managing multiple workers in production. + - **Usage:** + ```shell + litellm --run_gunicorn + ``` + +### --run_hypercorn + - **Default:** `False` + - **Type:** `bool` (Flag) + - Starts proxy via hypercorn instead of uvicorn. Supports HTTP/2. + - **Usage:** + ```shell + litellm --run_hypercorn + ``` + +### --skip_server_startup + - **Default:** `False` + - **Type:** `bool` (Flag) + - Skip starting the server after setup (useful for database migrations only). + - **Usage:** + ```shell + litellm --skip_server_startup + ``` + +## SSL/TLS Configuration + +### --ssl_keyfile_path + - **Default:** `None` + - **Type:** `str` + - Path to the SSL keyfile. Use this when you want to provide SSL certificate when starting proxy. + - **Usage:** + ```shell + litellm --ssl_keyfile_path /path/to/key.pem --ssl_certfile_path /path/to/cert.pem + ``` + - **Usage - set Environment Variable:** `SSL_KEYFILE_PATH` + ```shell + export SSL_KEYFILE_PATH=/path/to/key.pem + litellm + ``` + +### --ssl_certfile_path + - **Default:** `None` + - **Type:** `str` + - Path to the SSL certfile. Use this when you want to provide SSL certificate when starting proxy. + - **Usage:** + ```shell + litellm --ssl_certfile_path /path/to/cert.pem --ssl_keyfile_path /path/to/key.pem + ``` + - **Usage - set Environment Variable:** `SSL_CERTFILE_PATH` + ```shell + export SSL_CERTFILE_PATH=/path/to/cert.pem + litellm + ``` + +### --ciphers + - **Default:** `None` + - **Type:** `str` + - Ciphers to use for the SSL setup. Only used with `--run_hypercorn`. + - **Usage:** + ```shell + litellm --run_hypercorn --ssl_keyfile_path /path/to/key.pem --ssl_certfile_path /path/to/cert.pem --ciphers "ECDHE+AESGCM" + ``` + +## Model Configuration + +### --model or -m + - **Default:** `None` + - The model name to pass to LiteLLM. + - **Usage:** + ```shell + litellm --model gpt-3.5-turbo + ``` + +### --alias + - **Default:** `None` + - An alias for the model, for user-friendly reference. Use this to give a litellm model name (e.g., "huggingface/codellama/CodeLlama-7b-Instruct-hf") a more user-friendly name ("codellama"). + - **Usage:** + ```shell + litellm --alias my-gpt-model + ``` + +### --api_base + - **Default:** `None` + - The API base for the model LiteLLM should call. - **Usage:** ```shell litellm --model huggingface/tinyllama --api_base https://k58ory32yinf1ly0.us-east-1.aws.endpoints.huggingface.cloud ``` -## --api_version - - **Default:** `None` +### --api_version + - **Default:** `2024-07-01-preview` - For Azure services, specify the API version. - **Usage:** ```shell litellm --model azure/gpt-deployment --api_version 2023-08-01 --api_base https://" ``` -## --model or -m +### --headers - **Default:** `None` - - The model name to pass to Litellm. + - Headers for the API call (as JSON string). - **Usage:** ```shell - litellm --model gpt-3.5-turbo + litellm --model my-model --headers '{"Authorization": "Bearer token"}' ``` -## --test - - **Type:** `bool` (Flag) - - Proxy chat completions URL to make a test request. - - **Usage:** - ```shell - litellm --test - ``` - -## --health - - **Type:** `bool` (Flag) - - Runs a health check on all models in config.yaml - - **Usage:** - ```shell - litellm --health - ``` - -## --alias +### --add_key - **Default:** `None` - - An alias for the model, for user-friendly reference. + - Add a key to the model configuration. - **Usage:** ```shell - litellm --alias my-gpt-model + litellm --add_key my-api-key ``` -## --debug +### --save + - **Type:** `bool` (Flag) + - Save the model-specific config. + - **Usage:** + ```shell + litellm --model gpt-3.5-turbo --save + ``` + +## Model Parameters + +### --temperature + - **Default:** `None` + - **Type:** `float` + - Set the temperature for the model. + - **Usage:** + ```shell + litellm --temperature 0.7 + ``` + +### --max_tokens + - **Default:** `None` + - **Type:** `int` + - Set the maximum number of tokens for the model output. + - **Usage:** + ```shell + litellm --max_tokens 50 + ``` + +### --request_timeout + - **Default:** `None` + - **Type:** `int` + - Set the timeout in seconds for completion calls. + - **Usage:** + ```shell + litellm --request_timeout 300 + ``` + +### --max_budget + - **Default:** `None` + - **Type:** `float` + - Set max budget for API calls. Works for hosted models like OpenAI, TogetherAI, Anthropic, etc. + - **Usage:** + ```shell + litellm --max_budget 100.0 + ``` + +### --drop_params + - **Type:** `bool` (Flag) + - Drop any unmapped params. + - **Usage:** + ```shell + litellm --drop_params + ``` + +### --add_function_to_prompt + - **Type:** `bool` (Flag) + - If a function passed but unsupported, pass it as a part of the prompt. + - **Usage:** + ```shell + litellm --add_function_to_prompt + ``` + +## Database Configuration + +### --iam_token_db_auth + - **Default:** `False` + - **Type:** `bool` (Flag) + - Connects to an RDS database using IAM token authentication instead of a password. This is useful for AWS RDS instances that are configured to use IAM database authentication. + - When enabled, LiteLLM will generate an IAM authentication token to connect to the database. + - **Required Environment Variables:** + - `DATABASE_HOST` - The RDS database host + - `DATABASE_PORT` - The database port + - `DATABASE_USER` - The database user + - `DATABASE_NAME` - The database name + - `DATABASE_SCHEMA` (optional) - The database schema + - **Usage:** + ```shell + litellm --iam_token_db_auth + ``` + - **Usage - set Environment Variable:** `IAM_TOKEN_DB_AUTH` + ```shell + export IAM_TOKEN_DB_AUTH=True + export DATABASE_HOST=mydb.us-east-1.rds.amazonaws.com + export DATABASE_PORT=5432 + export DATABASE_USER=mydbuser + export DATABASE_NAME=mydb + litellm + ``` + +### --use_prisma_db_push + - **Default:** `False` + - **Type:** `bool` (Flag) + - Use `prisma db push` instead of `prisma migrate` for database schema updates. This is useful when you want to quickly sync your database schema without creating migration files. + - **Usage:** + ```shell + litellm --use_prisma_db_push + ``` + +## Debugging + +### --debug - **Default:** `False` - **Type:** `bool` (Flag) - Enable debugging mode for the input. @@ -102,10 +323,10 @@ Cli arguments, --host, --port, --num_workers litellm ``` -## --detailed_debug +### --detailed_debug - **Default:** `False` - **Type:** `bool` (Flag) - - Enable debugging mode for the input. + - Enable detailed debugging mode to view verbose debug logs. - **Usage:** ```shell litellm --detailed_debug @@ -116,80 +337,76 @@ Cli arguments, --host, --port, --num_workers litellm ``` -#### --temperature - - **Default:** `None` - - **Type:** `float` - - Set the temperature for the model. - - **Usage:** - ```shell - litellm --temperature 0.7 - ``` - -## --max_tokens - - **Default:** `None` - - **Type:** `int` - - Set the maximum number of tokens for the model output. - - **Usage:** - ```shell - litellm --max_tokens 50 - ``` - -## --request_timeout - - **Default:** `6000` - - **Type:** `int` - - Set the timeout in seconds for completion calls. - - **Usage:** - ```shell - litellm --request_timeout 300 - ``` - -## --drop_params +### --local + - **Default:** `False` - **Type:** `bool` (Flag) - - Drop any unmapped params. + - For local debugging purposes. - **Usage:** ```shell - litellm --drop_params + litellm --local ``` -## --add_function_to_prompt +## Testing & Health Checks + +### --test - **Type:** `bool` (Flag) - - If a function passed but unsupported, pass it as a part of the prompt. + - Proxy chat completions URL to make a test request to. - **Usage:** ```shell - litellm --add_function_to_prompt + litellm --test ``` -## --config - - Configure Litellm by providing a configuration file path. +### --test_async + - **Default:** `False` + - **Type:** `bool` (Flag) + - Calls async endpoints `/queue/requests` and `/queue/response`. - **Usage:** ```shell - litellm --config path/to/config.yaml + litellm --test_async ``` -## --telemetry +### --num_requests + - **Default:** `10` + - **Type:** `int` + - Number of requests to hit async endpoint with (used with `--test_async`). + - **Usage:** + ```shell + litellm --test_async --num_requests 100 + ``` + +### --health + - **Type:** `bool` (Flag) + - Runs a health check on all models in config.yaml. + - **Usage:** + ```shell + litellm --health + ``` + +## Other Options + +### --version + - **Short form:** `-v` + - **Type:** `bool` (Flag) + - Print LiteLLM version and exit. + - **Usage:** + ```shell + litellm --version + ``` + +### --telemetry - **Default:** `True` - **Type:** `bool` - - Help track usage of this feature. + - Help track usage of this feature. Turn off for privacy. - **Usage:** ```shell litellm --telemetry False ``` - -## --log_config - - **Default:** `None` - - **Type:** `str` - - Specify a log configuration file for uvicorn. - - **Usage:** - ```shell - litellm --log_config path/to/log_config.conf - ``` - -## --skip_server_startup +### --use_queue - **Default:** `False` - **Type:** `bool` (Flag) - - Skip starting the server after setup (useful for DB migrations only). + - To use celery workers for async endpoints. - **Usage:** ```shell - litellm --skip_server_startup - ``` \ No newline at end of file + litellm --use_queue + ``` diff --git a/docs/my-website/docs/proxy/cli_sso.md b/docs/my-website/docs/proxy/cli_sso.md index cde6bf266d4..ad0f033f802 100644 --- a/docs/my-website/docs/proxy/cli_sso.md +++ b/docs/my-website/docs/proxy/cli_sso.md @@ -28,6 +28,37 @@ EXPERIMENTAL_UI_LOGIN="True" litellm --config config.yaml ::: +### Configuration + +#### JWT Token Expiration + +By default, CLI authentication tokens expire after **24 hours**. You can customize this expiration time by setting the `LITELLM_CLI_JWT_EXPIRATION_HOURS` environment variable when starting your LiteLLM Proxy: + +```bash +# Set CLI JWT tokens to expire after 48 hours +export LITELLM_CLI_JWT_EXPIRATION_HOURS=48 +export EXPERIMENTAL_UI_LOGIN="True" +litellm --config config.yaml +``` + +Or in a single command: + +```bash +LITELLM_CLI_JWT_EXPIRATION_HOURS=48 EXPERIMENTAL_UI_LOGIN="True" litellm --config config.yaml +``` + +**Examples:** +- `LITELLM_CLI_JWT_EXPIRATION_HOURS=12` - Tokens expire after 12 hours +- `LITELLM_CLI_JWT_EXPIRATION_HOURS=168` - Tokens expire after 7 days (168 hours) +- `LITELLM_CLI_JWT_EXPIRATION_HOURS=720` - Tokens expire after 30 days (720 hours) + +:::tip +You can check your current token's age and expiration status using: +```bash +litellm-proxy whoami +``` +::: + ### Steps 1. **Install the CLI** diff --git a/docs/my-website/docs/proxy/config_settings.md b/docs/my-website/docs/proxy/config_settings.md index 89e1e2910e4..9e3b5e90978 100644 --- a/docs/my-website/docs/proxy/config_settings.md +++ b/docs/my-website/docs/proxy/config_settings.md @@ -94,7 +94,7 @@ litellm_settings: # /chat/completions, /completions, /embeddings, /audio/transcriptions mode: default_off # if default_off, you need to opt in to caching on a per call basis ttl: 600 # ttl for caching - disable_copilot_system_to_assistant: False # If false (default), converts all 'system' role messages to 'assistant' for GitHub Copilot compatibility. Set to true to disable this behavior. + disable_copilot_system_to_assistant: False # DEPRECATED - GitHub Copilot API supports system prompts. callback_settings: otel: @@ -197,7 +197,7 @@ router_settings: | disable_add_transform_inline_image_block | boolean | For Fireworks AI models - if true, turns off the auto-add of `#transform=inline` to the url of the image_url, if the model is not a vision model. | | disable_hf_tokenizer_download | boolean | If true, it defaults to using the openai tokenizer for all models (including huggingface models). | | enable_json_schema_validation | boolean | If true, enables json schema validation for all requests. | -| disable_copilot_system_to_assistant | boolean | If false (default), converts all 'system' role messages to 'assistant' for GitHub Copilot compatibility. Set to true to disable this behavior. Useful for tools (like Claude Code) that send system messages, which Copilot does not support. | +| disable_copilot_system_to_assistant | boolean | **DEPRECATED** - GitHub Copilot API supports system prompts. | ### general_settings - Reference @@ -321,6 +321,7 @@ router_settings: | redis_host | string | The host address for the Redis server. **Only set this if you have multiple instances of LiteLLM Proxy and want current tpm/rpm tracking to be shared across them** | | redis_password | string | The password for the Redis server. **Only set this if you have multiple instances of LiteLLM Proxy and want current tpm/rpm tracking to be shared across them** | | redis_port | string | The port number for the Redis server. **Only set this if you have multiple instances of LiteLLM Proxy and want current tpm/rpm tracking to be shared across them**| +| redis_db | int | The database number for the Redis server. **Only set this if you have multiple instances of LiteLLM Proxy and want current tpm/rpm tracking to be shared across them**| | enable_pre_call_check | boolean | If true, checks if a call is within the model's context window before making the call. [More information here](reliability) | | content_policy_fallbacks | array of objects | Specifies fallback models for content policy violations. [More information here](reliability) | | fallbacks | array of objects | Specifies fallback models for all types of errors. [More information here](reliability) | @@ -357,7 +358,8 @@ router_settings: | redis_url | str | URL for Redis server. **Known performance issue with Redis URL.** | | cache_responses | boolean | Flag to enable caching LLM Responses, if cache set under `router_settings`. If true, caches responses. Defaults to False. | | router_general_settings | RouterGeneralSettings | [SDK-Only] Router general settings - contains optimizations like 'async_only_mode'. [Docs](../routing.md#router-general-settings) | -| optional_pre_call_checks | List[str] | List of pre-call checks to add to the router. Currently supported: 'router_budget_limiting', 'prompt_caching' | +| optional_pre_call_checks | List[str] | List of pre-call checks to add to the router. Supported: `router_budget_limiting`, `prompt_caching`, `responses_api_deployment_check`, `deployment_affinity`, `forward_client_headers_by_model_group` | +| deployment_affinity_ttl_seconds | int | TTL (seconds) for user-key → deployment affinity mapping when `deployment_affinity` is enabled (configured at Router init / proxy startup). Defaults to `3600` (1 hour). | | ignore_invalid_deployments | boolean | If true, ignores invalid deployments. Default for proxy is True - to prevent invalid models from blocking other models from being loaded. | | search_tools | List[SearchToolTypedDict] | List of search tool configurations for Search API integration. Each tool specifies a search_tool_name and litellm_params with search_provider, api_key, api_base, etc. [Further Docs](../search.md) | | guardrail_list | List[GuardrailTypedDict] | List of guardrail configurations for guardrail load balancing. Enables load balancing across multiple guardrail deployments with the same guardrail_name. [Further Docs](./guardrails/guardrail_load_balancing.md) | @@ -394,7 +396,7 @@ router_settings: | ATHINA_API_KEY | API key for Athina service | ATHINA_BASE_URL | Base URL for Athina service (defaults to `https://log.athina.ai`) | AUTH_STRATEGY | Strategy used for authentication (e.g., OAuth, API key) -| AUTO_REDIRECT_UI_LOGIN_TO_SSO | Flag to enable automatic redirect of UI login page to SSO when SSO is configured. Default is **true** +| AUTO_REDIRECT_UI_LOGIN_TO_SSO | Flag to enable automatic redirect of UI login page to SSO when SSO is configured. Default is **false** | AUDIO_SPEECH_CHUNK_SIZE | Chunk size for audio speech processing. Default is 1024 | ANTHROPIC_API_KEY | API key for Anthropic service | ANTHROPIC_API_BASE | Base URL for Anthropic API. Default is https://api.anthropic.com @@ -449,9 +451,12 @@ router_settings: | BATCH_STATUS_POLL_INTERVAL_SECONDS | Interval in seconds for polling batch status. Default is 3600 (1 hour) | BATCH_STATUS_POLL_MAX_ATTEMPTS | Maximum number of attempts for polling batch status. Default is 24 (for 24 hours) | BEDROCK_MAX_POLICY_SIZE | Maximum size for Bedrock policy. Default is 75 +| BEDROCK_MIN_THINKING_BUDGET_TOKENS | Minimum thinking budget in tokens for Bedrock reasoning models. Bedrock returns a 400 error if budget_tokens is below this value. Requests with lower values are clamped to this minimum. Default is 1024 | BERRISPEND_ACCOUNT_ID | Account ID for BerriSpend service | BRAINTRUST_API_KEY | API key for Braintrust integration | BRAINTRUST_API_BASE | Base URL for Braintrust API. Default is https://api.braintrustdata.com/v1 +| BRAINTRUST_MOCK | Enable mock mode for Braintrust integration testing. When set to true, intercepts Braintrust API calls and returns mock responses without making actual network calls. Default is false +| BRAINTRUST_MOCK_LATENCY_MS | Mock latency in milliseconds for Braintrust API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | CACHED_STREAMING_CHUNK_DELAY | Delay in seconds for cached streaming chunks. Default is 0.02 | CHATGPT_API_BASE | Base URL for ChatGPT API. Default is https://chatgpt.com/backend-api/codex | CHATGPT_AUTH_FILE | Filename for ChatGPT authentication data. Default is "auth.json" @@ -462,6 +467,7 @@ router_settings: | CHATGPT_USER_AGENT_SUFFIX | Suffix to append to the ChatGPT user agent string | CIRCLE_OIDC_TOKEN | OpenID Connect token for CircleCI | CIRCLE_OIDC_TOKEN_V2 | Version 2 of the OpenID Connect token for CircleCI +| CLI_JWT_EXPIRATION_HOURS | Expiration time in hours for CLI-generated JWT tokens. Default is 24 hours. Can also be set via LITELLM_CLI_JWT_EXPIRATION_HOURS | CLOUDZERO_API_KEY | CloudZero API key for authentication | CLOUDZERO_CONNECTION_ID | CloudZero connection ID for data submission | CLOUDZERO_EXPORT_INTERVAL_MINUTES | Interval in minutes for CloudZero data export operations @@ -488,6 +494,7 @@ router_settings: | DATABASE_USER | Username for database connection | DATABASE_USERNAME | Alias for database user | DATABRICKS_API_BASE | Base URL for Databricks API +| DATABRICKS_API_KEY | API key (Personal Access Token) for Databricks API authentication | DATABRICKS_CLIENT_ID | Client ID for Databricks OAuth M2M authentication (Service Principal application ID) | DATABRICKS_CLIENT_SECRET | Client secret for Databricks OAuth M2M authentication | DATABRICKS_USER_AGENT | Custom user agent string for Databricks API requests. Used for partner telemetry attribution @@ -504,15 +511,19 @@ router_settings: | DD_AGENT_HOST | Hostname or IP of DataDog agent (e.g., "localhost"). When set, logs are sent to agent instead of direct API | DD_AGENT_PORT | Port of DataDog agent for log intake. Default is 10518 | DD_API_KEY | API key for Datadog integration +| DD_APP_KEY | Application key for Datadog Cost Management integration. Required along with DD_API_KEY for cost metrics | DD_SITE | Site URL for Datadog (e.g., datadoghq.com) | DD_SOURCE | Source identifier for Datadog logs | DD_TRACER_STREAMING_CHUNK_YIELD_RESOURCE | Resource name for Datadog tracing of streaming chunk yields. Default is "streaming.chunk.yield" | DD_ENV | Environment identifier for Datadog logs. Only supported for `datadog_llm_observability` callback | DD_SERVICE | Service identifier for Datadog logs. Defaults to "litellm-server" | DD_VERSION | Version identifier for Datadog logs. Defaults to "unknown" +| DATADOG_MOCK | Enable mock mode for Datadog integration testing. When set to true, intercepts Datadog API calls and returns mock responses without making actual network calls. Default is false +| DATADOG_MOCK_LATENCY_MS | Mock latency in milliseconds for Datadog API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | DEBUG_OTEL | Enable debug mode for OpenTelemetry | DEFAULT_ALLOWED_FAILS | Maximum failures allowed before cooling down a model. Default is 3 | DEFAULT_A2A_AGENT_TIMEOUT | Default timeout in seconds for A2A (Agent-to-Agent) protocol requests. Default is 6000 +| DEFAULT_ACCESS_GROUP_CACHE_TTL | Time-to-live in seconds for cached access group information. Default is 600 (10 minutes) | DEFAULT_ANTHROPIC_CHAT_MAX_TOKENS | Default maximum tokens for Anthropic chat completions. Default is 4096 | DEFAULT_BATCH_SIZE | Default batch size for operations. Default is 512 | DEFAULT_CHUNK_OVERLAP | Default chunk overlap for RAG text splitters. Default is 200 @@ -531,17 +542,25 @@ router_settings: | DEFAULT_IMAGE_WIDTH | Default width for images. Default is 300 | DEFAULT_IN_MEMORY_TTL | Default time-to-live for in-memory cache in seconds. Default is 5 | DEFAULT_MANAGEMENT_OBJECT_IN_MEMORY_CACHE_TTL | Default time-to-live in seconds for management objects (User, Team, Key, Organization) in memory cache. Default is 60 seconds. -| DEFAULT_MAX_LRU_CACHE_SIZE | Default maximum size for LRU cache. Default is 16 +| DEFAULT_MAX_LRU_CACHE_SIZE | Default maximum size for LRU cache. Default is 64 | DEFAULT_MAX_RECURSE_DEPTH | Default maximum recursion depth. Default is 100 | DEFAULT_MAX_RECURSE_DEPTH_SENSITIVE_DATA_MASKER | Default maximum recursion depth for sensitive data masker. Default is 10 | DEFAULT_MAX_RETRIES | Default maximum retry attempts. Default is 2 | DEFAULT_MAX_TOKENS | Default maximum tokens for LLM calls. Default is 4096 | DEFAULT_MAX_TOKENS_FOR_TRITON | Default maximum tokens for Triton models. Default is 2000 | DEFAULT_MAX_REDIS_BATCH_CACHE_SIZE | Default maximum size for redis batch cache. Default is 1000 +| DEFAULT_MCP_SEMANTIC_FILTER_EMBEDDING_MODEL | Default embedding model for MCP semantic tool filtering. Default is "text-embedding-3-small" +| DEFAULT_MCP_SEMANTIC_FILTER_SIMILARITY_THRESHOLD | Default similarity threshold for MCP semantic tool filtering. Default is 0.3 +| DEFAULT_MCP_SEMANTIC_FILTER_TOP_K | Default number of top results to return for MCP semantic tool filtering. Default is 10 +| MCP_NPM_CACHE_DIR | Directory for npm cache used by STDIO MCP servers. In containers the default (~/.npm) may not exist or be read-only. Default is `/tmp/.npm_mcp_cache` +| MCP_OAUTH2_TOKEN_CACHE_DEFAULT_TTL | Default TTL in seconds for MCP OAuth2 token cache. Default is 3600 +| MCP_OAUTH2_TOKEN_CACHE_MAX_SIZE | Maximum number of entries in MCP OAuth2 token cache. Default is 200 +| MCP_OAUTH2_TOKEN_CACHE_MIN_TTL | Minimum TTL in seconds for MCP OAuth2 token cache. Default is 10 +| MCP_OAUTH2_TOKEN_EXPIRY_BUFFER_SECONDS | Seconds to subtract from token expiry when computing cache TTL. Default is 60 | DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT | Default token count for mock response completions. Default is 20 | DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT | Default token count for mock response prompts. Default is 10 | DEFAULT_MODEL_CREATED_AT_TIME | Default creation timestamp for models. Default is 1677610602 -| DEFAULT_NUM_WORKERS_LITELLM_PROXY | Default number of workers for LiteLLM proxy. Default is 4. **We strongly recommend setting NUM Workers to Number of vCPUs available** +| DEFAULT_NUM_WORKERS_LITELLM_PROXY | Default number of workers for LiteLLM proxy when `NUM_WORKERS` is not set. Default is 1. **We strongly recommend setting NUM_WORKERS to the number of vCPUs available** (e.g. `NUM_WORKERS=8` or `--num_workers 8`). | DEFAULT_PROMPT_INJECTION_SIMILARITY_THRESHOLD | Default threshold for prompt injection similarity. Default is 0.7 | DEFAULT_POLLING_INTERVAL | Default polling interval for schedulers in seconds. Default is 0.03 | DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGET | Default reasoning effort disable thinking budget. Default is 0 @@ -586,7 +605,6 @@ router_settings: | EMAIL_BUDGET_ALERT_TTL | Time-to-live for budget alert deduplication in seconds. Default is 86400 (24 hours) | ENKRYPTAI_API_BASE | Base URL for EnkryptAI Guardrails API. **Default is https://api.enkryptai.com** | ENKRYPTAI_API_KEY | API key for EnkryptAI Guardrails service -| EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING | Flag to enable new multi-instance rate limiting. **Default is False** | FIREWORKS_AI_4_B | Size parameter for Fireworks AI 4B model. Default is 4 | FIREWORKS_AI_16_B | Size parameter for Fireworks AI 16B model. Default is 16 | FIREWORKS_AI_56_B_MOE | Size parameter for Fireworks AI 56B MOE model. Default is 56 @@ -611,6 +629,8 @@ router_settings: | GALILEO_USERNAME | Username for Galileo authentication | GOOGLE_SECRET_MANAGER_PROJECT_ID | Project ID for Google Secret Manager | GCS_BUCKET_NAME | Name of the Google Cloud Storage bucket +| GCS_MOCK | Enable mock mode for GCS integration testing. When set to true, intercepts GCS API calls and returns mock responses without making actual network calls. Default is false +| GCS_MOCK_LATENCY_MS | Mock latency in milliseconds for GCS API calls when mock mode is enabled. Simulates network round-trip time. Default is 150ms | GCS_PATH_SERVICE_ACCOUNT | Path to the Google Cloud service account JSON file | GCS_FLUSH_INTERVAL | Flush interval for GCS logging (in seconds). Specify how often you want a log to be sent to GCS. **Default is 20 seconds** | GCS_BATCH_SIZE | Batch size for GCS logging. Specify after how many logs you want to flush to GCS. If `BATCH_SIZE` is set to 10, logs are flushed every 10 logs. **Default is 2048** @@ -628,6 +648,7 @@ router_settings: | GENERIC_TOKEN_ENDPOINT | Token endpoint for generic OAuth providers | GENERIC_USER_DISPLAY_NAME_ATTRIBUTE | Attribute for user's display name in generic auth | GENERIC_USER_EMAIL_ATTRIBUTE | Attribute for user's email in generic auth +| GENERIC_USER_EXTRA_ATTRIBUTES | Comma-separated list of additional fields to extract from generic SSO provider response (e.g., "department,employee_id,groups"). Accessible via `CustomOpenID.extra_fields` in custom SSO handlers. Supports dot notation for nested fields | GENERIC_USER_FIRST_NAME_ATTRIBUTE | Attribute for user's first name in generic auth | GENERIC_USER_ID_ATTRIBUTE | Attribute for user ID in generic auth | GENERIC_USER_LAST_NAME_ATTRIBUTE | Attribute for user's last name in generic auth @@ -636,6 +657,10 @@ router_settings: | GENERIC_USERINFO_ENDPOINT | Endpoint to fetch user information in generic OAuth | GENERIC_LOGGER_ENDPOINT | Endpoint URL for the Generic Logger callback to send logs to | GENERIC_LOGGER_HEADERS | JSON string of headers to include in Generic Logger callback requests +| GENERIC_ROLE_MAPPINGS_DEFAULT_ROLE | Default LiteLLM role to assign when no role mapping matches in generic SSO. Used with GENERIC_ROLE_MAPPINGS_ROLES +| GENERIC_ROLE_MAPPINGS_GROUP_CLAIM | The claim/attribute name in the SSO token that contains the user's groups. Used for role mapping +| GENERIC_ROLE_MAPPINGS_ROLES | Python dict string mapping LiteLLM roles to SSO group names. Example: `{"proxy_admin": ["admin-group"], "internal_user": ["users"]}` +| GENERIC_USER_ROLE_MAPPINGS | Alternative to GENERIC_ROLE_MAPPINGS_ROLES for configuring user role mappings from SSO | GEMINI_API_BASE | Base URL for Gemini API. Default is https://generativelanguage.googleapis.com | GALILEO_BASE_URL | Base URL for Galileo platform | GALILEO_PASSWORD | Password for Galileo authentication @@ -672,6 +697,8 @@ router_settings: | HCP_VAULT_CERT_ROLE | Role for [Hashicorp Vault Secret Manager Auth](../secret.md#hashicorp-vault) | HELICONE_API_KEY | API key for Helicone service | HELICONE_API_BASE | Base URL for Helicone service, defaults to `https://api.helicone.ai` +| HELICONE_MOCK | Enable mock mode for Helicone integration testing. When set to true, intercepts Helicone API calls and returns mock responses without making actual network calls. Default is false +| HELICONE_MOCK_LATENCY_MS | Mock latency in milliseconds for Helicone API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | HOSTNAME | Hostname for the server, this will be [emitted to `datadog` logs](https://docs.litellm.ai/docs/proxy/logging#datadog) | HOURS_IN_A_DAY | Hours in a day for calculation purposes. Default is 24 | HIDDENLAYER_API_BASE | Base URL for HiddenLayer API. Defaults to `https://api.hiddenlayer.ai` @@ -697,6 +724,8 @@ router_settings: | LANGFUSE_FLUSH_INTERVAL | Interval for flushing Langfuse logs | LANGFUSE_TRACING_ENVIRONMENT | Environment for Langfuse tracing | LANGFUSE_HOST | Host URL for Langfuse service +| LANGFUSE_MOCK | Enable mock mode for Langfuse integration testing. When set to true, intercepts Langfuse API calls and returns mock responses without making actual network calls. Default is false +| LANGFUSE_MOCK_LATENCY_MS | Mock latency in milliseconds for Langfuse API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | LANGFUSE_PUBLIC_KEY | Public key for Langfuse authentication | LANGFUSE_RELEASE | Release version of Langfuse integration | LANGFUSE_SECRET_KEY | Secret key for Langfuse authentication @@ -708,6 +737,8 @@ router_settings: | LANGSMITH_PROJECT | Project name for Langsmith integration | LANGSMITH_SAMPLING_RATE | Sampling rate for Langsmith logging | LANGSMITH_TENANT_ID | Tenant ID for Langsmith multi-tenant deployments +| LANGSMITH_MOCK | Enable mock mode for Langsmith integration testing. When set to true, intercepts Langsmith API calls and returns mock responses without making actual network calls. Default is false +| LANGSMITH_MOCK_LATENCY_MS | Mock latency in milliseconds for Langsmith API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | LANGTRACE_API_KEY | API key for Langtrace service | LASSO_API_BASE | Base URL for Lasso API | LASSO_API_KEY | API key for Lasso service @@ -718,9 +749,14 @@ router_settings: | LITERAL_API_KEY | API key for Literal integration | LITERAL_API_URL | API URL for Literal service | LITERAL_BATCH_SIZE | Batch size for Literal operations +| LITELLM_ANTHROPIC_BETA_HEADERS_URL | Custom URL for fetching Anthropic beta headers configuration. Default is the GitHub main branch URL | LITELLM_ANTHROPIC_DISABLE_URL_SUFFIX | Disable automatic URL suffix appending for Anthropic API base URLs. When set to `true`, prevents LiteLLM from automatically adding `/v1/messages` or `/v1/complete` to custom Anthropic API endpoints +| LITELLM_ASSETS_PATH | Path to directory for UI assets and logos. Used when running with read-only filesystem (e.g., Kubernetes). Default is `/var/lib/litellm/assets` in Docker. +| LITELLM_CLI_JWT_EXPIRATION_HOURS | Expiration time in hours for CLI-generated JWT tokens. Default is 24 hours | LITELLM_DD_AGENT_HOST | Hostname or IP of DataDog agent for LiteLLM-specific logging. When set, logs are sent to agent instead of direct API +| LITELLM_DEPLOYMENT_ENVIRONMENT | Environment name for the deployment (e.g., "production", "staging"). Used as a fallback when OTEL_ENVIRONMENT_NAME is not set. Sets the `environment` tag in telemetry data | LITELLM_DD_AGENT_PORT | Port of DataDog agent for LiteLLM-specific log intake. Default is 10518 +| LITELLM_DD_LLM_OBS_PORT | Port for Datadog LLM Observability agent. Default is 8126 | LITELLM_DONT_SHOW_FEEDBACK_BOX | Flag to hide feedback box in LiteLLM UI | LITELLM_DROP_PARAMS | Parameters to drop in LiteLLM requests | LITELLM_MODIFY_PARAMS | Parameters to modify in LiteLLM requests @@ -731,11 +767,15 @@ router_settings: | LITELLM_MIGRATION_DIR | Custom migrations directory for prisma migrations, used for baselining db in read-only file systems. | LITELLM_HOSTED_UI | URL of the hosted UI for LiteLLM | LITELLM_UI_API_DOC_BASE_URL | Optional override for the API Reference base URL (used in sample code/docs) when the admin UI runs on a different host than the proxy. Defaults to `PROXY_BASE_URL` when unset. +| LITELLM_UI_PATH | Path to directory for Admin UI files. Used when running with read-only filesystem (e.g., Kubernetes). Default is `/var/lib/litellm/ui` in Docker. | LITELM_ENVIRONMENT | Environment of LiteLLM Instance, used by logging services. Currently only used by DeepEval. | LITELLM_KEY_ROTATION_ENABLED | Enable auto-key rotation for LiteLLM (boolean). Default is false. | LITELLM_KEY_ROTATION_CHECK_INTERVAL_SECONDS | Interval in seconds for how often to run job that auto-rotates keys. Default is 86400 (24 hours). +| LITELLM_KEY_ROTATION_GRACE_PERIOD | Duration to keep old key valid after rotation (e.g. "24h", "2d"). Default is empty (immediate revoke). Used for scheduled rotations and as fallback when not specified in regenerate request. | LITELLM_LICENSE | License key for LiteLLM usage +| LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS | Set to `True` to use the local bundled Anthropic beta headers config only, disabling remote fetching. Default is `False` | LITELLM_LOCAL_MODEL_COST_MAP | Local configuration for model cost mapping in LiteLLM +| LITELLM_LOCAL_POLICY_TEMPLATES | When set to "true", uses local backup policy templates instead of fetching from GitHub. Policy templates are fetched from https://raw.githubusercontent.com/BerriAI/litellm/main/policy_templates.json by default, with automatic fallback to local backup on failure | LITELLM_LOG | Enable detailed logging for LiteLLM | LITELLM_MODEL_COST_MAP_URL | URL for fetching model cost map data. Default is https://raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json | LITELLM_LOG_FILE | File path to write LiteLLM logs to. When set, logs will be written to both console and the specified file @@ -743,6 +783,10 @@ router_settings: | LITELLM_METER_NAME | Name for OTEL Meter | LITELLM_OTEL_INTEGRATION_ENABLE_EVENTS | Optionally enable semantic logs for OTEL | LITELLM_OTEL_INTEGRATION_ENABLE_METRICS | Optionally enable emantic metrics for OTEL +| LITELLM_ENABLE_PYROSCOPE | If true, enables Pyroscope CPU profiling. Profiles are sent to PYROSCOPE_SERVER_ADDRESS. Off by default. See [Pyroscope profiling](/proxy/pyroscope_profiling). +| PYROSCOPE_APP_NAME | Application name reported to Pyroscope. Required when LITELLM_ENABLE_PYROSCOPE is true. No default. +| PYROSCOPE_SERVER_ADDRESS | Pyroscope server URL to send profiles to. Required when LITELLM_ENABLE_PYROSCOPE is true. No default. +| PYROSCOPE_SAMPLE_RATE | Optional. Sample rate for Pyroscope profiling (integer). No default; when unset, the pyroscope-io library default is used. | LITELLM_MASTER_KEY | Master key for proxy authentication | LITELLM_MODE | Operating mode for LiteLLM (e.g., production, development) | LITELLM_NON_ROOT | Flag to run LiteLLM in non-root mode for enhanced security in Docker containers @@ -755,6 +799,7 @@ router_settings: | LITELLM_USER_AGENT | Custom user agent string for LiteLLM API requests. Used for partner telemetry attribution | LITELLM_PRINT_STANDARD_LOGGING_PAYLOAD | If true, prints the standard logging payload to the console - useful for debugging | LITELM_ENVIRONMENT | Environment for LiteLLM Instance. This is currently only logged to DeepEval to determine the environment for DeepEval integration. +| LITELLM_ASYNCIO_QUEUE_MAXSIZE | Maximum size for asyncio queues (e.g. log queues, spend update queues, and cookbook examples such as realtime audio in `nova_sonic_realtime.py`). Bounds in-memory growth to prevent OOM. Default is 1000. | LOGFIRE_TOKEN | Token for Logfire logging service | LOGFIRE_BASE_URL | Base URL for Logfire logging service (useful for self hosted deployments) | LOGGING_WORKER_CONCURRENCY | Maximum number of concurrent coroutine slots for the logging worker on the asyncio event loop. Default is 100. Setting too high will flood the event loop with logging tasks which will lower the overall latency of the requests. @@ -781,6 +826,8 @@ router_settings: | MAXIMUM_TRACEBACK_LINES_TO_LOG | Maximum number of lines to log in traceback in LiteLLM Logs UI. Default is 100 | MAX_RETRY_DELAY | Maximum delay in seconds for retrying requests. Default is 8.0 | MAX_LANGFUSE_INITIALIZED_CLIENTS | Maximum number of Langfuse clients to initialize on proxy. Default is 50. This is set since langfuse initializes 1 thread everytime a client is initialized. We've had an incident in the past where we reached 100% cpu utilization because Langfuse was initialized several times. +| MAX_MCP_SEMANTIC_FILTER_TOOLS_HEADER_LENGTH | Maximum header length for MCP semantic filter tools. Default is 150 +| MAX_POLICY_ESTIMATE_IMPACT_ROWS | Maximum number of rows returned when estimating the impact of a policy. Default is 1000 | MIN_NON_ZERO_TEMPERATURE | Minimum non-zero temperature value. Default is 0.0001 | MINIMUM_PROMPT_CACHE_TOKEN_COUNT | Minimum token count for caching a prompt. Default is 1024 | MISTRAL_API_BASE | Base URL for Mistral API. Default is https://api.mistral.ai @@ -797,6 +844,8 @@ router_settings: | MICROSOFT_USER_ID_ATTRIBUTE | Field name for user ID in Microsoft SSO response. Default is `id` | MICROSOFT_USER_LAST_NAME_ATTRIBUTE | Field name for user last name in Microsoft SSO response. Default is `surname` | MICROSOFT_USERINFO_ENDPOINT | Custom userinfo endpoint URL for Microsoft SSO (overrides default Microsoft Graph userinfo endpoint) +| MODEL_COST_MAP_MAX_SHRINK_RATIO | Maximum allowed shrinkage ratio when validating a fetched model cost map against the local backup. Rejects the fetched map if it is smaller than this fraction of the backup. Default is 0.5 +| MODEL_COST_MAP_MIN_MODEL_COUNT | Minimum number of models a fetched cost map must contain to be considered valid. Default is 50 | NO_DOCS | Flag to disable Swagger UI documentation | NO_REDOC | Flag to disable Redoc documentation | NO_PROXY | List of addresses to bypass proxy @@ -816,6 +865,7 @@ router_settings: | OPENMETER_EVENT_TYPE | Type of events sent to OpenMeter | ONYX_API_BASE | Base URL for Onyx Security AI Guard service (defaults to https://ai-guard.onyx.security) | ONYX_API_KEY | API key for Onyx Security AI Guard service +| ONYX_TIMEOUT | Timeout in seconds for Onyx Guard server requests. Default is 10 | OTEL_ENDPOINT | OpenTelemetry endpoint for traces | OTEL_EXPORTER_OTLP_ENDPOINT | OpenTelemetry endpoint for traces | OTEL_ENVIRONMENT_NAME | Environment name for OpenTelemetry @@ -839,6 +889,8 @@ router_settings: | POD_NAME | Pod name for the server, this will be [emitted to `datadog` logs](https://docs.litellm.ai/docs/proxy/logging#datadog) as `POD_NAME` | POSTHOG_API_KEY | API key for PostHog analytics integration | POSTHOG_API_URL | Base URL for PostHog API (defaults to https://us.i.posthog.com) +| POSTHOG_MOCK | Enable mock mode for PostHog integration testing. When set to true, intercepts PostHog API calls and returns mock responses without making actual network calls. Default is false +| POSTHOG_MOCK_LATENCY_MS | Mock latency in milliseconds for PostHog API calls when mock mode is enabled. Simulates network round-trip time. Default is 100ms | PREDIBASE_API_BASE | Base URL for Predibase API | PRESIDIO_ANALYZER_API_BASE | Base URL for Presidio Analyzer service | PRESIDIO_ANONYMIZER_API_BASE | Base URL for Presidio Anonymizer service @@ -876,6 +928,8 @@ router_settings: | ROUTER_MAX_FALLBACKS | Maximum number of fallbacks for router. Default is 5 | RUNWAYML_DEFAULT_API_VERSION | Default API version for RunwayML service. Default is "2024-11-06" | RUNWAYML_POLLING_TIMEOUT | Timeout in seconds for RunwayML image generation polling. Default is 600 (10 minutes) +| S3_VECTORS_DEFAULT_DIMENSION | Default vector dimension for S3 Vectors RAG ingestion. Default is 1024 +| S3_VECTORS_DEFAULT_DISTANCE_METRIC | Default distance metric for S3 Vectors RAG ingestion. Options: "cosine", "euclidean". Default is "cosine" | SECRET_MANAGER_REFRESH_INTERVAL | Refresh interval in seconds for secret manager. Default is 86400 (24 hours) | SEPARATE_HEALTH_APP | If set to '1', runs health endpoints on a separate ASGI app and port. Default: '0'. | SEPARATE_HEALTH_PORT | Port for the separate health endpoints app. Only used if SEPARATE_HEALTH_APP=1. Default: 4001. diff --git a/docs/my-website/docs/proxy/configs.md b/docs/my-website/docs/proxy/configs.md index a5674bf2bc5..56a8b9566db 100644 --- a/docs/my-website/docs/proxy/configs.md +++ b/docs/my-website/docs/proxy/configs.md @@ -469,6 +469,7 @@ credential_list: api_version: "2023-05-15" credential_info: description: "Production credentials for EU region" + custom_llm_provider: "azure" ``` #### Key Parameters diff --git a/docs/my-website/docs/proxy/custom_pricing.md b/docs/my-website/docs/proxy/custom_pricing.md index 8f4a4c450f5..b61da85bb1d 100644 --- a/docs/my-website/docs/proxy/custom_pricing.md +++ b/docs/my-website/docs/proxy/custom_pricing.md @@ -9,6 +9,7 @@ LiteLLM provides flexible cost tracking and pricing customization for all LLM pr - **Custom Pricing** - Override default model costs or set pricing for custom models - **Cost Per Token** - Track costs based on input/output tokens (most common) - **Cost Per Second** - Track costs based on runtime (e.g., Sagemaker) +- **Zero-Cost Models** - Bypass budget checks for free/on-premises models by setting costs to 0 - **[Provider Discounts](./provider_discounts.md)** - Apply percentage-based discounts to specific providers - **[Provider Margins](./provider_margins.md)** - Add fees/margins to LLM costs for internal billing - **Base Model Mapping** - Ensure accurate cost tracking for Azure deployments @@ -106,6 +107,51 @@ There are other keys you can use to specify costs for different scenarios and mo These keys evolve based on how new models handle multimodality. The latest version can be found at [https://github.com/BerriAI/litellm/blob/main/model_prices_and_context_window.json](https://github.com/BerriAI/litellm/blob/main/model_prices_and_context_window.json). +## Zero-Cost Models (Bypass Budget Checks) + +**Use Case**: You have on-premises or free models that should be accessible even when users exceed their budget limits. + +**Solution** ✅: Set both `input_cost_per_token` and `output_cost_per_token` to `0` (explicitly) to bypass all budget checks for that model. + +:::info + +When a model is configured with zero cost, LiteLLM will automatically skip ALL budget checks (user, team, team member, end-user, organization, and global proxy budget) for requests to that model. + +**Important**: Both costs must be **explicitly set to 0**. If costs are `null` or undefined, the model will be treated as having cost and budget checks will apply. + +::: + +### Configuration Example + +```yaml +model_list: + # On-premises model - free to use + - model_name: on-prem-llama + litellm_params: + model: ollama/llama3 + api_base: http://localhost:11434 + model_info: + input_cost_per_token: 0 # 👈 Explicitly set to 0 + output_cost_per_token: 0 # 👈 Explicitly set to 0 + + # Paid cloud model - budget checks apply + - model_name: gpt-4 + litellm_params: + model: gpt-4 + api_key: os.environ/OPENAI_API_KEY + # No model_info - uses default pricing from cost map +``` + +### Behavior + +With the above configuration: + +- **User over budget** → Can still use `on-prem-llama` ✅, but blocked from `gpt-4` ❌ +- **Team over budget** → Can still use `on-prem-llama` ✅, but blocked from `gpt-4` ❌ +- **End-user over budget** → Can still use `on-prem-llama` ✅, but blocked from `gpt-4` ❌ + +This ensures your free/on-premises models remain accessible regardless of budget constraints, while paid models are still properly governed. + ## Set 'base_model' for Cost Tracking (e.g. Azure deployments) **Problem**: Azure returns `gpt-4` in the response when `azure/gpt-4-1106-preview` is used. This leads to inaccurate cost tracking diff --git a/docs/my-website/docs/proxy/custom_sso.md b/docs/my-website/docs/proxy/custom_sso.md index bbd7f41bee1..8b7adeb0c5a 100644 --- a/docs/my-website/docs/proxy/custom_sso.md +++ b/docs/my-website/docs/proxy/custom_sso.md @@ -142,6 +142,18 @@ async def custom_sso_handler(userIDPInfo: OpenID) -> SSOUserDefinedValues: f"No ID found for user. userIDPInfo.id is None {userIDPInfo}" ) + ################################################# + # Access extra fields from SSO provider (requires GENERIC_USER_EXTRA_ATTRIBUTES env var) + # Example: Set GENERIC_USER_EXTRA_ATTRIBUTES="department,employee_id,groups" + extra_fields = getattr(userIDPInfo, 'extra_fields', None) or {} + user_department = extra_fields.get("department") + employee_id = extra_fields.get("employee_id") + user_groups = extra_fields.get("groups", []) + + print(f"User department: {user_department}") # noqa + print(f"Employee ID: {employee_id}") # noqa + print(f"User groups: {user_groups}") # noqa + ################################################# ################################################# # Run your custom code / logic here diff --git a/docs/my-website/docs/proxy/deploy.md b/docs/my-website/docs/proxy/deploy.md index 7393e73ba87..0761e0e9fa8 100644 --- a/docs/my-website/docs/proxy/deploy.md +++ b/docs/my-website/docs/proxy/deploy.md @@ -200,6 +200,7 @@ Example `requirements.txt` ```shell litellm[proxy]==1.57.3 # Specify the litellm version you want to use +litellm-enterprise prometheus_client langfuse prisma diff --git a/docs/my-website/docs/proxy/embedding.md b/docs/my-website/docs/proxy/embedding.md index 2adaaa24735..0e7c2d55c44 100644 --- a/docs/my-website/docs/proxy/embedding.md +++ b/docs/my-website/docs/proxy/embedding.md @@ -6,6 +6,16 @@ import TabItem from '@theme/TabItem'; See supported Embedding Providers & Models [here](https://docs.litellm.ai/docs/embedding/supported_embedding) +## Supported Input Formats + +The `/v1/embeddings` endpoint follows the [OpenAI embeddings API specification](https://platform.openai.com/docs/api-reference/embeddings/create). The following input formats are supported: + +| Format | Example | +|--------|---------| +| String | `"input": "Hello"` | +| Array of strings | `"input": ["Hello", "World"]` | +| Array of tokens (integers) | `"input": [1234, 5678, 9012]` | +| Array of token arrays | `"input": [[1234, 5678], [9012, 3456]]` | ## Quick start Here's how to route between GPT-J embedding (sagemaker endpoint), Amazon Titan embedding (Bedrock) and Azure OpenAI embedding on the proxy server: diff --git a/docs/my-website/docs/proxy/forward_client_headers.md b/docs/my-website/docs/proxy/forward_client_headers.md index 5477ffe87aa..2155a7517be 100644 --- a/docs/my-website/docs/proxy/forward_client_headers.md +++ b/docs/my-website/docs/proxy/forward_client_headers.md @@ -6,6 +6,52 @@ Control which model groups can forward client headers to the underlying LLM prov By default, LiteLLM does not forward client headers to LLM provider APIs for security reasons. However, you can selectively enable header forwarding for specific model groups using the `forward_client_headers_to_llm_api` setting. +## How it Works + +LiteLLM does **not** forward all client headers to the LLM provider. Instead, it uses an **allowlist** approach — only headers matching specific rules are forwarded. This ensures sensitive headers (like your LiteLLM API key) are never accidentally sent to upstream providers. + +```mermaid +sequenceDiagram + participant Client as Client (SDK / curl) + participant Proxy as LiteLLM Proxy + participant Filter as Header Filter (Allowlist) + participant LLM as LLM Provider (OpenAI, Anthropic, etc.) + + Client->>Proxy: Request with all headers
(Authorization, x-trace-id,
x-custom-header, anthropic-beta, etc.) + + Proxy->>Filter: Check forward_client_headers_to_llm_api
setting for this model group + + Note over Filter: Allowlist rules:
1. Headers starting with "x-" ✅
2. "anthropic-beta" ✅
3. "x-stainless-*" ❌ (blocked)
4. All other headers ❌ (blocked) + + Filter-->>Proxy: Return only allowed headers + + Proxy->>LLM: Request with filtered headers
(x-trace-id, x-custom-header,
anthropic-beta) + + LLM-->>Proxy: Response + Proxy-->>Client: Response +``` + +### Header Allowlist Rules + +The following rules determine which headers are forwarded (see [`_get_forwardable_headers`](https://github.com/litellm/litellm/blob/main/litellm/proxy/litellm_pre_call_utils.py) in `litellm/proxy/litellm_pre_call_utils.py`): + +| Rule | Example | Forwarded? | +|---|---|---| +| Headers starting with `x-` | `x-trace-id`, `x-custom-header`, `x-request-source` | ✅ Yes | +| `anthropic-beta` header | `anthropic-beta: prompt-caching-2024-07-31` | ✅ Yes | +| Headers starting with `x-stainless-*` | `x-stainless-lang`, `x-stainless-arch` | ❌ No (causes OpenAI SDK issues) | +| Standard HTTP headers | `Authorization`, `Content-Type`, `Host` | ❌ No | +| Other provider headers | `Accept`, `User-Agent` | ❌ No | + +### Additional Header Mechanisms + +| Mechanism | Description | Reference | +|---|---|---| +| **`x-pass-` prefix** | Headers prefixed with `x-pass-` are always forwarded with the prefix stripped, regardless of settings. E.g., `x-pass-anthropic-beta: value` → `anthropic-beta: value`. Works for all pass-through endpoints. | [Source code](https://github.com/litellm/litellm/blob/main/litellm/passthrough/utils.py) | +| **`openai-organization`** | Forwarded only when `forward_openai_org_id: true` is set in `general_settings`. | [Forward OpenAI Org ID](#enable-globally) | +| **User information headers** | When `add_user_information_to_llm_headers: true`, LiteLLM adds `x-litellm-user-id`, `x-litellm-org-id`, etc. | [User Information Headers](#user-information-headers-optional) | +| **Vertex AI pass-through** | Uses a separate, stricter allowlist: only `anthropic-beta` and `content-type`. | [Source code](https://github.com/litellm/litellm/blob/main/litellm/constants.py) | + ## Configuration ## Enable Globally diff --git a/docs/my-website/docs/proxy/guardrails/custom_code_guardrail.md b/docs/my-website/docs/proxy/guardrails/custom_code_guardrail.md new file mode 100644 index 00000000000..8cbc247ae5e --- /dev/null +++ b/docs/my-website/docs/proxy/guardrails/custom_code_guardrail.md @@ -0,0 +1,332 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Custom Code Guardrail + +Write custom guardrail logic using Python-like code that runs in a sandboxed environment. + +## Quick Start + +### 1. Define the guardrail in config + +```yaml +model_list: + - model_name: gpt-4 + litellm_params: + model: gpt-4 + api_key: os.environ/OPENAI_API_KEY + +guardrails: + - guardrail_name: block-ssn + litellm_params: + guardrail: custom_code + mode: pre_call + custom_code: | + def apply_guardrail(inputs, request_data, input_type): + for text in inputs["texts"]: + if regex_match(text, r"\d{3}-\d{2}-\d{4}"): + return block("SSN detected") + return allow() +``` + +### 2. Start proxy + +```bash +litellm --config config.yaml +``` + +### 3. Test + +```bash +curl -X POST http://localhost:4000/chat/completions \ + -H "Authorization: Bearer sk-1234" \ + -H "Content-Type: application/json" \ + -d '{ + "model": "gpt-4", + "messages": [{"role": "user", "content": "My SSN is 123-45-6789"}], + "guardrails": ["block-ssn"] + }' +``` + +## Configuration + +| Parameter | Type | Required | Description | +|-----------|------|----------|-------------| +| `guardrail` | string | ✅ | Must be `custom_code` | +| `mode` | string | ✅ | When to run: `pre_call`, `post_call`, `during_call` | +| `custom_code` | string | ✅ | Python-like code with `apply_guardrail` function | +| `default_on` | bool | ❌ | Run on all requests (default: `false`) | + +## Writing Custom Code + +### Function Signature + +Your code must define an `apply_guardrail` function. It can be either sync or async: + +```python +# Sync version +def apply_guardrail(inputs, request_data, input_type): + # inputs: see table below + # request_data: {"model": "...", "user_id": "...", "team_id": "...", "metadata": {...}} + # input_type: "request" or "response" + + return allow() # or block() or modify() + +# Async version (recommended when using HTTP primitives) +async def apply_guardrail(inputs, request_data, input_type): + response = await http_post("https://api.example.com/check", body={"text": inputs["texts"][0]}) + if response["success"] and response["body"].get("flagged"): + return block("Content flagged") + return allow() +``` + +### `inputs` Parameter + +| Field | Type | Description | +|-------|------|-------------| +| `texts` | `List[str]` | Extracted text from the request/response | +| `images` | `List[str]` | Extracted images (for image guardrails) | +| `tools` | `List[dict]` | Tools sent to the LLM | +| `tool_calls` | `List[dict]` | Tool calls returned from the LLM | +| `structured_messages` | `List[dict]` | Full messages with role info (system/user/assistant) | +| `model` | `str` | The model being used | + +### `request_data` Parameter + +| Field | Type | Description | +|-------|------|-------------| +| `model` | `str` | Model name | +| `user_id` | `str` | User ID from API key | +| `team_id` | `str` | Team ID from API key | +| `end_user_id` | `str` | End user ID | +| `metadata` | `dict` | Request metadata | + +### Return Values + +| Function | Description | +|----------|-------------| +| `allow()` | Let request/response through | +| `block(reason)` | Reject with message | +| `modify(texts=[], images=[], tool_calls=[])` | Transform content | + +## Built-in Primitives + +### Regex + +| Function | Description | +|----------|-------------| +| `regex_match(text, pattern)` | Returns `True` if pattern found | +| `regex_replace(text, pattern, replacement)` | Replace all matches | +| `regex_find_all(text, pattern)` | Return list of matches | + +### JSON + +| Function | Description | +|----------|-------------| +| `json_parse(text)` | Parse JSON string, returns `None` on error | +| `json_stringify(obj)` | Convert to JSON string | +| `json_schema_valid(obj, schema)` | Validate against JSON schema | + +### URL + +| Function | Description | +|----------|-------------| +| `extract_urls(text)` | Extract all URLs from text | +| `is_valid_url(url)` | Check if URL is valid | +| `all_urls_valid(text)` | Check all URLs in text are valid | + +### Code Detection + +| Function | Description | +|----------|-------------| +| `detect_code(text)` | Returns `True` if code detected | +| `detect_code_languages(text)` | Returns list of detected languages | +| `contains_code_language(text, ["sql", "python"])` | Check for specific languages | + +### Text Utilities + +| Function | Description | +|----------|-------------| +| `contains(text, substring)` | Check if substring exists | +| `contains_any(text, [substr1, substr2])` | Check if any substring exists | +| `word_count(text)` | Count words | +| `char_count(text)` | Count characters | +| `lower(text)` / `upper(text)` / `trim(text)` | String transforms | + +### HTTP Requests (Async) + +Make async HTTP requests to external APIs for additional validation or content moderation. + +| Function | Description | +|----------|-------------| +| `await http_request(url, method, headers, body, timeout)` | General async HTTP request | +| `await http_get(url, headers, timeout)` | Async GET request | +| `await http_post(url, body, headers, timeout)` | Async POST request | + +**Response format:** +```python +{ + "status_code": 200, # HTTP status code + "body": {...}, # Response body (parsed JSON or string) + "headers": {...}, # Response headers + "success": True, # True if status code is 2xx + "error": None # Error message if request failed +} +``` + +**Note:** When using HTTP primitives, define your function as `async def apply_guardrail(...)` for non-blocking execution. + +## Examples + +### Block PII (SSN) + +```python +def apply_guardrail(inputs, request_data, input_type): + for text in inputs["texts"]: + if regex_match(text, r"\d{3}-\d{2}-\d{4}"): + return block("SSN detected") + return allow() +``` + +### Redact Email Addresses + +```python +def apply_guardrail(inputs, request_data, input_type): + pattern = r"[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}" + modified = [] + for text in inputs["texts"]: + modified.append(regex_replace(text, pattern, "[EMAIL REDACTED]")) + return modify(texts=modified) +``` + +### Block SQL Injection + +```python +def apply_guardrail(inputs, request_data, input_type): + if input_type != "request": + return allow() + for text in inputs["texts"]: + if contains_code_language(text, ["sql"]): + return block("SQL code not allowed") + return allow() +``` + +### Validate JSON Response + +```python +def apply_guardrail(inputs, request_data, input_type): + if input_type != "response": + return allow() + + schema = { + "type": "object", + "required": ["name", "value"] + } + + for text in inputs["texts"]: + obj = json_parse(text) + if obj is None: + return block("Invalid JSON response") + if not json_schema_valid(obj, schema): + return block("Response missing required fields") + return allow() +``` + +### Check URLs in Response + +```python +def apply_guardrail(inputs, request_data, input_type): + if input_type != "response": + return allow() + for text in inputs["texts"]: + if not all_urls_valid(text): + return block("Response contains invalid URLs") + return allow() +``` + +### Call External Moderation API (Async) + +```python +async def apply_guardrail(inputs, request_data, input_type): + # Call an external moderation API + for text in inputs["texts"]: + response = await http_post( + "https://api.example.com/moderate", + body={"text": text, "user_id": request_data["user_id"]}, + headers={"Authorization": "Bearer YOUR_API_KEY"}, + timeout=10 + ) + + if not response["success"]: + # API call failed - decide whether to allow or block + return allow() + + if response["body"].get("flagged"): + return block(response["body"].get("reason", "Content flagged")) + + return allow() +``` + +### Combine Multiple Checks + +```python +def apply_guardrail(inputs, request_data, input_type): + modified = [] + + for text in inputs["texts"]: + # Redact SSN + text = regex_replace(text, r"\d{3}-\d{2}-\d{4}", "[SSN]") + # Redact credit cards + text = regex_replace(text, r"\d{16}", "[CARD]") + modified.append(text) + + # Block SQL in requests + if input_type == "request": + for text in inputs["texts"]: + if contains_code_language(text, ["sql"]): + return block("SQL injection blocked") + + return modify(texts=modified) +``` + +## Sandbox Restrictions + +Custom code runs in a restricted environment: + +- ❌ No `import` statements +- ❌ No file I/O +- ❌ No `exec()` or `eval()` +- ✅ HTTP requests via built-in `http_request`, `http_get`, `http_post` primitives +- ✅ Only LiteLLM-provided primitives available + +## Per-Request Usage + +Enable guardrail per request: + +```bash +curl -X POST http://localhost:4000/chat/completions \ + -H "Authorization: Bearer sk-1234" \ + -H "Content-Type: application/json" \ + -d '{ + "model": "gpt-4", + "messages": [{"role": "user", "content": "Hello"}], + "guardrails": ["block-ssn"] + }' +``` + +## Default On + +Run guardrail on all requests: + +```yaml +litellm_settings: + guardrails: + - guardrail_name: block-ssn + litellm_params: + guardrail: custom_code + mode: pre_call + default_on: true + custom_code: | + def apply_guardrail(inputs, request_data, input_type): + ... +``` diff --git a/docs/my-website/docs/proxy/guardrails/grayswan.md b/docs/my-website/docs/proxy/guardrails/grayswan.md index d6efaf15504..6c0ccbc293d 100644 --- a/docs/my-website/docs/proxy/guardrails/grayswan.md +++ b/docs/my-website/docs/proxy/guardrails/grayswan.md @@ -13,20 +13,26 @@ Cygnal returns a `violation` score between `0` and `1` (higher means more likely ### 1. Obtain Credentials -1. Create a Gray Swan account and generate a Cygnal API key. +1. Log in to our Gray Swan platform and generate a Cygnal API key. + + For existing customers, you should already have access to our [platform](https://platform.grayswan.ai). + + For new users, please register at this [page](https://hubs.ly/Q03-sX1J0) and we are more than happy to give you an onboarding! + + 2. Configure environment variables for the LiteLLM proxy host: -```bash -export GRAYSWAN_API_KEY="your-grayswan-key" -export GRAYSWAN_API_BASE="https://api.grayswan.ai" -``` + ```bash + export GRAYSWAN_API_KEY="your-grayswan-key" + export GRAYSWAN_API_BASE="https://api.grayswan.ai" + ``` ### 2. Configure `config.yaml` -Add a guardrail entry that references the Gray Swan integration. Below is a balanced example that monitors both input and output but only blocks once the violation score reaches the configured threshold. +Add a guardrail entry that references the Gray Swan integration. Below is our recommmended settings. ```yaml -model_list: +model_list: # this part is a standard litellm configuration for reference - model_name: openai/gpt-4.1-mini litellm_params: model: openai/gpt-4.1-mini @@ -40,13 +46,14 @@ guardrails: api_key: os.environ/GRAYSWAN_API_KEY api_base: os.environ/GRAYSWAN_API_BASE # optional optional_params: - on_flagged_action: monitor # or "block" + on_flagged_action: passthrough # or "block" or "monitor" violation_threshold: 0.5 # score >= threshold is flagged reasoning_mode: hybrid # off | hybrid | thinking - categories: - safety: "Detect jailbreaks and policy violations" - policy_id: "your-cygnal-policy-id" + policy_id: "your-cygnal-policy-id" # Optional: Your Cygnal policy ID. Defaults to a content safety policy if empty. + streaming_end_of_stream_only: true # For streaming API, only send the assembled message to Cygnal (post_call only). Defaults to false. default_on: true + guardrail_timeout: 30 # Defaults to 30 seconds. Change accordingly. + fail_open: true # Defaults to true; set to false to propagate guardrail errors. general_settings: master_key: "your-litellm-master-key" @@ -65,13 +72,13 @@ litellm --config config.yaml --port 4000 ## Choosing Guardrail Modes -Gray Swan can run during `pre_call`, `during_call`, and `post_call` stages. Combine modes based on your latency and coverage requirements. +Gray Swan can run during `pre_call`, `during_call`, and `post_call` stages. Combine modes based on your latency and coverage requirements. | Mode | When it Runs | Protects | Typical Use Case | |--------------|-------------------|-----------------------|------------------| | `pre_call` | Before LLM call | User input only | Block prompt injection before it reaches the model | | `during_call`| Parallel to call | User input only | Low-latency monitoring without blocking | -| `post_call` | After response | Full conversation | Scan output for policy violations, leaked secrets, or IPI | +| `post_call` | After response | Model Outputs | Scan output for policy violations, leaked secrets, or IPI | When using `during_call` with `on_flagged_action: block` or `on_flagged_action: passthrough`: @@ -81,87 +88,110 @@ When using `during_call` with `on_flagged_action: block` or `on_flagged_action: - The guardrail exception prevents the response from reaching the user, but **does not cancel the running LLM task** - This means you pay full LLM costs while returning an error/passthrough message to the user -**Recommendation:** For cost-sensitive applications, use `pre_call` and `post_call` instead of `during_call` for blocking or passthrough modes. Reserve `during_call` for `monitor` mode where you want low-latency logging without impacting the user experience. +**Recommendation:** Use `pre_call` and `post_call` instead of `during_call` for `passthrough` (or `block`) `on_flagged_action` (see our recommended configuration above). Reserve `during_call` for `monitor` mode ONLY when you want low-latency logging without impacting the user experience. - - +--- -```yaml -guardrails: - - guardrail_name: "cygnal-monitor-only" - litellm_params: - guardrail: grayswan - mode: "during_call" - api_key: os.environ/GRAYSWAN_API_KEY - optional_params: - on_flagged_action: monitor - violation_threshold: 0.6 - default_on: true +## Work with Claude Code + +Follow the official litellm [guide](https://docs.litellm.ai/docs/tutorials/claude_responses_api) on setting up Claude Code with litellm, with the guardrail part mentioned above added to your litellm configuration. Cygnal natively supports coding agent policies defense. Define your own policy or use the provided coding policies on the platform. The example config we show above is also the recommended setup for Claude Code (with the `policy_id` replaced with an appropriate one). + +--- + +## Per-request overrides via `extra_body` + +You can override parts of the Gray Swan guardrail configuration on a per-request basis by passing `litellm_metadata.guardrails[*].grayswan.extra_body`. + +`extra_body` is merged into the Cygnal request body and takes precedence over specific fields from `config.yaml`, which are `policy_id`, `violation_threshold`, and `reasoning_mode`. + +If you include a `metadata` field inside `extra_body`, it is forwarded to the Cygnal API as-is under the request body's `metadata` field. + +Example: + +```bash +curl -X POST "http://0.0.0.0:4000/v1/messages?beta=true" \ + -H "Authorization: Bearer token" \ + -H "Content-Type: application/json" \ + -d '{ + "model": "openrouter/anthropic/claude-sonnet-4.5", + "messages": [{"role": "user", "content": "hello"}], + "litellm_metadata": { + "guardrails": [ + { + "cygnal-monitor": { + "extra_body": { + "policy_id": "specific policy id you want to use", + "metadata": { + "user": "health-check" + } + } + } + } + ] + } + }' ``` -Best for visibility without blocking. Alerts are logged via LiteLLM’s standard logging callbacks. +OpenAI client: - - +```python +from openai import OpenAI -```yaml -guardrails: - - guardrail_name: "cygnal-block-input" - litellm_params: - guardrail: grayswan - mode: "pre_call" - api_key: os.environ/GRAYSWAN_API_KEY - optional_params: - on_flagged_action: block - violation_threshold: 0.4 - categories: - pii: "Detect sensitive data" - default_on: true +client = OpenAI(api_key="anything", base_url="http://0.0.0.0:4000") + +resp = client.responses.create( + model="openrouter/anthropic/claude-sonnet-4.5", + input="hello", + extra_body={ + "litellm_metadata": { + "guardrails": [ + { + "cygnal-monitor": { + "extra_body": { + "policy_id": "69038214e5cdb6befc5e991e", + "metadata": {"trace_id": "trace-123"}, + } + } + } + ] + } + }, +) ``` -Stops malicious or sensitive prompts before any tokens are generated. +Anthropic client: - - +```python +from anthropic import Anthropic -```yaml -guardrails: - - guardrail_name: "cygnal-full-coverage" - litellm_params: - guardrail: grayswan - mode: [pre_call, post_call] - api_key: os.environ/GRAYSWAN_API_KEY - optional_params: - on_flagged_action: block - violation_threshold: 0.5 - reasoning_mode: thinking - policy_id: "policy-id-from-grayswan" - default_on: true +client = Anthropic(api_key="anything", base_url="http://0.0.0.0:4000") + +resp = client.messages.create( + model="openrouter/anthropic/claude-sonnet-4.5", + max_tokens=256, + messages=[{"role": "user", "content": "hello"}], + extra_body={ + "litellm_metadata": { + "guardrails": [ + { + "cygnal-monitor": { + "extra_body": { + "policy_id": "69038214e5cdb6befc5e991e", + "metadata": {"trace_id": "trace-123"}, + } + } + } + ] + } + }, +) ``` -Provides the strongest enforcement by inspecting both prompts and responses. +Notes: - - - -```yaml -guardrails: - - guardrail_name: "cygnal-passthrough" - litellm_params: - guardrail: grayswan - mode: [pre_call, post_call] - api_key: os.environ/GRAYSWAN_API_KEY - optional_params: - on_flagged_action: passthrough - violation_threshold: 0.5 - default_on: true -``` - -Allows requests to proceed without raising a 400 error when content is flagged. Instead of blocking, the model response content is replaced with a detailed violation message including violation score, violated rules, and detection flags (mutation, IPI). **Supported Response Formats:** OpenAI chat/text completions, Anthropic Messages API. Other response types (embeddings, images, etc.) will log a warning and return unchanged. - - - +- The guardrail name (for example, `cygnal-monitor`) must match the `guardrail_name` in `config.yaml`. +- Per-request guardrail overrides may require a premium license, depending on your proxy settings. --- @@ -170,9 +200,14 @@ Allows requests to proceed without raising a 400 error when content is flagged. | Parameter | Type | Description | |---------------------------------------|-----------------|-------------| | `api_key` | string | Gray Swan Cygnal API key. Reads from `GRAYSWAN_API_KEY` if omitted. | +| `api_base` | string | Override for the Gray Swan API base URL. Defaults to `https://api.grayswan.ai` or `GRAYSWAN_API_BASE`. | | `mode` | string or list | Guardrail stages (`pre_call`, `during_call`, `post_call`). | | `optional_params.on_flagged_action` | string | `monitor` (log only), `block` (raise `HTTPException`), or `passthrough` (replace response content with violation message, no 400 error). | -| `.optional_params.violation_threshold`| number (0-1) | Scores at or above this value are considered violations. | +| `optional_params.violation_threshold` | number (0-1) | Scores at or above this value are considered violations. | | `optional_params.reasoning_mode` | string | `off`, `hybrid`, or `thinking`. Enables Cygnal's reasoning capabilities. | | `optional_params.categories` | object | Map of custom category names to descriptions. | | `optional_params.policy_id` | string | Gray Swan policy identifier. | +| `guardrail_timeout` | number | Timeout in seconds for the Cygnal request. Defaults to 30. | +| `fail_open` | boolean | If true, errors contacting Cygnal are logged and the request proceeds; if false, errors propagate. Defaults to treu. | +| `streaming_end_of_stream_only` | boolean | For streaming `post_call`, only send the final assembled response to Cygnal. Defaults to false. | +| `default_on` | boolean | Run the guardrail on every request by default. | diff --git a/docs/my-website/docs/proxy/guardrails/guardrail_policies.md b/docs/my-website/docs/proxy/guardrails/guardrail_policies.md new file mode 100644 index 00000000000..e2cb839203e --- /dev/null +++ b/docs/my-website/docs/proxy/guardrails/guardrail_policies.md @@ -0,0 +1,396 @@ +import Image from '@theme/IdealImage'; +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# [Beta] Guardrail Policies + +Use policies to group guardrails and control which ones run for specific teams, keys, or models. + +## Why use policies? + +- Enable/disable specific guardrails for teams, keys, or models +- Group guardrails into a single policy +- Inherit from existing policies and override what you need + +## Quick Start + + + + +```yaml showLineNumbers title="config.yaml" +model_list: + - model_name: gpt-4 + litellm_params: + model: openai/gpt-4 + +# 1. Define your guardrails +guardrails: + - guardrail_name: pii_masking + litellm_params: + guardrail: presidio + mode: pre_call + + - guardrail_name: prompt_injection + litellm_params: + guardrail: lakera + mode: pre_call + api_key: os.environ/LAKERA_API_KEY + +# 2. Create a policy +policies: + my-policy: + guardrails: + add: + - pii_masking + - prompt_injection + +# 3. Attach the policy +policy_attachments: + - policy: my-policy + scope: "*" # apply to all requests +``` + + + + +**Step 1: Create a Policy** + +Go to **Policies** tab and click **+ Create New Policy**. Fill in the policy name, description, and select guardrails to add. + +![Enter policy name](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/4ba62cc8-d2c4-4af1-a526-686295466928/ascreenshot_401eab3e2081466e8f4d4ffa3bf7bff4_text_export.jpeg) + +![Add a description for the policy](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/51685e47-1d94-4d9c-acb0-3c88dce9f938/ascreenshot_a5cd40066ff34afbb1e4089a3c93d889_text_export.jpeg) + +![Select a parent policy to inherit from](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/1d96c3d3-187a-4f7c-97d2-6ac1f093d51e/ascreenshot_8a3af3b2210547dca3d4709df920d005_text_export.jpeg) + +![Select guardrails to add to the policy](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/23781274-e600-4d5f-a8a6-4a2a977a166c/ascreenshot_a2a45d2c5d064c77ab7cb47b569ad9e9_text_export.jpeg) + +![Click Create Policy to save](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/1d1ae8a8-daa5-451b-9fa2-c5b607ff6220/ascreenshot_218c2dd259714be4aa3c4e1894c96878_text_export.jpeg) + + + + +Response headers show what ran: + +``` +x-litellm-applied-policies: my-policy +x-litellm-applied-guardrails: pii_masking,prompt_injection +``` + +## Add guardrails for a specific team + +:::info +✨ Enterprise only feature for team/key-based policy attachments. [Get a free trial](https://www.litellm.ai/enterprise#trial) +::: + +You have a global baseline, but want to add extra guardrails for a specific team. + + + + +```yaml showLineNumbers title="config.yaml" +policies: + global-baseline: + guardrails: + add: + - pii_masking + + finance-team-policy: + inherit: global-baseline + guardrails: + add: + - strict_compliance_check + - audit_logger + +policy_attachments: + - policy: global-baseline + scope: "*" + + - policy: finance-team-policy + teams: + - finance # team alias from /team/new +``` + + + + +**Option 1: Create a team-scoped attachment** + +Go to **Policies** > **Attachments** tab and click **+ Create New Attachment**. Select the policy and the teams to scope it to. + +![Select teams for the attachment](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/50e58f54-3bc3-477e-a106-e58cb65fde7e/ascreenshot_85d2e3d9d8d24842baced92fea170427_text_export.jpeg) + +![Select the teams to attach the policy to](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/f24066bb-0a73-49fb-87b6-c65ad3ca5b2f/ascreenshot_242476fbdac447309f65de78b0ed9fdd_text_export.jpeg) + +**Option 2: Attach from team settings** + +Go to **Teams** > click on a team > **Settings** tab > under **Policies**, select the policies to attach. + +![Open team settings and click Edit Settings](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/c31c3735-4f9d-4c6a-896b-186e97296940/ascreenshot_4749bb24ce5942cca462acc958fd3822_text_export.jpeg) + +![Select policies to attach to this team](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/da8d5d7a-d975-4bfe-acd2-f41dcea29520/ascreenshot_835a33b6cec545cbb2987f017fbaff90_text_export.jpeg) + + + + + + +Now the `finance` team gets `pii_masking` + `strict_compliance_check` + `audit_logger`, while everyone else just gets `pii_masking`. + +## Remove guardrails for a specific team + +:::info +✨ Enterprise only feature for team/key-based policy attachments. [Get a free trial](https://www.litellm.ai/enterprise#trial) +::: + +You have guardrails running globally, but want to disable some for a specific team (e.g., internal testing). + +```yaml showLineNumbers title="config.yaml" +policies: + global-baseline: + guardrails: + add: + - pii_masking + - prompt_injection + + internal-team-policy: + inherit: global-baseline + guardrails: + remove: + - pii_masking # don't need PII masking for internal testing + +policy_attachments: + - policy: global-baseline + scope: "*" + + - policy: internal-team-policy + teams: + - internal-testing # team alias from /team/new +``` + +Now the `internal-testing` team only gets `prompt_injection`, while everyone else gets both guardrails. + +## Inheritance + +Start with a base policy and build on it: + +```yaml showLineNumbers title="config.yaml" +policies: + base: + guardrails: + add: + - pii_masking + - toxicity_filter + + strict: + inherit: base + guardrails: + add: + - prompt_injection + + relaxed: + inherit: base + guardrails: + remove: + - toxicity_filter +``` + +What you get: +- `base` → `[pii_masking, toxicity_filter]` +- `strict` → `[pii_masking, toxicity_filter, prompt_injection]` +- `relaxed` → `[pii_masking]` + +## Model Conditions + +Run guardrails only for specific models: + +```yaml showLineNumbers title="config.yaml" +policies: + gpt4-safety: + guardrails: + add: + - strict_content_filter + condition: + model: "gpt-4.*" # regex - matches gpt-4, gpt-4-turbo, gpt-4o + + bedrock-compliance: + guardrails: + add: + - audit_logger + condition: + model: # exact match list + - bedrock/claude-3 + - bedrock/claude-2 +``` + +## Attachments + +Policies don't do anything until you attach them. Attachments tell LiteLLM *where* to apply each policy. + +**Global** - runs on every request: + +```yaml showLineNumbers title="config.yaml" +policy_attachments: + - policy: default + scope: "*" +``` + +**Team-specific** (uses team alias from `/team/new`): + +```yaml showLineNumbers title="config.yaml" +policy_attachments: + - policy: hipaa-compliance + teams: + - healthcare-team # team alias + - medical-research # team alias +``` + +**Key-specific** (uses key alias from `/key/generate`, wildcards supported): + +```yaml showLineNumbers title="config.yaml" +policy_attachments: + - policy: internal-testing + keys: + - "dev-*" # key alias pattern + - "test-*" # key alias pattern +``` + +**Tag-based** (matches keys/teams by metadata tags, wildcards supported): + +```yaml showLineNumbers title="config.yaml" +policy_attachments: + - policy: hipaa-compliance + tags: + - "healthcare" + - "health-*" # wildcard - matches health-team, health-dev, etc. +``` + +Tags are read from key and team `metadata.tags`. For example, a key created with `metadata: {"tags": ["healthcare"]}` would match the attachment above. + +## Test Policy Matching + +Debug which policies and guardrails apply for a given context. Use this to verify your policy configuration before deploying. + + + + +Go to **Policies** > **Test** tab. Enter a team alias, key alias, model, or tags and click **Test** to see which policies match and what guardrails would be applied. + + + + + + +```bash +curl -X POST "http://localhost:4000/policies/resolve" \ + -H "Authorization: Bearer " \ + -H "Content-Type: application/json" \ + -d '{ + "tags": ["healthcare"], + "model": "gpt-4" + }' +``` + +Response: + +```json +{ + "effective_guardrails": ["pii_masking"], + "matched_policies": [ + { + "policy_name": "hipaa-compliance", + "matched_via": "tag:healthcare", + "guardrails_added": ["pii_masking"] + } + ] +} +``` + + + + +## Config Reference + +### `policies` + +```yaml +policies: + : + description: ... + inherit: ... + guardrails: + add: [...] + remove: [...] + condition: + model: ... +``` + +| Field | Type | Description | +|-------|------|-------------| +| `description` | `string` | Optional. What this policy does. | +| `inherit` | `string` | Optional. Parent policy to inherit guardrails from. | +| `guardrails.add` | `list[string]` | Guardrails to enable. | +| `guardrails.remove` | `list[string]` | Guardrails to disable (useful with inheritance). | +| `condition.model` | `string` or `list[string]` | Optional. Only apply when model matches. Supports regex. | + +### `policy_attachments` + +```yaml +policy_attachments: + - policy: ... + scope: ... + teams: [...] + keys: [...] + models: [...] + tags: [...] +``` + +| Field | Type | Description | +|-------|------|-------------| +| `policy` | `string` | **Required.** Name of the policy to attach. | +| `scope` | `string` | Use `"*"` to apply globally. | +| `teams` | `list[string]` | Team aliases (from `/team/new`). Supports `*` wildcard. | +| `keys` | `list[string]` | Key aliases (from `/key/generate`). Supports `*` wildcard. | +| `models` | `list[string]` | Model names. Supports `*` wildcard. | +| `tags` | `list[string]` | Tag patterns (from key/team `metadata.tags`). Supports `*` wildcard. | + +### Response Headers + +| Header | Description | +|--------|-------------| +| `x-litellm-applied-policies` | Policies that matched this request | +| `x-litellm-applied-guardrails` | Guardrails that actually ran | +| `x-litellm-policy-sources` | Why each policy matched (e.g., `hipaa=tag:healthcare; baseline=scope:*`) | + +## How it works + +Example config: + +```yaml showLineNumbers title="config.yaml" +policies: + base: + guardrails: + add: [pii_masking] + + finance-policy: + inherit: base + guardrails: + add: [audit_logger] + +policy_attachments: + - policy: base + scope: "*" + - policy: finance-policy + teams: [finance] +``` + +```mermaid +flowchart TD + A["Request with team_alias='finance'"] --> B["Matches policies: base, finance-policy"] + B --> C["Resolves guardrails: pii_masking, audit_logger"] +``` + +1. Request comes in with `team_alias='finance'` +2. Matches `base` (via `scope: "*"`) and `finance-policy` (via `teams: [finance]`) +3. Resolves guardrails: `base` adds `pii_masking`, `finance-policy` inherits and adds `audit_logger` +4. Final guardrails: `pii_masking`, `audit_logger` diff --git a/docs/my-website/docs/proxy/guardrails/onyx_security.md b/docs/my-website/docs/proxy/guardrails/onyx_security.md index 85b0ba9f830..d240902eb52 100644 --- a/docs/my-website/docs/proxy/guardrails/onyx_security.md +++ b/docs/my-website/docs/proxy/guardrails/onyx_security.md @@ -128,6 +128,7 @@ guardrails: mode: ["pre_call", "post_call", "during_call"] # Run at multiple stages api_key: os.environ/ONYX_API_KEY api_base: os.environ/ONYX_API_BASE + timeout: 10.0 # Optional, defaults to 10 seconds ``` ### Required Parameters @@ -137,6 +138,7 @@ guardrails: ### Optional Parameters - **`api_base`**: Onyx API base URL (defaults to `https://ai-guard.onyx.security`) +- **`timeout`**: Request timeout in seconds (defaults to `10.0`) ## Environment Variables @@ -145,4 +147,5 @@ You can set these environment variables instead of hardcoding values in your con ```shell export ONYX_API_KEY="your-api-key-here" export ONYX_API_BASE="https://ai-guard.onyx.security" # Optional +export ONYX_TIMEOUT=10 # Optional, timeout in seconds ``` diff --git a/docs/my-website/docs/proxy/guardrails/policy_tags.md b/docs/my-website/docs/proxy/guardrails/policy_tags.md new file mode 100644 index 00000000000..11840116c31 --- /dev/null +++ b/docs/my-website/docs/proxy/guardrails/policy_tags.md @@ -0,0 +1,139 @@ +# Tag-Based Policy Attachments + +Apply guardrail policies automatically to any key or team that has a specific tag. Instead of attaching policies one-by-one, tag your keys and let the policy engine handle the rest. + +**Example:** Your security team requires all healthcare-related keys to run PII masking and PHI detection. Tag those keys with `health`, create a single tag-based attachment, and every matching key gets the guardrails automatically. + +## 1. Create a Policy with Guardrails + +Navigate to **Policies** in the left sidebar. You'll see a list of existing policies along with their guardrails. + +![Policies list page showing existing policies and the + Add New Policy button](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/d7aa1e1f-011e-40bf-a356-6dfe9d5d54f1/ascreenshot_8db95c231a7f4a79a36c2a98ba127542_text_export.jpeg) + +Click **+ Add New Policy**. In the modal, enter a name for your policy (e.g., `high-risk-policy2`). You can also type to search existing policy names if you want to reference them. + +![Create New Policy modal — enter the policy name and optional description](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/18f1ff69-9b83-4a98-9aad-9892a104d3ff/ascreenshot_1c6b85231cad4ec695750b53bbbda52c_text_export.jpeg) + +Scroll down to **Guardrails to Add**. Click the dropdown to see all available guardrails configured on your proxy — select the ones this policy should enforce. + +![Guardrails to Add dropdown showing available guardrails like OAI-moderation, phi-pre-guard, pii-pre-guard](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/55cedad7-9939-44a1-8644-a184cde82ab7/ascreenshot_eab4e55b82b8411893eccb6234d60b82_text_export.jpeg) + +After selecting your guardrails, they appear as chips in the input field. The **Resolved Guardrails** section below shows the final set that will be applied (including any inherited from a parent policy). + +![Selected guardrails shown as chips: testing-pl, phi-pre-guard, pii-pre-guard. Resolved Guardrails preview below.](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/c06d5b08-1c85-4715-b827-3e6864880428/ascreenshot_7a082e55f3ad425f9009346c68afae23_text_export.jpeg) + +Click **Create Policy** to save. + +![Click Create Policy to save the new policy](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/7e6eae64-4bba-4d72-b226-d1308ac576a8/ascreenshot_22d0ed686c594221bbbd2f40df214d75_text_export.jpeg) + +## 2. Add a Tag Attachment for the Policy + +After creating the policy, switch to the **Attachments** tab. This is where you define *where* the policy applies. + +![Switch to the Attachments tab — shows the attachment table and scope documentation](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/871ae6d9-16d1-44e2-baf2-7bb8a9e72087/ascreenshot_76e124619d70462ea0e2fbb46ded1ac9_text_export.jpeg) + +Click **+ Add New Attachment**. The Attachments page explains the available scopes: Global, Teams, Keys, Models, and **Tags**. + +![Attachments page showing scope types including Tags — click + Add New Attachment](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/d45ab8bc-fc1e-425b-8a3f-44d18df810ec/ascreenshot_425824030f3144b7ab3c0ac570349b00_text_export.jpeg) + +In the **Create Policy Attachment** modal, first select the policy you just created from the dropdown. + +![Select the policy to attach from the dropdown (e.g., high-risk-policy2)](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/e0dcac40-e39c-4a6a-9d9c-4bbb9ec0ee91/ascreenshot_445b19894e0b466196a13e20c8e67f2d_text_export.jpeg) + +Choose **Specific (teams, keys, models, or tags)** as the scope type. This expands the form to show fields for Teams, Keys, Models, and Tags. + +![Select "Specific" scope type to reveal the Tags field](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/f685e02a-e22e-4c6c-9742-d5268746214b/ascreenshot_14d63d9d06dd4fc7854cfeb5e8d9ef85_text_export.jpeg) + +Scroll down to the **Tags** field and type the tag to match — here we enter `health`. You can enter any string, or use a wildcard pattern like `health-*` to match all tags starting with `health-` (e.g., `health-team`, `health-dev`). + +![Tags field with "health" entered. Supports wildcards like prod-* matching prod-us, prod-eu.](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/14581df7-732c-4ea5-b36d-58270b00e92c/ascreenshot_e734c81418f046549b61a84b9d352a29_text_export.jpeg) + +## 3. Check the Impact of the Attachment + +Before creating the attachment, click **Estimate Impact** to preview how many keys and teams would be affected. This is your blast-radius check — make sure the scope is what you expect before applying. + +![Click Estimate Impact — the tag "health" is entered and ready to preview](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/6ccb81d7-3d11-48b0-b634-fc4d738aa530/ascreenshot_2eb89e6ff13a4b12b61004660a36c30c_text_export.jpeg) + +The **Impact Preview** appears inline, showing exactly how many keys and teams would be affected. In this example: "This attachment would affect **1 key** and **0 teams**", with the key alias `hi` listed. + +![Impact Preview showing "This attachment would affect 1 key and 0 teams." Keys: hi](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/8834d85a-2c15-48dd-8d6b-810cf11ee5c4/ascreenshot_d814b42ca9f34c23b0c2269bfa3e64fb_text_export.jpeg) + +Once you're satisfied with the impact, click **Create Attachment** to save. + +![Click Create Attachment to finalize](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/4a8918f2-eedb-4f49-a53b-4e46d0387d2a/ascreenshot_b08d490d836d4f46b4e5cbb14f61377a_text_export.jpeg) + +The attachment now appears in the table with the policy name `high-risk-policy2` and tag `health` visible. + +![Attachments table showing the new attachment with policy high-risk-policy2 and tag "health"](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/45867887-0aec-44a4-963b-b6cc6c302e3e/ascreenshot_981caeff98574ec89a8a53cd295e5043_text_export.jpeg) + +## 4. Create a Key with the Tag + +Navigate to **Virtual Keys** in the left sidebar. Click **+ Create New Key**. + +![Virtual Keys page showing existing keys — click + Create New Key](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/4c1f9448-e590-4546-9357-6f68aa395b27/ascreenshot_4a7bc5be9e4347f3a9fe46f78d938d7c_text_export.jpeg) + +Enter a key name and select a model. Then expand **Optional Settings** and scroll down to the **Tags** field. + +![Create New Key modal — enter the key name](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/f84f7a2b-8057-4926-9f80-d68e437c77cf/ascreenshot_a277c8611b6e41059663b0759cd85cab_text_export.jpeg) + +In the **Tags** field, type `health` and press Enter. This is the tag the policy engine will match against. + +![Tags field in key creation — type "health" to add the tag](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/3ad3bf10-76d2-4f15-9a66-ed6c99bb25c4/ascreenshot_8a8773fb65fc49329cb1716da92b2723_text_export.jpeg) + +The tag `health` now appears as a chip in the Tags field. Confirm your settings look correct. + +![Tags field showing "health" selected with a checkmark](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/de3e58a9-6013-4d0c-882e-5517ea286684/ascreenshot_c7eef1736fce4aa894ac3b118b3800a2_text_export.jpeg) + +Click **Create Key** at the bottom of the form. + +![Click Create Key to generate the new virtual key with the health tag](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/51d419ea-ee80-4e24-8e93-b99a844881bc/ascreenshot_097d4564289943a88e30b5d2e3eab262_text_export.jpeg) + +A dialog appears with your new virtual key. Click **Copy Virtual Key** — you'll need this to test in the next step. + +![Save your Key dialog — click Copy Virtual Key to copy it to clipboard](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/e87a0cc1-4d12-4066-bfa2-973159808fd1/ascreenshot_7b616a7291d0497a9c61bdcdb59394d7_text_export.jpeg) + +## 5. Test the Key and Validate the Policy is Applied + +Navigate to **Playground** in the left sidebar to test the key interactively. + +![Navigate to Playground from the sidebar](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/e6f8a3ee-e9e8-4107-93d1-bfca734c5ce9/ascreenshot_539bde38abe646e49148a912fff2d257_text_export.jpeg) + +Under **Virtual Key Source**, select "Virtual Key" and paste the key you just copied into the input field. + +![Paste the virtual key into the Playground configuration](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/a6612c4a-d499-4e54-8019-f54fde674ad9/ascreenshot_e85ebb9051554594bab0da57823fafad_text_export.jpeg) + +Select a model from the **Select Model** dropdown. + +![Select a model (e.g., bedrock-claude-opus-4.5) from the dropdown](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/325e330f-3eff-4c5e-b177-21916138a2f5/ascreenshot_693478f89c034e949e08f3ed0dd05120_text_export.jpeg) + +Type a message and press Enter. If a guardrail blocks the request, you'll see it in the response. In this example, the `testing-pl` guardrail detected an email pattern and returned a 403 error — confirming the policy is working. + +![Guardrail in action — the request was blocked with "Content blocked: email pattern detected"](https://colony-recorder.s3.amazonaws.com/files/2026-02-11/2cf16809-d2e5-4eae-a7dd-6a16dfcca7ce/ascreenshot_727d7d4ed20b4a52b2b41e39fd36eccb_text_export.jpeg) + +**Using curl:** + +You can also verify via the command line. The response headers confirm which policies and guardrails were applied: + +```bash +curl -v http://localhost:4000/chat/completions \ + -H "Authorization: Bearer " \ + -H "Content-Type: application/json" \ + -d '{ + "model": "gpt-4o", + "messages": [{"role": "user", "content": "say hi"}] + }' +``` + +Check the response headers: + +``` +x-litellm-applied-policies: high-risk-policy2 +x-litellm-applied-guardrails: pii-pre-guard,phi-pre-guard,testing-pl +x-litellm-policy-sources: high-risk-policy2=tag:health +``` + +| Header | What it tells you | +|--------|-------------------| +| `x-litellm-applied-policies` | Which policies matched this request | +| `x-litellm-applied-guardrails` | Which guardrails actually ran | +| `x-litellm-policy-sources` | **Why** each policy matched — `tag:health` confirms it was the tag | diff --git a/docs/my-website/docs/proxy/guardrails/policy_templates.md b/docs/my-website/docs/proxy/guardrails/policy_templates.md new file mode 100644 index 00000000000..f0c93ca44c7 --- /dev/null +++ b/docs/my-website/docs/proxy/guardrails/policy_templates.md @@ -0,0 +1,296 @@ +# Policy Templates + +Policy templates provide pre-configured guardrail policies that you can use as a starting point for your organization. Instead of manually creating policies and guardrails, you can select a template that matches your use case and deploy it with one click. + +## Using Policy Templates + +### In the UI + +1. Navigate to **Policies → Templates** tab in the LiteLLM Admin UI +2. Browse available templates (e.g., "PII Protection", "Cost Control", "HR Compliance") +3. Click **"Use Template"** on any template +4. Review the guardrails that will be created: + - Existing guardrails are marked with a green checkmark + - New guardrails can be selected/deselected +5. Click **"Create X Guardrails & Use Template"** +6. Review and customize the pre-filled policy form +7. Click **"Create Policy"** to save + +### Workflow + +``` +Select Template → Review Guardrails → Create Selected → Edit Policy → Save +``` + +The system automatically: +- ✅ Detects which guardrails already exist +- ✅ Creates only the missing guardrails you select +- ✅ Pre-fills the policy form with template data +- ✅ Lets you customize before saving + +## Available Templates + +Templates are fetched from [GitHub](https://raw.githubusercontent.com/BerriAI/litellm/main/policy_templates.json) with automatic fallback to local backup. + +### Current Templates + +#### 1. Advanced PII Protection (Australia) +- **Complexity:** High +- **Use Case:** Comprehensive PII detection for Australian organizations +- **Guardrails:** + - Australian tax identifiers (TFN, ABN, Medicare) + - Australian passports + - International PII (SSN, passports, national IDs) + - Contact information (email, phone, address) + - Financial data (credit cards, IBAN) + - API credentials (AWS, GitHub, Slack) - **BLOCKS** requests + - Network infrastructure (IP addresses) + - Protected class information (gender, race, religion, disability, etc.) + +#### 2. Baseline PII Protection +- **Complexity:** Low +- **Use Case:** Basic protection for internal tools and testing +- **Guardrails:** + - Australian tax identifiers + - API credentials + - Financial data + +## Creating Your Own Policy Templates + +You can contribute policy templates for the entire LiteLLM community to use. + +### Template Structure + +Templates are defined in JSON format with the following structure: + +```json +{ + "id": "unique-template-id", + "title": "Display Title", + "description": "Detailed description of what this template protects", + "icon": "ShieldCheckIcon", + "iconColor": "text-purple-500", + "iconBg": "bg-purple-50", + "guardrails": [ + "guardrail-name-1", + "guardrail-name-2" + ], + "complexity": "Low|Medium|High", + "guardrailDefinitions": [ + { + "guardrail_name": "example-guardrail", + "litellm_params": { + "guardrail": "litellm_content_filter", + "mode": "pre_call", + "patterns": [ + { + "pattern_type": "prebuilt", + "pattern_name": "email", + "action": "MASK" + } + ], + "pattern_redaction_format": "[{pattern_name}_REDACTED]" + }, + "guardrail_info": { + "description": "What this guardrail does" + } + } + ], + "templateData": { + "policy_name": "policy-name", + "description": "Policy description", + "guardrails_add": ["guardrail-name-1", "guardrail-name-2"], + "guardrails_remove": [] + } +} +``` + +### Field Descriptions + +#### Display Fields +- **id**: Unique identifier (lowercase with hyphens) +- **title**: User-facing name shown in UI +- **description**: Detailed explanation of what the template protects +- **icon**: Icon name (must be available in UI icon map) +- **iconColor**: Tailwind CSS text color class +- **iconBg**: Tailwind CSS background color class +- **guardrails**: Array of guardrail names (for display only) +- **complexity**: Badge showing difficulty ("Low", "Medium", or "High") + +#### Guardrail Definitions +- **guardrailDefinitions**: Array of complete guardrail configurations + - Each must be a valid guardrail object that can be sent to `/guardrails` POST endpoint + - If a guardrail already exists, it will be skipped + - Can be empty `[]` if template uses only existing guardrails + +#### Policy Configuration +- **templateData**: Object that pre-fills the policy form + - **policy_name**: Suggested name (user can edit) + - **description**: Policy description + - **guardrails_add**: Array of guardrail names to include + - **guardrails_remove**: Array to remove (usually `[]` for templates) + - **inherit**: (Optional) Parent policy name for inheritance + +### Example Template + +Here's a complete example for a HIPAA compliance template: + +```json +{ + "id": "hipaa-compliance", + "title": "HIPAA Compliance Policy", + "description": "Healthcare compliance policy that masks PHI and enforces HIPAA regulations for healthcare applications.", + "icon": "ShieldCheckIcon", + "iconColor": "text-red-500", + "iconBg": "bg-red-50", + "guardrails": [ + "phi-detector", + "medical-record-blocker", + "patient-id-masker" + ], + "complexity": "High", + "guardrailDefinitions": [ + { + "guardrail_name": "phi-detector", + "litellm_params": { + "guardrail": "litellm_content_filter", + "mode": "pre_call", + "patterns": [ + { + "pattern_type": "prebuilt", + "pattern_name": "us_ssn", + "action": "MASK" + }, + { + "pattern_type": "prebuilt", + "pattern_name": "email", + "action": "MASK" + }, + { + "pattern_type": "prebuilt", + "pattern_name": "us_phone", + "action": "MASK" + } + ], + "pattern_redaction_format": "[PHI_REDACTED]" + }, + "guardrail_info": { + "description": "Detects and masks Protected Health Information (PHI)" + } + } + ], + "templateData": { + "policy_name": "hipaa-compliance-policy", + "description": "HIPAA compliance policy for healthcare applications", + "guardrails_add": [ + "phi-detector", + "medical-record-blocker", + "patient-id-masker" + ], + "guardrails_remove": [] + } +} +``` + +## Contributing Templates + +To contribute a policy template for everyone to use: + +### Step 1: Create Your Template JSON + +1. Create a JSON file following the structure above +2. Test it locally by adding it to your local `policy_templates.json` +3. Verify all guardrails work correctly +4. Ensure descriptions are clear and helpful + +### Step 2: Submit a Pull Request + +1. Fork the [LiteLLM repository](https://github.com/BerriAI/litellm) +2. Add your template to `policy_templates.json` at the root +3. Add your template to `litellm/policy_templates_backup.json` (keep both in sync) +4. Create a pull request with: + - Clear description of what the template protects + - Use case examples + - Any relevant compliance frameworks (HIPAA, GDPR, SOC 2, etc.) + +### Guidelines + +**DO:** +- ✅ Use clear, descriptive names +- ✅ Include comprehensive descriptions +- ✅ Test all guardrails thoroughly +- ✅ Document pattern sources (e.g., "Based on NIST guidelines") +- ✅ Group related guardrails logically +- ✅ Consider different complexity levels + +**DON'T:** +- ❌ Include credentials or secrets +- ❌ Use overly broad patterns that may have false positives +- ❌ Duplicate existing templates +- ❌ Use custom code without thorough testing + +## Using Templates Offline + +For air-gapped or offline deployments, set the environment variable: + +```bash +export LITELLM_LOCAL_POLICY_TEMPLATES=true +``` + +This forces the system to use the local backup (`litellm/policy_templates_backup.json`) instead of fetching from GitHub. + +## Template Sources + +- **GitHub (default):** https://raw.githubusercontent.com/BerriAI/litellm/main/policy_templates.json +- **Local backup:** `litellm/policy_templates_backup.json` + +Templates are automatically fetched from GitHub on each request, with fallback to local backup on any failure. + +## Available Pattern Types + +When creating guardrails for templates, you can use these prebuilt patterns: + +### Identity Documents +- `passport_australia`, `passport_us`, `passport_uk`, `passport_germany`, etc. +- `us_ssn`, `us_ssn_no_dash` +- `au_tfn`, `au_abn`, `au_medicare` +- `nl_bsn_contextual` +- `br_cpf`, `br_rg`, `br_cnpj` + +### Financial +- `visa`, `mastercard`, `amex`, `discover`, `credit_card` +- `iban` + +### Contact Information +- `email` +- `us_phone`, `br_phone_landline`, `br_phone_mobile` +- `street_address` +- `br_cep` (Brazilian postal code) + +### Credentials +- `aws_access_key`, `aws_secret_key` +- `github_token` +- `slack_token` +- `generic_api_key` + +### Network +- `ipv4`, `ipv6` + +### Protected Class +- `gender_sexual_orientation` +- `race_ethnicity_national_origin` +- `religion` +- `age_discrimination` +- `disability` +- `marital_family_status` +- `military_status` +- `public_assistance` + +See the [full patterns list](https://github.com/BerriAI/litellm/blob/main/litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/patterns.json) for all available patterns. + +## Related Docs + +- [Guardrail Policies](./guardrail_policies) +- [Policy Tags](./policy_tags) +- [Content Filter Patterns](../hooks/content_filter) +- [Custom Code Guardrails](../hooks/custom_code) diff --git a/docs/my-website/docs/proxy/guardrails/quick_start.md b/docs/my-website/docs/proxy/guardrails/quick_start.md index 4a8dc4e6fe4..ddb215fcb66 100644 --- a/docs/my-website/docs/proxy/guardrails/quick_start.md +++ b/docs/my-website/docs/proxy/guardrails/quick_start.md @@ -203,8 +203,12 @@ Your response headers will include `x-litellm-applied-guardrails` with the guard x-litellm-applied-guardrails: aporia-pre-guard ``` +### Guardrail Policies - +Need more control? Use [Guardrail Policies](./guardrail_policies.md) to: +- Group guardrails into reusable policies +- Enable/disable guardrails for specific teams, keys, or models +- Inherit from existing policies and override specific guardrails ## **Using Guardrails Client Side** @@ -401,14 +405,10 @@ curl --location 'http://0.0.0.0:4000/chat/completions' \ ## **Proxy Admin Controls** -### ✨ Monitoring Guardrails +### Monitoring Guardrails Monitor which guardrails were executed and whether they passed or failed. e.g. guardrail going rogue and failing requests we don't intend to fail -:::info - -✨ This is an Enterprise only feature [Get a free trial](https://www.litellm.ai/enterprise#trial) - ::: #### Setup diff --git a/docs/my-website/docs/proxy/guardrails/zscaler_ai_guard.md b/docs/my-website/docs/proxy/guardrails/zscaler_ai_guard.md index 94f31c3bfdf..2e626004238 100644 --- a/docs/my-website/docs/proxy/guardrails/zscaler_ai_guard.md +++ b/docs/my-website/docs/proxy/guardrails/zscaler_ai_guard.md @@ -100,7 +100,7 @@ In cases where encounter other errors when apply Zscaler AI Guard, return exampl } } ``` -## 6. Sending User Information to Zscaler AI Guard for Analysis (Optional) +## 6. Sending User Information to Zscaler AI Guard (Optional) If you need to send end-user information to Zscaler AI Guard for analysis, you can set the configuration in the environment variables to True and include the relevant information in custom_headers on Zscaler AI Guard. - To send user_api_key_alias: @@ -133,4 +133,30 @@ curl -i http://localhost:8165/v1/chat/completions \ "zguard_policy_id": } }' +``` + +## 8. Set Custom Zscaler AI Guard Policy on Litellm Team OR Key Metadata (Optional) +In addition to setting `zguard_policy_id` in a request or the configuration file, you can also set it in the metadata for LiteLLM Team or Key. The `zguard_policy_id` is determined using the following order of precedence: request, Key, Team, config file. This logic is illustrated below: +``` +user_api_key_metadata = metadata.get("user_api_key_metadata", {}) or {} +team_metadata = metadata.get("team_metadata", {}) or {} +policy_id = ( + metadata.get("zguard_policy_id") + if "zguard_policy_id" in metadata + else ( + user_api_key_metadata.get("zguard_policy_id") + if "zguard_policy_id" in user_api_key_metadata + else ( + team_metadata.get("zguard_policy_id") + if "zguard_policy_id" in team_metadata + else self.policy_id + ) + ) + ) +``` +You can leverage this feature to apply multiple policies configured on the Zscaler AI Guard (ZGuard) to traffic from different applications. (Note: It is recommended to map policies using either Team or Key metadata, but not a mix of both.) + +Example set in Team/Key Metadata, you can set From UI: +``` +{"zguard_policy_id": 100} ``` \ No newline at end of file diff --git a/docs/my-website/docs/proxy/keys_teams_router_settings.md b/docs/my-website/docs/proxy/keys_teams_router_settings.md new file mode 100644 index 00000000000..ec59e8f271b --- /dev/null +++ b/docs/my-website/docs/proxy/keys_teams_router_settings.md @@ -0,0 +1,150 @@ +import Image from '@theme/IdealImage'; + +# UI - Router Settings for Keys and Teams + +Configure router settings at the key and team level to achieve granular control over routing behavior, fallbacks, retries, and other router configurations. This enables you to customize routing behavior for specific keys or teams without affecting global settings. + +## Overview + +Router Settings for Keys and Teams allows you to configure router behavior at different levels of granularity. Previously, router settings could only be configured globally, applying the same routing strategy, fallbacks, timeouts, and retry policies to all requests across your entire proxy instance. + +With key-level and team-level router settings, you can now: + +- **Customize routing strategies** per key or team (e.g., use `least-busy` for high-priority keys, `latency-based-routing` for others) +- **Configure different fallback chains** for different keys or teams +- **Set key-specific or team-specific timeouts** and retry policies +- **Apply different reliability settings** (cooldowns, allowed failures) per key or team +- **Override global settings** when needed for specific use cases + + + +## Summary + +Router settings follow a **hierarchical resolution order**: **Keys > Teams > Global**. When a request is made: + +1. **Key-level settings** are checked first. If router settings are configured for the API key being used, those settings are applied. +2. **Team-level settings** are checked next. If the key belongs to a team and that team has router settings configured, those settings are used (unless key-level settings exist). +3. **Global settings** are used as the final fallback. If neither key nor team settings are found, the global router settings from your proxy configuration are applied. + +This hierarchical approach ensures that the most specific settings take precedence, allowing you to fine-tune routing behavior for individual keys or teams while maintaining sensible defaults at the global level. + +## How Router Settings Resolution Works + +Router settings are resolved in the following priority order: + +### Resolution Order: Key > Team > Global + +1. **Key-level router settings** (highest priority) + - Applied when router settings are configured directly on an API key + - Takes precedence over all other settings + - Useful for individual key customization + +2. **Team-level router settings** (medium priority) + - Applied when the API key belongs to a team with router settings configured + - Only used if no key-level settings exist + - Useful for applying consistent settings across multiple keys in a team + +3. **Global router settings** (lowest priority) + - Applied from your proxy configuration file or database + - Used as the default when no key or team settings are found + - Previously, this was the only option available + +## How to Configure Router Settings + +### Configuring Router Settings for Keys + +Follow these steps to configure router settings for an API key: + +1. Navigate to [http://localhost:4000/ui/?login=success](http://localhost:4000/ui/?login=success) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/61889da3-32de-4ebf-9cf3-7dc1db2fc993/ascreenshot_2492cf6d916a4ab98197cc8336e3a371_text_export.jpeg) + +2. Click "+ Create New Key" (or edit an existing key) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/61889da3-32de-4ebf-9cf3-7dc1db2fc993/ascreenshot_5a25380cf5044b4f93c146139d84403a_text_export.jpeg) + +3. Click "Optional Settings" + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/e5eb5858-1cc1-4273-90bd-19ad139feebd/ascreenshot_33888989cfb9445bb83660f702ba32e0_text_export.jpeg) + +4. Click "Router Settings" + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/d9eeca83-1f76-4fcf-bf61-d89edf3454d3/ascreenshot_825c7993f4b24949aee9b31d4a788d8a_text_export.jpeg) + +5. Configure your desired router settings. For example, click "Fallbacks" to configure fallback models: + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/30ff647f-0254-4410-8311-660eef7ec0c4/ascreenshot_16966c8a0160473eb03e0f2c3b5c3afa_text_export.jpeg) + +6. Click "Select a model to begin configuring fallbacks" and configure your fallback chain: + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/918f1b5b-c656-4864-98bd-d8c58924b6d9/ascreenshot_79ca6cd93be04033929f080e0c8d040a_text_export.jpeg) + +### Configuring Router Settings for Teams + +Follow these steps to configure router settings for a team: + +1. Navigate to [http://localhost:4000/ui/?login=success](http://localhost:4000/ui/?login=success) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/60a33a8c-2e48-4788-a1a2-e5bcffa98cca/ascreenshot_9e255ba48f914c72ae57db7d3c1c7cd5_text_export.jpeg) + +2. Click "Teams" + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/60a33a8c-2e48-4788-a1a2-e5bcffa98cca/ascreenshot_070934fa9c17453987f21f58117e673b_text_export.jpeg) + +3. Click "+ Create New Team" (or edit an existing team) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/6f964ce2-f458-4719-a070-1af444ad92f5/ascreenshot_10f427f3106a4032a65d1046668880bd_text_export.jpeg) + +4. Click "Router Settings" + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/a923c4ae-29f2-42b5-93ae-12f62d442691/ascreenshot_144520f2dd2f419dad79dffb1579ec04_text_export.jpeg) + +5. Configure your desired router settings. For example, click "Fallbacks" to configure fallback models: + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/b062ecfa-bf5b-4c99-93a1-84b8b56fdb4c/ascreenshot_ea9acbc4e75448709b64a22addfb4157_text_export.jpeg) + +6. Click "Select a model to begin configuring fallbacks" and configure your fallback chain: + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-24/67ca2655-4e82-4f93-be9a-7244ad22640f/ascreenshot_4fdbed826cd546d784e8738626be835d_text_export.jpeg) + +## Use Cases + +### Different Routing Strategies per Key + +Configure different routing strategies for different use cases: + +- **High-priority production keys**: Use `latency-based-routing` for optimal performance +- **Development keys**: Use `simple-shuffle` for simplicity +- **Cost-sensitive keys**: Use `cost-based-routing` to minimize expenses + +### Team-Level Consistency + +Apply consistent router settings across all keys in a team: + +- Set team-wide fallback chains for reliability +- Configure team-specific timeout policies +- Apply uniform retry policies across team members + +### Override Global Settings + +Override global settings for specific scenarios: + +- Production keys may need stricter timeout policies than development +- Certain teams may require different fallback models +- Individual keys may need custom retry policies for specific use cases + +### Gradual Rollout + +Test new router settings on specific keys or teams before applying globally: + +- Configure new routing strategies on a test key first +- Validate fallback chains on a small team before global rollout +- A/B test different timeout values across different keys + +## Related Features + +- [Router Settings Reference](./config_settings.md#router_settings---reference) - Complete reference of all router settings +- [Load Balancing](./load_balancing.md) - Learn about routing strategies and load balancing +- [Reliability](./reliability.md) - Configure fallbacks, retries, and error handling +- [Keys](./keys.md) - Manage API keys and their settings +- [Teams](./teams.md) - Organize keys into teams diff --git a/docs/my-website/docs/proxy/litellm_managed_files.md b/docs/my-website/docs/proxy/litellm_managed_files.md index 7aba173f35b..6272180bd40 100644 --- a/docs/my-website/docs/proxy/litellm_managed_files.md +++ b/docs/my-website/docs/proxy/litellm_managed_files.md @@ -11,7 +11,7 @@ import Image from '@theme/IdealImage'; This is a free LiteLLM Enterprise feature. -Available via the `litellm[proxy]` package or any `litellm` docker image. +Available via the `litellm` docker image. If you are using the pip package, you must install [`litellm-enterprise`](https://pypi.org/project/litellm-enterprise/). ::: diff --git a/docs/my-website/docs/proxy/load_balancing.md b/docs/my-website/docs/proxy/load_balancing.md index 42f6ef1aa51..186307d6498 100644 --- a/docs/my-website/docs/proxy/load_balancing.md +++ b/docs/my-website/docs/proxy/load_balancing.md @@ -69,6 +69,67 @@ router_settings: redis_port: 1992 ``` +## Enforce Model Rate Limits + +Strictly enforce RPM/TPM limits set on deployments. When limits are exceeded, requests are blocked **before** reaching the LLM provider with a `429 Too Many Requests` error. + +:::info +By default, `rpm` and `tpm` values are only used for **routing decisions** (picking deployments with capacity). With `enforce_model_rate_limits`, they become **hard limits**. +::: + +### Quick Start + +```yaml +model_list: + - model_name: gpt-4 + litellm_params: + model: openai/gpt-4 + api_key: os.environ/OPENAI_API_KEY + rpm: 60 # 60 requests per minute + tpm: 90000 # 90k tokens per minute + +router_settings: + optional_pre_call_checks: + - enforce_model_rate_limits # 👈 Enables strict enforcement +``` + +### How It Works + +| Limit Type | Enforcement | Accuracy | +|------------|-------------|----------| +| **RPM** | Hard limit - blocked at exact threshold | 100% accurate | +| **TPM** | Best-effort - may slightly exceed | Blocked when already over limit | + +**Why TPM is best-effort:** Token count is unknown until the LLM responds. TPM is checked before each request (blocks if already over), and tracked after (adds actual tokens used). + +### Error Response + +```json +{ + "error": { + "message": "Model rate limit exceeded. RPM limit=60, current usage=60", + "type": "rate_limit_error", + "code": 429 + } +} +``` + +Response includes `retry-after: 60` header. + +### Multi-Instance Deployment + +For multiple LiteLLM proxy instances, add Redis to share rate limit state: + +```yaml +router_settings: + optional_pre_call_checks: + - enforce_model_rate_limits + redis_host: redis.example.com + redis_port: 6379 + redis_password: your-password +``` + + :::info Detailed information about [routing strategies can be found here](../routing) ::: diff --git a/docs/my-website/docs/proxy/logging.md b/docs/my-website/docs/proxy/logging.md index 56fb420e6cf..1abb127dfda 100644 --- a/docs/my-website/docs/proxy/logging.md +++ b/docs/my-website/docs/proxy/logging.md @@ -1338,6 +1338,7 @@ litellm_settings: s3_aws_secret_access_key: os.environ/AWS_SECRET_ACCESS_KEY # AWS Secret Access Key for S3 s3_path: my-test-path # [OPTIONAL] set path in bucket you want to write logs to s3_endpoint_url: https://s3.amazonaws.com # [OPTIONAL] S3 endpoint URL, if you want to use Backblaze/cloudflare s3 buckets + s3_use_virtual_hosted_style: false # [OPTIONAL] use virtual-hosted-style URLs (bucket.endpoint/key) instead of path-style (endpoint/bucket/key). Useful for S3-compatible services like MinIO s3_strip_base64_files: false # [OPTIONAL] remove base64 files before storing in s3 ``` diff --git a/docs/my-website/docs/proxy/prod.md b/docs/my-website/docs/proxy/prod.md index a42d91a7d5f..994788a3ad9 100644 --- a/docs/my-website/docs/proxy/prod.md +++ b/docs/my-website/docs/proxy/prod.md @@ -250,11 +250,133 @@ The migrate deploy command: ### Read-only File System -If you see a `Permission denied` error, it means the LiteLLM pod is running with a read-only file system. +Running LiteLLM with `readOnlyRootFilesystem: true` is a Kubernetes security best practice that prevents container processes from writing to the root filesystem. LiteLLM fully supports this configuration. -To fix this, just set `LITELLM_MIGRATION_DIR="/path/to/writeable/directory"` in your environment. +#### Quick Fix for Permission Errors -LiteLLM will use this directory to write migration files. +If you see a `Permission denied` error, it means the LiteLLM pod is running with a read-only file system. LiteLLM needs writable directories for: +- **Database migrations**: Set `LITELLM_MIGRATION_DIR="/path/to/writable/directory"` +- **Admin UI**: Set `LITELLM_UI_PATH="/path/to/writable/directory"` +- **UI assets/logos**: Set `LITELLM_ASSETS_PATH="/path/to/writable/directory"` + +#### Complete Read-Only Filesystem Setup (Kubernetes) + +For production deployments with enhanced security, use this configuration: + +**Option 1: Using EmptyDir Volumes with InitContainer (Recommended)** + +This approach copies the pre-built UI from the Docker image to writable emptyDir volumes at pod startup. + +```yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: litellm-proxy +spec: + template: + spec: + initContainers: + - name: setup-ui + image: ghcr.io/berriai/litellm:main-stable + command: + - sh + - -c + - | + cp -r /var/lib/litellm/ui/* /app/var/litellm/ui/ && \ + cp -r /var/lib/litellm/assets/* /app/var/litellm/assets/ + volumeMounts: + - name: ui-volume + mountPath: /app/var/litellm/ui + - name: assets-volume + mountPath: /app/var/litellm/assets + + containers: + - name: litellm + image: ghcr.io/berriai/litellm:main-stable + env: + - name: LITELLM_NON_ROOT + value: "true" + - name: LITELLM_UI_PATH + value: "/app/var/litellm/ui" + - name: LITELLM_ASSETS_PATH + value: "/app/var/litellm/assets" + - name: LITELLM_MIGRATION_DIR + value: "/app/migrations" + - name: PRISMA_BINARY_CACHE_DIR + value: "/app/cache/prisma-python/binaries" + - name: XDG_CACHE_HOME + value: "/app/cache" + securityContext: + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 101 + capabilities: + drop: + - ALL + volumeMounts: + - name: config + mountPath: /app/config.yaml + subPath: config.yaml + readOnly: true + - name: ui-volume + mountPath: /app/var/litellm/ui + - name: assets-volume + mountPath: /app/var/litellm/assets + - name: cache + mountPath: /app/cache + - name: migrations + mountPath: /app/migrations + + volumes: + - name: config + configMap: + name: litellm-config + - name: ui-volume + emptyDir: + sizeLimit: 100Mi + - name: assets-volume + emptyDir: + sizeLimit: 10Mi + - name: cache + emptyDir: + sizeLimit: 500Mi + - name: migrations + emptyDir: + sizeLimit: 64Mi +``` + +**Option 2: Without UI (API-only deployment)** + +If you don't need the admin UI, you can run with minimal configuration: + +```yaml +env: + - name: LITELLM_NON_ROOT + value: "true" + - name: LITELLM_MIGRATION_DIR + value: "/app/migrations" +securityContext: + readOnlyRootFilesystem: true +``` + +The proxy will log a warning about the UI but API endpoints will work normally. + +#### Environment Variables for Read-Only Filesystems + +| Variable | Purpose | Default | +|----------|---------|---------| +| `LITELLM_UI_PATH` | Admin UI directory | `/var/lib/litellm/ui` (Docker) | +| `LITELLM_ASSETS_PATH` | UI assets/logos | `/var/lib/litellm/assets` (Docker) | +| `LITELLM_MIGRATION_DIR` | Database migrations | Package directory | +| `PRISMA_BINARY_CACHE_DIR` | Prisma binary cache | System default | +| `XDG_CACHE_HOME` | General cache directory | System default | + +#### Important Notes + +1. **Migrations**: Always set `LITELLM_MIGRATION_DIR` to a writable emptyDir path +2. **Prisma Cache**: Set `PRISMA_BINARY_CACHE_DIR` and `XDG_CACHE_HOME` to writable paths +3. **Server Root Path**: If using a custom `server_root_path`, you must pre-process UI files in your Dockerfile as the proxy cannot modify files at runtime with read-only filesystem +4. **Automatic Detection**: The UI is automatically detected as pre-restructured if it contains a `.litellm_ui_ready` marker file (created by the official Docker images) ## 10. Use a Separate Health Check App :::info diff --git a/docs/my-website/docs/proxy/prometheus.md b/docs/my-website/docs/proxy/prometheus.md index cd2b3b68f37..93a0675f097 100644 --- a/docs/my-website/docs/proxy/prometheus.md +++ b/docs/my-website/docs/proxy/prometheus.md @@ -121,8 +121,8 @@ Use this to track overall LiteLLM Proxy usage. | Metric Name | Description | |----------------------|--------------------------------------| -| `litellm_proxy_failed_requests_metric` | Total number of failed responses from proxy - the client did not get a success response from litellm proxy. Labels: `"end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "exception_status", "exception_class", "route"` | -| `litellm_proxy_total_requests_metric` | Total number of requests made to the proxy server - track number of client side requests. Labels: `"end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "status_code", "user_email", "route"` | +| `litellm_proxy_failed_requests_metric` | Total number of failed responses from proxy - the client did not get a success response from litellm proxy. Labels: `"end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "user_email", "exception_status", "exception_class", "route", "model_id"` | +| `litellm_proxy_total_requests_metric` | Total number of requests made to the proxy server - track number of client side requests. Labels: `"end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "status_code", "user_email", "route", "model_id"` | ### Callback Logging Metrics @@ -130,7 +130,12 @@ Monitor failures while shipping logs to downstream callbacks like `s3_v3` cold s | Metric Name | Description | |----------------------|--------------------------------------| -| `litellm_callback_logging_failures_metric` | Total number of failed attempts to emit logs to a configured callback. Labels: `"callback_name"`. Use this to alert on callback delivery issues such as repeated failures when writing to `s3_v3`. | +| `litellm_callback_logging_failures_metric` | Total number of failed attempts to emit logs to a configured callback. Labels: `"callback_name"`. Use this to alert on callback delivery issues such as repeated failures when writing to `s3_v3`, `langfuse`, or `langfuse_otel` and other otel providers | + +**Supported Callbacks:** +- `S3Logger` - S3 v2 cold storage failures +- `langfuse` - Langfuse logging failures +- `otel` - OpenTelemetry logging failures ## LLM Provider Metrics @@ -191,10 +196,10 @@ Use this for LLM API Error monitoring and tracking remaining rate limits and tok | Metric Name | Description | |----------------------|--------------------------------------| -| `litellm_request_total_latency_metric` | Total latency (seconds) for a request to LiteLLM Proxy Server - tracked for labels "end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "model" | +| `litellm_request_total_latency_metric` | Total latency (seconds) for a request to LiteLLM Proxy Server - tracked for labels "end_user", "hashed_api_key", "api_key_alias", "requested_model", "team", "team_alias", "user", "model", "model_id" | | `litellm_overhead_latency_metric` | Latency overhead (seconds) added by LiteLLM processing - tracked for labels "model_group", "api_provider", "api_base", "litellm_model_name", "hashed_api_key", "api_key_alias" | | `litellm_llm_api_latency_metric` | Latency (seconds) for just the LLM API call - tracked for labels "model", "hashed_api_key", "api_key_alias", "team", "team_alias", "requested_model", "end_user", "user" | -| `litellm_llm_api_time_to_first_token_metric` | Time to first token for LLM API call - tracked for labels `model`, `hashed_api_key`, `api_key_alias`, `team`, `team_alias` [Note: only emitted for streaming requests] | +| `litellm_llm_api_time_to_first_token_metric` | Time to first token for LLM API call - tracked for labels `model`, `hashed_api_key`, `api_key_alias`, `team`, `team_alias`, `requested_model`, `end_user`, `user`, `model_id` [Note: only emitted for streaming requests] | ## Tracking `end_user` on Prometheus diff --git a/docs/my-website/docs/proxy/prompt_management.md b/docs/my-website/docs/proxy/prompt_management.md index 0c7ff96f538..08307ba99ec 100644 --- a/docs/my-website/docs/proxy/prompt_management.md +++ b/docs/my-website/docs/proxy/prompt_management.md @@ -11,6 +11,7 @@ Run experiments or change the specific model (e.g. from gpt-4o to gpt4o-mini fin | Native LiteLLM GitOps (.prompt files) | [Get Started](native_litellm_prompt) | | Langfuse | [Get Started](https://langfuse.com/docs/prompts/get-started) | | Humanloop | [Get Started](../observability/humanloop) | +| Generic Prompt Management API | [Get Started](../adding_provider/generic_prompt_management_api) | ## Onboarding Prompts via config.yaml @@ -34,7 +35,7 @@ prompts: - prompt_id: "my_prompt_id" litellm_params: prompt_id: "my_prompt_id" - prompt_integration: "dotprompt" # or langfuse, bitbucket, gitlab, custom + prompt_integration: "dotprompt" # or langfuse, bitbucket, gitlab, generic_prompt_management, custom # integration-specific parameters below ``` @@ -46,6 +47,7 @@ The `prompt_integration` field determines where and how prompts are loaded: - **`langfuse`**: Fetch prompts from Langfuse prompt management - **`bitbucket`**: Load from BitBucket repository `.prompt` files (team-based access control) - **`gitlab`**: Load from GitLab repository `.prompt` files (team-based access control) +- **`generic_prompt_management`**: Integrate any prompt management system via a simple API endpoint (no PR required) - **`custom`**: Use your own custom prompt management implementation Each integration has its own configuration parameters and access control mechanisms. @@ -207,6 +209,57 @@ System: You are a helpful assistant. User: {{user_message}} ``` +
+ + + +```yaml +prompts: + - prompt_id: "simple_prompt" + litellm_params: + prompt_integration: "generic_prompt_management" + provider_specific_query_params: + project_name: litellm + slug: hello-world-prompt-2bac + api_base: http://localhost:8080 + api_key: os.environ/GENERIC_PROMPT_API_KEY + ignore_prompt_manager_model: true # optional + ignore_prompt_manager_optional_params: true # optional +``` + +**What you need to implement:** + +A GET endpoint at `/beta/litellm_prompt_management` that returns: + +```json +{ + "prompt_id": "simple_prompt", + "prompt_template": [ + { + "role": "system", + "content": "You are a helpful assistant." + }, + { + "role": "user", + "content": "Help me with {task}" + } + ], + "prompt_template_model": "gpt-4", + "prompt_template_optional_params": { + "temperature": 0.7, + "max_tokens": 500 + } +} +``` + +**Benefits:** +- No PR required - integrate any prompt management system +- Full control over your prompt storage and versioning +- Support for variable substitution with `{variable}` syntax +- Custom query parameters for filtering and access control + +**Learn more:** [Generic Prompt Management API Documentation](../adding_provider/generic_prompt_management_api) +
diff --git a/docs/my-website/docs/proxy/pyroscope_profiling.md b/docs/my-website/docs/proxy/pyroscope_profiling.md new file mode 100644 index 00000000000..fa3db3a8782 --- /dev/null +++ b/docs/my-website/docs/proxy/pyroscope_profiling.md @@ -0,0 +1,43 @@ +# Grafana Pyroscope CPU profiling + +LiteLLM proxy can send continuous CPU profiles to [Grafana Pyroscope](https://grafana.com/docs/pyroscope/latest/) when enabled via environment variables. This is optional and off by default. + +## Quick start + +1. **Install the optional dependency** (required only when enabling Pyroscope): + + ```bash + pip install pyroscope-io + ``` + + Or install the proxy extra: + + ```bash + pip install "litellm[proxy]" + ``` + +2. **Set environment variables** before starting the proxy: + + | Variable | Required | Description | + |----------|----------|-------------| + | `LITELLM_ENABLE_PYROSCOPE` | Yes (to enable) | Set to `true` to enable Pyroscope profiling. | + | `PYROSCOPE_APP_NAME` | Yes (when enabled) | Application name shown in the Pyroscope UI. | + | `PYROSCOPE_SERVER_ADDRESS` | Yes (when enabled) | Pyroscope server URL (e.g. `http://localhost:4040`). | + | `PYROSCOPE_SAMPLE_RATE` | No | Sample rate (integer). If unset, the pyroscope-io library default is used. | + +3. **Start the proxy**; profiling will begin automatically when the proxy starts. + + ```bash + export LITELLM_ENABLE_PYROSCOPE=true + export PYROSCOPE_APP_NAME=litellm-proxy + export PYROSCOPE_SERVER_ADDRESS=http://localhost:4040 + litellm --config config.yaml + ``` + +4. **View profiles** in the Pyroscope (or Grafana) UI and select your `PYROSCOPE_APP_NAME`. + +## Notes + +- **Optional dependency**: `pyroscope-io` is an optional dependency. If it is not installed and `LITELLM_ENABLE_PYROSCOPE=true`, the proxy will log a warning and continue without profiling. +- **Platform support**: The `pyroscope-io` package uses a native extension and is not available on all platforms (e.g. Windows is excluded by the package). +- **Other settings**: See [Configuration settings](/proxy/config_settings) for all proxy environment variables. diff --git a/docs/my-website/docs/proxy/release_cycle.md b/docs/my-website/docs/proxy/release_cycle.md index 10dd6d8b3c5..b3e056b0243 100644 --- a/docs/my-website/docs/proxy/release_cycle.md +++ b/docs/my-website/docs/proxy/release_cycle.md @@ -22,4 +22,10 @@ Stable releases come out every week (typically Sunday) - 'patch' bumps: extremely minor addition that doesn't affect any existing functionality or add any user-facing features. (e.g. a 'created_at' column in a database table) - 'minor' bumps: add a new feature or a new database table that is backward compatible. -- 'major' bumps: break backward compatibility. \ No newline at end of file +- 'major' bumps: break backward compatibility. + +### Enterprise Support + + +- Stable releases come out every week. Once a new one is available, we no longer provide support for an older one. +- If there is a MAJOR change (according to semvar conventions - e.g. 1.x.x -> 2.x.x), we can provide support for upto 90 days on the prior stable image. diff --git a/docs/my-website/docs/proxy/request_tags.md b/docs/my-website/docs/proxy/request_tags.md new file mode 100644 index 00000000000..c78c48229b4 --- /dev/null +++ b/docs/my-website/docs/proxy/request_tags.md @@ -0,0 +1,58 @@ +# Request Tags for Spend Tracking + +Add tags to model deployments to track spend by environment, AWS account, or any custom label. + +Tags appear in the `request_tags` field of LiteLLM spend logs. + +## Config Setup + +Set tags on model deployments in `config.yaml`: + +```yaml title="config.yaml" +model_list: + - model_name: gpt-4 + litellm_params: + model: azure/gpt-4-prod + api_key: os.environ/AZURE_PROD_API_KEY + api_base: https://prod.openai.azure.com/ + tags: ["AWS_IAM_PROD"] # 👈 Tag for production + + - model_name: gpt-4-dev + litellm_params: + model: azure/gpt-4-dev + api_key: os.environ/AZURE_DEV_API_KEY + api_base: https://dev.openai.azure.com/ + tags: ["AWS_IAM_DEV"] # 👈 Tag for development +``` + +## Make Request + +Requests just specify the model - tags are automatically applied: + +```bash +curl -X POST 'http://0.0.0.0:4000/chat/completions' \ + -H 'Authorization: Bearer sk-1234' \ + -H 'Content-Type: application/json' \ + -d '{ + "model": "gpt-4", + "messages": [{"role": "user", "content": "Hello"}] + }' +``` + +## Spend Logs + +The tag from the model config appears in `LiteLLM_SpendLogs`: + +```json +{ + "request_id": "chatcmpl-abc123", + "request_tags": ["AWS_IAM_PROD"], + "spend": 0.002, + "model": "gpt-4" +} +``` + +## Related + +- [Spend Tracking Overview](cost_tracking.md) +- [Tag Budgets](tag_budgets.md) - Set budget limits per tag diff --git a/docs/my-website/docs/proxy/sync_anthropic_beta_headers.md b/docs/my-website/docs/proxy/sync_anthropic_beta_headers.md new file mode 100644 index 00000000000..e1645082d97 --- /dev/null +++ b/docs/my-website/docs/proxy/sync_anthropic_beta_headers.md @@ -0,0 +1,128 @@ +# Auto Sync Anthropic Beta Headers + +Automatically keep your Anthropic beta headers configuration up to date without restarting your service. **This allows you to support new Anthropic beta features across all providers without restarting your service.** + +## Overview + +When Anthropic releases new beta features (e.g., new tool capabilities, extended context windows), you typically need to restart your LiteLLM service to get the latest beta header mappings for different providers (Anthropic, Bedrock, Vertex AI, Azure AI). + +With auto-sync, LiteLLM automatically pulls the latest configuration from GitHub's [`anthropic_beta_headers_config.json`](https://github.com/BerriAI/litellm/blob/main/litellm/anthropic_beta_headers_config.json) without requiring a restart. This means: + +- **Zero downtime** when new beta features are released +- **Always up-to-date** provider support mappings +- **Automatic updates** - set it once and forget it + +## Quick Start + +**Manual sync:** +```bash +curl -X POST "https://your-proxy-url/reload/anthropic_beta_headers" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" \ + -H "Content-Type: application/json" +``` + +**Automatic sync every 24 hours:** +```bash +curl -X POST "https://your-proxy-url/schedule/anthropic_beta_headers_reload?hours=24" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" \ + -H "Content-Type: application/json" +``` + +## API Endpoints + +| Endpoint | Method | Description | +|----------|--------|-------------| +| `/reload/anthropic_beta_headers` | POST | Manual sync | +| `/schedule/anthropic_beta_headers_reload?hours={hours}` | POST | Schedule periodic sync | +| `/schedule/anthropic_beta_headers_reload` | DELETE | Cancel scheduled sync | +| `/schedule/anthropic_beta_headers_reload/status` | GET | Check sync status | + +**Authentication:** Requires admin role or master key + +## Python Example + +```python +import requests + +def sync_anthropic_beta_headers(proxy_url, admin_token): + response = requests.post( + f"{proxy_url}/reload/anthropic_beta_headers", + headers={"Authorization": f"Bearer {admin_token}"} + ) + return response.json() + +# Usage +result = sync_anthropic_beta_headers("https://your-proxy-url", "your-admin-token") +print(result['message']) +``` + +## Configuration + +**Custom beta headers config URL:** +```bash +export LITELLM_ANTHROPIC_BETA_HEADERS_URL="https://raw.githubusercontent.com/BerriAI/litellm/main/litellm/anthropic_beta_headers_config.json" +``` + +**Use local beta headers config:** +```bash +export LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS=True +``` + +## Scheduling Automatic Reloads + +Schedule automatic reloads to ensure your proxy always has the latest beta header mappings: + +```bash +# Reload every 24 hours +curl -X POST "https://your-proxy-url/schedule/anthropic_beta_headers_reload?hours=24" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +**Check reload status:** +```bash +curl -X GET "https://your-proxy-url/schedule/anthropic_beta_headers_reload/status" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +**Response:** +```json +{ + "scheduled": true, + "interval_hours": 24, + "last_run": "2026-02-13T10:00:00", + "next_run": "2026-02-14T10:00:00" +} +``` + +**Cancel scheduled reload:** +```bash +curl -X DELETE "https://your-proxy-url/schedule/anthropic_beta_headers_reload" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +## Environment Variables + +| Variable | Description | Default | +|----------|-------------|---------| +| `LITELLM_ANTHROPIC_BETA_HEADERS_URL` | URL to fetch beta headers config from | GitHub main branch | +| `LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS` | Set to `True` to use local config only | `False` | + +## How It Works + +1. **Initial Load:** On startup, LiteLLM loads the beta headers configuration from the remote URL (or local file if configured) +2. **Caching:** The configuration is cached in memory to avoid repeated fetches on every request +3. **Scheduled Reload:** If configured, the proxy checks every 10 seconds whether it's time to reload based on your schedule +4. **Manual Reload:** You can trigger an immediate reload via the API endpoint +5. **Multi-Pod Support:** In multi-pod deployments, the reload configuration is stored in the database so all pods stay in sync + +## Benefits + +- **No Restarts Required:** Add support for new Anthropic beta features without downtime +- **Provider Compatibility:** Automatically get updated mappings for Bedrock, Vertex AI, Azure AI, etc. +- **Performance:** Configuration is cached and only reloaded when needed +- **Reliability:** Falls back to local configuration if remote fetch fails + +## Related + +- [Model Cost Map Sync](./sync_models_github.md) - Auto-sync model pricing data +- [Anthropic Beta Headers](../completion/anthropic.md#beta-features) - Using Anthropic beta features diff --git a/docs/my-website/docs/proxy/team_budgets.md b/docs/my-website/docs/proxy/team_budgets.md index 03d18797133..01b07f23a33 100644 --- a/docs/my-website/docs/proxy/team_budgets.md +++ b/docs/my-website/docs/proxy/team_budgets.md @@ -8,7 +8,6 @@ import TabItem from '@theme/TabItem'; # Pre-Requisites - You must set up a Postgres database (e.g. Supabase, Neon, etc.) -- To enable team member rate limits, set the environment variable `EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING=true` **before starting the proxy server**. Without this, team member rate limits will not be enforced. ## Default Budget for Auto-Generated JWT Teams diff --git a/docs/my-website/docs/proxy/ui/page_visibility.md b/docs/my-website/docs/proxy/ui/page_visibility.md new file mode 100644 index 00000000000..06b06f33219 --- /dev/null +++ b/docs/my-website/docs/proxy/ui/page_visibility.md @@ -0,0 +1,121 @@ +import Image from '@theme/IdealImage'; + +# Control Page Visibility for Internal Users + +Configure which navigation tabs and pages are visible to internal users (non-admin developers) in the LiteLLM UI. + +Use this feature to simplify the UI and control which pages your internal users/developers can see when signing in. + +## Overview + +By default, all pages accessible to internal users are visible in the navigation sidebar. The page visibility control allows admins to restrict which pages internal users can see, creating a more focused and streamlined experience. + + +## Configure Page Visibility + +### 1. Navigate to Settings + +Click the **Settings** icon in the sidebar. + +![Navigate to Settings](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/cbb6f272-ab18-4996-b57d-7ed4aad721ea/ascreenshot_ab80f3175b1a41b0bdabdd2cd3980573_text_export.jpeg) + +### 2. Go to Admin Settings + +Click **Admin Settings** from the settings menu. + +![Go to Admin Settings](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/e2b327bf-1cfd-4519-a9ce-8a6ecb2de53a/ascreenshot_23bb1577b3f84d22be78e0faa58dee3d_text_export.jpeg) + +### 3. Select UI Settings + +Click **UI Settings** to access the page visibility controls. + +![Select UI Settings](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/fff0366a-4944-457a-8f6a-e22018dde108/ascreenshot_0e268e8651654e75bb9fb40d2ed366a9_text_export.jpeg) + +### 4. Open Page Visibility Configuration + +Click **Configure Page Visibility** to expand the configuration panel. + +![Open Configuration](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/3a4761d6-145a-4afd-8abf-d92744b9ac9f/ascreenshot_23c16eb79c32481887b879d961f1f00a_text_export.jpeg) + +### 5. Select Pages to Make Visible + +Check the boxes for the pages you want internal users to see. Pages are organized by category for easy navigation. + +![Select Pages](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/b9c96b54-6c20-484f-8b0b-3a86decb5717/ascreenshot_3347ade01ebe4ea390bc7b57e53db43f_text_export.jpeg) + +**Available pages include:** +- Virtual Keys +- Playground +- Models + Endpoints +- Agents +- MCP Servers +- Search Tools +- Vector Stores +- Logs +- Teams +- Organizations +- Usage +- Budgets +- And more... + +### 6. Save Your Configuration + +Click **Save Page Visibility Settings** to apply the changes. + +![Save Settings](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/8a215378-44f5-4bb8-b984-06fa2aa03903/ascreenshot_44e7aeebe25a477ba92f73a3ed3df644_text_export.jpeg) + +### 7. Verify Changes + +Internal users will now only see the selected pages in their navigation sidebar. + +![Verify Changes](https://colony-recorder.s3.amazonaws.com/files/2026-01-28/493a7718-b276-40b9-970f-5814054932d9/ascreenshot_ad23b8691f824095ba60256f91ad24f8_text_export.jpeg) + +## Reset to Default + +To restore all pages to internal users: + +1. Open the Page Visibility configuration +2. Click **Reset to Default (All Pages)** +3. Click **Save Page Visibility Settings** + +This will clear the restriction and show all accessible pages to internal users. + +## API Configuration + +You can also configure page visibility programmatically using the API: + +### Get Current Settings + +```bash +curl -X GET 'http://localhost:4000/ui_settings/get' \ + -H 'Authorization: Bearer ' +``` + +### Update Page Visibility + +```bash +curl -X PATCH 'http://localhost:4000/ui_settings/update' \ + -H 'Authorization: Bearer ' \ + -H 'Content-Type: application/json' \ + -d '{ + "enabled_ui_pages_internal_users": [ + "api-keys", + "agents", + "mcp-servers", + "logs", + "teams" + ] + }' +``` + +### Clear Page Visibility Restrictions + +```bash +curl -X PATCH 'http://localhost:4000/ui_settings/update' \ + -H 'Authorization: Bearer ' \ + -H 'Content-Type: application/json' \ + -d '{ + "enabled_ui_pages_internal_users": null + }' +``` + diff --git a/docs/my-website/docs/proxy/ui_logs.md b/docs/my-website/docs/proxy/ui_logs.md index 61f328011c3..8cfe818ebfd 100644 --- a/docs/my-website/docs/proxy/ui_logs.md +++ b/docs/my-website/docs/proxy/ui_logs.md @@ -25,7 +25,10 @@ View Spend, Token Usage, Key, Team Name for Each Request to LiteLLM ## Tracking - Request / Response Content in Logs Page -If you want to view request and response content on LiteLLM Logs, you need to opt in with this setting +If you want to view request and response content on LiteLLM Logs, you can enable it in either place: + +- **From the UI (no restart):** Use [UI Spend Log Settings](./ui_spend_log_settings.md) — open Logs → Settings → enable "Store Prompts in Spend Logs" → Save. Takes effect immediately and overrides config. +- **From config:** Add this to your `proxy_config.yaml` (requires restart): ```yaml general_settings: @@ -34,6 +37,40 @@ general_settings: +## Tracing Tools + +View which tools were provided and called in your completion requests. + + + +**Example:** Make a completion request with tools: + +```bash +curl -X POST 'http://localhost:4000/chat/completions' \ + -H 'Authorization: Bearer sk-1234' \ + -H 'Content-Type: application/json' \ + -d '{ + "model": "gpt-4", + "messages": [{"role": "user", "content": "What is the weather?"}], + "tools": [ + { + "type": "function", + "function": { + "name": "get_weather", + "description": "Get the current weather", + "parameters": { + "type": "object", + "properties": { + "location": {"type": "string"} + } + } + } + } + ] + }' +``` + +Check the Logs page to see all tools provided and which ones were called. ## Stop storing Error Logs in DB @@ -57,7 +94,10 @@ general_settings: If you're storing spend logs, it might be a good idea to delete them regularly to keep the database fast. -LiteLLM lets you configure this in your `proxy_config.yaml`: +You can set the retention period in either place: + +- **From the UI (no restart):** [UI Spend Log Settings](./ui_spend_log_settings.md) — Logs → Settings → set Retention Period → Save. +- **From config:** Add the following to your `proxy_config.yaml` (requires restart): ```yaml general_settings: diff --git a/docs/my-website/docs/proxy/ui_spend_log_settings.md b/docs/my-website/docs/proxy/ui_spend_log_settings.md new file mode 100644 index 00000000000..5e04974e3a7 --- /dev/null +++ b/docs/my-website/docs/proxy/ui_spend_log_settings.md @@ -0,0 +1,92 @@ +import Image from '@theme/IdealImage'; + +# UI Spend Log Settings + +Configure spend log behavior directly from the Admin UI—no config file edits or proxy restart required. This is especially useful for cloud deployments where updating the config is difficult or requires a long release process. + +## Overview + +Previously, spend log options (such as storing request/response content and retention period) had to be set in `proxy_config.yaml` under `general_settings`. Changing them required editing the config and restarting the proxy, which was a pain point for users-especially in cloud environments—who don't have easy access to the config or whose deployment process makes config updates slow. + + + +**UI Spend Log Settings** lets you: + +- **Store prompts in spend logs** – Enable or disable storing request and response content in the spend logs table (only affects logs created after you change the setting) +- **Set retention period** – Configure how long spend logs are kept before automatic cleanup (e.g. `7d`, `30d`) +- **Apply changes immediately** – No proxy restart needed; settings take effect for new requests as soon as you save + +:::warning UI overrides config +Settings changed in the UI **override** the values in your config file. For example, if `store_prompts_in_spend_logs` is explicitly set to `false` in `general_settings`, turning it on in the UI will still enable storing prompts. Use the UI when you want runtime control without redeploying. +::: + +## Settings You Can Configure + +| Setting | Description | +| ------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Store Prompts in Spend Logs** | When enabled, request messages and response content are stored for **new** spend logs so you can view them in the Logs UI. Logs created before you enabled this will not have request/response content. When disabled, only metadata (e.g. tokens, cost, model) is stored for new logs. | +| **Retention Period** | Maximum time to keep spend logs before they are automatically deleted (e.g. `7d`, `30d`). Optional; if not set, logs are retained according to your config or default behavior. | + +The same options can be set in config via [general_settings](./config_settings.md#general_settings---reference) (`store_prompts_in_spend_logs`, `maximum_spend_logs_retention_period`). Values set in the UI take precedence. + +## How to Configure Spend Log Settings in the UI + +### 1. Open the Logs page + +Navigate to the Admin UI (e.g. `http://localhost:4000/ui` or your `PROXY_BASE_URL/ui`) and click **Logs**. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/815f4ab2-4b8c-4dfe-be39-689fd6e12167/ascreenshot_eaaeba1507b441408e0df8bf94bc70cc_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/815f4ab2-4b8c-4dfe-be39-689fd6e12167/ascreenshot_666628f5e62443688a58b7cee7d7559b_text_export.jpeg) + +### 2. Open Logs settings + +Click the **Settings** (gear) icon on the Logs page to open the spend log settings panel. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/303077bd-80a0-4f3b-9dc1-4abb90af117f/ascreenshot_63f5dc21a545489ea9266f3bd3dc8455_text_export.jpeg) + +### 3. Enable Store Prompts in Spend Logs (optional) + +Turn on **Store Prompts in Spend Logs** if you want request and response content to be stored for new requests and visible when you open those log entries. This only affects logs created after you enable it; existing logs will not gain request/response content. Leave it off if you only need metadata (tokens, cost, model, etc.). + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/a25d0051-4b34-4270-99d6-6e8ae0d2936a/ascreenshot_374605862aad42c89a98da7bad910f58_text_export.jpeg) + +### 4. Set the retention period (optional) + +Optionally set the **Retention Period** (e.g. `7d`, `30d`) to control how long spend logs are kept before automatic cleanup. Uses the same format as the config option `maximum_spend_logs_retention_period`. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/87086197-b082-4339-b798-37410f47d9ac/ascreenshot_564da14f492540ae8b0b782cfedceff9_text_export.jpeg) + +### 5. Save settings + +Click **Save Settings**. Changes take effect immediately for new requests; no proxy restart is required. Existing logs are not updated. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/8cfd82c1-0ff4-4561-a806-33a7998cf0fd/ascreenshot_673f6155b17f45ee9b80fabdfc42a4ee_text_export.jpeg) + +### 6. Verify: view request and response in a log + +After enabling **Store Prompts in Spend Logs**, make a new request through the proxy, then open that log entry (or any other log created after you enabled the setting). The log details view will include the request and response content. Logs that existed before you turned the setting on will not have this content. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/0fbec553-9a11-4f4f-8a1d-f969bb316c70/ascreenshot_62ecbcea97ea4a4abaa460d76e2cf924_text_export.jpeg) + +![](https://colony-recorder.s3.amazonaws.com/files/2026-01-31/30e7ea4d-2c03-4b96-88a9-eeee565eaf16/ascreenshot_c00ad6aa75b54b4988a1450647a76f6b_text_export.jpeg) + +## Use Cases + +### Cloud and managed deployments + +When the proxy runs in a managed or cloud environment, config may be in a separate repo, require a long release, or be controlled by another team. Using the UI lets you change spend log behavior (e.g. enable prompt storage for debugging or set retention) without going through that process. + +### Quick toggles for debugging + +Temporarily enable **Store Prompts in Spend Logs** to inspect request/response content on new requests when debugging, then turn it off again from the UI without editing config or restarting. Only logs created while the setting was on will contain the content. + +### Retention without redeploying + +Adjust how long spend logs are retained (e.g. shorten to reduce storage or extend for compliance) and have the new retention period and cleanup job take effect immediately. + +## Related Documentation + +- [Getting Started with UI Logs](./ui_logs.md) – Overview of what gets logged and config-based options +- [Config Settings](./config_settings.md) – `store_prompts_in_spend_logs`, `disable_spend_logs`, `maximum_spend_logs_retention_period` in `general_settings` +- [Spend Logs Deletion](./spend_logs_deletion.md) – How retention and cleanup work diff --git a/docs/my-website/docs/proxy/ui_team_soft_budget_alerts.md b/docs/my-website/docs/proxy/ui_team_soft_budget_alerts.md new file mode 100644 index 00000000000..17c42e57c9a --- /dev/null +++ b/docs/my-website/docs/proxy/ui_team_soft_budget_alerts.md @@ -0,0 +1,130 @@ +import Image from '@theme/IdealImage'; + +# Team Soft Budget Alerts + +Set a soft budget on a team and get email alerts when spending crosses the threshold — without blocking any requests. + +## Overview + +A **soft budget** is a spending threshold that triggers email notifications when exceeded, but **does not block requests**. This is different from a hard budget (`max_budget`), which rejects requests once the limit is reached. + + + +Team soft budget alerts let you: + +- **Get notified early** — receive email alerts when a team's spend crosses the soft budget threshold +- **Keep requests flowing** — unlike hard budgets, soft budgets never block API calls +- **Target specific recipients** — send alerts to specific email addresses (e.g. team leads, finance), not just the team members +- **Work without global alerting** — team soft budget alerts are sent via email independently of Slack or other global alerting configuration + +:::warning Email integration required +Team soft budget alerts are sent via email. You must have an active email integration (SendGrid, Resend, or SMTP) configured on your proxy for alerts to be delivered. See [Email Notifications](./email.md) for setup instructions. +::: + +:::info Automatically active +Team soft budget alerts are **automatically active** once you configure a soft budget and at least one alerting email on a team. No additional proxy configuration or restart is needed — alerts are checked on every request. +::: + +## How It Works + +On every API request made with a key belonging to a team, the proxy checks: + +1. Does the team have a `soft_budget` set? +2. Is the team's current `spend` >= the `soft_budget`? +3. Are there any emails configured in `soft_budget_alerting_emails`? + +If all three conditions are met, an email alert is sent to the configured recipients. Alerts are **deduplicated** so the same alert is only sent once within a 24-hour window. + +## How to Set Up Team Soft Budget Alerts + +### 1. Navigate to the Admin UI + +Go to the Admin UI (e.g. `http://localhost:4000/ui` or your `PROXY_BASE_URL/ui`). + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/f06d75ad-25ef-4ee8-90c3-9604f8e46a1c/ascreenshot_1a6defaed1494d6da0001459511ecfd5_text_export.jpeg) + +### 2. Go to Teams + +Click **Teams** in the sidebar. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/f06d75ad-25ef-4ee8-90c3-9604f8e46a1c/ascreenshot_2d258fa280f6463b966bf7a05bb102d5_text_export.jpeg) + +### 3. Select a team + +Click on the team you want to configure soft budget alerts for. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/490f09fb-6bf5-45a8-a384-676889f34c88/ascreenshot_15cceb22abe64df0bf7d7c742ecb5b2f_text_export.jpeg) + +### 4. Open team Settings + +Click the **Settings** tab to view the team's configuration. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/28dd1bc5-7d07-462f-b277-33f885bdc07e/ascreenshot_12f2b762b5d24686801d93ad5b067e06_text_export.jpeg) + +### 5. Edit Settings + +Click **Edit Settings** to modify the team's budget configuration. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/30a483ea-7e01-4fdc-ac5f-a5572388d138/ascreenshot_0915eadd9e754a798489853b82de3cb5_text_export.jpeg) + +### 6. Set the Soft Budget + +Click the **Soft Budget (USD)** field and enter your desired threshold. For example, enter `0.01` for testing or a higher value like `500` for production. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/8b306d80-4943-4ad0-a51a-94b5ebdd6680/ascreenshot_5bb6e65c6428473fac2607f6a7f4b98a_text_export.jpeg) + +### 7. Add alerting emails + +Click the **Soft Budget Alerting Emails** field and enter one or more comma-separated email addresses that should receive the alert. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/a97c6efa-cc93-45d7-979e-d2a533f423b9/ascreenshot_2d8223ce8e934aa1bfadfb2f78aee5fc_text_export.jpeg) + +### 8. Save Changes + +Click **Save Changes**. The soft budget alert is now active — no proxy restart required. + +![](https://colony-recorder.s3.amazonaws.com/files/2026-02-07/865ba6f1-3fc6-4c19-8e08-433561d6c3f7/ascreenshot_b2f0503ada3a479a83dc8b7d01c1f8da_text_export.jpeg) + +### 9. Verify: email alert received + +Once the team's spend crosses the soft budget, an email alert is sent to the configured recipients. Below is an example of the alert email: + + + +## Settings Reference + +| Setting | Description | +| ------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- | +| **Soft Budget (USD)** | The spending threshold that triggers an email alert. Requests are **not** blocked when this limit is exceeded. | +| **Soft Budget Alerting Emails** | Comma-separated email addresses that receive the alert when the soft budget is crossed. At least one email is required for alerts to be sent. | + +:::tip Soft Budget vs. Max Budget + +- **Soft Budget**: Advisory threshold — sends email alerts but does **not** block requests. +- **Max Budget**: Hard limit — blocks requests once the budget is exceeded. + +You can set both on the same team to get early warnings (soft) and a hard stop (max). +::: + +## API Configuration + +You can also configure team soft budgets via the API when creating or updating a team: + +```bash +curl -X POST 'http://localhost:4000/team/update' \ + --header 'Authorization: Bearer sk-1234' \ + --header 'Content-Type: application/json' \ + --data '{ + "team_id": "your-team-id", + "soft_budget": 500.00, + "metadata": { + "soft_budget_alerting_emails": ["lead@example.com", "finance@example.com"] + } + }' +``` + +## Related Documentation + +- [Email Notifications](./email.md) – Configure email integrations (Resend, SMTP) for LiteLLM Proxy +- [Alerting](./alerting.md) – Set up Slack and other alerting channels +- [Cost Tracking](./cost_tracking.md) – Track and manage spend across teams, keys, and users diff --git a/docs/my-website/docs/proxy/users.md b/docs/my-website/docs/proxy/users.md index a389f0bd443..8517db51a8f 100644 --- a/docs/my-website/docs/proxy/users.md +++ b/docs/my-website/docs/proxy/users.md @@ -68,13 +68,6 @@ You can: **Step-by step tutorial on setting, resetting budgets on Teams here (API or using Admin UI)** -> **Prerequisite:** -> To enable team member rate limits, you must set the environment variable `EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING=true` before starting the proxy server. Without this, team member rate limits will not be enforced. - -👉 [https://docs.litellm.ai/docs/proxy/team_budgets](https://docs.litellm.ai/docs/proxy/team_budgets) - -::: - #### **Add budgets to teams** ```shell @@ -822,12 +815,10 @@ Expected Response: } ``` -### [BETA] Multi-instance rate limiting +### Multi-instance rate limiting -Enable multi-instance rate limiting with the env var `EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING="True"` **Important Notes:** -- Setting `EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING="True"` is required for team member rate limits to function, not just for multi-instance scenarios. - **Rate limits do not apply to proxy admin users.** - When testing rate limits, use internal user roles (non-admin) to ensure limits are enforced as expected. diff --git a/docs/my-website/docs/proxy/virtual_keys.md b/docs/my-website/docs/proxy/virtual_keys.md index 38ff4ede280..c74aa75ff4a 100644 --- a/docs/my-website/docs/proxy/virtual_keys.md +++ b/docs/my-website/docs/proxy/virtual_keys.md @@ -549,11 +549,14 @@ curl 'http://localhost:4000/key/sk-1234/regenerate' \ "models": [ "gpt-4", "gpt-3.5-turbo" - ] + ], + "grace_period": "48h" }' ``` +**Grace period (optional)**: Set `grace_period` (e.g. `"24h"`, `"2d"`, `"1w"`) to keep the old key valid for a transitional period. Both old and new keys work until the grace period elapses, enabling seamless cutover without production downtime. Omitted or empty = immediate revoke. Can also be set via `LITELLM_KEY_ROTATION_GRACE_PERIOD` env var for scheduled rotations. + **Read More** - [Write rotated keys to secrets manager](https://docs.litellm.ai/docs/secret#aws-secret-manager) @@ -640,11 +643,13 @@ Set these environment variables when starting the proxy: |----------|-------------|---------| | `LITELLM_KEY_ROTATION_ENABLED` | Enable the rotation worker | `false` | | `LITELLM_KEY_ROTATION_CHECK_INTERVAL_SECONDS` | How often to scan for keys to rotate (in seconds) | `86400` (24 hours) | +| `LITELLM_KEY_ROTATION_GRACE_PERIOD` | Duration to keep old key valid after rotation (e.g. `24h`, `2d`) | `""` (immediate revoke) | **Example:** ```bash export LITELLM_KEY_ROTATION_ENABLED=true export LITELLM_KEY_ROTATION_CHECK_INTERVAL_SECONDS=3600 # Check every hour +export LITELLM_KEY_ROTATION_GRACE_PERIOD=48h # Keep old key valid for 48h during cutover litellm --config config.yaml ``` diff --git a/docs/my-website/docs/proxy_auth.md b/docs/my-website/docs/proxy_auth.md new file mode 100644 index 00000000000..91084b34a37 --- /dev/null +++ b/docs/my-website/docs/proxy_auth.md @@ -0,0 +1,333 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# SDK Proxy Authentication (OAuth2/JWT Auto-Refresh) + +Automatically obtain and refresh OAuth2/JWT tokens when using the LiteLLM Python SDK with a LiteLLM Proxy that requires JWT authentication. + +## Overview + +When your LiteLLM Proxy is protected by an OAuth2/OIDC provider (Azure AD, Keycloak, Okta, Auth0, etc.), your SDK clients need valid JWT tokens for every request. Instead of manually managing token lifecycle, `litellm.proxy_auth` handles this automatically: + +- Obtains tokens from your identity provider +- Caches tokens to avoid unnecessary requests +- Refreshes tokens before they expire (60-second buffer) +- Injects `Authorization: Bearer ` headers into every request + +## Quick Start + +### Azure AD + + + + +Uses the [DefaultAzureCredential](https://learn.microsoft.com/en-us/python/api/azure-identity/azure.identity.defaultazurecredential) chain (environment variables, managed identity, Azure CLI, etc.): + +```python +import litellm +from litellm.proxy_auth import AzureADCredential, ProxyAuthHandler + +# One-time setup +litellm.proxy_auth = ProxyAuthHandler( + credential=AzureADCredential(), # uses DefaultAzureCredential + scope="api://my-litellm-proxy/.default" +) +litellm.api_base = "https://my-proxy.example.com" + +# All requests now include Authorization headers automatically +response = litellm.completion( + model="gpt-4", + messages=[{"role": "user", "content": "Hello!"}] +) +``` + + + + +Use a specific Azure AD app registration: + +```python +import litellm +from azure.identity import ClientSecretCredential +from litellm.proxy_auth import AzureADCredential, ProxyAuthHandler + +azure_cred = ClientSecretCredential( + tenant_id="your-tenant-id", + client_id="your-client-id", + client_secret="your-client-secret" +) + +litellm.proxy_auth = ProxyAuthHandler( + credential=AzureADCredential(credential=azure_cred), + scope="api://my-litellm-proxy/.default" +) +litellm.api_base = "https://my-proxy.example.com" + +response = litellm.completion( + model="gpt-4", + messages=[{"role": "user", "content": "Hello!"}] +) +``` + + + + +**Required package:** `pip install azure-identity` + +### Generic OAuth2 (Okta, Auth0, Keycloak, etc.) + +Works with any OAuth2 provider that supports the `client_credentials` grant type: + +```python +import litellm +from litellm.proxy_auth import GenericOAuth2Credential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=GenericOAuth2Credential( + client_id="your-client-id", + client_secret="your-client-secret", + token_url="https://your-idp.example.com/oauth2/token" + ), + scope="litellm_proxy_api" +) +litellm.api_base = "https://my-proxy.example.com" + +response = litellm.completion( + model="gpt-4", + messages=[{"role": "user", "content": "Hello!"}] +) +``` + +### Custom Credential Provider + +Implement the `TokenCredential` protocol to use any authentication mechanism: + +```python +import time +import litellm +from litellm.proxy_auth import AccessToken, ProxyAuthHandler + +class MyCustomCredential: + """Any class with a get_token(scope) -> AccessToken method works.""" + + def get_token(self, scope: str) -> AccessToken: + # Your custom logic to obtain a token + token = my_auth_system.get_jwt(scope=scope) + return AccessToken( + token=token, + expires_on=int(time.time()) + 3600 + ) + +litellm.proxy_auth = ProxyAuthHandler( + credential=MyCustomCredential(), + scope="my-scope" +) +``` + +## Supported Endpoints + +Auth headers are automatically injected for: + +| Endpoint | Function | +|----------|----------| +| Chat Completions | `litellm.completion()` / `litellm.acompletion()` | +| Embeddings | `litellm.embedding()` / `litellm.aembedding()` | + +## How It Works + +``` +┌──────────┐ ┌──────────────────┐ ┌──────────────┐ ┌──────────────┐ +│ Your │ │ ProxyAuthHandler │ │ Identity │ │ LiteLLM │ +│ Code │────▶│ (token cache) │────▶│ Provider │ │ Proxy │ +│ │ │ │◀────│ (Azure AD, │ │ │ +│ │ │ │ │ Okta, etc) │ │ │ +│ │ └────────┬─────────┘ └──────────────┘ │ │ +│ │ │ Authorization: Bearer │ │ +│ │──────────────┼───────────────────────────────────▶│ │ +│ │◀─────────────┼────────────────────────────────────│ │ +└──────────┘ │ └──────────────┘ +``` + +1. You set `litellm.proxy_auth` once at startup +2. On each SDK call (`completion()`, `embedding()`), the handler checks its cached token +3. If the token is missing or expires within 60 seconds, it requests a new one from your identity provider +4. The `Authorization: Bearer ` header is injected into the request +5. If token retrieval fails, a warning is logged and the request proceeds without auth headers + +## API Reference + +### ProxyAuthHandler + +The main handler that manages the token lifecycle. + +```python +from litellm.proxy_auth import ProxyAuthHandler + +handler = ProxyAuthHandler( + credential=, # required - credential provider + scope="" # required - OAuth2 scope to request +) +``` + +| Parameter | Type | Required | Description | +|-----------|------|----------|-------------| +| `credential` | `TokenCredential` | Yes | A credential provider (AzureADCredential, GenericOAuth2Credential, or custom) | +| `scope` | `str` | Yes | The OAuth2 scope to request tokens for | + +**Methods:** + +| Method | Returns | Description | +|--------|---------|-------------| +| `get_token()` | `AccessToken` | Get a valid token, refreshing if needed | +| `get_auth_headers()` | `dict` | Get `{"Authorization": "Bearer "}` headers | + +### AzureADCredential + +Wraps any `azure-identity` credential with lazy initialization. + +```python +from litellm.proxy_auth import AzureADCredential + +# Uses DefaultAzureCredential (recommended) +cred = AzureADCredential() + +# Or wrap a specific azure-identity credential +from azure.identity import ManagedIdentityCredential +cred = AzureADCredential(credential=ManagedIdentityCredential()) +``` + +| Parameter | Type | Required | Description | +|-----------|------|----------|-------------| +| `credential` | Azure `TokenCredential` | No | An azure-identity credential. If `None`, uses `DefaultAzureCredential` | + +### GenericOAuth2Credential + +Standard OAuth2 client credentials flow for any provider. + +```python +from litellm.proxy_auth import GenericOAuth2Credential + +cred = GenericOAuth2Credential( + client_id="your-client-id", + client_secret="your-client-secret", + token_url="https://your-idp.com/oauth2/token" +) +``` + +| Parameter | Type | Required | Description | +|-----------|------|----------|-------------| +| `client_id` | `str` | Yes | OAuth2 client ID | +| `client_secret` | `str` | Yes | OAuth2 client secret | +| `token_url` | `str` | Yes | Token endpoint URL | + +### AccessToken + +Dataclass representing an OAuth2 access token. + +```python +from litellm.proxy_auth import AccessToken + +token = AccessToken( + token="eyJhbG...", # JWT string + expires_on=1234567890 # Unix timestamp +) +``` + +### TokenCredential Protocol + +Any class implementing this protocol can be used as a credential provider: + +```python +from litellm.proxy_auth import AccessToken + +class MyCredential: + def get_token(self, scope: str) -> AccessToken: + ... +``` + +## Provider-Specific Examples + +### Keycloak + +```python +from litellm.proxy_auth import GenericOAuth2Credential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=GenericOAuth2Credential( + client_id="litellm-client", + client_secret="your-keycloak-client-secret", + token_url="https://keycloak.example.com/realms/your-realm/protocol/openid-connect/token" + ), + scope="openid" +) +``` + +### Okta + +```python +from litellm.proxy_auth import GenericOAuth2Credential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=GenericOAuth2Credential( + client_id="your-okta-client-id", + client_secret="your-okta-client-secret", + token_url="https://your-org.okta.com/oauth2/default/v1/token" + ), + scope="litellm_api" +) +``` + +### Auth0 + +```python +from litellm.proxy_auth import GenericOAuth2Credential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=GenericOAuth2Credential( + client_id="your-auth0-client-id", + client_secret="your-auth0-client-secret", + token_url="https://your-tenant.auth0.com/oauth/token" + ), + scope="https://my-proxy.example.com/api" +) +``` + +### Azure AD with Managed Identity + +```python +from azure.identity import ManagedIdentityCredential +from litellm.proxy_auth import AzureADCredential, ProxyAuthHandler + +litellm.proxy_auth = ProxyAuthHandler( + credential=AzureADCredential( + credential=ManagedIdentityCredential() + ), + scope="api://my-litellm-proxy/.default" +) +``` + +## Combining with `use_litellm_proxy` + +You can use `proxy_auth` together with [`use_litellm_proxy`](./providers/litellm_proxy#send-all-sdk-requests-to-litellm-proxy) to route all SDK requests through an authenticated proxy: + +```python +import os +import litellm +from litellm.proxy_auth import AzureADCredential, ProxyAuthHandler + +# Route all requests through the proxy +os.environ["LITELLM_PROXY_API_BASE"] = "https://my-proxy.example.com" +litellm.use_litellm_proxy = True + +# Authenticate with OAuth2/JWT +litellm.proxy_auth = ProxyAuthHandler( + credential=AzureADCredential(), + scope="api://my-litellm-proxy/.default" +) + +# This request goes through the proxy with automatic JWT auth +response = litellm.completion( + model="vertex_ai/gemini-2.0-flash-001", + messages=[{"role": "user", "content": "Hello!"}] +) +``` diff --git a/docs/my-website/docs/rag_ingest.md b/docs/my-website/docs/rag_ingest.md index 1133b85f206..7adc2d70b5b 100644 --- a/docs/my-website/docs/rag_ingest.md +++ b/docs/my-website/docs/rag_ingest.md @@ -5,7 +5,7 @@ All-in-one document ingestion pipeline: **Upload → Chunk → Embed → Vector | Feature | Supported | |---------|-----------| | Logging | Yes | -| Supported Providers | `openai`, `bedrock`, `vertex_ai`, `gemini` | +| Supported Providers | `openai`, `bedrock`, `vertex_ai`, `gemini`, `s3_vectors` | :::tip After ingesting documents, use [/rag/query](./rag_query.md) to search and generate responses with your ingested content. @@ -75,6 +75,31 @@ curl -X POST "http://localhost:4000/v1/rag/ingest" \ }" ``` +### AWS S3 Vectors + +```bash showLineNumbers title="Ingest to S3 Vectors" +curl -X POST "http://localhost:4000/v1/rag/ingest" \ + -H "Authorization: Bearer sk-1234" \ + -H "Content-Type: application/json" \ + -d "{ + \"file\": { + \"filename\": \"document.txt\", + \"content\": \"$(base64 -i document.txt)\", + \"content_type\": \"text/plain\" + }, + \"ingest_options\": { + \"embedding\": { + \"model\": \"text-embedding-3-small\" + }, + \"vector_store\": { + \"custom_llm_provider\": \"s3_vectors\", + \"vector_bucket_name\": \"my-embeddings\", + \"aws_region_name\": \"us-west-2\" + } + } + }" +``` + ## Response ```json @@ -265,6 +290,57 @@ When `vector_store_id` is omitted, LiteLLM automatically creates: 4. Install: `pip install 'google-cloud-aiplatform>=1.60.0'` ::: +### vector_store (AWS S3 Vectors) + +| Parameter | Type | Default | Description | +|-----------|------|---------|-------------| +| `custom_llm_provider` | string | - | `"s3_vectors"` | +| `vector_bucket_name` | string | **required** | S3 vector bucket name | +| `index_name` | string | auto-create | Vector index name | +| `dimension` | integer | auto-detect | Vector dimension (auto-detected from embedding model) | +| `distance_metric` | string | `cosine` | Distance metric: `cosine` or `euclidean` | +| `non_filterable_metadata_keys` | array | `["source_text"]` | Metadata keys excluded from filtering | +| `aws_region_name` | string | `us-west-2` | AWS region | +| `aws_access_key_id` | string | env | AWS access key | +| `aws_secret_access_key` | string | env | AWS secret key | + +:::info S3 Vectors Auto-Creation +When `index_name` is omitted, LiteLLM automatically creates: +- S3 vector bucket (if it doesn't exist) +- Vector index with auto-detected dimensions from your embedding model + +**Dimension Auto-Detection**: The vector dimension is automatically detected by making a test embedding request to your specified model. No need to manually specify dimensions! + +**Supported Embedding Models**: Works with any LiteLLM-supported embedding model (OpenAI, Cohere, Bedrock, Azure, etc.) +::: + +**Example with auto-detection:** +```json +{ + "embedding": { + "model": "text-embedding-3-small" // Dimension auto-detected as 1536 + }, + "vector_store": { + "custom_llm_provider": "s3_vectors", + "vector_bucket_name": "my-embeddings" + } +} +``` + +**Example with custom embedding provider:** +```json +{ + "embedding": { + "model": "cohere/embed-english-v3.0" // Dimension auto-detected as 1024 + }, + "vector_store": { + "custom_llm_provider": "s3_vectors", + "vector_bucket_name": "my-embeddings", + "distance_metric": "cosine" + } +} +``` + ## Input Examples ### File (Base64) diff --git a/docs/my-website/docs/realtime.md b/docs/my-website/docs/realtime.md index 0b3c823f5db..b191c82c670 100644 --- a/docs/my-website/docs/realtime.md +++ b/docs/my-website/docs/realtime.md @@ -3,13 +3,15 @@ import TabItem from '@theme/TabItem'; # /realtime -Use this to loadbalance across Azure + OpenAI. +Use this to loadbalance across Azure + OpenAI + xAI and more. Supported Providers: - OpenAI - Azure +- xAI ([see full docs](/docs/providers/xai_realtime)) - Google AI Studio (Gemini) - Vertex AI +- Bedrock ## Proxy Usage @@ -45,6 +47,21 @@ model_list: api_key: os.environ/OPENAI_API_KEY ``` +
+ + +```yaml +model_list: + - model_name: grok-voice-agent + litellm_params: + model: xai/grok-4-1-fast-non-reasoning + api_key: os.environ/XAI_API_KEY + model_info: + mode: realtime +``` + +**[See full xAI Realtime documentation →](/docs/providers/xai_realtime)** +
diff --git a/docs/my-website/docs/rerank.md b/docs/my-website/docs/rerank.md index 90f685d2bbd..9c76883d7fd 100644 --- a/docs/my-website/docs/rerank.md +++ b/docs/my-website/docs/rerank.md @@ -8,15 +8,15 @@ LiteLLM Follows the [cohere api request / response for the rerank api](https://c ## Overview -| Feature | Supported | Notes | -|---------|-----------|-------| -| Cost Tracking | ✅ | Works with all supported models | -| Logging | ✅ | Works across all integrations | -| End-user Tracking | ✅ | | -| Fallbacks | ✅ | Works between supported models | -| Loadbalancing | ✅ | Works between supported models | -| Guardrails | ✅ | Applies to input query only (not documents) | -| Supported Providers | Cohere, Together AI, Azure AI, DeepInfra, Nvidia NIM, Infinity, Fireworks AI, Voyage AI | | +| Feature | Supported | Notes | +|---------|-----------------------------------------------------------------------------------------------------|-------| +| Cost Tracking | ✅ | Works with all supported models | +| Logging | ✅ | Works across all integrations | +| End-user Tracking | ✅ | | +| Fallbacks | ✅ | Works between supported models | +| Loadbalancing | ✅ | Works between supported models | +| Guardrails | ✅ | Applies to input query only (not documents) | +| Supported Providers | Cohere, Together AI, Azure AI, DeepInfra, Nvidia NIM, Infinity, Fireworks AI, Voyage AI, watsonx.ai | | ## **LiteLLM Python SDK Usage** ### Quick Start @@ -123,17 +123,18 @@ curl http://0.0.0.0:4000/rerank \ #### ⚡️See all supported models and providers at [models.litellm.ai](https://models.litellm.ai/) -| Provider | Link to Usage | -|-------------|--------------------| -| Cohere (v1 + v2 clients) | [Usage](#quick-start) | -| Together AI| [Usage](../docs/providers/togetherai) | -| Azure AI| [Usage](../docs/providers/azure_ai#rerank-endpoint) | -| Jina AI| [Usage](../docs/providers/jina_ai) | -| AWS Bedrock| [Usage](../docs/providers/bedrock#rerank-api) | -| HuggingFace| [Usage](../docs/providers/huggingface_rerank) | -| Infinity| [Usage](../docs/providers/infinity) | -| vLLM| [Usage](../docs/providers/vllm#rerank-endpoint) | -| DeepInfra| [Usage](../docs/providers/deepinfra#rerank-endpoint) | -| Vertex AI| [Usage](../docs/providers/vertex#rerank-api) | -| Fireworks AI| [Usage](../docs/providers/fireworks_ai#rerank-endpoint) | -| Voyage AI| [Usage](../docs/providers/voyage#rerank) | \ No newline at end of file +| Provider | Link to Usage | +|--------------------------|------------------------------------------------------| +| Cohere (v1 + v2 clients) | [Usage](#quick-start) | +| Together AI | [Usage](../docs/providers/togetherai) | +| Azure AI | [Usage](../docs/providers/azure_ai#rerank-endpoint) | +| Jina AI | [Usage](../docs/providers/jina_ai) | +| AWS Bedrock | [Usage](../docs/providers/bedrock#rerank-api) | +| HuggingFace | [Usage](../docs/providers/huggingface_rerank) | +| Infinity | [Usage](../docs/providers/infinity) | +| vLLM | [Usage](../docs/providers/vllm#rerank-endpoint) | +| DeepInfra | [Usage](../docs/providers/deepinfra#rerank-endpoint) | +| Vertex AI | [Usage](../docs/providers/vertex#rerank-api) | +| Fireworks AI | [Usage](../docs/providers/fireworks_ai#rerank-endpoint) | +| Voyage AI | [Usage](../docs/providers/voyage#rerank) | +| IBM watsonx.ai | [Usage](../docs/providers/watsonx/rerank) | \ No newline at end of file diff --git a/docs/my-website/docs/response_api.md b/docs/my-website/docs/response_api.md index 140dfd4faf8..65b7ad7773a 100644 --- a/docs/my-website/docs/response_api.md +++ b/docs/my-website/docs/response_api.md @@ -884,7 +884,12 @@ router = litellm.Router( }, }, ], - optional_pre_call_checks=["responses_api_deployment_check"], + # `responses_api_deployment_check` ensures Requests with `previous_response_id` + # are routed to the same deployment. `deployment_affinity` adds sticky sessions + # for requests without `previous_response_id` (useful for implicit caching). + optional_pre_call_checks=["responses_api_deployment_check", "deployment_affinity"], + # Optional (default is 3600 seconds / 1 hour) + deployment_affinity_ttl_seconds=3600, ) # Initial request @@ -911,7 +916,16 @@ follow_up = await router.aresponses( #### 1. Setup session continuity on proxy config.yaml -To enable session continuity for Responses API in your LiteLLM proxy, set `optional_pre_call_checks: ["responses_api_deployment_check"]` in your proxy config.yaml. +To enable session continuity for Responses API in your LiteLLM proxy, set `optional_pre_call_checks` in your proxy config.yaml. + +- `responses_api_deployment_check`: high priority routing when `previous_response_id` is provided +- `deployment_affinity`: sticky sessions based on user key (applies even without `previous_response_id`) + +Notes: +- User-key affinity is keyed on `metadata.user_api_key_hash` (the API key hash). The OpenAI `user` request parameter is an end-user identifier and is intentionally not used for deployment affinity. +- `user_api_key_hash` is already SHA-256, and is used as-is (no double hashing). +- Affinity is scoped by a stable model identifier (the model-map key, e.g. `model_map_information.model_map_key`) so model aliases map to the same stickiness bucket. +- The mapping TTL is controlled by `deployment_affinity_ttl_seconds` (configured on Router init / proxy startup). ```yaml showLineNumbers title="config.yaml with Session Continuity" model_list: @@ -929,7 +943,11 @@ model_list: api_base: https://endpoint2.openai.azure.com router_settings: - optional_pre_call_checks: ["responses_api_deployment_check"] + optional_pre_call_checks: + - responses_api_deployment_check + - deployment_affinity + # Optional (default is 3600 seconds / 1 hour) + deployment_affinity_ttl_seconds: 3600 ``` #### 2. Use the OpenAI Python SDK to make requests to LiteLLM Proxy @@ -1023,6 +1041,134 @@ curl http://localhost:4000/v1/responses \ +## Server-side compaction + +For long-running conversations, you can enable **server-side compaction** so that when the rendered context size crosses a threshold, the server automatically runs compaction in-stream and emits a compaction item—no separate `POST /v1/responses/compact` call is required. + +Supported on the OpenAI Responses API when using the `openai` or `azure` provider. Pass `context_management` with a compaction entry and `compact_threshold` (token count; minimum 1000). When the context crosses the threshold, the server compacts in-stream and continues. Chain turns with `previous_response_id` or by appending output items to your next input array. See [OpenAI Compaction guide](https://developers.openai.com/api/docs/guides/compaction) for details. + +For explicit control over when compaction runs, use the standalone compact endpoint (`POST /v1/responses/compact`) instead. + +### Python SDK + +```python showLineNumbers title="Server-side compaction with LiteLLM Python SDK" +import litellm + +# Non-streaming: enable compaction when context exceeds 200k tokens +response = litellm.responses( + model="openai/gpt-4o", + input="Your conversation input...", + context_management=[{"type": "compaction", "compact_threshold": 200000}], + max_output_tokens=1024, +) +print(response) + +# Streaming: same context_management, compaction runs in-stream if threshold is crossed +stream = litellm.responses( + model="openai/gpt-4o", + input="Your conversation input...", + context_management=[{"type": "compaction", "compact_threshold": 200000}], + stream=True, +) +for event in stream: + print(event) +``` + +### LiteLLM Proxy (AI Gateway) + +Use the OpenAI SDK with your proxy as `base_url`, or call the proxy with curl. The proxy forwards `context_management` to the provider. + +**OpenAI Python SDK (proxy as base_url):** + +```python showLineNumbers title="Server-side compaction via LiteLLM Proxy" +from openai import OpenAI + +client = OpenAI( + base_url="http://localhost:4000", # LiteLLM Proxy (AI Gateway) + api_key="your-proxy-api-key", +) + +response = client.responses.create( + model="openai/gpt-4o", + input="Your conversation input...", + context_management=[{"type": "compaction", "compact_threshold": 200000}], + max_output_tokens=1024, +) +print(response) +``` + +**curl (proxy):** + +```bash title="Server-side compaction via curl to LiteLLM Proxy" +curl -X POST "http://localhost:4000/v1/responses" \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer your-proxy-api-key" \ + -d '{ + "model": "openai/gpt-4o", + "input": "Your conversation input...", + "context_management": [{"type": "compaction", "compact_threshold": 200000}], + "max_output_tokens": 1024 + }' +``` + +## Shell tool + +The **Shell tool** lets the model run commands in a hosted container or local runtime (OpenAI Responses API). You pass `tools=[{"type": "shell", "environment": {...}}]`; the `environment` object configures the runtime (e.g. `type: "container_auto"` for auto-provisioned containers). See [OpenAI Shell tool guide](https://developers.openai.com/api/docs/guides/tools-shell) for full options. + +Supported when using the `openai` or `azure` provider with a model that supports the Shell tool. + +### Python SDK + +```python showLineNumbers title="Shell tool with LiteLLM Python SDK" +import litellm + +response = litellm.responses( + model="openai/gpt-5.2", + input="List files in /mnt/data and run python --version.", + tools=[{"type": "shell", "environment": {"type": "container_auto"}}], + tool_choice="auto", + max_output_tokens=1024, +) +``` + +### LiteLLM Proxy (AI Gateway) + +Use the OpenAI SDK with your proxy as `base_url`, or call the proxy with curl. The proxy forwards `tools` (including `type: "shell"`) to the provider. + +**OpenAI Python SDK (proxy as base_url):** + +```python showLineNumbers title="Shell tool via LiteLLM Proxy" +from openai import OpenAI + +client = OpenAI( + base_url="http://localhost:4000", + api_key="your-proxy-api-key", +) + +response = client.responses.create( + model="openai/gpt-5.2", + input="List files in /mnt/data.", + tools=[{"type": "shell", "environment": {"type": "container_auto"}}], + tool_choice="auto", + max_output_tokens=1024, +) +``` + +**curl:** + +```bash title="Shell tool via curl to LiteLLM Proxy" +curl -X POST "http://localhost:4000/v1/responses" \ + -H "Content-Type: application/json" \ + -H "Authorization: Bearer your-proxy-api-key" \ + -d '{ + "model": "openai/gpt-5.2", + "input": "List files in /mnt/data.", + "tools": [{"type": "shell", "environment": {"type": "container_auto"}}], + "tool_choice": "auto", + "max_output_tokens": 1024 + }' +``` + ## Session Management LiteLLM Proxy supports session management for all supported models. This allows you to store and fetch conversation history (state) in LiteLLM Proxy. @@ -1228,8 +1374,3 @@ Response: - - - - - diff --git a/docs/my-website/docs/routing.md b/docs/my-website/docs/routing.md index 47967775e1e..67e7f681147 100644 --- a/docs/my-website/docs/routing.md +++ b/docs/my-website/docs/routing.md @@ -830,6 +830,12 @@ asyncio.run(router_acompletion()) +## Traffic Mirroring / Silent Experiments + +Traffic mirroring allows you to "mimic" production traffic to a secondary (silent) model for evaluation purposes. The silent model's response is gathered in the background and does not affect the latency or result of the primary request. + +[**See detailed guide on A/B Testing - Traffic Mirroring here**](./traffic_mirroring.md) + ## Basic Reliability ### Deployment Ordering (Priority) @@ -1582,11 +1588,13 @@ Get a slack webhook url from https://api.slack.com/messaging/webhooks Initialize an `AlertingConfig` and pass it to `litellm.Router`. The following code will trigger an alert because `api_key=bad-key` which is invalid ```python -from litellm.router import AlertingConfig import litellm +from litellm.router import Router +from litellm.types.router import AlertingConfig import os +import asyncio -router = litellm.Router( +router = Router( model_list=[ { "model_name": "gpt-3.5-turbo", @@ -1597,17 +1605,28 @@ router = litellm.Router( } ], alerting_config= AlertingConfig( - alerting_threshold=10, # threshold for slow / hanging llm responses (in seconds). Defaults to 300 seconds - webhook_url= os.getenv("SLACK_WEBHOOK_URL") # webhook you want to send alerts to + alerting_threshold=10, + webhook_url= "https:/..." ), ) -try: - await router.acompletion( - model="gpt-3.5-turbo", - messages=[{"role": "user", "content": "Hey, how's it going?"}], - ) -except: - pass + +async def main(): + print(f"\n=== Configuration ===") + print(f"Slack logger exists: {router.slack_alerting_logger is not None}") + + try: + await router.acompletion( + model="gpt-3.5-turbo", + messages=[{"role": "user", "content": "Hey, how's it going?"}], + ) + except Exception as e: + print(f"\n=== Exception caught ===") + print(f"Waiting 10 seconds for alerts to be sent via periodic flush...") + await asyncio.sleep(10) + print(f"\n=== After waiting ===") + print(f"Alert should have been sent to Slack!") + +asyncio.run(main()) ``` ## Track cost for Azure Deployments diff --git a/docs/my-website/docs/search/index.md b/docs/my-website/docs/search/index.md index 551a495261a..8a71edead06 100644 --- a/docs/my-website/docs/search/index.md +++ b/docs/my-website/docs/search/index.md @@ -276,6 +276,7 @@ The response follows Perplexity's search format with the following structure: | Firecrawl | `FIRECRAWL_API_KEY` | `firecrawl` | | SearXNG | `SEARXNG_API_BASE` (required) | `searxng` | | Linkup | `LINKUP_API_KEY` | `linkup` | +| DuckDuckGo | `DUCKDUCKGO_API_BASE` | `duckduckgo` | See the individual provider documentation for detailed setup instructions and provider-specific parameters. diff --git a/docs/my-website/docs/traffic_mirroring.md b/docs/my-website/docs/traffic_mirroring.md new file mode 100644 index 00000000000..3bdcb0f1614 --- /dev/null +++ b/docs/my-website/docs/traffic_mirroring.md @@ -0,0 +1,83 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# A/B Testing - Traffic Mirroring + +Traffic mirroring allows you to "mimic" production traffic to a secondary (silent) model for evaluation purposes. The silent model's response is gathered in the background and does not affect the latency or result of the primary request. + +This is useful for: +- Testing a new model's performance on production prompts before switching. +- Comparing costs and latency between different providers. +- Debugging issues by mirroring traffic to a more verbose model. + +## Quick Start + +To enable traffic mirroring, add `silent_model` to the `litellm_params` of a deployment. + + + + +```python +from litellm import Router + +model_list = [ + { + "model_name": "gpt-3.5-turbo", + "litellm_params": { + "model": "azure/chatgpt-v-2", + "api_key": "...", + "silent_model": "gpt-4" # 👈 Mirror traffic to gpt-4 + }, + }, + { + "model_name": "gpt-4", + "litellm_params": { + "model": "openai/gpt-4", + "api_key": "..." + }, + } +] + +router = Router(model_list=model_list) + +# The request to "gpt-3.5-turbo" will trigger a background call to "gpt-4" +response = await router.acompletion( + model="gpt-3.5-turbo", + messages=[{"role": "user", "content": "How does traffic mirroring work?"}] +) +``` + + + + +Add `silent_model` to your `config.yaml`: + +```yaml +model_list: + - model_name: primary-model + litellm_params: + model: azure/gpt-35-turbo + api_key: os.environ/AZURE_API_KEY + silent_model: evaluation-model # 👈 Mirror traffic here + - model_name: evaluation-model + litellm_params: + model: openai/gpt-4o + api_key: os.environ/OPENAI_API_KEY +``` + + + + +## How it works +1. **Request Received**: A request is made to a model group (e.g. `primary-model`). +2. **Deployment Picked**: LiteLLM picks a deployment from the group. +3. **Primary Call**: LiteLLM makes the call to the primary deployment. +4. **Mirroring**: If `silent_model` is present, LiteLLM triggers a background call to that model. + - For **Sync** calls: Uses a shared thread pool. + - For **Async** calls: Uses `asyncio.create_task`. +5. **Isolation**: The background call uses a `deepcopy` of the original request parameters and sets `metadata["is_silent_experiment"] = True`. It also strips out logging IDs to prevent collisions in usage tracking. + +## Key Features +- **Latency Isolation**: The primary request returns as soon as it's ready. The background (silent) call does not block. +- **Unified Logging**: Background calls are processed via the Router, meaning they are automatically logged to your configured observability tools (Langfuse, S3, etc.). +- **Evaluation**: Use the `is_silent_experiment: True` flag in your logs to filter and compare results between the primary and mirrored calls. diff --git a/docs/my-website/docs/troubleshoot.md b/docs/my-website/docs/troubleshoot.md index f9ed47972eb..1539e1959f7 100644 --- a/docs/my-website/docs/troubleshoot.md +++ b/docs/my-website/docs/troubleshoot.md @@ -1,45 +1,43 @@ -# Troubleshooting & Support - -## Information to Provide When Seeking Help +# Issue Reporting When reporting issues, please include as much of the following as possible. It's okay if you can't provide everything—especially in production scenarios where the trigger might be unknown. Sharing most of this information will help us assist you more effectively. -### 1. LiteLLM Configuration File +## 1. LiteLLM Configuration File Your `config.yaml` file (redact sensitive info like API keys). Include number of workers if not in config. -### 2. Initialization Command +## 2. Initialization Command The command used to start LiteLLM (e.g., `litellm --config config.yaml --num_workers 8 --detailed_debug`). -### 3. LiteLLM Version +## 3. LiteLLM Version -- Current version -- Version when the issue first appeared (if different) +- Current version +- Version when the issue first appeared (if different) - If upgraded, the version changed from → to -### 4. Environment Variables +## 4. Environment Variables Non-sensitive environment variables not in your config (e.g., `NUM_WORKERS`, `LITELLM_LOG`, `LITELLM_MODE`). Do not include passwords or API keys. -### 5. Server Specifications +## 5. Server Specifications CPU cores, RAM, OS, number of instances/replicas, etc. -### 6. Database and Redis Usage +## 6. Database and Redis Usage - **Database:** Using database? (`DATABASE_URL` set), database type and version - **Redis:** Using Redis? Redis version, configuration type (Standalone/Cluster/Sentinel). -### 7. Endpoints +## 7. Endpoints The endpoint(s) you're using that are experiencing issues (e.g., `/chat/completions`, `/embeddings`). -### 8. Request Example +## 8. Request Example A realistic example of the request causing issues, including expected vs. actual response and any error messages. -### 9. Error Logs, Stack Traces, and Metrics +## 9. Error Logs, Stack Traces, and Metrics Full error logs, stack traces, and any images from service metrics (CPU, memory, request rates, etc.) that might help diagnose the issue. @@ -57,4 +55,3 @@ Our numbers 📞 +1 (770) 8783-106 / +1 (412) 618-6238 Our emails ✉️ ishaan@berri.ai / krrish@berri.ai [![Chat on WhatsApp](https://img.shields.io/static/v1?label=Chat%20on&message=WhatsApp&color=success&logo=WhatsApp&style=flat-square)](https://wa.link/huol9n) [![Chat on Discord](https://img.shields.io/static/v1?label=Chat%20on&message=Discord&color=blue&logo=Discord&style=flat-square)](https://discord.gg/wuPM9dRgDw) - diff --git a/docs/my-website/docs/troubleshoot/max_callbacks.md b/docs/my-website/docs/troubleshoot/max_callbacks.md new file mode 100644 index 00000000000..4b0f3e24b73 --- /dev/null +++ b/docs/my-website/docs/troubleshoot/max_callbacks.md @@ -0,0 +1,68 @@ +# MAX_CALLBACKS Limit + +## Error Message + +``` +Cannot add callback - would exceed MAX_CALLBACKS limit of 30. Current callbacks: 30 +``` + +## What This Means + +LiteLLM limits the number of callbacks that can be registered to prevent performance degradation. Each callback runs on every LLM request, so having too many callbacks can cause exponential CPU usage and slow down your proxy. + +The default limit is **30 callbacks**. + +## When You Might Hit This Limit + +- **Large enterprise deployments** with many teams, each having their own guardrails +- **Multiple logging integrations** combined with custom callbacks +- **Per-team callback configurations** that add up across your organization + +## How to Override + +Set the `LITELLM_MAX_CALLBACKS` environment variable to increase the limit: + +```bash +# Docker +docker run -e LITELLM_MAX_CALLBACKS=100 ... + +# Docker Compose +environment: + - LITELLM_MAX_CALLBACKS=100 + +# Kubernetes +env: + - name: LITELLM_MAX_CALLBACKS + value: "100" + +# Direct +export LITELLM_MAX_CALLBACKS=100 +litellm --config config.yaml +``` + +## Recommendations + +1. **Start conservative** - Only increase as much as you need. If you have 60 teams with guardrails, try `LITELLM_MAX_CALLBACKS=75` to leave headroom. + +2. **Monitor performance** - More callbacks means more processing per request. Watch your CPU usage and response latency after increasing the limit. + +3. **Consolidate where possible** - If multiple teams use identical guardrails, consider using shared callback configurations rather than per-team duplicates. + +## Example: Large Enterprise Setup + +For an organization with 60+ teams, each with a guardrail callback: + +```yaml +# config.yaml +litellm_settings: + callbacks: ["prometheus", "langfuse"] # 2 global callbacks + +# Each team adds 1 guardrail callback = 60+ callbacks +# Total: 62+ callbacks needed +``` + +Set the environment variable: + +```bash +export LITELLM_MAX_CALLBACKS=100 +``` diff --git a/docs/my-website/docs/troubleshoot/prisma_migrations.md b/docs/my-website/docs/troubleshoot/prisma_migrations.md new file mode 100644 index 00000000000..9d9cb585b2b --- /dev/null +++ b/docs/my-website/docs/troubleshoot/prisma_migrations.md @@ -0,0 +1,113 @@ +# Troubleshooting Prisma Migration Errors + +Common Prisma migration issues encountered when upgrading or downgrading LiteLLM proxy versions, and how to fix them. + +## How Prisma Migrations Work in LiteLLM + +- LiteLLM uses [Prisma](https://www.prisma.io/) to manage its PostgreSQL database schema. +- Migration history is tracked in the `_prisma_migrations` table in your database. +- When LiteLLM starts, it runs `prisma migrate deploy` to apply any new migrations. +- Upgrading LiteLLM applies all migrations added since your last applied version. + +## Common Errors + +### 1. `relation "X" does not exist` + +**Example error:** + +``` +ERROR: relation "LiteLLM_DeletedTeamTable" does not exist +Migration: 20260116142756_update_deleted_keys_teams_table_routing_settings +``` + +**Cause:** This typically happens after a version rollback. The `_prisma_migrations` table still records migrations from the newer version as "applied," but the underlying database tables were modified, dropped, or never fully created. + +**How to fix:** + +#### Step 1 — Delete the failed migration entry and restart + +Remove the problematic migration from the history so it can be re-applied: + +```sql +-- View recent migrations +SELECT migration_name, finished_at, rolled_back_at, logs +FROM "_prisma_migrations" +ORDER BY started_at DESC +LIMIT 10; + +-- Delete the failed migration entry +DELETE FROM "_prisma_migrations" +WHERE migration_name = ''; +``` + +After deleting the entry, restart LiteLLM — it will re-apply the migration on startup. + +#### Step 2 — If that doesn't work, use `prisma db push` + +If deleting the migration entry and restarting doesn't resolve the issue, sync the schema directly: + +```bash +DATABASE_URL="" prisma db push +``` + +This bypasses migration history and forces the database schema to match the Prisma schema. + +--- + +### 2. `New migrations cannot be applied before the error is recovered from` + +**Cause:** A previous migration failed (recorded with an error in `_prisma_migrations`), and Prisma refuses to apply any new migrations until the failure is resolved. + +**How to fix:** + +1. Find the failed migration: + +```sql +SELECT migration_name, finished_at, rolled_back_at, logs +FROM "_prisma_migrations" +WHERE finished_at IS NULL OR rolled_back_at IS NOT NULL +ORDER BY started_at DESC; +``` + +2. Delete the failed entry and restart LiteLLM: + +```sql +DELETE FROM "_prisma_migrations" +WHERE migration_name = ''; +``` + +3. If that doesn't work, use `prisma db push`: + +```bash +DATABASE_URL="" prisma db push +``` + +--- + +### 3. Migration state mismatch after version rollback + +**Cause:** You upgraded to version X (new migrations applied), rolled back to version Y, then upgraded again. The `_prisma_migrations` table has stale entries for migrations that were partially applied or correspond to a schema state that no longer exists. + +**Fix:** + +1. Inspect the migration table for problematic entries: + +```sql +SELECT migration_name, started_at, finished_at, rolled_back_at, logs +FROM "_prisma_migrations" +ORDER BY started_at DESC +LIMIT 20; +``` + +2. For each migration that shouldn't be there (i.e., from the version you rolled back from), delete the entry: + ```sql + DELETE FROM "_prisma_migrations" WHERE migration_name = ''; + ``` + +3. Restart LiteLLM to re-run migrations. + +4. If that doesn't work, use `prisma db push`: + +```bash +DATABASE_URL="" prisma db push +``` diff --git a/docs/my-website/docs/troubleshoot/spend_queue_warnings.md b/docs/my-website/docs/troubleshoot/spend_queue_warnings.md new file mode 100644 index 00000000000..4be8b18f5cd --- /dev/null +++ b/docs/my-website/docs/troubleshoot/spend_queue_warnings.md @@ -0,0 +1,46 @@ +# Spend Update Queue Full Warnings + +## Overview + +The "Spend update queue is full" warning occurs in high-volume LiteLLM proxy deployments when the internal spend tracking queue reaches capacity. This is a protective mechanism to prevent memory issues during traffic spikes. + +## Warning Message + +``` +WARNING:litellm.proxy.db.db_transaction_queue.spend_update_queue:Spend update queue is full. Aggregating entries to prevent memory issues. +``` + +## Root Cause + +The spend update queue has a default maximum size of 10,000 entries (`MAX_SIZE_IN_MEMORY_QUEUE=10000`). When this limit is reached: + +1. New spend tracking entries are aggregated instead of queued individually +2. This prevents memory exhaustion but may slightly delay spend updates +3. The warning indicates your deployment is processing requests faster than the database can handle spend updates + +## Solutions + +### 1. Increase Queue Size + +Set the `MAX_SIZE_IN_MEMORY_QUEUE` environment variable to a higher value: + +```bash +MAX_SIZE_IN_MEMORY_QUEUE=50000 +``` + +**Tradeoffs:** +Higher queue sizes store more items in memory - provision at least 8GB RAM for large queues +- Recommended for deployments with consistent high traffic + +### 2. Horizontal Scaling + +Deploy multiple proxy instances with load balancing. This distributes the spend tracking load across multiple queues, reducing the pressure on any single instance's spend update queue. + + + +## Related Configuration + +```yaml +# Environment variables +MAX_SIZE_IN_MEMORY_QUEUE: 10000 # Default queue size +``` diff --git a/docs/my-website/docs/troubleshoot/ui_issues.md b/docs/my-website/docs/troubleshoot/ui_issues.md new file mode 100644 index 00000000000..90912b1daeb --- /dev/null +++ b/docs/my-website/docs/troubleshoot/ui_issues.md @@ -0,0 +1,49 @@ +# UI Troubleshooting + +If you're experiencing issues with the LiteLLM Admin UI, please include the following information when reporting. + +## 1. Steps to Reproduce + +A clear, step-by-step description of how to trigger the issue (e.g., "Navigate to Settings → Team, click 'Create Team', fill in fields, click submit → error appears"). + +## 2. LiteLLM Version + +The current version of LiteLLM you're running. Check via `litellm --version` or the UI's settings page. + +## 3. Architecture & Deployment Setup + +Distributed environments are a known source of UI issues. Please describe: + +- **Number of LiteLLM instances/replicas** and how they are deployed (e.g., Kubernetes, Docker Compose, ECS) +- **Load balancer** type and configuration (e.g., ALB, Nginx, Cloudflare Tunnel) — include whether sticky sessions are enabled +- **How the UI is accessed** — directly via LiteLLM, through a reverse proxy, or behind an ingress controller +- **Any CDN or caching layers** between the user and the LiteLLM server + +## 4. Network Tab Requests + +Open your browser's Developer Tools (F12 → Network tab), reproduce the issue, and share: + +- The **failing request(s)** — URL, method, status code, and response body +- **Screenshots or HAR export** of the relevant network activity +- Any **CORS or mixed-content errors** shown in the Console tab + +## 5. Environment Variables + +Non-sensitive environment variables related to the UI and proxy setup, such as: + +- `LITELLM_MASTER_KEY` +- `PROXY_BASE_URL` / `LITELLM_PROXY_BASE_URL` +- `UI_BASE_PATH` +- Any SSO-related variables (e.g., `GOOGLE_CLIENT_ID`, `MICROSOFT_TENANT`) + +Do **not** include passwords, secrets, or API keys. + +## 6. Browser & Access Details + +- **Browser** and version (e.g., Chrome 120, Firefox 121) +- **Access URL** used to reach the UI (redact sensitive parts) +- Whether the issue occurs for **all users or specific roles** (Admin, Internal User, etc.) + +## 7. Screenshots or Screen Recordings + +A screenshot or short screen recording of the issue is extremely helpful. Include any visible error messages, toasts, or unexpected behavior. diff --git a/docs/my-website/docs/tutorials/claude_agent_sdk.md b/docs/my-website/docs/tutorials/claude_agent_sdk.md new file mode 100644 index 00000000000..c56784ba2df --- /dev/null +++ b/docs/my-website/docs/tutorials/claude_agent_sdk.md @@ -0,0 +1,115 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# Claude Agent SDK with LiteLLM + +Use Anthropic's Claude Agent SDK with any LLM provider through LiteLLM Proxy. + +The Claude Agent SDK provides a high-level interface for building AI agents. By pointing it to LiteLLM, you can use the same agent code with OpenAI, Bedrock, Azure, Vertex AI, or any other provider. + +## Quick Start + +### 1. Install Dependencies + +```bash +pip install claude-agent-sdk +``` + +### 2. Start LiteLLM Proxy + +```yaml title="config.yaml" showLineNumbers +model_list: + - model_name: bedrock-claude-sonnet-3.5 + litellm_params: + model: "bedrock/us.anthropic.claude-3-5-sonnet-20240620-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-sonnet-4 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-20250514-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-sonnet-4.5 + litellm_params: + model: "bedrock/us.anthropic.claude-sonnet-4-5-20250929-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-claude-opus-4.5 + litellm_params: + model: "bedrock/us.anthropic.claude-opus-4-5-20251101-v1:0" + aws_region_name: "us-east-1" + + - model_name: bedrock-nova-premier + litellm_params: + model: "bedrock/amazon.nova-premier-v1:0" + aws_region_name: "us-east-1" +``` + +```bash +litellm --config config.yaml +``` + +### 3. Point Agent SDK to LiteLLM + +| Environment Variable | Value | Description | +|---------------------|-------|-------------| +| `ANTHROPIC_BASE_URL` | `http://localhost:4000` | LiteLLM proxy URL | +| `ANTHROPIC_API_KEY` | `sk-1234` | Your LiteLLM API key (not Anthropic key) | + +```python title="agent.py" showLineNumbers +import os +from claude_agent_sdk import ClaudeSDKClient, ClaudeAgentOptions + +# Point to LiteLLM proxy (not Anthropic) +os.environ["ANTHROPIC_BASE_URL"] = "http://localhost:4000" +os.environ["ANTHROPIC_API_KEY"] = "sk-1234" # Your LiteLLM key + +# Configure agent with any model from your config +options = ClaudeAgentOptions( + system_prompt="You are a helpful AI assistant.", + model="bedrock-claude-sonnet-4", # Use any model from config.yaml + max_turns=20, +) + +async with ClaudeSDKClient(options=options) as client: + await client.query("What is LiteLLM?") + + async for msg in client.receive_response(): + if hasattr(msg, 'content'): + for content_block in msg.content: + if hasattr(content_block, 'text'): + print(content_block.text, end='', flush=True) +``` + + + +## Why Use LiteLLM with Agent SDK? + +| Feature | Benefit | +|---------|---------| +| **Multi-Provider** | Use the same agent code with OpenAI, Bedrock, Azure, Vertex AI, etc. | +| **Cost Tracking** | Track spending across all agent conversations | +| **Rate Limiting** | Set budgets and limits on agent usage | +| **Load Balancing** | Distribute requests across multiple API keys or regions | +| **Fallbacks** | Automatically retry with different models if one fails | + +## Complete Example + +See our [cookbook example](https://github.com/BerriAI/litellm/tree/main/cookbook/anthropic_agent_sdk) for a complete interactive CLI agent that: +- Streams responses in real-time +- Switches between models dynamically +- Fetches available models from the proxy + +```bash +# Clone and run the example +git clone https://github.com/BerriAI/litellm.git +cd litellm/cookbook/anthropic_agent_sdk +pip install -r requirements.txt +python main.py +``` + +## Related Resources + +- [Claude Agent SDK Documentation](https://github.com/anthropics/anthropic-agent-sdk) +- [LiteLLM Proxy Quick Start](../proxy/quick_start) +- [Complete Cookbook Example](https://github.com/BerriAI/litellm/tree/main/cookbook/anthropic_agent_sdk) diff --git a/docs/my-website/docs/tutorials/claude_code_beta_headers.md b/docs/my-website/docs/tutorials/claude_code_beta_headers.md new file mode 100644 index 00000000000..fab90d15e88 --- /dev/null +++ b/docs/my-website/docs/tutorials/claude_code_beta_headers.md @@ -0,0 +1,279 @@ +import Image from '@theme/IdealImage'; + +# Claude Code - Managing Anthropic Beta Headers + +When using Claude Code with LiteLLM and non-Anthropic providers (Bedrock, Azure AI, Vertex AI), you need to ensure that only supported beta headers are sent to each provider. This guide explains how to add support for new beta headers or fix invalid beta header errors. + +## What Are Beta Headers? + +Anthropic uses beta headers to enable experimental features in Claude. When you use Claude Code, it may send beta headers like: + +``` +anthropic-beta: prompt-caching-scope-2026-01-05,advanced-tool-use-2025-11-20 +``` + +However, not all providers support all Anthropic beta features. LiteLLM uses `anthropic_beta_headers_config.json` to manage which beta headers are supported by each provider. + +## Common Error Message + +```bash +Error: The model returned the following errors: invalid beta flag +``` + +## How LiteLLM Handles Beta Headers + +LiteLLM uses a strict validation approach with a configuration file: + +``` +litellm/litellm/anthropic_beta_headers_config.json +``` + +This JSON file contains a **mapping** of beta headers for each provider: +- **Keys**: Input beta header names (from Anthropic) +- **Values**: Provider-specific header names (or `null` if unsupported) +- **Validation**: Only headers present in the mapping with non-null values are forwarded + +This enforces stricter validation than just filtering unsupported headers - headers must be explicitly defined to be allowed. + +## Adding Support for a New Beta Header + +When Anthropic releases a new beta feature, you need to add it to the configuration file for each provider. + +### Step 1: Locate the Config File + +Find the file in your LiteLLM installation: + +```bash +# If installed via pip +cd $(python -c "import litellm; import os; print(os.path.dirname(litellm.__file__))") + +# The config file is at: +# litellm/anthropic_beta_headers_config.json +``` + +### Step 2: Add the New Beta Header + +Open `anthropic_beta_headers_config.json` and add the new header to each provider's mapping: + +```json title="anthropic_beta_headers_config.json" +{ + "description": "Mapping of Anthropic beta headers for each provider. Keys are input header names, values are provider-specific header names (or null if unsupported). Only headers present in mapping keys with non-null values can be forwarded.", + "anthropic": { + "advanced-tool-use-2025-11-20": "advanced-tool-use-2025-11-20", + "new-feature-2026-03-01": "new-feature-2026-03-01", + ... + }, + "azure_ai": { + "advanced-tool-use-2025-11-20": "advanced-tool-use-2025-11-20", + "new-feature-2026-03-01": "new-feature-2026-03-01", + ... + }, + "bedrock_converse": { + "advanced-tool-use-2025-11-20": "tool-search-tool-2025-10-19", + "new-feature-2026-03-01": null, + ... + }, + "bedrock": { + "advanced-tool-use-2025-11-20": "tool-search-tool-2025-10-19", + "new-feature-2026-03-01": null, + ... + }, + "vertex_ai": { + "advanced-tool-use-2025-11-20": "tool-search-tool-2025-10-19", + "new-feature-2026-03-01": null, + ... + } +} +``` + +**Key Points:** +- **Supported headers**: Set the value to the provider-specific header name (often the same as the key) +- **Unsupported headers**: Set the value to `null` +- **Header transformations**: Some providers use different header names (e.g., Bedrock maps `advanced-tool-use-2025-11-20` to `tool-search-tool-2025-10-19`) +- **Alphabetical order**: Keep headers sorted alphabetically for maintainability + +### Step 3: Reload Configuration (No Restart Required!) + +**Option 1: Dynamic Reload Without Restart** + +Instead of restarting your application, you can dynamically reload the beta headers configuration using environment variables and API endpoints: + +```bash +# Set environment variable to fetch from remote URL (Do this if you want to point it to some other URL) +export LITELLM_ANTHROPIC_BETA_HEADERS_URL="https://raw.githubusercontent.com/BerriAI/litellm/main/litellm/anthropic_beta_headers_config.json" + +# Manually trigger reload via API (no restart needed!) +curl -X POST "https://your-proxy-url/reload/anthropic_beta_headers" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +**Option 2: Schedule Automatic Reloads** + +Set up automatic reloading to always stay up-to-date with the latest beta headers: + +```bash +# Reload configuration every 24 hours +curl -X POST "https://your-proxy-url/schedule/anthropic_beta_headers_reload?hours=24" \ + -H "Authorization: Bearer YOUR_ADMIN_TOKEN" +``` + +**Option 3: Traditional Restart** + +If you prefer the traditional approach, restart your LiteLLM proxy or application: + +```bash +# If using LiteLLM proxy +litellm --config config.yaml + +# If using Python SDK +# Just restart your Python application +``` + +:::tip Zero-Downtime Updates +With dynamic reloading, you can fix invalid beta header errors **without restarting your service**! This is especially useful in production environments where downtime is costly. + +See [Auto Sync Anthropic Beta Headers](../proxy/sync_anthropic_beta_headers.md) for complete documentation. +::: + +## Fixing Invalid Beta Header Errors + +If you encounter an "invalid beta flag" error, it means a beta header is being sent that the provider doesn't support. + +### Step 1: Identify the Problematic Header + +Check your logs to see which header is causing the issue: + +```bash +Error: The model returned the following errors: invalid beta flag: new-feature-2026-03-01 +``` + +### Step 2: Update the Config + +Set the header value to `null` for that provider: + +```json title="anthropic_beta_headers_config.json" +{ + "bedrock_converse": { + "new-feature-2026-03-01": null + } +} +``` + +### Step 3: Restart and Test + +Restart your application and verify the header is now filtered out. + +## Contributing a Fix to LiteLLM + +Help the community by contributing your fix! + +### What to Include in Your PR + +1. **Update the config file**: Add the new beta header to `litellm/anthropic_beta_headers_config.json` +2. **Test your changes**: Verify the header is correctly filtered/mapped for each provider +3. **Documentation**: Include provider documentation links showing which headers are supported + +### Example PR Description + +```markdown +## Add support for new-feature-2026-03-01 beta header + +### Changes +- Added `new-feature-2026-03-01` to anthropic_beta_headers_config.json +- Set to `null` for bedrock_converse (unsupported) +- Set to header name for anthropic, azure_ai (supported) + +### Testing +Tested with: +- ✅ Anthropic: Header passed through correctly +- ✅ Azure AI: Header passed through correctly +- ✅ Bedrock Converse: Header filtered out (returns error without fix) + +### References +- Anthropic docs: [link] +- AWS Bedrock docs: [link] +``` + + +## How Beta Header Filtering Works + +When you make a request through LiteLLM: + +```mermaid +sequenceDiagram + participant CC as Claude Code + participant LP as LiteLLM + participant Config as Beta Headers Config + participant Provider as Provider (Bedrock/Azure/etc) + + CC->>LP: Request with beta headers + Note over CC,LP: anthropic-beta: header1,header2,header3 + + LP->>Config: Load header mapping for provider + Config-->>LP: Returns mapping (header→value or null) + + Note over LP: Validate & Transform:
1. Check if header exists in mapping
2. Filter out null values
3. Map to provider-specific names + + LP->>Provider: Request with filtered & mapped headers + Note over LP,Provider: anthropic-beta: mapped-header2
(header1, header3 filtered out) + + Provider-->>LP: Success response + LP-->>CC: Response +``` + +### Filtering Rules + +1. **Header must exist in mapping**: Unknown headers are filtered out +2. **Header must have non-null value**: Headers with `null` values are filtered out +3. **Header transformation**: Headers are mapped to provider-specific names (e.g., `advanced-tool-use-2025-11-20` → `tool-search-tool-2025-10-19` for Bedrock) + +### Example + +Request with headers: +``` +anthropic-beta: advanced-tool-use-2025-11-20,computer-use-2025-01-24,unknown-header +``` + +For Bedrock Converse: +- ✅ `computer-use-2025-01-24` → `computer-use-2025-01-24` (supported, passed through) +- ❌ `advanced-tool-use-2025-11-20` → filtered out (null value in config) +- ❌ `unknown-header` → filtered out (not in config) + +Result sent to Bedrock: +``` +anthropic-beta: computer-use-2025-01-24 +``` + +## Dynamic Configuration Management (No Restart Required!) + +### Environment Variables + +Control how LiteLLM loads the beta headers configuration: + +| Variable | Description | Default | +|----------|-------------|---------| +| `LITELLM_ANTHROPIC_BETA_HEADERS_URL` | URL to fetch config from | GitHub main branch | +| `LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS` | Set to `True` to use local config only | `False` | + +**Example: Use Custom Config URL** +```bash +export LITELLM_ANTHROPIC_BETA_HEADERS_URL="https://your-company.com/custom-beta-headers.json" +``` + +**Example: Use Local Config Only (No Remote Fetching)** +```bash +export LITELLM_LOCAL_ANTHROPIC_BETA_HEADERS=True +``` +## Provider-Specific Notes + +### Bedrock +- Beta headers appear in both HTTP headers AND request body (`additionalModelRequestFields.anthropic_beta`) +- Some headers are transformed (e.g., `advanced-tool-use` → `tool-search-tool`) + +### Azure AI +- Uses same header names as Anthropic +- Some features not yet supported (check config for null values) + +### Vertex AI +- Some headers are transformed to match Vertex AI's implementation +- Limited beta feature support compared to Anthropic \ No newline at end of file diff --git a/docs/my-website/docs/tutorials/claude_code_plugin_marketplace.md b/docs/my-website/docs/tutorials/claude_code_plugin_marketplace.md index 946fb47d92a..9d93c717c4f 100644 --- a/docs/my-website/docs/tutorials/claude_code_plugin_marketplace.md +++ b/docs/my-website/docs/tutorials/claude_code_plugin_marketplace.md @@ -2,7 +2,7 @@ import Image from '@theme/IdealImage'; import Tabs from '@theme/Tabs'; import TabItem from '@theme/TabItem'; -# Claude Code Plugin Marketplace +# Claude Code Plugin Marketplace (Managed Skills) LiteLLM AI Gateway acts as a central registry for Claude Code plugins. Admins can govern which plugins are available across the organization, and engineers can discover and install approved plugins from a single source. @@ -252,7 +252,7 @@ curl -X POST http://localhost:4000/claude-code/plugins \ }' ``` -### 3. Share with Your Team +### 3. Use in Claude Code Send engineers the marketplace URL: diff --git a/docs/my-website/docs/tutorials/claude_code_prompt_cache_routing.md b/docs/my-website/docs/tutorials/claude_code_prompt_cache_routing.md new file mode 100644 index 00000000000..bbb29489856 --- /dev/null +++ b/docs/my-website/docs/tutorials/claude_code_prompt_cache_routing.md @@ -0,0 +1,43 @@ +# Claude Code - Prompt Cache Routing + +Claude's [Prompt Caching](https://platform.claude.com/docs/en/build-with-claude/prompt-caching) feature helps to optimize API usage through attempting to cache prompts and re-use cached prompts during subsequent API calls. This feature is used by Claude Code. + +When LiteLLM [load balancing](../proxy/load_balancing.md) is enabled, to ensure this prompt caching feature still works with Claude Code, LiteLLM needs to be configured to use the `PromptCachingDeploymentCheck` pre-call check. This pre-call check will ensure that API calls that used prompt caching are remembered and that subsequent API calls that try to use that prompt caching are routed to the same model deployment where a cache write occurred. + +## Set Up + +1. Configure the router so that it uses the `PromptCachingDeploymentCheck` (via setting the `optional_pre_call_checks` property), and configure the models so that they can access multiple deployments of Claude; below, we show an example for multiple AWS accounts (referred to as `account-1` and `account-2`, using the `aws_profile_name` property): +```yaml +router_settings: + optional_pre_call_checks: ["prompt_caching"] + +model_list: +- litellm_params: + model: us.anthropic.claude-sonnet-4-5-20250929-v1:0 + aws_profile_name: account-1 + aws_region_name: us-west-2 + model_info: + litellm_provider: bedrock + model_name: us.anthropic.claude-sonnet-4-5-20250929-v1:0 +- litellm_params: + model: us.anthropic.claude-sonnet-4-5-20250929-v1:0 + aws_profile_name: account-2 + aws_region_name: us-west-2 + model_info: + litellm_provider: bedrock + model_name: us.anthropic.claude-sonnet-4-5-20250929-v1:0 +``` +2. Utilize Claude Code: + 1. Launch Claude Code, which will do a warm-up API call that tries to cache its warm-up prompt and its system prompt. + 2. Wait a few seconds, then quit Claude Code and re-open it. + 3. You'll notice that the warm-up API call successfully gets a cache hit (if using Claude Code in an IDE like VS Code, ensure that you don't do anything between step 2.1 and 2.2 here, otherwise there may not be a cache hit): + 1. Go to the [LiteLLM Request Logs page](../proxy/ui_logs.md) in the Admin UI + 2. Click on the individual requests to see (a) the cache creation and cache read tokens; and (b) the Model ID. In particular, the API call from step 2.1 should show a cache write, and the API call from step 2.2 should show a cache read; in addition, the Model ID should be equal (meaning the API call is getting forwarded to the same AWS account). + +## Related + +- [Claude Code - Quickstart](./claude_responses_api.md) +- [Claude Code - Customer Tracking](./claude_code_customer_tracking.md) +- [Claude Code - Plugin Marketplace](./claude_code_plugin_marketplace.md) +- [Claude Code - WebSearch](./claude_code_websearch.md) +- [Proxy - Load Balancing](../proxy/load_balancing.md) diff --git a/docs/my-website/docs/tutorials/claude_mcp.md b/docs/my-website/docs/tutorials/claude_mcp.md index 07c3cead0be..ab27908c8db 100644 --- a/docs/my-website/docs/tutorials/claude_mcp.md +++ b/docs/my-website/docs/tutorials/claude_mcp.md @@ -9,7 +9,7 @@ Note: LiteLLM supports OAuth for MCP servers as well. [Learn more](https://docs. ## Connecting MCP Servers -You can also connect MCP servers to Claude Code via LiteLLM Proxy. +You can connect MCP servers to Claude Code via LiteLLM Proxy. 1. Add the MCP server to your `config.yaml` @@ -23,6 +23,7 @@ In this example, we'll add the Github MCP server to our `config.yaml` mcp_servers: github_mcp: url: "https://api.githubcopilot.com/mcp" + transport: "http" auth_type: oauth2 client_id: os.environ/GITHUB_OAUTH_CLIENT_ID client_secret: os.environ/GITHUB_OAUTH_CLIENT_SECRET @@ -34,31 +35,70 @@ mcp_servers: In this example, we'll add the Atlassian MCP server to our `config.yaml` ```yaml title="config.yaml" showLineNumbers -atlassian_mcp: - server_id: atlassian_mcp_id - url: "https://mcp.atlassian.com/v1/sse" - transport: "sse" - auth_type: oauth2 +mcp_servers: + atlassian_mcp: + url: "https://mcp.atlassian.com/v1/mcp" + transport: "http" + auth_type: oauth2 ``` +:::important +The server name under `mcp_servers:` (e.g. `atlassian_mcp`, `github_mcp`) **must match** the name used in the Claude Code URL path (`/mcp/`). A mismatch will cause a 404 error during OAuth. +::: + 2. Start LiteLLM Proxy +Since Claude Code needs a publicly accessible URL for the OAuth callback, expose your proxy via ngrok or a similar tool. + ```bash litellm --config /path/to/config.yaml # RUNNING on http://0.0.0.0:4000 ``` -3. Use the MCP server in Claude Code - ```bash -claude mcp add --transport http litellm_proxy http://0.0.0.0:4000/github_mcp/mcp --header "Authorization: Bearer sk-LITELLM_VIRTUAL_KEY" +# In a separate terminal — expose proxy for OAuth callbacks +ngrok http 4000 ``` -For MCP servers that require dynamic client registration (such as Atlassian), please set `x-litellm-api-key: Bearer sk-LITELLM_VIRTUAL_KEY` instead of using `Authorization: Bearer LITELLM_VIRTUAL_KEY`. +3. Add the MCP server to Claude Code + + + + +```bash +claude mcp add --transport http litellm-github https://your-ngrok-url.ngrok-free.dev/mcp/github_mcp \ + --header "x-litellm-api-key: Bearer sk-1234" +``` + + + + +```bash +claude mcp add --transport http litellm-atlassian https://your-ngrok-url.ngrok-free.dev/mcp/atlassian_mcp \ + --header "x-litellm-api-key: Bearer sk-1234" +``` + + + + +**Parameter breakdown:** + +| Parameter | Description | +|-----------|-------------| +| `--transport http` | Use HTTP transport for the MCP connection | +| `litellm-atlassian` | The name for this MCP server **on Claude Code** — can be anything you choose | +| `https://your-ngrok-url.ngrok-free.dev/mcp/atlassian_mcp` | The LiteLLM proxy URL. Format: `/mcp/`. The `atlassian_mcp` part **must match** the key under `mcp_servers:` in your LiteLLM proxy config | +| `--header "x-litellm-api-key: Bearer sk-1234"` | Your LiteLLM virtual key for authentication to the proxy | + +You can also add the MCP server directly to your `~/.claude.json` file instead of using `claude mcp add`. [See Claude Code docs](https://docs.anthropic.com/en/docs/claude-code/mcp). + +:::note +For MCP servers that require OAuth (such as Atlassian), use `x-litellm-api-key` instead of `Authorization` for the LiteLLM virtual key. The `Authorization` header is reserved for the OAuth flow. +::: 4. Authenticate via Claude Code @@ -68,24 +108,20 @@ a. Start Claude Code claude ``` -b. Authenticate via Claude Code +b. Open the MCP menu ```bash /mcp ``` -c. Select the MCP server +c. Select the MCP server (e.g. `litellm-atlassian`) -```bash -> litellm_proxy -``` - -d. Start Oauth flow via Claude Code +d. Start the OAuth flow ```bash > 1. Authenticate 2. Reconnect - 3. Disable + 3. Disable ``` e. Once completed, you should see this success message: diff --git a/docs/my-website/docs/tutorials/copilotkit_sdk.md b/docs/my-website/docs/tutorials/copilotkit_sdk.md new file mode 100644 index 00000000000..fc4db8bfe3e --- /dev/null +++ b/docs/my-website/docs/tutorials/copilotkit_sdk.md @@ -0,0 +1,99 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# CopilotKit SDK with LiteLLM + +Use CopilotKit SDK with any LLM provider through LiteLLM Proxy. + +> **Note:** CopilotKit SDK integration with LiteLLM Proxy works with LiteLLM v1.81.7-nightly or higher. + + +## Quick Start + +### 1. Add Model to Config + +```yaml title="config.yaml" +model_list: + - model_name: claude-sonnet-4-5 + litellm_params: + model: "anthropic/claude-sonnet-4-5-20250514-v1:0" + api_key: "os.environ/ANTHROPIC_API_KEY" +``` + +### 2. Start LiteLLM Proxy + +```bash +litellm --config config.yaml +``` + +### 3. Use CopilotKit SDK + +```typescript +import OpenAI from "openai"; +import { + CopilotRuntime, + OpenAIAdapter, + copilotRuntimeNextJSAppRouterEndpoint, +} from "@copilotkit/runtime"; +import { NextRequest } from "next/server"; + +const model = "claude-sonnet-4-5"; + +const openai = new OpenAI({ + apiKey: process.env.OPENAI_API_KEY || "sk-12345", + baseURL: process.env.OPENAI_BASE_URL || "http://localhost:4000/v1", +}); + +const serviceAdapter = new OpenAIAdapter({ openai, model }); +const runtime = new CopilotRuntime(); + +export const POST = async (req: NextRequest) => { + const { handleRequest } = copilotRuntimeNextJSAppRouterEndpoint({ + runtime, + serviceAdapter, + endpoint: "/api/copilotkit", + }); + return handleRequest(req); +}; +``` + +### 4. Test + +```bash +curl -X POST http://localhost:3000/api/copilotkit \ + -H "Content-Type: application/json" \ + -d '{ + "method": "agent/run", + "params": { + "agentId": "default" + }, + "runId": "your_run_id", + "threadId": "your_thread_id", + "runId": ""your_run_id"", + "tools": [], + "context": [], + "forwardedProps": {}, + "state": {}, + "messages": [ + { + "id": "166e573e-f7c6-4c0f-8685-04dbefec18be", + "content": "Hi", + "role": "user" + } + ] + } +}' +``` + +## Environment Variables + +| Variable | Value | Description | +|----------|-------|-------------| +| `OPENAI_API_KEY` | `sk-12345` | Your LiteLLM API key | +| `OPENAI_BASE_URL` | `http://localhost:4000/v1` | LiteLLM proxy URL | + + +## Related Resources + +- [CopilotKit Documentation](https://docs.copilotkit.ai) +- [LiteLLM Proxy Quick Start](../proxy/quick_start) diff --git a/docs/my-website/docs/tutorials/livekit_xai_realtime.md b/docs/my-website/docs/tutorials/livekit_xai_realtime.md new file mode 100644 index 00000000000..1d70186382f --- /dev/null +++ b/docs/my-website/docs/tutorials/livekit_xai_realtime.md @@ -0,0 +1,190 @@ +import Tabs from '@theme/Tabs'; +import TabItem from '@theme/TabItem'; + +# LiveKit xAI Realtime Voice Agent + +Use LiveKit's xAI Grok Voice Agent plugin with LiteLLM Proxy to build low-latency voice AI agents. + +The LiveKit Agents framework provides tools for building real-time voice and video AI applications. By routing through LiteLLM Proxy, you get unified access to multiple realtime voice providers, cost tracking, rate limiting, and more. + +## Quick Start + +### 1. Install Dependencies + +```bash +pip install livekit-agents[xai] +``` + +### 2. Start LiteLLM Proxy + +Create a config file with your xAI realtime model: + +```yaml title="config.yaml" showLineNumbers +model_list: + - model_name: grok-voice-agent + litellm_params: + model: xai/grok-2-vision-1212 + api_key: os.environ/XAI_API_KEY + model_info: + mode: realtime + +litellm_settings: + drop_params: True + +general_settings: + master_key: sk-1234 # Change this to a secure key +``` + +Start the proxy: + +```bash +litellm --config config.yaml --port 4000 +``` + +### 3. Configure LiveKit xAI Plugin + +Point LiveKit's xAI plugin to your LiteLLM proxy: + +```python +from livekit.plugins import xai + +# Configure xAI to use LiteLLM proxy +model = xai.realtime.RealtimeModel( + voice="ara", # Voice option + api_key="sk-1234", # Your LiteLLM proxy master key + base_url="http://localhost:4000", # LiteLLM proxy URL +) +``` + +## Complete Example + +Here's a complete working example: + + + + +```python +#!/usr/bin/env python3 +""" +Simple xAI realtime voice agent through LiteLLM proxy. +""" +import asyncio +import json +import websockets + +PROXY_URL = "ws://localhost:4000/v1/realtime" +API_KEY = "sk-1234" +MODEL = "grok-voice-agent" + +async def run_voice_agent(): + """Connect to xAI realtime API through LiteLLM proxy""" + url = f"{PROXY_URL}?model={MODEL}" + headers = {"Authorization": f"Bearer {API_KEY}"} + + async with websockets.connect(url, extra_headers=headers) as ws: + # Wait for initial connection event + initial = json.loads(await ws.recv()) + print(f"✅ Connected: {initial['type']}") + + # Send user message + await ws.send(json.dumps({ + "type": "conversation.item.create", + "item": { + "type": "message", + "role": "user", + "content": [{ + "type": "input_text", + "text": "Hello! Tell me a joke." + }] + } + })) + + # Request response + await ws.send(json.dumps({ + "type": "response.create", + "response": {"modalities": ["text", "audio"]} + })) + + # Collect response + transcript = [] + async for message in ws: + event = json.loads(message) + + # Capture text response + if event['type'] == 'response.output_audio_transcript.delta': + transcript.append(event['delta']) + print(event['delta'], end='', flush=True) + + # Done when response completes + elif event['type'] == 'response.done': + break + + print(f"\n\n✅ Full response: {''.join(transcript)}") + +if __name__ == "__main__": + asyncio.run(run_voice_agent()) +``` + + + + + +```python +from livekit.agents import Agent, AgentSession, WorkerOptions, cli +from livekit.plugins import xai + +class VoiceAgent(Agent): + def __init__(self): + super().__init__( + instructions="You are a helpful voice assistant.", + llm=xai.realtime.RealtimeModel( + voice="ara", + api_key="sk-1234", + base_url="http://localhost:4000", + ), + ) + +if __name__ == "__main__": + cli.run_app( + WorkerOptions( + agent_factory=VoiceAgent, + ) + ) +``` + + + + +## Running the Example + +1. **Start LiteLLM Proxy** (if not already running): + ```bash + litellm --config config.yaml --port 4000 + ``` + +2. **Run the example**: + ```bash + python your_script.py + ``` + +## Expected Output + +``` +✅ Connected: conversation.created +Hello! Here's a joke for you: Why don't scientists trust atoms? +Because they make up everything! + +✅ Full response: Hello! Here's a joke for you: Why don't scientists trust atoms? Because they make up everything! +``` + + +## Complete Working Example + +**[LiveKit Agent SDK Cookbook](https://github.com/BerriAI/litellm/tree/main/cookbook/livekit_agent_sdk)** + + +## Learn More + +- [xAI Realtime API](/docs/providers/xai_realtime) +- [LiveKit xAI Plugin](https://docs.livekit.io/agents/models/realtime/plugins/xai/) +- [LiteLLM Realtime API](/docs/realtime) diff --git a/docs/my-website/docs/tutorials/opencode_integration.md b/docs/my-website/docs/tutorials/opencode_integration.md index 4c1e03f3dff..e55367833f2 100644 --- a/docs/my-website/docs/tutorials/opencode_integration.md +++ b/docs/my-website/docs/tutorials/opencode_integration.md @@ -270,9 +270,6 @@ model_list: litellm_params: model: deepseek/deepseek-chat api_key: os.environ/DEEPSEEK_API_KEY - -litellm_settings: - master_key: os.environ/LITELLM_MASTER_KEY ``` ## Troubleshooting diff --git a/docs/my-website/img/a2a_agent_spend.png b/docs/my-website/img/a2a_agent_spend.png new file mode 100644 index 0000000000000000000000000000000000000000..15ec769392a8f68c346b245819cc07c584d1e106 GIT binary patch literal 188367 zcmd?RWmuH$+BQsg2}nt)fFRvniXb8&-67pWHw+;l($bA0AksDT(A^*m-CaWuIeg=K z*4mzXz2Cj*{r-M`%r*m@*L9t9ocq!HLHIi*IeZ){93&(peEHWhsz^wfKqMs8MJx=& zZ}2!qWf5=4E~;`bkV=QCcMw0wm}|>hC@La7M|{RYLJqS=Li@D@@uEV!5SQj4BcUSR zk$?Rz2jxG1#RTS{{^v95;;)6}C89b=NK#1hGScdv$omWE0qPp$m`C^S4;o!Po_-8) zO~ztY#bM4tdH%`&6HW@n$AC{?zcYXRn(*P<_YVQ%3k#X)c0ImZ^Y24v%yB_0z!reV zVw1;`AMDOT=lyVoOQupb*ckZ{I&zjes^IIKw;oV6=Aj3Zb+f z64BCEYweTE|Cg7eqM4YQmYdx?p>FiVN)8$}y)dd;0bcQ#n3(V^+faZ0!^t5;5y1L@ zSt{`C;m4?muB@t?a^t(~IwDuHE#({26>#ddXCDfmb&&7SZUGcsnCj2RD-)2~a?70~ zC4&1QG;FnX<)9b36`69REfXU5xW6X|^~Qa5JkMpvm!ClH&&Vo53U0ZTN8Ajjvsa{L zD~L14a7XH_^l{<20|!q7dU6mdcY!f!J8RP0o+2maKLd51$oL2r`icx7FK>)Zyz4Px z*3r-d>bS6izMpIBv11_eIDURnk`WWNa#L|?Lgah0AzR_hxV*6z5hVvRZrf$V!o_`= z!N~DwC{69lA0bA9R<{YzZ23ey5S7RUm_JV`eH9eMP4=uaZHr7uRJd)j4}}~bPgFEr zZlNdX4$ZY>X${kTb@dqa^64cGijrZX6o9lpaVI+H>bBf`hN5_}o*?f&D!J~R_~W0Bm%ayw>oPrrGqcNtJ8(%m{MIlkva6z%D+4E7O1n5>KN+d)c1Z`Ntv(>V7$DRGHE z7RWzO_r>eUit02a?PCWl!tj^Sv?yb2yzbgLe>v?@{-&u4h77d79y*bMU%7Pf52C;4 z4kR8XlvB4t6Z2~(Iv|U98b)9YYm-!I6_k8K%APf&wsHPP<9qlHVTE}2LK3HoJAEJb zfv3HNN%hL!cx_P(oz!gJ*mRf0i_gI}5aGQwk=J;q7UQ}73M@Cg4U(6bk|Qx2}h=yRo^CJSA!tES2h#;4qT zN>Up^ejvF8TO$a}+r8`?(!l*1gC|~b3$eL#=pOln0A(x3#W3i>Wy%-|mE)2(oR92q zF0?93sg5k=(H23*EB&`f&-n_YS7C`=g{iD7YjolMUN**A*{mG0ui7-;xbv!s<{HsN zEB^tShqS-sxl*ED=G;8~nWlv<|%(4tyrDTAU6Im5mc?4SM zBeG#sc_fhgXqc-_Ll%2*Lb$2TGR*hV>z2Hd#!^3*h-N?f)~n%3^^s(qyBFmN=H=I& z$p(t)TEY|WE&kv$M~dC~5LSYb%B}o}h~oGAhZq0=XIU0w3UvsAZk7Wuo1CSS%NN01f9X(t=euPC_>p0&ZYn_k7q z83rf4g31ZE;Pj@m)}kpcEbrPpITehGTkz=Y?0oWEgzCWqm7_DqFub&q_h_}giV>lN{Emar{PoS(1nJCL1DU1Q@j@12ws3ThG8*Fi}roa}(bCT5Kv z3H9VXBxkhMBW=N$Q4xy~+1c3@PW#Ez?yWUQ#S6_C{#jQly=C;JAM`uJZF@$m_fd}= z-I8rLmG-Nt8#(#--uf@H^+GL&Ool52+r!mJB1BCb5{qT44cm;(?}%gw)*AO5B8adP)iF~s^4g`P{KP6M*e)!9V@M1+`1w`9 z*Tv_Fl#M*y=jY>2&e0cyNf9)-pW4OIn~V*o(a0z0x4NSq9S@5_rBHLJE;IS8RX?{G z;rA+KODv#8@VCxYTdR@Wiu+!2$;QAb;^K%SlaNk2!%5=tT1Dm!zNS+}`kzl~IUUXm z^LB5K<&J%Qghu5}jnH(F`%|iB1i0yE@r8 zJ{^(l7@Abf0KAn$T^UGX@9=>(TL!gIeQ;O;i_1n)x#g-6>*@B_D`tW|+aI7GWrOz4tt|W=#6=$9l3)%e}Abt`kFw&=^e_sG5$g zxYD$e294A%XLN(K6kgiqc$EQ#er%iuyqdCh`v{mV%adLj9epSB>eXYmw^c%nB|_o( zl;vs1MX5E{=6WzeW@aqCS_j^lhI;3X7jNzGzR3~iGPLNSmWdD!@mw4oakW9#hexk$ zjWQ!J3iuxh73Q}&G((n`jnx{wm%x50q8_H1Q_#Uw-Y>Ac5d#B*gPC^u zDEqlG*{s7XP{GH<%EhszOE=$hy^xTQjtO3;o9f8)>3VN=0JKxV-4-}BcoEC*&HHsneD{0- zT3$It`M!($w;<7BA!6^-ukts-6Z8-yWl?{(NflnW!RwZLvD{!j(o?Bq8RgHo9L}PLU>Te5zpF!$4jQtE5z}WL0wee6&a3f z-iY_Kiw~n@j}lRfI+1zl=Z=1NH6-mn2olRu=}jNNT+}FPdl>{)`YcWTfYPD6VRIF= zfQx1#?e0h5q;`Gx*fJJr@-o0AwPjp*QZYDB)Z>tE4-Fwh44?;eG3x4c3-P6^v6E~t zj+2f2t>4Ib?2MzE_a|_#?HxD!z)bo+GuC;Z|F{ZHlmz-)W#c@2K3{$4@Z(uxXf)Nw zDXEKW1$e^#5}4^mt1765&()c-v(~w<_q)}45@gSPj=xVG?zO8=E$UB&e^?eG*XY({ z{T)9YWV+a%_c4jhYDnyGz7Ri6pkZkdu+VLPX}e>iAAd3!g0tCU$|F0&!+6l+_OxP; z0mQi|PoO-{_*6`$a(w3ZF;MR!$~F8xvOWTkW)^ts?|E}h{_cx@YI^j>2O4i9(;i?9 z#E?3GOz}}?`bj?f+;InI)!27`8Xx{?PnyH!XF6oJ3&5lD_mgjp7qYm0R6Y&z|Im_+ z;Sj{^P!;3G6-nVL^A)AzkRF#Q1&AKngv&lwpy=<+jH3fv{Vd#w2=WK_ZfqcH33BRW zPigSjunPforU)cRg1`6DV`tcu3o1?BM#)6laV!%R zJ^t+*TV%W8x79adlK2Pyd+8 zgO8CPWj$rsn1%@219Ov!9(rRhsvgcfq3ozQtoVK>qlZnkL}8>Lr{JM8poJPHhzaCJ zN}tW&L*Aomq*|V=0rHD#(iyA=UFY>w@8~vP=jnW>(x;L17qb{jGr!)0KiBw?QsWUr zCmC%EDV0X;@P^}ZHW?G*6}T(a&M8Cnwn|S$omM|!zlH5i;^LCAaowEN6%<(hfLu2( zcv;1s->Iyr)Vx9O>pd_F6?VI31H&DjUrQ{aM?IR74!dAKUhL&0Zk7p1fKTP$@lDUk z@c7^B)xMfq#^)J<0H#0bS2C4Z;O*^wF(;6qy5YZ|5emB5o42Lo{iQY|{wRXK*Ot1c zXiZIGDn+vVk#|SQJ92u9qCZuC%B)t@pVRs^E@VrBwgyd zJvB+P6N!I&Y@70z3Dc{k%;}8Nff~Q%ll)L@8m- z%as@CTplY+o(BgiDMAhmzJ9012chf~u=5xz^)e84Y^hF5SAya2##+d1jm`3${6x8? z3Hiu5lrhmh^LRm-_xS2VpC@!E`2f=UDQbPw&2S2nR>Gt>p@k!=ZRD)Y9~(^>?gnCz zXvlrpn8ZX&#uEN{>0WGttwslIw_^s7Mg9bhe&*ALhRG{_nZA7O z(WZvqvzz=fKId=))zZmx>im{qP8K{?4a=< zOfK^>^Sjcw@@zT{Z<3B9V_&OfVBcOO_BY2E8im&QFWelh=Rl4}TJ}aYD&GUsL@*~A z`woU6S%Mu_-O!PV&DWLL1z!G_m-5@HiGVRu=7aGc-r|r*>taz2bm~EtkiA+f!8?ehhLB1L@k~1N*R{wfGp1T1jA?pRF&i z7uB^mj4G{fJkeg4Pu3~y^VmgnYE#^Nll#E}APGW!dL?sHEMUK24&uKsw`DQEoxPr+ zwU=J_fV>=uce`7I(5fQxNu<)X>*fZGqr>JYI%e@Kb%mjZR{6~Iof}4+z30-?VkhrI ztBAkXpd0WD6(RSm);wRC9v;G~b0(7`L~HBPaQ0*TUbF!;W!!#5!kS$cdqBamq@Q0$ z8Y>Xqtcx+b5V^r-DztUV9k}eN)8dRw7k<-U*_OI^2Ci)tLHuX|n|F@} zv`XVuC+Zn(XL%=gZm)6M6eZkL6>RoxCnV*(;SXlY+LoS#;F>_eFI8XYOGwbCc5V$D z@kz?PiXeR(9oq8;D~XFv@cNxra3j@P_{WcYDA>Gi;tVcYyuqd>#Sxhejf|Onb1Q*K z7KQyGl}ty@I*&ZTW|J3(a3XKXS>Xk@h0>9yLJa<@8HUV4om4-krei_tn|boyvnPG3 zX`rd&Kr)L7GRXL|7p?>B?~$}IM~%yqyg@XL8`5e*j}?MiM4t8V`@7u)*M@!Ln#^$1 zewi^$oX@_$5ritOI;`VQ&j7NuKbct3`idpebp53LjgSPb)Q6TlVeCh)adcu=SJg5DBJCA%9}`7(yu{3%>`3e;>GW+wE2_}aaJ?GdbXS~* zU0pvU@f%%s{&4#qA0NM27>o7P?KV)!4oSS!XyyG16TCRvzYYq%DR)26oiG@92|OJV z?9H5O_~?=F^Ccl3-iNS8OkXo@J3yazv+K@hKPwv6Cr{cFqTKPG%!zE%ne+(noL9FD z8>PcdD*45Ypd%GKPVC3?MOvK2dbPvFcSU*M-45Otyp2v;GTJg^GpN8Qg4n$%+QeTS zT5uX}@LOJ1VKb^BL%kLcbyfxV??pFjUyM+ZTuz$m5;wi5SKX}6KVeBLnS=GN?&Icx z{M~MkA#X^iOEvSpvZx&Goq27a9HBC&=J2_;+nxyjzEtG_3MgG_^ty34+n*Ynx5_&) zA6ny(pSD|Qikl%w78)E|D;T?ryU4G0ktmdE@PimuCq)|S>4BW_pC@t#kLSHvK1+4! z<&^&UI2bb}WwrZ{ z07{~!$ANIbR+j&~ME9#c$0^k*T?~5GqwVy z)`w^!KM|g{9oGyzU{1|+s+~gKk6V%K_s6|ciuF5p`{MC6ZA** zE?Y;}du8bXrEbtDq@!loVub(Q^^E%*o!g;e8lQ9+0nOm8_r<<-(C7t0YW0_v%TEv4 z8B*($-`&G?!wn}dt}_$&7feqg_|=2<5&L7j3OR+H+#hX?Pj(l|cZiIpUC+KrWD7ks zpzS2azCN69UP=f)T!N|`pSFfXBs;DC)Y;}_>sc;45Q&a|ZI`{~%K)@hSx~|F{C0yM5t}1hVLMf1Qo)6ak95|E2x|c7 z2D3GhXx{u|_NP;smtNOU&*K>|vq}@Qp`R^jwfb3X+nwUcY+#4nkV_95_)L9|X^%)b z?c~wo-L^|LU}BH~W0wlN#i1WmI##5(l|A1y+eg)cFpphZM#{3uN`&+>p9$prF7Q8* zKL5xm+Y-+)QG*`f#?^D+N-5SxPi&OHtjh%YS$dHEGr@TWA$eyZ8#4=*&H=em~MJfNXPgrNCt zUC-!jB#+9`V*Qrc0*wdGiy_WgWUi&LbhK#?GL}uQJDNR@P4FHG44O4FnHK|*ST&13 zhLb#7EiA}t?~8w?7;sjQ?a!0iyfu<7w>6ykfQZPL?!}1pVv{hFFF!J`#c(URk?;GF z0)2!Y-a)!Q56<2-H9ElLUF-*e{LShyHrQJFT|b@{@{3FZa&zr@*NM}55&8MJ@mHi9_z)Ve zPh&G70_pQxSm-^W`J3d?0?P3uHiPh;D)J{>y}EFnva9vAh0(9_s5j@TX^=FxbnfGV zoeS=2(u?#miJ0~f9AhZFgF?Ur&p+j;0vl@%b145&YSvXzHpXj(0i8A@on)=ge$YN> zxLUzeq9SSC`l~%B-Hv58QP*rAL(Xdd$|AeHsz*+G5g3jJ-%_fw7-rf_>%~XQx2i0N zhG+$fu#M>6q4sE;$aASFP&~uBO_Sb8w*b%DJbXsrfUYu}?b%({E{jUuqemLVf- z&Bev9p0gQ@5g%_$^>fmxrVPXVT)&xcp@6-RySgme9vA1CN7T1y>xG-|+uN>$a3+Lx zJ&(t|-97#gXta<#E!1$YnZB62$odCX#Ef3+h#)5!qAITue|B=#8CI!o>*^Yb=GYM@ z7~^KG+!KET^TShyd68_}z4biLe-*PFa*!apS@LIa=jg~T=?de*j zgd<;h_LO-RL6ofx70q-M?{M&Nk}ks<`(i;ujoy==3NNZM;}c^L=aHT$nEntF9WP}j z<4V0rT_1TGH(VK7#{WE>OMrFZvpqza*RQ%L3n1DR$*8jWl_PFjvyk3-rc#_lUnV#W z8IDZ+QNoyY4AlYnD9}bexnuCNU%E4kDMvss}UIWf|qaP5rQ->PySm zf_H}+l-KQ>MS8QjP5|=xSxIR3$0qK~%Ye3}x1Kbvev3sAljFH#qz|1U3gMeVI(LH7 zW}2H{kd4Dt@*8x5TSQc;eKSmst#;;_V|x^cLrN%1!|}iE?b_t<@++d2&O)Y)vTcbp z(hnyp&J@yVUBpUn9P(l=lnZw*sg5;A64Hj%TI^0I;MiNqj(Bp9#3A~e?+et$2=N-2 zU>s%gOulK14=3bd9A7r$d52G|v-Ec)1Teq-p=C;1=Z9!V0+tSwh9kox+J++_<+rMl zXq@NjI&&9EvUT-U1Z!-RExH@^Uj8}m+>#`hHRx6ViC`Zdg=HJ5*d`7o4}BzU)RwfN ztR+r>h02M@A0<{uYJ4P^_|AGSpY=-Qu`U^S(V2tjQEB&+@pZTj#-4p>0RIVVLBks| zr#mqvEA8hkX#NHcEG|O!u+Azq;!(WikG;&E-VGfFyR(fA4c}bffW&A?NNlILqd&&_ z#C={Jyc|m6Bzg8Hia_f!fC)}yRkLBm65n)MEID=E^Z3?#8K&9M0?K&L$pV{a2H@Ew zK1UIhzc=p&Fo9DFn-WTqsmaKq5#?wdOW_UY$wF!YwZ{57p#j}thodC)@%nB+{`jfM zA4IU6ghp}O%vf6Ok)+|wh-KAw73+BGAwslex*=7* z(#kBm2g#0n?5TuZC%aTFrTJ$rO(a(z{*dkci-S~zc-Bx*vR-g~#b;z{#tm0OBZBV0 zSPK2fk1szY1cA1bUCV`ZP}`Kq@Ns(DG+wkEetacOXsJGQ5ZNDc+B!7(kb{^nDbM^5 zMe=`fw*njW5z4@Ji(LLXK~S^OGuMO-D=NA(WZ98A+4v}t8P|l3gBZy@DE$=*_)u!* zwqAu9z;Wr>(5eQxNK|d2A_E`r2Ui_|y{vy<@cmaZMSq9r?J5E%^r%!$eH5*?gd)~q zB5hA7+qh5i0^i%~;_FuVWHJ)%v(4pSR@u!B^JZTDDLwv|!1jK%j4dQlnAUy7k9@@0 z>@2oBXNPC@6IWe-pTzwVL2UCcaT}IlTE6_P`~A08E`!jD2f7!h3dO?z!C4|6P#J+> zILvG$E{pwnF9?d;H)+Iq@GT#!{{wjjpv=5NtlmF)<4F4l0RKk9uEFTd!a%gKoONz`H%F#f8oUdO@G9o?z6#WyVo!D{Y#C0yQ@}v93h== z3!C*~{{+pyAQO%>AYmC#9yIaioBu*E8Nwe-eC=`hZHw|h8#Ni{{>&&Gf$3x z1Tec_s|CCs3*rBxy;%Q(FT1x`@;?E9l)$gm=}kl#82@N5)xY3NCZ476TUhuWh{$B{}MX)yCw~_;qNd(M?nlPs@3>^qb2jlr6TN;079i(J`5kcb`sQ>#e z<+%HzxOiC@`^UA={?Ac7^#S3{fwLQx>nBaje}~{+u3rSX$RyPNu7C&xk|YO~E}>X5 zoC=Ea0W6nC$OC?KRdv`2Vg8+x#Y&)@Bw_v^X;fh3Lr;L=1)`mm8QO&m7#W)O+1&m+ z{im<`6$RKi8OHooARei$w?nO;P34!)nhFAO=}>EMI-xH6;>(Q=$FRJus{3JNHORNE zkJJ%=z3M;rH!DGyGo8JWqQ8ExS-;~UD}d9Tt_ZN5UY2OQF=+ZHUDYrvb$7~YU>GV<=2gtd8xn0N3QtoBA`(p3BGlsKWoPwByCvMSxUE2Ea2V@5wJAaeO?08B zsm&}kda0&wOpk^B=Aop$Z;-w8KK!q1{boSV!$TYx7>GrPAkwO<&tk4)A;t=#$$OJI zv*&|l-UGhir#-Q~f0I;ZdbP#GSb`e4jT7leQFM0xCB_gfO&vwwAmE@U;D_qw)p5g# zHr}OAatHSO-=<|AbqIiXT;dMS<^GR3HVc(}3icl9Jl5)-hq*!tMfs$T$LieceBqWczNLtquTf2W ztwYr6$Wy$&+ezn9T{4k8O&y*O|D96=W-u<(G1JMw2w!;0m<^{1St4B4yc3FH7Hw}f zC+Er4W*-?W$-Hgp`**7hQ6O>%?!yns$pth|-@bWe*hm)o0)2xflOgRw*y$wFjBMl8 z1L38qW#83Zt_en`41TpRSy1u@?H(~{ohEqs;QN`Kn>h!9= zez?wc#;7vIxnrUOwW6Ye$01;lJ=-f@R7?y-8bOPrJ(=4gBBJ;}lnN{)p7N--+nVkk zRhTZdeAKg2`JYo=XGR{noNNUk8hBdy`kK^AI^uTjeS18nOCm7 zfK~|(dwKJ4ZBXi*!rb=2xu5ZGcUq@8-N-Tp~qj|(uy^Y+s2gI~7&O98J` zmFLjbR>T&j1i>7C1Szl9fz2OwjRfC#fl~i;;h4lA_tED6&k9t=Qt@S60z%v*h-pbnWwhc3fjF) z?B6K&+T#$LD#`7mdLyqqG6QyzT%^1RGMgiliuBF6Z_KtZ-n$UDny9Q07H4CdNAq{v zuX$8E6WkJf4HM{TNxQ^lK#3s7Ja61_1`ztK+MStnt0qy^I| zQC*~MUGP}O(r45Y%0^47wVR959D0;CxaJ?@(FR#k?r_JZ#Z<^Y>Kf4E_U)~@ICW@X z_V~A%b`Fp-HqOym6U2O*sD`jOmDe)ct9)8LEeO4mts~n8h2m zIl}yM1Oj>bWI_Jc#yWH2lh0SSk0+Q+5fbRIn*Gk<4i&em^ij@|2&2+qos~1FeJ^S= zS^TL1HrYCRu6J;QV21`ED%ZxdgXk%Z%K$!WZA`{bH$l?ogr z7IND}!C4=mwY9OB5WoT%zvH2ii__#X{g}^;5l=i0=Pi~%G(HDCs}W&ukf`o6^P5#2D8X)So69Z)RL=qB2I`)hPyMFy{<#Bk1T` zorNyLh%ZitwLROSb~6yhY96&v?4T=h4MUdF(1}R-Uyu1OFD;C+@>vDZRCXEO>q=E! zb|6K_>$>qdt6oxqAKdaB!({~Odl};Olc%@P3$^~;O3-wjbt87EI-3!dsRYF*sDB1Q z?H=wkOf(F6KJiiCs7tFRN}nkx@J+t`f;#0r^y(R4S4*aJ=Wz4W5;@1KRMoCH*5nwS z7OiaCP$#(WlpDIMxUs#<=Dj(c>0S4MXPv3->HLTw;hSW(&?c|bY1HY9==mHeCfv6v zT*yV5B`+e#*trlr#BsRIMhCaq^je6Br>Qkyms$IsA!{)j&O+}v=%Bs!O zgNp;*)S5m*r~xK|qMPJbi|h11f%PF%pbfEIrX1*756`htpCzBa?v&&_wxAA(F-OwTPlt@Wa_+>#`it=`!>bf)C*A# z`BrVz(jKJ@?!46Vrl@p}vnq5Ag+Jp^>Z$a7kro*!nQ>+1}A zH=11LKWfmbK~$5hM!>^&CpuH)9EQc^^`(niB~%&}N*9cFO4uGph#s}09*XV@uko0c zuWmP`qmgqQ;@9u5B#RDAGZ7w_v-t$$uyA3}*SdbAYHN5dW-siOtS=Xa+anOSX|Yc2 z0~%3S_nKdJ4Q!^uC5G~44|M934%;;KyME4)R!hWWPC9eBMEE*XJoCqYb=o;#*hbtzC{KnlP%$ zI`;>r+v79awz$*Kb)9m89q3{n{f|Qo+~a$>XhuWt0;L6BLERK6wLVZI49i}nz~yUwWhPy|lp6eb0g z>NSSWZ0%=wzSX@s-(P%?Hq>Zez&`=HXr3Hxk{5T$!q9^@7kug)o}_^dc=B3sc5jw6 zj)F8uCZ5#;)><-6Byan1mB08Rr~_V6yNTs4BgpCq3oiya_es91BGV<-O-~A*atm~G z0DUGIqFRcfX@sr)Og&|0G|xfAN{9i<6j8u~(B`WLx*)5MnyxSR#3|dhw~@u zKeP>lYVH)79F$q=OM$XA^Cz?{Lty`NIwma9%e*g_E;}|PDeUPZgoGXkmQ3FRb?tki zvt=MXS+Y57gAzwOhSQby&oEkUlZ0zW)=o;Df~LR*woNzif)rs}2}7T*>n}-(MUWIj z<#VsWgoc>t@U{z@8zOc(lQA-;y*vr{`swtOmR!42>YJHbA-7#TFx;69(It;8oB;N~ z@50`-7}DIH!z4FvCE@zfJ>ITyghkZ6TLQN8t&u%|f1h3k!#gk**Xx$q&2Ks`rGIlc z@92GS&Ag9lEn!N;3Rg!>(uMf^x3-cK>9!-`-Az}Bf4{y)_O4$?Q+-Fb+=EcvTB1xus2M)#jeEUis!g{@?-?NOs&vlCjFur?tH;kX4}Xq zp-TS@+itP4<1H*PIqPM-?D<&pUdJ@2E!5lFyZ3rF&eL{Vq4$~ef-HUs9l==f;`s@3 zoI-LbJs;a3ntzS@=_kpp*10*{2>2!L-SyHX4Uc^{HOXbBIPp^EHw%mCwbY;F_R~Cs4_IM@Z{`vSX<< zGz8Q1!<)q7hhF1+M9TU9uK4^{!sn6mYv^L4;~j6Xz3oAMk0&+4tRdVa{O%?_5QC65 z^5(GdI57N-QXI~#n9kR_o^6>HxiD2im1}<5y*&!X?@s_(>xVfe9@_Q@i+R=1uSjFVd;Wje5}w0nK2>wACGk!Xx^5qqjo$T&>I+> z!#F)T<4XtCG@r|xsV5wid*R{6@Wp66*GRxYb+Bmknz;V%XEfw_N1ZJ;3d+MCLR!^~~n{50z|GXiF zztG^ywfD)x>sxa%yV%GebU_f1@Iz@=WL`ONpE-7R7wP&vF+RM~oGx%?3Qg(E16E181uFhWV%7}+7ZDFbFL0e_<0(+)zDRYJAnpRLJ9 z?Jmk|{Te{EEFH+X0mv*`_*n%&+{cx>ZAsjRuur6!-(268NU#EozdM;o|N5~@8H7Q5 ze{C%|F1IJW^&Fg86ep-mYjtH~PelZ*R93E9crir}UphY-#ed}3Y!uuM5Y{xlxi}Ei zz1HA15wM%^# zCuN#CK852bpA}1h+1}n>VG1$4d3_BnQ~g}`uI`<*kf`VkY)SD^wDb}pB3sL{NgOTe zc{yDLB|>C8A6a-eQ>BhdFam>Lz9?5)>}m4c`NR;X{%YgRLkAOaX33|GutT}Wg%?^y zno*t)2?4tq#y!Z`nwaS5x&F-}*wJS5YKr+|!q6EHr1QP0P^M-EyTYCLqm1no3cEzc z!&3eFPl$<2hU+a6em~;q^x3T~PW{ek1RE6glG>G}`Rgm39#MV~k=Z6CxoGN_At&aF zs@Y)|)Ot1YS;Y@Og>b>ts^^`d(D?_^l^Lwj~$=_f)_zt17)5w$(C3b6A)+ zsKssXXM6in!SaUI5>K1KBTeP2i0J}TiE{C-xsI@u{aNTUZY0{D9av&>7wH zobSaLnG9NzymizhM3`1eiK|QTE8NPeW~25fff9$vu`0PO&#+9Qd(No_hokvaNs~)G zI+M<@wYNs>$l~V(*u*&?co)Ka{kY&hEc3~pDfIx_-++B=HERJb!6?FttspoQ!C%=& zHpahohc42v>sGg}_r(KllHk{SoGyo7Uqu}46lAwg@}I){PnUrA@B0&2WJjM3}R|^gHA{EXgfFN>x&Sa?VpA5ei`LQ zTnJh!4b}R=SZ>%|iUlqq1sBpX z<9c%p#%F_SF$#=N_dc6N2M?yy5CQM2x}CI|4n`!rNp$gdV)BX@j+~YA(SQh!V$fqi z^d~_=Kh*{q?#O$y4^1%jqkL13ljxaK_-mdzy&C6NR;`dJx#0E&PX2@G<9N?HJ-Q6h zXNk8A_3Ma4!PBpo9uIiOcq;J?uID{iU}UmyxilMN%hMYq+>+y4&r?{B=ASN3cVDU# zgP3s3`T@5-_|^uI^EvO?y%%VQ2*${(@7$Xy`|@0i-;5USm_mL1*7oa9t!95zQH}^4 zegjCx*@O|!H0I~WG@r6Nuo-}f#j`2Q4&{~c@$k9_3zxncq$gQ0lt^6tNIJ-N$OSbR=|I|NB{BmOG+T-qNx_z%YAwJ}%dVMuPxE@1w8se3$50pS~i-!C- z?@tB20Jn=WWs<-Zx(nD38qo}q%1I%s<=eZs>=ZPPxxMd_6IBKG0Y5aJ3um<-6qCjp zNg!BAtp-d-XA{bL{fVrWV?7D8C1;b|=X(fFtFra9It>g)Sl;{WBO9U$D1VXMBBY1N zp-kfLx95L89az6&PZb@(e;rX2U4fxPS*L(;KNp&G-hYzf3)m560E<+r4>4+%I zu;cwHXIyCmrKKsou%i_NUCCorn`*`K;Yt;E(bFJ%y{|1{XLYm_`E!L=1{*>Tt|Cfa z1@(|&3+dWS{xH|6vWQxHKXAO(!(P?`ZxCiemW?p0(w(ibwRCFAmV{q+oUF$yr%3>s zjzc#Pq{$0zhVA`KedQ`gpdVgzr_JibH=1L3|mUZAMfR;klQX9Si( z1{Xcn6Ztydsw?iU5cEy95s8~(%F{MXy6V^Tlkgj*=NQ_EiEZ;kjS(-zL^wM#GV+DX zgm?BuU@2gKsby*K1~DIVOpv!O?sH)mfflxwIgzJ8K7im3uO7rNm)FCLfOnH$dq@PX zj05WZiGW&6-}l$Lc-)yPH$=8Lz_bHOrW-mppoN@1W-)2koo5E5MfKd7>7=D zwwS%n?G{cIG?jem_0E}{kMGuEM=gJCwD`52#T{5^vHse3De$G>fzMXQ$m)T@Vc*0E zeB|Uc47@2WdjNw~0tbB}Z!YwfcxRd|v%SD}UC((V!CHlPm}1G-*~)%|Rg(5Tq2%?TD(K`cX?vT3cQr;WKXvQb z#>gko+B2oJEj9m4>#TxJyD_!yno83OyE1_ewp9H2;|^3-OYvjqM>8zdBeQABMZwOr)w;`1GVy!jmCFu zbtvODYgnWL?bvf>ywjTVjMDOwRfa}JAPEph1twGF0SD4pXBJSTVNX4x@RhDg7JcJ7 zH#etH>0!X--)@$`>_gYDRT2ZfySJ1$=Pw5?eOOpY7bI+IYI2y(&Jt}h_hmmFlnrc@ zmr|g6mb6f$fuY*S2_ni(Z%_-3J0!1GEfC_;=z3N-^RW6pP+_>^D@sM*dffhzZk>$1g*T zr_0}~3RoAhq!&XJVs73F0ceb>1aZkC?{|*Yo80h*)-}oX8XZ@H5;|tXeGcn;Km%en z?vBvK=CORmM=tsUmZAc8fN0P{qlf6>rn>-nx%rumJD}ZS&T=pQNGSU+`P9503O9E} zCEm1zT6C?$LE4F-yaOUM#p#Zr35;3vdl(m|;+_E1EbEG0q5CRbR7xS_DTJ6LvX)G8 zd|9>RpLr~rMRg`JD{+RlNX<=Fpp;$ZF|mdi`Q%;O_AKjlHq-6bnY#q|cdi>*rXPSZ zZ&tSor|hfNt_9iUO9mo$lFJ5l^xA^14sQ7LJhu-0wt0^<>=qpE1c#11}pJ8CM>VW>*BuRTv_nGptZV4#JBcavHS+(J~Q@?pHKm&+E9 z4%pm`r6&47?~7l0{&f8oQZ-vO2r-hsGLyW>7cH_G({hV(KAP_`<#%5?^N~;vXuXfo za?OFzTl45WLH4n`$y&)&|5+GxqlkMuv6fqx$H4x;ebZi4P@I-Ow-%Iuq+E>1ZG7GB zKoYu7MEFZSC3wcOHGL-#Q--V<@eLrA%(NxQ~lEHpDgx)i#T^@r+($-Kh@wp{M3!4{zRgl^~Lf*Zq z%sv-~B(bMS74ZzG)=o>vyzx70DnEMNsk1sLY&nwE)3332yz=pV2qBlk zD!b9K(T|(yXO0n%0+9prRn1z!;zQ!r<~^7jBf%E;S(3oE$b1DQzuT2Z7v`7)2^=BU zFbL1aXTbl*-dhL7^)+jw2_b^-?(Qyw z-JSQGSMUAK`Tc$CtJ+k}P%wMXTC3N3y8G#;PaUp~KB$!l_Kq}1mWg9cSkJr?c;p?1 z(D8wbVjz!_15v?AoAZUam)nZVh87bikat`jaIlu>S|It?)zvez?R?NB5yPO-@yNT{ zv-dQWssAvyHr=CcQNKMM*z|>7%TQSTvlhjmoqcQ@-1>z!xq~{vMV71OTaJ)mbob)uCcj$UDDHSn1yt?UVLe5Go{kKXjPnVnjtXXd`ne9|k3vu=&Wq*ddM z_`mx48kM~-(FA7j_c@N+fLz{MPBC9WiPx;6**;z0{L6mohD5#U#4dVB^ns9eJ-*(6!hV68ahM)GRZ5lp6%IhcpymZ1>8?ho$z^@RG_yMFo@`Uq^mjBMUkjzq8{-1GJgQH+z> zN^dl<*P*xPirGcpvfkW*$WJxj3&Q!juDo^X#Ahu=kfe`ehD#j zMD=tK3j2QQ9IP~QrI}spR*Sx*i1Lf|w-5O0x=luSNo;_q!)6>2osi{QVckgdZ3`kfCyDalZ_uBRJObBo6+o(l`anY>MuA+Rc+{ zky0aetyLAIjf~BkmElCn_A>^Iq>I-OXB~rZtXR` zdA;O*uJZPSW*6j2@ixOZj-J88Ti2CF;6Xit;c6X+QKx5l@KL11a~e1(w4Q2GOT8l;i~9F10d|Dj#U+T6RuDHJeFCv!n9cT;aU(d~-|wAKvM>!3q{ zXw25fi5Q^Hu$qw9X`65x64oH{SyRADZ$9t2k#+5-25YE` z_dmwJHNtzVRB*OOhFHrHB1C6{U;uzXwQouu|gm&3qUp*q^y2SGTDl@Jeg z0iVJ$EkH=-^maQv`Ae-~E8w6dde)@(g}o!qfWBc{DbqMt%vu=Ic+pBJ6*q)_zD@Bj zJSt|j3}|cbP;2iG={rK0O0hVplY2g41K(K&U!w!yo#m76S3yPl^t8TGhx=JtLdC)}O!D3@TEBy)fN9bNr$*#pS#PrsYi+q<(x``GJjy=vY% z9FK+(l%epzy|bJb)c@$+Bxbr1Cp~vzl{8tL*#7eDcD1UE%CL)oakagc9`yE|!IAkf zf4}_xoPuv@W4TtPa->?*usD*OdF)n(e!u(LzpKiQZTQl!nVzoU_6n%F)PpNTF zKj*@xb6li?TGq-vRo|;{Y+1(DPG@U=dX68GDY7d18*r(9F=~xh z_Gv;mVY?c(W`tqdsb{x<$qpX{Amb!`nj2(nMQPR@Mu}q!l=)^3ux8@G*XFMpA7!3= z$~Ft%X-O`Hd$VPGz%F)w-SW&?$OC7t0K1NHs!^{}x%;^ZtJ$x%7Dft+E-&uI7C!HuwtlzzE$5g5av59PmRsSJZ+SRddSggI_h)nD_6)-9Av55tyf0vZvMFhQt}v!)w<( z)Y(+I^Ew_0MYS)3`fVV0!uyIMbM;=cQEuy#I79A95+&2AjEOD1aw$FSMBXJj=XkTcw=Nc-it3mXaElk# z)d3I5?bqtxG<<<$b|}iHnLbQ_o`EvNvag2-NSAt71}QOZz>Bb`~CJ zcsa_^8YF6MJE-<&3}%vv^|}QtE8G`#&rDe%Bs}_0IcfWM?~_#Sqho&aJKZ2&^^MN8 z`-w%CE8iWqsD@9=>~5E7&yK0H+6H^AJi;##+~UDdaYMOSAWge`*blciuH8btnKBtL zAKB(|hfDl(AK%&%tptoY#`|OXo%mV?#pX`}+F64vTmGs!@(|1g8Qf@OqQmi2LZ`>Vzi2t!+orm&dGa)%FP{vm}>(0^YdW=-U^pi{7rTZJ5cE_e5=bK7X>0SoKlhYOE zO!CQb+qJRPQ`_FKi;q4AT7V8x7Y-v>diubk`Hj}rYqN4SUE7E6euh_GTf<+}vi_ME z>^p*kT|-ct%)S(b8nN$98!i$@tsFB}QXRwfgLuh&$_R)jh8f!xwD!l((Qn+ergdr# z$HnHk+wsL~E=SP>%${gt2j(Lh8;p+Y2FOdxT($G{_}z4Lb+6F-zfQ#oq?fr%AIux- z@MJ8nFIKodkv1_HXAkys{~#hd`cV`&I^}IKt_b(@kF1X^^yjIq(Y#yub79kM0*xs9 zGY@mes3*!v8`mX?FxSRAXY1v{%D@uCs+Zn8eB5nDuja!omm$p!oGvmhT2=b#2Tx@8 zxvZroVjk3Ijz90yC*535n07FnQn~rRZ@49O-_0MmyFD%HZ}A}==0h2*4t?(%e=3{@ zJ&rDEd=ayE*1sX?)(K`eTkTz3M6Q18>WaUxh(zf|^7AeIk!)~dqZU9odh>AX%28#- zo@}&E>b33eV!Aal>1q;RzMSGXfvb=sI=P%<5Ky_-5>8Dmo61(WV-1gNJB5gTF#4GI z+5M*Ds1O0k!RUz=wydh3d6|fi242PIZl5e*|V9-h5E{U1CF|6j}XunV&-B77?sO$tI4CB zClN>~NU4_2QM_(NKgB_=!2Y6O;&u<&?_iw5Xm}FoL@}rM1ovN;e(*CPTCG6MH^tq8 z86t1AKYuKLYXJmE-XoreI?`*^#&A3Dnd#%`$BJQ0+pX;yx}tihA;rZh55}xhPkNnj_y3$rDNNX6}+;0GU02SBWUH z+)&c#gEC3ok{IqdRuP937Zwp7T(y4SjQKl+ZFWB-0pt%#m0yj{LFPmPkis+U#t**_ zib!nusNEFFLoLy<3Txa}o6e5In-%j!Df<&vO{)-2$LcX-Gv0|HuaYZ|fIaD*B@uL- z=S#g6tIPZEu5Tnp$#S6E*2nJ-3e@s?Y`KHVNUt<&KMv4!>$|;}PbSArD-NgSJ?S6c zHlE)yj_RY;X71s3xbUASo|kNJGNV~~9ng~k{$Othkoah?t&FQ~JZ}14OQh1~mO20e z9EaVW7hj5CbO{h!PUkrm$85$YE7A+$4V~hq7*e`U&`Ybw4r9eEb$xFuIl`~SDwb^V zFv-uv0xk(iN~zj)I*pJjF0>Q2I)X~mV|4R{whN8Ayzry0blV6bK2=AHVtxTUqo_f| z z)=u`*3VLnBnQNl$_3}YIa%}JEOFTBO@9v?vL?ft()~H3fyi?0f?$m0d#1l*RgxuG0 zK*UHw7VY%uH@Q-m{{+!;?up)VwQ-{~K8LoqKvK(#9!@#MYcmI^XLT|)&Ja%=98;iZ z{&qRZy#ak1^zifRus>@@=($hcD0n9iWX)G$Zt1~cyBzy85uJ(XiJ=`xO?8^1+4S?r zJ$^fzjd-Zz=^5L%?6j2*D6Sc))U$Ndx_u5xwQxF89&~8<8%EjBcwe?lnqNhzd0OpH zl{6$pDovRAJ;i*oN@Xz($A*#~bZB9Ni$NG4^9;I!@g{R^78|(B==KD2gnrJgb_RJe z-h1$_py*@9ap;0+w10m8bmQL^^8NReYAeM1_U6hQBYT$|Y1I$?>nksB& z(DQVy+e3D~)*7=3#V_a_;P5$(tO0ySyzZ?MdzlqfoeBeydLUxSFBYM|l4a}C+t>Xt z%JIu&KP! z-0rV34jpu&QGB1CqSkS2M46zmb;(BcZJ9avZC|din3y6_nR$#}y-O!{YLQE^lCB_R zIqT*5PE%`NW-_}BQevH5YznWVpd>b9Mx(^;sVAlb5)Ms*)}|xd>xv%S_KM+1`l_p6 zhb(T@PG*bhS-oGW`n+}D^yb_631Tb531roVxA8a#(mOI zE&U;&GL-2029#GpTWw>>RpigJfe5ZQqLMA*9sYsv&gGaZ141xBb%#dy+n~aE##CoE zxsJtjbg%)nbgWQ>yy}aUhO^z%k>ct#jM;0#?ecbjQ7UG}b@;G0Nf_CYZF!GE={83! zVu#V)Ve^+Yi89*JvWUmkt&~B*s74ksG)BRYn#PAG`+kpK=jwsOQ@(T!<({+?wtf z@#86WBkE{p%#1n};P18^vMC9bcE2T^p}ed~^EHb<%|jsa-4)I($(P=ZPb>C|^>-wP ziFbFlo0HoY0Z4beio?`#8;ZB}`i5dj9lPsw6dRE(Pb-l~+Y3^nD2GLz{yYVDB<5qp zvEQv5;_z60OoISUZksWR8;*;U*zVcVsI;| zm!Z8Iuu4Y(f)*c5XRmDRHIX|dVH9ui*S#o`g*KI26L1Uwz>m|@|}I+ zd#>7K2T3k*$rmU*$uSSSFu%O5z(@WaqsY*L;DDgxF!|HcdzzWt|)kYWV_Q5z(0S0j2H8Psk z*H+O|eewxDhwmLHy$mB<+}wKt!KBJ~9SkG7%^p|;Rg|(ZGfH?J+@pysY65tchbmS! zIW9@8=7k*!9Fd;aN4rl4?Z`88g{mdAZmSWF8>a!^t<@8mjjO2{;P(I(hUD$AbDs)X z!*_PnTsLb1#&>^~~f)%bbzn9_wv=PkCi@IK>h@b>WDp|bJaAfxR_7{0oFe~*7I_++lg zC7yeh>ol?iOshoAz~<&mKMQkTzX+Ocru0XN%%(j0`4#`Xbvq)`uan#gON~X@N3Nrf z+1y5Zzn<$DpV%ou&Gwhwv#s^;o1l%C1f`ADZ$0UIznt)xu1Yov^LOrJfE&tNUhsN4 zxtPsMzq&a5an^G*w!MlT3~GyWIlUmlLLaKieksIh3$ByD++ezD@{O1haooAvFOYK?~LuU#D!)k4hgd;SGC}n_z>nG_+NDjR~E>@iZz6S!$8DRa6prrQS|pqm;IW zsnP`7G_fC{Pnb;m3*KLbR9Y2;#9b7Zzg_MnOzjp_+3t|gy>4wIlI;$;zNvi-EQQOH zgrfkFz@5D5jJWO&!HG{~k&z2q?FHmmWpsamghF{!YWK);3XLIp*$iFJaGNgf$&W}{ zjW1t?kI4tTC^*yNa=$w&LBVGSXNi6zdlCEWAX-KNYW7n3UMK6ZjmP7@8ijaad`q5h zf|%;0wpb%Ki+{Pvdh}TI{&2}QL1(RujXas8Q$5qxQgkWdx3H%aEL{mH#Rz+WMt zPW^6Qi_{=A;y8dK+80-%1yAN`H~VmRohzRy#7)h7)-%>(3-|bNblXy3fB6sKPH}RG z{%HWu-zdDu|K%Wpeu>(dbZ+lAJn|pG-!CrpHTJoCKEk|C&tijZu(iG!QAJL12GMuL z#FyDEoeQ^#rUDQg`ONWAFP6WLlUQ48=mn|PYQa0)tFukZ*JWoNJ@Q#~x~T3p0E8;y zRgB*GaZSt{GvKUQ#59kUqcp#j)_@%9p3dzmQfb1q@Nx86H~UIY-3IDr8b9y-xURZH9I!qcHPf&wB(5(+Ox!T z8-lr{&nopgka)d0JrQM%SeT644)ylj!*v$!yt=e>z5E4nN>*~ex_^nmA*GE4SuBf# zLEUQ*Y%VQg@8>3@yuIpHU0p0~9T~CskiJXdwhH2N^;l1OJ_?BpDJ=^_nh~rov8D## z&UCPF>E1uSdL?ot2)B&;T+5dsP7jfJN+_hn!E^B5cMC{Ij!C~RR7wrnX`(j^fqnv6 ztU-xZ0hL&R;$|XZ0e7l^2_@6iiD;XX;wo$?;2kg!JTB6pPb!(Ts=Ys?$qBJPS`U&_ zEEWgbTP=M8SfG^SCiGEqdl3<4dl7}^>rZ3Q9fEV>RbCO7L!PWVsnze&J*dZwAn57F z?qg@~<+ugn%ZXBB@^fON9?se=y^DQb_qZGtIh{wC6pc=`dH|ez!6T+`6FcJZKC4Mo zijv%`o^OOobA`O@w<_<+W?BJVyp)%NSm|nK0+h5@yIc9`Exs!(`Y`R;`n&J2Ag)T~ z+nVBH*F{pO94p`K4xzweK{r8DhR%bIZ}??L7f-c8^>%%QmCb zTQ<>$q}Ki0d4mldosi5fod?qSVrw+K%+Ia}mrgWR_Y<=iYVKNOIHO12K@*y4h^1U- zB~Gf-@8rU4RJbfwXqJiwi5pNm?BtS8Bc$K)i4zmpf-Z3AbjY)x_Oe4>J#H2Yb5542 zh%6QG7KP0_MN4EO>_3VXP_G;^|Xi4t$*!_Ba#&$WBM)CwQK;JEz#XeNDLbH%cT zjlonMtCCq_c*In>pr@56 zigJr1DNNcRNkTx&dBWK$x982*Td^+{UT$4W6%TixzPUcE3xM37Z2{aH7)>vr&@VNT z@?$j4)w-qoEJO28!-bdi-~E*Q`Jj(YZ@R7hyB@L25VqgB!QY=RV!CBlQU4P({|!C+ zJ?lD4LM42;rhDG=LtKV{-8Oz)Qrg*NFAvho9Po{8521&h2_EZf82;>_k-#JpKGI{?ISzlb)B_OQRp?FUAtA zCBDFSU_ZC~J*}Sl#|%RG4`#^_kU!TEy$JkpJcp!NEty0Sso~!YS&!o^`2H)Leh=B9 zBve^wabgy^#?5k8;IU7;8B%ni;`=_0%n_eOB&7f4`DPSQcsCHtR!U1TOf1=l%1EwE z{A~i$0VueOA*eg*OLUCSHO*6neWM)YPiD{09a)YZ!h=rv7TVkFk9d!@it)JTcm4iI zi{g~oRA22{F6YQJXK<(ex~UAanGL5I@}SA*15+d(O{)8h3lSaat@5ko?+O{&H~Yec8b^vxONWB`tW8G!kiZG}m9IEVQX8Y7hC zWEu^o2!;$V#v-^s^3LWuS2a|6Pe0$~Gm9BgB{cw%b(e?kLgVsiQAQ})Y~4@{J$3os z`J4%h$?br+^7qHtWHS9XvwKH(M$v`1fWa2!>-G=~OBLP@E>N%i`BA&v#*g`+su{T* zb3Iowc8t+;-Yeu1ILrXPHk!*jJZ2-rtB+hHufIS0_v_0j{EGD%`ZLZ$igTSSI{m7?v_KOyp z6xBqA(PwKVnGSJnTDZPi_LQ1ObDrvIe(LiXF2?=IACfU(m3`uy)=4T43iwI^n_tV$ zK6ZU2Qh_Kg~?+{sZAr)2a@_;9W023Tp<27Dr=X*b!>FoEj-I=DLy83 zLnmi_(*fI1$ZXPQiRlZ!rIJhfEQ$3YhtGxdGr_A0KAkz`G5JMTkRp0d-&9f=hY65N>F%8>Q0}8QEFD)DPT$Jpfzy2AI`$u37ctJt}A62l-|LXFP z?x{4D@ve>`zJN9f{PA+0kp2QAU-MS&l4nw_H}n_J__3!+g+WhD8{+l7x6(aCO>T7g z_x%gKxHe84cc$v$oJK$T#GjJW0y`R-E|mqs}&~ISJTooP6Z)CcKnz8!|e-g z@r3>mq9b0FppI}Hj#}0dUEyGy{<6-;hWzrr6(6R_xT~GtN}GJCZQA}^cw3kPg9}`) z$BWZMGopC@Cma3JWK=M2dss?nB9l^3ZXh-NP~*kv)fBxpNd!^=uiWLW_UkmU9H(!- zbNjaq7>`QtGnbj%b~=vUkLtAIc0mw}5fimZbl-f#`Ve^KE8@1PD~U6%LmG4Dn`>E9 z_p_uWtRnIn;p*`LL2J^BuF-iroVwP{_n4ZJeOY;}{_V-aTi=@-8pj-sPR&ZgQNf4A z6K&yd5By$Kl}501q}d&<+Fb?e?~R8YPC{t1Nn)BUbAh1VMl`JgL_3{7OtiH?)87;MvDe_3yZPJ4YC zoj2BOXi01ehqgf58XL__iR4*;@bO|byLZdM6)SwJ87TzC9&0Q0t2wKDf!ZN+`j+0T zpc|G4EO%hu5_iiGH!bCzfWem$>L!#WMKW&GM0Eo0CdH2_JH}bYheU53NorL>kg)`-HDNWaE z?Ea(5YVrQ=4@CPg!;P9Bk^ga`{`*^hKDf8g&Ly_ZVDUCJIH3IDq()X;`4i%%EbVA< z2$D0h{+mF%Vc|RH-*>ZBMlpfTg?(+UJ?8D`WUF6@4llU|>tHpsgNHoVIqr>14V=yc z>0K2f!p*vkFk1%zm6=agl<|)w@P|zlUL`M$7JXi?mt?h>DGV7(W*?9`3OO?l?k}&1 z&K0=>GecqOi#;&9j}-u(zi+0qhfnfR?^vL&}YIv?#dw$Vc`urfn7o7~%1|6!M!g3iy9M zTB^tmbxADfebxF_l8LQ2_N<3Uz`2y9nEmWjbL&N|$%c|nwtyjWgqFGna>SvP2J?8gK4A|&Of0-4yABC5NufH#aTlH3!k z?= z#VP;b8{k`E)g^O#RewxtzL!VKjQLnw}fP4k0>j->u6*bt=~)vV>S%AU4Mz@(z(>6GOhh> z%twD`K5g`~Ua0YGuO9+h^$7t-DNSDOCfCs){P#&7;1 z%0M7)!po*Ml4-E~K;5j`xBy17#TAb9K}Y2D+OzdVJp_Zqhe_la(I_86I8%^$AQNwn zu4#Wphf$Epe7Sq0baJz}Wc+&yYptZFYT*?U8wC)bWR zQlS-~_G4~58SF;to9-9Y<|^{+_ba{omfKPW9vrEEi`k|j@_Iiif*V`0f{a36ZM;T7 z1D;<9)hF4NC?7E{l2ZSkla!tMpO5focxOle209<%Sdy>w%+ECKm#_Ur;Xsg6JEbTJ z38D21&i`;)ee@_+T-HmwLeXU~{4>fiLI*eHfymV|$fs8>ZLnzCmO>>shm_kAxJhvO z--h77Zt@ImMXd}hk-}+D;c>CUjbk^Xj;AIFtYbxZeyex9amVNo%Lc)>h`}LV-rwv>xj#Mn<=oIze1@$C zfx17Pa(q5@wEOQ*LF9q|{sNb5SnIO)&1VAqKPCq6|0zd2lA>^6Js?OjVV#47Vm9vY zDdfLF)()!Y{$C(x7XeM)*Zfut-;2neW89b^k_U{;ZO} za*^o4cOVpVY5kf0zjpb*g3A=WPv!S+V6~i*29}^9Bs26s0`-4S`2RD2_>bSL@c77+ zJ_>C(J2*rE?1I5cj_U&X4#e+zFhlxy`mDw6H0%Cq-Zl+hrTDQU09i3lmeBDQc%J4@6?C{v zdS4Fa>qaa4mhT4R8RG$(jhi_dX#=>~l6Q9p&!4{2t{EooqVCgpL* zA^eHy0z4)S?3cHXKtW>lN;5!|kVxZo{~po%{4Xs9V4L#(GawyR(?mRw`=5N1L(YGW zrOW;4cwqPw2SJkVKs!^#Y*85rAm=1mKzA| z9jCk}a`sv%9*a?j|LX?Sr8ItT+RcI3as3>7l!~7~c?!4fM;MUhB?vxb|2hurv2g%V zRve)J4IhHC8f22$8+82(0f<)3k6_;f6pU?o%sNdb+s$Usq2G4C_GFT)9W z20DY#_$D`>|F!iCY%ZX+HCrIbObO`ow2WPhu*~EIf^^X>W)~NA)c*8a<8?dv#6*R{ z9*4EbUYHt^utF`{{C)0gNaAi5Y+^YMIkg(=w$_F(D$HhCeBTG^q&#QyAy**l>lrA<9 zmB1omgV+764|uf!q`DjUg~S-u%Rd3_f~bKhofJB|IbAmf>YshRdVyL0cs)q?Z(Gqn z^4|aX!lzuAq^nyuqxvGJM$~ho4}G7kF@iLXN-{Xu8`gU zd1z4R?zN6*(7AB8WHkNSkstlNgLmD{%wW#5P+rpgT2~0%YVuKXi z3TdwIugLDL?sWiq%XYgpd)+D?Ej4HFPn7Ctsg`ONT>mZw%Cs;Tv^jO^fVQe*E#98} z2_Lgb4yuxqlk0W=s*(E>!l4UW(12Wu)XHq$w4+2$Gx_@jaxi_?M{Gq*J<$E2+tL*J zj!RK8o~ESP6rF0e%!Fo1G!$0>uw{dz4n&$TU%*^~tE#GsHL65cfDF?j&!LD_>A|3E zv&Ut1o&(UiwMOp_U|vWyIPE$S15Q{x^zpXW1P!pT7+`lr?$9KsyT}mqbK?8D3`}LE zu@qsF$56sYxZ^df52`Z`0C`}RLJ@PB!+%-{n$y$?7EdDqgda-<`?5}?L_LI!*j z+yOYU`z$naItPG194>6s!(VFy1Q&anP%kro_-FiPEZ-(g7s^QGjjkJNRpe9_b)X z_g#k60~WjJHIirlduoh?2#t_id8rl32sA{E1G-N2AIw%cbDCX*R1_%}ki~(A-uvNY z{-{8USmCr^lg#uDa3Wd()@*XKuYKBI{Q@qC{z^neSCl!ZU2Np7Ws!p%8EMTvobr+Y?q3KjXI@f zJ+wD?9xraA;VIH9Hq{sYl~wbfyUV|TUPNzrU!8k4hlf|J@wPj{cn&PSu0ZWjh_lT) zAng#i@R^hOFWU51bVQd^jxJUFK!l}Q>tqUvsL#wseV{*R^SwRc_9YG7f-X;Du?DPkSmm|vGqtZnk1pU>25&8~9 zNI?FhnLrBUFCEMO_ZI(mp#H}Z`2Wj_`qTw_r-kNye`BA>r0=`5TwxgWmJzIdwmn)F zp;c{$J~qC7^A`^$iW3o$HjA9VdI@TwIP@j9Kkl>^x=gw=e^j8PY{h09^%WGr(P z9mW0zAoqhu=9S6;85(<6*La{Mp@csoI)zH1aukUmoa4Ag)gv}S&|AeqWg15f^||MD zyW@Ewq&Y#kHTLw6#kA!I)&d}y3%OW zT&FmKc%ha08wPcSJ3~2g^k=jKqQhgx&t1BRQ3!9|eFw(|K0^Tkg_x7oPAQ=N?cyhZ$!n^5ZHwlBcF?&1fPcguZ7rE}sJ#Lq z+MMEa*e-Hi4Gmcm2DgC|%l-eit*wpy`Pate>5`~-_2=&BUr3RN1sr~Dam_csEM}$X zUOsuA+_0=gkd}XP!-kTXMmn*UQjG8_c6BKlL6GWsAy_AkKKI${B!d<0CHxR3rxM! zWx9iahD(liy~Ekrrj%ncfT_&N^xrNtI7@Lm?PPTC11$GG!0pXZ%$0070`STOe^XpV zIN&+$o&kQ=>%Alm$=XZ7wM#zBqVJmjf)8VIc!^NWSo^=8;fV9_ptD)UXOBz%y4s6+ zI8gMX**L)!k#Nlv4k12*OTYqc4_=ww0Rck#sh$YpWhsHdc=~vN9&di?4m2}{Tg9FS zWIhG~Kx=eu6I(se3Aob~fPM|;#dMRqqfUc<=c`+wp37+GSEj+&(&OdU>AQGF-8f*B zEYLjxTE1q6^{)&c?BHk$2{NEwISOd9HURW!1N_Ag9+sh(8~vExZ+bx)zvTi^@Qi?o z;D*|_LLQt{ssn&(AVKY(M}S=zX7iKMM~@PO+fnvW-wjRa8M~QR^8EGja(|r6{^sm@ z?<2S^#B_9{#iMPrl~MP8GN{ob0m0Gj@+_e2@cLke>dy7}q6Vy9V)wKJ$W1jUOqHtd z*)HkFqE3taTSV*M78D5fS{XAh=&GN23M?}ustB-1MAXEXsW&B>4$aRT@R#caWtn|s&iLZ?2;w& zS!Z>HV$Ba$YI2m8l=VAaJ`1I9bUP|m{-CQpfHguNJBS@y8Q{?GGCf>dxW{}93nAib zC{{AqO4(IvvJS!g$*x1FCH{0o=v|DXDkr38D_@g!u{)t!`_w4$2#DQ$(%8Fp8AU*1 zbrJeM5B?{(M-mWVsJvd0>(g6l|bzv7A;rao8}aN zbIPcbDgXrs83g7BSAYy|yS`yIfV+dSjDd0x-|`_K8Zo|_jY%c_Ues+%y}}^zPAY}7 z!hLz>8#Y@~#Rp(f##Nh-CqU;b2(9C5DB zd7xz10`6yW|1_J`Lmroz^sx-{58rTi5#%uaZoJn{^mS@Yw^ik~?M_Y}z0H-gqdwo0 zR)(gr3irq)(@RA2h?mJi`);f9nkTL+TJ2VIz|q*uPsipCok7R*c6&VTJ-)fjkOl{? zr#FW~yO;w!u-qZ-pF%y-X*8=?5pCtiyJ=`B-~+$^^UmG&1WzZ-rxp0+3L3GjI(S0* zQAaB?eRUS7Wpft%YDz9vy18(V3F88S;@rANfOG1^xedf;B!l15&^59hlSeT4>mvSg zb3R(o2yzj9S>1jEoGVcPeM4%pP{o<2lLxP(Lf`Yc&?t`|mp5d!z|#DLC@>$H6!&Va zd%8R)?k>){_?py=oQ_pUnZSfETw#R%H9XdH&t?eeR+dd2)YpOve8=ay6~o)`^a+DX zmV!X74CERz8azGcqmCh-7VR?JS6AW1V>?X(DXNAZGc1z0KKg?3j~1@V7(xn&v^DBH z>f_IQBZ$U~J5#A8G7TsxbTi4Aoh~?aTsBr9jF;Z~jFuzX4Z|ZP$xYQYbbTrGc}9IH zla+l>ccg6#PtjQJ_kA&r{3Vj^AlgHMbv#-;2gQHeF8;-LrT_&3TSqJ6lNBBu{&ouj zvdbyZJhGPCp9Nl3%CC;T$s52t`WnRn>eSTKa>j!8&yHt-vv?n;$?@s7w~AJ!%0y-t z&;)x^qMiS}U+1GnrI8{a7IRnSF(R%qk@Vz+~ze9(M&A4@(SFS2YGy7&>d#RItu*uobkm6Cd`Mr`=QKyZI092Mzw?w zBH`~ug5zlEJzZ=#u1zgXZ!%hvg6!Y;?yT@HUS9UF^|p{k;XBjST`|=aqxI;aZbkQm z{+j-@tkwB=(M4=MRibUtP^Nry_PEHCc>G~QsK>j`X_eP;I)NOf)9h4Hj}od7c=v10 z?sznX6^ye^M9xc4C)>2FU7Y_guUXURr6Cl`$iNH+;YBvKx?kGT5 zaaX$@WKLfK1bJW}{etYz-?FYd3wi)zaXg@vGH8mWh+Y4Uv;}5_ND62P+3xyNH|}aUw#y!x=SpvPJH<2_4ZbNCYs-w~+@)ia>u?mGD!a#@2_4So zHaEFFO3%3*(g;vV(v=WQMk@7&53oddRU;DeIqAtIZmrR|pJ7FDhb0ZTY>Lda7z?}a zu2w`en2lFeWgCq|$?UP)FyM@)My3(Y_2EqND@0KM)h-qu2hw}@Wh#XQ%w?H73ae`Y zRcBqDnBxgRX28}7nl1nt6B+3YLUh1;f_Y-?^0_6PJwj<@EY%_ruBD&8$lwWxQibEu z%sOmEx-5DWaC!Z{)kbYUTx_hP4Xw|dX%T#6mU+3cD8px9vbl1Bb#0)LHTV?X9h zzFMsTt`_@sHT3R^9xHS82SX>Dtzu*4 zJN|O9Ip;%4nfdDI#XW#uJoRZC;cDX7dK<^qlyw_!F=<+wN{Z#AEm^_XBc0UNXq+|e zajE_w&I7qH>?&r)-eBMI*(v5UynAG40hEBG+;*{PDW8Elf_U*=x!&Yt;bv51W`%4j>Qa=d&ZZcgvBgo*rlab}~TEP=d3E%qqjXK$30KVqDk zb5K{3q{r)j@(PxTpMP!Igp?FFdzYx$BDVeUpZKx1!pQ@>f=MpOjF{mi-Qa{lwd`)M zgl|MR%_goR4uMQiuL%PK!`3-SD}s>cM<-QpDBd{TPkgLUy8+QY(-n<%7^C%K8ID^mOl}|!!y#W8(X|^x(1%-Fd5VQT1z~1wS{01xihKq)@-@gSnog0li zJ@D9FqGH}_$>PK-uNfaM4-9B-Mrz2tZVtTM;rNV%qlQ#hNk<#XbT$E&C)4Sn)5z64 z^k9Z`=|=JBKBqKcV@yt9=y9Xg%%Xt zI2}#O)#Ynum$DXUsZjAmyxlghqSS3CgL$;wu{liSJD4345pKOpt3z}o(s@XB*t_}o za3b76jOm{EiXZ2u?#=b*Fm6tfaM)h}A86fyw)M>_X?cGml^9*1Q; zrthf&S|ZPDU0(vlgvc8;r7j`&i{68?86KNC%%Y`j`&m887kM1D%|>|wOP{>Jq+h1%Y1r?QP;b_WW&FX)+9WjIj&&j0ezFSZrO7KZRwdDT8-4Z-!IZdl>W|8gbrKt zM{$mt%?tY+Q?-}8-u7)?Y^@twDt|bxi{)kdX((cn-$t3Pce9vlj}ooo5a=Js7+U2i z7%eD#4}KTsjSP6|T${x8#BXZ`1%f}N8!Vm6=~@wi70KH_&5m3I|m7QYw zd^X;#q1P+85;vunkOs0-uPXIH8{T<7hpQUphx%45Pjq}_R@;4&!4o@$gqnpyV2drp z@gaWDp7Y7~%WJdLz*JR;;j)~=8+4ruR-60w%QMtSB&nfo1D_`GuWCv+)|qH8^@Go3 zSi`VqXfD#alUae9T!!i~*o>=1b#i9PrYBK%c~vFR#=&8vAns_VThx7HLSloO20tmi z7V64Q7Z7!}tKdmFZ2Oo%&%3w5tsFT$(#^V>d&b{uXZYtq4E&c%7xRAIdBTNo4pCIz z?kMBSR0GRTrMD%7AO)epyS57S$PnVazMorLb4GpTfzD@++4-!}j=u~jpIbx4${gKd zNU4s&It&kX(8S%7{sw0hcE(Xf)%0g*ekGjYJJ0_t^+~JRhZlaPbAG;$v$r-k%t%v) zam?359gx|5W}z=tIeph!Z&GH)g$~wNWBoxX23$r~TuclvCu^J~>CyGg^G?ZKD#({3 z?$^G_yLv42Irym`4Q9+{9nE4O+E8B~CLwRf4L4cm1szTi4nlch{>9=6?|m`GY({J% z2cf8@Z2rft{uTaBG+e{k+^7WK#l$`luV9egbLV;PAbO|gJM(2;{|g&+X-0mAyZ{6| z4k3d%5qsk@KIOMNxz=ivq<{u_0mAu#U2T9@Tw*VXD*Il&X;jXv(rM#HK^Ea~!f`LI znp<`2c?|XcbGrd-J($kXy~{tKPY*fe=%~y)5A>qQ(#1eume%qC07=T^jTXu|A%VWR zSFy9+`F!Vfk=rMo-%Ombd{RF%QAP5%BYt<}dno%2nwlnOobV&7oiCxG9bbGJmuXMW zwo+@}cwgf(ZK|b2SCFov@$M>@gj@Z^m(ZPqOD22$j@KkhYx?L@#9dCW{w^^&*|NL5+hrjs^Il}S?nP%e3rObC8^0Ua`$STA6M!ziD0!)sM(7?4tA%zMcHOw1nQ# zoFu&Var78Dw2uL7f4-#-9&fD?fZ9ojofYMpNh(J}LpML+MJ#=W$x~}kb=P>!v zBZ&P>uaYlg*1@=VY)6^Yh$m_q3VF8sU@g^9#*9Ik3!P?Wu?TE+Wqt1NkRn~vziNXU z-Azis$gjj0=Brfqb~uz%8{9_pBV)%s7Dl~P88`(H;70wIMT*_5ix_%Qvo@wtHm;w* z>}@c+mYss8kQRl;n`{$mn_$-Zgvy9(-M4O=g&b23W`m2&s-6kzm)z!U*OmY?nx`nL z$>R2x@4j2!C`qv%jy^qDZlT86H!*Z-trCRZQW{VzbY75DGW0Ttm_a}2Ig`+ z-TI~uD?9M^EcP5kzbl32yQ*epW{?tv)@N^UH@fg@DW=e z6Y+?_LRy*w2*Ka#nch52{p;_~FE?PkVjnn;c4-(}`S#d!C2JZAn-%TG?Nf%HvX77~ zuBQx(GwQFg_48QovfM5DQQR|FrzvhXRF=}*=7#UvD0iHdUzPH#txI!}+j{nRWk#Z# zO=GRnjylVa+27aOw7NG*s3}!Cz&M0)O-Mx}UNvLvo6TZQ0_C)XEsy83yo3`@P6dmeIlJ0vLiVCm4+{}sLqy`r8@%CP8 z4vdpNU4^Vx$UAQEqYq7$(UueQmc7Xe37Z>RD22gXC|hHOw22s$bEaxKr~j0k>h7Nn zc!mh{9OlJft*)Svr$k-xSr6RS@HA%k;DU%zI;PViRoCwpFz_EKroPo#0A1sHV=M-* zKE69zfHnU5z4UkZi0v7iWo_4j3C#Dz(hl8_1#```!+C?eIz0Y|c>nJb5tGfI*0OlQ zXL_E%X#VJ5O1A`dj`syuo2od+kY-YkeP5dGYvc&Z8kJ0r2$>34R8AQ5rOJz-ODtJK zuY3nk?AF2_043*=g{o$vV4u3H_>bbmvR6+NP-k-H@FROnf;%N_^vk+${7RnEtEGh# z`#}mne))ZEc0f*h0lFKUk=n*F50ho@>D_};YAf~_*nw^blt#jR1joZuIiH;C!>T^XaBlRwfHzV(%% zq^*dr@K(K=h;27)X2X%uqg(P7N>Lsw-ww^j709Lm)^bHg!e#lI zHLYdj2cuu((z%P=rHL!QRdeei_7(k4UD|;Q}*l_4oRl*OH`1F$F{3j%$IHs zM)umCM2Eg>oV{&r<694j#uugjtbNwnl)Q=_`|;x^D7Y~Xk;XY2BDIE}d$ zld;ZLOBr8t3f_@EI+)GYFEGWVy6i{q+;qf#jbS}ezvE)0LEhVrz3B5vzHYXaEE)uA z)qo!yDBTotd9Hk_@_O4C{Ny;T0ZyFO)3TgTErTK&lm-$svoxT+ibg!SF>I2rzHxuL z?GGU@d5t$(r7ZM{IDCH-HYpw+T@`>v!E(HlA*vw=c1BWWC=wpR#_&qbU-XgHprRj$XQ{ zy5%k_Kp#-Q&vbCfP+k(m%qo*2ygZLlh+~DHtufU;8Z56kea%sBX*a)2Glf}dCQH^y#YUdklL#h%D2dbNbagslWODt=$9!FhL zUanQh*&%zc45)?vxVXaZ@9CJ``k-U@5PD|9=;1`0xEH=;L(E~|yy(m3GlQa&pZ_(^ z_ATG(k4^CpYPEp{+v~GI8b?2=ST|U%*~qaJVQ};!vuw;kYI8PmyWT?+2JZWNPoE}F zDZTIP<&8+Lim#=+Jf^VhQZ@%PY^?Vy!`#Oh+d&cl-mO{U2^7ZOU1JzhR5~LFqKt00y0bM04w*aQwC0jkPv&o4fiZYb z{hK>68aqT9t%~EPNz5(>5i&y!d{j09if5a;67SrcB7hlD`xRHN*kpJF=KjHx% zZr0XUSM`4t@c*3yfHyNn!1+Q*Cji&`7eMZ1@2N;C@%lB%rX-q9$uVh|7C~ z;KJ8KGgSlzH1~In5@K&_e*ObyC@i+--EzXzR{y$pjTp_qsnFGb97K2&lJ<0D9yj&;!Gh zv9kFcEF3j*e(VtF&vyae#0NC=(q&Dn9g}WpCJ*Z+DbUa`az*=Y&yDMipk;w>z7dYd zdFt$;h(&!TP}OWGYC|g-2mZhNh<^uWLU~Z}+&(@><3roTbOq4AEc$6<)dPt9jq^>g z6O{eQ2isO*>=Ff!0Z3)X_XkcB`T)*%-YRVdbWPmmS(1c9yhR)AU`q)A_}o4w7*;zl z83K%mf0(WQhaUs)so!|q3Notz?2G=!VraVkEb)e%_xe5V?CaCb$Mq4*OG^g;BqF_!g9dAe7HoCC;d?lt^26G?t0OR_imN;?kP53`?h8u z00rw02jITXtLzQLiF$cjtL~^6fSuj|CmWW4^@v#$A?GG5tWs(%fF+Dz=>A4b8~F^E zH^yc;P^WettLeU5Z+2tv){YWX(a994o~{U8bAs18;|xXOVmku*Sny6Xfu1)jd)k@+ zL<=t0alCT6srO73W|g^PVPPN|nZ7^e6IlNOEGxb#3@)JVUY)UF{*3kcL-5@|UM|{p zY1vUZ$#068UWI3GSq;>;ks5!u?fGMjZhi*(+= z%ww$^FaL+9NGn2>_2@_?(e_=S^JI1L^q)c$e*S96^_Jr*z`DgDYX@jGEs3z+HNF8r zQwCZ~bywEc?+O_fMQ168p8v6eQy+VSMKyvLPBXWP$m^kt&GLu|@2!n!gg$6b2G}Md!88o<0P_1<-kHiq_zCLabqPxV zy)s1MS=a%j#P>)cjNBq^Aq=rVF*MnO96BRcaFFw!%33tQ<>s?YL+)BLFQSwWxSNr!owQL;|wM4=Yq)HdAZ>o_=We zH_M?al{b@buKY5@(~`@6Q3pl6Dk-g;L0Vc1O?Up;+TPpe~w-9(=9+Kg(S zG?(fGHjY&@%TY^#6F(4+RQ{qg3*O!H$R(a! zpvUJ3Yd3ARGrnkZD~2sXw|0JtQ!ob$16GacZ-L7$v5Y^hAgd9*%yWN;v4ImSO?vQI z!YX5peK}|zt7~=FS()w6aG|v*Ty*^Bbk!;rsKdN31Moa13a^y%d}=+za!yzJ#{Q7D zqFvOegv02{^)@Nzsoz=edEQ2H*T1jGPQG&zK&(e{;bSR2B~K6RoBE zu}HsL8u8CELYXe~X)DN|<^ibz6!ZQ|yWfCWf%d{0#sE~NubA110YO| zptE#6BLF+B#N$lflbBZXczHkf#wgbxzB~aB&OU7eSY1x*U4LjFHGnQ2K>JWCZE$EK zU!)R0yLeOO5OMBz)G2wmwAZO<$Z)0?=m#($p2&rVypKA!-Ph^-rXDGyKv^6B;srVT%RmG)b_S7*a# zg}tA=H*v<)R)4t@t$dESDpKQYP8`M?q9X>&tgWE1v9}<1a9C%EM8P)lV*hwyY&Hm6 zuB0gg->-Bt4c$$BVDs+CupsjfRO=X1IvUV7+K1J<-5J2x4?bdQblt>0Z?dPx_;B-W zPVB6!Jn5f^>&9({>}_P>=1*}w`-4Hqp9y^Lp9p z-&Txk7|j`$NdH9oKJKv!dV|J9pWS8&uFQt`0WO>(Y$3XC1OD;MW19K;+3C7~*#?lJ z$DnUgmOP-T(2#>~?8Tuw^BB3kFco=P$>drOTnH%2uhp@5Qfhjs&vE@vBgIwm<#Day z5dWtkG^0TaTgDlUHib_P^x~UB_f*XG0(TRmUd9Kw7GIj49Nd~=F`n@cjJ>ouS{_-3 zA2N^V-`aFC>mfcEwRTnJhSlM9xQn)BBuYd?ED{rWY85B`VrtvL+w0!Z`mWoeUso93&Iz+goiJ&Xv4~yw?)qj zq@W4QTpn##3*!s+*gn<>??&{dpf`gEb4Ysh`HVESe$Ccz#gJ=O2m6#)GK`QW{CZvA zz^fnnjNvMym>P$HC*Dq&uT6?A-N<|7{7?NL>6g%%U9 ztel#%E@p~{>tA|agg=vATwJ_ZJBn4zhwsh6c8Q!{E#&wYS{ zgA3hltDLV`#8B)ojFHd+mwqn^QiK0$kj;C%YTFdJaS(kGSM^{DUAuWtqa6gT@gw5% zwVi%9ZA0Hs@I@|YTBn!$0Vm|Wr2SR#kH_1@3#fiKVK>bf!&Z{`EXIdz!YoBQgD#l* zk(bqlfZQ$0_GT{!Cc>@p%#Kuo_6gV3c{4D5#-=TfFnbmIz1@cjFl@SiVTia}sz{jF z8gHh&O!S$bgos|Hxc-&5{2vSM(|k-f=Mb|N;ZxC$4V;z#2)2LA$fSH%~IHU6q zx-d!3r-b#AFb+_`HVa3_XJs)U%zU%vsP7ZwNP)lZEu50Ps}X?k@xOT`H;(T-KlvCXU2&JjCkDr!Occ z;sBN@N2ou27JBf;2W3DeCe51TWStj$Pd>Rt0Qe@^>krP_veS(zpGyC#q7fJWt1r7U z`b-QptEkeWUomosC$+9S+ij4#EZ7J9P+jqtyLy)X7fC=r3VG9FvPvxU#ru1|^YqMq zC5tEQaf+EcPt_Lm)!aKt^xK}g#+fc|);Bd+g}>o9e{7l?$>EefcM#L|db8*IV5Nba z9Z=`((U}vO@U>;+no8j33c~ISmxwtZ=-3s>pGiyQ2S{Cv)(`O_mdWjr9BQ(}l|q1( z?If^)Bn*%dBShA-Otda=&z0NM^eiJc-&)1`f0iZmi@iCx`s<5C=>FAqM%=xH%pd-6 ztqdj79YkgRz*mh}Q-g)$MkJ|W`&^dGSSHAQX_#(x)Hd_+b8N*>T%wfA(u41q%&-Se zhoN`Pq_z9GouXap)Ivw?H}Y~i-ts)Je#EzmE)E_@OK?g$-=tpmu}P!#N7y%we%R+p z-pgmlC?ib?=|n(SVj=W{V&|>p7%>&P-Z+Qhc))k>*J^A>jv9G%>3aX0VD6^y_`AFo z{*2KP>YoY^&8~62f4TLc?6bhrSF2+MVfEagF$qT6t&J3^VJ|>H_YRyGwvw7A zFqQpCHtOn>wxD52$+bDlqwJ>^lr!#OVvFBikDs5&zJ}|HS4apr#D|;L`Rb~K93;n* zf-k>wbAcVbzDxmTDgJ3o)>pcxE|r^+<4LgAqe65EzqmoI+dFhfqwlu)=5(Fiz@vr0 z%TZjAcbO8Kg%RqtfO~*J!Ek;y-t8UY{cMNd)?wyZ^(p1L9oF9&F&2}@62veES3s@B z3xDDBgH^GW(vFaa&L!Wx15ygNuW{Y4Y|<|@04K|N>pa?U9xv^?B}pcr+Qxv{%1q76 zVqUPnC+0G*&0RahkH^Xn1GZ*Lo_V;%ORc51`-B85s|(-oCn^N?kA<~`E_UUFFXaGJ z*f*}nWL*qR88y}DNMXXB%!hgfK!-oAc~ZX-ejVOp6(Yv=`JF)62LWrr_vbWs3ZLaD z4QUU&$iHQ$b#mKo^vN#bfq>m*vE0*qcA1ZJ#eTw}=&C4azrs*sh#WK??X^GNHUViO z%8;kgeto-l*=W;ctO_hPr#te}2QcZ7o%=|9q#4B>`s)!Q-05VK7AWL5wZ|VFKuxhC zosh%#%gB#BKLfmiOE7)qF>NKp)8n0eHQL`^iH}mJgEO{*ntUw$M{cCZIn-ld-8xw1 zB6NAsr?5@YfsW`kipaQ^VN{NliW}*LYT&qUWW(xxaf2y%x(BM0Jqr-_gSftK+ zRa3_eFc}?ir=+`tEyR3V0J$>b{^`ywOL)RW(5~T15}s4!ADQI8MC2 z;x#VM-69y|Fj8VAgh}uRkq@$8#6xAE1x-GqF3}()1m7t1tzn?b0e^d#$rtd@{yUC%XaobSt_*;p08X2NSjAq!xb635F&mY89 zpCqg+Tr!rICOMx-J;a71wun)aYEvr^+7chblO^?i@{KY0UeyPp|HTZmd&LmIi#nMEik{w zr%s<`diZ}|UKpLfG98zeGm%g(&2oyt6ez1u0Bz3i%P)>g{Po-I0p>B~Dhi-kQ~_J8 z99;d2mY~r(4_giy_isYf&^(#-bs^UZ} zCJ-dRIoK2syF04Of4ukM5^sY6(;h%SHnXh$o_-FucrOqaf>{fK8Id1GUMz0OiZFk> z<#=-XP0Viy0=sx-{Q=u4JqO>;m!nk{LMaL!$yIMK?djeowU~aqRU?T&?B#O8(*I;f z{PI!F7Sg52X5&n;=47N{?UR>mJ#S_-jMQA7PeD7muWKmOXx-y1@*xICnIyR{9_dkE zO;6v-9VzjM7R{MzSRB~j$B9nXh|Cy}GyV5_n4=P@RN3k>(>je!8 z5B*4`B(8+G!e;zQ1ayLCnB|H86m_*)1gw+Br0UgSBXL`)LZhUi-S$whS?1+jXf=Lc zY`<%8$T+VoIjEne)@pdHv)8m*y+*wsmSBq27^3Rv5*Q4vXu~)3PjF@!qCmAF9+|8=rtj3elAn7B>6O6Jq=xrqyre zMfN5dO1fK~U&$G4T~6yk>VKL&9RwA?d9QqsE1p1+O-iR5#w(s#p3lsi2#Koi=&C>U zJ!mZhDmG4IeNkrJ6+$dVV{pYq3>f52dTBP7L{fM~H%o8?LstAcD2u=wAoBgcv;Y)+RAm*dV;U*#Lf%#6@+Y2T z|7r6Sxm^v&Vp>$u+P>f|>#q3Sq!uTmjNmsF7GHtCW_*#h=*F2+G4 zQSdi@wG2pt2$A|dFQuq!lPj-z6|o63DltENN9@wKTrS&;o6vQAM&RJOoOF>}@9U}$ z7REbEu^p6iAz?X`F*rSN*8o}DDi@~^uTFN`W`tE~S!nMPkAgYsu_>EAL8v#e>x64l z+Ch|CW{Sq516~ZH0|{@m@UZko;(p5J{f%y^SpG&^{`A3K^>`7Mq9tyFM+z0~fGJz< zq|zt;S!~5GnA(pq`OTu&_|?bwfw~IRUf{G8=;-ba*C?CTImWT=pM|f9C0l`UcXh>P zAvcYQOOu<`!E1R?6N8c1a~5u47W-JvCR_zc%1Dn0(p>a0IxrQ$83~W#WTdB8IckFMQQ8{MYkyP#l^iZbn_hniWOFjibtgxhOYZz{OP4i z!RM07Kd{gmD*9l&62O*)hQdwe^R!@(UI|$GsDY03n~5A!-FkWV(OBL2i-mV;uUWj3 z8N2Pfr?k>#5R~V}%@Q!GU8|WcFY|m;CSW@GVtU3D;kDUO+bcO-Q6=M%fu)HOu33w6 zC%^cU4Rs@dCo%}b&TJwalLqElYkJX?%n7;}ffH&1DtzR!a6s#1v%>+jQ8^UA=#G}4 z3;Lmp*|`#!NVPbXAoZXcq5iP%*gd&>+IPVAp=Jgt>CU|Pn^39oZJ2=${vlB%2G1s3 zxg=~x-boU?^L=o8cE6E+pIT{Dmf-z*0WFhX0(QzFe|-{d;_+raH%8N;?nOy^nPyIv zEXkN#N1;MP4mY;?nr%vUf}P9XSTIF(R5x0f_Q*aLlq#xQ{!Y{PWvVclV3g6D^DKdZ zLz0yF1vDmK0WrN{h7~zllHtak7X5lo=Ur(4qe)D$_lIs0eR4@w(9-$Nb1h)%&%wC`0OwFT^ZZdk zoLk`2Dq%A*n`08S?n$HUu^;yfBys;z4Bz=NC(n@c$A+H7bw81nd`4*8Pf9VpeL)WU zLWC!~#3c~^^)v(fPk5TZhv(zgk6;U8ZV9yyqsr&7UV)m{>bVnNVv3txeqWSpNMcM} zJw%Hj$@$rnq-K}WqaLnhn%LvA7M=*+d1*FLlR@}>W$>$y&fmEliqGI4OBUm(?7OOs zy4P@8CQ(X5Y@(*s_Euoz=WZprVQWX4K(Mv<8duB;DC_PPTf2hY@_t<>^wO(HaWFHT zAq{j*7h%$<9n_3il8}|(s46DvmK(M=RvTG&N-& zBUJTV5V31a?0Nw)Ba-=SSd zoI$jcA|$5qeP05P@9JxrfpdKd}C(_Jra>sryh+gDF za_shZs!389`fL9m$F#_zf>Y}TMiz@_hGdC=`_kihYGzq}YGfRx=<>wuuEy&;LM!>A zb|HStZRPMio8`(GTyp$&PJ*R9n}uf#WkZa-uO9s~mtaSG>+)|JKa%b#RqpGBuW@l` zbMEnPt^)MN;`A(nuTm@|ZJ4$U?$v%2I?Y`v-Y3()_MXc6y~V!m@AFrt?l=By%p3k# zJEL36;?siGPX;|PIyXau*RG7Z-H3~7v|5hcP)*QHvKLzKY6?jaEAvnD`Y38uJmVb) zB}Uwxu9pxtYtosm6zzM=`XfoFZV|!_YqjNbnNE#w^nWYVYvP;%Jz_oIx;fwFC`5}O zYwVR>@$NIRn-z_598YB}1z509@Xv4-pZRZ_v`Zm1zq&wHPRx{K9oCGAZjn;ZS}u?G zGx9}|*oGJh=fSB2O2mj-y`KoL)S&tJ_zEj1^!4<>WJre47^KfG?Wia+t==@kl;&V{ zkZ!X=u;!XGpT-6YjGb=5erYKp#e5V(LI>2xVPac#(SVKvVjL4@l6f z8hm^8ZsBTEvmpbnIS9p+oh(cMbRwZQJ>Y2zg%g~tBl>;p!ZqI<(d^>qixN`_82w{Q zu;&N#Wej-EiMdA`h&+_YEbjVVOkBqn_QCt}-!M(qvFql~{nBVUm{CUOcD?uSPg87T z$(Pl~o|5S-mA|i76m|Q;_Ty?O_*89-1HoSELJ-x5DA4X#QAo-b;aXMjH^lM=E;LGN zz^hoVCS5UJbP9+3TsW2~`uyDv>xR(Pi+&d29Lo}J`s)d&ng zWCtLXo~w-k-`8Dj;efE+&Vx9J(Q9j|n019LFG|AXBXH$Nqn;)hc0Q=dgpwi@ho$*j z7@C;;9uOvV`@IieKS&X|>Yxx{VQ?+?XnJu2>tqL4RKY8*C^keKhg>+eq>bPG@b}3U z2*u`-D^HGot(Q#c1)(lSY!_O$Ty3GNAF~eMJN@E7xp^fr);cYhJ@c7Y;|c}ew@k_e zjfWCiLM6*0d6O)PoL=>Y@1u89S6FakNeLBazidD-1{A2>sA*P_c3kNv=dLdWmL70L zGiwcrC0hh6;h^V^wQ}`_Z-bX2!sm5GoY1i=_=^CGAD7El)m~HBKr0?qwIo7Ykb8gk z*tmL1o1d)B?HTVAs27JA=}$p4EL1onuDTY-A#`|_md=~rvgg)LUl7;h@>_eqG0){v zE*HwUo05N}I!F#&cez=Rr68BFjvsZHd?!}TI%`CP+qY4arg&$BU1-0xyQG|*jNb1y zy^guP^Rl7*;}?qAbVQTyTY9d$hp?D_uHn!!dn{BAtGL+%SDJAT6pFz#JaWK})K@ti zNi>w6u*eO0O*zTczWv^17XoIkH#DoEc>?A*`IXe_|5e zemPx&%j+?du%=BAYO2Z5+6SKjK=zBl#33iejSB4my5%Lc9Ek-<6@HJwmCAB*At;)fn=lmd}`%Nq|Te2v_X;#ZuHcF$Ot zxHf8!)^2YEf1;>t9%mU2QLiSrz%AZ9TbiNde_mIbEcXj1f1NM|e{3*FnSVCFcf7pE z4E;W}GUFn~5m#b#$0MQ`>KGacV>>^nLIZC@EIuYC%v_yUxLuF^IeB~hNHa_H?GG~| zS%p5p&qo+tX&OOcEcG#$Y$!i?1>`xczvVe~C#1OWI7JQd^BOo{2}pAZSC;ypcAG!5 zZW6qM@E*LAN6z@UNyvv#uCwiF?~^`lDvp!jB?k)ru|N7Pbjk{auqQ1@W~U~0ve~j; zf9V#}#V{#J4Z<|*u|o2i%hnwHv69z;1Ml z%5#iE1&Jk{UCuY-h&B6p+oi#4)Pl<;x!4hhDFqebLbwND@4-8Z7s2`s!^155>(y*> zR|!SAWp9I@&vQr~%}0dSiKhOvPx2G~F_G@~56fHH*D5d6?4KD{PpeGsZA_vsQ`Sq$ z-uev8E+0B;$*z9$H0kp@ekao+&s&OzjX1TnGf1x27dnl8va3F-!LE1P>1}N4)*M`} zn4MY8PdPU^teso?b~b`M3769 zmVHinEy>mGAUY6rtBA@($|A#%3$)tq{GJA1*QSM^>f=tJ>Z3{EwlgAv<(8nA@{g&ogsc+VNsYC3)-A;92842aL^{@#MlJ)$z$%^deZ8dImAGrTM5sPDx z$esDlIXQ-7Hh+kzvUe^TO&U^^g04_{jXazdN;w7z25r!Rhu~9*b6p}roq4AUgEkQj z2dTY>?jhKvlTDN`Msh&=v!5D*8&*=5I06bd;WWAo4QpKKy5!I^pULUk90=PP=jZZL z!v5S}kF|o{Q!q|n*9DQNeo}lQ%74af0yy`UN)ms4~2LZxf3;jSbR-P@Z?Za_|-!Zu^&p*cHq?M$PGA1 zhf3JyQeT6V8S2~FP?HJbuU5Q{iNWftx8)N4W2;&g$s@k|83T_5Ri~}`^ePiE){3>| zP4x+i#9^yd@2vAz1p#$0&BHCI19r}pd=N}@8u`c)LqrwW-hx0?i3#I`?3yUT(N*Hl zZ~eK?B;zI(oXH87Ulp@CSe8S~im=(gs>7->UZVvXG|S2GuSCysVm>OLf;a=q<_qekSFAttL48QJ>M$Pu!9Jy$5 z&(LX0ID4IyO$YVOi1DN$qx-W#v#5D1T6F9f>6Fy(I-k1+HK1 z7hLjI(r+Hl>=rym)bw`DM>2aDe#C2cg))&5GH`~JA*_bOjev7ELe)Ge4yn?8( z_m1&NsG)}JH5d56E>24NhbmA7<8o8&3NVx-Pg#18!u=0d>B(U0Gl<%;h$O$y@MA14 zlypk{cmJ$r3YoDDv5M_KhP2(2qpY8dHMdBOv#=4$|5S%vveCc3;!z$5=933Y@IU!- z!A6jy$hJviqvVp*VMe?NZ&i4Au2~bP`1;DM+5_Tp_DnJCK}eChG27il?|WsIMlE6+ z6#0ny&QTb(|IlIAHM<#Oa70 z^dyUsj6klAc0y1y`-9CfX|-WM^a`7D&*OP8Qv|I9KGyn9f5a349yKmN1PziOYw~@i zxmY)@?a-qcVFV*@Wx*~OHFoSxq=+3VG?|~S=h;m6AUd@{x3t9#;wzzfeK5a+rq`0} zxPxjk*B;=VixrxO>X6oV{SV6zl@x*4)#6V}-8#PP$R;0x0DmQ0_%?D*Zr1j-G;CRQ zFw0H8CQ^rkFxoZ7)`+T-O_%eL7Qg2&G=1OX40b{FLdSD-1|il!Vx3{Q4nOb?u>lJ76H5iUw@4Tkoarry0y+5E z4p`^3GGckaDt(`boxzKxVXLGfw-kO%z{}CC1#xgv6QiW_SoDH`@uz=S`aWEvqOPus zC#@BQouaBUnW?F))p7>CzspTl#GO=QE$aTL{FrTj=HsOV;Kg3|%Pc-7W7YJWT#N?2 zF(j|e;LT4~&4&zA8}1Q8w)tWUN_TpnsNH#%zn599m-MqoG9oT-FiI(@j+tekPLj(CRD`+)XXO>~=upq#Zsg^-hU9#8;v!c!;sKZkDz0#Y`hck##->Nt^ z&hNze5H0C4zR>O@8WY!BQ5n&f<4Y$s3VAcNoXH!PVd%GI++7*T%{UY{#n_atPpa1c zKA2Sgbcyr2_TGHFW(rjGbp!6(yxvpn^BfH|m*gFf!#AC8sYH-|wt(Y>W)5B-?4u@` zzY$CpgraN+Ydww2K0BaGAjUZ6k=n8ITaTq0`_Uz4w$|obV%PQQ5D7`>=QlaxU|?K{ z)mNxWQ+(_+xRr)oA}xt*F`RoXqaK%a8TCv33{K&jhk&kq2R<~jLch=2sIe~?noG*3 zv?EVyWpVfMvt7peGxmeS<8JtYiKZ?TLVHW@{s2yVblcXOVhnwgzDd38Dfdfj-Mu_* za`~%oAzy07`ZOz!_@>-xZsXpp#K#GNafsyfjxS!90l8IBDBzY#e|)YDe6~%kfjr)` z2afLg(I_+xc@(Fc4k5WgW(ht=`0W9hs?$fQbbtG5W^U0s0&YL?2tIFxl z)cuYrs($5seWXZ|`jZ|5J5K)94<7M#+3RQfOLfGj4sH0h3N=}Z1kG=G&lq*jQ*%@~ z+9n4Ty+3b@kr5(md5ZixdPV*1GV0v?^%r7z=@gUMuOg)@usI1%aFNxg8d%X`Siq}d zZkIoER*i)(%rKH~2!EK?p#3gNN>@h-zx%o){%_9*D#J65`U>WMiWi+_j!5qNTkij) zjUjvhReutqCKipsS@YaQ!j4{TxES?n)MBNHTVRZDkziYjtC`PRlDpPdw9Z$wZP9M` zI;o6w;Mf%^QhV^O*psgpS?^|4G4UBQ`HI4&S*_V%^>pd_v`9?NXn2kMG{n=zXbxU2 zWP98|-zn)bG64fu_e6~sua95AuRfbXKKIkUwL6jYADMa_s337ZPwMN!$xJ)EG=g6e ziJQ0O{D+(0AguEy(ZP>=MMe&2#-AN^x|r*G;q3W3#u^D$8wyYue_?%e!?+X_MSCNf zNL{dj%ouU;ebYYk1kiu(yT?r{U{w~wF@#dDvaj28gdeZ+3mKsrEZhhL!xn>`Og>f} zlZ|3zPR*wcYd&yOUhV(3 z^!~i-?52XS^r9-V*FE+DIq=*;{nJ5Be(OQ*vj26M zfBLfj{2*G9n)Z09AJ=EX`rC*Xf!%?xSm;`OKCzf3| zpI-mKZqqR$B{y4&sp0ll{p%R|yDss6d=U8KZ>hdk$c{0{^2uV1!P{cz;@xDV_syaH%5;t#WkJt5B~7BM#UZ7CDU z1c!{(-mw>qv`j~sGo9;Hf9+WRJlTo&NX4#4IyfV}=$ zIP;V5!@F;5E*C{JgkL#TQX|TjSrM3Sar0k}zXiR(pu^dQ6B14oLKrdHz`{>@WAh5{ z!8kf;X#=b`+UU|6sXbYwghtT3|9 zY!e=B*xKpQisF#!J0@dKfOgc77}72t4d4FBwz1v8-MzE_-T7eOu>xVlXK8jHTh7?aK$=g3Hn4mIV!+}giK3H;~t$B0I6v|s_NbL*=oM%L-#;@HUVfZ zQ)JIy7h)>5CS6nT_x$F$=h3fVD+QQ1F>uNb13L#5w($foY_$eS*`M5)4dt$8v-E8t z61zp4#z+Jlg~YyGYuz31jkfR^2izlhJ3fzutt#eJFS21%D05)@Klbfu?9D&- z;x%7J8zo(8w5XDPD>6**#JoDcdrjEI8$D?g%bIL~yZo)jQ9`abY`mi6x%c)>8*+lA z1NygP68#NyN$Mz0$)Gp)_EYD+p6&Nhadv;r!v8!ibf!L>?I}hZNE|C3kTTPRCYI@enihj`K?PphA03_k|wFW_&;5u@O zT0jgErgd^m*;q<(k+i;DcqcPp)Wr616);#hfZpl$!9s~u?u%WAha-h~IlY3$MbG8| zh>S^^tXIGm8c|Afl0wWIw~Fm0)qd_n^iP+~8`_1wQP!5=sJE&fDVkANI(b>`R$)@3 zYD3tUK(1O>T(V8Bas}FZ=bNMzDo@A$o5;Tr?eu5lrvWpQW}2+TnYUs=KGi_8c-$xJ zb3Y)+SPGDv&U}0n3ReRdaLhqE3rjmIT zFtqy>*P1@Y36fS{n7nS;r%Q_>$#4H)hQe)A-9qjpUcaukNBRy@9J5}xxsBYf_vz7c zw>pUg`E+pEh-##4Zby$J6*m*Pp9z~fdk0ObUTfCw*A$|I>KRqQExfnX6lolO!iKj8 z+#`W`UuM}@`trYglz|pPz(fPK#zb=B)-K^ga(gVR<|F0$6sw&v6CzDV?kUo4U+?G{ z1!6@}2dx+7fl6EeX^+#c2#7?&?iFd!+y~yHy}qNoXD{NCMx|TM`vL|Vztz78yfiX* z``PE|pjPYVC(e8{(%0uTg}*pfHVK}p1>j}(kr?Z} z3IV?oU*~&Z!?s14iVFcX){VDfz4tD;sQ<5LO^nw^z~^H3+E4b~8X!Z(U<4pW*0~ZQ z2&z&e3$Hj~%Z9O!fHjHp1PRab)O&S{5yYCWL?R<*1F4_V~#n76X9o_ zjniPqq|a3UBIBQ*bx5FKtWyg78bM+t*Db_H1!mS%KhVjt)p>R55NtuVzz?MB;+%j< zZRrwMg@$3vOiM|%kl|C6N75CC-;B*k5g?YLPN8#&l2+3uuJ00Y4EIxPsm%sjxPY?<6qyEK%`M+)Ue#*hUQ;n|l(iHzR#!dqG z?yW;L5|V$slIrBjFS>Kg|1?VWDXNPHeFPy=l7GBX2*l@oRQhi{{^KTpF_e%%A*FT6 zDfnrUf4s7h9b747a<`xK&r5^!^kx%ym4U~XN&X=~0#}BDEC1hrpf9$*JaDA}34VP` z`8?lvH+s!XsRSX_+ z@UqQu<6RDZO9*a=P3#kKOhYklEd<%lnrA%w7=EF5B^T9vlnUr>Z7~WpaSx^XDd~CR zaUE@>f1Hv}KtBG2I`>j17a7C0+z^eEflwPN`WiHfp3g|E?ckf@kt17>#EqfWDImsc z7(zxavYljXTWDM}IZ0d>m3`kP43-D>?p*Dq-@g0KHZp0EU0DYN|4G8dYJ(ZR*qK6B zGbP_{eOO)AcERDQbPG?`!O%X{x2jAberzy9%c=W8tzW5Vk8HCZX4qMq*e%VX*_?`u z#HtKE7SJ9-O?GV&Cf1;%eFN6Kvuc$lx@O#fhaZM&9L^$&j1S!)5<6<>O25dFLbE=> zMZd%ZfrcdWqjoggXvgZPq~o|%hNcu^((l-^VddvmQ9D%kB-QgG`nA~%9JUW@M%qN6 z^G#)UgIB49;MVBzMtVMdROkyuqi>LIP$-yi0=y!LpV1M4Q~IU>unaFFE{BoLm!2J8 zX@9Yz{%3Kp%aT*tVER82in3h*b-M_3+v+uVJ1G|ViJiVUT15s#G9{v#m=3sa>pLAz z9oMpB5s9TD zdI}dHPEfd%)K?~5pv%L4m;aFrH&Q`Y+f9sTvK=cD@eOOZX@9SS@;Y+}R`Q3NM&{-V zafM2#Cxb*=lxAVenja?J21#ApNfB)BKko#eRACF632T~os4%%tAjW89NT4Y~=(lwP zmQnhStsmGRrL~x#dQ?Z&K&cNWWF^VTwFBRUF*o`c?uC0w4w=}K+d6>h)oGDqQL{Sm zXtJ>g$;nIX1kt?<|MO6Ou_JWagfPeL$=dW@Jz=hcu%$Cj9mLDga+{qQ-6SXZVh^RHAP&9>0b zOm|Fy)g7OSl)|ie(BV9h2t3VJf=|(`W3)fqIp_57Haq%s=2e1wJ;dB&o?PLE#6&Mn zQ#Fwrw5jTOD^E2Qz3y4i)xPHhyP{DzsZ6nt$@5&YxDW;DCpVDX$DHIW9wwZwAKncx zY|Heh))W558HukjG3*`=TAxS4jM3L53)VtQMAelsY*3Tsu-5M0DCfRZvGO)1aZlnc z<2w5)UH6Wf;V892{I@qKM70K$142yT8N@7R$Z>cgX4krVd!$*=lQ>mlM6X!l)srh2 zD>o$L^=vi^S*$Cs^|L;V>D1mla&p74wcA$@W|Z@R%Gs7b2FI}Ze-P;Y_oFOUgKXnt zV!&?jhf{D$G6J9#(9vbecojsk$Vv>Ucml4zF>r)%Y=6VZ*p3ODdBG4^>IV!Xyhooz z>@|bb#joLLA6o>nEIpvy%_QZT?X@;J;aod&26U(=11E<*=cXOKlc3YdQ@I#){}PXY z*C3l{OC!+Tls!J!f=orQ`hTAA!(`|I!S#TZvW~*PUsSRi%vAg2mi*NjmpNSPqE z#8o>VPT})=TIAP*uf5gkZ{7Dlu>7VP@H6GykrbVyUe>orhAkMsar2jGyAio^|D4wW zD!KXxb={hZ2cuhW{eIBS_asF14sIs~)!fSz4f#{-G^Z27eCdE%RaVkzY&a>9h5|}Y z*Ke;qtci~;#bd|Y5j0h>lIAfps5FE#N6#0$h$4`X;9E{zFaV}kff5^xw&^n!5xSG9;Q$Yd z=QaESaeEKwPH>m1Zb58yh?gT$<~Ez6%RqBqDZAKh%WdbeN}hM}4S{=E#f9#7;q4(5 z!=52CKk@Uue#Mnr`rb#sjv8omI1yQlug)2YssT_tJ{UF&9PjyDW3Bv)xewI~NmiB9vD z6q1yR__yI^V}{!C=LZ7j6Z8wgoh$4Xwv?o*DqLWa=(XJqM^fh!&@PHuC|Lkq7=w-T zmh5IN@PTAI(4E%Tum-yk$X9^RfmOzd??i5JX}@VoJ1{WZ?pf&1aQGL5FkpmVhLwzY zAx&*H751#G(15~hkoPbn(9o{0SKS<7CpAnijX&0E{*4mtIWFACsIyZv7hfetgy%sRrtZ+hYmM|R?AWR|$tW@p8)K1rYHtUimw^2~8bbJewR<@U$d{ zAJ63BbC{TRH}X1E_PKwGJl93+)or+p6~Ofx$_I}}<&O!qY)Hv+t@KyGXl0*6EyyhK ziQ}A9+AXF(?X07gWYX7nVdcHb+WEHDNA|r_76;}6+9YCp8l*!2N4sH4LO|JOdF7;+ z5JG0MHOZ4=WR^cq+s&0ZAd9`1a+2<4s%UZpRYI$-%IrtJb)hvt&!PI#jeDcO#bfo< zS6*TxKyZj73WwX;4S+Bo=;uKGnZCDa?w#6!NJ0W4`70HJU}avWfAG-MUehG364`3_&d}7vC>(vM&j<`O^7E2B#?81H7gVOM~eMYP)674Q(3||FwK0mU8`u_Yh8&j2|c)UOe8tNq8n7!nXfe=VT z*_q0Y4KG#Tc4`z{E%#VyCx-=BAk`q8`g&$6FvirQjho@LnI$g9A;CFg`c*p}jS)&D zASHUqnSmd=(?G~b1 zM2tG3m~43`3KbIh4WD+f_@qMsPK*EsjR624JWPgHIUuVe*r1~TI%V*Y>@L(T#lKZy z-5?zWN*!Y-0O?6eZVJE$;hKQsLxRRE*c)3ZpmqH!mS@+%sVD*LcG$%9P|vDB3^ZZO z7PODbtKQDb@dhXws+FR*68d z!}+w5EejXk9A6w2EOq;+D$elg4F<+P?S(z+cR#lT5I5sF)4H4`Wc5huMO$#9 zMq^9RNOKsn-oicK6XLjT>0VNrDvsYlL*ctzY@eI=!h4DW_uSte>G&Jvd{nFFB~7tQ z0|qugrsfmc)~4Fl^iT1Yh0j?lY%=^uh&g#6J+rQMF04H0W7ro%WhvrH1;n)ym0+!T>lt&K50)by0Hj!Spd6xGLnn+e4S; zJsa(OJ8|o&aC8a$;F{mH(@^o-q_be!4$(a-Hmt~P+8$KHBaB`4yhPDSWHZ1(Ai_!c4>qEx9=_Vn&hpVrcR2BU0kB_9e9Nt-3VDeMJ?3-zUQufuTh zt%V!Vk7$f}Z~3{BCQA?jmwhN+sTTf?*F}3ez+MjD>t&>4Q+V2pGaNSC*-A^Pwf{S)jW!cs!aGr+6%lq-2wQN%if$t)*JZq6c_@z2i)##jAYa)IbdA{_XnaehqYe-@cv|b zK?1VBeSS-9b}mj6Z+Xf=?k8|eH2`WahyE!z81Rs4X0B>K)ctNcOYQJxj<2}(`T{iN zRZHgO(ZzB%;~KdyW0lUC^QNo;+i&&CzD!C4tRnFPicIR(1>k5mOe9*~{?qGcmpn_? z8y%)jx2t=vpj$CQO=)dKxZqP^IaIg24vZY}`SHi|rufAlZ80UVHzo<;X22y?BV9_k zTqB(NUGH}V`Z*RE&(CX`^Vaaa1*WWdbb;>J=!fpJ(8c!=E1;&}nd5;(rMWcQb+85$ z0({KeEkHlKy!{lbLSQY3f8@)}Y>3xHtX{6&?#Q`3*!@&*JqaArRG#u>8Q@qRgFLyx zCtW8S-8|DuVHi{KusZX2$p#lK-<<@TEQ{y)31haG_37L;u&H5`qt|OI*y)b7x-adZgD#sBDuxhx;wrM?cC4@Ji6wxI>!2iUT$So z>!x6`6^n8&4@35ItuJMH4n6>hgh-J3No)<+D?~>V>-lyEO5QA=Nk0kuVQxhQ*HUm} zgHqp4pinj{LrA9zM~>b99!>tL#uf{bA4d-XS(+xFwMp-}w<@WjMGbuGX(L-kK>umr ztL`m{v#hpNLQVvNVi5YZqMiZJjykyd@dsq-GWVALEY3!vrLh9CH2RuO@af(0+Rq?o z`fZl_uU~XFk)f^}&>LPPnPg#v*Ad>i&i&IMgOwJ@%f)xo_S&qe{^{eDNJ0$AP$CO1 zg{Pjd{;^O=Lbhkho_5c%Z*9d;<~W0;UtCRAqx@3q)J-M+e<}4fI`(3+ z(C8_l@;wJ6u7BbOLGa?UQhhtw_xKP*&0Q*(cG-vdc%@s`Sw5}ba{g)T<=3-Y*7|6< z#*(EyRxnXa6@%nxtB)y7a>@)*bZn(epgT73kO4`fqpQNnBe^oV#ZJp+FdmJstYSoD5#KI%q9rLB8t6 zlF(X&P0fg!cJW@WaQX8n0=cqDX6`ZEVivWPV1)b4E%T8SV(X>}Qx)PQCQ>oJ?$-eH z^B@GMB8>veR>vE&6joZ%BfmvCHq(@ZC5s(^$yk8$d(n@;1m{(^R+nm9)I}Cik6i9`xi;> zf6ZNXNy-CYW?b#RV-F(QqNR$R>&|bG8BVnDW2kL|1(BIM8!N-h6cbrKfO(>)(EPC1=ao@qBUd)|n#t^n zlx!#*^}b)>QYR;=_2Cs>ozA4(&fMD;HNRgbb4H{IPy}Y>n$g>ErH6EYQ$kxp+3~!^ z`SLE<|B8TDPD8#={qO6b>}ynu9(dpeIDbexf8HbK1mX2VNj*DV&ROaesY9pGO1wL+oRR7T;HIm%tryxf&7xJ8)bIr)G>!W3)LP z4f^bMo`#yFA|ftYw_vodgUzL;PHFdf7W8$MYG#Vcy5xX~ z>ci82ivGbp_EM$GI-Ar-DR`t*1=M@V)n?N3t^A!N913qOYn1ZHg>1H6Kr9EJTKNPJ zmCkcqqt}w&2V&BtTX}`qu=<71RBA1D-wU2qUzg;(Bzj4S9e(Zr7}`Neh#(|1eE;_g zErr7qJ8po%+0su$B~&|*gNm0EAY{}e2$@fUilDs%qPUDV0k)e_Xi)Y=HIdhjLoI&1 zN;XIGcPl(Zj%$7U!(GPy2i6~nRrb~&xiri8a@DJaacJX`D*`JIljLPFps^v}qrWVM z0pcQX;j{G%fWu^gpo_+`V~mVYS2fo8F}gf*e8B8mB>GxX4zZ;pYt$<%Xd%g|e&!5u z5)y6dvDS204X+<);ENZ;B^}CIy{rmad_tTi%pdvfDw0E02C~+IqLVkvAc$ivrqSYz z3rBjcA+tUM^2lqrnk;($M=gkYh#7vfr}+49Z$f_FzB3)a0xBWKd3*7rM6ouPEJ*5$ zUPk&kdJD&@C>#z8dZm1=YohPPakXsR2yR)WADy$u1QBsH5`768$+OMUA3N5XiTx6w zA8#<4e%G|o*G(0hTRv!BfPs5E@xp9+WZX}DC)HaweKknYK%%eRIDPQoB!q81+IP?< z@dXvkT#L1zY*$q94OU&3jT<=ocoHmC?eYqr|1M07wtu3oAc%M%xVZ zB|kBqn5|+NLzC|;6Xz+fAYmq`EA<2QY{UZ(^JeMbrsI!1_`}qZ)}h*%A^qd|Q=P=x zjo=Yh>7|5&tMpz;7lFF!% z;DRgh(*t~xnw7TUQkd$((R1EV_>tBY0K2}@8q~VJzrZaaQ}|ZgLwtux+}?`vtOL}$ za%w!vFr+_yOrqBOdE~g{C%V`uBwfo9VBX9MJhUr){Mz}ywE&v;M{Tnpg&^tC8-p+v z)DvIiVrlvKWdHma=l%{kspcaJ4dd23s~(!!b&p0lmo2BWuZP z-Y*b`6BMwsteARBL)<<$t~?rU2%pS6+*F&Ic#f*Ty?1FY>$oCV+D;g^6kvspD)@xV zupJ)^39T8x^mrTkeqe7cxI{P0F*B2)__CQQpnt8xkB{DNwsK6=m@OlUuszfiDtQ*A zP~l>C$z>oBV)RXw{>FSnm{+LEPQKUiIP`{Y*Uv+fbK&gI7+2M{DosNALRXW%1?qSI zwM$;~1{p>p)9EQUlY0bQ?`?n{6hV1eYclW$ zre4>3N<>S0p;*KL*%5`9=HgrwF(Ftn3Q{B|7=^Dju?8a;Qs?my zSM7Vn(HiIhZ@3kR0v2khvwWWDr(Spc;ipmqYQ%e5W2q$yplpg8(8Ww-D~EZ)uvceU zv_EX=B>K$rCg29>gZ#IAL*_kYXV3j6;ETOYzFoHskZ0ztMIGxh5IqPd&9|p8)Hpl! zO<;a1r~RnN6VHF#Cg?VwI$L$<(jZX&%)zRAB_T%*a#24kkM91)5$68JsDQ9H1; za0O{fdlakzPIQEPBr=-*(j}g*xvZTfgD8YHJ-x74PwH5OXEJ1yJ4D zpz@hpqa0*s@0?q-DJEIa^6}8WCDv)98?3)IB8DjJR)RHFgcedJ795l!Vn*nEb@9## z1-gOL+9BWBrSgM6?`s9ugcI+6vM5aCvnZ$rTi3ot3BCzVb>HD&W--?yuiRd|y>yjF zhT`xijWZD8J#M42Xaf&jGn`Xdi-NPBTvfNXt>b1loFLga<9BcjfFoVID;v}96? zZZCwU7${9_f5xQ3VPhykHT|62Bo{VbcO9glUM~*wfx*18Df~iB-D<^wFYck_WC6V4YrHPWyxs%=HQb<@&<<(5lB@oi&>*iV8Q<9`$(00s^D-9` zUP7iLCFKdVL#;t)!2&o3UuR52ns{j3yq}mugE||+f0o&IIz)lwGjbDX_BsJOesN9gg@r^U3`|{yuf=@!XZeTmC+$T)fy$!S|+rue;+OHT}GgA=!!dv!#5(Ij*WQMQ;|8MMP> zbvB{~=~)@J{~Gy|MVl9skNq6nTnr0c{9VS!UPH-U3%iq-UH_^7c8GajWYVSdw0>Pw z(?pH_hd@NaQyPi@@ghIvq52=V)@mn#gO9?{o`!+UHLsM)v~k;&h^c@QyMswLdH+x7 z$|B;M<0H$Ms0ak+ZmqL56m9k+L=ws_Bt+OyL%hu<9#|_-w~eyYXgAHIhwuG|KjKiwltEbZl(6YS|I3 zQIpra`ZRy(v0=*%mFVrECB5#iacR!=U73NK541_tG#DZB<5XLKazs%6r0$uJqbn|m zQ7cB&_21yrXf4RrNWRrt@3Y1#H-9Na{`#Y@6Bav>nxx-HoP&21p~r2u&x?;7yy`ax zC^^q)D65HEcZ8?yKhoAK?UsO%m$)Su=vC*3CUjd-rYPbvluO32yP; zJm?jy(68%<3USFx(6SagtGT=MWGL70cGBW-)#DpXBRP>yZdpIzVjj5@VwUyh#q3U= zj~9r!>SeN;(%+mFmhKR3du$qps5P%v7NPYOhRHW}K3*QAGA(?v{`D1p0l)i|TOZ+X zh3Qw|E*xm}qM5I`z_M4ZrcOkB6HJxKQ|Xs#dkER&k?kh$iOBMNH}y@#2YQW7N~qHD z+|e1=DAP}hkF`mpV9MG%#1Cp%y=naz4U^~Q8nc#}-eY#&2D5D|@o}0PTkgw2_2=$V zba*V6xtsWzE0G!=a$D->q|vYFp0lzZDIh1+(ctsYMScE3I?R5x5K5<`r#-DRwEttj zti5)JFLyUfRrPqWn}g4ykl*<5Z+)9`qu9Tgm_5E*KkAo}GGj5{4b*`eLC6JUs3i9N zO3eyl%KBv&MWu3eh^p32*#lOX6jk%W-*pwtT_J^-6)Kp*Qt+w z9G}f|3#S|Q8uV>3l6)3Xd#AS+S1~XsQ17@Ik;^6?RRWV}C4aV-EHhG&#BY5PB4Wso zy#fxsLeua&mZRLHJ14jq|nkp(3{Xn@} zFkBAR5vc=}AI5GG*mzm0$g?o7Fcos+ktBS6w)^)=mxL6WnrZo~nGEWDFoRa3ghvP= z=O|_7O7;o~Io1tOBfn1SNS^8Sh8M%koW#1*qZrt)9Q2AcjKrbQ>q}4A7ES2)G0si{ zn%9 z(XX~He(mHrEjbC(^S!AqxG%ogXUf&2`F=r^a(!bslqW!?zZ?c!bIE?QX6%tnH7j zHTmysT9X1v|0Pkjsem>4tc=3)!EVmR#Sf8z-xvENr?zL4c`q_oMy-DPWKpWRr~vfo z6mE$RjL0DsR-1{=iVq7yyMP_wHmcj`7%;4SLC&TnfFqr z-isl^a8>H9+T^dQAm1yCn{U0}h}88q>L@0pL@Pd{G{WwVXf8FWqEkm44j4qXn}MuN zmyuLUVRI;E1}COT>KvuW{Dzu2z2CNPcPTIOJj;1ULaEMk(v@Ir zJz2n${b_m?q_wM}6rdUl@=3s(+~^5A4nNQGltXQ$GdMmZRGzY+%IlQ9xi`w1v3vdu z`b-QcuxygrM{@!w^7d}T$rH-%!0rU9r6iet z`muJn#Up$bunbW6{84M5dsHK*36NsF*P00X775O$_c`xBlF>!Oem`1vwG<%;F>e*LzM19GFD)x?X8&C==Im** z?)$o~ddl#qGzp`!58p(r(7a6ghRsGQ0_jn(=>lkIt~DqC?ikkjXG9=JWc-6p6SZCS zP<1o8j^+t2`g$(gBJd{JD+2oGtapkO=uAL}p+BPXsQ)&p5o7~&y<{)R=VZCEwTiF= zc*+8u`JuisfGI&9Nlx^Br)5d%e~ihV)gJPr2nT0VWnI=A1)792DS*Y~KLbg2kYO z!vyuz@Uk=iimJi(mmxn^mQ;>$Z*$nIR8tF9Ks(&#)PlP2d^&SqM>pWs@0I#2h6LY$$HXW)>8!+tS@2Jn97>x z6F$dem-xmg$BIq5_r-Y8boI+V4(dw$CY!4>AnH%F8i-@L(DPf&_@a^plJb*gKDr9R zwW49zENavHvhZWJi|6!-9fty+RJj%>CtZ9kAp2-or)5F#hC^3dy2%g*4S-JZX$O?j z2v^>`CGIno5VLWSLd{pZR(16{zkoaJ=ukLlI?9h?mKIqxsOqLfY%T`7+US6) zx$OnH_283AcJAfReQA<4CtWoZ&jIs+dn$pf8gwDNpx#|0G3V7IwX;6Y=UX@(+m0O( zAvc)vouxKUl~AF(!^AJ=nV zp||An$_;;rJQ6A?_;HoAhZq;W9IvT!FQf`n{|JboUg4oQIOB?KEV)-Kgd zGyVo^_}9I~Zjn>g3QN{lBcFigGEy@@umJ>jb21~4tyzTa$b-JS7prcx;cRy9HJ!ozYaU`1s0d!+q760e3C;3Z z8^6gb2Bj9tpU(SFDroo9{1#yjncylF&8p#Z&RMRATCM9?XxP0d;Brok+jMN9_N(@{ z)yo_KtHl-liNZl)apzR!`Oc1m?Ml&jK6^xGQ0gkvC{Ry6J`Hp4eU%EROI&)|N_wP- z-paw%FE+W>-iO(17LGI1(x6NCzhCOF{v~amJxf~Ucr@-OeXJz?Mg81jy^U=T2qsqK z-0)FKP&$Kht5-mHxXU&L)3Jp~|NT-JH4Hg{vh~x83@dCB8?+YIe0mZMBl0pUvm~9n z-4z{^D^BD2^oA$p334#w9Mx)FTwk?tkOv}X`q{-!HZs6+s{u4bOibK7{~x}EnruJ4 z3E)Js6CNx{g(Jk++eKRG-IcOUr({MylGR7oXVw>^P-l;9@)U^oEG|$jCcSMhHLJ28 zVVx9h_8Fh^%sPaU!5&NY?u;7J{AVcSpR2cg`0(d9z%x z&Z3Md0D1}V zJwat|_xyAelcdeo+tPsFoO_^(=3WgL6W;=>*NV9b%nC!UB)&h^;OLJ-xu}N7pwc}o zB0}F%hJq5zxo(+ZnU;Mq2OEldq0@8E!D$FOkXsn2B7O^g|JQm_JRM5ny8C#jGF{+e zybp~CB&=ga!5)khLO!barzGdmwXpFmk+Yz#we*q-^C@h`;Md3h{}dBD2gsy_vy-z*RGeiAp>?=mX|sR$ z4)B2?Z$Ni}XzDGB->&2T{za$PNw>rV$87NLr|-Wj@c;jZ{(tgJ|BGo~_(r9h`TxO- zttFEN&AtCgE!SX|TCK7q{o}kn$>}a$;$}|iUU(&J**@C&_J-5;}{9 z773&`(M)SJ1gx$Wmy4%Y(KRJJ+;V`+!X)eMNZGVvFb{ZX6(>}c0Rv#=7F1|bR~{sH zv^(nrOxR@g`sd=Kz5Y!=3skB^JvGrozd3Hp#A(mJU91p zrRdK8i?6G9QR?gg@5S_llSa6qm{hV3N_M_j_1j8hF^WgELIP00yi-x4+ihC^LWKi` z`eCx2_lF%yNLuNVsU?~_!cGyu{4B)3$%C6S7O+txI zFr%u14EJsx=$n~P@}Y2L=vJSk6X>$Qg9d0Lkm3{u9UpmrSEhK;us%e2HTtUXmr0P` z%C5JZDw?``cmfA?m9mPuCk7XzP8hByQ4J3XGtEJ!-$IHs*1~7@hvP(jAE+ok1(bZV_LN`0OKIF1N{%0oM$!Iy-po0ikeoAwE$_`;=bqIU z;67yLA58!(yZRFcyRhZ~c|tmfV7nPUvqZh|_x;Y@$Fl>X1%A>+9<)eV2mV=dUP4 z)Bg9y_U}#W-#?af$KtZ?6wpc`0j#KP<%!RCmhmDoG#hnm{c@|;FRU65}HMp@)Tc)>05_k`l z*Iy(k>wi5e`f$bN$NlbI z-DzZ!|786Lg?3NUM2~e2JxX47oV*FJ&QXZt!x-X+Z})=I{WS;wwKQ&K6IXM|1gVnG zPmg<|r1bv1Sa*Z)tEc1&K2Wu+hunPr9L$m?wGyp6sb?wADsqQ%cWU3xqD z=>|JH_kD^>cTxuf)^5H(@UW@t$z^!Aa;DiY)5^ysMV8Q%rq+q_IP)K`{=OTT8P(A} zhTRcqXhz{lb1uiZXGaHn^PoWDzR=6q75i71d^=F%c3PLvNEOqn_q0QSp8Z-&2a8%j zOP@(xiWIT#ei^+5So{(OMe`pb>3E)E&P7)WQw3_V1ERS*+Nox5ZuD}%BbknpJ|$7* zsf)CaG#Jtmf#e+cCzqQPsnxMbXMzVZ;Lpl2S{tO1cl2`smGQnkY18q38t<82()8iM z?U-MIZ7oH7(+S(d$z*V&O+!%#Q1C)-U1kt889n0F<8$A>cR=?fCK>p>6AWCb%=%-;1 zcOD3s@;*lEcNBR%%YE+mTE3(Iq;94}zOA7CyP)%(Y71Wq9F%TrtTV)um*f2rZ_KF= zI90X?ge2fVs(O4Rqz1MH$8(E#9J&YaVV_)>0$|Gzb&I~A@}7&a0(){#zMSp?OorMS zyI6gK-_aiCE`}U|2OD~1|6gh+L#!OGIHMtsm2|MtM>GgUi{=X3k?ihviE^G@890Co zE0=-vBv4Cft?hcVvCS0MkE?XQ-om~bvL~E7Z5p+OcvU+Sc0u9UsS<$r#m}8TxF`1l z0C~yo<#sEL&6kioQNV!Af4HrV6}2-HY0C{}vyJ80_-%uqC{I z`^|-$c!3o>)E$ff$S*d~DMcq?lMvM>O$>1!-=zL^=GS2qd&tRbT=vZ%ado#o;Qan_ z;$p4c>9a?ZVoC34!NRBG2VIur=5pcDznTxhF;u?dyVzNY^A|$W9x8>wjoh~nUc}O6 z?J+UaJrl)u9W*UX=B8gHlRRm`Ogp;l5&EmN>8!6t3!lf4Kh9D57TMYH*cJ|2sUurGV9EP4u(*q6EeEeiIv%LL+vUkQ^3yW;4?qm_n-}puv^>Fcc+*DQ9F)5MO0NuDb;s}0o~43++BHT@=BIag;>EGlJ8|DL6!%w%t_^2)iE4S#MLB_}cQc8^ zFOe0t{oQLldTLu}tctW|ooIVbP~kgZzb7q(n+*wzn8Uue{376CM#meg!n$;*h_U|E zp^;Y8^#(;XSCy3YrczLt;Tb!0^yPyOr1$bhKI=VRbw*$RHh^n%7%)S@k4uM(4M#G^ z20Vfidi0CCEg|)?d8yY~JKkjR?rko-^)5<7ZDb0sb!ozxox`?cc9s%9V=j6xy*t0} z`x3WRq@VfP!@_T3Kg#Cex&@EnhtEZxw`THCgP)-qL=V~tlB(;W81GETotoc+LFRzn zhmF*KA^g|0C7C(@k;WN*b3xJ7RrZ=BK@J9uD@z{Qc@GX}+N_Va2GsT|?P%qG>IWU0 z^3L~RtENk64uVX_)apby<_`9#%GYb=MeN6Q{C09WIHb6_TQLcAvYFC8W>}coV%t|6Fiz9)EicC~bOk1u-?*-yt(6byKYd|Z&(AnW(XqsRZO&f8{nPoTS(>^$d-`*?TI1PiSL`0=zUe&-h>P!gt4(R$ z!%NigLnzR4b)Fi^>xox9j(=m5w#oS!hI`IKh4%S*XGy`UAh6N%)hCJB&)Sur=~%_? z)1)bFzKmj;UwnJR-L}r%?OI&FDf7i?p?nS0((dW$56gi^C2BcZFGM5^J}DPof3ewB z!bxIM`0TH)MDa*wMK`T`X^tHav@xA*J;>xYU)Z|>1YiP3+qF#PXa-G=Ep}zP#&tX&|A^H$`HL!LV#uQ#86) zBFt@FUvX6X`$mo=QYffd?(IXnwdTWef84z~n1(2p*6vh=#njR5axXNE-C${Tzz#>8 z_1@5Sod|T0f6u9lQW~;f7|(4sy1(q}86YnNQGAmobsK6}dxuw_-vJS+o++Wic{S`s zKtn}&7!nmni-{WqXPPbV=gd+kjY!|O9@49Cr1nklxg71%9leS0b=lxObsoq!OcN*vvw6Ve-9 zO&XulD>8IhWm)PQP$Av3Uwl^QyYWHp2LYO92ebS^c&xJ)0oPc^r>)&nn=sOyU^7W} znY^9)*bH0E`#7`x4QeYVd!sLdufY+8&l>)$*VUAPA?i*=8Z9*Hy!s-7Xq1#lyFk5y zatOuoAynJ^#jV%%+c+}vbzJ8<%kEo#huE4ig;h)(yijY~d0eGs7~m91&$B2P(|iaw z-R#0lr3veLQhc5Wi)@P<4gKM^7^?B>sFWmxn_TPYdB)?+D^!3rT6Wr-MbTMJUQ)o2 z*CfeK!*7lwMxK{il`iR#wn)`d>DtZV(+Ldt#lK<@1soZ+{qcKgl4yv6=`O5L-t&Iq z&N7Fk27Wy)=-{t38rJx4O#$c~b8)-tC6&)E6$iOAjW(>s%2)QA7g*ayoM*ZLT`*x2 zPKlz{STdk~Y9FhGenz`H(PRrBpDGFy(2zSuD$a$bu<56r$@65@$;%P(%N)x(^U@OQ zGndTs4#j+&(&4Y#x16AE;ZA&Qg5O31NSe0Fx_2jZcFNYt^9c|hITWc3H- zadQTt3Zm()kXCxmo?6GH%bUT%lvE8j<8pgxka=5AJ67dCkZNQEjaDo*eoN(mIrY_3 zi+J>xNNm+5b^}s_GT*sVy9o1MipVCsn+~ zg(F=1-bs#}Fhi$wf~q=Ze!Bs*AQ!30=IiIx^NVzhR`_Je7fUwh6Jpmoy56^`++~r& z97nAlW-GhOPer9wqyBPWQ|pW1=}wBQZ`_xTn?G8MmdBquqYIpqO*uV`PR%^r3WP5Q zC@Zqxf*{DWqxZdKSr0Ep*xYa!dUK?c!t++d+a7pjxY^Kbd(b1#ZkLZ_?WwG_f_1p<4L&rk#vAw^V+y!0Rum`yged5 zk5@1DhXZKJDNa_38A?qQ6v#VsKDNBh1Fbc{sE&7DGO4?%-@Zun!D|$Byv?m#Uw<4o zH;+^lQ!Xmgs#bUFdMlrn@^L3NU4*fe1zlCzs!u&_cV%^-`gl~`L_jSt=3IOtzu6t$ zWI&L!j8==xH@6L)l|)_L1*FQ`c!%wItqEPue^c>eyn* zlnO#6Tw67X-$vCUNi3yJ!+Ix`dIp~*wqqODM2wL;x_==Jx4Z%xz_pEw>nvIuwTRW- z<@Px9)k8|GNZg^xm#gB=k9w?F*t|=&0^PS4&oNnSnOxbZJ2NHbp;I9cnabbGN|QRjjTB z-f!I+?bFY;kJsG%y6uvVO0X_R9!*2~c-ty$h`^_4j z2c``+;sdLGzYLtg$-VnrY5ZstM|<1);#u}->JTkykFmB@8E^I1$t}7%IJUSER;jOZ!C*h~ve zbkgtiO{8VVaqeJnWrdBiFS5YELjq^Z=O6!!eO7MF8AAMz{d_s$Rjh}HT8cq^}`t# zryEWPd8Dy7L4B3N`h}~K`(du{54`oM@7oW#kEYTW8}>{(4k&D7cU5KxDZWYN7m^$5 zuyO3bLq9up%Ld5?ra#kLqonObu8hAy_VfL$dzRwp)E~h2wXp_su$d+xzslUPby(nW zrz6LX(fcqsB3fC^02@L3fho*3D1kS=dcN=&;3Vgc!cn^O-S;x8R_fRWew|K{gv?z5 zZ7JhFnJ*4|m--$S{p;IM9fp>Xhs(`$wMZiRJR5ohvcoARHY4=tQz zHG(TW_4L`*EBu2ROJIR^suO~v^}4GP9><9i%JZ__iCzRuA6Joj;xiD{ezKo;-~3_Q zW>v)_WK!X8Eo)mCjh#Sdc~H=2xGgg`k9n?6s&k%QlB?0|l@w@Te!3um;J-_KKU3bP z)sWs2UjMk2%x``#kM&(#-ou`E)(%#MDV8yIO2K%&PGQ>3Y%qS1>wuaz3a?j!A`klet2ZFS?3k6hNJl$!uJ8Gf zUNPks4bGnOtaG>QgVz>?^|OtTredUaJAF?U&M5eDFSNLM<_eo~$=?e^Z_wuT`I;Pc z^ak9RgLwaW*a(6gW2a%?-RgpV~*^G_XvXO<8J4_M{ zJ;^G}6>(iftuth-TSgAKhexL(Zgy1prOQv1?Em$mrG-S4!FRWO<`NM>NHL33)WA2} zY|7*e-*9HwsIsBf7eO659F4O-S-{k%*6H8rosO=(Q1Y9%OX_m=5gx^~%uEa3E^tMV z^>bU&+5;*QD97?Z{narZr*MeSURYSp402ZICY!~=R-P0+S3Al0&%;IJQ)QV#L?2@;B?6p$fUCoXZ7opEH8Ze-RepQW!mq< zBm!k3x1>*3G-z*GRdlKH zJ1yu%xeR#>E2U*dp3w(8GVhSOo^6WOxA71)>M=W>iB%hCa{+k6VEmEpslN0ByD<}{ z&k8OI7jIdOJ`=sLUbsus+W!j1SY&>I#Zq!(l*(uOI7@!fm zTX;^Uzqhd8MWFhwJT7q)7P zet!73=>r}MuH-dg8W*e5Ql@;{ri>kVwnrx~Tsw`tJpE9w1Uh}apxPgICcuvSr(ugXF2O8eHcYQF&z30O9$SNAY8R+Sg440KL2>+&GxJjW#2{jP&`r#mH2LYXITNv;TsaCtX%d`r0_-0PEO3DIhJG(T4z=il%k z|L2Ro@tk7!5`s??I=+lWXf0^7$TUw`F5`lM@k8y+8ncXRn>}B0$}N6~*f}q}8u9b0 zB2TRg{D{>TJ#Q@LU~$UoVeCqDF10$NB{IEJyg=_3DWc4K6)oXoHt-bzJw}zAu0BIN z%4!Gg$9Hg0a|%WU_s~Eo-_H~J6|%Bk&#bco)<^3Cy!z2u>Ufu6yF>K9%(8NhQ>ED6s8 ziHA}RW-%j#_r(%DGEb-Uzj?6m|T zm5c@gxj4v$3f%Qj&O;q!W)IWDh!CZRYM} zw=*4Pz4m;G?v-oX3NpPmd-Xd0{o4C40uPN!8j4vWJDulX_4Kx>4kS=jY*g1 zOX+QFxyFxoOdToU_!y=Rce4YKU&1uI$N3@6uOyF6@S2?x;CGlpIPSx1&Q= zapI>)-()E`!Y{1qu2-h87cg!RLEaj*oWvwo$NVq$zB8(+cHNdHh>EBv2uKkHRGLzy zgNk%e5Rn>{CcW1{LQz2h>AfmVq=eoA35Wurh29}3y#@&oNJzMgz0W@To;yDM_PFEz zynh_akgT=d{**cAW1B&)%uN|dHDWUu#FzC_vSTd1Te3}hzPG!Q*`<@Aa19%-q8(77l;sUTzI1Nyih0Mpf zk-6o=_7$xYL1Efm!K$7NJWecw_GpD20^sYOu5WtGL2UVuych165%-;I(yRD)q{^QH zN{i0^-^VzEOia0(=pDWfReU>l*!6-c<*@{msbfe47@&1eWONPX2=Fm z+nLh(*BOo(szNaK`n(EWALr{^MFDM6%WDz$@!?mPy+_)xkEwI|Pe7{q8T?e2m?ZD=9$XNW)_Z;`nYsyy1cPo?hC#(SOuEw_5(Vh_v799{b5{X`@5gitPPtF zsgaohhgKDPNx~+)Ny27{Y{R!!Zn6D!AcuQ44oHFrY**aA0mSFuQ5jWQ#!87fB}@8XQ}u}pIqQ`oC;g89O_#C&Qiy5y11r!{?Vj_3f4LcMsZe4{ zD_6r`M$rF{G{^r;bN%zDTgt~lP@l(_FHouTM$35K>OXkm2^s9`E6bJ9irp)k8~L^7 z+Xs9%D4s7m6>O*hw~S!*rUGM#A z3j0~Zc8*zW=OHgqs(*&f16a1G>*vnRW@)MZy#1H4H*Ob!Q(G(@CcnP8_tq8%T6fdt zt6yWeU-}-2F^~rL(&%fmE_k#ke+qg5a+G<S?OI z`i#oH)L#dKoc+e4c={77qEzILGKhh^YJY2lIL{ugd^J!ho+|Yh`{iZ$@TE^z#DOTw zf5Sxnw<~Uyl z=v;yO;c-rho0G~AW**r-;_&`YUBP|sF*lGbI?v*}A<+VY^}9c(Y2=@!2@o+o6B8Z% zh@PS8dJ@d^*G%AD(ckP({{$@s(;Vs*B#PS}^4`833CxijG{s!L zMJ07BTX7rMjplb!aG%hFCkiB_@+p4daPa=pajw5w;Q#upj`w(;I9yo&IzM#~{z(}V z!5YlV-HcJd^HH>boLAi)Xkv|&LYi2#Yq0P1ZFnu(JYp5@-bhhx{_&T))ql;#pft_d z^@G!HgdJ&A?9HZJ38UtjZi@VMT+i;zPlt11Pn%Ku!_Cf#-K^U5!Q%Z+U8nwt-ff4JF}1Z8B? zt6_u4?{{5Uog@0~Q;^1VU?37=%`-2q#|_$aSwXX1QuJ94L+Ny153>F=-@Vu`CNCo{ zuC=!*djmL8Vh;~+YA%nA?F#}prTuu)E#B^|TsLdrmWH+@IF$%cQym^>!ZsCjGi8L5 zL_jePMq+Thyz9^0WQO(2>2HX8Tor{AnUm5>F_O0*9g;|n5A$@^*Q;7pKd2LSTC5|K z7cZCovO*_*cVLG=3^+n+0M|cN>bsG&^J<8ygS5M4Lip9Il8&ZX1(Hna_U@5K6|B(2 zF!&Z5Wo`5K@Q;hu*W&%W!ngjY6`&?Z*+YSFQTV3S!g@zR=pUdgcDMvO7Pn@pnRH@f!VK4;J>{>3e+`DBxPV3FNC{NpxpX z?O9NfaV-joW*QT3tUPzr&MJ?U#w97rxt#48RZMcT6Ccx)vthkz~f;=gj zRh845i(olFRtNx#FZotrN!#t))fIlzv`q67%Co0gc)d&4y-du!XNJx|i6oJ{jf~pk z+#jk?-)4TemQFLruNF1EVf=b6j^*U%K-@}f_{XcU!ehJ2^p<~G2Y^;GNXg<3Tbw%B zk)VyH8U3bcJkJ>?zYm_BeUT#Lj__C+GhQ7jwN@2(8qhlM+V^2SBvbsV^em&!eNcW+ z^4yo8F@9o`5IcG1We5^*FRPUYShOe%#6VJxGuEPkBB8RC=6LV-7fn4Sm+>B4M2~OF zS(e*F(vtfoMGvjm4@tzV61{3S-|>nKMQ}u_b^YMe;zRxSEJ8OXk0u?d`+RZpZcoSC zmonF_qNMG6VcURYEh+$C<7&ekI(hr72;i3}?bx?`QnZ{XJ|UWo$=PfYkE>U2HRkg{ zDA_$J;-2F}$BI*u2PSBeZBIVn&!(L1>+6cW8M1c&e7|G6+aFdUV1>LsO+!oDu~NC@ z=w|Ll2k{(2DJ)@2<%uOvcfVYkva3zeGIC5+Dbl7!Op>Rq0Hzd*A9N;ZXC*k#tLK)N z*@~VDulRcG86OP)CuOLso4W&LX?1vw^Cplg${7w~ib=D1^9%=dW6 zNFu+tj=qz0NU?Ec|LEn+vH#WrFeffyVn-|~SZ>B+5F^dw?}wop)5gONlG_ytYwK=k z=ePp0;6Hq-Ng#N7{qEMJEHE^DG7+puBuA@I~I>v~9C z@EBQw*-m*UXpVudv&=9k_%aBde9v;X-iS9y2In%&L zM|Zq}F&hDEZ}g4ru*9lUS+;-Qand`r-s`?&blvkH{|X<}E%p*`tV3qH#Q8%2;4#j< z{-qi^?lzLS#)PX+tQx5p;MYbiy;M1+mhj$+sS-^1z2eP3&+DLzH=@_AvQ96e?Ng3- z%{QkOE79KTQ;uA?MU*WUsmByyymx>Ao8cDEvP$Y$_ZVHTH7L5yuah2sc;MDG$LL*4 zIRfOqg^@yLwoAxr*)-?lxKzzLE)Wu6^)|)XrxnQI4$lP) zogwMng56tbjtadSK9AvmYqKuj+Z>hePX8_wh5d1@eZD6M)UjA{RKIlF%Q-$w_m;s8 z3vkho80Czx>A_2XI)#sq;@sOomW*WPj;zTJbP4a6!)n)Xxru_bn>|-Frole7cT{SbOg8 zT<3oq+9=LLZ3_)KMbbX?_CoYy(fy+Hd#5hm4jMr)dU}E)qx)`~tR8IOkyTx8OP#_Q zvNbhmlj>KN6;AjLx-5tdXwAQw18cW3W0)0@by!LC?6PLa9p;GK0Q3XR3`!+BObY#N z(^e*PUkKs->pi<0zYbapofD$mr~)!cV+~WD-TufHWo0kd>51X)DMXjUij@tVt6isB z*R%9F!$lUs*-n>{H#!HeY)sIVdM{Q{s#SV1O*mO%UUSBg{(M9n{}pt}WmtJ{xc`pu zA9u`um~BCK0XgzWCMNd3A5Vl3;C$7>7;}Dy>iYMa{k#r%d^%bVe+JMWuY&y=z%&G; z9U^{D7WtQX85Re?lJ4FqKmT_ti+gtR*b^rbZp-{_2XN~EU!D8*?cu-Y?QgCEodE^? z-Ho-@<$t&HH&_3^Q~xhIRjr?DNyId|H8g4hb}@j*ddrU!>Ns}2KqqVOKwmmwF@ggN z@MPxXM&!YJs1F(Nh1KCA*O_(`_Epb)zYZ5^-%dR2O>M+o;onV<=8~IATlkTGl&eGW zY_*wSHCNv6u8%GXO~x)HyGnQbn&Y?JXxRNki5{Ey^j$O8f0%af3Y!Gn;U(3BsD9CZ1@*TrbB*q z*E{dXKE!fl-S}5|6y28i%lV3e76N6cgR!hMfA0y|6Rvb7VxL==uP! z?+%J(J`VjBu(tO!CP#X5?-OM=>LFqtxl>28b8f$Ws$|K%Ng~Sgq7`vr;?5Ht{O#@8 zznRy-O5933cI8m+rZi4&LEn)gl{Wj!t@z3I^ErHKT2^6M5YC4rJ z7FCCdQ0r+<8UO2g?|w4z>rRlw%L=u{z||nM*UxY2o=19e5M%mmIq|K6F_) z^ory&1@f#AlZ(F=AQ65o18ZxMgifh#R#;8;Xl(z$Q490DBGZ=KE0vGC3nd3{V5jPF zn`H82xn`+p{Y#MQVSZj}?GgO`-iGWsSA!}T9YXP0zIGOWp2np(sFX+&7lLT|7D6gt zKkzPLa1kK~yx9RCXv2~25IfHDmCL(Ry6JM4oD!@rInPu`be?&M_dInvuCMRWcv-)J zj)|tdJ?Q-Oj^C==(mrs#SndC%v@-K8`+LtASoSQ5wZ5Z%wT8Sn<2*V6&cy z6i`8`rzxQ4^rQ%1lG>gEznSPtKJNz?lz22G^jn>HGflV z165-;{={oz=9-v|Nc1IvQMHVT+Bf(6xNR}~gmDLBvyUwunesASKrw=AB#@73W&q(a z(6t-p0T$T+5K3Do)1znii&0&c|9)b;;Nxzm97^pTNly8nn!ac`%s&1pywQAmRn%?Y zF!rX!L*Ka##`*UCxQ%W4IGgv7NcP=o6py1rk}t#r`HPDvs+(z=8E(}FhoR!4@G;#f zV&e;Ed5_SDd_H~q1>|K?-g&xVY6va58IFAkcJ$tZsfivv#a0(pnoSGwX{=znNpUXj-6*-K!lnV$tEmXZY_eJnGM`RB)d9oC$^s zVT(EaoY=BCcUo+=H_Gm8<97P>a5Z*bvO=!YN7Z=C-Bjchu?g39x(xx}KR7_Siy)jh z3bZcsF|ZF+Px_OGANd~Tz!nfdY4Pxuko5|N#Z)QV{>NXQ2n(EEJe=PQ2Lgk?NkW{= zr3tzr1{Fzpjx}Q1k-v0rR*Kj3LEADr72zs9DMi}p*1{^fuVhLb?zJ61o|tWy@P2^M zYrS_6Z(C~hp$EWG=iOh*l-!!E@V)Pg8@A!SPw?0b%&yF!6_D5}S_l&`xN(iE5&vGO zwb9|bv3}wKrK_lA#s+-P=SgRx@J(HXy=;bNVWS4)83^72PRRV=nCD-=)-tH8;4{r3 z=e6g}nTDBZR@mrYqX*Q<9-uW%-kw>>dxH82IQ(ac69@Uq#tdH+NDrKS8?n@qYNVfm zc*|9fQQvmF9HHs3=8CjicVgN|b{%b#tk=pyug^%JO%z>LMGyv8*}Nu`Y6olB{aQN0 z1R#Y&+)QMoL%a;Gt6m6=VOsbOxGb9)JxmN+QpKRbM3>$qkth#1EXPcKAvLLTLs#Es zyufVJ5i58K|JlN!zagCAP=Ppqe|wLel=~{?(93+*mB}=(3HxgE)aFsSLjo8x?rxd_ zKt{={y^-xAYK79DrnF-eS@daw@wR^&>(@e zO7Q5}SUznw@BD=_uC{lH;$9OX*0LG8wInm|j?d>Y9ToxLt}69wUr*S0PMX2JC!1l` zgb!TuPdNRvi-cOIYIPamN8RH;mY7E7Ah?Cl?NpRxhPc;f`6*a<(pY;#wS6l0O5EN- zmx!EoC!O~PQHn3@azqc1Zyo+<{f?jFcH>0>ea#84Wxi{wx?xYAj(NR8MD9D4HEwTL zZnqVQbiBTEfBh#KN$6E*!^?>edT;Mz9qU)#xbuxG40YX9m-GL28Lkyl%$0h^Oh}V7 zxc|e;NDCwBIP=nQwD_^aM9-I}rLRUwB)m0o?3a^a;hJk)egnS0*wPX2^-2gJkxD3I zPDoM^yO|hKHe5&nc`WvpMYrd$pm9&x2zQCiVBoec6QpePer0W%Sz4=M$f%AIs0$#2 z))^1M47=RD@imlvO|CSfF;HwH4|SCF+N_A`t(9DqksdWmD#VB2y=#hC z%ubJ>LCXYgWo)Jy5cVB1i29_Rac5L`SUMyF-&S#{^bCk$-HyUYEL`Gb2_+~))@L_W zaYMn_&v^2^f&Dri6SJVH9n7e{B5&Od@q2e9I+li~N5@a}Ixj<3xeQgI_LN|UX^)cP zc_`BW-u-)j`tUn~&%u|X;&R%%BFPj>mvE`fMzf9Yil*P=jy9*^7}}Et^Qa|SwGqJ- zp$~CZ(vSghTh9W4yKoXR!^>=MeSAF!C#3pe3w8u&79UcYxfX?-cUXi>*)Cq(b6_1P z@J0?Dm`mI!BJx#Tx)F`0fo7F~OlnE?i(>(knR7rjBN1wINZYg{fWw$ZXYhXyzf?0` zM#snzv!AKTC+39C=Pl1*zHs5CSnO_fuhlxhtLeZVhz{T?Myb*Sp2DfJfmrTo0LyE` zk|baE~%b;g}xrQV3TJI-k}XxjvrWT(eYh zcEcpxI_$_YxQ(E|>b&SPGJ?nu*xINsQ81)inouC`1cns>J`7)%l+zp*aY^4P2G-tYY=|7YBKTZT(Qd3l0CXKWt~ zq`j`o(!OHzLy_-QrHSR>yIk4O3Zn;h7cbiCJC?X5?WXfV9f6zcY zgO~z`FCdKF3`1NKw4at*$8L_5Yj!5qXWFvfxnK1v=Ig|pW&cuL#oe%g%>$v`>f#q@ zD=C6$rHbd~I1rrZXyU-Sc^9Nqi^w14a^O=v*QUF6-&ym4YXHXNSTjtxD~&%XCA6kY zK|3CI^30hk+=SgjT)9QN0$bKkH7`|8PpXneYCJW8)K`5PZlT8_NpWX(H)3j=?@{rnewW#3VL%#KaY@}H1>Wly z;2|1Opp|h=1V4E*916NRTx1YGkf-4TFkLoR$~@=v=yh1u&6nip#q-*$hhc{8{zuO| z%s~v#*MRywP@I{g@z`_EJo~dfPR_4tm)L*j&rnd^)aKS3UyApls@?V>X?r=J)j#i5 zT^Kg`Dq1bd)f(}bDO{to8RlnysXa!nP1=o#}*I#C^XHm zp^F*7@dQoh-}A-MQw^Gf*8)sZ4YTa6H{cF(Q$vUALh&a`Ro!ZG>cvAqa|g+Ec>o^gB8wNjW`3E7-kzwUkWe(?8ho zR!pR4DoB-vn!(qI+KR8Y=9bkzDFYyAw#iGiQl-vZilm>i#AkrlhnGmU4^tj~xwEuiE%9?XlfUmMP<4N&3 z1)@Ra6E5&R#1}kkGqB#cObI7!JryM=^V@BR`C^>6BLpiI9z>s#mfEA-V2>BqM|CxDbV^Ckbj|f=FdX+O7 zdS9O0q2I#0XH7P77vK zpplk!Po@Zv0ZQn_SH%$F-sNEX=k@OGHQPPjIqPc;o^}(eOHE%|z)ig^EsKj9zYkt< zpEw1Sq6}iu4o&BMWcj(Ul=wv;Xkg9eM?{VxQ_MA%CWR}sv%EoB+Sa9#3}t!sPwhtC zZ!oOckDJ8_Ar?iLrlzfeo8HV9p)pCcyO3B+qF|Dk4O)YXsju6j^MW^YOC4>t@ExK% zkv+8xka^4W4egq@TZ3Q?np8vp6hX|@;Xr&=c5yMrH^(y1*ESg<#A6y`kd0WXUJ~JT4@TpEaM|}j~#uNB9ppZHD$u5y3!<_xJe*(OVHYW zrtjg^IH9#pt>HJWGEw#^sPpLiAxRT@W&-Xdc@@WAiZg;3^Ge#$F@U&pd%U4=0S9|K zIocmEh`>N{kN}HDOWeY1Qv^A#E#Wg+YgP80XY)c6)*+S9;6o?hA} zq=i@#ib0kwU-P^snS0nez|M?iM)eKc4Qulr#qNTbncUK85cP_YsErqpA{r|E3c`GS zbE>nrFh?tY?|Iy??0C~g4xbMOJKjD8+eK|?vyIKdXmc`RM*!0>VM3y4;`y(P9*eW$ zp=%K=zjvATla;;{<@3Ga;JLV5O}k%X#8EES4DeoG3{$L>_uiPd+MC9Oz_8Y8XmM+Y^%a5bL+e0@eqnMsWmgczg4ermQ^kZec zd)1WtfuNOo9$W2XY)4!>LsE3~Ie?}VkuiF=f$ZV?G9z>^&;4S77;c(2g~H+9#KCEn z`PGD?nyA<7T&`RJXbw4#XC5<4Rkqq@`<8YeKYnx@>JCa5u=$`idNbv1^NZh_u1>B& zB)X_nyH7?Bn99>%m(KIhXDK9TsWv%3*uL_r2g%3nCbL~GncBR9u!u=2c+Fd=UB9$L z$wM+7{PIwG{-(Uj+0;T&0o5=Z3E$8WefIHY?5oqDtRHMyAL8CBIZ&;2A6BVoPV;3n z?A72_0m_s~zD|}SHL?Mw|3T`dqO_Lp96Q6IU6x<#aPhzx6|$j(_9biT69VF} za1bi*y&n}P53ZpB5_Zs@iD7rG;{2oRg`PNBBWk3KSI^zixweH=zLEL?#@`=<2%g!5 zS!cJ5LwzQdk&Q6_svt3y#geE-IbK0}(KiiH@}MOdNKxh3vw08Cu8k@DsO{4zSLcWu zc3s)`NEfGh$@KZz$Ml`e@$ZR2Bfg$RBM!pyTz+kvdq0{Dr>uM})* zPhd!uTJ=|Ja$ke#EmiJ5t%Le4t|fz=D3;a-75OZz9-$ql-9ODZc{#^%n2uFDp_pU9 z(2Kr#~BZBFsCBbAbR;>W`0D@uh%xZYjKAIccAuUGBMs+D)JR#Vwn;w7f1Wt2&An!Vq+<0eWRe#NGzJo8W?QBA~QE5`?ULmFE z<={1`Xk>@@Kr=1|98y0*wmvd|TR@#N5zpHk+eUIeqA1LTwhN?L(2|XDYQvwbyZLTk zacDb=W<7#0HrgC6$Q?B5o=^o}6DvpFJb6J;%ipD*XPnsawfWHx0zb z>B7P1oHhFfdMc=Nd-di+1TkgSUW+$Np13JyG(Y4kRzoMB)Q~B4!?6NjP=mk9#Be=* ze+X8~eM7$~EXMqC@rulo3kM*Hm^kYrCEWR-_tpfxX&daXjsO+YPjiE=$2tiAN`?I8 z754!!l(kg#}gV(Bst-h7l46ax00b+HLyzyiR}uZ9*X{Aj@1~QD-cf4AkE3`F#0X88HfrI5uW1({HMbex<16nJ+<_YB zWPKqD<#J7c?#Vg5<&J6K)h@#?tZ5D_r_lzlrFfDd*1hvb4?5?WR*a|R*s|*R#FGD< zxCTZF!9P1Z3yb@a79V6TguGI2hVTne&&n@dAL(s1Ynk@4dXVX0t0A2>yId?$s@I#^ zUlfEnH<+|pG+s4Pb-iNH&Dt&VUHaWQKZRyX0&TCm{AfV6ZT)f;U)tS|+EE}$&8bQ# zOX_pNx}wUa^DB+VX#p8t!VfGz7?C?J+MssZzaNEp6kfaVe1=2h1BgXi%iR~MgNrjK|=cMp^ zzZoB~6_C$d^K-l}3*Q?I7)AahG{iK+_Iyz^G4>aSY+Rigwa?X`v(~r+Hr?oH%PT=G zHdTIB^PQ_I&7$|hd+kbh()fs_&ekS^GaFGf{@O;%FY8sl3d1|^wR-_{9$+i~Bk&Ap z844JlZp^6@rCG14zm8@}Nl~ghW_Fos{=}0$Z0GN6QyJF(^s_Q$g@d|1t$sZfUSG8j zL^&|rUWm+cbgbzTiIpfpbxQ=9@mq`)S16+opzj)UKNTxH z<>mNBA^E_`B03>_qWPg}^*+{Re3quI%wcDYHgAm=6In!!>bX2c-G425 z?$$U0RZdbVwn{5YM;T6sHCl-Vilqc@Y`x*h6802=S=1=nc5+Ec1@+LS)+LsRQev!3 zw6{iS!m-6KsSubjt>v3~x3Y>FaRPjEUNdJ$Yk0NJ?UTSN?^DlAu-g`DKbJNvQ_E3y z6(L<2{NE5YetE)ImlV-s-vZ)?OO-AWlt=5FSigJm zH8x@5{d&(?BD7}3zvR2m0^%A78FYya+(GnNwWXUM)Ad~k3y8PXNsL)n^^+yK5z&6A zoO5s?=cHZA$~oLZeRpNnYdQ4u#WUuPRA{_;*O0avmwGk&^(N1-_6UwOPFjoU>V6me zk2_vnHBBSyVdS}0EzbRo&BM7> z{PwhO2fu6?^I}vq1fQxkTCn=?>^6b@1xcejKWNx5?*ZVP%^SpxuM23m=gi5x6wUqn zT4jw?@2(_9OwP)taocJ*?{=ovyYyUXNy9gEva?7nq+6W6&A%v}bvvcADXqb8=M6;} zEyPoG8cRm+fxX73@~Qp3nTyE+N=NjO7yewX!~ z7@dnhT4iZJpea&d&JcL*PrnbH{qsmv+6EHY+7R3W*-x~_)!!<5%i+r>VzQ1d8tq4Q ze3@2fKRFWU92v}`-5FL@Ea)Z~p@)9w^?2pv9}gdjAevJTPLXMInd#xN%`;;?0#q_| zThdH{CH583X-{supGmV{wpoIB_zXY%YFE4EeX1&M<4BW}A>@GtTHcy`l3 zX=#604{dpvKP1rchwACaxO$;;R$HUeybLeTcesiBJfH~LKV{lv$CvXD-ipGlXrQ#$ zbq-d1^Yw*1Kys%}nQ}8o>SV{}G1UA--BI3{W_vS0p+8SkN5@CSV+O<~-d|E%1!s%2 ze7k(On-?U?3?N>msdSp>zJ5PPPfwrF*Qe=r(3ueLP8D&HlE%rH5;;`JtIYvbQXAlwTC&uY7}O49>( z&sK7qqGq~Vb$uEr&KA2pAWc=98AvM+$OoZT#FkXD3Qp??0PHR%MMW`I(PQZNRz)+A zrW|?!P!Y7w?kDaf-aw^qigGE)c_j(4ruB0HHKi2q0dy?CQ>Gbto`98xHy%a?~y`*77*x9*zKu_$b9==C4$a~Dcp6|(!KkpZT zI4wV-61M^VIb?)NzLSy5c=kQSV&vF(G-tjGCI_c01n5*)YKYisGjB!G2FhcDfP|zY z(p*91?6K(51A*vxyb^>lA~E9<0EMTfnmY2I<+)7*G$d6?Z-)8+S~e;yK=+U$=boxnk=RP(b$_U@BcUBk zc)<@?@7(n?JJh!zg{1j!sKMCjC;W9WXP$2cp*)B09;=2VQsA4v#pZGW9c~M}f!@R= zi$-7)BvS!>uOEj1exFBweNnz|6fIv3V~qZFH82o+8h8>?CrjE!3_^cMAWK-h2HyWd zA2GrD^9re}KI!{t+qf>VPglmBF#^Utc`Y!omgWMH^D|z5GiatE^$I}s_<60FB%)yK z07$({r769{0Il8X**p8g|6E=Di3@X_$roOqBUT6ie0DF*opI>G!0`^i&3pW!kBI-+#BQnt52{2A2WVy6d47c;x(}#mhkRi+~Ob*zLRx;HK2h z2ECr4j`R=0{*U71$RBVSQ8JYxxf+%b2XbOPw2Uhd({RfFg{_ObX{rBba z0HP_C0tIZ_zF|`%Yuu=&GXTwbC+kk50 zGw161!P!!6SF$WF97aYlPySYt^}pRCg)+upkH;H8b^UX^|KMI7A2R!& z0}X?bYa=C0q`y6mj_u|T$6p7k#A>DYw-1EVCIj#ZHXx+;Hx(}d<3JB_{7cmLz2%&! z*ca)hV^{uGthDjgEUpDZ$K@YQQEG_cxpL*t=Nj;g;6NbBlaosQj2bxs~g6M>5K zNkFxR@x1^*_pY<=C$Kr_5ZfYi7piLfhb z(RK!oo&r>@0PV(ik_s~a!N?2Da$z_wfWZv=XRq9S1W5c@a#bGz8}(%Cb(L8|*_kGA zEdu}(nD&m9uzv~`WZ1K#coy>YSPL--!z^Sx=1C1mWEAQbOe_&Lj-~Se*pW1N576m( zd{2B|^Y<~?f7ySHHvtC(#J@%S87}gk)^GPQb<0HTEr9Zeov79nweDU%d$?Kw6lX>O zdU3qs;zOnAG%1*HO%EE4ruEGjZ35#Hff3RKlreMtc2~CnoxpLWvdT==|6~vv*$#)B zS8~;RlEe%=Rw1fb(yseYSLl;_s0^37*u*}&i1XuSZbdGC6^-7g$%KUzbr zfU4!2SFL)}jb;MyX5)>%m1kH*A1wBy@u#Z%RvPc$rc5L6>~IAd;QYMvn9Di@vl+;M_+upxMjSEWdZr0UkLnUk{m4^cm&jtUT$C# zBFVk{7UlNi>xs1QML2?tHXaa~%>ZUsJMDY?`uH`Vv_=A;#M$kn2NXn10mS3dkuK&` zht$`(xtqrm{(k721*pvF$*YZsU$!z*E_&6UJ08abnA;GOpizogrK)^jKbZpZzfz2`B+6F~?E3MJ7P)X7?e%;LY+8IAhphWkoFfo0s zJxB3xXXfm~6O9)RoBEac+sUcJCV*Vx{N0QHL4P_u}obs z{CiUV<|>FC_$qkr?an`4j6cN_e9Qu8VWT3H)PFzpPNvOAZSZWmW5d9gM%cXZMuBct z>j_@RiK;tJ z*o_3$D9+0J05&eIHuUSS^GeP4o9nSYg70_4Z#%M~;_q1GF1%|}!ZHElDS@AKh}Cdz zJa7E$S#tVa*IQEqz^qbtad}i{)p-2Y7kJLGvE4e_7~>5J3IY@b6##aerkd1EzpNrd zSm$~cG$x^FbR4(5t0Z;vx!})%bg1r2g8bgrkDMP38cfL#MQt<)P|#P7cp#H8%N(}q zEr8d+UDwY)vzNJCFW9i8h)xkXj_e9&Y$hIi;ijAP{kxZjx5vneti$zN;FnKg1%W;D zQXjGqI5c^lMgRv*7!o=_)>%F@6E$mi-VY1wG2(KqUs~HgoE9y|qBG}af#}uLA%M$u zCfj$j^0*A16eMgg*2BPUI)VXZkA}yCB;PP3_{fo_C*_bGyWy z_7~k}XFdF0b{Spa)$>Kvej@pDt?Sd74*9-%-790&3Z07Lx%eBEIyQh@R9j#3ivOtwVs66*-8V zh>_W9Il=b&SY4Oq#0mA30p0+Y*JtP{laxG=CejLV?E(Ce>?-7X&k@-upjv%WDPGYU z^t8xW9e^rcEuUse511n?A7);jKH|@jWr65M6y2V@>S9m-YF6qCMw923R+_l!>Sz&% zt84D4)VA|cy6@?{rTgfPG?+Ypl>C5z9_Ag%yXzZ5QI+lX>2pf6`G6n|SRZ7ra~5Dd zas%pj+b-CndR@DjLy-1JySZ(DaS-aW(7bsjA9piJE}viEX-PtZT+rw)DUoo^%AYjGNlEkd^b;v) zHm;HG7!f?34S>-2az=Iw=Kx;fYs}5JhUx)~L-*~ovs=wd91^#nM;p;uOG1gBP^Z|C z&<~xH&W#sam-TwT{J7TExddWJsw0d<9iws_d+ou z4$zK44XIzdK1QRZ?>D&Ko-ZV;?yn%1Fn~_^Rp3BLn*QQg#2ll;qnnu?lc-XyBsPq= za`++ruCIp1MG>}PK2%KvhAA#GmHKM*rxOFTC*BgFTZxX73!^Gs51?Gdh6VY=DL~Kn z2ZVDlF88ojvHZx1b!vHG(BNP1;3 zuQH|Oae}00P2~P(R;Jd65tRT|6je>aZ~*y8Vf%B#zn%d>-x-!yo;L3NA_dx65~J2Dc<8T{S4Yb*ybK9l zl9)bP0nrKH;QX9$`YeaSOAV>4`1D2d*giLc#23RvDf569>0*cR1~WUUS3)2L)~h1B zU{Sq7!JbdUPr0ExR;JZE!!u39jR3Q*Wv;tEYKPh=LyjCVrzX7bhw*y!s=VY&tCQ2J z*r1diB&A>JCVC6wROt$6O7@y;u;xsM zl1rAI<*Ri7iZc2(WfOEcR8?HeVXvxu^9wbjq6c!wcI+YIaFK51=%;>--8&rok)%FZ zSM$ECHq^S>vWa{}_0VV(lXOo@dWGr$_ja;<+>mS6yv$?OhItisd97cq@O*+`Q&L`Bz&)B{9SEo8fd z(-RCiT^fmg(EkSf_#UKmTDE=rx&o4aRr>oLF_lvXi?iuXuLSK-G z=z~EpF}AG@tXK+E+kmsO`GoHaMQUkgV~Ol zoPnmLoY-0yD@Qb9IeZEf+#5zcbMp<6?!SZRn71L5RN22@|Zw$#!6IzrFx>D-L|O^Bs%6_6j>zX zR$Jd*`xWYs5Aj$Z(7*M>QP99%GHJCstut2fX&ru;U*^bobTi;OH0IV~`Y%NL* zjeHs0UTU!-nd(|h>H(EKW1E_JdTY4Otn;ZIx1+2F6Dg{2aEH+t%RqSIcIh*>Cwq0m z%RKwe=#SU_VQDL!Vtxj9Y7%$$gdJmT?S|@Gr_gpN)hvHofpg2Y-#r*j5ihHU><30> zR9B_yH8l)A^W*V;Q@wQFIoIQ{VC*0fl*blnMgIDI zbC>V{i;?;8mDg?zTseaQm@`5Px1{1j2@3YL!-|b7BfmdUjbu;@!gQnA&1%OAC=b=;u`Jqpmn z70SKKY{~tSPG5CnuYsi9b%eS}jc?{VLFR3`XFy*@oH~F4?O}0&v}V;Sq2hAX4aOB7 z8}IA)yo&H)K=f9a9WJtOy^b$rm$u<4N+RTu_9Yij2$<`fGaOfH@ATTz*SmLcvL39|~ zkE*<(97Sj!g-=e~;z?^T?M;QJDZZh*nDh$^t7;{Ll6869+SS$#I=A%5PXKcNXnmT# zQQLsn{3{gPgA-)E_crXpC#{cqZ#7V3YO#EI>P(U5D**-rMX?&bntGO})Nh@N5x-1c z^vx_iXqYy~sigL%wd&_z6mngK4w@!dzB>4b~BwRaJ z99m_mShcz1*Xo{QDw}a?D7=gd=wmM(T<6S!pEe%pHf%?ntR3MM%6&XoGca(*O1y0+ zIvcZgC(GX{JUU)RG#)d}Hr153HoYfRPj>7h(#gOW%U`|6%G@bm(}dqS0^-6IG>xMU z1dcO}EXjQsvPFK(8*>|j&weSSfX|-qyrkrNc4m{9Z_5_w(YjuyO+P_YjfuSm@7SM(0Ly@Dtcm1D&>S zYFtd$M+%NS9cJuJYNPWO+dg{1{4_^1xA9n4sRJf~xS8bQ$2ngde@yPy%xr(lVN`3S z-E|N+86c_)3bNg@zqT%kR-D#-3NzxLL!|RaP5BoHrb|tGq4IROX1u(oe5Xf9*7a3R zjwzBBHU5VyNi})xaO~k^t>(r+15Ri|CF|`Ku|3TcDQJ14s82G7^D{BTQ42qiJi<;m z6@oF-W@lMz3$l)Y!p+@4e*$TOS*rr4rVZ*F-qVnxbWmxrzXIgb2D3qyIiw1N@mXsw znXJ*AWOuIQCoQ)&<>k|lKuA5}DRR5AgJ7kbtlO*27lW1=8a>xCD0EEa@A|Hu>2J18 z=v>fFD$!MYGW5bXU`%agswt{FOIEtnAdP-VZfAM0=E_8qVZnzDs}$Cp$L%H>Is@F_ znpr}}8k$rp9}dh^eJ0x+XqaTpOf5JW?c>f&-a3doimWZ6XCHzI;FJB_1{Z}sd3qL< z;**hdik*Ee=(J{c(`+NWdmJnJ8C>7gj*OT(+7hdQ1UM-vGI_87^dNjL_P%Z!uJEeo z+K`4$`8aKmgU}=V&pK?Rg3Cun#I&cXRH0eXTSr@{a$aRC^!f?)wJbV6ELZD5LWCV4xd^0)wF(_a@J@NQDt>9Pxy46lbT?ZdFu$g z>Vq8N+v&Y0yKE!$e*6nlacPF&p?;4UU#oSvd1Z|)rbnmfqr%SqkM=B7Wr(?0=9^sA zS{*MlJCJw&Tkj@6&%C2nd}rAY?4;{;CN-I(^IFcGFqU z+JghSpa{Nb<5AZi1amrb{eR*Els$*_C0^S{+AX&Q*}s{-LUCmZw7x>z^}*yZPI)H9rBhBjEM=3=+08ac^760 z`bgg6enS;B>d>-zq77dQVw7L+iP;_r>#s>lG56jrli!h-di8l~2KT~fZxUa_UvQDR ze_AfSg0`k(c%+U*P_z%#8vqB~HxHPp(K%b)I})-M@NmQJXoa6E{zQ1T?N~ZsdwrbkwVRlVdmOtTytaE1Z-U6;S*{Sd)90P&%6f6uGq7_Ilkwl17 zaf7t&PpQH6hE55#w$y^x8Q;rcXUI`z3O*g|UgJqNyF5wXKgs1 z!Og{p95dBjAf)2nyb}DdiLtHj`)ET~VW^fA&daw<#sxzrm1DFHMhs!8PB|MjI;4;6 zvh5=>H=Y?cS{8!kN-Q8Cf=w}}?wXZQs5eN*%+k-y#aqI2LMsjXQI&SgDqkWrV{}et zVf0dz0y*6bqF*5EfY1hL=?7`>DXXOnXgUFx;jKEUvL@wFcCdpD_Vt@UF%#FDTfFLh zfg14eBK&6iU)BSgVRlx9_YylI;Y} ztc-?%s#E2-Uk7*DGvrw3HbHAH0V}(|G-2dPv(nuXJ{wHFN=C*gw7c(?WLD}j29;~- zEtB;Qj}6ziN#k^zvdB%WH3t{vk>y8P}>S_{^;ReBTY@-1W-VzC9`x$=L8!<(3DY z#Ifv|EVm1E82HD+$C>ZSu<_vO(`WW-LEe^rq_6-yDat}S=e#$P0MF4*Bb^R<- zonoNk)APd&6lU!bhEhg|5i@JKkB$$+ip+4<)o((1w#7eXk&j^ar#Ws1DKVc@)8R;t zAN*hJy=Pcc-PSJr&_xvVK}5v>7C@v42uMe<&{2>Yic0TNBQ-`;1QnFtn-r1WAt3=& zYA8a0&_Yl;p-Br60%ykk?sN8ceeb*X&-3T}(8~)<)>>oDG3OZfxW_&8NK~PRr_B%S zBhM)3f_m=dBm3n`d?}QYF;v}@)Z&e|Xq`eax4uG~WmykDyC2HV*ziL0>(zuShwG$^ z(#);)(ltMr6wRyx7rKglf?H0_vjZNr|C#Iy`7%XxGH-nR$?bxxLzn9E zSQ><9GaAV~)}o-2sv=eg64!J(3)^PvK-n9PqI!phS znQY4)q1a?uCsz{}w%Jg79T*j5K&-lklg!irVM!1I5YgKkfZ{k5x6vVI=#cEbn1`i& zQmrhlJ=lmIpZMh6u87}r7^|_&#@|Y?G{+P48mHdE)0ROTRx;p;R^45L$mxIfHM`=g ze#L*BA^+R$N05@R)EgmHV|#Y}u}L+jM(;R3!f%^5y1Z@R6v{T-LQ2b^Lr+@yJn$Vm zXHi=2d*uuj^|`p%W7)^1Y)Mp|-;!xFFjv{!-w<0^QdU{u3rR>PlA07+1JlkdZYBFa z`j&nOA$a(r)CPwtm63kemC-waZR^MuImqJb%8I3Xl~}Mx!;D{FAcwjBcz=25s$58! z&1LeQ)G&sY`#Uhbu&jI)AaS2;&}+dlRAPkNK2q&Yy(>v)xJ#@nU83t!=XKzSJ!+^a zMskCx&L6n*ZmpzXF5JIWP?>hoMZz3Zf4uEy_GF8fuib^#xYuH(Mtwg+?+XH~)(pUm zF)gh?Q{lr$rub3|ySFAaKxtSK8y}tmb6=zwrzc73W7|`{5#tgLx8hMq$G)%I%pW*2 zpPIb9(U*Au;=5nD>x@784t?G9bpF_nSP+@g>JE56c@;?g_2Wc9XDk(2isDM{J+bK^WRu z`%jA*44X_GbqJYWP#62n1g}m(h4BTps^t7~EwUWWzf28m-}oC6+z)Y}E(r0)M>s5| zgY6rM8WR7=fcs+PvV3vb-3;e%H-$V~Ej^pjpUz^RYM0eeD$Rj)>{pN+_LMtwNf+Yb z>hPjA%yz!)aMZohH)$wWf+L`Rx$|KHlOW{oWK5q&N1=Kc3L)H$TWz*lADH48LCQYm znFXAU>vZTmCt}I_V6@DV(Z=&upD|zW#x~|r9#aABR!dcZ8oB&~0+X9!W(uWi*a8nFcHLJ^GHK&h%b?I-E@2Sr9Bl3wZkD}ZB z(uzq2q(7@L&dlSK{@%LHF8+s{8+l^1r8bYpqt4hW;6PYz4dM!ozwlv*eh;!gNstQ) z>kD{b=xouJOC~F1fsM2jZ(M5W(W|!}V-Tfl6E1GbL0+X2>Q@xZPP7lv_rT=VlEq>J5l8cyv^1QG{>mJ(MZcQD%Ga@X2)#@)7LT6Qc4MzqT}4otN$RGb}|@i84W&IpsdgRlHY!uo(FnG()qjA=n!T}_rSJ!@#3Z1ZHP@w>ZAv4 zoz9RIPFyYjvr@&sJRq!$E;P5u_vA@)Y{+kbAR+5uWoUAJG9e?bT7-KvkfqkQ(d^)0 z?r^#p1acEKsZ-3D{OLWZr`BDUo;R7%%_WP;lj*k<%1Lg)%hkUEFImNK!4E_OYfC?X zK_A}Re-+$_8>m=R?wn9Yjr=`M1`-?V)0&D9=d`rgY$3A3b>TLC2_XIy1+;87J!h|g zEi#f`Pp);fft*G8q@D4a=b+~bGy=3OjgjBHsk^%NBkPj;LQVR@dS&5)xDiA3ovxUM zb85Rz6C?a3De?$b^uo@7bZK%vbH)j2%%_x%4-1_G^}qSfyc`;8;*o8wzKc7qvh%cv zP||FdFbtb(5KM7r-$+hz3;1Se4MOr)K|8+>Z4Xu8nQiW;dR6zPKh;>_`0^+I+B$62 zedEA(8aSB!Nk`Aw$8nMw@4VkOJf0G)ZTky-vQ*d{hHj<** z@qMt^yq)X4cqO4IM9Qy$5a;Jxs%l#;-p}KshqiB(j8Cxgx18;^ezY-o!*G_PTiywu zo!ph^?yl^_oe1wtUHE;I?9j?u^H%1E()89zz0(vcO7^+!;Kg^VE$@0~dC7Qdcuei< zMh7It+T$?fSl~uuKgt6xX>(`9{V`wQCLK;W#09k+VdU8yrGdMpgL}NO_AUmKetpoL z+`DdM@M-UrSDTyV^iP(R^1`$d*0hEO@Q9A|qu;`RUl5>tEBOO za&T|O*G{KPcwu~sw|=K$c6(H804W-ayb!CTXU0GjF@D4LJ!E(5l-%=T%hL*CCJY-w zc2>Cp@V6X-@CJTDLkKZ| zjMN5E^p$+RB?ZY?k_-VxP~aX>-zO6)w>CpI(uPQPJ&smK`YcjkhQM6N8}bSgxT$Y!y{b;gyb`;ROA_&Lj=(lEfvkZM_u1Qm240Zl z_7XE7@%s408x)l5HG{VXt@c~YSc0mFt8yID2uY+ATENxioQ85fq7gaG&!Gx6GR
  • EX;r4Db`796aTQvCCCE9;wZkHYdEeKoE_R+#vZ*8RLJ|xoHkmGHXkZ7TV;MA?qN!tb(^RvZ;%X% zZLp<>uyKohJc!z?rn4ig;9tF+ahGNu@3U!}`J|62+lAITyAyY56ga`BmMO-wf!nXC zArjE-T6CZ924|+ zV4)~hyk`ct#IE6<>hFg6-!93OosC=dHH6|>a)|my(-wK#ygzX1KB@hF2#lmI&MBx@-S&gG zb znDVBF;dNFV|E5J&{2;0=DDQXM=Z_v5p(3O0B##D><2*y0!A}JT6vj}cJ9&m)kaI*8 zGZ4W%K6Q;?{t-AI8(X5#;FE5?)qe$ts#x{DpB6E^ zn5WQ?BNy}MyX%p=J{GRj)?&Bxlb2M>NP;2K-904C*4B?p3{NO3J9TMRm?v@FpD6vl zZ$l`ATGiEe3+&gnb4?DH<8N-b$os%4+pDljg*Kl3(UcX>>mFe#f!~wkS=?39erzn_ z56==+P!mIne$?0R-7!0z#sJuX+EWjkHCMq9wW3OksNETp7@L&p#YY=V=JI1}k!r?V z019g4GcSFW{MC#_!8c*Sax(STL1mDgD|u|SnrKILmvf(x-KO?sq{c{;u@7wE1GH;B ztyY7twH6DdLT+r`_3^2yY$s#B4_G3pmT10pF?`b4Du!4hZ6k~%<>{oI9NT{Fz9Ly& zGEm`95-E=14fM)PxrfahTkv#W^a(>rNHa$(ml%fN0z~{4tCD0h7D{m4`4m|(iSb6d zWb3q9YDH6brN<#+_#Pj;M>%h{K5x0WyoX5N?P$)_rlR6B$H+}2t?oj6lKH)7hEM)0huuun^GCPg7q~=B>gPVqW&7?-Uho*+ z&l6%vQO3C3aj-Ujy|Z0P!TCDRUM}WLLlQ<->Te!K$XLoLnk@yEk@UnqxldWZl8rrU z8hT_JR`9zi{RL2c;(@_8DD1{z!mDj06zl1ofLfB&(e@;JWQgO}_XCHIK<6k&n|0z( zv>)5b*ib&==Qa~`L=zo}BNisV7-SXRwG!G6l*;nN|P&-tayLRBtme4D1A(TLRx zmI2sLa!cO*MUCz=ovZG+I5fCe+p_neO?e=B<*j1kuG~M|W`#XbjUVy{{jqx*!mzkH z)O6}ucOJa4I?}sDI(5JKV4LLOI5+yB5f@M_y{YOk7H|ii;+zbCBE?mz<-(HmaG=&I zl({e?O=`a0jadGTSGHUs5F77SGmgL;SnH-fNobT?v_WM63@9{B1bd>rh`ytMA;zo3 z34QpoGg{r`wd8hJ7RdG9Gi{2vzu>I!CWi={$d<_5cIK5TCTH|lIM-^S$V(rAbi_z} zZS!{i+@lvv26gu@jP+}8%=^(qSj47%{Iz0s=^UZl30IB2Lc)4R=5ji4xpQdhOzzDn zY-sT6$It4XHmL$W7F3<;pwU};ZO61U`#12xak9mBslT%gDpYIk@K+vn9V@@r8GF^9 zbkw1t{dI z(!=ElZD{CV0kMC3``T};B<9Je=La1LmeF%J%5w-Ca~&yd2aqH2CQ${J4_wj;^(|Pm zlkc_ZN|@)Aq0C8(wBG2F@p@ORB#epkh^-o;>mkdi3v?rGVD%GOk^9}&e4kC;7JO~B zSgx_=Vx-DRx5bQKzpbPd@L{ZjOvv8vixu}5U*BJUhUL2vJmBM>(Q9$3)g*y=R{y>K zhT4buov-GqZ7|&exVPWRs6eh(t0l}CKQemNtSymjh5J%HG&N!OJ5Exj!Iy~SlL4~) z34vE22Q#)l@0?m-D>4l!;o&+GACeXu@0S^FD2NZN`UdQ$>nsK6x@{uKwq2Uu1fz#} zIw==m+X3Hw#wM(J117EbEI<3^47G$)SB8R@iSQ;rPd;k`_n(kU+d3=hCjWcJ3UkP3 zovd-TfgrHh6xD0x#dc(@&GYVK&uN_nAdC8lzE-Kax;(T0iS{dhmX5)8)dc*Oo#wu~ z=`Cm_jhoUwNxwH$=$a(O8gJkcu@I&1(ZAdy0ZWHHh{)59y~4Y`&B_#rL;Oy?yuFzekg2gP-_wQXZGK z=`4A?m}Nb7%gM5s&gXBCxRg8(slA2vV-;8{%w^j@U>5QGj1LPRw96Veo;A&CeAgi< zGAn&T7`8GVZk4e}O#NQcT|MqxTzcQY`5DRcg=Hwq!QCUdO4B#_$LS0FA>4~(g#iV5 z0oicN(gjR4<>0=-|1q3EP2(ecc$S6rYcKI>FyGjlY4hC0Skn7PaEf|?OONuC^@Nw^ zL-!+3Xr)0qLkt2S=Q<_ZLCMic;)C=uNAt=5fvotigztXy=kbkBVqFJ7nh|lE@toWj z2~HJ00l>P|xhz!pN3XGg9zdM4hAH919EmzfM}@}%~&Opd>{EqvtO@+Hs!*Wfex}- zX@s>OnbeWLLyLA@j$TJsJQz}v>^TbfS>l$Wk>=LeFXA;!pl(Z8{RwZ4*(;ukk&n~6(`DDXCBF` zXg}m3Nz&E||J4#is(uHCn8h~uuMf}k_4QSFz+=m=TqrLuuW%u&Scjx_c)auB5u^N` z>hlZ6H2CLee7rR`t?auPTSTmDK|Z|ESOi$Q-?~4Ixg1r3$uV&Lk38f5`o#xfrmv^> zsZIwMldk*LTz3je@Wtm8Sc7bFdo<(})pS)J{kl8&v}1uH!jWcqLvP zO`0rV4RO9kj&zsP48<-EZ zqHS7CfJ_|w#^|^)GW8BZe!u@4uO)0s2smlHic|_p8zD7Qbk-wVPO>SPzQ$wAQZWOSJ(d+xfK5M*Omu zf2g+WqzShpx$E0&B^SI?ZP%#tpwmnt8}vGQ9OL?0`f&gE+)!Ck2$QRxxMfdXoSS!9j^#y{&NM}nvcZ)KDogg#vj${l&Pbym zgonJ)w$~2xo(*RX<4%l6avK+1iBfu6Yk4@Vt~^7jZ*2EyJQO$-wH71lq=<#4hnQ9g zl*mD(i(mSl|GCrOH`OL!Z3W-0Za7yplz@BhlN&LklXMi@&T$|lM;sQ!5ST16_5{HN z^0bJb48e~Y zLx~DbW7}zd=$eU*AkwOL|w+=V>I#5SD(Kp~Ct>^n<-=CZm_ zorHcpP~4446Ln}kBlsVC!-u#u$nlLNIrsA9(HZZSqjMb~2bjsdaA~@?(PU)hBael# z2_{`h+y3yHwew(+AkKcDAA4XWTwIFmk2EWsV$@Gp0f~gTQ`;2PamhsX^A`kE$f>r! z5bs)6dCp>RCDJ6hBvEgSRtm{?M&o4Cu6dzB4i zt&6wOWXaO*cp%K=tke?Pdq|*)-(y0_Z~Pa}n6=m;iR-Vi7O8e+<$8O%G1w|Fv&nG;f`k(`@ZQF{CsKrYr({6`_Xk;W!ZAU*?dG zcXux^Lq~{#NvGFu6k6USnN}B@TRaXGh{@|Y9qc66K_2%nbh}Wl0y9 zOWOgTDp!@2m#Q|R{1%ENbmMd~$>H|`u(`f2nrXR*?VqFC#%7R2MV;pliPhTkJY&^0 zH^)a*_n+Y9P!$MAwy~y%9aT%q6ZN4wi95yn7}t8s;+s=%U5sjRGu^TxYPP}k_8xkDs zfWa1HsF9#FYRSJntvRAR&m@2S@r%`mdL>q3 zdkRW!$)H)Byknk(!0|{YgX{k^pTadDUo?}$@M9zEpOpg3vuf$xBRbIi8k8KI}98M>(RI2U<^~+LdPg#n1NKOj$y?UxK)^HtTdrhtZ@vp-)A<{1TFDbNF_ zf4+$YHc05OXcbQyFX zrgPh3sMD2|d=p@A2|NOj!>82d?*3<;!54!0bt48pl#U%|6P8E~|m0Wxx^%krSQ>w4cy7fU~F`4lrC` zd0xG>jLkDKaI5-g+W+k9+urSsmQ(hL&nsouj|glvpkpljoZRFJx9vZ3_=QDRA@GJ& z%FF0DB~Tb;L`)ALG>3yL7Kd||RI?fuCf4P$zCOb{H4U7_4xz@AdK{20dV2js4FFW%oSB$HkUO{QaD4jFCc;N#VQ>|e)D!`|T zpy@VN4prInd2wF#q+4yjS~+`RU)|4Ky1>V$X)sPIeGI;Pi>txDxk73wqHVf?USMWU zOndrg%cb$H4RUETDHjvQZ4cFVr3=W%Xu!5 z%g*}=2GiSP6<-Uy*?|qanLs%1*`r+PqNAS*8h2#W^OkFsZ35sd5@vg_2J};A1Lw6N z3XdYJM5DfA^WrnB5rc}3s?IdWfN`Jb3Aq9Bv}!hc-O-(^*VY0%T4ZJ-?rz=YJB5EN z1`fIpjiu5Y>(+h+qcyWsV%qnW$e-y!w=B6lC4I5xSt+2s;Zg5pRPNn);F*j!Hn^& zllidpuFy^T@>*}~^Gq*wTpTq`*}Vo@q(5x&(PSz38_`}9umh^or-G33Of5G5a-UztR3 z-gJqt4Kl+EBP2?Lb+zWA*jD@s{LxD)7;CEo3Vg*Wq;`S3o|?@w?hklQ;D3vj!3S6{ zzqpri_q3FTh~gr{CB@U|C8?3EohkS9;BR5tKUWB64)I)%=>a>Xu*n(cTOn8NhPyRt z6&Q#5y!R?@rUi}$n4Qdf>0dlA`nrAWpUixz#@q?8F4tM8BVnEGi-@2}sbg3|5al0F zMfV>+aONLQsUkN|z+j%-gP70BN*iC{t{+Ufo%u}z1qNH4lC$Z7s6>s&a!KXc9hw}1 z1_A&(rzXpV0esik)EpWX%yL{d^4?seo1N82i@VD4H#an)a{-2Uz2$KrmyGvBNuYA# z74vGvaq-@9B1S(tp2b8q*MmTqxR;_}F_nVTu!-uiwQ^=L846KK zg&eOu->2jrNUB+VnU(;|T&OBbv*YiUamsV#(#x~k-Js)pEk>`up~uVN>?-Y1w7_7N zyxUQ3V51~3RgG~icaCU+Ggmnu<+qHXw)&YUnvIh`%|7V~e4Hz?n7m?2Z#adO*kXcj z2{%2WY`E73q`{B<`VuFi0gl@SGgmeuR+syScZm6MgMUb zwM_f1t5U0Yffa-0?#xamuJJI_DyXnWztDS4+6@_>tlMjNUE$pQknDrmX*}Ei$v#jK zE;?HmROS_p(i1wD0Sos?|Ht`x^!DKtpoLBzm(#c{3Fpp~@49dQ%Dv&ib~<>@dfvk+ zju(wdTk84apb`0~#TYVaUIgRQ^$t&B43W{_^*UgopBmFkur`>>erA%P;Hzcd^IP?q z;UMSaV5^{sEK+o0SxjPJ8zGjWBptS&F_Mzm z$_!Q(g-9^D>l@+qpQn5X#=&N3edGXc@vGzy&&knCZ z1SKJG;~H&D><#+8Zx7o}^q1saU$`+Zag0|SNbJYBjrr{c@c-b87@hiycJ8-drRT65 zwZst1O^tac9_tqz{`x58N#HQ(@u4cg=A=ga*O#iTGT2HJ7F)#IujcpogLfdyeWThV zL!aN|)ugiFop|9XEX+Bh5q6cRWl!4|L@%z*d|$vw7X*6l(^*=#@=Gg>r*8MdK;^q= zztQ*a8K(s(K<}Ie_z%L^KIs-t(9RIVSh4+?dLuf55pihiF7f0iolK&CB;q8UGlC;q=_tdm^VNu_Gr+#%Mi2hu?`ooNO`2FI~OZU=@eq#br!F@WT#oA># z#nI@6%(;vGs8lD~4xXqMd0u|$%&l{q!LZFaSuBRia>sfi$5LNlld(ch0!Let_9w5z z*S_hh_l$jKA=?8PBhLlTK0c$bbJ?Ru4=c)|@yZ_;j&}j`*t` z2wQLT=-eIwqj;_KnHFq+(c*~qTlBYdYKyIAE<*>{e10H~>MLo>}3xx{C-HYP>1 z9~JN}Ra6id)-sj55%TM0*Y$5`ro5x}Z|b4lCwz@`BoGrm{Er+JJtpxf`tZZ3Lucf8 zANmta^3SclpqJ;gzyjqcHGT%#iZ4)FZ?g2V8rea4_PHCqJ{G7yd(iMhIW#fRaHUFb zI^x*DzV^!naghQ|)QjJF?a#I$XUkS`bav}2q5m*XQ|a6I&NiFIqcxqDvX6h&`n~gn z(f!#3PoKEK6==>(Rrq>*pII??D&NL-KEq}v!A(1~*#0bSHxy=iqTjO9nf6V3I~R7R zr`=-0EL?{0I-0hIimtAOo(1&i*wvtXJgKM0Z&-%-^;D1J{p}5j{0Qdcm>4i#rwM0& zz#mB7<(uxiD}2t>&wvI8eIpYtaBSCGp0hG;GjkGSxnqJ07YDvPMh2_s12}so z(xk-lmkS3g4MQq~3LX|X5D|&A8O>is*ZRMHlyWBM)SepcByY2sV|SUfI`$#(P8jO2 ziX?lUC?ePEZ)IP-8)aeeB`+m|^-o@K^!BOW9J;3}Z5)0WhL51fYL)WOMn(S#kM1BA zDrY-4lT`Qgit%Z+G)y-b8?AubSr70Esjv8(%U5H_WBj6v4)>4bDigKi*IlNfc3Sy* zG9)s5kP8aok{lDRV;Dn_$cm(uzX3zOBuX3QwbCWYQfZIp_f!Y8pV-*A>02qdd-~&U z4Qt92nw(tT)egnznb$j~J^b<%BaKz0**Oy&x{Us&;h+P~GBa^kGSH~@N6c&IG9{LU~p&~db++y!934=n#DiG61YL~$-2c9^mh9@ z4m||gse^Zqa+nHWrM{o;)nsWY!rN7trDqTQ!!!`Oq#$zX(xoM3Ee9(Gq{ji-rms9u#_6wJZt2&n zzWD2~is8RJCQo?wblT6>HpuOuoV?eN#ExE?B`3LVjFmoz3IB0l=2JHUmJ%D3z1~sw z>_=U#g{x7s3e_&{4CIMfC?>?lqV~$2qukNs^*t&Z*@PNbVm&s&#KE}OY7T0=`{H}X zxgyhv!)e0aR!VnF$U#Xa82n*e{Ck=5BH~~! zOin@c+f#;;pI`fPVl2_K)n-7jy1luEuk1m9AzzDfrnKFJ20ZKL%Nj8ntS!jHIfG<&r_6F7LPyaBk$Ozirl1G4vHK5hK>jtZU(ZUVI-Ez)U|;f5a7LVQtej8L~n z;A%}62cKs}-Rf@l_QWZOw>x^(viJHw49LUuTigz?^iH%tr}x*vR)c2eIsx2*@$AK` zWp*oovPMvvU|klU`DH#xaDU)SxFK!d_K9QLrxGH?4XvE*g3bA6>n(eu*aqHKS){9Z zjYtXHk?2f4-8NeMHj=4-cF}$Xb6{3(F6%b(vxoHkj*P@+w=@l8|1NaGcfQQS2(V_B zFKUrwJ-ik#IE;W8G*uI%o_`^9M9P37xAh1|s#2}H;z{qXAZ2Gyy>WT>B2})Zr{g<4 z&5ogL(+Z8L(_f5r0a)OseXi2;)A>F7h*K**mC*Gm?T~~^()M*53Lk5&l>cc~t{-a4 z0NcS5v4_2|qrs~S;?)xCs{B*f4^3Sw%9QCr{5_<+&u}f?8uAD_rNFiYtF0N{5?mfK z!_}4Mb*f^g7VXkj1GJ$|0e0$XKDZu2Ai*i^jpSUGX4~NwFUovStAF(XwWKh|hmM-p z&DD-w>ye@b9ha}DVgKp(nrhH(=MRG^R_B#0P9Gj597is`it+oszcTMRA!<;*@4vEd z)O`+xQz##*`T&Y}D|jw2re@Ja&Nu_ew~+!6g>eO^H%0 zZ=WrEq)L-r|IpZv{mdlPx-JmbarWzp zyO{TXws)z_=dw-DC%l#Rw5yekK(~JwETUy3~D`lsj*?bSH z@WdJOtPNUKS@CQi$fv}M@sP(Fv~rJPe5ZtZK4ienY|R<@t~X-ISde^lfSLzo{UL_m zod?~x@Qzw|mR3Pqz2ICXudtW1Z{NB{4OkZ?)+7vS2axQE?BI3~t^(lIxNdoRR~)eo zLC_Gij{tN`e`A#xyu|u7lCrpD`cyB^#azZ$Fjs5ls6oE*@m-hQtFVz5#Q1Q`i(L2G z8glg-bus0v*QAaJlBn}zw-e;D)qrHDyLCf#zpBZNT6lAMK^k6F`iQbJUhY=bLeuGC zd~x*Db-C4Zat+^2tf@+ea!H4zzxyO#u!FSOm#tW_zl^%>rF(q5Y`2MnQqo7_r>-)A4a(RCJ+Zo`d+x1$l;mdr#%;L1KBL-Io59d%YQZ z&|bmV9(l7lv?B0F)3e^}9V)pE6$z9n!AA3UV&kLmBD30s)Qi2>5JtgF+6;SSPdFP~ zk#uj@y+=uI3_yAx*mNe1d6KHoHT61Rc9UhT`?u5n)MAeD-KKD3v2)rJO8!evAThAn zrHpan&j7x)x22fs(xzn}D~9gT(5#r`#J~t*2yFXt>&ul3&J2G;X2WTR^2@6qqzB$j z(`+I2;D_CPU+40rB46z;ddYeu5V*jGj9(-5#gi z8GNnN?=YyR^EuOukj{rU{RdVy^cB~D#N`p&b9Bq=@&ZoZW{bDU6$kc1CjPiMOiT$X z@0HKe)A!OTlYwC*Xi@_n>F={sJC_llR>kD`M3ZlLs9|CV<2Gg?P+Y3Ob1c$>FTv74 zdvBZ|gBcVBsxn}C+-`Ve@IyuvkVr%?Wm>-Al@Azy_dZ2cw@0{`%x5}pAfVkob6osm zFomNN%q^OEx$t*OO2ld5%OLoO!=MA(cjw}MmsH^PY^^Wh0`w&Mt3(oF99kEjN*Rk< z8@rPNK3RCyAI@f%&=^;=vgBB|GZQX(MbH~D5Amo}L+slV6C(U1D*ds3*03TZHP=@> zI&fw2N%}P|#^H$NHJp zFJietE7@MtI~PWLe?9;HJ>5?=bKO5elT?w=9@w28Z_Gvg=2@2nz!^G5`ag}Kr{o>7 zZW)wWLOaZg5>t05eBsJJ;Wz5%2{7#ixrq*DXS@iJ zloaFoS4X+3-sXoWwjKBlC7t88;y1azPFyW~f_zf)03ETgAfXk>t2~R+|4e3=Xef)` zyvFf_gl=yNWZLc8%QLxtZ7j8_?Z|mPQxpu-aMNu~RoO4=l9*ozXx(7p747W-hAdGDIB`1>{9>$Cxi%nyKS z(FHJKEDq>7$``)CkW4RuC?NicpvNsux9c~&hZ$oxpOk@FoEAj_jI9bF;4X7(;}tgi zl1NQwKFEAq>UcJbT?vF#OGG|_J6)j?Ox+AuKu@?DzdU_XHT!t5PwDv^o~E7LS1;{e z+z^}_7y!9BF3`(Li|FBe6KUU~Z9y>qq%ApY@x zATWB_*K*DV{r5NbuOBPA0xTpF@+B4M>;5+;`In#BDgqd2WaZM_%m4JP{2~D6=#I#^ zI!AkR|Mpu)^ngukDDCo(|ECB0=M%R_fKJuQU-_N#|FJM$!wJl_tm372=AR$_?`=k_ zlY-2zXs5tS@891hFzGU*)WbE{LVxba3d7`oG{IkpffMZ~nu!lS-PIiYVw7u`ueWVE zN5cgFlSQ)FUMd46*@+A4uiKx~G1z{6$qGIhxV6Z&XZAhD5c>D(NTpDE^;w7Cy{dtKj@1sQN}~1*6w6v+Xk3w92K=DDVdvLdDaRlDV_)k$h?ol7j=xc*p!v)ah{r1L z0v*~M-4xjhUy?B@Xtc_yzuwy+<**<>Jvx}OJu(A7*v%h*`t7(>z@{V0y+23umnd$^ z0x0$RQNL?)5-Pwb@jJW$^A{BJJhAa&cc97{D#4?c8PTkS-b6{8+vGyT#ywvD+kVTV zGb>WUbDq=fCrLS!zKt`ot~5o;uLN$+|Mc2FNHTprx9|2N^X8A0G?{B(H1YYy5fKs5 z`YOA(#gX$Dd8Wn8Dsq$#_c#2=%7NRl;+9B_u^P9TP!5$36?WK8pa3}YGmNi>aNngC z3j~k3m+zX#FsmQ#&hg<4o>dd_nak4bz=XvrtUG$k*nhvgjUX9j9k?vhk)hhyl`Nxe z_3S5;V$bgvOl(UB276J=<<U5H%?f?*Fh5#d0qjVSj-$4|O$Gk=Z{B(qDKcSLFHfusUl-Y-P_7_ z!I$_Y&?IVuwnrRl;#PO(G9-YeWHnag;paz0A-&Wq$^n~Cp?og!#OnACgL;QK5Zkqp%nsP*VT*-l{gr_EKi2Fn_LU z1p@T&k~7?P*JlVeu~#iS^;|NgP5Uzo1l=@Ax?m)rw*v#1wRMZ3F&RVw!f{uPDi9CT zz)C_M?<_H^Y-J9SY5yYTqpsPE3{wHLOq3ItX6W|Aj9~ytWQTx;i4baz*Gy;hz{Zc? z3FK9x#PVo$<;;M4X*J4uu33Mh*I`&D*Ui@&JZdU?Vu6f^3!4pxri5lsX+s1n| zrv2BvyR<<(eQHQE=@G1>Q zQcyk%27Tp`V62!!+eyF3ZW?6tZ%u5ggeZHz3o0B!I*I(B?nTvDD!It@o?9AB@S_yb zJ#yG5R^^EpeaV?0t_S|W>E;x;HE1&C>Ft~3hfwleeCRY%k?V->)YR3(5>ijf3kV9{ zweL!Nj0$D9Q`JqrUOm&lQU>&gZK4i={_$vV6%aRAxdkOp_|HKAaaMecP*rnd=y`Eo zPI_Atf&qwkTYa3LcPucg%!|Eh)JaGnTmb4C|K9RyuTLF;V!=3F!RsZZ%+IT}9U&a1 zL_>uG4}jIXnsgyDUWns;x@GX4b)ME5mG<3W3cGwiCOB}U+$L-uG@yIc0w=7wQzR|> zbTZ^u3Z6=mJ@+se`0$-W)C!WcWcszI+!wkms9@SJ83dTOBE3o*?;3u$^2ol8pGkvF ze0+VJXLQ%N*nGq@I>ln-dylnOhd@nSdC%o7rIorV_61^N<3KSKzoHFQ1Ls?d-UbIf zE9-Pul6sY*ms_|VjZY+%@_fkJJW4?B0gIqXrY*p^7ib~E3S?Vy@Gb7;nRad4Q!`H%fv!BJFcPwwki<) zoAU=|!c}(eB^LGLPZp%yb_;DL0z#|ZUtiXlKh#lZeTtxGiY^-*DFS^#)y>uYx!M_) z^GW?fNXh&smxoQiYbr;5YKzn=X}3^e>&;5+x=p_~;zHU;Ly@)XD+CPD(>(_q=aocv z*JnS1oicAva`*yRct9rs=nN;=wCMxZHPbSKS=K>!KD!P{|1}jvvjN~i^1`Irz~S}o ziW)WHq$*b@h-MZ9)F6pg{WR%%scbbbQd3SUwgwWIqf_ui6NyiZr3%H$J@dxBtkKBz zea|Du?yrCDie6NXTmTwjt(+$gcCq^rU>}fhJDCLPx9-;2w^_p_)(T0!qCX!YtSu9O ze^VLF=R-6A8uvjFmUCXRne$IXca{kdz8@b%3O1^rT5RgtDKNBWJn@wAGXsQ`#tT8Q z-aoXf)lc2H^A}y|U%r_pw2DW&JH2o*gEZ1)ebp;(va5<`?tV-pOM}ls|NY7sP|f?w zpUJ`PSZG~*je}2FkZGgsy*%V~_R~LoydCuB9%%}}odY&Z(OYHQzK^0iMraG+!(YCS znD?$-ISP`>!oRkxkzU@{z?B}+4p=4_MqEQplC|9r>q zeszrQcz|O?F_vvQhT*}z%OKTf&7Rh4of!TzM!_0k)AmWAa{zjWt&J(9THJfF`o7k$ z>0I_>ciz%SCVh;0sW&tsiG3=kIsst0a1p#0@vigWvr?b`Y7CX0XHhQ)OVg4Ow3j4` zztVXX`m%Uz?%@?h6b-4loQa51^7qniruVlyL|hr8zrny2l}&Tsxg+z2A?DUj=-jOY z&UR%Xn9B3SBV+c|}zNl9;8!b(D713*f4}o#z?ARlm@#x+tVx53Z`r zXt1GhO}R5A+U8~MjEC0It{QO5zZo0oV)l2}lj*v=+iCR7;XY0S{zhgauMx>oX{!$5 zli(V12yhsNtNhHjiFGmQeZ@8tL*wx`l@8fW?1?_)S(P0?WPPEPU%y^ZgPdXajiePS zZa&|WxD<3W7EGA<3Kr!VasNnwe4M?>FSgk9?x|IH+=Y8Zn&Ea&z?chLD>`ZfIBU%P zRwg87I^%V4oP9R(rHP4W3u3?`6Ti;W>ci1sdEDK*eg&8= zr&i5;2oaw4Pyfg(x9G8zxuNNL$Xc8~<8e!YmO)=;eFklGQpYgUnc5E6wq9(iJgozIwweFVWbabrW4;3* zLm#fp18oy`b|9E@R_D3Gwa{SxQ@~C8jrh|Rn|ze>FY~^e^!U5E9W>0cvfXIr2*wY2 z^aOo{meXiG8rF2hDXDuM{`&9#zCr1SEjA6Du;T+S@HD;oJ%3W+fWm87#sH!qw=)F1 zYZ<1`hX#f*!Qc+;Il&#cW}KP1148~&8ifkiWUz_Jl#4ql$;nG>bc{vMy{GgY8gOg0 zg$885iWmPEcW)h*b+?3#N=YdwiqfETD@eB}-3AR}-QC?C zXYuZ>ulw8Y*6*Klo$EUO1^C4JtuwkSG`y zZdw7_mgZVv!9TthbqQK3WI3b@E7PQ331|i=$ZjAhwG6=c8#Q=kq|D`P@5kzzgXV8c=<-76cEx03c+avd;8_V)orZVG7e|oS&wwj`lA6_WlQUfm# z@elmK4Y?j$A~2Zy`*C6NN%0XdzqRoHu4Y@}tC3bm!SM}ij9||3^;PHHV zzDShF`KtuiSz4GbaOpJPQ7yO2-rAOW*iC)=hTC2T+b)0yBhan!(!Q#2YWc=0i2Z~u zlf^XulqD$W%tTvOKEIxAvOjFe;d-7FLZkXDGnQuQ-S2M0TScv|Nv|ME=_CL)hQ8hC zq~@?nGN+x+eHT;s4pwvuGE(qP06%Yjg+sV0vNc&bagro4?l9-~l~MBAb7u%_&;Iat;zhC!kLSfYBwmU8n1aM|5FE$Si+g^fI+98NV}sd66~H;Qq=Vi&IiJ(Mt6tC z4hrm$HYCfcz(^J|{^4>4^1diG^XpLwEdhL&1_(u9)=Kazv(lH>(8R0Sy!xVOqOz!$ zUbCVEjE+%Jf@zw1T|>vFgSDYzN40MTkIE{;+BWWo7kz2j*C}!C(=V z2oCEMjZQvbecg+LKCWr=dY@eFrV(&CJx7}#`a~7};>C+3`#g4{-{~m8b@`T;UUbM~ zwO_KaT56Ht62vAQn_G0M*bGXHShh3ip@r|V`g)bUYCsq#cW%$9Hrgycm}?QXNm@0J zsLy4yJgwKmzp)SwF)A{$&fFZFLO;y? zR?kMr^K;qwe`uyIwSFl!<8ngQ+o196!CXb1tic_1nRV@Nh2NT-2r zo~dR3nnuDvTtjltErJn5RgN}f5i0TG2{~=j3@lW<$~j}rt>k*XzSP~GuC*J75SAZb z$B|qX>)qx*3kMZ&6$y}hhnKpcVxJT$Q|o#6t8~gT0{Y>?TlbHMsl$&4VgFVC;d{C1w(RD zd2+ONRiwdgeAEf6*!{H8s@j%7o%*rAsiC1cn#0=UVGkIrlGhfz+XXGpAtFma*w zMHoP^H{F8sF?Syaj$W^Mie-AOJ@wFX7z{A`-wOqC>v1Q?t52hVYOU@ zolKS{zrBdeXgWzM;uw9qj9G*g6s$$CoFTKX0O-X~#2tWyoJkF90IvH;)HmAkxu$@# z#=V0a>DK)oZQ+jNj8ZZ%QATvcx8gUC|1ZPN-we+o*cl;&%aR)<)2mcHDruuePUyw< zWIMB|_p-DQ+ro&9Q29%Zxsgad=I@q!tx!HlldRLb*;Y(7l-XdAOS@1uTY*19NZM~- z%`xH_|3>QoSMM=@aaY8=*Viv7I*M?V%g*b^s2rA$)xIWb&-btNsUFz;!I&x{J+@j5 z880Q3#H=qRhfJ2t=rTXQ!wwcCuNV;n9Ne$)c*i`BOhR8V2(e=r0{LL+U#v!QI`2(< z0W8Mfxj9y={nULmn@OOaRQ=iVtCBzr1boBP`WC@$w&+s=d=Hxk-CCeFan$~*wqCBp z0*?9%AA~d9z5ci1eO2-4?H=uGlk*9in#xg{ZB9CC&30Dd&*;q@;^5R0JwRZO?~%zKIR|3UgRYJLFpe_a{ll-0KO~$2)Z54 z-2?(LfA~~6Spb4)-sIE%;dQ_pR|g>I|I;mHlGwKIPm`4^G*axb|GgOeCFK0Qh)gfG zi(0fZV5rVTdiOSyKxbbuc!dQa^8IG7&vmvg6-qaN|e8Cx{- zBE{&@$TjQse+wJ3NVTjK3&_zdKX=${h2COCGXc1NSbgzpqJnssm#cvEcTwEcz>0{pg*gnd2IGJgbDM$Y) zvQW&AAz5C$$7tnr)lBxKVuxIE;Zd5bGZN}!P@47F>o~US$&I904~<1a|M`d z_NM;*?G#I*{*n~9QUN$L8F%>m@i&mD`2W|B^Bf)oE$5+3U0B1WJzwA54Cc4!CFUS$ zN{-v_k_dh}<$6XhKds!DrdmKjAr);vLr;%e0Nl0u^^t;uxhV6hbjCvHnce=@l(asD zco;~xxcX4brz~sB7JuEZz+*G>RVy@FxncL>#amtqxFytk6wAKa9IP(K7V8t`%EaZ? zOa4{wKTn+R_erlUSwZLY!7#=$SV$@ni&03`CCDVCEa4LqV{-5UmtwrcQZTN-ZbOZX z@MyHqIPffRjqmb!F2!1R+6x);E12LJ=-7I$>%5Ymd>Xk+`{apCcuH8iaYXRRQ+Z0W zKkfv0L8%nU7_(b)e}Q9gp(~r&xB(hsThTMr^GRuROw1vV_R|A=GJK(Ycfse+!Du9a68RZlR|EjgC+$4+N%S7*dz z@wBEOEA)lc6fZ+5J0ngyh7-H9v-5ZjR=v;p9RV5R1xPD(CyCwz`B@CBb8li-{+YUW zwr<+$sE8o{f)l{K`vGJ7{kwNF?;dKphlYkuGS+UA3i~hHdh5n=*{#=nQErM??bF-d z-|s(?1G5qw23|?zh@IPsMOLT&IrWoTi!6sBpMjRaNB_x07km z^VMk&d;sV6*})K`ewfnZwINnk=nYtACaqKqXL5mUWktpQQ&JMzy(f`6o0lMY`4PT; ztMZ7b>U5Qs=V4+TVv&Zrx=e}$ZnLfZ)?{|UTXGcwLPEci5_T{eqIDk+XKCm2A8yn2 zRy4=JbI2WXa8dczq=iUJjgsA=&3^F_D@AZ~b2G&h6%DiiYu#68Z9gO8vbzPcAfUe_ zw$1ze5Sg&Tw|*2O^+J2QQYigm{4B{7s@v3K+=2BY)^k7XAIt6B@5*~-P>zsUM@xXs3qNzD*^PC1BOM&pJ(?KCiy6&4q>ZHSvD$|Z|&uBqjFL!bwWB7?ah zC3=a!(_{Z$xK%NK)$L2P@(`;qrd~PLQ;;x1!9Z;U>d^*u{^LE$l+#x3)8#}9YwNz` z82$Dy9$-+YAbgroFdY~y9vUa;jq!T2!m%;o7Efzrxz*)xp0*|J=>sx!6)|@Fh@wH( zK_|)As7m6hdWnt>4$C)S(XNn=5{fbXSG zr}hm60|O&XDLZoWjc7Ofii(TW|Hc06!1${$E?JHGQKnq>Zig{K{8J>OzKYIKsFc}I z1BIaL*AWG7@=AKhi!k?`tTktlq^+dLLv;6}5Lf_Vjul&vCSTmdp+*+}7Iv)rQlsrn zZ2r*8lch3(0-f8+nQD?(bgKC;kYfRBAmAy?zXxs@)LSkGbvNQ*g@np=Yn0h|gm|-> z7ZnwiDOhW1x$~xiBwU%x9+<1zQBFPEy!BDFvthCULGt-%wnZQ>p zkTJHxrw9lL*XHmR&XXIHlaqnIDlO5_)%4USCc{slk-p@~p&-YILP`}i>JTx(s9F=G zs~*qqao;;I3xax>Vh2T47v~>pY^3?uRA}mxEF{FD zFfF>2e5lHi8D75&DdVUD*#+uC$3YI-t6VXRm)uRbJW9P09UX0DLR9hOHx?O4ato5D zC#@H{Dgosn-(Rsd1*Y zR^+x_ElrtV4>Q9#T10f=+k1F^a>o5E4bl|!NN$4^Zt62*l|NzmVZ^D3%t>1pAHTO< zw#1oLU*jh}rNpcF@Fz1d%1?|My2qcfbiVtYdfe_tpV!$QVl6))cVFAuikk@U=sqBm zKP=y>s^6JwI#8^ylU5c zf0GY>Pp^yL`!Kr?|9unn|MZ9c(j)vicbX5U&2vhO(J3CmP17i5EE9u~1?WgrfiJW! zrKjRSDXkOe*KeQeu(E~2yLy{@M}f~|>Ki=vMQc=NpoudomiN1N^9Rgxe^%2hYfLErP#G5__PQsvgWr8Di`w`>wk zpr4QLXU58RrF(A7NN!$&3~Re1FNt;rj6IMMHM^~?q!QP6OWpZ-^mg97ycY^#TU=kB zcCULkVe4p*3$sbbN)OA!z(AEvUL=)Gu@UX#{-ZnCj+E6AXAuR?kY5R9cyu&g_$YOI zute7BxNwavf}y~Ah|gd&pE+aD$U~35yauKwe+!3O47O%$6M4Gx@buWj4HLgyBH**E z?5RrfYKO&!+84uW6N$@hd8oMmqCHY;s#$uo{>p%g0`1nao#}v%zOYh)R_CzO-bS=ZPU0q4#kW}zu!qG z5C}4Ct!=h+lsI{JcvXsSsZfuw!>&oUgSqeV;tuC6ynxR|%osrAX|6BvvYfTUc4UE? z#==Ntaz+xnSd;3Pow8@fdH>~ znEkBf@nNP6MzR=1SN;Z<#j{iHvu_wW;nW%uy2y;RTwBoiu3$(tOx;hGvHG?!vUA1N zq_M+B=nM*4nXi5YJq6$E~56%Y(*& z3=#CY>AHRpYQC$@vp6z5Z|OgHaPBBij@zygg zru%ZnGU>RdXtQ-lR&_enRMw?dz;EVsZ~f4QazeNEt8PlptD=qmu`V0vV^v(kM0say z-&oEC`jXPpH|K8+(^RWjR#}bwR^nVgc6ZYX6~71wsyzQrDZjniMw;tl`P|~9oOo$1 zXrOl|`RSbP)q;;}K?3R*`m&$;)|E4S9n^;d-VAenBEc=!g=Jcn93!s9S)z@qNc zxYR6`MfQ(d?Ip5S#NCi3eg9^}oUgVEmUVJxJmn8ggPMCSpG|F#vHaa7jiMP_^ntMB=C7bJ5Vgeh5D$5FGl0Fox)!QR8AbBsxiick$ z5GTL2HtJ|?MH9Sv_}znNZF>iKYkB=u>E?X;Ro_CYJPq^3zC5aj9&UlbXJMNMxh8S! zj(GVD<_^cV9Y2A2Ub90}VXJZR&eo#^Tk*Vl=NW3r@PN(vhWjPZxBG|he8TtVs*wYh zn_Ro>yxSEc5!;=QT*S=x9{%2v+<)>gm&L8l^co1NQcrKWDPc|(DOz9P;NrgPfmMA> zZc~b4h>FNkqVD515#fueEI)qQkW@5k6Z)ITiwj>pww?EP!h8u$(#c;esBk;M10jfQe^h#%6aXCPGPcW$K= zir=x>yit@RO<+=JBPPw;BVd04{f=ick}qhENj!>aSCsD7q&q0Rw{y`R_ej7X(b3WI z&G{?XYN~fYbOT5h`3j!)G}E!##q!{%v5AM$`3J2EN9ycrvX}FHC!VOSgM^;bEXO`% zxJk}Q`efVX>ypd!KR9hKu0_fIT9iupn-^pxVh)j9qbvDgu(3QSKD5Ic4ppGt10nWh zVMgf8^703stM#samroBFKPk~iY4wF^d^y;I=Mf6;3`pe|93(7%y4lfk>^NEX;$qNr z_-mZ_ouQT%>Ylt2zKb_tNB42*)GOrpz!>#gE(-5+LgK>W^AHVU21<9WRVS_*M2WT6 zDs4YVA|w^aR;rOt%w?ME&47fU6Bpe%r(UOMNwtmC((B)c2Z)$F`sHVdm{2Aekf^q` zkkr08s=*SRXOs9mJsH+&lW*-shN8=STP8hqtSnL*D_f-=@vI52JJq|B+tvEqTV_$QMrbg0Jn_T-dC0SkpAK#qxK0M|(80 z;plX8$>S%AwC$f6$zaM2j&4h=sT2JkFig+f(^}lBKZ@M*rw&YpA5>CG*#T`5Jkrt( zxcd%JCE_@V)`sZB?gwrRC*0N~;z88!)U5e3G&STgg-KbRUZ5}Om3G@Wv*Ai!SKBlZ zGYXbR%caH>mK&C9a^!r7>nKvdVmyjstjwq&FfcltXG~0%OIxemava0veADS*Idc6R zvIO<2Jj0l|R(#q_S9vi1X9vb(r%&5YcB~b4X}uY%qCXx{K)>GRjber4DYNgn@O8uw zXl!{OQ)ug%koEGsEgJSnH}8m;J!9xmSZ^;gZl7(mPCb(f+ zi1YMB#KZxC-B0fC9JGfXJ-l}>QH&JgQCv((KtRC6)AZqkNC=g(aGcv_Kat3GfA52b z551?S+qQRiyBAV}W0ec-tYa*lsiz^s8Mbd>>XkR81L|_~L{VN)ZZLM4k5_#BvW(;4 zdl9VRi$-K7Cw#iIXxXQS zsW*^_O571$bUP;7i<+CM3YE5b&#SEbh~Dgf@W4eoZxyw(vwP4b0AH0~W$q-29LIde zUCNmIVK}@Y;o{Rj?9YvxZYRWWU~86;iZ+Imheks2(-jMtgaUAambN~!{oZrDfy6{p zGi@&PeK-z80&L-d4e4K77js;QWXVWTDLQebyqE~@yOS-(F8=-r{vQ-!vmdNzUmT?Mm zNy-D6T5wRWNRk8V$fR4hmH*e-F zmO5ixEZr(l(Z&PZ{rqkdtZ&HFjNC0MVtq2ncnf|ifTkG`?}A*x~uurTy#o&v8hDzr`;d|b6300C#v1}01S_l7{LI6 zarvbkvg=L5#b$TyC8m^$c?sK$k>h4zWqkmIICmcZ`_rd+78bc(+w40#J0JXfyb`?x zKP_2N{#fu|=M{K_B!{LT+6XHQWf?~+oxi}JCzK&UN1Ersa^->FjeW}GzF^gO)*95c zuFB4X@%NIfUet(PXfK=DX_f-p34&-Z-!qm1OnH2EroUVPBI=Ksn6P+xd2@@38c74V zJprwLb>r4;8(4w*6$qg^kySf__Ru<{QcPmAykV# zj}V+{CMM`7Eawl@N_4P`Hit9MobKDze@K8%Z!CPCwUryC)^0A-GWj8~|H5vY4@6G& zaa(kJl^`Ss2Mp2Wl$|58Bo9#$Ayp|=?542GMg33%rCXO2v(xu}NNYP{do{aW(V2(o zO(aN9s2CY<#KaXv%V9f27N5h4%xEA(_i4Niy7)F*;s!Xmq0|ssWsGn}2;ir%bpyh- z%WexL4Lajogbj#O9D^u0(3JKd0!#CR&|@hU|4Yx<8#lD;^H{t%3Nj$%J@$j9Eb|fmbhKGtYq0-MX3*eS^)@J#h z#vkZ5kDGGk&6{m`c;$>ZX1~!i9PVA$SAUzY3*xWJ$5>aQjCILI z-}5ei2aqmyMjTi)KmB@}Paq_Q)5@FdQqal3pdzr7?h8O#K9*r4aE;Bcz0p4+enlV0 z;w<;?G(zBAIDGsZ9piLme?&KCwL^}?3%{sv-zgB+j|X)&oO_mQgV{90rv%qga6mrC zo3NVS0Wq*ZEheDs0?QE@5RnpPFVwaVb`++H0t8Yq=w)G2wmdD(&9B&@6nD%62;ll?~WeTm3`m;48`96i~8DxHsXW5+LdqbnH0miz-&+B)sFOnDn<))RLnliA8{QapJ@qsxpHKK^1rm6;1O(Y|917Zz-q0zwhP80Fmn0fU8^l)>+ zCxThOuA@UTpwMK5=>Sua5|m`z?&V{~ZEZY176C4&dc0$>6K6NgLTqIvT76^V&4sqG zUIdK_8%@4bhbv{*QiYFSRf-Mu^U*cXs(f3qui9>g?IcO;FLYLDWD8|pWcvt&`ZSyOjy zs@oVP!Yz<)T8_UmoHR(1?)+4;q=f9UG0$fepU9Qa($dnhOGbesEwAb7|3E$F-R z@%C%Nc^=DIM5q1b1O&zvKWg0wa%+3=klWka{K;aWHh1jLk9STL+}zv}us=Eq$)}5ol6|+K%3{Xf;K$}wo)`zef zb5O`+o2x=R%?LEs7?P1f=7-vga_z23K?^&(y6~xvrlcLl#N6^I8YIG~<){WWg}|YX z4wexD^zw&tkei|e_ru(Cz18Z6R6`TQjH6$QE0fA)bDj4j(8dDU_X5+5&29sTt#ZF)x*PsGmX{*k{AleqQm_WRl6_XtA&DZX(n!rm171u zj#oHZYlnBDVW5>6IGI&F1&q^}+v9oK!aR%2UEE$EVU^x4@Nm!UI@FLa!_Ra&WIpQg z-lzj&sF|^Dz0~yTb<^fW3C?}b-sDd!7ak8iW%3xHzoyN|?LyUPB+&aIl ztrkAfP^=kilZQTSklm6tCAcc^aGH2c+CBEolIOh2s4|1f0!del+~sw{vnOm+fx?It z1SWY;X;=f=!}^kbx+tpD@vXfSsFz~%%7+tri{?so*6ZHF}xZ2~F!Ucu4P(dVrK z`1DLny~8g)KYnSGt0cyZFFAOFRc$0+_h1pwt9&(vi%g>oUkx6b4(BGU5Y20ny*e&k zx*2);#k@JPT0TXh_Bzb#RFf~28{&DL&B>RpnVclTFJ5o#s-~;A4NV4~!N*WHv+jFT zsudqP%d*w;2o@RD6NWY??59yM2sqyhM-2=?i_E6HVw^FSH&XmoGp5aN6m5+nqn>w0 zR4X9)`Yf-%MqN!|ks9eG-*9 zt1_77#SHgSVy0cuw6&-?&9!N5Cc9r{xq403&*$tsv8wjXU1;7&gRQsTR zkupi4FQk-|wjnj}ZnXVYD03>m6iTzR#H4ty9NHm;8|GpIoulO6IT*E#JQ1^L*Ts-V;2$TqL zQ&x^aHg&renV5eNFN{L_HW9aqm_z--k6r-uJa52o4Tj~Kot3`SJl6{+oipWiPd#&Z^j${!c2A;s8*w#XX!y>Aez0m>8;pthz)BWmq!Eu0-xas8wAA!wo%Y3uY z9$DwmCRX^T3$y#q{ghN9=uD&;(LXr9Yqd%3dsgQFZEKgAXvlF0d>9HM5=0=K=iyzL zoW?w1GH+h0+-1btrP^!@@AcUbCAo({W5H0tOJ0#aZ%aDS)>d)JOVio81q@^3wHKCe z*Gs$!P%n!NdLGvw6#*C^FT+w#nQHBc=wWJVBHxkW^WlSgK|z75hi`(}RFxm7Lnokr zRn+fcf|?_`n1krF)Dfj`(-$Desn%JXmnZrS;`yA(A2HCE!aA>@Q2bjLd!sO#j*vST zc9SL$?ox$Kh``uY7lBVg9Q%FRoYzIRU?&XcyhF(3r;??ceW0AC<+NHfZfUc8cKzDjo5zH^>9*Ij z_NC9hb{e(-bI)GTAeNABaqW-*j=heaRKYTVDmr`i;_PhDdT!Q3y0c_%Tac=@RW+n$ zuGFga)PaI*;un*+^}u!hy&BlMxH&_wH^?M3JHb)!nS?lXo@VZ#{UY`tdE)v|q;fp# z?tNCGy>i5@0C-hOlC6UB)$q_y+pUR+?!iTGc}0(QIsUeDeDEVg=hs!lRXxrC81?`_ z0l2$2k{E>Xyz2@ZQFHR!QZb;*0a z$Uib%&ED4^-eLYee-L(l?X3OBTCa_UM+j2TP1}31O%b+I95^O}9#H@Vyo5ikv|*f4 zp43M5$tJ&zMhP|R>0W>Fw;aB8w~hTmPAU5HFTa5C-5CDo>H3QCtWy)X<{#iWs7bcc z-!dv}SB3_|5MV#BCx0hMI7BgTR?z(1iN8Hf%#ZxNS(8a!_i%i*1_V9p#*+9Spd>xm zmOPCWKjlVGseAO}0pt1ouOkB5`~R3!#mu}R&dZktt}|5 z^AmX1+^V<2qdLk+yVRP;{Mf?nYD0HkY+d~4W?OlI=t}8~;xxf8+y3K6hYv{kdX-ZE zF?!{@NxQpwk;mTiAEG$V z2}gU-A%1C0HB?C#eFups+P&iY+}zwjS&J(jaN$YWRu0P&jFFo!p5dQqMVS+t^u@{FeH%LF98I% zXGZ-ZTfyryfOkgvc!NI}PwvQtmj(V4R zsjRSnp!L)UQfLt!OP&pqD;$tSBGLk~2h7`OFbfwnl0XDt0aPUmY@N*qOG|`6<;?2kD#n7S7#p2_^dOQ=hc?+Kn6Bh8tq6`5bpZ=de#w4wLpkZ zOlH`C$v-40ET{|U`+;&cli_$`asyfc9Yc+ByYGOcYQwRJ%dEG&*2ePY&71w5Z>}*s z&V%>)!**hwR;jNsJ)kCqt~_gD4b#)t_XY$QEKv2vN?4#%e=Y5CDO^2>&rHp&LHdHgCZs$A5pe;OVsh!Zj zPRCb03Rpp+}yyz`4mY=ijfq=Zf_YmSD%O^IN*P{s-U)P{r4(l`= z;wn4lwcXC#H4QXOSzGSw`sum3;AQ=W4|h)iIjhO{wasGw%E!?(`BZ<`GW#vf3o4JP z{>ZG0sC_)c1L>7mIlQr6SL&EH=m=xry{*#qYH`iKNql5~rM$8JbNl~wC;(&z)@)rn z@msm3V?{WCk2=Z9SWTB4+z|yd-io1#NtWT*aG*I zjYasmlEX%M$Ty4)tCN;?{&o<6SmX-=Gqo|kQ`c~43>+NX>6fgFwarbl)rTO{13;KyzEg7L!QiXYrseHs(g2*OFHc^>m)Wkp z2Sr5!OuFC$4)VZ5uQY+^6cK3tBeD<5DyNpUfwE-v3;q^e@Y!@cUI0NpuAlYvXe-XZ zrBt)mS#m4ZH;;Zpe}9SeSD~a3l!R$ACJ2nBVYk!{neRx2r8(PtTj_=I6# zv9m@N78Yvit1v-z2@Hvdh#F^f0>DLJ+ZZderS;`M0G3I@7)?1_ZJ?jB@b<%p51XZp zI)a>otm!wvZ0{0~viaKs86mG}pIQ%EwEel#UzCq~ggf?TB#(1$RFHr%qATd_;0{y; zzZerB3CiuNdKLj3*ZVM*$C-7pGsb6csY`pd;bWOj0l{*2f)_6X+)S+(auhs3k*>hs zv)q||+4rRvaN0bVhw~D7mq5pz@8AV@L848yKyP-wCD_Rg5atiG)v8;==+Q|7>DF$D z7i|MN;}gIj?lT0OX=YP>y}#5BL~pUiI$w!|c1l~7%i8~Mq9GHbmaTGOdt4_oHNVF= z1BtmMwIuex3~VX1EE>Y_;KN71w(kXV{Z{4wHm?abT4r&yOMjyeqO2MXm57Ulmluz2 zqF&`!p&J**SV)*QO?@ZCzJ*~RGh4-1E*hZ&flNI!*9I##82v__1F81ECVIjbEK=HT zO%hh0@1mQSm|Vw2ZC3kR&Mopc($c7!ohq>A5BB!N?bPi=YLvue#RJ(ZDLm%zSd5Z} zH`*Ah8vx1+T>f$b?TTPV2F;r!ZMawNiEkN#pyGom=U(G&$3xU>?9-y*k?Vmyn@x_d z@y>NXu%c6<*fYxrIz%U~;V(+e`q$+KLB7r$|1Zk07lV)w%FRRY7>B!V9eYy2Zc)b$ zrGhlmUzA&0{JFFi&F!f6@P3hrpFfgBA#SP#%9@Zj_9tO%k$2Rd1B za6YsK_UuG1FIlpa&u$$jssCG#PURHP3D<7I10>gl3g7^01GAHIOK)W8>q~SO(7Of) z^jzYWEW|wuH$t|p`O9Ha8=C!(Y^6^44Q96j@yMYBehkzndu-m*do#KbCsCM?ev=Av z-~*7dGXC%Z_!;g!$#=e&5=t0R9f1@`qOYQ&5^21nXJbOm2%T%Z?cnIByWjufLYLsg z($-e;TbwkN7Rr;op}^_u>+3O23B-T=D02Qg?$f=YUFD9!-JJD*^!BL&AxKGNG2Y%y z2$ej@$lhld=dEvb2u@!AXZpSOf!4^g9%ub1rShW;P8gg^EU;9^NvNc<8G{QGMD z*SkEv0smWa%v<=UiT&lS{@0K5sMnaVp{+smM_S_tqWZ6wUVD}zuYl_P|Kq|jUuX#% zAi8o|FL?NV7x-1p1qK0lL7i?v{Er%&zX-Kqs?sO$mF0)(DAVxv&*+4euIPL*nBqsH zvv(dib4|F4a_JmaB+YIAV#D|+v2#1h<(Jz3`HX_lvM{Us56>9MCSsOPo@{v@f0g?9 z;!MujikIoZ;h@sCWxjZ}_@^`D94>#c&cowm*@*iAZJqJ2@^A{TxRulcSPxcK7vD-7 zKk$MDR~kahMsUg~Z)Dbgy)#@S_dbOTw;D!>QMb9w4%Pfv?Vk{5E>Iz#j6z^?+163= zz#6~LA6eV1SrT#Tqp%PBA&x@+6Q_`Ukv*rd*y4j-N$$!m?mETX3t>LUK7H_EiJ@l5 zPk;@?(kl5HjqU2rB>lRHKZJ^Z5wW$5eKt5hHYIpT1Eon5TOm5Av?M<#Sl7epB-E$VgisDDFYx@1kH=_0(^}0go z6k7N-G%Im9@6#uFLyPXqh#_%J$qBS()0_OCcTItGYS7sV%`j#aDRtf zG{n;^-cMyT&FniecXFC0diwZM^X1yEpaiM2vw2kOVUw{7ZZC<;6HZ+m=7T1ewwLZI zs5;+*#Fa%SsQ2Du)81DJMJMlkPNZ3j?>0#D{?pN+IZ9~)jMN%xw}jh#fR|n>#rME> zO!NV2RdT)&pHi(h2g3zf4NXL`Q1EWEm9!56YzC_MUbQG0aSun)iBl-Xc+&s_s9I>?bW5Zb(4!xW{VZ6nM+D1W42Ev)~@FjLG(d<;teoXqSqI77weqnQ$Z~v?irjO~=tCq%k+g6#FIFvy-8eE^2gLspJ&K05oCb8v*bQM zz5PPC2`@F>5{`K5Et9ZSj*ky>bWF5FQwLjJ9c)f+TQ`JGQv%Y){=jza0X#fo%|r*G zom~;tx@PmUsc(xkOA{q`)4lTw3S^f`BRZKI!(?e;6C`jo;YWfbG7>msJE zjUOAiD=WEYWQQk)vx)o4j)sTX)l1TN=_acD-h3yL<^9NKL5}y~pE$71Z188Wmoq(X z@HQN?pI=Vgxr6N^`mipSnHxZF_yfX{csQu?mv#nd5za zoVtiG0U>cU{m>0s-475B2e`NaD*ss{=qp34Xp@DgKvcRe^9g_9 znhh=oxlpN`Bqklo^aJx^b)N?OrJPx#byJCSS&1?MF?>w?+$+n@T(n-dXeNo#z!SXp4l09&2t z_(LWJQ+2|oG*f7@O+k+kVTn5nO-Z>3k}}sr@$(~`L}~Lvx8{#`Dq!$y?+8tNC#b#- z3WgCU##G>DiZg|mENQL75?vDD+dYgnbj_RQ*BD+|X=)sBRxTewWJYkJ0)DZ=C(y^WXQ__XswwM=&-w@}$L;~Eyi2B<*jr%O2`BHa$iNEn4`j;W&I zY!ehM!5kN}()THaf>^F>1_;^qkV?y34F`5qTOe8aqj7VPUdE z;-h5SXGG3n(rwuqGR9f-v54{1BmzI-28*(cq)O z&B~#de7C3-ao+VuwjL;0uoO}lADGFgwqdETjV9{n#LGWrD;c{wN-eFw+rwF6y8o2O zhn?~qx*kn~N-r>;L|?E(PUzkBix05tUE_9D*S>g$%N>s_mL?&OY9@8LEPl;DfI8Vd z?Wkin8%c=|q53s&429lN_T zM02O=KCJRt!!s!{{4u-rzKEtdO`;6K03yC*Cii<{T*>`$Xa8U@n~CA&Mo;2tJh)Yn zMEz=DTeX3R?nH8VxD~Bd?ZLTX`?7eS&;RSQ_(h@qTKX}Gk2OWNR~pWM-O)}cA3Pn|Xr zfrJNSWvIQJgeKEu#@Jp5d-^TKNL9M-IUW=(Lt=3xV|>?`Cb4YLzrg88D-`wCK|z|) zT^okjz^4T1`M&6>GC?DUn%^r73fAzn+qCt%n2Ei{epMR6Bu$>xHxq#mp6?7Z(FvPR!(Y{2p&Bsn-;A_Y zAIKj)&vE#siZCbhDF6=c;WeEI5Y8}|h*8DjIP7^<-Kd!fv2jC}oqDO0OYtbh4GmD0 zkYh3Bj^^~%i;kaGp2R5b?eEfMAyhM^ff&{5V9tBKtI6n17Mj!0+7#3Box=uc*HxzEGeSg5y5jtMoi zLe{H6HzfI%l{*bGJ^d(`5MRmxEhmLixG3w^+_V;~m5Y-1DER6kt&LlF;*-!8QA|fU zDL4*7O#&`abFufk=w5LwcCXIAOrC#Lz%`<5Y9Q`UQZLFPr{lAl=vQOGW+%>BBvb9g zFWziC?cnM;*-_#=V=uJ+&ydZ(gv+CXQD$G0dd7!ZXO$?R%C8BHBgH8gD;|2-O#V#K zqdS7-)7N~Osr7_bA^XwQ0CA(+n&M-Y*vsE!YlnApt~A7%9I6%9_82ss38J2p-a~R@ zOt*FDcx7Qzw}*v<)%rMGxmI31pt1D9!s}ovefAkTMn%@s47AmhAq7Rlkm3R%t)R6Q zN8An*f5nIf%8>BXUB?FMnJqSq)!3*sx>@PW`vT<`OFIFrDq+*GxU!?T0lP0u&lr)R z>M@MjCTPjIx^8-1!PX)a(>6%eO2s!$!N>b@}^);1UBl@tc$a@uc5<5 z)-Vhcr7Rf=*@rFa9U>$8s%=A867Gh#TKailgH_py`T8BNB6`VX@}8@PCad4nZ6muR zGB&af-J2phgICH@3lJ2R{_0C38q*Utc`im>%(7PWm|?Ssn)KwGTYRUM6zw+c9tt|T z@Kf8X#PD(O3BGvbaV03^}s!jy`Hb zN`qylD(pL>`A>r|oMACl;U}j>am5Vp=*rC}{hRQxld@dRH?$JX)dI|ks@{gu)E|FU z^BEHFXfhDq(yb1Y3<|B_&yF|?X+;cM*D*v#z#8n%PVwyOUCp?qmd4^vo;KdgmJk`e ze#J6Pqi$;2ld$Y|rsJlTo!)vHlPo4CF1prxRkT9$!c3cO$&SR zV`Qi7$WYsD`}#$VG*~N(c!c(z9rI(XRH-=eVe+Yd1>8CzblH)H#yn4?7~Ayun+HZ| zEG}0dCuRCPv=uwob|R!TxN+QU*|qD%AN{EW{mG#>~naPy+m8vkw{~0UqM4n zzwz<$$M7z-6#v^}_uT!fa)uKJ=VLP9hcp!4TO~W!P90{rL9wY!tFPcw!u^DFLuD)0 z#O_aWx!u0tM$@4>=E|=K$GGGzT%*%u$R1=<%G(O)qNr|qeTBGc>&@0rodCKzJQk6G zMypk;ECQCIp}JD-cw(OYbW-Qp|3lkb#zon6?Zb+KA|iq!lA;pQD$;2H($W$GN=i2f z1B?iYN=i3KN{%!Ptx?E&%O6r>sV_Y2lrNn z{^N4ZU%ng2j%vugpE=1Z9Mr9<*uBinmxy@mC!K~Do^WGlq@|9#KC~*a+X`1T$l0rR?VVsK(xm{-&>3-LbHE0elZl!Gd_3mbMPnE1Eq*I&VE5*fHbg8(+S$SZdkw4F&KPM@PHo~mt?$xg<;wD5j$ia`)FCQ(6bF;L@{azSK`a~ zBr$j={$bLrY8~|`!s)3Izv!Q7{6EeZN&PE#@0)~m;#($GqOzo5WA=T*+73 zQIBxowgLoP3MNEJ9|9WcChM<{&%a$=i1^84;W?(Cy;XEpCtcRAA7Vn`$Ha!`G)Yji z4E>1D+*3Nrv55bic|?+1`pj~;^Q$(U2?>k-q^qfvfx@!`rrTONJd_U(43;S}lE3=r z@kR2n`$S!eZ^~gmZ&my<`)A>2SxaXgTfzC^Ooq71iFa z9|U5@yGo6{Uj7mo*ZC${Xf?NGdWD?&-D?eGOaFE)8O40Uk4ZNfPz%3-QGWXB`llWD znS_sy8Gu@Zg`XSM@$pKl2tlU0dEHRunT<|gA+&t%O3iKDb@XZ)zVoD;rUQqH=>+% z5A}-aw8`{7i9Aok$&|O1o$TfDs{Sf4HT$POI`-qu*`up=kj_@N^JeS@)?Oonk;qN~ zb?K79j6T&$Q}@~Q2bx}Js;jxJMynV47R8ztkKX6nX*KjuZc|;(eUWLim5+`hpSq6p zpxp4kxC)AFlO;PzoHY9dXZq!<;!QidKJhkN{uP5?WVXs{KO_yMcMUO$sYTm6Qdhh; zo~KDq=XKC`*)B2mTCvHGi48K|FZ`E^mbJADX{Dxl6(1}^Pr;41Bh|GLWGS)(`EAuD z&b>6s6VA+>^*=whnxl# zqt(OK+j3t#9yVQ!Z^-}sygf#sUkegO@8a!hR;n!jSS`P!i^o4^J$pf9@R8Tx$$yme z-U2_0t09N}QM&j?p~PRl_uqG$w?V3XW-sc)l|KtfPu{}cMjKKC5YKtqf^+|doc-;) zlHPhepd~6F_EGTRzuo?ck^J}NJPD}h`TzgM*DhapA~pKx`OdcATBlpv-$xq~br#fC z+H-Nzffm#b`Q9156VI;jX&t|RZi`{NCAlNmEmk zjX?lIedP+tIiL^<$ynZM{D^QS=~Pn6I2`%g9EBv-1&!kGx(#WWyIAVg@{iGNK8p1W z@QHfMv)Cn($gtAL?azR}=teE&QN7-Sw@n*7!fC)JE77$q!kUBCm$Nn5gAco0e1gl& zQjFZzWlfhkD^R*+DeLQ0n3uRQA4FwdAgK<&?FaJ5_+;Fl7jq4} z8Z~5-eo(#9EPr*gA>_2!_{xfDk0AaMUHu4Q+htl;T|yZBJ*OASy>zNo*IoaXaw%th zmhzl@Yhll~WpXue*lyb5y1UErd5-O)vHfU} zmanP>qD*r~sQ1dG20SvKY^P+zyNbiIwA6Ic@@^ISvgN+` z^UauYs#OdHdq^dn!NHpUp6S8e1g`i2K>(E9-JF%0>t7~T*PJ{ovGGs*vBhTl)pmFj zR@#y9TOs@J3zCT{r0Y&K)af3*Ag$fQb1a6NM45Uw%R)1v|uI8tO&g+of>5YFboh?4BA?YIfYXYZr_+P}Y% zT6gFp^UbQkUcn&l;WX$31p2sF+uFE5* zKYvz3)4MvvM!=TamqN zu6`xCe`KEY+BAn9hx%n}UH*4x(LC>bGb~saH@()kt>}c^DL`@XLmFu-JtL9&fidS4QcMQL`O=`?r}pp)I)Q(x~CK>PbD0#<-5 z7#!MUU6vgppqY~M@~g2lhRFOK+I&LD__D@xc$j((h~#G)4KkKHrEmy0<(v;5}I&c&53f3LjZ5%kfv#&?J> zXTb~8rT+$Vq?Z{v>UI_)TsmO+D@Y3m&Z_62i0uQX{3g>umD9FP^d5m-E`yBM$BrGg zr1>{CO)kM%t;#o_r)J-$mvAHE&8W^iGh(SR4q!z`l?-+Jt$8$|pT;TAUr34mdzO^N zHhD84g`*_!AepVa>(#y?sXk(d&x^=;s>O*ny>`^kMMmX6&ubELpHR=9j!Rc4JsYP5 zAH5ipR2dg{X<+r4!4oWpR;;%{FGmaMe=8SA2{vrc9a`TLsG@L#ULy975-o>@@ZhFV zjpMdno+fSv$AxicbxK}c1YOwf5Dcxr?X|s~;GSAnDvh_fqThemekJS1eynNGm-M7P z%vgvjerHfiJV{2`c#o=IKy)9m=cl9>JK5~qMX3LiS6Lz`l=;(F+h0e4^9K7LvQ~o? zove*U!WsH&GZ{_l7>xbZrt{HvLbScF7fGa+PBqW#=bdv(iTR zd{3}J$21MDSJ|yo9O9Pg#7y%RBDNl6xY*I5us6k!Dxe)Z>WP)Jur+ zCi|u)L2blA>q5y#W)iFrKuO(~o+J?GD7V(Z*?Mb{+GQ9IY|Vur*0Wz=`roeBa_^q0 zRL6cZp0*jT&->)p|7!D?zZSQu( z^=Z{_`dH+RJ-_;<$R*;G2Zu(ZP#(YYcfkOtEBoFh`cw&6YdJ9Aujk+S-tRU~Xfyin z4)9*OTAo_d%xq9&m|Aym{$~Svq-(yV(_~G6n%MQ&VQa1>;LFzVH6B_)L(g}1D(!4k z?nXa2G}*4lD8jCccyMLXvNv1qfBvcWM9y)v{IlR4&eJc+$OI1j&g@FNSxgFkMe3A*COGD%xc7CbZO;~G+Qx`E=lWafJ$<#SMjTQ?gDSzJZ zRir$$Y4vR{XtDpzP281Xd=z0FDfd`etcRt?EH;S!&h8Io68oLGEOno9EEYSrXMFA; zhGoa$&Rcc2SHu=_{CVLLov)zF31ndjx0uu79^~fWZiu_6O0?=UQe5SW4GZ(h&u2;x zQ%(}fbj2+UptsVsX(u)aImqAwxo zYKN!Swy|4w_LyPk# z@gv|GuIMs8%Ol}XB*>mo6o>8XxzC@<+&xSi&OzDyY)_(!DSSN@j8N4V;#Dkkwp7nc z^NFg&G4!FEeek%uq|-1KN!wbXm$BwayNwY!F9oUW96f$@g85#V7`YKedQdU$&4yZ_}R3kVA}M;IN1003jeL( zvZ!-JIbcVH4IxXdXC3# z>wWM_cA0AdXZ(VGHBjv>itCoGdgmq3(+uQ%1kGO)Ka^|wnY;E|qZ;FPk9?Q@&{B zGgppwcU!XCJr_oM8OcbF6IKsclb5V4l}9DY0Ql7Do8#6XG5eM6_dOjGGHhLXE%5l2 zqjfWkVc4EkiDHDi&5+<18da5T?YW=xMLYJ5ej(%LNS25wV^TfyFIw=J(&^m@CY)K` zz+}X=E3`Q`0u59@A%}#2MF*E zDw|3E{gRioHX{MYE>`Rw>nNa4q40W!yLEaI%+L#Oc4je?J=D%jk?h?<|FFcctqO9h zmHvZT1v6b;-R8|R7R$d5{DSW9#9a;iGXq!m_*Tdoe8_Lg)D1L#oFYVCIc^)93cgXx zr5l(4J$x757FyT_daH`Py2R7voY4Ph88f!dfgHEv8A^Hfq*|Uk&fKjk9X^VZ2vbE$ zU$fPjY`!7JV2k^zcPKDAbBH6kEn$)IwRIP&J^UBk%Z5ZqemVV*dwBng@ zutEK-&@XUCWe^f&Dh`MkY~Edn&1c=z&Zz>CPvnkviRqchynT5%PPbNxv}%2U1hFd7 z+FcbhO!zfmF-C$%o%%^F;nx;>dDqLTAQuEDBUF6U?+RRV zVQ)j7pK0v|ImZV*l(BsI@cVBT=j-4;KAtH?=7G2AZ`ckKEb9uOV7~WSpRm%r`FlQk zB(tvjwAeZtRdml~-*2uvqhjxt)%9yU26;963jvq%bfcx=YSo`Q8xK7DG3<}aMA|oRPbeQ2rF}%CTQYM^D zgWw!lQe7+GqDrPTrDxUa9+_wIdG(cUc!_TXhYW=bt1HzNsz0Q$UL zwPGr0|3DlCz(o$N=v_oQo`ohRYKD_lDJ?RF||mG?0^^M9EW;-wq^%!Get@o>T0^? zJY`|Bnp-0VQAQJe)U99nriyZp(2~IWOueLs%Fz&;XFJKyxfXJMuqt!tu>-tH@q%da zF(H){U@f_jO}1tgNnB3lASJ8eQ1PZn?Gx+Mtb3qE%qeu1ZJF1gR$%@GTcFX_=Ypjr zhb~vA6}yg?lj*;VSkC4*jMbM>!ObQV691%>+NgOGf#zy<*{_~0w5BUUkbFG~j`F8; zA5R)BwZa6FJgk2`ko)AD!oya+HZz76^@!y8&qkSBHN>`6XSMwXUa5Y1UiboKGZK`O zo$GMyrZQV!csZIuKbRu-V0C}?)P8Hk`yv_+etspBqSF3MZtVgh;P`{W3SOhHPl8#M zlj_IL$aE{^B`nUX3_2+cWJ3UJBHgpaIr09i1aA09m8=+O$yb6qR!T+qiqFHY1umi* z+istmf060oWigV>-}&{_9Cj41!JK)foX(x{u?911MeUw*cB)>CD#FT%i}LQF+0jEf z5jUdDgRU=@v)B**{*RrUE(%MG>2#&$7TR+?KLy3otGAt5{vITT-=3{5Sdg#n&sOjA zJnR}vsGCGSe^L7>SDtj264(@fKc+Q?LV7Uw=Q1}%lI;9C|2x;&B`gSavKC=C8dQz~36 zgNIZS$0z?18bg`-K&sTzW+j48Ub?8YkA?Qsz~Oe$04=KDTe(&)VOUt3~&c4*{pvTPGgQM*4 z?JzQ|L6nf-tV_LJ9L(qY;iTgsAq$j&;WD6&f2!_1F_twwFB(JPd~rl{o@9<{CsY-Q zQS|7|^yjw;>F)aV^6jHN^jn}v*rG0Z^wIDA`__+Y-l4-h9+(v4y|1F01SG!E5)&bp z%OT!k^*1-V8y}Yq$GiN_s4huy?fezeCE=F+o6_H5MVGE9J2L2-c0T?wg&;m+a2GU4 z@o?!y=g?FsF4ET|8O1DYL?71XPC{fR;IKGM##xP*K`>a*3>zjhCJH<;ejTKylpJ)NPg9+vx@hn zi`(L>Pty)hKO~UH_nvJ}9S(aw{G_zEYaz4iY|LI_4>pJQZND(LtfCX#1kx(9K@~cQ z6tCzLTDifvD?oQ`Q^T5=k2jZZht~Ac7XgBLnjkW=vwji+$?_QULnv8`l4!pz)ulC2Q~|rdIYyY>N2bnCVl<*EZX@f1KO? zjNjamQj@!Of;7KH8R!daK$YEY{hPqR?PO5k#RVZCIq{)tz^OLz%;>V%bN@@dzizx~tG>inehPu!;_r!=^^dCn}=bcb!n-3^l%KFi1v z*wMj+HTI2c9Dm+b4owBn*Jwr01^C1(tIHxQSu@*PHa9jxzrQ1q&rpbo&y8a!Sp}pl zvOxAM9USihdCG(*X6E1K9_TW#ctcrsfIKZ<_i(yAm59EWg=C3g!>4)>;+ z_+B%S_6@fwa;>;GZ%$D^cokCJ8O4)CC+;zr7!0(OX&$^{)ENT=9NJ|z3D%1iuax5N zla5%t7&OO&CW1E5iMXoI*XWp+iOVvm^$GxeDF0JdV&axv*I5{7DzY-$7xp$VTN5VP zQ9=UkC@G)XSirE&x>9eDX~0?zT^SMD-Du-U2g(Vc;pSSV;J_qc>9KzC+>Bt6bL{1h z_p+e7eaUKKkcQ~oIsY*@;MV7_qt}JB{`+K{xH0cI;t^ixp+&b=l>5MouTUglKD+Bt zX%2XS9Dwpd43IsBOlbS$-%Agm=9L4zZC2}`&5~NJQ%Dfj@Sg&NI3+kFb4e7Z_AMY8^%->I^$dKprYpTCabiIKU4o3V=dJKY zQBLl=isoZAl}>X*GKu_6!A*)3q(qs%Tg$~l_w9CA?^|OZX_vp2iofBuJrs!iI!&^H zlE6=lNOR~ToV4Eu?5W2Vudve_EZtTv@st(k8`~4Oby8l$Ri3dY($fXI{4x>Pi)$%q^?f$Kp`zE1a{kQchOK`dKK-`6u z6Gcng^eP-=ORdnxD^(St+z{bmeG(_>Z$!1uGaHk^5;lu9o1G%6S*pxX23=1xvX`X$ zfWN$d09EZT6G&rXb{3BLroUAK_>CyY$jI1K(>{2P0bcXLaVLdIyS)aarMe9!{Z;1tVeYdD)88Dvgy_8b7@K)GU-kqQ#OVh^9uW38&tS!>{Si%b>cE_ zoj7@2Z-u<7$6VvmIo27s`ljU*4h&r#JaI9xQb!Z$i&YwLEQ=>|Q|HM>d4PU4;EUEk zoQU$cVY&7CtjBEfsz6#D5Yv%E5-WgeMJT%lJ2*{Jxiu1)<*)TnH>S%+Mc#b;esGUw zzrPQ3g+u#pAe!Jrk*V^!WxhPh5Fjj|RWKmowI98xvpShp-iO=Vbj%+1{Kx}A7{hVP zqpZh@grxhzlunHWEG6BNE>@FvLv~M296A4)NN=dxiw2&>rMkvIYId9n=@Imizo~Mo zeDzplEq1A_P139-ez%ke{!r!MzMIv&&A>-SOy(#%QdwK znY@~n2Z}NG8(dU!G`XN2O9f3!$Tnd-7RYYcIZL>%=+V+Sn~Z#y1^t0mx}=ErIGa(@D0LD3GH82T@-pu-%DIv5kQP8dc%d1zjoqGFQ0)d} zBvB&s0+0Ok{-Kj2nL@lI;`F4dx{Ap%^26ydS9~oCo{TP1J@FTeB6g?aqIRi8p2E?B z8tS=o%mjaeei)1LKqNLV(P8?i-1r?Qq(B-QgB4E2ejMsobmQgC*{PM_X-MxJSQatK zNBg)o<<~Z}aRiELmV`Q490lxF{)E9Kw5vQK+GER}?<*5Mol&4p)6cU&=9}=MqPCrt zN0pltBk5s>Mo}8a8e+r_rlu%ZimHe06gHv=#vbdH07lob8)_q?;FY*CV`<_!dhZ77*Y(PemKN)n!jtK#p zjY25iYwhqH#pTN{aO211J|4T%Q9WatQH}%a3l~ii)++&nmK)&tTSoTu@Rj%Pt$5BY zO@dbO7Qi;c_3+`t4ZwdO2YB0_M2*#id5x~t|5JpFDN*u3Cm8)^vizgk)c1G(`QAIz z&Du0C;caK{6)XbI_a?y_URC>#%od+t7it!eBiyj~arplPqzW1`= z;?Y`>ZuaJ^0kmDb>PFk?EAckZYcn7WZY^E4av1N_CC`$gX%1BLAWsc1M{#->HZM-r z8^76%bA*Lv@y-rI=XVgb;?GJ~2f0ct)k_{O+%{!fOgwmxUf0N9OMYPa9L2{i2Aiut zx8$ssgz6uRUm7_GMsv6oR*5a$#x0$nt=M-MWZa&Z&RNd2;1YEo!JPe4Ccl1*ka%CZ zdxGGPla28v;UV6_^wAh|Y)t}lOv0@M(p(^F=ID_Ij)kFdOW?HKa?%3AEQHuY5d zC!h!J1^zJaBLCxde?L=Jti9b$HS<^Sm9OU6@$4$aA?nbyw=t)6w*ZgO)z<0AV0=7)NraU40yWh*!gdLU)XusL0*G5+LRpjOA9`v*p znlIikg^hA-eAQmiHc&I;3Zdy|m)9+tT~A2+&e9F}Rgc_w5ffVA!fUY>w=t8fg8X86 zLxfkyX92y^c1x_%kLL`%rO|~GdTbw9y`K;t+Kg49FV))p`p#dM#j6i=Js+yEo^s3V zLIGa09<8ZxUNa?;AN?&TG;q{J-8PDa72D z`kLdpSlG9B;nJm2JedgoQYPT?lN%jeutbBck$O%GiLMzgeaGXL76U9q1YkCZA(Nk7 zcIZ;NtkY&l;}`k)Z-(%)x8&kCZ_lZu>T|}O`^@}zv!MrGyB!MiCT~BNba)lp zD;_No9}UYk4JcO-)DD%-wk1FyOM?}|iA|cbRWaUlPW*%ISgu>=E-^Tkbi@sJC9aCu zH50+wBDk326vo}BqSuk2(2fldjTO5i3Ua&>^@Nr~2in>%{-Q${4e=xB92Mm6SJI5l zeB_o9+sV@xuog4we1!KvFuBy@H(P6b{Fuj`l0gDjWhiDE&>jDI5RZ_0S2FDPpPB;d zv(~^5h7Cx5>%<1Gnk20f>Fce22Fx4fnkC!!jhjP~w?{>A+oT3FEn;0lwf**j%Yy%j zTmSqs#y54`+7kSL@U~qH@MVj{K97OLV2{MyhgNInd_Nf!KHdW>U{%710-?D-i zS?kc6f+fMY3_JzeY8;GfmG$Qak=*9=6_`r<>VYM$D#LB}EVIVlR{1V8<1T2-pMn(q z+%86wq)$9HNiUD_RQ%H}N-};STybC1GQ%Re)&k)%HN>P+M<=G|x3Nj8UM_dvj$INc zQgU{iUP6B_t3pz?FtBS$yF1M@{t(|$aM|B2BRzBuyoXfDyvzLRjE1s6-H~!{RM@=V)JTiH{l|JA^(ISIVi8LOBDL{&a8%|$$V>x z3)w^&{=F?#hWuTakV_h!s8iq4L8W{~oJp!5Ot6!aRZJm1=4VeJFLxI$q%v+==-~o? z*8}^GAfO&qGPjLQfVGs;!zlKvsc%jHIh^%dYZ&Qo>qy9m@Xc{r0alBDQEDt>2WnyL z@LIl+_I!G4vwcJvDm{r$sD5Zf!1M@^-u}?&IMCxwpw1zof;;v1grPTKg}l05gh|0_ z3HU8x_ybLFa&N(^EAuMR zoP>GvAu$j4`^zwK=z7+4$-^pSu8OByy5-J*0iw&^itTua_~c|qm-wCt^F&Nw9rkl- z(`|JjCqa+WA~l9DAt#{$3d!;Ou6@NfX36q@cUi&4^`<2l8`F2$eVM>De6a0}1Qo8l zIRX(@=u$PW;o?yuefg+67M1{R_|AYiGJY$ny=q^XwlR^UCG)KhT@$R8$5fj;%#{KrsqNTGRk`gm84(%a5!&?2Tj`zF(_!{u(;eQaQy&pCUZ&C;Q&~mR3gg;t z<%U8~j5BTNAiB_uz-MWrZ`gII6gsQPiF?C^nhu}ke9peeZ&ku;2?xO&Z+p9e;&gk! z_@Js@qJRV5$1mt1+?L@s`Mqs-m5tdpOL)Q!h6(It7O>_Q=gDiHB{q@1 z0WtRA%KaEdSA`ZH85e5&uNPP7jz-!)=o{u_xz1Ba<*Mv$iQnU6zVWBs^nOjbcAl3_ zADYH{_HudV*{!5B6 zN&_78zq^U4Tr&D~`N4FZ#mM?yr4S2J%x@1NW10I>)7TS5%&`5rd zdh=(CTIkKkM6#=4+(X&+S*fJXY}0o)B}i3eqPXK23p&qtniC+i6d3s&kob7qHr|>+!L_NBP=BhSS1jt+(z_H*m$&~kYoIU4C;Amhq&gYSPyaIrVxDd$Bb^vkHiPe&4Lv$$BCZ`|V7z3qB7HWg(^8724xkB0Um%y8v&r zgn<#!8+XRv8}LH9L*pc0x8sobxy1UixQUG_B@BQ?4wPTfd>uFlJZXuT-b?NX^MABA zTls(K&;EAd%eFvibTTkB=pWYjcfaWO54?X~0phK%u_M%fE`k5!)dvBfp1LkAEA!h$ z{%=)J$qAsIswfIw3HW_MoHT-edGBZ3sd~)o)U?|tw&U;j_SgGhTt9pMkR?&fRr>E^ z`0Mw;rxS``KUb+B$^ZFC{&v$LufarJ=}Hv&f9L}LcE9T^l4}BEcjnLk<8qgu>Jz|L z(L8>aZd9}0U}u{8q=#_YO{AmsIcZ4?&Z@Ew1XciL;(ttrGXS_kU)Hr%#rgdU5dNKzTd(|%nptO*2?(#Gid^&I@ZblYg+aw$hysqw z`$KV$L2ALOfV-n=JTu8;H@l<|l>fEFGKb9-A_HmrKC7EnykgA*PU8&c^IK5djY4O4 z7w8z9185q>MJ2!vnM<;@C;^MBRt>(TRO0Yzl9PG5QlJb3P1zPzBCleLDHx7uB0jMk z*fi>R)5Qh50{^l@{Owdt6EJGkHmg?UxUM* zLUKIuMF)tC_^#JV@UgAp*Y&BP_VAo;vo&o+shL$~+YDAgq+uKHc9KMyLD6TZhnqu- zWD#pY=eVGpQqt|-E{@$?Zaah?HT{#*JW@*7b%pMx0Z)A49YW)Otab47pLf;(u1Mb2j_jn@ zkzfYu!V!KPkzv_nS|O%^3uxgk(f(&T5=Ys&!{7R+`hy3#V>w7Kz<90mMOCxntG1=d zbSEoZzPKol36Vs~`DZB0H3rmd{5q<+YRemj^H+W^-*~a6bnK_CX|rCDZxPgD=vzLg zL4hWt`ZnfY*Hbf2yqk4|Y^%LmbE z2?Bs?Fu?eOots*Gr-r#U(ioha%ornJs~>I))35PBW9ca>(ofp4w292-%8``v5v@o58_1byiLrXohZfrBx zY2)4=oC_W_OgNy0?4gd*TCm@wKATONc7zHcSPEuLI>UQ{dX9c(-PsPp`^`!Ta0tqo z+&^)OJZ&WScx}I0Hv@t4CxY?KFB#y*S4U~i;2!?dVyrNGKlTeAI&gN3n-0Y+?WSC1 zk5(=;?qq^v>8-GxVpN%5W)KB^4j2?dE{j4cwYX(GPXBF}!M9zI=LmYnfPy}GWz7Ac zywdFGOEbE#Yic)5p2NJlIyLYGwdXb^!~uKc+zNox+4!*y`@{WRB;dWxdiLe*R9loX&;w^vjD7IYQ9{IZ zP-bS3foh9^U9x2fOj}k$enr&U~p@ERRyRVueaHhNS-NB z%Ty}CZ@Rm?e_H7mfnsxYFB~3c874gah1CH~zm1;+AfR`f3=}wjIJOWc>v>{w z|NE3b6ut42+0n1O$Jd<5l>=D3>p2hh^Qv(5W~Dms&dJLI@7)2b_fw-+RO~i(+G`X9 z8|@gys;Q`wIOB$e?b0L=d!@lvZSt9;lPvTw+|1R$IPYR+F@wUR!etTg%uaH$;G=8l zZP7ibNH=I^Nz*x?7u>+aMGJeCt;FXbN%j1OyTAN zuOX+|;nFL&3&*8N2hvdJ)(Oh_&{B7{8$veRuuJGdK)Q+ssjGyTIFQebj+JUo5^>E3 z=L+v5eJ7)UXE%}WIt5)q6T!PmZ{NOU0$LhM{4)QT3`xeZvt#t#n;D*BDzo;-u~WPt zH6!)?olh%0v_hT&FBN=qn^6b^I%hPo48G>&(LPow4&cLv&E=%evqL2zS278h@SfVs z*{?_!QJjdxXw+(0r{ueYf+$FPx}c{U{Hcy9&FzK{ z5CRI;kyIBhUUV`6SisKmbFOZaR6s}lYH`l3F@TyGq?z;i~wT^kT65{&m-W^ zz4xD2-ml4@7RS`C6uFIdZD%=Azw$Kyq-V-Ixt40w6qEvQmc_01SHDY`@>-dizX!5` zy16=f|+61B&g$!~pp8k(A#ROuZ7rt9i^nYHQk%5qcd1sMx zdWm7MKc*gvCCg0ba7no{9yvvDvCNrLlqB3_Sbq8~t#mcMVJlrCFVCgEL%c_ z!m5V>1I^U%{N|K;9rdwyUu@I!OfKRMjS16imq7?|m|3&98iqsB!Y#$dIZF$FPpi5d zySW`M1mOHj^C-MjOI%Y|f8t5Q_@9ar48KhTPJD+m!!XXEWaIJuWM$m*MZtGRdr9E{ zm3dl zGH3M^Q1j9&lzY@p<)@Y@#|+|#&*E_B&&6Y7`M>nu`yS!+%yKFWgU5NvGUTcD%m>~6<6M)Zpajd~2}bZeh&pf$bR~wRyxSPATZ{^;jS>JHK5dc)p74qQ2PT!a@Gv z$@T6i0~ilT_e9m(R1U!RikgKK|so{R_rE4idiCjjT z$~U`U#!V}*srBp#CfEG<(i=CDoK*Jwxo&4b8wObJwLMr9F{@W)!$}fnX_lny7tOxm zgj8sb(d>JB2<~&Cy7lKpo+~8^Th~0(Q~X55#zf0+8%3Fe8jktyslV(lzfI6imB1Il zrmfH#$@a@4hjn*zI?%3z@XzT(UIo+l03#p`rjMA>Zhph0g3dvTAzxhy$XRo{DSj*c zBqZUs5KujgIa(@f%8VN*!{poSJWvif>+nH>bvS*;g1 zs7g2wwF+0OGp{iKQl8^R3-DhUbVZTW$wFOA*wxA; zDOo?SX=)mEt~C}@+Pnz&t+ln!qp}m;-^>%%f)y9WozML9C~1)b$c%#Tt6y%*>ytt{GsqN>{J2o@p28b}WzVM@j^YB(aw5LvJyDuU01V zHJEL;PvWSRtP$PV9{y-wkcu)v89>vgi^S3*V#M~H!iZAjFDfSp8AQgM%8118 z?LF;fU5rLI1lo#xpzAGq7tJ&8C18}FJNm7k=#le)#U!hxe7_&Z&%P%hAd5U)4Jv)u zhwCWp6;ce@233&?G53_c4y=nv-!BdbLlh)S-fCNDtA%Kv&R)zplcwfpHdXiKb|JDo zzuHSoJv+KTNq_OM>U9jdRY~XfWPHc$&vsMhukIz;ABj*2Cei)dq4pom0}%TTJ&y?6 z@3&D}jictv!nL{Nd}?Ka4>*`V#dM|4_qGk2x~)(&d=k{iwXLagQ+TmsP^nkUO-_$; zXYF{+XVMkf-+$vowN#5dcs?8M5^gl$`8@VsfefL^c7%srhH~E(cJAB%s=z7_lQljx z^Xa%D>2Z7HrW%U@@kL>(n>@{WncLV;Yv+QuX2@9U>u0U2%3um`x2<@`jRRhvCJX}85+q9MQ4~T?{VGV|6$L6N2g&4LMKF+RLfYc z(5(|C#~?PPNW0VTbsQHQ4sMsJ=RebA;Paj|7_bR>cw784&@ya&Jk4;o?T#N>66@Q- z%OpP&pqkm3TG+XiwC|7JX!_Cn!$X?Hz|gIN_;v8Xgb17ZxR*Hw5wrBb2=BF`Jj0uu zNg8kYLJPvDxM$^5?5#=4M8?PKb(9F80KUW1ePes zQjD)BZJFW9`4SN8YcmmK$o83c9i1Wq_vTgx?8ak1(qecd@Cp zS|7qx_fgklp!1_IIL|YN%n|HyEerGAD8Ue*Y;BKTivNUdppB{dzm*+yd;at&8WKw& z7Ul2~x_y}RWPmefx&0;1p8=mI?2nKy^HE^W{B5LVJK)Kes|rx&tAJOWLlNRpX6P$V_d$t+4{XfqHPDB5yQA9 zNBh%yxG<|-zzs1APqaji&-|clLu==C(DWC%{f-135LkN2sW;Q@4;73~Sa;@_!kouwV%UXQKEU3ZejS?)smN_)H>tl=G^u*hVaz_ohHUuIW?R}HK7~5@^=68e#inb9-DeKvvE>%B-zbLI;4@8Xn`e`%%--V6Qd9G($!*oYu7Hvn)>=xIgEJF5h*{6bbtCzy`1C=!xeN3u&HMjU-2MtmV-2=NhyT z`MMrfur?m@m1iYI#Ky+d(I|`{JpI}YirYPG5EfAng9?6GUp+20vF=Am8EILPJ}c!v zjj}|++X`UHJUq9h@ls%gf*C_kJbKWlxa0i|f5WU>E* z3v5Np(UnY{{!jdj9>BKhrt6_qv0v*QA!FK6VKyd_l>^L034M8vP`A`se{zCeC2c1e z`mQ-vYZWc zaZa#AJ?us@I!<6UkU2Csj%QJrO=Cg5GfT`uB9`dlVI9NmqwW_Lu@8O~$vRQq!A&h1 znc`xvUb|L9sZ>1_{PF0cTH%ZJ3s?3JdL#RJIi5Pd>K!36vu@BM9o#|P%MumA>-$5D~QIl0$(Iu@<=c=UMQDLp*QJb1S6fWl(AY3RJN9Cdfy7wANI zwT>9qzB_U?pgiz85+3kfYyVLyUbO!< z7M3Vd6tX$nW^{NtM5*Y%Iltf6eH}f?&h$ltm^t;jm^+@Jep(s;Y1f%CErL!vUq?6j z%M32L^|sq^sozZ^b*~w6{iZE6AFsxxALQmR8(xcJxC`yory9*@lFd}|TZP261=Nd? zt{lZ)q!-g93f}4CHd^AWT-xHbUur&oAZYCjWq@q6am$)9)DC9l72EbJxWssd!SqWs zfh)!_+kU^x7Pm|u#jWT3;Kk_dGP#R_k#v(KM$hs;PQr|M$ zgYYV$SK&)Ln>T3p11-hyhtUoB@zx)UC6tww*SELH%}k4CPE_fH=7WGQ4L^3z0W9uQ z-T*%QP}8U!Z;Bn|GBevoU^1T7<4x9d;pi7|yg=8sM|<<>e2H7HB+GFe3Cj*Wd&~B- zj}g6E3I~GIohrkD2X-NjEq^V;`apG>lw}XVqive`pCe6c^$!YjGC+0gAahV#I5)#D zam1t0uy`(;L|e>vFE6AAsrZTj?{mHnG@#mV2~yx*P5Nyh2QuoCr@O|vW1cRCT6T|D zPkD7yB=NK-qAf(_D6GuS^NtY)hRPpL%i%Q#)RGMRN!tt#v4hoto}jvNAz0I8dUVOS zCp2P)0<03XNh@|wAp$67FM?`=QBo4nLAO$!6{-$-cPUE0BcI@>Aj zK^@PYP|A(%;tFIfPJZK6#HV})?2^cfE@zCsqJ19DTU$p5_bgF-UJW&fjnN*X*|B-H zYClYMqSQLH^mvL74)3`ipC8^ciVJ94@ut3N=r}5C@{r4kRXNH(h)W8kY_-ky_%BfP zgnaU%W8U`ajSG6C`aTiSF+jtiF(Vm|2*LW;Sf3g|2 zv4FxK2A=2xpUf`(x$GNBticj{-#jE-KYQ%$3OH<)*Fq-T(upS+?zd^W-Yqgn#nWY+ zMn@|1-CgzyRc=y_923+3Ru8H6TJ`Bl13_5&GjETLrp{WEFU0wpufJ_^5yDW`gNA3m z(p2?ZdpgD4fbb&>E6y#Y0u%(xvsL=gX;fFh$9C@y6T)46_4I1X?j}{bLW^Oc*Cs#S zfn9uS{ER8q`DT`Ob+*E;S53gqt13{X*pz>DyDRaGOGZKG0GDlJK3o1aP3%Dc-_CF~ zPQ(V^iWDg;`lFDAPua(_cvdmbAq>>b6 z4WY$S24f#)Fezo<_Zfrij4_s&VaE8L?&oQ_pZoqi&p*G{>-R^mF3GsA^E%JtJkI02 z9O8IFfxGV1>Tji)m;x}qXXulXK45$=gq|26YnQjq{1wnHkK7?=yf4bDPC*7Sz=@Hb z5-V!D0C{-o;ZoCaBrKvp^lsB6>%`+dmBEt!k67V{VA*(X!uW|)^i1>IINKxE=P!8S0^UbOO9vEe&6vvbn#%`cX;lg( z?&262xv&@xX8K8JOK~vOI)qbsav%G9Mn_L>PSP$qpkd)4Y|-Ze_ebuWeA=L{kK)X2BzWLL+v4>=rg_lQlwd&m#M$R=f1`K_?maB^x)$w|7Lz%KhJOX z6I22PQXTi&KS*K8ss7Fo+L)P;;mU(Kna&X`tA?D%O2YswsPio;Jw4aQtsP zP|~SYfdUJ;>=((wn@esDA^4yw=9 z-<&Fv9cX+%4br}*$Anc-<3`!Ep72#NW=)=4jjT?m?q646>QNy#C4Z@Sx_GQFphN5` zw{7+xzsh)LI72V9GTiZHq^#?p{SDTcTlm*E|F0_{P^J#Ug6d~HAZdP~@^rtyp)R2J z>X@zkt{*$x?f3a0JJVshH7YO+^u0EMk%z`Y2hQ&jkBO(nJ8${mk7FnUJ*L|cX7sFN}i#CW_)HWAxDBi z?`hBnj&K>ymMrHXzK+HN8JVsxJYks-{1sm{oS_+;0XVjuRe`=H99&fR;unsIim5d3 z3D5ig{Snm+4lU@+g+`r_mufsHY@F-lXmdsAaov7`N4W*c-D_hViYMlp6^{=%DmL~Y zOzZ)s3h1NT`%z< z>38vl&~MXdlPMmTX}w7mXr^|I7v?^m74a#wtxeGGa*FYPqhA3`DOZxyeD+LTt zf|cbBQ9#e_GRv?QptD0&f);|ES-Qtlvh9(TOHa5Hhpr~}fwMDoB{4=1=(NOXtEAXA z6Ol?OfI2_`=I>$bMpVg)ir^w>GZ4;g|sGWhrLD^=M`P-P=pR)L$IvnF6~A( zT;pBcZ`4`Vz}vP5NQl>5zob8CQI&Z$+T;v?4ZXJXZRcY!!{0W zX<|Ui_rAob;}ZCh)3|769vjf03}aHbxhKSVxVkD%#6%AuB*OMh38l84>z$sEcGEDd zLaY&G4kUp&Rng2D%M(qGX&=Ia0DoQ911v0HEN4sWd|kji1dSMrds$gkHBm(wimeKy zG=dIimeRp{=vlR!Tz(FJ4;8;gi_d@e8J7iW^-4)j3{XR#ACL5@W zV-r9r=3Vt_BUswL@yu2a+)4l?c4q7Ic5H--80CzkBboJv{l-|gv`MV3F85%d?{^s; zNSn&Go2NcQNTli_r0=F0g06@&-5+9Ew?UpuqBFJ+U3$0|q;(0zrO&(e9W9}B64?dy z>OHU<4ipg(aqmu;^?g^J9D|L=ZHCD_-+o8ZUG!wr>&ueId*I zxeoSjE0_<=4IKwsz($}h`lP58stQ(+hys(TBLo6m@jUj@qwih)uk5Xu7iw?kf#O3S zs%a-U^VA0XF=8zra(?30X2ZIwvNj%D1lrlIjYdkG8U(Sp!jm`c1J-2 zUL9-8Qyi(1xz3=mSFD`2E#QR~Y7R=;Q3s@;DhX@q8+UI2QxEwy1`^`nplvsb*+Hk+}B?&{+HN-6bU zG)}qsJJa>puETDV$kuu2FxiBu`h_DE2FOc3&eMuX8z2snulV^{ahWB0@W{EpnvTJO zaEoeEq|6O;&F`ZFb>YA|l-OHJfs?B!bB7x?Xp}_rQkQ`u)KCBb__@Z>`GEewoqaUG z&#!-5VV>Vuc*7G(XEaB-|P(<9B`uBrDYH{6Y7wEUf%2Fp^+OXfK6tMs+VEj4F`-QuYm zVB6zl$F5l$=M9|QhuxI2_JEI!9P*#4ias;#T95(5dx=_mTyp%ir3)E<{4Bcf1Zw!x z*o%6zC9^P$oVJ39X;*CoyN9vNP^0Q5-MfSTjq3XJX`twQ>lYY!wSTj(;zjH0DzAwr zRO$nAA8}l;R`SAy{-HWJ?`Zkp6rhomC3oo|p}oc8P#rDK9qam*j=|{{j-0L7D9U^q zJ}Jb0nQy$YXXi|!-pxlJ(?$;ZJB_`GTP#rG|B-7PyvV1cG{{)G!#H^Q8`dm5B3qtK zLV8NzT7cE3@%GPaqZ`Hef(~2zjY(3`t*<+2nJc?LV?5uaa}%(9^VU}#$G#q=Kl_l^ zN?&PuVWr~daWByKMr+$nX3aVd+O^c==*FdZ2&vE!HTACByY2Bz+B|eLfaj(SZ_v6% zZq4vZ9AU0HJu2mlh%qv8>x@e0O>Af-1lkRiw0ZPCT}s(~g2MKke*A#8@ba$k>-rlp zVc`#w)ZeH2eLLx_qxTYjX1`dM!k;yf&<7k&F_L*YAO4_7r18@qm#Z86v9Q{?DW|WX z86ww^q#T)A&e=sC*t2pzLTcG0QK~lytALObZ-76#YdKrznA*Ps^WkRpQ8?jQ9FT6} z(a+ewL%E1Dp*B~;egT00o=!p*xA43eyP^A;OSD#ObE9LmL8gKKO#8YJAU_R>`wwC^ z&s8`joE-vk6z4TpHfMVWHdR7KC}4iv$ZCBh0nYb@6V=r!o!=W2I@f2uN;1E&jj>*A zQm`;YU6C0mro7IT3hm&rQn$Y;U&uA%V?+%*ipGXEq zkUa7ty*@pJ9J?hk0IrSoS$T?fjg)16D{~L$-uDbKWsLaR9BINnAwXOd>S7olG29yW z%py1uuqW@Xc(2UL%&1b~@;>7)<0LG!yrvpYVsi;jJ1X(x$z~HeCXQWy06P5lV4`wG zkkDlpL*$(-_#@l^M%kM8Ol)111n8<6*L3ovtRGO+me`k0Ej(+MS*yS#cwBA9BPUcY|Asu7XPuBe-I`C zb}_#5N))FD<<-V$>^Ir7Icx=Y7u%#52xo!am7UC<_%c`FW!*G!TJBV`&%Rv1DJ`xU z*kY7cIyOHY=xxJp=|`$EN07|kx(7;Te|Q1trzwc7G{>~1rKK(Tm4>@5_%$~g)^v5v=5gg~dy_|Uv&?09;6=skjs{>uxTs_dDIahog?>^9muVK(V0oiMpm?JCw z5_;5IxXn;jzl{(}+iz(lrGST<>D*f@4~#!M#inxolalwnAW7%sIYP+w&g7)lRE3f_ zpkBeFXS!(hBcSH*&8{Qxvuprf?XevZvdeOkJPCpSL?3y4LRQ*cW}>2yE#G#F1rNx( z_T*4?J>!zPA57AV#(B>bjB<8M-+kxyhmf?WsLtfejYl%NX;Mw4CJV!XZ2grz5V`u; z6&Ktxuuj8Ge2`g~14`-LHc@8FCD?mip=H#Ti|+;z1It~Z-|Y25=OJ@xK5G!d=?i7u zq=zu6;8DY*&91i9%qAn0+kk2E`S&8uoePd-{c~r3Rqe_ZchHRkd|y@U`}_30+qRoZ z=>NRBRaCZBfX+VsL&E%=R&}iB^ui5J+85s#d~*W4cq-E1{Vf&6eUzT+Fj5*uuPTKb z+ICy;VfijAZ#!(8_^yqy7^D0Vk2iGx79G6$;lo}Ul~tSjwrv8`XXX=gG#n1E718Bd zbE4w&gQm_H3A0UoFN+SA_pZk<1w27-5e}MZo=H0E?qvhS3we-S6hWT#2T})4a*tWI zC%~gvE~Eb;os5aOCyvaOwo1&iv}MX^?MJ!dPo8wpAC}6DR5V-lBjKQZE8pII(>|>_ zT>a4Stj$;EUr*%Q&!(0K%lb3v<;1>Z5Ft+z0^50-Co31cRS@x6vQmv02V zTG~(orUHV^OHE+w^tB>tCdGUiAFNn*IC}TJ)mO7buhtm(chfrdo9w8vGo|4VSR&Qc z)k(^&yV4V9971el8UahPJD@UWf8Z39U#oi0QrI;h)pg}4{ zoX`7rb=<#0{)jdE^tvTv&2P|dM)7XO`S%utW(U@|0aekXsml1*daQkSMdHN7K+v0;$O2VU z%|u6w2B6l2aZYi12gmJj@Sk7{XMNu6P?j4D?8whP)Va4B*&uD#_|zZP3yIF>9xpfZ zTB~AHDc(M=RN^_?O3ZS;~#J(WEpsk^5;Uth(~dTK0Nb(}AhQNpNjWUU@3Coneu(!OD%8fUul%B$ zMPJwHpr>eTVc=5v3-Y+~`ZbLYrt{m^Zg+Tb%C2wDd3Ajrnz0WX!%+Y(_?)mg7d!ck zsQFIt6HU)H;Z<*3!(jSvj3l)?yZs&{#T}EIOxw+O*Y{5i+>I>_+(5Jto=_p=tC_H4 zKJYGo6U+FU!-hZVp!bKue)5%pg~hK7)P$t=xwh+7cw*9W`?(77+g{V(f+Cg%NIJKk zQ>huTfW9RuHM`#iNJTV3CG@1c70xu#y7ktMR8Ac=**CFKHyrV37Ps(}k!AEViwVpg zUd>6J&0V=rQE)~$YL#O~ISBLcMvQgCAFX&p6^eDrVz*c*O^NDnNwnD>NDQc4D5A5y zd80fzF8teZ>$Jq1Rc#iY!w#dgH?sBQlUxaG-utMKq(M`h;=J!0fvw>6k+l1K!%O2V z!$x04UFWcS+8^;EbZuDv(?I&=f90MVUgN2B@c_kWP6mFRRFc8^_n3E2t>|F8@;#4) z&TLA=bq&X{Nm=P&@|E?#wqXB_yl)0oE*dj~h4HKg#5rKQ;&NBcYs923qsE+ak3@>< z!sA7>x^y_DA6LKC*1M~OminC)dCdtZiS~%;{DUBQ+Ya9|*K@C3{9sh|B-gac+8BwS zn{BGw=|`*X?SZ!ZMRa2Y7%y6z68EOA{;J3PxSIFeZY8|M6V9+-zEb2!-d=Iy@To1D z(!+fdi9XJo7ExzYj>??%r|#m9_l3I>@`j-q!2gWx#C$RRZ4dZ| z&<|o`=rO?f{JKqD_8(sJue5jT>UrFjRxi^xvhaUDmgMe(^k>^2x&A%){CErh4$FK( zTdG1W@=@FWUUA&I`8x;ssK=T15Bwj)^XqQa3=UsQjbm>5$EUxuwO$Se?$SC`&a%sk zW{+XH`sMkLa{-_Q0Hk`R%JJ#3zYp@`8~6CkpPv7%kk9vgZkOq*`~dcg65szCzl@#W zMGJkin&kXn?}Tq)Yr3s^NV5H=T>ABNzh4Pm+?wcqiT+pq*GOMm-I@{`7R^lm>+Pv& zfpJbbJY=8tSIGAt=1)x37O{Bq=<>b)^-i82-Xa!1@J(|3n={aV40NcS1b7Aie-0@h z^p299lhb=TF+}TrYg(*Qg|`+k&9VA?!GE^o!J|hN`Bhb2*AkkO#w{28K>?&lWLUo8 zg)-t5_O9etDS*g#sBGnHf>sI@zzN{h-raw=W!opW0xsH?Do)f)N|DeAEE*;NKM-h8 zgd0)>Q5mvVDL(5u&;1|8#*nI;M-!#P0}oC8uR*={(Tby-STihQl3za^Em%L%bTUTS z!g#=U0=t7|iuRN{ z6i*zG7`>SU(Xn+)y)tzUgOV{67|Cp^#8yL7|I=@4gMe`=+#sF9UMm*f6tgp!= zKOQsyxF(LBgT1N|SQsq5c^o)iJQqus^$vB#ErtKloNf}e5!e|u(c|8RzTZ%G_&5Cg z=ZXtdQ^PLs9CNDPogOBE9A@%hQU7hG@m<{Vs-TdSSzNcRlBx;1?dLHk%|>Y*%DU zikx<)R{Z7kG2m=?qj5}RY;K@9Mt(U2@p*$r#*R)+ao7-sVX9oUs$S!d-E7`pr|x`+ zpMU!3*F0!29?543S)OQdbF7czS$?Qwm|vn~nw0_kZ!YZ|0p25JHHIys=H>U|#LdoM z@(;3{R#x3~N!}lfaC|U-fLGoD$s14*r<|tDAu5w&;@P7~B)K_?hNw;n4uJZPkVQ_p z;RnmsX5&>@&$pfbu`t1x*K|U8gQ*vjWgwGW_nCDhtSirQ-P%~2O1GbCP2E!Wo2*rN z9wYS&wf+TJ4eud+2 zM61PJl#DgJChG-kf|b=jePZBkO(|@>aRRzr#gx16D`lvs`a$jXC zqNb<&!%gkFvX+Sr%DSeQGy(=l%cDE3;!zGO;Tn{s9+T3m!UB)W!^5v-N434I3TA5n zRP6Hk7pH0PReJv-JM7WY`;+jA2!-eY?~N-HK;P41Dsc^vmYWJft0sUY#~e>B5U`VH z!~QB`_;Um1E8O|LX-<_veOCnsW=&_T&_1hVE}$2R^{8IE!pz1aYHe*@X33NSAdJL| zVayEx$aQW5Q7v-|-kiQ(>xMpmPswZi+6VK}91=2MW%jM~(^RzyGIrA)FXx8q7Vj8D zLm?K(;EnYn&#|w&Pb4w61F*6dn#|gws=YgV3uyDSvBF8$W zgaAT%!Dh7Yeq^G!*5c?FwvGd3 zb&M@r`!`~wkm*Ri1Z~T3*lsCKzH_1?A%@HtJPfL98~g)+xZH=o3sl8(1A*<`()8FnhLes>Ffu8AEZ{6)|Boc>`X0^C5ZnPo4<}HA3CzEiKDbi5v)AdI zfn(l0uCxgtYP3F=5fc-6V*4BQ2XAH=WeV)3luzvFQ}OhIez%? zDXwd<`;A|o94VHLfXWv3ZUNmIL?;_AH7npMxQX)RUASRv##^Vaz#n(*Y5@E7g6(@@ zxsQv4Pu;m_czNzl4Kwn|+f#3Icip&nNg?&JI>$dV+ymZG%Y zJcK=~{(6_yQcNaRb6ACAjZu@sSPov-V7Q_0_ac3>f(*|@pIP8-n17v}I;hFTW8K%1 zZ1dpl#A?cVviqx8yYXqyrBM-f{*!OemK}(2!WB#&!-OI|f$*42CWhz@r7wPX)tRXt zWlKHqb?1)Vab}@$afUPo8;oha!G$ujdJA7Z@!^BByHp?KVx6W``lIaM>TFA zn)~P(mnDpZ>oH!p_WW{03M`5fM+)c5x!$|@)|rc8g4Vn+rj*q4&M~RIP%gTQX$7PY z_>A9qSpM2);+iA*rt{#3LcC^4F_YK zKBB#+^kxPtiU~gb1-A_Vu04bA+gF~gpFXcxiy>D-vOO>)S&Ka+i$mumJ>PO%qmYM( zqdp*dnsCFz+eavX=8#ZZdwHP5ITko^*1As$`w~>v zDx76j0DL_udxU$FGLxNNw)~7srU=PJg`Cy-RiZmPyyK8SWj)VA*-o+Z3;o4%ng_Js z3)I{nI9&NkNxw9Z!V~c%Du&t^@0HhQ^9Yu-(xZDUmvFJ`;BKSs@JPrJ;$)s;W-uZ7 zO+eB~Zz~rW+ewb47RnGWe~I8W(&WbeE{!T#(xbW3J>-TQY%k7wN2?;uP=2a;PCt+~ zTn{RPc9Vj`{rTUH%e;pKC{4Sm>KMEnYfi;p%SvWT%pmEbHhF!bMo7d3-l zdUuLOa7*Vbn{AOBjyrVvO23xr6s%Q#s$a{PbRYnbUZkAb`7DI!*v*YLw^LjhE+*}L z)`5AIjCG>at&iI}JRd-92t%a+)*Wa7c5ed(ln3m31nYVA3fC#AB?p~8bQX{qywO&Z^<6k=4Pa?2SFUbx}k9Bn*jl6I(@mVn%3B+ z%R~Wz1@Ao*%m|6@RI^4rfxa(Y!U2_*z_Tgji?b2Wo3G`?MLic?j&Vk0oj&tbv|$PH zx)+LOW!+lruc^BN4DL=R|8Eg2H4rSju3>b=9|pE*x%eU%4uMpq#lhb~sa~%&2Ejk!aA$H z?C{KPFy&^m#1!Y!v^uKk(KCzj_`YEotFFHI)A*9+?TdZ0rAtF4`kBM=iTxWx!4!2) zY4;)}zcw{mQ%G>#0NO2lX607acWhQ-iOYaa^{b7r%7rBhso4e=c*uo%Pbr5ViS(b5 zD^zKxPmo#Og&qlRtO>%klz4|#R;GRhY1nhU3k#@5&8_Id0O(UIxBPvMienUAj2W!v zgYgN>h>4tYe>;s2aXidKUB}H0Usj5ow*Zt7f?X(5+^&b!Y68KWjYoN)Zs%HuwL&Oe z$7Nj$>bi0!Zq*>&UmJDgJDVb|a227mtYi>f;C;ZY>@eO$S&%5wKb8_#&HHv4ugyxi zG4OwkPm*3xd^y~wsuD7P?QRpAuWK=IasBc^5fJ^9Lstaa-TGgrmAH18<`_mK#wzei zP=-2&eYlMYLFP(k4664tOTyHh^~ zX~o6s*`822cibtixuZTONL-}*%dH1V0ycH(ssol`#@on}Ms?@^a&~^rx1Ds@6mzt< z5ge|7?}zC;nka5FLcC<~rZm@7LDUqFM{XFa2hL|55c2AALhGU@mgoj@yFm z631Gh#Y^eiJvu^v)9zr>$Wnk{FKswo@dm|Z#l=aDgCz5 zEuJrd-*qFKD*aX>slQM?4ZdooNB}%88V;DP)6lL1QqH)N4<*iBUyTQ=zjtbvrP%u( zz}(nAZ23BuAPqq^;?94BPKn;~#jM8zvJY}yF$J%W$$(j%1hNNvSXERHZ77gDFcT?J z-CsSqqAT)lsyWHlq>8cbrznerG3D88F{Z5YjnG`lM0vC?**#I2Iucgoyeu$K>=@08 z--yn`J9G5nN}8Nxx+L6Yvnavm2=Ol?sZh2}E+%bU{VsQjxLq8UBLZ+__A9R^KJ$ZSK9%Nf zI95;cP!-7saEM)ReF)8ir4E)tOpZTsnLxm@gSvF(21t9Cb(!q*{$K#RdXgWSF(ul} zKtGG(&W%Uob`=v9*1!m_kb-LuT^%n^tcD|Hl@;tmp7)`?g+>6#c>SnVuz&gqf^oX< zkiYD7Z(xtht*RjqjW4M%sJ0LzWWJnULBOuEH|pWI#VF{0dv0D+3>sDgwZ^l|lU0#c zo)EdN0B*rlpBT7oKu}c{B){UTd-BVdP635`Rh}koF24L1TKqa=XJ<=zDNJyZaoj~S zHGTO(xSEcS;ftYbmsWB#0xGX79Q)>RR+%+_*Y=&4E~$xlun=(iX~))zUik-bB&~j% zDob(Xo>JtOX$f{2Vr@@zx->NFPro`^@W3VJ*a90D>w{9-wAK-kBeTGf(IcjCY&bqr z{DQVQ?+t1p@(;;VmomIEpJ>c}u+r~3c)>8VeE+h#=Fg4z;91GgskA^n@K*S_wgC$q za`lLbh%wZvDM8HJGV&2-i?@2?-Iaj}uAM{}E7$pgWt{RNIMbkRNGb-ls zv%&gBB1_bxoHI~04h{}M;0$qy^vEnsn>7UkB?@pA4SCjaSI-hYs+W%ehzUQ`H<4)L zF4sZp7SC@}Am*OH>_2g#ox_eoB0hX4FT0Sk#ik?;vdRrUKTYj<7+}pUXNHOC9f5%z z8a6k)Wl;gRt*(#rZZ9*jDc$<)$_?o+1u0kmlhLa@{#7A#QAn4y(5uUp*Cv85OS%972$%weOnyV@DO6|c+ zLS1)w2N1?v?)om4mXsuvf|`$8he93^-Hr~xH_lN6msvm?G?bpM|NNIdOTbOAp}qsD zS)9e1iI>lA7&)omROP#x_?5LvJhe{u<()PHHoY(NCFZ#=*gab;${M)kD8-S$1X+lU zEyS7!J`GzAf3SBKk0UM0N{T*{2t>B;CYH3lLrx8+W}mUS*|nNDK6An3<(}NZSm8P` zQ*H;}FQlL4_J@b+V|HV)l`mCmA5$cVq7mo2h7_bzllVDf_!0U}hT~X_Ge-?h%oC78 zYj;J=Hv-=zF<=881CFo_$2}@f;vU{LH&1q2xm%EBB?gge;o4nSTe}mVd%bC&cl9ln zPGY-wPS~>)M9rL$i4{NBQR1<$EL~r`3cS}PY|uU*&b#)v2k`-0o?KfoIgfexT@!>i zG&Q6vkdRt#;nJ6rN|dL1n7o_;9P5GCaD{6V9i_ci3%iK|U z#FzA9{ae@W1}TZ8^%*DWJk<|oFdW9#D!a+~&;9g^MEg6JT}j=AHx|<$OFt-8vz$|< z`8sNjO=ERuyR`~7RYayg2W!CHo~~JRzdgaWeP?6IN08J$VMY^s-HJjMOzBNhW>v7T z^N`N=AcefQC2oXELrGFyQ3Q-rgOpj3PsJ;kmSA8Tf?;{OOLcuvFMY5gEZ4Hse6rQ% z3>Uq6rFB31vA)F5hf9{^HpkBJ^EbVps>5$vAC%TlNX>d|vCyu&HF4cU2ZdEK5V{WA;!vf_ zaAdiuH5^{FKX6u~!(BjpuGa|Qq<8wnY!<_V6dgn92%1^v$O5_(<0zNpj(*yk|MqzD z+IAprgN7vxdma^Mq@PLle6RwU9@{Ld>-9kGFE_xQ==dbp22OoH=jzsya}O=Ft!o@_ zh$ZdiE~cW1pglS;oAjD`t!V%4)59{6DZs~FkAjWAxY`J|*`Q^e-+uaf=MEp5W#{NC zw$Q^zU*o6Lnfew3c;yJ<(SEK45(O)&F|e?#bT78K{EGneqHymoD8e zaXQ4qD{EEZm02a2R}FepIKME&P1?W5lAZh7wkYD*<2mV3nYjdsE-mYO?&;b?ucWuI zh=)hO9e&a(v7+s{C?{INN5XoEH1|DWRi?3K3Ua`4Ob;tWFZ+f$X3XO z6Qb0fm71t`M5n)wn&&e#W~6U z+Lm9&-N)~m6+1`R@4(7mJ{5dpTu_agl74{rW5WEb6a37T{#~>Vl{%$HwYb9bN8nyODn$K6RP`;YPz`0uY@XQWM?enA|v#-yOZ!8poFDo@(B?QX>AaI)NNw$)~?bGa6oH zQAm(mn}=Hz3h66qVnTI1e3#C3N-SBXkjR8}8!XXq=Q?lLDJ^wIL0HS$Z$gaI z&x*HVq*9uc1s*l#YI=aR@kZ&_R{d1J62r%l`;_)C|GLj`K2Xd&`MU5Q7(e&a1~{lB ziqTTbD}VdVD+dN^C<4ulVWh}jxT^U#L=E|al|sEO8*5CjSV{x->i&3;GuqQr$OB`p z`06en7G-NamBKKclnYk`unfTe%Xp)-G>%=)-PU?8l>F{=S|R`!8f#6iHgrcwG^|a% z61TNU7e(~tqv|Tx<~L&r5rN~C#d>1jON&na3>j+QcD|>Jy<)fcYgOpa=dr)?ddf&H z#iciG>DkOz6NJcdnOun~i5YRhq-_$&tg)(UCHEL$h~|P>e{kSx(`ySPs^_JMF++$= zW&Pqcr+HsYPdlv<$)#SypHGjY5fU;rBQr(beeRrc->i~Q?Zmh1C9w)x zo559?24A#R|G=d#KsCx(wqME*On>O6>f_ zNn+OM+Ajaqhn`D>!Sp$=6?DaByw~K6pk{C%F~lacYu^03`AyyTxJu{K6_nNE88zQl z=CWv%?38UjG4uAoSbHeZ)M z{?L)gQ-|9PBF3?fh)d5&ovHEf%Drn;4&%{{CZ%dH83+F7MCq3*y&y?Mv+6 zJ7mFZDdy=}xJq0N?W<3vsJaJRGZMgoztPh&Z@mZN_dQhc%$ooi%zS`%h)sxMA8c{3 zobm-I1{}59LZH%wYnv}^ZGJo2Gb*;lV>dyv_iJtayaGY&+dE@(o`mZykCKmw)HcMn zMa55u7*C>GYip~d{HAvg+`iwd=uvIVY#CV5EVq5KoGCtC0fyl5=-xLrk=uo-$D-5u zv73vir+)6P`L?^n+xZq4;pqu~NMD)D6Hrom^H~xQQ_-;Nv7n?qNT?3Z(Z-K3k1#?|RF_IvgC)rRp;hx5 zSh`EXvjQRk3gORzC>ZArMW!LHQi|P<eT+3kQV!;wK@5s@epjoP{tX|vmyOp3UOYr-@6>D zW)paVe!7r-oJgM1!Z9{r#RAWcU&Hr` zk-iUSnVVoj^AFn$_&#>f^yFZy`ai73H>Y05XR{4?N9GmuJn4ma@Q8wj*g|em3zw9AQ;l*A z6K=B+gu?rfB0UJB(#XV(b&Tj58R^bW%lSs)%!ZY9VJLI)9=Zn+x?$a77AU+kMXcJ3 z|AT9_3Y{uq@enaq=VDJbbA08B@Grej4Pw79>vG*DA5A}Xlan5rk?mN|%zhMmVd-{+ z)b`0sH(L-#GRCZfI^|YfgC?FVEm3_hBV0o^$0RVp-3u%eySuCk%f7N6uQy;n3W;~S zs7sM=diso3^??CB(qY?DSn6`2ed47fzGQ5%{u{SH^J>${Pzhb!y%oASlFW5BBGTD+PfJcjNpGx8qZ zn3k>@%L-QE_1(YOcbjcU$hJ;DMxvTgBi`#WXU*Z8_zquMxD3(F^yOwhNJG`vU%Lsn zs(H|qvcZ9$Svg*1&oxRzfs;r>I-+k);tto(-TF0PyM#n;k5~T(5=5q0duCUmEVYN& zes1MKR9!tiJz*RzN(!zBu2NXaLHs9)15xG z?gxd3bjuLphJ0BS^?vchdUe$VwkZLh|9AuOfP+rA!Q{;&`g)ptHWA;*-E69{)*Mjj zZ_etN;4h6vt3A(@5z-;tyV+!X=p>5jnbrsS;vmJjTITGG^;y4eezA|%)rPHq+<~0D z@V$VA{Cq6R*-_XD(rDS0xqLMp&JS|;lAaFqZ7r>2I(!7Jf4=Qw=_3JZ@3x-O`}2Kn z9CPyT?QeBC2A1s^T!!GpR>n4cqnqj9A^u-{-c)@xoLBkYf0pwWx^MnA+OanuEywbJ z7NEq65;0i#cI7b^T_kY1OU=R8dbW+B!^-OT>%);vNzx*T6|#<}#aJn;o1%r^JIdgAPb zySA(sHzE19BT$p|oaZvG`A)*trN^DzJSsP;_ndz>zGTgT+dFbo!8ayL;IXUs<$XzO z1FjWCeHvvV4g?sv`plMXXLsIBe6EK$Z<0$-9==RFFWDMZ%XMzHG#zFjXk#=Bj)VOq zXh@z@EAog>RY1$L;}iL?o@JNB9?G!)yH~ECyxr2_D|zr953ywbd2bH7sB)lBaZ@SR zg@y<3^N;v|dA~U?+d`3%9xjzPX=S+Q>-ae)KLwkl$HQQ!*VQxP>mf}hxa*h?GhfY- z%h)VM((2WKZzPjph7+pq)`fzK1&X$G^3q&w74?v4!< z)#k*jSCu5jto;n4ocnrVk@S!6PESlSOp?x_?pIQ0FRzWY^+-9>oumcwP{Hp%7;yU$ zju@O2*Guzf$PA>!oykrQx_{nv#OQTYI<=Zrk}^jSX0v}A04cbk6o8y-znHcMP=1H3yk+lrj)Wuw~4kG`a>uk z>)Y=~g1mv;LamLWS>kstBlVMo!}$$G3ii!@B-;LZQ6nR}c89PHJyrhu;VJYv$Az|? z!C(tK8JiVkCjvo&ol3r<*d(6oSfbj3Svh>kPP7|O*`$HU_vI@yidtNWrU_25+!yYwS#AY`^ z1)NUE&@Xbje;TFn@O;CR-BxE#;_E+dvdUR({dxRkv@)cxFVE^`8V?Lh`ee?bwDgg* zH2%JDsoNWQZ3A68ffEUAJRX}h;I@Ky7EI-{X=T*R55L1FNsZuCE+YF-H+k5Ph!~#R zz7j9xFnDHd9kbalhE5B3OHPB<5Kx3$b;fCmAup^#2t8GHvn=U2=Z&oGo(zh`f_J+X zSuh=LHqW_~K_7;rlAeqS6n%Nxhv_inpX!-ChCCE~Kz8gH_LQ^(+*!`w16SuY>6|)I zb{tu_Y(Ajuv*5NwZ(_IWjvOPk8Ptv88d{jv*AG;Hv>l&WZv2wyT{-zg+nzG7JSpE= zU^H>{rFemd48AT|GI=9~s4}=Y)e)lH^&@HnJXzx4ZN`lR<$}f{D~%Kw5ZZUE|ldm5N>(yVCx!4-`q41QPQ3OEed$Y&FUWa$Vi#3Lkr;+AjHtC%}z z!y!Q#$O+?-vYMzD!%J2ecK+4}A-IX<8d+{zSsAew!_$ET1D1Jgn-5E#QGPyt_T!4s zhYw{^7w%T1^sPu{X*+Iu#;{EUNJ~jwu0!Yfo8CuSKztA66+Dv~6EKkmHU5%)Kt@(& zwf?$d!+2tfQS-UGP*LhBwP4agI zJDt3Ar#VJck;JXrHzWHe?i4!8F@2--zRqm_d#Zjd=O=SMapO&hH7uEd&(O=;Nh6=8 zgrZ{50m32LTFJ{llm1_CieL0~h*Rfm>!v1cTlVX@lA*8lj`C^)l#R3M?-NIaop$TAq3$%Tg8-vvpxFqfrrM$ zSMGC)tkqsG|093<&tN~oyZgaqDhBiqtpI2e93=^zHIxT_%<#X|y?!wCcK=~LLh4Hs zp?`HXJGFy#wl7`~L=KRTmSfAs@{6_X@SbV~WK-#>emJ*qAFdQK z0Yv)=zQb^n1W~g)s%HN0>-G+M3>4W*-5pWW)Y95(`9_dFRs?p|IqMBTCy0JsDyv;ej%&qkt}I(qU=(CUC=Sqv3GYcC|Qbc2A^ zIp^rq+h2`@-t!9x;2^k4|6-4utkGluZ4OuJ%?)E!>y)JJ)o%f5wZHW=;P=@9@|}Oa z?XL>Mue{~=t2d(8M{OBstzlprF>$wJuT3AJn7L*>v&m=9hBboV6P3D@)KPfz5$kb* zFc!81P)6@?Ujw8`(DIRxshhr-F zQCt$+K+n4>tIQfCzIE4U_w@VLu>cE1z+_%S^MLjnkY+@k+h2!TWgPh!FeKf2;d5}+ z!l!+2o6hf?>p>(Eu7r&`ro)X@fC3sAg#=y}x!wdRsapmT{!+yS>nojH z-~K?-_G>>ol?4lUY~pFLUWPwn>5s+q9~1M*jn}oGZCF*TP^|$r<{gMoq;b1TDU#W1 ztDmA(J`tMgPDVfMwSVXgx^u_u6E9bD2h1E!Ab)p~!QIJGHz2Y{IF$K^=>RRXwVVR$6*I2+*x1Fh`q!5w{&E3>P`J@n9ICEIiMF zVy@r4pw!&I|J~=ybs||uqSY)dU+w2r8B{3-K>DD`qV|G?($I1m)pY!9=>WnXk0hFG5s!j{B5Lo47=Wii#~K4xk)5*r4)NG0$29*eR_uyW$te4K;2q$! zYXMaBGl2=ir3H(i-V=ZIvr^+j0ou>Fb^YO;2hU1vAF|cB(h&M1+ugtCa>CbAmjXmj zRsKu~amY+06gp(IK3lTyK4JACyyq?%Ov18nNYH1vFFQTh92je`cN7?|g? zDMNv7s8)uR49BXayCTOyVkL7uZlk0O*wf&j+)=cx*3i(<1gIt<*Xd!QF;lu%qfpsC z7t$#OY3VLhTEys~_VgFPQKVlS6*;y4f4q-vp)rTfE-sj;Tld8m54{bMYggzcXC_*^ zVEkbyGWv1vb?Pk~umrFNy#}gSAbW{X`FINnV3aceVgj$oZ>Us)jXp*EPW|*5KbYKMNR{X=z6d8ji4Ro zUkE@VKdQL>zk8Da{?E>xVCq1vE7j&3M|$hF~onypQ$5Cm00 z5N;R4N&_duoK38tpa-vv_IDnephXRf7rA3BkgmeVf#0W30wUrO?#MFm88ClW*If9- z@&COaJXebd$C}R|#;CK$Fy<2oWPX#QRkp7B?Ytem(Dj@itoTmx=|_X>TJgdSz`n(G zB*!TADmOF^bZuAT38vl#p+1r@2P~grvUF3l0O;(du>e}0YhZ$VvwE;w(RvHnKWLWd zd=`P9rPkn}KGtHVP6bx-q{5Z~=j$+Qx(vN{#I)|X`*3wC>l>Nzp84!>U?-GkfhwD7 zFAOWyN_zDBUh!vS{>Fch-5T|oz;|$IN9EKd#v#wpe@E==4|W{NI(`SqJ90-Fo z5iB~@_&eJDwamy0`6#Z1*LC5zUoiKuoRE;_Y;PW<4##Slo|fj0@Q^uoz?GAe6ZRsi zgP8mX)zQ&WeXCEbjckOu+e@on{Cb>J4e84-JxK*i&)Y}75(J+P_s6ADNsrWS?4Gu; ztcxD1gl2amEsD<`Xpn6Dpyq)(N5{Xj!RPCT?=a69cawfA*?)lLbmun@%!zVwPg$Js?J`30l!(>K(xfO1s zQt$1VOH!v>6r29Af9ad#e0jU2qz(Z>CK@GV;I_VHE59t(}qD zu{};B!j=k?ecfBg!rY6PJ=C`@Uq$I)fO@7(;c{3?chA zV^@|T%M6A*U$+eR>fY!110Fw(dCh$0e9!kR@9+7%&-pZ%%QONEuJ7oD6%ESKS>=77 z&so|>|Jo7Q19XkPy_^)2auOF{CVBx4-;ZfdlFDk3DN4I$3E+Ol_2+m?LxRQv48+NSbvvlK1FoD8cG)(Jtebu$I(U$ z!yB&)Gbv=J!1@H$5wmQ}6~GQBtEnR4#F}{dybhex7$MGr!w4z-dWp-(NY!uXuDiFKrsenGNoko9%Z1;X7Rdu1O=C_5|h_Adnr^O~NWd)2i zJ#HmOaf6cEDj=PhGz0kks*8@UbK8a#0Sc}gUeT>SwJjJG4S^k?zq)x)SWGiRFw*7X zxAk(3au>xWOhWQ$z6tx(HJO*HikFECoRGN1-@N}Y*R=#6mt(1A0?l_ zZrCN-ykHYudWL;NRwIDogJ?sE<*?9@VSwyk>{rX4rBxZF+N`qPpv#|)AN6aW(AyPF(?W)3N2ku87 zCfRyz6d~C1hvN{28gCsRnYIJa9b;q^ULnpm9>|hEiX1JHmPDXX9F8S zH7Hg|i*|ZJrre+U92U!u6wfhJI304!-f53+zl(*aAXX32> z6eW>9;2)jdHd(#_pbYkAgV8Nu+i<83t33retT=wqcezaRy?EvIK62{y7p}h9lF&2OIEpb-wM6pq`;nkE39}wsT8r`rp05h6)~E31 zp9^7qlD~NNd(W}V)n-wACvlW)1~(CsvLBTQflZ(pcH!~0G~GLqB}Qc*^GnoF7xE$V zt1^Ht-3N1=xx3hWw%t z72XJ~Sl?aeQGK^usQ3w1tA?Tt|9Ut;+$rRy@r{khU9{u1@5k3K!h)aybzQtgynBXMeWPNBHp z5$AK%g@-^jwfpRR>&%E#*o}Wa$pR5vrN40noVZg5w_4X)flTtp%#!MA{sT4W_luT6ZV zY<#r`in^sWd=k**4XtQjYL3`;J}4`9>->l14>O`tb2L3AQm0*lHH*uTz9i6XiKFoT zLDZDEX2XDCoqu71az+!liikCPRme@OH7N@+pR+~zFhgdgNdn&U)1<&{>J7-DhoQeoTiRFc(HvP zzkPYsY7rkDJ?eh^(6}lPlpozRol*s{+r?T*~Jrus4g)+y6SSl)71%mv<+#BOO@fvL5k%0L^qAdN{!bR)Nwg^i_+Bz%bqYLdZTDLkzEz zPf0YKx)S&Vu#a}`VZs2@9zDhgK-Xz4YuOFxi`p-wxtL#umn^z`JD$YNN`cuNhPJZJ zvv>xX#csBg`;T2lUiA|3HS<)t|Iwp59=W{BGK2xkDA9_e{KU)nSTE9aJ@vW`Ghi%I zN1ekRcr?qkCSrd^ql(MjPM;45QTP^Qz))d)jK$~V+O#1=$FXDF+xIzVi}WNslfps0 z1=NeW52^=Qn$6K0n)l?4ZX^j*s@u!uyE!+Y?*jch8AVKVA*gTUo7zLumCKd5RrLMo z?=W~PTVaEMAm!tY9oRF~3>;h)xF7TI3EsQT$D$~Jb><##Rcg1U`;g8An-DLkcOPtX znM?G&z|yje)%NZ$wtQLljJyXau*K_Jolk%01i!&L8YDY z+6HNx8iDiV^wm@P%S(mXlqZB(_)no({%1TKRe)i9+YSN?krSCtl&xpkJ~hP!{kk&{4C{FZbL` zw$ldY@&WBt-&X6HE$wrpVm`;?BiWua$Gv*>>LN>0Qj#FRJo#tsE=FeG@2kzf(b&bx zfQblG@VsiM>(_*8)gRU@vINrAlUS^GW4L;P!juC|Bu47Pupx+4?{3br1f&ve6Wiwy`nc3Kh9 z;!_6SI?_u>9$E~vpa-kA=XAdtJSi<`?96jN_N*yNLwNQSo$)YN5-hEY(+BQ>m|;Je?NyBAZYQei%?o3E(m|n&h;cbJmz3yMfA!F z_EUihJ8;0Dtt_$U#B6Gl30yhiZa=m}>y^1?N%g{^Hi)ETE;VuN5}q2z>w$g8pbzjP zTNfb+1z0^XpI=?~aqTedEp&j4?|87^j(x_^`1lqjMoicu2lhG!kH1 z^j7#j&j**pj0(S2@&@`2WaGwVq5&E>&GFW|*dm>PyK^mJ(`$M0MNLC2pa1=!2O<|%TrPmsQNWC90c zAbBX{i-}A4Ylp1<+^iibJL+nvB&Dh`kW71(cKEPV!K9)7CyAT6#)%=AOs3Zb#+NJ8 zKP_o{*(vM|p1=(fjBL~n{dG-P>fZ8EArleM}Ki;fHtJ4oEOm8RSy-`W% zIVk2qY-8TXOD6&q^OYRc%7?wK+H6m$f{x1Q*v~BF$9vitipp^g^v>^qHePL8fFxg{m-U?^f51Z4*w&@$7t<>F z=PUsKhwu%Kk>{-)t1LEozYOtJH8m}&4U%=^eji$n2549}?!I|5jSY14RR;m6&AY~w ze{T@_9*PxxxO?CZ$sPHze0}P6%E})+eQ&Io-~-mGHsOF%Fb`fUYMF?re~y!QGZ){} zlVHkSFkKZMpB?76t4yI7QJRq|Tjk#8u&-DJ#&T#l3Iib&DB-6rGTO3bp87 zrmGtt&x2BS+W4uD8$Yu1Q2K$f)bs0$qpoyYRsdB3O9F~yH7VUaxMz;rr}_& z{r3S$hh6HgI{l}A|Mk&e6!6LS3jCrwCma6cr~eW{$PjP_%M+D568(4uJ;!=oT|GKH zJUqiIDk|x)yV+%mpuj1HL7ASgj*i!sg-o>ZD}8^M(}1Wn*B^ zJp;YfvyzN!qO-?aehVIC*aRK zpe0QoDPQME`Yn)gw`GFW0n>u}6%BCgF|G5^Kc7wEY%U?yJB7dMz?|;^%-j4TS#5gM z2w7p))>zi0*qHN+Kc2@Hi7j*Qb@BA^r})d+r5%CjI?CoRe$^?yi!y!K=HuF^*`2^A z)1G>vdm2TruKZ^3VD8#^fOlFwfmOF2%@wJfs=E4Y3g}Grx*lrvys0966ErJYgJW#` z;A5A5xA0m2Z$7~QH9D4=SEj#t0cpEA`u8%}@F^gl50f>jPwc+3zf5$V{XBB|16p=g zaJ3Gnf8C;ew!9MP=~3NySRo)RjQ!~N$9*8C;jZ55EEK7ObQcq>l?cKM0neYu{U+zt zZ&|%5ReKU>f{748IeNXk6ypE%NyLi+LB6hxZjaN&IH|}k(KLk9p!1d6W~6w3xmNe^ z5mbcR6UIU_3S`_O>JDf)SMzY6%Bop;f2hH3;lNse+UNaB1~~Vqoepdtd10dS$)^ne zd;KcqC3u?}uaZN@(t$p_&Jml*l9?fWgNX{4k+j+ca?*0;0lVVL4az1Ox?6y(rUv}OA*;gmmY48(Ui}p|JajsFz3&y2A0OU|XBH zS6fZ-0q=GRlvqH;83!^a&zB9x+#h+J*jff@ywT7P@MQ-H=+=&l3H?6L!rS%ujbb7I$JSN(RYf+E;@Vk0E&iPg?m4j6mKw;g<79YjFj6OZ=^EZt`GG59v&!B;#5@o4b%M2+|xkYXUJs-(VXO#yi2 zdWkG-wDhm1f$hlOa1CgQc{6F``u9`8w(fdlC?@n+fK7aa%%D6nckluWkKfa`@7`fC z)38VxLZaxV5!|rAppbuqVkY=Cw)TO~Vn3ppO=N7{O)I)vP@^=oQ#7@rtVeIM#%;Au z`aG&+iP)=|8?aKHot>+CMM7by4___pwLxY~!J}-DXDJ>zX6qg0uoZo;OS8(=*^Sjv z1SyKN?ccIxgAQMVpRwebvvc9ez{BL343`J9N=}PisXBGe^UiOF{{Dc8MJlS@EzmtT zx^mR1olvc#8EFEHolu%9s4L9LnMDk{WqRGYvfE3A*g?F~_o6RU9GYRcGB|%uz+)I_ zXwvzVvUgUGlJSuCBa7PO#Y>kGh78DU3N#L#V*hAkRs($gWyhG|PMY|aSBk(mx^HoZ zF6Ql!Tlb{iAD|&j2T09AQnFlo;>Zr1|A7qD0A!Lw*W&Q+aCAGXzXS|dL`^edyDauE zVggnX69s^X)AepYsYh&^)Q^;zAq3PNpXx+g?Qw=5A!X-Ba)8Q_iQ0S$*Z&HPg#KTp z|F6>jiW|3cI3|?!w=HLDC!fs#R<6zL2+(Lh@3+eDPRhd)2*xGW< z+B(?U+Iq~ZqKI0?-i->WX1~G!N_uB680~V#a#`Vn%NLTYg^xZzt2{`ott~34M#0bd zvD}{0=x&Qw(oih_wb@#&knLMs+{HwyHK<~Pn%=4QapiIL|K{HZ3l!_pP*)-b{>fXjZlTAuI;3>oaaW}P@;3smZ$ z^PH`S8h;?Ss{s*yW-y-r=8Ky;)jIU-OpVudb#+(p7rpkf0Cpk{m?Km1>eUeYiaB&P zM}KEI7eVjw(`cZf!(!ZpEv=+AH0(WA(m~tb?1rOc)7ntR%KYNZ5d1Mwny&7pC3jWn zpoqL#t@!Y8jp18-^@NF?ZPA}y&pN&2(XgYEUpz~!jf6O;wE+vy4`E_k?ivETW<_+i+=-T%KKdW=q046g literal 0 HcmV?d00001 diff --git a/docs/my-website/img/a2a_trace_grouping.png b/docs/my-website/img/a2a_trace_grouping.png new file mode 100644 index 0000000000000000000000000000000000000000..05130420aaec27f7e13beeec76c73877069f3491 GIT binary patch literal 396967 zcmZsD1y~%();16V1PD%Whmerqn!!SFC%C%?_rZOD5Ineh2=4Cg?l8E^;5q|8yL3*iBt52PhQ>Uxnde4L^$cev3B}RpVgL^G0A)*KehwK9fhsc0}^n6A9drco4 z9K42wu&{!purQ^9gRQBBl?fc&yJ+Vqe(5d+JkaW_6zmJ>cYhQlz$+Cg;zphs>XLaX zo>;>f^n1M&hsN%VD9 zI;pFZsy*H7a4JlEJn{TWuVT9R`JK>5$l{L+0sG{8O67*~krQB?Zm)U;OE+mx_PX-2^?B*JU`n35dS zl*a*uPK5xmX1Es&rcsn{qI2agc%NGJqKnJ@lMBmN-^C!{1S zDf#@ZWaMCCV&iCT>!fRz8~R+-yoIv5le(-7z{u8`$-vmw(1ZzSZTE)=93K$yoU}G^ zGN1%nTiG}Qfc(^d-T`<{|8bd_n)1(EoGkgN)nyeZg>4;7D7lzem{_Ox! zn!gJ9yBrY{MXm0%OYz9)@S_W4KFJoGf>kyXD26~mQ3?%wSA;6@~~SeW$% z^phn^SgM{Si|$KcIZkJI%GTLNUNi7cO1H(G5nMC1(!Ue%_7ygDU?4itmoLGcSD^b$ zlPZ=cn$Kr*PwH&+|D_3~6475;n7tptxaXgp_g5Mm)-H`N1Q7sQAx@h|cS#4@8E~{= zWxE?i)y@6Z6m+}RCKtSlTDl>ZynKg^=wHq*{O~Zqj)|`zoMai8NX*8govSeS-s z^jO{jDMC*_2nCAomOXBjPryFZtU2Ni?nLtGEi4GG_2nJ%{s9tXY(EQjAyvCnKSII} z|4=#_Oov!zssGc&1RKom%}Y0Rx;cO8)<-MtVEi6}dAV<-NdMJMW7*e@lmIwM7?b z;^IL4o7x~Uh{O1*>HKb{Po%o=e+fm)cZ;KZc@bHDzIhQM_@=7{$jwLiN9rN5bla$b{zMy@-)AMOnu(-R4wp~da}VWIMd6onC$NcwTp|kS70C3Tk90NK9p>pFbQ(5 z&uti%KCJxGoi$+kzozX^=y%NPGE|9gxz!yy<#5$zDKN{VyUcUmL-0NqIN=||F0M*3 zg;W!uR;C-PR4_Ie6qc|(Gn8h=5kyeT>xi0x~}5$??%Bwm9tud*N$R{*4&#=J^Ub%SC3L ze6%A(0UcNUx$y1Se_Q$AiDo+AYsh(=<;olH)%5o}q^W3-)ioBB+u?=_?@8KBqqXIB zJRd43xq#>NrG{rTLmtc;Xa?&ZP;%JnuW-Fao{qrON%zqWF6&w41>mezjS0kxH);zy z{N!71?x_z69!Zsq!DnP(uS<;%M}CZzjuebdh_scs7s1ZeT>q(9WB958c#=vhl{{?% zyV*wx>I#mOn8*&It#v_s8E+6Vx85Z_@X6~ogU^lHV$zeU#oZaR_@I0lQvz;1W&P|> ztLqa_!nHkidEhE49h$`K4-0|PFtqNXLfr>?b_w&_ac@6$v^RgwLJC3nCmhceI?nS| zjko(zv)19KOTV-T5(?r+6XeCJAzN%Zc2eaIGnyJzE-ifSmlEe&1MlNLs9a83`1Z4X zP%VisQhSQ6wwRQ-bI79;`!Qyf06g2EOXBv4CY=%SSSI}wY zHj(xzn2Q;D#1kz0!?Wa@8>h`z7)s_rhL+ANN*|{8*%h1B4c;r4`v$%y=_S>x^^Ajp zo8yL)I7KJ(ogd}6jCQOVykQ_l!Q$>P0=3pM_0b`L46bpE)HeMJ$#bKe``Yv4v5po| zWYLZ8&|Isem>q>GLCseHd#7EZCg;Oij>o*D(EI63 zU2BWEYx&rkqDIZ_rYa{WQ==os)W6nae_Ae(&bRjT6*s?kOZt98kYlvC0)fxhKCQYF zo+iY)>-FXKW;q}<8#;AQu2*R2cGt4N44EcLZ+{};QI2QQqSEtD+G$CXdph7&z@Yea zkViVSd0VGPk^+0wNKfz=7zaI@^S3t4=ncJ|g#K7@DLH2!%)9*T0u0g^m!a!HzwS6^ zc~4ekYWnzq`{Ap7L0NJcBAUptj0Dpr*T&}R60N#{z*n(!UiZu|RG?&^9DWpQRLKp- zeaNAqz>&J#o6w%+&%^}+o5#hD-Ydxr{(Mg-ljv$o)%tF)JcNinUt|`mCcXuD_Jv8O zvDi==kN-{AqV=S1tEWcK@wC`{9a*`SPys&T-R1t2WOoSmaRgAu>vYX;A5k)fwqif3 zT=0HtKU#_273bD*t1aK|$9O|9w7qONiCOugM*SQ4m^-^!dOsWU?g#BwEiv z6MW?Zu^fx73#`7~Bq&rEt$K0T!VX1YD<|+q+Z`ddD(x3c53^o!m4=D64U}3J(S8X$ zee^zdb1=C%yXjsZDC(O84wrkZ@3mUL^G&;+$|SM%Z_o`HUnZVaDo1M3 zWa(_59WAiGS8A=)*SCK5_9n-Tui1_=qS-7u&GA*jcto8cVEzV|5l4(-Gh)Re_i*=0 z%_U(ylR@)Nzi?7c)yIP=VdCks<4aFhR~vAp3NdV2nMtpedZEgsBD78IGVMCWQF6cpO5l~yJ;<$O63f?mCY^(%Ur{hiq{7# zdLT@at@A~4KHxiHkUNZ=f3{-;%Y5@7)zll`$E#8AbmOvUM=f;AR2)#vWlmH2-F_;?ZEHt zFk02(#GRyz&>Y^ec@F#(wPJNf9YD>Lhu+}N!{4P~eq8Wz-4m000_fqNYlvog-y3&N z7R=HdMhy;WBq+pIqsBeWc&7HtuAKGO^Z@(hZ&`XRbA!|X#}ZHfMmThxUiyIRSWfA; zWV8+a)ka5Cjet1;>(3=QX=v+pu6ko!RXK3zRB!q;pBA*QDR^#mXKst0DEG4hB!>1V z!BHsihuzRBKKccpD4lqhLl*;Ae(Hf^i&(lFlJy&@L>4vy11XERJzg3psL4%2N+*L# zb`&F4Y*(xw(uX9`CQY)PLdHuM!A-fsw9G`+Ez!LqX4YGzW=mh%+gwBlAK82M{3xo9 zH3`f7dSGt8XR}nh0=&vLLfloS>8{{&+$qLpV7-3~reKgdS^l(LRK}KMwT2pbc>`Ik zGx1Oq2YR5U)av9zuMW8f&o=2(UFx%@5bmrNt2J28SK?qdt3HZNE?!A&CXF)F5mCvU zhl#yyFgN7O4%_iH`a<272&?(>iN`2(LKcaGX^VF`;*mASkd>wkr^8vL*@ONo%|*Wo zlOe7pR!ftCm~F)pP3w-zZ!?;U<2oi}m5fwJF2{?)2Qv>}rx;@~$Qt+DX<9H7WRr2} z<)p%iosF-L8rZ~nn-tn;Y{gWcy@D)_vmdf@%7&D6hKCYb1cE^3hPhX zaNkP#NC?(}!{!bnb50RCzk4zGL*KAq_OBNQdxIb-ztrj3s5aTn37_lrL&9m8hvRL( zJu@?=>fJ32;C>Xi-00N@ji)Ms*%D8teR7m*Uj(1*L9hTby3N4%eGwTP(uei(V?A*n zo{}!f0fgQ3U9hI?w1lU^gqNd28Z3~LJLX2C>& z#p2x)Xpl5mfTaHgpFYt0bZK)?o1dmMqG>Rr?+>Gt@(zH<23I zyz9-z@_o&a@qYHFO1Ca4rQL|MRWT}uxW4<>DJFdpI&7xXtCjj-nT1-n5|MCX716C% zx=d(Kk0%4=wI4taIgNyKmEQ@-m%H7L{xcc+*YHr8_q5Z_-;J zTLyU*dgMHI5>g4U4xoL$MEdY!6cn6Y(_nkb2X3?oCpvo_ITOB^@5r${l-6|JOoOO5 zcWAMCBLB(WD&v^lYY^Bs)v^LoXwz5{S&e&VI>}?%`3P>V=?=eWAhJLCNW-URzT1H| z4_-F;<`YpPaJbrF*le{c!##$Uo|X$(b2%ONDW)|IH6yy&EEX%PL{A^P<}1growr-> z9H?8}s)$K~AfM2r8@LV^JZ%4#ac!k^6%HT&j=X+Klm3;5>4+^X zLtTSMSTiC#JhHiw!OkRCZ?kH69aH;atT$g)xk>SJd-RRasNvvoE=7}P#2}C_ZS79c zmu#7amd150mV4ff%;{b~I2%F0Forj^Rj=~*y7v}qa<&HJx;PL>xU4>Yaxlh4iP+Qc z`1J!7e^7ELzAc5CiumbT%Mr%rk$8*%&?MO~yE;(Wn$z={9Ut{FIh;MNJy20v#|4cW zZeIF*)yN^;}Ih(rI+!zS5{4uj(>Ant#P+It=t9d>xjP_Cl#Zj%EE-^gy)I6JKcHM zQM}jWX=@0!VE1P1`Tizq`vc#usCuP-veVI|mRLkOEwgTGRQnAL4s*u^zg49`S9M8V>LP0ADz4vN6yh=UJ zhuqR#y*~YEO|Epx{R)aT4sJ;tCh@6!jlzbWZ&pGIIS)AEr577QAw#Y`XhVt70kkrE z@J%xMz@OQX+SC-nIh-h>?F1fQg0i++)80dwOuej!Z+-uBb z%00yh(Ew!9S!8g&A?s8LE)JNnW)D3*9+;+Yave8GbCLOhc2RW|O{56w+^U6@OO^A| zk5*h2z67FEiK1?Ee?{_sDyf(*(V1DG11=B{jzuM)+6DXp)Cy1`cyQ8|_-FuL?*?L0 zcekHHB=%!^M%-h5649o+Gm?L0UU+^+4&1AR<$C53n_hC^WQMc&T;mOtSO+#8OlUT0 za5&nJp4i;}TRZoBH5BNl2EBNq8)Pyfxzz;0kh02Dday$(#ALAJq``KM2@!3~z&AAXQe(Ft8;TNUy7MOJ%skTr` zam6V@&xo(bKsmZPoKZC34E?Cl2u<5!HydGHZzdScpwnr*_T0V2ZF$NYRK=;b&<`=K z0d`oy`?w~y#;&K3sp2slYP`w`DDMiwq@T!X36~3k7ODF1ekL?wPUM}E=CLO~)$eTKG|d~XEt+X}|a>XNa+yS6t`MYEuUM9l8F z1L^E#)fOvXG%W-Jk&5=`c-D0wh>X`KUb{ykJxFqZ2Te4?A03yoQQNUw4qagTkuSayxHPSA&nKWx_a zkfT{AqNa`4t;1fEzk>fo&uVT*-s0ZUsA^82MTbqV#C`Ydc~v|{f@w7Lz~i`6<{4Kf zA3BjP!aMt&(l{@zO+OmS>yZvsDD*V53J`7C`Ht_-eh*psSG~=33>(s|;-3 zb|B2*d8>e1OBgO(yg8L0?ty?yJci|?^n1QmyG#0Ne@chsVd4itrOH6-J={v8vvkme zjhKR5Do@r~Y7iwFrcp><`AU;(N-)*46HeAcrGa9QaD90R&QE5_F`i3@X`D?8HMd`g=nzQRK6fd#T)8RU$l1zx39TF5MOdr@H zigu}55w9jt`X_iAQKjNW$8-QHP_#ebg&A!%^g4*^{cF^~anxWKi%++|T!eXi1C z$CrhL*%atG0}q!J*$5k-KY19|{h;9N4(XOx&h5Sff|0KwCpo8Ko{LU8tF!^kYW}shNCq5yJWh{S4nPZ&2yT6ufgZI&ryu2~UkV)a_T;9zN zLfh--9>e}RnjYq}`;mjZE%?SZri%W?+#I6F=5a!;r5o|#v_FmCF?GRf=ay-IqNao~ z6xI^t+h%v>;AP|9KZ6!*GFflHW;Dz9y3KxGTX_56HLYVlx`Sq!{a6I27!(2p`7w5J ze+co7;&pXta5%~QK{zYVd-aA`-k#KE;dks=1h_#|gCUakKE+LgKW3$(9SB-3B={2; zY7eHwBFu565&uD%P^K3P(%~J7TxsktYgt7#7IcA7j|$M3jh*9Sh{Pvmcdm9ex{aUkv9cwnu94 zd`!GNo)LAwBFfY)et;@dq#~{tgD@C+nnlYk=gKU%(#}ln7{1JP0$da@)sBt(^(2th zVYgwPYK__0G9SG3MoELkKZ;ln@tzLE(%+|V6P*xJC-b`LlhaOjB{LITAXD(WYY!H& zAPILlod4WctdXMIqziQm=la$EP2=2Ha^#@)xT#pj^hD1}{VUJgBD)_BE=6jm@!>@y z?UStlg=zYsD5^AUZ?Y*$P29z=SUZdX`rkkKk@1^TIWTE(^aT!xB{yFA-~=l7HZfU^ zuNlOAvLwF)*cwR2y^SpatG0p}mn_Y2^7Hp|U+AR~fmIf3Ak;HOD%aFvO9ee%otc5w zDRXuYpkLrHkT-g#CEKO=dcxRm+(^==hk%5PS_`G3cZ^c)&{=!P zz3G;Dk#|F(TZ0AkvA7SOF4Pfjy#v(k<0Y{TTs-hgJs`$2C0jC8h@53B)+@j-Z5ztz zqcbp_^~NsYiyw+W(ktwZKq(M>BqLJ6Mm2Bi^PEpT1&!43%{|yL#OW_RTy3KrOr#}w zy}(#smS0cqm!P$y#Abf zTQxUuwFKT|qU)F{b?xtvsmnMaOoM%mbWkK?uhdsHdHN!aG z_UIPSA5)4-BW2+K8d}jH!WWBvKoFKWMk5wqiZFOT+q(wayiV@!Aw8HuGG* z0VT}c$nG4;yq;W?&mXiu_eC5J|GIm|TobYHD~$SLgo)h;z>|3oid}?i+)XYJFin;6 zS3&!YpZlpiUiZbcvdQWP&juP{EAq_9FH?}S{($n6}wjwYL7f3`ai#OTEtZ8aBBkJE#iQTN6aT%pPatJ!7+n!FUGNouvd-JQnHAT>eeJKcSo86I9KgaY+>KR10!p;8V z4Xxj)hh>}|5c!|yk0s_9podA6og7;S?=owD`{Ja<8$&CXn_hEQJmMOEeZy7!`1Yd~ z$CMKW`P{1d(9p(ZlH+|-9vPUpm)JyfE<(d|Ee&Ig!3-49pyzF)&zEwB-WRr{#G6$o zaqnbd+?8)VS*yY>na)@EsYWY-i_QKV-E4tp#f+bxVuQ#*6aM56PJ^F($miePlEX8g zX^Gb%_gGP?Uvdo9)7#$_G@~-0yQo%V4x;B`4xm0z?{q!i_H;xb7d%V1`b%(iGcOJ%xe!i8kUgk ze26J#sdbEMnNbrM^~%vosXb*LV47#WdM!_*VAv#Ew9{*Op4iIU;tm_6?RY>CsU_jI z9gGx&F{p6FOcib-59{lPL|r3cV>lAqD)tfvy|y2#z)-zE;lJ;fCPP^%kw&(hP zdnD|Edjl8nc^nidWR;rzqTq0@C?~6EGtq0x3~Je25`A(T8XLp!p^AI%5h*t8kK9-V zpprrxj*hE(*e;fFJWmk>d&%3~ZV#zd$`vSfUKx^2gq`a65wK)qc4Qw;p6_w;f}uho z4(RTCPioA534+7;ecT1#pV!E5$=>07U3#b=v;SGva;H3ZMZAEN^KjPOfrJT_KA0;p zL6UE}XIf0?aQ@GB?CmtlJX+f|xHX=j9463K{yqzqE1gin21)V$wAwaW(XE5h9&bRF zUG6-*IF|Q>`?>qQc;u?sVtn9Ta6yHN(aR zCjL%-X5#erbLR1ENi4ShR{`Q;LP>u2OCGHWl-=u%px`qQOjDfQ=y9cF@#}bvC4KD9 zV$ETG^ec$2I_zFB*>1@BV47_S3`@!icjHi8*9Zgd=s&|WQuvSG6C-?|K~f8^bRuT+ zBBl00v`&B+rx7A=bIHWIFNkaQm@)3Vule{Q2_Kqbo|J{lI(f%bmT1`O_RVSvafMfO zFL$5zAXfRhpYPc7Fbi+gkdWl=-Gav@T9yUZU8>zqFmB-nL7{A z-J%^0!9``4sUNC>lqBGm3$;B(d9P8Myw7)c*Vj0?5$W1x-0rcqx`5VfCmsEKn5+83dFpYM;K|Yz3P9z%$&}e>G~kM) zC{t1CJKiYs(>HZ>Y4dK<%#d;;B5(q2AO_oXA(sA2w5>R))dcQCI+e@I_f{2>TfGz^ z*>S(8r*9Uk0J|sXDfBGe1PWI7C0 zL;gV)6LU}#GL}izg-9LG>!z-&lB;TZF+K^Pg6<;!n;a$@q@73V=x!ax?wwRg4hze3DcGkXM3YNW`D zAcTlo)uJrzGhh}%rVO!$3hwHZkJ81?Af0;PL|{FL+f>H7Xbr%+MquE!uJd}#HqgPP zSm_NJE!tU~NzwJ&#jnq6Q`zopGy>)%&zrrU!bBX!w>6e?#>HYR-xS&+k~(*@$$fGm zL$@{tC+kNGm5G<;f(9(*CO}u+HiKBn-S6*r3a?AOfm{&>pVt|Q7YTK@QS5aZzF8Np z?wO^r8Mn34r*n#8z&rwFoy6;%Lb3_X^;@{FzK$I!Ff4ODjIgs|f$t0w9UI-G=4u{h;F+3pO#I=`fq}1Z=jBAZKce4*8lK&o+y?63 zTpPGoo`#6cxZaE%H(rQq&uH_$$GvIV_uQOXCFLq}@T_zSD~o~_br~I8TiI#YJ|)Eg zoKo|g7Iu~{a&ORGrOfbIn7bypHo!?M1p+Oc6fHF{xVZuX!Q!Seqxi}>RB@) z{KBvG04+k_+HBrF7JlVXCi>Hu)ld?uHJ3No6N_`!!?J)4C?ySx*0B+jWGbR9UY5a^ zGi>vI%dHy}o!BVj3d!D@!|D@%D?hC+Rzc$n4 zig|2>VgaBW?+A!KjAKwy%4#m4#6&UNyR_dPIm)xM`IQi`JH`cIiKUk|+%dDBUbChT z=Fj$j**b$UYCGcDL?b32Mc(pg29RJkkui%|PYN&qzW_P`*hAXsYiOp32mL6%pmbV* zhYPoXa$+MMxBX`aD-QDFd*bXS!gfwOSqH#USS=mcAOqIuMch{UP|#PV5)A($n5e^H zd(vlw&-S#uWbTyPktYYl*Znyvu4opuIbI(n!zzhW{Gzi#>GA<LfbK_;B%szGAg?aqkS+vfa*^*m-zRP-HZky0oFs!MDA(MCKYguv{y!17L2V@!@tgF>YOHmc;N!!^agJbyKI#4!qG zV*#hzUy@3)yQsZ=I$dy6hyeMs``09S0o7~;)>C(htmDJU{=I{Td2`Me#A+HLhAm1i**2(rT* zOA{=ch~+~bmCFF=(mdg@I(Im)8+lC~1 zBI^_b@DvX zvs$~5$B{R0mW(rfwC$@W-EMwp^c^RhOmjxNG?Teq6mMvw`}f?CzL3@SA~+t}0Q|$v zeM7|BS-|l)E?Zd;c-SnRjU@e4O59Hs{>ZMz@(f!AEIue)u2F!4&P7 zUekwPPa9b8(kYF=S?3h|hJVRfbyFUMYy)Y9jgYpf@>4;t$A$XLBZX3HQM$H1^Kh`r(gz!48n!D(R}$COUlh7uH7mzmI6&_O7KlGYf4n~;Ss*J&O+Z^o zSW6B3QJ6Jy#OL2adunPl_;bHkcm|-ID`9{yKSdIapZ+V1GjQg;b$j;33&Y<{pilO5 zmNX6S&S|*sMcFnD4o?~+5@^I#r%=*ajpFw&=kwOb#(8Rwz%3r z15G3PFPdm=%8&x}39veuncf-yQaJz2A2y!lxqq&5>~ww9-oqN$4dOnDl+`pR-01`) zZl=3ndAR6q05xGuZ)KAuk{>5#hwH*3ns$6#*vJ9Tq$P12ijlL1y#Jq*@NNVUJ=9c!MzR2cBA?k;X_xdj44v#fbeiTQgP(BR`c~LyyY~Fd}A8^ zzCciFT$k6MtfxX8l&tmiiFX0|7A<|P%xE7dEJLB?Hf=gNi3%uj2pM*wFZ zj%?Cy`D&F@zwIf%IN*&qUiNxdAECT5dX#3RaYNFZUYzQ+61215X&9|gO`7fDaqN!7 zV8W~)1}9taWn*mHMTuX*KDAJtH;2B;go!GJ&=x#KMFmhKA>%WcrC>X|2q@`85^9LY z`r#z_blz0x_<^5-`Yj(1cI}(=wmlJ)EbJ_na?7X305M>Xrv~BYJ+&@AIiKIiHqSi9 zaKeQ`X-xKa)ed>zbt{ji^O}enBFu`_Al~^jG;ysrh9VEpmtiA6Nyrvq7D!bt`?J!k zYPkDN_TQM@=56((NOu@(>+Cn_Up1T0mFi}XO%aHRILj!Ni1CN!M@xvIQy3yGu6s@w z=8Li27k>4^e_uBgLDuxVAMMSi(Pa2duXWQs%m2<~cs|sBe2Px`&79dmGX{vPi?VutuuTdQF1t3`OM48Z!vd+C8ymZXETU60&7g~7-C!NhhML%PyyUSs59&d6kH%kmZvAQ|Rd*)hRQKRIHYioZ%db zX32(K9MYbE$r$aRtdaAY+6o=}?i-|?6?Rh$095GKO3k^4GSuMd2ghob6(Er~O>@ch zB!&jrr2)zW!0VI!$4jy?N<9uxhwSDRUh1KKY|ScZvQlA8kMUG~2{G$lxqN|Flo8~^ zy=I&UUe3`1o8<#nipAK`e1kauH~zH#Vh$k#3%7aAPG&y4LvZt_2X5|?NWse)0N@}>ZTbq=O@7~x@*4x9MzyPg2nmKv>UB~M2@&( zUQabS?PmJ1bb+7RL@^R~o^EtLV7}TrJstQ8fIXMh=^~tXfPmwU3`M5 z)r8w#2#84-qvXfFl~u7_kn5eQw_Eo=-;BJnc3bD+^D_JPj@#2tu0Zbi$7z_z>9|gv zO%Nl$>KZv7?J8P1^9uo3)h9<)^t9%=1)7fedpah-ajj>myr5sO`Gyu zPBS+Vo?qv8hm*3hhh%AHlhfoL@!l&+XyCD>_Y>~h=w;N~ZyrGVjFi_JjYg{pI-etA zvUP`6Q!d6e0wYi%KMbDt3SWH1Fu=GVVEPcYBO4cStVv8&5&yjziyZe?Ca;qM1O9Rd2?+lAM7$RLh4*|$jNHr zd1vx1iOV9ed-4H;*+pDfVxvd1&J8V|FmgS9g!2;Y*HsDe-A#3f*caS#`TVM_9tpTO zTl`REJfb1d#VbB(7h~ew-BzIXD&nck$8{hBV%Z_std}cAh0>w39t_|y=3_LKC8H69 zO)5J0XmvtOy)K;P_Gb%gK1Hn3J1H+7jYP&>@$TMgx8r&~bKzqymJHADXDpAqWeRlx zUe*P?T9VP!g=f{U%`uF(!}Cd_f3Y14er7hDPN23F?)-UUY(J!I40`~ z$L^e4`%Ug>Yuol+GmbPSp-mRMxrnrBTvfJ{&aj}Xs_t+&N|O%*M0vxGor)gaOw#Z=uBpEONl-}5dN6k0n;?Q}AQ zJXb7R#pinNn_wL%EKqG*v^>?%cCCa*iQVj5AV+MC^v-RM<3lv3dxQz0U5&?sdqdF+ z9-6>N{YlL}Xr;&{>F@<=09H_>32txrw4EHC$%Mbgxnr#9TT)gL7U0P2xa$V_3Lq(0 z)`?{+iG4TMtgLOgtqfRalSf`Z>zM^awu?jVUOt>FOMz^K0;$A8gpZny&Hi9aJvOBXKiC z^)lRDy=!WU+q9)=EfsWin1~|#gigWuVp@qe=(}s8-axWyr__=Ha$T*(+<*w~mxdgU z*I-^O2e-l8iplx`TgA%Dn|xx6nH-OUEql|I0>O7fU@QPJlDyW3A5})lr|VrwT*T@8 zLu+YaPBn*Iihh9NpUi5Sfa(iRAIF~Q!LEf$kGTlbHH1#Pn<@D2`bZQt*w`w{Ch4H( z4wQFh*j~HE)NAS!0;_9xxzJnQ;q9>UfpDL1r=!|6D@`se*h!SRG$I`7+{3%j?F5Td zm7dzM8Q6K@AM`DDGnp7M;>u@=s_aM;3sP~d+EJjk~7bmUE-W=$lzSnA|_8Od~0BVDImT8}FGkP3-=`&Z1rOKuA2;IZ!FH z9)L)-cx43snr{~6Eg;%lUNanzcqYxRVB2?Fn$%o5bP_`bFe=;QEC39j-H; z$}=NL7R3mq`#JK%Y$xtG=VBBo{#d|HrdLLT5?|^~RHs`NvO1?tApt5N3mY(2xqH9l zcjp=QW`McpJ5WIB7;ydb)5V*CXjn=MG~J(dm^r;PV(ewDy$|*ySf>ltnTh@YPZqJ; zSwt|VVvOIAMifD_)x0A+v~q0 zc3KoxRhlg$*IMAykWkJJidLemWqCwIAZy#uDya0TV#1{k* zy3;{)bm4BgW?ms$R}M89vZ*E8O>YBl-P2kTi-%2h@dakRR)@QY6CimaxY26~h|Bvu zCBovk?irc7-uG&X=oka`o}%C9>k7neVu)v?vqH{YRMfWI)N&9s3_6Z4?5}jH<%j+O zrlUk4mV%oh1&{7++C?)+C$m*;p_F?GeCOUNT7YV6o5gS7mf$Y|c2;_Vo=}-=aeG0< z61@XcABdRONe?`wB5g+W|{PnBqB>ZPOC>-cl8sC z`!<)KSM7<*Im~RbkWpnff%BSOK%6v4FSkO(0QiFDTa-`YSPPfU&!~?o4BU!$J~*BW zP-)_>bpElxC;|7(s0<2t>E-`PNvv$KIz=cxGt@qm>ku_iA-sSgjr zM24IThy z+N(Am(8Z~JU({&aGw*`M=NJS3(7{`2I1r(i@5Skwxk4F;w+B%@`PU+qdYe1ZK=OoH z8R(|Ox9R~)br&3g_ue1$5~?v-xcdyj)NLn^uCBD%Cb&LkU4`vg&McfY*e%yi-c>t^ zmpkLTug=(K4EC`GMxHE}l*uFsECs$7-;)gF3FhVv|1&&zjS;?i*BeFn{pe~4pR|0D zlKjE}hfDLDhni#Cj7V4`FR7P%@6q!fzU#Be?aSPXl9#rIU2of^{UeCE-3-ATcTFi* zL16RF<9wPZL*9<(`=eE=<@Tl>PrvosDHIVq#IDc6tAtMIsU(T2m~@M^0Gx!~v+|Uw=Nw8fc-MJU1EU;Ds_#DT|EV zKD0YjttU}ite50-1dAaUqxxeDATrdqWzDi=iMb*Ivw86J40CL?+~A8F@0V*M!$Tk= zA?#tf%k9_4zUt+-&$s{g0hC@7c7M!Pt`1l)ud#k$(r9pRk^AZ>_V_U7_${@r=DhI@ z_sMQ=^s7$hoxz?p{*Z96hQcXSbY*AI@UAuLFw?lg&l@`@aC*m@>9V_rW?6o+D(}JRs_h z|7r8{=%C;sn9Fy*;HuWAz3gL#6TbDz>V%}YIAyY!W&MZm@mG*NR_d$FZS%!w3ZCyj z>9!hiL>OyNP_ygbKs37&*-&2O3s!45*Tp}66)63Gl)ZIWT+6aP90(8y1ef3ef;$9v zNFaD{cMI+=gG12Z!QI`R0YZSF!JWZf26y4Pi%&#d)7I@lE~++%03F&4LtDQLB$Piphp+CUq* z;^$a*AS&&s0Id9mOWEk1&AMhcH%2q@StK5P$vTtG3v$1&e(Idz|I)vI)%L%X|GFRP zeFVB{h5(4{ic|pkQZ3A~vwkIo=#?m~sOY+z9hdg^@T8+J;I0Qvp@!Ruvn!+4+%}Sb z8K=LV_4hA`hHyC&ku787~pQWW5PQ6&DQ*HAE+5D zx-415+F3QBsBkO0-cjF(-^|r2lHCXdZ8VMYubK6CY~+9V?hD2O_#%!!CX@ZE>iq)+ z{O>>Uas$W_g!mm3KmJc;`k!;=AM_NDa=vSoU<#Apae)80_}^~+?K*T7kp2U7NQ32z^Ri~6o*^+QBKUgI z^IkOeM>Ga@$q4U1Whd;5CH#aQaV!KAl>-0QWjG9gbc5)<4P5DeBM$jDVI7P4t{va~ zT5taU65ro{h5r6GV?@s7KlQ(A)Sox_U6Bc&TzT)DX#ej@_{UEW$>C@o5n>3tEdJ`+ z|MI2t4js^R!E-mJ|LXt)vH~bM`Xlu@{+$ElKVMn#272yI>cOA%UxxVa!~Oere?*ut zu*imZ6~X^ix==wlQSj(b;1$9v7nU(0(V0Kv%t%g$)`I}DlL5Uh0I{mr9fZV)(H#`i zkMUhH6#X$pfSuxho7=yM)i2r~ShS+oI1!dVw0T`fRV;bXkckCgDZ16bW^i2NM#^b}?c!9Ut&!j8MVuizytCqGU&&!{^vRe6{WBgA|<|o&h9(0pm ztj3WFdc4i;lZk&Ti79zglkaaQtHJT7dPDVKJ1{|bOxg^!W}^u&&`6}Z1CicJ#nU+4 zUnBjN5QNRBsZOU-q93ULR8H=QTmpyg&m%q=O4{ZzMj-)E%aDTD){Yyj7fhDsolm{< z!(!P?2GB-Q;s2WnhU51m`!3#pv~-telfGBud?yFQR9X&}8X;7VHjrj5V3$hsTbhVE zt5K6q_5~rQ^a835rNtzT_`UO@3m*j+rf&OfrqyDbtYW?lQ!;p9rx*W-`sDBe(%~$j z*|^UT^l~fr+A?IW^6E1HopdQm1gta2cL$@pcAc?sHdUoS&!$P!ajuPxFQ{8#_&=CF3X) zj=_~XZ0Vr4I}5Fqiyht)M~lrA-nW;R(G1Bi{)5`WnZu@X+HzdnZS60Lv}BYKA;Dq$ z8Gd*v3DMP|bgdw2APLVO!NlnMTY*x3MQQ`QE6@kh-mJ+F@9hLXXtRR-S& z00I`1+wzfY3W;a<_vfKH3OMv`9qVh%4rY)TApyhA$M-%r2JN-Sc2sx8I zS)6u+y#>i7hf^*n&BuGhXZswDZRIls6M!eDvaHR5?k=s}A2i<<#3@A3V41uK)S39j z8$S7cDZ%?fr2viUacek9Es;UD1X7zdw$ko>)sZFu(s*q38PpHEbC;1!eCyW}I^zCK zM}Ui8?$4FGEB#qFe8cgi&XJJYo9K5D%K%V|GDaNEp{|I4tjIIz^7N4F@#)b4$i(2W z->cK^@cMv0!0eFsF_ys`Q!3`e6Kef3(QyH z(~S{YZ%>!%i&qP%4ne;gt4?`1(H2Kseg|gVHipfCgcI`n`OH)@F*)>Z#ywKr-_n;gxM-&i3gJSjoydKZhzWZGJ!70M{ytwr_^|JU@Df|UQ{yaNZL`J zh+WWOqX>YDjUM#s2Z%?eyp~t%bAoA42W(QY8o1){ECE&AH)ygs^6)B&MuR-7)Nl|y zcMSeHz8RjceN)rm?N?u8G-{B{;vHi(-yxqNaK%DeW<(k__LsR7w1GwUkxrzcJ6x!X zcQBEXtSeF&=506>qKYiIu;ugKD(k>2XIn+ZqLzBgQ)80w8!^oZ7PU!Nj)}vE?3q!yCtGuGMtJNZq6%7jy|ZTOQ}kOqH4+N-KTUdPKca&{;bGVOW z?Bg4tjp{`&KfurU-AgA`l0S`{5N#O9{SuOhPXAhiQ!3fkQ#@R#+&tj0166RGE!=M$ zaW!kUxZqW)1md|V+e<3#bSlNx<9w(09S)4OPviN6OyNMjT=E9vb$YYSV&=fqUW#AD zCG{h_VZ;Wr_COx(t&aO#{wmo1sdUOpUwW&gqKINdB=lJD0YPdWg=eFdTQc8xjudVb zaj4MKn7%&}#|_r?_$KKF$U#v1o^Z^uKYKi+`+aabvVHPnPL;y<7lRqZgn5o3oHa&$ zHa8VAl-Kxfo@z6F08_$Y?OtjkY2F;A*p z{T{J?W8&WFNmYE z&Bfl7@$R^Z!v+-Nree}HRtO|`q3Odon8cVA@B($$Sub%mvoCRyfUaG;xn^MPaONnR zvxL)jnf%2i>DN-V3aL}1|(Cr%3I1 ziIgdA<|WTu3X4&7nKoFAEnk{)Ea!cqbLv(9yliW}<6tl*pQ#hI8Qfw;>lMlC=vrTT zKc3%w1j0}SvhlR z^Dj(o%_j<`LB|8L$1fB2t>;~1fFzMNr7K(TPm1;yR{EgiX+Kq)oQf1G!6h>9|u z0#G2uGd`r3>3}7tcMC<@H9Ll>`tw0-mYIQar1ITKa?J7t$1z`7VVU;&0a}KQ{;~Db zAYRo@OmpM+?**GdPaQqsgldMpp$3<^kaC%u5(mY*5{IpR)8!a+0+00q#v1!!#YTSG zN&vq)a9jM76q9RY+uyaceV$q?*M;H>F?~VcOB|`1qJW-hYrc&cQ_#y>Uq|CX^6~|j z#A@4&)G@k^9})OUg3-i-lk8IQ9}6n!q>M+mi#5(T*(`?O)`?<;j%RAz_fa+4P20ab z(-1Fw9muuAbrVh)k~tux{IxHdWH5(vF!HmptmyDHrPaWdkjj2uMztd-m%Gb*q$N2 z_eP1BbzR9K;%k~X*NcA5A?IT|Hhqq7`ZG;ZE|Z7agie`tqH|7S#pwrnj5~Bld&=+a z=#)7{+;SoPULO3&l5!C-pF>gfRe#5_V7b_ePDOS`EiV#GfW`NL4$TfLd z%2$pk@LD!gu)Th;Aux$XkR?+LK^pa;k5991ht2bn$b4qR@jSCun{-!t z=@{G?AN*>6_w4J4M(mqfwBE6pf_MX%l?Rxmz(E~Z$%{N_EKnQ&Xv z=(B{dE40FVW_WjfVq{*i8%4@zL&-XN0j@Qbz93M^H=vM@@p`z8bU4^yJ!3;WaZTrx zlix*t*qtcc-1ri=WrB(?oTpoBS}v2qrXYAXRQuiGyl9N=!wXsU2J>~Qxf+wwG(Jz& z3_))ysFRDtz4!e_aT%md>*dxk6Azo`a_V{^zXVEwTyjrnSGMwsUadjlu5e@#^Vqw8 z9H#x`qdWaSNW-VQ!WbZ4M2I*=bu$l$^1%_$0K|FYu6ecoa=e)+7&6l(vs&54Fb^AC zlE;>l*<0xdgTdvV`G&=?rlbfB=>nh+ITqWS+tq?+v710T!sb9d;ps}3k>u+q$3y<} zgM06D^+NXMr%!x>LhRc)KI@)-N8pcsYPHvjeH%gV zmFe*U%@sJfdy&JT4}gxq087=@;#L^i;gUu7-HV=0ib-~qZsz&1O5KjwL0%TVwC``o z&sn`urb{-D#eLfg1EM+@KWU3UvVU^e9IANQdjE+!stI=5uD4V88aP&^IEO}#)kVJ` z$4Bs6YW7yU!^Cv&f}wtOeoW?6%5GV{`8Zbgh3EYJ9iDER7g>x`2?93~H{bUCO*k*S zHa~N~cKRma>pT8S-Podsfs~xgN&)jkc|4+6mSilcKq)=R&?1-_QZ}PK?&5{2FUe<( z5;K<#JRq_?v1{v@f*>b1tXS8T6;PgY>&Pj%>wBJS^oUKa|1&PorSb$=E8jyPxlz9w zAEnys#L7`uzOW#Z+Fwxl0!hCAtR-nm&!_ct&=n zXao&&4C1{$!O`tN_k8+1H{B*=$b!%#9UA=n?uu<&Hj_t!({_$(`<+yl>x?aC%gKwJ z&pa1&y-oqrxI=8m;YX9DQk%#5S9;F@>NgY46W6g=lY$<)1o{>Rd`M(VeW~U9_vgRf@g{=v;-7>v#K;`{Y>pAp3Jh)yk<~ZYo;vO-gF?hZAO_#{0nu zu~g1<>9NNxc`~UV5*c)g177L5c}ABxE@^bTzv!;4MgIjw=(UGvN)hXaL7tZOP9j7o z{?JsvD+=H&LL@MPu2XydnGk*xqxmkAZcg%d*F8kAsE!a)MAN0o}5!3Gnh0-3Mr zylnJh!RMz-u0Mv4(rz6zKL%A1^SQKBJZf&wF+;Ar?%JA;Ql9BDJYIpjsM4;Yi22Up zStAw!gtunhXX~v;1T5YbXprgP1IBr6)DjaW#$ur>Mufs>S zH-5%?oLtvevhtSN6YXk$0Yk~f`Yzd9MM@PYBx1py^;N?cZs$Eb_$-DgS#bo3bnb@c zOLd8X6E{~R7O91!zkbpkS$q@n-VT_$S>>ZmV-B&JDQ2M>(I&T7zHj%s2v#orB-25k zCQ&e~Lnf_eixdB9FyltrT=B}&TOQS;>v#G~0BM!? z%kPmsX@or~^1_#G=ma?$JhJ405A#kjFOzrNd^L`)_=4_kP6)E>y9x&5ev#4Vw`7TSk0h~C1u52Ks zo-m@%u(lvFAMzC3k98sbgMSG9`Rc1%u*mm3%h8Ut?B}JiRFVwgTf@H|F)F?B1w60f zoC!GxZ>Pei?y4$-nRJ-|Z+ZeU9uxkm<>P_5IGlLVP8c0Qjy#ea&C~vjl0^x%gZ{#q z^|p+gncIC>pEOeT19w%Z5QxH{BZ9ut`B!IcLf_^Xgpkr9m7KJ#B{Tw7I)N?d%YeVL zv@)b3+sWHV$V+c|%Q>1yo$N7@Nn??!$EfOAkDkmGLcr`om5(*W)~)i0jq{pcm#2H& zrJe>tH6E!9BuO~BtDt1Yf#^bzNt*@irI#I{tiY_FiISZ=vwvn{n+YOWpb9h+3e*b} z3{E;Pa2|}5V7P2mVn!?qMW~YgPC)U_bFs-jf|_Nd^1j_{iPve*0NFe8p$dSertT_Q z6bHNzY!XLo+DR27Sria@@!AFx*X=NY>(@~2+J*xl{)TQ9i zsH$HT%W>uWutrE@gi6PMo(PvSeYMt(lk^HyDu>h=i^X4H}G4<`SNuX$U0{wCQoA08UNa4-yRb-#e*x5 zORu01!AeaM3tWsUOE(`(EN96M2Xd3&03<(N)FCMNzEWng`A(xWX z^xW|@kxpk^wH`2`{Tsztlo2nN?a%Rp@})CJw4VSzhs`376LRA-fWLOAnofnjw9uBL zHbX$dWt|7~)aC70bP#tPjy`fY-{`%Lp)IV}JNRt`Akk$`Xh&?^5MRK3L>$ z_73xnTSDI_v)blQD#l!ezWi>WoOQUA{pDnjn9Dk5NViS(<>s(K$&1Rcpx0!3(Z^fQ8V2p^FKd}K6j+Jb)Aq9-!jOEPDaf3-lXll9BZLmrn_0DJl{e4 zV)?KA)rAEocb(Amqsi?0b3&H)El&H^f_AtT<4xIh zHgiKK*bAJZ3P$K5?IMVcZCTY2Os#4gW~LS;=E>|5k0(RB?zMdS4bKN_(I&UR*#-n& znH1jjbe>k$UpdBKa>VV*XNta@eEx6~g@ER!?sd`8*a+t`(P9ARbB-(`xnK!}T;gsI zH*g@1J$`H5w?h>}vCv;k^<`^`86N4?LmoZ7I=~}s8Y{vOXbtI@2u$z#49=5` z8{mBCTU=%tEoMhkq>p?M`V63C2STJFSe=U<;pZl(hGsxUKR%4ZY!yZUOp=&hR2u$P zM<@YDNu9-%sK>>vG{B;j^@@MgT_i0Zjqc82^O8={$Y%w*+D&M?Xw(-q_~3ap#kUb- z;KvJ|go*=>@psROs?s?uRT(14;tj4cmda#Flg!5pSi6}qSKB7d$G`m=MQnr<`}kRX zZ?f3Bo4LVp&#U`&IRB@1w9K1t^d1zG3&}zPCSqs1}K= ziCrDU7WdWZaA_UVs?o*l31s7i$TioRpvP9-VxH}cy%`pKm0~D&1>fxUow^^16yHKU%jDnd_XVV zXR0d4V3_j}`<^P*3wM~kj3&x0SI(j6-$5p7YA!=_$@j{TWG<|M2(I^;~@w@gbVf?DmkScgZeEVy_XZoIU70m)F6~xkP zxxoA7HLHJ8jaU%MrU_paXW6G!L|L773rZ~x=zUf+orsrwC4>|7Xw&wE^_Z&z6jw0x z71+5Vb;GDtC@;HYJV>Rg4o^vUR6H;pCVA4UYrOz~+O$T!vauEf<)#Z;DwsOo+gr6N zNjsRS5i28qjqZTYp-|{rOq=NsSa#o0I%H{jHq-B!DFmyHlIsXtjc_9}>8+QX0VH3U zyj$wj?=#zLeWTYr)~?@vw4*0@CtSUD#PnmSUfBM(5)7^(h94fev0Xm{e<21!Ga=H; z)y-)?-uNZUbJELSwR(Db+Aa?jSt62X?xIQ?<#LbDIBq|2;37>Pn#y)w@4rvzEFwB; zTXkN+mZ!t#^(w3BXHsU-(^qD6MuZ`I1Lxxbi%JVR$ydr1S4k1@B%$9F|MUg(N3pP9 z+uk6mYQ(1j8%T$e_er~_*%Ku|$QB>4)N-My7p79Gs;cJz1VOTJ=v9?kUCNa&7n>bv z=~vv(aL12{*wnB`qp)#u@?UmmqvG}@wBqmMmLB{7U9LTKO3AfMsuI*Q z{(g$4n7guxZ&n6r@sF~ShW-3*4`lte|@?&Mlm+!`v0 zfOIWxW#JT|tHQvBE-oKo!x6j6g)hXh&f&53f<5iej49; ze)n5{L-DKPccGSBDwHK6=8>E=6a?a zJ27I;D;l5D=^}Z1jk%kscF(SP+s$$J0;E|OYuqC1^?^(Mj?XY}hn@n(%=cjMyWmU#pztFc|WAyVFsyjp- z&c1!8(ogzyu8yYdXen}_LIc7OYp_Wt*kkEsD;!RfMw(5iQ6<>B_iOImHahNjzW0D^ zpGMXaEpEBMklbdtB$^Bf$LYKkOz9&b1uU0Lx#qp(6A{0R*=!t2JgDkfAMDkXfG3*r zv2SlnW{a+T5RgDGus-m-!9&njd(qhJ7#-a?9CRRSh8tLqHQpDvKsX| zYELH6!Mv<5kR`;5??P{aJDMsb98Tj20hXno(?3{?cv>H5H0!FQxSrI~bS^qEn|0g8 z(?FQ5gmSjE_c0WGlMHg@_Z&w?oD|rLpEScxujtLG9TWo;Z-Wjk!_=%^I#Mz(`e`{L zWqi?tt^T|_Q<=1UUf&yzHIG_R<8sKGe;xGUZY4WFrXrO-u`hlzpE}wTI8!LRF-a#kdCBVrMQ@Gn=sB`JIt!=kD=?UAH;cBI zVRj~4UL5h3*zNy$mbd=6C!(N(Hm=+5Lw|(Cfv$o4n+^I+$A2O+=x`6_5Q00qpOuDM z&e)C{_}KQXpc~#>_^r9VdXoDxq8r5GW-6~ge0Mbxpj>Go>7T>#PCjKYiJjt**Dfss z>{ZU-t02+0RZpXv_N|0Bm(ArN(Hon>1Djx~^3{h3^r%ZBeo1z`irRUrd$;P{+1)3v zHonZeW4b<_2#XSkg@NSn6aPLCu0pp}?uV2It?EcRe-ZX`ksyQaJoEddHFl;wj>q)J z#PwD*;zjv~DBFn+dh0s~6CK7!+@dS)5o&&!&we$oWB2$LYVhhRAde4tR0d*XBk^rbzGomr zYN2BXySo_*KYBGM46ekQltNud@`ZbP!WcBz=o&|Wl>Z#2r8}Ar^kp&t{zF))U|7}J zV&7JJ+tx|i8lV_Da3HwCNGz}u5HJ{bn&R?&7i=fCn3)k2X?!-MvWckCi74xnd+>OpD!(Xb>VdOh^Lw^GjB7K35z0 z1b5Sk?;&VY;Vh=-`I~M980}`8EBUt5WzF}ecwzdq`$gFFs)1Gds;_kkPI7Y0(D!(y z5*b9)^*N9%rLJYqw7f6+B>Xb%s2RYE zEuj0M3gvqzLilgk^Y0hBR7e2EgO3rfS!Kc?QpK5vhv%G(hW z1658o8=A%Lq7FEBkzbLpu?P=9(hip0G2|!Ro*th&@BK;+OQPw`Oy{aIco28$lE?I; zHp1?Y3%We%+%k(Eji=Z0i2Hy-$Ln^E^6(w`^i5^xpGy`D8PpMzMyD= z=jqaJ-82jg=<9eD83rfFKaPP~9#dKD4Ek1*ZQS5r_Nu+zDvrRhKOXjaqgi_3hvSq( z5Uss`lN2kTQ5SECMsbsa9hccp1RO}C*1&gSfJb6hi^*MgP zeMi@GEN#ZDt#T5uz*R~+pqIMwR^hibH0GJ1plX?7h~ncONAimWP`QRE^ce;=W+o$r zQsL?8V*Wm`$5C5N1!%3hAneRHP&`r+VyBKy?K=qrf?t>Qq9_;Fi(znUdfDb+Vh)l~NU155gvaY6h=9|9;o?w8nfSW^ z2WaG-3dswGbTGw$oZesnD!v56>&AD*31+_6U%7xtDjAGd28r*S*ot~l{%e4Ja{Qx5*H#GQ>4D?RM9&zCZ1b3RB< z;a`8axjU58(0s`NTM22ISU@ACJz{RaIq{pysMzkBn89Y%Ru3Z@D_k&2ub7!R7RYsD z1#1TGtovw;rn5&U)FLYnt;vEwDk(>h#!Qck^Av&R-Q!mUKhcUjM-H0n^dCj1P!^*p z5THP;V^W$?o8@V&N^r{dQ>I+)LedCv>#x3O(kW?f(_w=Z%vgX+Ed^{>!Mj{$j@;6D zG&QJ3BXP)Am)ra5DUY7tv({pYZnCC+Mw)-XX?HRqiik%lC>*;$(7TE$*3&u z012dszwea;I~&RLz0zkEdN~@Z-vqx-OgiT8ALa-K^QvWiG^f+4;ii;MRHijhtJIOF z2u6jf%uJQe#D@^X0u9v`;44zwG?W?UnM>!}kQ7|aAzy{s;L z_IN!0Dy2dHm4J7!h__TsX3BIZoA%+OF8xCbnA50hc}Cu)hBblgq{X0Z(YBi`Hp6QwOD{<1D<|y z^>%8yBz)i_qbq1OKGZHOyn?uz&MXtCS#y`@WUM+LNZOrPz_d~i z`td87v~CzSEv8PhUH2Z3mL*yy1~rMiSeb$2?g9u=>lU2LM7*GAb$ks0vKT1bh>QAq zRoDw|i56;S)Xr|L4}s;T;Z!>14?`M=0xM!zLn{UOYJc*4UYbS^(&ku*R|!$7>tB7Y znJ%_DHjUR1R$qAST*UT*ZTA~zm2o507W2f#-V6}WBN+n}camTLg3FjX(c%mmTjF!o zu-{Wr0}3^ncV<1-eeNP}aRay)@4HPrwiuF&wXT>7NLxHqGj#WTR)WT8MwZ#x#N7LS ziV$G;&bhg40;PO*PICL;)PA|2ZDrTw4;JU#-bY-_&IdbixsL}rJ#6Wi?E1I4I~u=j z>^Y$ouk)pyx2~r*|4VO$p>J4jqENNjkaEdHveYLyq z2)qU*8a}fKI(}{|&(JV0pH7YxNjfRg?Cx`Q^qdT#a;%%ur%nA`l_l1t)0t#DD0uy6 zh$avjlUPS+Fe|Nc#m*3D$S+$=2?83`n=0dfgEVu4FX{o8HQK24?RIv8x396&HLmhY(0MMZBe?GbuU;y zRRJ1@l|Bh?V5IH4pD4_t!=h>=bQkmx1H1uLJk&+zyYdm1X~hGF%jf%vxEaxO>(U?*l+52e=`4OEP#Ep@B15iE)icOsCrJ# zGoRzfFN+$I$R^hMFXMkQl_{ehV+NZ|H@ivrS3|n5R3GP$4SsF8-Ja7<6{*G<#khT9 zaKVpbHA09AxC$J};3-@K10|TE*EbnY4V*FS1Y+ld{yLRsy~)C9FVgzGo8$wKtSn~d zmoR^90nuT*(tT+_0e3jDk4S%A^OF^h2m8q??;&%-`M7K{Gxhw8EBw3xjd40&_MUL| z)9OB$t5s5SVFZ$RR(jT1Rha%}@VTggw|!Rs$J+p0b)LvSUMBkHH9GpHElU&PIQ(DN zR#Gt$W50nR=O}rsz{N7m{&-pnM%|WBBQzmXc&I?wYcg0$dudUF?>>EZ6>I)DEB0u-St#|0-PV*bxt|H~7}f_xo6?iQUZ z{iQO0_&NUTD}R4Z85a6xr88&jpNHH3)4LE^;ojd68Zsp~DgXa?m;P^KS6&-~{g*8N zvF!eL;RuJ4y%~U@I~M2V{-0X*XOH)R_F1M!=KU8*{l`a%qQEFT27i;LB*uaLk2m}= z5B^7+)v3|vJ!1duMNkUNCZFTEXg5si~z_C^es(zDT)qb z#+l^c;*bLr4Lw;aYhZMS#Mws3lXz9Sc~Mz;dMq&|)(lh&zeVSbXK#1E^IHbpzmK5^ z&i$1w3U7Fbs=WEW2eepGtJw{mpTn2%3iruygVw?!zt5oV;0em3IQ2r5RHKL9?d@Ek z-6uZi=F)&3Mr5S^RW^R;vYo>m;-N=iC*8k|X%r@OFprDIQ^@PK4BI1Wn)$|uANJFl z$2gwqv^(_eGqaa?RPlsYWFz`87TfYZ*;>zs(Yt! zFnGvU{bn68f?o04NM9d58hQ!3LC?Cz>-z-um>`rw<0f3`;S@8F_!~ak(9tT=JxG5^~u{yuZO9AO8hYSrz1 z9FNGdMNpvoB0lFcUP5ov0?t`KBNci2mkZSQpS_Q}KAG7XeSY>pn%Oz(9o%)}5q^5L z-NCha@Rx=A`&0iIgid++X9ENnWcrc5Cyy*PT7%4eAVFB(0_Ks$riZhb>zk3;YZ(@s zC$G0YBkZUZGun%SPia@VY4v{{3*W%~yLK+ap&zTgM^vZKZxf1Gm_EJRyavj0e!j}^ zj%PZwjTiLR1Y;+(b%pvWtXeLjitEHzz+u3wvv)Ne&TIj--^6DsA)kK4woqmR=JU4x z<%fE50shq?Wj{I8oesQmyP~B#~AfEtt zHuR*^^!^1J>4hV+TA8Kf{t!8C#=%?}k&Pk0j2~-3StWPtu|I^$@vF&|_%~WNeEOaG77Gn=npKSdp)+WHh4L8+ zwW^0IV;6)^1s|kUOAhgvbrnYipC784GuSRRXtBVVTzd|>q_DfjERo26dzb$BaGXO6 z2~}9%nf;rwhn2I4VuwZrG^pv8yQBNA*$A`!-&)!Akn>@h02jySN-Wjo30Y3=oRpIqhU z=JpFn>5-iy74pf6N=2QW^`$%sPh$4ogr1-00ri(}c%zav_q7khz8I^y5N>rn{T#3{$ z&t6GSGtXr!c8rG48+M9weT$kG4cfmT^qG-PdyA2P+DaPxroG6Tq> zSM2h?A==CNeb}5>;y@J!F**6gPrlix4bU@_J4$gBmkZBy&4xYntT;%6H?>Z)L!{|w zhCIM1S-_;@skGXi|2e-gBp>bQ=p4FAaocmX9L)qsNqPJB=;2P^yQFGQr@;z`QG-9p zLb-CSw353ae!@vm4}S>tdb3&oc#c@{bqX0G^eFng?KJN63jDNw$&yyCG4FgJSE&mw08+u}C~Zre z=5|)HDWv=~fe^Y>1|2)4%q=0{9O>E8KwT5518!0nsGFlP4?CaCc9d5!qarzXl1)pA zB5t(7K>qM~2|<=7d%<=ik^FfAom#^AN*BP>P3xycAeGL@Z=A z?@)3MAD&pUzWvlL{3SL&zuPK5E^(rEi{azL3)EcY#Y#9y#fh)0Mlv^;)bbLWvzriG ze8*zm>9U2a@rb9aj}1N9263uRQ7{_e$EE^g}?M$cm>POENBPts$V->hgVNgDdTf78UuF87#m1)2T(S407_m-KbCQ*FNAgoy=ak zyCN;RtkeTb0`wYeI3fhME_Wk36V@_1sS*%m9i7`8RNL{tI)207c)tBGmfN>?<3CEDq4ilTynY)ce!TY+2Tl0p`7yKBRb2() zfK*+`rC1n{tsm!cc_0I%VOP(aQ_sm%gn(k*tbfn?f<@zi` zf@C=^$GOF3Vf<`t`b;VbP0|wZIeT*NcmZ>QR>c2W>LisxLvh00knp8`9vRx{?T4+Q z}01^C&+_ zixI#?c{?~qN;Fnx7T$3&myjm%xgO>t^9xVsUJ1{)`A`b9Iewv2p{a6lqWlLJfEY!e z%%=-s4Q;TltcTqldAU}7;Cv0{-83V!nq^f3F=rlWqj!dA2x|FSb2ce`;z({WKf4|> zf-wLo$luH0bZ6kOneTnKlYOSXUZp?sPO2~9IeS4=p~!QO-GhydjXdm0fjg9(Ly#ki z{t@Z?=W8>1B@&c|H13*^3O#;V>gyL5FfN3DL_B|A6yXH?fG{~t&_J8}#1vn53)oBU zes8)Q&16)=x8!uAOf*P(oTCB#U0AzQ`W1-JMG5Hiluf1X^P&&Zm0t;MAszV^Q~QcX ziyw+C>RaMjm6%f4&HR|QEUilgXkJ)O*?bHNk1x=yf6OA{U$wqQtdz8wp3meqComaR z_-Zk2)p=AlSaRJss^{iT+vTZSu^6O0v{=KBQTcI<&FN-9MJcm4I#V>+ja>JF;DXjM zk^h}9^^8c%)s8eUEAyj|NQ*yLvlVFq;R=8KoI!vkHGF=!!x9$L@A0Kvz58U>#y{ z)fFJIM^vuE7xE15&BQg5(&zqPF&!4Z3p#n;%wI4lS|ni>>oih@cg4eivKjedo0G)M;?0jDplbCvspmp_*;KxG(kF@TTu5QMC zi}9|McZ%u^bemq@^r++^*`u-oI-pk5jQ zr$t2t`<}ljt}fL;e0k1MoOUyED%Hy!Gvzx}9a_&z*uA;v;|6%-q)*FUKc-w?WM~l1 z5+b}8s)eQpdFD7I%-_pch%6ET`|JN;g-x4^*Q4xjphy|J5DTn>&9g} zFC=C}fAZ4u)GZDZTM;soxNWnXvDurir%s?zi0F+XmW*+K)2nTVV%{In)_VPek_N6e zwnDdk%d%krNIah$zSxZmNs-Mm>-N5eifG`h!x%9Y?E`2>K~tgR?U+BKSO44wc3|2u zs;VDG=yGRPSzF&|l0zE`hQCPziC*j6ozLUDafG0#B!U*Ten1+jLJuMajdKY$HkHil zsAg5+P5I0tuJPyL>(p{eiIr78Km0`^1CiG0;dj5;#}#Xh`ZxuY{ zkH^&3vR~{^q;CyRMq?A4{us! z7O>&~Ia(WyITGGT5W!?=zDssi6i}Hx>_y>3^(9&eP`1^rYMcbd&WKOrTESsaTh zLNP=g{ydoAhPJoJd))2(?Y`$ zz77mGlO}g~B17_E9PRhh3*EA~NdhCFURrtKa(ip_#WCgWLhAnI)8U$@0f9=TYVzgL zoKzFlr*1SOd5**iGCHk#3*vm^59?7+)*F_M!9cNec`RyKwL^cKxiU{r_@)&^zs%RM=W(13(4YYCJd#Tr3utN6PXFVn_ZQs|OwI9Rxc*rH} zsc97+P%xSdVDsN>2S*$A5^IgZdyd+G*#dLi2IBDn0(Q#zT2J~AhMhr#>^t+5SR9Kr z2MV7NASXYL(^^}0f0`+mg+H5cz`(jX+()m)DF}#Ai?ZJ|zGLu}hf`G(QAN^$bu7Nk+RNeE`mxvqZjWICp8fZ zctm&@9&^blvrbEzj`@&+4GlDCvc=i4M7_E#Kp@8IuN~&^F0++ws$bPM-rc8+l(?#w?sEMu8O9x;bKKcKR^zrAaesi>#%k5ixHxh+F+=K@F9O$-wzyudmr$ zg7Yt5gWnqp-!GqEv)E1+Wmx3CqwhyA#8S2W)X_<7s{ROY3l>$T2wz&B8pCa-p|+Ya zFU{KH;o)(NA@>=+kFKElWTm z^kw1)c{S>DGO|GIca zvdANOtwsx}pRp|pij8mIeJQU*I}04R<%hwL!dZ0mzI7@5b^i!(PJb}*yF!CdPakC) zd`Bo^y`<;&!<5QPD(mNQzKyUTeE9~UvLd9T1?sec3u;$1C+es66JFcmh%Z+^} z)yIsVOr5t_I3fwAjrPy?9*IXKWMG0pv_v- z#_0X)qpvixz@Zp}3O-1r-$zNx@yIinEoQ{1PW1MGTc9{-Nf;y)bh$I|deL+01ecF6 zOOk7nv7OsQDqx7Ubb0dS`GH8&qpe`%aellVQM1kx(wt5FjpcUbsr&|-5ATUq1v2OH z*M0vXfw-K4eD?BaQHX~^FD0E*St1mL5jtb%;TD4rHt?bcRmweZ4d5=0%X+c(L}Ex1 zl>AcJTUd7TR8{p3q{w@`J1=DRyyQ6H1(QCtk zn$Lpoj`wj@pD^3IM1BHU2b*Knuv0hYoF}V~Gsk3-qcny@f(!LR5MAz985!+JDjl*n zfL%)JH6FHDp>BKRo+KvIntUIF{d$i${l?_*TSEHw$Mq|a&kqv|{+PuU7XZ>-N~!x8 z_xNg0MEp(?UP2GfbEx|XU`E;%3Wu?BYw9tNn&OpM=ki(-R2mI@0X+(bq#3b%ME|_A38d z;PcB0e?{x8pI{rb5kuVbekoDEqlR4*pNoq_aTQ9)wS$_mQ`nLJQ*XtqD((t6&KXk~AwfkJ$9Ec{ZU2_Y`kkU^S;@QdrZPUCb)pYRZWs zJ^#M<_j%-`4pwCbq6p3VRA@`)z_?4Bpa(j{qg9_Vr2rPBUnqGP|sos=p1CE}0*2S7So|S*H#^_=4i(_4W|aqfYStZ#0p+H=QX&02(|FWw*y^wqc}oyi zW?72}6~f+lULd7pd6*^3+r4gmy72Ym=gvlp1;B-cDQ$4DJz!ZjQw~n@`#_7al{gWRKe=ab!Kp_5C^q{)zeRCb)wwVLNLpZDX>Fb%DTs|EGaPrk4@mlpl-dSbTn zk0eNrfNo6LbJjPVkXIH(s(N=Ur|ukEPbUjJs-u3*&+PhH^SU~KqVxpyJ60SSZ(|G1 zpbTYH-B+UkBJ#J`z_iy*820uW!9HNL)@&(oO2348d$9fEou>vT-T~w4v(Amb=ENrz zL+i8~)Q8G3Q5;EwlfSAyN2-AhHmk&xb`hf??;r6#K+C>DSz^<;WHs0~-(qMpsnzRp zcCA00hK|zS&IO}#T^L!4v9s>};KvGiw}7$)cr5Y{PTs0v2-VIqSZcN;HIjUK`Me%| zKKp2ybNh6;M~dw0stx0LYiBu@?Y*r|umXhDRog=u(E6q+_@H)9i#0o%%?tOOP)h<7 zN7oqz{jD7>8lQ{p;a;%_fu*>RnE}6W%6K1J(f$I#q1R z`~#f9%RvP%tXKF`%u!ZUN0WnXO!e0ccK>`K4qPCDoJH}o;Ez+j_;akR4f>2``?1T( zeGnToGJd&kyPv@+!diS$++3ZERxi{s5?zx#vb9S;hx6iOi3!pEazTNDUY^h0#g5_` zs=uZ#i0{wSEQkx$=ox4v6%!k}`Agh=)s@h@3cfGZe>uG8XN}hfjjrMQv zXbdzb?k-*wVmJ4uA3V--1Lm&OL|9CV1|JFsTQV!Iyz3l=W35FC@Bj&kQf>fu9($sN zeds8kR@`a00UWJ05Yj6(ZO$qes*bN)?;0tg*+buFK5ZqHHz!Q|R)(U+q8H}fdX41n z?7nCb#ONB?>$5YH`=#j*S92bBL|2c=r!v@ z=~9}h^RU#4yFk=hJA(8&t)(-!uzA>;d->tt@CdVbreff@U6ByLl1XiSEhdH9QcJBP_PX+-q zq8}md&(27{-NXIOGKQs=b+tbq5c^5|aOe7PnaR6+tn^i1UnlM?bR0Z!5`*p)%eV3h z;&qEI9+wa_VYAyxzkM)<`IrR2I zWK8gN&x#2$WEt?2ja?scC7>bCO08B{i^tmj8U-KbHk19v@#j9~_M1*+KTr3oK3M@j z8^XVSXsmwKLS@_c|!~ zv3Iq}K{UkzZ}2x6bU9`1F2koop$(gKJ2cMAS;gKV>PBc^mP&a+e?g$kK9A%M4bUKn zX`{^)^Unrv;58m*%_qYLfpz_SsBzRh5dYh%o-MLUwH#Wv{S#BWBe|1k z1M-?Td59+3)hS~>pTWTt@SY;r+@`RO9ej$d8M;ie?(aEg>s}cGhO{SHM^%P>RJ}G~ ziNi$_(~x~8$L%3?=ag|_s(_uLG^=V?fu|EUa>R9;4PpG(aUz{qyz6G&Sw3jq#Gk#N zqemC+emfv}pT78f*YyN~*1p=Tf{n{{O)P#to~cjQG_6UzEoDqY>_0_&IzHm+-F?#{ z+wAhfOSVQtkIhZ5RG7`c7O{J{lQpzk4f7LKWjRrOIf zE^wzQ+Pw!&HnR_B9kEbhz@Db{%`x=gYJd%LLW$ppeOsnqlC|hu3noJnt57WhaRgP>-uzhNd zT2{iOO_uHDu^g`^m@d-(e(llEF%_!kv6n9aW~&W2fh1VWpHl^fuBrn#j#MreROwW1 zZ7Q;YDy+Cl?o37BGK1k>9S=&_!4ikk_<(a8=>ABSP`8KsCnQ623R&{(Cj1Rl!*3|> zXLbfuuKGwp>hzw+l8ok+89VwvAK5KtD z4(3do#wyND0@z|l`>;U0Qv$ObqKWODb+`altzr(6OVM8OH{tJ{F_E1`Y-lZ; z|3Wm|4is$eKlekd%1iSByJkV@+3#b`Srdp+z5WSDTsp;ExmJ^i`gXT6K$Ou*-267J zwj@2=UYG5N&udUB(ZAz8v5A9u@wVan=f3KGq~=m${2(xFOIX9FNN%h{o|Y#_rPyz1 z>Ol7c){H{p7An3T>&}8IlOkfFdwF4J4rGD>+sF?{HxF62?oxUTt-AbedL^@qzIlu?jDDre&KU;ry0l$NyuvH?$oSX%PE*3N=3zi2wLPG9+ zA!m(Xs~#?2d)L13f$M6CW|T^CyZr<0MN$C&x$azWb?~WD=vIb%a${F4w z5sCqWuHckm9AG|52$o`!Mq$(cHP#vLPvk3C=&bLu{p)o|M>*01@~-53wTa?`qB;~f z9b?S3==}0g(CvJ4yBW6dLEZRthp$!bWWFY;x`wO6e7YpnTzu5-68BL)D_=HEV75Yc zCxuI=#(`e9S&F52HaCeur?^e&+s!PUrW>Ld5FZ(Se|02#;z2_;#W-GE>#OtDvL?JgwQh3L}6^I9~eo8 zMa22VXWumexO?G@FSbSp`5LcF9tUE{K&V=L+-P&0vLE>WZWNz>NBi8c&$5bqILZ1V zU>PopH)oYHTVObuLe$?Te`Xui+Ix7?=uh*Z z!1^gu`nNrHUoZp=@E$t}l3umMB+;(^=h7(@G!KfqTSPZ7>D=x6#CaK*S^24GJj` z08=ciV(g)shG$kotI%wS2}HyzLx=dVTJuNX&8lLyU#Jb>M{0+&u8G^N5yV56G^Vjx z7bUmVF9;A?37F7jk=}%>JgRyTOe7!!gk1W=#ap9&K60zi-=}$6O>R`GU5*@^vWy7; zy33?j$>`l#9tC7wZH#p!q`W3}ikKMOw!vfBuJ z*lnvj*dzULvg_IRfaR7=#26y8`P!9GVDz)~qtR9`be~Rl5R%c>MFn|pP5Fndh#R!) z;Vjj6XfU4DK+Y)PdXEHA#hwzY1~6YMBnY@0+ch4XRz;?%i!A3M+y}+=%7d$@q=92V zam;O7h35WZH1Ls_as>JN26vnu3?lYekO>0DHjdqL!giZszjLun53I;zn0Q=Y(G#E| zzd&S-*?1`5X&$lDE^|}S{&3~j3?yNCp zp;5-`+usXqq%XT-X^AG;BL&MX*JG8aLR2Or_*1QB2*wdiW)PSy12;;VUpcMi04i_z zqC2n9a_=0nEDZaMFQksotL0j(p2x~!u@Y}SRa#CPSfX4cAf5Ik4w6VBISs;tRWl*- z?{b+FGau!asP?#h4f~w)>;)?an3>~a@fpUnTO66Fe2@?MIwWpalrjwiXN#5NBD2^9 zNQ0u*iO?}zoeeFXiEHJld>pn$goibmL3yH)<2~=2P&4sMqfL+%-1FTV`upY1D*CNz6H+fvymRr7u8pb z5;fDv;m87q;Fng{0~sTi_$d`hfuukecFMQmcJL8p^O9`ay{t>5LbWYMmWBpT2W%As zGd*mZ-{&k&a6A;ky5Q*ypLEE;&uITfG#2u&VzhXR;4vMQ5U<13caFNPZkDxoYcqkX!4)P5ds4MDi3)80~KwWi&H zdE!&rVHXdp*08yApU7|p@iCF>+G|xw|5eh;ZPs>?`tl5r`(@Qm#Y*w;u6$b`;PkMWa$si~N|_cG2k z8>iXJ4w2S69&AhBMT#FTfVd|dYe^vJ`T zb`3`}-L?eW0aepHfjCY=okNmLt;vm!ib9q=MAws}n~o*E0BCc9LgFZri-GO`KCH}f zFIK70mRJ$TQ|AUaw#2u~&8^pH)vC!~3G-T9zxUSnDK-%7IAVecwY(J2Tv|gQVi?=@ zfA{GZtT02Vp+o|85&AwwWY%d6hJ;09mQ3TUIs++gkFT~riXG#}NPhf@(r>gjW~ zwAy$cTTk+M16fk0!P?6uHjikmnCW@MU4O31zZE9H9%X9BWVb$8Am;fL;&T#n;ubl> z>k+)lW3@o*UvgD%)!NFl@7?8(X1zZ9R43mg+uz7)0F77n-AU)74!jdy<}uPrFZlpP zXHz628hN*~pjx4#uAK47&HxfaTCx!60iZ;!PhkUp4bz28W4BY+@I7;!YyVaatUo{a zEd9J|?i;qI6NYnvSnY2;pYJUadRxJ2^A_>3WRfVD$yTD6~ zys$(COPt_0HQS$=hB7UfwPj`mJJR`;GW`tWL6V8%>GKX##67YC=}>f>wqBNzs=06M zJgPi_W-fvMB0qc9Ci^@sYpOm?52f~cElXzB|px1J7DYRsrBw6!90&uC6!r|!h!(XSI*sI%IPBQPIKYL$q zoH}th+=oZ4Yuq97CR>4Cw`p>X)|QrHqWHv+`F9@{_@V4{ z8eVV8co>)c<56-_FMm}~&_*A__LlKWKe_LNP}mYp>W|V07(u*aR7)TD&e0E)4jxzg z5^i&(xlN0UU57~bK8tLWY{R4T3tVra?!M_K9VW&|lHsC^a0 zgxa`5mf-=u$OqW|#~)fv_R?j;7!`e9ltDSS)5c1E{Ldzq4B5)vu&u!;aJ10DW?UXK z_>e3)`_K`u@Je_qWJ$h;vxZ7g_!eL(Z9czf209GU#(KALkr4s0I_x}_L&b? zB)^at1kCk|ISNMyEm6f)^X2P;MKtVcGr_Px|j zBl8^P4CvF-#WUGzO9j^ii}Elk)PSTAvU%M*a|bkY2iM)cMxv$IZ$k$B*0F50bBbQk zv=h$-YPC3Lpd`6o6;INT6UV(`pKRdr9=GbC(8n zWbd)br$|4KFMOWXdXY;uEMPPH{}xNHeTFJ~B?7fk-;Ht0n5VECfHXhj?#*pHaQxBl zv!|}!xW84@sC|VgVKupv4>kt>Irp90F+4Eh+_MW4DXF@EL#=I=5m1S(mVBQmM}f13 zS$m#MZES3myTBYay|2ZYYF5_7NMke14|jZ+u~LSCAB@Qp9b5AgGW|$Hps$_=s0!j( zXdqqC&d2F)mx;@`qQ--cJt#7%%v4@>4}#Ohs*0HHB`W3lw!gIsfg)IZ|A-W=g%=B7 zCaI|N{z@JVolfl!kw|P%tYL4YaNWU_QGlrs(R`TQ&~l#Tbc?~A1V&n(^df6~pJo$$ z*v>d_I3_= zW8ZREhAi&ak7csv4mYtpmCNQ+uiuu~$UUr)oiGAg0kB9r(OL-ceEWpI zO@cA6xZlx?ei+^m)lMr12kg8aQE!v;O60(XStw>doYsJ<`38Pd;|m@Cp78_JFZjXxuS|yt`RtL+Z@O}#L3Nc z!nIZ5x($G=x$`)Bm0ESI9zsH-RiL@wZ$U^2aMnxhy{vSC$}X5jEo_LYd@^pgAZViT z)7Dva2bPjooe|FHggteRgo)>PQS+R#hP?BCT6ri+FyR#!?u(6mteBoJ#V2bngqz#A zq;f6aZ_0gV?o9in+&_Dh1bjm#k>e!a1zKX2{U5@*cI=zJS-JNU6MJie{YidGmsEpI zY(CDWvUXGAyS2UW%ZFm-^yG;oll!Qb4vuuzq}0Sxtgv-?X0WBXFRH+A;EsxlQ-+)% z;Yy9ZXjDY@Tg?WpGg}ld1o~e~WVmm7KfU$3yA1Izl8;!wdBoioQoT&1nANtK$E_K? zCF_eriz1MYajVAb(O7r_Dl@3E_{{HW{LZas^Gbc>w3YfMr;DU!>Z zdPmhJ1oE!zPbBCZ&k5&{2$QtgQ4UOrqcbX!D>79R!~942@bM=~hX;JmxC@3W#zW6) zw;JyS^lw$Fn5^Je+qVLpc!A(~ecRQ-TNZ=UO}y8T3|YdgcZ-jZPv?km9pLk{2BO`k zepz%519o_;bhvxOh5i;!o!N0@+RF1fqapwD-JK9vKFLb{O}E_7KjwS@|4vmBy&UH; z;NOYwgH{`uMGb$Y@~Iavl-x?ZI?i%hTB;EBvJNn87@hf=5QVyI@C7}d(E#Syx6Dmw zw*~y17hc9~J8LOznUPiZWhT->QqN+qKEAD4YO3%#>dESW+v(|FMPSPhw(WM`kE3uz z2ewD$F>5NE4}Yc+aLOB9U;ZA{NGNe{)gyLm^A;KjyeVSH;+q_f%uv_Y3R$mOznbh8 zbp)wcxjSqI55V6{eustlvq&Az)pHq%Md;+e&+!31v99Q=_h)ZtuT}@uD-L`b^{h%Z zjHIt2lp1>qmwH{FSRfaRd=Gn*Pacj{TEd|kg($+1jKL|id!G^y*--TY)?Ta0P{QF% zp$3oZT%}Ue!1Z|zjnt?)Twx*C2V5?&n9;|_r9Dj1~2n- z-xeeROq_e_G8ZLtyUWV)bP%C*hKw~+{@ynuy8nK)Ye8hM$RZIu#(l}Mf>A1k`88h+ zf(^nH#(oOJpG*qLjMbu@YHYco*#;8Vy>;XLF-3E;ak*GsQBAb-xGD9wFb3*B9yhpc zn3W8!QTkMEX^90&07^jNA@1g|Sy++j)9NBirTF1JA-~L_@z=rrv<9``555Tnb#n$z z1q(7)?N-GyQ*QD#dSi`uH4Kr&e`lKo(gdyDy6zzH=roG48QVRbU0a0$Y9E0! zJSr0;kS*e%KIKQ7XAZHd{aHify0B_UL?1Do&IMy$c0`oRiNYay#I*iq5KGm=G)=LW zg;^gbuU7L{hL?u#25cr_hL{xAqa4sdLu(-+w!}w6#1iS+t>hmUB*Nn9@W^zl)u_DX zks&E9*?o4X|F?(l<1H%6;Od%-^iR=03+8`@WUYV%<#=|}67|7%C5un?x6i}y&&vS8 zX{}=QQ&mqaRyhp5N&wg~ZJU+Y+|5x@dhys>$oJQb2h%xtbc?PuWl_=s zv#>X8V)^+s-A{Ld&~!Ei(0oIhpdEV%auWTdkFexe3zG?0OStCY7ei?>>i|~djWK50 zP{^{RJ-H&LCGhu*DAbM?#3tXMoZL=lf_3Zy!N|Nu4Wm8AhOC9Mj0ZC++>TNPnr6)- zg#iePQwGB0AKaTAQ+R3r|BnFi+Cmvk@BId{eY;a!SAhgbi@D{K!-d^_)XtD1eXxzw zUVfxUn}_I4;QO8A1_DZ2%?H8k!hjBU49wnRz&%sDDk*2~4E1EbL%)T2XV3&6Z?J66 z0IGxl)SjK$ioM|+QuLO+EEOi+bk^?%mBRMnkc9X}lO8(ndgl!LH;5McYS$t|>Ea14 z?amopO?TXESPh>p_r?tcHFHQrzX{iKb@tXF?0ny`Sr)g71Hu zl+4IYs52?~*rJrDWzlO2FcvGi;t$%@V>^cLgfdVEOT z((^u`Oe0NhiM1@@3l_X~qex^tDW2xL{(@6L*VfP%wKJl6=DC{5Eq)@C@$F^|XLtH| z+0kasHWX6j{JU$O!_)QN@uaQW^#l<|gkF4^@>^M|%3z1_RT;hZeD9^aJJ^K?%WVy}!zlwDZ`-ChRc^pCPc5{O@V=U$>Dz2UGzAZD(uL1P}2V1N48;Bzd>r+oYc+yCEyJo?bXtk3)NBW*XsgScS{X{wlPH3cCG?;Wj5stT0;!m4lY$*Q z)`^U^C(7YWZ3xNC+>V2KwPN*~3w9Y>T<kvkwr#>5X}&8E;O-Lq0qzW5#QnT64*h zkxb(^CV1503RW8?~S6IudBFGwPe8znmIj>zGe{FW*^v73D;7TY3{kZUMbx7*! z36Yker{@j*NM0G50~|o3HtL<9X|&=6g`;F*E;i-o)6>)AA53=OP-!tefTM-5SlZ0y z`g}6L1Z1+0#P&uTy;c2HAkL~Agnub&vY*!OCT4NPFB%^dDkSxAZ^dKaqK z!}xav1VsV(kJ*0eaO^ewed$}%g+{xWZQuO4ge;J)FmS-v<2J_?!s7D~PG!Q-{__u~ z47iN1d7#)L?W}8_g+;O#-(HR2vBs!A>RvdU<~Xv*)>adN1>YDqAv8>)fTV72Ey>vA zOWmEy@`;hE7^-Zo^|iIVj3;3&L3`ZW7Ck8SVLi9|NNy=l7ESJQTP*%;1|CKS)KXA=goljIjI+Uv?IG) z`4Pntq5t0MI!47_F`CxxS^?}j4UD|Rw&(&1Oj&p$-qsQN|Gi5vL2CkxNvlPdiJj5R zOOFteOF%7^kMCNs&~icq$Vx;)iTDVWOSEFpC}d0}`UA_(#rT{b(XHkhQ!=@|M1Y{M zyyAqxjY@5|r)|WiI&Y>UKHF&c%~8oMNaD|6RFYdtm+eEhg(?T+X#iQa-WRb!I_$ag z^nhGzd-jFX{qPf+6riEIV{!YU$O=dr!dLKS%U81#0E29IP*jmZz?XP7S$ZP%^3_K1 zlG*YC1S|%{R3)k+vp7D_t5r3~QhR-fS`92KJ261E zRIyw+^D07lK5gU@>CC-;@z=j4*D%q(AAE?t2)!I_)mSNhHzA$bHjkw+oXY zoHtZ>o~LOynC3JeE99Udbg1fLfhyCgOT=X@lr$7YteR(Q9ZaCr3>bOw@C(JD`>NS+ zlwGR+Wn8x;snA|5i`kgm>0~;Ko15G8q`aNVV`fO@07%C9@T8OfWx2^CX%qxQ!0Vn~ zuH7QgQg4$zRiqFNcDx9+S!tC{aX`-o6oHC@DnG1Osx!!CvBd$on}T{yyog8n*}6jH zq57T=my6=uXZ^jk=OaKyI_t3qNHM51Y76s=Cx4C##E^>SVl(EZMJg95W#T@`&(=mo zM5Hw+BJRVnsgD;CGMr%vd$ZgS?iPlq^Ij#V}_TOTbj7wCU~DDrG1M|`mykl0$< z+{cY#eE~;!OU9+vTWd&i7z*y0t~ky_CO~v5x>8RTaKx%S=$2gmTu@YxAapMnzgZT$0}f*%vUw0bpiD6{;~^73Jvct10W^VlkC4;*; zNiXB!#0QH?vs|#&b4#OGr;Y>>hc_^xoyqhvSYWDNi0xv%?HZYoQ!pqBKab`mBipq! z+R5cbZ12lXF38d<>=|g{Ra9#CTgS&Hl*2mP5K~Z4OlQexKgczG0mYLY7czdJq|zKX zo~zE(((0lv*#UBZCjT-x$&S)HUN5!Blggq_zidn673~ALhEfhDvN=GabuydDg3sN4 zf&qNMDewmA{whYjQ#f2kb8c;Jm-x&YgC^6EbD*Cp#A$n48RfYF7ucjHIMZLdu%SyP>RMO^yh?y2`LWm(2!T`tt~s7cPHo_tG(PpdDA}G)T@Iols$0pjD{HYplMM ztz$Kf1nGSwdmG?jm-BKoR~FwMf<`7spXRUw$tm`FI3@sZ0YOC{g0eqH;8Vpi+${W> zD;fP5igAIp4^YV&wrs|`-oQcT)T#{5SUe?55=RTrdPC)YuWu>g-RnBmvmz02#;+*9 zulm4~YI8Hr9(ZtkxM_@9TJOe}>Z0Ru16LmP*EIR~?`cBm^BO8w3Dxu6ZqmrwqR{`E zB5jC%6_8b%$;{e+K^^>}zrKPW3*8z_ZhoKCshB^SYpzUPXb89$jg8IlfvqW>O7`4H zd=D^pQLk7^sR%Am`@|S7HpONCS>M^4zp&{j>Ie%ys@nQ zXUNzLL0Tj@vH#GzqF zY={PB+_(*;k7E99LSz+L8K&A0iO6ZmY{hg=p?vOGd`O)Jl^pr75=aL1ViM+me|0cc(SH9N ztAw+e^{=JsUo+v)f#oAMnlFaUm4=U8{I8fI8yf~T$Y>@X1tnDkTFNA`*!OeQFwnWn z$+F^cL`hZJHmnPMk=@KT9hY1HwbSm%mCwLa9v9uWn-LMJu9*_si^ueXS*yLvLU|IJ z-kOz$+Q6-&oNiICPb_9j9iqX^jnU=W?eFSr7X5)po?}u5=R**m;T9WAX*jeBXPJ6j zpiWj9Wu75v-OAxz+x0WNtl}E!eu&YVE8~orA-g4Mp~K&6g$@^%78}w1x8l ztRsN09jN7BYfDbEJ04zVa6y_MSo<%$MiZ9-N0MQ~l&td71`y(SwC%tytLO+nKYNhWS^jN-`?ve2nCzZ8W-%xJUy%f$6H>cj}SjS{#Sn zw>1Ks3*eX29BKp_BP;3fN{UKIJ=w1Z(G5&|gho^XQqO@AGdaS)=LaH{(efM-?1Crg)t0%*6$iy>wJ
      YwW(PtiXoGSH(F0J9qfo)#z@BK&Unp1WnBB z3tT}g+B@*unsh2^;;B8o+C#U$6-Myr6QhJ{y6|_B-)DC3e;Ddr4HUACL4O9?58p`a z?|E#~@8vqO%PVsuQ<~X!? zPXugKc!(Bs&zHg?OU=~D!I3xBeJ)Zq-4AocIw>M~y1gwLTs=555DSmK@Fn5`>JbZ~X4q=5MN zZl?NbMXl_EyLSTu#2X#&>al#a&xxfwohx_EZ`Zf4iwz8G>;Wv+_b!a=+y#B=*Z{>V z!z8(f&c;1uQ#9~Mpm3-xw&(R`7b#{e#I1Xkebw+}6= z^24eSB>wwZIc>MJ;Bc$Lb%(VUFI`sTUTIn-Ymmqvn9Xx{uzhyS*u|BUvIjF2s6DK#xj$2en8P6@RO#hMh0-QVn= zfWwicSyon3?7b&IjVJFmFh=SI%$|kUTMv6Xe&x#MqznY)yFxo9zmy!eCJs!0G#;}( z!+d$5fWR?mqPSM=02UcQEq#@*?nD1jG?f@j8SG3tS(l9E#1bSz6tH_14@(L(!)u+r z)Zhn((|egnMblHW8=uA~lnL0QfanmM9SamaaJlE_7z(jBZwFGT2@~pg@jw~h8MFqE z%O-^eW1eXmLp3fwPnK1?VQ!)hK=%8;ui5{Y#IO(1#Iwb}Jrddk4P;jK?4IRR4nY!F zKb1#<0yN*5u!sO0qETS>24Pw&DH(Ms- z73{*N+kBstEs>$=4zpNY?A3M*lqL%p-w81L^{8>8$qwc0ezl9M$c5l5cj(hsy7Hj#DFFj_hLk_cY3U2q}*+P^AUYj-PxA7XUmK#cBM?aA6{DevLf7@ zGZ#Aq)A7F@T+n21%5l%;$03E0-s^znMY+-&tZV8~?c0beJa9KBC-+TO zOr^3RQE276uYC{qk=W}#Zkuo`t}dTX#0h8hfZ(m*aY?MG}! z&A^>V9T__S!x*vH`f^FAFC{>a-#5WG$^UAXMVQ~G;OK8yJ z+^w94klA?ux{_5;2WdKy>#hF_S;5@%bVZO6^2d2T94(JSAdzBwAyI4fo>S_HPX8+i z&yqAx;Gj~-dhMr)B8(q{1?X(A%yz=D(@*QCzZNIUf8hy6l`}mvMIjw};yj7>lvc!v zSc|JXTi7s7#&R_P6vbf-g=o7Se#F*5JhKS2D`4!}rxuX>A=3@(YA&wW54DNJ55A~( zL9eZ2B;iT22WC(FT+kxbI#jP00i3U~2PYi*(FO50!2{M{@IAa^wlm2kb|+MvJXqZ9 zmR*w!?lW3#I;An^IeLHO;^s`kDjA3!P0g~L7+De%?BP-;W39vgX7m9Cd~4DSK-!FB zzL67}3?I;xOz9`kyu!!yD>$DgFJ)SbhYnm(1VU}=^jV`+e-fiRXEL%Ai;ZR>n z7NTCb(v{!v-XMOz2>}^NlEi5~+fKFRsBGCB$rt^$vTu$DTJzz@uScZ4PmJ;$66noc zU05+4vvv(sI&!##;yEFX4E$&=*U+AUD%JL!ciP(^cl&KiC*!f?X%nvm?lkDcW%@Ha z@fSWelAkvU&k}bd`wDA^GQo^LHLK@0V$xDtorWhmtHh5YwGHX5ZRXw;K=HM0h|#V% zk<&A07qVWEjMy-~u;Ou!gmtZv1Y=IMu^KFxSv~aL4Gr=`o;JH)l+;aM+7&cjBH*&8 z4sP8T%C8{|;O=b~jm}#`TkEey1w!%{nxf>(O~aGQy$r0%&24I2eBI?nV0&Us0m?@8 z8gtE%^l%pIP}Q8mynWWaiu&c=?#Z$q#_;v|*<|33!* ze?&^H7*F;=mV^G2i8Gd^!`@B|u7NAU_O+56D4_s<5b9nU3RugWsjm#QR~5oYce@CnmNsHk_9bo@C@pWrydRZ-1<{gI$KqGxSd&Mq6_AqMUlZV zsX|Umm5wFQ)V?SRxHXDnHEF&&uAzY1>2>t4{7c(Xi9Ec#u1X>OZE$g4E+=wB3QE6L zT4I(uAD7_V9N0nVlzsG*mEP&S_lOaYvsdSG({)7hh9XcuGfu#VDdks!7@gmg*&t_Z zWRn^H0?Z!`AB;nu;3vLgW>x~)Hlx+(zs_fYK`nMMq!0+O6>&-9Nk81RFA`+m#0m$^ z8L__lVlx`WNWot(J$iCm?mS#ueH=4*i#4hr8A}}aX932qA@tD$)AtK~kNY;+vMiVu z4;Q=F(Hw)Y5Y&@h?_UL)_C2ZBP3DVhS2xW|nzIf6{Tf(7C2wE-+VfY5#}7ht@ z$x=4^GnD;b(aC>$@Jo_;-@TmlQYR7nzt8yJuAuiww?qgcw|87c1L=S5$UlGTWB5?~ z^{xKb!~gG(YGp=9MdSHw==5}d>F~hoc*dFg=ixojxKGnpU+jvM?}%2>+~vj`D7LE5 zE>L>#VAeI}1gnBC9?y&>;!oA_<(zR*aLoCSZvkZTs|6m6n6CeSebFNzmc{aG{MKr- zO0URoL}SU#YZQd4BWAGV>2l+`*h2}bRW6%U6}5)8L7|uUA9ED*Ma)Wl?#qLUX2cs^ zxX}1Mp=ZPR71+UPhIHCCL2^pJr@?PJ^>YXqczzH!jPk!m;>ckAjT zJRxF#ueX#2Osbd>QZy_o*hER(%d%=B^(8UkWU{oTii3syRFxxpZ$vB-Rdu@kC)79L%)g{hr;w%}S z+$e(0iI>=6oVx!(hT?@gZ?1xzxwLNkbmG`-htWK0v;JxfGOg}w$%wj{V@XrSDkq6F zLT?{$xDdYJt+RQ>PLVA3x7<$;QO;S(`WcRzlMJ!F$!X=Br)`eR|C&V_zdU&&AmrY3 z`oGVkpL*E;!RkL${tK(0gB)VJu`NJfhBp2ktAEx(=?DAa^hGEXP%N=88?cPOWFS9L zE)F#qxBGz9h8-@*gtAh&?Ef_^psl^&+6 zIVcA~atRS?J{uB7E77@i>!My|G%Xt-+MO$2EOV>Zpto{W*g!Ml1%zyBaGgDCC8{yP#bH9t66cJ87nCmoC_E za|&iTXdN46CjrYncNnSaX>x|YcQraPh#jZaT(cW}8Ya7rSF-X3pFP=9xHL1z+L+~o zZC~AR3j!-R%X`*S1{E)@cj;1TFe~2Ko<<7>0lb0D-d->JEJ*RHt^l6Df&TSmU;8Vw zmuN#J&qf&wY~GM$rJvpH1k90nVfKwJEmPa=7H1_WmfsbXr^uthAy4THH{u)g#oRAN zdl{4CDoQlJ=gtn(&-`IvN*h6vS@mzF=zo~Uqa38lmANKGQtM;|)Ma0tScDFXuAk}p zZuTw0-0Tf#ZM!-+`onysbA;;sQJcB+bkOCA_&%3G`ALVUZj+0bb*7BF)m+02i!vT_1^fl);s*mPr)Pq@&D@TnOjeL1GscxTp zF{~y*lEuHUd)<(pmxc>WSQ(84SsB>raN@B|#}W+VNqP9o>qUsvSn~XAsw3ME9qfd{ zK+=feKYZ(-rL=kd{Z{(gw54|b9uBdH^Z0v#^VtU0lMm@+YadzxdUgob}S-P zIb(?4edO+~Rq=GQe?!8h-IS=@pSMdg2F9p9Hu0Y)-aicNA1Csq8}hrdWYlFQfoPNt z^zX_OPlrqQMCH&9hK#n4Q7|`1h$6RVM0E0upLk%^AhHpmWRf*}5B{Q;*oBq`<&O)0 zIu{GuPoGqe$7c!lXu~7)59?tsu3)^x8_Y!~S!|BN?`7e!6BG>_}Z?&Hc&}=#7IPr5HqoHY?wh(|F+0mqN8}gBKIGhlP5k?#9oEwnfolQH^BBSA_dr`G`!5RJS$rfd{ zhSv(7r!vy^Mg(kN9%4Ugoj#E~%nfD9QqNbI?(JP)BinU);Uo~gH)_@T2BI*A)9^z%}AhR;S5lc@@?qz=S;AYu0Kvg3S0Q6!sZ;CJLD%;-9bX|GBJQiy~+oF|F)G zL@~dF8q^H*uF7t-U$RMqCAaB=yn|GE7k1syHN>&Jl)V7&W=@& zDlZE-vQC*WR%uuxIK+Q+;ccrm>1u0eBRG<9dmMeg+a?;Pp_dJjiywgoiFTLa29_@g z>kZc3Ko!^CE*r=0)Mf8}houU5Ocd0Q(nzmc@P}RqTB;6W-@VBa2_2bV(dDM3=SMai z_8EpQt_@G4!ba56j(L^vp8PuN{HBxM)052ZwfM|7VN}YkI7)Dzc%=k6S1sKPTT04! z%dCFhzrnaN({0j;{Pn)gJy!=W?k7xm-YNUq;MPHpfrzYW2-t_y6|LU@?E}?i#ViHf zFirnY7@HUID|k;_c$?$9XD5bsI=E)^N3Q8Mx>TP&IvMMbR%5J%JvO5xRDsfpmw)m! zt-(o7Tb3~*O4^%#;iyD_tIE<132;^YWuVT=hNbt^QEx2{pE9ykg{P*}KlJO33S#aH zJkV8kEl(1h9#b^o%Mx1q?}_Hmh%V9=B{V}X#-ISmv%QKOt9AaczhLjR1=>`dhg;b^v-M1{XXG#bD?*i_MWv%<}%r& zbWMaOZT0J=h44+w2D#OrV@R3!AJe8)c3ZdLH=A}xn#a@O~II0 zomcX`({3DBxTjmE0m?x+Rx6yiO{I#2`YGS5Y9nEt)bEn=t9<|aLD*XO!B>>3#o9Qt z&Ry@mvLT_Vy67MMt;otU1=-qBiBWl}upHT$NQ&nhsNh=8D7jS6uw8Abg$Ofyi8{*=b<1BTwbKXZx#B7T zhm%zYXjz<(w=MeVljhGRW=auVJH9C@vmD1<(#Y%8F(gK0+@K)5;J*64--?zaq?eI!y8E{C^TAdAS)v@2Qgv6w zKv9q@WMnYmD0F5|*x(@E%QAb2K&_^Bbz_bZJ^B}j^6#tuUzma&J{+dcas?q%f>lau z@hCG+`;1cUMzZQTP{=)q^1&=_boRRA?dOPyuHF!Dy2k^FgJg0_;N=7JnYzrQ?aKw7 z)VS9?z(dDaM$OlY^ISb?Wgw}r`-4)(Z5ffm<>;2E#KgQt^I3nlo&KR(cPiS*zE9r^ z9RL(q>n;0FF-~7U+#eNNzJQRM0*tCB-*`N5->`k`OH~ZXE;#Lryq2CO+duRQBYZ&S zulV@9v|+o(B~PLH^{`%TR-OAsHq58cc zHXu2}9b46<(OO666P9-j6L?D8@9gmmE4NiT6(B)?Tx6cN#RfD#D1c_ZuC zc$aIxl8NGuj~wRH5Vd71>v+$}r9%1t-lTwFU-yS*qTz~uD-mBO zXvJc!ORxwHNOSSxOBLTSw0n_m1b|w%Uq^_KV^jWkFlw*bVmd)0$_E)RA&=>xc1kzM zeeuDlQgrTT&}bh~JNK?IJ8;vKJxo^G5SFQ|dv2JOG0DrrLogSPdUL|kE27twT>frQ zgjL&MR8=PFHU%pe7_M+CRXshkSNm*JXlvRF%lA>IQa7YDPEw(n^!lA_$5LmqgO9hs z0Ecd40W?7Gr)M!|8n2)yR#1a_Zv2(;1t*n=)8TUawNthobgDmP_M>lV<2VAlgZkN% ztszU27Oi=DFF4qRM}POi+L8JF5Jmqc(-!u6xiCOi-R)M7{|@l}o8qRm>xB;?FDx_O z;0&{AUGgm+B71&;52u;u0qv$WzgqvF+b;~6Kj8{=b&ScOzS$oa28o67`ZmbiF`xT0 zqufZjOZX*}1^WC4@YumeZm|4y#m!`s)r2mZ<*kdaL5#e{ ztpD^`NKZjTqw=h~cPWvk!}bh*Tt`9zpDW$h_P0HSu9xR7xeCK=zU@-_Et64+wA7=OPlVp!Lu2Y^rREkthJM=Jt1>8VpR;QZbB zbZq+a59snO57QerRbj3y7MHHB1iA;NMXVP942enF+(_Jn1rmK%kf#WR?P7Sx1z$P0 z7wve~Rf^K^;}pk6(F`&kbU4^7Fal|T18=tSEsq<+jWN9=&{WJHX26&^^=e5Cu?u!p z%sh|m!$DI9sgV|eyU6j$W_#NG86A$%6&-S-lg~A3aAbyXdHeO(AbvZZp2I~@ zRISS`6Xy|s0L;Qnz?322H_MIS@CJC`Si8xvp*rAX|Je*(o8Ng~rXRIY<>Jgn4FlGe ztrQ-a(qkswT4cR-%ag1FPTTRlGt81-ZU4TPSa&RM?{2;nDxlWaz|9%0(EuGq#&Px7 zYR927V=i5Nr`Jjpoh%Tg`BJaSJ6AwCS|Js#urCIZb13o8@58|06`pLP^RxHwg*s;o6}6lydJ?ZXb1z{iIbsRK z#5S7S;wRCXWZA|=@~wM&ZY-$cOna~O>`bTI72?gGwJx)lC{N)vtItMaEGTC+5z(lh z{%F4zcKzsHA7(jtBSN#Rh-K`}zBgWmO_BNw^I7q71jVY17w zxA}&b_FDo3EqGzntM{7g&gXYt9WJk7s=*@Baj%u;{oZzTTEvL-@6NWpM)m zb=tM8YeBo<#au|H!`pT4XtGjbyvLVr?UXWewTG7WG}VU}>YxpmSz0kRCpE36KS-EI zDnGN+I|0xoQMKK2NS%{eUK4Z|jHjdC=sxy%s`b%^{8$7@g-)GFSIAoG)1LP}pQp&s z&f0#!lJ1fO5Q}_PBlhN?w74Lx38?v57AAVtMZp!+EZSi1H9R-WlnBPX%Ce&#d@#Z3 zmeKkqxPi?Wi?=w(1=O9*xHm9BvBGv-+`#w$&sq(X$F!p7ImwEu*%7Ot(=PURIOcGdNw?e9dFXG#+EF z^&bdpU!A^Q{DFUV!zCG9ipAQWGY&&*Wcu{)o5S^N++m_07oK@4BIL=t~@uesfIxbOrOME z3Ja<>diFlNYxL3|xqaL4$IuP;Z>3+r?PK_E#*{+n)@+8QvHobdCy0 zIyxCQbC)Ohhj_kVkX=EO3hioy=F@=!ucBEW)Uzo)VeXL7MvSGA3QQbD=3KU|(uOZM z4Ym{v6eI%4o1#9;@U+cM|1OZv3)m}Jk0jsjeu}k4l0DD>WG*ts6r0AU|ZUy3x`)D@M0$gkk)M?InDkJ=B&T_Y(a*}l22yzlF?2#mw2xEx<^3A4#} zu;>zebaiPRgfjuV)ZhaHlo|!P>-I2?<-S|b9Qfdwpqi=Z6xnWk@aGt=?w(y6B>&mq z4T?SV(=#U?{qb@}G%@_y7P|3+@QaY`yFg#La2hnN!W>Yi{tNSqO>z~6WMujtweqUK zkMqO2FT_*io0W%|3EfD#8ck9Zm@}x=VAAq#l7EQSZ|NBYd}Laq^ZgaFl|F#0y&jQ0 zABOmAqq4i3J|kWMPv5yGFnq=rD($*6NdY^JyiJoRC?|EZ4r|suACa-Kv0UNu)~GWS z`ab+yY+q(R{sb(*O85K-N)XHjDQ#zIdfF(BBa+#eo_K7+B{hrZk8$f6?37?jmacSg zVgAS@jvs;`oLB(Ylzu2FZfUZZzxQGUO=UYt`#TgPM1f$n@I{I$3c@=P@epf_W+1C>{$j07pR>>TZKF%u`}QcgspjZ0{J>BNbrb#Nr&Hm@hE zh#Ma&QeU;o%vT1;M4_);m9}t?&o6g-+@3Ifm zR%;H#$a&{Po#(SLnc0e~dMcj|3xRO;z1zVBKH<#`E)v7L8E(ZeGGk!cH0E$0EJ=KH z9YcEW;`R2LFnnr9oRPmUdgVl3xUKTpP6<9?#nA!dP18M})Tm+9~ItuMwqb zP+|{&oO;eZ?qZ$Q4W!j61m;eN$j`TX1+ZNgm^bz}O&`B5t~*tM>7mSu8guyE-|B?p zpE-TA?fg_(AXDe&LWr@bc6ROUC5iV6Dyg1$nYB2OiwjgT46Wo0s^j{0Yt_f#u;fKC zXs_D?SeRDbt%?!6-II8%7SNbBnt^i>S!$_2ksijMt7Tnl6V;s`lW=Bxtj{4efQ&qb zCl{t~da-))3fzXV;De6}lX$UgWOuIu-YYJCTIMXg(SKO@Q8@1Dn;B_W>QHY1leeDP z+}^qP6tOiu=*02v*)E{4okQS(Tf36hUb|gBP}rUeZH5p`A6Ew5Xq zrQQT4BMup?FFTghz3#qO)wjK~?LOjNLIoo1*)G=QW|vLXSK^&NW>g*Arj3L;nMZ~v-p{|Y>MsQIjJi2vyca4fknF>!Uv1P~9c4vYoQJvg}1R!&Aiw5c& zNbKMVUJiXX8y%>a+87cZKD~Zv#zArv+cvgle>vxcyM8>)Q(;ohGda#-^)!7m+4=w+ z*sd4~lL!6X#38bxN;OcVo@BdP9KE>;h-AE9IS)4r;h?m(h(*$v!?zlU|to!-W_Srtc_NM;l{ULPc@hg&{Pg4wIdh3VYeUtDxPKqZ5^NMbEsy2TgQ8OWjeA11Ku(5&t9HW z!B<6|pX=r6@uGG=dXS{`iq>;(@;>C4cz^ktz@DArq}9+E7bCtcEfl_=kHXe-!C_b7 zKD-+D)W1YorGrd|3_}yW%kzO1IIRQ&5t(LcZN)s zIJBr&@-V9{_JPetr1Ydt$uNFvoo6V{c<`F-;?L(gc@g^Gzid)rtQu_e?VL=K4AP6= zm8KQYDZYsW#-#p6B_G(}UGFdXL7Xo+tkimZ;cgTV8|RxqP(#>Ovs?!ksJ0CzDWl;z ztcxQB`k}L@&eMIBfRAU=jcE1~67PvPP*p#@5!;(OC^PJM`_pcDiuvy5!T@&bVN|Et zeK4ji5(b8ZhDM@?!z>t#mYM1HZmD@Ukt&ogH7(8JVW}Xz=e@Xi!Dt!73;iY!G~n5m zB4ptQzE=p6dWp_k7GBhag@sAp!^1w*;08x5h?MdL8jYU zue_?D!7zRlwV5j{YG>fhQEA^39vIi~U!DCQJK6m^vN-_}>Su=6(TIh8-aPN^zON;f zg^HlaYk0tI_#3pjP@v^q?tpAo9W9Vci~=Vt#IV@x2Wo^bxaB6Iu+xe zk;#Bt;h5lf9!`CY7b3VHucO+FIu@xBdW??~G&^;g5+7DRH+b!~ymyHvuGG6#5AG*B zUUL!EcV#ym)2s}BBa`b9trMxd6i1Vah-MkDJmkrs`KELVhe_^(92@#+<8rGQ3T)LI z(-Ewx{oNg9mzGS*%|-;VEPRwX81B#s*uxOUK)YQgCC2N53)A!3kCAx=KTrHcI26L} z-D5}?4omc!;7L7K3U@~`T71=t=e|-qAhKId5@8z=Fc6#-iiJ*n{^H@gGhvo#HJv_F zZcGiN+VkNllVAp6$LMn;vs)nh`1o)vC$g-wSkFv*5Qk5(7x$-_&H{Oy<-J}yY&D_A#Si>UhfY!>F1{mwGwC-&0p)WK# zWHm@FBk+pde_{XszPDCz$Xh?z!O5Fh^JAl+lgjSuP15NBN*@}Xbk~qV)_$d1GHnOaxr;H9gCPYyIb#i(WFvSA1!5pnZH48^QCUWuq?BKPJ=Julfc6C2T zk?esqk2hXP%X8eYJ$Ey3L5zT@v#YO`n{OFKx)GF&CsWx+! z2PJ7i$NpU9C5fOE`{3GFPBb7?t##9?Mj_V{-@VqXQ$GcL91r(=yrcI+%bJ`!g5Z4~ zkB6J(CrWC->uyKCCT9#1J~Jh=y$zTq-QCnpB3RAktB{*3f^MC~wqCu4V9`vOJh(jf zWH|*xMB=fWqged|kVc(GS8@|suX2<5P#N6_6eeb)7cBB&enR)=_v3kRf_DvRVbo$5 zZSihuTTPlpC*lsMcd?2=x+y=M*<_tAcOX3+Fy1eB-WiX&ntQ=!I@o5G;T5qt@YwoY zIw4BX%Y&Pn+qWf+&3sfL7NCzlUv1M`+QQTh+jWz?`wk6mN3NSme9qejRIgjk=s<-JU`UtsQ5%k&0f zY|d(JWgl!aZ_%78N*Wu}M~&c!nq~;k+VaIR^XJ)+g9ph2>CYGPFS+(grGqL?G^9=9 z^JfWTZQiAbxJ$Ml6}2!Go;`nKjn}^!=JE6rD}nfPxcqy#>|-zkdgaP&qZaxr3^k6K z?#Sv3NAeXZY$@lZAeg|4^ZaM`cohHFTTBSFg*WF=IQpmU>jIQ+s7%A#36c+H)!dJ- z-1SfP1XmO51-Ird=8Y}O7>5^=H@Y$!L}EWT9BdQ6!dNPxVl#%E@a5f|FtL+*Jh}Hm zC3CCJi8W{NcIvf6f4s{oim?+wiSv90EN~W{V4_5uK;Irixs80DC3%o;K4!yisls4r zzJ3bxFw%fmUNPL+po*i7N<2>TzSuno^;^Cow*!|XR@;ZG*<4(q2S#j-jy&_M_v;YF z8{D(lp5OF;P9wI|D99)zks{xn?V0~6h!Zz26nij)ZU`}p=75cpi6rn8nD08oH#3?9 z`*962CwFf`#%nhvLCJ6@oZ@PF+beY@c|KlZYHHoXprI$v|t*&UwJ#|I5K-7v9RKWZinPT{hn zi(Kl9p;qdJ$XN0Y(-L7h#snBO8Qc!@4IS^~W_Ym&Vd+x$M+sPoyrV|gSPpnZXkeg& zv8mF3G5>&w+Kzu{%%y7q6#;*ZTb3_ZTAs~DgT&A6?uU9wN{Q5xoPKJt!Zi7P2AZks zoMt^g--u`uSZMX|Sn&vz)x`m#`g%eZiM77*wlLk*UibkxdairR%5eFA;I8fHucqyJg zySO|o*UR2#U7@f0EGZ!)uJW3nmM1szv>%ijsKb=fLTV)W&P^s^?)~ejt(r-FD^U7+ zcIW%G_~c8Yo2@X9m(n~=#2E#Us@fqi)rVA0{S3&Yh*(OECU0a!h<~MGp6Q{}{<#=} z;?k;GxEIZa8^OuAXfhTNYaSjDp#ix+=}ZI_k9#RiSKQ#+Y7-dERWkPb-3BL)tAJlA>Dr++@k zzb$0GVq)6uS&ZdiwG^INoDE_Ra_+gDWEY;6wxytpp+NoO%6N>aKh+1E3-;$sshAm6 za;HDp*)?eFHLU-TuM6F*cX;riwF985_QTRO&r{qaO1G|8M9EXahX|~!rcIdy2}exw z@Ay+0hs@-OmnCq$XKSr(<>coE_pTR|e5CJ{w9I64s;CajH7%qDr7HHpHjJ~p&@4k2Il$_156c#lltR} zbsJpO0GC+l%!XLqkr}?QCAZSup!roq{uhM~D=!uZ&HF0nNmG`p6R+;1LQEVTTC)rR zOPE0&+N4R^5L)?dH#(E2Eqc#DYQv@NOUpq5_75u^R^IJZgl@+g(AU?FCO(8r+9is= z!6Iz9hR)@+u2AFg9NMd$-26BDB*BG+g!OJmQmZkD1;~*k0&?WvZk21dX!?it!eQXA z;Y#aBy4IjlU~VpTAZRI|w^#Cf7o65;&z67J_V7S$F|0?UQTD`fvp=8TPw2KN1EsLl zFhPL7!svV()3V=smfw6(SfyC&na&p8{8aILD~~VR$1)N*5f}EGD7IWYAe6H^PtjQN zt~meFWmV*BX3zOfrTz9OW*8xt)5li80mP-5uXE!ztkQs03yqKSU=i# zZuANH_EcF+z@ZUxb|tbbuQfrF+oo%9x<=$hvtX3L`}ffh2eY3x^B*=}T%9X>AzA8W z+stD~e!Z92e7?r_n5(;|h>jS1&Lvv4}1yu7@? zye|fNvfe|d<5cgw^Yc(rQc~e8=f}p`IPWJe=kNUu{)RO^f@Fn+zWzuyv=ldsRqww!*y5|(HF z1xGc#is7aLT&fSLgGraDrE%RZ)+(qf-`rTFinUZLfUAjflW!{@9y9 zqf<-P-f`q7wnHu|$c5Cxzce;BHpM>vr=;`mmh?YgQ1^U<^bdEN#NM|DT(Fshv}(3L zj=p(P_HjP+;%GV8@!53G^%-7luXe>pWP2t9mVbWxzy0vm`S;&;zCNW~AE zT~bn12jIBOn%-dIMm<@=)Ba5qC+o&-2LDl9_=Wt;aD9L~T(ajJ-F-_#cUb?2ccrly zVUDZ!87#JHzxnPDZ^xPy)x%P_OzZU7Q$6XE>GWGRmoBOomfG7wm_A1f^6#AYVb>9R zJyZQ+#`(GB1UclF#bf%YbM5@QB&N^7gOCg_%CC(aO>N-Ay08I>Ci(X%?7vs%-LE(; zeC}=M)~8slVc~nWUyr*aoYw0NEJ4Z`{N->vIXim9Xq+yxMoe7-sl$!OyEZhRw;o;ZEpuqW= zlBF-gNQO5`CkUsa;Kq`^v_pah_^!TW7 zK}@hQRq$uw2YhaIf;pVN3G}l6|Chs$E9ePo`1g8S(b4fBNyt}%%r~x656&3y3G52f zwYQzRFQ9x+)u|B|e2!l_2?8WC;}%usqgp}RJZ+@t7Rt23qerNAD)c)M|8QwYVINLZ zJn_B}K+0Fj6$m+~P`}+|T;(62auBt)DVC6-yMvsk&W>eO?H2k&vZ}z_|grFoIkdvbOFGIt|Y) zqezP_Jqpg`j3d|X=k(0gg%XBbicgFTt5p(gj=w7mYd_Zc_q<{7nP}o(D*cXe!0)w5 zB|{N39ATlDY5q3F$~?Rfx~Q_63Bfo~Qw`HZE)KyB zNT`X-vFEGIM>-$fP3b7w)K!|a!ulu`y)t7To?shiJ6QBZGk&=8#xw1fM#QV;c~)3v z*hZJ6Gl?5^Bo--ULj&bi=+o|QeS+VNQqG<<=bFgRuMf{uik@?m!^be7e@yJ5@m_s&4n%&D?VDkTdK&uW6$BKsRG(nM9lV92B*x$7fxV<}^9=Rjab ze}|8-0M+vfvi>Pp`i^ym4sr9FR>9D6n%jTo@1z^U@^@g%Xb%hExs)jlfk7RscNd73 z9=ImI{2JXP`3we*5i=Wu1OSpA@6KmUsSck?Y}|XYG-@A`lOvjbP%}07ignP9x=f3$ z>I@e=0KLl~r~BZ96G&qJ7wvl#l3GVLaanw9qVQQC{q7PAj+01z;*UeI5uF$G1qbu# zRM>k%!J;QHg3q#)?fG^WQ2Vyr#i#l9f z;Qd!OYxYek*-kOu3Osty%Ss1see~}GSw95+k+c%;R8oOw2M-I!WPgqmy3?dPdt0eN zqRydebs9|!%UThbnA?Aag^T!)u$5P(b5F2}vnAgU*IcC%9IeIT!fgayF)1$n3Hwd%pX$>RDRhFMMmQ|fuj z0~*~kdURNGR9DOSJkKKg-R?+qL7CK9r#tjfE3UY{v)lo!pcjNGgn?qF!cegppohNK zSaaDaZ;8U2m^CYYKxr4r5-o=`gEDXM`5(?yKc5WWgXQ$chntH3qtRapr}&0(j!N~j z!kq9!`j76Zd_`Lox^(1*yCb9aaa3*?)fD(fPK=HUbUH$qU#?y&WVRE}r2^}fZR=|1_85wqBP&exFBs_8Y-x0`ekp3y#oUuIzH{KaYJ zD{q(As6oJNy1-dinFN9)-H9X}xA?G~pN6}=(+^n;9J(vn5+9~N>P$@;$eU0bb$A_c zgfe8j*aF~ac$Cib)tvuvLi*uJylWS1;f`nhi&Z51+onCl;2D2f`H8}>E2UN4jg1-h zbwOMd!oXu!t7N>M-id_pvkuM;`!?(!HRAYgW$$Vu9D9GqSfs)?$pwBM76$6iHgMQQ zyudb^V@EhHKf~;wNbG9eocI3_1_r@d!NNIM{*19eeEK6TYoXGEyaJ{Xlk(iUYhiG; z<#yKIB$%37c{xFpob+s+cS*C#vQPr#u1TQ79vObISh5Jxqvy}gO5@^|{&38=j6la)r1v!%Q^ zVi_N(?E$;w6((|#JpTRp*E~W;GHV^K$Abdr*|*Eh!b~o=TD*eR$Bl*dm4M(x@qN-y}cUa6PV@XoWv(A zZ(Aa7)QMUO;?|KxeIx{eQv6wUE#UK=Kgz31hre{cN7g|{mhc8ZvGseG3Ee1RvT+rf z!bgK*S^M*kWJX473Y7&9{z+<&6_GVZ0mj=iN!vGu%9EEL9-cN|KU@+EhEzfTloWIX zKqtt%djgy&o|qIM7Y`o19g&~eJ=bdZQ*u055^pP^MC;XhqZ+56W0HO(Z4haT?Q$gO z$B3jI5qBNgKMVazG1=e88e~@1Frr4qhs~!FPY`s9NqhaQZ?#gS6Do5pAs$d}R+mlv z2vA_OE}d%r&sc-0jL1|oD69)ur&Ar?-!-7v5Cpg7eG;?trm-0gY%<@fNLAAXNk!QZ3JU0-{1-S>o-?v%*ZGp{-fw%~4Cu zUon$G|F#Qt;K@H1>_7VK#z2Ibj`4WJ!as1Gew+pod-56fp8!~Is1;W277VOsrqlL3u=C%&r%2>eFw7X-}b4Bky{peglORZ0(F$>`c68Q?g`~T z?mX~gNT;VXdH?z++sNaAdp!g*D`+ajC#oGVVirO*{ST_Tb%2^Iy#*s`AINxdVZ1ksj1%Ng;A8I!5?<~LShlnL z`nZBO9-38m&Sa#yL7E3kzBf{{q$f8ZpH}n|*;Vb0VKVlZEUPKS20vj)sQnp>H|H zd3zvB(54aZ<|EmK#um_UNN#nTrJi<*=Z(YB5~^Z)ogoHgn~f9*SK|0y0o&f$*F}&X ze2D3lJt{K(j-<0WT77VQ}l>ER3?+f=m!16X;VA9=w_RSH;i`f}*p z=~T~M5W2=xRxYQD%Jn&1y0v)T%_67R!NgR{nPgH6230+cNRkAaQNU-HV>wQ)1v7|;Xmh=bP70SXnofi zl(sz~^RWqmU@HGhcJA9n}{+2FbP<-jW7`WoP-{EVz1n z&&M*?+$R=tf#a8|UEMk$bB|{TitIt}tff6;xlGf`Q>F0Hti$sFM(u2T5^Z=x~rEl49#1H^VG8`E~CmCzqGTdGwgj> zDiZ_$WQg$QxzOe2h-3P2&qp5Qh&7`56Wz*Z3Hefill^kVMyH0r zn=0y{-NZ+w@Q#%(?u-IsG5UrXKtE+CCTY%XD&rwhd>cH}l3!*2ur57qYjk@Q%u=Q< z!JgUJM)hb#N(sNG2{W zZr;03OoWgH6PCE}F8#|amn`OC^%BI^@8;yH!z4|~SGSe}K{Q$#2_0`(PNE7R)aVz3 zsmQV4rmXsNBRN(8vvY{bDu!;+qK0%lfD-fVpmyhRDsKSsY-YDR?MpU5U zj&HacwR_^2kJWijcPN1LeSuo-v%F*{`Z8snZZZ6l=RKI6Jd;hkCHCG8+5D582i%Op z6?pE>jkb6AZ@R9(*5@~_c*h2Fd_S;xkKYQ(_==LZOti4Q9o7f~3)zlb%JDpwngU=9 za zYY3BG$NfuP?=)Djk81Z)>k#3z_?y6PLHqMCl;9zrFdl5zv|St(LZHV9lKEQ6+b3*r zL+h|B)lTwyBmVwP`&V!^QT|=0{+Z^70lcqIf~^myn~39!XLDTj>qIPEHgsw+6J8K8}+O8WA(%(d_0Y>*l6AEdpQb9K^<_~nlfPBBNZ~=m~1wI`Ge-f3e ze8RL=D!$vrZ%I-5_K8!TS@C|?8;ZZxACn(@A~)W&VXB-sb`Fwnc^N(~bs(hH;rem9 zI75rmk9HpkE6rTd6eYJS$|nHZF-ij6d8T`F6IWTP^fjyuKT49TU<#Ai&KeYdEV{N@ZzzW zo}62jl1*QwR0r2j7+MZ1&>Xm+c66fq{L{}I907cRW=u-G$bx&`Z6+<++@Mtg)4^L@ zP-N=xD7Y$*Eikb;ATZVqIu|~V?ZNYc4@&ebv>j()NATxliJo2@agJxB&M=RM*VIE+ z!1iuj|0l6I4xt0z$6_+;MVEKLi>V?drVbq~I0(vCS(Ai(n#9WDt%jU28i4@u*qc~@ zb`w4&^{}FqAzT_M`ehP`!D_wlq>HT82oTx~yJX_^w6-hl-wcm+Dep?-yT?l$fq^}9OQ@TacMHmbUz5ER6e!vU@6N!Ai@(bD2) z=Q7>)IPoKecV6w#%S3cUupG&0e!0BQHMo)pRrr2kpW3itSFtQ)b8K3JYd+nmmTX9o zz5WuL=nGir-Y*R#|2-c>0$^P4lLYos%;7$ljXyt5Xq)AulZsaiSa9?)~w`Jf@ozD%Bb$D z^8V13GWS~SpHrn&f-KKMK17aX`q3{E_Sa!xjttba7g?YWkpxh;PR+r)PUV}7y)m8J z7?8$XcZR~6R?ZG@EuRi!+jSy|+wd@1am8HE8xz*2^r8Gnp)&6==^*!bj)S>oLujJ; z!+mW^K23FlGaSbyYDjl0brluL>K%$%W#P$eg`7!oLeHDvD$7QL70YTW)u5hST@00v_N4xEC8dL0(=s6z z?uRiH;_-zBlX5;kBCq$&j(ocmNztyL%w_wfA{XmC;y{- zTqY*5)x$${M8sPL4@sDV{}SQOzkOv#?Kod9H8Jr$c?M}zS@NaOQK}pP@hj9}oT5On z;bCs%pSTZX#$u%QGWfy3i0>G>Ok$~QXi4pvNt#6_ZQN|eBf7ZuLmVW42ocHo`B~HL z_Pr^=Zzg%M@Z`q`$o!$p$ny4etgys*c#&3X_#je9l~V_0#+koe-toGg`kD)VpKzuzQ!@Hz{=$SAJ+q%Tw&+2Jf`w4_;-s_+yn#Ygca zp#K48?>LfU$HF3A9jZP|oXHI%IE_0AX35E>=H+r#Ep3n&j9`*o9IX^PVaOe{No~p5 zTd%zMfmI}pUEWq7X_XIn@-xF;CB&WRM^aNBGy_=-oIs3YUQF{7-|cl(KW=OHj!TtMjKn3w1z#bNDWRC74Mi&ja9DsVsMS#MaJi8{CLBp zgZA#A0FZ46ap3-Gfu7a-s%GFTzKVC~_>5+j$M-Eka!PwtmPdKsUwu@nH;i*GTO z=8grNaXIJ{y0>sh>C0<-_}EU!7(|9x4Bauxasl(|f+@!xQ}^yKvHT3}n!h-RHWWB^ zb%$Z4jMqmj!W{OOXblsE8pW@pxcRgJ>uO7EpLL zrZtG^T~{2F{q##6?y$<$riY%WT03CcOyUaMJs<;NnyC+EGunCdCcKDO}-%^jmlEC44$+ z4BD20x0VYN+mF)E@E^I_mAcwwiGTEv2HvKhS_C~^X74T_hO51CTbg5%T_`)SFH7DP zM9zYgNMw0=C8Wv}ADuDq+&=3z=mR{=)O=%+yK&D}fTJ(Ey7=MEnB9=jog-)x*9)?& ztIeLh(AFnJ#{e3INr+!*-vBfdFrjf59f`j_RTuq=w@mka{%Z$ za-jD)v{~BzavY85_Uuc6*~!FWG14XRJ!*%bP9Bk-#$6*w=*6<)mC5Djrk`fCau2+u zHSkBdCjs{c8g4RPr5Gdu;w!rkCfwpYpxNtyXRBN^)67t9J|BKT{qyXbXa;$1S9>#} zc~*7s9^Ms(eD%Epk>To?rBANgU{A??t^*~R267w2-EazPtVT&|j$*0tMvwHQ_5PT4 zoFfY9GB4h3#ND%Hw2Za}ZxaDL+gR|$b?`vkAq-Nu>p@C%#k>P`fS`vxHy1)=G&D#D zb5&i(t9IG$4vSo0;h#Qrfayf6XO1Z^kAwpBn)HHe++rSI)6GWwOG*8k@n$9CmAPsm zl4)_v7c0LpbG0UB7|IJ#(#Haku;YVDE6f1Uors8w?f)P@JO1wBUkH$8w$6=*o9L`PTG94M2txTyt znRCL?AeqGhDM%AeZ?nF{ZoZ)a=Ec(*M#^oR@R|9Oa^Ia@Wpp4m{o22NPVT`-V^-@)cgJenPcWyFJhnlsWeppenL(tq&|+sQ%v>^ZOe z*-~1H;U-2)zUjW$e5n;GgGQAqa#cu3UoG&KWLFI!eRS(C#bZ`T!Q}W}m{VFxzsI!? z@T9b=BpCkM<>>K}aZjNZ;;z~wuScaDJEPsd_>A+7o)fplu;xOZoEQ#nvVc2}3q4pEEn2)-ad$5TijxAxB}j31hvLO)akmzCcL*-Q z3&GvpHI%!$_daLedw=_$^IZPRlRP2Gnsd!D#yh@m<-c@ zu|jckH1FZpN^f&GG&kbovzOYUy9c~SuG~L_>*fzj0tRM(3Jo@7cMlQpnWHhC7S%jk=_ z7JPqs^cjv(d+mKDtgHhq1zIGP6>-pgoTrPDCZ6Q-Sm!96jwbM`4{s8;Sq8a8%Pi>U3A1-)h%rPi$^NXvNq4af3jM9W>T8IZGxYc)88VMshB z(CM#Y;!QZ!@1u;nKa6(=y_4(BHS@kT|Lr!PW$SPAI;4W1WtlUg@}^^ANcF(tt$<6o z#xZ_~9=~scd>X}{obKG7)DT0qgdjNam$Szsb=J#L>)8rg9y@F8AJM0?OmZvfDIcBQ zx3{RnopfAuYVM7kKaCvr;G{QLrDeOmNRQTtA&#rq278T?0*>QvB=3g~y8Kvz{Wn>A zQ;A$>Zqsf{H-K^J*AOvy_5F+0RqS&3-N&Kjc_W{CJf<&;X)P-n+4-kmCi(GbY*zLV zT*it;aT$MEA_>aiWHqiGsoXm*w4@W|XhJ zrCe`!iQ9}{HaV`Y$hmtuf z3xjVfdzaFoW>3H3|1KE&5@Si-hbrJb7MGAvrrq*)j{>_~VX4iZAeNfY{Crx+y(w$~=lu>M zo95CkBbq$Kb6G|FS@OsZUaB{5fJss!SXfvuu(AF9o}jJ{r@h8yhfJ#AzX^QCp;Bg* z0<+sweH2*99OQYUZ;4Yz%XCG5;gv#<;BaFzR}SyF7#GXw($N-)08Pvkke&X zc#RsX+Xi*>VzWBoU;cF~sb_N5+WUp!N8vk%fx;!SubfA0huLeKmt5td#*gngkivNG3_rn?Or<-xJsP;l z9HQ;<^FDX7C$K;NO)9&7;6qmO+!P!b>uhT&G3TOgNLf@PF=5+jS@HbU#6?<)=?g7@;eehOB*JA0Zu1-?dm&ej#KFQeirZjx9`_jifVoyxz$;ohdc(`1fDxFaPLpSPPF6W-BheU zVJKUf9wbj@JEco5L>k6+&Ml`~#T^e?sX__RhwlXRH|uCu_rGjZN$xcfmZqRie4FBl z!T#gOP()<;YMVj`qm0SLXV&ie9R=@<+ni^m-JKJ>?I@yrBljxL9h%G~iJWZ#^DYV) ztuh(W2jUd<3WE@oht&S^TM9fot!h)*gQfAXHtqgwrry@5@bK&xqiN;V3-qpTajW!< z+Vw~YEMSP=6Nk9B@C(=y&_1!EPCobDl6>n;BPepoUIm0tpoGsWy>18d$9-Gy4_V!`kxMPdt~cT5jw~VJ ze;Et|yLg=f5nlH?rNBcR1i1WNx^9#YXl&RR*=TvBK)d-$tEy^WS3o&O2N3}5YI_^c zHGngE6_wRo$@qbA_IH|T=JP_;M_qYicF3G5$cvZdq+#!Cki_nMKZHFZIwi|j6d`QU zQ<+~V0VtKYM)7}%nAr1^Fsr@8#BSFu-ieSfOpjsWvD>_`ZC%=5XV?@t-zOh7V9H2w z7;+<3zNG49=TcL$4@J>W)xglfxJs2fN`dYIQ>OJzEYkF^8wPm{yMuI&X?1ZX>0>+2 zukH%C^G3kIWNs(U-amW?9?$QTfFOKdBtP()DEIi_cgH+!Z}@zpefQ0;z&m$0BBJ}o zoe#`rfxN@SPOlo6sQ_j!`=i2~`#kY>{@V==s=uPY{}E(rDoD^EtY~~9ZzLZa$_Tel z2LoQjoM!CxrAC9Bg-ll~t*Ljg#0p8PV2lIlQ5_jRA5fO}y?efL9-d6xDYTO4ft{=R z`1m=N6%+0Lc^M$d>;*cePrC8J`nTtFg-I2+YrP;^wwtvmnrxM#`08L0>EpD_O_P_2 z2Lo|MiF{|uAB$8a+#Zn$ZifLK*oNzUE~W=%h1{qAH178Iz4@<-I4f2AVnUCgdPGP` z&o0{5@>#~!lNC)p^HLRNLxeFCPp5nMP9WI2Gk3$E%S9OPE52oO)}H0D_Pvp0^Bj`{ zi=4mlZfqx4UY(c8yW`6Qlh}mnH*otD4q&|VgNNSj=BshYV|4l*Vi9|66J1m10I>B4 zEHn^&pq(b@n@2-Uky3?&$9wZNse*?|guMz1Jm0(61^*Hn>EEJL$g2&6nl>Q#)37Oc z=$F1%DzF@}7--P&haLkK)HX|y%rzI6s3F}Y+8@N2ew zjVgZU!}$_H+pQt3&w#wkV5*p4C&l>Y7RYV`TUyfG&ySYWkQ;*{stQdY4fY!{^u=6t zWmPx)df^Oo`_T$KG|ogFwbV@ zbacK=G9Sz;2Qi)vFC#BBI=?)o0LOH> zE?|uCJHPqdI&FmF7bdIN)zd@H`r+!JkdUjeAo@A+Zc?Yfng7TPQNrGI{qNPa`O0T7 zS0c<9XnubaXtwBApe)kU9hMOL!cxHp&x?fEQU7hd&=x%6%a@P9`mU*P*DXrXGLO`= z9@)b{YwpY&klSFIn(hBXLGVvW`oES;C8&Lt-sb5F&s~mG6n@}mkBSbU|i_Y>h0}U0RaKKVb%+cCH9zeGcyJ3h8Luy zq|28<&UenQ1qEdY@r>Nlh2f655#K-jdr|*EwEnfi|M9^w+Ve!TJE(4%d@^T85V{Bj zBV+jK?ypF4v8P#Hch2;^EM;GXyfv8Uo~dl`KG5#zV5uwk zSnzE(r;O7cI6Wc&P4|cVErRW_oH}zeGc#Xi9e&_68Q#69x65I3*t7)VF6BVSQjMyo zt7~f)IhDNH+2Y7psdp4C)RARsWf(n?Bvz_k8w0o}W0Kg*YgJgX@z?D$4X+p7Ojyyb zF2`jFNWN>#|Jp6O*Z>ZB_w|IlUS-J%-jGMD>^k5je(&ETKHq1 z5BnGs#XnCAvek@|1dOHdoqq=$qwDbu-^QHzO5_xzMWbAd^-sd}X*H+m@;cY+ zmmX?K-)g_h-d!q?7vkmLR?^yZZEq9sZaKwggj*9a!z+-0MwEvg+i@`P`M2cSe{RKx zGnZ&ECU(ygaO4)+4g&(g?$IpD(H0NT#j*plp^dtA4E9Pwo>7?=2o!||6!a>VwKCuO za(1vJ5GB{tI1#SE$|FbQCk1$UzaJT#JEaS{iC=TcNYVdC1bfYcy**jUs|n)<_gyq$ z``?IwA9!qT3QF!<0=Hfg#K3>{@VG38@#L^x^_nRa2D#k6!WO_c++9i5@~oc_e(@tJR<~%Q9m`3(g7*v@(va& zpg^e&=mwgrsuvdMs8GQM)TI=R+0xNR9D$9kf@kM2>PhKp%$Tt zYL_f5@h^EoVel>AM{pp4b0mwJn>>&LBB)Rmv>w|l_1(^@_>_W|k(BvK$%RD-NKVvX z+|bcKg055{r)bx+0;60kDKrcp_3$0#1q+q@uhU z`k2SW!b|qD+WGrc(#map#>zF@3EjsG$qM<*`}tO~U@xB_JyS_cE)1C25r<*3t4&^M zKn_4K-oQ%1%S$vkQM6uPe*vtR1n4i^P=t1CfO}~61Bq@~Q6x}trIbrs>OEM{N+men zdxuBJeo&0sKTx6!=%JxnQC;?;j*KK8RYccM8$ogV<=tjxSUO)$oyX;jGa=xht!JCP{x~H*zgqLl^Esu9YDq;yq{?SJTCJpHKLUa z#BKlf8JCGFB9Ej~BMFY*YH8rP#a1OR7Az{YF(A}PCR=pqbl3gV-IYm^t%CMoCA9KK z=+2d)Ysabw8XLpvem;xwrL=Uv-h0t5zWbV$AjWOUo~|D|y&FBHTz|CA9iJnA_nz(R z(Z;~I%vZ1QbN`exr);MAT}uC$l7T}dLq&w{zYHi^4|s%X8F%}D&~{OxCtgZTltx%cN*1~*dcvG7K zaLbQ-%NL#^4S3C=Gy2_Sb;oC|P0vH5+O-aZSVP4J_h(nm^k1uaKbi8?ixf-0k1u?_cPyIR-iEIZ4tietxDRQ>wuT3go0cB%8sd}?_nmn2&m7gPvSytLeMjQs!|kS zvgx+$aT}PmESP3^wmfZJjf9X0{v_5Ak_US|@fmg6+B@>$dFr$9MLdi!aMHuC+uhia zhm#cUy$4$JnyxD*H1C?PGF@taqLW--0Q1Vt_`bIlXgt~9us0ENj2fy)+Q-yGtaPzw zhM8Vk%i0r0iqqC$juS;Hl`#9{QgL>>SC=lO$1|q%wxkn6GesOmK96jD!t?M$ORJC zwJ0x4wlYucgO*nR$j&arw!99KCGT*)R>3OhzRM1mS``TPV^%KYtw{as_k{TPtSq?v zc1y%IA>g3=m==c|;a47Y%y}w}PXk`tK7V$A#TMet$>2c0Iokd5??EB$4%B*ZWr%}L zvfSSp@IOY9*GDh)AT?kjm;LK(VPP^&MP!dzW6!>CLHx?g@cIe-SIiB1;77 zFQ)F*Rn<)nv==CHhZsaH9gn|>Iui+DUPB?XVT&QcC3+gIY!xrhhmHEgA3y4}KQ_5Sp z0pP>ynPrq+e!yb~9JnYf3o~7Lm1Zk)=OGeHS#~6%#@U%(Mx=i+Jjc6+pS8(xdA?T7 zpD2*cUKl%2HU-%;SV>@F(4BR?py$o%8GQ1=f01TW(-(fZJ(h)hx;Ye;lF{ItyV3#EhV%&1N|9l#g?~LK4}mT8*5y&EschC>0BO9TF#O6 zO2fld4bvCd$eJ!Qo^FvCrwIEzrjNDjoxB(3ZFM4zkAWQ*w81};cyy=F3WMF|YppaN zqY8UHYYkQsV^=F#4$+cS)Bp7|>-sqCC_1+I%uy|^%9W5~@)=o#`{RU5#_l{S_NY6@ zKy!^!N939e<}%LqXPu2j4uB-ywXL@n+I>26^bOx$6LcnGDkN~3+LffUw7e@!#>+Qr zxOh5LNG3ue;()v4b0!SOU=9|rTa+^Zd~8-xRjnbHlM_Fut(q;`A8g)eKbW8K%fw!l zf+dg#wBG95Oey8s{W>Fqkqw~Km&P* z6Tkho{^e`qwHIB)rLe)FVaC_QfetRo0lhKfb03hjoFy3{6SM@JqT z9;mj*WU*ZY*Q)JL9TDM3g$QlMiMO=PQrS*8A>TQswvqTeP^vsnRB;Ak%Oz<}uhXg^ zpg{1V_c>{DjO&1Y;!uq-7fKeNTX*F~7HfZxx^5GR*h+25#le!PF7eU>si}S884sn( zv?ZXYnvO~8cHqX?S;$lpJx_PWvf9OgSX5t)cMmnaH-AJ4A{I{Vb`@J=c~lPL414HC zoy%0jHKE?G3U*R}zG69O>2)}!6xdYiLUs@#C~jm-W)l>H#fj{{e;{R=cplRlJe*}7 zsN`NYUzUd^KT$@$@zfX+Q)1R4Q}4?37P#m$f3i1ROj@YDfdRYqVry{Yq!Z~_p&}lL z81MFu>F&5UXk@%v4>XIh{$p?@{l?C7PuuHWAX19HKio>BMT8Z8Fb#nW3l)Tt5a!^3fp+epIM)02XYHih@ep*Jz0w6jjG zQ@zMH5P0DO$!R7?hEmmHEyY1l(!y%udyp`(lZ)nHqrAtt4xgu^220wOS4?A^?L`lX zN-t>_ym3M+Bik#CfBVv049iU!ChX=2nv4vz`(1ZQ$3!@LxbhU&VzLhj zY6)Yi#J9YHtP3k;#F|0;_EwIpYlC|(;vdnS6HnvR5MPD4$rl2y{iY3=!ACRX7B$rm zcYS+n@DMLg>2C&iAwaZ#sdJ~uL=0z$Ewy;w=ttqVwAH6QPLx+DpOre4 ze9{nKmoRvZ`Z&2l%4#6|gni#4ad5U=kY;PYplRU>DL3jUAy>fT$bNXHINV{|+}P|Z zy`8PX66~p%RNR+GkC1bu#YI0Vbkb1uaZ{E}48m+IhU7?j4g`yvKM95IHTTqDG}e5t z{5f#b*Q|^-)o-DYAvRs!vT|eiOP_M>inQ%sH`}L2PKOMIa-moscOz@iN}#3$q~EQ4 zW=yn~p+OQHu~j~se8QJt79YeBD9KZuL5Ic@TyhEYq*&d_^#lcyW$GWG1j(;!|IQPo z09l-f9Jz10$r z>a=#%782W8s~G2}r+=b0Kt8CS!nJnhIHpxoC>OO)zN<7!D3pvVCXG*o!d8MRQOqUm z#r4jO&|!KNz15ehXSext&21{N(1N9k!ZgCcJex5DOtrovE_3y z?9XN*#(kdoM^I_d!m=o*}VZ({EZo3&J433Pv6h{|)mef{OG_^Fgh)7cwV8JpZ zOc?s0nMdDs{A@{Jxw%&jG23q2leRE^Y9pd_`72p#o>=Uo=B<%vG(Qm!|D{agj;z={ z4Iq)J=4Pl{QfesXA(1l5p4?ck_de6DHq*o&Rxn#~AV$1hoqPm$TWLfI7F=#=xDIM| zlb>lA{AJ4|vk3bW>&qH&J&x>rh z|4ybVnZCKwrG=hWd-Q7uE18OZX-zG$K}x4W3ii9?yN_ktfjW1N`o*1e_@`HG`zl7W zt{NmqilrMXWX$h?UZ^6^ZemSMRF^arvfsJL@(h3gHKA2$YR3PCtHDi>(f0O32rSC< zP6uRNTihx*{g_ZQQo(U89Djnf0)4Y!7rMX^Ix5GZI%~Qy$K7`O(6Ndz%#%%%ycd!N z_Wt^JiesG!!m(9Tu{D_=`ck#(1|EUy`L#^?Y_xoPZuI(}P}jTHPp<-C?PoLxOs5;< z;U5cQNA+JiKxpoT0$7Y0L#KstC3XMB1QS7aCfL;!!Be>9V%Yz?H=qgKGD( zG=A>oEj!&YUjr0@H||6cyl-JWi1PiYTG(@Zy~mPXg9g)TCMT@)$P%fi`aAXJg$y3d z_!JebPYxoU+$Mz0<+v187r%GD$iCNUM{*C(cEDJ&f*Ox;sf+JVN9wwMd3nCLJ*k8r zbakK3V%WFOaV|WQ(=6}S9GcF5Qs;oJ7M|#WfqQ!|s=FGQukofN&z0I7midii7h^$k z<;$58>FTX5i+Kz+i&X?PLTJS5?8gP-sst;(p}RN7J^QH1;X`h}9(6|~ z*{sTtoxnDN+Y<|K7qhn5%m`vv9wgF>XZg`%U=Ts})pE(htVgUNFAApVQrUT0@xayn zH6O3%Wnvw_;Vf*)uzwaZuy%bG^0;Q@XN3)Hb6db2V}7r-K-_fL0m>J37xC+xH;hWr zdc!r=ia+3;xyPzc7)`c@KmE4YJGYq9BL;*<(UMbF8z~bmyazN3kzVcg^nSv<>_C*v zFAfMl_jpwgQpCirjuw?JVrYPa(Egck!gfOOp@mw5p-?3X`El3t>t}(G2_~!h1RCyo zwBMS?w#d(Lg=?4&yGA*1TQ$b|yLuQ!8-Ooz7}z^#Ld7v7!vVbCp9SCLCD7*wyiXiX zQQKyJS#I$yE#0_JU;`Wu?Fn>f$`cL6ibL0bnm-F zIEMfQng-_xZW*=y^!gz3unCokC5gtiue{$mh{8rKHIRWFbmKmAr@Gf^lziejbyLh< zGBIl^IlQ1%t;zDcQ?qN`Q&rVCICQG#4|bHsr4tMdG{O)`;{l~J?$y{;Q`Uj9oo3Xx zCPJb7xuYW(VFNPN zgiff`3AIdA?>4#03oJ51yiJS2cDW6E! z*_8&EAPMyE->(lH>DorLc5CA%h3FMrYpT8B>kQ>o;_d$-RZTy}_}|#0FZONEHDMBW%)5W@m%pF(Z?oI*(cXxLR0tvz0-2=frxEJnD;qLD6Dt&MF?eG1n zF;4As_S$nVooj_ED@vgve?W$Uf$M~|>8Y(Ldg9KoO6Rn{S zqtB+HBQIw7PLsR#1xo9!QD;5PO&e+0k7_0y8_gF46hrsd`&a)LcIREc(-!A3p4&EW zvr*Up(M{@A4!5Nw*D{a^iNH zQI8L|x38bnJ)anupp?10Xj>S{@zyB@@YZEb7of5aFk4mZ>Rr;AN#*0nkjS4L(x<3A zP14n<@FFrRLnBSd%8;Nkht~%tp-2fRyu8r3P|w9~MCLzty_3a|%mjYZZ2A6;1q(Ns zf>ZTt|1-Pl%Letay`UPlAW!bk0;F|y$NS%Bn zM~`m9B}9-D^S_2DR7GQ8=hMOuI8s=p1d{LvsZqsJ-4Uj6uZJ%hNTlEMbSQA~MCv5UfWP zrG6C5e14l5d051a;5e&)!(>7~YxXu57JIiNWi*S~Q1Nm2hsIXl=Hs2>QV-2h!2vdKwnG~ccz9SR-;$d(Pwn2it~z*7l-(}C0o&Aj#&Mg;FWJdy$Q8VocB zEdIb7xei%nIN1*P$~Wr350!6^-XL_4jl)LEukN|Uew%SgSyLwgFhDYIZBQ3`{UKLCJR<5(6P>M#jnpOhJ=5uZ_rf)vGYbM*Fz zr_oVG?6b#Mkg2*qYT|MRn|GrmBO!E7ocVC0j(&Z+Ch8%egEZIqxc>R>qYr-Do7+z2 zbro#k808N%u<;x}fJQl8%Av*T@hEjDpTd6%&*Y@45Ea`^qpFiw;awv|NT^M?)N(AM z5(PwxI8UVPneM5&y!T>me(#Ip3%e3UEaKm-%)*ODA5I?<5!#<`=)@|Kj4ThkL$gD; zgJXtqNgUQ|WiV1XIuB(7!%6fTPy5FT(6-af$h!)5UWE{?D7dDpX|v0LP=~V|u>rM# z#2wk4i0k{~ck1=)^BWH#A9B4w{osm@)9$Pu{eGeDC`@%kDmV>MJfPG7bv)()64BSv zuOeM|DhU>nF4U6mrb6jM6MD=xcs9f~w6Q`>q@BnlqQB<9&zGGPnS7%vwEs>k!bZj{ zCT_s#!s~+AiTa-So-tUIwZKCKi*_OYI$m-Rf6#bPit=Y{1eSJaQLRqNmy%EW&6D(| zfz_dGYMwwRpi}UL;dbd@Hyzx2wfBk0Ql=@gb%U%4d~|s~)j#pguzaerDmf6G3Hv!V z<6u>2)n>(CCt9a#Wj+mGO!E^nL1J4~L+!9+w>an{!$^2vVZoHF1%ib@Ev75SHP1oS zf#<=@0rm9bN97NNA8b%#BvbmxB9=a6neUAnjINDo^5uE#C;>sJxl&dj0HYtVT zf&zoG1z!g*0B;;(7Qz}*ilU7|f{z)2Cs`ty7SS9o8Gaoh7M_I1g}=&0mdqj#N2RUM ztRR@2n$nk2&T7lP$a?#6>|+IcyCtyBK+{C?sIt)vNt^czGD9h2 z#h1>{il0SGi9Wa1u+-?7$(YTIG#e|_n|;~U0J8^T@g zc;xhSuyq7*wsQO6#ObE!20romCSv@RT^1i#hlL5uG^88(+sDb(X~a!n>!B#EPCH~t zuwmDEWanacc8th@%VoE5uKCt;Tp(7!?_%%rj+UHOh9C`zf0j`eu|CHt-YVT{zh8)-rJsTy#Y^N%*fSq23$zF{0qjYo z>w=COg*RZF$H8)Kfz(M^UHQ{^oWYQRmV*=`Ar@XW?UrG&OfjIA5#?)DH)pT_GS}NN zlvhd^0!(5RqVtcFOinT;?${hwhSP1uw-ewA(+PB=VdE`U-KxPVnW~5?k`14Y!Oe#a z^M2-t_VnxwQh5ud9?Cu{PC(@7Wk!Q3*dW$eRb}${-t6*nM_(tqRk(JoM|3+lJ@{K3 zE65S_7~Ag9#qF9tf$cVU6OYLh_B-J*cDHwFm|)}g<WbQsT2@h0k*zENmIpE& zT(@XqrR*KA0BI}LvzVl2UuO7eF1Jb;9|H(+C6e>3kg zZ{&;7_jI?*%4W=Wd-(q69S0F)l0bVg~bm^z%j? z`qkY1Di|v{6>nF1O`uj$B1UmQ(0j?eeoX4@DvB?9KX#SHA=u#W=QCixw;1Nh46iS% zABl?lob%9sqp?#F`Lut%n-Fss(>Yf?x4IhNHskescO~6jH*Y;JYBg*%%9rM)_}cN5 zy07SD%rPq~V%x9Nx8%v{ylzu_yy4qw?`pdo58J3XeSj!@dMa{9ngEnC7F4z#Yyh`? zbx|gU#f6YTV2A$(sLfk6deoGQt=9#H1)MnJ1#Q3!h9MhUN0jo0p6?W4EqquF)$`T4 ziuMoAcMWja2X{P|(su}%R7btafnU>sU5BeX{?KZ(@S98xb8b*j!ca2eBI+K{N393} z8B(sCK6XoBjZ*M$o1w%AQ)8RWKw3^b#OSkNfY37qND2{&j0`{q_zFdJh1Jo?N!8c) zajB83X{bKcbm;SG?97nW;|b&IWqQ-@$;!-$l{@3H>>~S4>t!3e`DnW5&il)wlncp& zv_-a!PD}?lLTIUu|NN}wOObj_YVX1G!bAp8tRZs$=Z6MHarsH&|1887=?Gn-om8My`pxZzxaXk-YAIF(#T9i1=Sa#h@(|F@w-GdV`*$rwu1J>KB>WM(|tYAs8A zw72fRR(v4EAhMd29R9K9Nnlj&@xdj5>t7co$qUo(PAw`lQOjZfjP1_)f53t!Wnt)v z7`QCs(j)$#+<$O<_|{R$MxBYj`>#(yR%H7lZjCzfC2|XyyRQ1)f+h>(Oh-~VCMPG! zD@>g*U%&QR#2VGF#s{;T@HHbYvvjjLZFY(vZ2(qt^Y| zHz9^R$%x5X{g;a*r`PA(TU|BgCRU#%7n-i-I_s?$?^Aq-Pa`8EPGc+Xpcmgqc%9j| zSK$GM&Gx6@%s2cq|C7&4JX^o#S9Z3rUHh|}=ga-B=|rxC(~9dH2$gG@ROsbA%2`(5 z?|ysvS=jChZViaNC+61sWBa1@)CXd#ZMOqiFXxZj+N*cX41PP7jOT~?D@-IWYgs$8 z`p=16pk1Nc+ooNxU46&W9q{%wr{!*A5G>xD?|&`yD%N(dKPThs+v@X_M-nR$B{)f$ zh5mY>^h)!3wlGGR;712|x|0%`cB``WKM#!p&9z;aE>xRd2FP>C>kIp{KAkF(p!x zHin9e+O;2lUTC$}!1V?2tUljxZA%F~wUy~N)XRZO&MNQri>93yCcsRkBC|5fqdd;# zKF`+r__g&l6XQvA5A^4 zeaibT+_vnS(NqpOrslm|ktM|nZQ01C>2i(d_WSFKEeQG~TNEVEjXJjx_OzC4hIYAo zv_8AuLPs$)ggj2-H^)o#5dDeI&CSjHK?i?@_8td^I6+@qn_i-~S5;Lt_ugj|{nh(& z%;YMWm9&(#>E4_Rl+?D&zP>*c*>-_;w8~uNq4V?S&x_KL75k<7Psmtr*x>UM@_B@= z5|Ws?3^&A^_IKOI^ZWWFn+|@+Z413_u5Q0R&*)qKR!FSJpq`!4xC^>%(E#6 z*H-zkN~?g7_nof1OJCex5UUX3B*!^IIT@9j;JSC7%SiMZuZSql6w_g%>Md;LOWI$?9G(Ly6~W8-|~ zo~79DaX=dFFQ}f+hpVJI{;qu~=7Xs-rOtHd#QZd;%{Nw|;(1Q}y0^$Oa<^v_QNH}U zJP)T?Pf^1u>|E3r17hfdr4=Xf=ui7uowK6%rzAc~C+(-ip8a*Fswr(pd-PFm&lBFO zzcPQVuDC{(S3D+-`6~*ZNu9zG5egaZa@1!LGx6;2Jl~RZL<0H z4GUg6g^+CS03T1M+Ok-k3%!hAG3wPneHyy;JEJHe`b58aKg+ePBy{HIxwhVK(%H02 zES82CiYs%SVBaj;_V`R9tL525$fLSy+|+)5s5B^sE=a21dP2Z<8qU5&ps9a1f&T1& zF}<;C%31lk)cz7*DD>N;3A;nA8DiesPe<|o`o1&9rkQ*HST8#aEV-SAzAr~%-i@@F zSkT$`=n9{0`is51s6l;*L4YEO__j**pAXhj+3&Pe7g{Xy9FjHw>9kz)XT$7DNCK7( z;1}zro#VNmsV8uGO-(Z3$8vXRW3jyD*Rwp{l?63l=bh0ZN`1fHgeGsWgO$td5l{75 z;9HK2o@h(S<%jCLiWcfD5BYlgRVty@eY2*sYs0}*a4qxmQaiG{-C{g*tD13Trp-o= zjMHe~8!It=PrC8$v30R;+q;$Cj4knFLbnXFR|3>oPt!#S+^bJD1lwysSf^(t``A+O z6Aq&SxxCVvz5ivYA7%re-y;DnBV)pnzjMC|@wAU~<5bEaqRgVuRZNuCtVWwxM!Nf` z*2TPWSbU@7L*1`m3RYHDbz_A}Sutu88v5H`|F3F}tJ4a6$&-po#Ai1f_@tpr$p!W> z9vyPs&2UF+*4j5Fp`0tVWBP1f+~54WGvqyY785e_VsBDQmBxGj*Oc~N9=D+_x!3zo zl!C3uH?blxuB)x?-2}J^V?GaRUX*dP>)5#pmN%wS`kwUq9wOESMWIu{EsfBDhSvug zTdupz@ln8K2i)xxXY)Z<{b!||q{y5K{`Y(9-)>%pgkJOb5tlp>FVX#7T7B;6_0>QT z1e|+cYUlK?LUcf1JPS<7!pLtmJ3n!ohBbj7@IsheUH0@2#Wz z&#vwL$BMX46}WA-w*9d{0;Qx zfybb~9lHY^={TPns3tQFUGO|qX<#!-s66vSETdw?%gXArt{qDuf*s3xoySsHTNqQD z=G>2Sk8hn{-|S`r`tMCJ z&6y_YlPz1y%0K=wkGTy0w$B6zo^3Z7rzcJ`onlr%wV>7K7ylvHsIMh6->P;-MfE+Y zrm~XjD;fDYdth24tmn!SQ|5h_vpVVpFQ?cc*$QI<@d3Sb>mW4 z^ne3$zRU{W=d@~{1vby!rBy2b%apMLUS==YxeDzf>s7GJOqxP%|6Qyc)6BI}*7NY{ zz-PjwP7aHqM5Y+)nlyOL@3uQGtFEutjJn)oK?biEaaji{`nTf5FvILiFZXX>7X{>A zj)F)MqkQqg_C-EGz!+16UH`;}7uddrrq*H{zbhNt-usB3GX! z!H*}_+po}@sx~lM2v34fF;T9xO3bIP_Z?Y#iYx8+)70BhFJmN!eHccdO$oEnRL0kE zg%9?>A3m&OQXS5fCuH0OZ9WC#x=d`M|DE`ElmrU5^V^vlSRFCid&=33V9F4TL2Z6% zK=)aLtv2dK=6RQI#*#yUUw99%Haj?;cTu_uCOh?9B{`_w{9Vy1S?+oG>7uFqRsIA@ zXL0FynJq0cPvfBc_i55Ws?|MVn}tJffqgXd`dxVa4QDAiuK!s#NzCo@I?4VV`dvZD z%UA7}TeFhR+G1Ou0cNp46Cbs=4fDZKG1{G#3@t8~g8AWH;aIs+1#b=H79mmDD{45_bYy{XZt9Nv}Ulu7@LY!=WbxnoO$&Ib8ZExggYFp34 zu(5vZd=+!ld$*Hi=qMwQ%C%#XwVZVraobWx3yECOF5llpHTAncakPKw3@5rCEt=~e z1^7?N-4CgV)C&4PvpXQInC|7$q9oop`e;B*AOsJwb5t_o=yI zC}4mV58OuwgfyzQM6~!JRtQ#wL;vgxQ8WitG7MY0L#WUXPtc99whDaG+K-O&GQ8tn zy5PU_C`hReR3ie?2lI#oSTBGW@@j!>yA4(<5J4043W!~Q1q@zEmzt1U%9taQy~BOs5Z^aOpvf-x`}XpZk#N$`XJGkS zcHBM*tS@~{{ia{t?#qH9r&RZHzzh#-IVXJPq$OowLK+=OjbX~zndx^-`;UpXu=3xohbSRIg{%pxX1tV zGbQ(P0>MClf(}A%(#11UZH`b*yVLW8E8P$Z+&8t7cKFG1wWil)H>tHPaR_3d1!lV$ z(08apiTkV<=Ah0nJDVQ-48jOYJvca~uMi2Ji7HF3#rK9&mrje@Ij^+WEg9zZ%iu52 zP_WBi7FjS_sYQ2%58VHp`;T6j+_pEgWg&h=sz#ix?HqznA`q}nk@j}5akPrBRWSBg zbwSk;dXHY3jNZ|W{2D-i`|^RsL=VEapJMoI0o%K|_=yo@QpaRDg#vD0t14;Uhzo~u76G^e1u}t9mpujc3~bCE z4A=9N3mo1d(^PI&g2SX5lhy^3lF|!#a~C>!^&jm75*#S_{hqqK2B5(d{I* zLJ2a*s;7=S#)^`f#z{03sLgP7SSxIUaApHg2>b}5@1#TOC_ao>2wq?2+T42Ar)je7 z^cvja^c$({acz9qD*on+c}6CK+*o}Q87UlF5~;y}b1@HpK+YL&xU0p3rDinbMWcj* z$3EVM!KSJy?IY$5izG+)G7a)WS^T5;sTblvgmcFs% zJFelJ&@(bTHX*RUT@CeEM)dGN5Be2vPOx-MWZ24J{4A?0|Mmuh?}qx3VO~W0PrMLb zMHK(=LG^{X&_0~s9gfTZ77^k0DLRB2RZK8M2_;Z-sou{yi2v*io=1I^D&hUM(|&K< z)=^U(RyS$FICN6b2ZW|Zw6912C*gd(!hY^AyYRn+tGh^Xt+s__j0^xB@Sc(Oo%O=S zKn#R)A zeKj6==1(+RDEtBD-1t$HR|Xmh5y|+&O%JA;23|+WP@tjxn4$14DaoR|uMI-zx4KRi z6MT9l9wWnB~pLwPsYWuT%+c@nIYk z>XuPQHwr(^n*(&$eMwJ_U}LM-RKkk+mqzN@vP|X|2WzvZ7JHk;{7CIpdIwJ|E9!!7 zLr825Gki4Waopr8qZ&ip6Mb>c4t=Gv&raYT#q@(; zP`#e!AW`kizBp-9nD`MYEP#8!X}sw68!Rb;8x|WDF`5T3Jy_&?lzxz!AwwiB7%j`Hp;#QS$gxe0&Q?XD4{?F5_r)X=Uqk5 z>lt0Vewe_*m$X4kgmhJ9Rk`8S66|`U(0^8=voA zZv9EaaG68Uyj%n4m_5#6(16_H*sHL6cn2oh78FC#BykQH=JmeaArU`REC{L!B0AIX zwd&T{bp?N1wZK_2*R873-zBPb( zHAbFLG*^=cYYuDG{>@VT04YCGk0X}%M#O^|284Wy0{ToN#UGT^2%#8E8*CQn=s&jv zxcH{j=@%#2vMJFcS&^1pow?HN3>$mjfxmvF_>zO({TuUaq0upJ7V{{N|M-XL5G~@_*5Y7vv>%KzEZYG~(I+U2(*3D-7@R5?}8yayu zUJHj3|9NAXb_0$pz;rm7cOQz?`{}&jWcEnwVwio*z^YPs^AmGL?8OCJ$+t)`Qe&ye zj{!Qwu?QqS%4me#q!8v<{o;H`AIzj(ZzDp)y5}eQ+a5}S9mD@avVndk>BmmEx-M`^nvN`TTwJLsfl7bt zCB#l*d0NiU%``xB)}UT}ta?3#kbzgnVQh{Y;>Z2C`aUYDsj2z7xuR8i)muC*?B3J$ z-2AEvBMKMeLFhS3Trw+ryp*m>4fb)o(-}0<1LV;y8hV~uv*lWhQ$`H>X0R1qG(n_N#)vRIC{vEn~r#83Y_w*x&CI z*PhF4mg1Itp;_DIvX{5-VnT5Cud7#3QnfPD&azCu<&iMyJ%DnK8a2}Q3N}U3B0y!I&6gbdm zq%90*f~aG{bdyvQa4qUp@n}YP{lbBZrWg5aGKB=J-%W+#WrgYXN(Kk;&4*{8otNru zqnTB6Aw@1M49mNqb~`sA{T{)|ijYHoKoLyveQCM|jfx?bi9b4j*n) zzBYx=f`ZL@mVpwz?00=VPJXs{C}ELhkwO|Bfbc52$`|^J*SnyGP?Ii}hGa{dAxMGC zvX=yUuc1T6=hpI5{H&~IG#*#a16r?=NETa@O9lfpv;~TbAFo!dx4yr4FG~l$sc)do z`Bh3#Q2$w7y(fIY%y5|&dx8tZ4hQdd+Z9iK zzv^9y$RDgzdY|_u$og5LgBX^)9*-M_TG)3iwPKa92(VnSP7sJagh4y^yIB<;_R#CL zc9w~kxS18=yrQ#F!sH*3Zxqwe*lwods^Q^m!7WXyTAvEx!tbXA?4G!_o{nnvhCVI! z4<#|ex zma8dqPDk@qi>LIT%ak`1j2e9(-I|W7hvK81AYI7IsJMkYF#|}4^9Q}melV_Hwtq*Z zp0-rKx7W&FS;i}*7?|}h({cJrE-VT>&W~MR1Q@XR*`(-ryl~S-)Pa7Qrse0-P~x`O zrG}Fr1j0>r?pGwx>j!>2c4}G+eCuM6&-KH^s6UbjkFZ}PL@m~k?gufNR|I#Z;Oo<+ zEYx0;$MYd16t1|X4QKFaSXo(r)N8rZBBJ4;>=SMUpb+B8$;qvg(QD*te$rw**AyL; z9Wq2ij7xo^8t|x6=X!=R>qw3Y<}AYvquL4##vQ1zd#xMJu@8^|_@NWmK$zJD@jlr)?BA73W9urDGp+Z(17w_b z_2WAa`#2?P8L!|Rzj*FX7W^Orsk*u*ByKFKR&Uu2dEth z*uBDyM7xk5XdiEgp_&%LTq9>XYCm&TjR$F|>ZEoD6Bo0rq{cXIt|h#20|*0(kIZk# zmL#6=?%FV|Zz!1+&12Wb>2W%#l4-yadNZFmR8{mS6(UArj}Wb)(^9{XQY^LuW_#lE zV@@SyWI|sIl|OyTxn|O;7I!-Z|H>44A#)hz*`=WcR~iNt#(kfnkS4Hr_c}n@Nm;V< zdr%180{41yYRIj&-icj7{nY}(y5c_kdgEHRkwFqxA0?q1Vc|ai)IsahMm^m<^oQoX zLWk7b&)uK`NkkY<)1+0M>)e8M{JoAV;#mXDy3ATqOW$t*GtIrLR?;@T$x!}ORFgs4eP_Ac#HHbw{M?FI$Wg3 z1e4;zn<(R)*`a0`d7itt=$P6GMan)4T;uZf&E{gRmUYxKUZyybr?qdqt;4j&itbLb z@o*szLxZw49_kh!LJ^n5cob)12qEJDN^OrTr$BM0Ia;~cWyUin#}%9+uYC}?qz&I( zitS>pjDYO+cEJHpDv(yyD`L+z?|y|#)46&QMo8jro)13>2imwUF(n! zR&T7ovOJnt?7-}|CEsJBZ4s``WPYd@F-ic>CRTo-do|KnTK{j8nt3mDVbG@H^*|8^DHQHhqN0 z4QJAvLq&(4{SEAvfrnKgnB2I#q(<(-lnbowjEf(|CarN^L2DHw+$s*!!$JF;{zGlD z%l9YVlLtxv3>sTJ5Tyt|31~AeCPl7{QlSLTODh*>;+B$8tUO}uKVjTkLNgegktvVL z6j6D`@4>xSmq(1Y2;fYI@qJvXfG+_)kN2~gu^S(3ythH;Ly@V)6aCHWjyB1J6>h?I zl>G6O@GxI0WIMS};s}5>O>!_Cu=R0p%>Tt%fr3mHaCd9U9UEjMf-_m1_b8AhL$g5D z{i7b=jG>#}pj+WBAS=Vay&45+0n+V4LSJS`F!fxN*IrNp5FU{nki{6KN#kj8O$G8F zA74>jWZpB7;A}0GD|o$XD(dD|(wA?KyILTuzV)i>DxX&7+zWH$KVj@o8W8?>1%!6}A0o12Zem_!NKiit)KnNq(SsOg90In42jpYlqZtrd zbQ>s=cU*RNJyfg(OYa4E-8r;k!6;5RV$?w=iUV)nTo_8}SMnoV3)f4Ja~r^;D{!X< zT|=sHYP8C5Pa<9ymc#e-Dtt0#G(&7<)O$#rQ=jXDZ1Yf#k$T9YCFGdGNZYxir6x}-F!d3 z3S$7*@#M%nwkMbTMq9k-dQaB`vpdi<6aggF!D!HZgU55a$k|O6jlH9S3yNJ36_9j+ zL3(>ixFoCdYfM^iA@K~&bZwg#>Xfd~%&-lU_keP?le3f}TINQBbU4Ge>n1j!T4%3Y z*v*pQut3iUSK8WKo9{A@mt*i^`KaTTc_5BI#0{=x;{dc-h`V727i+stg|pG+KEqNa zcrlNOw~u(`M)>_*L(Ger$K!9(4w0TfRDfYe?^>V;XV5lJFsbhGl|`pBy#HItViwZ4 z{$63aSW^7xVKkr48cCRrPS!n?AlgGD@OR-@?mb6dq${ZXcuJ9Mc~T$wO;Qk$*`qX2 zkis&2gdW=l&D1u#02Lqrh~%VUk4oA%_QR`%l|jy@jDGK>68OA6fN{Xm)m86uu)AiH znK=HLLI}tojS*{t4?0R`Dj;4|Y+|{_L!@0Ig!f$>Y;mB<1hGeGbkIbH3lCQN!fwtp z!4Kx(w3>U*Goy5J5`QKbh{hE3k`AR8v%n1v5&X#%_cnQw>EP7n+d?N>XP@wvW@JzB z{m0N#7*<098f)(H&w^@9281U(D@(vS+rp_z)0KE*Z%gK-ZnqG3as%Q6G;!X6n#cgm z>)?wrW{)8lmmEJZ0zNS|A(*n1ep)QTOl;iHmIYnM&yR+HKk>`BKZNBKhNL$;%z+f+ z=y2SPT5F^|*|3(_Q_3w${f+}np!X&Cv^Y`{STxb_M5JT|;BuCMb&(;lj{`JhZ@p5? zW?a$A$QZR<8=hh|T~M7W($r(ey?Rj?nMN+|`#?`)yHf|bvl(g=^k zREs_?f|O!jq>ZzYin^bv*02^$JY0Jtn}^HCak?oD4C{Ayt1?H;YkC(=SvkBRJq~E{ zwVshxSSf>X#OTbcX#@+hi^p_*tLlhKFhA|LLDP+ty1g_tC@2Z%IuBfn5g-kx>M#?!m@HqyB z?Zv+CRWrjX_W5|}WiZ3)*xeh_OUQ1AeCQn8`cJp5d31X-i|a>qjrAmx%cbppFRpu5pDxr z=*eL>Zj}dyf)M&qEJQpa-?r;3(%t->yia$v#aD{W5%>QzSh(>qz8eTc{a#iK$#ftH zA%c$Oq_F!Ka+}6!J9!xRmT4T_iG8F{_1lU8*I!erkVDo=kiOqHbq-X5&Zzf2K_vjd zJaHKU>=tV+oz^;_d7QSsPtVMhNP2D1Y`(g|BUR!$|7R<_k1#SAxs%kz){SP}~QoA7Rx#Rh@_)~>S zks)~cKAekf8`3<%14A1%h2bHk2L6L}-!|gJy4@#UPbJ?!At%z&&p_~+rQYlE@^VNe zBx%3$@#!K_il}9GW@3U2GCb%`oT{6+s#`Q;+pGmX`Stvnvz>{4_k5hp;Cbl7uc$IN zua!H!`QPilrUQRpIE(t9G1N^1ldTbWhCUQ|dwYA0Tv494!}eBIs-mAXHIpfX3cs-; za8W1`-rWs5Np>)-PW~dU0rGy))-K4;7YAX<#J-6$92U;F2mIKt<;pTiDci3yuSxMr zHmhGERalBJaeN5hrtLPUPOJ!BaOqCCu%QT=Nzi8^(RhE6MJCnp&`(!y9=0IW(%{~= z#s8Py{<+x@WN1@E00uycFj-pAgLMQZbPU|;{VBu~g|I`qn$sT40GUGN=`z{s9Y8l8 zR7HTzI`P*4A%x->@5Bjj$8pvq zHEWu;`GI$r8X-JoLJqN95z3*_unUF9w4C?-@Pm9(g0Y|daW>=snVj8=6mEe~MUcVG z96)YanLLDLiVp}U7Wks)d;N)$W@ctacJ$!zFgUZ0R;`c*-%yJpG z4Gs+@j4Nab>RMS_Z?AO*RhtgsFpB9yD(q@Vxol}|t)>fz;CBM{m_OZ}SKBUeQu0nq z@X_=)TT+8&(s`WY!ySLdnxc^imet1sszzr@HRL2Df_D@$`Lz<6bm=~Q`Xq~N`8dSf zUUruNO`*Wh~ic}8JL24`Oe07~U^FUOLa6$#|Enx?6X;H*(V0a)1JE`79|1Tf0k z%)1@%LD;242qBdPj!Tan7|9gSo-NbLYgA@l8ocrNKuAot6`oWRvO=+mI%g<{O5Uio$VaRmL4sctdNP0Z3$U z@547Q=D(yJ;vIh1=j20`V)Ps?bJrJ+pLY|J&!|}`EQ5DBPkfNm3JB~81Vr_O-Bbx; z2`<{{@h5Hy9B#=x@yGbjmFs?CUg~m+KmYgqxUfBqF1%v=X3PovE z0^mxzNb7hgbs4eBs6%G&3S+*WrQjl=nihxQW@(`xW^07QML7Ya%n*#Rm}a~A7e&Y3 z8+#o}Bkl)N32u~=A?vB+Ni(g%CGY_lVw zg5DNM$(U)Px0;lF>xtmCKsYqPkEKa8^u6kc*^3UZ5`;g<<=-wI`;K|M^+8}zMM%KV z26jo22%y+P4Sz-Yg#bd9%)rko5bmi^q!=3rOp65ec@=jbnexmkG0^t&%Am=p%7CS> z@b2Ve`#Hy9`{(}|%=!a*D;Wl~7WCLYzhF0<47s#NvUw&ccz5W7qtOQtjxp9dcnX^q zY9#iJSpAR(+AMwaQ2bVX0LL_FT$kE)B1j^zx5H~hFP5#GV{@7wb|`jBp?8}0kn=I6 z-#ctXZ}2knfk7eo%($LCV=L@%gGNd_B3?_ocxkcU2_?M2K$oyc<9Ok~SYFklnr=;q z`VGvO(5p{*)Pm3r*h4=9du3DduQ3USFXZD(4YCwxcP7#-(!w^R&1#9o9=0o@oz znV3|4gyYF(J^h0hO-0qy#@Ao8!XW#57nb|{PPXebxs&Jd8pXS0({7HVi8CF(pz2TF zmdUly_RAKmnX{>Ki!)gi*dC?=vqQ8gXrZf_A>$SW=P>9s9UC$*z(?EM8S$678HkgO z6F9;u?E%mw)x)zf$S5dUipoIR#HKPv3|Uo}*nN^Z$(jC2tu4uk%;w@DtcONzGcsMq z_tX6@VG2o@;yYSAiB&FxmkTi0m(@N8h672gT7$}ooi6N!x{^2wiThO6mNzzDng~-g z);DQo{r^pv{`zr|BDI1G-U24YAW`7s5L6koB^YL6qW9hB_nR;jo;(?NG5(@%{al1e zG-YpkZ^OA%OD7Y*tww#CVy4#Q!>OHY&l`a~NjznFUl_F?Z_ay~VmHPxX7E5e^~~lZ zjsKgb+q>`ode^tW#u&VJ5TFOB-zA#uOWLTjoc0eWxqDJje+K_ZPVY^$t12L%t#15H zY#jvBw((-%Y&zLy%-X(KO04KVv4lPSrEt%gLfm)ns?`iiW$Ke8lwn|8*%A<}LcEep zT%exCZD|lRN{u;vXPsjG-;@JVcuJDm!Ky1Q1c44qfh4y(0>;B)G5C9~ zo4$UK(Bn^(Uf}tsh5pwyrdz-@+guY3PzN#mV*m8HAhg}HE{C9sJloXN zE&Vk9EhW12tCje#Au1NOKa(PCkI&Oqbxzo^u?&Wx`8BsW_`oha%g#cW9Eyd^pkeEm z{a7kM1J5Gc6=X}!DUTGJ`r{uW<}&GmxLa)BDX7x2{P|Cm;=!ASX@~zY zF%w97XKQkGNxLfRVmDdRz>c|sS9J@fkO8|2~sH|Y(Z|NlxSROtoEN6S1ud@H(yrPGbzPVM(e*SS+ELV zts|UF5OdJ(Z6p!K$2)#d=c3FPndnM@M?-mv730l_JtI7-t!Jy}{8{<;Jac;W9~Wu* z+YW#qd9AD2E}8r8O_fUEy9jBv3^*WCJ|k9d|GL_7G#O~0XP&y07oUxm{cUhUmxaf%pU2nDwI%LCCLv!^{EEQ#Y%drSH|LCOt4E zVP5$juvoZC*ny1!YXRyKn{QIhs_$8mu$Zy%DC8su@#4Ps8jS;e1eYYVW^upS#nOP| ziqClx2KOYGQ?TTC+oSu<6B|05hS7VXT;X8mn?5s2v#ngIa$?jsnoN>j^zY z9e5UqEN+Ct2xCgQ$uk=Pb@oKH)D^YMM$F>=_UA=Ze+u9cKLW$gMU)?4p*xobX;n=b zNJX(^q_z39EN_LiW0Fc^9iS@6o%w65mqu~~X*E|@Y@<&M*+QLMUuw$q()XoOTF(d)qe?AKl$2Po zD!d%w!UB*w&Jy$y@sKVietj||Hvc9m#t#xX%Sc1W4e;DL|qSxZMT-Y z(896`qyS>AwBGT&ok zq=BO2rSU`r_n~P%2-?b`lffF3*}nU^#pi$=i;IaGi|dpuaVL}CTrC*CQLDW|$JEM?u1vRUZ(!PnQ{X2BH%2 zwAug%>0YSAl%xQeb_+6FKJgHzANM2)PfwnyaC$v(NcAeods92OX7|Lr$QOo+1Zm%6 zlR;rv0}N_W-CokexKmtqtQaRx0V9HxRhS`jC;8dMiu>c4%&vK*fYjV3bX&1!HTqbd zgs43P>LZI{o?w@4f@&H$q-(X=92;zRmtR=l!R?8EgRu@cQgJg@dleXAL6D<2h%U<_ z$r8ybLg`{D;uUhREq&UcWvN(ZzB!mkl2n7V#F3LEqf{DWVt0MADS=S)`1QD_ZlK4c zH*W*y7(O_fs*zvPV(|5Rk&=o^N?li%+3Odn*pZOBt|57%Ce`#LC}AMW10%><*d^i= zx`ly(E*XEOUyc*V-&xuikkU{Xv6ncuV*a!nR%?CmHI>_=)Mld#%F{2AJ0FZD_&lR_MZ8aL z_d=872t69bk1uFw5Cem7dA;CoK4k6~sr()RAGBh_r+WrnJ%JsMg#V=qtbzzZB8wqK zc2#p2hv5)H%4D`(Sl?Pa3*<|UC;q((NHvno z!6hS5C8Y$g_Ii+mQ@;2-cIiZmDxf)P*cub}6O&pC70T&>!AjygGCty3lwP{TQGfS2 z1vST-$bfTkcW5NBmwpu@D!r!jgfYFZrt+Lr8ih(Aa|W$Wj%FqLGKOkwCW;W$xgJU_ zrf;+>$`fS6Ngp)j>zie{&lXGX6I~moC+F#Zppk&^7Ruv}>I!r9>rPi)B~eN25|@_= zmO6ZzK<%iD?56vSx<8H6Y!;g(!o%gaUiHvwKfXgVMP59MA4_u^33|5!-;Afl zaEMt^%{_D7Bk%l)?-I?*5;gN(=jPi{J76KcOD{p*b?_Trhw^;I8XeMj2IU^rWpm$V zMPMB>)HK$>a^0gvCY5Rb-0&-!Ad}aLyeQ~vmsdhU68E5#>}aWIF2(e+ujKbQ!*CRo zE3iH~2RpkGv<*{;Z4B4ulW4xzD$E$R!^N-KQIn%YfXYMuQxs%tJ3YNfdu54nsxXAH zi(@qQkx>iqE#)&)zh(&C0uyYax?f6f(TCD4zMXwoW#?!({IV*0ARY@diVTR}dHm60 zq)P&&*7-mThl{7iYCTrU^u^(qFze%96ECR7PPqT(K48B1>JGP=s+W`urKozh_9XMF z@heUdq#X9Nj=o91V4Pz}beG&8X zp$yqivtigyENx-lDGc(uZ{Uiwe3^E-Yw$6e zD9%hF{zEeE$l`bUr5cYkNzv8e2u${lO65$QTY!UA(o~*8b_5aDvka2xf`gp_{~EcH z(pc?7s>SBF6$;a-{kj8{kOg#&njuPcOV*aoIJCq`m0MY*p=gm zSLkrW1_L?U0HiCYTV*;Mf~!Z=)-#(mAO*O?)}piEAEk27urZomhl5V}D)H^)K_VlrRHQ$`g2 zI~#7r3@0ooA?I5V4t9U_dAY&Dx3Eo!Pw3en;1m(45ABo&b3Y#z3diEKraSZodmeOp ze-xw7Bl{#KtRU!^M6ky}#-sm`CBGw!s>pV2jf%l|d{C%%E^n(X9v+32;;V^d%yCDZ zjW!m*czevx-rZf>OY38OiZ|RKZ`A=Tg<2K*zJ>e2Xhpk0Kpy7Sy9|7KVJOLB}}cHk%icVH(1!QS6g8isOm zrBa>7j^@3)_J#ly-?p@RE+icpBQoHF@dUulojpT9Fjedrf*sZ*NK%QS0l0#g4$n3$ zRg;F z6?q7RN&nHGQZ`%7t%jmdsNMsS~|DTiHi8GKMe4 z;7S2`{l5xG5UL%6rxgpFyY&P>lpv&tHrioAfw=q0D9tbk$Rt2(|m&Pwc@#bqWpuRPA$Ula68Ag-Z=A|$tlpn=AaYX|X|09|#Df__%x4)woB&?{T)Oz4v(*U79wfM-<{GIAub~Y@ zuKx38L!pHhRD(LQ?odZtEOaQ)=UWvNR!Az7DdubduM9DTeY5Ks385Ts3;ypAb&-nu z8?gBM)$I>in4FE!I>Pp^5RI2iTvI)PvaF3z3EeZOyos6pD1NQl{wI z%YCWX$k@%~s1@)l0)Mvg-?+=Lq!!ZS?{XAJCZWy2g=1Nwo(($CYlo53sU-b^k#a|! z`8kVu%=QtRaggdn=`Cid*Hacz7uEcbLK0gZetY;?^d=N#4_|iv+9k+@9EqC{qd;~u zKw2=6o2fK0C0cdX??2q*zwvxUsN$Q9HVw!&c~DcAw2H;c7#RVjcwbjFb0ykk|a8r>+)SD8AXc!U@t=Dq}MVJ+t#kuuDzzt8HQs5hM(|7jR>KZ#r zbwyK;`K*eFAeFNG%60L5p=_8C$j?{Ywda5%nq(o1SFpK;O@_EgA)dvZkM5vvBT+Gd84n zpV9MMSLO`Z%M_w=?FuOq^(6x;QeGtKg* z$o1(Q4i<*heJY*Ami*PIJ(q}>#0{kvF2P^Yi;CucOh;AeM|X?=U6v&}LLIq;M)Jb; z-%is%fBcdFoWlPi=)B4O|MwD+slWwjFs5zQ$iKh+4|oS$@CQR>3lN!j!~`(6HjS%n z#2K#aLQ(b+$3+FPt7++p*^Gfhx_l!SByP!d2j0YMBY$T-7!#$yxZDv{2DDZ_Hj;&K9@16+eb`HOt0WE zGnM8xKD-;>^#Spd@*t*2*@#K}{oi5DC!ZXtIXG6>3`=R|8;3V-9k9)BH!YI&iqh9r zth4=I*U@2E`SZ^hYoy7C{W=f_ zFWj^Pb$%X5xr-%f->qy1)K3GWNuL3-WTdC-rLWpSb5bXBd)dzQwL>>o6ZW33u{ca` zzKe_~LZyTPhyzsjF-&bH+Gspl!L;pNFuPxqA$33$WDax!sQ(1B({_{e?9>b%`4wqg z*;przxrFw|C>^~Hb3)8!3YF;Z3s`*Q>{^eg6D{z|BCgA4PTBPSf`hzc=$-eq8~}X; zA`Z||XuYW*I(i*vCMBEi4j+2GB_Prm>@4z8PXIu|()%FxNgrF1Ig|LLRv9K%Fxrer z&l5>lbD5AmQ`iOpfcehK-hKijm)G#u>+}6ctLq7;?Pvcy*IMAWRaEVxYIu*g=YX@9H5(tBIFq!&k!hRYtzSN)FFd~g)Q|v zTW+{+U1(R<5&1neDWR>UMNLIT6%Kpyj}^}S`I`JVE{h?fMV3$FaBTS%X_Y|_T&DJa zm6$^}Ms`&cG7{2PRzovZ+&-#rY}q*a%mh)gg5ha^{ut7$#<>eg7o-;e>sbrT!M=yM>jp=J-({l|eQF&Qw+ z_xC^F6|Xr@2&rpoQlX%ru=~EaKh72jQ=ti7`rE9x>AJ2t^q^dKq4}yBx^KaH?5A4f zgHgUBQH#+O@~r381J2i#jkiYC%F0URyH)R-F?QGE4;~j@8)Z72TwHsCKIzQuXN@Z# zz|!0npEp-d8&S``|CS*Q0wj7J@|zC4Uj(qY!Q}e$#MW02yCW?=mulTY#qzjs2T}3i z6zDZNDXCk#suHGk*tm(=miphnr{xzHLuiz2`acc$>3>`Xy<0= zHlveSaa7?Hksa+(q~^Mv&SbsS&(6*cR{6bJ>$bX-e18Dj^bBXXt(WW`3tf1`Oj`fi zWAW21;{JWj@>~56uxtKjt(3mZsE9E6y&d>5CmVcCoizQ`Q01evFkHio$&vPCwmLlx zqBH}@%=6$(||cbBgD~VIO7KZhhI3u>ONb``_Cofqe553QIHNSJjm~ zj*;ALa;r!%fLB-NDbzamGmARia8q5siGBoyQqNtXhf!|=bf^!~n^X}u!}OXQLm~+U zq@|-u?F%>app`rwh4=MgW}m##s|EDw9&9v_Z^J(;UB*rYaU0$?k>PFwW5xFY+1{Y4z8 zRl82GL6p6mqT~6>2E_?C5e8jJA_q-$+?oK|$grl@u2S+?VmH0#BqAGJUw(@e*@{0K zfH?%MC_k5;vMkFm?3Ox}(<+^lld2$}lR_bhCDF~WJzHiJ98(Y?z}-S9z{lIKaWC(! z*eQBlK!D-*EhdJJjy3v@eK=sLdyYp4Dlw?WbbvmN;?a~3uF^Iyc@ z?JR?j$p+%}Tq=&w6s|N+6Y^@Dw+aHmMBUvioenjbH#^*T{!LR*fr>Du*!|(igM`|x zt^fg-VXQctJLqOH8Hjgdc=?aD8o)*rVBX2&NQ@2#T;cT0B6 z2F5+Bx0;UgU{hwgAa)5On|)@O);Sm6+I=wa~{j(J6q*7IP!2?iJ$5|F!S-a$23 zk>>N9#A4O13|*hZ*+3P7PCnAeN-PCtf@8 z&DLhHbm6El_-v(#fiDl41;n+i`SD|EW~a~dFS;&M;!%!V4{=DRz5k|RPqe6X%)@4I z0Povx(mH-qdGq506V`?vCx?4OIXBLsm%1X8VXTu{zP&J4I}F9tek?gYi!Md5HbZxj zRhtSn3_;L_t)z@8&T59bI|5#<+|SzX%Xvdo4VasH^XZgpfrAK0F73Zw?oA;%&1JjH zxwXuR$qi!nZ0D64BF?$3k4t#{)$|j`PF1JgGVTv=LijcZ?Fjp*{eHcSZLe85dZq*b zOsA)sqR`#h4{>WhF(?hus74ch$Uax!yFCIcDO?W@d(cG60gi7kkMi^Gf`e;r8%*B& zcAAuS^;y7){}m!CFeWd*Jzu6!wWx^~i9f2V1L6y3P3puW5^x(vx}67x_L7y8Ybns# ztRTrL9Ru%~=E&!`a6q9u542VTo{j2}LioJssIqIt@+GuA94_1>RtdTsC!R1Y0fCZg zb?`EqyJG&mV}pdIaFwn**tG93gdE_}NM>EF!1ihCm;+WynN9t4DwPsD(ojhSA<@0j znF5|8?&X79Jt2wpj!^_|1=p-=V3Nq85Dy1ywP3r=?Q-1Z71<}xUx%sIU?NBr(M}i^ zjfu9Zn%z@^`PkR>f5>y-t@_XISDnyB`nGl9%uBdQu5hi-6WgLS`pqd%%u$U<=ECF` zZTOByywVbtFqz}~5SVMCrD|TN&6_Ktx6v1BIb(oCN~MXYY8>273D{! ztwU)!Vt4R?mjCdLk&VdP4NYgR2F~PXJ+|wHbCwDe21V ziiZ02?ekjcw{qc#3X&Pqy@yo|LpQ$vB~F{168=39L->?7>YF%SL9{${K_c6HzTax- z$0qcFEmIO9T?zwSB$FetBAG!Jm|VC)8W64Om!o&s;0O~GUi5$AlaUDd)r1X2=vwOc z2|NFfZ6TNz2gXuL&mBzvf}DS7F^9z9VzJ$Hhws0o_Rm}Thd)qNNo!A(dH(0D1@4H0wVz;Ji~x7$f2GMkl$B1oKmGynr2?z( z|K^>4(rHhb>;qE|ujG3onayT$^bRrf*}F%%Uy6pz%Ej~X1$PSeFFz<*SS)lq_VrCN zZ48B7P97KdxVAV?RYP9cIjR&Zm4~nMt)HI@|r;f7!UMncf0(u4Eh_FLJ&c@B90&Qn8 zV{V=uAKtT`%Jqy}0)oqkJq5C(D{{oTP*=$=m;ML5J9z&|(7mr*Y@x*<@}u-=ysJ=1 zKg;M+$KA#v^=-e4WdQisbNQ?EnW$MQNmC`!PF{5MJxCe)7W3#8Vet4S^W^WV*M=); zF-RFqRwRGV`A9+LR2(J^yAmJAi9^iXDQHB^orN5R1{n>_y3<5+ecBCUxrA z%KVz5{QC?xdH*~?UdW>_aM7Y4is+)gl8<|?q=>7}#f{3+6DLwJB#k5yuM`yINeCIx zdG5xNiV@M`wOM==3d0H|uH2;ISTj?TmB0r{z7;*nkE>rcTN%H^3c?X9vUz}-5fDr% zzQ@WkGR@^l4|yPsCw>2J;w_l60WwWZ$He{ryfD+zVO}V2XkfIomq}r+t#FFCj?iYT zRM2yfg)7s5c-CXfOtr2ns9zAC~+!SHW6)_0DF~s(q zOl9K25!1gT0;aw`$m~ByB#fXCL&?|5xh*l&k;U^D#WC{HBeI?~X%4|czHgJw?dCKOUgxSb7%`X}`5kv^P7EHSGCx$$+>-aV z&f%P~!k)W_Qs2z^ep&?!td=AFLpB zho(;1GQw#}b9 z=`&Si!H%&C>{2$d*#|1kV&qUhrSE>HSFbanq|FpZ0Be+5f*ZWQmmhhfN;YsX{pQ<* zgev=rRg^uk?d_AGRIo_!*QKV2<4@2zSQi>vfvXgID-e5!MDpJGDIP!%gU;1f5Jww^ zUZf$XESiu@_JvHd#8R4{eKBj82VX#qZw|i)XAa3~QPJN71Z;{XsaIsDa%^2aJe#pn zIu3$p^T9_at>Ai&SMScB6X%Q;bl-a*<-@kEr~8;BLqYTDk#HI3G^YCjwR|iBXan+( z)3?&g2>?#Co}>Qi-EmChnlAdGqn3F++vC!Y9I2!t3^X;ow=%Jr3CvyT^AaA=+-N(ofp=3F99LY>p+t4vy>VWAaQXsm3 z4&3~yoBl7djL?waowP?N1~W`SLn9s=8{6e7lj@(6Pg_r}QFa^5--@!5UX-1d-Az$x z$<3u0GZnz6wU$)Idik&SvRVJfO~h)cqDVYXHdwZJ@T+VT6r1`;BFz8mM5l-OI1*e*S@XY#Ou3f&nx6EAJk6`38kXk#ZbZM?KueSC?Pd z2nV2phJpdXw*UrF7o)K+Wib?eK-E{L%{@^SPR$*|};nlwGFPUQfwkzRfOzl_4?PXvAXbtbpY4$43u1v6iz_(sUZ z&~RaRrAlsc$g}}^05vbP`oW~J=YlucymY^HWImT>O$EGZj#rtj@Q3z)m4uoE<2tJcvD)rAF^%QpfQ!! z9t!z=N{q?U`@|nBMg@}RZt0KyT7%LhyxddrVF+7ZqQ{skF6gWap0u}yoJ+nQtRo~! z1#?+Jj3745>Vr%#H(M!X_&ue0 zqaASK_HXBD1`E8U6Z~t=^sbCr7PBMB}`#2m;lrrvw`mJg}q_4p@CuR&Wv` zLJG3dS5q(W|wB-~{xj)LEO z{Y{u@3k@<;#FwK##p>88t9d9}>;x;1i)u)S1bNYmzUyExXp2iIf?+wwMdfl%q;!f! zCT`_sx7=EmnaAxY$9St^zZK~HH$`Ao{L?R`-fUm?hUpe938aBjz@#MB=c3L*3S@=X zQvU9=@Yz~Vn%iy>kS9F>>UK{ABi3a^R(A2%$Lb~B*@jvv-Po389}F)4z!s+FGHmogBNIvFddbheimS#SkFUL;2F6Oz^jB2;m>Ux~9^MOGQ zzDT32tn5$Q#vG4PCsq$j#y;KF(@02ql~D^?`6){@Q`FU%?uu$wx?u6%67Pv)vPm@a z?u^V)qB0Tef(i37g{Cu=LTTGe8GaWNx#R{!sJ&2xKIs$!x#S@}2_P;x%##igj!X*M zDO-&tN$mau0|AXi{eMp!f(04AFfN<*Ku+uEO8g$nQd9a66`}#i>;AgAUuR29rUTf+ zT=p4E7j2)p=fjCXum_4seJa8f6T*){35nRly3R#I*98;uR>q3M3hYkjOLc&`M$(!5 z2B-ehFC}GRBXJVXW~;^WHZ~Aao#X25td=SypJ*EP3Ign@{M)*m^GL*eseoyihgUsP z9CexEsAqx{L4-8Ta1#hP@4)c)v)SYI-mxtu5Nw6_4vTtF*CM09diBtJrQRyO(vg9Y zanx3MvBT#Fk)XS3mfUD_3($I{IIVYbkYKDDeK1TYYJ*cC;u9nW0zNlb zEqh0v9K;xK&loNO*X)>j59~0m0C3Xhm{!Db3mQX*CyD8y&KUJXR0d@i7r zr46+7q}(Q$9;W#O^XYF+3qokd1UFFl8c0sx1T)&E+0qmv4hoD__gic)J00My7PI{! zJ17;k3$K>SL+yyaA&fXX>?0@>hpID%TTKM<&>L>XN_Pd{BZ67sn;kP9=M|#*x*K z^!4l^z8<*n<57gb2zAn?n{YA>m2=ien>6jeoYhb%S%^GYVs5`xr_xgqd94S3Z5nMM zxgyqsyJlZaTip)EGvo)srYnL=jkam~QQZd(&5pp`Xnxs!-o9Zk!`t3FY~?6dyX81m z(sp_Ou)1lgSm%Io8qfJjeEzdA-<>1o;VW`Q5h8)2n-l!}iSOZVfio*zC-3Y+(c8YN z;Yy=Q$P3_Kpr9EQ(%}8JGRQue&6CuhILs6BCV$Ah-fsUlBq}pPwfpdO70IhGo>#VO z!|*;Bqwn#Cqi5Qv?!_Ctr%jCnYGg3J=VePe5Qpgvn@N)&W);WV%+?>amedLkftl~6 za`Yu^S93&uTUA9bh(M7E>vhc00M8QPhJwpPuMf*MaA%New*qk0-<82wup4Bl}j8h5(GcASLXT|R7 zPnJCM8Srt-8YxAm2iqiQ7b!ntN2s0c>;)TF?)`A#gD%sd9K9NnMfufpo}e8-QK;5; z5YKpWz)uhhb^AjQ>C^LJVh+=pY;NT|YxImYLM}wqqG)Wl8ZjG{mh9m1oYob_o+yTB zy$%om;tT;)_0X=CsO|oOh`|8Rx%1=Zwf9Zzqa1ZYiLS7*no*M~93I>zjqhQ|9&)A!W^F2^eQ^~Iv!3Dc-F^nj^K zB-IL4_;AzX}_FX>4KaZcXczrDKm!r;L{A^kRlBTTHntSYn$*6pw zAYM|Qb#or4q6Mh<$g>5xLsV@gV2p-%QO;YE0{*M~R?gUTqhA?kLUiJ7aVq;&cayxF zF;(HT!e&7pUZv>5)KwX7uE0mR!ImL%be?4emMS+}UzVqK@H_$g^mmlG6l2^!VM8jj z6b^;5lF3w;slXeWE9y7FLIqE;W%OSWzE}M8`g`fejgd;kG3tZR{rXY}{^!MHpny&I zDMctn_>cEo$JX1JBfaceCiID=FE?5y1@v0#iSonpk1?9MhJ8NTlIYrI7;0jYusFSg z^eYfO+(^y`%omTh7n!LcS@-PE85LgpEo&I`JaJUH<2J6b3#7=kbLB}jD)$V(%JdzhBanwfH#=pKmn59G^;*K5 zx}Bq$1}b=4M>9>0dzV=;gVV8$qfFV#8GEj^rVJ~-Jaa_BSuO<+=gdx$k1PhW+nXrq zI$toEpH`lXJp6vGA0Y)f6*4l{;XhP^S)iH1rvLbhTd;VAx zOgqkK3@4wNXbDaFYTm6Z;V5ns9xQvZ1kV1L-O*WU6j6fy^Ab>k1`i779C!apE+pBg z2=sa9?r{5it3XYbK7VVZn4A=G!X;Mq{qc9z*h5&16l}B#GA)jtoShmMgC(Ic_FJB; zj5!i9)+*z2v#h%6#NSK_>hCAASK~{>5h-0?2B?Jd=m|}hZD~842~j3Le>3Tol-DQM zaK#B7KJsO+Os=(mje_q}=EButn;F1ChE^hBX$T7MjrxWvB$akH9+sGUa{j98aa%f( z{Mw&IEAdRK^O;2`H*%nUU-Gcc?y+kbS0k|_$n-;ElLgjYlN(L{2M@c^6+LBibFXMf zRHYu&$VwIoQ^8|`$RB%upe^R?AIV~;e_PCL!fz+j&SaW+<{8q2gue}g)+kqBwPt( z>7|_-*pX9Sm9IVVWyA4qz4+A-56*`Axan`f>;y8!I2NB_vJZ}Nsf@ep93W>`bzGEe z{l3Hfd3}wBBXC&Z^R(4Z1Altr?4eoaJdY~+Cj1AVavDO}f+eG3icn3X zP4h+J_2M2W3(`(PKuZX6GB7ZPiLyoqVly6%b43-8Y>_I)))r~itR;TGJqjP9sXDLE z2ZC*8z1-cJl+OD6$yMirseOk=sCpD7xb8GYUhdefe z)|`Mg#NR2HY1Ram;MZaw!D4BL1K!ATxc#4x(43v!pEWIK!l21x;9nT zS=o=QV7B)2vDFpqXk|oJSm^{Z3_s<(c0=KMFhPadj|ZD5plWBZqm1U)EoaKf&vVl# zH6ND{bd4rk@2Krd>L9@5lBnV`iFAyH)ykYV*CfzfFglxxG_S{5%g2-%HwkT`*idkz zoURdAcG_O}c2s;-g661%OsZYKwcI2!qB{rs5*n}7ejC{w+}Z2O^35CdyliCc9b*cN zh>7-@-k*CnH?i!+S426fy+7Lh7 zY6jRB0#mK8N7C^tm;KiRF(ieIsQ^0s#!8vJSN4up*h=W1+4~)?a8?xBPNTFyiW`L! z#ik6-pK-;<-==*o8`wGSZi zm!E-l`V)2~yG?UN-WaaUpXY+}XIQi?+Y^^KtMRO}?+wzTI4C~EWCwUck@Wf6)b%eU zKl^!l=(5+AA~Wd_5f&5cWD+zWlQTMYuIFoxZ3kn>sKPqb4R*Q|+KLZuE|6inO_!DX7RI(E{II9<|AZV9iQa!aw!xk4! z>&rV{_u1bDFGd#MWRk-ALi&?!YG7qlV|p{~pdCLS#rn)|_agh-e}!n#g-klWrSsDJ zzVkJ^WAVzQsPUnn$$x9JjW(BAJM?0GKdCQ-6bp&2e^^4Kjn~YRkx&l;@0G@!$cZHu6R2{jC(*-BkytBa2Sf}PlIGJE_Y@3g^n~M_$GIR5rKQqL?5w!kQZ7Z zk>P1|KgMimWO`n@aj6W0_HN=?S{mnvH1@(G>GY0qK24-%xhj9sU!aO|d7NpP;N8m} zxgCwa*R5>3&X1{N2yw4B_>R1wc=k_dRi5iC#4s+xok`(AvB`oXiZa`TY(oYdA(L%m z4kD}+jrasl?PqgYD3>Fr6D9QKj38Aplis`MTqLEMyZLZ>6qFAsthe>Pvmn4vm~o~1 zG#wS$+oYM{8Lsl(t^>J<=*Xh2c2?$%(fOCnM(ka>JAYmta#8wWUkh&=@71u}V-PXK zMqRBG$>TQr7_aqhT6 zEXvaKcB3ABEk3&$Lz}zC`*NBMjN0s|a+q>GzidnuyNRMC*ij|r7-=#iGsakm{b0qJ zen)-hgXBjARN6pm(wJ|E_aWxYjnrWz@rni^r0rW9b85-^sogH4wu|TtRx}7M^F)$gJBox_@e4-c-ehQRRk-jTAI1)@sVe8R!4(eLcbNcEN#c z6Ai`J#p4l6HS@S;@!iVXPSAfvbg(bV?tMwbCyPEUD%57Q2P`xbAOF$C875Jc<8V~I z3C_DCLtb;&pL{ZK>_z849yNrIx=$7cn!a{z2xX1DbRVaBJf!v~CwUxFoWxz=5FGi^ z?$!-(h^5^|P6&G6CC~pmJeEe6U^my_@Sh8dwd7|ye_3^I8lki4yqsEyFl7CHIT(rY zd)aZC6oXF$_ju>KDB<(6-foL7IWV{hEH^VsEEULnRn%1#z0Bt1#L$RG&6}A(A?|H;NH5h*q0{# z$3%fd2^y47PY-{Ha2*eQEV!-w+o6=h4GV^Pz%KF-B6Xh^d+>34POoeeX|llOk8WJD<)Yw2q%--D0WvY)-{cLE<67(&9607jF- zQC0CJ04`7a0B1}_0oiIqxXs4M(M=}nER!-Kc1m?^0*tXlEmV3q;N;9{&_ws zi|jj*`;Y|5#F^jkd%uw=p8n6>Tc`r3)ln2v#01eXA-t~F%0%v)K=YrkCJG6gF;y0^ z=7>L@vVbpRe2+QLJqa)J(8b>jL8GnjD8+YDUN;OrzsHco_hAcB2jV9f1gQ^bW$}9)ah>EoT=ThK z+q)iNVF5c5OX}8`ND-GOv^NBTfP|_KyEG!YfBaT8vtiKJ!2Cp4Be-<`F?+w~74X4& zPin*f`!q{CSjrDR|AeB=nf1^A$Qhi3qBp@?SYMlKhG_Is1!;&{C+=gBoo>-=M2Lw z#$Gk=L^CWHxEYYg17G~1QB&$$fu_b%rJX32NSE9-9pz6~1?HA_J?2B#lPBq~4Ao_w zMoyjZB;cbHqyL=3C_^j*=AFuDrGg*x$}pIvI=tN%0X?~DX!Us@p|thoSo>$R#e;)x zy`>tM7Hribg7gaZFrI4#-;yIvXN3-%zDLOlm=?%zwpzU!6)C8h zMC>kl+4^JE??TA@N_F;ZlXCcNAVbUdZRN)ZRkESh$mI)j$HR7MGG$C;`^NrQnUQqH zlWWz>k^V<|4ZqAjFa`7%?eA#B7a%v;d<=yD@N;K(G0LjzfD~r)fDF zO}-#Vwu_G2Ks4dzj+JEyVy_7yp1sK`w{0-GRdtd4r0+b&b?0-d{O5K`{Z&b7H!C`B z$M*zy42bo-|3uAsYjD)8SkN7*Nwe$}J!Dsf<^T&ps~{i;*%qsFAw}Whz?ahG>fp5- zCo_!n>7koH`~4-5lWaV@kHT2g>$GNI7|cU9(BbySa4g4yGxI<;gwyo5Q-CYX9|Gzb zZjCViC{Jp!S*iuwYbPh%j0;r7+Rv40?k)U$bL9gsh!e6e=t=N8?7W1MU>6y^Jt%pd zUVpj3uTV{lbd}vNrK1L(vJg#u=7L(F+z6<$=Hb^r^wbmS zMhR3tUdA$!nCs}uPN+rL@)*9)QeePO$v+1E_!*+U%HRic<{70XkC|b+r>n;%5dOFh zM$jL*Gl~Q!1TPixM<5jP>!(9gEuEzOi7butANTh_Nw^Vk`{aICBpQP=q@BxBpP*RBZJ*~)Zq@`> z2yJ&p*mS04Yg%2$Wi$!7tP_ch3TLqJW8?MwixQhVK`f9wFkEaT8+kDG+!0^Zpq#%4 zQc&kaXAW5vPXBh;I0NF`Uz|)W-8;>BO$@2s+luPx`RDKFFDNZwqVks)FuB|MkuhYL zix-NtoV1fTc8I@Nx%?BH7CTff-1ddfh1Ucvp00W(@=YCcw+jq!EjNCO?qu%_oByDb zRi|5+Mv-YWU*WKr8>7hfgz)nzA}8{%GzjqFeUPmZ9?V{~D9fu%NszbHN8DD4Hkov5 zWj~%Z%Sb9b$xo&Wo)-?{I_E#oXF&2pghfbUO~QJEpOki%04s8~^R6poKa1y7i`x1V zVggD)Nyg?73!-KB9}NDfKT~v3T)Y-j znOYL(Ia$BKA;V~(z`>zIr-_Y0Sdl$H42T$3h#h44`TntMJ{Aq`H!`b+qSh%y=Da4X zh9C>nhx(D+eroRe5#2v-!5>yIn~RJU zBn>Hb4J<%meIB(C#uD9@ngboC3C+iXdCqfl1W6Fln&`BU;{F0JMez)-#lrgc>z!4~ zoyqLK5B%PWeD(TT5hfviz?nn;0H%^8$k=aBRl8pUsjiz31ojOTfK7o8ist{~5hd_)*>mjWcr*5sQKqlHymcZvuL>6?Rsb+P zd$3$R9StW+gs_$9Xa^xYfn5=i2|<5XWU)t^_OoF8#$hPA)%?+9==o4axMw+;)vj~mhpoRgf@J_IQ^8G6q{^*;PIEpFLxn2|2< zfiNU+l*U%xfpE#t1@79Y-#uca(_hjdm)c!6T3d9QkU#$+05g2zoKB4M&;PvME%E>z z`ogI9*iE!fho)MBO8UGwFdSYTnsO~q;8GG_sZy9<0vylEKbc5-Qdo;)5&OJP{%Ky@ zSDEN>GBkdC8MZmh6w(Ao@}Pr;uw^fJ-lV}kUAX!w?YAx*X-D4ZC&w>z5vXDIt0p*K zh%W88Xx|cBlS{50RX$IUxqkB-rp*vcWzJMsKCe>{zGhHp=U`6a`@lH>c>sUhS=uyRNITWV+z1jQROfJ>B@K@2F z4poSyQ8~%ueMq@y`yOe3Q%WIlO&)p;_|51X1s5(Jh7=APS|b4B-ZG!ilGl;Xk}%(! zbfC1iM$pCMGyXL~5pv=K{@d=Rg(xMdN3XeW?dH+;s)EHBtL#V*xB#u)^-qU(NVcC= z-W#cEBl31e*Zzt+?B1f{vn@foojBlDWhh4zJ-Y1=;d1p8s&>*Ff?_2=(kItDi6<5S zP-_Vd=NvFnfg3F@`Tr30)lp6Mao-ywq*ZP}X+@nh(mAFmAt~LVjP8yBLj(jAkd&TM zBHax`dPBOqyL;q2?)!P(=UnIP9M0hn*sklh@As2Z6ut-Dr@ZM>Qf?vbl5`Y2rpNLB zGxGocjfhkrD)87ivjFC-XAmRMXdthLnrR^NMii0X%A(@t>4GD$lolt(cho8Mc zrYa8x{UPoN?O!9o-}z9aAPT|UQ;QhY!AcZD$1rm9lE5vS)ou zqgkwJEs_Q|S#+uMue%N7GdEdbd8$wJ#|h3_6Y`05eA!b6 z;k^P!ANDE8$Ie;%bbXtCB2czMuHj;>bu_9NhO{CB=ZnkiXt(r{50YfwjjCnQt z@6OaShy%C8RjR%o(pa;cUph7fObzKeM1^YepN!I_-vN9;My^-#y5qycfeqIv3ruJ; z2j^odLEmWU;*!5w+1QA;OiqOHC1;&e-}S=Dj34}?YR~)IS;tUko$#@PN;Qe}`=tnS zoez$w<<%k#lEIB#{-)ax)&fZ2v2h>^3QNK&hB>~15s3w=Up2b}7Ty%K1ALrzHYt2% z3~&QBD##8M!;&v8i=4-7fpmPj(`9XHO!kwO4q-OPX|7bFYPsNla1*^YaTX zv2wB?v@D)#M`6wIPwK5r7vQ=18-wZk(XwO3z?e6n;p^q#6(RZ}j~*eEcG2glLybAdi4#vXYu|LFYqTrv5;8JoamVn?zL8DY z8xix`S4vp^tm5}DKHju3FIjdSX7#^W0K$uEg*)Og^#{5NG1~Cpa{9bL1lYijkrhx{*iu@nilqnkB=@srTFoel27>e zNOr8G7nc4GF0c;|65HUkMD}zRx*Xon0J7mAu+6lg|MP5;MMX@&UdM;1SvhrLAGhYb z$(eJaa-#-eUAFVVlDA1{_XEfxzrFrdE?U88x_sS?_m{`IS|P(0o9dM;(E_~?RGizy z*0SpnOaL%-`Kd%GZRS0b zL;30Tn+?0&&-nlz;M_P#+|Gl-(6e?s&WOFF220(6Z>06WV_g*^wd(Rcu zj2hfOYSc+#eqG?(Sjp*`s{X>eoAe-sc`)n6boG2_H9ZIG%el@x-H4bZcy*ctQF|x| z=o7{LI8RwJ_HAj)wc;nus*mNx8xb9pp}LDNvKaK^$z(hqXDfjJJf^1l`pBZ7lY*n_ zh4p_JIt{tNTqT#DjhFjpLU>A=JzRott(uwljaIWNe27_H+hf+(p=NU??)c()%Z;Mg zNU&=@E*H`iNVep@vJMWmeSxH%9VM_O#dPP3agAlnXykP_L}EEre$c9??!V^f``M)n zBE@XMLK1W-rQT^tIjSU9T`rYE5a&}!kVk)Cs)0d8@dAG$J7kc(nc|XPHNf2A+(}E( zD>6jTekpVqCQvy!#_M5)tLa7YiRU}fpI}4kKyfqw0+_ZjxA5h&iV8*XS0MTV-50#0 zR(ZvaM~%7fy~1CLt;qTxZ|Y-C{XM1OcI7N#Un29sq(Yr8;)@Wkka0`an}ECRC`pH% z*P>fdV`cfRC*)Kr1c=S%urQ5{Pxd-iCvM^TmME8!2anRs5+#}R&0DWj8Th0;ZdlQs zElnIakXUyF0(W>AzTWW-;6U%T^J8R6qHjvU+7~Me3L!ObSP#EuMw( zd~9%dyjo;L9j9X~#Odj-D_&BZU%y(&M4h1)ok@%DF8m3yg4GRjOP{%hMkzSd*ip}G9; zBBXhWsBSrPJJy<_z59M!CXOZVK1;IBhK$z9me=xTgo#jQfTWtTwx&%URlfSCu0H

    Z3RRRTdgXr<_kSJx{nms! z=I2AYemLiU&Pku=$r8Gd^Kx3*sG;!cTK_GcnfaJ&BanHvrXLikU1-pIUb}Tt<`_lC zY`-%iY`Yq~3JdmdYLMGMAU1T{xSqxLUQFdR#KhP{o{Rj$0-%k~^4a)#swr@?B&WmY zdKyiwd~VNWRup^mvM3<;%H%<&-GcUNfUh5)L-l2f#`w=fW|zoTUL1i*>f)+@7A`M8 zlj>Ed3=*O=AI*G7`b$e1d17L06x$Q>%aqu>uC)R0H!{(Zv{Tmtmj9VtBU2!Pp=7N8 z;4|2mtNp>1xRTP>E)e zFuV7B+_JxeYYEnAGl*CSGQfcbaV~L@jvVW^@it-tuTnL;*98vng}PbCQ$XAwZUmx2b7Ot*M%f%HRha^}CHN zAa7XJ>bGy+O|Tod`VTMfW97SBo1R`l27vD;?fwqy*y0cYLEVc0U=;8IDmI#U2!HDEA=_SH>AKs=>+}~<7jCzD~aB-RyIaYsTTJ z7ew7)@$gnLqc;pg#i=h8LlUHZpLE?YB|)_eR`ub0IeCL&fsNVTADP8WRsC>@Cz#hS zeb48i3WeP}{iA?CdhHl(sjPPy9vvRtrRXD{+)_qvZw`B}c36vK45roDdbuAz`Yzw< z51#ADmO(NYvEBDt&Np}7C(DcA8*oa@q48k+PvFpw`Uowgh|`wllfoSVX(I<~aUP~6r+LL2}mP$<*z;~LN8 z@eq0a_I-XNLCbhJPTW8@X#~1oFI04042f_o7OCM*(%17W051Gk@TUP-*xbevMB)pgs_J~9bYR#sMGnCq!>V=x*3 zZOhZL{yslUNoxI^FCM3n>*?vaNrt?46jJk0nWWRbLI73zC}Dn7xKTJ5UU=TT zLV4&cy99;4}HW)w?2*G;u{X%G)-6MYRx0ot~%HVKF90A%u zslT9V9nYX48C+Nl+0S&JF6Mx1`%%;pnRF8U@*Z&AooZ2aN#!viL6elcQis$qRsYl=yqEa_88wId#v4_D-V??siS_AR!bxxE01c*#LV^PKfatI?&r=QM$9obW zM}^t@(sqB@r!qQQJdQjkWJ6RUZD`MGR$|z0`+~)SZ6YMjM_evsLRUQ(Fu{wrpDarV z^lE--ZB=z(1P-S z+1HadeROvy5{@atAbRPgD_cr!5LQuq36xD~q%5mX&#{#)mxg*cfizKUSW=k8@5T%gq-Y`^_}iNz)9iC3va zMe^L>ti?)#KqMep&zJLWBk3W1;ddzj zew38KiO2o&8xu`XlMbtP{||@NHgKU-io!Z+lLE+GsZ14!t8&hx*SXwJ+!NA zH#t2w5urP80Xt)!Jo*alX6Tys8euy^<5>&8)Xgt+I(n5@UWDtnq^kSwL}s=pf!I6S zq$6jYT+F;KJbbOwcx(;X!`v?qQ%RY!OOjc=p%N8@Zi+v4V=`jf8%<21@+|p$9yA)n z4E0c%zP;CIxMrhPX=NthbH%1XfZK1``js^5 z?5S*$rA3Sfm45;vBKZrVwmhc;HifXnvOV-wn_=8(v#ZoP!Rs!DFWzDCwCY{fXASd~ z&J&-+cPkV{g%{sqAJ5mw9v3(r5EUtxY%4tfCiQ{qv_^;Sn$uYhZg)8$JX!%u-xt7a zxCYmy>CbSo-GMRLEs``!v0zYL@+-p!Tt zC%7(pe&jKcc?bafuM)EAhPa`E-~3WG-D(OLJGuOitIs3nXDc`|?ppiUly}pLTT>3# z$!12R#q13FSw%H73M3M`Ko27M1e!ByTf;-;us26bUsoQV1M3aT7HJ<`tg5wgqY9+( zh2qG=b2S^RB{ekPd@?cYQ9#L>tMA4y*!i=AcC?VJO@w0qit&BrbGC)2_PhPuUq71M zurGY4Hv$&_O5?HcH}#2Lf{OFsPN}9xvS8+~mVB%glO1 zm8bHhX%<@DXn=&k6yUzls{tN2d%P8oUHRxETQeUipBJde%DTm93~`(x&jhNMv#36} zln(&Sua(IMtv&fCioNq%M~)zVevw_4CZZe7_yl z*sa%44?}Ih_$u{(2P_K{+LeJN6S?x#mxE6reOJJGcf!RFnF(oagN^b`-8r4aSXM&5 zeME*gEK1>rt6$rcKP0I7=@;YO0qslayn|8BNr8aSC!EK9LXL9^4pJWg20@bAgv0bL zTg*D9&^5#$mQAz1G92I;uYF0GQqQAF(ec5MUz`DA>+p}q(Sn{wPr=@su-s0Ka18CU~yY+ zpMsD_@K{P22JBYnYmDO@Oq@ss&J2X9ST)7{H#aV*U)2Hh(&AQ z>5V$4jgcf(Sp&`xT7VY~aOSrC138)2Z1OS8YTUnTs?#({mo zSkg9a!|s{hu&16Dtnz2S@DKBq+++yWicah+cT-YmaYm$8F8*PSq4cUdA=THn(z6R@0zbQ6-!(uY!vnu!Fskl zA~`fr1SkruDnt=_CBOIS%%6ZC*r9(wYH`1!?v21xm4f7C1Tvc|tyYJfMDayJx+Fmo z7-YD&`hKs!34R1Ni%%1LIibF@4!YyF%Ij=O`cHZR0v>F>Pm^vuHy@;ROfbH~`8r2? zOtIz9XMkqe|FabNorb;Ib~lAGJVxHfv1vtEOUXTdMhV6ywv8*S!G(@o&Q>EWkwAON zz}nnx*=DdGjPuW(hS1@5UZ1xp)Pp_YzLRC9TdGv@`$5Nk0^+;lnMAW~I7Qv~qf>j; zP>i(g94fmVHrNtCGUSqHEwEn<`_Rd)ktePRxQg_<^DXZR5jxT9${s6}5$<^WPYX-^ z3=#oi?%7GD{v}P)Ret#+I>9!oI{!#t2%c!I$rnaHu*WRn%GZ|6eAz6LGvmR;982{Y z2*>j$iR9pVn^gg;1?P`b2p@+3AGY2)D(e1g7X}2RyStHYkS^&`5G16fOB$pbgrOvc zZV;p!>F)0ClFlIpIA8Byoaa36%RjT2Sqo;(d}8lwUoo7-mV5_pX+(u13w9bxV0u?0 z@>S!U6m$fKuvSi*LM!K4LyXxT^zq-f;{WG?$_49d1QbC*$nw2kGoOhhY*uH`Yuzn? z&uyV&SqUGy0WX$YnMYCWeb1cw){)zWOwNdH3H~?>QqDR@Rjyu8(X&4{l=w^LXug{k z9q>w8le!B`;OluCHYhA@gfSWmY>$gAB{=GoS8#9(QDo(>2u))dtfum-CjwXRIrl@o zLc}-dY!OcYk2+bdBw8d>Y5UdRy~5`|h?1Rx4OzjyLGZ4W@$xUh%y8o^PfYfu4emD~ z*7UjyUeYj;WfNOI&>2Sg%lYMbLuG#w)Y`MM54x5A>Tf#aHy{b_WlRDp&^1=cZbia7oCd!=9CkHHv6rQ_pA?$bP#nyIC(}XX3ru zy17hbal&Am2OqBspwGX`B`C}tul_}>E%;~gSH<1%$$SH$sL#WU2?EnM7x%T6Zz|9U znJA(-6aqB5Uv|q#SJST^AjVg-iI&HW$TK-lF$sJ&1i!}_l5866>C-IwqsY}3uuzNj zn+aSG7Ib`Hb~frIj7qR5YdR{pe3R?!SJn9^yJj)q=Tez{G~;yZt))Sv0$*6&C&`~P z-~%vCEnJmog#B#KW>s;})&Fxw{O^Uqhy-6={#L>N=en=nFiAPRXIxI>u11ZyD78`0 z0Lj(?5WM$2f*Y)M1%VVH<1(n{$)Z~x&E3>`TzGSpk%{|?Fp0z2;PCE}U!04!nDo*x zgy9Z#fqo?#dbVN(UAMK_$|e!os28a!0BeCDmr#rhEg+)yO^XtFTPOf;$N@tKlN!sT zp4zKe>Q_-;++xl(ymyEAe!Wew7-(J#`w&f`FV~SpNW5xWEAV-|jHw$A?m+z7^gYh` zR^qMedn&7ze-=R&7MzEe(J7|lwLaCG;LkBJq%1-XB{eUOABTQr)U3rtj!e|b1*$;N+L>+m=W)451H8+N^cV$M%~f+K^0yhV#JT;%Ij6w z+mZ0w!rvSTyk`Z1R#t!fnX{26=CL4*ulKkxF;OJ(bsbJ9lkgPhc*BsdS9@nr!fg1g zWTm$@e)6MD{>uzGqbgY{pY!j=yv5Ehtjbax7Vd(?JZ5>{6HDH&i8QgDI+T1YX4P%3 zvzbr$M)m}&gJ#%I%x#{Bh@KXnR1xQP437I)W#UQgYdnio_zT_fW5c8tEqQbY=GIUv zV&P2te=3`QLj?bQFv5gQ=Jnf5E|ChkG}&5slW#HJ_P58_zRZY$cnCZQu3bFeU6^v+ zv?RE9n96wpCw7lF5wCBSh$l@JU^yG!z5<5;M@X$O(BG@_Xn590 zUamFj#92(lST~q1d}3ypG`eInA0gUmhehQh7p}*>8UZ4gu{A~)9Aglu!M34>hL$wr z>4NiC84II;-7O6RXrDXNa0>9x@SHrXyu*|2b8p2gO0>z>hu3xxl{fTv>Ei$UQg}gx17C4LUei%kjimiRTYS6{C~&v27rOJO5&#hM~&mq80q zYs&MZ*g;2kSQ#dA?89bALGMJ=-G0Wdx7pX4qr2T&7d#DK=L+?o0AbS#&6a*xMXL6K zM+A~R@)=7(XyU%+mu}Z!#{@xV2J5Hxq~it%ub%85C20e_kU#_`FW2R*w^myoO0DH9 zzv!zn0o3TfOX434>EFL~=pi+}d!`}eH36g}gBCd)6CN1?4msZ0ny6Ps+GJL9rB$q| zMgh6{&2zkfSma_pjXmS_?)XcH85e@^tXh_slIsyaPVQSfUCckr4Mn_oW@+o3@w*BA!kkfI{Y->0f(5z|3BVI-u$R&e4tXc4(UOKRwDntx5o93{1Eo zZ%t_BV=6%00(?Pe+iz6(@!~ zKSRCSaIEnRns+hE*f_1!(jYI)!$~S%5cI5jzf=-R;tE#y6ub!uPr2ip%CR%wnn#j* z7_cv&T9+*skOLd@qmHORju*p(+)t^JevCLqkDb&tXiw$>+TTxWtjn4MR~Y2Jc-#x0 zL+w`g-g@nyeXF<~n)!d<{aCgp0%@q$0Wphp||Z z?arQ82Klo*9Vn(&I?FBL{Cl@eNOUANttax<+g;qEQ~41pD=zPO8P4y`dp3k;#R;b= z@^^jZ74t~$+b=Jw09#;;-gc~WD2oZlFDS2(wBy@OLxD!zJBhr=-&A1X)H$0aY(e8_ zqCM(rdh8d|EytJ&&h~R=<)LNb2KB~x`yx%HE4?0#h(|$-!pZiw>14VuZi&Tz7H~(u z9LyP0Z1!BZn6FYD!hfFryP$(H;MlF60Y|A=z_!^z=bh9naGYXw&A;_K-v}s>q4JGm ztVL+vC&zC8$znb8le!#-q$_$r8;^u7b-OyFZqOj8@_e`S??>ZxW2JpS!)Y@|Hh11e z7XrAC=trOL+p0|!sST4Hs~pQ%X}^`-08qbLzZXdWF@qEJJ5`CmWy~cLtp3pEZ5ZC( z_SM^F$>rbQE+LkG@qQ(y^V21r|4!rr$NoLlKe;F+)$zb1cPyz4xbE?qI zC;k8o6$nyk=gC6Db^A*j4&_vb4DyDWg-fYkL%_xlD4@yw`Hyq}PJseA4}Ff$cgjA-k@*6xwZk^M$!`boq6L~goBE!TFjTDPFPw^+lk>ZRV7*W;_-Pzq1K-i0KBa@sA6-9n|p$Ss>L zZ?bN!r8MMpHScdoB+w{Z-kpCq_Va=VTqyW|=883WV6_AO`}teFk?OtQciHGTMn)+` zJi@igKdby;P$`%z(^Ch`T%}!JK9#Q)zVb`Y2P7ZwbKxDC{4z@u=uK0x5^va33P&G7 z;rPX=0_C^ty_NRS%^QnOS!X?4sTj~C0z_JU%njzVs`G*v)DxViw>^{uYCfEQb=(+W68gH6 z&&#Lzoz7|H>5;3e=xbX#6#4mzL1YE;XieLPxe~I#6Xbo>hYlDva_u5@@<4s+1bBzg zkvwGVv4a@=S5dqsfST%!Njw1Fk=0d(oZfIy& z(E@x>iVfSv;O8+r@ka)MK{o?{%Q~3#etzDG07AyNKPY#RB1@o{`eHZ$z4`iRGsaXh zJ<9tys32%LZu_~LksgCk5k^na6w)<59#g2As!TdpQ4|44jDBAqt}D79FK`Jt9^Wy_ zJ#VFK9lgZoHexr)I6>L*n~YK$I34k@I((C#7UU`ccQ5Mv&HvwR13YdG-7gjlixHB0OaKd7-WzQ<#i3227o(!`=ktAGuxu8L2OJqE52r1VbW3h~ z`uoG8DMZ;n$b84c5wCB2qgS60J67)rIO))lbiVC^R3#@T(<3XZcHvzDUQukuZv%?I zQw75~G1rY^j$8Sff?6r!mk8d_+^2~8Q~UXBCmwVfE8A*3wg~p5~skJX=y0#GN-$JRk3LLbkW6_BDijP609?B=)Jc zJ;L{V;0J~H1xjKeaJ_TrR)OiH}<5+WnMWs2} z<7Iakhn|ZnQU~~N-^4Z_R0qhy&+@3j<5kqJuXYXno<^?@*&@2!39m%=z<#5KPSLKs z5E@hYeI4+((7uY4yI!dC9uyysrzTPWeH&v|gNd34u)?C{`{zJ>}`&?utNebA~@T#Amg)cmFZCxWXKllpFtTG2VJO zm+^>k6-L*UETCiDovGvP{d6!jOB&3-JcR1&*L@{kOYgr=w30^a%{iVe`V1{Ul;>CWLG|R?8D33?>xyM=R7;cXEBa5$>={$1Y*VyG|iKZS-<8TaL?Tt z#`?l*-dgOM*2L$vIr5ul^a?h={=Wl@|9R)!xnR8?T~{mOxKZtbfz$teoek{q@5B?3 z*>u3pwi5HyxHRPVMxE?31>7c@ilJq860>Gki8U4`@G7XT!NQ%(|^02^rY6Vg27_LOYYb^(*;Ve8O+=2 zOU_IUKR14r^oE*`ruJHC02a)$w6amyQ+>cdbh@@a4z{#4xL1btRwjxpU^D>d>CVTl ztE-e6h~O+hU&iE&yHczy(W-*itoW#&OIWrfb<{wPq&yT^Cs<>i9bNXPDyBD_*XNn! z_QR91x2wsk4sh1e6-@&pDCPG;E`27IFWH~V_Rs_oD=DUJ{>K~JWz&4Ks;18o(3yPI zf{x3Z3L30vZ21&!1fW3(0Sqh$%})h1`lC-|9tr2r07C-SbvEyQBmQr9=bcV=Ud;=o z@k|&>xO3L2#cs6z?&WFbLVZoCjNU+CMOD^_o)lr5hx{rL@L&(m{1)5Yub z7?s)AfHlXnbo}yfCYX!JM(BMzlB%PznBD5bO|kM~^~WMv6(zkK^p$osLm}q}UYQ7- z5ble&;W&cd>7O-(VLu%7lXUp*q${I>9@iS}DDBo9{Z0D6ORBYIPB);Je8BMKPu*Pt zE%RQ?)8hrSn^G}3e^F5z{o_aL3^!G_*cj<{EUFAltG~R=Royi$4QxWzK9}b?+g>d6 z?w0L2MG_7v&9<|%C^Q^HGv@5pRH{5qVRW<`z9BH*$z&HkCE7Gt-geDiMsxoBL@Fnv z*F`DjOEc~rGc(9$e5>j!?i83*x}-e0nx~L~KTJ@7V)k8|ezk2M>#5%Nbt2n`*b+@< zJA8}J$D#v;H=Y{ulYyRxXEiSqJ1J3&?bF2Oqm$9MY@{TEY;qP)+iy;p9D0rfzor-1 z;)T|0K9%4(P)KxXGcqWl!1_SCac-vJ&+wIy2>D-D>?77f|7- zj;aTBH_zrW;`;kJWvg}ODPVL+uwM#&6&5o+wO+6NPzcPHKPE0C{+tVP;53#>^J}pq6|K>HxugY(fo@npY=yV9PFJ};feSx1T}su zgSq4)E|yfqwg~|tr&iMp+)Pijb}NlK;p;jzg_E}@q{WJfin*Y$-pxw7aZhS~fHN)0 zj~uMFGXOZB@C@|uBM;%d1WGiz9SbL!v+J^aK?z?6NQX*8;%eyyuFJR6n4pr$Qb(Vk zj%D9#ot{*M`cs?6TYV0XLw;TBKUG+b-L=i^HS4-uULy$kU8EKyd0|p$gb}zN&R4ZE zAv(apT%-y5Sf_I5l7dJkqW!dGa_?FAb*7}fh;~PaRwIY-hUN6!DfcKl9BgQHxDO(L z0|Dq5ENlY8~Dn8rad)PUndJ|g;`$$0uJCKZzBa@7=e z-{4Q>pK119fV!mD*)}`H&%*hvd8DSnLzUYbN^%mP2P&}5mt5LFLNbhPrt%CZq6Qk_ zBs~79;C|Wx8LamD>MxTfUCxe!-*>N%(idGGwX%~M?1Wk|DB!5P<{eg*^q2T^U{_z{ z%)lagHCFR_A*|Z<0b=8cA)&W+a<9B<3t8sval-`$c5MWZcP#e#RV=mFZ(9a%6MdH} zr_~XWI)M*Ua3-~mjyHq#(T?Xt?3|I_REaV)8?Cl%6!QjYhh5$}wmQ?cYI~)Zh1YmV zN->3|Do$izTe|+1EAuLS3j!ktSGH~Tt6>TPDw*C`vkT!|?eIvcbD1m$=|L_EIrm*1 zOl!`2!2_ZBrVaRx+dYM;nnRO~IjcLSF?X(W;$vGajfUI3AZgrCNTs&~RO)hnl=|$Q z`{(q?^Fl$_Tc@FpFJ~6YTKl6ZArVIfQ&|Vg_e%2`5j2Jq<4?j!Ol?Ms-y(PMieq2i zlG2WCr62c-EB~f~E ze$+nnS{CLD`vct5*Ov<(LH8N>*lYQqTB;+^XkGM_O(PAKITLif${n^FOX^Y`-Qih9N z8?apt4%XH21`KTlqDh4rG9LFy=oQi>y414TM^dRjSV_!NzVX^~amnP0!K3}%d`EmbeW7RFGas6-_9MP7Y+B>v+N5^Lz&?)m ze!1!NmaLd4Gu$Qu?1+9WkPTgXX6v0EF(eP|)b#^AFZ>^L1aj@9y@vKolg7vThSY8z4$f12! zW46R8U(m8qp(0^@j{S3>pYPjNlCC8)veRWiXVh>Vv5u{n|A)HtH43J-kHYKz zJpF7zKX`kEKK zHVN6>u9dezfD1VGH^~8R;WOZ`^+>qg9!#ca256cS{ROl)ZU{tfQkdWrR(3N`ivc(+ zV9nLs%{xXTqRvR`O-0DAPl&!jeDz7gm%rcv^AR?9#Gpkrx-Sc64y!Y8=YT2F9me0IF(y!h!%0-59EPk(JG7-|awuy^R&X{d~dGCwBKL^27Vb>A*p6}QIs zeVGb_Cl6IYWv;tN62`H#Gnz}Ok(*pr`HyoV!HrE#gV=t7sb1@5nJRt3i>K=`I)9v8 z;QWf|QFa~iPIy-)PDMw0gyEMuWWm!>S@Lw@?EG|=O{5tXZ0}p96_lS10^Ws4q~Yt9 zgN7p~p$)a^L6iiHgYvR(ub_?H!XXgE>Wb=`Zkgcld|OSe8gDot&3nbcT=; zp@#;zjBcY|Eu%GRsiyePH3d^yt|YtE;~h+zFJPX->VVQLqjIE)e?%|uaWJlNeLjh6 zePd^*+h+bt)8MMN^)ZI&Lzjn?7RhD`PrfnR$}z9QpwOR*lAPHUi+snw7mvhT;9Uln zJ3Ww+5R$!%$}|2G7fzl0Y43YSwce_>97QIW@Eu@=>~pR|&)O@<<_II|h;$q5nX-WC#N@%` z_G0ZJTFK`o9C~>y!yzP8zsudnz@bDIX_imrdv5fV8+P`~=bL%JIMc4wXH{F?*7@`M zeeL5cZVP<;fi%!4hI#xB@l;_xPRP|1bT{qGCW&t2#0>G$kzdl5KS$+ycjN?>?`s#k zFhmGsm08EWrClM!6D{Bwr!q|Vxq?F9XdP+w|RCH08vAX9v+Y_vYYQ~ z6ewC%xxi!{-gVGjRhzLaP@dV|BDX{U$^a|ZqyCsIJiE_c!DX6KZNOk%(Dh&<+UE)* z`RDcF^boc^oCMUwK6KFsoCN@}@pf*><@zaJ(n8~boN)KeFXsx8>+7t<)7o{Yj#zq5 zgUlbW2+gbKy(!++tI-H4)!Wuub;~mAl;GXhFl@Q`M(3*}pZ;iUsQijcWxd&epO#_! zw3zEt_bZVw@Om7#XfY%Z6E`=)v@71qqxk}* z-#0Sn92TVotIe`u_>o(!SKX|&o2x^hy!%{PUKg?i+E`VI4$R4gZPEc8lH7Rj0Th1LG@VH)t4K{05E^7nVGklEA0;v3rYrW$E}v?d$Nw zbxxRne0xqv5}bMbjgNFZFweS$r1>+brqgJ4`Yo60IG2{NeaI#HYYWS5G4@WU z`b#bVm2q!Yh16+VeE97WKo_hTYV?^-CH0;1HrwaMcgnHm1F;4panZy)l8UfZ!fv+N zXB)kd`-^Ozcjs|anQcB^U%jRx7L_dPC2`qVBZMCZ%05-_r{!l3wZ+K+_Rjdlz}#7x zq}ND1WB(m3QBOroOw64ijtvad8PRc)`474z!P-dl4|vDog5Pzbr&%^y9U##N{DQyq$@2BmLf zhOe_VV}7`gM_3%UnDCusBR)xo7RejFNxE#oEY>f=$Pjmr{xetFn;P|jNw`_ngPi{2 zfpG`PC}?H`;nzEj27H^aB^>uR#0>FaH#UsA4L}2cb2aKgA)S5bwVCzHDO%k9OcV!) zIN!RH!|8Ibc*pkJ9nHzw3**VQiZ#xA1P9h0BCD2GpL@}5*a9=2L8`1xj)r};?E?T)I7b8*RUg`}=a>eM zkLp1@a1G(%s&u2<*0?)NWUk;lKJa@bD4J))Fzr0PZW&g`B_PPuP`P)CSlti@fu3kJoK#ZBS3m0wlo^tMt{y{BfG@0RnRFCWsN3@;*v>py@s!J5b#|O zNUG6E2VoaEst$>}UwpUBd6~#(Fi!ICdpHrsJUEEp`Pk-STx2@8=)vEhH;(_WS->$Z z%r9MLW5NJ`LWc^+1ys~#_iVODJnTvV#FG%8?~rG%(?N>*+b%KL9srLic9fIXf~HF~c7>bHpX$dMGDYUEjiDT-~1 zk%qgI29=&KR%dIkg708bM2#dIBCRxrLBRn(N_A?&LoXk0NUhddLP`%sWk+aDCUH~U zC+=>puJV8pTGf5G{7j=`w^7|gSg5AeWqKm-=Db;MNYIFtr*YE>q%J?bw54OQbZuVw z__Ppx86!NR*NOg8qbjgzAd8S*5<@KmlD5M(wDT2@-@;NJp5HhkhME(7p-zQ1Rm6)P zomf~euef{(zVpgf(7d}VGi+yP)Bi0Mu5Bv?@ShkQF5g(sUIGG; zn!zVwlMkKDG~tmHqQ6lFZRl9EN|B76G4^c03H>W}&toKqBXZkfBgS{Cfd^mtA#Fz@ zdT$LeiZ46jeq29N7O^s@84JR|ZOzNm!agv{!zZyC+AH7+I(;E|YZ+@x@x6;Ay{~2} zUP4VO80OlQkX28OYU-OCR5Dy%q$2O4ub^GkFxH*)uKCHci#0IjkwkMC+xzU)bn3cU zc3nPW;vj^dRhhZSD3VxDn}xUEhO%kmEeKbbA<p`X9vXVj+(i z7wab<{ra`I`1&)!H*Nap!(@`X4WQQnkIN6_Ce?yIOCReeoldroluV08ie7v^eNtvH zZ1zlpdf*z1Fm&MZ9HO_khIV}7Ub8v2f^@&*k^fL5;q2OZi4K2aSmTB4Ok(jAhdo69lUjjSF&e%z{Z{bYP$Ko$H?x`H4QSb*WBE)iSbS#{Dm%J zJCfg7ond|QWtKUyP-PjSLB{_Ioo57dk@9@qjEGuEvZ?(nog9$LX{Fu{~Oj)Kvx+p|YYJ|^h+sbtA z!*`%Tk$i^A^J#ds#WT{@I}BCI!bBKD+C=3NC~vOki`zY~oHs~{Y97*i7azx#QJu9A zw=gKhx~^7D>wC;!nq8hA&=nKjo! zIRcqAwxy#xETHFJro*f|yOydlR3p@1@8@VQ<;`1#*X!fT^SSl|v`%J<+tm-J=!0iM z>Ind%sKjMQIzi7Fpq(m~i97@2*_uRu$VI0`L8q2DjI$SLp z#t-k^pE4YR$jadTiO=JLCZJaaYoQbW)5ByUZ)Y*&a+l>2tM3*5Qai9K8o=K&h26zQ z!CaB40xy|{V@C)@+6qU*40LBaaU|jfwt;;WqMm(X36jrpU*hLjwHsv&o2{8~JmX&b zyapM6>h*9UdMC!~f@VTwwqVe#TVALEFUAi?)O-i)-!vss2y(Mq{ha~Oyd;1(o4Yf( zj)fuX{WS(GU0I34mRfgKvXNw(?+$F^VUfs7O0RE|GIM*)y<+^-=daPY5A^wb3o0Sk z{r{qTj9z)~S&&|Ts2HuddK-gF`@J`xwH$<*iFvnjb6wC_;nNhR)lDhxL-EI~O=-D& zwNXVpChJBETO4vGf0bPJV}A`3WE1W%Z{?g^bLeV#KbFj#l*R0)vl8z>YE$p<#jmq+ zC@#8R*n2~2`33+cc-=2_tJ1Lp>P&upV!ujKGghK@QzhUQM9Hd|)!8Nt{AScfG`_73 zHJA)nVYiTngf@!$oZ?WA12zW73FhS2Ge?5!F_=HVV|-zds=i}uhN=sS*Q0Bf1(6fU z1#1R(0iHH3F(02w5?p1x5#p;K{i}E@w@`fjk%ZO-X3MWj-e1f78daR zl+yeKbZ6DKg3Pm6)>cLfFYv{MGZB1TDSy#n+%kXnHq!JN=z|bjrFg%}H zCm)Q?-acliK$Wmv*>qTV^9x1LZ)ah>7R*IF(_Gf#AV@;{rduaH?=sGzKeM~m@lmWx zn413>pA8(=W{g7uLG$a0{=3H$e*MG5=(r@7fMG4P>#Fw>0U4GbDF(2uisy_0$R z=2|S>@0LVRu6s`kB7H#>wV)3UM#i1m=zPVbX3)=0#Y(I%qL9|LBntlJEU*H z&&@`s@+cSqym zm<5P8q`3U-?k97CZ+n51)G({@)7F``?ijZ-jApoT5gtW#)>el`Fpc})>o8F(qQ$-$DuDisQESSQ^G?vbn22_^% zfk8ZbBfA?S`ByNPfgeLO`w^}Px8na)C-wte4V{G8%Bq4_dLgg4NJH3Q_^fCA=WqRD zYxl$@3!M20g@z;7k7(th%o~E*2SXF(p^rsY(|t+&E5BUzheKv-A3teV_TI5Y5 ze5KtBxMXG;GYaS;D2cw7opw`i44IU(SlQ}Dg-!QHCesm#(NdoiTd8dp+*|2tdM~h&&&Ca?zKsY$Q&G4-xwKF-cVcfn$cHIGhqTh7pLEZ zB(aRRlA0~Z523Jw=IkG>^)PS&#I*V=Qx@Kph2KBw*M)w*^ zi)~I#0o97ZKiJ%iMTK`BxdFyQ-y+zRz#`$-zcfeBHb~xRmypF8i(r|Do(SA42FL>3 zJwWS8nXr-s6lZzBG-%jFl%{gQ4`65jyb@vuX3P~l5-cn#-Nwqb(9!1!D1fe(Yt9?j z%mcjXcN&BQUn&=`kkiiIQD`T3^1zbhz4?n)Yk7_mMiQ`_C+p)L>|;xt1=&2_W-QD~ zN-eZ6-BflQ$CZyzJslF{1x>h2*qp=cmqvCU}_%oDeLbC_VwQa^@c*I|p z&mUXtQNEpl1pmFEK|pWpD#!;!m?SgzJ-t zZAKlz>_n^z&9-ve$)sB|B~~i1h{%-uOX}4obnpk`OtqO!y&FzODCgw&dgE0~V~PKG z0Za$z(Frhhuc$_4&6L)KIR-i++Gqj^iWUvzlV+d&J@hJ#u*e0GN|D4J}F#`6N}y>~{#%m3MFC#Knzb$`i&cdiP8`e3lpL)7vU~b7?|fq24ms zUNn*dBH^c3!=MDXV$>3ZRfxyIhJEUi{6V%zd)yX>>7ya4o4ZZyull1$-3=->AK|;`;1u^l2knuaLF!WiBd!tr^4LiD@I%S_@^>;+IBCnb7Hk)lZ!FWkJHy*zcbQOn4+`N}rfr$3oo|cQ!n=CQZxNm#5^%0U z+2KF{s;l)Lm@$QG#yb_DC^_~Cz?0%g>19XQ+K`*|uXTSc{#<2*+isagyG7`D+ZUR0 zCqn{=;r?Db*cgs80)MN>#twCWe((01cLSDPdKi&UP{V`T3Fe>D)(YD1(s@kWNZ%{h6)kj=ZrexNnDY zN9>L3y>XR5tuTC9lltQ`zQbKBWiwkM2?PS>6sol4ttnf7ELPX4^#U?y22bruN6QOU zlC`E1-e6lk(TN&%FQt^Fi`*y2(t^@>@w%qAn+v6$?H5}#2Moa~zMW}{5+;9z>TNG= z#6W;c#$Z?tK!rB9UM?ih5V}dmDnm{gNawX`!TMZ((-LD7+tBwkY6Ji;_gv*4*1?n8 zmb)eE+K--$D(P=S2IKjhVl2kf^N4H{chjsj7xl-bn*6{69HrtorZWl^Bn_aEvnbeu_}Ih3Dseg_=H%C$0lVH^tThA zkc&rqtSk^-Py|H3=q;rLvZ)8;8?>5-SVD7bgZ@UIrD>PIUZ56#XvF}LJn=LOFf+{G znL2!y()cYMHddVi!x6;^68>r=&SHYS-RxXsFEXY&U2F9N5c>~zQVdf~X1hKck|)bD zg8PfGLrtaElmpP|Ue5baY*Xd4sL4mu1v3hjQ)GW>m6=EW(Cb0j9PgH!0_c;LS4lUu z4-I@G4P^P7%7{y;4*j7ZF`q{z9SRDo;0_s4EIH@6R>uR&Xkn)vOzUyo;)S>IfF-?d zvzsV7C4V5ly)LQt;8FW+U%F->#KZ9v>Um+MS7gsdJpu$TbfyWMDuUe4*7BV9$F3F} z7}vLfmiyv!rB?0U=#Intznc^YNORT=%hAjb)L>XU$5neE19dx~#9lF~WtcP=uWPgZ z4T=tDBRozTg#qx>SQQokIf{F{FHx77t9=f_s1{#$GDOr(k4JibMcK}Ig9b8`3v2|e z2IZFk{(zuj;ifSWtc_QWabwOB?|*34e;JHGrF=)7#i(|W!uGfT$-4F+;he& z`!7YW>Az3&w#w?y2I-;Sn;#*pxqs@cpx$%dfdWAWqwwS*blY<{i7 zneSkm!@BPz5v%@hx@J!#Dy&x%a5af=$_xPUhaOp$0*la)N5__>SiK-NyG*Zs@acG| zPOm)22d!yjhjL}n|1JbLyEohE@;4~`pwv4!@)}ql0UBV^R|PD@7k^8eiEJ@Y7H4Q? zm01!1;!j-SM~1u;|GMEmIRh_=Qr1#$r#F2|p4LnM`OM&{^b}EdoyS7;N2O|p@Oub_ zKEmsrUwRD~WqL8sEb@T$1kNYBy^#)P>Co%kkOr%(Z_Ww3WGAdTCGedte7r+|0no4= zH1!eaOsZQwx07m{6s9Gncc{WYWa%7(h5@Js`7r!iv~hF-1|HcQNq$)}C=@UPVANr8 zBJ<3@F+%Uzh%qBi4hY{8h6j0Vzk-{>y0gy^^FetUa7N*OCBai`(u-2P36oEO)cGXB zpp?u+zf`}^@fpj`*>W`%!RK~bP5MhTSirB|yPtB!&q!hG=ii%2&N;oHl1lX$)I?Ps ztm{&sXn0{B;rG+8J?qOFyzguqaxF}-AXsdn3(Zyr|Z;N$wTN$4No)yHS9c+7MJiGc=&W)T?cxbb1RVmPREl zT%#7yo?h0nUu~fm^96xul02rlUvEuS%E0DpB4;5jtanj}oyq8x{fqYVUlB)(J3LL5 z-;8A(ZJb|+(zi~Mj&uAcE`;aeoC}uxTI*-uk@AV({|4{=Ve@6{*4a#j0+80u09S2F zoeA~1A+aEd)g;+*%384B$t zy^%|<#!2k@LV$zFP@#-*D6dv2I3X$m+ua?~fwQpE-wqwe+Dm!BE_I$Q$0nnqmezUgXk0Ob*EOQBg0n66kR;#H zbb8z}!v;y^=>5knREkJGq?6Z7m;j%@94mOQdgO*^`||ne5x$E^_xl8Q`rR-d+~U)y zO}y=6J-Ir(H8<2Cy$1G~0wu;_Fy~N{&m+I*MWfx~I*Yn*Pk#)~{vaY}KPPC76QR zdmSIw>B4(y;%nIE9dhmY?0s(u$!u+bwIuc#B#kgC`AzG9^Jk`t#euct9ky7c!~x|9 z`CasUxqhUZ?YctQ3nXtuG!!3h#G*Xhn1m9(cBm)-XkW5q#sBCBV+D+R^!Z#|;u~Xs zqW7lpf0hO5Y--W((E?J|wO(u_ zZ@_P01;Npy(g1B(ckUs0`L#Tb&Zx&4ceWu!a(9>LZk!RS>;hO(Vm~N`bq~)qbc!j z+Oorp1=$PBHn(Fu-Au8@>+Slo=sw6QkwAFQ+h8VpOH)SWSP3MfnhkNPE4h5Nbc7lh228NZCD_a!3 zY<~P|uj)4_drB}3^#{EgvzcIt>0))FiJ0G?8HKI1$Fx7QNapMFmxZ{sIwMvUdh}^9 z8!_I4TV`9rBF0_t)rS^K*MlxUmZMx@MMyWqV4Um9{sR2;gDF&E_h<{T4{9ERGw$GDev!cyE z?lK!eH2(Xq_MWrfts?|V$#4I^i-wFE=11DHHY!fm$ua2#V0W^mhAXD*T+<9rwpE{D zoO$-I7Wr2f8^c zqV0aV0#e~M%g(O9LwyS?1-o zJU{v2ydsBec$Sxj!4H0;ly3bS`$yG^~_b9upbPs*#X&%nK5{K^2#GL&YY?}zE1Va$V>z`F3^CF3K zohgy0tIhjgql5fR2C55KdghN)>yCDo)+n#QHH0s1U8>cHUhe!K#4N@{y7oe(!!WKO z0+AoXZl#C6O?LIdvn^a~`%+UHQZnmQ2ltSg^8Iuf+w01{+-eSMB5X@D9`Z!Tg~sAl z@O3x49FDcMrwy7%O#{p^KtzMhDlJiYSY(@mvc*GT){*Q9@I7iQ#u+a5#6wUBsK8Ha z^{&nIL?rFzWrjV}=u;)ZYVaSg1iWw4>V*=p!Z#^WG9T|WYTtCO>k}%fOqi^}!XBGQ zz4U%<@U5!qE;K64cTzC>Z`oeJImrLQyJLkif#?kGrEXt3ok&t#IH+rk z?B(vz83iEA?jAM$tD*Xr#FAPDP^;x|jI3345HgE}+OF2e5pE4n1>Q$m_Fih{7MS&H zYX8zgClT>@Q)f4w`Q&n1_#w~NJgcO&Sn{b)Y7KDr2>}{%ru=fjtb4LO-R5eYd8=u^ z#NKDX@Im7R)`x8ea|A!jbiIv=6^#bxnbQ4iNkwdJ?PJ}a`MoVm+=li3ez~p<$aL(g zmm8;!r#@8H_eK+eS^qcQ&FQqX_xmno$0#t@otQ3ettd56`~TE~j7foy7pj!JBQc0C ze}HL2w6><`hf@-uaYn=>@UGi^=y4}`;i9Ncdz_!I}E4aQ)>gb2@aDk;w;0IXAeJuPz5_#7!kJMv71RCy`>Juabt{BSg z`qSg~d?>wcPOtqPIRiJb zJv4D16V~y=qD|_VL4|1e`oXAOl=J1j<4UmiOD@q<*+1wrpfx(A@drs7tobHTsa{j5 z@c5ye!2#OO?G^7HL9q($EBLJD%r?n3S_F5O#>+MQ6>h%P|G5Qn0$|oOs3gm<^?zS* z@|OJImMH8}{$*@ETW{3zBSobK@X|s4U~_w8mDay@0}w!we09+Q76jn8$*Wo0>zg46 zLd%K?f9)B-pMoq+n^i-r+?c9D97NRUdBs4lmI-Cc#ogUl+ejmNHnBr6qxQQ#n6%6L z{984RrcLwr#4*pWz#z}f!$YR04K%%tKo4gU%cHxV|{c$7ov+=02B{c9Z zB-Hb3Z@ph&n&EU91)Sn@C`FR4I+1k8tjs{NGRm6IwX*W-AUqe-bpqqwFhimsUS;0b z%bMO$=-{$|zYk$c{<{m4^GKTsbJ0l;@fX7Dzy4cazd?T5=U&+P9%A4M`~>|YLy)5s}>X=)(bw=hqULxl-~(NmO8AxSWU0fs>Xt+_gr@H#lku&FSj zAt=7i+G1$i>|Upbe>9SyVNoLMyRuLNJ31a<3Nl@Uc&*k;8l?a2!R``+1P_<+6j#WF z^hWjs)a%)i z?2_w1*CIgr&;2vicer_BVSk|DCiRnL@w9*utff-9rM`ZeJ(s;0zypf{`+QYy(ot?V zMfb0^#@h)DWCy(Hp0n>|kbl78UIG5USZK_aZ-JeyvsiTh<^8|(LiPEGqucNaJ>#R7 zj)1aVT^$R)zlB~blzL@`L`+)zY$@s6fZ}Y62CR?=ukU;&9b@v}* zVi&Z;Cf7@~MvYbcto!Ms)N-w}ch$1qxD7wD3Mnz?6#!yAdJvJ|w=LI5|K|c-9+9B* z@WF{0f~!%Sl72AYr+kPkCqb~I4e1&X6dc$K64SnVt8#&EWS4kFU$tlTJS5H9wK>!; zrl9$+H}h{8CXV3d)-Q?K8d+%bp%h1a^S5qe`}3nGf493=nnA1-0Mzhn^pNDwqi(_U z5z7HVFBBodwcFKnyd3(E)w+0-@stZzS(o2G_jG!CJk9X`Q)qS*gI8f-C9VZENw{nF zu!7dc3TF&Z;A~I8RT&!msumAfD15B5r%oQiKJ*jxXGDxVAl#m8YyZ*YxbR5os8WTm za=!KaOTGloH#P!n0y6Cyq5r)3|2et?%3(rZe!kYpU0rc0zQ&8yd|33tm`-n>K2dhE zwhX@5sw}*l>%Fh{bPq8Ac2fwMn6Keer}w+Bzb3d0m1L{llp?qDo1ZdX+|JW(Fpcph z&2%oWh+d8RhObDS{tQ;)ve_;?3=E3WMt^;CJB&!1`Zp$-Up(k$LMxUm*I8p`rS0}s zC+xPOp8MCrZk6N9Wp@93sDidAzw!FQ(RzdBt_)g3u`W$d@gdKJzVp+Algv(H9|rl` z84fn*Vu|kj1k48txuP{+`?-cow?cqFgds?brr$v`oQOVb`sp8bvK7*JqUISE_va`x za*Dq^R?_qBnEF3U&Hujme*PucwN-k19f2(-iSdgJTjpl`43FQQV6DY573zI9r~`D2 zPx_7JU{K=5R6gHBcQ?O(Ok+Ai+dV%cL4Y+M?A49C%waMLwa#?o;^*Emn;Rg&_FO1q ze!Y7zpE?HI&O#@uO!-Xw6S4#HX*sa51yglWhDR&=)|_Lw7O#e;Ku-M*tC^ln3cDfu z-McwX?4L?%_Xhep`z79xG5%+-bhgOnTVk21+}7H81y+rA15`p@5Og>ZPxMSjmY>+j zzoX-OtBz8O`$b0_kL9x{twI~j-k?%ae;A%L=15|^ z6##q9Rv?GctO&2Mg_K&^T}i0(+EFn;p8j4W$gk01R8faoP=L>FF88-|580J+^#!pU z&*$?2VJGq98LfJaKQ^1(FTnm>RToml)9S<}Fl2~~sFWeyx2LQW|08q+fUzVW5cSMb zwsX<=Q9i(Cdt&iFA9v151B*{XqvJX7q*+?)6NAlx5MMm=7{32sWFdZ6$T!d9uM>ek zDBj5zs5g6M;W%x%zMtbR=S8V88&02}ozU1DakTtA=fq_E?js(VDj7*6P+<8E5~F%w zm2kkO&u)J~;w;C`yBNxSIoj+vV>KT}u=w7IwASR2Qu4iGa6dm$QiqtBc*_4{GmrB= z#&9$roop&EFvxZQ(DZ+J{GF`SzcyB;=kLlS-S1h#zyPxIf|-CBiDK&$te^KF*AmTE zZpSkaxpJw-62-Rjcv}Fg6Ub<}#SSxHE?rS_g}B2~*x4qnP(c7WCr~yuH1J1z3!C}V z@SGwOh)m?ASt~il-umTWe{2N+DJr&jJ=wH)-Vp#mzW}FGgiqP2o(}>R8x5Fi&0Z0d zVXx{iy5s^dhVG8!Z%CH<#C&b3jF~(_63uU~&`3}(I^k}&MgQ+I`R~(!4GK)dKGWzg zKCe?L0KOEZy(X>zP@Holte)v5BCNzGB?K~fpRgNQ_$g#lZp#}^*V_}P3+}SwXq2M3 z(z!t8GI;;BeEjEWz4!>0X*@uqc%O%HcXGO0`$#SJ``}IIm>HYfc$xnC{vJ?CK~Ovb z=VVCPc_3URIaWPAkzOGzr?pinVH9_0Y%F{@j*;|=>&bbN7~l-LX8S#vj}42dJcWh+ z3PPGeXMf-|+$VtLb~^pEw(T|$P9z?{rCZ8QC}!E9n17w4Z@J4tY&rWw6mWG)eT(UZ zHD5n9x97L{W6*t2xzni>f-%Guj-9@_A?j*>kT<^O27d&9Gn!bbl^=L#sRYDCh@rdf zmDCHjiHBeW_sb>;pRijseCIIlmK+Ac50zh^>86G~0adKoX%2x$*2mYi#_&&k=RBt4 zT^ql~kHxpA^Fx%<7ON?U&tG!)*08g| zT)sRI{Z3#W75Rk{$XSYirH~`qFVq`eU#bw;7~(>fQ@Qr5DX1UpuAFN>n3EQc_Z?j+w?-4XlQ$>-TM8PYHu40s~62Cg=hcU zGRb*)XtZWR?=4fR?EQ*c#9zKFvm4|O?t0CrP~XYLkLGSW{jyVG%PrPap6V5> zVvqFTclezC({6cK=u?bX<{Y>(cs7f5@g3I7-?jm^r`$UT-K@Vw&liLd`ub9ECn-W= za8O-*1aL?cs&fL0MG7-!+b!MkxQmEg-S|;;|4@@a9dz37rC4?M*+l1v!AUhYc;m4Z zeHB0^6buN7&($aISB$J6?A^UxbAM0+yw>TRm&k~(uB>wv>e@Bz7TMy;yo>o^O*My4>{u!=qwv%0M_tClS??~`_f$g3Ijj6a~x>YJ${2h^@AV6+@U0_gz zw2#C~HfWL1N7_P!)~`%*Z&R?lnpUneUSWJbn8s{zzUXK-dN2Om)J>z<^dX*FC8T>vI^$M&kAM z{zf1;9^`qwOOr0(?VG}8EpxQAiw)_|<(7T%=hP%T8WpT zyzF$7L9^QNIG_9E)w$hiFg{?#HkHHl-U1%Sgthy>>XifrZ@p`-h&K`9)KoD+v>7IEVMc!r+n5&^L%q9Dp9L$ z^N+-13#`1+sLKrha*N}HVp}(f;%pV5BndYrpGcO>@v8%20JUf{O7oy!AU#gi79-jU;U@DsqTMlndlQ6tx zr$1ceEB07{;$BC=#1b5uj4+282$)PW%PlW-%5#ufM>mV#(at^(jL%kUTb9;XF&%$a z=e2n=kWQlKqcGj*G+#`tB2`*SyxJ}9{1V(DGRnTu>^||^UaJu?Vo(pV*}gIX?pE~Q z2SeaYYz*mZGNn#A}j-^x?b+dQM*unw|tpQCUDN`Aszl{yn^9IE4WP|{D7n3?lei(vlwcQP z>}gLl;?Liy4diUIf4yp_qs?&$nqNm7O<@=E>@+)5j>@e%yxH174k;2dF!b8-0#?el z_`B`uGagu9S-iQ%fp`XO;itj5geZ&aoJ9*|x}}}>BF)(2xniLS-L|Tib}^&KAB4qU z3mbU1K=Y~hcB@U*N7GB>(w0j)zk85mzF7J$nRvdz@U(fimcVP&FNdIZ3)%O4nYmD= z-JDeP`E%9NdW8Ez8z^2$nG&7-?xP<^CiX>)By-ayfBuYn=92VPS$!ymlD&Kdbs$-3 zVCBSVPwOn$SmK|n03!&w&XRl^NA+i8_>;?r99l70a9u1gS&ff|3-l3qT@UI#&bvuN zb*`Z(o#Sr$Yk>^APv?Z;cqO zitIY89IK0UPhd(<%U0~m$#CSl=k=Z4Fi^MUr}=1wyEbFo=&mDa?Ek@~#$WkK^fp^);!Q?kE z*1827LdMo}^j?(V3+=yHIQ~}Z^%!&4n)d|1jR`KGTD*UWz(m?iJ8aoXgYfHg%+TK$ML!<#?P-v+xpaht_ci3PPC!ca zWPi89czndPBlHbF<*pU0g142QvQl6xoW`mWImvgl9S_>kr>>t06F3PT~_ftHn zvZb!n#GTMc1bIo!hP2jO%BAyY9%ucL#2Y#VcF-n?3iCicR%A3}Kzq#p5(hU_dh1Z_ zV4swZghijk3{S{q@6YBnQ-pa8Z~|`7_3_C>ZQaHT#sH{RFWz9ZGVbJCK&QT>+kG|# z+5d6>{=J*uBsLRmNvXfLmz8{&Ks-2o^XB8oD9k#t4*mA3+p=3Hyy;N)du$kEdjSCx z7X9B>>oFST((Qdq!lI&183oWAx?F)io~<=zp09S~j#HQb`U(b1EI4fbw9JXIlh;oE zYprJcF^MEdHFDb}NG2Ao@~=@z7noqRUaashIxFwBbtjgF=V(vxwm_Hd!@u801>TkiE3p|PF6Hf&Ip8{1SZ&Sb$^7-vjq%CFuP|} z`s9lj^U%^spMACA)e_BDfj@{|UE3*z1_!~3=;1vBZSvV#Q(fa_F2%gxv|8_>_#BJ? z13}3go=Q3{3Jwc2hSgV4Mkt$53?t%F@}0(fr6HYFuM6dPxjvVyR_M_W^br>cLG*tf zv46G)5)%?-tSl1%By$sOlTqhD^*)UHTgcYy<31 zbnyPnhW(ccdCEk@u-?}nfZ!^p@`v9B%v+`=#R@x+TJ>{77awElE$53}x2=|};c>LB z7a|CG%z>P+*=j=`)!L@G9}^kvki1(Ks0mD0EO3`>Jvio@HK-vfz}|Wn-A_AShIBi% z(r9BoH#`@|qAI6yf9-mPzf$LP=B9BuAso`}Aq;Z4`VM3Xq?*6Ac^4_}g?z6w(>Ju& zeHc66fcEfw?HoG8H*HI|FKc2)>eI~X18Cp;S6_PO$XX#^(7~vQJKPWQn;1;Rno`Eg z5dMCqEF&+uL4Oo4n`;lKO~(m#GrHEUe}Z@_G_lOkuIicJ1Bml7t=Ljo2bm9FUmm3K zu~Mp3wzsyVCQ}?Sk}LxgDz1!S%)e3U#Q8x#Bo9<0lp6ACeQQYG#IS?-lbGl&+SyBb z0hAx+qe-y9kkS#Hi~jnR%=T^^-98fc=*2p#PUi0grv=}bNxI~#-z#AH|$ zJ11@H96zcfGc)p<-$%*2Hlo2TwA>pn@LpdwF+WBSC2S(AiT<=1U-h!@pPWq95MVBr@ItdI*JKGB)r+o)zzF5!&+Xi zl3O~ez<7WPS)hPQxebu3_bktnj0QkuwOmT0wMclZK-WyWVqIRuA3^ABrO}u!vadZ} zK(9+rqsb2Z#mg~KmIQ!GBKhJ;2!{?Wh zia^tTO&{O>COK2UVD{btu|Ay2=FUy$NRb=p&8}edx@ec%)`yQQ2=Y5*=#|#!tj_-? zd%m;0SZBuqW$P)6K zY+(ykucoh-#$Mp7-xf&Hp zzEmmD?H3z3S<@8SxboEV2*<54;@k@MsJt6tDW0c+|mRXRYf?;2N=t<3N| zqG;_)Wi{vZ1+}>DP$J@UYf)4W8;&CP;hOar)V$N850Y%v;p{N#c9g}LqXg9fw4^OJ z-Qzq9cn&8R_t$4O?Iv4={2sq9fKgC;!i!HD;m^I6%3-6NPL1q$c4xU@{>M*jcskec zi8i`Nz%0uT)Z^b84~Q~T6RIr#IGwFbZd1U|@}5Nf=~-OFB~@EMU$B8 zsh-+9Ia_VMp*E|^8lI-?2AV;6 zIVtRxG5`!-wR757`gr%AVekP6pr!71UI%eugvA$#BQ&Bm0C#B@%RB~@IgbTv;`CzZX!cu5dpHNEoM&gaUKE+sQgyBpT+vnTI1r99&eX=Sj zM}k7xAG1Xn>5q;wzs1OafHpE*`eHa!V?HtkOi4qkau|b&RxaHcf*nR zQVW?UjC=F4p7w|1IXcXM7xZE0XD{}3_z1)8!Wx%Td&LgBHc>uoMy+qd;e$48IwYk7uYt7nP=kT6 zeiNvr_XwfM25cr>rJs$|jD2e@H-h={(X-2OiPDl$b659?vQg{{ZJA{11YLjE6F!TLX&N3yoV{Uri5o-ew}BgZ=3u?CFmmA7f>LkAPAa!#^|o zY`I>=__%2i2rGts#?P12~h7!ievH3CrsCIOVY^EHv=i*lWEEU{25+5C^F z$;>mAAzCwdscS9H1ps{kZMwO+xw?Ow!3~Ivn6677++`at7y2b$5=`=OBC}Pn{pHry zs-|%V08UQE4#=yWR1qTL^Ctmph+PIEXn=&tYH}($979nX0%7g~V0qoSWkw$^IHKUH zU=68Bte0x$h)h>qpROs`EayYyGP%qBgfJqBSp3E$2guA8h4IfIT5%D^=V^dFL{cmi zGaIN&zr70JDK7ssKYXl4r`4^uP&U6iX0v*GNBF2D0Vqwttox8e&TA>d6(`#a9DB#6u&Wu}Z5;#t+pD zWrr2?2)I6Ix7lTqJ|AoR>aS#{OAk00C*^66=SFS_A?&ks`HY(3bH@m6yCIE%AVY8c)tVf%;lMyz0x!DFrMng zvIg=$mY=);m7JKNIN}$Rr|p-B1$W@_Z(9qUL?UFiFPdgtSZHc>_h27#&*=6??8$RB z2Vy=e$aeoi(#Rzc$z!*?huq{56-nn1Z;+9jiu{bT*j01f6FfFz2W z=O4|)W>N`RuCvb9@-;y4RfZ1Z!?~gTPH)N$C5UQ&6k}W$bTI(<+?Fm->+owlUyzIy zvVrKaW1Qu4n3LuDSnm0EE!n~u?_dU)6_c{7$OAMChTLo60K2xX;tgGh_+w<8VEIX`U;-i<6jV6_L|0SjmHMndW`^q z%a??WQg5~t7E>bz#n44G0VWwgJQt4{0Vt^zzBY_sU1o6_z1(<{p_{J%e>+6vU@-R<=|Zgx7#C8LFBp@8KpNK6mmy_10798Ml)(uHG7j zm3N~{Zc@}@v)Xo$wC2U@dT)PySyw)p@ibu(-yt~`Ud)q9ldBi6_9g)%|s2}(|MQl2*tE`^h7hvG$eR?Z)3ks066kOP|df6|B zmQ8B*-)CBrd~K>QwrpInyD?I1S@8*;HM}&km~!MC(`cHnqc&X#`%B!_ZTAXFaUziU zH87ryT32@~MM!YqOfjg`*cDC$T_YNqUWo*_vl=135*Tc#(N`Se-Z9Cr{+I`OzxAx2IdwYFe zKF~TCORuc5oN1^xRIwRA@0ZVkFN zz-CPQ;(+9EXkveGPq??E8cTc63TQImw>P12%sUglmwnSf?fja=%Ago_k=T=o_34mZ ztJUe3bYi)<_k^Zov`e<&nMUUgAB%5gJ|?ZyQwZA=o|^FA9z}03+M@Tf77#%y7cWVSa=zVT;PP6 z9@CtsbGX!Qy{*Cyux!&{)8o`);Ps{C?x$MisUrJurulm==}`Kq{|YSuNAJyJX5Ud- ziD<$0a5CGI@Zc1Y{S@+`4~xYmTQWGNZ_olk@ERVQsU(0>ycE0zhrZ$Wgkcnx^TVTb zDUngFf|ji5DEj0}5E7xHAsx)q9lnYZkdCMBo*=bA3gIFo@A1rL2*p0}ew4iZSmx(y ziBj7|w4cZST-fLc}8T!acgMHihynr_{q8w%RB{u@D z8z+t2)X9rdHxFo8Os3S+6<_GK&-!J(zO;K+ZYT2@KGTcc1M!BxQdrGJ8*P^Q$xJ=1 z%U;}X>}!jLcQTKnw@ z?aAz}e~s1k{tMo6YreL_T+a?6pZitJYL4i3{7N7$Eiv07xS%MbPJ8&XqeT&GFn0N> zFnoed4nlD(+A)NBGL@!V$+wyhv6)OsDCyFsOgim8*FG3HDn80=spPRcAqtXOO(YJ7YL* z?(hD*^?T554Jje>o+pg_%rjAv%eOPXnhq(FD8ByCcD);?o&}t*>UyMhRLa-{A zbAE5yL9EQ|P)!ug=7>BaWsMl9Y2`*C1G3Xp#7qswRscAGV#BF={1d=c z^fIiiyNbKVli{`;%3#3X8%-7=G;qH?RJaR68o(=znk<{!Jq$wI$`-bNl#mr85P5r@ zXwZXwaUs%>0$d)0Cu=Aa4C zCSw^AxZbh{CZ}wHF=kHvTDv^c{0zcc|YxkXdcgE}wBtoHH!P6$JhY;{e> zV}ezxY)(}@n1ssuMa{B>%Z5235+zlmvHz5*wYA<* zdK_yV7F39Fc2c@o;QW|ztcNGCDD>pKKuxf`1v*N06HRitn`to=^3tWM(J5Uo(7$cv7T#W7vCyhh7g~r! zgO=hN&a5dp)^_^y;!m7wOb(HZh4D112~!sG7MWMm8n9y>%iqcjsB8@TeoOP*6Dql$ z3%GReZ|i&$qD+lU<18G7LuT5PllzASV3@OHrsKN28XqTMD*oahGc(LD-rZ||kWg<< zVu>zqj8?6~CWGfTaa5))`Sg2eysxxDF{pqo?!Ne8H8Ub2y+v>+wzpCK)K7FQnhR0Z z2(8_+l>1()T%OCyJs7<=`xET;^{1jU2Mp0G%?#>aU3F}A96B?tg728N4uyC< zl#)w`?Ikr0|9t7SOI@)Ej%Xe=AHbhN6}Yt1WY?A&=tPe_&{2<0+3A?N`PL(I`x3Lz zD*swI19WXd$;873_sx|KNr*L*Rsx5VQU3OC>vc^f%`gx4_Qd8&RPzCCLFv6OOaul^ zPRqFC#|uux-`Fg{LniTC#25=r?ZgCVWaoG0^gN={rSAMF;dfI&vK6? z!>B$fe!^cuVsOnp>_Z|6mbb;#7|&?$3Pmj`>Jd1eCjr%^2{=S477X>Df7Piejh;O2 z2&_-NY=c2d(A6`U$2?jyMX_G3n~TrWWe7jt0GE*int2)wH8ALu2mt_BY$$if@fY|N z#|Kf}2kuo1nc1iEzt204129#{mpR5}&`A1GWx|c+&xsx;7UfL&ka+ccZ;dc%*kGuA zmHe$Qsqo`|sNF;kZ!Xa7PNK?ssLnFl%5kkruB>ivktEA&b(E(!#;3+2g*1wI&i_>PmA?h2{q2;kC+J7nQ~P?TY(z7RrbNjpZE`Mq zk-CN67)`GmrPknv8_x;|p<#E+ZFX&%s5*R_A8x59<+R-^Y55$Ggr|@OgI~J@f-MgQMeJ9o&HLXey?aDq{uQwe0o~A5P z>8L_d(KJ01_Dg;*%T7z4L6g)l1-Hs#wv5{t!BjCxTd-dGDwfR4hF&K-vIM^X^U3}K zsbOd*PNuut#wL}BoSNX}&8^qpLxOUdbbK2nvSHOwOFO>%sb=yr_-3iG8atb?9RIbV z0xZLU%1j&I^Gw`1w6`OxJr&KtY0L*y-;%LC5Nxi_50a5^4wZq9%%pg5VUEAQ0|>oy zy>$TEY(jk+_TK|u4|PaA@F(unz_W!;UX$onK8>M^_?yTx3%|9Dve+dm| zO`^dbF-4zW!eF01!ecX|CWZlGjIRCcjc-uiX7cC8v7Kgglt<2|t5U8v`wG@j3J}7W z{B$$<@`c9^PG86+B22t%U*i8-piRJKrxbGgzX1sx%B_u74X7&22EAETTEul3^{0y+ zO6L1Qnj;FEs;>KCOLZ}9kiH*fEViW_SIcX?uS|WR*h*f0s2|5{q6}2*)I^t> zl{ln(cFk_~Wsf#}MM6Mw1N_{iORx2$BS3G4Q1+P{Ef(;U;H}wksu#W>j~9qJoJi)({mE=5zbGJXTPs@8vcSq0L=l8Ewsr zTFwl{Z-jS&i0BCe^Iw1N4k{>mo=@Va*>%+(_l;o3k@)h&_Ai)0Sn5zo#i&JJN=96v z8u2`TkL^S1QzKf}b69sNVBPPNghlhHnKnuQ%M<87Y6GU+A$yq>V1~e4?7Z20u(@6hWA8aDJAl{mAcz)2Pf(^+k)5a^5#;3Ev zF;PMz0sDIjYXuc#6-(78xxeEv-wOgTGfzE(Kh&J_%Osy^cmvqXSu*4*M&Ao$lY5h9 zkN8zCkTW?Wf%dLse&{l#QZ_2sbhXo&eOz$8v~HV6xunt~q}&)@odb4dp@3yVb?lT1 zrl32!mRc$oogrRjWQs5eX?bs%c2HzyF5QBSQtmSQjEagY>RSv|QcvK$j`Q!$KSd^e z2CQz!;Ov=c8p%HzXd&<_$SKDPQ{qEbq;^@XYF;*{YGnva4co|2MunJ+9G22k77R9k zuJ*Ti*dA-w5t9eKXFSnjn;1$lGQ62ihWc}UU}oi-)u638_gaK_`s(Hb`_+@-&^}$8 zWqf;5#f%lFlEd)n^8@cske0FV%Umgkg@WKU3yXjX>7vg5yQzjva%*m?nY|onlu$Q!2BeozND0MrxQpv zLG^ICH_aiyYXN3yh6XteWD0`xJsdlDlsba6zyQccs`axI!A~wYWW*RGR;zMbg+;$P zgW?UJ6}yuJGEsdr+7m{_k@C|W-}-&HzVM)T=UAs;v_3#CoXuvr@% z`Qx8<1k76Vji>K+i{&*6fXPSJRBpdw`0<>_BQE=XK!5tYmA`--!-}(&!m^8s-RJkU zQfKEqiKmAWwpmA{^7d_FY%Z;KH)ZqEZkzh#u3ko&cHvt5Yt294P7V{3j~}l>IrFCW zUB-rC532y}g<`k{VzLiI{&^!+YUY=~`1bZnZBw*bY0MR#>y-Lbv*)l*WtIebb*Vj< zEg)JwAnEh!gjd7Cli7O1Su2bH1EBh(it3D|ocOLWsonZu2oI)E{OwO0XdE|5?rJ+a zFx=`Pd;F%|hOp8(32otFd&6PB=4kEGs=uQ=eRXCh+UCHRjS}yIbYmFMq)~;*dru@w zgkm!&_m)&FSf!N$2-Fuc;yf&&E}JT>T6P|Mh`;&3uN}XZZ#Y77k3h$4UWI@*xfb_W z|Mnuto5rwTw^+G!zswvI;TdV8I*%aurjb8m{fwu%IsyNt-fLv$U|fnf5e$e;cfR!B zcD^0UkEJy1o_M!fM3Bopt1F*9q=Y~Q2{?pl|M;Qc+NLfaj?b3+cz(4MAcR0vXl?5M zCF})eZjVgsVx!G9w(47vS~Xe1ZY3jh!P)yUhYzi4iFotPZjJKoRcA@0#B$YEcS#@D zeNa$i4qj*^645zY{j67;|Ox@lxEY#)qq%_?0etE z8w;}TfJkSqKRtrg(|_sL$g(PMY*%wWE+y>iPf_e==6wo%Z^Rc-=SGL?MFSyjVKf zuRyANdCvWi)$RJUnT#MB^&oYS4@sFpb25nXa!{8zPj^AmOyL9|(EulOQ zPu=WQ_@ALdAu86JM54(9smxM(GFOS`zS7-ztJvKK4n_P&xWxf^nE`%f9dS5ZKCpi6 zIS%GQ;5Una&t8@p0{EhF%5~ZU0gyu;3~LmTo8OAM&}VZv?}mz$4%P%^|5x;b(fHWE zNozOymCb9};ZqjG7f}`lS`%3>l3NcSPzWwB4)^!>r@1udeC(^T#-i1P+{|qC$uJXlSpIF zWg=SWfD=PyH=KPZ6r4&vWq9|%3YgX$DS&)%^1;345 z;QC4nYanr-Kw1YIR5_-|&n!Q9BqM$tX+uz12R|Fwn(sJF&Fu$Yf zjk_z!-H-k9FZ?jW8dGjy1%_#*19)E_k(?-B-;N8G%@UyagHPsc#HrLB7AvnG*FV~* zgIE|-v@a$WGwDWgTfb!B;%^=&9a=nTv|`|$Mr?DA|1sj7Zsm?h4F`J+6m6Q4sWWW9 zM2}#mHxNzbvg;*BuG0&5NzQkmA6cs2dELtF=yMEyt9O%oyhrHf`Vgu|tPMK6-^Mjz zcRF_2XfR9caQ65bdhhPm!QyFxbF=N{GXCZp{+hEh_N+1R)Zlmuy)o@A*EUfKa*&Q~ z^XroL>B^Iufk8${x|;O!{p;0<-kzq{fy17?CGc}hlNNzGrVXaf#v15KJZ%5DVZ9Cqa`_b@pAwQY}J-Yz*JrZ2? zb1^t#8w_fL2&t+A2av++#fHN}nXS1s~R?6>#= zgD#xyO2(mcih~hwqSfjed9C1nbj;8)*!iXJ`kM>8GiX2}v$6={0gW;?%kwlp6Y5P^WJCT7}Kj`>rXLV~;UgagDJ2Gq-R` zdL)`C9`tqt1M~xE1A>ACWFnrgk(s=zI|J*#sOEYl@?f^o`m?njX#=G!OWmUTsTY2% z=Es^YjX@ah@7)RADP3*Y7kxTXqRO62b(*O(k1groAN5KWGJ$AS#&=RwnYVCq8q-sp zJa!ZQsIo_1vCG%G+DsO6B=pqBw_i!Jhvch`u%3BWrFz%I`y2wQ-y$F)^_Zps zsSTX%M{IYoHbYB^&xTQ+8yqYJnKN=`lME)c)hq=QIpf;giWOR1)GB3a_bt^BetcOU z7erTq{sksHxan4R-)zJf#}X|955ZuV9I&`jevjEV$kblJcWDf0$Fgl~L#ZxKl=(0O;USG?~T61|<%@^+6KZ;Uh_wofR83 zcY{#GM?lAMgWC1AtrlCT6fX`IkBaz%%2P*>Eeh_VkjYzZ3i}TM!Q3|s!v$fH$4c{< zW$YHcZlc(eYJ(=!QO6GbcR`w%Cc5{yzheZ|%8i;pHLLrlEAt$1V#!Gjh%M-CGEtZd zrs~OAzl)K<=x(|%kW3Gg1#aVBHtRRL@O3+%kBFnaQ6BY0iDWJZLeWK{XJLXiMx1$l ziIY8l>NI(1M^jxU9&TMljBB?PupXh=uY6ASW7iiZe8X`~tXOONdSxJ{YAvX4g7)cm zJ?s?nyH}OvP4eEWH`1?$)k}T`nlycdcyc1JslpZ+GfSPOpW08We!2=;@??G=P?~I? z3dnxK?+));hs_*r_O$7j*RWb#gR^0YZ(f1%d)Zy=9AHt9-4T2dI}^cIinZhJT)M}z z{BgeOEF)Hb%)Xjo)EyOp5h%O=r|uf3LqerWKz~*@=Nl4R0hxXoj>6f|gl@;50s@i8 z$+mi`&!=6V3};#}X}HiERJO~s%@IS{qKGE~!^~q#ucoVcQR09(OanAsOd4CcP}DD+ z`k4CEhZ1L9dj4tns4Ul&W-$iZ@su&=bG{sQK8cct?MvQyj&fCBfvR8J;Ud~DI$5$6 z(h%&W?Rrlp=NGR(<7Kr~O&HA0R7Iq*$7BX7TRStgBXhbdccFe99%-}IC;(C6#RpyMb!my~CBi8PNX$KbH67>^M-VDVHGi8S@I_Be+|hd^{2JlGBgi_=2H%%5(~)5 zuz`79CXMBNGoxg6t9$)rARZ~q21k$_#FG2OtLo?-9nZf;HA^)jplArebwx@L_o6=k44KZZXTrL`U<26%W4 zxmCXsF_mc!UW(?#5(t~}7X8xICuv@VAgV(y9<9a2MiXVHYf$ET?=k*Zna&vN&KqB) z(^24BPl@}pLma=OqQ%UibATAIEzSvl(2_^-Tq}lnJJ{gwqxg9``|+OmIdWQ0!nKLf zmcc;(&jfv!TIj!2w#1`YTMzF>_v$-2ja^`$N^Sha7^9a?6ATs09v^ORzfeSa(#_Bk z!M|t4hn--)xqE;5gR@bx0)w}jn{4sEN`Y_I)A0H|Y)F~`clwi3sNZdMspjL^onE-< zd6XLgIZjC6bz}>aOGF9Qf z&Wae2SAR*CRpw^ox5o-<`^V3*j%qu1dQ+Qdb2N0rvCc9Q4czG<6c|xB;t(?byNWq3 z``b^)uM1JcIjIG59H_UTVp& z3)%03M+5=)&)&CIr?ZxsgoBC91vxALOd0@0L-+H8@nT%zQ^{EYRw{mg^Q`j(e?H;G z8Ri#n97`FV4}g5oLD~S`+pf*^Mgx#dZ~_S$Qs#hWXRza6&*281?;vUq%@k1u&(2h3J^>o;#a1-C< zFP`V!`~AlDKgWodtuVx0mTmg%u=VIQ|k5_Lz#7^Jh%S)01qceHrwOt9X z{KW+BsGfXo;)73$=45r#bhQ^%cdz?3rM>5ik%Ity z{jA~9gZM`ue=wFOLtgO0GLq_NKSta!)SJnlR?$)?WBeMH3?F@B$7zs^-8AfC^uzSy z)yeeLlmRetHIpHk52~3ffu=6A#5v7GxtA`?6(?F(=KzV`KN|3EU)Ufx%=8K^J^ zE+w)gVC=nYA%!lz@ec0XfTJfRv9&-Wl@Hc*eO)Ye>n-ZMMjVtych_o-NT%H z=nwNEfGmI7l3sWC*8uF(C z%Sp-a^BgquK&w_xndaD8uuUo+EdyjsC{RDDzI(IYXooA1Fr1Zx#ho*Q2mCg_RRI67 z)pTx2l@FLR=ih?GU)H1wwF+_tIVsfAS}TL({MR)pKa)?eXKAI#QhQcvCN=636B02F zVVG6ymv5M!HGxXGi22g}r#r*i4=3>CCwXlI`SCVa%<^|PceAiqG_ZpF^5~U4fx$&S z8F;g&K%`xLM-fZS_lKOGO%pP>~Vg<{7-Bi7O?#*BMK>nOlQSy@PVeNk-sO(&EHuZ?!^d*jTYdM%U(e&KgPQtqAh z<6f3xP7zYHsSD~6T0D~lw`$nk(S$%QR~vJCUkA3^J@x6Jb3pNI336RUfc63f zkok_Zujw27r=>T<;q7GZnf~7@h7-V{v-EaHZw0|*dRnhZB>K{ z_0WZI@aeMOpFqMP0>{={;j&h5hu7*>2u|G>2}}8M9>0&jEP$u!6DJ$mtyh2USuD)! zZa?_N=#;$FmiK)B&D54gd^(@5_jZT~>p&ozYL9ZNbOxLh4UlssR6v^LsM{?`((5k| zI?5ngW{s$Myl(dSdm5kZS3;1_EFDI4+zJca9YWjzJWKM2f-?5`SL-{$DC^tzpaYht z9JSah`Tt>?_~V*%5Fi%0$i@iX)Yrchnrk{a>gl`YE%HNn9}@J15;!zB5y8BU``pZm zQF`JBt6uNetrenAG$|c(gIIiflvb)O@pL=CMD6PlrG9$pf>VBgdM~wHYnIE?QmcHZ zBuZtMu93JOj3G6w#ed7%z3s`)W ze}OlD>ADeqr*2CxH>}T%QTq`{k$xv42!vVkK|L7Cr!`7{?=DxE*yHHLKxZrl~nw&k3}%qUmD?GtHAopW-w0~ z=8YzGo+h<0=%rzK2JbUBeo~Q45ThHOW3^#(p8uv>?|rT~lWLM|Jgt=m6P>OIu)mIb zA(@}a*bX@!>f|s)YO#|2zV(}oD^kNv@DWAqP7a#fnI%A)MQyEW^mBsO7>N{=nj-ul zf81KcM*HrK8!^r+j5|+fe@}J#I1$m_-cBPsREqe&ri6hQB}nqq1Cq-Pk(C5#8?eAG zAV_}gVFjnwK{NP}z6ujlq6ab2Jt4Q9^I}U#9j=~tBt0+kk@&uZr0t?XdJ&`WwvMw5 zjwX~X-#9@^CDOnRM1BbThD=m36RGTCH8F&$!^((-Ame>ouwTDlHup@GRgh0>`ti~) zmgk~`9}11_B*6WmXI~RS=XD{ z_00LEZ??cQ7{m|4z08nXyAm1i!>^{)e?Mmbhlk_8)=%JyP!0?G2&%g)PhT`AdB>b- z2Cno=Ih{6&FB+YK4Uy;aK4k^U2P+9ARuzCa@p}AWKMPdPSwQ zrnJ??n(D1vx9u+1SCgC0YL0TQOkEuujOH(=UiYGqKwNcer@s5ita0M+1%~89N7P3^ z0#*22-FsgN6IU?x09bs;{EGuwAuXnX?uA6k(fd)e5CgRjogO4DwfTA8A##7x_2PXu zbD?Tyfh5iZGlu%WYoD9>GBoX%9aqlG7(N)2k#xRK8C-6`jShGQR;_aLXyN&dpOLm0 zXxEP>OQixi?aD1Cen_Q5fWNnj&jIdT%fiex_EUaG$|xfQsSDX~b%`@`E!1;PEOsXc zH|FEDLeDFxNd$j)ME(yC^}o(J|11K3{iVz%z>+JM#aH1Vk;3$8z0ETT$Y435rkh?C zbO%C&yksfhApPlsyZef&hItF$WY~S>((0GZ^DOs)rrPJLMb-Cu^78VcKZ1~n&YV(7 zJ%DE{Q0txNmiHn+2e>@a>uvQp-${gVzdUtDc(&i`3zztAR(4YCVN})+6a@HWi;S)@ zgY@5zB_bm7)Nlp9X|!RJr=wz1exDp*XFw+4P%!Z9Ts-N*TuCQc>WcCGy?mWCS3ipa z$jgZmXcHIpx{Oz!wL5pO@xXzX+1 zy?D&Y1@y*I*%BU=|BsRKPb5v6eDn`@dGMP) zvwxw(gM;DETonxz82-Z?VJMy)^Le&0F-Z}CrZMGh#Y|z#j82&SKHW9B3_!lBR8Y$7_wKN`I-)M_g3=ibEI0EOXSf>emw4S_M9=2x!} z{K%UJ`#DKG2pRsE-HsOni2AEJLXZX3IRWU=FQ4gRyUqcvRFZbR2IF0W+qlnj3%58D zQQ@WWP^l3Q4-YJE3?R`nKF!ppbWUaflY7OY(+SGt@px_-PkjF8tK}yF2i!aPH9Li+ z%wy?{8CAI5e;P+^rejD}GtC?Fp~I7&QVjg-?LMYxb>sZ@L}MxcXaWACw(t?{4usn@ zui`lvUzK;t@u3x-LHO4XzKI9kC@S+dt&L27d+mOoNg4##V^aOt>p|o5_3o&G2f0g8 z+{a*>fWJNI7dDBF#8_voRj%}ImFk`!Y?X2q;TFt?sV*Yf6qc|%0v?f`fMpp@KCcVE z_Khy{%_7Caxsf;wejl%J9I79rVf4D~5)4o&WRhq^=r;_OZm(;c0Z|hD*0wShWFL`t z0SO;~qWl<+P7%#y{_-?#4TRRDgfqXkxnK5*`&Nt`+*N2}q`y>&0Y_M}$Q|(2{MnIx zz#-R`CfOv`=B?RgT5r?l>jsxC1*M5_yZ)>Vek5?gKxjkXE-IgNXldzxe&*lL87Ln` zkiL6gR7Ag7DtSq-6^rqoh3sVvSv?GQmXllSYKa0&d$?R@e#D_wZ^7btg&~!|#p-f47fZP2D?q(io-<#jrnoqfQLM1lTW|RC zHGxgDc9+F_PbU0mPwf7DJ#Vv2E$4W#vZVPL3Vx~w0;X6a4DCj}>-DqD>pzqKtOM)U zU!h!fH0h%Bh3&7k^qfU<@idO7)$o;9wNfK7nvgpO%X@Dkq0bZ}@-YfThkfxLEtA*H zKaUq8*dze72?uT*O6Hi*)Exj?}*D68!E4|kAN|sX(0c17`QJxYlSOT-J8AsR&S{DgQBpzI6+- z7|xiG8|hEwg~Vv|-E$J~o6X97vpm42*HbuVv!w#UbK}``xl+09`CN|H25NO>Q(223 z0SWN9Rs$tkTKqHTfjppI-$3Cxyh#Sjj-LPGxdG1Q zyOrC-B7rQcD=zpoz6h$Y+4Xc;-g?2-p(KhcD=8`Isc?E|@QxJmQcSSp0s0I1Q~=vQ zY(-7ZXcudI#jF~hx6HCSHtF<#DtE-cK7;F>k7xa^+)Hx)cR0IazWFWJP12l*b5~{6 zbm*OD_*QXe){WWF4Noc>4_=v!Xy9^rHFw|#rMw*Z-0WD(KYZYhB^AF)^h8T@pZHEk zt6HkypPd0Z%b@UZcQ0mPw_8(K1tY`{` zIGLViG$<_>g0za2Psr`_}L+khcDHu z>8s9X&!P=kq_S92-&qK3H*2&%NoVkJSLk+0nk!l^0L^B8Hh|Vtq1XmC;3zM7COM;2 zql9@lzS{J8Wa9;f%CPn(KJ|Dko|edTO!a#rjdsa)`4Mz9R77Hd$Ov=s)u?KDW%bo$ z3+^fv=s%;iPkiC;{Tlut@@t`DwceqJ6exO@O%9*4KwkHisV&oRZ}UP&%yt$Uvx1=XI{0I_Y&c|H=wJDZRW?x6dnkvFvvN-4U=j{Q6b3q4uWI z>^jc1(q^9JTkGRW_|dEr^X_UudZpQsd3|S~0i|n~l^P_@X}`8A9*tiR2!mWQ>)=|I z#pf-yPGPnW;tfvW1^w*pEMoI5X^h0>{I+nJdrVIS7}ZIE+ncZI)}oJN%JZ$db*BJ1 zN^M^VQjSnC{A{f8kmXS2dOW*6-yHIi0RLA}F`7DF>pJVyoAp-6}ubx|iRZsT$ZZP)W7cW_QZz{!( zM(Q1G1T8>&^B6Q53awvWaZD!@gTF=LOUq~S72qYwPlxrjSuAY6O-<-}renPTCo7ku z3H#}4L&_g!AgfQ6OjBiMj?$;_T8~3tm5nBu$d!8kw*t*sa)l!mDvOzi*tsS*^@Vqx zBI{r8@@VnYX4dicf!-C)Tt*BDF9|mO zFXhZ|g4mtzbZ{B1cx-jr;H&9BQlVUi9Pq6_GbKDI z9RdC(i;L_WzVbv3Q;0+DP90ON`r$n$W55IpP!TOXuK-8>%Fc;DSi5qk&L>>1-MFiG z)l2iq%sd-Sr|Fu!p?T0UkS=)8AEvA}(v@}r$d`an$i88Yx7P;T{iQ6kTUM6f=0#{02uNrWpZC#&&4cf@(X?xNIjMuj%(FttI?(^=LB>qu5maXZWlyg zuvjSYCy<2wulrQD8{`HZkC>p+KsL%J<>}Q&aY}`Jg--LQpBU)mvgX$O_RGi)_Np_0 zRUS6A{PMxGR|?>uiRO6ZSX`M%&NT`8KYOUm0CtHP5vyH<0UFU&WE|1eQ7V^9n0Ugj!})+T9ID6F9+X@$F5Q$fNqZ#6b>CXfWcA$ zP1QG+;=uu8N?Fw25Oqt(4GOu;oVAuO#m4_On1O|O4(liK6?i0yhN5Hwq?__R;*VmH z+4a0tdL2@LZZ=;bM`%SJ!l@J}xtmG{W@51G>A>T2REPKF)&f2ZWdk4R%`V?8Y`cNm zJy+!2;|A+RN~`!{3_yeE>A|J{JzMYq0G*`MXYwL(6PsV?1>S>cFwF&A{ah*9A!s5V z&jhUUvZ-vjKt#e)o}oYLiuBppCEPhO3bRZA46<02epk-0&HN>hz8fj+3=hc9n;uCz zyg_2)Te$nF{$NKDMEr#GO9+MadD&1ceylOn>Ln6@DNlW?R4Bq%TT_@*aXW~`cn~9j zR3!A*8b8S#pMz#!Y674rUTYa1r!BQY*xs^23AksmVEl%FJ+U$5z$tMvcWYtg1nn+R)&o#`y!g(5B&>k=}v zdoCJek;sEv|5a+N5(?BdK@N#QGsY7q?6XTNqo-!gKt{ET!!V zOFXMJR+&u}0YEVVo~VviE6u2%6 zEj)XFVZx=|v8XD;PktC#qBJ2j8S$fZqF!C6wF&GR211DX^~{e{Fy?8);nUd7Kc6nOge+VS87#xkm#E)I-9Jzgw@5b;Oa;vHii>C7aHb!Q;n4@#E+ZZ!cs}@#SfMQa!N3kkt52;hH^Kp$ zX`hcM%UZdjPI)ePY>MkovL1#u#-nKz6xJN{3e(AC1NV!4Ffs9ojC|3TTS$&-?AweV z%0E$B8~^t`!jA^du&)WoZsVC$rMSG0SOAJa&`g26bcI%A@Cc%99AP5vT9?Z$KX)L!`bV_9%o%e_gV!UxC|VZxUuJ({)3NwM zPN%(6x8RfIx@jOy8Dkl^)Zwj6+Hn%+Ja(Aw4jVfAA3uZaR|B{#u8|1XLV>NQgnWAT zYP)eXfx7f&(3f~TSEQyxn*@JUFg4V6vl3m`I2XQ)sbFlja(%T}?)0ln=YV3|tAu{X zS6k8M`7(9!+smpC%s{b8y!)lJH3X5M_^JCtW;JCA+%8bEZQ{1nHVf;MPx|Z zz=L3LR_i%aQetM8^XY{0C)6O(>%EEt4sALA{%yBq#~m?hYTAiPgoLH-ELB|wdjwf= zowV6isDBlYu(k$4KPm@vW0C8j^#$wd0uEYexo72W(OJUD=?aj3gTibs;ldR-2S&RwT zd?MGb=iYES(^%fLbh@>XcPHyZd$pkD7PNk0o|K2+1JF-Y`!zf>oItPJNe}IH>#sk1 zG_ub_faNg*=xbmR*hnt|(o>j=J`3S29))h@VF*SxzA1K9k~$Kso}IMUP(p5UE9S1~ zgy!P!bi4u;kEg&ageG@G#L6s_5umQ48@ZTN^HzTG| zPP931jD*U)Mp?=9PA4Lgiw@e)Y~$m-#so$Q>gMd&F3Lx|VKiQ05di3GdAs6r za_*M?^d83oZ#Y&YgwyW$p>N-QNG{_Ljo&M(Ow(*4Q&{@(Qx7Gp)k3bZ7vl-PbFx~c zrm#d^+_;eim~@xLp%T|1#QPaqjrt`%ce%{bLUgq%HA!mK%G@L7%I{iZKA3}b@`l4f zjyo2&rK)qSw%Tk13vv30m8J9gBR?pVFaKBT0tM0rR;S}SsN6>lr>E-t*id`KsgF|) z`%$0^ve7#;$m&N#Z%j${@Gk*7!-LzU3^maQDtz2FV%Y}Y+ApTk)65HWR4NSom{d1- z8M`Ce7M@;}-T92qXIB1$)y8>+n~_rvc&o?VvEq$7_hyqIJKP*u5%e=X?cP%Ci%XdK?*WrTXW=?8OcXX?{BQ zL542g0O13W1f;mTQ8<2Fta^;a;xg(iieX5K7dK4IxoEE;%lXB`{1euyCz#wW{3QDw z0B9A9BCM<@4M8RJ^`^J^*{Iu9y6Wv=(Lk3 z%TdY1D7(%LR$XP+5Mi*hgArJh`)rBXyqXY{2^GRqnG|!9gVBw+AIc=`%QleJ= zD&ihMz}@bB!~oDjAh;TZN$mea!lB9qv601X&$;D>DAyz^<#3=f zCUgFn;RS#)?sJ82kET9U9`qr|K>F9ed7jZU7?=!3YTg-TH}HSGfjye4$*85NHoaDB zz}c1FJ_=n9j=;vuIXXzgSgF!L1RM8yk^Pmt2ygtB&Mx5ST1CP~uC1lfzDrbK`g*_S z(JoO)@gCsUW!AVr>m+?oD;Hgl9FmHh1b)H%<+@k32s!*!JC_ZOrBZLkkoVUk@PU_l zSpXq=y~8O9Fp~)9iAO0!$f*2&o?P}e3{IK=<=J>2!<0D^?k}cbqk8|^UmQlwvzRNc ziKo}sE9$R8Mc-i_I?{5)2f6sHE#h=J5FHI5a!r)dm;+a>W0(j(;>-1&656vYoD(&; z$v1i`K>#jcS!)uMm4`vA_LK3T4Bz-x%fyGufn3AmlJiGA1;=3Y2idU{iEmWzcz9;> zWyi>u+<%DuPom%7rS22h=AlTFO*fbQO_-{K&BgPBO$vJztg5>E!z2{JxtIXxLj4CA z=BX-so=;T}i&Pe7t3yBRe;X$_6T4#OiB_e4!?GTLH>Dh};#{V=)*)w3D;}wP2%Dia zYM8Qrq!fN~w)!Euf3Jp>WQ~D;R2v0iAXu-FrY}`$;R!a1iq>K+Rft$1IAlxvfH&90 zetSF{B^6&%E<+~_a-aAqIU4U=o;*#Z-1uxmPSZX!@#48)qN*EaBx-RGS`*Kp`L)$` zdJQJl4u+fo>t~waBYa}Mz9s}5c~05cA5CT*Zy?S^mi@kJ(HVb2B zV$91Z=IHbZ=QWkpPZ5j=ex;o{dP7=tfJFTerfj)WNIPnC&8s(GK2U21gCDC0)AFUV z)ob}50R_;p$MxUz*ir@9LC@~MWN6YFdJEE)EBk@rU+Bv$=;55u_&ci9pZ5cQs zsVB>|jv7cOrKiB7M%9BjU%;z3(z4}?sYmpe08*6E#0E_%{{_RV-I4eb3zJLE(mVhsV9D1q7B6Y`ANmDN(gXjS;4GLMNG9BU?(B0H5lDGWid~ zUd&V_i7M7>;ALf@jsq@OPRoAuwVGBlH5fTm!#RtV=70Qg7j-jDqyi+L6 z;U&kCiy#{EzEmPGaLRcc-x@q3n4H2ock{Q zd_q@Sb~WN!c#{i$V!WIv7K!W=tg7v23|rkH1c>^1%(~;=8n2xiRb98_{;yZNVKd(& zN6vjQsS_!5JSC86Ibm5k*8zCx>wwF}0V?|X8sBi{y653V&POXn@MuM>U8hQzUG_VQ z=<$Ad_56Vsc(gWL>q+y`hcZ%U0D5fk@)T7{S!a!hN?C`P#lO*_TqHMOr;;AWrq-NW zuH60$!_;In9W|t#(j;o-$oG&rU-_~*@s~PwVM7;7WppyY#*SWTu-@5eJ)H&7uM7rR zr8Ux?k}nZlYZ;zoT@U7JmDR9H&XB>^_KL!nGJe9mr^OOB*?}VZI(;%0qjikwQLa_@ zmDailx#@^TFyUVo!2K-%oSRQJXosnoz*}_NpI9$`XPs-dAKa`JdC!HFpKnGj4dtQ8 z2t42etZKmSGH$al^@i_1hS|ToL*Fyo;h8`+mI0ywEtjTHN3VoKqHT5gTwZ=Ux>o$s z`+^Tr1RDfFw{yVWmno(v{60ysb9woGZwcwC`h>SZh|mt&XsBGSg_*UN{*muAVlr#o+pn_ltC*HC~v@fpaI86kWVUr$x3l6w!xr1$GL zwMFg@7GhhSt)%VUNx^ZOw6foO9iE`Jm6#LQt@V=CVI|ux?8j91ftt!%vsKGv1xWEb zV}X8|aF=?CpRhC-^bqp78SUY|RNB%*?22zUgH$YO3h8(GbRJotKwh{dY_me~{~~`s z48r=|_#Nz9@BK_EMzKy1{8F<=!6IWgk(q>O|dompYRLCpqzr;=)cVM$g z8K_~r`ZlD&C95r5ZS{G!6%zCYT;(^c)FMFVMG|m_H`;Fsf;<>;>*3TZwPfR#;#vC3 zy$9PnPmehj>(O(Y#E8Oh(RC9C#fV^xf(b(}y}@@)n<{M{gGL%`mTM_}L!WeI_nGZ( zxf2-?LBuJGOf?}+FowtBWRgFU!`30o=iAcG);jtMGo0M7<4y)r2T{IDzP*5m?p;ud zUToEhR6WOMju`5EbXuKrTA?Esq3RX<69#9GTBm-e+KwNk@+`ZKx4*f+5+@mwz(BSp z8uZvK60$Tj9K6zXM|>6zhOY?aXt%c-W9HH;LJmC^O!__AD3u^(HQf&k!(--}Py`k& ziA6KW)wVCDc90{vkJnta3OK@r=L*gVcA*U6zDO7&2*HDw-!$Yof>N80T2+ntUdQ^4 z@mYM;Y4lB79l%D?4No?&+3?y}YRYQ1kc`@GXwuH8>tXf^0e+q+fUhjfZC`>gYuK7x zllnQqjg+<>;<2U6BexbvZwyFbR08KF=*3m`7J`o@h;55;QsRn=EWjj9#6l*s19S#GE-B-a?!qIYhhJZRY4R z=eyY``4M^+)kD-DWaU-kFdCr%^p!bhHNCJRB1rzBK|A-!yCTBHb)BVTiw*udkM$qgFcx2*H97O899x6RW2VxWlDT`VLc=<9T-|kGj6C z7>oA1#2EDd;H3N0hY8FTD`Jd*wtpim$T+J*_Cqg_^+U3SE@kq9D7)GTmLsX3m-$Sc z^0f@4oG-Tvh`fKCsc2;|@Q15oIOdm{SGg7I66h+Juhcb^tvx;mRYls=GW z<>-Raz4gVS@keUC3!yY23(XOzh)aG!;NTWB$Rchgju2$NU@g-I3JwZnGh&knL9)J; zZff^3Il^jA?j;It3q0MOo{vK|!teTaEKxAQ#s$J49sU7u*mO7_qV;4|U|GCXnkI!@ z;90ReMm`+Qn$1iQv@P8qqKLjL+7or1c+yTPX<}bmvsrB z>t0l;z(2atDqv7k4`6tGowBT62bxV+d6tORw!RP5v7`AM^}Jh2+Hosj-nQCX;d~;# zJun;&Jumw0?v{GljK6(PbfLU3_R$HXz#R>=M>U!xSR zytW>g__{BCwa<;#@+R@SGy_x37bt4}}4P9%wW2RSp)zSQe9T~B* z3RNBZQVkU}H;QkB@8<#9?=WM<%3t3@;cz&QSn5uBAcVf}js7{^9`{N5^I5v!$_GM} zlU0cBfTa3w`|R%GC`eUE6gN59ztTP+{Ii|qVWo^2FQzMi%s#IaSRA?y zhOfq(OJ4%=FMVGxgBG>Zj@z@DRvqv+?;pcI-ZUTMhJhj+MN`${UO`E|@pY^FQ=gPZ zsEZ@nn6OWmX1kFu1(!&xsD~C= zn-+6TtsUERx_orgKqfbnzMV8e{jiW|2sMI$XHp8);}YAb!ALPR?-EEP6%Uw{Q>smy z&*W{JtuJA=_!uXQG9HQl80d~x(+erfDaG!l+^Az2Ruq45wziDz2ihjV|JdZ+7JUQS(EXuXsv=2J zPx3S}W(P=s!YAP*u)Vq}l?u=>X|+UZbqB725?Q_HBH`ygx*zZFXZP+Z?lLll_GnYl zjLcsz`Xm%TY~voUHYKs_9JE#+^+`A_EEX&BJG9St&b4b&JH~_`W4*jwPjcq9R#iOW zYSue2#y!Rs1JL6}(NLnVyf_3#BmyyK9iPmYo}B05u|5mDfZpfB|E7+>TLRL)l3b-C%wAFS(~IlO`OXdV+E40eLCPZ{IzclwzQOHj|ky9MQ;+Svi>hCv2tb zsyE?GCbjo>+cN2eHx#rzq}m>=F-rDp2K$QJjUFfs&be-clgSRh5E1CCe%5Qpq19>* zQhTk}(y>ab^*-TBbIX?)Y_AyEQLE5KG3t!Q{dH zB@q%?7RPzloVqb$S8U9jqp^9Txou3Eb8QBLti_^a}>7d2a)a~pBnt&N=n=Jn-U<{)E1x5Kq4tp=O1^OEYhQdNYs zW4Fk2V~tP>J^DxMkW^BXXO!maUsO856X*53$pP-!O8ayK z1)z`OuV^z)z5O*aNS*SlS;`poL$g*V9QTBTgld|NEX8oz4OY~2PF*jJ9r@hcG2QQy zaTsH5-)o-GXg3DvM(NiNlcX>kF>oIv>_ffaJZQ6-#6EoAVgJ}zJMU3Tc}6|5eEY7c z<2@b=Nx$#6(ur6gvLiw_9N8pkgB^G;WZ4c7Iz3>vSDo;J=lGQ^vP~?TspV^bz%nG> zD`VDiMB1#jcJur)U&`yWGSokR0JF$FXkM`N?W)}|&up&KTf1~{H$Cr?yO$&T+Vyvb zS>&cw1aPN!*T`_nYp?V8SS1wvIX-B_q(2`D)!I}+#Isr)QvBXVe18(2{<@>D9og;1 zVzcX9vh0$SR`S_`uNM6HdP+R+90}NRPsd;$u19+I8CKZOUhcd(xm=ysHN6YD+k7JL zP~|xQOuU^>XicGDe=b}71*|$hO$3%$_0OR|7MH-s!-2n zxdN+cGz=`I0)VUJxenl5o!VE)$&AU&oB}WH5fua7K z$79PLHRoeq_?)%p12B7DUBI&lLDXd?Uosu7%YvxX5v99AGr^Lrc$*-lZ1E0|VBl|C zq0CG;3~<(Kf84f^;G5wmuM`t+KC1}T-!0l%YBC*5$oar*t{5IaLZx1rF2+ivEsg`@ zyiwV{=!MvQ)}0WHHnA7g4mgo!=cr~a*xCZwG45U0Imr5=zC=#|PqIDF5Rc7e-jRc$ zd0IZu32ikW^6Bb8P2GKiw}<#WZP$te@FL?qByyTdeDuOORmS98QVjo?Fo9y7Fn+V^mBxQh(m!hq2^IEut8%wW*g3%dTf*04r=JVu zHm~?EzLwr!%fy8rIc)~!^{SH^F0zhYJ~?L{YnqPVuCw4GhsxQ!rn0q2j1cLLM(0 z&FhsY?wf;}CJ-+OTt4&b^lh3OxGl}yDZlrgXm=k&*PvB=-`zo&FRXEh2d}T7#n>~` z+<{W}&14nd$xu)!pinFHrPE39i7c$t>yo9A(`P_>Y0&LDW#@7nY^|)jHgw)T;X<&; zWY$UlZ79=yVys6o*zQsWi~*3vD@^RQG=;yva4&rEi%mWw=HDTD2YHbaGRfyTJ1Oib z!uQ4q`v{A*Ke{}u@_39$Fs}S}0PMpNO0)Mq9S|`Q1&9U3fnu&Rmv2A6WGoL=0dq=Z6C-Dg@F7r!ua19!c<` z^}gUOe|~ud0Nmjb9UZ}U`&F(EtFiz>TyCn{Zk#H`+$*zbr)H(ed4EGVmCcv+{rRF= z?aKXYEWfaRtfnR7Q=2`NmP!^~Y5J`pD>+N2-LZYWRi7L@5ncKB^zmcWT%P6Gx-v0j zTs9xV_owTrq@sxS{32t<-{-EA?DIEYAEd9!66l36r7QhX*do^RB4MvRbw>9bnPFyLtUZp2EKb+5EL|?wUT+7jXFBLa4%VV;x{`YJ+`1#=t z@kXMN{A@dis=|+-G5JsG;+QzGO|k+8XFJSR-Q-3)KXTvI{+83LZh2P7-GkSWF-lkL zBPh(*__Z~7Kd!tG7E&DYj0ZNlZiW;1Y`cd<-u0j7kJJ@Q#Dc4oiG2b@5|OiKfUZIg zgiILAWxLAqLI!y;o##82%w!^Q?rf7<@@H{%FGjwbE1OM;q*0`#P^DE*X0rihn9)3> z_&j%h4F2NV_3AR1%NkE@&1I!gS6*xjibKA$~J}?DRsiCQhRU$yS8xr>l!I z=kr(Li8N9Z=T;TTgDL$Yjl-|OgYOSzQ2RpiQX&>+CevJ%n;Km*ToGp64<}a-&XxCz zEi>SStX9+oQUE4{vJ$yh*W=y`vah*ugT3)_6^PQQ6+>v4lwST05pux!+#XN!&T`Ie zPCOI;kah?X^M3S}yF`9SOvvke*)7P&Xw3mB4D` z%Xcn`W9q?;Xgpn!2aG~_Ys)j7yhLJo6P3)*3~tWvxyJf#Tg_|owo}ZE)1{gN^A0I>l7wrBGd-cx_e}~aU?1Qj3c{+n4 zh=gaV*yPx^LN||KkpocI6e6%TN=u{g78QWkJNQcc!e845F%UAfe+ChNi)r$qTqSm` z{>OYS0K6cd408PRK7T*Kx~bS>J^Tw|gT;YD&H*gCg~Ga!Y8t7e&=+5EEI=Y147ZA{ z|&MT|k zZZJ6eIahwIpshSHXhnTvw?El6iK0^XZN5V3$5*6G5$$9QI#rIO*c0pHVq|gSr{f3y zcwS{Ic)Y>DR}QaqB{EqF1q{4IK3S!e%T5{gC>SjPp0=^tuCNW>0SD# zz|{=^5i|Q3p-yGIvYV?Fyp1ijtijlRetE#``m@*>fUcY<^}}wNa2s#o3fX8!Hh8u@ z{V;nC(dbQcJ7K06;oAfMZGl4$ajZsr_>pMI@1cQR+_-@rW^v{KdsMTJhexQUwS}~e zPERJqJ=$Vy6#v%W$$+&Gujy>2qz>D1`0zS+Dj2O?QD+3FL*em>)D zVlBei;+JUdIt07s+q+}n9>m=?A#jmPTlQxvCR8!i%6$2)uv|Vc0Oh)&U%@a?*Cw%c z8NUlm!SU!a+YoWa7G>O9#}J6WUiCu$XC?&xDi{27W355}8)`kPLV(HmQ#1fJNIz0y zMxU22w>D7dM-P}pOQo5`-KD3ivQ;@B_Uy&5i#=+po8K%yx!X?O>OmwYeNO zRymUy@ButGvYVZs40_kcv~4*J?D>zZ^uK%`uP_0DUW&I%&khg)p141*z9pZ0ksel3 zq3s(>$an@oQ6Jjw0oY{h{q033tuH$o~PMn7eSV0PK)z<=3thXYhntV*g{d!T$XiiQS2_ zM>l^t61rgh^T_GJ@CRm;`O-}@v_2H|Bg3V(uvx3g2orf=k|N;qp)~9bVl!0~FwkiE z!YZ4}BD*HRzxR;P7lK>}WH?GH1M%YpfCLwz<#caPPB_Fz9EgC9<1xSWdG(+L00mLK z-`-14X7c6%At8zz?a}L&feJvN4F!;!8XoquNu|k-7Esyd+(3}Jo-Bn0u>rUPQ7R=e zHx5~GV{p#RrgH%x#J#zBIue_n?&V>}AsmM>x2jQ~d@_|)UB{eUIx%Q4@`EHW1L)+| z3*|dCGTA^dIpYUVJkVGcg+jo(n1|leskg8sx@5* zYJI;rA<{%vmjEUD56tlUv-KjahEnA+wefa1T_WC?TSFIZr91#wjGH37T!VK*<9>{e3c~^=7T3$G;oZ&GV(v z(2t1fQxg**(}{J*h$3x&oh;k1=TDo4M;ncu#qQJC6PMAONK7SZ^M-mg;LD=x8T{&E zr9Ec@hAA9KP9VKJjTG<6oF^^#BmRHa^#8G~83g< zI)PgK@aYzh=@WbO`4XU+^>~O0QmfEnkmL>@nG*d$#BPT#^_{r$d+c-`h>ShoFVI&$ zlLynt1u)gcb2yTwa=Ue+^Z?03sGk<^H<1BU&1Z!?v0KZ>t1Q?d>BOJrE|u&g)~d** zOP4zoPTa;+E=MZ$wyUnG9FFk6N8+SI)yr~dG^&#&jp((yd>V>*0YbbGr;}OIQxq<1 z9^f}(jy>VoORQ@#Km?XyUW2u|)O~11yI~)>qGH;R)7hFwDxWu2T*55mq+CYpbmWJ+ z65X~1rb^V0Vzcp7J5<8oZe&(od)$4+Q1whLxIj zUla2Rcp~=${h%dn?aX_FMpOX!C%B{6;fyJvJw&Na3+X^8YKG5)AsLV=l>v|WSpdf^ z5L&jxWMrFd@fRN#C=v!xTW?#NqYlZs6ain=%uE5bd$cU4UP;>N*9)WH#8;PJ%oMnV z6r)=e906yC=8Awf4i?^nX|t;!mZ(8ev6*mN3=w}JrJ~o+j1Ledh5mYu4WF#K)@*mW zD%3Xk@Y9=P<^H@Ke=ArNMj>X!lYwC-N)$1A5H)?qSR_K`(r73fz{@L~e*VP4cTVTn z6H(87PdL>nJd{#BF8=aOJ}-U*P4UI5Amv@B*y=rgHqv-I_A-yrRr9JFI*|HDqXOV$ zi)7$GF3`aaYDO%;m%w3<-V^a*H4Rn%YI441liK@`rAwcLwm7cf9MBzPDwh?&_I$-{ zI-abw!tH#6ar@dByGv3?7oWAhx`@4f{j+5ZpPM5cd0QQR<;8OZA@o~Rn)suWsnPxL z!0DF^A}+kLmO_}aaKYh?wzp6LKD{H!-6>M~x zW&;6<7l$KQ6ce$(AmZu}E8EekJ-uG1pl=qBc=zG$v2V&0zr1P0?*yah37E}q7B36D z@ey!d=8GTJEV)~uGxiug-edm`wTx_@)o8xhuc^b}7GoiAAlNsYa=`QXH7v=A9s5x{ z`;Fj1`>bs5+9<}K@SiK$gV?X}w5FSQY(`$+$5g!wgm0j(l_BAGSy5;B)|@mU(V-}8 zEN^EnXXR)J-?H30$f~fb4p_73@&8m*x>FAks ztv}{(&SOHxzr3=Jr^RUfcUL08A$NFrka^mUg}?xCHtPH!CJKtMuWT&p?LN3vPZ4mW zus?7pNRP7Zx&mUpsNYrk_u_Hd#G!T!%B8Z?pjW2-TFBsY&-X2IFq|#^f<}h%DiMu0 zYbelo4Ah~K{EVBlcz=V47x3m(_LU_^e#=2t8_P)+4#Q?50wVUBgJ0qXknraUr}E`g zeyi*f&fI-=p|_MhZXQ%?s(6Ro00k9A*!`7K>g$Q<{1Q!G5F~^3YV>5rp50aOd^&@VbHtL^m7JpzJfp$I0>{!SS*o1K(oss zjq3%EBAM!~21_e{{cZv}tr2vAoZjl&Wj?v0|HpqRp{E3HcX8<3=BG?l;_ zb_Kj{fXmUja}zVWgMt2VDo0H#3No=E+5Y{|&rk9X=HKhHx%nNpFaRK&Mn5{8x_lCm zcoQ#E+?=L^K`i!Ej?DlEd_F&x*3J34l(gNiEdKDDB%iUp4JZhKlN`9j0g^6lj#Bw; zbNWKtmOE9Gn6?OQE2S3tc=t-8YUL~oc6xwLYK*vkD=JvorLUIP@Qen zn?|@t6Km_76x2#EF{w1CA}ltj{UHCvQadPRc&?L+HdIdsJ{xLdx)@wq<91Wg*DG#`*T*>XKmynCJrej%l1Vlz+wq znr3#+hRvSPSI{$AH2#UWWP}(%Gh&f4B5T#1wj$mk?EOMtm;Rqac^4E|TpLPO`-X(p zAF)=*q(|rk&u^`L$9*GQqK#4!sFH)9N-q85{cd)6&^yXQv8%15rh$F0^Am81)_L1z zrmfh$-I~RZAXp0=GT4u-^{vm90?vJ?YN$$ATt(?{gi@7KAM}j^x5OR|P+C7Lp*?`3 zeeguc|FqKAJ!}7+ESTOLESKH$%H%I#Tv;tQ#xG2t9iGFu-N*BnZ_($?vqqpR)d|sk znxq183bz*vmgSeX7nPglIq+s}l{Z>WtE;@t{GOK2cFkcmm6d5xf1jX=9|qkdZcXi7hk`>)TBx+1 zFCXC+LB)qoV1aFmA#91j!@TW}##d14>IO!wy(VsO%AEMFm3=;Ar#So2o{dDzA%H_# zwh4eGDL2@)1yu^UpAq~l7!!w!tQHx{wh9JJiZL?NLnqD6U;`iS)D6ZnT7+ln@wv)3 zPtmFD)55ow9r)}xP>P)STr9+BR0|Ap8z?gbo>6ROT{FJ zeB$UbAeUN`xI79^0F*7eNL$(L61( zFS&oBh`n*Y3@vKf2Ctp&45!Ap0ZN+D44LIxHPV(Dj;s|65v;V`=!gw)F(N`g3V31o z3UKlb-R~zo!J-`XzBjy&qpQ{Fpq(_EICQL3n&C!ZveC9|$5@juD=$ty!eY+_n#G(k z%%cqRH2)E#K$+hi1Uud3?K+1^_v=aD?dp4MkPji>W5Mzvfv!&d=YD$(+q${WiIS`a zd6{$fh{`Ozs`Sz}`o@EoSw?gD{P-vO?!}e#n*{TN0CC`YWbuc$=09zJIDre(j{OC9 zEN`T+_=l>Fji<4-Vuu&@YY35NAM=5Rvz5Y3K$^=-HKi;_uBlEf{Ck!DfNHT=jl1r= z!p(T9seF!G1v;GsQsO-5;pmi!Hq!;sCpEf)oNC`4J|WhXGz7;nJ?%-hdbYYF!kcT( z25Rf}o&nZ~wzv`RyO+75Q4Il>kddt|4$9!&riE;K|o+LeuBRvKz=9!DU zLJiw7Kx?6X6LJ&Ls8BE5<$=l zB>MM}-vH#h6h3Ct+*>5SQ#OVxx=9!cDRAlKVA8lgd0KrNvR(S-5ZR&DujsM2MN-mAfP-rzg7QTCnbrzwX$-n<9+SpO1#)@ zPk<-8!q^WHyOm@a-005{ z?xjuHQlIUvnq%e%=;6R|>@vt}z!z-R$}@e1YS@w{eSr%NEI*`!VsG2zTN{ptfQ8&& z;j0Q*tM83TOHM&mu$_JSntGGO8LNjWr}`j+K4gwD8OHPN9Oal%OKK5*d-rTc4a5K_ zZMSECD|Ko~i7Ru2fV^o^8t^Uz{{jX4OWFOnQrUDG#_wfjq5O?Q67p-`@WSQ{dnBt7 zwm-=`MPoRj*;2~Jf3sU{9*gMG*owhDQxx&>hYaQ^251L5%9?mADk4Apr6H=Yf#r^P zcoZ@wAIEXS;H8U^H@kxWCxK6dD#*<0CL%s z^p)wsbw$Tpb$*X2%S;D}gQ4wmeJ&nHaW&pUDynbTcpA5(C@F_9YPT(m^zOsucI2~F zp5C8y9!=jS$)#i=znmh2P?UG&m@EPB;mhxZ!=6FK^DD^kFL%r5TXWtkjl>c%(d>-` zpo(KX;2?zplO#mbuQw~gn(t_Gn>z8(=&)hxK7 z_0n<K}zBLRc7$8KV%atl}0N z8?5)b?o)bPK>@JNWMP4=;GeEXX1PHwr2&f^Kn40Banj#oNG%WeBWajU$Q2aOU>RXC zOpR*X2P6gc92!D!^uzLkakQ`*^$VBX+c3qF@AC!}5C61<3X*tS9Kea(A|yE_j9~m~ ztZJLpbUzoO*b(qNk^m&@{fAKdUqrBbe}{>6`0hTn+ok##>`P)z=;n-JEyBO@UeODg zqy=Nf_MlAH79+Pl|4Fy2y-nBc%Xr%VIH2YE-uKjB*0ROpTeZq$)kg%#+DYho2O30Y zcBJ8&b2BzKo?&IT<7bSEY2^kl@lWyX4FkexkU6S%%BaX4x2(ii>hH| zPbjL{T*Ip}Gz=SB%9nHZ8n%-WfwWtyoh?u=Q!T`rtse@X{)o%91kr^&OWPjUwW0ph9US?C5l-ZWcx%rnrt_nEtp({La`?lL zQmH6zjPq@dnX7LnM}48Wk#arYGMU*MgOGJC0&Vw(OPnq@eD|1j-~kp;ZpSL5`#*ps zEbbosk2T=8PRJ|@6ui*u@?2`L7ixKLm-aV}x#0DAP;@gER5Y^gA@oRQCUUvnV+fZL za6bcA4!S>_?nxxl+@5s%cWUxiErI&of^Cg9juKD zdi=V$2L289LGBTuZ?r%m&2qkcox6O2MP16PW$oh1ixGtZ0c&)?@liHBt!V=#FJo5-P6NeTmA>}C#F3QbLHO>fx|Pd z8y-h1&B&%QSwGC^bwO-?gG^<*!(r4W3so7D)n(YIb{G+;CkT$}fluPaA?i`xhhFdz|0Wz7wpne>YgHXyGA zr8V%aJM~>dyG?&yhWHJ^I!h?_+i4_`R>q)R^nLDYvE%RbH@rTnH{C28rJL4xjH(bBEx`o4vWYh8@iViH|7HSb~wZ1Rc?1B3y3tWx}!;eeUTDY zCiec~oVl->BJ}euALvP~#NUrsL2-Rh)ZxXq^=vq{I3*kIIG>(-Y{~dY8R6KvrXU}b znAisk7~>NOQ1cz!^*TW4dg-Vl@oi!uKA$`Rx5_U;->2!7CInM@B}kyLZMd2^?-)>; zRnFI5zk0SvhZ)4(fl^AYor18jw1sE2n_Zwh{X{J@S&Y4uSH{zMG%os{0V@}y!dM)u0$L$S;HV~NiL3o1=V)E_@1D)JH= zB{AtIIsiR7CI!GrZTLLiVzSlmym6^~_OVjdxvq_=Y-J>g>8nef7{A4)d*`okRca`2 zS=ukd%VNq(X(-)f(ZoXE{g}9Ff=%E{S+?+a`*QLDr=MJAtFQn`eYhA+*H0BYJr^5O z&0jX0FOog>)HSaI`20(BFr1Vi0WSXFHlCB(vCD*(a1N)nKD~};bhLH zq5!^oVmaMMZiTDf8K86l|B=t;#ph}N1=DK1lsEtLri}d~jAW>wkjj#pOwrf2h$|66 zrzuhRK8myKOooiRG}fgIni*=`vh)t9hBH_(~BbaF#1KranGNl1L}Q zp>Mnr#sy6IiSp9>!#@(;P6gzhlWgO7aBK~20Qs&EmCrh0UQx&rSUO~^{R`yig{MCQrVWcWQm0bbShe*1LP-j8J65)@2l z%z_t?wgn)Js;$`Te2~S)V0w~#eb$JCKtGJf*Y=3N=0(#In|dG5F;EHlzIQsz;bJ5x z6?Wg2mV^+qJ$%2e8g$VZ0Gnk}YXRC_FTX%}0FE|s&12{dz#iF^stpYt2xUK3(M?CEb~*JsF_M4ivMCxIi{8}g%$1T7${jO} z_Pv3~Z!x4(FE!z4JrBksIw6FNFn&)K(CeS~Y~2?Pc?ns0d=C5`!hmH(MwqM$@=SlfArh17j&O3&H<7OyY-$8?U&|XVHQ3n zpiZ#N#kt?QSs)z2Ac13y$8U*YKvklG3_tp`!yP|{l6D7(+?UG%HD4h~9jnysd``6& zO1r`K29SLzE`2}t6F&p1&Gi7Ud(4yAQygiJ#p)80sCqZL+A1$n@AH>?BHfHH&o-Vw zE!~d9%qg7l*!Q0O0P|;&u@p8%EL^n`^*+Io`Agta6)`aV0pvJL*P|B((?97$8n_xC zi`9RV?mSi+wqqBN%YVrU=<{I@+{dw=E5G`F*MmZCxvN<6aPP~$RO{Kc)5O~zj{a$y z|8CgCK8>^D=ROokAt0K`0ff#U>%{=cV{1Zb&G1XPeuqe#_idf$TR>91NFa>LTgfzz0D}BAbUiSopaa7e{~k;-L@UBZq0vMJgqHL)Ces%8bNUj?boOKN z<5(f&L0RVB3Nik=YJx}<_`Fy{4};}w5!H4yH!Lm?aUP28^@!xg-l=zPGKU!&otK(+ zls5kZg9bk_dW~KDCvRx2hiNLuEW}%zh+pC2`3P6oR;$uzJ*puyL%n_ZlZjPhah$lO zvPq)IikVH)4mCOrRxMTqioEJgD43Vq=J_@+rT!R5~QzP!yMLVCvV6 z9#ZIKXCE8l4wDdC0kyn(mY{oz(ZCfI#RlV&1p&u(y*4H!nVMPy zZu>r(Qd8^qF4B#1@b^ApR2@=_L|Kl;HWyZgZ;_$JzN5c|tstz7OBHq8%XDNwX{W?o z#0O}lraTxsO|lk&FKp=F5|Ka#M)B0`a7QRMS9uy-=p6@$CX{+v-2@pZQ9}_AeaXUD z&+{kGUEYHvCS$fK#xQBq8K->R2ACd344E@Ci(yOY-%6Y;QMM>8W)Z7miW~Q zG=hZ4ns^kBe`O_FBm%Jzs5_E_JS-PwQ)H`}mB}$z9P$VBxCmN5%s6coEGK{pzCwf> z{z@Mf4X9ET5|Mu-gW@Ow-pO7Z)ta7NRP_Uq$K{qp1eyS}#70#Ll5xA+Egt301aF9l z>l1J#$HfP|Z}3s61#6-n&R;KO5OjaS4gH$J=U%|hWqIX6#fU$AzVz}aROZeU^$bX9 zH$SqP3_%Zn&gWOY!32H2fDZ~@2*I27IYUJJ?!MU#)z4QxCPsy2g}0B1;950^v5z(n z-+fCVpWLbVk-*B%qhEFa(yKyGV5ebf#`5Q2h8T1gKo(vYiB0lY7hj+#5*X_!jB-x> z_U!fYP{mIUuw!y(`h@7u%q)DU0nS~UT#i_90qRK?+-B5PZ@6(9Ot~c}nc4#~+Y*QUB zc`*Y0n6&ZeS8Ib=oVL&%pO}W8;Yia%5FbS@ES5^Y^S`HXI3q`%J4H^|&6V<;upATk z*9Hf)I~SI-+bqC79Tw)_EZcWX7blebmKwL~UIfw#yan9vr^0;Z`{CH0dXu4_{uD!=Q!!A||RvQ>+qZKlzX)%JZtKJH?gdh=Rpg8iQz z;kb@L8Ml#c7Y6f{sPal;95%`LeoY)FE0pIbo{bfpX*?h?adlpNvlD!0_9?)_3CRg= zwlyz*2a*NnrfLB}g|`@Pb1t=-w!Bcga4NpwD0T^1DZ{u5g?uU3`JT|`?lGxCDBFty zi`Zihn8On^ky;lHV=41m|Nc@ouE~_Lh1%)5F{E zPM1~6S9pGJH|Qo?w2>Ptq;VoCWU~5)OJs@1&x)&;y`;?gzXp{CkvY5sv3#uFvA^3| z2p=MgYwC?H0ua_B>wZGQgGU*BAb`UU1J82=oVDAC1riDrGk6t%4n2w@c|gIIRdVID zT8MwTJ60g6db&AN#AP$h22#k+c<^CVHT&eo#7D!5mL%HC4bSSL*xkp9h*Y?r*wB!2 z$0t_+0S%$*E`A{5I^z5yx#qR$88q?XGG_6&u?DGz2rZY@ig0}DKx|grHN4LouajDV zPJ^8-vPg|G7PPoofZtl{S5a8LZiv%2=eu+hAkZEDw(!n3TQMKzv@JT_uUn;Dkv0&+7);WyWFa^iYZuvd7DxpU9R1wlIG=hTdfyRCKfsB#?@E zr7}B~>geAdamHV}oxOO65)9c7}FWnya{Bd^LWnEEerKcn61H0jR8Lv3BThi#s&v zUxO0UiI^9WdUUD=!PY*HA+&EYdM-?Cs?|yxlIpu(fWsuuJ~%m1lhZ{3H=DuUj(czf z)XGna>A3}Ccq3$JsEzh-zU0GZ8v&K6fLCO@bz%xdT8IB0aI&PJt}4B)d2^Wo37J%G z%k*?_jDF`lp?7|=+bF*p^RfIwA40&89tn4*Ct3Z^TWxUqVU68#Wd&$u)~cR)6Lhhw1fNMI6ck{3~rajI@MuFh#If@)Z$UbPcuYd0c= z|Iiq+nd(Lcw22l8hzTxd~>a zey$4B9|ckYW-}G~OvJqv{t)dmy|F5j@pF`tcmxdq`IEk8hbsSXC=^dfAc+O(O z_y@RzX#j=sWIKM&ZhFPO)O4*uT9AF0F5umaSS~mJd8S6geOXwnrrM41r~mG7QcjKe zIBQp85~rP(RA8vjCp*1OhDpr8BloqJ#hH3tYtrKlXso$BDPr9D)H=Ga5=**U5EWl* zK451Jdp9H7$^tnOZ1%r$k~iTecjM#=vU=Q0i>vj% zN2ZGSq-26cDI#I*dggU|BBs>xR_$98=cZ&8K*2@NSmF;PmZ{*UB_flUHwBdj8q1?nz@N+%=$PCa zJI|WePT&fi4{rDoa(>Je_RVW&7i!<3s#LHF~%C2KQzNABX=*^eDQc8kv41u zU9+Bl=vmo(^PJpzBp{CoTjaG^#*ePDc{T6xefKS>vSdxZFw;wMV#IO6dcE zMy5m{Zqs$fczktKd*$=<%(~^#P(mw>lklOZl&XT!YN%wqco>H7$PiO?vAQ*)+!O!z zdaC`#1IdRb?E-nqw_GR4zF+Tv6Gvv*^@x3EmIL$Pe*OKE=fgKC{B>Wh$g?!frMlg4+7npNstovtbEoRkaF@$2`O3OdQG3(hx z5OJ`M>C~#Puo3fs5)&(4gN0|Buak~DYk^jjsoCQO%gbU0m)#|XrJ8ft0dgV=ZH=dJ zJRUMaL9f*E)G#ZJBTHO~P9{i#zIzT>gN`HX_J1Z||L4mE4eCSWkp6-m2*mBsN%BNo zg0-oKbLJ${D00i=eWx=#AZ`cDocdgy#nth;yQ?Cw&we76s5T^`YAWYB4YH_X1vI9y zdeV~4pq!AlAiMQtcPk{&QgT?$eCu|8Nck!MXRXy!POTS{HW53YX6C!YJHi#-b}(vz zR~@ZN1?aVz6D5k|Le|;F2({k9wk1@?pfS6TO}o)wuVd3(IeRG2=( z+03D~a(fJp;IQ=Dfp!>Z0~zPni^Cb0ScuD(`uyUGFh%zlXI=HKfJT_6hzo|hedNY~ z13`xkk`f!3X@GxWA~^6SXqKiiq|zsGm=d!b)N;Dw>7?u*@JRVSgl->PS5~=->;P?u z%r)u&WoLRJt{yHBoUfSmSr400FK&NU>0Z5DCHx1Kf-J{FY8cULTagI>6}yS*Q&24& z&6Ytg9DWpXc~I28e!SYv4}d}lv$i5fn>UZZpwWC?k;nRwEa0z|z;$G(U9R)>%H-A& zII{ULq6gV$!XVG zd}cY}Z~q!S&J;CXQ|$%FSdcnBq4&t1;rBRek#)(4Yc1{#)MxJt4f1=cF+d8d4l;SZ%Q#`pE{tVjko=lgZrbM_-q@7Lq#v{TMSdG)RO}>%2YcP7CR`gH z!+)#ZdOlNL&^({<#10&O?d~KKygV29;Ii8FHa}-sj_1nu@XfgKgg~setHZx=E0oeW zZ3`d;iF?brE1zsh{BVf*Jv4RPk_Xt$Mj`Lg{4y~Iu6H1O|Kq|0JMr>DYx#EZhAK)B zsE{@n7Kwq{r$i}cxm)VzOx*mwOY(thOzCXPv>rFl`#LESb&q1Xou^H>T)y^vV;vHE z;x2^g6LUP*JXqIqo33vvuRSIbAzzZQVbD%vn@o|ywpIOAwekJ9MNfNMoZGf|D{>Di zN~7cHRjt`IdqHJF}3*v115SXdP+qU+JA5^SIoQ}z;ViH$&1<`&O- ztHBDN65iCmW1WA;KHvWT*VP9Ra$^r08l1*P6PanCmne*&NJoSUS2PL8f}v7GUGfiF z(UZg>0)|2oI+FKXz^)yBylBh_YaP`b0wa0zez)Fm)e1A7WZ+peOCU zO@8j%q$2+o(79G=h@K(no7%^G8%;&<2gXtIaumbL6g7l7%AB%9Fb6#N$E_;vR$BRk zC7kWM>8DrwbwSd@&C4p=<+&XTJHYjjJ@Z=??y&wfi7;0^ICV*W&iJMO5ynt6*TgYJ z1r(zn`H0(Ft_;nx9c6B9_T?mW>jP!|WG33vm`9B7a|Vn&YL}uWw<*rm=H?U*n-0b& z6YPPIlnM!QBw2eLBkcD9tHn6d^=UZu-Dt0c<_?6k{WGHBbepF069FTAuz8Gr2)1%> z{I$Dag#pR0=U(r_-XCztB;5p%_2I|})r%ZN)cKguSYKZr5k79aZx@W!x-K()WWqs! z+<+#G@bv~ZC+a}Q3TCyABH%*KZ&_e5Np`i?jfFr7RQJ%{qfifs45JV%C=UBi5OcW& z6rHnt3Y*^eLs-Gyx{$5E4hHy%iCaIAz@0v?6Jw<9&o??cJHAFiKVAFoJ&Qm9Mcjx} znQuVQ#D62a^SQt~_>L`RaS!M@jos4XdE!#h8OYTd{orJ4iC&PcF&oRN z^0^)!WdYkT1237V`~goFgjmPmb9ugSSrXSl5}UKP+USVB4tcE#&?9Yhw;>Kr7X2*d z%LNFO1P~O`xz(>OzzjJ@b3m_4K?$zRK5&|SEKopG3RSs!T*$1mCT=LUj&@)X^y6`< z-;C<>6>2j7OWQHw^Cb50&)^HzWx!Jb91rJoxgYt6EyK`kJ|B09SG4s-6K1rZPX_3< zdnu5nP;jT%k=uH6P3 z2LDhM1hJr(c$2f)J7Sx4(!Z}s=X|hmBK=EL@cbe`YfNZEQqRuv)1#y928IZe-B6Lc zo+erCZ5D$YhPfm`Ka|u!IxtlVY^L>Ci#qKtUxR3Z;jy#ptmmE)W*!l+luH+?f;^xO zlSqBN!Z+bRx;#c?1VU77T&8~Ak=_us6y}b2$Gpsy5=nd!%8dz-0`vd$e;X ze=CuYCp~xpz+ah~V^|gsw?eHx*jL3@>sG4k9%I^b1n|aQw^s?aI3%bQx-E?3;5inV zfQlgiy3xd9T7X|X9W?|~?}bG>1gv~P)=xKwjgTlYp=tDARh-dAe0$eJan4 zXPSd7eruwn57YT_a+^FL7PbD6Q?pDkS>2+WvQgZAhlF+Vf~YE#6TpzhE8YC2+g3W&a$+W&K3~*sKl`&^OikjJijDdc9+#{ zw3Q;>t0GU|rEDKCF|H_6_FxJ5J6DFZhg@S5MBam|Mt6I-K+~r@nk^YSOVNP4Y_VB{ zj|sg;Q_)yF*jc#)%7Yhid-BNU|(T4stp@=75I9%fML;2%vSkO>$k_4K^&&uW@D zsI}`6Ic%4J0WimjdOl}GswK&h-i!!ABrsJ&Z;$IVb>>2*e!tixH(5j^)^eCd<8!mo z##1-mM2MT@Vg*Y0Y(@sgCN*hxO8vBY9EP%?KV2e9@iMYNT zkKmkt%}W1$E71JC-Op7^+%ilotmo}>gCjKt1wjZmheCtnq-ns5@mhM2-T4qceE=ES z2Um1zrV%NZRNV0q>Z1G#$7edsE)$EzfESub*CRVaNWkQgnEwr0e78?7sfa4H zy~SzvIi*Nn8qdU73k1DXsOSfhY)*ZqQ2^rM-;0IbxC8h#Nu~k9ht_Z}w)9tO7eg`b zdTUrv|8$)k3Msq@PRbay2GBmps+I}+z2SIXw>E2tmo5^OB>?DN@Dbxj-CSieE8!(3 zM`AJTfV)JB^x;*?kC@fe#m&NFFET$Kwz7jlz>H%Kz#P^n$Po*z+4x-=Bw8!vZUNcY zZU!a=ObIkCd6WhR0Bi08Z-o=+VbNW9v^}*6bGtQ9H@yc{GrE)0r&q~JsRPJzyd)RT zceb{D$se@-qsM;D7QWu1Aylki@g23-bi@<=%3{1-XvUxJQm^f4%1qq_&>mz~sK{59 zJ;_nDr9zZqQJw4T=anNmeK`kru?a@zzo!g9yRR`l@}8{xrfWF_4eE&cDX;PsN4i8| zBanf%8vj5f8;6bWw4r(92UJ_lmQ!B9k^R)~^e%~c|(kbiN@=aYp{f1p_zCWPt=DtBma12GZh4byno`O1DF13_% zo7RhD)NdBmv;b=d*Gy#mBD;mnWit_UcMXoxi+O(|Pml0<)R^hn?ouKce%Gh*PLlYq z-vr=jz;@A@`V1SK?!o@3@w}cZO&=R3PAofdDnt3CkV?x!YBri|xVN#X&TcheRStVc_#kf=f}kphPK{a)aBY3(bud>h)wF!dw9jpF-Z$Zz?0bkz zZNS5Y+Pgf;0*v32D@|-Rz6Jxz?}G4$U7y4@x^JI%aJh~?9V_yw0K05}Zge{hK&fi>&h_X2zl8rpO1rnH{(->pz` zD&uDvMc_g@Y{S_MH~5db$++7(dHh61xGa4W^Ob1E2N-l*W}h<*@bi?{7J%*_nLRG! zBW{^)d%PRd#)%g9cYoVf>Tf=Po#=53=QX!fnaJ`E8k7BKF&20C8<@_7q2Ar;!oBSV z>sT9O6_S~AOg66xZjo~5bco6gFHdHVYKUYFubscnh{3iE z{Vc2k_aq!k70?wu!9Df=(0>nG!qb_z-CTEU2^s05Quvu+*eFiVAq(+)j32$s%l)O5 zG84%@EUkipk-8Rd8vc_%IG#si(<6qUW=6}W7hPzN9=>0GHV+ry6Z?Apg`YT6RxvSs z=+rsBay|oY?XsiWoG%Hrk0mZu7d_3IyDhmb?D~R5YFTX<%|ce&rj$TAoUW zv)mBOJ72Mm+P(I+B=%LunmVu#_AbPw=!Ddw#!G)G>HfUx)qAqzwyqUehkd*tU)0{V zBq6w5nv5f1TiWMpOe{{R^vNw5>T@E|%UCf$p=#jba|aZ0Xd~ zV@20U`Ry1G^>_hX`?{Pe`lrvEnAQrv?11cX9|Ifsz;;ibdf5}Z)eMfF%#E5(!3G4a zDC9b^m4h~`-y50Ru8$I|PE=n{PvGmCcSU&>an0j`^7|fZ^Z(;g_~#&0PI}?>PU%&3 zhtsy?K3NA3ipLYQB5*yKl9TTLXi9qx@pC?&*4HiOwO&7Lbm=x#rCRMPwaAZJ_KlXD z&)WF>E))sWs=+D+BcEkdOtSy1K3zDP4yWgR=u?PKMJBqsOLW<(==g0pa(9(oB@^l9 za`GT!wVXrOASAz(CFop!lf-K4MypkwOU)L?V*LkPHkqApmqs&y)og5}!4>1MrK&P*82Wjh2D3Mzt(buNfMK$ z#&j8Zxylo!qwI*wN(7F7`iFT$lv;tP>(y4Mapk+Ce8;cftg2pTOh9==JfEMV*6lU# zkn;?e1HE1|D^Q^$u~eecmT7<)*CZ?Tr1N1h=8tq0&-Op4ApQc_% z@K40UKUU+f>TM0XBenFF4^_Fm%Drf1pp>vj4Ww-1R-`;gd^L9#6KwseB`{yl>+XR} zh^jI(`N;2igb{*jK-Zsx4$S(+zLd?9^{w=~TI+ZZn!eV2f0ud(NFPRhr-{#xSEe5M6Es?l4sh$zD{x&W zWi~)~Mg{teL}>sMp-1p>AcnB-3^xQ7qmj9^I}|^>_zT^L)h&y$@V zeG8&te*vKq@1z|V+o_7)Y~_gmpvXMIYi?NiwMk?Mn*2M z)Lm{*78P|qlSpSo|e`L6!^C)^;wj9)uu~<3#zkk%Olx zz7tB>Qg5Fvzj!tIIK4)3dZBE5C|D8K;d6!)8tN(Cl-x+KUW-cURhU_IL~uDBL-eLQ z)0I-QUx=&PU$xw-HPbrVaH8jhYdVrTRDjoMpY&K$IF-WouC%_kTBMWm!zK0p8Hs?_ z_%Cq;fSiXsU0*g%3Qcs12u-hgi)Pi6&L(pnW+{$NgCvvO{jW z7SPA;_JXlgZ&^p5JC@Qw&0)V3x71)OQZip!=q0~p)Lv)(B`=HH<@4c>zSeEB>%i?T zes?;cBs`=Sqs3{HI}{O)2Ip*{NqcX)(Gve?p}npaMU-%-(GV%Ew)zDB5w^|QZFVUSGOnWF)-5XLQYosaqy_;?XJ5SEyYnkxS`>;dxf?KN-TEB?`8P+d?jM#km~@o2)k;Yyf9z0I<+$hZ4lNt)naTk8h zB42-hc35G;*}4%KI*NK>=w<2Zt{NtBEymb7tF%Bnhe^eqD$EZIeUEo@+8-9N)?oPV z`|S73Ew~0)(2`d&K79p3XYu9E9VC9&4sCO%ysCAym^|wGGQ%0uUX!-7c(-4NPRg#r z3F)92lKFI(v??uVHeF8!--8~4<#sz_i1J2LSe539e0O=jdG8^V5*2F{LhsTjsl-nJ zZD{CQm>pd}HFC#tBu-%=-QNRCVqPlaz+?{lzLdyAV=52R+?7YiXja+r@vs z+uBV-A)4FIT!vBX42I7B_(c^G90Kq&&jOR9jS;a<$}8+?pcn~vVAEDHjeFyvT(<)b z&8CqA%n(Sy^16{K2g@cg_MO3iW0_;#rq6QxY`;_L2@WN9zJ(y9s7!fqoyq*tT=P~o zZ2iBkRR8&Ctx_AeSsFB3MG-$PtoFYycE8qm?>%4?cu^@sb}$igd$Z(9Ey_v$clJwr?NZ0z75SBTGnhIki-m8{(l9oS5@*P~X zMffonD4hhb18~e#YU2_I`DWXWlV2bEA}6>=+jGExL^VZbI4onXQ11nw<@TQK%r9jD zOK8S>Acjx!+~l+u$L$38$JiFrV-lK2xTD4_hqIVaT#u&GfVM2@9%vK;u9;X0b!OV& z{im>Z1VyPZh-4;vJIj$b{nzF?i{8p}inB8m@&T2KvkYqAW_Fk3J6rXq`aCxC@ySZG zyx)=>_Vc5+$8*0DZFyBjaR88d|IL&RyxvV@(jsaNH%I8*;ZzmyH<6eWh=_82s|2&E zbvVj7p0}PR5te4&y+z}M&x-ze;%u;AYsf0$QM~{6Xbv#HzTx|!gnuNB>K(oDI^#!N z86X&#U*im0m-Znl-HIYZ@?@s`)^SHCvHxC$28&OHA%T3}#ggdTV(`A;YyJFp%iDy7 zJjg)!!3C5CsR5#er=foMI*JhPQow(Nf`4DQzk4Iuhk*IXk;(M6HIS@*R@)Dp4(jWt z9R@GwJFdr~cqAF@2i2C0>+C`4ciK_Qv{z+#LOkq1PbwCa6E(IFM{0 zKKI%A7ui(Wn%K87n11eD@o@Q(q|tokyiXHzwtT&mH$U=)lt(>=X#6&(;>oqKz%3C< zwDJQQ?aDO@3z}&3pE*+KB}=z)9Dge37rWB1l=vW}^|Qp%v4SCPVcVrS?|YpWIw*eRgoAEN+z)pGow;z`6+GZ>X@c_mI(#_}QvO3BWtm2?oAbaoykU8R^?P z%Hjv{%%>uJUPa=fPuM8Gsd;FjNnUj1uq5*9iH$>^-GVoL8mw#Jn0MoE-lU5jTz{KCG)6_`kmHA4{m2|NT|{ z^L&aBg84Q1A|L&ny!;0jL=8?H(Pnq&v-sgj+~kw^fen}G<(Q8J|j-e3yA4F#jXnXw1?v*w!>jZw1?xaX}o@; zN)FerHH;C$pWr+_2F~?6DKZ)afx^)QG#}l3ar(^^0o495O#Fj{Z(O}uV9Q~Qu9tGh z+N#dqlfG4JFv4!(+$o>xv0DZ;;?I477WX@mm)uO>b!lfa;Dav|B%n_UnGzBa7zPc=DLbU~Y)Y9mtk&;c&;zegaM`#(||ahogfjkY-LM(j{ZU##sG^mM2G2Ve>Xt|WtJ_MamM9W|{V%h@|o zNA^Bl%*3%!MfJM5eK*%sZR*W>G#NPH6*Mz-f+dDOK(QpU+U->P z>^G?S|ATxD{<0L!*j@Dhy&C~>eP~Fv$7hao(~P`-eo8r5;Y)XWdGkz$$$T}F-?9U2s>MNuI>Fl48;HpaPvQz=m0MY1}cI1 z2xOz(WCZ2u5tKMjyY}CmkED_GVs8N{{QNn}_|-^A{#L%rHiGx>dF_8JDF1s06Ql)~ zeFLd^)H(k5d;FQ;zUBP`Ngv(Bi0P(B%~m^WR|OOX1~>@pJ(eW z=UKG+YG3d9Gj}psh=PYRS?CVBI$M72#5)Sh30G|oy zB=k#R_ISSYjp`s_;U)|sLk)u^K{gz;Z_k-Hvm=PTIMywJB)i^=#;$dG5LTA)<6R7c~M&W!=YOFrav*qv&n3K%Cgeg|Fc(A>V;eaIh=6ItTB9~Zh= z{RVau5q=qGcQ(`DCnTFe6}`h#0~)noyxF49ZC)xw;wLjhs+Q;tJeEfovZ?ebJ#GZiaNESZ9!kcud~f_~lwha)mVhU^2-F>G4d#JjT@) zmCV*hpSsQ6+o)o-qTWmPb^VsQV^J`S>yFdl~`{jP8+3O;MRo<(5dav-JpvpxYl6Tf9@%s|NYq%E8k^VwjOvgw0!iCGEl+2CeT=}6B9`hIYW+C|ca zH1+alP(<-`4c2Fe8Fhph*P^?!1Q?!T20QUZ0xdVOMZXwwpFWtjte_k9N65(hq{@rY^R--$CQ@fhEN3pz*lp+J z)%V+7Gy%2_u4>`*g)%v{#Be-h{?_Or8?|=~0jqjR)wfY-nO2KMm1g&I#yZQ%h-#A& zNg9=3*=}XaN*^=R^owoGogZ)K^$)uOpKHH`vuP&9WLPXGmZ{}yaS-=3d2E7@WpTy! zE2axOZujMZ+PtU1sYuf}?HOrj!ngaU2PcJ8fKI|gpzWRA=0Zs}Nf5%5nP;WRSPG~! zg94PYl(Tg|VYrVJ*|^ST&lc-GmA1#~na94wknGY{&U|bIiiK0A!>D1~KqH<~WWiXG zO_P&LDCQKz^IbkclhahV@xa&^bkl46Z-n58n*M)mon=%V-MXxUTd?463GM{fpuyeU2^!p4xVyW%>%!e3KyVN47Tn?XxA(Do z#`(E^uF+q7>T{D&V3);kSL(u$-R2!Hs^FwH zd|3it;s#~yiUh%Tsy`#cBuA$?JA@X6#wu71c!P0 z4FW%eGV|Sd_J?mYzr;!cQQS%Rz>lM-T_V8TwB`>y!s$NtPt%i>;MqOtlp~Pmy;AvH zS&$5XIujU_N81Q#J>}sgTGE4)YBb`2k|+7a8r^~s#eA;H=J%M_#2O)iaC~-rA_1pR zR`b!Z@~OU=-~td_i`<^2s%bQkvnzUmLHwNu1sC{IrP_{y#h@2ysdg(lx6-_4%?P~0 zMJO_p{=R__Q-JSyiL-ZyUxquiP%e?HZdbKNGoY9)4*BZ-=13VBjC+y!#HF!oyHJv3 z&umDXX9Vz z=eG-)OQd&qz#lr^Q>Kzfge`h>LpE)|!kmRn{H@F5QtWoQ6GqD;HAfxk z&A8Iy!w-x@KEsHx*jiFXkQTlXvnIardTH#-09>&6CzL~ZGT}f>f(yUbC$=B&qM;SV z4CzQmD8lDxt3UcOn@N~6oIrCMP3{s|Sa zybmtfyLy|;v5aKehi<2>e6((xmF9$#)t!fh8f^(j^NHkFs-H4KuW-oZFWnko6TEhB zFLD6NWpNyNG*@gYZ8?NNK4bo!3D;n)1w{y(!+It)9Fu`|PnXvjeea2VQi7OU%H(*i zh^>a|re#&oFV!>N;aWEB+enN&T*G_D13j(rRsMo}v_#Oq-*y zc4BcCxPsWumWm0&_ImEISrqQ8bd(M(isX8yxN~*x$iQvqdN({IX5Hd=P4(tpzsiKm z#v|IK{%f4gAQA`zZRM!wGZ2_BQW_^X16<0oV{N(VyZJL$Bto5Q61nNc>gX<+kM)s z+f-ndH!IgJ3T$nq*Kc!45SQNy6Z5j^Nh*;opiSf`8qDka!{K?bfX$dX!t8!0#bdu8 zpGl=dMU=5v2!Q&=9w;ZYzEMr;C5NGqX0CEnKgo)=lt9fv{%fy(BZbb?$$t4JQ4o^< z-?ZR=;+G6L&`E;cI)KwRe#@KXRzYhGHN#?X`!bZA3swH17HUO8(A z2M26nq=6dwzCU%TRrxiSz?_5Y`wpet-#Lb8?M*lcg+hE$a)lP02O=kH7!qbr5(Y*N4OHqNw~^9UAeX1DjoMZ@^xlaBS`x)l-w=*4w6 z7aI*Jc-*%Om#9!pKXoa@3BQ0!v2{Cs`USIWWdKDFTAdC_r7bv2`eTbdRL5(16m*;F z4MrXD9~lG^eg_19+<)i1wqVK0IbwVN67m~mE?17f?bkb1-cS%NP6E3DNi+if`$wW7 z>_g3UB7BwghW9MV0z48K=7$i~*9Nyv=T#1;_c#8wQOl?5^>*!5Tw1Bfc8f40l_E>_ zw9MaCj_SZ6Bx?>zj@@dJ%!?|Lh(8=`yWCf3k7PvxdV+-ittc~6B%Kym&Aoo-)Uue$ zx7HJQ;%h5Q;}Ti=)#Q{=tI?8xyH@q3r7o19424SDqH$h{QdRkUy!Nab<;GND=T=h0Xp5vS3a85#3q zxXW0jPQ}L)O|zLnyFFok$~KWljGVHyU>3|TLG3X&l1Slb2`P@dQ`p@;vqNPYIc+kQ zN{Lq__jYT?dOlIY@~Hb2#8Ix&_Q7V!#kY7$Tb2T@(HxSmHf1$;>GpWdBWV0`Hf2|f zm^YP3V5!w$$iJ!4V^;5YrW`v<0Hj(y#R9cD&aL0!LBOEXngn}mVaBhf`yaPcQin(^ zNyGnnRV5Yrhd$)XHQ^BpLWCss7Ob6b2qs61Mf)&{jz+~N^a?-YymrWP^}E{*Vak$1 z2QGutCZ1>Hi*|)vmR;A^+;GC7@{y4^3dgSXa{VWS&uW?batwTb)Q>W%Tu47v>vYLT zt5>5rJpRoSk#T#SFfk`1I~MZ7_sguUO$s(aq@|>&wU#$*c6f9U?iO!6`wg^QkXuKM zmco6pB>_v@E*Ceco>^P>mwYS7Gc6_yi*j_IY+VgjO;IotFgh_E4vZE)$G?q|UwTWX z*9~@DSctoZbNIV)G<%d2M-f;Xq=hS*Cl8ct*;Lx<4(}du>Bk8PoV}~hi$w3cdUbvv zfS%jOnapXHeiIKx%Z_g_!i9kOIa4^g+W~YZeups-j6OS12}Iy8r8m6iMKmFn$9J3hd@hKwpD_L!lAkL3t9-n=%F^@c zJT_X!&SJIO3ZtU)>)a6Ohi_=O__|fX6sJ`8wa-G1X{J?r zaXqdZwUvKv3YJB$!vICASL(dI8a1%z-jZN$PA^Nl=BH%bXTQ?fZ!hEqoOb-?y#Zk> z_z8VzwI5L@P4WL*>i#duf*KM617fv%8;TO!V=lbM&aX$^a<>_`8bt{>p?5*~X<1V| zKi$%e=2*o_?4Jw8k^{p)+NAD?2Qfioi72zHqo7g@np}_=f2CEV0Y9E@RR?$>!p3p^e^&R5=^402W6i~AIO4okc7cmH>^@Eclx}z0=*Fy{ zwEbU7w9todJuiv0zJ&F}#pIig&;njB-(B7I1&Hs`cYv<0D}&!U`|GR@Vc(GN*SCDA zH`cS{c^*c%bh^()fjPD5mzhOEZq&4qR_BxGTj%@g3MaUeNuWHz?HGS=|4Bn!K#bz| zeVMZP5udLyks- z5`GEa?a~FClvUPfHich5h<{?mgwbmfdDAZCw%cg?a>h};LG3LTg`Lz_YeeH6{Ba@0 z@b)9j9wK%IXa2)lWvujh(WTceP;!M{OL7RyEN$P z$Ke5p%jYY=9z_{XrBCGRc|L5Csa9!(9s!3ZRVd6`&QmKF|GGlN|BPEClNL`d9=ThV(_lV1~n9cT486m`<^CI$AM%BVW&A3X{#b77Q5k!D#yYEDTPy<8jmR_p18UuF zmnmkf6nk_*YO9+E(ri(`zntcD%pCyi#}M=(9ocQFt`A|*SQ#7`epNTVkcdr z-6QD+IjKG&0izn$c7IL%DWC#lU;&$bc)Y-o@h|=zFT$ilqFmECPFh)ddH^ zP_ObjV{xoOTM(rLr?sHaqoY~5-t?bgqLkdjX-n@P&Jig@t}a=A2!ufJqcx9Do{ z8edG{>Em##TYr%AJ0cNJVxzMGt0I8?A5LtHkkT&l0_#|5f4z3FHlSfdi z!!~uei5`ctlGAY%thF4vSH%6(%`GHq_75nE;g12MOLK?8AhzOi@%Qu|U2e70tPG<{ z%C}z_tSfi;l4qVV#oCpL;=UGQJwEvNtEBthpAeCyJnPWE}0f}ImrSIy4*JFHQ03iO5=N2wj3Fza)OJY%FTVbtpT!R&ZrPvG@1VF)`eHmjJcIYwa(Ny4UMIvTQ0>7D+g_0wC>K%pW7Glqv{}W$?mPX|~7N zu#qU-9AfY3eFuXpmD}-&1ntA+viYQmR+@iudL-JdgChuuFf_*LRH-KlWvSDf4a#n? zV&*~jsaz;i?%xUKYQ)T^bPE9o0#Y6%ITyNMt;Af7_Ii5A+=}K0troXEO5LrH#`|U4 zzr6)iiInc-l&t=r562a zzh&0$48~1LiO!lt^j6E+0fPVj#N&H26wLk;==Q|i$>tg(aBUC?r%bI0|4OLc>`ZIn zr9~Wy=>f^OVV$K)uQi_duj@E)THFf~PfN2F?NW0jO|kD6M=rA}nPf#FM5@d{C#}gF zI$!Dv@Jb2zdb&^mw}Yt!jxm!qqqxEvkq1n21uOGbp_ceAJy5X7@e`z}6A-FQr@j>4 zbr2l)Y<|x#H%DyF)~gFEg~ln9DvcT}Cv6~|4?jLFIrV+KLO?w8fh}d_FDoc_0vE2DS&6c2C3Vras5Bs_m?xAlaLH5-37|aW}xGbgH!K+4+A5 zf)81`%CS6|6$MifTy&@u?l|n`l_u$`rOhYxbql1N@g&aqTFYcw9g=mu@Cei*ci8T1 z^iT;n2(!3+GR^*eMnY58ZF4oIvp^ykoc? zlTM+}TVc2SE&R6IiPygM9s{Indi*LW^~qgkY=H91lbfb%I)6*eek*9Bdh**oRdXvC z9JL5>;~=`kj0e%e?d~dgYQ~*`NJ^>S)-s9F#J|6t=Eemy9mGmzsyDS-r;O=!bb7r8 z>*$auDXD!H$x6?7UjQEqWXiEEXV7E~4iT2?Q+rcLAYOcSWKO6EX!uO{?m#re)n77z$Ya(>oxce~ z3BTwWBdTkC4r{qn!skQCc3u}tftPTu5bfzx15SHpPVVd<-1{T)_>8oABJ(3`{&3pj zCDK%-)%u%a;=yQkba{OiC#1`gjYp(`DF@~`cz$un=k`CQi{d_Jgw|^@-{cao2d$b!?+R&5mVbWE7kWuyk8q$%1C5yc$izf>(feciryL z7{HoHNs9jx%>;H=w_8hwQxM;H+rkLnfU|bxvJhhOK_m8OFd(_?myQ^N+>y@Uz)E7! zT^kmO8be*n_*#!fBVMrXi4se9zuc;9YOGajJuR215@nCi{y{PLvghjH2s6h@y0%5f8Lo>1{eS~YSmp&TbwEdpfpf4Tdd1$DCc^{{`}@$@#(Zbif@g+3tj z87zMYMPHZqWd`%RUk#kwlj%F&XY-2=K4s7U5@*!Ve%5QWPOCDa$>1?=OIfWY(|vMs z@Htg`f+4W4s?=&$yCV!yU6EGv;&<(VId&RxQeZlrmekVg50mEu1s94)m_QcUHG!MwP&QM<_3kX$dY&80Nv_p+ z_|EHw#MsF3_-wx-MT#9%x5g>?P0?ckL;JmAH&~9i6T5ZDqd*yS#vZ{NO-;D zj#U{($L3A)1qMyN#rEGphTH9K2FcnT?;`BI{bi`=qmXDs>s(y+c%;|HjX8aHh7!jg z{7)7@en{ursZBlZm zWqZ31tk<70=2-GQDA8Dsn4k|*2QM=&xc8Y>Me9;u=rcJh+*20z6f$GL?w#Qax2ufz z%f%06r9q0J2-bR81eqnT5^}TpLoKvX1hRvK)eWVA%825BFRB zRKi_bN=i-Na+@0mX6AD()7`rJ)po!STU_4|$6D;Z?!6l$*!vm6-~y@i1*BvKBF z`lx;mdC@H-J>Pn%si0rx<;h83Vc;q7f&CtCumBXgDPyr|N~dr>yYuPOl<4mAF%xMr9sqPc#a6nd ztFuge50z)DJFWwjw%P=x-840=SFpbDBN4A{BYw~}zks~8i9+4G8!}kR_FM!BZTRdx z*+6ouQ_EwgrK&gSkm0kq`^lX4i+0eO(w9qW_*0Nv1ma2mI7{|+&{t}+U`&I5$UN&_ zyxdqS&I&v@X0 z_(4w~jGV6y%~IaemMzLEsVJ;LO`#KPeLvMrYY4KYcD9%21%?rpOFpru7@vPuNrBg4 zeOK8js}9Mn>d{r~bQXD^ z8HZig6d)*UhAh=S8vB13(U++v;Pj@sw-=@K?=u{%O=@nQz%8)1?d&gN&QYh5JDc8O z8sClo&S(E&ktQEg-r}dBsY8j6@!%vMAI4@CfogJC@sQ8W|K0`R58=H`&=+~LZxF83 zcjzG9zz-GuCEc!|TQ1PT8w-tJXSIgHL!7=J4Kxyx{}r_HhA62(UH99sC$j-9b@abv zkaCRj0OH~^$pTpS>`%aO{xNWmiT(vGoLwjRl1tB|eYIt1Fy(ST!Xg25i zK6-Y0Fl$q*EzmQzdVRoDhxkCYHynDPcilLiIX+Z;2F|>c)IGL@9OHM8YEud?{$Hc9=bzvE#r1KeMb%CoJ}=l;D^Pm^ zN>X27LC|OBmG$-m+T@8#46gbyaHL}8Ki49(9yI2SNrLfxdHS6ozQy;QZc{tKmy7m` zI6mRi*$a)BGoL%2pUm&2(CA32wm>qL4;hBrkA)lcc+{YGZ3?Jhp{_*Mo z|Mf2x#99ey*FE0!BC)gNzrW9$t|A}q|JH1Ht8Cwohe6Tc(!iULw z!^QBVu%~ynU086BF_mVA%lgKE$JkD3XQrS zRm(>66_}>PT^)=KaHPmJ8gD4dKR$acJm=^leYOqo&>y|g_inuVt{dB1CEIEMy47%g z|JPOc!4;bCQ+03J95V4Qw#$f}o*4b5qZLFpbPKC?byHGUL+Mj}NO#LlM9Wwzppo3rd!(Gl-q>H35li(^P z-RkYmb(Y=pHMnw|HzTx~?KX-MkLndql4UIpbGy1M9(O8ucsKG*>C|U~B2u`UG_7g1 z3P0?`?hIdO-2Y2|?m-pa?9|`~t=c7!d@a;psQUI2jEElj7@;rUwC&3J-9kpd2g*OY zHAx>x6uWp>pW|BI-hUH_fLtt*)7i$PnWeOS~oWNr^$vFCfc%(90mUXl21gi$I~uDB&xX6AqJZ9=jE1 zJ+dQ|+MRgb!IZuNv|0}?YNwu~oDB6BbkdfBpOaz(Au%MCdm1r)qKtjU?f}M@<_pFM zY2r8fgI{q;03Jge37erLd4fQS!26mX@}X;}k|r=uhJYTg+9sS;T#<X7*| z?cfK$Hpus@?_Mh=AO+LlP>dl<(cbf{R97S z18vc{0Rb`2mtc*jJe{w)`WZwkZbS2BY-()%ah!8Dce-JK6&1DfFDX4}G7uM=`xjnc=!e?r+Q+x&# ztfCEx3sm2PfhRATvmz2raP`@4yuz zsaccl-idq{46lR8@cEDK?Ems}|Lg6BW`@oei;!~H*lII4cOnzyv|f>#w_-2sdJUQB zb7wpJ)A_9P7MCv(BTglkRXh;(NsFp?qt!7*=TY-}@Xe2<%ZaOzTUbFRL1pmhw4mfV(Wl^xX~i@AjTFo_0rz zJsJvv)rl}1)>xa~rr-|f=ox&7T5jJsNZnyMplh?P`oGMTe^LCVf~AJq!$A)&7D1%={__o>kC8|_P>&~dEs3ty z!v?Z9dQG!V|A1aNL(lA{JzyFNSu3g0cl@Ke%gP3OI-K*cvoj=U&=-V6XK5jL{`TB{ z9l{L)s?L03h<(f^H*)+!?Hu0TA}&*>qy!;Yo+VS<^;=()I`Q~3w z{oh-h4g3S;fnA4aS=DY$T{EG3cxc1&tu$4c$ucd_Hee%pwC8n=J(0zpB$Z4pY)Utm z8xZoAKnYZe=84H*;?U^$vYL)lO>ssOuF!Ugw_THnY>_MzdgE&}zkp~J^nU%76ivwcEvbCL(BVF;Q8I%P%SNl)e-j&S zyWJ~E%jxBT#y&H^^UsoEf2rZ?ijw-qzn299q%G6NW8n&k{;(Sd8h1xPH~+%$l-~G# zCx7<92Fe>8D!p)OO+s16YEsP6>j@tn9pFw*l3myTW7y=D>gOc8#;vc0MpP9V3f(tcN*6)PWbkS!~k3lF)!ghb@xCN zvflX-xFi2B=kNcJihRC6lCm;6TGBRr!WvtrO&Y_1*KJ8|I$6@itT<6;%B#SU`_5Bw z+(Zz!+F-6y-~k9FcO7U$T+z-aoa0+_yACmiH6&=GIT|#ciR+7KBhr!P-+5im<8DPl zq7{lGkGeA+#LSy4RZPcEa1tqv87+SoVohZ715*?4Vd0#mD`sNET}0Jm1sOHQ0Ixso zRtbC?ma`DicA_>bu0_Vf^5Gs&Gs^`kT{=IG7aD+Mo|^`E=WMsE;j8&RCXb67XQ%tK zTBv?$DN{DTaJ#E@F0ZR@sp(0y5~w%dRQQE>sUe8CMW^7&*=lCHh%S%|>{5#KujT7S z1&LuoRX@{b>-vdp&>o1}8LHlxl zLi;h}s18&KdU=>u#;AF^T>4|&zu1uzLrGwl+0M&&e^hj~I=0P<7B_E1x)M_nYV zwTMp3Pe}m^vHIPYL@YtC04)fP*(H)wRlXqrf4R30%}F6HR2BL{h&wBr9S0|7I1q|% zdJTXnkG^aS3`XEACa{N1>j`2(yax*z+;xTMHU|G+Gs6D_jBSwlng`J>9Wj5)al6?a zRrWu-&fv5wRSe)+$Rc%~?|J*~ZW;!IlycQDv$WmlaCC(=mdws(vkq2eDtMLehDB5uJPGGqvg%rc%kb&UBgFlmye#(7cB# zEMo}x<#3@;qGQPH=RvwB5s_l+Q%()_^s1i>ZsgB?K9C7~x14y|) z7(rI{M3r**0XzC{-`>er&@!yY+e^_Y0?6er=b`TJZP*?$F;ZBWx~Y!*tV4Al%v0v_u;pt)~+Fd&2R)OaA&P#8ME zcL>~XP34~fxdshzlrp!6V-s=6M<4cNuYJbILJ_8RGG(m ziBu|M;bQpgK*%Bl0w3Z{AWrmD>J9dAoV16CuWQl%%r) zH4|t;B}4I-@6YWUR2tz98f_t_h&SRkGa&{Dl~|w{0QAou$X7b-UC5z@-D}w3vx#FO z4sC2P-V-Z@ZuTxs3iwYKQA^}~M;?3?+XsiH$QS`uif>)=7?hzD7zUI2ZF1&JIz=7a zY>I(@4F`iDoJsh7Xi?J9DFXY;*<-V>1Y)Q>8f!M17NP`nm@DjX>Y@5kvX>k!HaJGx z1#Gu5?K^umhDsF+6p&rog-{-v=y0w-=j=9m?cpCU72$~OU3kRy93qWvq&pMLjsm61 z7oDgfTdnDEvTNnHywu{2)N_TlV#0E3c#gnOd!tC!TR=a?VyHtkk;_o0e5tVbMOVM! z2hN06Z8}eLH5D|k%io7E0tW5Qq+^u^E&|U#Wkmx$g=R@g!lfH6?jdFl`p+mixiezd zS{d$qOvF=V-!KbaMrX}2zc`2v4LHbZ@?HkOkR)_3sb}#tSxlrmXU@7No$`1;IjL0Z z;Av)a+L4)VcAyaPf>WHkeKL5QVNJ&p<6u!v#~XTymAicc4sj0xMpBqi0TjO?W-ri{ z7fTS(8xW$@Y|H=Sa{G}r5=g^1u73RLu**#8L1Zys&h7*_%Bq04sU5DcX5z zez(Anm7E+3w9^P#Cp5KpAEn!xoSh1yCwb^U-VXzulAvU)7UN2io!BkGsoZEOKsxaG z3OR&|b~>!V0W!j4YB}7zU6=rSPsb3K-2Hzb7?8vVZrkhKF|y=A0X!=UpGo+6J6l^e zt0z$_3=K{HS~1^3n@Q}UhR0=^8NiHaq1d5CckM6#*divj&5f<~{25Jw$Tu5Cg9A*@B^b!;?*FHt+(CL~(@}fQ0elV$D`0;3V zj4{SuKyS%Vg#DxGO;7~3>v!wGPtU?>{HUnXEmt)UZ^+n zj>(1-lalIAuI@{Pa{Ut6L4%VY|30w1AVN@c7f9U7r0RA0L=;bIirX!d<2pN-O3TmF zCFf?i>R8+qx(nC)57^AN@MLwnWyxi=(?_?~QbiBFipAhdj%Y_Vh;FT^gopKIH0%Bt zt1J?}+rIY*FGMIaEwKEWH7Xq&@|+gi;e9V)IvN|EDd6X3z=cEmE@!c4s@m@h z`P{dm=Q_TrJ`y+{pMFX2w5W=$`f2}gv)t+2@b&NBsxEjNl?WenL2u$T>{8{Xq#}tp zv4-EZ!(wQ;yv?1MLq$U-^pFi)Blait>Bp%>y4++Ek5@WTWpQ~4#e6=IZWs?oQd;ij zW=hq&ztY}ZMKlbhU8{>K%+;#7Q|>T``n=-rmEOl9I7H`Gb8L6-m{U8C4J499?b*dE z+Mcj^Eivcc$R_c{p*@KcX?$Ph0aiUt=#fo3>hy|idsMMXm9YI-7Jq>AIuo{+*jus5 z0x^?zozb9?_MneiuvdY)CSsTQlz<|Ed@A$M%KcE3cBw+%i_z9cf`heI$7#mwu)l|K zgZ%_-R6wDI-2??bpWDwm|35AE39-Y#YtnRA1e~Wp;-qf1xtU0NP%uVUoEpD-_#zJ3 zMon-~+4NqnSq_&lA#%ul36U?{idU$zS#W4gm~%L0J^uR|@jr}w;XU#qxd2M#tNXFc z*a&%=4BqT?cP0f6EzNGfY!)p{5|e)Vip!~ZKuA>KwiuElPg_kn(=}=5NeQ#ybKom0 zeG#v#1p{i^w-5cr_{Ves)a>_<4C5n5OP%V1{!vulfqazR_~o~%3=Ub^(FXX{<3HYT zVHxC!b|dPU+{zwgAbY|cD!GEZ_sC)ydQ3n#=%8K<$D%QDfRDdK|`A())!;{CSq;mesQ;{sw)3th-YyenmhS4p!NJ2t zAYn8CFHaQlS`v2k()W;`rDYW-?+|Er~{7(z{G2Gk`a!rgVfQA3a(oc0F5a^UBb6qL*q- zYbLIZPBI0YJ-^+ihQcm)7(BxI^WQU3fDCiIHhaEhuYV{KBIU+i!2SzE6c5yrNx~rQ zr_|ROQ`P!&uwzjhXr>6;{bAPbQ*$t130~~9T+Qb3U67FtIK+=O)kW!IUxQE-9@u|EgXD1n<+JNAoreN~T9CUd6 z&&(iAm^~(E>Au_dvZwo!9L8oGJD(>3sAH744IcO@#D4Y|D}9mwHJ|$rjq70=ezUpM z&S+`VCll%(1{wDyhFXV0B3e|LDhhiW=QVIorxOruONz$Tm7|W6s&seUOSwBvsPc>< z`%VN_X({Z0vFxUe_4r4lr5dBPRM3OrEAR0tsFeEWwB417q{V#wWBwWrAge|{R67lW%n%Q_x0>`o^W=jtfvVRzVG*(p1|^JKu*g3kK@ZdJoNTKY_;{2 z^+3kw=$ljlnD&bfZ>2*?N z2~=i_!MVcpS>jerpO!qa)HoK~k^GhFbCw3f?7=;S+SjWliVX=<>aQFD73#&pJBKWA@ybt))|*nFh3h=FiL z$V7EiVN?&ScF@~%mtIhWw1YR;{5a2a^?J_j7O7^pCdSScQ>%Uu)D_#m|GGDp937p> zC9go0V~}w{f_@(JJA&WWDT~cqz;r5Gb$5N=GKNGjFPr~a0ce*m6N@O`-QAUmz-DNw z&N%UC%4E)?&^35QbL4~h6mFDrF+|gSMLP?L{0%{xU<;m8=R{*WsA!I zh?H^VYOfwprZ>*l`?AKtr9hs~Xta>D`rgfvCIPju2bI7>0^oLz4y?tM! zMqxf%=y0V=~NQa3-F$*73uJxQSscfBMLeg9)`Xy-GkBCU&+@5}-rRO-&^XmzKU zlnOJ>s;kMD_|-VmCcT(g6L^`!pE5MAv&)SCg|Mg@($Ub%#vSkcg+KUZofBsp&sVn z$E|!54OcU{ua_I1CsS@G7n})nJ!pYi7bctK`YddE4H;CoyL3PUKi&Y5PNf42LX#MU zvdiO^=d00x1=z|*a=Jj`AcC@`)Mr|gI5~YPn_u4HgP_MvYOze3+&>+wLA51W_Pv1! z3EUuikv0JC3;5(EuZ#kb2^Q2;8U71n^q<*vzm1Q6!!g-EZ97p|kDE?7r(c4S;hGdO zZjRZ0uNJU0b253Z{*FN0p_JKMb4}@7I`+NeIps$28#-Xr7t%*WW>{it9ZIdVEZKa6`|Ulgl0V!O2Z6TI_x zYu>I=FAdk<{E;x)*|NJ(3DIUUJ{e0F^ARsuLqZ z^;R1^gfg+)rXSM0%XD>0K9)pxw$~M9qkoc&F4A&8GQ7)SB@huDix1vvu4N&{*5wSuF6Ik=BUtY+ga*#gxL6F z7F!MW-eBrhfy1sP7Y%k9Nw`(W&&UaoODUUqL3mL<|Mju@&y#0Qj(?9nfBWxU1Z)D~ zMbCR~xOJ5@7;A8mupIBNk9UmB6*x>U3Z5^!Wlc~0Au)w(S_WD|>oBL0PLE@%uFk(v z6WfTPZl`n5ajAUV?AAKwC5*qWkYS-vPU9OAGmS;6a1XhhF6wMhbAp6nY^;8j2Cx`c zf}bv1?4Tr0r`9%_i7VVA+baKOwDUh?I(_orje1|C85iSbEygDURKTJTQt{N;NuI3o zPY46m4d)A*d6tzKvxt~h|3tG@A66wJEPrNCGTu#Fs0IGiPfe?4~Ul5fyy=qwE=ij86f@5 z)k@Nhr8kfcMq>q}vsW`Uc{-g5g?-{yx?2mPk%|nQD|*)dnyW7_Ofc}$I!jHk`mSE3 zne*w(ln}+ROl}v*xdf0o#$00TfXiQjVn3X8o%|52^Vh_7g+1G~t{evwS$TU62BN^Q zbr1Hj@OanFzh!}o{SxwJa!sr=t}2vg84ES!)#%10ze-pV4#I+5XWNo!coK%;OEV{o zsnwWqxa+eV4cyc`(XBYn3&{%1m@hm0$ODn2oh!8O%r81pr+!qXPE$i2BC!R`2r7p!@DJsTkieO>-WaFm)04a>aYs zAD3}+^alx%kl`cDRQ6^DX_xZ}O3`?HM)n`qV&FDHiG!n#&-a%pZS-UOr#ruEbNM3r zG&ZT~wygI1QJ-|qGI@aeWD=5Fb2c&l3Ws8BRUxtqj9&OXZbCtXi$#tHOrhoXz#48e zoKPCer0M(>N-X#TUpC`wF#g||11!2lCAVz9^;qS-kNCeciYHQKUt5@dt;hj4t|}c4 zc@@S~#aH$2-grwm%M5lp?CC9v;Zo;zMxFZtjh|UuM$fLxr7Rc-ciOdCnE>GunS^`N zC~lH7{;S8X0NE&Qt08qtipU6zg;J@!*w0scG6 zoSd|=oSY2Wd?CqI8aoBX>@l+ce3t(`;)*8s<74i`>}g2|9RwdCfpj zEDZ1-z^MHO$yXOK;e2U->eRK1ED4ip4JV#byf+7-Y{rWuK zQu-A6d%D(4^g*c<1doQ|a?R-}!Wz6o-oz9VWx=Z^Je@}Sz#_F$aUHI@-1Eb(O{_E8 za8NU#f*REmmMXo#TAFopw(-Jz0T2Xi^x1h44lzZYDqB&efSWAPO-?A+CM_jnWG>DO z#q75|?r-!2+LchZ>(Yl~4~7N+{H=P^TrluixTfMgEB)^B(ZC1qK|aBoH?IUc3pw;2V1(+n-tNH|K6H){Grgs;@ zTG!RQs#aW}@%XhVDrh!QZKr#KBM`pU_N(5-QR*pO=H)1-MpX_lSj`qCH$#nQ`mFxA zAu!>;+?X%PM}gI$DkaPhPSP(lC|FuFJU_#V+25>p65gKQrQ|%e0LgAVH5@9USQyV`0e- zM)!TOrauF(xtu58_4gfV{y3&8np4aLkhN)5N}w?MtJct;_j)XQym@ZI2-hwCl+$HD zO1h|f@NmL(SOKW>7dq4}3*LPOgiTu|YAjWA)7(OX<1hME4gy@e$+R|2H9>ZvPIa+8 zk>ALIF%%k@$r1N~(n01|1DuCdcr3^4FHSkU5nR^u%2igjD+Tfu{JKy(8#}8GyG#xb zzw_-ra_c`c(0?X0m@pt=UpH0fj`INmpOe;aIhW!L_d%o`^&hNAeJy9%*642!QiuQ6 zLi-02weq&Z5o1sHk`ucnc@nMbWC|9bLrtWJKIM_|$e3%Be!*Ej zu)n6zC-Zo+L;@~S=a(8Hhv|tJHOgN5IgQTzDwR*qMwOj0en{VKn+@SKC@uR1jp1y9 zAFAl=0$Z)2YCT%JYY)&u{*N#EXEen30%r5m16>b@&jJM`2f8`Bi>A-Kt|9O%P*)ftHS0@_+qDPaU5|$&C~zs?9d@9ZHvr9%Z>`F`{|h z2>Z2eGTNH~;&E~XbVl#&A6rxEM~WFdRgk+G#3z6Pkz`W{R)5Sw^$swrQGiDG$GdbM z7hUCs*8NFQWA!(rCuL~jEDjHi-94NhwIwnA&)lMDD&pTiR^=k$FiaHBloz@cM;KJH zILhlStA>CP_2L*hK6#k#XvL%=!UJ7B-(YXSKWW8k=@g&aI$5YBa)W?2$6Wo+UU33_ zb=ei4Q{VnXdJ!O2q1y~C4wu$U|{_IT0#)c(%VJcrIarfa&j5=GrZ|1EV4Wwz{* z77~+H&YD1L@wu^-V*0Zob-U(Y_=-ST*>!H_XS_Lr9n*O2>hABpdLmHXGPBBg%n5oCYycdmx8zxcyGKM1>|X|3|X@1duo+4O)p*8i?jU4W3Xud`i7LUCI^51Xmm; z1B4Vr7DIk2*|y;G?~f6R*SZgTEIUw<$zr8+@GWv~8PA>kFRbZj8>qnX)&i49R`D)X zLQ|c{KPdtbA~x<*h(gc*$=?f1*{m&1mAD@#51lAoaG_E-e_3U7F!Wjss9u}xWzBss zm~@?Qw9Z!-WYla<%j%XDbbAr^tt9z9^DUlWV}WvI36+zj!?J;gLaDuoVA)1NCA!kB zWDONev1fQve?!;+6HK%9y=~tE64Z{Ck;dORL-{SEYji2USI>meiP3S#?OyOl<*eF1OnPCr<8Hg+R z7-c%zfaoN@Rqv(cNQtdzu@e@I9?_F6L;`+`KWy|9AoLR`hXd@_}gvXx{%cyEGo?k(BZZcU_}O+Z<0y17nNE9_Mc z6K35uzgIzmzfZOZ^A)^GX{FDF*U{ap{){Gs^qsfuL_IA?Y{P%5d_wiSo-6go^^u#N z0;=bL%BO75m36+dwn;##7v6%Em-k8K{Jzq_pGi3^18lvVz>gv@`|9V9oafs`sih#th&&8`>b`_@=d+gLeQniI=e?_gn0MR zqU!SDVfr-lp@N8A?L9{sWzBirQpClt z(v8ep0p=0}z`Gt%wcEZj4)?M=yX6@=p2Co<($cezH;p2x5tCU?&ub%*MV6YJ9mOD7 z>AhargSwu;IvfDJvEQ<$zi%~voA8rOjny{4B;otPr>B&6gGQ7NnJ^3i>c*d0e&TdY zNkX9{WT*Edu4kXoL7oIR7Zs@*M5@Kl(YhOL!4K=oG`IJm3}#EE|7BI93cOe7xI{*{ z$}7=Z*YZ`fAJ0mx)cJy_QnYnL;#WxIOC?2$6iQ>b;4kV9VG^biNANLfs`O~`LB@3R zqW=SX_CW9z_76d4e1!y?b@$Ny(HAmxs`WGua;e2#Q}@KTExn21hryP+W~)8DPQ7dQ zF^81R-6O^uD~ zE(o5HA+ys|aW^%AAqoGrYJe>Sp~bd2CO9E<$%Meh-kO!waWK{4MV zbbz{ZSE*$?kL{?PbnoB#jI4yvyxy$%mjhf0@r?#wYb{uE{WEm%X8Waq+LX?Of5Is8 z?eW`MD}^`H>P)#F#{6&!?{Q*;p3A?OtUwV=T~_Q4vPupgjFu3EqW&+)A0+t8RD<>< z?*V<_-|2}+n;vPKxjzf=gSLEx!}*$#d=;Ll`-EEHs^`e0)&iYvs_n_|P0go@YD)HR zGfRh@2Yv~1YSr1)X^FA@lZ|-_K%p5tFo3Pl3|=98_2b`V;eVbdA39jz7*^)1q8y45 z0sKi?JtsV3L03z!m0FQbwQ_Z)MV|_F7EP|I%1`H;=KG`HX#r-^K#%H4Xa&D^f+?98ak~ykWx5IkSym`-*=z#(< z|C~OA+;9psR5%_C^Q3ysFRX+ndh=m}Uss;UW%5al0aAU42ir4%*1+IY=|GZaz2OSe z-OU*WjDrIn9mpFztU0p*P%;VkfKG7t`{R~gneoIHu*=LPF^>myd>+~Bi1Sn0NqVUW zuWo(cj^SE=DeD28OW0V`DLa6Hc`O`WKAxT_**ESPfZurc?rfw?;P+gYx~W}kA91KgPh(IecGFsdBbCjhPLu%&AadqeKBJLm*-Ce zZ8kUIFG5aI`L%mO@qzh8_6{vG-!9b<_0k5iE~h+t?|@yzRe6OpvGldRLg} zTBlbF<;Cpo)&bka38cpHViJCTCKr+1IZUV}NcOv!++vAJG+U!*u%~i^w18!DWrf!X z8mG@(@QbZJ>HJ~6Tr`ZG0iGPYkzl*4Bv ze74r{CE+sHvUZ{eKPczq7aJZ>tNTeDch5bk8~z-BcHzsB?j;Jd=j3LfV|?FI6!B*T zs%6t1>>4W7Fe)?AgWBVKK&TEVJ|GKTuomiM*qca@E{Mu%iYJz@#2Gh>gunF@ePw3* ze-8cc%k0O82V?96Jp>nvU5BDRIpcD0b@GB2q;c(bisx-(g^t`3{;CVxJfaY6& zG`7JAOdn>Br_)FPAaRBTR+~lP_ol;Z4-hecADj@B+Tw8?%b6>smQ!oZHNH@nFbCZQ z-(BL3A3xk*$5F}&xC3gtPK4^d<2OK^=Y!Skrvu(al~JtU=k*u<0pWm^FPBYi3JKXB z5mgFu$p>T?#xLB8_ju$y-}j~rdHmAn{IHd2^I`9#tc2G~tO;ldrpZt4YIdCp?s;h? zhY{rT9n!$;uK0ylzvgtplyOjJUT67ng?g^{hBzIe{F{LP=rP>#$;r*0RLN^Oi1pJw1l`3}gHhl1t66DZg$3%3z2RHW?ReDUlw_UEb#@oLSE?R=-oZ zt>1{&9rMoEauIbgzKA6c5sM}b%;%Ku8OB`^(*?5Us4Ry>o1EJ4;<20W>4gphn$jl6 z*zpxEJGR|-=~>6!9C-7^@JB{dXAM#b9*cqv@82`+gO%xtlGRF9M7EM$W#fna|b>HWu5lc;e_+SBW`Sx{ZH@G z$nlI;xLc08LyqVGU zZm@ah7a2!D9GOO^k&MMgJM#thpct(xUEXsP0{I_i3JuGe$A&yh0EHfy@GX~rSj36)rkNkWq?E;>tE*UwBTa2bO+Yb_toF0KRImh<-bxu`y- zRtaJZ(-L`Siv<6~Zb^`Ezq(2!k$_c5`+{VskS#bDa>a`nRUvuw zV39h>AT`IFmyjnfBScTYC;PI!NqH^J@i@zvZ@cvtup(*2k-n74r zz!P8Jtv=Bw?D9OqzyNNvUp#XbYsJVrl$!;ex)mWvR<^^=u+sbw^8n9o_gu*>^S$vc zbt40pcq&&)=_I-Xz>Q=9WISAQLcR!=vx_Rk`l+uNcH3}qJ=g(C#sxL&*Y z|Mcjf_poKxgrV_O0@I)6!_cW=zb`WB(j9zPq0{kw7Iu@!d5JG29)uR(Hw%ao^gBoS zRk$8cy1dkS5=1-;<6^6&Rx3d74nF2d=?eKsWvXVqCrsGj%Ps(mQoEH4{?b|S!^I*>ogbgLti$CWn{DEcr@gcxa ziAQHozf~7&;Fzv(V(yo$V6Hdwvl1*h2E<8~8``?&$6|2`pTzpfCx0%`t{paDdx=Fi ze`&hz+Ia;R$7f1m8>|QRwgps`4fE*pfG!`qjJ4h6;}Nq|CTr&Y!4SE(0}(A^;RY_5 zYwVGq>MM@*fXSLMoXFC!cy6vsELGK2(e&vX_6$a-jkW9W#nPSL3S_BuGX?6(%K2Zy zYu!@aIDYBt{aQN8X!@p*a(N(j`tI zBk+y%9df56?!n{6;@E5*u8_w@W!+E{G!*NnZ06&2@?XL|o`j;wFGn{u$mM^T%r_*R@5dgG%;b)}y8EA#wNH0` zndwZQh)V>YC$Io^Q(!ky8^QX?Kj$`?SU=SmZL)8W@tSUmea-nGPR1UhcE#`UJ}y!``~%<73DJ^De0+VuV#yU}@Ts?^fG|&MT~ThL@&H+;+t!yR)|7kuTT(A|e-uEC*4`W4nZH3}W0 z7nS|Mt;dT#(nY>M24i{fRp_<8zNoOT@~Yl{DtH6!?8Quu&&_`Bh^lx~HXyXmVT8VP z_L189uykSU*esP`n$~+GDx#HYn@MxVX$Yg zB)98YKWPuwX^Wh3$Mp#c0S)fyrI$O5dSeMoj|y9iT?M6_?dpa1V?qqZlTCyByC{Tw z=$J#bup#TTKt2P`{wg?4|>f9SYV|6DXdTV6hG=PQH6jE973qGx(UmT}* zSE1~~Ml}G;^0l`htOD0FX2+9d9?58u$e(A6 zqjd!1pM1tj6{(!hk>%*aI>az0|0$!+2q;jbz1SKeN$5Xe_o+~@MAkDhF$1LI z9ZcR5a=t3ec{ey{tV!uNK%io53a`!_B^D~rNjh$yiNnB!M%QR3eQ?{zWRIE2?x9fz zH(AX_@GEbN^tyb@9h@bMJaRRJrasq{UiHbwPnh|p}buIyK-%_0)^mya< zB_dr2NIBvgAMyDZ4dq@x7B4ke{n_d9+gtychWqhh`|(2z$65&I2|WtjKf=8FPZ{^X zGJ*lb4t*N@z9Mju)4kk2tFx+rgt4rIn{&s9QPU7wOG12ff_8g~9Ky zT$*NeFa?D0bAZIKsXDjwY6Q}DI+V&*HKe_=!Msll`+S;%grIWlas|VW@GSk*gXDX* zDljsL?-dOAsJYS#+QqDUvk)=kRafWj9l1#eG8CYQNNrWNKNF;%E7CUx8tDk|+3mlW zFldTx1UYVNmqwZad0R|17RFu-S(p?(#|fQsto$pv%(@iBwE=?%B<4!*@bRaY^q7@~ zc?{9o#qxe8(y?K{WQA3F+$Ps4R!z`QlCNn4x>6N$t!a}xkO_W9zx9qxZzKwjny3|N z31QYfDKlL~^~WlyK)PZ`aeO1Wv@n?~j0ku``vu+X0;yunIOf8cO-6Arw$5W7lRqZ{ zQ-qgva-os#Qg=4JrzXS{S?&Q^_|31@U)e{#y0pDK7fI4aAwA+}E?=zB zqCg;%dYjq!qlCO@eM|{kfv7gnW~3qNj|lIutr!aMo8&f3=yJg&tU+FmF#%@;HHSetzL6*VG6g zZ&6It%1J|DyM7}$3kWX>S!7uq_hzS^;cX@JrBfwP2;H2mLf()w0|OjKQ>Qc70Q4Rg zgZ@?s^#%=v81I9*l;w;ylp>%%fm*gYPpkDwYayI<4!{9f32ckJk-aH{F*p3fIY1C# z{C7oMda7AJ%Dn295_v%nrmvL&GqYFe!ci#Ae1arAmVdgPtvPGTE%gZ zSY-q(Yy313LBRM!fh|ca^ct>Dr|&dBSf&}kB(2+$#0|PCAmjv&I-HGTO}N6rcsq2UpNh=YF<7hkPV|6M;(>#f$jW zwaIjclTNGk4Tw<>@dP8k^fQ%C5j&@gMW`&ku3&3(ShX=0Hj;$zQ}N%g3@O-KZhM3I zS@s##b%RE&CJH%YeCPflFb>8S?)XX$sy~*zEmUmP`O`a_#ri_lbDTC7LcIVgTO{Lw zIA;2bJ10JT?6yu)He|wE6pi@&=#Gp)=`G%(aI3Zfk4LX4*Ov{Bx6It!=ezQ7K;=J5&I{Er^1?-bWzQ`XDLs|HD7 zXrBsq;X`EkywnSONYII3{@2TIC$8;e0NUj%&^cBnLknrJDAg5dsLHLh=te(!b9d5*NU#ItHd9y=AW%2pHG)AxLUR~ zHHL>N6e_wMF1ISIfKmSbykg(Hmoy8R&C$HssBlK(>FRx#E9{C1NI95%siArOz3sAp zE%blC(ft5BHa5m?ziMl>T=lAR`5s~5Q9ZD3#a)OIe34wed#}mp`8Z@%qEQD!7?I&? zhmpTJA+h1ukn4J-I9ln2hhN=ln(2LGvrPBHW=VTyhw%4$_?c$5MWi=Xc-CpcxL=D@X!LtmJi^w=Mj|4RKaIS>$<)0YT;EPG(!u`o z%Ko~wl8B?{Y`IVnrnlp9;DL#)v~wg z>t?w$!O(3P$8bgRP$2_YxnxeEZn)*Ib{M=YmWY^CQF1GfHxnZ_rYoScepjL2w&4_l z`pK~`uzF|sK&Xt6Jow3CmD_}vxkaT+6`fCKXD5^U1-sJo;bB=Sy=5eP&L95aL$NcF zBL&a%Y1PWUDP(`iK(WA$NQzG(l%bZ z;-9zvP>Vc%&2)iJ-SPYcrTduY{+%<#h@FFDeaj}@ZvO&Thr$P_xQ8V+x%7;$sII1z zGdkO@n9*$f(?EReJ_#ND?jXmb-{74_#_)~JYB2;cHjiR|d$qmOY`MfP%To%s58bER zIyk3HhwJ;NwGMWVE4l>6M~t~DW1$vzCsbTqL@_b3#a1sophEMd)LOevUtfQIOM+tS zu1j1|%|Kt=GwkP2ss~?8JiO4hHm#p2ETPo0UldNt?7c{4%F4vK?)gf1+FjZ2~m?_l~xPuw&>yy|S&GkI`_XCEY+%lmNZJUOJ-Dq{Tn3j z<+nt8dML6p$`_^F+o)BU!l%LUkb(j#$o+``J;dD|`?J5lztQ{uxSGGO-G5x>AAhS8 zeY#y_QaZNua_2_|JATrGxVF|h*Q#H1dJaBVa2_5VPTjM4C|!PrKi}AG*Fiu)m^_in zwHhuNk=e38dtj?R8(K_0JO9Ta^h84qT|(U8os9L?KG5lezmR$K6-E`lVd=-fqWCGE zaAWxc&5pTAF?|a)@D|{~QDr$74yE13qX+WXK_T!LCo6Id^nH$t?Hn?NXb| zidT8JX0lkWB-Uv^?ULP5N~Eq_FnYJ${-k+}WjQczx{Sss{Q07)epJ8th5G>Pc9GMeOg_Hz&AxD;@A5AOb;7V_66 z|04`w(O&}@95-W9Z3IU zd;D->d_$SPNYDWFs|@AnVYV={5>*4@zl_&=nU7tg0)?!g%@@tn&pgR8he(RNsl{`F1dmPx*ich&*przo_ zn%k{JJ%u7=M9=d+_77?_pm)sUSt5MJRWa@*S4Rs5d*jCQA!_~Iit3B1!5_}sURuhXP^J!u84S05l&IMwBS~zq;wkG@v$EusjUg7Cn&wru2it#tL+&S z>m=boMo>z=;S&l4$mk(Hmy3Si_?GHHsTK$ksa4OYW*97=lvcxwac# zmaqV%D_{0{L!0i7rkuUnWJHNrF{@_gE!-gfK1=|E5b&^xzJyo1#sIkv8~l z+qkDjT|g_PI&L7%xGdpLg1xpx2N`#y86>7t%*2=RXRy2~fnJck4999Ee=ULBSNXRa zB+~e`O_H8^b{gD9Ke_rzTnea>%fpP0vxMn9wt||XkC#GOx*OuTNw-TC2>49OqeER8 z2{*g>6)y>XxPDTpGD5^JRtwNM*`OpcsBqJ)+GMl3w+xEVqWf&wVN}w~F6E|Z9X8wC z-tOYac1|L+4whuz)~+(Lv&PlVlcsjupA=|t8O|MuHP9#MQC~+k?TZnq!#P+VPUkAR zi{GC0P55OEvyk7MlnG(!k>?4E(xV2erks3nP}`q6P-`Xz2&Gul#vzey>l8BC2) zL(y!tOC~nI-tioch?J@zw8QxHtX@L3H;vuAXg`}&GOjeFqr2suV^>h)NXXQFd-g|a zh{tM$jnB^bmW!Tv{N5W7 zj<$|=h1bBFEx(`0J97A<^jNYccY|{X%DSEmnOtA8pF?}(LVdc2K`vVOYTo{DdFqio z9+y9J==p@|mOFM%AuXHTD@twY-l;9IY9nUbO}ACvn77YRsnvei9!U=l-r!TjZZl6q1m^?iF9ek({|;(&FQ2 zXz;OFFSZ%X%#_{kM=`50ybU_ZRocIv6R}dkGbeAEzP5hpmd{tF#}TOUp4T6tRaDZ# ziW*c_Qh{>35P_5*vHC4!pxN?z8MA!qb&%=*${+lmKeZy%=7scE7}O|FG?&q3$+z{q%hExugpgo@=6a zutICI8h3k*%SncM{in*1IWE~IXPeP)yj3Pc7F932-?=`EH(g9-AmSDg26!u9?6aNK zklGAjAQj5lqE2*LwXh_jC~rQj>Q8CN{!S_Wh&JTH`EP84^tD(~-Y&$6+{E}-*ty7p z8$5X)J@75II+->u)mvL4ejQ=f>z7f8a+6-M>ax6zh|E+Yz(LI!q+G_0o>IrhhAs1rA7`5RiD+P z-sWmq9S>@$ZPfI5E;VF2h< zf_%nH?0hb-Z>RhR{uF{p zCI!K&>zT-tshn--Dw0vBu=DY_^3>?{h|$?PSL_le^uB4eD=aaV(%+wCpD~S@E7#Lg zO4i1tReed47J_FC=3ShWg5484H>LwCSDU;dznUJ^u(2sSyE_>Lm=Z-@y;#wz20Fok zC2q`mk?Ko58q0#clQKm>qul}VhST1-LW5dU5uJ_KSdIkgQmHx=nGnj*(MdX~ennBd zH(jcgf>PXd7@T)+F;&EmEK${?+oC(hZ9KFMX4#>38rsoquoqD-QYMx-Fe@Ap{?`c@ zf%V%JQd{GsKX&8UFK0hcuzR#pVerRT;{q(ggrE#!82$S7D? zV`Pc9Nq!7GgCZu)PmTqi~Ybp*e(5R|6hw%VUTdUU^kbCRi zlrq@PWg!axWQ~C&Xq2-~wnDf0f7ZX+pHaXbmU5~Lt;$PSF=w;Av7|M$L!tj%K?ZDX z1B8J&CcUc1 z-#QdHnPbUIB~cV!@3q`?O=ujk~XU_AR&6PQb_CR60&G@UifI11_s3Cu)elmMj;=YCREBWxXF?X5#Hfg zI}PvP4b6w}fX~#28VLAtw5E0s8%JI*zSAfVXu*BS@;&$d;I`gdR8kXxMdxLtdPEK_ zw|W|{obN32!Af3@aC^GF#oe*@ZfbytDJWk$9fpl1qCV}a$qw#lp;pu!tHZST{M+X4 zYs%Nx`(v*jJv6R1}+Tsc=8cPkXEB0edR1m|}yrTn2kx8&;Tv=;< zpRs&Y!tMpFPqjX*9USBj5U|#k8Li26)MyrT(ETsV3gCP(#Z;?PZ{(!1(kdKzh z;YkGHwdnUOT}^fC=^SDjY7_w|6sDqKg;!S(#o))T+t1Rmy4%YPpDV-7ppDTMElPGS zj_-2i$FI2^$;xhTR;&9qn9MuOnkQRRog3(;dqcg`%5@}mE`Np>vEUV=GTF>?x}3?a z?AqyCOu=T3B!vT!$@+S7Ha6~SFn~57B|y*N-mqHx_hSuMCXVs|VU%3{@T3Di*PR#r zyd-5hXKgotZ!$SnT%s~9ak_MMh)6|sW>cNJZwe4&NzICbmFYGbz^$EmLs~Tp+Xpn- z;n7|AHQkjMpW^OBRqdxOE=K+xZU2cE@EgG5#&MN-1Xm{u!H)33RC2q;B}R=r_BX%+ z8zuGhX631ra*`M<*(nL?JD)VRvY`=s`k?yF_)bPDlBvvSf=f^($*$-TC``J4d`6rp zf4!^IBbo_82^)0vDwKG8P-ZrM1gW>yINT!ADIz%7Prro*zwg;_Q>9Cd{JlDUDhu}X zHi7HQVjbYuJSpn@{blTI!}FNyDo#IH+gWb*Y3zqiRXvb4iYHWd6-~d^yW{pa=C+tL z580p*tw7j7krJr0wX`%4GE2D2=7S2manlqUJ|lcMVc%!9^5fxR%MR;*ACp@d&MdXl zt5clIn+$xHUr4(*;!lSVvQ|<_&4`zkaP-_(i|P8YeFW=Jj+&T;Q(CW--b|TNrolkHy$Nl{cn>uB z>iUL0<7P4k47CBo*hwGdHMKi*w!v+Q#SbXBS1_WHZ=&he)aEr)%Im)zKMu=Z5Z;v8 z6CMRbpS%jEgh)087)oW-T-00EOtTIAj!WP8B{fwdyowYQS0~FdSnr@$FCJn3`)au= zK0UO4Pf}eC$ILO;dF4G@lGBs7WvghE^tg!Os*Du3G14Q=h;XjEIZC{aTKhyGB6$9s{xUtKFZ{8ym8+D$=J z?$be%brDV3R6J#hr3r1FU4bu)_;=!B4vVXezqVNSCBtyDCpPZ}6rC#DUS`m0>V7-| z-X!P^nH_JWhG=GWaR2fB{dR)+SC8J&Lrm;{_+;b_HT;!c=U~A06DQT)1#%8JNXcI3 z@Z=~!WGMAsFvR}*fljbYy`E@zZvy494%FyA4;jMn9XRYj{z?EdY+=`;$9`_d?cM4= zHI@7AOHVs6P*KQXzJFJpkvN;7A;8XKg9Qd?^+a!&(lKyVS7T_h6dG63mA<#VS?Q=< zdaeL65!vitBe1PsQL_~>E{{2-`)07g^f#Q><{;fxmO%N-x*6Kwh;x6W_}2y-#4~mW zb&q%`I;^q(Z5N|3Vcc}1cd#vk*UMQr>7-nq+AO~8nggp{G}=C0>^NFQ#RLzQp8!Xa zn}q=CC!pTo{X8O*JCdpMo+LXw+?=796%u}UtU(1$`Fi>n60+(>{!uS`6wK)~ocgcD z`g>6jVNo!1Obs~Go+5JVz&cqfw-peV?`PXwzWC%YWYy?%Un6^Z2^JGJ!t^Y=-#82` z&g)x#@#4#MAyU0J>5~Lj?L}q5^TO&xR01?}3q$RIK(W=XsVVROsr6w=%&g__jF)L z&_9Bm5j^19xDb!JfC~o$8vtfXH2@$bV zC9{5q1q_+2PjDKjHux5J`}2Jvw^V;x3AvliVij1gt7|ckTTapo+&N!e%AMUmzuCZ| zU!_VB#-M#QMi=g^_*ky{XdvNu4=Z9sV0dc`q2WZ2V#@CIWcSM?>+QKz`e&B*2dEZzNQwZ{ozG@*H*ku+LwVc7F3W{k8t{_5hjY^=?{v_f+rDYCGqw`Ye9#oCpM&Wad!BCKB8N*!E zJktmYcveHZcTY~ss(+NQv>zx#XBEd{d!KMQR_O$%W3ngrpc#MK+jvB!m-jjZvp=<< zzY=5T-9gg|Dh=b8Np0a~=tp_NP4LfPA7p~wj+N;SQZ;1lMrWNwHcNT@-gvVkhlji( zZ&pRGzo7o`#)7oZQGY=a!h1oDNUc( zspk97U3L`YXB`^SJ#E6K1f_kT8!MuZ58dT*8YZDP3As_t^^|CS&@?sr8CBp`_18aDo^@vASALh2;q|Ct)UUwW-KslJbq$5u{wMCq7#H1djSbYt0v%55d&a%{c zkLrEn#6p%MS%F^9^`odf(=RuxrV1(1^K|Yo(83z`BCk(!OY-B#6^4|t44=sM;c0BA zNzIs4U?z{h2&jB!>LGsg(c*gglT&agIO#3){2__m3&u142{0~$wEMeDVnW_p?7k2y ztksPrN&=)3SLQ%XBvO{%F*RVNcgqsmp}E2KrHFWB-_72*cQSHi>>zPOK4UE~NXo?2 z^Ibhk6|ab#NM0cLuPgsonP;^S{m9$QNI^LAW$5X_o3B`Hex#I@?qG)IxniEy zOb$&DT}&dk0dbl#x?R0IlsoCZlUbO&0yB#BS0l=q4=A1Y#d}KRDMo)*>lM>|SzY$& zB30Ru8j_wa#fu6YrTjbJe~#W_G{QK67`aICWCreBHOmgda;v`?yA)pKGx*B zb$G-aEEqKJ!~z*C``09&G{d{S|Ab+sVSDA$dvlWc_GLU0RLu&tOC(Kw9-FYac0BJ0 z^1{8I10y|E2{aj!8c{7}+$bc2bGNFdv=pku1qL4uy#`abwKXtT6iJQ{zsBzr1Uoz- zryHQ)Ck=MNol|E&Zee3m8|s|vldxv>ym_B=Q76n(>~#&6ELN>h%r}3qNMc&k2~)$v z?Y2;TYVlA~XCJzJNNLc3P|QcC5t~y}1;L~5D9=F`c|nxggy&9u2JY1`ywI1p!D_$A z&$VRQ4Yx_@KCSckc$;FaIru}B!qBt&MsBh|8~c22Fztq6Sf??>+Tu9o%}n8E6+D;y zgG~rWVMbkIDHQ1_{!}|hp4Zy1X*E%$(cJ!aV24JqY|!*P=%G?YLx50;Sd&cSU;}tc zg#u6J&Pb}%OgvvgYb2wK*_XiT-V|gFkG?E;r&Q1*M@hyEDU+0!to`h~i838>%H7|U zyT9^h{yU1(ReGVj?Y5~{{wl;DHi~!+_VovebjfM>m!S<+NBx%yh0PL z#g&h067>Y-F2|4hS@^USNXnd9Tvl4Dl@oA;=-*5$WB+6=Q2ZWevy!9BVx6l!SDe#| z(�o!Fo@l&-E7IkF+<0&iqjM;(@L9RRtacF^3#R=;o+Q*R@{&hMnHL+V+<@aA{lBfr;FK;$jG*{Z!GV!Ky{$g_b2YVYq-+r8jkw}ynJP%6?k$CUjwu-_x zgSU--Wx3ZXwa~LWRg+uW6K~2?IXP*Xd*^I1f#AP#_{`(|2o1?o_jrb)Ou}5<1Bx1= zWgUWq!}$1$07j0&j$qIH07Wzk`drm;%kLVU`;AmC!&dX}Wn6^=?BS054<*}JrfEmM z0CmJu)#Z=q6m~40TCp>fNL~eo`xCz2mkwRdcWn-H-3z z&+FS_6toQ$Wg%MZCaKfx9+!lK-=~#a5*vVXQ0}sQlW#2d?#)_}HSR(CbwW)EmyWgS zD%VQQftj9S_9i1m9Rpo1h}O#)Gk*sy|HINn1`JfTnM`nVbCdrbe#I~kE-Duv@QH@&9Uv*_aQ?`}y|sq+YB zpqjzv$NlKjgtt8Q`dz*mcXRu4Xg+!;VUqi|mf(nosGVF-H+#*)6>g=BCE+CPq7sV{ zTD3{^R-qDhk&7RjigPoJPZ}H=QyYKgmOa4v|FG0Yy9*;@3Yf87vRq6V&Vc8xu)Y@9 znx0eOdC$tWg@+R#Pisl~khQ)Pa#<(iAD)+Ps@y4@9Hb0$Sy6?yj@v*{KHG6HTgmZYYTZ2Uy%fa;#iC|>rrt$08yG;!(!a-@j3($NmMXau)3VI zO6ANZxrwCGGB<}KMz9!V!pj)4;n%=@$MVYw&=We%eUhfSIrpF3&sTs*QllXx_n^4k zSy;umn;LIdR5mT#e?PgnF(g|{u)zkZsxhg`q5A^ew$?M5{XiwVrKUPGv>M%Wz-(ZC z>HbmZXg^WDNS!!TMtJmt3$51)6s+H2DqMNzsPaG|J;ubuDOF-un(IWfeY6bsxVEuo zYlfymr_hamFv{N+mynA}0izNj zL7u*)sW!q?BCUYr{a<1KUvI{-{4j$-kC1AV@85%c;bsSZ&+t6s@HFn&n8QC1)4My zUR#%g7O^iaRNpm6oO+N-(hXz+Y(YIuwbZDa0#L7FSE zs4TTud&~C#;}%R=bpne8QZIQW`f@jV{21UN#fb1Pa^o44yTM7hZErPG{8>AnBqAzv zAdgpA<0flpG#XC;h7C}g-z=0D>=Yxh+e5-aUNuWUrcRZKq~YoQKf2C3E~>8U`+_JS z3W9`)ghBHF*5qO$|nTgS2A=gQaFb9<5foWv=q{IJvX(R+CrJi8uoTQQr2E|Vm8k@gXsBjs5tRgqVqe7}$qFSs=BiCCMKr4ZM7={ZSs_f%vQL`l;(=k`0&NVyV79S?w#N4br0xcafjf)fv^bx+;2K>FuZuqsCo6HUZ8~=ab#a zrQ9`ww#jJAz?Dn?kWswbSa4vVtHORw@Ug($+p5wv_bVBlwtbyDfioKP=c8GyR{E|* zM^sFg`ow=dK0Sq}ZeXKqrdT_%d%j3`ORl`}(ZzV-cRMM|p= zily1ShOdRwN0S{q+4O-#%`~8n;(f_mz!E@PhAC<=#-E5G=7=n6As)2$$l5aQe*d)* zUi2X&Ir@A~#9GKd!`@@`?g$HQz4zlNIarqAzDtlP+u~(J|d1m$OARY=ffJKDX-1tpOYhUKiFnu#QG?2CM!n zaR)+toS^P^?qmC&wUy@aMUyu4Em>9iM9@ZLD^O)SX;(nhp*T531CJK-yn9wmg_TCB zBOV#Fu#ZbCd_&4oz%)tMbO9s?u`wxZH#%WlVOJZE%T}XpWGRZVdq(@A&|3tPVL~OY zjQD1Yv+LvwWPmp6p34(eyZz1-mYVItcD^7J4;xu8SF7-%cu3O1TD2;(en)l@^~K3L zRJ`B_kNWWOw)--(3c8kDwF~NvI%~=@f5?mL?T=TV2Cl!eZ$yGErur@}s^AKZSmutv zmX$rzcEw2^X7C0qL)fP+MBsWT_D^Nb4yggY$0^t#gI(UkjdDK}H%**a3HO;Bd(aw( z%aKCu2SWy=E1+KW4`1idj6$Y*tzK=#)Dc4bRlh&J?PC$pqVoF-riU6DdJHC$S0eXr zBM~h)Kh!yDpxQX)yjp!5UK#+d_%gt{qL94yAh1d>8t;?#5jFk5{Pt+GoKV}eTm4L$ z`Cx^g9DPMP#tB*N=^BbOE(|NCUu~8Nq9{|pDZ*M2sdxs$r*9N!eKD=B8SBJHwZGdZ z`&A{1#5XJeXMh+|0C2O!AJupy9U7B0z*Ph`HZCMae{b?v!ZV2GIl57}7-Bm!TxBK? z6N{cS5?me@xt@YFs0T!W8X#55ZaK=Prj{UM?46n7(S~t?GyeSd-krV$cR@s^04^!{@E(LWazK_54|>&M(cSqTr78aaxU;yx98tng?Do?P$t0 zER1-xst|e}#Tx=)W-<{aO#JgvWi(hOAEv{C0w+y%2;F)dab?tw0cLYMqVkBO=!BuD z;TB~M*^xuL>q*SQb-iJ;tuz#!mnK^oO^zUGlhCw3G&Ok zO&FOugG{g69?cdZRzQ6j=vPjd_h}Oq^XGyu%Ol4jmkn`QK!5H{M{{ZDpw%Z(L4JYI zlYJeHpx?=)q1Ylc@r@jHB92+y-iQrZ$Zqf(^{xkeuZFu{P_nNR)zQy2Z&AO>mhT{R zv~F|9iz?=d5dQui!K`y#xu8KkvPNBP&>*pV2s zSp}AdVLx&NgPdaD8*;v2GI|Ore02-7@4f$8(8VK7=uWiw9;Y$%CH(3t&EaVIQs8S= z79~jTP)0if<{RPgZ0QLq8Hq(R<|5^YD)3v^1SAvzYD@a$9OhJHeaZO8kkKrFV#1y-cHZRIGyTXqA@sPtK^U# zU~C*=GSNmF9Ke+CS0u^UUBy>V5`#yfwElHE6m^^vLEt=RF%De5t-8n!N>kWKS!mdWk z-Y9~dVB3?}+r*Pv9RFUorJiS9T-ZH(NO%USvYPfS+GTGN$Ri4buN!`B_gY6Mnm$~U zUrBQ6M60Upz{i?J_xJQ$BaP%i)rf|6{ZlIjo_ZJx{1RE!wZd`n;~9e@EvW^7tt~Bu zA*Tt2NJ^UnTEgaUPr$Djd?p|Zey=`$TM1&heEnwAF5pr)ug7}5ueFmn%S7Ce3GWP0 z6a3l6{Jc2)f<#1dEds#;y^gW+O^|{|F&>R*cN;175Jjgal6$_*u{#rSa2siX^a*q@ zEfZ5Rv2?pvf0QM(S427z8wmcAmLFFNYF0ayX3HAnxws-Fck@(Ud<6x zBx^czR6P|D95L5mPkh`4b{ffe@87k zx0*TA11nWshr@cEY8JQqEh4FRbLaR7Toa|}GJ0|BJZr(nE?Nfn7n)F5*(OPROPC9# z#>4~b$3^toCNKHBX8%R@g}onn;lZq2pN_v@!=VRN;`)2`)J#mtxHqnS}9 z-1F(P;j=!0qWa$nSOA|W*BMDQTBO&jx!p{5f4cI(YpT>BLiu3{{|sPQygz{YFnlk?)CP z5V?|Xk7UfEOLavWIE?%$6N(y?P6EmyZ3xVg%_4m;X)nmj@Z%~DP%)cewL^t0ZrgCr zi)kXvp6y9#)P``fZ$*9+su=Ls&bZEFQkLOy|Jl_<^UgN5P`zB~iz|K3VV8>gS-?BW zxLdRUn~<=;N7EWjvly;kVS?IlY4otIe4_TC!58Q^qrK8G4nG-Ousq*a|Bips#8e9O zg={3U+nw}E;?h(|-Q%Pk=(&L(>6G!h02H!ekMsF{XN%8*&S)l6wro~~l{%M%GVI%O zgk%Sx>aNJvs0ZENI_Kdg3y^WU-y$j$sCf2+CsKtYI*f?G;;#P%to|+A{&TU|PPVuj zD&1KTr0|deRrcHxx$LdWj)YAMDW{QgJ|p8m>hc-|%LC=2)pDppU?b`!#*@Z88s}%= zE%rCY3ne~k(gnH-s}|NnxQ&cSew`{d3b<|B!n?Wqdh?x8wcFtj-lfS0B~)e7_zR%? z2eDSC zIG#9tiRlI8+XA0IlRU&A^6QIx_jB08=EQ-m=^6mRkx^0#{Ujfi*Y)|oK7`q5Yz$bQ z+wMSz&sof7hYT)8E6s_qX_W58G3v>*9FxpeKl1{>;<%oE`rW;~a@8%sXEYBEVtn*P zZ#i5#h*$i*d-+p(_%D3E2~C8TM$P^P&(C8q+kx6fem`2^F;I5X&1I&(ZM7F;BV=shipvtqSWM@qFJ3aOCUKqXqb>@=Nyt@_+r%R6!GuC>RQ zA^&BK0XN}(8IUR&+=(u75$uUl4#(qkT+xhOX<2~P26~lb%~4kxpJT-{8K>%O1*qx^ zlODg=+8#GnK?42}9OlF6c>E>sGo}tXFbx&Fd^SDV#wEwf%DTy@I@8u0eJ0qGz!nj} zu!~4cT>Q9DR~I}0%tMl~^txZFlHOIB!X)Q0vu3;&~a`PYx0 zcwSA&T!C6!P~$4A*Dvq0JH$iZyYoAmj%ia>?4?E8GK`b`=>-sUu}@}I%aLNbH=D^2 z4zv%P702lgtBZV>cV9z>E}xb>tdKyVFX;>I11q*yjqKV{$`DNVDvgUO`!bwBaw64r z8y2WMhSpf+d!m!SYgZ{7x`lFe%MXEkCdL$p)39MgVCdueB71q~yFb@&Vz z*Mv{Z?%uxy`Zbu?!y7JN7>qAuD8&6!lQp)QtD4@9R? zm%eg;FzJQ~z`b(jI4L19@N!%lI3_as%N8IKzBL>%c$&A2MINvv0<<(5V+fK==1$|^ z_=02aKnJWh^$A;hdqsto!XB(?ayQ?)e{)O!%e(xO{gQZ6ej;gKhV&Hx0wVv+FI4o> z8DxxY;mqX1%kY5&wkH7jy*ZqQad}ScO)Bt6r!Q8z2K*ScA|3x6W1!;;Mu+KK4Y^>@ ziy)wl#$r!Yo`_OXwwe&fRscY`L5n>AHyF6mDVfclSUx#Z?@SN0N_q**(d_IBYYmcc z{9Ua1`(6I83r|W3l2)#$@OMT9Dli7S-7kcJ6Dl{r6tFy}XGPBEcE;l}1vH$Th*+%? z1N+0AN}^&*PO$jT`?Jb#G#e6v)pyr%@q9^_$X=6@E^cmq>50Aq1U^Pulabwl2H%<< zB=b5rRq?z#S>gvQEr|}{mSt({cw-X?!G=Oj*Ov2D%sjp2FR?oK(Hm3zvM{_3_LG?eyP@tZ22*aqjG>I^2FEgEqIXvoI0a`!6eFutMub43k zB2;h^5{UeYLuRsqf}Vt9xn-DJFHMZxtOO69{mldZxd@RYc~A2=Z^DGPl8(?~^H93H z`2>A?ydZHmxPJz$Nm=_fOX}#SoTSE;fGJPW^--Gjr+=;BzYo~cz=yY_eIe|%&>Or? z80L!?x$C!0>Q*g2x;?Ak0kE08&rScp)O7D~E9==SOYi?Utbf*Gk~<>8t*3+WVyz0W zQFkINR6iMCHkTSQ6-&G&=f>xm-X{I|byQ7tGY)$p>pz579s(Lx?fI z>Mw>d76USp&vgfr#C_X^CnZ~op9Ht?C@Jd^+;DBHJR68O|Nma|&mTjRP}4tMiw~w$ z*-ptQBMkutJBw6~pY(Dm7MQ^*`}4CM_#=~_?tzD-{CHDJrknBaVwU4XEN@fYXR zWGzhMv_L*v?}p6G_O7)-@JFXcYu2cKOJ^ruve@$=Kp{W^0=*#bm2XcaUjJbfC9-)l ztvU%bfF;@}V9{)^3K1e_TW=GVEnYd`s&d$3yuP^^J};kVwVNfFr<9Z~o-V znRb}@1VW+E_Qt!*h@=&O_Dcigwml!^o*%FE-^a9BAZ9>HE|n|TSVFiXe^sE30(_Yev{A7 zO&F)L0^rop^zh#xzg)HqG63>J9g`)%o=vKiKc#<2RG1}#bD7gz)&RW?=!khpFNpw< zKZagYpgq_2r@C)*yp&_!#rQ2CY|6v^sUs~X&-bh4p@qKy25Yqo^&nnkDD+#3sQ(<* zKA7Q9OzHp&s$>wH8%*F9Kx_HQ@joFLYp+CeYXLa^^1O{+#lkN!1EjOuG&fa;27PcV zI_3gZPnV11RHwZThf;Imx_2qW3fI*yxHR{&Ca!)H{3^TSmSIsiR$;E_bBSjM@b@q=ancIr03WBhx@KkiYsKxOdf(YS zuh2VbDi&7;4r);d>^I&U9K)^;FmZ8%F*?6b=v-WC_$rmCJaZ=)g9M5V47`yqsj>sl zR!O_gLG#q`ubmG=8w!=vUMSGrwJ%?v-Xx2dzTn5a|`r= zPNGS=*YiJddHe2HHLm+=Y(hpOCxFQ8XI>rP%g%C`ZNmf;3YQ1md zC5C-gdSR~()La%cab0~0dkBxeiL3sU4}T|khjr(CQqHg5zyUYi(^q-)GV$d~RLnUj zFr-7w`&5rxVZATT2I%%R7?1ORQs^>;YHY=BEBbZ+6GN|R1~Bxr&&}7F^WYChaKe8OpGK$6h_3t|f_NQ;zubjJLxIKj>=0;oRw3Wx^ z1O4V*`Bbk-FX^pMw#ckTsrJy>PmslF&%(mRiYKEc>wZd>qKgSR z%Gxvg-G3;L3ijxQKj9|gLG|H6Gr}9D+G5dCw=}G?yP>GNHIh`1q>`mb;IQY@oXFOA zQV41=*Bbor^p)MxvgQ&1p4;w>wbZr>YOOkdd<%f*Jx^e!gw#qe^c42!HR|#|kj{?( z;MpE4%()VQX92QsxXCf=nB0CIfS!9|%sb-&W7rgq+|1vIE_kxKuD_&kXC_qV=&aV? zA5SB=JwJQ8+80KM(-Si~heNM`Z52!DudJ4&ieCAQT##OT2 zL7m}=0{rrFi_u@p#MDH+yCvD%xLnFd`FG?Dr9f(%v)(tM0|?rdJ&q;6fNC(sN|Edz z*8tQ7u@TRV-Z|+TAp0F&6}`p5b|?0EI}_R@OU4Uc$U;f}_%~rwA`6YIGA=Gr*53_! z+V)Lw>v>~1p=%2U{!3FB!rH~F|BphCFPFHKVMh0lH708XDdsEH+L&QLdTb+A*OQ}S z+3t0QIHyTT)6?cN8;?AV0x5Vjx_jif)-_`%W{JM-D6~4z{Zf#ADMNww z@Z$T_8<`SPx+FFu;DC85RtTD}Tyz>kJXB;zAXliQQR}@weD%bI-8M66XL9(!cv#_u z{q`j8{fAFFhnnv%!=er|!B~NKbShpii3GwF+iz*p^Id}8OSW?+aU5`vr<#wOfgx9O zZv(=KI1q#kKkJek6l5Ye@cpil=7{lXq}S-#jR}G5`}hBozAgG=cBRZ(N{c#aSFsI6 zkdZ(sLoP{2VhwD>9$%Y1BsJfEnTh8tgZo2l#~jc{B&k`_U4FlW4!GZ0BSrPbct@0k zI*ehb+a-N`A>o0or}Acmm_hxvZ@Bb2$gdAjYST7CMJwcr5?z18b|W(JzEV|CgmE?EKHt&$ug< zw^=^5gKz^i005sI0PvB3%I+A$*N|KLm$n2IO-YGhX~8x8?vY8sxQvsP!f~18-=XB8HJvH4SbzrYi!|pyl=T037#xzLgG`G(Ws)(z-u{^Bhm}zEA)D-!#Lw%`JGhyIQM5AG%XDvOq z*7ckZpn!E2UYP^ng9dPXQ^IYf+Z!I7ZI$zn%aV-uP&yVgV+-<=?_3-z^Og}bCHW;l zV7wpvOw{xr1p<(|XHB2}6dsIm-kKOa0Zs};lGju7W&=Iq+xx}oR>x*Vx576< zIBpsAjuniO%VthpMHp|L#!yB}6CA5Ej73jOCsXJy8{c8yAUB{<>aB4e*Z(;3*4(08 znvA|=9(0~9k3VlW{*SBtTQB%zj`Zd>vr;l)$CV6`boRwEL`lu>(3q^aNUhk8U_hfP zS7Wg{#Wq5vE13na%?Mr@rE0lUg7Ij*Hz@WBN;D#o?{UZGpw`%AtkC#E1e-RS_WNK$ zqZj+R4@=rzmTNTJhQ$o7vkb>54{QRn+$>r1M1%YKd-EPoH;j=^jrN6c)drwWP;1&7A-cTF0dexSkF-e-kwmhUG*0oR0Tn`&BVpAt*Dwi%aFX?1G zgXzs9{~@$V%2EBs%>gYXCg-(e#NrM!1RQ)$U6@Q5A2lXq6at>V+JR=g)=)6ZdG=_D zYHcK2iz|Ws3{s(hi#H+mJ23tG1c?_>GUi_ULRN2b8V@p(mA<`VG(g|If1?y=C{#aa zG*L4V#qmX$1As8q&U_a4CfJt%US8?Alj8gHp=TWDFBRyUN#9B-D~o_-4d}NnV;~oX z&HLl~1(?}Lfa2iJ=N$RWtLiA~Y%m_KTJ#x#{E~f})p9LrNVP(YiWa`zp3MWaI&O&+>O=HEX##->+OXVl5IT2KSpK_zh7;#xOo zcr3UpMzfvE>guLrHJb0de*fO>u}WI-h4S(oKFmC?svDrnk`faW9ho$EC=iO1g6rM0 zBdGKm4?2_`YO5*is0?$v{*+D~9wBK5Uu?r0et@75H4fXHLu~!#SAQMie}d!BbC3&i z-rj|c^U{^RWD-vhj_8Up&Q+zu5~81sr8F>6%lL)*EVn_KV^PS5LUKv%-1rRw%LV@H zvhx0H?Nqi+?(K+wt4d`jxAZr(mrc2_A9lbYvduJ&*CCSSE_dRi^naI z_?h~*i~Qt@c*gXox!6?s zQDaU>G}m7}(!b9f0BuqkAVwm7A9KNqwCt^6xpmzeARY?O34eT1=~*(XetP93cD?LO z$WbsV`lS5rbczBwz*8`hH5j4epiOMKU5_sdJX%Z-xZ^P0*QWJTI0gj+r^u`pr(|~f zT;CbVIf)HQa^@>sE=s0B=V;{jM6Il>K7=SP)7Zaz^XTe~c+5AFjRWX>4#yame+ZP# z?#pr~zM5ip|=dk>VXW?~5zv!7hc>Ev$TJv3u2oyU^JtTyvfOg#a zn3-eQ|CZ1>vygOUHFR~$+@K|8-W;#AoL{R@+FN=Nyz}?TH4V|_{*^?iTj6q82Rr}+o66fT zTO<$W=#MC8%%L=9fD)y(bn%l-A{j;st540^xAI7x^ckJ0hcOCIm?M2L7XaGvkzaDI z7#;q%=U?|ZdV~C6JtE>MWL8gYBes?^1*yNYKJIldi;|9jzro~yMN}NJX?1Z>C4AcI6w1GCGyX=tmbOqI|CR_h9aqqm z{;)tu-s9i-7^M|!=uNQ#V$L>eeRN+5OzpVMH?Q=pYFW{UXchze3QV#r7&pOsc@>>He z!0ffQjf`G2d!!?CuIhvG+~`)8z}vR7Iph_tLED2NY+8cxvN5?34zp={R_CQh6m@qz z4!Ea7sn;H1vMXE!Xr=pm;O#-1f%9IA!$w&Zl$eceK64u%lm<_}=I2~`L=-{W=JMH0 z$)946+g^iLZ*MpJ2KHw&F{jJ3AuLk@xds>hM(?s9SaNH%WX8L585xe&uC!o|M))OO zJy?QszHYP^lmY00ov}oPIRZi)8D>P z(>Txn0v8wI;^tNUH<-JCyIYACUxN@ZgTcs*E-vw?d6D}mz2Gm$3KW66%=v^Rj|run z*89uhT6xOqw#}JI{i@JqOIt-sY;s}>O|e-2#O%9!Bk}S2fTu73B@$@>Iv_z+ z@!J|JG(oCiF&f@>j$Xxu8+7_Lrq-eoY)|Q=85vNnzrgx&`AnH!_C*39Q9=bIN?-kg zfy6{>jM93j#FExwbs(4o$4Y0`+1w~l?t~emwgKM)4M<<0r0Gl56k6c>LJ~&Y?|ASZ zP4vYb?kz{bb>`54bmu;_2kY$hGE82NoHogdY&>5L*BRqw>ng^A;J~i(GX+VTMgTT` ziU5^R{z$M@QL@=z=)I5sY@Vq^Y~wX(wa5P*p4`+^Q!3hPH;o3&XFTxaig-HdbdrkQ zYdk_#mbc}_c1JTk1wG-+D0<@tY9!`#CesZV)mFM6`$2leCNKqZiTl>vt{4cOeDKAH z>TJ0}q@HLRlkMZeX*q_wESxXU6!tc>P?YNhn(Oj|BM_PiF7%4P|nAdRa%WdnUz>901!bmGT+U0-QD0 zd<48JbSMY5YBuOENNQ`r-7s@Nz}nNo_+mbb-bk@Vd+Bm`6>>CRr3^pK^O-gpUnaq2 z#JjG06tpeJhqjZSY zQFLA(jU>9oS+320eELzR0;g3^eLF9$(8gBUY5IxN?wAw6=6w^G%*3*?;g!0~I<{y$#F`K=Q~pxs->byCS=(0p{L~}ZT|}KN7X^S%^v%@82%4+3W$_K9YUoUbuoM?Nz@J$)4~$T zwEt6@_QPt+I0+O(Z&-69pj;Ht4l(eon=UY~!otiNyuoKHsa;vdAtwK#Sg~p60Bn5| zq!4XeBB_0AOT2FJ(|j9(0rI+o+RoPhnQOavXTBzT2Q5F1BcoIx4#5Dr+~zCm#w3 z+|VK(^vDy{hf^=vuBOaqn(5I^+=SCdvM9D(;hjW(3DbOzE^ijuo~ugZ)~=%Z{Dp7> z3lP}xD=%qwVlKbkqlGpcCx*IMW+lqSxir#LKZ_|pn0J?B=r3s01XOKD!?lpD$2UcirUC1ufMH~7NPSE<(yYl2|^U&Is11rpHXVkq;Y{qD7M<(U|T zR!)QZ;WL0E@+VZCNd4@2-MyV};uHS`T85b^c|)cQi;$(Fy%Za$%KzIp@N*)s?*P|u zfw7RfaN+Cyw!8i>^-N{$=0LUuZ0-H{<%tEvq9wjufKkZbeOjC%CxJdq_4L2@v!3k3 zt9v@<5X}n=F;S!Zbr{Gyjrmj(v<}|d&k3^C=A-gO@m=`+cAiHC1VRU==@eWo!_2@wH-pQzM|`Y{#%` z!6Em;AbfWpP@0c|2Uj_?%<5m}Jrv&b7uxUN>3U;De*x{G8GOjTZ+^#3IKFZFkeirA ziR;dw>5R))Y+QY8LoLk;UryGn0^?1d*-7k>%vOLE;jR1G{(bITZM6GvA*T;tP=8bo z1)k1xq^5ekX?cc;%_k6$eF{SPgiHlu#(oehgYuevb~di&|hoowDcpT&hV+3lm{Yqiid!w8}SpU=K?*&_jZ^l zrR6#t!DO!Nk*BApL$RyD4d1IA6s!H~2j$$ZDTd!?a>Z6I(C}b8XaM0l(}~Ao=CI{9 zqIucF2FM7jT-HG7FFEsX-MKq#+>AQjC-yyg^y@?JJxI#-Kynt10p$==J-JqiuhP8? z2EP^HS>^i5xoRuI=n+A9J=frxmBD5~{NPP!Fe3Vy-DQYJ_ya?8gS0!6jI`!0R%DF; z#4U0X_e1n2A#!(?glVF*nG?2-gugzb>k{#S{8@U8vVOLSsJ~kGWF!V$$AukKe^UN?ow zfI;*VMl0y`3TC4Z$6-oV>KAUG zsAK6N1B*{RLZZfeqHvDkGq2`YZj|laitTV}J1c}6fmOfH&)22u zE8;hg#LKVg5ov^^@^8hsUxAcCCR@}`pJGQh;JE}qDB>88ku@(^=gi{XRpaKX zHb~2x4MEC8&T)=n95kR;llPq7-M+Ioh1FBo^|3BE4A?fFmK>=htzF6lI4vJyEOQrq zaXY*{>op~K{f2eSh95dnkPSs2*hx~=)bv^@u`AU*7V(fp>>f#fT#7VEexJRv=jnXy zUF;*$nO0hR30E}{hu)hmWQvGUI?Z~2U}hW%DWiz{rWn-Q?T7qF*WBycP@02y`Q9zw zi{`W}hJ1JXM7=t@6NxcdJ|zsMg_iABgx-l;A38``GciHMj?7?*B)3%PWO3Vig_s3z2NT+~vOdIUr(YVvL8N`y^s z4nEx`vgI;`|MSL33=z5~qaH5+&E2@hs>2@L6XiHvz%2VRzxrdP16@e|V!7u+CtEG; z)pVIrVK4Va?}pY(VB!U3kiGPbViA(k*A*H7N{?8gk=51@VjU_D))Hve8a8FBpzetgM6} zFO5q2a-ZEhq;I4dwuYT!G|ko8Tdw!9MbfE10yG42cMQpB6NT!&`Ly7-528=0bkS31LT-PZhQrF<`?I<6rx8|tdFVHO!L0vwtZA8S|sKV%e;Y!Qpj7#e` z_z)IgKj(d;l5-4=DV%E)dTp@z(F|02;c5#R$tN5o>}%*!X_>L(>EeEZ`lQp|h;WI8 zojdP-n!fsqX^&I+y6Mu0EuiG}LQfE>-dO>W%-B!9H>Hi6N_H8Nw|D1za9A(*aKBSW zf9rUzS}x_h)n0=sYOEmz+9F=nP<&yFWp=&|C2A}Hx-lo+HIvJKyM&z;h%1-U^GqOZ zj5`pcC+5EM*EE~qH(2iBy8XfUja-VhdEtD1J4Mu6blt|R{MJ0VQqyPd=6n|#jBm}* z6WqJQ0`%94h97rJV_a4|% z!tN&4JvG_1TB@Y8)k|x*&m%%EwYv@(Y98C9ex2j_Y}%JTux9zk?2@=Wb&=hHKJMOS zkM22Vv&hfY)O${71gbt&_Nq6pJHiF}{CXyFIdh(>`v(P$BWQ8JsMbIDJlbZFE72F^ zZBnnQt=*ci3NIe)rwyUIBHwXRZ*W01Gu!Wqdq;VFeLYqIzD)zN3pXcC3yaW4yvV8i z{#BAoy{rIR?NM4MsZAq2pG9D z3K36)J=b!&!C>nU{N+CXm@cOV0_ykvq{CvOGOa{VC`tS^gF?KnU4@y7Vk0Ex9>noo zaJNc1md$$=33)+f=zNeIek#^?CNJlXqgC$4lSaH1+r&bst$4oh);t9)Z|kwtIcGJ@ zy_O6*;nFxO+j7OoLpKwSdHLg!j7Z$-Vb`asTqg4%{k_=XPKQE`3>vpfSFUTh=v>_e z5&X53(6=yuU3VP08(I6jA0ncnXJzFTpD*8zYEjwG9?VIEk{GAQt0rA3*N^Z)HTM^G zY}J$4)%2uA^@|)MzOMxDsl*jWH%wv<@y5YTzsNE*fwtk5T zFU2|oaxmyz7)nCu7-*xUU-p$aaoB%(;#eg8Gr{BCMp`vbK6btt+j@ub#Nt?PwgHqo znD+jpkp-8Y==@a?U>`Y+1RbV4J(HXA|Ry|KKL&Y>sOf;sVO+FjG9+$xse0QL; zTY9=1HbF=rpR@4?zWRg>M z-Yx;7t~cnJtB`9C2QC08x92O5o>C@gx|XA@4<-j~kFRj!)VtjX_9b!Q?My&gmRg10 z8jTr%-VmhUNu9KynHGx_tP~rLs^Co8wxH3M3F*L|Oy@N4$>%9FPiPKG<98V_I2>BQ z;qcrNjdQ667q-4w24!TIiG1b2wcfj?k&Hkw>)qiM^*We>Vww3JR!0yx+p86mH4Az_ z>~o3k+w-lHq?!Tin!D?Zg~bWYm`#}K+}xaWq1v@%J^10;!(Um(uLTM`nL{O{@4Sf& zu}IGecUO?z`a|N7-GXk8O^7VsEhH<{nHGh8_$ioRM{yIESP_-bB8*_YPr-;IpIlg^@2fa+f736Eo}d#JzR_UX4})sP`tar3u~d>hI4~9`KK5 z1`+r2_aXZS1dMoUzLqj_GdWr3k#2P3s()x9CH2(ld_T>ri27*B_aIFqs%Nss7EA@F zo}pD`p1^Nv{T4K0eY2T%8+tYyGjitB^`3xCn(3jRa2!|eB9$KIvp|aqt0a8L;JxbSD?QwreN^P0A^Dat%*Xe z=M36qDjQX~?Uq#$zpeVWZ{Zch4YleL%#*DrT|FX;*LCjw8ua_dUw9fubf&HB%pGd` z4s70-VaSueMUK9$Kvcb(4u18O`$MzW0~;?tIqYlO?gLP$ssg=MrBVN-0}h`^w%B}P z?b&k3_|BopPE`iEF89}O!5`8^a8aM2wVuXVOI^eTR2?nx$@0)1$V1r=shgplIB*yY*6#ISVTVN&0RaJ&T_;)} zhN$6kw)5^;f6@ME$@5<;<)1|OAA9sV4;HD}Da=JIrhj&Uj9VS^1IO^AsUo0z7UJ+YEtuMt*iNPnmEx9z8vMxq>CaN~l|OdEnaZpDo0n82HEY@Oo0d9$JG1hx$Se zOv~4uL+KtQT2S2WT!Yy29uq4^OZ0rCRC~lb5VImJJ$w`$xOoI60A{E>LwbOm2iqmS zo|Ed3+>1rs=$QEPm(w9l)`JxtRmH6^0X^VJg(2+b&FhevV8NM!DLJDLZA-p30!mi# z(k6(nFLI5o^Lm3JYXTOt zbWtA7T06o)uJe4i6M2cK&tWM$`*Y5}x)3WOwm{<}jiOn;XlSs=r&OfuJFWG|v$C^q zTG3#Mot>P>8e7fE8lxDDl56U6Ev>#sHM+Yx_$qnR&Bn+~@P8TE;pzjjY~%bZV?$ElTkovMqbshdOg~Y_b?2h`$?lNnZdb8+f%!5t(jW}0 z7nnOF8*=oV)#52I$7ANY%(p@``jkJ6)Q7=v1Y51aMF7IbX}_;n!&!=y$i*d^Ju=b^ zzd6_2mUXMNt=KXjD+e#74*qCb9Eeg@Rm_2)JXEKc{9? z{H+YcohJG09sLQZr%_r?Rk@i}of9k57?_yQ zq_@a=Rd$QqGuM*0E0#0usTFax)tXp7+BuI`6FEI__-Ezpjp+aa z!etZ^oZ}U>D~lsNP*1D&xR`O&nYmW3SbKHwV{M7>>A?A?b&uK1->;BF6s^l0O=M-k zujI5cjz#GA4SU2jwGNAweib(5J`p1y7a-c2Asd~LS+rm48HcaMv>S1uV{jT*WS1bB zCMG2O%yG8G7vt@=q zTY^8a=XdesUk_M{q#7{<`&xWoU?flTXj$NBzt%iWtM!sycH+9`=F-&zh^yP>cEE>A z<;V!ga;+g%)82;t#|L0{_8KN=>t_t*%&s*?2UhCxp_NETlo;xgcMK0|sG^)if zC?yli+2z_F=^Yt$#tapI%Q*mzEj{- z(9Vo0OU2+>IG3Knz4cJf*Vp%1k3sT39nY(;{cDYd)G*kN;*^TWxFj)6Cra6e4NDO=8n*p&fb=i4wDb6C@DC|}r4=*nXDW_@2HTD_20d*=~x*ODAXI9)) zwL4bA!)Q^8hGOefXZafA+WL@%8>ks#wLw$&ojaDwNfGfjo71=J-(y7dr%63D zh1KE;2-Jp^CLp44+C&(XH>!kkU(}YCtS{4-h zWCzj|@$uF7j5wRKde;#zRJAzi^LYB+M!dP0G+sWxcsW{i2*ZPE_a<6o+ia}tn!{?n zX(b^d`C3okq(kb1Ju*H;l$JTjVj~1QidvGMsBW^VpcdFHbYyCuo}Ol}YZMd~UIael zm87$J_3DX+rsjS{OLSP+9k*JLmKI71c5)a%7SCyup(7&%V9eTy0OcWv1 zF}WGpe`)L@V6}KJ&Ao(3@nKZMu_QFHbYkiJ^{=S<_nyTi2&>=h=JPCY=(&+T$=Q~7 z0crS8-uu|gBLpv#_05~R{B%VLIiKUe6?ICgvGt zL!*yi6BMd!czUohNC`Z@<3c3#5#-DWi1yzF14o)YucMVHwT6&yO}lK;F_!5x9D*+T zrmdaI%*P+E_tlhyYXxDl*c>9TXRY*(syi25! zEq-g~wi&fCGutdl^u*|MZM@@clD)#7mRitlIZlz)f+35v#)co{j;2|4A#>h%yNN#O zRs#rLXW(!T!^F&#B>GoJue51sVcG8wkG@w&xyvLALeP*r8*W_)FvD!8>Hof6J#XEI zJ1D!=Ya!RM+&X#t#o}iAvn!K~)3+}-OgQKEq1vK-i9k@UmyB`6R&aOvr!5c1W5Yh{ z`OL%Gei2|7#-wQsbP8I*>_J=m%~+03xsrGIOlseWKov!$4iedcuJs07XM>W8l?ACYDH$#<20+StE&7#fWCFP=9{e{^T;7K7pT`1~?uo_?tF z=U|ZwM?N2$Ncpus2=f;LiB=zCs*LTRn00pFQNt7F=&j~h=z1&>=|mC&dXo{!wY6nd zd&^dB)i@?#xZZo9l+FKCaye&;*Y4d)9++^YM4X+zcL26gq0N$c4YRiItz$fZKfC~0 z>vkt=pxrgqBEM7(TQKR}&Ug;#x_~g4Q`TQ$1N1?v-t;EcybGSy$xcBmOx9 zFbQ(<5i<4dh5R|-xjk*G`~iVD*wR@>GDgZ(+A_H1=(Qd&3e~)_px>v>JPi-;0jdNd z$2$g(^jb_4YSxyP@~>Bh`!FrU;7)sY8O;7@_YVqst=eX{Rd;DOG8lF`S!D2VvFBW( zdqO+9F>13Z0GGZ$Z)%rO$ReMzNU2c&xuoQpi(-v4hg-b%KX`GFOct(+9F>;x<}bF( z__F`U!3UtXo#H#ebaNja{cCY`UVO1iKKaaRKqhefByY&d85Lq6QG{jYiF_;vhRZx{ z0wv^U6eF=YB_`8BcHYG?=MGXpI)S=DC%GBb=J3th=ysOA4dGChqP)R1ivhpgMLTFr zAxNVdLddHW?02vkX^zpzH6pQECOe{-y@7N9k;p1MqdM$ZzmwoFK+TEsae@?iM8(G; zH{!bM1_CXWKY)7?1%2S4Qy44oun#yV^2zBEld_IaS}Dk5*^exyneguC(hF7L#FT%GVwyb?(Z zW2ZwzLR!1rQrPfj=XfdDZLd|Etc2%9{4NF;LO{!1rX;tdQek;pY<*F!#Z0459~erA z5AVLADgsq=S&aFR^?uK)=55|5IjzbkPO5byEl)z)HSQ-L0W{TUBnLwxYH!GdmXDYB zUZIQ1_hn_V7VBu1{ABGq?C+jI^b462-;D#JwIO#K8X8(?hiXT%O!s?1N`ZfLyriu_ zyjGH?XS`qYSkvQomF%y_@Goluuf4|Zek|jOoQYTNddyg9=Z>ANeDQ%L-{Hs5ip|yo zld~2n8d6i!uGdy`QQIR6pJ?00D{PcsB?+M7_=9x$8zaZ0aBd7~vLvo@hOBg?9u^zl zWrK=nRK8WV)mW_+^rId|DCzlpg&ji4S!zZpcf1kwiYln7A!orLr!?cGZgSBd^VG{i zIu3Hbu{)pcIcZ0~4gqkIYDbd0fD$$Xl%p={5jIBK!RkKN$-%i;{@00bFLqDQ=N2=x zRgQE8qR2Q~0w*Ar+H9+E1E#eRoj;y&U2N-AN@~K4rX5`AZNq_nf%-=1I>C z-y{e7PwLF5J0g)eU&iwm3)ug9IaHDChC=padDD6jqN zCHh-lBj zXvL_Umm(p+s;oM|x(s*hjvemL9L!#f7K3goR^Qx3{e92>v50?(%w>YX0Z59q*dKIA zHvYKaaNNQ1#C#g->(@67$acSyhkGA|-hQ~Dw{+_vn8BLsUAKs|c8hN;-BQf#1o6XMaliC>DnslOA$Sg2EsTiioe>Bj%XJwd--d0f`vuI3r(MTbngtF}&cLCI7w9 zzpwUJcMukXqH@5)?pDSPy+tjXVoANXIUyZE+JwA}*iazof_$kAK@o_W2h=>Vxw6IL@awrW*erF9+_4Y8`cvspbP# z_ii#`*Jof)H{v8x&AtDG^+?&qcKYNM-h|9B~Klr!&dvQ@e)^VU)m zg82j;2>%^g4J$5g-Z2L|nSFl89hPr;8(+;ACfnXFbk&C$tvx02fcFvUJCwc%c-FJ( zJho5lup!zY$cC93SgAtn>36kOZAQq(ryKW^rp+)u5e$!xL^>rsvgd_JXh1<_H5!1ZMn0 zYSXAe_3R8vsv<= zNXOo~d9`be?}bTQ$PMUkkbU}N-X~Ov!8B%zyD7t;DIu^Vl4y&mFClxdm#T9s&W6A+ z@4ZS56qnG;YLE*#kEJv$XL|lS)v(M7DX1eZ9ZZQGWnC*+i?{{%_g8s3)ID)`)a{3M zXw9L@HS?(ep_~s-HU)4zvdbC^=fVV8oP2blGuOyH4&;Pq+(Xc)UL{=iZdZjte}k_n zx!1hwj1isv{~h{W`5aHCdvG1f!zG3G0;zlgV*G5cf-x%968q8sLaV5?@j$4ET!k$b z5HQnSdgCsp!<9*p@z^H#mR7RG3mN6nEE7e>g%5^9O-~&(S~gZXsZZ?M@AYgcfX>mW z00pSOu$Eo5L=2f_L9ee`7FntOLrFL{_Y)H7kkSWAeHc>j%2!_L&5^kNhGNWqo)t3< z9suI}SE%~ye#4qkw2VJe_HyhAol~5$Z3W}3;B=ksCh=v!W61Sj56u+iB{-s)W|4av zdn&cXRGw513owkC=AxpsMuGv3G-K5>fMio8uaRjurxJ#_IIS>NyA!5V-z}H_axG1Q zU-FA;2e04Dmd1W+7BQ`FU)b*{2CS{4ohe)!L$YIBc2 z6QE*!T}WHD{A+ zKWoKW|7o4F-JHVyabr{2ptm{K6)l>bcT~(oA%t}}{nYrNFCuwL6%u(kTJt6`o7w{# zGSoOp{}`RzEtc1xw@%@yE7wT@CWCC|L>yVQo~XpJ0QeKs^sV;*XU9G$NrGPk&X zhlC{Ro0X=9MuE))$)^WePhKn)f;YN#gfcMe&^Q-I{_@+;kkt8~eeO_iqTz4!0Ki*e zmjs`phG70F+KFda?TK9kiXWVgN7OU4Sm>P{f-Vm!j!m+2985A(_eS~VLJ$KTZhV9y zNcde+(t)qRsB_0i4j0N2)!6*AM?6ZY`{Nxi!uxgaqpFn5AIP+Xt^G=S9kWo+YG`t6 z%ib(*%Afaob0xjLLc5^ow{QEzpEh}oG1S~Yy|UwfKRNnro+EZs)Yy{Dh4uM+QY(d< zq5^s=I7)|O6SS-kOzgr=(U`lHMPteV2YB9(l z0zm-IPD;HZwY%G079qgCyH{?z@)#t~iL)3MV@3EtCqsPOiJ#gH_1o|z^!EiNXeTi$5c?#mxzubG3&=1<}T91d5&P2_W+a6d2UwymuOjb33Z z99$2=l>UXgk?=ZfXrx`V^BitWU3>MJO*N_5?NmBPyH4Dqv$uP)LOZ5K!n6sXZR~|fTgeP`4#e!gdVANXi8Ly0g84xnKn4n+Ui;&^U}T-8 zz5Q!!!$GGO-yA-=^I*MjRWf{hRC;>) zlCC?Biz9)C^z~ci#e}CW_Ja`Omy5)>xPi;d8IG;563T@=TkrQ3ym{J{#CN*}b}43% zb{RJ-2PR;uC*YRRebCQgQQaYR-e1Mw<5O3>_aM(T^o+0U7p}KcOeY1Q^HRLVr<@mm zQc_n}H{O%#{&pYhq4vDtQ#v}5yu7?^=XMfS0J5-Q+me!ROy7PE_Q0#%NJM9E1sF3r z4|0{Ik=A*El=ktqfv!_j6qJld`XK?)OcKjf(9wc7xR`itp+M~naeBJlY9UpZK2P#^ z6Aq{1u#bN+S<6kY_+I=R3&UwyD-~OP96g@f=I&sfT2K~#C;Tkc#MtI;h{PX52e5bA zW|2o|L@~^@yq;4~P^8u1e2L+;y8(o+yusYfRgdl;0TKN z&0D4B!JQ}M9INa>M33-X4%UW|W@_C8`x@pb-Oq>t6fp=5ukYpCw1o=KX385jb~9tA znC5iVhz74N52QwHw6fxXj0WfEe5LjHGrNOu7INKV!gd8vb$*c~u$lSNecytQB)@ux z7szD?OGGm2&bJkETf)C2+5>EHulJ?yVZmRZMF`!$pv6_g#cwC7!79^yNk1TQ-Zw4w6`Ut&luOordgg%(r4U!6P6~?ywnvbp7P3QZ7l>iO^*A z=2YNt-QYar10KUID_+|NJ>o^Vsrh6PE;^FxNXJ6;%b_q~Assdl-$-`}otkhdKUQnEJ!#VmcFQLQTq)w9minT+C2;Dfm%zkJ1;hJ5 zprD^Srx**o1s`B5R$uo+AQx$RlV3ms)-Ql^Sfm3DFGc*|G2hBfws$Y3jBC;o*!G*+%LHkC;+fVX&s>QsZAekpwPQhpY3{4{?=-om`Z$@|z zTA}m4n%k?MkJiOw#jTNck1rp%u#o-;Sl}=ErG>LhfDkVq*yhL+PLY0)r zE#e)95BLwWybJ2iic}1DBn}FIxrDU!%8wNp*j|DH_Nw7APmSaDV_sXMd~L}Cb8rC# zf=dQXFCLl1NnRUOEN5o|WkqDhW$f@ae&p-kdptWYIy&n1Uh|!+A%EZDdnr*HSN4N! zeu=M;t}b1F8bJL+np#c^24`ox`IYZH)-p7!(lRG)02*p%sg{NEpKA0!TS(6!mav~B z3};#)y=hFm2OfZSn6(CrU@W(J7U^!Dip{FJ!{S?0%6A`lgMudQL8pnU4r)X zNJl4eV3G0JYoO`Ja#^J1SGZpS_QbFuL+?BNR}wE75bv~#6!U1h9Y4*fHQi|DG`I>nes%=eb>>~@DCq#%FFl_;qO)wuDQk`VQ zP*!W$E092Z+Cr+SKs+B?`J~D=D(Rsf^BcWaPEp&lEg_v6QEuTsOf_21mim`jd&N19 zD>xTT_oRZoyJ#*p(e=!&OfWl1Iz%PkF&iXPCjBWX`n5ztqIbmP#ta!gGNq~q``s1F zR4u+yY5~hEKDeJO9jiY?@K6g6NY~1lIQgnpD`QNGogTujm%AM1F{+<_sm>}Z3+;Gq zD>~P5+qSgOyUE)lC?XhA$@2%avPNz=6Aww||HX-wYRjh(PX5y1XrL=^8GO{;4A?a$sO*mq9S} zu_)L!ub5pt^W|y4g8A-iU9f zy6(qogLah#{Uzg(@$m>g`R@3t%Nx5$5TC0%F6CDwNi~S^3-NAFZBRqJv47=tf6?sh zs4z?@=aY(Nm3>Xmvrn&c2h_eBrFjb$jpX0G6Lrqm%CeE|Z0+CxMId)pfXeIR$TyK# zuix&&8$>{zt6B}lWl=rQ)yprB0qAeI5p+_DCeB#>bHv(erKVVvl-ea&EBupz!7q+6 z7xqXRTC4=*;Z_)c{DD7JS?4$W(EUX;luvhckH_&72V`zBQp#W`_Oh?VO!9^~kcRsgv`bxY(+WFes_n6dQaQOkt?Y zVVKNPRIeE+l~Yse5XL4Or368$vgeqrqID&eez1k{6)Jjg!OBa-w2-{J)SE6*j)n+& zv$AU$;lw}saAEH9+@X%eY<)GB9EjJ;rhXxx>sCY_h$7Sf1RO3<<7VI6^u9P3RB)NS z5q+(!nu6Q1AhE1Ek=v@e*76zsn6YuvMi(GH{9630L>~!LpBTyTrOWddKk7$lH$*m7 z7h4=@u0E#E;F;mC(soKaYeh_g>K$4kG zw1!%KN%bA*Fyhtgo1W(NNVTb8H9^ez2iTh)Tdfxq4D6>?8^52{4C&ZH*jW5L_yI2+0oNu<<1`QH8oAjJjI3MW zYhp=&qr>lyS|X9RDQe$q)V)JY68Ox?rlE&(d$xz6<4kI$MzWqZ6W~q8xiY!{ykP|i z7FjW#Sk(Ey=oE|Hq{5{N-6LUt}<*Nbsjqdb;{=6eI}d+q`Uq>A?+tz z-F*K!Zs^<@v^<)cWW%p3u#~RXS&JCQ9>*E~;O=K)2qRF1{K|!KG+TKeiD86nOqSlD z9pW7YpizCqU9mtIhRmY0qvFpbY#TL*Nqfx1G)}Oyl>hTFDJ(eu3Yc-^MG21sgbbrC zmMb&rNP>dXivc0oNIVqt#KRQZvfu2vO~i4AtB@nh*N zF}S+DHd*AZvu;@!mbC9LIK$KSj?SV5FV!y2)w}(l!0mvVM+59T!Q#>XzfTK;PumJD z(q8@k|2=+x`L&dipQs#j*Y?%Q{qIkEgHNw`bV>f@3V;4n%mnF%`=HwAxqsL>e@6y> zUPBD+=ckckqW|X|T>Vz$)kDm+(F%2#Qbfybc{>+vx80|% z7BHt}jnL{1M?hl6UYB`?#_k@0GyA(g;=dPQeN#r(K zu`D{6s$K~8@Th8EJ>|}e&be8Ld*v0kQR1!VTM-Fb{ipgriNw>}DOzGJ7TqMnY}TXc z*mhF|#+@Rk;lsv&hL-lrTwRsp5b?I_pOKpw1t9K3K*|NGZm@|oK9$ll z>>4u*3yX0=G8``gGp%PUm>hlOs_J+T)UebqCeuReE@y-Q7fk}qK$EJJGsmRuQ z*0f}mOvAn`GZ%%-{yV|3Wj;wsbpkJu%LmHdPNjue_pWQZUGMLIl!jOzJH_r$$_h9M zR!1Q4Sv85>Entz$`^es2eT&D+vYGFmeuw0F*KTZmoO?BA<$Yx&T4}Z>i*p~DuUVdl zt-mzJIhy(;hOsOacPU|yv0NUSOshvHcvf%+NNT+jmH7fR=9l~Da`pEO=>PoW#KQ0? zhv~-I)XqZ7eqGlcIqj#ZsIc?*P%X1iZ$?Cm(K#Ac!^h;-!h_IM-t1DDOPRh31Yf!3 zqM&P;4wk@)KGB6r2|;@3x}OOaC_Haw4I|jTY@RM3zOg7Ng(WSYH@xH(o6I(Ja2>sr zPe?soS1y*TaaIfhl8p|V0uPR>x0YzbOyOg3%7`!4RR{Tcjf8`JImR@BQ1!Yu#f-${ z9VJusMwAv@s!r48k$F z)8y#F??vU=PQM<#B^>U)JeI6pt$wrsg~1o2)DL;w7MWH@GJWnu-ey9Yovg5K03&&$ z{d!+q}U#?AmsC9Fm8CZCjhSRmg`h#|2ZM+zpe7sBq%BAI(!^7|1v*!ps zb)LS(q`nh@iH_E&9vO3Rc-VSz-OrX%66%tx=WOcq8^# zGlGz34s#fIy7nWp{%;I)uf(*B!`?KB((y@-!q1nI&H*jR!+8$JqsTyV&WAA3J3Bku z>ho`M^IuKlzhkli4R`{Dh3>R6Om_mtx9!(45_#?2ARTs*z5Z<-W6%IAR2O;!VJ5iG zC1vce5p6ZX+Ept?yvS8qlPxI%xbpJ(6NY3_I0LUQDxMeWwy-!l&JPRg>9u~3v0<~H zynp^0x#RBLk1f=Jy_Z?_mV}W3u5-SGDRn47GxV1uaI{5gpXcaZj9h0JG(>p5#5x_a zMcNfeOCaFXXNCo54ebKaT_!TAsXTpyi;ljrBHAjG4<{X?0Q0$X{f4WThEr)_~1?IudkirdLv%XedKoue)4)%{TP*Gaw;1#jf5sVyeUKQ5;arCb^) zK3)Ln{&o+>ty@F1%HO_yvlIp7doE#7K+vhI4cQ)d3<(ZyexZovljP6-{OAvSYtQtT z@Tsz@HxV6;fN>yHmX|GV#!Z%J>~wykL4{j~6I0E$Q}wlVBU z3Ot1A%aHFV`swc47 zoL3TJQSy8kv#D)KQorORj}CqhwXw7m%IJ{2*lc_BbYlrOy&2ImwO%IpML9olq>|S8)%5)H=g)ueB?5*~ zj#ka&-bz`qVegwQ_)NK7r#hNLXXHa~*4ob=$f!FA8^2q`NDQRR%wUcT5sx(y31?2e zb|@*A9ICsB72txM`x;JF3R*7pkPkWncts?FE|?8+Ml?D$HskMnopuh0rBZ`(0q9R_ z8On?Z({w`)y*knVCyoKK1^Kp)7?ju)o`#CDBcRQ)_RTThw~x7eE4z>0oljA@9vtf@ zXxuY7>8Pv*PV~#E{mRhY!059O5QfYqp1@9PrW+*J6Ptp@cG-X}-CG?amzEBpYcq}z z^!w?@Aw1Z?JuUA-WE5$)Kh!4Xh%iA(1>TXVeRsl8WK@2=Kt~E+tJqE3#nrMH4GUHL zazv!%Rzqr?$>FaphrqZj*dmm7|F=>ENbt5CQ5wCgADK7eJ^gGdC=v0mW_tsYUe_Ej zAO~?syLgH-(UbPrU@pBwZJEdQ$f)LUx3{&0?;Q#RK+>M(QxwmOaS@c8`o)A`%1$dF zFv^0?12E-CMlhObB@-lzFOo(4pt2P^>_nWVVb1LMLBig?psN&zSBKAdKmqVk3AG_S znz`B^wNby-weBpq!w+HZawd9?aL_FMOo;B)(XHVu#eUjM&|k>@4w@GL8WX=1yMR^- zbk>?7Y19H(!%v9VVtJCyeA0;gJ_Y+*el3?=npjRVQ%*hew>LZ`wIEwe^HIcU9Xz1+ zwn9}8!}t{p%RH|?TdyuOyI`8w3B%UxXyT)a-~5=^=J0_q^;h-_7f1g|?w8E2yDJ{q zz~^wbM^b}BCOvw;;dv1xSg+_HA0;exs5q4Xk1U7XO;aPDl9ve@UgBx+6#hf45dkDH z&_KyzK%6xoq3Qhhc8~p+JG|Dexda^_u02_FIm)`c1Q%svB5rIq&g?mpV%my}52Rb$ zT}h|>`nG#@wA_ll_H+ZSEB=@^OF938c!YpobTr|-R7bt%ITdlk&S!SRs1yAu&8J<0 zmuG=ou(fYq4bA%q0k`Q^Ab|@9L59&-QN=X0+)89f5n(G9aZBeIPZIzYR{N_QHTkAv zkB<=fb#`0O{{Fj5L+OhErV3Cid6!|*J>&*3x2rq9GR0Sk0BDW?BJv={WP{;bOf)nI zOe5k~E#gMhu#}6bSuCc}l8ho` zvfD)j*6C8e+{AmJQ|TKl#kueMkW&AtcJe~oHe4#A(EVg@tmO?k3X4)s2IQ&jGF4a7 zWpD>$Vn(L`myxV?J~%sifA%+54+*wHm>lYBaGP--IUvC7?zA1+ZO_s&sh8q_{vrwu z4Gmk2aKqtmEdXU2@SOU|<9mH_48rRNYTx~96H#2x&(Gz)K69$s1ht|xCvYe-cg-6H zi{Be39gA+yHt%&h?Y_I(tjV6;ToM)js1ZIl^HVTy!>=#TPNY1;PD{yb(i2^gQ!KVdExS@7 zpz*=Fssg!7fzm6r-hlsiTBpzCsetN^d&8~DcIDG*6(eYKV?3Y2y0-BO2>1n=EC@74d#5aJ=Tmg!&SZNq+*{m$_So&0p{s9*{@!JK>CuK zhv)0N;SPc&Kx7xk1KP=k1c#fKUwc#%`JG}}Vjes1p-0x7MNxpdX`=IO(B_4v`0hk_ zv7lMFg1r;{=;&nTthwA8F5qxx#l=QspdhQLwxKc7xsyWMXjXSEM+pf=5d3ZxzUiCm zGVDhiAI2raf`aO&dt7N&AV<7+?otyHtJsmgpuo-fr)=r!eGA>d2OVLD(>0^|Ft5Gt zsBSvd^8`f#F#Am&j1gK|9$LBW7V^mnvJiQ&JX(0&)YOzsuLUoNm|fa{JU>+S?-Qx5KDu?&9Eh4WvrGSsh|kP+gu(L&WvI7-{h*wW!A2vzJdz*4uY(ayvcf zhk`0>DCQHH{;@WD#^fT^VmfD*w1)DJsi-8->>EyE>b3Ty_7^rpO*d?z`3s#=n-gsj ze4uUr`rRx6f7x+%7Sbs}Dp~TX>t*~rA7M?J=cil=-?&^AsZ@Iylv1w6C(Ifyb#N=^ z!Jcj3LzVwjF#(kJs{69OQV8CELS|EYO0Eq#X<%dP0 zhU1?xYgXQ`y*S|m^S~argR&Up^2CJC`4B=sX0Di}(6X~2X}J`Vgf%bWWQb8sBK6q0 z?)YtD&q+y1iKqS?iIi7UlkaV%2AB*OD0D*^y4FH{&Tr81!!dusC+Kp@L3@S6ZJ`8o zdGN1{d=Y+{qgt%d+w?%hjBIXqkeNz&T&5Kg00hEjb~soa30Q-yyj_0EqNp4$C32IM z9N0yEFkss{XDN`Ud=h3u*K>gpoj2Lny3mC7l($Tz*q37uLHn>w2grtHbvfo-Yzdz( z#m+_&#x@5>dgYHP5)|m4L!MaE9b7tmXn^637Mir&QK>R0OZ5N5SvC~TYraCZ@jnd+ zzZo+2y&R>D>X)Hqd;PmhtZFOx4q`>7v|A?e5%U;t$tS0#s6v0l>SNH4+((aR+lo`s z)~j>sgN_>VgAjdiberp|5&w(!WGY2yoqoeBt3)D!@j49A1yJFN|r7alIbrC{izh?|Zx0;DW|g z-2Y$O;NJ&_Sei<;K|99oomU0%hB*&4CjSj2hLU&~&4vi3y?rSW-?Ap4rfrS|D!*|T z)YBZfnTIYD&u??Lx6Jg51TSHqGGw=8sV__1jGK3K4*qdaHc*--R88_I2or^{ElK&1 z$LZj87U)^G?jakqx+txq@Y8+($dN%F7LC^moZ!&qh?tE)n=8ltf71tWmnrE&paph? zhe0b4nOL>{MWhO6>?ga#i(%c!a~I+Y>&koSs$<(*{$jv#G)}EIoDAYHv8Zv^37j`Z zB2JE5X-$G>_G}bvUsXdHoU9ac$=6hKbR?wTXk+RVA<>kZpm-SQinioiF*Uu4!oA|b z{NtVI3jy4W9nR$=-@%W3ik&pz2`lt=&a|_?nau&A*_uv|*t-pKwQ9z#he%^UfCS-& z!zAFeh?AHpE0KF!LoI)o&*}&*jWi^`0e)lwXW-Qu|xTZ;e(^m$ix!$ z=sP4xIt=@!Yn`&V3;O^2?a2ZF^45{m%%{hp9&(Fgh$vRFwe^EHLyr8$NjXGO`pwG4%@;Hs&9HubFcU z5(St|?rb+A;&zc=LZ@(2@G_-;=j33zYLF1 z8oqx>zzZ>z`(7e6caG5`#~w3ZqnEz=UtfGn*+>I`Q-7QqL$WXBR9b3>=POcBqyXU+ zpgn}3+JFjPeuZwDrFfNxFwQ}Z!b^y7a6)_}q0~(L&kT_dUCJV~cFS~CW%ibLzF`ts zw4Mka3Q0UGGgm_kMksPfb3L6H{c%nu=-A_HR)w|fm!M`?uD{*rD4okZS!;&7FJfWB z8%l}?+EziQ(a0v*lGNWVCY24Q7#!Nkb%#azpe>HC>SW^frD-frT|_*`znu`33FhtWUZo5zL)1dW$Qbp=TE})u!_N|NHBIJpf_i zC`4!7_hApD|4U5b_p1CY=JntJ=QVd_i|F?~|Dz53_jf#B-K&RN&>f3f#s2Lg|9t6d zs5zjO^k1Dk|9&0+`#btLKP^W)*N4HYdd)u?n5#%#N6Mo?+k}_@D*FD@J^X8Js3Ooo zQ>%EbT>Ss-0sZwWVUJLvEDoPRx6#HVU8N*->HW@3%K5f+mK^>YSa}eJ3?5kCqdD)->vHDx zO*TKA)VgY1y%`-VxTUnI?2Uz?H@xq`Q0}ttx8wM`_~e23eAVzZqwHP>>w*_?{Lhot{Bio)l22U(jbawgWr$;rv=P$v5clm$ZWgo)(9!Zt0;3VLB!2(uG z=q~os{nl_Sqz1X|qF@olt;1LuA~MCr0t=z{EDwRYR#<`2ncXrcrVDoiD;p-)IhpO9 zlfJPk#);7zWoP$fg;3vbX6RU6cX62SFb|bFb(2jic*x@Hvs{?PL5sm+QgxVyKLBV(7 zsB>Sf<^@KNgz8)6NMrT%XXaDNUd7T`^TnTn1za~+boD^on~UZ_%MKmkjAJ=9)##%s zyWU8X@HGlwR59|6>Gxf(XSVP%jYrBQ)0Vdmk`AEYIk$|yXQOoP-kTKvv;>ol%wvNeAOBv4X^lfP?5rYSpE8?%!v|lb$*(D3XEV zl}T%eCJ+uH1tdtnr6h}+V9pMxlz zj}p=dMhY=g2->fe3s4Xcm~T6ZPFJ`bYORfz&=1S6K`p2_EiTxHmv*0DL9%}}_dmA< z{0$OD?D)hOl?19;E(fLJ_;J2SEpIYGd3w_3lssZRtHcqyzAyScWiV?I_f7~Ii}=#= z5n40rv8e{17^-E$aC}!Bic{dCjcCmW^9OQNe3)5wZg%ZP`1i4t&WriRR;`D^A2E5t z*p;H>viK-_as{7&kDH?zn zh1bVRC}K<2B7UyM`spU&EFj+z$V>nr2{0;+w@16x; z>8f@*GznPLjO3Fs$=~Ob*1p|%;#Njw5JxNP!o{r?9TTcT|%3ZYldXn&w{PN4`UEI}X6pZESCsdm8`B(9z`-%s0h+@d1x> zogEf7_wnP$pBT=C08nrE!KYp8AS^5#kZ2)5Q1&}C`nyBj`i>d2szp(E;dEQMMx_68 z_%#8sLbZZnmuMzV=fHjSQKQ$o6(1PW$w+Om)9l^{dt)ThvLB}UqT;N%Z58?ZvCmt{ zq;8YA4}OAg*f0iiNd#Nuk6=V8eLeENX7grPTTL&r|6%t7DQ3^NyH2a#hjnd9lDmu6 zY_Mjtt8M@Iix80Z0#m_TV>uAE9{tk-7rZz)Yo8u>u20l`+9*>kN}&g%4pK%C7;FdW(5Nf_f1>a-Ey~6ta$-IK>Pq$zF&13kO6>`AwWP(>{C#{7CEIs zET1kt;HmRdT{bt^aGJGZ!ek^zaje%}XJz0;n!NL#BcVmju%e5kuf^p>68vZz7sxjV z*Erkl9kwl#5fS-=?rgb3CpAiozAqGj?HRf;1$*v?#ftDKn5@fLV6wnjs0G7yy=I#O ziAAXb!4p{VPDT)JboQdv| zD;Vi|ZtYj^mgGSEOk1@t(8WSMhD*;=5#zw5mQSP1z90x%fOQ^gNfK|cWXu9S2{ zi4~yKrjIa9`wwSFBkD8d-l=s+03|w+T)t{8a`hYP>gr_NmTjvABQ3?wx{TP;NdlyR z6RJ`K80|9H*w{eDE><*----9W{1E`Q6%WgW4LKzV3i{vnCT6q8xu32RE|gL%bVN45 z8=8WeWTtkb z<;sU>mbzW^Xn5wILX+S7Q&pDgMNFN!xzkoNVG?K=6|A?YV-`u5&VLu4D(T(|bKjIj zAbNt8oq1}i6WvO0FLs~a0AQyuD2D((u_&kxzL=^kk&+LybBE@`^qrYW?N)~dRBNx_ z*c%o$Q>9l%ZVf+oo@snB1wdpu!*(F?fm`x!xIUhTT}tn4AIf=jjQUwivcjl6tAukJ zH1Jx2X8%E+qV0}{>x!c0tAYy-TX1UI^>Nhj7-lngJp^d@Buq!KT7&VFiItPZ)f)gF z!;0!GePU%iRz&RO?Y*BYm+U)QYUbDRzBU->khj=5f2hryF2^O;GV(1-oi!BLJXt~~ zBVUuNQ(Aa3%~aYqU2@ylV+3#Up&-vb{_f=A#84QHDeJ zdBEt0crJ(5kOa}rxydrJS*P{!+n;%CI7?)1bCoe|9UM^Kp2gM<+FGEYD>HIR0ib(*Zn7Z_Vbt#>Vvyb+8WB%!uUj0*1xh|A z=1eM8FdqsrJMRjDC%>@9O(O(5&+v`w?xGpqEN{)VF;mIhh1%FVHb=zr5h**_(wJsi0_~_|$g~tMWJ|u=Cst zlyuE2QoqsyaAh%Uy6`=%sXKZO3rVP}>r(OE9*okR?9-YTXJGghgKY;AM7M8CNXl`88qThLbUNL;HrGob=XlX$1wm zG?^svV;jCqvP!ZMC$Qot@fGIgc|U833&(Z)Q^d)yekd7#|vk%ftlE;N#3H zgD;#lYaBUa64BqgnUnKgx2Dj3J-00YEk>WNw3Dofi0hRsl!i~H#(gf_l1ce? zdRKU+$Hvg132q@MB1(_;-Usy1o$>`#g$`34>@B<()^>RA=~`hqyN1tnu1Ct_kg$D} z$vR$U`W|~#xmX}Z-0Y&7XUkxT;PVp`ADpCPl@E6uVHl=kcF#4R0lo2VEeYNIw|wp5 z|L?7P`3RW-$6Y!17BbEqI;1(KzZ`DyMDC^W#K6*hzlM@Cr0-8}Ds z_E}Ej)5EnfsenQt4QFW^WYZlR(%d@I!VcBqYc)5p-;(~!hUKt1-E_Q5*q`1D&Ej>x zaP6o$T}m=x;4h}f*LrWg2D9jf~|m(PCe1&bYLi~q?ZjO@+LQj&(;FrQY*P2KlUqW zygXG!kFg+pbaDDdLZK&iIGC(QcdHH_hUL&*SX12&7j8FaQWVrycMPgjJ#j(mEtWfd zDBAK!qq0ZC5ITnaU-*|_{R87XaP{N_t}}rlbl4LO@+qYUdCmkGmWsrB@@jLH{E#TVQ z+m9$0w{<%CqTO1SoXOCG!*%lW=g0}-TSF#=O`g^1v1hg(*h%>DDDB~nS!2^;;HJQtJS(H=tAuPt3L ze-h;4X3h6@yP@d5%~&J1yQ_Sv(d%P#ZY}<@w-13{$KS$UckOv!`SH$=z%y4ZU_p{F zjArxbuI-i>g=pt)xYY`%R{fLP^K^(5x{Qf_R3s_KJw|^qwseUgQQB~RPnK7jA{N0j3~Rb*%pOVba^8cfB;D6RFL%mDu78{f}7hl4pzf?lEwEzHdNbO!IHgx=HDY zcWI)PD#4tbE%l-8-OvmcwX{jA&JHwsGv2roycNS^P$wUa&~)_tzP6pSCpL~OPvZ>(p|w-IciRuS=r z8sBsvO?3RpHe#EW{@sm7MSs z&BWkm2*mlRowj%-`Po{Lg;Q*?T|l{;v`BGsm1`+~c~x*L8bdE1;s{fMxm(n_pZ-{n6?Z zbV;K_qDrJ&v_;+MUR zI-3<7V6ZcNmBZs`CUq?eeB?tD+{yAjki4_Z;J~p+tN9HVy}z~dcij6M&nu}5BR83@>(6WC+e$J;llN-f6Ec?Ns%PduP^)6`SS&$a`hU}D2~I=J zxl*uRJo$;>@D#W>QKZab)q?r5qXge~LP5eOeXHR@>kxqX*^FYO%;lyPyuEAAOer0^jYS)9p6HPH#^KJxz+GAaW2038jd3d zX_(RP#Kt?9U9|1DGU#WwR^D2T#wwIhQF?N8%Zw?eC?~2 zF=b-sNYvC5_6*2tdyDwFRrgwQ-`^a?)IU%rv~$x|oHR<^E?@56IG3d4rs}s8_3zFm zla1-CEPbF4=U}nR=!*2+JQe#u#5|}V43>8Ok$zTcFt(CgMp@oqXG<_}sM=*ZA8IJO zwm8N{nxu^}Q~Ya1JZ1YwCwMbWZ6x9k85t5srqD=n^(ZuIINEv7Sp0aZtIsqIi$VeE zfSUT7$g=u~*cmB7zmn>wsQY=@G4c0c2Ak)}+rl8`{V#f(tD*-Wb1Gea{xDEV=DRvn zzt2(IWHP#HUoZ$bs2XeVXVCxlCAZAcg&UmIT4@j0HuEK{guJ$Ka1gt@aafvme%SO% z3~vBj=}+bmWZg9j664twNwwC)H9cu`EOcKGp%jKA1%undb_~20+(B(20)=@sWI|@a zWyfCzbm0*qwi2xgHy&qVB)s3tDib|t!{0afz{*IH`inZj6O$1l9t14ms7>`%A`Un? z*)P0286UrfJ`@9UU8Me3F>$=~w&ifKnNFoWH&a&su9Yr+GM97L`THj(m=o+}f)n1; zIlRyQ&tc_>ZFg9@HkfWXN~rvtbS3q^ouYl|DhW)4wYPpao^LX{t_`*<8vWZj!0*{h zkR1@Ux(lJ3n)i7qjUXB!iZn${5X3~W0ZAi^KVTH5L$Re=x|(vScXq`fZm{vQ7(03n zG2s3U=Ut{;CW5l6AmynqgkMh!v8tBXjUmk19I(iIW_W#!{^i?GJpT4v(pX=Lm`^im2Ul6-qb{ITG+s5h2w`Tad{RBfO_mMU-U41fLWmZp!QiPR@>eQ0uit9(72d+Te?SYK<(bbYqY-&Zj5+uP1n>(kswauMME z_@^MBPQzn6|MYTJj@Js`1{0&f?HUgUza+WYO!Cnr`VnGx6o+&d^cTO68o#%v#F(q2 zp$VBAp5vNGW6@w^jUC2`Ya;)(|8I&Qk!3;ZWp$Py^#1;SSsDGv8TMYv-@^;8pGs!s zd=%(6`KvbAhH4u{lnG6-*7~z87qrx>krA`CmushYZ)s=C9}W0wH|(Qtwi)PDN3v`m zubFWctowz5zpJ*D7F3 zqC{B^9gFxv`|b>4Aa%IhII|xvj0!8kEb;C%gx8=y9|Ai@xd{gSpo3D11peb>a(O~^ z4|mD=u-feN$X~d3mzcn+dz7|3X-YvKQQ{5NqBoVYTyOkWHPqjCm*%98c<7iGYSXY@ z0}6gOF7{B-tDJO!hFce0|K$nvtt>7kKNuKPTdJbw3~{WYWM`J;+_W_Io`>%b2)gfp zu#yp?g)4OBroT`FoVxZ#yGCnvdUw=0!!k$WJ5ReXn&(3oYOD)@Cp`v>$8IPrjH+9R z_p!u6y8C_xv*a*=;!0JDF2-i#=PKl8t4)3oDm@#xjgP3k+#@$8G6>bdER}XD==;9lJ_IbA+PojI;{z$1; zrRcC-e>Kc>Yv+k|a{IIP+@gFfK8>Gc|0*PFZ6O!hx{_P{YEw(q@074oZg5Bs|A+cj z(+OKN{1s&z>sbU93ZS_-lc3;)b)Ik=$FTpsK>x4n(*KfU9v(k2lN{$_a-aX*SlEZE zm01;pGg_k{q=P>nxNa*)X@4F6tivdJNrkcVly7x^kf7jx=j=s{lS*NsIv)nFCnG<{ z%+Adpx|eZ>jdBxkuLuS@E0{t z&xS?x(>U#peY=f$c#bbbP<6kY;vScQALQHoq6Oyuh7mb*J<=39&LdTz8Q-aS|MQ1F z8d{L-GV!L(q}h&ok=B6kDGh(S@6GWnFCDuz*K74TIL)&J7;gVo*6FLtk0mge3yVj| zb;8RW7_ab2h(G1ms|}Z|zi$mKbCj`F|Y+Vh%HvMz-!YZ85Wj|2Z zPTphu!jSR(O8BR9tDR6?mBr83R@l+;pn9-;r$1S2qp-~+UU=5?cG5DY`$_7Nx~?hz zmX%m=6eND3SZmsduTk-}`^DZf+R<{P-Qkalf*~$N*O;+tou&4#zZj$YKLunLoKA#U zYv8qn!&KSgb(TgwhQm(Ng$6sVR_e#YI>(;l%`Xp8Li26z=hZzI6p`JfD9hmb)XR%v zeifH|Tzb}$_>th^!R{1Z6vr^hE&1C@LEM~aG|ziA$&K_4m?oBRy4|rIi&n8Ilm9?d z;HS#c<#u!RPmAWtgV$i@i?N#|Lxr$5Th?nNW0LSM5yZ6>Srp4=k*k37X;wh zwp;cFa}aJ_u0)+OowfYU&qobVkUMvSHR!gYdR0^xo!5iwk-j~)dJA*H5}Ggl5(j|< zdc+{reh&4bxh($8LC;|Swfi;3i~X0AZSD}E-6x1$bBc`Q+*+o^7jR!N&CofV=U+17_^Rv15S_>TAQN) z;f?q*a`*h12O1^FiC*vqW^ryua{AZoG5pZXhVx#Qj88t4^=o6|1`l zt=n&F@PLk+qBNrObNil2?)x+jZT_&~gX`JB;w24XOUuppW5F`~$pm3r9<4O)*lK2e zW4faHXG=f66p<^BXeeIX3sGt0`e+nlMyZ)uH4QMymhohcClSTXK~|7&#r}S{F0y!a zEY{Mv6C68EQD^?Y#KuRj^_&V|ZB)jyoVNP5GcsmsMFFAnL&?YeTk6r3?{4i#Agk}U z+-1!5he#|<4DS<*9INDj|93B*ZPeUio5Fh4-xsv;@srIZ?M5#zqZj`# z+3pMIF%|)I1L69fVwvKwml7KH@;w53m|^U{@1K4sk@wZi?K%~#|M?UDA0Ph_?&H^< zOZjt@L9d_u2fh1$?88~XKYlg8UwhZ|A9s`gU;n8G(347@MNya)^3|KdO6P+qa+I}> ziAO;f)&*^Q0jzCp)Pq=v(`>Bra@N5~VBlojZ(V5%rVPVX-Pjvqth}+E;2YCBnYnq- zbwgX``7J2Rz>gVq#<|PXwl`^8Xo)@&pA9Cuo{Dd|2!I=diAhM0i4R?_e;hUFOYXy; zKl5)zCY)5dBGP#rDTJ(f2f#<*VZRj>&AofWI2+`>Vj+a>jZPuV;Lv4q_T+*?5#qb` zZGX}1F7mVpqA6wgyzxb=;gQeqBSg7M_k{xRRKExT>k>6A?fTze>c3o`Meq|wC&9M+ zGml=lUjePwp9}BCFG=rWI^n3M^VO*2nnmBt#bUy4^ru=Orek1%&EhM~r4X^DuY)%k zvPrEysuz&kt2qWJ*-;S^`2v0FFw|ONfSvE*xSW;2bDZE}7E5eJV}aehO#upxlBEuB za+g?lzSx~M$$$@y4rT8lA}U4bGUGH89P6A9Qg=_cVnylI9~e1zkDsECUp+yF>WpJM zoGlu1?p{4TRo=-EMhG1Sr_>M&q7IkUp9esu)^?doQ7qllQ1zFmeQ(Ytop(qQX4D%F zUZ5*IJdtS#7WuT=h}eDxWt2k1bl#Qv4Q3(7FeWr!$_@LZd4}&g-Lx?esMp8{cO^~d z%R&f+7}W)54F|^Swqnx`-fWd5rEH4X&=Xft_;ry<{Ej#IHlS9azBDv@HlQ0wc+-Dm z!#KBC6h4??of+EB?$JeYb5e9bb6Et@l`_2NgkpXjIr7@d^&V-QBP`o4#REGu)-1Lg z>u=~HPg+f=t63`Wo`}3fL-~9QO!YSVTM6?&UiyDpH0L>#R8+B*Y@#@wFU~KY{LEA) zJ0iiiy6@o;_|&{yR_Ex!n(>N=?C8hFrG7*?uZ!TLsowN{tNT{Eyj*zC5S+KwXYo4p=g|8n1dangj(nAOtIfL* z;&%Xv65y>NwqtO8vVZ&a4m>wHV$&aq=6kyJ@w*bIxU^2FSQK3G40(sqZ;^7F3)z=970N#^ z2l^w&qPASfUs;TI6SHRey+hsiGx9nf28r4l4O>W4jA7^k%r^ zpgM^2WAydGPzv3E@>$${#|?1Vdh*0q)h%i59mcLLt6NHQjUw>Dh_sf2s2$;pSvqD_Nt}(aoi$giGcz#M8{;Udf7-Qx_X;t()KE2smxon%Krp8pjD? zekHIG31zCeab4Wu-Q+wJ#B490sSX#cv`vw3ry=FER(j@pw)J^;JU`kruDACwlk>(v zEK!W)`JK`BR(!1;ztsZNfOB@H--)fl+RcH5F`&w!Ai8Tts#d;MgQ)CFJhvq=DaZj& z3}aK=*hB)Vi=}ycaXeE7SPZ1zNiZeerX=bvEl*%I5H{~!vhQ1rjS2p0-RxZdJQ$}v zQUAx8Y1LLTO^EEWi2NIZ8B-;qkR7y9>r2A!bj{rXcMq7K(JuG6XZvnnr79YnRQ{YJ z&O(0gyRB{e?MlF8x%17As_Ia+*Nq(Ur)-XU11kqc2h zT#iazQ_9=3C>aX$RpD`2e10o%hRr)Ym!UA@>?H(PCGcI$po5k(5s7rUj3LTu%ARVa zRG-RBL+LwILSU7F+8tf%)7ySD0<0s=w^(uUe@g^=D=QM z_?l_)Qf>lo=-`K8rFpvgg~j$<{qNat(pMXy+4Cu7h}zxw6K%6_Sra90QrE!TVQL#Y z9ZS+w^*3-YTdErU%&wTqj8F;u?~WDh0+tRB?e#Iyzcq8s&2SyV2nf}S24e(+cKIDf z#Mk=|{369p3)Zlh1!Atut(G%r6s#5<6qIdKN7{2s=pV%IeRaPDceC4H8B@KB(scQ9 z#2ZIjs{6)QrhBEj>@E1l0P)`cQR?G)p-)X(GICYK zzo`d=k*Ks<+KtO1Po(ClDPu7(@`dH&x49}&*Dlk2=~q(~_nv?o)xPl5;tT2i>ZD|tgB*CnXv?tXAdz3~q2Vk1-# z%j&0V+zB!&UZC*E8O@Rm3F0>?FxhCUZonP7evX~Xx^I)pX_9iU{)eHhjmp*qVWBn4 zg^^3Ye|~wFs~l5XDjY~KM08ENMc^{QuAttdk!#H~<=}%o>6|_Gy1~Dw*^0#D+XEgPJq?s&%TQ`5gWC(y~QY=V8G=l zk}X@xK&s)`QPA=ZXB>L1#mVQ?HQ=<@wT{aRUL5camw7jlDk=8tXVn(%FG7 zY)$Qqr;9v{E-XBRt;*3`8=*6V!8A^G3^!px*<0$$8doPBTcFU$2B)ROv>o-nu&6ET z)%GFkkqSvJTCF2NyHCDDn};EL(WC$NqV8hd+jmtZeG8crThPCR28=u)BA6Hg2 zpH&NsRWad*@u6N7;Fj8tqCj&GKo(eDUR~u|97cV=>^5*_ADF)}bN%Oy^)V%z!vPs7 z{G3!!xDU1aN#yTWd;q(WDnVvEIo0l zd>=8t7f@=zXVG?aWhQ4r8{gg0QOd#hj^%+7pLG_dI$G5p$lOR z_rD@=?GngVr;eP>+VhzkfT^3Rn{>&&r!MMffLcUy_ABLERDW6oU!H4R#+{WBICU_#Q z!-*&KsuhoTIYB|^z~+_z{8SVWa&X^#xoo~+x&`8w$$+6j`sb?R ztbt3)NPO+9`up#8S#ZOX#?ZQNE_St~7vg$fIPoprewRu~QCWMRmed`Q`4MMphl4UP zYsk;UiE)CX6h6%6wgWAX;Lmee=NwZxgvAgf8il|)TK60Dhk-pVW=rwZ&z$n1ORZmO3J=OGVbgrYp!&|gXuHgc~>$y>4?h)Dc zP(hQHFrN;=Mc?8WccZ#UA)O= z56B$EAfB<3-=~(26d}NeUY22IPtMunpj?t8@sE+6x3k`zxf>O zjquH~vHcgD$c`rvs9hup{@B(`*^qrR%|g=FOtMO8FOP97g3yVUf*LWP}B;|Blar&;$$?f;&`4R0P;t4S7 z=K6At10=mW>x}+>hCKTHvX8K5Q5F|ZgCJD!l^|W3s(!X;yP+H$=@H#`cKE#kaW)0J)`aS&DB$L@|?M_9gk!DYD!9qDf0PScdcQCUgtL39e5_2l?ezIEIi zMCX}1J2yM~TNte&77YmZvi>@X-1E+U&oP zO+1ywHE^CBEoK;~*u1o7enYT$^QRu|j|dG3=H>2>XD#ec`P1iG%#P1Iy#kHU84({; zAq!zo`O>AD-{X$*#m~nKsoiL55gLLWWa#%Vyxzpg!PJFmd$>=EK0YzRf{c-*tT}4v z^OV+Fza<_I40_2IJ2_p0VC_-N#t`_5E0>-QE6(&Ld-w7n5T3cYGWQxn&uWQxCs@`c zmDD}!xcm)6QfnxCtJSi2LAAuB);6qlY$B1fHGa5qEw%F)p1CFeWv`oFI#kUuo=!z= zAi36nf4TGq`ZGf=GcxW4af0CY!*=@+<49G@QG@MV;+|{0jn8&G3+%?pG zPSROZCO01%<4;U|@0bbhoIe}TkMHNa)!A)F3Z2k1A< z%(J7_R)DE5*K4J6M_O9b{%8&YbJpf~J@s!{TqMsFC-U^})|x{c%s0{9_oTING^sgS z>`UP(tTm|>F)6$NV3oz(X0)UC2I@7yP3eK|iJ$dWHME`i=qzZd`>daiZMDfI?A%j? zVeIdO!C&o{2dXEx4?neVkimfA+Ee^KnwyFN-*IQ`50dAPN$E$m?@aiX&>t)^r*d`c zRX|tv_2j;rPsmyU;X?K+97EWBjIo7M-1K9AL*rUDMAJQ++6ET)K|9Dl>VqS1@zmtI zkj|P}hlJ3F5>iN=wr(>)Uz1sV&I>z<3big5izr2BX$lVm)~SX_#0!Jx?ep*qvUf?##_R;L~XXfiz+2Odb~Q%u0tbYkQmV zx35K?uiUflV36W~9q)QK>O z$E8N&a}ERr`dWsDSR|njQX!$qjlaM=NBL#sE)Wx-GR9j@?%gSVdwg=yyMU=KB0Y~f+Kc-kNOcOCzK@0vaz zE6~d7`r23tWK0J?c9V+3^dB;NMD$av6`i-$@A_y6=UQ2MDbC()_pfADR~)vynRmr4 zAS+-lHM;+ZjU%`=N5sX(`)AVHrq5Khfh9BQ=+9$}2GZRbEp|GkM6ii#X!k$@bLGy? zlu!-L?P*J_k1p83kFrqL&9?M88{MrP9!EJ%Ml+_4Ku$I?ak^Tg{yF$gVbs6du)7?z z61O)kdHW6n13sDBAFbtG%?_XrtdLHP6xgMmEKqxNpwXOZf0`FQh9W({M(Z6*C~7+v z05uIHb5Br6d3t*CVF6L`F1_kz zx5Z4t&07q?4#1DXS+uo;`~cpO%P%MhV|uW^WIC9rILL#^?`XQ5M7`pB*JSZrNXJq~ z7X~`I!rm&_8L%1@^MCv4@F5x?B^e`Pr?TO$SH)96p8hJ{}x)lhs+zlBA_p7H=n zVEZXS>$xQ(!R?p-x`z2z1!(Y^$&aswA<=jdk*f$GT)5J=}dj3a_sQ>83i;Cqh^IwMrUch)GvzT=mE zp6YN^o9Yn|EIda4(!n;F*Y@kgSsf5P{3E;VK+RsK%9MrA@s_mKYC#1{&nj)&8JKxM zC(o~N;c`OttK%SedjTm09a;z2@KxlI|H=%9E?!Bg=?GO79L>hYrbU7RDzd_E07R@< z;03ykCc}Gu!dnX~=-f9ShPvqzFb-OSf z3Ob7{WmNiW#$J(PX!SaTrQH;4F*yxch^O=N*0uvihG+^JLAy;G#Zb*f>yu9hD654> zXOB?iJg^Xrpou2AH)GiNmfFc2RPmE|S5zoK2PEtm+zEEEo3vxpW_7vM*HEyoXyc9)P8R=NJJbp>J5T5Fp5Hw z%9aOkP?DtZIXoK1d;Qu=_+IT(Mjm58zGBRezE#$^-@o;unKhrkc^BNCF6z&2zx@Tr zVQ%l4cBa^9E8xMC&lKmvrC$zJ$o`tQCInr@DWEfIWK=EDpRMZcO966R?3vUnqyw7& z$}F36des+)c>B0cxUH>?U9UwCr@%AovU&A*rO9-<>^=NChhVz3-)L)SAy1irgItL1((Xp&yDf^A5WtI^UFn)9lU0euEo~^VGA8`hwVO&h2Th7GV!xiX(jIk6f$7-~uxjVA);Se|A`8 z|K+f_@_aR2vG*&n#>{)yIQLu8q6Ho3{l9$$-u~B`3yZ%MV;2GD`%15_J`#ZLhH#h+ zMG%5+s>>IE&l+&(@VE*Bh7sj zDPkaqab9>AHo3qLAYP{)-*LpQyj;>Bi)^+)?oaYsJTgrPDn5~L|AG=hi_w8eGO4P} zlxX+D6#rE^vw~TU+vE$7m9IELHF{VsNf$!@aj$|?d#y)I(zd<~F zC@R*zlB4C#&wjx-fld+kIVgIBARyjdzGs=D zXgJbm7WkZg17kJBnY)9DBn~HDWkM#g)C2%<3&u5|+Mk|M-KL)ajMT_K-8Sxz4XIf# zL z5l#a94E0;%)(8k1m=<_nzFu9NoIKuI=VAs=S-nLZTEuiu4Kib(Eec6GeiL>*|7C|_ z!a*F_{+$A3C+#`(*XrCq<6q$O2v+FCSnlZ!nl3*=xu11>1gdN>kUNq+rq$<(CY{a> z#A``G+8X3by`v-LhZ3b#Uq5o(v5fwBi&!+wQ>)?S^Snv7d&Gf1^bMMJdUPo4iccGa z-x4mAf>%tB&Sj}q5?OiWeKSFiYNO&%4=og*cDv%Vn)mnx(AeWJKL>{P5lU}Ym+-=? z*c7Y( zFV8n#&SIPqg~VLubrHw?lo71JL~CGHu-L||OcoNXTIsxZbo9-|!r`m5p#-D9iLB&G zSs&no%O`Ex&s%74N<%+Ljx6W4oc(HLsOf$pMgVofj|JgYy}RFKjD$t8>gv#*3%Q&| zf1arehXWsjXzl51TjfSu`Z3*cVk=+CJ4Z4VA-6CyY?YF^$3u6T^qy8W_u5#D#dwbR z5SAq-7NTm!FH(q+-jT=2Pt_Qc!D@`5p+rg^CI`H*ITMe^xX%SYi0NlW@yAsWJehp) zH@62wbCF6Br718NNA3Dj04Z>Jp zIK54CBWU5=7`xqdaclVYe%6-sK&Yg+bafb*X{UCSYn>cSrh}au#KHWSRfOI_i^k44 zhzEB8x{c{EQ7S)K1-oe!j8#}6!iTI8Pm&y-nGDXS3Ab}H=Qy}Gy59*^fpz9A+z!(e zfD1~>PW=@x_hoiqo~cG$GMML}kSwVI)xB9-iufy0PnsCGbM|cij_DEBWzBiTSR!Bq zXdc#q%Z$*7$`$F6;|>ty(yF-`51xGOyIYZ@a1-tZnquQk1<4dQNKEvVjX%cU^O46 z;tEeFxV=7mPjH;(S&}W+kqXQzrxp=a+*Dc@C`zWddgeQ6WU`+jCZ$-_1C+grSo4L^ ztj_2RO7x`^)R8ESx*iEHu+Z-Kd?5!F4T!BYI-ETr^TFh(T8-+0^KOnq;5VK@_or=@ z@)Z)=R815@mk3yO{!};pKK?^MKYS#Q2Upkh*LPdwVG=kT&1O^@(sy))ucQ< z5`^4H)uYO!IPHeCYO9R44`)gEL)8sOJw!L%9BQB+L?1o-hLZ%r_?Qw@ z`F1-qj@x3A%D-RW)85w`5BZb|S!XZGX~S#@#_(@Htz?H~Xa_ylaGH*MI@JlHCKn9A zkRQUk4RiXa7w%yNUE?Whm(p!^XzpXydTT90cTEy6;`dj}QIFwK&~Xxz`>5JK@6-QK ztQHNQs2-sjcITS_oxv75-JDu#@ktX z7n@y<*o%#@Sah4ix^v@*E*{KohzE4)VGJ25s|3y8d1%npI!*S^9vq#qdXht%Pi z?Q|^9Fd{TuY}_TE=xY^nEQA7B4RBR$Zwr7*7wTzr8?4t-Z_<~TanRrfDfacxHc6G` zsnT@~-##6~w;WZ4m^W$B#HTH>i+Zxq^2Z*2y1;*Gv(zskOcOK@t@j9yfXA7IW_wvm=?dSODoj#Z`m{8AeZ18@|6F3cH6+MzwC{tq*86y%?dWav zdqs3$px3u7lhp~oB`bD|6b9wn)4wL58xIP-HQBS^w47DgC^tHZZ0Dz|Ha&B{ccH^8 zfGHQ&Y|os5>qD=EMPj=+w1T*oE)N>$vnnw9Vi zTY8z0b(50~SeE)DlACVB7UQ0Jwg&rpGN7^sHQxFKit;4Iq8kMo%%vLQe!Yn#Hkn+l z-j&f95xJI5%Gti!Bx7}jI1@BrC1*LXcCWnI8u6X)B}&2Z!1y5c<_jI=aUzP^BjXWO zpQS03_Y41`hq~NE`HJWcM`yUrb~%}%jmmH$sFR+hRiC|2j70P&W3w6!R>&`>*LDqC zpXBjNCxEtUsow|l_AT;jza$4?VlH=wmb0>?DZvK8dd^z7^^hx*Ao7H_WZATtIZ?LW%*Gup3C9(i6%&y<4cUN9aHEsfGn@-vP#8Gahma_FXyR}}}Ms~-7SiuL55 za42)I!~E6E83Aqx+dWJMy%Z(t4;mOD3m&#qyW;sSd^=a;?C6nwf1#XfP&2@CwdrqL3sf zinaVOVYIs?L;L2?uhG?)1MhqZ!Yo}quSkVUkzv}O*ZA<*EYIV1VZFP%MIDQ;qv8xl zvW~`&CRNj*zu3oAYzd(H<#XMva-J4-?OW<>u~e}>DHZ>f1%Tqyl0+T;eT%h0O5H-c z#^M=FR8?VUY1G(PcSyM~ph!}CvnvEV$ZbTaz{uo>MZ!%81XL)ehm(Dg<6r^~Jx&1{ zlVjpcL(z!Yg#|M3REdb*G6t^#uQt9qa7`(ktz3)I^)uQT_4V_=xnqTI8{i(Q7cS4Y z13#R^Dh@TNV>t}xFp))XBK2f;Z`5nG@bQ<(6X-~OI$g$TdGi>pDdYkapjmZANZ~mz z?b|UF{XSD)vD$j}J~u76nRzTrlKPmDmp6X8!}r7Fb4iP0jRu5El9z}x#A*p7HD!37 z^=wx`t)*D8i8OJ%SbX^FuIdE|+vb$m?%*^3pNF&XeDk>qGcsqSQ1^E4`M{qfbVpRg zZILgI7a%pQh!t{YKJ?`8CY;eL69Oi&ZCf)DcYl?T3E`}Lfc77N+0~^}fI>i3_Jo3{ zz080gr|Lvqdb2IVe&vbFpF$}{rBd97XTR1%Sr2?$=HC7W{aEUn{*d#pie@jTkdNK$ zxwc8k6-*_Qdv2eZtv9gomN%2hfks{j^oY%UVxA1bvmoj`E+u_aK%+4}5Sp@%OU}0U z!NPL1Wrm&1_=4H{3204-N6>}&QD&T$f30Vh-Ol}dC5nLHD%DI%J^2s7$EY~Htn`Ae z+~xi)c3I|>2F#9?5SpW%ac#I_8i&tMr#i;7#m*PTA5_WnRR8}1%~rsT2+o(?##17f z16>Z{m{B%=8s+hDhtd?GSlVx`9luj4dJDrGK;yQqN%qmk%-$b1rlS<&guhjn2Oy;{ z_BZ(Z%z72S4@RQ>12tPwudYHrOYVIiN@nds$|6tmRput0ggDZ4AX_W{r`pMsNAH69d;wO2@6$_ z{)J7_(_=oED<1Y8!@|-sTCPF=-e$vof`_d#YFhA5ebICog%vJsh0X;pL0$D0Y?y!| z-z4VZHJ1KRn)2MtOkVnQh{x49-iAl%h~00#sbX#FbJL~iT@G*v0k*;6eOY_zLO<(I z(U_3{n4LPmbsl;Y+~tHGT4zRJA~8L-wXdQ7*o_4=021K!_t6pdj5p|AFz!yjZRA6rirnWz2W19@2C&Z!AJafdzDgLB zuDqWicp|dQ^`h}`$!98FqyBH*mPH1yxbteO13alCiYqbQ9;MRlZBuO}rD&E9A0iiP zefH=r17+{Y;S+O|-v4bGI3j%PaTFDe5SBDMt6{ZV0_kd>rFRd?iaseT8LIWScN-EI zi};Zd6c~zZG~c{ws9#gPRZe4X)}0DbvzJ+FKC9!X2az1*uW9F|?l`|J9^Z3Qt99QJ zb*MA1jVn2H@~`mq1MJZqZ{4R9+`9S^m@y#tf z9*4%99{RJiY9cNV2R7HfuVex7e0FEMmt;+*B>`5ajTe0AZiS0)AWx4>?(6#oZ+6YA zNPjbG6*e3uy@s4SP&kt3XUbKWli~z97!hAi7B4z~Bs-e+6pw2dHL1Tj@Y_9AIxM2@ zF5|Pl@}3VUNKNkA<=jx40L7VR&Oz22Z(g4G2S_=980{4t){V!F-Y=*)oy-b4G$MMQ zr9gVQch7`UleBv32|lIoLfR@qnkOUTb7mug)Ka$i+6kJsrqF${CpYMq z_V`^>4|fOsck8ci3b~F-cPB0Q^7^I0Fx#z&P~ovGwzl2Qn6z`!TtzTk{wG%hQ3{6u8`Ky!gu@C( zNRU8A=P!0=CPFc5Nopu2svlf`mYAlH*Hh<~6cn`lesxi_2!Hr|NB+U&9=a*=vmrDM zYL~xvZV6~10ibg;&F#tR><5tLfrL=Hw%9X^8v87c{>VI9o@ zR2=#SlD>5#72q!gYO~v>8lewF7K_lxlFC8@HUQ{?o-uINZ0=gl6~zkKbLm>wI$};# zS2R?GO4;_PAcUSr&(O?*MFp zhHj9!@`&}hKzJP>BJDrn?hb;S$*Pxq(){VcU+*blZ+d8UvS^#PvRB(=v$<;7M~nRI zJH7d5fW~e&WdV>_^l4#vVb(Xw!YpW)3}FXVok>9MlqB?Tyxze*jU%@6Bb?t6jBfaU zVQ(QOSM5NT{vtFB)&UzE)4#|88sv>Nc5}p+T(#DR3DuWHU_-TfVU4EjVz*R_Jc;2q zXt4Mui^9Hz21Jio^!r0B$8AUgUqLRMe<>-)fsv8}I;@ zR+29K`$;V@FUweB0!6Pf#!lg1T-^UJ9abmlW6WxoegX*f2r#mzyGjypzFUcD7t)0h zWNlKCy)skC%^+<>J3FfQ7{g*|KF$#JEP-@YgoLL!He@uq6Rq#PI{k3>^{;A?R?{l& zyVyOzbJ=7`dnZmuraoZzKaVJenZbjz*6q{nE&Mk#*4Po3%8TA@ZlIa z7yT{in1^ZrcUuPNU8SoTZ#ovn)<8(C-E3_Q#nf{cfpUqSj6JdB>M=8p4G$}EK7r45 zJt(?ZMa_bfY2p2?6+xo+S(YOOCnj|>xU_&mz}4?>@Yo$6z5LM)87s7wtiO935mgyA zIHxFgktk+ZQT3-I?gsxOCj*dTZ6pL$-aD2 zur(HPhyT{=s-Kc$`JzLWeM6vE7<0Gi^ifhF$xN*`FE&Fds~O&h1SF5OR!rOPZei~?n?<5Y##}&JY>0KzqBvUQ1vpkY z*LiOjC(dAG_D*u2+$Piz>y6M+oOMP;W5cDJ`6b5o%fEbTA4k!$_6xNnDRedd8;f6t!PXNKV{g?~H*OX)x7Lh2m5{ z9Vr>{y0|jVj~Qqo9=?;HAkY$>qNeRD5&lv#rcbBD6*l&lJ(wD>2V;CNscM}xT>Q#3 zc|+%<$y7>RlXl!Hsxch3^?F)F_WM{HEQs-P8v8--Y|3PIarUHIQ)l~p;X7?c44qe) zm@W&`J0nNOwv{N=n7p3Q!L#Tso}i$p5gS}b{F3#74XsM83ONe=fYN#Q-=Qm**=L%+V6dH_g| zcHYRz`7=v+v4?Kw(;c~X#a`a<1iP;(Q7z#^1;1L6rB<%MSNRfsd?Aqk2LiBzmas`D z5LGO`=G0f&j|e3)?IdL_9-5y76e5Xh+obSHp|qTBHDeP}E)zk8SSVn^$TQjh zKeWAdRFrM^JuV0W(v5Tq(nt&qk_yt@rGj*KNOzZ#0@5)c-QC?ibayxNyM5}d=Y2ol ze|~GtV$JBRiEGY%UFYm`_TFcYO02%bN7~mfK2)CpGo{Y&SK0i-Rkt<*fqe!n_iMy$ zI$cWQZ^Kh!VAKo~Qr>b`m--X3MBjw_hCR+Bt)V8L6I4 zLu9RFj_bN?K20LUp?m_;N4#%ZXGMYh}-TS z<3UOjX;511aN+St#tIwVl82DgXi_2yQy?B^x$o)otjp@as8K-@dVD7d`rF}B?$H~R z^;;R~{2|?Hl;j$m;dh8;GR$v_2kv(mDy(z^+xjkB@So-yLi!HA-xuK|)%?JERq4ow zo}yxq9%=dYhf}ky`p%J?hfe@W099=4Q#!d<0bcW}NDjo$U9SDIrG9(>WvP;;>ppYr zlO>qL^^hEF2Qa|zE?M-qY?Y2ry)=Ui;q6`}mN`awKr<2t@k8pkYTA6R#$v{ z6SaB@^Dx$ogpNdqY0`54L(;KE<~mnDcw#hbVbA;BqhqBUOSv zI=;7iAt}3v=JC?7Gr*%S_-=4(P(E9GbyyU8_<4a4RR5~H+UmP4@>y9nFJ5--wE(&Z zgkIMCYT0@9V}Q)SA%0(a`>Mb)3xa%!31e!EHL=<7*$=WN z;l!rq0@l8jbz)1|jGtOu`Ia0|2JGs`6ab|p1pindOY1*(;&Vb%3!}t$iyf9|;qu^h z71S$O5~b}%F_kfT<|tC_J-)mJg~jd1nSwHxCf^)+c#!i z--u#_&EHPuL^86bHbeZ(2nUgYy-K^L@`|_~d3m%+|4{|l)b5qw)~(uv#5Fg8v}`&3 zrT(>}?mTGWRIpih4B_?t@8oRgxlGK>UuUE@lnCb0>kV_Thr~HEK+X8>%*gwb>c|sKMOtwfUu;gQFs6Tie2QOE{#68yEzq#}n z@dHikn06UQZlu+dl-~T$q6RV0;5LdV3-hrZQIqDwl;B0a%~gFX>0!MwPjJOWshc)7 zTcusF1$I3`@C8V1Sa$vWivyJ=6T6FEfkXmu+ydF7z;Ol(%m*hsHaETYHmZ0#h& zHRcoQX#ZH}YFYBK;X3Fy@JYi(e;m?Z{{i#Y3;xTb?6LzQ%AWGNL!GqVUr$&jA;%zl z4<%6#V|?>}!vvIdSj&Nl{-Gk^#Ou z^!y+(6e!;RWr_dg!7@}v|6~c>ddG4^ORMYbJKcTh@vasT)B$1BY{|0?LC8x3mel|C z%g@}YvWedp`xANnqDOvV4!^BHi`O^dIp}F;f8{?){J(uO2rew3yoO0k>N_CIB_VB? zdRC^#ZTq22d{;Rikc?LRC~R%-Be+1vL5UYVy4fjjXY}(ai2szv`FS_W=Mzc}LODP< zpAnqpITVzq?&sG{DJ`+aY3tiPF_rGOsdy-Rd--k_2_;wpQuIQeJkTR^Fw4lk##RV% zn#}LJ#4G%D+j1ojfOpvmR9O0EvCqoNc%2jaVG;QH$-K@gN%)~DB{a`2CrX4PQ0StC zEEfT~@NtT+_$fDa9qH#kgJW5TO8-W$*~udNC+T0Y`7ew4=Yy8!xF>vi2*Zt;9n&x4 z7g;an$9ARUbkK#bkhY?kE$9nEJMZ6+=4rNxPag1JpgjGgqw14eZp1sVtMv@twhJkb zeQK!_?6nZkXrUR$64M)$l+EUpe$ojxvn<4z_$7LVvzt!uK(DQ*8o4PK{)ajlXL_g- zZxN{m=I8N_&{2}^l&;2H18%N*yr0HZoJr$zFrm{NGBJJ8{ln3dJOW5npQCyyQg^Yj z@34&DU0W#fFueXD=bNlc(f6*{<~7J#;?DlMRFkWS?-*{-r10}D$GEe+Q}lx~bFI;s|eJs!M|M2eUDK z<1$NrfNa}4*3K;J)6Rf;-MI8*S)s#fftLE~AN)fsr(zk}T@jknMn9eFT$ROXg!P*6 z{dANH*1Aq_rLI2)?x)CHl{&ts*?%bJ-HmtZ^uTgOl{VVd>!u3Tz2_(@uNa1W)yv2C7LK_PiUo0z$M9Ef%6o!p0Ii?2oUwT)c zQCMb@|vHGR*CgVc{Cs%jVRKW>w{p8MxYQe$CkSz*0-$NqoB;XLI?<|oGuR)_C& zU7cq* zu(gnLHENQvA@Nm|g1_(7ke&xd*lT$97+(;Hc@O;HO6ly!{iNP!8$B9>hF0;bLo@c& ziow0aP4iPPIg8uTZg^5S8QQ>o{_`wxBU-I3(H?g;h=W8ha#+LJf9~PVB(Nt?k)|QK zF}45e2vL0h;~Qpr}y#c1h@^BN6z(4jw2tz`vT=0v)zfU86B_?9Xjj~v65CF8jt zB=nrp=ewd9Jg&GfraTTNZdu0L=-Y8P_&7-Rm2UPG*4wwRKb#(Uun#}Qn$u^%HMykK zI~~Tcvma$L-W~94)udm3Ip8-W`-BEAfE%8{m>6T(^J6fW>xF2NDycNNXE8p`Zf1Ax zOjRx@a(2g=km=W_;aup%=PYl$L{Q*nH9p)*wX z46V~_5ILg?>q}?yG~LJNeC?9{%y?jZ%-35*p{NK<552P-o1q?O@;zgoca}9nEcZTG z{*sr>p&>LsSAtI8a|AFssCI5=X{Y zkx~>fPe8e$It>PID584`%xM@e9jEft`RnoO&(?bi;B}110)osJjN*J44a)m*2cKc? zb;hcT*<>N=o%Eq8n-$M*W%(_UGu`vj$r<8dk;DADIjh6k2+>OW0%je|?cG~kA|gH) zjFOVH>x0P%oguiB!|oKnJ@5Bt|L5Pg0^UC=`W{(uyJv2U6%L9S=E@zF(|^w81w|hf zHYG~z`v(O~N_D&JN(Fs-0dntq=l=Res3L#u8O>G_S8Uv1Bkj@m>1qVb0)ExKhH6w& z`up<=xq@96O6N^gNU;n8ptEb2?=z(7%=JPg-dwiIT3NT5OEtJt>C6UckFrHqL8L0^ zyZ<8bxeHcA^w!hdqiyZ_H}v#IBIE)Fp^bsD zV*Po#G#7b#G6UhH3&ki7v>ryi(tx%=jXBUZJM`u5@OFTIKWO!IGWmM_VVZr8;~=`l zPLjM4D(8GCe9{8E|F?)QH{C8-mY#`q+H7oWx2H`+2_?gCzoDUk-v1H%z_UWW+-u28 zNiAW14De!qmQVas_L3`@-?lSL*-uP*HN(#!LRB{p$zKvxypj6j_;$5DzT2upN?c-r z`+UlX*-Q+{8CMz4Cx}K$4Z)XIaGalUZOZ1N+z-HK@w8U+($pxG*G8*LD*7tWAMWj! zU$@sG!cys4iW@h4E~m-^X##Rcb(O5v%LsI8C5#J;X8?mh11e66g9FC`)&iuwIe;O{ z2tZdoQw=q;~XhKjog4;Kd%Hdn&e_R6p9@O3gqQVU>Oz}Vb zbY3v{l+q~7l*Y!%WG#*9_znE<(|eJwx}vrjG>9qC|MnvPRl*R3L3ZrgH|sMT4{WRz z_TP4qmNjzy8*EXZ_-QZ{AFyy>GoQgAf$+Qm0p7FnIbqt_6~gzI^G70^KUD8^etxKZ zPC=467;{kA7*I5O=^qlfCjVw1x(MTJ{g)92Q_Z4*YlY8@dh8bqBn zk9o2;tr>KxGdh8`(QiPF9+;SzNX>j#%MShchc~u+wFXinjgIX^Q@i*+{tJuxW<*e- z_WCQ>mF!JCrZ~MwkXN)jg)XETlYqd-=g?(kbw97(=5{?#;TZV<8&jC|e2eMFL4u>X9 zKO@`iDs6i_7e5JPWtst6OCp`-eNkVoDuCnsLtLSt)r6S z(V`66O=itd-)`BxbXCvWgAXV>&^oNhGa4R<{S(!<%daR(75$YG$EsX(LiwcfmsY8{ zV*cA%^ZUQI*h!G9tXfr>&sIoU0X80GR!cDZGi6G_je>nzAoVp{Tida;RvPJqj;(a` z?xEEB@vt(p>BQ0OereY1WVGLioypn$Iin-Y%3XAxxk`1p8y zaWR=VVYd-7c$PHb%=Xd)(EnG+C^Wh%!Dn^D#N=gV#h`R2qN#O=DgQXIC2)oj#X2ah zY6Xb?ZYgwT#X+tCGm{mK$)|}WuHVpJ?+wS-;A8k5HD5pB`N?NA27TqAI>8ZV9YMd|P*YQo3yUjFz9((_O&HokK-an9j zNZoVh0Q46u+ic}As>h^xdq>BvX+5uCz$h9w8DurNdej@6t30!VDYbkt-e$4V<`0-Y z3sC^n7NGI=5wMFkX!Gk;FV&|=V1W|73m;AwB8wmu$gz0$7BVs-zoDazDfD=qiswT` zNol_X$koOfZF=-v+pKvCd&3^$O}`sTxcR0&tPQ7aw<$dNJe$G?9Mp^@b#s2xf4!Oo zVzYp}9yf425DJjmkZy%qerb}zW$~k;9csI)B0Jr1;0$M{r#ua*F7@-kJ6ZyIj@r#T zS@oTsqauen_bru$YRZPkm?S=$&zx16B2DA_R|68!hxF=7+NJy5dy&np$hN}Gi{htF zy7(dQmfvBp!Y%p1mewAdg}GqettI_&vi+7j{muQT7l^>}HQH{NCJn_*og{=wA1;O9 z3Rv&PJ^xr3vW`)rQ;+uy?Oxbz{c>-b%nRBGchn3mITeHW;W5pv`l3U`>m4l=iG=_n zigMv4tVAR!l8}&)`_0BQxAigxAy-l4$r`O`QVwLS1&hQZ1$Go&SE%ynWh|HqXzU(h(SXH874|vzzr`yv}rZ;==At9hO^mil7&Kv+M(MD?J!oad!=2 z3(#oDb!ZT$GN<DS>bT+p#}d~6MHyRfAb z7)95*!sF-&^}fHB^|(3|*vPLJ56xX=yDOz}vQ#4$dQ9h{$^<)KL26dAJAq{G7gZ`o zni{0*w_&$6WVAPRkf-|qzrl7N+B>v6xi?brndF6hDU9^2|$n?R1#Wo%bb~@sDUo?m@nC%vq{&(0`u89{9>91T zf2~z#|B3|GWq&4}Jkd{kC~;UO@EsmjYilb#LMf<3w=t*nZJPGCvr=(5&GwA0txgT>Q!4l=~5)9UQCC+&e=KEUQsFfwLjKeGj7c5CIs0j-^#8XIhAts%ID zDkj@&bIKn+{AjwnzHW=TPL3=70cUIE)gbf$C-%icv-#O3v>XlXQbVEo(}q}b0_y-) zf@*_1a@|(v9D>M+-%&uz?C6`&_P~f#Z^_x!p0y+;FO#!+>@Qjn&+DTBabh8dH&?+1 zNGy$xXQTr<4bLw48CI4@$GM$$2&HfteoV)^H?Ll}^>@n!y6OTxCzc>xv7m&MHp6Pa zKJ1h+XCu-h>f;JbR(!X?J-K*KsjNtpHnLzqfkz5`u4CTu+oy zs-PFDOua`4GT$e1ugYl~*FEK$jiC$+w>yZqyfvL?awTkKVZ6tWRV#IMxCYCcm4ayt zVgVPnv}?YL$V%s8r7RSDFS(Rj9~Gi2gKamRu?|IIK2xWA#B{G2)PtnX;0ZUhREevr z?zYZeh0skexf`7LKHTxD@p;gvHj(&l&4DUS6T2JTl|$o7K*mqvLldBmyu* zRfnRpisA;@o+IShBDGlCkbEA;LjE?ru+)&JQuoEGwZuR9k0}o)a-vB=r+4|+J6AU+ zBJ$FbIy40R2rX=DTg!ka^xMx3TwVBB&QeH0fF;S*D-XLGrvLcWy>oqp#Xg|i!y1mq z&@4nP+ZfzzY*m>(>Y8zzklP}ch@$zZW@7oT)9UM@In5E3U zLz0fcS1So)78DfZw%cSpT&T?w6=2b>Api`~#FDv~C=Bd6*RCLqZnwPd*Li)-^~juN zQ>+%EVl%*4#5NC)9UyPgFyneLsmr@y*X(K4Iyi_5c)iT+sfA5~_0Y>d4T_(vb}Ceu zU^437qXWi}`KQQGBp|(Ix+L6ttG>H#{*9|!Dut(c6ICES(1k#o(Y?lEyogzo zp;evV9ea*mlTOIJ(s)P&sCklPR8T5hc~DC3)|ki-RRM~!}dk;sSD2I zVyeHFX#e^5HLiE1TO*r!pI09;$FpM7%}(%B`kjZRQ*_ZtF#0N>*CsY{uvow&h7 z@CvnILg2lB-r=38wEKk(x&=Ec9Zo9bQ8U*C8S(j>bTv)=2E?edtEw7>{o3V3 zu@?URqT7>3x8`Dg&R9|wyJsld;M0dgVZhpLq|r@Ixj-3{rEx;Rs@e1h2G8^3mmA(!vr-2)Jj`d^38cnXGV%3MR zbDFEAEQ))=OGQGfu(i}b>iK^U7IHg`niZmeRBR&s=^xM3E9bS`4*G_?)U8QBhSn?} zhjq=|n+XhPxS>i8b-Rv~K-P-Ut5>$_)Oo6^@V=12DRyLn`PmL1Lh_XPi5wY{ZC|v3 z-xsI|((2O1KV^vvMx8H0%|4EyN@lOCGW*`VbO0%%AXd?=jO*)4l`Q>q21Bd?f-$a^ z^iM;SfWg=!m|ZI;Q)HI%+Nc+A(P>LJ>al5m<~EqScE^cWzyT9r z_`mziv&gc#t56A1;B=b36__(q<82~^()J}Xhn3Ig7%YY8u|5o6a68{Oq?Nn3lX@&w zp3|D&?(qc?n2UvKbGqTY^qSYpb_N_L96Gh8F+4viw%*r{ma2+Zm}=|Hv+5>T%@j5( zC8l&xez2NxRCiibByDS>aO09ZC%tFCKZFxBX%0QV42D4>VuG#MFV=XVpL?nI`wFL_ z!rFu=zuw9RJOG=ZkH&ED@L6wsZvogO4DDinf4>MS@*D-FZ7>;RvpezGe7@=_;04)A zo8IwQ@ajc*PRYl9yyV??D!dN6UjV`|1vxoJ!s!kGu4p2)GhyQ5X3J26nq*To>A^=! zeX380Nk|Ngumj(;sYep9p#Wsc;Lb{{lGv2uA46@9|8Y3{RXo99y=C#1y*O*1ZI#dw zzR6_fb`n7JKjmHS$bN$2)mU+wR5`}uy{BT^85|0er}&z0SJl4rtI&|?@N$5P?b>2Q zr{X~imE*dUbZ;VvwkzCSOYYmb3{+W0!0{AI*ZkP$705b~>mshDUSoK%;*5Ykk;M{A z(d*%7dT&lpmH;1UlE=@g(0UXTQ=!IvkchLe%T*xxnP#5-XDvA%Q||3Tk#CgTb}PKU z7?*JC($}`fW^?(!@%b*w7wu6~(ZTf+sz_Tl3x-*^Jt9o|!ql!VIz{%OLQRS8S zJtjJoI;{%O@@W5gE{$lM^@BrDtIE7VI z(@~xiio>fb?{u#=)x_6LK2`WBZ0UBu)F9#V1U%<~tfZzrmDbKRm5y6%DW~#X>r?q$L%v*3Hq`sn*%9skCmis1H5_d0TJ?K$s=sb z(NBB5b6Bm4AFN9=wEEajgP|f3{3A$OCOT>`0`2mpTg+4SHV_!VM9iv*J07!) zZN|IxQbEru_2>#^rt)=xLCphyrL7W**RP-7#Md0^lile!Yu+iAOGf;@hCK~%iVxM5 zej*9deH;CWD{FQ{t@KxUI45ZicKyh`(fxm-`hQz=Q6FC;DJzmTd0EtXYm(MlFVf=h z$z2<~y^3+A+Pl129;hTo+14grz0rC&VB!UpI-^MUu9%00f_zu-F<_?6ZP2*JKz0|n z?l;Zjyuf!P5h_re%<{uhR9ju0)Z!gJ^7*J0muvB=QG2{D{sfYXZFAj>oF|_{cZ)^> zZnR!HT14xX)f4fo)&>$?s)ftOz_Uav!E?MqRYq?YsJTQVA!&{48dueUfH#n}e6BC# zI_%CrQ#-L~9x}<~_v+``4J86SRCJf3V90%#^#yx9vE2$e`a&(@FnH-pPTKBu&m}e= zJJQeYMVPmDYI`|`sti`f+K|En%p^-R&6!nuWUjyqHRu=o0?X?rU>3~G@i}A7Al%=s zXK&*e;et-RvvGVTO=YA;@xf&E{|)##qre$H$YHabzq?Z0zH7%+b~7u#q$e4vh2szD z42i7dw>9iLmHt}&NEnA*jOUHIqQIktBQy8046k$V+`B%x@D)dez0~1S+EXtPK&cwm zM?^lyKo3{2jsQ=Vv}Efg?%nMf%;M-;JDEaV>-^lFa}bs*ja*4w9cN!5#&|#585lJr z8~2Bth&YjW7iXRZ45`f0BbCdX}PuXg5adG947bA~*I3=u2H@*=G_{TvyXZ^B9 zHVVH~H?P*IBPX|aM5nR)d zv`}k za}7OPXA_%sGivq5X{f(mXvHXAk<-kN?D9u)a30@KzC@403GE7hKjk?}aCVSGV?=WSMr%9*b#3!kmI3Cii%j^pO;gV|q;UE$-10ep+H@;0s#npdw2KQ{-1o7D zeJjNPtQuN&&Zf^BzI>N=28ijzG*7^bwyY{uVQ*-Mv|DH1g@$!YI!1H!S6;McSC$C|^!H-C1(`w66{$qXdshUqeEL)y1^a8JW!X`8*JE z<3Ys}gLg~^{S7jkdd(z+M<@!TSC|F+Z_^X?zTQ|X>2&o70`+hG{Cw)?ZJF3FZzmcXOF1B}! z*e{ZI4jkL0*MYNz#8Uf$$Neu(Ln$Wai|nPuFD)30_8@YCRm=xg z8eZP6b6uh%HxWpihNqamuA(8OyCq%5qT;*V;UC#$=2Sq(nip|~pJaZS`5%|$-(5zE zl*`3%oscC`4x||0x&%Mx5-FtT;cea6a{5R4e45G!V|h;`&KYA3(-9jQyNTOwh~7xm zguVeM__N(#j7d?4c}s%BO?GwyNV@MaGSYrE>`7Vh+G_XSY-evSC{UgUJQe)fct{ws z<&-7#1E}-Ckm# zy<(f9DCDG%?|F8$a5)DFQ&Bso!g<_#%eRj_ zt`Fx$w2=Bnq1#!Gi=;%Brt8xBO&S!w#)nF*hIR}L93Me&MayzE-%eRC8_)d`d_&PA zad2sh+{0U8F*BgcGue@%^i#b-!Qw`3X?)u*%Sze$x*OI!>32FHKRwKFad}zicl9{EV7?!2?>wGi=1RU7 z`p5`>@->yMf<9uv+($&}T&H#~;Sd{rQ4e3QrA;BtHGLzbPJd-{=6Fym^4g#g>${U| zQKaZN5k+7*(@UntyscnzcO@6hqvSaZK4s`Zy$xyf10Qa8j@~YPT3Ke^XKZx(*H($V zS=xn{&Sr8ScWzyWUeMIww~azMTk#wFmP4Evjf^~DXb`81w?j5RqtGl?>O57~(#mq{ z4zR8mE*R7~s|&XoPtYGs0b5(%*{`b^qzv}gxn$Wm4_c{1yQh0f0D)Pu3swhkl7Lib z6XiAyW4D}MmtJhZ%6-I(JdH|}rsQjDiWvNo1#hCh(ChV_B^&1hxa+U}#cBLbxGBU3 zHlOyCi8b$tat8Ixo*(cZ+`&Y7Y&s4`7!kePWuRG68?u%14>+94ppdml%Y<8?;O!`1 zX=S|pRq7*+bjol6t;N?S6C7a#BQnE84>suT0O`llYbKE}UV3eH=-b!pLAUGuyV<$= zI-T+)bwN97kvLXQ=JUJ4L$uwUGd7SOB(8+qobl=Nv?yD;>J&6q;7qyhgOoh8 zLd&}=4Oh&_xnLI?yQhC@0Z22`?A}&Ler_o8Q^ia`Pp{AA5BJ3+CJaa3we%<^ixr~L^>)^A0-sWZ$c=EGWk~C+qw@)e2L<}+dJyjWkLdxdjAo5_4UTrTGoSg2 zO>0~GLChRKE#I$ZXZ>6&YVb;pU$eQPWbT{iQFkK_9n=%dLo_R7%v0;d^*`-$eM$7G zgUF>7|CO6C(OURjO|;eC?hmV5A{i;_#)#8wER|A3egE8%jFYxKhS8!nvYP5S^3{ z+?YWlb~!8EN2KAOKV+JC-aw6-s6yBPZvpQC(^-^y4u21O!z}1ua z!Gk&3_4JShGA{v={!i{O#+^!1?V7kJ*;uxGS9i~3_EcK~tsF<(q&{QbuwT}ml2$1Q z@ke3IBP}JeJae3W879Q?YSu^y$Zuk4f&8Yo8DRnDzt6)xLHZH$#ku*A`!LY+AhfM> z6fd;e`P*hN!HZP#tD@0wz?3haSsc^8PnXKs_KGcw8nx<|_-9ml1+u6N`AX&62Jf00 z#xn@ke=1XhN{YjA36+P61?)e*pXa@a>ozM=puMXB7kx}oD2m}pjwgJX@jX0qY{9fl zGcBGJpM}gy(LJno(@Amz)dGhIH*=2eXWBX}m(&O4g*l02zvYA*$|Rxpy_rKyH=5yq z!i5@WPE2_)i{JR}%G8V_+c{CYMIyQ`o_Loc1Th_mFd8X;3@)juB1byC0@kESaAxxQ zp+a5IXlltFdNWJclmPAVn-r(B z`cGicVZrgJ1VH&L7=qqS=j>^IU|Pl7!(@DzO*OY!zi)JgEo2)W)3H6}0w+iYW|gSD z!q+aJH<&!snhTv8bIvL@h+p9L;Kb-=hTE=$+}+USl++Z}GsO2q$e@d8FCj-L`&^@@ z&a3hEzlvO}+~rqm6kW+~<0dlranWJl^89R&-lbhR`?+tpe6MDYVB#EGASN=O>yh@Z+!jX|z)(up5YA z^SXD;pzhG>yhm;_+H&05iA3Yt7+Ny_IctXc$zSKiZFI6vv8Ubx-d7TY>s5-WY@?_f6j|9z(9T0giw<8!xD^c96w0rBHk&WDqhwm>ox( zw+@q_Sl=#r+)NZS|9CZ0u!S$BU)=@(Q4V_9KgCa0dS3C~m#v5EaJ$q19dxcE-T)Sa z#!vh?&PQWaf>Y*#UrdXI#DI)GPph#ZI0Lan>xxuz(9svO;B=|VRGWk*v}?HByp&UK zyWhr3nBVmX{+Zd)!V9mG?vbmyZQ|;q1_+@?U_>_xjV4!t4(2L_g)V(OL%=gmhL)_I zdfuhu-_a*af^$_`z*80WUhv3*=2*gL|5$Kyy!7h$1rBo*D2<%hN*D{h$rFZ7u@FQ| zvVYv4=y7qcgCLvH&$mR$!9g6abuKC1seOu_oLFItH|p6L(AZN#04@7a&c%6L91+Fe zi*qk0G4Re;@)$`&H7{>=8Pf0#z+ z&A6*Z7i^@+KgwidgVjR-o7ix#Fd(3o6lSsHhNJWe>YLt77}QW}m$aEyYmJ-bmE^rb zcIhMeZ3aCeXUJZ4-FK)+NNuIFi<Dt+&1A3I~wOOklkohGHw4C9nOe`j+2eu|m16 zCI*ib6B#5t6sQxg7E3w2BwS;**5>|!H5{|TtuOf~D&9uWl|LjaG>xK$22H_cO<+Ga z#)?sgdy90DQc68d>*BQ0Z`e!5NTcZglWElBsqCOdPTNd@BVQqPJApK}u?EYEZbb&Q zE;YwbKNs14Vm91NIMdW=Zf~7g-+c|gX`mBs;f4$0EjFX6pc?kFx)Av$GDKI{5Yj0+ zSH6U||8?fcVaa9AN&*C5$(WFyLW(ZB}nR${buA<9gr z`ce0Mw2b_)z~sn9vkPPKD~hilQ)->S@6l17tJK;aU>}srfTNxBRdj%&M_jWivpc|F zTv&u(nqXrhE^s9!#p8yZ>gbK)-P@30=SNbV`|}LsS%Gt|bM=H{^;fIuEw*ANpi>Q#CtJ+(W?P-F1BB2lRIvAWrA(irk5F>AXG263G~8Gc5~3 zX5c9f7d~(`WM9#6R$)ij*!L8)(cNWQ=0?V2BoaG4U^sg7?PNL@Xa`Q|p0V{U$)=JU8> zce{1fhhdXgA@<(*A7ACKWg-agfNdZ1`@8#G-{#rK3uVvpT%1 z6vgJwcSwZecThjLPuFjM0lso1FgLjM3So6OI=i-`XVc$1`2Nf)Th7FOLDd@?XZIdy zkoMe*qS3yr^MwoY_5P2M#6vF_Of`ASoeOj?PT%Ak!s{C+3yvKDHnX04fxGQ?)vPbbP3bUJ=*N8_gmU+#V#)84sX0n9k} zdT?bb4Fv}2fN>?BW}-Y!=Pq&&V*r@$W&kfF_lbgVaQoxsNoznD-^C1&5E}1Vkj6hT zxWtLYKhLhDE%hTRQ_GNLW{_KDsz>|Ws(Sit`l9Fqp_Q^MedKC_jA@oU3@9~rWpapR zx0Kp=NRKn%yLeX8u5TLE2Nsn{!rUPpu8T4e*l*vyINv+&O^AdxY{HgO+)L>x>b8En zSy=e%xBRQ;_^)?9P{VWu_PkB1xOk6&(OQ*;Wh{Q~k?%l7%@7H%V zZ|zdw|Jn{&)L@U&`yVH3-OSX$->>w@y+}QvZ#Q-Zj}o+|!&6+}k+4RZp*37d7}HEZ zy1k5<4e!tW0b&Mzol^*I+{ZMaQ*vP8uCsB#3d}QcA1AbhXT5k4QP58_~IcWJI z&*F8`>&BN(YkhsYhqGkH3FQ_c1E7juGnxf?K8n0e>d3Q$ln7Guv!S4onmyJ55-3~J zL_VX;AGDZZZkUkf;cKFSwd{1^2Tc|0lRi`qd8e$Ixw++7fDwL|LPPLy_C9FZ>RXKX z$kt?)Yf!ujUTW?%ffX>&U#)laM{;AOWo4b5` zuSSm}N;+(%h5qBM4T(fu*R z-!?-9Ql~~a+s^R7B*hHAqmL_ZY)t*!Gjiqjbyp%g>2y1u zfsPuO9gGnQXW_KWPl7=PpZHnU-9~F zN6x8N3+j@5%~n;QN&;io>zq3#C~M6|Mc^pSnkZFf+0i*k9I8zKKm#&Olk&LK7kZPS zKrc>stlPb6?HD$nWx&eKsOeHJ(LHaZeC{D8(P=^insf!yqb}?5hX5;r`=^xhWzJkm zT2k?Myj6NqS>IE+*7rA;;6sjg_f61g9cUO6ZaYpyQ=~I9GckyW@!Dx9{06C@kAG308R7MrX2gU-1cejyz z&uI~e%mr3MOM?h1&IdwI$W+J9V)o|2a0}JVLYaPRjG9rYm+w?2E_<@K4wT#oIQKX# zZvxx9c#)g-w!FJk?ACxI^PJEQ(J2n2e&q}LCvbhh>J7VCqh7h#lbIG0u7_%`>QsAe9HGiOS+@F)q1aBR@8x0aU}~!B}>NO;1%+__Gd= zt;^f(r#1HMaP_nxVNc}MQeA!$mieoPKv3Yl4?K22re-S8kT(>LA30U+C7_byrT9JU)l?o9|pJg4%bfIn2c$s z`G-))HodRhX4$&nx2+B8uPwwVBMk+jSbmRoIU4U7=W@A?shU@RUk3kK8{5H}UEMB6 zoZc?-&@cRYmZr)MYXypcE>`_ zxyix6H#$O5qEs}3^`An|Od~)oZKBC9)99jxal=j3M0Qr;vBPKV zwmHNqQm^*9HLv4gVz)}hAWgP&wZZY;e~A#;8``LK;eVSY3up#}$DwZP7vezVBku_a-?V zzd9tpWjT?*AnK+oKfeD3QNx770a$dFxGc$`hQB-HURq$h20Ia!73kCPHk3PeOckz& zVBS#X0sP37VjaJmM}2Bw%atXEk~t|2!Rbtn$gmyu4q-oD=HM^tuklziln8@92r zZ3$*qldt-a@!{^naewh1WpZd%ldk!-4^}vMZA`@~EV)T+{D_QA=6C4yjpZ+O!wt3VPT&g!C{Wp2| z??u~(ZFm*%YRw4ELt!?Vi^IT8mSt)tWQ32Q{#WSB6>}}RGXq%{9dc>wZ@o1YI7J~= z>Xak}iUCGFA8FkHB{!D$fJJsyQEB>Ca(n0FG*P4HBbQrdpp6i`3Kwe)kuuzn;Gm!% zT3U((2vPRNt35^{u4(wBWL7XyZyb&Ju{#!uO8BTy`PS;S{#R?}pmB2PW1#tWW>B64 zHIS%d7dDBkw2+rx?OiH>Gdy{}mFHvyl?m=y4xB4em6T`Db8}#WBr_Zh#!@QphQAms zL*DrPb$L8s0w4U`Z`~Gy{wf{*{(TkT#k&f%3pNel`td zm_yKQ*#IKYZY3C!aimlya#XvPmk0W|08iSg0`R2m%k=Crd4k&)P={5%@y$B8R*E-b zfY0}lRQTlPg)416v%5E!Q90YJuuG3vyiw1CdXAb4;Nyzo6ca#0UcuHA3(#nZCU(a-{E+1(F?A%?jJTj{*M^r7Nr>a&KaQ%;w!*6F81lxNuANm^;- zpj*1$w9z{uv*gL+#T8#Ic6;JT-u-!L?qHWaXwFU#Vz}S_1)ccEd%ThO!H)cX|9Xf- z^2PqRR%U}5ws53-iOyI4Ev=UzPY!QWD+|AvSt;S0^CXVsKM&=rxUm1Edpf*tDBr?P)>lOYpm)Qa{;{yWX_o_LFP z-^{&nRAC|=PXC-3IQ?SAS=S+1~@L!>ZYCbs3gV&-%SfA93nX7(W!S=K_& zBD65LQ$T>bYiH-m7k#f#0u+Xa@ne_@OKO@T za*^i5pkY;jK6s;empNS}X?%u>kBR0vGEI(+TCn?U%8bLPDfiN)^;!(=&NR@qnt~Gt z6*oTcs?ioN?GxeW*Y`w<^@k2vBpa9d`n|*Qo)LCY53atc4qCm5xo!Uk0FcJB>Zl+KW2 zgF@{nCMa*pDl5IeIc)oCmzaG1!Zzuu;PkR7Jcw@Zaon~!lRV-SIu-7ysrL8MMpCa0 zzvf$nG#+-NwU58arc^?&EKlO|)${h4zha;MuN-Am6euL|y=*xCd=&p4Y5&*HJfW~u z_k5uTFE0fDPA>QF0n7xDBe91zb0q&CMDxEyF^>eT@M9k6bnlWEbwh7pK9Nxc3X~Frs+0!QwPpW z|Hc^+E(kKW1N8?)PQMj_|A{{S`7NZQn{SaIC2IjzetSCoKE9g|({KB=YvBsr!usFU z#lC`r^=;jWC0VC>>bw{GE!OV`q)&3B_OnAUXv>7hX8mQSl$yRxew{kQDX0*uH-<{T z}7Y58ws7y+5sl289Iql|z-2j*rjBob*1}f(Et~TMjSkTFb;t^s2Xr zv9Z0}yjlRpmT3H<;EO4H@f_fT3SqTk-fp~q8W0%hx&N;@sF4%>q0aaZ}wvf=RoS{ zJcNk90iq6Z16xLR4uK=#$tNFI;^{g%*LoHBjiMLnafx;!fx`sImtW3n&8SkLXrAuG z8|2(eY2vsK7jW)*>!&92f(I))TF*UMksb=B;kda8#`Bbj%RGp)2Iw{G5HU6iywlJ% zgdzskmjkky`9uKp5uu@N>z2Ucgmtf0f>Z@MSZdI+I0UrUKbOeH8y~LT?($fR1y>b2 znEQ-;a^1XF=W{A|0tb}H`JEl)H~42S)Eq!K+$ zg|uw-2jVEre++;TqdaxJ=OZ4}_|vrG|Asc;H^hm}KuNth_v^{Iw1tmJnnDL-Fhc-w zF0fmMuR62d!%52Yt3}g9SLdfHn=7RPBV$|8n6johZDsfbLkV#oy6NyM`wlB09N!<=fAQ(Yg@I%T}JH%o^^;;3p*eg`YZ8UA$43;1<6+rOs5yFokupqq(f zz11?!w$J0unuN00U5mg`=YVf(=+wzL7MHkw0E{{!Qn+UO_E2J zG!5{IDS|}{RsH?Ah>0GbB3EVkzuCR~Gv@yD2RyMKl_Cs2xx@Y1_XjL60%SIQ{1R@f zh7}d9O)o&hr9TM>%haB2&pd*znVz$hdd#mM)>v-`=2YHKOpiRLRHWL_?Tu0na>iCS z=-K1`uJ(diev?icL9v^I0{^)$gvy{ zK&8>RUg)cZCodjKug%4l1MKI**I6Ap3CZg@Pk5f4PIl!r%X;FI`AG@1r~ZDBr7ktc zA9;)Cwoa9+;20R{TT3T^yD6yr`Q9WiAlKZ$z!#86ZJF3s>gXAopctuYi&>E`8p<9> zM{&g*O;1hN4me*q-RM-W_xj}%lZX7&KVTR{egsrpjjZ?K}$Uf6pAj z%tb2~M>AM#FNKpQIcREaE71Bgk?Z3frN{)A1tV}=GXBdWVN=|99XW^*@KvQ+{MQ6_H~ z3mv~;QBKnREW)G(gum2bp9h}w#LT7-DO1Jsv)5J@h70W1tVl+=*8uVs_@Ba`i-vHc zV(XkqMe+#iV|yR9EC5CnncrR;DFo>j>xkQZH!G7nFbUxbkA$k)K8T@}K&Yg`&TCDL zlBOVLo!UD`>$EmnO`XZB`<~J_uk`%RCUvsa8}H#9_xbbujUxHA5jez?WJ5sRWrc;; zPhk*$m#!GEQ7_mRF;r87zc-JGe3_oHP^os$Y{bsHshk(F-mv_T&*pkKWpYYzoI*V= zl}}-V`j_QV*7s&#f|gwE5yg$A1`s>XLIF1GvF=)t`XNflFmX%jU8O0bCSJ4#G&t48 zA%25~ye#wQ%Zd8`D{T?GtqUi!EFo?gO`Gq*78!(&0h*$tP7t8K%^h}o6KmdN!jgUC zv3p9s>eS~8;bIji5wPU&XVph!iw-Ub(~wxHui?>M*<)ZIeTi+j$-iySqqbE-OWI(Z&%hP=)UJWn zXs0heeR7=$vDj7C;HoN$O3XgRwW=^eVAjmErFQ2ok3&WS9bUT3Q!cdaRCfARH-e9` z83Bd+1aU{+!jl)jy<>P-yxRHUT#chx06&SO=ETstrQOvZt?8>D1f5}(3ZUt&Ra1JG z{tYr&UmEpMaImmKznndd`sqc#?ARfU2u(BX6MySKdNE7KhA%1+t*{85KI)o+YPB~#U*#5 zqfY~J3RLN7Nl#F42Hd<1Ao-vPw%9&@?QfIc8xmJ|(l&Rh83*FnFAMnOg{^7IcTmV~|>vLG*`Hg?l zpavI#$MqlJkAX+hRN39ATLrL!BA#IZgLCE@a00>`35$>Yoqt#jg;6jsRNb8cc4t_Q z5R&68y@T|J!`V~ccy62Mt+r4ffg1Y`#A%J>2zDo_G50(lYMZMWB&)lR`4M$VFa6Ok z++HO(t*l%4`1z&Fc)4?V23+Zj?<8H60i`=?+6UK%G*sxzw8zY{xb^1Cz0E>y5;U73 z4jC(lPum%aBn~mk$~jn_L;KgeoF(y3*g4yTw?;7kE5Mi|x4uzMn(EqDq|?|-Nr0D< zuIEfB*X7utWECYAFzNV)KF_{5K4(a?QEXaOHd^E9VB{S~g=MKWDPD~uek1;lRWck9 zNvW~0rj-NZ;kOmK+}P4r3ZB}OVMMpJG??jQLDL5iH|UQox9gr|nF*HsN)MGw6A z?7S7wEgIZf0)$avVbxvcsur%_VJ`D^#OOvWNA}i8fi(DS#1_J8_rCYC(96YGz%9nd z$4{^SavCt;N>586Bs%Q5Db5re@xGqET^pb7yL9P=p!d9Fpx?ZL^c#4{4)x zFQQeFtBemn>Z$o?Corw}qtGYLdY;mCN@&1~kV^$$?2FT5`1@kZ&a}*wcKvex+}H7Y zHuKOPUG#1!D0T48PWkPjC_*>mp;U5XfE`Y8hI>MWYoV%VQG3HzQul|B7xC9)*5sSm zt$>x(wzg`bm9WSBMc+8T>~tpP&%0ad#=BF^x#OcYZE^NZoqyO$z1KXuyFUAJhuDmy zezDcK=N6t{PvZ3cKB>jkl6R%>0R8FM_n#0o zJnn1Z%V~FqkzhRZ$}8FZdhyxoqgI}z;uwvztLlxsg?bM~^J}|TN`u$vKzghM60tOo zv(h7@;XDZs5FDy*A}*<~UjH(_5~kCxBl_OP&O-(xgjkdLxnXZ_2}oS^`6hZ z30U9#46j^@n2_@KQ!O)LH&vhx*D5Z5?;9&+dFSq;xw7Yl0?0_=afzD%*Bu^$R;wy0 z`Y+`MvCKAU|5cCt_kRzo0q72zYp>DzNh$+Y6H+MFzy`d&bbxH`oUO+kU`@MFFBg`= z^MV9A^==qo%xWd;y#|7-q|G0K9A+g4mamfJeIsL!FM0=NDp#+tW=Ck0g+F}xwQnZZ z^c*G{w;nWvR-n=J4Bb@?b_MXU+P=@4%((;~9g;_(ziZe0^dweKG^N#w0`#fI;_nC| zQm-y4V8%>OWDt(|nU?_EaRxxb=Kh3T1iaYvywHEpM1x+O_r6i~nV~oXXX=6der5`G zwKuD+tsTD|pIkN>kH$Re5XZA2gfU@t~}Yq-oFrT+J{lJo8(yW_a3@s1g- z8*qlHbubSjp}h05=tZp3*~?c$jg={1Hc%htWt_D9!r? zbP=caK_8kR);^Fz`{H^1yrRF&`G1)IJOykP%m|n^F7r-I=V-eV+ThsOCarB8M?qww zlogF-nV;%;54~WS-aG}4xFHF`yrNod^tT5LT;=4)&n-2hK`W1nTC9E|mn~otO|Oa> ztVq1*%1XOZ5vRVb(J;17|Ec=rvlMw37|%mP<$y!e?0U~ovZZAHE$FkRAyw}Y{vjXd zyI5*fSdf-QaDihbSM;8?_(O*jIbpDo^`nnX47uaIxCOydZ0~EH?HoKA3W3E*!Jhb>an40Xh%69R$X64!G-K z54e)s3T%la(|3@BzIQg~Vz*UCPE#~FF(EXvH1t{!r>3@5tA%gssmT;&8;nrFwmANl z0-J9mz$-4#P5b-(h(*ws^;R$^RO`DlC-;&NU;G}&A5^p9s(%wFGn7u_URD;R7i8um zBDn0)4+4x0I|yjm?uQm!o(Ls{F zjACVdBU8-!c1lJnia-tvll1`xVGE&=vuw`5sq8ZwYSt?M!Fyvj|+z zZPJ0JwZ>~1M0A{Og=*$cI8t?@9E5R-v!|;z^lm~cDl+@T9qX(-HT>&z&@Rt&9HwfH zJ*gB~nqpA$l9=3BuboV?y+!5LZ-%`x4Zkdl@U9>XFddFW;rz0D`21?e>ZMXiV*i^t zpbd%2j9t|AGp$SA1wkH~=E1t7e7ZA-esxl-K9PMYdA~hxV>86F3Z6tVavBg$O`eu> zg};96$$N=VM2v65zR(E@=fNb3_^?ez>UPUTcKZ@5@U#NUBU{7$?b}<5$)U}i&C5}M z3;plF_d5X`-lA56*q<-S+Bo8@k`VfK8}HP@Pq4A=YYTSFwGD8ODBWf4ntp(FB&y2; z1wq}g-+!{*BEZ#Aq(ByE)2kpkqU3uOb-uhZJpCp43}FINdGdZnE!Dtd)N17^Kdi6t zju|xu#sd)JuIAy#E`|B=E;EE?>q!OLghJJYGm$+y2605*rM zi0`m1p~(gWhJF&%$IMz76%c4Uv-mPhBq*%LpZ2jqyR+L#TLhc?>DzRtH}(RNR?b8V3acVQfX-aJ~=zIU_;6nR}8bq|EZ?Bsw1;@ zund9qPS}+egMLHles?Zz_ceOyRUccXRSx#L=@RKmPqIGf%C-xq^3G}@tgFv@5eJp9 zcrd6eF`QR?dwOQ4jp>j4mk7_(z@OrpNM*zDzt8v|Cyfb6!|bYqLU^4iRDw&2S$o4r zc*S-SuHb|+ZhSJ;o?xYyEAI&4PRuK?TW=#&*K+7Vj*`T18~v47ZS}5iQfsxVjzp}N zTyX_jbw}*GwKOYNqqeCM88MJ)pI!_whJjBTO%%45IQp-Cyflp)@-kj)5*V`Boa%n2 z9u8}&b6D1Ba3uB&SQFh4oEmj6U@gj0Nr=$w&0mxee_Ww*CDFfL&=lgEZ{e&@sC9Q5 zfzM2Toy%H(WsBCY>V(%d2yLlHku>qdv1kk`6nXZ`*xsRFcEi6W-zoxMTF|CSV(ZuG z*fu~>MiaaA9wXLzcAiR6#m@>2wK3&ax8;7z)#4)XNReSK+2T~7^j_Jql4c4{CP8v1 z;?=guzd0v33iU9&2~YhPkFJ;mDGu=+^E1<_v@X;#9xLz*%MA?+>}W@E%QzrF@fr4c z?y0xGD+Y);fd3wtxp1 zCbdaxqm10WO*yI0PO8|v(G7nuT3lI4FkHy`{M`Io(~z@XbGMZuTe~sV@UnLUxQQv8 zy!CL=rmV#FE{zMz9?)j~TJ{f*c#}kM{VMG_L;|k_G=z}SSPSUF;!ir<)*EeK=cP!y zT>Y>JR$D*DsAPS(Ys*^s8(rbI_Ni;w^tmL8eOdeVYKcuVrOM9Z{b!+id_jJzt3_AqE)Ope1 z{>+Wkk+owoo5BuW4I5n#4EMQ07LPe+AxI2Oyy}f}jipwMaIH@xn-4U8%8g4`CBu&% zh1#=DQ+9rmHIsQ#GC#Xm=n`v3hM(mA_9m8d#;MJNpPpq$?2OC=>`ADK)it3Z*nQ{P z0jKHE!v2aG;;a{^>!2_7X0<<-_=HV^t#-?9K4{?|CNA$wX~Exes%NXvcvYG94Vcw)2txPv#6i7d7K&eN3_93D^` z*sh05WUab&Qn$(ec(x1nOnk_lcX=^}sYD=6qb>cg1|<%E;gmPS9>LbDAYtEt8ZzTP zfbn$LKCDnj-ZZ@NNb=t6dw7BN4Y=YI654*Y*)LnnE(i(L*pciM1xvE>v7^|?gPa$a z7hG_;%V`biuQcNb7>k?cK9tx9Y@8!SQtLg>jQ^t&a{dYb?)W0XRU?`1UtspXH4`69 zDM&|(04KDMKVM0i7Qd(5jaM29S&4Rn7j~r0eq)HZYWtB_+9|mf)4P|vbenB&XYG?A z)*aZJO;#$feIw=_%^o@vntnsk!US3sPLXe(@dSs4f>Gc#Yk_!~w-`JuzJgGvy|S+u~>MmQP#`8@F++Jhl5u z(CcEUAbW1oi?c^oJBEe$ir)xz$@vZ zW0CR`FSvcY~V8Lg}|P_6=Fzv}zr3D(RDqEz`z@fGNiJ zj@#%&OS9#c2KCUY6x9g6bh2onshC^?yv#^bH-Uj-fvwgVi(*LPRwYp5wNhc>S(wOo z)#q6mx$_N|#zP+S&!NPl&{u+&LF#X8K1f+HtmT%!%-w;kEjV*&z+5JAlVk$S^1|e} zPXooWfkol zh+|gPfq2Q|j_(-IA2Qro#3@?!fxfQIEFUduCsZ>{TdAJYOJ&|){Gu3=%5Ym5*Q%>r zUm^JF2;ytQC68cJitICD)T*%fzI(%R+*l9nGp2*c8LAk@oKOFK75 zTtX;5r;?*z`UEk>!hZ>Td%vIKz*Rb>Dzw*Y7b1THOF-fFoZ#REbrj~fE*bLJAHM3sw~eNb$W5_>7v0vGOd508ORcI=l0C9Q@ibD1?4_aW@(((cn#Fu zdzbhZzT$D~p}Fv`&vh(){ru*A1$fL zo%uSS*DXqqppvLF#CPXNc-HUIa8CUY@l|I9K~;G$4OTF%A2%vCaUk7C=IXx9Z7w#Zcm#Sz3YT*<}^&q3{D1z5g?h&3jDcY8VOe6BE5z(wQTVT^8k zeLLdB^%WJ`k#@+Ae5axCPjxrjLjuW{KOU63WQ)4k6lhX~4(QFR$|RRaSq~!1?ps8* zBUoPQew)bDA1b$Xo z0goK|aeo)@otd)%xRHSd0S%7@G%kGPFD zj@E`rUC}KU#2rh$+fePfF}*%I4cFe})Vf1@djJdMItR^g z>6mwE*uwL}_e6)&<=Kz3axYz1Ta`0!Og-rpT-N~sM7l}}-(mMk*s|}*mMvgAX64X6 zJhc9$yLuXz@5h_xXCA5th;w>}nB+2Dq%3sk*#zg18_eQMowxXqBSCg@3ii!QFYKZn z1;$_jRS{J^yG!|!S{o0K}#V$UHdP^`r zK}q~B#mu!$4_IQX&hjGs;weVc88ml}A=%>KizY=lt3O^$Jjw`R3+p0u(P7cWt2c`v zUU(ti0)ALNPe2$6`~e|(Gd~6)d50qq2#4^W_JyBxR;;NOtwk`3uO2oL^$dv)&3syS z|0k*@PJG-7L6--ZNOgEJ3+I8H$eAEom_>s3Vzq$4?sE%^9P;dWOn@3BWDtcsKG2x% zo~~mZSkihnDm`gzqS-|v>-J#ScE~OkAFTY~@(k>x-PI~PL3$G1=>z`L3ji~6Dz(R> z$ueOXvW3|<**3MaZ=K+N9|p)G#5-SImsP*EcXYWxte;wiv$urEAm++3Qj9dZ&^UP= zEcvRH4@K}bC?@LqzmWQoF4&Bp7e=4-R>5*w*vI6PPbHo7rrJzb?isF`cy5a9{Ynu1 zb?L>T1q{(KFK1e2l7T{E%uJnw z7d$CT!KdROZ5qNM-x6&r-IH?4+n~(VpwXk}Rn({@5LAAoC5SPZULfw)vOc;;s4b`Z zc^RGOxS3mP@ufuWoNfIoeAB4(3}sF@?+66f^S*Ro%5Ig#cCFi+QE|Mq@Q`+osiu9y z_|!=sB&?qL_$U`$$eO#M8$c_RUJ3XvYu^<079KzC1?;6!tKCCD%?EVR3fK@T?WbQf z)Kk~gkcIDm&Q!tU{HfK+`{Neux`fsHC-Si}q?l3sLnXuPmDRW-b-AHq zh*STkn))yDf)}Ou*VcomwV{#Umke;T1Vl)o8||w9pFIfwJn|1200~7AYF4#cs!*K7(Xui*kS%Iume)Sk6)%PasaR0 zBwf2gfR3r$<@19;Q+=j`J*$psGc*ES@7|s72q~>SoDE3RR%OTxXywjZ;s%Wa5;;%k z#Z=C_%_tI?iZfEMjUYVZp#aJwrQ(urKLP<9z)DTuuM;>xs1*+xS!TZlh8uqp z!I3v`jcXnaDQZ01HAw&ZD4I_MNO@?GOKeaw=-bFvP>nDW@SV9|Mvff4LGtw)|4br| zkw%s)oLd$juFX*d4JtSPzIeuqb>%|)cE<8vr*epK5cj&ea*J;=SN8qsI?zdsXB|Wh-tiN zav_L}oHRpeAke{jPkSazfVL$l1H`nC08dlLXLb1^?~Fe_3cg6MNh@S)<@sW73*4o> zH4ezi9vJ}%61O~r+m#ztcKID%wJ%rhh}tfa%WWi6uE_)<3rra=wVPO#aT`%mUXrMX zJb=a#8QH<<#Xv*TxQLxWDK`K*qu590spXUjzvAaOv8Q}{h&E}(?IQ%P+No`KMxZ2t zJ~5xSBV00NuvIDgL?{YKS4eM$<`_vih%sojdYj%*=phsEzc|Tx)p<2<_wJVwK}bq1 zM^91H0f+Z`ib%R{0@=~b^SSzOrm5s;&boP5n{!1v^^TQrWE4X(t=IRg@`po}39ft0 z*p@8p;=6a|mhFfDBe#+I^~A18fFa`V-osQ3m;)(ZFE)qc<(TKhu0rz^ge`7F!I?HO z$!cHrxbERwW2y=8iG%m)5p}=#>(-{sT_m33Flf|)Vawb$r}I%Can}w79gn|-$TQhG zcVuTM{1}YsSbojBjc+u8a=(ebKXq9~9y;&%`hGw#C znT8`Fz`W_%5$x2q8GSoi$LWe3Dj8?kTHYjRB%NS%JRIH z#XGZ+g9!NXm)VGB%48~z&UW7DZ{DEUvJ-;1Dw>Dcxi@R$T*F#^EHJKAu$`TOx}K(G z%FjOE94VpxH;ScV-?-dF?U`Mpvvd{Ed3z-+rS$~OGbJVEorSq43ovX0&_+UG=9V-5 zEbe9Ev=a9^SocTAAA2&cWL1PRD`f?C2k$7+h%kZ!NzMhK>}tkoFYdX5iw;16r((@v zGGwP2TWzujzQ>maZCZ4<1_YK=HY}TtRJI%aeu~We!jDLeKhTt3gOuG=i6Im~;XmYR zGHT~W;z;7GT5>+swwt9=Na8CfdmDj;C#-kJ$p_xP*CM)+{u+1TFo%HfO|U$uFqIo0 zXzh&^23{OSM6)K=XxrhV>gT*D6v4U z%o2uq%zo1U%6b1Izd7&2oAWFdL(127YE}4a02}L2($N|M_r=5!1d$Dv&NS#mmvoc1 z7i6NY_O6}1&m_|MB>hRb^J{jgek<>Tmn3sbd)Ixud1)=dx2YF8 zScJ-URJnrCvzuG{`Psc7-G`9prbsmCPIB}h3+h|3OeNNnACc%S^JQ5O5TT1p-e)AD z^qJgBN?<+2mwmF4R01c$&frk(VcqP2AAWd{f1_56HPKv^t!9dou4!d~`G~mTMj?w# z+M*k{r2~5CO8fdj3BW6#G**nQ7k=!Tbg;36m`lhCtejq%Ii!8+8cY{9h!SOlGZ_o| zss{5S+$8}N#Ia+yNJ&J*^T;yQs?hj{Bz+q>Xz*g@Hq@y{=l2g!GupS?tj3A;xOmF2 zn-DA@CVIPvGM1d(GDH7jq86N4!G#{=%Enzu9o& z%lVGq_f}zc@;OzDa%v0s83lk*pxZ2ir8#zT6eIm>6ElO!O+kh!{7M4WI;*nF4LS%7 zX`!x&P!jQn{MfBZ*~arp zYOnL%7#V$8zK%g^*&2!0>f_+nq~3uU1VG&+@2yrul@7JTWzXy2S?sh ze5?_k-lbA)X362gvfX5>&3wj4;z+&qfp&)?4SBx+QIM{@{9D)H@_Hfa90C#`I8}AX z+U+`U9F@eM%+DRYXBZjD2HdDRZ$PuugA~KXjS48GlwkN)vJA0uW9%vkLx^13^n?%z z*<4E9YB1otqjR%>ap`zFTbm--*&7)V_``}v*<@^G!cYwp8~TPXEhppiolMpT;^YQv zERl!CuO~FF=SArHYh}q80V`(VVn|Yg3$CP4zt-sva&nV9Q79(=CmzY5xDn{W6%dLSW2c2k&|~ON zq65}2jOr_X(V`8Z574cAzBYYhTL&@wc@@aPEhePSZQ3e)E)Xla`>|n$Yi7W*E(7jl z`*h^nO(kULxG)mBv@;Dpy4yIIvarJJy)hpf%v6hhkmG$*^I$s3C|n_iX!!u-&gRG5 zsqi?9n(y4Np>GTC&Td6+39Sj1BY*jkuXN3R==o47`C<{@YPL@U_c86MMTMn+@nV1<8j8;yt4MD48}av#O=z7=p{ic}oOV9nQZfq?+}}zQAWMYmwO^^`$Yt zIro4*X#&G9BHi4*bDKBVl^-b`lro9}sx=ckd`dHg&4m(#Tt@f@j8*nz|eB<*`kUT<34!E8U0i9e?sF zu>4uRA*?E3ngYdY8_7U-1Fn-a-qtBIb#CRzxh{+RM77(it~pIkrCB6ZY$P%|O)odNl@(b3_r| zAwuh+L@mS#DeUFsnv#^@f`k;C)j11p*5(~OMr)=uA*!`XW2 zUt1eTuG*StA3Gk0yYLVpE1{K0M+4PWr>S6wikm*?`fG_cd0#mCFxYI8}V_BvE%Vw4A zbDg4$QFV2-BrQGJ%A+T9FOgYs2yT$;XrF4z$yhCbUeOaIoRhJ!F9V&k5BUJTVxMS& zgKv)gUk5A2uA@A|I2ibp|W zo)zw{5`CTY@rWPQKUX`W=Qb-;hbazN-uuzxqp=y8TH5)s5(yLa^-Sp!@Ba=|x5}_w zEZzQKQ|WnI-bx+68Re>(yYXHokHX{Wk`onD(^pfzar|%DdY8rLbNWfeG!L`eqvgKS-y zu4P=#9g^sS8lP&wJQ`0)FQq=%i^>-@Q=vSTl3P1YIYU+zpI000v&ojhRNW z`AbR0vqps5ii|mR-SM5(a-=6r99A-sb)}GEoq-+Y&aD$=>oeCMK|dS(39-1Bz71`B z64b3(aA-bF$rJqiP_2u2-8j;^Y08&$+ofGMLi$=u?m)GY>Mgy))laKTmHEc%-5o3Y z;D_~U?UNq2lnND%{FWr+X^V0XzU8jT5Z2k)*#+^J2P4{a?Qns&MNkw@8v9ZIfFnNx z$AN&;t%;kVwU2@o@SQa@4#I1(2c}C}09R>0XH`G<;b5M2*>X$x?#!w64HPtQoil_k zM0cM|Pqs*Ye4FW2oGx{vLpAn`-_~%*+j5UU{cHv4@eXCldQx>MyL9`)rapsNfP9k~ ze{)66xPbp2kFl!2KQ3`%0(0L_l-VEWG*{2Xg=nI z4q0b@rD~aeXZM9`##a$bbEq9AqO!Tdjjuig#wt!(jYbxN12B4b?A%M+tez6L>y*)q zny;)b_H)PlB@!Dy2yrK!pGVld&9(#VV_2Sj#si#zYgr(yjB!I*k)x@r(UfU!R-dDXL z*=8OcD>oecHzheCIq3s7rua5@hS3o;#A)KbAwe^FF9Tk=)w1){LjU2DiPKa9k+Op zQQ!MeuCtMg^jo~UC_C&UMm@jN_3;K_D8c>5-22g+OT8o56TUKGO*x~h{Sl^t;t@V! z1N2jrSHg{Roc$wp=vN6jwm6r>TDcn$uR*spqMm4sLdoTr?nq744zbZw4@o8HCkk2C zwgYHd=mlgCMUkgdVTr$@H=>gH!mcYJQtNRVoyX>HBdFA|Z?-Zpj;Zh7ii$KoWCK=I zS$r^`L6$bR(!JwdVYE`&u={>_ECf51dO%!=uXCp7yMxkIgo`k+SSiS3BsA&Mdms3G z8O?Qicd-*b(TF$k&S(U`;-HIOP*~V(smeV;H~wnPKb}no{t>=z*(tSW*0^kZq*HHD zMQABbw?vY*Yshj*U^aNmhd1+ruaVu}{wU-jbht5Vq_OR%_81YL$MXrEzD-VdW}V#o zFC_+$Zqgq>EIp>@U@OGPv+HJWx@4nAm2TmGt zt2wJ|>CItICY)ktKgp?^K87bY3$11~OFake;h6xSbY zIdE70<6rYL7zBi-Q8M}Gly$AeTE%hK-CLBE*p9bznNJAQ$TFOHr{TwW3S z)oTePswWgI>G){d=yLyDy41OQeAKb0O|fo0Vo(d9!R*WSZDcQoq6ga}yNP#6xtIKj z(0O15rGC)j=J)sa8d+)a>V|Rp!QX$ThBb)^ZnwcVg&m_0o=>Juz4A4%y?MLNm{+^{ z68HqEk^;a7qFj}~mc7Ihc&vHcV0Rx_`nAMkBR|lPky1xDfGjtoyGv+NJ`eAqI%`&Y z=ci^XZm;w?m#7k9_NR$pY>k#=2bJ??jIwBd+)ti%FkLUorz;Cejai9_!{33|{5(xZ z(%Q~u0S!M{P=3F=SH!ifjI-crGWpBTQn^-8M_)FN*R)ASHZ8l>+N)m7nQiZASUvF9 z@s2>?a?B=lxNhmN0qu+9S^*zw%$5e9Pe;eBlWzv#e~zv{fgM8N5o`1&l5(`#n%Y9XpchR zIfB*$0wT3$D!1;}Q=$Khlw0I~`|fDKHllk0{1lBU5~>&&m-hxa&$6PFqf9Rr`;3^~ z5`hfip3-BuXN8!Z{O%#HUe0#m^pCBl(#*gtt@O#*(p)P1)9Dik(_UE?X2Q`54beQe z!|fOHQolTfLDd1fC=h#TwSnL6Q*-m#$Tzd!TrYOF)qIDaFVuz#T)^p}d2|T=s$l&@ z8hcz$L!->sj<=rG$+R1H#{J81%rZ;_xHU-3CHTebkxId-h^Vp7$9^So}usL~`OT00B6=w}$eYG4cLvU(Bq?a#Lc*Z*Ud z)$1YbtKfMo{q8vw=@K&}`n{ej&(zr&b^NeAAKbBPF9~Xn$fK$N-T4O%Z`9aE*5}0| zjEHEm#|6dddN~!iNuL61Vq0?rq0hm_)3-FN<%0J?n(}DXz6#MrTU;_1eQ~pz&_40t z&WiFU+@4!p6(Uv)n6$}Ijg4;K-3`*#;s668Mf>6`%lqRSAy;W=`*odxqv8!>RaZ1g z>>^Igq#D^b11KU|IC*ImXvc4TzZBwgdDiXrobsNtSpEZni5(rpY99cRqEBHeVcz*d zF~5r8{C)Ez&kyjNQ#i@3kr6@YPHi$8y7}Q82@{~WmDa$Z*-<&~FPpFOn#fnZK@QJ+ zu2MU&vPKcsoQ=L!tlScC>atHXqK<0t=588=0lFe8C5~XRJPiSnO?*45LU%=Z4?)3{ zpXZZA4&u9=zwMuAVTWv`X2;csuPmeTCvtdIMJy0zK@RTIAZo@q4^&9W%D;U9d6 z^uCg5uvO*7`COc&j4)nWBxwo)-2I!KOpBL#*Ti+l!k%5aOdRCqoKx_*E*D6tYL*(e zwEO82A@HyO8fWYmu@IEK2%_I@r+;Z)|FiKUN*V(+i;~2MS>h6SV7jDI0UgVX z{C%@4GPfgS;=|{{(usK&u*BC&Mt$3`#bf!0v#++swiK%SJZFO%#IgqBD08sW#(uuv zOCf9hRhTU+TW_LxZBpV`h~KKd_rPtpWGbP6)~l(_T4*wu!5ScE^21=@+jV16hqOUK69DF=^RrI{V&58U{uDYsNv_cRl{U0Cc}mp4Yep=|EGj9P^W+ zyDReFJ!4y*N;omKRb#Aavl@}&wJ+#rv?ftPs~`;uJ9w0EAN6$!Y9^n{U>WLc1E`*Q z6hBRC>zm!l>B==;1i-q0_#zEKdL@yQ65uVyKQVU<1%iod7EW5qoh4zE73Q3(aTKdK@;`U;sRiDAvvz+2iwGRDBCbfwAS| z7t5-d1`}XY-#tZh#6b5jFhx(f;qcYQ`?MY**IK+ZlzK?(V4~1&Bj6w>{g=L8jtI$( zgh6?viMz5;OB_~?+6%U@^=2=o|HHs6^|ISyE?zYTzTw)=@R6O$FViGNRk68oQ*KOkN0K%` z1=_mX(UjvOe*GJgi+%-OOxWgM@&7AW|9O>D*_=|B4y0tjzGP}S)3;$Fj6`dVU+Bsbbm)jnJ;$Yr}Y=r`w+eEFzq(zUw zO9Ky}4Z7_xog_Zj;Ax{7IIG(#KchAyTRaOd`UMobXI`u*MKVhU3`gyhHviyOBV@yG z@0f3!{{_FIl=kUB_(QMW$~bdaKx^W_3u{^q1?{eOwI<4}HY88^)%q9=2aKOgXwTdbV-BB#G?|F^r~@`9VA*EVb>HyC2w z)rc0@TSpvMpWbq%KNrL9PNsrKGp!5b_qHa-4t_V=VDRzPu8hRR*3Vu>4U|u!Ds+j+ z)8M{XcR3=V6NA?Ewx_s!E0|0_odg`K?Bm~Op$BcS3tgS3p2ng3>REq2n`bLz2y%<> z6$&XDwj!<`wE^NiNJMsznVGx`W)x%S;YR>h3K%#atuRO7G=)dpZLkga!3&&~x|2U5 z96_wjpcfR@B=-V7jEIBi4DeS1~C23Vi%D4{r7 zA_pO0&bzegq}F<9VeL~)PaTG?EXAZwwoW+Hv{$NP9;A*65E9=7_ocMhPk6Ni7_ka_ z$~x07cqqpWgj~#*2EuUaE2Dgt1x7XzjWOL3xTWH@8RYtdn(JX&%Tqm3oMDm7 z8g4)4ZPXwrr*2#7) zhhUW7N@sW09M}tqfR7Z5HfGXhZeAp2SO9L$xx#CoI8OD^JmxA{Jnp3JS-$j^La#Pp zERNp!FNj77ZBOf1J)xkW0PH_sB`~Rrsj2)=;x0844-zn66Y?JuIk^odnR^7LCZky; z6bqG&tM`0|Cy?0V)kG?i8U}!x3*__R5b`)7h2$a!Kpw6sccS16A7^qsE#}=dZ@C|O zoKNOhVP-3hx~u9zyIiiE4h!&-pxY-{;2$DHlgG9E;H3SZY-9MoFf(_v(HYG)0KEq8 zjxRa|Kte$mlL+{?(&NMh)<8TCa~Yu^5KQe>l^9HLc&?|*8yTVF7Yb~P!9SW-;qgu5y_C!Ailx@fsK%^{dhy8Ik^0Fw)t<3cY$8^gb3GA#gK zRtnN2EMz|vdn_qlyR24`t99f2MkOz&!dj&KGRold)1 zNM}GY+00PBp^l2HL2&TpNrS_nCS-SI=%zt4|J@do_OG6dhX5-4QTpDcJ6Gl3D*}U8 zfuSwAIL56F4qt2yc+!bex>;}PXnUrD$8p(-*D7IN` zu^{pz7Vz6W>QQ9{+z{292mF`m)TO}c) zDm^LDwGIuN;hD&~553fR%JcyxvUygQLOCBEj3z~RV-I8xVyOTpwI-{S08N7i5L>;I zlUG_suCiqH!a4`}2fegnY2uh{Z*{Q==lv3=` z3_xhY&xR0`s59YqUr>Jz?y6k5y3X1saB9IS^-ph+7+xq4CFq?ASHI3sQz|ecT!0H{ z>rbA(aHGA|Mhp~)Y2hAu99WO-ig4fsXspf4#{h6`E?8rd&NG*K&_xr~_)KiDbzsn( zNdLvY__l?brtM0pJyL{LwukLq`98xxnW~|`WKt&%C@v?J$+_m*-~RyB{zu3EPXNFN z(f55wlU%jZhu)OhY$rc4|urCmy~gHpaZ5bz}Xh}CC4$2}YG8%jb;c5g3{@QZcI{&O>A*S{^S z<_T=@%(N78@P4ET#hs&Dvgugf3rtTPY>Tw5Wb_aaL)g2wYhvqe$jSf)J`VdMu!vk< zX(C%(lLLCHk4Oy>Z_77`M|)yD*Ex-Tl{c;WB#~P>h7p6@_|dIsq`#_mDN~)46&4N_ zz~M~sosTy;4;k{OabWQkxBaL5FWVp*kpGbaCHR$Mn$TYhfp2ciUtCXxanNfrJJm57 zjo^gX;bC!nTK6d&a?{XFzH;FDVNdWH zKetQ0-bwh!o#C|OH~RS3h7)|PUt=4)eUfJ~$1L6J_{Fmi@=CL|umQpePfTMgusxjSsXLpwxTz9M^xFp*%6lb1H|AqS`?XSAr<;PD} z=2ts@2DcyZ>F$4>#ouMXKM#DxNFw{fP0V)XL)wuYbhKiK7QI34X#jdePC{J8yUL!= z)f{Qi5;$WXx*2#vb5z-oBUJi$pH1Q=tAixsj3HtHuqANCJl|`GNfBEe!j%JzH$q9T z`5^yg1WCCojK|oh_V7@O!|3@Q6p+Oqb2!pSCP0Lg#DurINd@#C41_7|RQ3|U&KD8& z|s4#8o8xCKXVo zHE}Y%11oqb06rGzaRV28fwS1%&)qvj0Ur`Ue5Eb$1{=zTr%-LVm+>*hjk< zK3z#rCE)hOQuvqUV)4-1Q(7o%G0uf!H4~Rrb?ltSuO8vU?Q?hu`iEznBimi=Hck@j z;^#e6IUnZJXDV*7wY}X@jTjyld4@_s$3ju+%_AB6Cg1X=v4G%uwrMgaz%1N9f`UQd zs9&qhaoDynr?}BO*kiJxZT(^N@SdS~53S+)ZhkXw<^Z4N=mKR9f*TRo3-d@Pbz}AX zMR=kw8R)Pxgtwb?6|q-Jl?`$zj3|EuaAI{3(a6mhdYGHMaH~6YHl_Q@yG8 zWEZWhpsj3~d4nxxt~lfQ4c`tOr+oJ1o&R_+(FIOai+R3?B$5p7SOH`>?a%ErCi|pUin%#X zdz@i;%9RL#D*3H8?mQI3v3Y#?M_zDg!YA*V!A?MG@=LYDd=01{?Xh41tEHC1emMzEkGU@{IH9L1+^46y7lOS90qUMe7drj5SYMZV^?cinG0fN@} z%A*Q`(vMbHv>(oU?Q}>}t}3ynjv?cYoE2Fe6^sn=BvL@nYBC}?{xGGtm(JWqy~l(U zR;;K@S6@P4m=%;TP+G;+G`Z9*0h87|{EY zwzDxdrV|(9fWa;K%^TYu{@Y-J-Mfb^IvNBbXDRRSd>ag>f zbgj`ALraWoZYFK}KiHcN=(Y){&sS3x>41mk6QD$T=g%Y}H$oDJ>GjCD{S4Il5n+G1 zt%mB4$L7uK&+W#-;NYLc_y2V)`{ieAY>HyrhpFRn(m{pbRa}SZCE|xJKMjuT{a79b zb9d=FFzs0GWoNl4lkvXmpCVUp(Py5(?nv%_GbI0MCtVFuet8@po?T}WP`TdM(2P#A z?Wyc_RtL6GY_YfXEK02RgsEh4$VZnOQ9pHHf4xUC7VT|&yeOD?ZDZ&^eg=+n1}iO+ZHjU8fycjq*c zzG3xlev&ZLL^w%oxBvfW-ruAK8LJA%fWLuKA z#C@iHWmQHoHe=xNV7L4H8`VLM{|^50L`S={itSxHJ}-kSio8pz9#zkaOFoR%*|IxM zExFnZ?nF@JJf+>vokBEDZ|XEY&?9FkF-Ds(;B(iM6mG?diVXDVtvL^jo>%9*zZp18 zQHBSBaU{5Q0((uw_qIoM?nA#K-sr9}%pb5;Q=h}bie4-D+icw_v+UoMqke)XksY$w zVoNa$$uOE6qtxag1Y!&==(qpSMRUCKi2{Yo=_M(Ny}7XBc;IqHdi>s;#gFif_QR{N zy${Nu8+*4SwXCgbeh6|L{BN}nE?aQ_>CbU05`({dyI1b=xFdEzFFS-PjO+VCsJxL6 zYZ8s=z6<-~ON{**(44OaIn;P={Q<1Wl*xVAAMzEtla#HO5iS7373jK0YN}g<-D3PPj0UxM89|my2m4 z@+78LJ?JYzA(#vaE@CvQa#TVI<3S_hMOutmG}Y&u5;=VCoXJW%?|UOsE-yRS!%4i& z*RNwEhwUXy=oNbrl_eAAoXo!J1f_X3B*E4b;{dcrn2J;zRbf2(f=XeP;pLr7VSO|j zeFV;58eF=xPIKh@1=2Nj;+)$;hk3mq+bP6}kh^$+F?-z61%(uB84N(6rTi|xOjfLUwr0FVSm1p~;*GMP=X>t_siyCb4&w{mkeWHHVJW z#*-T9akTK=WtKi=!5(qkyxNK=`lP-owHtv}pph(G@KG&Ox5B$T&`xi;s3ETh_2~qi zB3IFz>!QgE3bMVfd`~m93d&25ZZP%d(parlkr>qZS8~8)pIBGv$7j!YI*3i|H7w{w zjFfyMlTi|v>uOfYyvAYh9!a`uRemxS8fMD)+G+Ows)_n!Co9#^8bdQqr9>Z0do`oz zyYFFc?#816bgq4lbGP5KJ#%i4(dwN(ex6#;|EArzM;zwkB-fg_xEH^?};ozJ(_TVq~F-myw}Y)N=eIiJRN% z3PyMS?0uekdR_Rtp`?KczI;ZtKkCucVqE`+G-F5_L?E zVa!X?{sS@LtrhO{8=*E+25Y}OWGp>YU-z5uwV3IHVaGaw;xt~Q#evzcTRI=rSgj0{ zs_NCZ(2KVmXs(b92*9*tQv^25*v{{c5*G*Jr>&rgWjx(tk@=Xw&F+t8DPvP_O`Wyu zL%tk4dJlHyt^e{F{;Om7Pdn2pEHH+Re0@aPqT+tMrPRKo6cav!a=R|~WUB-+I+~`_ zr1kWvnXJb9TJ!jEO-dySx zAaJe43@k5aaC{w(6Nwxk#Hb7HUq$fiyPJX8TG3#N-ezm}| zw|I;lx4o3ZbljY_pN$}`C5~03Tr#2jxU4alFBW|w$(c}SKvX$9_zyHFLJHVcB0?jP zQYfH^B~p0opB}2S`iN?yDE4FQ@HW>4H(jYW=--BB;XJuO zp*PjkG=glXB;B4Ns3P!d?S?wlZG9k0O@ZumD)lGxV7yUCNrL8EBNrXs?(ZVzwkmMV z(|1slFl`($T;%w3Re1rINsv6ymHq`xBta=C5HrloY+~Spbz8UP?L>1d0i zP}7+Li55jmdpq&BK%6}PrHkG1)k!w#kt}UT4;I}oH~w09QxB&UHHEHsCtU#z5vN~K z&9QWrhctpJ$U@QvXy~fUQ3iXwc?p-LaY__S-B)uB_vPz8@&WwX@k=1?utV(lvh^V| zw`?Ph-(hxp+-uCV#-EDL@s%pbuvFV5Y0L4Do+IC_G5NQB)G*OcoJ`4Wr6`iuS`w>2 zG`0g`>N}24`=tY-hEoyS4DVkpQNxa0eUG?nOD_+l$Y-(rGiCK zl%#~~e^$4$s1m#yGYYesF@~$sm>N5SojW_y42z`P_QE;iv_Qh17NzJftc*n?VXPuG zODvZ1!)_df`-{*cZJc8d&v&;m&3?v+rA1ns{jq`}i_!rHqwU6hPzlwPbTL7bYC|1M z)dB9JEci`W>C_Duh8XfRfQdme*nRx5dpI~Qi>fA+E9Tx9(3xl51_{hnDifg(na`1^ zO_>QJBfB<3*AO-a5qh0>zv<#8O05|BlTWGqqzmMd|3RAp4#DHa$eq&BEP35#!r=d*ZfbFJEZrgqO7R^jahX!>6RfjqcU*$Y$^I; zm`XPjq?!k^rc(o@&MsDy@S78jPlUM$Y`3xSLByEeLzpNhWFc-Vf07b=)4B`Q%b^>p ztt}=a*nf7|CuPuMc{(+!k5!wxyyb*&JciIsr7-DvVrL45KxoJTOsZ!9GR&nwS49_^ z=4h?G%1-ZGgi@m>XQh5uV)0DF?c0{C3oQeA?*s@T+xy(m*t}Jm7BBTX+MOsElI7$4 z=Zo@a#u=_1I4+l)Fln@KUG zw|8KOJ(Bs%Oqni1>-M2tc7Q#vcY}{oE29kTxH_in@ivbekjGCsqVnDycCOyUxp}^j z71&0iyO^m7kqoNd9y|<}B_FOq^(H%;Rk%wA85Cm{&R69{bo9uq2c&v24nG1^B@b48 zMk9~YrxgZHwAI0fTrQ6msIP3DXZHqOgqry+pRaW8eXX1exMn8ee3<>iuOkKhAF_4A z@V-@VZl>APsFaC04*LIe%skXjuWQp(6_!!5bG(@)Hp;T@tI?V1I3;lmuDfTLDp({$ zo(y>EQDxA1W_4B{Kxm>0YslB~gh@l*n3xAm&ep`-wnRq=X1IvFsoqxP5T-^^>i%jj zDX(w?kEN^EC()0_?9R8D@MC%9GXUtcv1ZP#I~6j-9-nk222~enzQ57WuT2h6&NNse z?c`)+@7uJv`r51GdQ27&cTwH5baKrxbaqVPp5dUU|6WdZWsv&=3Mlpv?d-K1`#Tu4 z&Ayn$3eM7>NZK3upS(idxozRoa;9n&Sb3B>y#!?gD?O*VeI|g#7xwA;{0+c^+ySU) z50i8C@G3tR6RB*c0j!j+KlqL2t$(mO_D}*zQZV$8dCb&|BHW;e5=+qm1???D$g*9w z^ev(awGL|Sajrb(sS4kr!SLP}d+J4pB_7U8m#_45WoL%L=?GDEoht1Y>ga_OOnuYyl#pvq7-X`mG( zuB5eC>eYXP(~7&EEouGb1rRSlPG&$(dMCk6ZMF(NJYDUAkJkk5q&z(bbZ%2;SpT(b?bBa%t6&pIeS6fxN zqv)J>DwgpIw-H*=Fjf`N^{p=HzXqi_Y$O#8Yx@*gFfwq#?J(J zFR9+Yd63Oj7~}SgYGoD`$guAseQrP6PT*wBaJ%zm2~lVWPi^q>EY2OX_D3YI4F0->_YO1h9cmqUC*nZT-ej9qPCQ-s$ zUQQYolqG`_jck>m#k_m}7InX)0pQF8UST|)Df7$l{Ur_iPwn$}HMF7&_v5y#zr#uT z)C+By7AEK*hSy4R!lr_Q6kj_KWs;K!3T;KZPo`< zw_Cjf;V}bzy-0@$Fm3kKQC8=E+6wm;QD~l_y)U4VTRRvY^)0bD3q>o#@Hx!(_3Do6 z-HrYmw)*FRj}{c_tVT^)(jph;pMp1^Oz3#g#frc!xnImPLcr~{)3v(iD3nlT7kyate*Kejww@^+7sK@>vS#yE1V1vK zSZdq)rZ};?rJlB8T3Z5o}4l zHbpSylE0loT+IfPJQ#tQctJqmXFhL$^=_b{KEc-0V;$^G{|W70Vw+O+T734; zM`=3KH8s+%sS>c*D6RPh^_t}WSw(+4*UN(SWqG8QM3Dt}HL|at9`6fM?nSLf897R3 zGsIT)1LE4*OSD`CN-?pXojjdJL<0TQ#WI^-?Y6H*oSfwL;fkg)bdWbS(~t7g1egSH zv&$;bdmHKi@5G=~UkF{s%DaXFVB#vQ4MV$osr^x5$|m}3_PDOkozYI)^-dw%T`h-u zYz&Lbx((v}Bh&S7>N)X4(x`lf1whLD1%RDo!I56plerd*Mr$MXQ20K^`!vqYvlFeV zrIcA(umLL6yl_X;B-%Txnyc}o#DdlJiSZ9fb|yTeJiDupQc(qMU7y&<2P z16?7)A@;={a*AB=q2F07zmHjO+Rm_GE%B73Z| zqj@=b;6HcxC0)E&`==@3Tq6DeL7RLtSEyj=bH8hkaegoW0G zLxm~am%b4GI9;9u8xcI-!yB>)wR!VF+<_;;nM6<7f%-(|Rd^B0@#oQ zdQ0Mt)WCjmqJGM*VmzRC?&z2J*}KeBUUiF}?@&$85j=-$$P`P5mN`Vgka?6hZ3#{K zRyH&2P|dPmPa~_=7_J3B7;uK(Z*bH=CZ?wDE=U%Bx{UC$oVv29ew8q*)}67R)XwE# zI)u@4;fW?^-4j6AnsJ=%1qe}RoHr1L9yzhFAV0(gzD&N=yGra}6LwBP9ugERg*P#j`=lgs2V#6OdHlDva zRjK)y#8$(fI9>V)_-wBxd5&%5aOq&|Wwf`dzju?zD=cT^*UVYW*3E2yzG*?8Dh-If z`uVaC|I|PL6#0Hprq>q%~^b-UEzI(5Je=$6FU7~cK#C;h9T zIg^2bH6QS=UL5^Pyg!u}PJx8a9U!T42k5un6nvo7E#Y?F#le&&^c|l!&M4nw_ntMf zU;N9xah?@dk#9F(_k4Pf>r@$tp0IDMG96EAFowh9+49FkEF{)R!J}NhphFe(TQ&cLneS7Z&wU~?_A;(~1>8)CF0|hvH$%dGB;>#4#8hY6$%4))2QRDjMR zQGWIOTLxf!>{gmi?)OT<4c6nh#gMHrY0&6%TIBbAYbNGW&|{HqrSWmIBTf8(tKc6C z`H91;wC&^Z)9-Z>zbPXBzTrL^-51!mR-9Gx+PN_?)4Th0@MhG$g7S0lGnn!*U)A28 zcSxw`;V~X(fgOr0Vq|ls49wX-@J8Uj~!Qn%F;O z_*G7(xIhg(O5S%``~M#7|MQ~yPRPFD0;eE3doc4LIV;2JpfGePLPjFOzAkty9URSY zr4u~J5wy}M?QBp{SDmqKZkqc^*G$Vd1?k{a;8w@%%)NsvK?Pq2qDm#RGB{%`Dot&N z);H#;*w20$tSvicK~tNv5K$>p818caM;+agQtR{B%YtahoLfR z=!z@KB&m{de!0%%RWgE}6tf6XLjCUnoXaYG(K>E51UZ9`@PI23*0Qu(MnIG%Xt)K; z35Xj*rosyI<%X6x9PXM*(As9Y$avR|)wgY8B~Afv0f%NQ3Vws{%`mdMK!8Y6tJGc=`UE{5lP9_ zJ6F=^I$UHh%UGV2YE8ejbbT{7J^VSUxqnSvHFU_)++k=f8O69%G!L((Toi@W`M7I^ z(!nZ`kTvFs$C+MT{gJKa1Y$2zU&nrKJMT2jaR_`{6o*4M`WMa(qtGE<&3qS3kEvqP zevCoC``oXk_EkeqHdh;M77fKs4$!cGJYO5ieyoA4M$(@BwQ5Qw4}IRHJ0nmgm4cEA zSsDlU{*pHsz1Q#vtFX!a8G}xTIeucARW%cb*Ui^@86Foh(D4tE!pXQNYp3TGgCJs z8i5sk-a%^Df;N5P#d2^Nw=HZlMhF()?DIaFMmqy(1Lb!W*|VZ?H3!q$m-e=dmjelt zh@Tr{Tj!VYN7g0iSNonxaT?!O)R~qy+JflJ?spwh^ii_A@FvwtI>2rpd)CyOiWfYa zwcS&}BJ!fPuO!3cT%_R9;2!V94}5!U(>*vZZIG>2kB)*NZdD>7C8_N~S{hrYF<$cMMz22qcloELp@OyAyAujTN4uSsydVKi;AvK&YRr*tHE;qTyX-$dwd=uuB#Zp8+ z-R;WJqPseJ3THuS$vW~Mi=l6BszAeSKadh?149}a-&#+@F2@l;bs)K>{)c-FE7V!=dfZfEi(cqHQ@SpKPfy;C_0C zK_2VQwugU;D)U9$yvkd1dnca5KyI~CWTM&_C2I6U0jjjPD?f4sNO9>+CP_jJ9H8 zl`wN?UWSasBfyX7!g1X9YXMP7GuqW8+K;g(H2ZeWmEfEjtwMkbHfQi-<&#H!nbDde~1M)s0eIE3h82^uk?e8uwD-ifr=&O4A|F(ht=PZD{2d1CdA55w6 zDt`$2e)F~esJnn1$MHB~xrzZC3$9mt7wTBn4WF*f>37$iI<<0dc@Yu)JF+A5a&_}H zN&fh%0@Oe4^H7Y{DPTMUanv85hH+@yaHDtw?H$bdWYNH+5Q%fEfe z2P)sd9hc68;`A7~9cB=@g1i7veJu|1lYR56oEGbeC9 zbsU7WS2(>M2j2S1=_ShOX0;=ge*e!dWCQA*P@joyMc}4lotSxKYAb1(OEwc`^vN&X zWtTduNx{Y!wazUOe#Uxg-p5OxnxH6En-)(BRDe0VV&&1qhm;B{ENs9+oT)cqF3yMq zH{KB#@3Fk*+SA#ce%o5U^Jv7aM6EGlN9}n(n5A?2VLJ8%d?v2c1NCd+c}(%S_ttv6 zb+mo{-yV-&pR+-W(((AO`>w`6nqqu!#0lDdaoD=HIw{AKS}QHNuYqF5jXeKZ{12f` zwX4^Km4-0;UPiyHPSA*+@w%6WygRR6`xD5HRA|$HA0WWUrQcM%X3NwVHXRLMrUp%~nmN zw4Ahu@ZGkoogn_QzK7W!%J^=#Z@`$nDE6QqJ@#-2u<#3uQIvQ``mo1cz8mhswk6!;p2Hp2R46^N(L9^pF)7w&^y<+20Sn&Yj7ks z6g;T7wZ|Qu381wALM;8koW+}YTiF>V!U4Onvn4`!IV6d{u$2GV(?>+M!X)2Ss~p@- z#=SiW=m0_kfQu*zB3X@LKRL&Cos{ah=S~J)YNVqr^&EL;mk7Yqjw}3BFQoNDQff zL}PV~ws>hDq>KrKH0UeMn1Akz z{v1fiM%(oTuG6&}ON~rkfMtPK7x?3$vgO3);F0g#rpKsKSOV()i3M+6U0s@f(#?s3 z>`4WmEtqL5+?`NtTKZi_;!}X<7eg>LFpi((g&!2$Z|~ezAsv6?NCQ32x=W%|0=;d2dv4c5^s} zn&81BpHp7_1W&HuZGj54Z^m=`%=e2gxA^`nQ?H!ifXJ!k&B0k9_$5ky6r0Pe;bn{+ zTJ}ABp*3>D$0G*sj{`%`TtLoPy|}r#lWr}K7}{P`hVl8P->e#mKm?!y+>65K3tllR=OTJm%ZzQyx?mp6_j>Mxw!5+NH?25x(fM#us z5@RVXtZ}-BA-h9F4LLdN<$zuc6fJt0PZx@aR;u42G)JjX3BgfU8itc)#}dHb@0nmM zxTv>WTySe%qNcXneaFY)NQJl7MN7VZpVd^OXqL&ppWY~Smr<)cU2=%CIvt}?el=|Q zs&wH;f>cJcVW!a~bw)l{r{;K4iq7b#`l=a?ECG5KN=CJJ96eo&UB`va87`|ls;t&^ z^n^TiY<$;7NLvwvuzk;(bZ-SiU!Ua=>`Tby@!|5TvzC}?0`~jG zH*M*Fx2&*jI*QKRNZA>;)+!*=B;BLoL1M%)#+U@p|7?58Iwh+<@W)v(?{w&E6qjA< zv(2IO7S8SGr>)H{oYBK)#Nnn8z%5@eciTDJPhK)bXomD9 z>P^-{-gQ_BPDN3uIB8j3laRT`Exhr?DkZii;5Rs9YaWd)$14`xJIdoBS&fpf^I(OZ z^{i|iWX;rmXVZ%aW(GmSFbVrnI-dv)=IV zGKPu4d3@Wjg3tKJB5QME2L>WdB42cLrM1zxvBsG9(F*m99VI$0L`Uqlt?{kCoX7-a zvNUqC(jqEMdJI`-RVW2#peGOWS{$MZDqW@9Zc$Lb=7h1z=_&a9SVEtHObOS>`gkq> zAb%!{oo|B)C-;PQwJO!~(0-y&8?zW!MNv1k*>>mZS~zo}M1f0QP2oB5&Qz)P(B14N zGh$)d@wTGFIU!cDylW!wXVZe&_)TQZP=>@pll<*{<1Q8a z23wsQOxhMcQmtLT*3FmlJ87|Q3DxBEh+d37Y9*9??z>qieeI{tUTo>y+&4LY*!k`^ zkD9nYG-;?U=rrIBQJ`@V0+4@G;PSC&t?%f90i)&0@1^}ht|!XjwMKT&3r)l@Huo%} z)1kmh>RQX4L)9xICb*KXjSxK>bS}t1>G|DIIqdcK13%=^G%Eq83qo&fFX{#R{7-!G zgf0Q1S}jy{*lQMU#wi zuH?0MjZ~bekZBi?#NKzhv@aY!KB9`)PgcEfRYw02GqXQck*fK#1{L+J-7$VEy@~ul zK^{)v8&|qojU@f8)=K+_s>#c13vQ!sgrR{a%Kcb9W##ZArD7Teg9l;PK%SyUE7R7% z@FctYMR(yaIo3l9+}h#(dh%V1<#gw-{lK?Jto3^NCc+vK4^Y-)LkUhxEtM0Co& z<$Nbl;M0FNhHZ4jCE@eJ^_s0*+g_fcT)kvRXZWh)ekg$pEIMx;C*Ekv5j1qPB&B!F z1?e=GK3|LgefP6$L|*kbmR{~|%HatNXj;biYEg>`IAx(#tA9$^a{KZw1fz9^3clQ| zLx%3*h}Q;hVA?`tSY<9lG@EIr?$G+K&gOalH_A}dE-50fPF(P_Np|lPyapM+HDjFV z_M&6{u6@sdO#OKy6LnA`?P&k^#oH23v2wdXwx*?B&Iv_5NV>l9Tcds`GI48>{hXXv z?C*=yb%x^@UBRd^k{jeNAnww`46ZR<+-@7W$HXCSLR1i-*lLC7AeE`722QRa-cLd* z%T0Uu=mIHfDGHyuoOhzBmUUjh1Q$P{1-xgPi?kbm=d~xk4=wtGH%Q_kfr!&u68%K< z{ONp^%WFB7XdxEXeuFN97-kh{WvtCW8sajPU{$VIy6^A(mBAvHDY!A)1@N(9c|lN| zyeBe^#3t-66g)~U>-`T?qr1Pr59+anV%4UTKKeuKvcJF&vQ8J~7j;Wl>6I;FM|$ zLzLl!A2U2Nh6bU*Aa-9Hvu_v(C(%t50sz#D=8gSDr;Qglki~)yb#MQR9+0jvni)>I8U4vHvkE51+@h8w^Wc6HAfPOB$-arWnW#lxn_t5Jv3!Ks^ zW1>Qm+v^T{Th~UcWrh&>Z`M;9Vocv&jqr!Db4CI7SJ-xeT{IErN7x~3$ab)}>!-hB z&rg=ouC^cB?;!3gFU41)Q0j_1MHsC&J@;o)LM(&SP(oR3Ct|5&pItWo4LOr9>b2o6fj)a<_zo*BGPD=sNJ z@7Qfl<;WFcW-m}wi%=;4&R_72Aqe2$By}x+E7F}m`V32{g~zTGXu&BguyCSwEneqdkRdT*VAu1w;(QG(P<(O(3!ZIVs+ zBJub@?BuH#7A9+4G#iR-#IU8_Lc2UjM*3V3sSmQRAFbnZLPPd8F9Zax!FW1327qKW zl})i8y&4n~LJk&9muL{ ziCXD6ul(?@XDb4ye>I}Aus>~ydOxo)r653EpT~D< z!nJAEeI#fM2@VfZCdfmfzO!k^C3Mw~=>swctG*=M2A-J5`x#@(e(WIaDb03usY|jR z->rdL4zKbUcOpOeY6V&Uw7CVgLvdzb@?dyZsoP!c=O8omeYP>w_RuYU$k>82WrKam zdB?B5H(upssJXlOt5`jlh!lnOrIBgCBIky7sZ~^Gofd3aGvZTK zHe;7N9LIdKjs=9@pgeal(86^N2I}ZCBTSBpwV^|s2aYUO68jeZI+-BY;+pnSW=B!n z`AU}-oOLy~wz-;0=f^Tl1+IwZdb)vyMN~e?D%wYi>9g6K&F!Q|16nZIA0slLeIU(~ ze>`gX9tNEv4yB!P#C36&b9gJ)nCJnpI+Ks;^7%;`t&JSarZq!S<4QD{kBOM5U+DIm zvszp6+t04o0ne+{_H~TS_?MtOvwE3Kp8U#&iN4z=&{A3p?=r9K7z!so`D9DFl zG^fVw_tBYM#bDqo93Vp&tq%!%_{!WV614L5eEPMdne5PoVG>1%578M8RGFU}TYpMX zj2-L0qYb1d8z@&0P{rj2<4Ul2Yp{=>4PQY!t!!eoaKHy7B~JI;AKJlMx8Z39r|%ky z{W!Jjow#d`IsFuk847r+K|9v%uP;A5<7-a}-jom!-o6fbZ0{Oqn`zPq^{;bFr6wnc z`b~k5Q(ChN;o7SW`HjKaLgWfTW$J$jTItur85WOdtt?7 zzWcj8eE2|1R&^ZS9B|o?lfTesowv{lRK)MYb=9I4QfTMTZg$_i(JKvXLH9}x-|qT1 zCupFR=i&U>$8Ye!mu$ch$yL9ja&XU&L3OUx-7k6Oro5z`;<7*Kl$X`1Qa*I3L0LM1 zEtLvF7^RjfcWDM6Prlz?bDYwc>@EDN?Oy-mWX_&~rcTxFz}uolnw8R< zXEuV0F&cGNVP_4EhpOFm-PZ}-)o&lCK_}O>%`Z zgWvnT5BE@mUCBIeWdf%&({27p2%FK0jn5^Qh70sjk5f6Qg;4@wsGxJzd3h)8oSwUb zsh&51y(c6$_(`*8YC%s|*T1-6|2%gh=&?l=uwRk?0FdnBeFN!RB;srqNE?`FV@!Dyru7+oz8t*H) zVE9VX=;IZyf|+iQ=YOD9FQ_wse`uGAa%$Z@@u$~)G+IzAIE*=a&PIE9G;&~YmW6C1~$q-B~3Qku4@VI|_1U5jDU0m70V=rvaJPc`fC&M3dEVgGs;kzwWTHYNWh zbI}KSjKeo``}iX;4Wr759GFI2Ord)6c&9A`L9Blrk~U)E!FSH_&Z?VZ@z~Tf9&bQK z`Yc^-67O->Ni_8Fbu)iTAW)K~ZPKKw6&tpm>{7}#<5Jh`d^Spk(Vu>ZZt&V{;O$jQ zM>|t-e-7k|3GQ17*>Lu%zp26LUE4Yd67b-)jS>mkwd-%?1nW~CND&Po?q++n^XP)%MN|2s zN5Y9bZl%k?{-M^Uys0#P4-6QeBjWCh{N&9L+jPMqx@wJ~ro(uXv*rx$7{mGrvb1k0 zQB}TC(vdqlucKkZZePIwas=%?1DzUk+fIckigR8K8g{do!JO?V!fw^+i4_0pA9NOU z(gZ!(k(652YV^}gM^i%SANH#)*AMRd?BmL>A}m!I&0(RO?*gfxcAWx1ucPznT``^< zf}rRX%_QalLGDp&@WeStyu{h21((Q(J-Bo7}lZ19E( z0AIHW(NUfpJCw|UmIlm2+>N$GULuJ%EfML~-`+L4x#E?`Q;X5@gyjzm?Oy{k$5x)| za4BTrHHPi)oo9!F4fGm0p{gfp$_6&?b9)?=;wG~G0TAoG_7yU=&a@@tm%>*?IS%FX znX0x+m|ifvBDgTsK}V!960=s`-i&$*01PVa`@B_ovCq~Yu+nmEJMC_Q1@0P73s6J# zN17dpSW|)kmiTtL&AlNIRFjtBZ3K9c`EpB;YTs+oZCswW9CkS2d8x6MCwEZCv`G*7Mm+tG5V7_JAKSqW-vG3ae1MJ~gV zOa1GH%UhY+q_^grU;-Zh>vfpD+XQ%(^$0}wa+m%dlgBL^0GfPWYb7SYW7iccg&PV0 zko)_Fh0d$qsnWi%4a02t;Z!=H!hzBk%L2D4I(aAK?BB}pLfE;1RFkJ#j*I)xx?2HM z6iEA!lhPY)uw|9PpB0-vh51?IWH~}z+)3}3J~{dax$plT`>o^?od{BRA7XHOUy>o* zt-if!QB{Hmtuaz(lpGQf6zb79L+_vO9h>Q2PqR95pORx}uvFoQ{vXcHI;yI@-TsQ8 zfC7S)A}w9g-CfchTR=owx;KJ!OXmipb5olRX{5GvcXxOF7RU3R``&xcJ@<~^e@kQx zhdb8#KJ)p^Ih$0_ABwXWT(!CWf$`X0zVm1zbCfR*uYK4U->~_eF^+i9It9zavH_g+ z&JUOQ{6~nyd9ExGPcEaR?iSla0%b=s$@PM%>u%JK4FJaX} zcLHNA=A2akUlFdil~wBVR*0{TjnC z&7g6{`pK~>+-6_3nwEqTD+@~tZu}r)aC*UR{W#kC;&r9jlQvmRi}PwE>K)JnDo*+KVq>GXmd&)={Px;oKf~#SIgd3Z1be2N zfeKL3S>47@imVTA#Sas%ej@;b2oGIvvwd@V`TybBo{5TJ^>WB)yKd#z>QYK>VO!&v z4({+3>a(Ch{U4P{g~}{XKY}$;U_BRxZS_&>Jnl@J8eL)fmZ;<@KTSs~gGX*;Lys1# z7&J;Pbe;pm)K@u3zh~xjo-~+WvH`UbpJ%Ijr25nfJ+%qVdPNBU)Z+sxA_X<%x+zp` z@AYI|mq~&DswZ1UVa2ycY02>gqcMG&a+IE_Qab9XpCuC7@D||8TJ6fIwgi7I+Vg|>Kj>Q1&@V@K$~o*T(@cLeV*GWY;qyX#GhE`s+xU_wr{!Q) zW#P-v*7H7putoH;+0jR*&QX+;eg8vcy>t;O1*P7^SDsfyfR6j1)JZg6c)vIlEjVqHI>E|QL_l@3bPG`Q7O2R_2qz6@+tbiCYmUqFZOL062T*& zY+2NbIpa8XEL6&DkY#!-nQk|9otuaF{@~uU$VtNMZ6(&K;OkbbF^h-iO>VQ^%fN38 z=!Pk7nk@vL*|t-$bcrZeF`R|K5^RPffw)p6pN&aR%Gcobs`g_Ec2@zvSj zb1peCtbgo%k5$J%t*2C`c`Mce4Y_kKe>L8C#yc1?Ms{>$blEQcXB4* z9SXJEil1l#;0KrECK<;LUxDpJjSLG=6`}t(GRQ%R zQP^V=Px$sV3Q?S~TK|N$v4>K_nuN1Ub#8q*yAnyxlUY*@#GS``KK@BhX|HtFqAdqK z=~{N%NRQR&_0K=Vop$STmr<4p>?^X5M$H$P(w5${K`#!}E?0Ut{hIY;=Xdtd*KH`` z_Lm=KyH|jW{6y(829~SIS3WY^PB1n~9~@~&V^HNe@foR#e6gbQq)?D4Ewy{1u+R2^+IwzM z>yu}V5KpX_x+k;>dspYzCz0wyvgf86D}>v5kO4uMp|9=I%Gy?jW%$CTOSUBXTyH%4 zC4Y`zOi5qpmghP$F;to?~0Ad*&G~hoIK#c9P--R zJ)QHht#p0zjRP%q%Oi;RSvJL-Bzf$988{95`vqlQ-QNMFp{}^0|kRDzD z9iuhyfWg7JkVS6#g&2y=V*V&a_+emamWgRdHxu1in26XE!B%Rtbi6S!?}hKu-ptr+ zHJQXzVg}DtW&fv-P?J)AyJGI7w<{wjAJ-)9C@ z5|T{QLqY$&)F<{o;{Z>n`#HbWYNTZDygn1HB6kas8HJr zP7V5qdi)7xFS)gQGO)qMj2KRw9$m0<^)g|F4?T;a`g%H)6YbIEW2;E9AIw#Jol*a& zTmFKWOtrs%XUi@4MCTu#o4;?>nT7~Sc;P;v%HBL@|LNZiri6&MH&6?HLfwC6Xa7Kd zs8AHo9k8&I?jtvU7*PU@5%Z(f{l8A+|I5X`^?lc-wc_gQ|K%6|8mRW;?-`@sFWh|p zbnE=lwcDHOeZyVJvqU`PNZatElutUzz-DvbjXU?6aJl$4v`}N&2=y$E^Z4%b$9i;o> za+#mrpG)T-0)nDD&ARiu8BPpj5P+k)XHzAS) z?%x0{#ef!NG?6DQz*dmBWIFLKXjH3Q4p>N(k+4)}$|^NU&Q$;Bk=1|*JaE`YJ+*Af zws(yZH0ttbtBR0qjJq}?N&>cy9{u(s&D9rAp9QtyP{;&Jr(~Vw ze-3LhIXsU(Ri?Ts(+eh#EfYxCo6xRN0_bf1@awl7wb`fig~nC}=B9^SjJ{$Uu04mD z#l}UIMqRATrzAH(Ce&DL;ea!^ifr*S{eIX8+bLI1Z5HU;wEkt!19d{8=`Plo#@N+> ztO2XNpGnU-XiBf%^3zQTq=qF1znnX54-8e=Kcy>rYcZ`*DUUTXSMBoTeuDu_$ck@M zVW0ML83%-Lkvt3MzGf2&O4LO9(#sSvH6~8B|PQ&yc|8Vej`?k zdjD6%N{Q>=5vzcKzelXl$Eag6a3LMT#%m|;7k19?A=;AJPsk49?A{q(oRa9pF{nt; zpBLs&v<@rjDMz8FdLWpe`3cpl!SzCaq?cC>R7VnLqZbA^Ne~NdY1j0c@3OdKTvjjz z`QemjROKHXc6|xGg3>V`5oxRTc-h=N{WZj8$n7Cc0-kYJL+M~%pRJ8}1#k15JUr5@ zzGd+iHBuZ9WPJw;`#}giTyBeT4=-KbpB=nC#;>{O@`t>O3Kd4TyNYQs>lW@R-_ITU z?W>!k)nbP7G;kWhhaYz>rZ7wQn`4LX4YNK^*AlxK5KNV*J>K~2{?3Tq)AddJMOO{) z`CPSVfbwE-c%t=4t`A(vc(=IqOl0)UVzqOS=QPYmzmYt4P{?Pkl6X%n21{#rtG+ga zfmf}{V)Z#TU9?VBU+jn^zvS76s~NS0bpPYM5RN|c?+dbD3nzK=%gsL7Ev?34n&X8i z%IWP#9nQmG|3P-eS>pVTfzrC4opCVE3ZgyHS7A^J#QCBDtx@% zevAD7&Uya6c1A#P|Me5(*4__vOg{4D3Tb4*9ch6&>)$(L0y^`@y9t{w>o4mjHE$i{ zXWrFIx8tG}`3>wviwb>{8y6^r2#B5IL?t(>%s~V6qP8-uzA$}+*5>xC_#f-!h=FvV zKyq@r_%ngG8JGf_$_T6)`Vofyly>sU+(w*WkVbIy|L;T{kDM@tO~OXCXdT;LYx7 zmmQm(&E!kP3hlw`DQtH$t+#b6!7Ua)cWApv*yJvKFQrDoGS|9bS5@k2Zm55mL@Vo+k8C*^nb0XI3;8~k12nVK?sv)e?udi{9v zD)^LjY8hr-Nj-RIW{-a~NeR4^NkVRty_*c{-vfVDio!Ee+(Va8i(Gr%m;l>1hk9iI z3G1O{60q(h@lP4Ohu3`{R!*j}C|E9>zsnh!KLqxW2C7h11o5Y<5>d4{^mPY+I1|`_ zLHp2G2mu#yb2Rq>cN$Nwp6WKQ=1@v?0q*+7)G(a3! zw3s&rHveC@8?~NezYfyn_E?CVJ?0PoRicC3==kVQ7)XNik6Q7+eIopz`D=KWa1m8k zpN)tFsR4qejN8L0bmgoMxV_gUk+{DkdU^Bs-){Y$+o`ZNEUvo$_o=;Mp{N^}+KU=g z#UJ3lFi<&M3kp2T_mSDH_R!rR7NOwW(f{7DP2Ia zoMOzo;xGdzjOmCkGZgvsshFW->i+G}?lTPlgQa`J3_F;wF>%6KyID2s3+~Ae9|}tK z*dy@p2r(hS+7MYeALl_eZukbLTD2v!WU|Af6VXOFl7$*HYbzS3wuyCm#hf2fl5rX#NJbWe`e!;tP{W9W6N$^ir_^648lKKaqEhuc=3@@GYppG z*xEXS25cff*3@y{ZN^>E|HSB6|G-mUqgO2=lU{jv19$dK49< z0a=pK5o?7m_mV)%&fz@vzp?<3c#U?8H%49;cZ-fF0EyAoA2sa8YQ7e{?@3oAw5qw8 z*NbP)B{PfW@D+TQZx#3=-Mb*J-we`v*uoN5hCC2UNmgX=Qk849(|9AAplH89L!b_Q zjQ&W9%M9;ide*hEL?AM;&Y@2?;@2n{QECHLo~X9$)H0VWfd;!t`(j{O+5$ua}ml-U-3F7DVx8+uFnD}1A@WBP^Yc02VjNBFSFLG6squHjqMHMl9!CLl9> zIA!)I{h@n~!MNMeNlrDNImYT*b@-h$$xn6(C$h|w(98YgA1mMWAde$ z0|zLHUXr|F>kV0-JbBA-ed-P)%+7Dzt3M#?2R&;knp#-ps0S4Hcki1c)!vHf%i=0i zI{Y1WLh?|k1^AYuTORpOhYZyC z)6obYmRnIM6@Q}K)|f3Z4BJfBf+FWts@F!K8eN|`^u51n+@hJR>r=%LiOuUk%2MX-Cp?WP*kjULfR!`pF5y8^vD^L(j9BcRGa9^)_ zm*oxOMc~tgaaS%?-^~6Gax44pz&3`qv6RRfTs~*OYeKixbpG&^n7bfpZ_-J`pX#h{ z(P&q|WtW&*b%~u`yKzGIRDns`iNISK&5ew$cex!h?aU;oK`i>jUO4!1%s_>{_>6A7 zhh>H$B`5k8u-hACyjM17OyDUw5kjz_ETtNEY28L!v>dpei0jGY^>@yhm!s* zE}X*}ySk72$BGMD!vn=?qH@U>!H{+UhBQkh(s3gEQkBzPrIgKOrplPqf>XkclBtj2 z*9isI-)DaNSGH3h-*ziAA?=3zjV&RP>aF3fwCW-J*-sap?_W3*F~+m&ZSBZ}0@K3^ zB@znb3vE~X)wtdCqGc5Uvr>ehq)7Z?8SR=yQCVZ|tQ~nhpRVfcL?U&>(4)NyI&a6X zPA#o{NHI4>{K859$vTxK$fR?xkkFD&3|bh=^niEN1TjHbp#DND{An2C?CtIsA`M#< z1tLXZjFq@{G%`od-74{?sqIHD=1SVMgnwA4F6nR{yDciKj4u;PwjAs8vNNyvTk0@z z&c3vJo(0k>;Cs)iv!e%e$Mls^)5KyqUIBFFXI`>*Zo2TxBZSMm~`27OORQ(Je@-1S=LG*Uj*-GuOEK*elLq|XIX?i@4xI`J*^g9T^GC` zH3esG&NqZYQp%oVep8|aS$_=RgpLDukPgVB&bOwchH}KL_+-aHgj}|$b8_+K=vVc7 zzohAPVB#p9c(CWwC5{yK9;I2})(qZ#V95S*dX4i?vrV6Q=~4-~>F(GGff(a{Sm(?8 z@AA$~_$)bp-s@_{|IkZHB!zB)PQYE(?-j?K8P4dk<8zrJ>oU0}7j5H%8hK5Fr4STfwsdN8~V0-|_;9Y)n*02G|(Zv-A={Lz@ zrMtIlnOwZDwhXv~*P!*M^dOzERp!m*lTR6;1Zo%#v2S~uNjbmqN^;bt_I1xGoQiGu zCvFSpbTY3BYGGUfQVI~@aBnXAd}qc#BUcS%5mO^H-POFDDErt_MVnc^Y%*T$L7d&M zmETFLOA;=yH|~aiVxHKDQsr=SVdkA$mQIJK;2)Xfqckn)Kqh$& zPo5{fo92SXYFX!@!RY(r3o3KwjuL*V_KC`rm4*zH_Y?i6lU)xjbs*C>_hM4 zSjqX*lo+;8_kur+IcoX=9q?fp?gPo0O`T)KzOUaA%;%J^P<9#Rv~Mix zVN?H;WbP=ud-!~+2alpBj?pjsq+o#xr{D1uPPdS5%V)28;dQhM*t>w&k{6Nsa?-1X z?7zLN|5D_Bzsgd65A1F!9|epkFnKK-LIk(_Tgb^47Ix9`;(R`HGMC!Kv$&zqM$>uK zj`WZV+!AH?>!JQUx@zsh=&d2&%}ai>@ajK)QE%){xi<9t> zFUw&py}v<_-V1ZZ#lP|jNfyi+T4dMyiVWv^Lpf^Vm1j7a7! zsZ`4WxABL=gO+8j;DfC)2Oho(Lb*r&c1(W2S7 z)e|ZAH)V?yb6k-CI0F%&Yn2K=3oIY^#AYXaKKj3Ca(6^tKGm?h+2rIvL}doA@4koM z4R*S7^%%aiSm%3mPvif+OvmSecnYZw{KNLwRWs$t`D^p*4nEsT?o4eoE`XM_^UVQV ziTVt1=VzD8;{0h778KaYL{Q9kIx|;K=#^$};J8*}bA*n-q*t!vboFjo^rX(20`Z#? zvtuV4sz&itC|z@UN09)i)|Gz(tWKC*T|+<&9a#rZ0<;DMt3LZCn+}JXtOCm%kx<9rg9*!(jxj2cz5J);PJeFo2mQf zXLSj2S8PUH@e>EH|ma`<)6PvH#?Tl;`&ih_d$NdzeMg z;A;jy6+dE3jTaZhWVtsKu!Op$OXq~Ec?gyxTO89(W#XB^2)}eNdHQT|%7NZ|9##+o zz048z$56^$HOJ>!r7|iA?4Og<56Q@3+&p|5C#rZ;19m04bLD^Qyu2;8qoPgHGWDkh zi4~a3dn=?z&jY2rdzXe_p9*eJ!}uMelmc_MZP$y4t?n2 z@lvusDCMn%#UOli_q!!(l|w_y(Pwp zV$$xqQ#jFo9nb>P@1&aRl^*7-@s9X476QJ-|h7~WoFPLmkhXwoFzfBIy9?+CvSLuGQQ6IeHierTP?l&8g(#y%>+(231epbPs%5%kDiZO@&_1gQ7sIwnpPLI_1!xLNGtdF z!(iRz$LD@Oxk?RCWpH}@rS0Smms*UINQfdON8hz1FbpYHytjJhK?3A6PF_nzd%Uqn5nyRkz9m;Qh!k zgPQdT<}eq9r0(7s+#3)`F^){kUSxPrL^l#{M71EGcw!{&!33aKBPYKtN0HpwakC{Xj}3q!%9<0J>WI_(-7E3ajnP^~@_u zU4A9_Q6<7jv2lit<(<2S?ga0XmWp>UmQ`>W2WDo9hrl3np2>5?{1O+&1iO`O_&0Jl zTx_P~Ct>>VMT0uaJ?7W?teE%Q1pi65_KKEx~TWWV=DkjSG{Dt;Z%iciU@uMPKm>Cv2m?L zXXB}(fbdWV%_y5xt?{W{KMxD=!=nmKir}s6M)uvtxzyO zJtD=&`RNHR2GnoyqMq0lG^ByJI2Nj5bEE#Owu;e5U?+IJ6iBh|EFiy?h{uxD*sJl= z^3)Rp5Z3rJX&k*Koxm1;iCxK#XB#BxK{fIX{yfFF5W$0Eh znhEk!Ft359EUyP{RH?0#iKPHKw~y0SaIL?UdwA?z`FwO6t=Z|Rg1Oh_4u|;L%e5h? zI03>ixM`u!D3|?}Ep)O<`t#0MI({3S2EDF}42B}4jW^ua)Zo1Ru?zEg3>M(`Shfo4 z+2~ma2yF1z(82xzC^EJE1L2umvZ(+Ywa5$OU^;u2t4mfYBnUp>4!Jsc=4VeAIHrSR z&n92yaA9lQSvYX>ZK6}Qib1C=4Oe2NqmTU&%g5da3K&kA8p$j!ZY?A18CF$$T`wyv zRB;4mDbveZ%N>}P>s)I4m6`w%_eaxbeSQdXhZc(q0FSL6`i5MHz?n|$;45)z9^Xhw z#m?va;q&F-l;d;mm|tUQ5)W<#>|ceN#f%x`@E*T1z#SLZo_Ppu{H0kXzuBpGGWlw- ziFJ|7IP@t%Rg#r;;dbj(iQ-n{2Ji`#Cc;3;|cZ^SV z`>|`@yQnVw`-jr&{k}~jc1LASmbq0ue`c^IR80Q$2oeZG)OU4HNCeBxrPgTUSb+^B zS&t?EUTHoX0_9t?-x%CDSiY#sAM=X$IR|g-KtGEF#xgUPuFvNAVlnXQ9CPRa(RL5H z-OJN#b`EQWxEywm&~!&MmAa4IcdH-fs;~>=zhnDC`}z2pMf(9$BPiEb8(4vIx$?)+ zsz31TeTiyHwVH9dv0+-Pe>mp&jF6vL13Dvgm#(sqH;LV!`l6}te0U)~%=zc*;JazR z=DA+=g`|vuOe>^bB37ZBcec%Ssn=<({BtPbA}Nl0vMTm_0to>{ZegaR4R%S7WeRumwQ_&&wMD8X27I*N7tDk^H0B2^iYWy5uLy$;&Y~Y{;}i1j#H-!;*K8E5UI6eJL)UJ~ z=!3`tO}?b|@-atiTWDpdJ{)h<{KbO(M8K;{ZJ_MHB!8{Vn^Y}^%LBt-t$1l9!+fc2 zno^rYAWv-d^yFysB=|G`$AOpSIR~k{P*ORU8!NS|xnmE#!W&-1wXb9+@k7y?yDPii z4JrhNN9VQY2jNd6N+aDKOWWXDFI$6oe2Jf^b=pH@eMN$;~Bs~(Cw}Kl+ko21}W%f zit8M(;4}}OKHuy5EvbiCyP%_@41EWpN+Ii`cf93P#)<(ns+AQn{E!)*M=u(k0lGCg z%kDaeDmx$v>(XVv%1%+&HxzQSrOjV4JW(vVi)KAzO-Tm@tr#T#>{RiesMHP5s0FO} z1_PPl6;$SZ-C4u4o&$POiz@+v_SdOc#8or~rB+vGn7=Bjz_&OuNsSKQRaThdt z2Y~O5^judL{)*}KBlIFjE?=&~0vydP6JJI0v^hvCmAuZCFvzLqHPC;F(;cVcZyfh| z`$Yfz!A)(I7l0GgT3t-)ZT4U-a8;Wj+^Q4pdsSX;!*W_(!E~AEue9B@XdFm$Ks|; z@27UuX%diF1=)OYVMSL|XISsF5a9q#M}sjAq*k;qh42I`Zsm`jm#AyH;CAMhK3zGy zM|uDm>)2zA>2&cpD?qF@=xx$S=W;?~?%;PJA1xG4JvIgJ5?cN4MFu{x6^cf}m;Px4 z1Fnn)^&j`xD->HwbF?1~mx4p2-$s&#(_(7bQhPG5`9PYdSRaMuD-HtkFJ!zjcAAyT zff>Q2tS&>}1vCQ_ZLN>5>yCapj9>8X3)8Yx;7a#5oPW8-oxT@0%j~zBO}wK^?+{p0|5_RnR-7^oEatH)wUcWH`P3R`h{%cEc}n$t3@GYXR;P38IzDPi$) zIwdlDTQR4hF?bgEV69Rl$>BHzv9vhdI;ZHfBa@8PO>TEp=gn3sgd)h$HfYq$rb)QZ zwl);GFtW!Hdb#)`&rT!yi3RpMhzg`t<_(1J3?l?mDOOc}eQ@EXr&#O!FvV?hfHgv( zHD;b>F}E)1R(DsH$1_Zy3v z`i@jf<(UOO<&CA4KtJ|J!+Y=$&9qS((D-wubKpy(c4yX2FegupWu;@W*7)L*oeEU^ zJc_?hvsxQOAo%*`&bnfO+W`xx2jfYlbNYw$oCp~du>!@`m%4+(hXXRyI+%pwZ2W+S z-P5uY3!=JOq#?jt=A0xJ4*=sdOhfkJ#%QvBR7?=A#BsGE*!RO^SVd`5ax-p>q=uLQ zF+AklxE03^7L4lh`i{i9q-MX_H>u#M4DP;gYY-)qDt8?1IvU{Q#5j3|Ed%tfaFBya zYv!AMml^v%Q2Ccx@|x_nUzIhWR!u9pz#UEFNPPNq%7}I#d09wWFLUC%^Da*%U%<}k z45#Y%=EjKp7dL9=_6oIzZHE;)CW;S>Z}-Y+&b3@Pb(+%>HazHH^tLtLrnz0YQqoq zsDcxQU1_SM^7MLf!_2uZQJdO6U#dX$udlk^Tl8Q`yxCsK3c3_MUNR#^> z&d2QmJ1b*dgf=ioEm4@4x$`GM!dGN=K*9c>h4Mt4l^SA~BNW$Vqa_;yrWqMGPWD`; zAlY*SC{0}SAiPRTm(){azH5z=K_a@{f2;rp{Qp?D)pO^f@xP#aWhRd8fNA~QM&~0m zWZd&I7K>yzDF^GI#?)Al5Vhu=5XX5wtZF01W4-q=e!spHSImz~g$JbUzY(GKQP}^BDYEe6{JNw@= zwCSKlcqd^Y)!WGX9^L}+9x1$9hj>$yAu(RmQPAw9m&-P4rifAt4sVk zmHz1K-neMA8Kw~IqlX1$K4FQsB0m7P8LUhSdC zutqJ`jWr7&|5<2#Q>Y0ecSL)z21KW*JIeuoH>q26vLsLN#us2WGXN-4;@hQiKrogz z-PZHj$Q-Q}Jf<6Se_ZCi&~06=qi2oyRnKqSD%5K7UetpL8z6upmI2x#TMm*ugnZ38 zJ}PBxP*YMiqU@A?tX1t^j=tcoydtfiCBmi?w4xrRIqlA6NGYM9mv09GHQDI6gn&jN zXMj zs+KLkE-6YnSwpf*2|2ROaCbhMx}m=5){fRVqJO0=k11hZE3Y9FX;!Kw#C6)q%m{AgDOs0kVL_}zFs^Tm1uso{>YrHx2HbaNHt=G*Eh*kW7rQp$< zNR#6}jHb@6aD7RydP=xSUi36f`sC_7X#!czdo;K^Y2fY8q^UglN6$Q)3efrW(j+)l z=~YzSpsy^K>&=$tc(#u!DdrOSb+dF=-HyK6#25P*p>QVm2Qm@rqM(akeB6_A+DVyM zD8lSY^Xc|#(EkDKoH~!KuQp);R0ZQumBLm@5Jp3hh_I7Nx|5zm^~Zy*=;SgG9md4F zy|7^@u{92^%W7_8ZBqs@&~oDU+K{ZwsZ-NVV38huvrR?YXB2M)jJ+P`(WKX)@lz#1U-D+0HJWdsBDl_ zV_YTDj>h$xLsqj2A#DO#cy@BV8p33HsnUq8xKsn)e2P8boUTU52DL_2gS<_(iTQkc z8pZjmXwE6(bx)*dZ73?k>~6wjt*~snJCKf*Tig-7HkV=a^e7H{`K}c#nwsdSB>~ z7w~Tpi*-&4#Lb);7eq8T{GL|6|61DqVEz~Ne9oC+6edyRd^>rRhNf|0-7w8cz0myW zVh&=QLiU;0=y1ci0?Uu0sYG{bmsDcqZEWeb3!5z1=;E`UEutW5ltX91=N9QupbRtI zP~XicAm@Yg2kbX;Rx;ZLSApxFHjKA=lMkKV0RiiL(=*3&e3b|gR-^ICZ@+5dpnhaP z>?A|Q#Heh%k;aMxEm?AwbW_AuRpiMzZ2L$7O6-@A!A-GkOS$5*y|nW!H^I53dkfA1 zxBBkKf#lSZF~73{AyZ3wX9(TBp^#1Je#w||p7fZAqv~H(rKUbY zwy6#}p5i2-LJJ)K%eLw-oQVX637p#|A=GETt9<`<HU*1ljt>8cHeBO(`-wRBNZ(5BM z2urTBR57o$JZW}(mS{U{r6=;V~$1-tj?aQ0x*GM8j~+Y+#aC%W3To(=nP zH^GZ>o*PsgDj4w`!ADVKuitMHUT-xVT3is?0YsWZdT)4dmX~8zc?VdksEV zB)-2yc)YCp>7B~8966Ja!4Dw^Rc?DJ0(UhwaUQ$eonv>985=TU$q9Nld~Cz=l;J9O zewV}Hk8VA3J(nFd4!j9V8S{!gA6M=22yjl?+;3kbio6NZuiOix9VRzJ1nYebBrr`jBI)vM3JCItIS4JMq0wU>v;N zZ+8*Kg0L&Oe&E+H;Q!@{8HqyDIP6kR%Gjj%vBCCW&p~1&f4_u@7Y6y;PpeIM3vj(! zufi1`5_)wEsDegABP+#%6?S3@=1$40er=5mUiG&8Czt2R0sg0+?r>vS>d`4-QErn{H4yLjw)Fx$q~#&AD@@I&2n#_`c>&oj%+Jp_}JxUEJ8Y14s;Y z9?))q0lr?}O)*WayBnR@qw5nOmGtanMyHq_f~ame9(WW7?JRegP9hYrL7%z0NrUVL zx#?8?Pb#2uIWnSupo4KmR)(&mm;`7lL#aTO=NK$V+>I@DqZ?BaKpo&<6-Aq%l%=U{ zS97h8^Sw|JBe~AsZp{0*W*8=?+(|`(txyP_-kfENBVsZ})#%y0oYqeWIpNx*x!y}? zdx;rZRO?a9)bq^rPAYJ^GBR~jr5c59i@l4hWq>8{q^Ordcckfvq@_%1ZDt>%JuIVJ zS$QNX?&Q*l&Dqf)yj)3R^)n~+s-{Fj#f%+`BK&8U-RU_tv#0ZP>D`;kU2d=PsqFd1 z;+M{aZMEWbRa?8G*1SHKmW|>EA~ldL{kG{PlX@H19&FuN{zoo$A3I7+M2hZGo>1$M z2_l3saWqZV>##}?lVR)V@DOS87n2j39JsJgfhS~k^j6j`>nsEWyNxpdFo zr8MHS^k(Bk)uxHZoJ>>HYJ!iUwpY`-+PQLhb zb7svr|I=K4{z74P%(X`MHA>sN_cyT~pB)^8o9np^q1OmzU2z5Pd97sih0eBrhiL!x znELBto}Fy}C^A?kz{5xUYftl)BXT18`I8<=RiRr8q67VvUf9_FTG*7#@-xY}j+%Yr z9==*=ut50!KrVT84!sg5@nPq5C}#wfoh|)q)pv2ks^344F?U9^v15wSr`)QUsxrP} zAnJ4wDe`|k%;*lEbIxRla3Xpt_VYTgM6-y!^0@Dq_1yf-vYJ9VBuISF&~`7fR$8&k zsDjuA*#xINGr#bIfC9`98~@bCKuSvz)+ozKO!I9AMZhfn(W6PcUpuZL{KbfP8rzDv zaD)6p1K(%(cTHHeg*W@6)%J9nPgfn>b_QI6v7@GgLNh*umscc|=mtuA>WZK`X+$%e z*9!?6)Npp(xxAcnp!ezDTefGDD>R;9$!eW0ZTLoOjH*|qnVwwjCMcCkC7+0>118Qo z9YzXHMQM@nms9{rWbmwf8*F`}T4|+BICoQ~i1&p08&g9ZRlW5&sSt`^R?w=Nn?WS8 zSS}F!O^rD1k+yZZH}HxWmTzuvF2JZ;O8Bx~Im1eAX!d4rDZ48du~94#i&UN#<0i?n z?1NQpV?awr(}s^}Fvt8N&YIqbJzjU*M-p(~fTlx&{p!8ibnwYwtwQN{i?fw**V*)L zZP(`W#$5H;H)5Stz4crKR3?nNoyEZB+u%HhS*D%kq(MPqA+79_eDNq9eYx@Bpu_7J z?nNA<2L-|8IgCb9&`KT+=dpZM1j%>$A}O>Km}z1+*EMDHzXF5zkEOx@$ud!A%G~7b z*5L?rl7;;Z8v=RLEi$p^er!!qLljVivUubb1!R@`RphA{j>7qsNSu!2C3s6$cP3W! z-q>-X41k?>(^bF1NsD_`-Z*u3Cw#T9ljjXf(@fXxf>1QzMk}N?J)ZmGwmwwE{dxu- zc8lItR&(`bZuq<}g4?L~ZVrhbwSDa?r9rsu5CfTG-ACBlde9T2$<>UL`@43i85-an z7hh}(>>a&YT&-1KS&VR7Cp_V#@je?+i6a@kT_l?sZADydb~%)Ip0=__P}--v9Q@|_ z$ubI~%heB%M;bm2%OSJXEc%z|m(q~#NIvpPuOdeYJ)-~d;r!zz0;r1NL8&2*MlVQS zz!$Q&0vI1OAwlt`H)WNdVC)j%t1cxDx@r}LFD=EXPEbFb{b-bC|CMP*dF;xRD!}Oj zqKP~IaWlEx+H4AYyWi@K&(-RvtDLuGv63l`v_<;_4Kzp$P9+zm~EX}muXJ=Q- z?LpD1yKboK{4VJx;)@nvqY$^F> zYuuCD&S;~gmoYN7p4C=)Y^t)c=-6kT=nx>}l^ z?6$a@^@0zGkMS+Tq_=WY*cd@&4~n-Fd;{k^{j58CM|Q}D_tq=pr5ZDjG^{q=#76b& zY*BhIJ)-)n+@sDrO_*kdaz+OX4<}>=G>_e0w+#)@u2w&)zB6Z?cZ|e&~yRv?&}U$yI7f7Di3C8Oj^J z9^V#wROJBW-5lbaXAH_^?^RlIymGC_O{P!~vv8p%i!rga-@bW@u$MqIzmFEs2(q}j z(dqYHgEBqTzHMxD>xpSVL@;5}ZD&%!BWD}N{z?jDBd*`A_-~q4x~&VklU<&Ef?owNqI#|*5 zc=3@jH$lk!FKS(NNldf$OO8fqv0>y9r((IE-{|v#%NiX3IkizRL{^{~?ofABwJ8ndNylWCZhb)pI^YR<5IMz(1fp3VmRBSNoECy+5L{qA#ew@o2 zr}mdCv)W?T(tY{He*R^*IHF@@+$xLTUkU2CIv7y3J7F-+B1^>D@8&8Eewdl4byTMx zw_Hco?uPylnfm>TKd?njCcOw2jUK{hL51l61~X!7vfc+#kimm zOXoJDYC1Y2@;;qPqzRUsq0tZt$ZM5ssbX=VsyEX6S0LVs00y$0hGmadJhDTroS>|y zrsiwFGJC1YB(@UGJjS>FP2f4TdX&F{Zj1Py&ZMid?&DxZs@Tp08uM8PL`L0%QV1$K zlmH4=0DsxJdiSZvDDSgu4IM{h$Vl}&B>vo?Ai*Kr)XxezM8OD)lt~g2)|;JgsJ~dW;i;- z)+fh40#%8<^r2|AY9=5`Af%L4UCJhetwO=geY}j3C)Z6*Y-EMtbo0pzvGIy`0A*E7 zj960d*>+Q95OeM2I=@g?`qY7Sq7H2e!{}u0$*?=`*2Q(En3Htau8CfA{}i#gW4gxJ zD*kkNXrsa=4d({ki2Izmu3q>^rascnE1hYh-~yAa4_o?9!#Ue?W8@}V{*O6&iNi>{ zCk4J;DntgHSUcf|V2K~T@6LsPD_73JZ{@zc3Rn7u2PFh1Y3NL>tuRxtkft+Yhx`>G zMNIXT%@k$#N;`kZD?todb*m2lA_7v4Q+lq?=M`Gl{GXRAT)m5P!HaOEx;S>wsVoBY zmDij`JY=~X_lx*>Oc_R^q+s7!eo^Sr-?;I-@T7(4we<9`OoPWdW$>jI6E$@pkYtrL zarC7UCQP*t)2}FoNMZicZRWZZQDrRbfmrASof)6o1A-iN0@_ql=ETG9{)PpUO)7l7qRC}aakahNO*<}C+zoTEkoMU+-}VZ~G9&1d zHbk3}!HSz0l6YpU<6zYDVyh>%TSjB?u+mzIw{o*qx2@8*>13$bp_d=HUSN1{gqnu2+&|zLou4FhEeG`c(=U6PCi8i zdsZ~3xu(`lO3nJ5Q&d}q#gg~JXlp!_0{F1P$TnZ*ZD}mQ(x~m2>!oE9u0siaDkYHX zpTO{T4Juvi0=29|rpQyIDGujqJ`3GaSF}py|9m(-f)4|JPmNg6-a?N_ z0xYMmq`e%2dicPH&!WWmCv`MUEFL)(y>Rw1rAA-a?izlIj^4Dg`b6kvyzW4-+sY_bC z)#Q0L&89hpr<)Qwl9Ku78 z=}9Ve^R+;d<(X!cJ(4)qKt?^9#I#y;KnA4DufkT>EQl3+B)n&$_KCl5%zex(D7i`Q zVV?R<>odIv8M(P@B$PPjvZ*}QVq$rl2*|rCvVUghfVy&N4%*uW&nb5`U|fvQu-|8N zG+f4TCgjvi5l&P$R`FocsEHknMLYKPKCiGos=q$CQ(JAwqy4T-Ss?e0llrE*fqYOi zW0@@{04333^Oq1;aXB;-%&DpV6?2WU z-PB+|s_j2?_E}RkFjc-dsc7_KCH6;kSzYCME){*(1rcuvUEjuCtq^lmmF4(*C*DK3 zBTu2I`HB-t+_8Wy_|}O#Gv4AgyQ$@?w~Q_zsbx&{#xZ>opu#vNBz{T( ze|fbq&Z=xV3$j?+A<9jGWv*Sw)o9`XxDhY;4f>T%I{r+FL|h<*zHJaJLQuu*(20iX z*ba}qT&(+)mg9AxcE&EE2z2f5Mz0Ff)qG=mE|*q}swKo?_S1m@8g1p@kn(0LNX_wS zU)4gJAjTurbk$q*l>vjH=1zS|SCh@5-OeW7_WDDz+2;8uBl^`>1o3<;()FTDLb_uh zln{Y(W-S5J$Jd@d^JJ|^>wvcg3*EovC5jQ}=C>+1E%t0Crfe~j>i$`kWIxuzaOm`~ zY`!{qW5}d>`l!;Eb88WLkcVle{aKmrLSB9Df?)|^{TD6yeif>c9PE8Q96zo`d(+`c zx7yd;ksauklM`_+&X?hm~)2wIPveDu1GQhDvnNr>jwpp}{F;j<}7&pk1 zWlR+nR78^Q=gdWA*;%i>x>?B1qRuY#b39IH{8GLz4cpC6j?|LrWXia@@!avYpNkFL z!&c`CfGnRWwe8K%W{Msxu}`E7SG!Hh;$mJcn>Zw*enXhtf1^y68Gy~UXd{2CI{x_V`bl3(bVNOjRlr_i7! zw!D1~^p@*R^s0?$&lPv4=la~o*3Rdh9ZW-XS1{kjT8Ad`N;u!L9O~PQYiTM>l>{<^ zJ}8rMi0Gbv8+@qipY<3Q>mjLq%OJKqQH|g>z7uH*vDRwdL+)j}CX#c>7ElCD8PA4> z0GvXE8vz;0`;NVnc?|yeu88Y*(GrLD4>z*@$ukwt53rIGe#pgdHru%DW$q=n`1T@N ziLAj)N!3?l7O05y%*`Q!qe^E!@0l~%(IZi)kmK~p;Ar}D8}~)2%*lWPHv}2h)YSA| zV09-e&h_2dMc>wzZ@$FOXW7YkzQUBRbz@LDFmS;C+NbDdYIvbF&XQ{hyhhI}Gd{R| z@A5rVZJf0p$x@*n-=2WOJ3z|CnC7zB95BgYU-H++!j&SpHhjkg=${l+MdCciX#fD}|B354{dw>ARneF$ZAES7cU+K@!C>Fsx^wx%qwS0bk zCj49MxKg+Z?c8U2orI06d!7ewNg+hOu4&)%b4E3B-T69w4;bVz1vPkQYt~Bm8cxy_ zBf0#F=G@i@ud8v~b?%{Qj7?*mpus|*B0+oFKCL`KI?=))ei?l5fTl%JrGWtOxI1Dk zmwY4z%!72H*7PM5GAWy}3wNcCU=e5DEvtVIv?}3#9I>AH%kABAGfr|n8uVCsmQp?7 z$H;MbKw@Is+*z&bhBMfz@_T#w7>`~+MptylF$i=vQ(5fFoCEYw#zqtLL!nTuXb!@0hejIsWiLw1o0LVf;A0_d8(Mr0#68jJvs$Q+n$ zwKu5*hFqU1#7xIPe1o0KUO=!zr4HG)@kD@y+H`X)g^(+yR8~7=`S^N$PvGvoC)|>x z;=Ki6AqUarb9C(d$EKxMKMaSFf*L6KdwqYfns|CZ4K<}j(eo)OoJ zPC$+T>|ZvhG>a*{QsLgMZB^PqB-*Y?wX7oH0>iO`XfRPA=vS(c(0ky`dm+ z8Z^T(i(xz&APalX7rmfyui*qkN-Wc5HUk!I4%*5RO?fTvz8zZPY}*p$MDzYOR`nXb z^81x_y3I_dFl!XOmH=UssEvf7ifDcP(1{1$iNYaB}vRye&NonQS*xLL7`U1 zeVx&=K0lw=}Qj!KV=gwf#k?DmU9)i;9=<00^SGWya0LRRP+V=Bb-3<{|MFj+h6Bt zVNTg^4EETS{~?(6ujJ%m0-!>>NwA=e{Rb7=|9FA{K!5(<@4yh$LYAt7Zt}oxPl#k& zH?+oWsXM&DcYXH$5;D4{5)P}y=7FGWL1J3_=2zXtWglU{-QzmmBJmDjS+deVUH>{% zf3tCDg3Mtff}G&_XBGe}98hqEoP1$+A`|MWw)r7&jxJq|SVQ!5q2>MSWbm7(7wyRw zT>(|_ekwSam>w)b>g@-E;F;*S9dr*`96;+^UoFdFX`iz#k!2HWVbmJuvdF@u1lX}0 zdjKl7=}XIQ%HIGN|2hL&=pKuul%M$A^!BBT-;rdL3_Q1&{$z$2=ocW1TRgq+8{6W5 zj7pfLEtA5>IvIY_;)}9wy0R*}sm~)T=srP<#FQy!@?}T=vtLj8#h@pg=tE4N%c#cY zof}`KbZ{{q;Y>T3GHy=$uU4Sm%M|AdX?dL+8?{tXhP>z91*wfn?W z95dZ;;zKjikxwZVw0oV5R5()dZ+e zc+N99m}_K-6lDDy;JVmMqH{BP){L9H^1pfQzdphtwYWisWwk&3juuzr&3v`sPumuL z6~1(sW5biLzkK0h_I!vw`k@92#qIqh=5}To%9yE8zKXSYE~xQ-a<5WkgAP~WO)WD; zSGMQYqNI%p^XN|OY%Zq1pp}G~h@z2e- z4Fp3WUEw70H1_!Q8PHh@BbB$$Iv+~BYKNN8WON^B=P(5%prFdS{iJN_vrtDRbB zccVj=B$VP@DnCt|=c2q=axr8@`)@p8wNIZ~SRx z!<-U*(FJwLv06b5Fk_I`kbU=}ix+fOFS2%^U^;6}`a~HlWg2E59gz7U{x(lGTgRl< zmaEc2?ioEjz0qhPc|^U4x=yO{5s)%<;LEI@^TU1(HSX+&d@jc?zj@#qVP_q2l*G_e z4YUZJt4IOHD(lWPp&6JiM2i#O3!GV!LgqCKy_O{E4T(i!PQ$FlkiLIET3H3DFmG@t zE$|_Byjp{{Va(XYH-P$*qyw`oC+Q6bfhk+PpyQVZ6VNGh`7;d>88wrt!aLIw{<{77 zXny^j2%^&@=(b7(Tq6xzTqmaKaz;+ck16$N;8o_18w1f2DV8s@{Z%Trh%}mUe)N6% zVR2=zn6$u%$d9!B{V2dQd}5Fw-|0(P*)>Ms7ZkTH@Faoqc|Vk0yD606g%o4L+sd4m zyL%qBs4|bY`$a%7)3@+|%;rn-7s1YdlKvjxSi*D-Patwds?-F0<}rBwlEUQ^QhFNA+Uzt+driUP;=4Q! zyl^Q!$q!<+=8e0~LAY5B@6GmWvG1nqIPA{e@^fEitqe|=HifPnqZVZ=8T~Sik1E04aYsWAu*8G}b4Q7)OH+1ezZQk$1EG&pmVPIy8V zeBAT9EK~|;S25J<(!GwL{%9+6)zn-0<_ksM_ZjPp^PVE2k-g6Vgx{l)*RRMj=C{J7 zk9hHx;;aul8T`)~oKXL7HE5U)U8vmWkO091C@aK%*wtE^p#JWQ)J6y|nyF4BD$OMI zWY1`nDF`CTI!iudLOB6FaCbmfjNYW)4+Q#KW6PN%ee+70rQ%Q0(O=vKNgb-8Ca>AY z=*_L)(TbEPSgdCwyohPHz(7;hpsvPud{X`*N@=3Z*siv*4C5Vj!i;*VU!d`pj2?21 zWC|<*hcGEyL21C-nYp=zwjE?uHEH*sYQI%U_M{f6A8Tl4VA#h({S}hbBG>Xk;659x zM)R85s{YWOT9pE}Ef$5qhUIe(a}y*WJ92z>Ahnn5UBQ|qPh3pUq->Wx@;98outO-4# z@-ezy{5gk0UF2#Fnhn;zvYP4$L<<~G^`6pB)T6BzPE0fu_x5sTSaZ^StneGtdwL7n z$X>U%Ue@K5u^KOofa_u!qQpSrpcezA9JOUJ%`a6UD5k%V(^p2Yb{T27*PH0b=J7{++tsyiBKxCAiYU#_(G3`FbOQNx~<3N(~V`dEv;g6`DB%L zN5iABD0$FvX>g|rWWvaLpo{1#-{FJr!`+uJTN%*FqAb0Q06R!?LM%wFevO!XK;085 zVFFqr$nQ~Nec*ax|D!gbCNQP!D*?S$qj%l7c>Kv;at)c)_z~EUVXn}7n_uamO`ZCU zl^K=8d5{{5R)uxF1-nfT`In&x=~@>y)s(J@l(ol|`%oJVVD#Okl2-o7tSrC-AEfs6 zDd<(^cW47$T>CS`>;3U%5Iis-UOYM=yHx>$*})@VsvwBy2oSq;r+l~~bBhUBJ6EuX zZu~3@A3+sSt83?s1bDX70EeNlVzF`#3q$oS3p|Kp8*kSGCXqI*(nE(P`2n*^fcvx1pk~)L$Vh&Uq=x>#0;(1}#mg0wJ2% zs%!fC{`qvMNC+vnafOVX*f8rpKeX#BXYkMX0p>t zQ+R5l4oMhTjK+;lIG;$*uCdy`)Z(?Nt?|ZWv>R$=&Q*ofaB5E&)biP7O}@o|k~lgx zzu6qI)~apj@hLsx4B1m*CNBKdX>Ed{if$pE>&dP%E&uA}uR@g(TD(OnH1&m> zS+UyH93LRQfqQClZ|TmV5?ZUjWwbZp^oV@v%mWB}2R(+t?XS_<5Q;xaH&VH$BLp|` zqDIW?uA(hsF!R;>Bo3I7GguUfr9hlc(d2N}m;_E?E`9_&fq)+U{PZ^1__dZP-M zns0P(Lr#4bm^JwR=(!uje(S{bZh|+ZuGuqG-UPaUB+^EYQ;;XCjsqcZg~G3tFx1fbxXOHIQ2SR`u^8Vh|{e70sm zt89@KxGHX};IK`}m_P7Zdvy9(eU;@s%z$pPs@z;9 z^zkNrZwh03bE}QE;rL(o;kSJ&q4fatW{W^!jLbezqCZ{f`g$ZsD*8vPQl*)0(i|Jc za(aUQZ+CrSa*xTAQL1%Zr~eBCVetA^KXXDKr7hY8pBd>zfBTBu-*`7gz|ji#@xwf} z7JD`yXHW)x|8Y6_i~3>t!?$Hio*xkSKQW-+5R^Sa(QIo;p1Yfr=W(HfyBV6jnY@GMcow;Yu3Qg%yJV3%G>6&eYncV9pYD_l+-PsQ znpWmBjXuT_Q~ zF6j7vxo(bQ;M_>^JU2bk^xEqXk9(*#?t*ZuRIRKx@4WzSlb!3yBE#3CvT;>k8|Ck$ z)N7u04QW~B7u#iV0^*y6`cPFvinyK9Qn=Y;L@2+=;F7PuJJeV!XHdI+Q%qv7>MB=J zlOAguC(dN+}DXm&9K` zX^-FN8Fol{=X`vcR~wS_k}v4JHXcQ26x{VE#5>h;p6)R6yzrvX4{yl>=edzch=ICd zU&Uq-tD={Y&TSLgkO9Cz2DldPpFD}Q zs{q9A>s1j9Ya^3%%>p(}wqXFx^!l=am8(gaLD)S8Yb5r}a!hwAyk>o+#M^vJU90Uw zMB&MY&+ma+^Z7Updiidz>;8_r%p|j6ZsgDRqqv!t5YZ}WrU$%g7`^_5x{$N8_8-W} zWOq}`mZk?JBt$z`c;)~B)VYN)sb@Ic97P! z+IG+7Q;&;q+2Ec0ZKnTLH8rHbx@lRXY!vghrMIpvg1KR(Ufz1Hy`v^}XG8Kuz?3bW zI~0VIZA*p=Ccyn70;nBr6VIt1Mv8Rk_$K~8u{GGi|ADRDWBiG&MS}`&J6U&E+Kgo1 z1-5gFFAYi1>t1gcI5+I#MChg^_--(VJFea$sFV*W$7Y>LeqZp7@-2`cnajyw67jV7 zb>Mq1FGB-4ho3Kwd)n-#`cWB6m|*;xe$F-1?F3-naMxSDoj=F7%j#>wcKC=;^m1@s zepvP*-zR}jGr6}YYf z(Gwt`_ zc^AJ&%~a=daCagNvyvo{(f;VXKV0V@66BfPKP1S`TD-o}?IW!9rw8@VkH54NMc(XK zEo@y9q(^nToR1)a%+(3iFYrYGoj|GeI&tA_DHhsBkepb6koV+i~j+tv#ZU!%S-_p-ZopBbH_}gqWt&CYt@Bga1si|uw`B`J}T$1P{ z%Yvr3`sQ`wQ<>0JXGEK>GvTdtr-8d^E)*1Y!>kY^jS`ru1MWOR633u$ZFjFwen$!A z>S_l(2Yerut$>09EzJbos4@%bBuW(5H-nyu*L!YlL?(hqLHm` zc!~E`gSeV8fQO-RA#d#9Qj+vA|FKCaX!1;Ya2H=3o9eqXHoKR zyx;aOl~+045ax|N=o)AZu$wu%nnF-M5^Em5-0#}j*muFo$Y9xM1D4;cg%2UCVKy+pT(8gn(6xW6$ZQI%a(&dO;=u5n2^+_+?()f zy81VIKR5HX^IGC$-X_o-dcmS{c(5j32xy(lnXR2qGydHKH7)i>vGb22JuLI{R^>>U zv<(+0fH7=K@(TpCw$8S5{BF1%>)QEx1Dm~dDJJQoBf1#x&rg;q!@JOK$j5&&ptzBV zNiJ-OH}Jf#B+rjMY-^AjCOpZUQzE-oQ@<1E-co}uu9R;tCZ0cMbkW?^o%m8nRnP!g zsov&bX~Z1KvTyINRL?~Ag<1MB>;;v$Xe62Jfne3dloQH2u@nkgr;PZ3B}8jMtS~a_Bhl+k-oUGNPc`-D_5J()2^z0$6;GRU_w$WSFslM z6A$Z10^Q567x(XyezBm4OoVoICX0Mst20iK>)JRcz+cF96I5I)V7tpG(jwFL8h*ZV zv(!I9m0NV31c0+W!fCEkR(dC&%;u5;N2}YwKVJ|xeRPy>(r8;q@a~hepoxUM(=jc8_PSzJfWK!hY?lbRe zDqP3`&rYre&y2&QnJtH^e+@}zFHeZsCE_TSc?%~Qy@VRK10{Lru7{k^$!2Ab8X#{R zt2edTeK4ivbF9v8s&d6+ymvsS3KJZ#9IwL1CfN_X2U2-BQ*r^0R-r=<_z(@~IUV|uKyMq(E`$2rHO89qe7rJ;Y^V7IOs zO__v;(T6^kw5`Yh8r*<~Z+Hc3bag|$i@Fh~1BcIJj|q}MZ}UB1|M>N5E~W+h0mnCK zb6mj`xNGB)kCK;ZCC=$o-fpNSvlR=nWkznUvsM1i*4u=_!KuDvH0&$w6TznmDU=0^ zBOS*;l>Z=yy7Wvs6F|6SX!lv>k*WWs5N=2LLInCwI50*<`%7IJZ$mnElY0L z(*vcxAlKew7T~LFk10FFwWk16P6{cEZsLu2DrB7n6-pIB4qW+7hYfzzVNafX-r=*M z6YXHLH`AqyUMNbyp;81pjZ-B`2XM7viBlXSFq5@J zejjhjK`ckXb+yjKVoN?z!?lm_HjOrvtVgAc!B{@QE!DMNPI$HsEx#|Qx}#T(x7hgW z5L=x;Tv&`)p-mzs!tiQO#P+1exISIrk=BZdXdauQR>!OLv6x1^si`y}g450Wlo)9yBY|PIZ+HcW_$={>W-tYY;rqDHc_e3OXQ2K zZs24#hOo7?*^~DT%>1btcR-sUrxwsS;1UiG=I?aGY3KW*Z$PcSd35 zCiE-B5|#0c8^lYCS;1MBEm9=jVWm+dQ5Z#5DQ6nt)K{SLw&N-wwD`h)&l;P}B79v- zo6%^vG+6cmwAzKpL?j7@);UolLCIzy89?C$ex_qgr)5{HDo8IpJ?`+qx09V;2h=TJs< z6odV=8tn+Te9pqY{-i3_?s%*A!qDmk9ej?tY_$IR5gp^&P6mrEKYzap!ilxZc!ukz=8T zr{B(|gfjSNzLoh7)nNjx77mQhqAA@I^;gZp$;t+@NtA!ncQ=s2==PG8)^KAYjCRS& zRLp3hJe8rAkaD3aux_QnEZ&KJeyFy_<&bnX9GYk3yO`h$g< zDori|z~><~*wSeLDxx~boM&yLNh#8cZ9|pBY`>&@T^0n)vJi7Tiv1#~Dia*BRpDJc_Ne=Q1;VOdw%kpufHd%r$;A6PV^S#felcIxQjWl< zU3nog<@c7hxJxLLZF);q)uhD1?QPd*XkcMH1Ye_Y&qGBK9U-VsA*Ig<@y!JduyKbqDzP&xz-W|tt&>cK5J(bYA zsmo`0CM=%M7q%)W7UB8YOF;0kC@VRtBM9EFhGwFX`PF6zdouLR#Uv3Jt?}}cG0`1gVE03);*$>&VKuGxY*5J zK?$a`+#+;<0D6?^>~DM6h?h+(F&AaD<-Ozfmc!}FW1no%ttNz51F&tq-co_egyVxDKzY^8pCgPGC2&&$3>#r3O)!nPm>1DBMXnVkWx zi(O{w^)jw{2THLLNfG9-(5V9id0)<{h8k<=V$beKqp2n<=1epdaE?LDZlnlil&LWX z<55xhuj=ZwE%I(m2AGwHW0Irp9r5b!9Q&DQ<~L9&9K6fs5gV{F_4hFIPW;P|S!>y< zCyl+zMjGu$iIUYO1OqwKP z7sMs&;B7PQrwy{Ogjd|N-^UXH8LM$*LyU$Lwet1aKrt28MFZq(X*@nUwNAZa-I z;XND+pbn3KPZUGEb{7(6^`y_t_Ozn-ri%z|`HljWe*ycg)$S=q2308Op*WhK8~RGL z)(Z+57=}~YXiqMtmiYADA%oKv5R zw>3xjeYi??B5xqod50a5_UfRqwfx&7w~pRw(bn1NqKcYG%*ml9@h`<{X;2#?Gsx>! zJyg*!*w^8crB5&!e|1ZQp{-~B4Gg%*PyXJd^?4Lk*eleNDxEh-ESvSps%r);fnU$F z<@1biB^4QMuyW%X^%5Vg!qbfq+2*(a0`;soENc4&5A+@l1=?T#gF7k9q^DFTp8ot{ zdVHtx<;8arluKfmq89`|F+FxV6@+ogNY%5AxIf4jgX&}QlT|Xr>w|jDk6PY5Kbm6b zvTI)MbTnCzs|&Be#e~#bl+3BM^rsF829C&W=JvCs-#P5m;;`;eHR*vgM1ryMVK1)N zn219IbZNzA4H;(K5RjsuP?PMqc2vX$G|t}BMY_zD3am9y0`Y z95j*&D9YTX;@tw@e{v|7cUvQ1t!jFbb!#xSNrBbsNxJoeDzx zRC#8X%rpK8sZSba3k{ei6}RGnaf-bd!bFObT&mLJi<;@5>2EE&6#&)Db1Q_quGOb? zQ}-DgN4i6)cKEZty)>ZKggIhH>#Wm0oCflXK4g^%4Gchw zgj14KhZ_$lF;*L~6WDS?MmI_**$425F{@F1mA$4dg{6gQ$X-w8X-R|MN(VFvcD*yF zmZ>m4!dyi%pGY4^Hl26loz~siZ&zt>eV6@k9PE_jCg?7>X5BGdp=;-wH8`hO_|hK< zpODZa??mZGob}r~)vlPjCMeOpVh4H*i}TNo_fUi6R(4d!4tT${l1wbB+s=yz_!16r zX`p9cL?qU^vYY3q=IO0%NTHlmJwC1{!YnxuwR|E@AO0utu*gbE{D2vSK4baGa-rEy8#^%*9DvUc9qg8AR5+ zBUT799O=pkT`oGt`I)bTS$`5_nmQP?lN(Z_F1@s$@1-$Q3DvaGI9J-1kknOoA^uof zZyj%LN-IlZwlrcXujl-E$zVTD}8X7K`#Lf>}co~`1EB8DPawA}oXCn}=hXQDfQY#g>r~OfNDSiQ3*@BM(KE zy@5p8vGq*PMyqetRD?Hq5_)gf^i_3245%iWa3m_dhgzM~e#&gGW43oxoG$gxPvO#t z^A-_*tZ3v7b8JqbdeFQzR9|5Vh1J4*RAcizY+V6!J>0|=G2Rk0B2?}1Womau$&wicyJ}79WXiyf+(<IZUwf!Fir66KHua1eybFvaf0xgliBT(shb04ByT(Q^H!Q*3KJ!I z^Af6){~8ML7Yc8l7~t0yehjS3X%oRXS%ZXtb_AGv?M4bIgL4Bb^+f*%gZH<;LcO1K zEY$qe(?k^|h7G{%j}$OyGydEE{Er7o(P8}2dOvX>{TIUQf3s*FmuNpO@!ajrew*3+ zziZXsAF*Wd_$wjk`#%XmK*9Y-^+0S7?7hAr^fv-l{W7Gq0%m) z@DP`B(LWi?FajbqB-Ly9I!R=bn|+2OV>-KC;;~fw>;zO)U`No+5u3R$wAVlHCO&=^ zEnI*}WI&|j{-=~JfITGUpnVk{ni|I)z2n!tX=>w_^}3qoa6-SvmKpn*%G&4o+BgDt>KX{2D%)&4A%+=g1_6;gSkBF< zNL2DQY6gizg5&tN`%{?Sp#71YqSf4fC9rCN3SpmPMDdl+Vhm~)U1Z@*gm)?XrC5EJ zEV=YZ=yRq%`u+__FvT7i=A(X)AxlhIVt&8#Yl*?mh9EZUAb`oMwP!MnuRjGfYGo9? ziwQa3SWkYR)NuTBvomi+J`P(=`3*uSl$FT+w($o019e=e@(pooU^dNw`0xyHx zk=Vgf6B}}vR~*-bNN?Z;6% zsJDEXJQ|v)TYLo3Q+T$}hLc~`98aPHvlVGQD~(jEC7mT7@+&Y?xkGr&FcVxV2Yssm zm)_d`%&+24$Nm9=<(3y2?dns*K%j@hZqu`zjd5=Yl2KQ);4PyD&yD@Goj85Kg)NFu z&h#=qmeeZmZs2rOG@b{3pFaRP#+UV(q$I};?nmzOZ0SegT|N{)I5J73Efvv&q6+oq z1tc(e$_O~%CwHxbm;&9tck}sdr{0>qI_!D9_^fn^*Ui;Jj8N5SPbLmN#I}NeL}{O_ zmf=FG*rQ)-KLX=mtZW8OG&-+9EW z{PTwa4lVWq643>o?>b`s54*_iI;lX5g$&CJ%v|k8mU~X?H+xODC>CNG(O>b?wl9P# zkA>`bn;uESmYt8^Vwy|(q^$}5;gTrf^(dLa{Fy!nq?KKo98;aTGL&Gtb#N(u(%gwv zc_E>85t_XAMuI}g_kG z8hR3ma#wO&OpqW98cm3GbX^Aq_b}Kz7_{q=ar8ox+tbbbcDXeTEb3^vgs2)e4E^cmpIDGFb6Ltb(?r4Tx+yLJmB0#l^2 zv2(jF@fo;j;&zSQe^E|9NC4P^eiR9j8-3f^Qa#}@>SSOtq=m3jVb@>yfLE(M2F1Moc$tU*8@- zdsMx&-`EQ*EHUdVn9pUt(9qEMnXM{C>JVx?K$t=D+mK1(rvQOv2{Vr`9sK7#{x6H& zzj{Vmcv7hd>}EGv4fW(0x;WfqytT28-xbavO-=@7N>+mlh73AB5xRzNZ{EGhFvzn7 z!VfIyl+-4xo7|c$lnUi0iVLDS9QU1(c_O(VBCThfr_Qih#hr|0N9rthcI1_b+TO(% zV1CPz^iuE_q7^$XK$i%#Z-0~a!TYsiwVJ_dpFtUmy#o2fAc>km&JpC zh7#NXu7n%*A1{#23aT@q0eRoe6_!t1t1wZcOY2u*VihwLlZwz1?1fqs&No>kE^ydg zbJQ5(X;zDR;7eCCQfD7ahRkaw;>ErRMF|hJ+8;s0=d*&xiWWKoLJUEwu4sTbOmy3z z4(m~4eG_*I%x?hyK4uk_>FEZ49@;TA2m3!Q{EmWfUP3&>`yn0A5A`wnSo}@(_R_Cb zlep~R|D`uBd!kjKK_Mew9DPAequp*^R^+3{dwuWlQdZI56ES*`T5rqPa$}`7`>Vt7 zT<>j?*uI7TIJSk_V$?N>t#ejD6|v^~QhfW=*U%7sho9DqPy2B{<3X}p`EQD;oo zD-=|wjaaYcYNoF*?25RAE?YQFovYV{_!WBFWQ~2VsX&XJB!Lb5K|e7Pa^8Xsb#C~S zFQcoF@r5h%{JnozaKRTj%v^G;k>&Jy*QGI&IS=geO_F;~FxIm0jHvLg8boq}e3Imr zdQJJ`^fphl`520wO}ZHak1O|F{hiDFPw2SCR6t-B z`y%11Tvw7*j@K}xmjJ?SoMCOwqd&m9*2@uSjimAVo_c;~ujRdsJPJWcZcViZ^$Wlw zethbqO*uV26w)jH1aoKXcXcqG+25;!V`VX`P$#Qu0-RhVReQy)6|!ld#|D0dG2_tV zs=9zsnj_mR_dW$KcWMmwN#*))F;0FG<~=rSs-YAxu3#(uB3k=`Xwib_mMEK=P+R3J zSp<6G!w;~Z{PqF=5WZ8Dg?%>8Nw})2M?g0te6ZgLfIUd?F~uWZ4JF^;JY%Un`GvK0vz+nyzmYo zNq|1=AH;CqNQgh`#KYtfGg>079}0Ljxl{_Me)JCuk;_Uqey`ZkulYmoJYeGNH;wPx z_*yZ@Y)WrY*`F{~sj~uTwL9*0YIV0K=Cg};s&ZISbYasP+S1#%vb?qKbvOG z@<_ImL8FO+n}L~$MyJuFTqPQ#!Zb)S68#xBI@GWkfAUV8b}0`mv1Pv{PXXvRfJC~9 zbfbGSAcHvOqX=mIgL%^Jk69fVwXGrv;JTG5QPiN6Ky{eb4&nE>3Q%Un*ioT%3nu+o z^0hxh4>z!WV;o3*+Fi3ipW)@gE%9CEQLDA5e+(Zm1;Piu?2FKPlaZJD9i@mj5R5>6 z)JjTQ%)tvnLaV5)m{Ht5GrA#~TKH?v8ZL|N)v5iG+Ei_u9n|9ti^iD@Q3+rzX}n|P zin$_FKGQ&J#{N(V1RdteLa+lS?$D_s>H$Mdcy~12JD(6uFDquHZQToe9?$tXwMD?j zb!NBIIX;}VP|__6dDk1=?R%W{3VT$rgnoc=cd{d{><3MHdir~30Ye*{-_0_1Z^Jh8 z#7p}0YTlrhlKu;Df%I>10yRaV*rQUH`69W1+=JcY-%4HQ<5hpRt2v|oQDmKIIoV<545vG*2Qz+lO_P-uK{6%vj&a5Go^P0!;}~vC zjvj#{r>B%%XoKC%2=w*0a))AD#b=fJnoXDWvS=8=ymFuT7jV2A!o_=#3dPB88z^TLpY{tHf8D}W2YqL0 zf<5?V=X=5`A>AA<1G3-B`9;9ON`8pAeEPQ^;@=OpBnY5l9GqW|yqK73_`Qh&(l%}{ zLd_bNT54VYX_fh_RMQdX(K7owfA{aQzW)7ge<>;M^??rZL4OfHa3xvpGp1+r}{hV$Uy zju+^aOEMv)a`+mbDC_mc-HS$bTd-pO*E>;5Gs)K;3hdyUgZ2uyEZL0ASa~qrf)j!+ zij3`CXEbvw^KVcEA$=#8b3Yc<&6{@xr|lzN=bD*S%?_)Trks?^iXa zk3@6X(^FXfZQgvC!0SgqU~%y|Je2h7#y)t~1=;Io>DQ!sTSP$l$VfeVUhjG6CkhKY z-vx-CP|^m2(J{_o0r?U!3DdR2NJiLaP37&m5%YJ8HhnUox)sbJKqyfgJ1_UP@>xJu zSnp`N>z!&&Or4sjQ4Qh6Qie`O{D6LDf@lBQ!>@Xz7RmtDH;e9~qJUvwv+;ty5erW! z;T7D-2O;Dz5;&6YNJ7Z60pHM{qTo?CVj0V2Il!@!WKEK-s7B#oM6~dvaqy-L$pRKOaXaWagrkU- zUi(Z)(rlKUC76p(?i&pHk0;M51)je8{O?U3EsxS}?Ah9zMP?i)LhwfGNoELr>qPfv zoMWO;-d)M8UrW^k3^E}`hP&PY?`6Me%rncb2MtMFxZs)sJ`tFCQ%zV-9)guh98|)K zc$JnSBhj1nEX#tA*tZ6ZU#cRG@Y1dqvCKFrX~D5x`pJ_S#~<{nDd z?B+47P51pE_+_e?+RV_e)X?7!MwrUC6=PDiCEQnWuOljc2 zPUr45;KF!Ka6`}=L;D@guwk4?`9jCiGITy!TQGSW1KIWj(}LShf=X z+RidG2xleqgw|t0j5)Sth##4#K&LD@nSk8&=3N7W=BTfgqM#^}OY{Gu>@CBh+}f~V zC8bqT8c|VNkZw`BySuxFZUmI>ZloKe8>C~D?(VK($l<%$Zuh(Q^E~@_-|rs>$J}$T zS#e$Gd0w%qcJz7oIGl;m;z~cX-_%P&>^#XZoYgVNQXk%t@c5b9dkG?e&`~~Zf>Q-2 zMRk(=;liJn+jUAcy9FD8Xj!8bn!8f#qW)_;L|`Jmy0gQ}qxaYAqZ(iG;2|y%x(PO1 zEy{N0olOUeEFG5EUOy>?OMIHJeDYed z!NzFN{g$0$s-4;X)gXbwlaHs}hL?`%HZq9*hfBUQPNQrfnRn82t|&tByA3G&gd6SM zw=mA1OI2w(KWjYGUX=B&X%FiT2L)d_U)r;;QjKHjt8CrTar(tJdVn;Qpb{#a8;Dc0 zT^@KwMZ+@!Jq+BTK!&hvk%f}svt0Nj$wFt{;qv~O{AA8n`^oo;C&IK1EgBCfIpak} z29%P^yejcM)NqB8U4i!On%!jlvq&yKDnxnBHOF?LY3SWkh z;r9fn^AB_2puxPQLGD_^2~{W0@k$%B4x`TtTNC$~vjY3~4(2N(3c~GLdz)+Bj6Bwc zHw@I$qx?a$m|3?)pflqn&xdRvY#;~pJs{i5jSxdK|2V)e+Xl54kZ?ra^H;hBLcNHp zsKWWH#d0dtfV+|wgP8kqW9zwe$J`oVh>CZe(q5|*`!d-xD=Cc_W{TZQPMkZIxgKxV zGT~d@?znt_%!5qzKs*&j&^umtDBT{PgB*nJAl!a+$?0IBYjW`}#Jf!=gmeyGYnmHm zqkP4791Uv#cLlHY#Hfl(ZsHWRl&aQi*bd6?x6GE10C}F?%w{m%Hv>wR0@HFI8HH6P zNZ3S%+Lwd$^XLfzS1A!mMRm5*cXbh5hKQm-ay{?=VUB)TCdMXt6q0Z1mCMutL)-yA zW%%Ph+Mn``d!8I8BKTo}%|jwn#r0r2b>R4~!)lTG z9(T2DH6F@X*PHJ?IAS3WYJy~~>DzY?8CoI)p`Zp-EAdO+@t1X+)5~osLQ}jYqkA9b3Nr z0UWN`gu!O)CT}ATm&H_DileICsG-yZnf7c_;6c_ZN+#+$=`tjoEsVA>Mxmyny~}@4 zWxymJIjBd8HZyhb32ON%-}`hkSZY_%YNttB169_ZXm+@q^}Ke>$UOF#%XFKAq&QB; zT_3k?xOgVk8+yjq9I7c9PT3g4&xOkf+q8M`s##g8%vx;-?S%59?;_Kqr6Lyloy~p4 zTu9!j)QZs-2|L%!HfX|AkzwDo9}j=he)1`i>a3G<-pWK_ap|3bj>hv41lOTpiBz^5 zuTw=v80iE(Vc=WsyHDslUP2W$>9SzqKW0{hHsa<^j%p#^{PmH>BN4|U*$~517rW+4 zSAucimIpyTG5_E? z!AF!M*FkU!eNg_6VgUUn_d#^y-|)?^C2zp{tkC&*z^3QvT4Rx~G1I#;gB?=MA5%Ln zn?nbmQb%|7Ls2w@E?$ z5M&*w8ZESySzcDiTRc-f;Eqi%zZ8k^;sI^D7RnXV(X~j-T;hM?l92*$bbW4<8QI>W z@6(Dp4*k}f(V*Pju^-)h#Z8|a&BCU?9LD*fbGh>{j(jT%RDY!*bGm?3$e|PZ+#afR z9NeZpbdnv1`hcjDln4T(T$jCfWGSNOlUkFilr~69<>uh^ z8)DyIW*x9Qux>Z3o&7w3HMMWdiaA!KSm)@eI{s88#pmGA-a^zw4# zv(}qxSr5S>+>fa1{#DV@SGM1;EZvq1;7Va;3-h;u(wX^%(a!}`-Y|W#TXh{@Dm@ps zD$po>F<~(i`q4~e!*!gd(8UQXSm|=zGXF{oyI!Fc>3rL}B6?#bu*++=%~Fwt`x|;r zGL0}R39VMq%yb2mF}Hxcyu=P_g}y-cRuluOflyX!mIdGEX!dz)(8~6-b!sLagyT%` zkP=?y{H?ZU0&5-Jf3g!9@@7;C6?Y^>F$14L7xhYSA}zv7al`eE4~V$HwPj{;knglC z#s_*V#$~BuD1<*sADwL4uY-Eu=-%{O){>%azfK4;YBIMypN7 z0he(eq0fUiz=j@oj%NL}sy)Y%SI;uyu4|}Y6oG7&+YRw!$1TfviQLCdbPsEsSLab) zYqjD(f1dr;@kqUQd;Kzh$j`Ve)iq z8Ar_-yQ!0NJmB#~Y%PBOsW4hM(cS>6&{_6!#vv^g9ufv}xQaM}34f%Eyr7O~TQj_TIl)8zz&!MhZ;xFIq_RnIl+$Ct;A z&l0m*BPEd6;QrdMB7$%y)&g%tJ%rA7bM`|(QPXoa zZJ4z3owD(7Vy0D6i+cdNUL;7Tei~(=Yg;jK_Z5@&TD{@GE?lMFKgw)GuQ^-Z@2yz$s>LA0^)?`*NRnK7c-0y)o@7$adY`1$pe1Yrmt#42_Va52swsQi-B}@63^bNT@AhW z`S$#%ZV`JV2>x31A?jDYhm=2PjE!iM`T8qw7%!4xr99xzf0}fkuZTd8K{JKN7MO}bX6MdNtl6y;yO>NUU5Cpalg;*SiODCzR| zLJI#58t^->axIQIo|IP&d^U?^=N_=Pt9MEIA9~B*p~+GremS@JE%TzKW5jG}9a*63*$M!ce<@1iZZONLj*=CRRUq9}1_TsS(4WT%z);J#^rMMO5or9P8 zH6Y>6D;{-3*nV!%gO{8Ksf};hclY57Y8CYK4^@k!Z=1?41a?&a7~<09W1S=DW!*5h z_@$wL%qKhpBRuhsO9@C5yTPd~8sn-WU^dj2G=It&Lv3w!?+^=nf6 zqw4+n1h>x(*l2y_EDV(g{h^O6t{M1i-|TlM8K(DV8MG&rMc)c`9PSu>}(a%#;eQER!U*b;v zFM)7dxsCTWjSw92uRD|f>M0-s22+fN>w^1qNJ2cCb+tlV8^7|3E@p^0Jo9=msrWzv zE_q(-jdytC_i;$F9YN{v`BW~GEoHX;u^oi?;@l6_wRL#)d^JUyz$$S5W3&Jlq~T?D zQKpR*eyabh+X{t2B{&1V*gil}sH9RAB=b#UQqp9S5sUQzI@yWpHBt3$W&-S2r7ZXp z)FFUSl(8Lf%XYNdK=V3l=1R2s^0na!!zQC~*GE8zqVU2ro=@II`!V;OX^xis+<1343Tc*~Y+3%C`xxd@3<2+Pp zlA}b<#r%94)eudcKfkfcldm)aKhQlHp%|{fOLBv!)~bLOx=!EaJQb z1eBO3Rnj^pJ$h4YjhUEC;aAIF3wZi;>5_VI12Z$?!b(o6}g8EwaMY<_A%8eRz3#|QUa3z5DfPRbh!W;o9aBIl@)_SK0 z5Psi(FnA~AUh&{1(OLHj(E7ubiVFFgTMj0ZL2m{e#Ob)zv^8UQS5hJ{U#5Z43@D4p zLbL}iP8Q3BX#8?W-x%5k7r%L7xFG$TQE#(c--11NqohQEHh3WyG(Tq}Kiz6I%>NAc1#b~tVHAmZi3tDsV64oI z(>dO-CYqqi2lU}0;b*ARuT#e!4^g*#zKX3}t|F6uR#d_}tO-IHy*raq;Hwlzaj-Zc zCrGmK)5o{oZ4rN<5`++L*rJuKz_9;i<#O(9bY{JB2i6}ws{H=QY$&C7B}sI$S%W8U ze7O>WWYjt{#(YZsLMxMVRfRP&WHp`7WSNWN9W=6XQ%Qk*qBy4nc zIMMHru_39&NH>{J98Y4U){gjVdym4Q!*aI=dWQe-rGL4Mzs)i@+FP?5{j;q7oEmi@ zwN|P{yzKKTXmIf8?OUI5dpDL4d%2I5LN6mUTJ;>A>$(u7)yIYrxf+o@Y?>EyE#gy7 zhRyvc_^{Mdh?zQ=tKbP0&qo^j^=oJ`bB#1oN!`aR7x0gnu#|+0yd6i3NhgcZqb+ex zSwlfg2(<}GL`0whNCKCz(!9dHnc-3EvZn3H9`2lMVpF}n^U7C37>D$5G3OBtkz$#` zd&5VK9oIn&{c*4Jp+w9sZ-=$c+Jjv5BV?@}|9P09aDCSdb`8c$DE~VgbMNP!&k?m0 zI?)Frx&Ya5qCJOqV1KQ&NbWcp!=8& zYh+Iqky}?4YPqUxH{e$8=o*8T%G*QMeL~GnVjip`q)a9lomQ1RUqnzdT-;417XthYSS1-kSIN)te20KMs#M!<0tdr#xsM z4e`$Tr?+cmv-#n4*u50$^eTVQ zf(zZPmM5TP6w{sx<3pgQw%*AeA0!i&z$3@k-_&xdpb5^DA3uNggvbpGEf-yBddBe) zN@!dD7c`28iz^V<#0F=}yXT`3KXPOLG*}KVBLtc+Pj`8@ccM-V&>vc-lj96yv(W}s zgaM(iwo{rm=%-ES%<15phy}#|!*BHT^&#PlLn5%ym<4OpG_v2&@zs5%L(ErRO0nQO zqY$~%1F;7qa(JZ%uztqAxE%?0B|JUIVz|h+GIU#7K^h_fMVdx+4Z6hEk@%QB^8$gy zL$)gM6W`K6#f@W^SjcRll-2(DcGazk3J2HKH(H!B;5H}{>udz+wP?r~XC8tim8&b; zE2PO%WZ=T*vJahX1B=(Zo&v6qOvD9XA3|*r{}|U-Q=hLeE71iniqUruxupN$6#ovi z$vsfmjVgJw)8ArQiw&!QwaqEk$A>Invw@b%zGDTdQA8K9`gr~OzCNR2dIyE#b-0em zR@C0}Kp^VFe1+q}7uI*`$6w)E?L^$TxNrvJJNLG*@Ln#_bP87e`I-;j?b-{-e=}PD z`DX+@qQSy4-Qrl6;@u;brrT;zUz&gUAif+tGKf?_Lx2k%pqTPMc=4Z?rJ5Bf04wl7k3G~vj zsdO82+QOe|^6;vxl{V`n^Hd9CXjM0`txA|uNolnCct@-xu)A)4*ZwnlQ*t*;;lZp@ zy$cNjaKxr&K7syoJ$}tsxTwx;3y}$%D?^Kh9Uk<6C)clB^*4`6LwjfhyVHZOc}yh&n(i2BFgRs@PF zaN+q|L$ABGEEt9Lhm7xm%Ky|$!K;P4`jR_2GGk>BPR;GS(HHE zpM171hAVph@)1ys@Tq{W5O%r6%2d#19Uev}TV|B=!Ls-0r#MU{u*JIeXZvD~msQ)2 zWTQhH7Z86kxfO%|X1O4P{3$T(Rtni2tld;N+m|*D4}a~zp9xp5$jJV|nEE>Zfo*rl zvoUF*v%|{daD+ajGE3s>5@e=GdDNdBi4pwP| zf~2G{FOD0fmok{_7d=-MNiJA+=rtMw!YsAE-xOs3tTk7^aa$s&+2=G-Q1>7ntM$Vi zi=$SOsl8?N(KdBhh+2Qt0wTiZ^~BxXd~ z&F|n=K$pHaUmv3&4kE5CF#9%b>>8$yRs6SU8foNz)remA%*^eo^vtU5H2b${_=!Mp z6M>mhF+D+7WHI3J4daQe9sIlT`a{MC03Ast8K17S5T|3c4 zC?J;C16E1s%h{;qwGvWm+KNv!;qBb_V-T<; zmi6xB<@@MPdNqw5;bLlNVwlKQYvWUQ=^3ik&-o0mL5H_m5>=d)g|F15FODU6IE+O* zerDjQcdR$a5kw0>zWTs<=EedJf4@*g_Fa#U3`7rYTjOINL&gF6Qlh5_yO8maP z=rFalmHulu6!8(xS<{(%T zF^tfV?_voqpq&B|Z#pZYH*L>5aCwMNlvvoT11E;g%KOq(=a%=@K0~O<-G{HK9S`|} zZkaw*s`l+HhxrLh^`Kp7)o%m>=|BP-FwLt;Bo^Wm5RXFT-YcJ}>>cN8%+&9f!OF+8 zCz3`b4@VZ(&0E+#uY5_RIJ69(N*5~9`j00&?t1oL4kp|+9(Wb3_)ECO(aJpll=%-2 zS>BzoRmHvcosJ!d9~02ut~%4Kbaq20&LflLQd3Q6K4Lfnf-~3Cv$F!8OpQFfPircP zl;!!c4rv9nkvv_P|MRrAoxUR1zJ}TioHeDgg5&@6?mh}QIvdv1dX)ud6f&Yi>a&ff z<|_5N$SoIEnY;yisyqrv=9KT0PouiWZ zr$R<*ofQSI(?EnGAMCfakN{mVp%+q!t-=^PVF%RYH_#c&2C&>>u>feSNcG8+LZF*~ zC0gw9F4<>bd3Rj=?29gafk0UI1buO~w`g1M1J;tI{}T)Ny^+XC&^~?aURr@LYG8$Y zP;v@%aL?st`D+8!0)dvm?apw@>pHitbD+He+ybw_>lCV8%IX)>WkB|g;_14piiNNi zFNN-M@7_)!dYPHl?EqzoJ^v~OXFGh4L3IF2{r$KLCl{AMK%Qs9)0{9TX$;)`weMba+#y7@ zk{&)|&e9^cS`{Df2N_PU1KVt>uz7n+#p z4s%xCt#xMfv_{AFxm1+h*}r$uQ8C(mAcEN|9YWI!<5BdXJ+NX8 zPZ!8}&^SxbuL747=bKY=ZVR%lbQz360&-Wk#l_%SE6b9Lg1NaJBKcYWx4!QU^2r@< zBIo{547)Re-<^&})eQ+q-3eGzGoGdBL+(6+n|d64|#g{_EigjfdB3R=xZG zIaPm~0rE@Wa4%2UzIfb&$12o~j{bm3J52qz1{5I&FpXS=uxr`BJ@U^#%PGhcTN5?+ zpIubzey9HZYB^=^_Qf%Xf%)%Q{O?)6kMD4WBT*DJ!n6D}z&32`rE;)zND^|^e_@qB zzakCaC(+9VP?6br-Lt1o?fSW;f4?>DA+R6QeS+KQ|NC`+zG7Qk$6+#Rd-szw>+hj` zMR|yMo$`tvn+pgN{_BIkKP}T%1H@u#JXHRDMgBHHYiTTUpO58fK#N23#v_%{%dCcZ8}G4fuFN|eRZ-&Dz_Bi^>|pbE(_Z5gdjw{_P(>2 z=j|M&_{IzMU9K~_nz%&uN!J@+#ZGzmZZj{6T%rINFP%C5NM-$2hV+x^8Zb&Y%tH8wGwY!2tB$$a(oP z%SVWsdo2@(4$Ms#BO5>a^h$F#b0foqt7<=tzduI~$-*6O91g3<2bBN9y> z3|9fGK)U!&%mAS^Px_ymaU{rl|Fwb|2ikcwoV18eUnNMT@p7>)L^HNpJ==`qYkK`XJ=kEg<5W3&JOMBy~*1c}TSdReC zxw3*wmY+}mC+n0HFt&E z8@sMCQR>kn5*=5c`$F?4nf&Wi0lUH3z(-2*ltS8Z)1cP=K#ic~cJ&4u1-4L66b!_C zzM36D+qRRZPPBpj+Sjr&_e+^gWAOh|&{Z1QB?(fk2TiP(9yc3X~`H;^O zit<9|>YS)-r>!idhgVU%`u&@mBZ!Cu37?AblGRiVG*Zg;|Bz4V+F2l7WKi{n&D|QI z+uZ4Pf=A_Q(-mOToI46--td9aKs{dS)_e}jMiH#__KHTO#tcm=z0qJsx-$N6+0UR1 z6`|agCy$HaTRj?Ux`;vahefOmTF2v^ddZF(aEPR`{0GXEz2*xs#nGI<!@e$XC0PkEE*qwnM&s? zAPDGjHR;U*`0l@@*B;oepS+YQ(R-7^?(u{!X}sDQZ=S2h8y%ajlUMxQTEv9CRI63j zc6P0l+jb*sxO*s_EpH)5zA@e*_jubrJ`zaRYPQujSPA-N>F#wwVWG|l7P9ZNe zC(}NRbX&VRwvv1G_>LI!doM>%b!; zxVtI5Fhj0_meXe5vO^%H5iclzOU1#X{(+D~*!A8HMEX2Sx~RiMo}rdkD*hPxM~wif zgM^-lG0KuB`z^u5Ves{!rA4@$i8`Ov)jL(Te^f}wrY94(O|aBu29#Pc>TuooWk+%~ zVtW#+B3?F;8t^%h){-quc2@kV5;*%oKldwT;q?*wJ=9HUu;9`}5ji(k0@EH3i>BQ< zojCx#W2FrimRcu)E?SpEJIkek{w*X=javEy=>~4v0RhmgWghvqT>12@!Ps%s{sB=a zkWUkYkQ{0U8&PboyD_+2{@Hb_6`Q^t!G{?!`QkM^*}X zs0~f9LbYL?1>*QOfC5NaXO7^VLji~fY+YaHBL5TMrpZ1;scX5Fdw6E5DuPVWTo#z< z+sYJj{3ERENU7>ZrD2;|=+@?Ga_(3=4U1ittEsfYel>1SlQqyKSD7&nZExSgiwkA6j^(e0QFc-dtMv+m? zxAmzzj~%QAlaLBz(ziz!)q^O!!PX5XD$`ro8OU8atS{2Nx?t&d*1PE#RjGrab~`fU zB!2^8oTp=U&y<-JIcokq9q@}FziceSWd*Gpg6LlCawa$WnUdiD2^zpbfT;!d$LjE< zx!mg)3K`H4QcNMq>Y{<_UD%h6!`MrQoKHm(+9)?-{6(4r-8E6$yeEex`i z_~>juOnz;MO9T&XVpltxHKnx`gSe!8_N>k7J!P33d)zkCb2?`Tni-D z);!$leC#ei7YVHIF=8pTPQPG)DLn%}ZQ=oOARHL&t2QEyDE9$Zx``IZ^CmAS^VQ#( z1Ih0j()AL5THIU&i*V!<2~ccmX4@!kzDDWSG-aoshvrKjeaJKumOYW!#*ma2A@GYv z=u+gUtBEmJY$T0pg-?6!@-F_PL_g?O-)VR58_$@`TxIK-(EA#RJ%5^nw|7qLTpU>n z$M17l#qr*F1I1uj-h_l#$*SUzxh6oR`GgP}Pph66n7IHuq&OpB$2>_;;BdI1Z8*DD zNcTgC)l4CQ&?jnYM$N=RaGXsZqC61)5%04Yn7fMkcQ1eM+KxgV5!BZ`HHo!T9|D_e zH8jPLd4&{(>AB1^+V-isb2893Dz$uN5M-Y$OVC922g2t5{$$Gjsj7};euZTkHv;_Q zO`75Z%2ppTR;N6AvjZ5c@4j}w2AZCp=FN-gu6lZt~KSLCE#pQ5-rmh9d-q5)!{vzM zya(5+EoUTgIi1B<-AAHKCbORGj29bl1}Z0wb#ojR5pbE(6O)Y9QY$_%KlGwvbf0@? zF;%0CY{G2x*=^cTCb8|=czB84O$FU)Ex~$;BSW@OY-K{Dfj{Rk77(lX(thYTVt+|E z+ne3oOoDX2@7?(J?LFQDG9wrpioB1~{CeK5oIW$VTQ`}=XxQ=k*qlr}z@Apj7`I-L z)lV2_>7^uibWX4M>v3i$KU zXDx74r8fAjT=9V*y|NNj)6drc%C?)ZA1AczTWx2qb;z{^t`pO2xTF@t4;g@C1v=8k zqZR2UtT#2Zs_|pJq-&RZ!%#q8Y`{8j)B1Evv#LiL%wqA4L69G;+{r55R+rho;t}(F zdPMo=`PtEQwSu>5n7LN5Cj6;oFbntj7KBUK(I| z+2zN#8ESYctQtp_nDpNB#!85{rZv);8;b`l--i3f%wNCYz#=w6}_GBSUSY6d&K>H^ohvM zh8Jh^itHPHpS+hqmO$B(eeK5bRMB-BC_cpz-QfQIG$O8y@s-0dM$m`Ohg{_r?iew$ z?UrxYe6z^~m8od$XgQ4JKEi#EqO&x;Fq&qo-%LGX-;uV6w(Q{K&HF{^xutx*^6rL- zOS-4<=*<2e_kSbWG{J``>}qJ7sDagO)^Z?}H!sy8d*jIVyJF1<9-HVT7Mz|PZDl`& zy03rgs(ZYxi4{h9?p3?zdr94_QSXfB{-ebt3lgW)TRw#{P$T%z+4zJa^`#|(r(v?- zrj>4AcM%GkaC)4-%r(rt{R{Pw(hGFPWX0{SwKS)W+mH;`4v4$dpUX0H&l&CwrI!Vq zsK@DY1xW%15UB-!eE{UP_YHJN0cukLxsJi5n0$BTWj5^q7PFW9!(_?dzbRq^A6sJ}pq%snPk8v(!Tg7il2!^pBy`96DYNZ${3U3k$&0r6u_zux3Dm8 zT~f~kZYnUTklfamkSOkI0CJ|6tt3La8iJK?$@kT$<7RNeKk;GdQ_iaG2A@$pXF}z> zYo^n3GH_F$Jir_o%S#p;#^G5>_9s*(trapyYnuua{i2V}QJ!mtzNU^&V%X z(}Xvrq`tx&cGd<&$i}#&F=*eFC31!9DKC&!x@GzO=gmywBE!T^l)h;Nyb%pn`cZd( zs9S}{p>0)l+t94;QS%dG>(tBW80YB*B)fUXJ+3fZBIwdw*Y1^!x)T`-T{0PPCDunT ziyG%LvDEtP3X7K33X5$|DXG+oQ0{&ZQOw|W1nCEMZ4!sJwuMPon)xn za8vliPVu}O3Y5jmYWFI^n#vIcEWSgRNN|lfkKUeB#1@kGg|us+>BZ*N6lWS8gL#=3 zM@tT;sd&UKN{gWv%Z~0agZqdt(=a#czb-`z%38?;Vr1mcBid`E8#t?^;s2T6 zZ9&(>XZDJ^X$p%)n<%84M2MVxtEOZ~5>#`3ebcBd)3WVma<(CCGH;%O8AZqit1zMx zd$$$(Fx}m{I0(uPo6Xs}{`t*$_eH)kWE|_PKGtds|1d0tltDzVWQfx;fWIjuJtdY) zcWx|wwc2w33xbQ*4mT=x?yZ?6_671n_m5+HNl0ti!j~+NYZhV5P3!Mo03U0mAuLl( zyX6H^cwuP`pQ9jdyBYPe6?aFf?yV-($M1e-(;1tCo+=bC*gYm}IevmVz7qy+aj^k5 zMu?wuDwK`z8(FSjO?Sh<eYm z2lA(t(y3l_pu^h+GcMMB?vRKdbxVi$nVbiOsgav7=}oK_rhTIl`Zwb8@Je{RsVCSA zr0k-|t4?!RFtMZU=J331iB+eVZGMn+h}0S4r$C6<4xvc7j24&O;ce9>fmCW^mK*nV z9?R6}V!?;z__oBRw5+Uy7lqMo!*zF|J;buBn@~JX!}+&*iW%m8+UlWZ zx39^%sRl!;s?!ljjBe_lHr}O$tR}Ziwy!-yTlGzTnnB11dINNJeRfFDjotSMXi35o z&^$T}{Jy-RbLw~+-%)kr)$bdJpn$EGPGg7E5>{wwf-g~E+!k3ne6S3oHs)A~7OU1Q zieyOt7iO=?V9EurP8CDf7>n7qrN^W8s&yn!!|rPxtQW%-HhHiYL*4Ls0^PA0L~h5S zUQ4O;WgSD~91ATcA4-D_#HgTGQw>PkLuvs#xZ?S4%gB2w=eRA2*YR)AW|dOUR(~9$ zUAUg7C$O246O%CYQELW-+&yF%FY_IpHCk;;vOb=?nrHN#ohbE58R-4Or*|F?Z=*1; zzvy|6$*TkoeGZ+Nm=`{>>omIn%nt$ES2R0UmmRaaHg)zUE5aMByJ9cTG}gH(NyPb* z$v&Yt+R)UOjV!uIWe6`p+Kwdcb(z+yUY(74I%Sh*^t0#0T^qoyLv{mD_QqS}IYl3( z(@7DrCJRkJ5!^N&`{ktJ@A3AeTy@M^7BXF1EuJy@*jtW4IhVMe#e9QV%TS&y2k0>_o0F*5S7qOwu9|_4ua`^1j1RcB8I)s@I$K{kj zG1SXeW9H&Vz}6eEP{JJ#kp=mhySGnHNGW~RzV1XdK-Ze5Ch$$3YLR*HLw3QS#)!TJ zOu8fmHl=L~7xTlMMy!;MS1fvM1tnEy95M89SWhKlD~$#`-|b$!?T@Ganx1@D3G%Se zgjd&^(7LnJPzSNWS?^3X9TUb215&xX6J25g_4xaaJItg>+sk7h_;Ky5F-`q%R+Hc7 z1KdwDm3h%@x8;wxDbaE{?iJ4Mee=|9G^!aV@=}ItR#UL_g;IwKIF+g`W`LmX@M{~f z;n&r1UmSTH8QVK_>&Gf1XUs0WaV5JnH0OKPQk#OxxdvYKSEo*JyE%I~sPRqgkfuFO z(@U}gEmn*iQ22AtL;Mrblrv@bQD3XRORo^)6MHy@4nBKIJdDWp9G0ko4z|6 zO;?YkOh!%`E67(?WsdB>3rp`wd1($>lJw=+Fswuk5o5Ki-hgL3J4IG)jnY*mFT*b^ zvX35V>O-rur$UOVrd|J@IAHdAS>HMDwCJk-lA+aGN5OU5V@xU0E2@u5fZ$C{isg8< zXTdAp9VjQ0(V#bw-rw0dkHN%UjH3>U%A9ig?nHewO;~SlG(Jnzib={9&Za&-DQ#c4 zq}!Q4aXUA`Vk0xz-#M>nO%*Q0ugc_ZUPBmSil(G9p4;rInwH+UmR%c5p4^NY zAd2MH(e|~3(>!iu>n`^;i>cBrQ)-ribKq7DiSt;L z9^_w*n@=eKEV>VI{PvA@R=L89DtWlslcadPeNU-EDPNzcdF`@!nN$IDl^vnOyOUF_ zZr?>#y)CYN2%&mh%>vutti%PU)V9Z^09c9ORsi`nZ6&cwa?u>9iM*1j*|C^+W3s3Z zX^_!292%%**6IHxfl$MsUy)_ld5ZZZZZeNM| z)QiiyzI0$C@!8W}qEm>pS;F)aSE-5fvWamJ(_uCcx*}HP(=?tX<#iFj;Be#YyM0kq zY4HV)-Q^rL$&t7Kt{oBb)}W_$<{cAas)L|W>kE6w^C%YT-CCXrORfw*8zBfXkDBfz zESmF&LZ&KT)64~;0=4`H74vJ~QBDd?n0s zJ+7o{c+)2V)4&kF9T*I^vAWiXp^chkM+hof4>oHtM1d2Z&Z-pYR17d$(6AL4D>Eu6 z*2cX6f%mfDn_RQ6Tcy$(3z-96UNk6hRZX-rg$6ehRAhI5BQq1VzE5dKvTV)LMr_8!(~KnWu1x{Jy<$6tE?QYOTB-gtFsAPZ`J%xx zO`Z(2H~P^F(o7B|<9$dIv@esD4zA&gS{0|Gsv!6ejTXQn)^}zk9yh=ZW2-%7$h+&U zn;u!=%I`ImQFKHjAHcNDow5askgiU+N#0sZ%sJ}%KtWZUp~&IYexQED zRfnJQ1nrd!0HqtCQbleS$F+ixYr||cTt)_g2MaS0)fU}w*Fz*VmZHo>DC-S2be&lJ z)ks_ume>O=xFO(rM8R|^hF#detzxkZ5XIb8?%37eb)Jy;>S11X_jTt5nrjLnir&=S zMrOs;p>&`pR?DEy(06t+@jH@tI~Nxh_aNB4#^S#kA^he>&S8kTA=?;zxhcmkd?F8q znnY@13^0u#y~UL+D{w+j8K;XkK@OxHW2G zyXP@62ZkgEZ*4Vl)|s|sqc5h|@S$9k%)34)arF$4MsD?|@R;2me0O?FO9z%aO`Ir` zCCv%moNVVgwE&YTJpMQn3lquEEkZ38i!-tt=vZXi)-mZ+TZhosNVwm?L1dO`#Fd8;&}drh(6>;yN{q@j-7 zXvp_$K_$RFZY4XwiIrjHwa?qWp#2Qr>u%yQp!O>zTE13qm6Qi(??%*b#So{zC2q%4 zv!2Aywf3jr$GiWJvA2$DbKAOyTMETXp~ba$fs_KptrQRL4#nLqNRSpOP~4p&#e=&R zFAl}sCAb6+eCavoo_oLFmGO>|KlUIaA$hW&z1Es@uDSAq+!Efe8ZiA*?bo2Z>>Ba4 zR})#qIlmjIQ!|4Ogcm{itlLa@HWlbu)n^y*VKv1DIb^M=ZPZJOGYJ>*@GjutFF>1Y zd$xVh$~r3{6mByqtuw`98lgjMcRPPQz$O8cZnbgPKNpt?uB(@?q^0A5U6(_?zlx=t z92n;;2RT&5AE;(&S1vnm9#3>SWGWkwy#*$^g~MF!&XfUgid8V(o4tjC#OrFhzTI4Q z(Y%?)OxwwyZ)fl)6Ip4Cb@dZfgb%_lm+b7wB!u-_D6)ckDT?$T(8K5kHk$2ey~$;o z5M@{Ry@{KvKeDBPr7E^eqJ3v~v5y2k%Osuak*nprrth`!mlV`Hzy8oRmxG`}L9KEZ z@P?pH&}Z&SpU-wd)GXA>N9F@!>=_UG4`rS>Rt5Sx;jjzeLad7o0-4`Ob*`Qa{ZGM+ zyn~df(ttwa+mBWK%0dmM1Q!&1Im`35$wUV;H%D0&*pw;;RCdkb6ZVOKe`s0$LrLz3 z{}|mWy=CV!{#j2F66Dms6`9Ex&*U-i#Wt&6a4`v&>L<$6SO#-0!G#KBPFB4Z|7lO} zAT}mH=EpHA+hs`+R@TDkz@Gw*sj8z8U_&+^CU2s~-KzjO>|{XS+Zu7qtqy*g@2jDa zZ5h5QTfyXITOZRe2RsGO?G_2ww)U{mT1zV(x!1#R7l*XVn;FkCfkE^8thcFL<)&*n zHyM)H9=a8>hAk~v>uKWH8Z7?r#6u801uFdP+l3yxrR+zIEn~8%o?bY&1jbL@#wXd& zOOfS+9_(8!oeL38Ig;>&W^%2Bd+CZzn_~Hkc*9a*A`a5FA{Nu+y_sgs;@I}f;_%{K zIXXq{G6^jyuAGG@cJHpTl3zDO~2EN7?#f-|c%PZ=l6Bl|T4 zjr+gXRJWzwlLDZ-@0%tD6j#_UOOUZQF>$7#COXy$@)6IXY<9oHn0}hwjP;#QFx%Y4 zymxGBeGrwLd>FPRO|JER$!a~_K2aZ!lI%Rg=y(}=BDwUVuv1~Q@po$LRWm5F{rj!d8-LSNpSL9S}LKi`>yn81EkENM~Mys zN?b#SZefXL8#Rt_iKx@?$;Up3d{`LXfMTnr4%@+5TM`W|2A=uhu$CYHj#dIVP$?i*V=w~%z4=LM_%02kua@k4or8|~)=ZJ% zmqQ)9?6J8h-=4FzdRwKP#ujn{Z$h5bBdMT?gjE+)kTEfrPAI?}k>FO$o35CUA47_^ ze7O!$5I!Y(lc(LVMp>~xFC zjhn^~nCIj`(LNlNc(zdqHZTs0-rx0zMTN5J^?4b{v*N%~n7>2hgnp47CM?Np!jD!e zoYAnuMz^VsB7cGvs@?vq&U&r|_t$4$%N!S`IK4l7MVtWcU0N^Dtt}X4tTQ_;?_Iel zWJWX&|8I$22}VG{E0Cm|Zow0wZiFG4tvjNZj~tC+As<`lcFX)_(JcA(8OU(FAj6Xs zU3H(&;lohj9BK0YflIj{jsOUqIQ+)(iB8J!rOqwB2C)SmZSmrbD7i&Z z_NT~nonBL!eliH&N3KdjU#$}yU{QmKJIgK5oPzW~#;vsML5|3OyfE`Z0-MqhFTKN zMN4#d3nia{ZRdivZTCp9eCt~7EB%9;NbQ!Mbr(D)UmKESBK}T1@h})>vg1=&*~kye zEU47r*jY{4E`F4ZsQPMIOba$ff?P!EeyBWm;XrOs{l3*P_q zuyvGBt~aifg#X(m^A@HaQ&js0V`^ZbM=7GP`{SS`8=cx)R$qLWcn-A(AIINx{3MX7 z^?W!4C{+PpgP+yPo`#(Gq2xwU{x=bKYM&c?y!rhfyg{z*KRQf32_A+RMYn+~^oG$Z zj`bLEB+2$$u&Ik^TbqOYy@`c*b}}ogcxx+&u6sOy*}rgtX=+&Eeu*>4PoC&`+$(!J z9;?ChoBG?B+^Tr%#Bm?#sWP7YscUJoWzOYC@J%FykFJTkOd9-&-R{@r0RGvcSld!P zjl$S{M`CTR8laUI-6SjVxE8w{-AYn<-*MkFt3wO)0EW6hf}`~9Dz4HECL%jhSDqJ) zKp;WAaW)Q-ED%q-!+?3M;wsl8>8%=X%dRi>n9X@7yY(!QX8mJ%$@kK|hhN6iZ*{O~gyB_l*WI3Q?!W$YJ^4;0B{IA%@! zG{-QVNqw6dM9()Q{|}<(-(&P&%!`2I@77C4CyHY&Ld_~m?qLrDkNrgfr!_LqXLn=> z9jtmJJ_T;b2>nR+r#$9KH{35@zjmxGPk+3dKC?YEula$D4-WS6ADX{p&>YDB#}@mq z|JG8;FS*U~q^M#uWao2{qCClLx<|J(rECg($nn6LDXA>NwnD52ana2 zC}|BuBSy!i1XXjTSH~-r1sQ-UiUSRGb`)I|v-d=+(%4u%bUm0%Uu!j)u4=4g*Kw+& z?fFY@QiS~qs)v)uE^M1s|JUPH#E1O0DFc(8zd?OU^Uo&EU!GcMSgj~+q#{tBjJ}LX zgpu!ZPR`K|AHwE&(&qwnd;H%WivA+E-p}D7+6-*Dy|P#>Dfx?7K7SRHDhJo%FPLU8;^wQnc{51tA*$sCKphfAwjOi5TwQRL1K# zob=>qbx!4dN?IWy#R(F0ngAO)tzPFdzP(9w#hZ3>58=qgq z@Cq10Ba8GX3mm^iOQZPYm3neA@7`Q9S%dx(vZBTFE+BesnysF_G&WACUq|toY%DGd_h>mYnb;rsu zvY&JJj&{}i5Burp-m>O|J(SjXA>c^C3%wHYgX-$@Dz#$9yu3WpIVLroV%6fJI6O5k zSCL{X+rqqwR#aTC0I^Sf6fr(W9=+u5^c=BYW}v*w_D)CO#Ix2*Uxrqf4Bl-U3<=#2 zG5XoI@DF{fmbZ?ekBaZ+THCNWmSN)SP>-W6bqddA{tFbU)L_!0IM$QVWlZ}&?9uP{ zkdrR1+wKEAeBEW=Q=0@gpHQ30lZDQ4G8t_mM#heM4IJ>|H}Knmd>0KQVI$gC%+wHZ zEmTH9u4K-_qcD*&x5)#Q-nN`>?OPE-Q9yJ9-cM`$aH!h!r;6$k{c17|YKY+iDx7UE z%+O-0oZyb&t|%u$v=d^nT4yj4ajXI^yYx^G=^}LPI$3y4;}Ulork9a@Y>ksNeHqxk zW@>HtrFjcmD)oHqUmfrNULOkj6KWH5zi?G%-FTW2*`pyNzi=DQr+G3yiL8qi*|~ER zu{J(=WkQ3o=_*>r)vW|cGOuj)nmwN3_*`!HOW(!Amdxypu4&czH)HeT-Rex6xx;g6 zfDj?;@)zOS{ia`elrz_mqf(uqNK4u)+N&H?qWclcF2s*zeDvcHqUs=^S>FAe#@noWW5R&GV2y-# za_b$;P~B%u;D?Qvf}JLgvb@*gB={c&5=deDTaR&IEtOvPD-G59C@*D_qU zv6UbtrsC{b>Kr3At`9QrY8w{E8Wzgn-o^{vqs&r@nVmhwm2MZ8jI%g-%QoX~dZx;8 zw{0%G9SeE$x{hua-Zp8+pMH;9prAsk^>{;(74FDPdz|&W?;G@t#4IiKp|9V!DhTow zS4mA-SO&gqv{d*Yk-NI=&9bGZXpqqcLeB$&QkzP)9Z%4|d<|81^>)^tXD=q{=B@M+ zv3fM%^Ymgbba~3|M=tTQ^{aZV&Xk>#eHCr0TKP3}bb&|6SdPRS)Qe!_q-8^skpvWt9EdSuNC;Dn z)3e38vmN|qcEe1jgZRf4KpvRa2qBDl`v+wc>uMM!QVk=^r_Ef-C($A(kI2%OKZLuI zuX7BJP!81Tj(QbpyvF&CQv{j5vE36N)OI9EjCWwVje>g%XLA7wPrB;bGJnK`6UOxs zM<&iEbfu0xDdY) z>Wz>J2001-)U=?`Qh0=1^H`0z68K=hcP{-K$b9Zqz4=hU!fe&Yxpt`M!*CDj0c#;R zz@RB2_Q%-O*+3BE0eFw&y?L|AA;Z~|a-(_i7X1t|t#XhFxyi5#GtA&J(rtAjkjN%= zi74=_k#rz$cc$>D7mWwMq!LR)G+UuNVTdGRoDO4M+XO3PPne=tK0~tk=Iik$p|}rJt!!XEd)4{aw{IV`Iy8 zvZt@9y6HAv`AV_-F(|#Chy3NIAo8UjCvsI$ivv$yB|@_1UX*qE!nylW`I`pfpN5}w zj;raYZFLMG;wd9x`-Cf**-xU)P%O;hrJtF@w&ht*&F;|9cFGzn5$~%mC#Q z#GxC3Od)|3b1_>UC6nm5-h&My91NBP2H<0IgJTENp3No2ZfvC5o%TxIH#byR&g;WU zW#;YA!JC&f1OUAp8t~c1a7fmQVrTmO)0Oz*X~kRzpT#Ym8Zrs2!*Jrvwn#Sxfe2Sp zcdC^Qt-UMS>rk3-WQylVTWB9K+Hm?rSGoQ^tp8q&r~9EnScSC6is>hM^WjX)6>sMn zdq$J*L3P%|`)RW;I}KPOSF0j+TDf2tMkfV)z&%EQcTsDj<^8P!Jt4wY#q7!%zh^?4WnyFUKtH*#kT39_ zjVH${Fc}nS*Jp)O@avG&OTvhhb%*Qe$KL5=EnG&4MCQ@0Bi2sr02d zS?EPS3BTDpksK=zHv5ByxbHjnnLQJem*$kPz0gE4Oy8=zmp=D>>~-R$cRZy5`c*aR zBZYn8;fQaM)FN`r6lA$=JbFyR#Lf?| zqb;R{tVzQsFvoXD%)hzeEqDnisNjQa&|E@%sNv(QcN-a@n&4(Go2xK5dscCN%J6#x zkN^mo==yd=@WtWIE1Kgy=n$hW6{XW=e*~q^wJ11j=!FnnSbOK9UduwcdPr%5^X6!D zebWV{xaA~6f@Dnyyv7wLg}W%6%qpWr8ll_t5nf4c7&s?#uPf24x~D`STSTAry+m-z z^jba@i8f=4tK~Wh;RoLBLFGIbF-&EQmRHx4cx=Cgp4&btluR4yjOn0nLZH1G7vnE_bM@i{*!&+S_0$Xuv`n9oroW^dm$84y)cp=T>s>NlJ%>0f1BYwusT8&2|9C4 z@M?rv$Ly+jVsbOo<6BGU72Mk~OTM@HH1qj8jSeff$;=qR>1;F~HKifEZtrs&TBls2 z25z4Itxl91C5kcanVi+7TMibo!zUUio4m`L8YCb!|m zngL{{I6WQQn`a6G?K02S`2e+$2gkICjd%&%U~!ivFxB&3wYbV$%V#`!+0klzX0N3$ z?;c3j6FKKc^Ymy~bXu^%O*K=kwCubqCQ(A%56@S*B5%^vrqbBAxnapx$ar{mE9VW* zC(ZzoG({7O4;dh=1}Dw>I$JFbNuIFCCzA3%WE`)cO`CIhUw#Hhq)%<1=A8YC-18w; z$@_qg&q*GzCeHHs-IT~P`SDY4vUpUWYB~#LVs4G!mQ@iZIv(#y}cy*-? zh|KiWiF}Jse&?i`#;T~nXpygGYOHnn&5hh- z-IrH4g?i6cI)vA8HQun{mOn!0MPn8mg$Sx79v_B zd{2egtB=H&QCD9(;QSt$^#6ZY(tY%9r2SC*rFL2stX~BKRT4o}2Lr=zJJ<}z9Pga3 z*n7?k3sCq%Hf(kEP)HcZ)JtqXe_+BGKSncAgSVR6qZgUAMGTJw_GItvq=VXYc*%*a z#pXzihg{t@jhWB3^?Q=$1%beAr4}X&w#xuuu?^a!9TR62+7LA;>}Q1$Ix9FsIFS^p z){iZ{&SDvFp!PaTg&nseleFdqc0AR*c1T6c#dSGe(ovW4TFpn0tqm^`Btwsg4|~~v zRup`a1kAHdnovrpUdCJX<{pwm2~lOzAp?+3jt=xyI5ptiG+V5C&$O8_(IRP5>*h1z zs!<2$>85dbRb6sKB{DNdu_lHtltx_k4*e+dFh2JZ7u#fET6E^XA4}!W-_)wL*IRB> z@14SadlM$E{hVO6*7et%X9y>zkW*va#4_CAh>fUlT$5X6Y*bPqttw(DjxC2EAv|ag z=slcu&p_|b5hFi0NZVGZn~~UGZJ|k^))*=A`$u?CL%Jh8Y`Zb>FtDV5d+_VB#5uTm zsnhcf!&2a>@sH}UMgTpRJmub0$=AfjT2WP5*~*>8ARv*QVt&yLfj(BHmuHdi3hd=x zuW{*gW1O+(hn-jpPC>!KH(@Ek!6HU z0)dC=^E?X%nD~whs*{i8U1B`vjywMt+4%3NWYl{o`j?eGm6;dCb-_$0wOR7^HW`4i zn(*T7N!(@%yX52bptD9DtKQle)eb`AW6xe?9w&N?Gxf|# zldxUBwlkIF)7hk>ot@BWI<+Q`lA>$=@9yI7N~3XN*u64C$GO7V^dt@yar=~JPF-m> zerDWEj6_^e+fo-i%}}pNWHnIHdSFRL&VwT&u}jgm(r0}|mMWv2D_%zBx2zaU{uh_R z?ohN@_ZwGbBU@}$i#ft=)_^^ddWbhLli3ScdaWIqKYG{jElJ>31IxRi1<0R)ZksaM zQCLN&mcAO%NKm$XX+7HPp9iTHJK^#u!FcNZ7W+V3@cZ6*qqgYHGcv)z4ivQj*WmB< zFTZE6Ou|XkYd%QJ8kFOW2>%iTe@`yxKFCkeLEbdOF8cO>YGD18I$-49Fum12IW~rO zJ#Adz;`hwW_Rms&Ye%22RO|DDBmBH+#+ByG8gOwxro*It)nP;R6Po(?y!-tdI`%PU zbI}cRnS-%}|7~t96&&sSND;%BkgW5|tmLuo88z3ZQn7lVtpP5pGsx^mpMC<79Bl-;#VytP z=%t5@S~JSe29q?UuZd5G45b3>etwvJ>#ixc$Z2Qz$mgC}QxXuyD5w!K`Xmz&eyH%0 z<2#=KaQ}0(5$IzgyJj0V)-PY)KyJS4tUSD0I;-02c0iGvBQ-6&Ci1eh`X}`>ob**3 zX<>l%cauY=m@C)r;`QT$=eRBEyz^Nh37_wK;`{c{BBe$x3+O(1<`q@xzO5r21gEQo zT3z4C-sqm-Me`X9msoteV5Rn+&DP(U>Q4w37_ni3ay#>Zm(&q`t?wWjDDgVY->vr{ z534WYShN)}A*6MbVl8f;pBGm?uC-JrH3e!zIk-zyr1NC;A>9hs3rBi%NQsP|#T%&{ znXgY0e55x8jPFP-7U81RcFLIe0|YA64ya#~?*v=5jzbAdgvsaTd*ab*1eb2ea!_6C zEZyBs#MV=i8XP#iNzQ}n@T$Z4df8jIs{j=qy@u~Bgf-*W2EtR+fI5qyqP``zqAiCq zkywXoD_V@rk#G-#XH#$qmvYx~KDMR&aW@9pK_L(M-^UXUl0R0FUt`|*?dNjRLx1G) z==Q>u0me-*^Cpn5aSB4K?RNCTm{FsV$H}A(CTZnaChCiL*{mSN8s4PKW7xoV;yi@hhr8Umw-f&}5IJ0;_4#6k=A9FdE#BBm;M&ubR?ZK3 zwp_TALA$HCjI z1W3)E4Xat3a^h8c$VOp2-Dag$ALmGgFyWYvP+aY{(}@#VN^66-Bt{q`fWVWEA|`Zp z$poOKB0J6!MwCkOV`eF`%38AdYsIPTCWV-To5^WN(~m_ZU+pWy0|`QTW3^uk{K{|6s6_3g+W%QU}leJoJcxaCfNdC%et> zDU$yD)KTNhfQX06`W!mmWMm3#q|;z^TeaB4KjO$gFXO)i_6W2uM7zK!7rNR;XqAEW z&z_HDIH9$c1n{9FJ%hcQVXINI=GPN>Zi2Yt`7DB#RSCLR2}2=ue9NI7vRv&GRF)M7 za#lO7e2$qBF(3h0=s< z)Np661s+333zN7W+{JXmri`2s`jdm;Jn1WZhTS3B*`Ap{zSyPTBO2eM$0lzaebI8y zhk|dbm?1zUT8B2YGXzG;(qCXLFD1@3xq@c_}X5i z;uin9fIy>(D-nSeVTd%`?C;}#uy5W}2Z*S#L zNR#{Ho}l!P6WTM|IO@EVZ7}{1@Y&xZGp`hIqi$NNA1M46cv}wpr)hLh^dp56{y4Wbcjv&-yZ%Gcp%R{F0Az3%(+#x2E0g4{tqgG_l6Xp4Ov>mAupY% z!$XP})|W(Dc;QNOVldMda}S?3yT2~y>FQ#bt4?M$X>AF?oRu+BK5Y%yljd<0BAK?Q z)yn?~x&NSs||4zRD>!aN_q8$?u*1?}CS#-p#81mTw z!0XSjM<4}D3wB-U0UPq*l7)N5JLO*!K*X2Z!;IZ&7+DCEfOq8Qy2R(U8tme}rB5G9 z#kGw;X5%>-zzw9EmrKb$z3FDk^m>j9CTDZxKK?LZbX9KdVO$_2{{VZLV29OnlsP3i z#gaf&@%!kx>v#m%>S3TYx>+HyPz97xw7ICf4f1v-x^^<_-n5=Rx%OkSn9h2Br(n>@ z(OElxMc@dU47e%KWkTiit$%_lFZPI-MKooqFL?H7x|(8?V`Q&zvfHTxLbde%5XPHgWMnnggGncHhN zlAwj@^@FLh$|z*N=Ut*?$Rj!Bv9v8gDOIyir+d+yFW%@!h<+0|oNDQMeZsnW(*|5& z#;Pl^RG@mjXQq0&4VikoKRyXEaUQ`^xYV&#s^DH(O+ZgJDQDL*7!*+8=DAw^nkP1n zQC$87*>yQN=Gv)CD+$e7>++M)TKcr$Y-r^}T836kjm&4UdHvP|zak-CvWt0cpE@X( zz{_BAj+B*+Yod3Q^(YTs&2KTb+^Q(8oLg20dP}D(x6SNrMd1A&F7pm;G!{zCltMd7 z6qVC%M-QLrfiAYXi_{ww0v^~Zi5Xp$k$YN!1|d+m$vvAarRtL!=8cX-;q>+Z@!py% z<}{%cFRa+*lAwGF<}U_yy6s84l88Se9fcg}XkAubf{^ty$_a&*G8zw*#RO_)t@opH zT=D*x$?S(b9^YQt#x*_(NRR$s+cHO*N*~=)%@ZEdE?!z)Pf&zhPj7G2Gll}-jFP+U zWE(sx$D^-Wv6^rlRK!h~1nP8kq)V2q#G~Iv(K$b*yP)ql5;Oon;T5-dtyixUC0#G< zk3LHaKc)VR2aFuH|JKt;U>X-`eeGhQs%da}1>)x8I+2(r5Z8n3ea%CwkN3I{nR3N68t``j zI7RNOJr>Mh`3~n@Z@xRiytP&*>bg zMpt2*Y~EA2i__orMOf6=(!?Gp_*}8~=sCOC=;-rl??MZh$ExSQb1RMI$vH}igAe&U zCmS;!cBQ>>}niomVmGn8L7kRzAZFxWpLf+P`;;>4J?d<0QrWX`flbXaWq&=_3`ojy)5*d zWkIFvJ%fTpDkL&Z9K+*vIw4KV&rT*~Ltl?g&m`uGw?3yp+>)su2d2YSRc$|E)m2PE zc{yQ2!OcJcx$r>U2uTn8mKF=WC_Gaf3lViFef|`!k$WhxO0ZsrcrUI}yrtaJ>q~3G zcH6L2cmduDJ;>V`lB(!ks1~mS-3q5M@LwBDJ`F(1j#eO&U(*~6stxIuI@*ujCub4 z*?y-Ac$$s>E0R5yMAn{s<98B<YZac_O`kzq|AZOId0$~FR^+;a3*=%x&_s zHiNEiE%)# zBZPl4ekI5xcqXnJQi(PJu-3AA`;d)ngL`3`*>U3w9E?YEpjm4)`DPQ<*i20#b6z*W zksuh6PMJj$oM#WucnkNj`j!zLouE5)zi&2CHa|qt5o6YT`HSv2w8)TUw`zJHt-Jj- zs;g?1M@EG`#h;Vt$AcerFQ2bUvHt5l^#882(23U4(MqZ3^ut>1L?x7QrVEoWNiPHU z8jBtZ`Ucs6szuT|r8*YJBVYtmo{7)eS+We}PgGO;zg+qna+{EiaDTne+GR zNTO?dK)4rJ2#-egrIH5g>byy&c>>uLuG_gzfq3^G0ePvs6wd~^xTxE*Ekgz4HhtU)Y2ETWGZ$9 zeOMc7n5;^L0nq~r6BTGblpnOh=AklZxKKeRuyUt{{%IicvJh#tCPi+SH}2;)3Qax9 zXm>kpy{jhI`iiae>Y$Dae= zr6`ePZ_|Xxb_4%cI{EG~t~VINt7xL>+jD>Uane+|Z0kINBC%tj$p!`fE^~rbNOP&` zyG={{^czr(Kwm0Hv3w`9Wh!>8Gwv%D>lkY7fLa9HlO^^FM=x?pz+K^eK*T!&f5(#> zD!Lx+Y`-C6yUXS{cP_92tDu^$q$kOzLb0LHD;CQv@g2Q9%32I^<8x` zIgK0La_qUbE)s%>k%ZMV+YG;6#?!M-`f^F#aRIl<95WFd)&tA8jgS-};OVW)dCLuz zqgT>wcADXpystPviDTiY9Q_bh16W?Oi>MA_3&57R$W$$Vbh}Zi6#kebDukzUOA_c2 z-V}t66U1J|3DgM`Exs*;@n?y?whm~l9!R9T=RT*@bJn7sA}nS!E&L|CI-S+?2hz4c zj#Ss$;o^Sxi}`nr{9Q{*k#Oe>Z3{7sk+b; zzMB=5c)Z4`0dto)1mu!1SEQ^^v(3F55j*T^*A$gFf&%5}|^?m-@m zu|)YOfhBFo%z|#yypKD$W`*gs@Ak9e!rNW|R{MxA%3gsfZr(N%uIoxwUMWo1HZAFm zSYkq-c7=bD+5Sz7VbcA;>*leasDSwLmd%emDL4z+)<1y#W`!JxE8Hn+ekD4tFpyHn zhKM+=xml2L=a$fdVZW0y_1YWP9<8mUZr1_06tj!fhAR_$!_U;zXca+jEgk8TgyB@- zO^?v1R9<7~8e~avq-mSM%SBKZ!F7~)@xD|T~xJs)xoInk$PZ7Vt{p>f7TM z4?o;CRB?B4fmiX36FpV2HMA*p#Xwd&F6l@??b7M(UoA}8WXGz}J-<}X-~Ne=tsLU@ z9hX%$H6gdew!>dJFkP_&J^1gZ=Haur8i=4%pNV{B-vQ4ZsX?50hxCun5OTtXYsT$U zpfc~>ZxAHHmu7JY^~3VtrykDBKWfuBA(}=Vgq{$$4A0hT;(bjp%~)-W=XA7mW-cWc zW^_c4bZRa}!cF^ydX?^*y}OUaTrjy&KHP+plt&cI9Dj z%L68sO!cR*Y0a4=d-11**NA~!HC~sb3zA-UEox=1cHT3-P88Q1`W~R~B@-s>MR_re z2V?Glz&WBWZFbb82lf-bCZ2~R9j1>gGG))-y1D?)I;fMNv$&+Szf(05^S(~PO>ag&2TBOqZ3KF-L-WH9^)9=1?B_JJ@+vkY;8wlQQrM@P-@>4)2LrM zc4+g^Awq4Qo?PWI+#}P(>^tt;)KNAVU0`FLK;S#!>%aZ*8OYBPcMYrt+#Y9lNLwb#{tq_@Ky%a^j67J{-SfXhlaq0ICpnOcz zui^IbZ&;$uyet0CScs^=5zqbwOL#pT-mU6rS<%P@SZH_61RvS`jWS5_{|P^G%z&HdKpx*8{~?^oG@3yp0`&$Gt4i|ii6oNasPOZ|jxvOKQ-_6S z9UsQV0Q~(?YAVftDeXbk=u#x6B>y;x+S6YkPzuOmx#2&&0M>`W<4@29CXmXHeD?4;kc+$!C_wDdM7Vf{Zho;VWeM%!FA50(d z<8B!u*zmyB%7H%7-5lnX(V$L|5RhIrsquZD95UXEScm%#I$GT}!+x_yX6iv?=se*A8f9AB{n7<^DKrSt+Pq0?Npw;iaxy6~ zF}9ZI+?rZui|wMv^F6M^c1-fjt{KC!><5|j6q(bheH4k3OQ= z<%)I=9#R*jGJtKNmO;;d7Nq?v2=nK5_zrIM-ETO3BK01+dcgnE&rRXoheEuiDe|qs z)xeAq!EkAgR>{6R2b2CdTv4Hv(6J+!_->5&d3_!;7lQZ11lhmGX?{3)NB5k;=sIPH z>Bf!ly8;nX8_ED~@wjwYA1OY0&bEMh6Vub?31VXQM=Gswbo_w?)wP2cjYku+AHC1J zZDh$WpKU!V-AuY?@KZkp|bqP1&7_LtV zO4R*YZ}%C=88hZo{3eTjFt2|VA3`l~8&{4tW+q9ewzxcOn`*u4-mC9ha%ar!DY#7F zJVEiaZ3?^Tg8WCnFrZ_8e3?6|5-%Q3|Ezl>@+q~Xn*tf1Ctjh}ax?viG!+1ufK>-m zbc1swk!v^SKVk+8UPuZ!vq9fD;3_Q+ees}@S=x)Yi6YuOt2JB5Bp=9jS*1i}z4wA{@h*Kz^AoQf)sgkwKhC*Jw z_T4Qdf1q-A%h=tCc3&Fr3-96t(E}*{itm0k#meDf&@ZO7D^@xw8I$ADI?rswMXNX9 z%2?#_&wgTeLS?N)hOCcBJIc;^!!YC{VY{FIQ<~Y%_LmY9gXhp?lmsM1f`IN;v$j|5 z=UzDASNRG%_i|S%q4x>f3;6c>+$l&JjVoMc!t#pI>xn3W$Ck;v^NLTnE;oxt%&1uZ zyo<)e5r>0|sI=q*3Q~9I%kjea&!1v_`IY8q0WRqA+PtL+-0t$Jg&t=c6EGKBl3$=# zUczNo_)YB6yy?AmI8NjwZdwX^^ErY{1rxu*5=wrw<1iSWn^%q7`a&+ch47vuT_C*; zG-&YOJRl(Fi91*;^SMB;=Z=sX6**5K}_gvMT!&>4;p8^;1YOU<|bde6~xY6 zrI0PH0Q5p^vlMo;_n4N6us4h+!_A5H0b(usO-}>IvVa*AZ(?oIt_TgxUiiP|8?KeR zqNQK_^vZdEI~m;9urGY?iT6RRx}x04C32j?2k^tJXdxed7Hxe7pO-CfigNtn){K?V zGm2cpdJ7)_%QUt81cwQ;HJ~C?n3ByKtq8i_XnpCepyU?9gooX?4zD;+&T0r`j}Tc} zK(;(Cng@@zeMaKCvbOuFn#@m`Vj(w!_kR*Yv{63DF%Q;hKCQbU$P|1?$~1@(v`ROF^FIPKOV!}(n{>_dzKadWILLjw&W%D-zz)DxIu)lkI7*gPa*HhyGg%4~Cx zmR#!(kR|3=JB>%%TPS`8pS@o-Coho)7J}gw9{EMm-oz+p%Qv6B;R%aSA2;KT6(L4w zy1_IoURW_aZn82sdnv)*erqHZ6K((vpoO7suNpI)OqNid+%}dLEuE-%zP8MdZeOJR zD0WF=nL&Kw#clbE`yUbRZ}6^tk(#PQH(uYD+ChogWGDvr8}Quvw8xB0Z&aDJ!P1u} z=$c&O!bZ!16Ut|X1@X7abKYtF7p$&}Nn`|p)lHP8q5AH(2C({|O=LSfTnHtd8&k2H z4Ep7q=@e8zjJ<;pXx()JrY9?mY4gXq$Rtd=&9>!>7PI_%C7$HJ!gcE6^>1cDj}388 zKn=Fi&9gtZYaML`U5Lwk8z`%m%R&%%oz-gNbiE*&0A=7+0PVSr9+_xU;xC^}@`@+m z%-4a>!ZG&tC@7C4dg+&T=BPb9xQuBkFDbdwB&9$C-UFMeJ~_CBVhgSY@7_n>QD`D+ z+#^|jtWLfAyyeZqEmA^wX|QZhuvrhan9ZMR+-1Q<4jqr5cguBwEAy{fJ$vqIwyB~UUZARujZ`3#cB<%3gh1fD>SA~s(kp$l zEtIL<-{G-+Hfk(xHA(X@bl6Gy37_zJmy_2F zYg-VvlCZvX4#Ys2(2W}4^JfD1 z0k%!gj1UgATusBV%%~S+JWs1uybit55FzbJA-w4-(Um6$fkmoU-1+MuM2%#sdk3nV zAceGN9SQ>vvRg;{*J0Xm;VP~n2c>dhH+@^H5v;A(6w31&P{J~mTb+6n&d`_r=F(@n zc>-^Of{gD+iXEV`Z+&#Ch*9q%bJS}v>K$ot%UW*>TaRQ`HO|4IRJOV83Ac_lt#BWZ z91=pTBlbw;N{(4%_}|kw&?x#Bi|e)6?h309VDGsyb_B3mYo`U>Yn`vbavQb@U1d$^ zJ=T(RF-Y}9sQ{^x(>C(Vm1HhF*LfDOUgsFO zdSc~Kah9}skMubkcJo_0Ni!*=fL>`t{nYnbg7d2Zh;06uLC-`U!=$U)kTj0NiRcBt zy(VBkeG=!ZPpREf&=TaU-DSeZGPaF zA;g&7xzokjDGJYQQl~WAuvRs;2$ViJbt1afpj^ssm?Ps$88c-|n4OJ@z3$8-q0E2g z#_giNGk%=eC+luULjEMcui(7fhjODug0GqE3am-23U6Gz8;LX2U8TD>F#TFG?8A74 z?;?~kuXk1ZO~Ijs_FanzW#O-EfB8&-n=|`WZpVTQjT$53-zfw0!wg2@tA#>ajtON> z_wKnm%TInU%-KA)i~tjeDO%E)HN^3cnCWZW>kb9JI2sIfMooKVS#^&$E?z}*1QRZK z9H4mDUAY5R`t@@mN9!=FmF_nQeT$)+z-)y&^W%a3aLuMw%09AL(VSi@3vQ?7sv$7;WDVcD@N3+zm<&#%!MxExiaCKr~RL{)z0_7Zsxnb zwEv{NZexLErO}s{FJod6xHb#(Fvo}S+KIfkT4*GDK}HZPPkH$Mwih!e;nY5<4X>0& z&2zirEOM8=%qDrYj9PU7|LlVoLT-1x_C7tu^Dpo;R80PQ-5OT_bIVPVi;jt~ue9=J z)A5&5cV)XXAaq3o|AYm1SaL*yI{0U%{cIZFY5m@g9?@bGlDG2DD!0G|MwN+Hm37}Pv0>X|Z`uLQyz^h*4KC&QWbr$prCoeEwK;&p?Y z=s#3@U(D7^=zmT2I(N%=7WgC7v_E-IwfS)A{fO%)AgaBEp3118nKu3mM#@dKR@M?i zG?yi>77wJCn5;Uk{;tH;Q)8h@Dn~jcX0!$n(X_gI=8=O65f|@d*5NWyU2c3QtNg~7 z>l9n8x9bPMngFoSy3|xPhJEzmnr%0yE;`DATuZHuh8Y6Ijr7jPF;ukt z>KPjZ%M-+h?`*i<>L9D>LiSLwqat0ADpF{N_j4Z6_VUGod8$_A6^sttNfV_8yG@Y0 z*NUHQyViwvxc!C3<`{_Eyi08uhIDZz374@)Hl;gD?+O%Ypa8Zq6bnPJzs<>sFNBV= ze5y+#V@^08-@bNk*j4R~De~y94Fjp=`L(`y5q;O7#6PAu$!u2|pdo$htr;?678cU> zEi-bWUaoZUEqIDye^4u%F1^}t+HT4$!J60@vYu*Dw9D*B8AHENzQ=7Bujkx7Ky(CU zboCH_IbyMtTZ~?$KwZ^6h`ZU-G%|aurLcnYCl!kt||_x~;XhX5{*vK-Xstqlf)$=#jB9v!uAasmPeLHr8lQ5+jxT%~kuM6Q z3@QeJ8@74W`U(bLm3G6~XjzlBh!)pV|Ih3!u8?8X^h7qbTR?ve}y3GeEZ9>PlI6w09-<2o|Frt!7fP-YqI)y#Xo z$gsrquabz0xY7SzxrUaBh|I|SWEom-D>Xcr10Iuu zj|+k5dV8B3+VA4yx{T)GWm*3nL#@~PjiIJZlhdiCm{h4L`yeQPO-u+KrfKJbA*btQ zec#~pJH7wcZ3zOz-$Ft)*_hM{k=O){DbWD$57(Ho<`|+PqR4YP;590=@zW`x8 z0xm(qwD9VZWTq;Wj&LpI=}Xt{N`!Fj*kK?*d(%!_W?=5~cZ!Y~4JNCK+ZKrFNiAOC zw7kuVlOFok^HtBC!A?GaJAwpG;;+tL`i|BNn1Bo3-Tbrpx=MUblg4D*C@b^M}sc^s?JH_3z0k0oZHEF$zie`1G-eu0fPly2pluRC^d?ws74_=$Eq?mgJtix>+X zR-E3ov~!O}^ID8A7tTY|$|LH~C-XXTbRZHW6BpfV&b%@&e)(3p^ zVQl&l%84^daV5EGT$l}8ycgTlo&&+-7rOr+V{aMPcD`*7S7?D!T#FVft}SjY#ogV# zxI3W~_u>x4o!}mVQ@lWN*Wkf}^G~N|=FUBL&Uv0UeDWhNl6-aVwbxpkYPSv!o>rc% zdtxYR$xwWv4x9YN9(zk27e9c-l%d7O!@+1OE6yKzVJ+p%(U=CK$*Bn$-)f^K@>kTG zr7aW6m$<=npsZo9wcq=*{f@Hz`|?d+Cd0DnAFwGii#!ZI`RD|X@6(Px z3t-s7fBWl2Bm%{@wIAGEWScsA5x25j8_pts*5QvZFuy+F;k4+(V=>HN+rNXD4_ zV%%)#P0)nHQ!EkyysE2|rn!4L{;#N|9rrhc3S{uy|G&}m-^aCa4}ps0B-b*wq6uEl zP2CeucnnSZy>#!8s78S?f8@UZ5E%U!y} z#h&xb<=(w@+a8i!KWH^KUSB)D0}{n~R6|T&euXXeDD;7071t40{ITr^81V7ttL0Ao zC(!B7DIz6*!cxl^Mzf0}aZZBxTL+xy>FxPariJ;WJ9jec8P9gJ3MAX}dGucBo}0!zI;lV;MV;47>kAcV7+j8`*_XGqG0Jq4@clwP z?4$q3PV#$@l}ke#;L;{86Cd+cq#BF&XSf;ZH=`OrGB2dTpPA2n? zA=MdxevCX#a=~ZiyfuNza$My+sTS{DhM&33NobdDpQU8wI-H7=+_juZ)ke;RHXd52;$=q4F~Ih@o-`u9{oI?&-sN z@WAWb^MDXX%%9#vsYRyRVNKsVgN^i*$!@~7tr5dfbMcgEnZi9Px$#krkS|dm=ZMGy zepauz{_G3u!6|Fe#G#ZQ^`g3^rIxtTZ35nerUeS+kbHF zp88RV^s___FX_S;&Xc;+#|BLe1(vSvtfD=fFB^14uOF|PpV~};JedfWnf1b9dIu(p zX%5xUBS~*Ir<69|hBD2FEu82IZ{9WPFGnlUx2#@k^W1Iy=ubWCdx|7cY^G9J@63G! z&d!-R59oBipT^Vbo;q=Caj)^;4nxXEWit&QNaeE?7Y97ULeeL;D%$JyY1WRimMzGg z=33*QnW>M$wTI@b{kC&QXg;=&avj+ zXBSs?^Kwamj5-XjeVq$N7qO!Rn*n0-CbZW-*!yn`kUUP?!zghumP+DK>}DwB6mk zOtfzOTp8ltx=>HGw7=mr|Gu8IIbs^T5Dn*(ibS&W)Y&guEs!E)Ml0p$VR_awM`bS# zegcn1&G@yA#tR3F1)jS^N4w=3W7|2~DE{1O?(@(2p?uYna{;zhr`@XHDeRuM*0?mZ z5$Jm*z4MC_^Y3t>TT%?4OWsnIlOpe$$3&aG3QL-@lS4D+q{F2O)zbCuYoi2J zHd`lk29%Jqmn^@+EQZt{mBJW}%--boowHHxzp&)L;uVRw z7}|=`Z@a_z)gzt*@>N=$6;db^e{|iXXHjmXDH@vI(|T&P3OlNL+gQ~5@^HRmQ%py| zUm#e{V51%X?Doqp$`e_#(jWoEr(>-jTxxw!*g*Oot`zB81FM09>XeGzhXPghv--4O zx$w2#)!yD*jArI;Uu>E0E`x@4^{{`7)k(rXAC!!GV_!gLLwBVgt*ffkCKdASPBorC zd%@MfcoB}vR2#E4bJC?>f7a|FT22FLh%?{UHUIt<%^gMSy>bPbh%8A1= zm@uMfZDYH7bh~su*$KQ%{=d@iZz5_{QIVi3;m|Q7EEg}h@VmBLUqYYn25uRGUoUGF z;fji4xKd+!)Y3nI4#k- zE`(K9L&dvsA5T-ST{);f6P72gR}bSmo190b$X0Idi8VTNbhv(Qw$$KY(OMMqv~f6c zK5f=|WTgfELnqEuIQpO)?v0h-Vt$UpL_msKyP)5IHe9w=diSR7_Cnp+GIvSca!G_* z7{KAxL`t!if&>Pa%?8=pc?X5kV>xYq){ZG0oVJ;U-O7}D61?k`FU+ZjF>!cB6AJ|= zHS=e;Jc(yzx_1NKz7T&%Ef#Ir;mQ^F)v0<0QGH<^I={R>!Wm+Y#1i^MLh% zLj}1FZX@%}2`vA^?K@6J;$?RViYF*Mi8)uPX-%tppKpVKX+tV4`7*W1A|dShAcBL) zZO`im$!?zxwdeD6?r3U;2eE^~8v={nFr`BE&RG+uZtXcL5?vG=*loN&VaGOTW2_5vyy?c#0B+fb1E)G3w=ObH` z8rv@!wYPrA#69*dlR~}kI)h<0UTMd}=!{-YQq&!9B3Z2u$DQoDIW2C1LX=14WHNo( z>;~@|cb(4pC;(JaO?ty8S{Qb-MM3YzB-*9m0JItoKlwl6N5B8+*CPK-_23BsnD!A? z)7%gj7>~tN6%NoEZNmXtdR|V#v8qt+?5J3J4T_K+Dv&+cTq>uwp|DMEN1PeR=>8YE z^-U4SNKo%L*FYW55|K1D+DzRnH{0Dv2b3pDjwwdI_8P>z|E@lV6I@4x3esAuO@qKv z(~K0h|Af)r^i9)Mc~^*H-j?KKQ(s?g&q{2tma9sMqN5bX23GG#=*maST+g{b@4d^r zpdCHyZ+`ZRnJth%Z2Sz97|-ghE=7gi^e-*CJf`A=wNk@7c3wP6)e^I+{Y+BsyqvcT z@pNXSW=_mI3DXZCGG#$e*@gyNEtC`XH2Gs;i(_}x5N?_$PX2SaE?SGD@!J{_xg`fewBRs|4(Y1}O687q4+|8oyjyywRK_c~iADlie#YOKU*U_z0Y*w6<|3Ex zXZ%LtE+RmotSS*v9sQq1l`bp8*#4nE8(c143f_D}&m?0d6#_2gNLCzkkRyWBCst>YqE~2SP-vntANuwJXrd%lbXMQU#guOQI9L=QE(^PoK?#K85NuEADdS>-Z6)~Zglc} z#2lcf220DEU<_v|Ui9RpMF2I|);7DUd*L`txAxt7IPL;w2P3<+Z!q+O$~BK-98&jb z$FfH~g=~G$r3oQW!0pHAI15#ej7359!sT-zfLeZSy@<3_`7+!Q=R@}zJUMrcoI!sx z)H4I~6c(9=Ymx&zFiVLhOUouc3C-7I%Gum8&yq$wHy6zMbgmKBDpD&1;3WVLlYRmv z86}KXEh>y04#&GR;xtcIlZt;`o4k6I(D7(wcA~ z{LFFh=Zfz=D;h^>{1oOu;0a_5v#0{@xb>W(6{>$zXSRHPF0UHk&XDnBVJ0|_%GYW` z=C&xuHopQmOO>OR6K4*%4yx09xGxPkH$yEYcas|gvmIzpi*L!KoZ(wkbML$*=Jp&N z0Gj38QhH1bK^1d{#}wO+D(weacn|7DXrP0>SO;2K<1HR{VH_TP|wwjc(d1#FCL%1BXfoj-K+i5Ajn9~wLq2l&$3fJvG3QGUv3 zT7mMR0Ni8E-G{IrEtXy(6&%)$NjMYB<@_j^5oy<2<2i&r6;V6_H3s?y0WKu3_QLW- zl(JAlMd7u71%2f9i!Y6(b>rhSGU}yX0;N+g(V}Y#8aQuG4r(6z2+f<@N}XO!l(ZFz za84<47!&<0$(z{GQypurkWu23_F0Akvt!nFkvzuf|<__AMD> z(D4DoWD*F=YG~TZpDBgnFeeM)TdFhohnd>uXOrGcq7&rhm=7x^Pz*`g7)s(Z#>5wn z25Q|&OBsfq;B;KJVr3*1OU(aFMsme^MeKT&D(8QD3ia)3sE*FOPAuVIq>IkqDzD_h z#tBQL57V?B|E>-fCxkQJ081=q!y4&0%zG?VnNW(Utt1&p9v8c5w`gfDLUx0Hsj*WF zEYX2V6xY!cK_#Ajww}70g<)7wIB{?nNvSFE?C0_Ew9Po2T|*hCGBZEmKElm7(W=fr&`5nuEt9oKBzd(sWqp z8U?N5`Xyr2QVs4P&U9U*uNqxD92ZmVKG!mKFNsnj@>pddVzt@-Y_d*r-gHeOx%C;9 z%0L_*Jh;Ahm;7%zuA9_1-(V$zmK6fAA;B-d6j+$nqL=ZWwG_fz3Z0wZ^%|61(YCk! z{MG&x`KyKY|6SxiZ~aT;p9L5BlfvD#a`U7zAu(U>bp$QA>ylKx(78Rz1r%pJdX!QB#%^BGiCtGGA z3QVKR5_VVY>2>f&rqt<(ek(S8-^8qI% zOS_5rS%wPBXauL5Fxsmb>5?~}0N#SF(V3Kx+~+Rvp3~ynwZmL0A~zd~J~1EjD{-wJ zOniLe$)we7R27Ri%VT;e5`zMCKSaw7mm6=0h|I8+pjp9H{3@x-5;y}{M5k@Fd7TMG zbE-tH*;C4PRE)$}*Pv*Ge zZEmZLVn2`V0$!AG^aMm3V$FISkE_;NT3;=uvhGv!bFC;}zS}QPrp`8p;PsCi5;+Zv zs|#ivhed?-93h|9HqymR24yUB=%aM}LZ^I|GRh8_aw~v*=Hst%7c=__wvK3HZYh%C zZWhYojPPbLBI2V1EAia&$@g#dwtuLI5<}{ab?f7~mdK76;l0Ajp53Jm_`)uRt$Vqf z;SjJ%YpXid!ReG~);vEHT`(=!o_brT)RKqjO>wKf#j*+*48FapgkBl`5~QaWLO;T`yYFa@llUlef^Sa{0?BD zllABIu#)*l`9gZd&v-sY;tQJkPWY)DF{GArR$%W~?s z<$;K-F#uk(Ix%O!VVd`T{3q$ZT=x&szg9DxUh|e~$4N578qYBfm6ao8n~6+n-l@r* z2TgW);Y&W*w13FBQMURTd2#81>{Kkr@S9c=Q87N_SHKJMb!CQkg+VnQLhx#rd-#zx zKeiLtTMAmV$iL+}n%`D@$+5d%;0kb-Nyjrk=#x&J$DoeDWB%Hg8Z`ru(W=N_0+Lgu zL8P7Y^Md6h-ML0%oG=wdyKz@%mZ&0~Dv0&8Wa^+!E+mAce#CmSwrTkcS)X>|9_rsJ zy7&zCN4j{qG&(3*L!t3 z;plw97mKH#e!BenU*-sxb_;yaKO7nVQ(@+i=rJa)E^>H9x0<@o1y`+!F>4f}=={6z zuiLN+po@>!>NJ7%&t%yHPYMcoO-soKtIMysaE=JPI`+vaZo)}2+{O;BKwDMCH5WgP;0!%E(cp_z1yo#5|d|B^(J_P_n24T5Y z@aZ3;(_(ZGp{|wX_tuxLu4OK_RL~r-345;x8&AKBS{M|tFAolf%O1%pAU%sq&;8=t zu2#NJR$-gNd-XYp>mChk`4wt$+Rr2<_NJWr`g!+MLBkJ7UkKP!VIbZ;b)dVY zm%?R<2y!XSeJ?1@ixnILYmT?6^lv$f(FXMC*^frt zKMPxaUSjX>wH5XOqW4QRM0erYD#Xd%9eQd_GIMYD=E^XZ(hC0*gLly*Dl-4H_GBR3s5JT<|Z9OgJMQ_*@ z(?LT1_@yKl6F~i>1HWrUmo_UCt59Ug3G(qPow69tDRT&;rqX@geDmq+DVqg9d|ts% zk(`MxeX^PU&xC-zGuc4GdB2*w?~jV7?K!t|AhLjowklTe{gx_6k!?ZrsQQZ z>(zc$y-cY3zfAx10~+Jrmor|hkCZ3pUj1xB`qA?Ozx~FpEyQO4mP2iIc47=p_b))T z%5j@^t*Gx3#DbSr)yi(Pfn&e8{#N-vq4rore<@-9dE>5NQnuHQM$bHj928`*G zxin*WZ7k10bE-F)y!Rw8!2Pr}s{l-mR%@o0G1IMxpW+1n(#!lwM)>yv>}M;ut%mNY zAq%nw^5uVI)VoC7^-Jr{=iJoTIL|?x@P#p7;rhRJk?E(%%~?$t?%J%3zgYi8x;OVf zo}LomRr1)@78t9vWrrQ&cTJgvBkL+37U_Xuf>xtXt2^ z^M!Xp$r&DOHEN}|!nfb$$EsLn<=S&n_jxEO3oi5*Rx#_&GdYcTPNxWi7ic4;)7Do% zzny8`3z41A&{-UR`m_lR zwZ(eEtnF)a2e6HgbiHt>OIWoO2KU`Y^d5o{^$CfEFb2G?f{|AB=&9DcE8(mwDY~cQ zm?IRetF;7bFo_~+c|prVa6jxLQ3zwDbl+t`yZ}ipPHs)#Ecxa2la^tyMKBCXpR^3g zgsfKnh*2Et)n!a{f(-c)H5_VKPteEB%LC<@6wB-dao0TBr-cm9x;>Ckz(CZbTnzV3 zq-2zKirY5F1_@3ogn-W&7*B-XBOyH|fBpNxj@<78)p0dLs$Mzyl`(QNW@Iq~God<2 zb<>i1ajaZYFHbgZVAlnDg5H(YVyj`((2#8z?l)6?!#(HCPU_^lXy7u_&BK6czuIh> z1u_w+_G$=L4~z=JN6E1U184nPRa-h6Alw_J7no|cGr-+As~h73(s;`sh>^VBkzY8P zjr;E7f*g7S`P?Yk-1oiL=|6hRFJV)?guY7`l3!iuF~B+6dH(QO`prb;BMn$rHi6Kc z+rFSPq2CA3H*YeA~1gEWmlr+rW=DeQ5>^tS2@m|-#Qk>^p9 z4&FqdfGrf}S9r1b!qsmX@&C=m9Cd1x1tXffw;UdH^1l8nrzbt~r6h z?~0X;*CME|y*v6D(}Wsm>JNFo%)52QEOssa@VZ&bovDJ-iUF1~rs_as(TpiSAe8#& zvW0IU%!a$I%T>060Oza9P{X!9&bCnVZK`MFM_9-fOCYUe^W#gO&?8g2Ki9|K7K?i} z0!1!a$FSzZWkME>XrI6r>7cy6Djj?*JQQHrtCypxwW#*+1^qz*5ekEw(p$P)zey#0xpuZys;+r2Vy59loy~TFgl62vd0Y?*3Tl z!`_(?XhFvWrln@)^NbUwE;f;&)AZHayULV!Vca0S8ZXQ?x41^MYZXj8=C)})K2}}5 zO}3r$PZq&Bau&-@AL-S87k}0KmY0uUBoak@bXnXs`sMdT9*{%ba5dVQSe4QKo%`E& z#5_(WY&)2qFu~rJy8&&wsVP5eSb4oWN0V=SeBn-u&wMMEgIRWN?|KCXtj4v7ymF#0 z9gy*42}9_YMA;0dvIyR~yxP5{5`Ar=$i{r1-S0Wqe^7bzeZwpTKiuuMY_ez8H9*9M zS?~nl>CN`+sTU~vB>x3rs{38(MvC{TD|h`Zubims#&%S1Z%&cd8}&TE3F$jqW0nO( zXA;uGf{_osK0|{r%3LG{?_TE-WHV`RRkWQv%mewd1i#7~W+#g8~C;t=CJYilR zs-Nv1Q$!wH{>shka@H55hiwjg50#T;bgXyrO_mffdFf~}Xq`Nm`Gq5KYN;j;@=(5{ zt(_G46y-*c2{GIJ#w~`X5D^V{)n7^Fb*W}~A@s9I2Wu6Us{rjXq}8NiIoYbd-^2w7 z9o_Tj<~C_suERD)p3)rKW`rg4mn0FcB@2?Y?Jlc`}jQXl9ah&Hl%avpbVUG8JA31`T_!!}%70hy$qDwSH z!2uQOH53avjK1wk85_YE?)?bw9w#SpFoQR2zB~SH1N_g?nVItbwyTeJ(uL?tBBuy% z@J}S_G2lg^7e-^AU#b%8laxjeKzK@&>jB zYc2l(?m$RUviLUdJ;4`S{?{>wY|X7{h+VvRil+e9HCE5M@6l=;0+SwvRpQ408y$m26s%BX z@urMeyC?5nQ!Xm2DP)Sww^Vp+>*%{RR_B$R2Eq%-X{Qhk%a6AoXmIGhPE^9jtoAv1 z;B4E9cKYAix8YSxmwS*3-0fAL%`CFJOn4B2UDb`(ngVwPRuL(r@6sm?LB3@ml^ zE1&$vG#R7SZbEn`q}kEthW8g`De>>qcyhx%IWzs1-fms&m1KMuLsL92O%mN+M2aAs zdCWwlN@)i*+|qSe+17kX2{gcSzmk5$xWQSrQ+};!wGKn`A{19Jkq6w5z+w(Yo4ORK ze8(Te8=wnaIYRYD&;c@)7N*4dx$#1`_WI5BNiUmM9N7XsS$Wq&?rkhYZ)u;|%?D6}HZr&~?@Tu7_J*V;>D=ssf}WDNHNq>$|!`bE^)@P7|s;5)R{ z;t6A;t8F|YC>8P)r6b8sjHp|G1jyH@OYUruOf=Z=Y`xUOyy^gc9_di?(c_Osyby3* zJKL17&Tej<&9Dx_-}0$x99pVHG@DfGG+rFNSj%d^Dbiq!YcBiDpg6-?MR*d|xBL0i zM#TG^lZeNrV-2d0&j~@>v%*W&A$L3RaYsb^fy{@Z)ZfIG1&*lw z8YFD-TlEJ~tRy4Mj=ADbo@ccZ6pI+w^_$-wv-2b|uLK>$mHG>~2d8aH=+!~q*e*qO ztv1z7f-ViZV+y;Mck^q$sc9;+EN(Ejd;$#&)HKM|u~V(RL5|4v)e3_x6^9|~yLMG6 z zMtRHQ#jR?Qzx$^bz>BT(faQSuM(2aX7ujBpgD>M&&FOBP=3$n(@{j^2_y~i2%oisKc3up;$`VEsV3w=dAt)-!Gt!I3daAeh} zQ1iqK`-Zb3N?yoP4t849Oe%X@H`NPe13)X^`-W4v%H3AC%$8j%+uDih3mS}?aB4H! z)J>j_`AP1kK9_ncA|n&X|{Z?RB^AU`&KLUB(x@wFO*m7<-r;g-FgS8%ffh{#rD z@8HS1AmMY8Q?3kZy;dWM_DbrW3aVq6V5#HwpDyRr2ium{<@8XZ)KVh4s4rK)pn